Edit tour

Windows Analysis Report
http://www.dba-oracle.com/

Overview

General Information

Sample URL:	http://www.dba-oracle.com/
Analysis ID:	1427691
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 5032 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.dba-oracle.com/ MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 5832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2044,i,18231056445440177825,11824916755717883413,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.9

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/tab-1px.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/header-new-1px.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/toc4_Consulting.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cruise_oracle_ad.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/oracle_scripts1_a.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/ad_tuning_books.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/i/btn/btn_buynowCC_LG.gif HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/i/scr/pixel.gif HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/oracle_scripts_120.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/training_ad23.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo_oracle_forum.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/header_2023.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/header-new-1px.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/tab-1px.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/toc4_Consulting.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cruise_oracle_ad.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/tabs-consulting.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/oracle_scripts1_a.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/phone.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/i/btn/btn_buynowCC_LG.gif HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/i/scr/pixel.gif HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=KAE HTTP/1.1Host: bid.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1006676079/?random=1713393196088&cv=9&fst=1713393196088&num=1&label=N3HTCKnupgQQ79CC4AM&guid=ON&resp=GooglemKTybQhCsO&eid=376635471%2C375603261%2C466465926%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.dba-oracle.com%2F&tiba=Oracle%20Consulting%2C%20Oracle%20Support%20and%20Oracle%20Training%20by%20BC%20Oracle%20Consulting&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1006676079/?random=1713393196088&cv=9&fst=1713391200000&num=1&label=N3HTCKnupgQQ79CC4AM&guid=ON&eid=376635471%2C375603261%2C466465926%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fwww.dba-oracle.com%2F&tiba=Oracle%20Consulting%2C%20Oracle%20Support%20and%20Oracle%20Training%20by%20BC%20Oracle%20Consulting&fmt=3&is_vtc=1&cid=CAQSGwB7FLtq3QPhc8YQVHc-5d8Oc_c3NWfpHSg3TQ&random=3385855696&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/ad_tuning_books.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/BC_owl_logo_106.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/toc1_Services.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/training_ad23.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo_oracle_forum.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/oracle_scripts_120.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/toc2_Support.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1006676079/?random=1713393196088&cv=9&fst=1713391200000&num=1&label=N3HTCKnupgQQ79CC4AM&guid=ON&eid=376635471%2C375603261%2C466465926%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fwww.dba-oracle.com%2F&tiba=Oracle%20Consulting%2C%20Oracle%20Support%20and%20Oracle%20Training%20by%20BC%20Oracle%20Consulting&fmt=3&is_vtc=1&cid=CAQSGwB7FLtq3QPhc8YQVHc-5d8Oc_c3NWfpHSg3TQ&random=3385855696&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/toc3_About_Us.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/toc_books.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/tabs-consulting.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/oracle_scripts2.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/header_2023.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/ad_freeposter.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/phone.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/BC_owl_logo_106.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/health_check_ad23.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/toc1_Services.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/toc2_Support.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/twitter.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/wise-ad.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/toc3_About_Us.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/toc_books.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/ad_cmnd_syntax.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/oracle_scripts2.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/americanflagpicture.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/ad_freeposter.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/email_address.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/health_check_ad23.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/BC_logo_98.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/wise-ad.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/phone-6342.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/twitter.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/ad_cmnd_syntax.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/email_address.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/BC_logo_98.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/phone-6342.gif HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/americanflagpicture.jpg HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.dba-oracle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dba-oracle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.dba-oracle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GckPmzSD4Zeo7NZ&MD=7vGWdRlS HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: 120X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAfqCYviQs7TcfxQsXalFBaUDuZzW%2BaerXsZ0fIe9bYNffEOM2GWPJw8dIjOejsM8EZ8eMPK0ad/A4hry/PuyDLDWJUNtaRiMl8pIK/STFKCS8Z9%2BtF4jC0YeR1PnmHnhZYfMXW8CA0EqyTIQngEHJ4p7h5hfn/OlnjN9ELMVMg180RCozJjjzFfGIp0J9vdvvrRRgBNYVhhl/1I5s4TFtpRHtQw3f28TF2sQ6LzQoA0bC0FSrZwTA2Q9pMduUQ5xFaSQ2hIRlhO6zZLqCuf8C9WgrTsfmyW0RWQnhD2ogIq/SML7nrcUMLVAF3ePrfAboO0bXrUUOVcqdeeFSwSXb08DZgAACPSx7DTosr/EqAHhQXhDcIITdUzBXSKKvLS2j51bLc6IetzUiZ40P2kDGCGEJD%2BSxCx1hbpkurPTLO5vunCR7B/5Dt9ilaqI8eqEtODGtP76NzpjqGRVVR0YIMgbQBvpa7oM/LZjuQ3IrR05mXqGcatKcnlpMo4ih3lSaPRnmQO8Nqmczy8%2BKFBPcq4YJOZ2zgeCawN36hXW/9R9Ry%2BwOVfhUv%2BJ39iUkhpLe1qarpMACnsX95%2Bh4xlZrG9wOeiXcueDcWe/EkjZlRpAdDbqYWWnsx54Kl5ZQfjrybHFxtfXOLf6XtIOP4BD4DPoSu6XgME2DCDUy5qQuae3g5hkDt/7/jmY/CbXBTXx4IHdUWzSLMzus23i870VNtY0RjrNDdsvgP9IYqu9smgjjIOs6JrFdfHQG7zVkp/jzc23UgZ0oqu4WvlJfYH7rJpWaz66H27LyNZ0XIqezTRKBArVT08jSzJrvhIg8ul64RdKegRI5MSiM7wrdHV%2B45IOaflC9hdSa9hVlqTo1DqK%2BlXicHP2JT4Ghfj%2Bd6i2uE%2B4syJaAx9%2BaHfbTBfMYjf7OeynJiqv2AE%3D%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1713393216User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 4F8D3700824948FFB1DF6FD42831AD39X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GckPmzSD4Zeo7NZ&MD=7vGWdRlS HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: unknown

DNS traffic detected: queries for: www.dba-oracle.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: chromecache_123.1.dr	String found in binary or memory: http://dba-oracle.com/Call
Source: chromecache_123.1.dr	String found in binary or memory: http://dba-oracle.com/articles2.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://dba-oracle.com/footer2023.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://dba-oracle.com/googlesearchsite_proc.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://dba-oracle.com/header_2023.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://dba-oracle.com/images/email_address.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://dba-oracle.com/oracle_performance_consulting.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://dba-oracle.com/toc2023-4.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://oracle-script.com
Source: chromecache_123.1.dr	String found in binary or memory: http://oracle-script.com/
Source: chromecache_123.1.dr	String found in binary or memory: http://remote-dba.net
Source: chromecache_123.1.dr	String found in binary or memory: http://remote-dba.net/
Source: chromecache_123.1.dr	String found in binary or memory: http://remote-dba.net/plans.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://remote-dba.net/remote_oracle.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://remote-dba.net/services.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/Oracle12c/Oracle_12c_migration.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/__utm.js
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/articles.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/bc-catalog.pdf
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/concepts/
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/consulting_prices.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/contact_us.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/data_warehouse.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/dev_Oracle%20_WebLogic_support_consulting_training.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/developer
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/developer/dev_Oracle%20_Developer_forms_support_consulting_training.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/developer/dev_Oracle%20_Portal_support_consulting_training.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/developer/dev_implementation_support_consulting_training.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/developer/dev_systems_analysis_support_consulting_training.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/developer/dev_systems_design_support_consulting_training.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/developer/s_software_development.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/emergency_oracle_support.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/BC_logo_98.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/BC_owl_logo_106.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/ad_cmnd_syntax.gif
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/ad_freeposter.gif
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/ad_tuning_books.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/americanflagpicture.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/cruise_oracle_ad.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/email_address.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/header-new-1px.gif
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/header_2023.gif
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/health_check_ad23.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/logo_oracle_forum.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/oracle_scripts1_a.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/oracle_scripts2.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/oracle_scripts_120.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/phone-6342.gif
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/phone.gif
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/tab-1px.gif
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/tabs-consulting.gif
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/toc1_Services.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/toc2_Support.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/toc3_About_Us.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/toc4_Consulting.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/toc_books.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/training_ad23.jpg
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/images/wise-ad.gif
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/jobs.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/monitoring.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/oracle_applications
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/oracle_applications/
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/oracle_applications/Oracle_11i.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/oracle_health_check.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/oracle_news/
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/oracle_news/rssview.php?url=http%3A%2F%2Fwww.dba-oracle.com%2Foracle_news%
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/oracle_tuning_consulting.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/poster_oracle_database.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/qualifications.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/shad_oracle_development.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/shad_oracle_implementation.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/shadow_oracle_rac.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/sql_tuning.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/t_linux_oracle_consulting_support.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/t_security_consulting_support.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/training.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.dba-oracle.com/unix_oracle_consulting.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.email-publisher.com/survey/
Source: chromecache_123.1.dr	String found in binary or memory: http://www.google.com/coop/cse/brand?form=cse-search-box&lang=en&sitesearch=true
Source: chromecache_123.1.dr	String found in binary or memory: http://www.rampant-books.com/book_1001_oracle_sql_tuning.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.rampant-books.com/menu_oracle.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.remote-dba.net/remote_oracle.htm
Source: chromecache_123.1.dr	String found in binary or memory: http://www.remote-dba.net/services.htm
Source: chromecache_123.1.dr	String found in binary or memory: https://1winsouthafrica.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://bet365app.in
Source: chromecache_126.1.dr	String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: chromecache_123.1.dr	String found in binary or memory: https://booi-casino.br.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://bubinga.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://ca.parimatch.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://hobby.porn/
Source: chromecache_123.1.dr	String found in binary or memory: https://infiniti-avtomir.kz/
Source: chromecache_123.1.dr	String found in binary or memory: https://instastories.pro/
Source: chromecache_123.1.dr	String found in binary or memory: https://king-johnnie.casinologinaustralia.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://mahjongways2.id/
Source: chromecache_123.1.dr	String found in binary or memory: https://mosbet-mostbet-uz.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://mostbet-club.com/kazino/
Source: chromecache_123.1.dr	String found in binary or memory: https://mostbet-sport.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://mostbetaz90.com
Source: chromecache_123.1.dr	String found in binary or memory: https://mostbetaze.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://mostbets.net/
Source: chromecache_123.1.dr	String found in binary or memory: https://mostbetuzb.com
Source: chromecache_123.1.dr	String found in binary or memory: https://mostbetyukle.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://mostbetyukle.net
Source: chromecache_123.1.dr	String found in binary or memory: https://oracle-script.com
Source: chromecache_123.1.dr	String found in binary or memory: https://pin-up.com.co/
Source: chromecache_123.1.dr	String found in binary or memory: https://plinko-game.net/
Source: chromecache_123.1.dr	String found in binary or memory: https://plinkogambling.games/es/
Source: chromecache_123.1.dr	String found in binary or memory: https://plinkoslot.id/demo/
Source: chromecache_123.1.dr	String found in binary or memory: https://reddogcasino.info/
Source: chromecache_126.1.dr	String found in binary or memory: https://services.google.com/sitestats/
Source: chromecache_123.1.dr	String found in binary or memory: https://slotslovers.org/
Source: chromecache_123.1.dr	String found in binary or memory: https://slotsmegacasino.ro/
Source: chromecache_126.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://twitter.com/BcBurleson
Source: chromecache_123.1.dr	String found in binary or memory: https://ww16.soap2day.day/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.dba-oracle.com/oracle_dba_scripts.htm
Source: chromecache_123.1.dr	String found in binary or memory: https://www.dba-oracle.com/oracle_health_check.htm
Source: chromecache_123.1.dr	String found in binary or memory: https://www.dba-oracle.com/training.htm
Source: chromecache_105.1.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/1006676079/?random
Source: chromecache_126.1.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: chromecache_123.1.dr	String found in binary or memory: https://www.paypal.com/cgi-bin/webscr
Source: chromecache_123.1.dr	String found in binary or memory: https://www.paypalobjects.com/en_US/i/btn/btn_buynowCC_LG.gif
Source: chromecache_123.1.dr	String found in binary or memory: https://www.paypalobjects.com/en_US/i/scr/pixel.gif
Source: chromecache_123.1.dr	String found in binary or memory: https://yt-tomp3.net/

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.17:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.17:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.29.9:443 -> 192.168.2.17:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.21.200:443 -> 192.168.2.17:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49793 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/104@22/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.dba-oracle.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2044,i,18231056445440177825,11824916755717883413,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2044,i,18231056445440177825,11824916755717883413,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
dba-oracle.com	206.188.193.189	true	false	high
paypal.map.fastly.net	151.101.130.133	true	false	unknown
googleads.g.doubleclick.net	142.250.105.157	true	false	high
bid.g.doubleclick.net	142.250.9.156	true	false	high
www.google.com	142.250.105.104	true	false	high
www.dba-oracle.com	206.188.193.189	true	false	high
www.paypalobjects.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.dba-oracle.com/images/header_2023.gif	false	high
https://www.dba-oracle.com/images/logo_oracle_forum.jpg	false	high
https://www.dba-oracle.com/images/BC_owl_logo_106.jpg	false	high
https://www.dba-oracle.com/images/tab-1px.gif	false	high
https://www.dba-oracle.com/images/BC_logo_98.jpg	false	high
https://www.dba-oracle.com/images/twitter.jpg	false	high
https://www.dba-oracle.com/images/header-new-1px.gif	false	high
https://www.dba-oracle.com/images/phone.gif	false	high
https://www.dba-oracle.com/images/health_check_ad23.jpg	false	high
https://www.paypalobjects.com/en_US/i/btn/btn_buynowCC_LG.gif	false	high
https://www.dba-oracle.com/images/toc2_Support.jpg	false	high
https://www.dba-oracle.com/images/americanflagpicture.jpg	false	high
https://www.dba-oracle.com/images/email_address.jpg	false	high
https://www.dba-oracle.com/images/ad_cmnd_syntax.gif	false	high
https://www.google.com/pagead/1p-user-list/1006676079/?random=1713393196088&cv=9&fst=1713391200000&num=1&label=N3HTCKnupgQQ79CC4AM&guid=ON&eid=376635471%2C375603261%2C466465926%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fwww.dba-oracle.com%2F&tiba=Oracle%20Consulting%2C%20Oracle%20Support%20and%20Oracle%20Training%20by%20BC%20Oracle%20Consulting&fmt=3&is_vtc=1&cid=CAQSGwB7FLtq3QPhc8YQVHc-5d8Oc_c3NWfpHSg3TQ&random=3385855696&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y	false	high
https://www.dba-oracle.com/images/phone-6342.gif	false	high
https://www.dba-oracle.com/images/tabs-consulting.gif	false	high
https://www.dba-oracle.com/images/ad_tuning_books.jpg	false	high
https://www.dba-oracle.com/	false	high
https://www.dba-oracle.com/images/oracle_scripts2.jpg	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.dba-oracle.com/qualifications.htm	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/	chromecache_123.1.dr	false	high
http://oracle-script.com/	chromecache_123.1.dr	false	unknown
https://mostbets.net/	chromecache_123.1.dr	false	unknown
https://oracle-script.com	chromecache_123.1.dr	false	unknown
https://www.paypal.com/cgi-bin/webscr	chromecache_123.1.dr	false	high
http://dba-oracle.com/googlesearchsite_proc.htm	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/americanflagpicture.jpg	chromecache_123.1.dr	false	high
http://dba-oracle.com/images/email_address.jpg	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/concepts/	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/tabs-consulting.gif	chromecache_123.1.dr	false	high
https://mostbet-sport.com/	chromecache_123.1.dr	false	unknown
http://remote-dba.net	chromecache_123.1.dr	false	unknown
http://www.email-publisher.com/survey/	chromecache_123.1.dr	false	unknown
https://plinko-game.net/	chromecache_123.1.dr	false	unknown
http://www.dba-oracle.com/images/toc4_Consulting.jpg	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/jobs.htm	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/ad_freeposter.gif	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/logo_oracle_forum.jpg	chromecache_123.1.dr	false	high
https://www.dba-oracle.com/oracle_dba_scripts.htm	chromecache_123.1.dr	false	high
https://bet365app.in	chromecache_123.1.dr	false	unknown
https://plinkoslot.id/demo/	chromecache_123.1.dr	false	unknown
http://www.dba-oracle.com/developer/dev_systems_design_support_consulting_training.htm	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/developer/dev_systems_analysis_support_consulting_training.htm	chromecache_123.1.dr	false	high
http://dba-oracle.com/header_2023.htm	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/toc1_Services.jpg	chromecache_123.1.dr	false	high
http://www.remote-dba.net/remote_oracle.htm	chromecache_123.1.dr	false	unknown
http://dba-oracle.com/footer2023.htm	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/oracle_applications/	chromecache_123.1.dr	false	high
https://twitter.com/BcBurleson	chromecache_123.1.dr	false	high
https://1winsouthafrica.com/	chromecache_123.1.dr	false	unknown
http://www.google.com/coop/cse/brand?form=cse-search-box&lang=en&sitesearch=true	chromecache_123.1.dr	false	high
http://dba-oracle.com/oracle_performance_consulting.htm	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/oracle_tuning_consulting.htm	chromecache_123.1.dr	false	high
http://www.rampant-books.com/book_1001_oracle_sql_tuning.htm	chromecache_123.1.dr	false	high
http://remote-dba.net/remote_oracle.htm	chromecache_123.1.dr	false	unknown
https://mostbetaze.com/	chromecache_123.1.dr	false	unknown
http://www.dba-oracle.com/developer/dev_Oracle%20_Portal_support_consulting_training.htm	chromecache_123.1.dr	false	high
https://king-johnnie.casinologinaustralia.com/	chromecache_123.1.dr	false	unknown
http://www.dba-oracle.com/images/health_check_ad23.jpg	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/developer/dev_Oracle%20_Developer_forms_support_consulting_training.htm	chromecache_123.1.dr	false	high
https://mostbetuzb.com	chromecache_123.1.dr	false	unknown
https://www.dba-oracle.com/oracle_health_check.htm	chromecache_123.1.dr	false	high
https://www.google.com/pagead/1p-user-list/1006676079/?random	chromecache_105.1.dr	false	high
http://www.dba-oracle.com/shadow_oracle_rac.htm	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/oracle_scripts2.jpg	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/developer	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/oracle_scripts1_a.jpg	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/training.htm	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/phone-6342.gif	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/cruise_oracle_ad.jpg	chromecache_123.1.dr	false	high
http://dba-oracle.com/toc2023-4.htm	chromecache_123.1.dr	false	high
http://remote-dba.net/services.htm	chromecache_123.1.dr	false	unknown
http://remote-dba.net/	chromecache_123.1.dr	false	unknown
http://www.dba-oracle.com/images/ad_tuning_books.jpg	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/BC_owl_logo_106.jpg	chromecache_123.1.dr	false	high
https://mosbet-mostbet-uz.com/	chromecache_123.1.dr	false	unknown
https://slotsmegacasino.ro/	chromecache_123.1.dr	false	unknown
http://www.dba-oracle.com/shad_oracle_development.htm	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/consulting_prices.htm	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/BC_logo_98.jpg	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/emergency_oracle_support.htm	chromecache_123.1.dr	false	high
http://oracle-script.com	chromecache_123.1.dr	false	unknown
http://www.dba-oracle.com/dev_Oracle%20_WebLogic_support_consulting_training.htm	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/oracle_applications	chromecache_123.1.dr	false	high
https://mostbetyukle.net	chromecache_123.1.dr	false	unknown
http://www.dba-oracle.com/developer/s_software_development.htm	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/header_2023.gif	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/oracle_scripts_120.jpg	chromecache_123.1.dr	false	high
https://mahjongways2.id/	chromecache_123.1.dr	false	unknown
http://www.dba-oracle.com/images/header-new-1px.gif	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/toc2_Support.jpg	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/images/wise-ad.gif	chromecache_123.1.dr	false	high
http://www.dba-oracle.com/t_linux_oracle_consulting_support.htm	chromecache_123.1.dr	false	high
https://ww16.soap2day.day/	chromecache_123.1.dr	false	unknown
http://www.dba-oracle.com/developer/dev_implementation_support_consulting_training.htm	chromecache_123.1.dr	false	high
https://yt-tomp3.net/	chromecache_123.1.dr	false	unknown
https://infiniti-avtomir.kz/	chromecache_123.1.dr	false	unknown
https://hobby.porn/	chromecache_123.1.dr	false	unknown
https://slotslovers.org/	chromecache_123.1.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
206.188.193.189	dba-oracle.com	United States	55002	DEFENSE-NETUS	false
151.101.130.133	paypal.map.fastly.net	United States	54113	FASTLYUS	false
74.125.138.106	unknown	United States	15169	GOOGLEUS	false
142.250.105.157	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.105.104	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.9.156	bid.g.doubleclick.net	United States	15169	GOOGLEUS	false
108.177.122.104	unknown	United States	15169	GOOGLEUS	false
151.101.194.133	unknown	United States	54113	FASTLYUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1427691
Start date and time:	2024-04-18 00:32:47 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://www.dba-oracle.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/104@22/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, backgroundTaskHost.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.215.94, 64.233.177.139, 64.233.177.102, 64.233.177.138, 64.233.177.113, 64.233.177.100, 64.233.177.101, 64.233.185.84, 34.104.35.123, 142.251.15.156, 142.251.15.157, 142.251.15.154, 142.251.15.155, 142.250.105.95, 172.217.215.95, 64.233.185.95, 172.253.124.95, 74.125.136.95, 64.233.177.95, 173.194.219.95, 108.177.122.95, 142.250.9.95, 64.233.176.95, 74.125.138.95, 142.251.15.95, 199.232.210.172, 192.229.211.108, 74.125.138.94, 142.250.105.113, 142.250.105.100, 142.250.105.101, 142.250.105.138, 142.250.105.102, 142.250.105.139
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, www.googleadservices.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, login.live.com, evoke-windowsservices-tas.msedge.net, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: http://www.dba-oracle.com/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 21:33:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.996090415357255
Encrypted:	false
SSDEEP:	48:8trgKdVTi7Ne6jHoidAKZdA1JehwiZUklqehOy+3:86wEeVy
MD5:	6F1A88170850A5ED394885C5BF6D53B9
SHA1:	8A74AA906346946BDC111EC3484A21AA40370DF4
SHA-256:	FC9E4030CB917A5B23C8E529B31817DC2F1AFAED8B0A5D7B47A907BF52543F1E
SHA-512:	02C410B822AFA664217FD6EABAA8A33A59D908AF0DEAB7228482FA8891A94FA2EC966835D4564EE337498DCC7B781E2B2006795DDEEC2F9B5605FD1244D249EF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....V.=........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X!.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X'.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X'.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X'............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X)............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............r......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 21:33:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.013146493681312
Encrypted:	false
SSDEEP:	48:89gKdVTi7Ne6jHoidAKZdA10eh/iZUkAQkqehFy+2:8iwEs9QMy
MD5:	C33A6257752C6FB164C6C59E330776F5
SHA1:	E4E291F0528D8146F891620335BA8E9A36EE704B
SHA-256:	3F4C0C9EE2BD8F503C5423EC511C3371F32A43E54BE844E8D29037BF20320B85
SHA-512:	96C5AC647D2C1EE81C280D47F2B5F959EC3742309941109C0864ED5E6227AF2A946DB0F2A7B8ACE4B45FA4CE545699364F695B8B9AFC3836201C4F658D8D065C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......=........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X!.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X'.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X'.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X'............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X)............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............r......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.020380231920871
Encrypted:	false
SSDEEP:	48:8eKdVTi7Ne6jHoidAKZdA14tIeh7sFiZUkmgqeh7sTy+BX:8ewE0nRy
MD5:	48437365CC3F33598E84A78A0AEF3D0E
SHA1:	2B5B504FCD08D6DDBD6E9711A2D1ABA3E6513986
SHA-256:	A2B7FE3FE68F1F2D053E51CEED4B2A6EF9FF47B2E5064FBF24A86F33BD4C394B
SHA-512:	E95E526CBA8C8E4D7B086C175CC68BF3926488D8B7679F5BFDFC4AD701AF1D5ABC1A20F984F226A8ABC89AA3BE827A5412C111334E99E8C98D7410926FA33BBE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X!.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X'.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X'.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X'............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............r......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 21:33:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.007900392906746
Encrypted:	false
SSDEEP:	48:8ogKdVTi7Ne6jHoidAKZdA1behDiZUkwqeh5y+R:8HwEHby
MD5:	8658A812781FB268ECDA1F488F793976
SHA1:	CF1B9B8AB5E62B909C3778DBF67FB5242B33FB1D
SHA-256:	00CC5ECB55F2D798B2D626F983609196B50186958E2FC45DDCDE3420B5FE45E7
SHA-512:	96E6233B276222C4DDBA0B16DD735F2D8A08FA6A71E40DC079398C9159DAA7A6F11C641B207B9EF2A5A44BAB040601020EE52F2DF74AE2B8D509F836AEDAC5ED
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....j.=........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X!.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X'.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X'.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X'............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X)............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............r......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 21:33:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9980704434319416
Encrypted:	false
SSDEEP:	48:8xXgKdVTi7Ne6jHoidAKZdA1VehBiZUk1W1qeh/y+C:8uwE39fy
MD5:	A5587D627F118DDA72B55AEB63783FD2
SHA1:	E3DBA514BEAE11A74BC78663370DB8A9CBC1486E
SHA-256:	48DB48C0E9D57FBD1E741CB0667579CB229AB71BFC8E502D09783524B7DC22B3
SHA-512:	F4082D684C80CC0B8093381A0D0789F4FEAD822E8C639475AAF2B4D9D5C3332BE76C6F09DAAE5E79EE5DB28613690D94568602888CEFE9B72CB1254725EE9F2B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....k..=........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X!.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X'.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X'.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X'............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X)............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............r......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 21:33:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.0123584982050895
Encrypted:	false
SSDEEP:	48:8lgKdVTi7Ne6jHoidAKZdA1duT6ehOuTbbiZUk5OjqehOuTbRy+yT+:8KwETTTTbxWOvTbRy7T
MD5:	85104053E1F66C679878AB5EB15BAB5E
SHA1:	04930210FCE0AAF94DC18345D745C9B89110790E
SHA-256:	F0EDEEEDE243C282F523043AA876B851ACB9BB6BEE12F2D1D10ED132EDFA2938
SHA-512:	BDE911939286D682EB8FC64E746DB021EE3943B19ACAFEE488EFCA96F7D8B1CF0066ED316D193196200FA3D768CD26E4466BCD3D84154DABAD755BA20574DA4F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....=........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X!.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X'.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X'.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X'............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X)............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............r......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 760 x 100
Category:	downloaded
Size (bytes):	42572
Entropy (8bit):	7.93756012577803
Encrypted:	false
SSDEEP:	768:w8FzLlHzyQJQ/evwZbmskEWBukU7rCWgmWZ1EkDnZL9pVb2h/NIoJ4tehs:/NTvJ8mskZu/7eWgZq8ZLpbMioJ4Ihs
MD5:	ACDB8D70FA9C1B0D203DDB70BAED72B8
SHA1:	E7460BE798CF4D155D03286FD0BA2016BEA013FA
SHA-256:	DB8C57FD032A1946BE10461E0DB7A81B72BE9FE05C7B4BFF14E2866D655C9602
SHA-512:	A9116F26B462F443B0BABF18EF0792BC98754E022469854E301040EB73AEE63D33C788B6F2EAA2EA3DFBDAC2281654D2AF3D5E5004A8032551F2B62F869AC151
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/header_2023.gif
Preview:	GIF89a..d.p..,......d...........Z..c..Z........Z..............k..J..J.....c..B.....R..c..k..s.....s..B..B..1..J...........J.....Z............s...!).))k.!..k.!...kcckJ...J.J..J..J.....B:.s{.!1.RcZBB..s..sss....)..k..k..k.B:.!..ZB.....sZ.s..BZ.B....ckk...sk.:!.:).s{...k.Z...).Z.k.k.k..)....k.k..k.k.Z).Zk..)..k..kJ.)..)J.k..kJ.)..)J.J.Z.....ZJ.....J.Z..ZJ.....J..JJ.....J.J..JJ.....J....))Z:1...Rk.........c......!1.!..k.....1..cs)..cs.......k..k..k{.1sZ)..){.1s.k.k{.).){.)....k..)..1BZ1B.J..J..J{.....{.J.J{....{....J.........ZB...B......{s..).RR...cBkcB...BBR.!J...RR.JZc.k1.c........c.....cc.J.....c.....c.:..:.......k.:..:.......k...k...k:.k..kc.....:.....:............B......:.....:............Js.k:.k..J{.c.c.B......k..Z........B...!..!.Z..c..Z.....5p.................2...`...B...@...!.I...(S.\..e..%a..9R..'i..iR..8w.\Yad..H.*].t.O+D}:..X.j...j..]...5..,."DD.....".t....H.......+....50....b..P.`q...K~<.2..![.....C...v...a.^..u....Fm....

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop Elements 7.0 Windows, datetime=2014:03:15 14:29:22], baseline, precision 8, 120x90, components 3
Category:	downloaded
Size (bytes):	33914
Entropy (8bit):	7.619969420565969
Encrypted:	false
SSDEEP:	768:yd4mvrJy4mvrJ95H5YyzO1nhny2oGmt+Us:yYh58rVrUs
MD5:	09920C577FC76D4009D13DC8B518B718
SHA1:	EF3685A3FBB04CBE482B2BC22D9BE2073709B9FD
SHA-256:	856AD47AB07B22FA9203773AE7CB2353B0743301549CBBCA6116933A7EB00D79
SHA-512:	4AC98C95991DC5B0B423CA8410B9A37D7FEC4FCB8E053B10B8A288B363A60CB5E4A901F7F61FA3C7CEB8DE0B1979D53BCF9AB7B42B6DD99793C714187C880F7F
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/cruise_oracle_ad.jpg
Preview:	......JFIF.....H.H......Exif..MM.*.............................b...........j.(...........1.....%...r.2...........i....................'.......'.Adobe Photoshop Elements 7.0 Windows.2014:03:15 14:29:22...........................x...........Z...............................&.............(.....................6...................H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................Z.x.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...>.t...ce..(.......#sw7.}.\.....nN.........k.......e..[....c.9....O.w9w?W,...=:.\..n-2...=..<..q.0$I.NA._'...

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 120 x 90
Category:	downloaded
Size (bytes):	9558
Entropy (8bit):	7.706505743460367
Encrypted:	false
SSDEEP:	192:aLZaz2RCcA856dgKcNwifbxCSOfVpet2VW3hBkej:aliu56dMNJQVIIVY7
MD5:	32D186E4F57787C227413A1AD416688A
SHA1:	6C06E37DD239A66B8DA487A1BFE0F3AC6E5CFBC3
SHA-256:	C65C2F35415F597E4B5B0C1E6855F683D07B8EB97BF3CC3744A1BE8F1FFE40FC
SHA-512:	F6536DC4963C1E297D50A98064B8FE49AACB2CEA5FD1A4C1345CC3942B9750251B56FD0355982B156AACF72A4F03C0D597A60E135A214535B7B93F076386103B
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/ad_cmnd_syntax.gif
Preview:	GIF89ax.Z..........~..}..\|..{..x.................\|..{..w..s..q..c..Z..X..I........y..n..W.....Q.....z..L..G..[.....m........~..v..W..."#B...34k&'r,-.DE.CE.DE.CE.DE.fg.wx.vw.xy......~..y..s..T..R..N..~..w..V..L..N..J..X..T..O..?...DHo57.wy.wy.......Q..U.....................................................................qqp...hdc...}{..............U..P..M..O..J..U..R..S...FC.xv...............................~..z..y..x..w..u..t..s..q..o..m..i..[..Y..W..V..T..R..P..O..L........}..\|..u..r..f.._..Z..X..S..L..B..~..}..x..v..t..s..9..V..}..P..N..S..U..Q..L.....X..\|..w..d..[..U..P..H..p..P..."".""t*v22m...CC.DC.DC.98.EEv88.UUx??.EE.LL.ff.UU.wv._^.xw.kk...xx..................XLL.....................................................$$$..................!.......,....x.Z........o.....\....#Jl./.>..3j.... C..Ird..%S.\....c.I3#.8s..xS...@.....H=.M.....`....(-..n..sK.U.N..k.TAQ......d..k.-.^..k.g.1q.H.IVm.(..xX..c...,....<.<.Z.XH. .n.....N{6x.X...

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop Elements 7.0 Windows, datetime=2014:03:15 14:29:22], baseline, precision 8, 120x90, components 3
Category:	dropped
Size (bytes):	33914
Entropy (8bit):	7.619969420565969
Encrypted:	false
SSDEEP:	768:yd4mvrJy4mvrJ95H5YyzO1nhny2oGmt+Us:yYh58rVrUs
MD5:	09920C577FC76D4009D13DC8B518B718
SHA1:	EF3685A3FBB04CBE482B2BC22D9BE2073709B9FD
SHA-256:	856AD47AB07B22FA9203773AE7CB2353B0743301549CBBCA6116933A7EB00D79
SHA-512:	4AC98C95991DC5B0B423CA8410B9A37D7FEC4FCB8E053B10B8A288B363A60CB5E4A901F7F61FA3C7CEB8DE0B1979D53BCF9AB7B42B6DD99793C714187C880F7F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.............................b...........j.(...........1.....%...r.2...........i....................'.......'.Adobe Photoshop Elements 7.0 Windows.2014:03:15 14:29:22...........................x...........Z...............................&.............(.....................6...................H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................Z.x.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...>.t...ce..(.......#sw7.}.\.....nN.........k.......e..[....c.9....O.w9w?W,...=:.\..n-2...=..<..q.0$I.NA._'...

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop Elements 5.0 (20060914.r.77) Windows, datetime=2007:01:12 10:07:14], baseline, precision 8, 110x30, components 3
Category:	downloaded
Size (bytes):	24301
Entropy (8bit):	4.457297672236445
Encrypted:	false
SSDEEP:	192:Xt34PLr195+JKe34PLr19MkW7nKnlskKtm453IYNMtKwrtbr6eWx:XuPbztPbfW7Kps53IYNg7ZbI
MD5:	71A458110E6C7B94ECA57047AF102EF8
SHA1:	BF4AD2F2486B04D803E93942D3F95B8300E9F3C7
SHA-256:	DCF74474C45495ACD72F4358042B8586C4A5B24592D976C79D8C17E3E9654F8F
SHA-512:	CF8B19EF4E7F681D6B411FF35B9203A32A3F411E9A5E4BF51B2946F5EA7AF31CD6FC787A6D216762CEA0C1E8F1AECA785E1F0D9EC8D1AA3E6C7D86A2EB94B511
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/toc_books.jpg
Preview:	......JFIF.....H.H.....nExif..MM..............................b...........j.(...........1.....6...r.2...........i....................'.......'.Adobe Photoshop Elements 5.0 (20060914.r.77) Windows.2007:01:12 10:07:14..........................n...........................................6...........>.(.....................F........... .......H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d...................................................................................................................................................n.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..D.NnFnOUoL..e>....8..M.W.... ..dt.31...X...kZ..1...=...B.p....K.c1.G.o......4.....c}M...I.X

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2467), with no line terminators
Category:	downloaded
Size (bytes):	2467
Entropy (8bit):	5.88869253380699
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08imagTgjj/GBiPgD2P9Q+12:wsbSUtJfxrqLWWWdV6j12mJK+BiPn2
MD5:	C5B025BF1F3CE6376E61A163A1B49488
SHA1:	CBEA3EDAE52C11F5FCE36CBE073817BA8D178FDC
SHA-256:	D785E3DFEEDC2BB3CE29CDE3B81DDE935457711E9897BAA57F67A89D7E571958
SHA-512:	ADF3056FA91412D21920403B2E05EF50C06E4F6109E5608C398B9D982B0E305D6C3FD20DCD3D0C52995B1DFA8BEFFDE9B0CF518FD76BE5F0D32C647975166819
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1006676079/?random=1713393196088&cv=9&fst=1713393196088&num=1&label=N3HTCKnupgQQ79CC4AM&guid=ON&resp=GooglemKTybQhCsO&eid=376635471%2C375603261%2C466465926%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.dba-oracle.com%2F&tiba=Oracle%20Consulting%2C%20Oracle%20Support%20and%20Oracle%20Training%20by%20BC%20Oracle%20Consulting&hn=www.googleadservices.com&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 189 x 100
Category:	downloaded
Size (bytes):	6725
Entropy (8bit):	7.860292918682445
Encrypted:	false
SSDEEP:	192:e/adoDXj8t30U1I+ZpWKtRrJKRH+7kSeEK:e/aiDXc0oBZpTlKRH+deEK
MD5:	9E7D96446827CBD84BF4F26B2DDC946C
SHA1:	5DD94C78F6B6F82344D3760374C02056342991F1
SHA-256:	32599D8F5F3237DD4FEB251C2733CCDC3472DF6DD6E36FE66A0C0F40D901FB0B
SHA-512:	8BC17F0060415CDEA8262C2E3D91F121F6E856385F975668D19582D3571D0D9BA78E9A2DB812A02CF424AC54B66C223F067AA931AD461C4C6EE37A96106C54D9
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/phone.gif
Preview:	GIF89a..d.p..,......d........LHHFFFEEE@@@===???;;;999777GAA...y``BBBn\[TGGJJJIIIMMMCAANNNQQQSSSTTTWWWYYYZZZ\\\___~~~...jjj...ttt......fff...mmmxxxaaa..................bbb..........ddd......333....................................................................................~..m..c..\..X..V..W..U..T..Y..p.......................~..~..\|..{..z..x..x..w..v..u..u..u..s..q..............r..d..S.....~..\|..{..y........a..n...........k...........f..Q..R..j..l.._..Z..g..n..t..m..b..N..]..`..l.....j..L..i..K..h..`.....g..b..g..e..I..^..h..e......JJ...a...GH{GGU...IIe..c.....zzz###......iiiGGG...............444...c..a..`.._..]..^..\..[..Z..Y..Y..W..W........U..U.....S.....Z..R..Q..Q..O..M..M..K..X..G..I......11G......IIK......................................................................@.`...."\..!..#B.(."..3b.X1GB..=..I..I.......A..._.I...8s...g..a.\8.(.).M.#...2c..J...Xg$.........4...h.].V.P.^.......ge..k./..{.......~.+..x1...G...m.b3c........".MZ4.....M:.i.W.V=.5k.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 110x30, components 3
Category:	dropped
Size (bytes):	1844
Entropy (8bit):	7.60775400755147
Encrypted:	false
SSDEEP:	48:KiASLpo7XBTYS2zWYDxUnzB69QROqwAGPkk:/twuzWKe+QROaGv
MD5:	3D880370EF2990298FCE861B9AA1B483
SHA1:	B24A8B5C34F3C7F2CD2CBF20BC2C26CDFEFB5FD9
SHA-256:	E6924E2E2C64F55250FA3DDA8A21CFD116BF94DE580727F338F60E78ACD1FA96
SHA-512:	C238BFD303F6F0385E6C2D1DEB234D2EB0A93D50A87C183CAE76E7BA40BC5ADE4BBB37E7335B08973495B87CF5E53CF397D19ABC9776F51AFDAACD2844EB34D6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......P......Adobe.d...................................................................................................................................................n............................................................................................!."1A.2#........................!.1A".Qaq....2.B...R.#............?.......F"1...Db#....F"1........._R....$rr.x..u.H..I...g2f`.@...D.....?...^..."......s..3!...F..{.)D.t.T.)+}...,W..L.eSm.X.N.dih7..].#L.!.c.Q.nG..n.......n..]F..\F..1=.?.q..QL{.m.`Z..]...z.+.h*....Y..;.].V...?.3p.<D..?3Bxx.C.p`.U..<v...C..:...#C...yW..c...1.3.....n.z....=&G....[.......okk....T.JR...K..2.5U.m..(.`~Dx.w..g+..2.z.?mD..>=g.........?...4..0djs...{.vr.C.'.0aV.W./.V.}..X.y.XS...+..T.P.x0......s...-...$....S.j.%.-.Z....9~ ...2J.5...F....Sgkl...U...%"\...S.;".].&).dP..S..m.E......N^f..E.g.`..K.q...p0.cF.l.6...\|D..>..........f...9..,a.E....x...'..D<...?.y.2;.L.v.T..Eu5...n..o`....M.^..EP.I.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 810 x 22
Category:	dropped
Size (bytes):	11055
Entropy (8bit):	7.83691390285763
Encrypted:	false
SSDEEP:	192:T5BD+cbJ3gYryw98KJdjKM7A9ceIIu0EadoHWo0aO6L2ZTUvPDUseb:T5ByirwmeM7C3EadoHv0CL2xUvPDUHb
MD5:	7D1F7A68BBA0343E60D3E09D1A25984E
SHA1:	4DD74B6125091A60A654D33EFC55E5BA506483D7
SHA-256:	58298614CFB80CBF10EFDA8FF705590683D0B633812E3ED725B6353066C1EAC1
SHA-512:	4C26FD17F60AA13581DBCAFB03D17AAC62CD32738E692C6C28A3CF28211B9217456CF506DA20DE42EB48D952B7DF8B23EA42F69266C67A91EC8F406A62C1E2F1
Malicious:	false
Reputation:	low
Preview:	GIF89a.........FEE[..........{yz....mlm\YZ...LJKRPQNMMPNO\Z\655vvv...ONNTRSMLLfdejijRPR\\\...T..!!!&%%...LKLZXZ211))K..===^]^_^^.--JHIA>?...TTTDAB......9.....`^_......LLL[VX^\\...[ZZ...rqqJGH...IGH...E........XTW878NNNa_`VSUomn:88YXX...QOP...HFGDBC@.....888;8:......766......dbcBABecdOMNWVVPPPlklqop...CBB``aHHHb`aSQRljj...JJJBAA...\XY@??...A@@bbb......gffSRRMKL...ywx...;::wwwb_`....._...........ZZZ=::434...322J.....,.....igh=;<0/0/..8..'&&+*........OMO][\,+,.......}~P..(''$##......#"#IHI . ]]]WVURQQ...++WUVYWXVTUZXYXVW[XYUSTYWWWTVWTUYWYTRTURSVTT[YZZXXUSUYVWWUWWUUXWWXVVZYZXVXWTWYVXTSSWTTVTVXWX............[XXVSV........VUU...KIJNKNVUV...SPQOMMVSSuttTQTSRTXWV......PMP..............323UUU878QPQ...........ooosrr......ZWX_VVXUV[TU`__ggg:99]\\UTTa``^[[^]]0//^^^......!.......,................ .....Z.....7I.8...(.8h......=r.r....(..9.R.K.'.......b<..d"O@W..J...H.]...P.6.d..X.j....`..K...h.]...p..[v.A....:..._..%..Q..a.&9X.b....)i...e...5...0..xg. Y....}...;.....[

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 110x30, components 3
Category:	downloaded
Size (bytes):	2370
Entropy (8bit):	7.726205755819434
Encrypted:	false
SSDEEP:	48:KiwBKTzm3QhDQ+u1FvWPB7fq4BxCAa24VNi7Su+Ra:qiz5hDQJ3+FqmCAAW7YRa
MD5:	09073B9EADF3E27D18AC71CE1229E020
SHA1:	AEFE2DED41F8B00F946598134C9EA73AC621FBEB
SHA-256:	B313F850871FC10C0D63309495BA917DFB46E1DA3E724F04FA8134A97AA8AC71
SHA-512:	689253DDF00550BACB26B0810FE7D7A65EDDF06DCD269D18A84C836B872727C1DFF185217582C450E6BDD1F23DCB825B901B7BBED9C9C9AE6FC9D1FB1B61D757
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/toc4_Consulting.jpg
Preview:	......JFIF.....d.d......Ducky.......P......Adobe.d...................................................................................................................................................n..........................................................................................."...!.2.1a.........................!1.AQa"....q...2.BR...b.#3S............?....).).).).).).).).).).).).)....4...Z.Z3\.{...8y..NH....i.l&...l.q>CM.....K..W...'.......F..>\y.\.\|,V....PL.4%......O.v....r...C.5.1.N.K...).....s.DvTw...^.!..~..W.<..39..N.~.5>>7....*.,..`..C...V.zD..A..9..\|s\..-...0..,..I.R.(.83.^...e..1..W....J..]._....:....U{....r...A&..X...c...../L.G.?l....5.GJ.8.19...&..Z.g+.e,...a.../....t..>0....Qm..w.a...@O.L......_n......J..}......v.8=U...c.n.v.U..Ht2.G.I.Yw.ID.....J..i.o..`2...11..^.....!.\|e[#.X.q.....^..m.B.M]..kf.......nc...6cka..R.hvi...-K...~.N..?.yg.wg.c.:..=K..x.3c...q..0[n._....Q-g.3...d..u.....t...G0.....>7n..~.......;.s...V.K...;e...V......5..

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop Elements 5.0 (20060914.r.77) Windows, datetime=2008:03:03 19:35:04], baseline, precision 8, 120x120, components 3
Category:	dropped
Size (bytes):	35616
Entropy (8bit):	5.894201752028256
Encrypted:	false
SSDEEP:	384:UiTmKxBDuoBJzTmKxBDuoBJYWt053IYNg7Daxbsrk7uOuH:UwnjlnjqWtNYyv0bshOu
MD5:	77A810DC1EF533EC0776C2417C6C73AD
SHA1:	25557E36B91FD96F9FC828E798A72AE93D4916CC
SHA-256:	CD2ADA18861475CF6E1155B083BD5058F760FD81BF13CD5604CF437F0BE20B46
SHA-512:	768BC2B2861EA1B875613ABEFF1C548B879C77CE795C95D869AD7D4C331F533343312E03D2E8E7CD1B0012922933FF595CEF10D8F74B205CEAC3267E17C536E8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....5Exif..MM..............................b...........j.(...........1.....6...r.2...........i....................'.......'.Adobe Photoshop Elements 5.0 (20060914.r.77) Windows.2008:03:03 19:35:04..........................x...........x...............................6...........>.(.....................F...................H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................x.x.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..$.I..D=......4. ....D..:....[fn=..60W...s.?....f.$..H'.:.....hhq.;.q}C....4d...3......_....2.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 120x104, components 3
Category:	dropped
Size (bytes):	6113
Entropy (8bit):	7.881945224610354
Encrypted:	false
SSDEEP:	96:TEh0271yUIH3PuRFJlsX+9IlYLvTfENMVX/wCf4R68eAXErMQ0pmHz2s96:T8oUIWzUcvTEN2X/wmp8nk+pmT2/
MD5:	ADF372C172DB51F611BE6674A816510C
SHA1:	5D690E6707E6344BD98C83F2BA53880D173CB347
SHA-256:	85F27063DD0A362F5ACD57D19377D152EA58D13E4DF9C1E13708664B68154093
SHA-512:	23C5876A2AFA864A3F18B5AA158C5E0431D38823CBCBC8B0812ECF1A3DF6514886D9DB8A5AFBA2B357C0F75BDCB5CF4A4A2A077CB86B1180674A7996F709AA41
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................h.x.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..\|;.f........\|E.GT.b..Q..K>.......cq..>.y....\|F.h<#.i....(..d...v..C.E.Ue.......\|M.Y.o................6Mm7.r..2N....ES.C.......M...h."...!..@....!.#..-....).#2....~b..k..0.h.Q'*.R.M....y..o.F...".l..^r.5.+\.....K.4.....`.....vZ.....v...mj.....d.....^....ir....Ro...4.;..........+.._.\|=...5.7O..<.}..pl.HV...B.<J. I....r.}jO.~....-.....N.&.....KF.W.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 22
Category:	downloaded
Size (bytes):	45
Entropy (8bit):	3.5404411512602296
Encrypted:	false
SSDEEP:	3:CDn7EQtB/lad:y7EQtQ
MD5:	409A5AEEAF05CB7B3D068FD70A18C813
SHA1:	E169368DF1C81D784945A063B1F40A8BC970A0DE
SHA-256:	5E8D80B5E38FCB3C0CCEC2A1C7B0AB969335E654536EA876B4A616212911689F
SHA-512:	F22EB01BB5F2D3DCDDCB0B4D39118649441C71631A9C813D30823F2E72953D18DD13CAB6D3281A8FE9183DC903CC47AD7F5552BCE5C292716D2FAFEB8AB34C25
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/tab-1px.gif
Preview:	GIF89a.........a...!.......,..............Q.;

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 120 x 90
Category:	downloaded
Size (bytes):	7548
Entropy (8bit):	7.810861707224019
Encrypted:	false
SSDEEP:	192:vRD3dQxeXsW3LkKpAkh1uxLu5U2wSddXUjP7W6C1:9tQP2Wk/GLu5UudV+e
MD5:	D1C77FBE8F5EEF9DE2AAC446A1A68E96
SHA1:	BB4128E6FA02B357E3829C11A4E434E0B2D9FE3B
SHA-256:	5809753AB7520B4F8010FA0F4FD40B4D7A7FC5E24A4D4E025DE48080002FD1B2
SHA-512:	16AF10CC1209E2E1D2A1712A3AB0BD62E61B73FD5662CF00F84F45468D1B33B03E096CA63C50B9D084D98ED97DC773C15CA148DD0BD36E272776B4BAC2A88126
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/wise-ad.gif
Preview:	GIF89ax.Z...............................................................>..D.-X.....H..D.!R..F..O..L..J..K.&Q89;....... ]..T'?i4Kt.'d.%`..O.!R.'`.c.'Z.5e..............p.i.$Y.#U.,d..d.-].:o?[.Tj.ew.\|.......`bekmpfhk.....................+e.5z.)^.)].'\.1n.)].([.3r.2o.1k.5t.8x.P..3l.>..H.#T.-P.9c.Tv.e..o.............0j./h.-c.,a.+`.^..e..d.-b.-a.+_.?..H../b.E..P..C..I..U.>k................................. .......02......EGIQSUKMOVXZ........rtv.................................................................),.Z]_x{}.........$&'356>@A.......................................................................................................................................................................................................................................!.......,....x.Z........H......".......G....u...\|.:..Io......X..K..!K......z!C.l..@...G...H..7.iSz...sJ.j..R.-..g.f...e..&MH"..$..&#"...Z.T...X...R.J.I..]ZUW>.....U.Og.z)....^"2.)B.....DB...1d\}-.UjY._{

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop Elements 7.0 Windows, datetime=2014:05:30 09:24:55], baseline, precision 8, 120x352, components 3
Category:	downloaded
Size (bytes):	46864
Entropy (8bit):	7.730854957445688
Encrypted:	false
SSDEEP:	768:nVelUH3zmlI5AH9GEH6Yyo3p4HNbI8+ximKXJjkSeQieatcz1JGMLBgUDrXwjCFD:nVelUH36+KdGu683p4tIA39xTaISyBgc
MD5:	15AC942FE031EECA738D2C3212DDD81A
SHA1:	E352F422D214BC491775441ED14B718ACDD513E7
SHA-256:	0AE0CB07FD7A4AF4D16902D303837C3A65B6F5121793556218737E324BAC440D
SHA-512:	18F6A61B872636C4BD01A783DB6A9FBBE06190824BEA26E297E0B60ACB529E91E68006EB1EECBE8011FB40D4FF18A2C328941C49E38B1B6BEC860647B5941324
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/ad_tuning_books.jpg
Preview:	......JFIF.....H.H.....hExif..MM..............................b...........j.(...........1.....%...r.2...........i....................'.......'.Adobe Photoshop Elements 7.0 Windows..2014:05:30 09:24:55..........................x...........................................&.............(.....................6...........).......H.......H.........C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......x.(..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....MCN.gI.d.u![.1.3J...n..`.^G5ro..0J..s.&.6f....;.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	4.223006079439934
Encrypted:	false
SSDEEP:	12:2+DRa6Glyc2Iq0AOJRGtmDLQaAfaj0RYJ7DayzNUKYxT0wnVxEy6qaAfc9So70pR:VRCH2d0jRlQcj0RYJHaB5gwVWyHaSo7S
MD5:	81D9420FD4BB8D169BA13FD15A240B64
SHA1:	23D86F1572D5CABFAC0D3E13B53A2D2341BBFB6C
SHA-256:	4AE2F24ED6A9B7E5D519F460F1729B8F713BB363804B01D363FE5E7F1CB050B9
SHA-512:	E551042DBAD6EBD751B08F350AEBCD847EA1A4C40F4C90CDC5E86DD8A8B27A0809F7FF9BF2993A0241B1F400F3D3EEF2D175A8B4DF01088DB19732E3CCB833A2
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ..........................................................................................................................................................................................................................~d..............y...........z..]=...............................q..........................x]...................................p.................kP..nW.......................................p...............m..[:...........................................h.........}...g...x.........................................d.......w..fF............................................q...........}...................................................p..............k......zc.......................................q...............~.........`A.................................i..........}c..................y[...x............................................................................................................................

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 120 x 90
Category:	dropped
Size (bytes):	7219
Entropy (8bit):	7.761660452366455
Encrypted:	false
SSDEEP:	192:NAdF7MU0iN9o/KnXLqjUv00CktjHFaVsZpxkCP9vb3:ydqML7kUcWHvLPZj
MD5:	30357C744658A04DFD92EE8732397F32
SHA1:	85AB5312A7BB1CED1BF2488DA4EBBCA163A106EB
SHA-256:	BEC1F6C44F74BF355855D394C6007CE6C4F705AAD8E1C0305D434AFDE5D17CE5
SHA-512:	E5085ED133EBA93506303504729C36AB5CA3C2E7F1C73D48634BC06AE35A9B9BAE840BAEA132A5937C7167D23AE1AA82C3BBF913D4D201A0CD7D921E75009AEA
Malicious:	false
Reputation:	low
Preview:	GIF89ax.Z............\|.1...}..{..z...........................cbc.........qpr.........qou....VT[........{..}...xt.........}..\|..{..z..x.....y.....\|..z..v..~..z!.~/..dS.....u..........................}..y..y..v.....z..i..~..~..{..y..\|..z..w..{..v..~..\|......$..(..&.......c7$.E3.A5ztg..u..........{.....\|..w.....~.....\|..{..}.....~..z..X.....\|........})..%.LVH...~..\|'../#t...........~....................y..?...........t.........!......................\|.....2...JJ}44V............--2IIL.............................d. ...S..s....%.bg._b......J<Aj..Q.&...Y. {.*..-.."h....$../..0..1.....0../..1..2../..2..1..2..2..1..3.(>..&Zpqu.2..3..3........:...........J...................................................................................................................!.......,....x.Z......i..O.$....4.....#J.H.......2I....`...Ik.R.\...+.."...!8s.....;+...(..M.&.[Z.i.KP/..J5..Xm...kO>C.L..(.\|h....V..p..K...x..S{._<I..m.......+^L.`.~.2........... f..B...X...L......

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:05:11 17:22:35], baseline, precision 8, 120x59, components 3
Category:	dropped
Size (bytes):	19939
Entropy (8bit):	7.115246676686121
Encrypted:	false
SSDEEP:	384:zE8gjx/J7iIE8gjx/znwHDxhYNg7e+NUjoLF/ki87:zSxR79SxLwjPYyvUkVg7
MD5:	59C99C9A0AF5B057D92B7E5BF8A5F9E0
SHA1:	40CD376C9F762F337803243C2FDEC61AE0CB6ACC
SHA-256:	317111232A38273D07FC60CDA4FDC47E3C5BF818228BCDF8E82971A983DC2C59
SHA-512:	BD9E5EDCB3307834FA2DBA7E369FE476A7D9909847502E4AF8337F4CC26096F73AF1E2B5F61FA96DE590032018A30037810C95C38D463487C11D41A6F7EA3385
Malicious:	false
Reputation:	low
Preview:	.....1Exif..MM..............................b...........j.(...........1....."...r.2...........i....................'.......'.Adobe Photoshop CC 2014 (Windows).2016:05:11 17:22:35..........................x...........;..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................;.x.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..j...l.......R....F.....U....g.HQ....;~.mq...~..S.....?.o.%......7..:.....s....h....Z..m.m.;.......RB.:......r^._...c..:t.....?.o.%......7...IL}:..

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 189 x 100
Category:	dropped
Size (bytes):	6725
Entropy (8bit):	7.860292918682445
Encrypted:	false
SSDEEP:	192:e/adoDXj8t30U1I+ZpWKtRrJKRH+7kSeEK:e/aiDXc0oBZpTlKRH+deEK
MD5:	9E7D96446827CBD84BF4F26B2DDC946C
SHA1:	5DD94C78F6B6F82344D3760374C02056342991F1
SHA-256:	32599D8F5F3237DD4FEB251C2733CCDC3472DF6DD6E36FE66A0C0F40D901FB0B
SHA-512:	8BC17F0060415CDEA8262C2E3D91F121F6E856385F975668D19582D3571D0D9BA78E9A2DB812A02CF424AC54B66C223F067AA931AD461C4C6EE37A96106C54D9
Malicious:	false
Reputation:	low
Preview:	GIF89a..d.p..,......d........LHHFFFEEE@@@===???;;;999777GAA...y``BBBn\[TGGJJJIIIMMMCAANNNQQQSSSTTTWWWYYYZZZ\\\___~~~...jjj...ttt......fff...mmmxxxaaa..................bbb..........ddd......333....................................................................................~..m..c..\..X..V..W..U..T..Y..p.......................~..~..\|..{..z..x..x..w..v..u..u..u..s..q..............r..d..S.....~..\|..{..y........a..n...........k...........f..Q..R..j..l.._..Z..g..n..t..m..b..N..]..`..l.....j..L..i..K..h..`.....g..b..g..e..I..^..h..e......JJ...a...GH{GGU...IIe..c.....zzz###......iiiGGG...............444...c..a..`.._..]..^..\..[..Z..Y..Y..W..W........U..U.....S.....Z..R..Q..Q..O..M..M..K..X..G..I......11G......IIK......................................................................@.`...."\..!..#B.(."..3b.X1GB..=..I..I.......A..._.I...8s...g..a.\8.(.).M.#...2c..J...Xg$.........4...h.].V.P.^.......ge..k./..{.......~.+..x1...G...m.b3c........".MZ4.....M:.i.W.V=.5k.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 22
Category:	dropped
Size (bytes):	45
Entropy (8bit):	3.5404411512602296
Encrypted:	false
SSDEEP:	3:CDn7EQtB/lad:y7EQtQ
MD5:	409A5AEEAF05CB7B3D068FD70A18C813
SHA1:	E169368DF1C81D784945A063B1F40A8BC970A0DE
SHA-256:	5E8D80B5E38FCB3C0CCEC2A1C7B0AB969335E654536EA876B4A616212911689F
SHA-512:	F22EB01BB5F2D3DCDDCB0B4D39118649441C71631A9C813D30823F2E72953D18DD13CAB6D3281A8FE9183DC903CC47AD7F5552BCE5C292716D2FAFEB8AB34C25
Malicious:	false
Reputation:	low
Preview:	GIF89a.........a...!.......,..............Q.;

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop Elements 7.0 Windows, datetime=2014:04:10 15:42:48], baseline, precision 8, 120x84, components 3
Category:	dropped
Size (bytes):	20578
Entropy (8bit):	7.232011123698806
Encrypted:	false
SSDEEP:	384:7mgSAQiL45BtNEvDbFYdSAQiL45BtNEvDbFYNn5Hy8YNg7vC0Dmpvp5QaMd0+/gd:iBtt5BtCmAtt5BtCmN5HPYybDQ5QaMOH
MD5:	753C0C63846F8570DDD25F9250E6D651
SHA1:	11FFBBAE762C6956EBF13F7D29249DD27F6A6A3F
SHA-256:	7A1D07FCBEDAB1E53859A9F9B4CFF782C1D619B2BE43FBEA6EAEED7111C3F192
SHA-512:	AFEA331D39D4A3E1578DF1B440A2C730A7C1EA950B905B1EEBA24ECB41BCEBA192614FB49D26C6A2289A029EF4C55CD75246E7F8B7C44EF964ABD659D705097B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....8Exif..MM.*.............................b...........j.(...........1.....%...r.2...........i....................'.......'.Adobe Photoshop Elements 7.0 Windows.2014:04:10 15:42:48...........................x...........T...............................&.............(.....................6...................H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................T.x.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...T...G...H.p..%Wq......V../_.Q6.........Sz.......R.'.........&T.....a....Zl:....(.....m..i..\|C..mv..K...p.k.pU..C

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 100
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.716214253900369
Encrypted:	false
SSDEEP:	3:Cx7ChglBtTVdiTXQAGUen:A7DlnVdi05Hn
MD5:	3062D6D3728989330C72B7DC857968A9
SHA1:	C3CFF20D24EF4D3A484890C375BCEC3DBC52BB96
SHA-256:	95D0B91AE52F2BF0F8975495AA500243D7125BAC5AF0BD892D9B7A0A1EF5F0DD
SHA-512:	CABA94DAB7A5B9E092214EA37CDDB18C4AE7943588E821E74CC160CC160B1D293C28FA8FDF9E55A5D00DD5AB6EB8AB2E29D5A9B862B6A994020EFF4875E96860
Malicious:	false
Reputation:	low
Preview:	GIF89a..d................,......d.......x..`H.Mz+.j..0....Q..;

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1788), with CRLF line terminators
Category:	downloaded
Size (bytes):	45541
Entropy (8bit):	5.368238470710608
Encrypted:	false
SSDEEP:	768:2yZMzuEqG8NNotEfTnkeDsIGOb0j5pxsSPK:pZMy28NNottrIGObi50SPK
MD5:	F2D79FDF78DD173BA719E7DA3007272A
SHA1:	126391AE546879B06F86FF825F6888D260BF9E25
SHA-256:	4D1E61CAACCDD4D861E50F2E0E2ADA612F243DFF0CF701BAD6D3EBD41EC9BC75
SHA-512:	5ADAE8200DE9949B38FFCDE26480F6C133554CF8555BBFE743D33771852BE2DF2321FD03E197A90F80069ED15C1229C0C36706585A8A3CF0D1C3243273069083
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/
Preview:	<title>Oracle Consulting, Oracle Support and Oracle Training by..BC Oracle Consulting</title>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<meta name="keywords" content=.."Oracle Consulting, Oracle support, Oracle Consultants,Oracle Education,Oracle contracting,Oracle consulting,Oracle consultant,Oracle Training,Oracle dba support,Oracle architecture,Oracle classes,Oracle,Oracle architecture,Oracle tuning, Oracle data warehousing">....<meta name="description" content=.."Burleson Oracle consulting, Oracle training and Oracle support">..<style type="text/css" padding-right:="" padding-left:=""..padding-bottom:="" margin:="" padding-top:="">..<STYLE>.toc A:link {.. FONT: 8pt/20px helvetica,verdana; COLOR: black; TEXT-DECORATION: none..}...toc A:visited {.. FONT: 8pt/20px helvetica,verdana; COLOR: black; TEXT-DECORATION: none..}...toc A:hover {.. FONT: 8pt/20px helvetica,verdana; COLOR: black; TEXT-DECORATION: underline..}..</style>....<style type="text/cs

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 189 x 100
Category:	dropped
Size (bytes):	6725
Entropy (8bit):	7.860292918682445
Encrypted:	false
SSDEEP:	192:e/adoDXj8t30U1I+ZpWKtRrJKRH+7kSeEK:e/aiDXc0oBZpTlKRH+deEK
MD5:	9E7D96446827CBD84BF4F26B2DDC946C
SHA1:	5DD94C78F6B6F82344D3760374C02056342991F1
SHA-256:	32599D8F5F3237DD4FEB251C2733CCDC3472DF6DD6E36FE66A0C0F40D901FB0B
SHA-512:	8BC17F0060415CDEA8262C2E3D91F121F6E856385F975668D19582D3571D0D9BA78E9A2DB812A02CF424AC54B66C223F067AA931AD461C4C6EE37A96106C54D9
Malicious:	false
Reputation:	low
Preview:	GIF89a..d.p..,......d........LHHFFFEEE@@@===???;;;999777GAA...y``BBBn\[TGGJJJIIIMMMCAANNNQQQSSSTTTWWWYYYZZZ\\\___~~~...jjj...ttt......fff...mmmxxxaaa..................bbb..........ddd......333....................................................................................~..m..c..\..X..V..W..U..T..Y..p.......................~..~..\|..{..z..x..x..w..v..u..u..u..s..q..............r..d..S.....~..\|..{..y........a..n...........k...........f..Q..R..j..l.._..Z..g..n..t..m..b..N..]..`..l.....j..L..i..K..h..`.....g..b..g..e..I..^..h..e......JJ...a...GH{GGU...IIe..c.....zzz###......iiiGGG...............444...c..a..`.._..]..^..\..[..Z..Y..Y..W..W........U..U.....S.....Z..R..Q..Q..O..M..M..K..X..G..I......11G......IIK......................................................................@.`...."\..!..#B.(."..3b.X1GB..=..I..I.......A..._.I...8s...g..a.\8.(.).M.#...2c..J...Xg$.........4...h.].V.P.^.......ge..k./..{.......~.+..x1...G...m.b3c........".MZ4.....M:.i.W.V=.5k.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop Elements 7.0 Windows, datetime=2014:04:10 15:42:48], baseline, precision 8, 120x84, components 3
Category:	downloaded
Size (bytes):	20578
Entropy (8bit):	7.232011123698806
Encrypted:	false
SSDEEP:	384:7mgSAQiL45BtNEvDbFYdSAQiL45BtNEvDbFYNn5Hy8YNg7vC0Dmpvp5QaMd0+/gd:iBtt5BtCmAtt5BtCmN5HPYybDQ5QaMOH
MD5:	753C0C63846F8570DDD25F9250E6D651
SHA1:	11FFBBAE762C6956EBF13F7D29249DD27F6A6A3F
SHA-256:	7A1D07FCBEDAB1E53859A9F9B4CFF782C1D619B2BE43FBEA6EAEED7111C3F192
SHA-512:	AFEA331D39D4A3E1578DF1B440A2C730A7C1EA950B905B1EEBA24ECB41BCEBA192614FB49D26C6A2289A029EF4C55CD75246E7F8B7C44EF964ABD659D705097B
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/logo_oracle_forum.jpg
Preview:	......JFIF.....H.H.....8Exif..MM.*.............................b...........j.(...........1.....%...r.2...........i....................'.......'.Adobe Photoshop Elements 7.0 Windows.2014:04:10 15:42:48...........................x...........T...............................&.............(.....................6...................H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................T.x.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...T...G...H.p..%Wq......V../_.Q6.........Sz.......R.'.........&T.....a....Zl:....(.....m..i..\|C..mv..K...p.k.pU..C

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3448)
Category:	downloaded
Size (bytes):	54484
Entropy (8bit):	5.532571016591954
Encrypted:	false
SSDEEP:	768:t6g99vgQtgD+bBl/ArkzlW82KaUEpLnLysdeLib5CG9A:tv9vgOHD//xWeaHHyK5X9A
MD5:	8BA7B45905F913617844C5CFCD235273
SHA1:	7FE5336AF4D16923ACCABDDFB1C8BC45B5368BB9
SHA-256:	C9977F8E96A73BAC0EEBCDA09E7EB36914D1FBBC134D88EC80A7BCC1AEEA0E03
SHA-512:	DD1D327B474991A4D33401D17C13C1A4D172C85F783E2ED72A289BFA132C83ECB6014401A935C6B317117B783164A5E959F8416F7C47C13D149FCB20EAED0C77
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion.js
Preview:	(function(){var l,aa;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function fa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ha=fa(this),ia="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},ja={};function v(a,b,c){if(!c\|\|null!=a){c=ja[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}} .function w(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in r?f=r:f=ha;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ia&&"es6"===c?f[d]:null;b=b(c);null!=b&&(a?ca(r,d,{configurable:!0,writable:!0,value:b}):b!==c&

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 106x136, components 3
Category:	downloaded
Size (bytes):	10771
Entropy (8bit):	7.771171017037521
Encrypted:	false
SSDEEP:	192:mmaOdMt5VQCKkWa12QeRrVzmut1U40R0TTA9x0y0AZ3DJzn5JHPHj/cnJB2:5dXaAtZqoA0TY+FizjjIJB2
MD5:	2284D71BFC84FF70D519D74BC3D464C9
SHA1:	656580BA011B3CCEC926F0AE157B899FB41ACAC7
SHA-256:	B8F5B43BAF9AAA05AD6CD3EF3D3E802AAB8B03DA04E4696CEE9A41F037C46905
SHA-512:	D8E772AA5352B6637EF37B3F2B65FC92D6346D887B355C67D6DF342CEFB3C7EA147867C976D966201FE7A81351971F8C24FC0CE3A2A4EE1696A728E7F7E7E3C1
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/BC_owl_logo_106.jpg
Preview:	......JFIF.....H.H......Photoshop 3.0.8BIM.........H.......H......8BIM...........x8BIM............8BIM..................8BIM..........8BIM'.................8BIM.......H./ff...lff........./ff...............2.....Z...........5.....-..........8BIM.......p................................................................................................................8BIM..........8BIM..........8BIM...............@...@....8BIM............8BIM.......u...................j.....U.n.t.i.t.l.e.d.-.1...................................j......................................8BIM..........8BIM............8BIM...............W...p......s...............JFIF.....H.H......Adobe.d.................................................................................................................................................p.W.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/en_US/i/scr/pixel.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 106x136, components 3
Category:	dropped
Size (bytes):	10771
Entropy (8bit):	7.771171017037521
Encrypted:	false
SSDEEP:	192:mmaOdMt5VQCKkWa12QeRrVzmut1U40R0TTA9x0y0AZ3DJzn5JHPHj/cnJB2:5dXaAtZqoA0TY+FizjjIJB2
MD5:	2284D71BFC84FF70D519D74BC3D464C9
SHA1:	656580BA011B3CCEC926F0AE157B899FB41ACAC7
SHA-256:	B8F5B43BAF9AAA05AD6CD3EF3D3E802AAB8B03DA04E4696CEE9A41F037C46905
SHA-512:	D8E772AA5352B6637EF37B3F2B65FC92D6346D887B355C67D6DF342CEFB3C7EA147867C976D966201FE7A81351971F8C24FC0CE3A2A4EE1696A728E7F7E7E3C1
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Photoshop 3.0.8BIM.........H.......H......8BIM...........x8BIM............8BIM..................8BIM..........8BIM'.................8BIM.......H./ff...lff........./ff...............2.....Z...........5.....-..........8BIM.......p................................................................................................................8BIM..........8BIM..........8BIM...............@...@....8BIM............8BIM.......u...................j.....U.n.t.i.t.l.e.d.-.1...................................j......................................8BIM..........8BIM............8BIM...............W...p......s...............JFIF.....H.H......Adobe.d.................................................................................................................................................p.W.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 760 x 100
Category:	dropped
Size (bytes):	42572
Entropy (8bit):	7.93756012577803
Encrypted:	false
SSDEEP:	768:w8FzLlHzyQJQ/evwZbmskEWBukU7rCWgmWZ1EkDnZL9pVb2h/NIoJ4tehs:/NTvJ8mskZu/7eWgZq8ZLpbMioJ4Ihs
MD5:	ACDB8D70FA9C1B0D203DDB70BAED72B8
SHA1:	E7460BE798CF4D155D03286FD0BA2016BEA013FA
SHA-256:	DB8C57FD032A1946BE10461E0DB7A81B72BE9FE05C7B4BFF14E2866D655C9602
SHA-512:	A9116F26B462F443B0BABF18EF0792BC98754E022469854E301040EB73AEE63D33C788B6F2EAA2EA3DFBDAC2281654D2AF3D5E5004A8032551F2B62F869AC151
Malicious:	false
Reputation:	low
Preview:	GIF89a..d.p..,......d...........Z..c..Z........Z..............k..J..J.....c..B.....R..c..k..s.....s..B..B..1..J...........J.....Z............s...!).))k.!..k.!...kcckJ...J.J..J..J.....B:.s{.!1.RcZBB..s..sss....)..k..k..k.B:.!..ZB.....sZ.s..BZ.B....ckk...sk.:!.:).s{...k.Z...).Z.k.k.k..)....k.k..k.k.Z).Zk..)..k..kJ.)..)J.k..kJ.)..)J.J.Z.....ZJ.....J.Z..ZJ.....J..JJ.....J.J..JJ.....J....))Z:1...Rk.........c......!1.!..k.....1..cs)..cs.......k..k..k{.1sZ)..){.1s.k.k{.).){.)....k..)..1BZ1B.J..J..J{.....{.J.J{....{....J.........ZB...B......{s..).RR...cBkcB...BBR.!J...RR.JZc.k1.c........c.....cc.J.....c.....c.:..:.......k.:..:.......k...k...k:.k..kc.....:.....:............B......:.....:............Js.k:.k..J{.c.c.B......k..Z........B...!..!.Z..c..Z.....5p.................2...`...B...@...!.I...(S.\..e..%a..9R..'i..iR..8w.\Yad..H.*].t.O+D}:..X.j...j..]...5..,."DD.....".t....H.......+....50....b..P.`q...K~<.2..![.....C...v...a.^..u....Fm....

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 408x484, components 3
Category:	dropped
Size (bytes):	71044
Entropy (8bit):	7.8805777282885545
Encrypted:	false
SSDEEP:	1536:nnMmfkGlusHbgcmAycWghZU/l0CRCc0ViOwjTBK7Hxhe2JkPNq:nMSVHmA2KMljxldiheGGNq
MD5:	419E97667D8FF1D3119DFBAE9E326B7D
SHA1:	E0B6C71AFE2A61CDECEAD842DFDBF92C447622E7
SHA-256:	0791A87B21A01E9754036BBE98708C1AA0346873600FDC8292D2A942D0D880A5
SHA-512:	F60956B5205D5A0FADA9DAC5FA3EC3CD499BF6AF94E19A2B0B41765129AE6545CEFB94523E4943DC73155BED9F1420BE0DC9D790B2AFA82F809528CA6351C2B0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..._._....Jt.!.m...".P.....-w.%...v..R6..S\|.Z.9...z..-....x.........k......y..../.o.....O].Q...s.j..j._.........A....^....z.....D<9.y.t..F..^+;...a.H.e....@.m)..D..S.,RWt.b...S7..g..\|..7NI.I.....t.X...z/..LB...F.y..O.......x9.[$...4W......:.......i..J.-.r.).'Um.....]C.....u.?V..b.7C..2.....6.k..I.V*+.g......R4....G.Z~'.Q^I....#.......u.M.....[.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 810 x 22
Category:	downloaded
Size (bytes):	11055
Entropy (8bit):	7.83691390285763
Encrypted:	false
SSDEEP:	192:T5BD+cbJ3gYryw98KJdjKM7A9ceIIu0EadoHWo0aO6L2ZTUvPDUseb:T5ByirwmeM7C3EadoHv0CL2xUvPDUHb
MD5:	7D1F7A68BBA0343E60D3E09D1A25984E
SHA1:	4DD74B6125091A60A654D33EFC55E5BA506483D7
SHA-256:	58298614CFB80CBF10EFDA8FF705590683D0B633812E3ED725B6353066C1EAC1
SHA-512:	4C26FD17F60AA13581DBCAFB03D17AAC62CD32738E692C6C28A3CF28211B9217456CF506DA20DE42EB48D952B7DF8B23EA42F69266C67A91EC8F406A62C1E2F1
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/tabs-consulting.gif
Preview:	GIF89a.........FEE[..........{yz....mlm\YZ...LJKRPQNMMPNO\Z\655vvv...ONNTRSMLLfdejijRPR\\\...T..!!!&%%...LKLZXZ211))K..===^]^_^^.--JHIA>?...TTTDAB......9.....`^_......LLL[VX^\\...[ZZ...rqqJGH...IGH...E........XTW878NNNa_`VSUomn:88YXX...QOP...HFGDBC@.....888;8:......766......dbcBABecdOMNWVVPPPlklqop...CBB``aHHHb`aSQRljj...JJJBAA...\XY@??...A@@bbb......gffSRRMKL...ywx...;::wwwb_`....._...........ZZZ=::434...322J.....,.....igh=;<0/0/..8..'&&+*........OMO][\,+,.......}~P..(''$##......#"#IHI . ]]]WVURQQ...++WUVYWXVTUZXYXVW[XYUSTYWWWTVWTUYWYTRTURSVTT[YZZXXUSUYVWWUWWUUXWWXVVZYZXVXWTWYVXTSSWTTVTVXWX............[XXVSV........VUU...KIJNKNVUV...SPQOMMVSSuttTQTSRTXWV......PMP..............323UUU878QPQ...........ooosrr......ZWX_VVXUV[TU`__ggg:99]\\UTTa``^[[^]]0//^^^......!.......,................ .....Z.....7I.8...(.8h......=r.r....(..9.R.K.'.......b<..d"O@W..J...H.]...P.6.d..X.j....`..K...h.]...p..[v.A....:..._..%..Q..a.&9X.b....)i...e...5...0..xg. Y....}...;.....[

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 120x106, components 3
Category:	dropped
Size (bytes):	6153
Entropy (8bit):	7.860048726650172
Encrypted:	false
SSDEEP:	96:ZEauLzV2bSrX8IiYbn7QXe812EnyThrr96HGksxhhLV/zfANxOjTwMiKBk:ZkzVhX/Hbn7QXfdnydrOGlhhL9fP5e
MD5:	501A57F87EC638C96B979BCF5A70286C
SHA1:	D423B1934FB927CF41A4C3F1E1FE985AFE8E7824
SHA-256:	9513A7E41811AC82BFCB0F47EE267DB26B60841EC30D9A7BF65C23451BD4D205
SHA-512:	80523F7A57092EF74B2FA48EEE9D8616D469BBE904E03A745D78F1EE1FDF6DB9B0DA4470676FAEC20622C4F60EB6DD04251D8AF74247DC169EB2B6FD1FE999D0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................j.x.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..M..EG(..z.....\..[..ji.x..a.K;?.\7.....b.q..-qG(..ExU...C.R.......K.%$.....)J..r9.o.F.....f.ay?.R..W.Z..icy._X..v.Z.Ic.....>....x...~$x...Q[Ec...g.-.ce....j.T...eL.z..Z.?.=...4..^.....[...^..p..u.4.W.......5..+.:Cqp...k#..].....i..gK...5[]>..{\J.y.5.^...-\|[...:}..g..7V..H.4#.;v..1..E.R.\....QYz.4...5..}m.....u*........C.Tnt.V.Q......V+.\T.r..7(.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 408x484, components 3
Category:	downloaded
Size (bytes):	71044
Entropy (8bit):	7.8805777282885545
Encrypted:	false
SSDEEP:	1536:nnMmfkGlusHbgcmAycWghZU/l0CRCc0ViOwjTBK7Hxhe2JkPNq:nMSVHmA2KMljxldiheGGNq
MD5:	419E97667D8FF1D3119DFBAE9E326B7D
SHA1:	E0B6C71AFE2A61CDECEAD842DFDBF92C447622E7
SHA-256:	0791A87B21A01E9754036BBE98708C1AA0346873600FDC8292D2A942D0D880A5
SHA-512:	F60956B5205D5A0FADA9DAC5FA3EC3CD499BF6AF94E19A2B0B41765129AE6545CEFB94523E4943DC73155BED9F1420BE0DC9D790B2AFA82F809528CA6351C2B0
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/oracle_scripts2.jpg
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..._._....Jt.!.m...".P.....-w.%...v..R6..S\|.Z.9...z..-....x.........k......y..../.o.....O].Q...s.j..j._.........A....^....z.....D<9.y.t..F..^+;...a.H.e....@.m)..D..S.,RWt.b...S7..g..\|..7NI.I.....t.X...z/..LB...F.y..O.......x9.[$...4W......:.......i..J.-.r.).'Um.....]C.....u.?V..b.7C..2.....6.k..I.V*+.g......R4....G.Z~'.Q^I....#.......u.M.....[.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 110x30, components 3
Category:	downloaded
Size (bytes):	3597
Entropy (8bit):	7.093506260412357
Encrypted:	false
SSDEEP:	48:lldi2KbkngvjEoENkUI5KSTyxJwGMQF1MQctYHaVPL7UL3ggX/W0BWvpAugh:/QBh7lEXSTSwGM+1MHt9VEL3gC/WIugh
MD5:	4455B7D929CF67774799FABFCF6B2191
SHA1:	E9CC902D1736BC9612C8B15C7EA107A7498924F1
SHA-256:	A47519CF4AEBE8055F4A23D4942602CB14C0B0F91239EDE9D7C5F124BD64F1DE
SHA-512:	137FFA39AFD63CCB67105DDB3F93DB559CE955B1ED7D0F8CE8E209084D5AA3F087C4B15A388AA513620B201A4C099FD41350E66B07552579494BCF5DB024490A
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/toc3_About_Us.jpg
Preview:	......JFIF.....H.H....."Photoshop 3.0.8BIM.........H.......H......8BIM...........x8BIM............8BIM..................8BIM..........8BIM'.................8BIM.......H./ff...lff........./ff...............2.....Z...........5.....-..........8BIM.......p................................................................................................................8BIM..........8BIM............8BIM...............@...@....8BIM............8BIM.......u...................n.....U.n.t.i.t.l.e.d.-.2...................................n......................................8BIM..........8BIM............8BIM.......8.......n.......L..&...............JFIF.....H.H......Adobe.d...................................................................................................................................................n.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'.............

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 120x106, components 3
Category:	downloaded
Size (bytes):	6153
Entropy (8bit):	7.860048726650172
Encrypted:	false
SSDEEP:	96:ZEauLzV2bSrX8IiYbn7QXe812EnyThrr96HGksxhhLV/zfANxOjTwMiKBk:ZkzVhX/Hbn7QXfdnydrOGlhhL9fP5e
MD5:	501A57F87EC638C96B979BCF5A70286C
SHA1:	D423B1934FB927CF41A4C3F1E1FE985AFE8E7824
SHA-256:	9513A7E41811AC82BFCB0F47EE267DB26B60841EC30D9A7BF65C23451BD4D205
SHA-512:	80523F7A57092EF74B2FA48EEE9D8616D469BBE904E03A745D78F1EE1FDF6DB9B0DA4470676FAEC20622C4F60EB6DD04251D8AF74247DC169EB2B6FD1FE999D0
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/health_check_ad23.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................j.x.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..M..EG(..z.....\..[..ji.x..a.K;?.\7.....b.q..-qG(..ExU...C.R.......K.%$.....)J..r9.o.F.....f.ay?.R..W.Z..icy._X..v.Z.Ic.....>....x...~$x...Q[Ec...g.-.ce....j.T...eL.z..Z.?.=...4..^.....[...^..p..u.4.W.......5..+.:Cqp...k#..].....i..gK...5[]>..{\J.y.5.^...-\|[...:}..g..7V..H.4#.;v..1..E.R.\....QYz.4...5..}m.....u*........C.Tnt.V.Q......V+.\T.r..7(.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop Elements 7.0 Windows, datetime=2014:05:30 09:24:55], baseline, precision 8, 120x352, components 3
Category:	dropped
Size (bytes):	46864
Entropy (8bit):	7.730854957445688
Encrypted:	false
SSDEEP:	768:nVelUH3zmlI5AH9GEH6Yyo3p4HNbI8+ximKXJjkSeQieatcz1JGMLBgUDrXwjCFD:nVelUH36+KdGu683p4tIA39xTaISyBgc
MD5:	15AC942FE031EECA738D2C3212DDD81A
SHA1:	E352F422D214BC491775441ED14B718ACDD513E7
SHA-256:	0AE0CB07FD7A4AF4D16902D303837C3A65B6F5121793556218737E324BAC440D
SHA-512:	18F6A61B872636C4BD01A783DB6A9FBBE06190824BEA26E297E0B60ACB529E91E68006EB1EECBE8011FB40D4FF18A2C328941C49E38B1B6BEC860647B5941324
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....hExif..MM..............................b...........j.(...........1.....%...r.2...........i....................'.......'.Adobe Photoshop Elements 7.0 Windows..2014:05:30 09:24:55..........................x...........................................&.............(.....................6...........).......H.......H.........C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......x.(..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....MCN.gI.d.u![.1.3J...n..`.^G5ro..0J..s.&.6f....;.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 120x104, components 3
Category:	downloaded
Size (bytes):	6113
Entropy (8bit):	7.881945224610354
Encrypted:	false
SSDEEP:	96:TEh0271yUIH3PuRFJlsX+9IlYLvTfENMVX/wCf4R68eAXErMQ0pmHz2s96:T8oUIWzUcvTEN2X/wmp8nk+pmT2/
MD5:	ADF372C172DB51F611BE6674A816510C
SHA1:	5D690E6707E6344BD98C83F2BA53880D173CB347
SHA-256:	85F27063DD0A362F5ACD57D19377D152EA58D13E4DF9C1E13708664B68154093
SHA-512:	23C5876A2AFA864A3F18B5AA158C5E0431D38823CBCBC8B0812ECF1A3DF6514886D9DB8A5AFBA2B357C0F75BDCB5CF4A4A2A077CB86B1180674A7996F709AA41
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/training_ad23.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................h.x.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..\|;.f........\|E.GT.b..Q..K>.......cq..>.y....\|F.h<#.i....(..d...v..C.E.Ue.......\|M.Y.o................6Mm7.r..2N....ES.C.......M...h."...!..@....!.#..-....).#2....~b..k..0.h.Q'*.R.M....y..o.F...".l..^r.5.+\.....K.4.....`.....vZ.....v...mj.....d.....^....ir....Ro...4.;..........+.._.\|=...5.7O..<.}..pl.HV...B.<J. I....r.}jO.~....-.....N.&.....KF.W.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 189 x 100
Category:	downloaded
Size (bytes):	6725
Entropy (8bit):	7.860292918682445
Encrypted:	false
SSDEEP:	192:e/adoDXj8t30U1I+ZpWKtRrJKRH+7kSeEK:e/aiDXc0oBZpTlKRH+deEK
MD5:	9E7D96446827CBD84BF4F26B2DDC946C
SHA1:	5DD94C78F6B6F82344D3760374C02056342991F1
SHA-256:	32599D8F5F3237DD4FEB251C2733CCDC3472DF6DD6E36FE66A0C0F40D901FB0B
SHA-512:	8BC17F0060415CDEA8262C2E3D91F121F6E856385F975668D19582D3571D0D9BA78E9A2DB812A02CF424AC54B66C223F067AA931AD461C4C6EE37A96106C54D9
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/phone-6342.gif
Preview:	GIF89a..d.p..,......d........LHHFFFEEE@@@===???;;;999777GAA...y``BBBn\[TGGJJJIIIMMMCAANNNQQQSSSTTTWWWYYYZZZ\\\___~~~...jjj...ttt......fff...mmmxxxaaa..................bbb..........ddd......333....................................................................................~..m..c..\..X..V..W..U..T..Y..p.......................~..~..\|..{..z..x..x..w..v..u..u..u..s..q..............r..d..S.....~..\|..{..y........a..n...........k...........f..Q..R..j..l.._..Z..g..n..t..m..b..N..]..`..l.....j..L..i..K..h..`.....g..b..g..e..I..^..h..e......JJ...a...GH{GGU...IIe..c.....zzz###......iiiGGG...............444...c..a..`.._..]..^..\..[..Z..Y..Y..W..W........U..U.....S.....Z..R..Q..Q..O..M..M..K..X..G..I......11G......IIK......................................................................@.`...."\..!..#B.(."..3b.X1GB..=..I..I.......A..._.I...8s...g..a.\8.(.).M.#...2c..J...Xg$.........4...h.].V.P.^.......ge..k./..{.......~.+..x1...G...m.b3c........".MZ4.....M:.i.W.V=.5k.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 600x450, components 3
Category:	dropped
Size (bytes):	61774
Entropy (8bit):	7.974004540514355
Encrypted:	false
SSDEEP:	1536:ISVIkEsGpqf6uxAAGqxMP4dRc9YTdMEJgCcBMFnw6KHLe:ISVI9ISoxe98dz+CcB0nkq
MD5:	3C15946295A2BC57952773BA2E0A46B7
SHA1:	BCEA59BE24E0D4A1FD80306D0F058918E51275A3
SHA-256:	EDCC4215FCC2E9EB3FB4946D6CC176899F15803D9FBCF404CEAE4F0F76778842
SHA-512:	CB9554EDE765787299846AC55F5CC070C8085F9953507718A7E648A15DC3E706B425B55E16B4CDAC23FFC7E246A275BA9D75E35F44131D9D41827D69DB914C28
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d.....WDucky.......P...B..... . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ......Adobe.d...................................................................................................................................................X............................................................................................!..1.A"..Qaq2....BR#..br.3.....CS..cs..$4..T%5......'........................!1A..Q.aq......"2..R..Bbr..#3C...S...$D.............?..W.cL^.m..z....T...l.%...j.X.G..".V.@b....@.d.J)....J~U\|..u..sV.....'....../9"(^]..\|..[...@R..k...M...G..g.........cmy/....LsJ...5.b:.X.........Z.^e&.9.r...+....{e.ft..c..3n3%.s.,$.kKhS...V4I#....v.O..Ig-......2{...8/.d....G.}...[........x......jO...g./.[..M`.W.)Q......}.....sl0...g...@.......l(.Kd[..r.}.#`.\|..x-Q...e,X....;..{\|...5..9.'...U.+...oj...\|*.,. Y....(...n.7....$.9#`..d.z.....E?D<...e."....E7.66.=A.\....Y.....b+Ul....{,~.....OT../.'.....$.6v.T6........V..Y....

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 98x109, components 3
Category:	dropped
Size (bytes):	6793
Entropy (8bit):	7.507005634272258
Encrypted:	false
SSDEEP:	96:yQYQ7DshzrkcupKxpsN9pg+FIoKbPTj1MHt9Vsss7tTyxkDQ/0RvPax8EYXQ0iaA:CVup6ipHFIoMTit6tGxkDc0xVEYXpiH
MD5:	893EC7CCB147B33410925942EEEF23D3
SHA1:	04182A220974FF51726887F0D5EA12994DC98DEF
SHA-256:	867BC29C39E9C54C749E240B821738E440293BDEA453EF288FE76F1DD0174404
SHA-512:	87834C265C60199B502C43D49D82F6D598A0FC3DBA3EA1C6527CF18655586553BE6F751D795E7072B4662CAC05BEF2EAE6D010BCBBDF1CE36339AF1E9998A816
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Photoshop 3.0.8BIM.........H.......H......8BIM...........x8BIM............8BIM..................8BIM..........8BIM'.................8BIM.......H./ff...lff........./ff...............2.....Z...........5.....-..........8BIM.......p................................................................................................................8BIM..........8BIM..........8BIM...............@...@....8BIM............8BIM.......u...............m...b.....U.n.t.i.t.l.e.d.-.1...................................b...m..................................8BIM..........8BIM............8BIM...............b...m...(..~...............JFIF.....H.H......Adobe.d.................................................................................................................................................m.b.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 120 x 90
Category:	dropped
Size (bytes):	7548
Entropy (8bit):	7.810861707224019
Encrypted:	false
SSDEEP:	192:vRD3dQxeXsW3LkKpAkh1uxLu5U2wSddXUjP7W6C1:9tQP2Wk/GLu5UudV+e
MD5:	D1C77FBE8F5EEF9DE2AAC446A1A68E96
SHA1:	BB4128E6FA02B357E3829C11A4E434E0B2D9FE3B
SHA-256:	5809753AB7520B4F8010FA0F4FD40B4D7A7FC5E24A4D4E025DE48080002FD1B2
SHA-512:	16AF10CC1209E2E1D2A1712A3AB0BD62E61B73FD5662CF00F84F45468D1B33B03E096CA63C50B9D084D98ED97DC773C15CA148DD0BD36E272776B4BAC2A88126
Malicious:	false
Reputation:	low
Preview:	GIF89ax.Z...............................................................>..D.-X.....H..D.!R..F..O..L..J..K.&Q89;....... ]..T'?i4Kt.'d.%`..O.!R.'`.c.'Z.5e..............p.i.$Y.#U.,d..d.-].:o?[.Tj.ew.\|.......`bekmpfhk.....................+e.5z.)^.)].'\.1n.)].([.3r.2o.1k.5t.8x.P..3l.>..H.#T.-P.9c.Tv.e..o.............0j./h.-c.,a.+`.^..e..d.-b.-a.+_.?..H../b.E..P..C..I..U.>k................................. .......02......EGIQSUKMOVXZ........rtv.................................................................),.Z]_x{}.........$&'356>@A.......................................................................................................................................................................................................................................!.......,....x.Z........H......".......G....u...\|.:..Io......X..K..!K......z!C.l..@...G...H..7.iSz...sJ.j..R.-..g.f...e..&MH"..$..&#"...Z.T...X...R.J.I..]ZUW>.....U.Og.z)....^"2.)B.....DB...1d\}-.UjY._{

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	4.223006079439934
Encrypted:	false
SSDEEP:	12:2+DRa6Glyc2Iq0AOJRGtmDLQaAfaj0RYJ7DayzNUKYxT0wnVxEy6qaAfc9So70pR:VRCH2d0jRlQcj0RYJHaB5gwVWyHaSo7S
MD5:	81D9420FD4BB8D169BA13FD15A240B64
SHA1:	23D86F1572D5CABFAC0D3E13B53A2D2341BBFB6C
SHA-256:	4AE2F24ED6A9B7E5D519F460F1729B8F713BB363804B01D363FE5E7F1CB050B9
SHA-512:	E551042DBAD6EBD751B08F350AEBCD847EA1A4C40F4C90CDC5E86DD8A8B27A0809F7FF9BF2993A0241B1F400F3D3EEF2D175A8B4DF01088DB19732E3CCB833A2
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/favicon.ico
Preview:	............ .h.......(....... ..... ..........................................................................................................................................................................................................................~d..............y...........z..]=...............................q..........................x]...................................p.................kP..nW.......................................p...............m..[:...........................................h.........}...g...x.........................................d.......w..fF............................................q...........}...................................................p..............k......zc.......................................q...............~.........`A.................................i..........}c..................y[...x............................................................................................................................

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=287, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=603], baseline, precision 8, 603x287, components 3
Category:	downloaded
Size (bytes):	53014
Entropy (8bit):	7.689298913287419
Encrypted:	false
SSDEEP:	1536:f474o9PPbfS444444IQnDL1Xz0XQukV4C:ePaPmXvkh
MD5:	8049697933F84A71DAE25A0C712F38A6
SHA1:	04AB7BBFF20BB8DBE361A7E3123F8E766FCEB897
SHA-256:	91E0D89A69582BEBFB7E87ED419A7577F87635D104D10060BC86FED871018FCC
SHA-512:	71D4BF2118EB78FC1326DF5C0AA7A117EA9ED83C8F76FC2FAB8F1F93A8BC0AF77078ED88149C60135001506BCCB3970F7404BA2C3A2A90581E0BAD410B7FFC01
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/oracle_scripts1_a.jpg
Preview:	.....2Exif..MM.*...............[.......................................................................................(...........1.....".....2..........i.............$............'.......'.Adobe Photoshop CC 2014 (Windows).2018:03:15 14:50:45.............0221.......................[...........................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................L...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..'....J.<....]`..k.KI.....}.X..P.....R..f....INfoY.........c..W.M..F.h

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2009:08:07 14:36:47], baseline, precision 8, 144x14, components 3
Category:	downloaded
Size (bytes):	20552
Entropy (8bit):	7.042681454525505
Encrypted:	false
SSDEEP:	384:oSnpETDqnpETDNc3nWGOtIsBshzm79PoqLAtLRfLRTYNg70f0KOXNCD:ogpfpDWGJGe6pP3WV9YyNgD
MD5:	FC0AF62CD1861395818FBDBFC569C7D1
SHA1:	C0E448082AC9DFE163D12B7097FF4AC15E628213
SHA-256:	5F7AF77D7ACD930B98B0A422E5BC6EE8246B91BB1A5CAD4F6C8CBA10A2547E92
SHA-512:	5F6B625B7D184D6231DD5594A251BA8E7CB06D7B29B934E273DC1FBD5DE943B9640F21A77FA0AFE3D594722C8ACE8EDA71DCA2CA3EC2F566C2432A9A21182569
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/email_address.jpg
Preview:	......JFIF.....H.H.....WExif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS4 Windows.2009:08:07 14:36:47....................................................................................&.(.................................!.......H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?......]:.N.2i.}....s.......~.......l>.....u....1.....k.........&..j.nk..k2.`..p......._.w.....U..8._.;.8.c....e;mg

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 171 x 47
Category:	dropped
Size (bytes):	2782
Entropy (8bit):	7.829846371844712
Encrypted:	false
SSDEEP:	48:e5yDmFUu8XAtJ3OEuxKyBoX3yYyTkOq68tsFAIbuXK/SV7jxw/TQzI2:eEPBAz3NuKyBSyTi68sF96K/S1jS/szn
MD5:	E3398ECE0749C44B1683733973D7AB12
SHA1:	3185A9AE39B023121142828FB02AB39D945BE400
SHA-256:	BE39621A6BF4833F4CA434C4301D6EBE8871DCAF409B403D8DDCDC8D05F414B7
SHA-512:	4745A714ACE1B7F33283ED18636CEC53684518699CF85A66B659ACBBD66694F90008FB72D548BA23E840AA18297BFA63B8A311A6B432B48AE975CA11D2C4BBFF
Malicious:	false
Reputation:	low
Preview:	GIF89a../...........L.{...............j'....g..q.............}. .......@.o...........0..o......A...d...@Xu. .D\|.....6..R.............I........d!.....x.._ ......0Nz..D.....1...[,..@...:..M`.. D~.npvhPbq....L......@U.vst@@@p..?;<......````ll............@s.000..d......[..1-...VLIJ`q.ZWXPPP.RhPc....6..........P......s......................... 8w.5O.....0.....P..0G....P.....hef..X......<......X.&Lp......_...\|..........t.........vs.#. ..)......................ppp.....,......e.......o& ........g(.pv..........................2c.....p..H/!J..XNJ..0. 8...S..x....C\_...Ax.y...)..#.......%.....t.P........&C.U..3..b.._.........L....JQ....F..S@.......}q..........N~.+Y.....)..".....@...G.}l..`q [..<o99k`..p..........?....:.v%......80..U4b...!.......,....../.......$X..A....d...C..%N.X..E..5n......!E.$Y..I.)U..p....1!fQ...M.9s.".g.5Et.%Z4g.5?..$b..S.$.,.I%.U.EaR..1.W..p..4.Y.#.......q{.Q.3F\! ..H.r,[.Y...[.DN.......eO...FeL!q..:<......Txh..r.(.*........

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2014 (Windows), datetime=2016:05:11 17:22:35], baseline, precision 8, 120x59, components 3
Category:	downloaded
Size (bytes):	19939
Entropy (8bit):	7.115246676686121
Encrypted:	false
SSDEEP:	384:zE8gjx/J7iIE8gjx/znwHDxhYNg7e+NUjoLF/ki87:zSxR79SxLwjPYyvUkVg7
MD5:	59C99C9A0AF5B057D92B7E5BF8A5F9E0
SHA1:	40CD376C9F762F337803243C2FDEC61AE0CB6ACC
SHA-256:	317111232A38273D07FC60CDA4FDC47E3C5BF818228BCDF8E82971A983DC2C59
SHA-512:	BD9E5EDCB3307834FA2DBA7E369FE476A7D9909847502E4AF8337F4CC26096F73AF1E2B5F61FA96DE590032018A30037810C95C38D463487C11D41A6F7EA3385
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/twitter.jpg
Preview:	.....1Exif..MM..............................b...........j.(...........1....."...r.2...........i....................'.......'.Adobe Photoshop CC 2014 (Windows).2016:05:11 17:22:35..........................x...........;..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................;.x.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..j...l.......R....F.....U....g.HQ....;~.mq...~..S.....?.o.%......7..:.....s....h....Z..m.m.;.......RB.:......r^._...c..:t.....?.o.%......7...IL}:..

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 110x30, components 3
Category:	dropped
Size (bytes):	2370
Entropy (8bit):	7.726205755819434
Encrypted:	false
SSDEEP:	48:KiwBKTzm3QhDQ+u1FvWPB7fq4BxCAa24VNi7Su+Ra:qiz5hDQJ3+FqmCAAW7YRa
MD5:	09073B9EADF3E27D18AC71CE1229E020
SHA1:	AEFE2DED41F8B00F946598134C9EA73AC621FBEB
SHA-256:	B313F850871FC10C0D63309495BA917DFB46E1DA3E724F04FA8134A97AA8AC71
SHA-512:	689253DDF00550BACB26B0810FE7D7A65EDDF06DCD269D18A84C836B872727C1DFF185217582C450E6BDD1F23DCB825B901B7BBED9C9C9AE6FC9D1FB1B61D757
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......P......Adobe.d...................................................................................................................................................n..........................................................................................."...!.2.1a.........................!1.AQa"....q...2.BR...b.#3S............?....).).).).).).).).).).).).)....4...Z.Z3\.{...8y..NH....i.l&...l.q>CM.....K..W...'.......F..>\y.\.\|,V....PL.4%......O.v....r...C.5.1.N.K...).....s.DvTw...^.!..~..W.<..39..N.~.5>>7....*.,..`..C...V.zD..A..9..\|s\..-...0..,..I.R.(.83.^...e..1..W....J..]._....:....U{....r...A&..X...c...../L.G.?l....5.GJ.8.19...&..Z.g+.e,...a.../....t..>0....Qm..w.a...@O.L......_n......J..}......v.8=U...c.n.v.U..Ht2.G.I.Yw.ID.....J..i.o..`2...11..^.....!.\|e[#.X.q.....^..m.B.M]..kf.......nc...6cka..R.hvi...-K...~.N..?.yg.wg.c.:..=K..x.3c...q..0[n._....Q-g.3...d..u.....t...G0.....>7n..~.......;.s...V.K...;e...V......5..

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 98x109, components 3
Category:	downloaded
Size (bytes):	6793
Entropy (8bit):	7.507005634272258
Encrypted:	false
SSDEEP:	96:yQYQ7DshzrkcupKxpsN9pg+FIoKbPTj1MHt9Vsss7tTyxkDQ/0RvPax8EYXQ0iaA:CVup6ipHFIoMTit6tGxkDc0xVEYXpiH
MD5:	893EC7CCB147B33410925942EEEF23D3
SHA1:	04182A220974FF51726887F0D5EA12994DC98DEF
SHA-256:	867BC29C39E9C54C749E240B821738E440293BDEA453EF288FE76F1DD0174404
SHA-512:	87834C265C60199B502C43D49D82F6D598A0FC3DBA3EA1C6527CF18655586553BE6F751D795E7072B4662CAC05BEF2EAE6D010BCBBDF1CE36339AF1E9998A816
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/BC_logo_98.jpg
Preview:	......JFIF.....H.H......Photoshop 3.0.8BIM.........H.......H......8BIM...........x8BIM............8BIM..................8BIM..........8BIM'.................8BIM.......H./ff...lff........./ff...............2.....Z...........5.....-..........8BIM.......p................................................................................................................8BIM..........8BIM..........8BIM...............@...@....8BIM............8BIM.......u...............m...b.....U.n.t.i.t.l.e.d.-.1...................................b...m..................................8BIM..........8BIM............8BIM...............b...m...(..~...............JFIF.....H.H......Adobe.d.................................................................................................................................................m.b.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 600x450, components 3
Category:	downloaded
Size (bytes):	61774
Entropy (8bit):	7.974004540514355
Encrypted:	false
SSDEEP:	1536:ISVIkEsGpqf6uxAAGqxMP4dRc9YTdMEJgCcBMFnw6KHLe:ISVI9ISoxe98dz+CcB0nkq
MD5:	3C15946295A2BC57952773BA2E0A46B7
SHA1:	BCEA59BE24E0D4A1FD80306D0F058918E51275A3
SHA-256:	EDCC4215FCC2E9EB3FB4946D6CC176899F15803D9FBCF404CEAE4F0F76778842
SHA-512:	CB9554EDE765787299846AC55F5CC070C8085F9953507718A7E648A15DC3E706B425B55E16B4CDAC23FFC7E246A275BA9D75E35F44131D9D41827D69DB914C28
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/americanflagpicture.jpg
Preview:	......JFIF.....d.d.....WDucky.......P...B..... . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ......Adobe.d...................................................................................................................................................X............................................................................................!..1.A"..Qaq2....BR#..br.3.....CS..cs..$4..T%5......'........................!1A..Q.aq......"2..R..Bbr..#3C...S...$D.............?..W.cL^.m..z....T...l.%...j.X.G..".V.@b....@.d.J)....J~U\|..u..sV.....'....../9"(^]..\|..[...@R..k...M...G..g.........cmy/....LsJ...5.b:.X.........Z.^e&.9.r...+....{e.ft..c..3n3%.s.,$.kKhS...V4I#....v.O..Ig-......2{...8/.d....G.}...[........x......jO...g./.[..M`.W.)Q......}.....sl0...g...@.......l(.Kd[..r.}.#`.\|..x-Q...e,X....;..{\|...5..9.'...U.+...oj...\|*.,. Y....(...n.7....$.9#`..d.z.....E?D<...e."....E7.66.=A.\....Y.....b+Ul....{,~.....OT../.'.....$.6v.T6........V..Y....

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 171 x 47
Category:	downloaded
Size (bytes):	2782
Entropy (8bit):	7.829846371844712
Encrypted:	false
SSDEEP:	48:e5yDmFUu8XAtJ3OEuxKyBoX3yYyTkOq68tsFAIbuXK/SV7jxw/TQzI2:eEPBAz3NuKyBSyTi68sF96K/S1jS/szn
MD5:	E3398ECE0749C44B1683733973D7AB12
SHA1:	3185A9AE39B023121142828FB02AB39D945BE400
SHA-256:	BE39621A6BF4833F4CA434C4301D6EBE8871DCAF409B403D8DDCDC8D05F414B7
SHA-512:	4745A714ACE1B7F33283ED18636CEC53684518699CF85A66B659ACBBD66694F90008FB72D548BA23E840AA18297BFA63B8A311A6B432B48AE975CA11D2C4BBFF
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/en_US/i/btn/btn_buynowCC_LG.gif
Preview:	GIF89a../...........L.{...............j'....g..q.............}. .......@.o...........0..o......A...d...@Xu. .D\|.....6..R.............I........d!.....x.._ ......0Nz..D.....1...[,..@...:..M`.. D~.npvhPbq....L......@U.vst@@@p..?;<......````ll............@s.000..d......[..1-...VLIJ`q.ZWXPPP.RhPc....6..........P......s......................... 8w.5O.....0.....P..0G....P.....hef..X......<......X.&Lp......_...\|..........t.........vs.#. ..)......................ppp.....,......e.......o& ........g(.pv..........................2c.....p..H/!J..XNJ..0. 8...S..x....C\_...Ax.y...)..#.......%.....t.P........&C.U..3..b.._.........L....JQ....F..S@.......}q..........N~.+Y.....)..".....@...G.}l..`q [..<o99k`..p..........?....:.v%......80..U4b...!.......,....../.......$X..A....d...C..%N.X..E..5n......!E.$Y..I.)U..p....1!fQ...M.9s.".g.5Et.%Z4g.5?..$b..S.$.,.I%.U.EaR..1.W..p..4.Y.#.......q{.Q.3F\! ..H.r,[.Y...[.DN.......eO...FeL!q..:<......Txh..r.(.*........

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 110x30, components 3
Category:	downloaded
Size (bytes):	1844
Entropy (8bit):	7.60775400755147
Encrypted:	false
SSDEEP:	48:KiASLpo7XBTYS2zWYDxUnzB69QROqwAGPkk:/twuzWKe+QROaGv
MD5:	3D880370EF2990298FCE861B9AA1B483
SHA1:	B24A8B5C34F3C7F2CD2CBF20BC2C26CDFEFB5FD9
SHA-256:	E6924E2E2C64F55250FA3DDA8A21CFD116BF94DE580727F338F60E78ACD1FA96
SHA-512:	C238BFD303F6F0385E6C2D1DEB234D2EB0A93D50A87C183CAE76E7BA40BC5ADE4BBB37E7335B08973495B87CF5E53CF397D19ABC9776F51AFDAACD2844EB34D6
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/toc1_Services.jpg
Preview:	......JFIF.....d.d......Ducky.......P......Adobe.d...................................................................................................................................................n............................................................................................!."1A.2#........................!.1A".Qaq....2.B...R.#............?.......F"1...Db#....F"1........._R....$rr.x..u.H..I...g2f`.@...D.....?...^..."......s..3!...F..{.)D.t.T.)+}...,W..L.eSm.X.N.dih7..].#L.!.c.Q.nG..n.......n..]F..\F..1=.?.q..QL{.m.`Z..]...z.+.h*....Y..;.].V...?.3p.<D..?3Bxx.C.p`.U..<v...C..:...#C...yW..c...1.3.....n.z....=&G....[.......okk....T.JR...K..2.5U.m..(.`~Dx.w..g+..2.z.?mD..>=g.........?...4..0djs...{.vr.C.'.0aV.W./.V.}..X.y.XS...+..T.P.x0......s...-...$....S.j.%.-.Z....9~ ...2J.5...F....Sgkl...U...%"\...S.;".].&).dP..S..m.E......N^f..E.g.`..K.q...p0.cF.l.6...\|D..>..........f...9..,a.E....x...'..D<...?.y.2;.L.v.T..Eu5...n..o`....M.^..EP.I.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=287, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=603], baseline, precision 8, 603x287, components 3
Category:	dropped
Size (bytes):	53014
Entropy (8bit):	7.689298913287419
Encrypted:	false
SSDEEP:	1536:f474o9PPbfS444444IQnDL1Xz0XQukV4C:ePaPmXvkh
MD5:	8049697933F84A71DAE25A0C712F38A6
SHA1:	04AB7BBFF20BB8DBE361A7E3123F8E766FCEB897
SHA-256:	91E0D89A69582BEBFB7E87ED419A7577F87635D104D10060BC86FED871018FCC
SHA-512:	71D4BF2118EB78FC1326DF5C0AA7A117EA9ED83C8F76FC2FAB8F1F93A8BC0AF77078ED88149C60135001506BCCB3970F7404BA2C3A2A90581E0BAD410B7FFC01
Malicious:	false
Reputation:	low
Preview:	.....2Exif..MM.*...............[.......................................................................................(...........1.....".....2..........i.............$............'.......'.Adobe Photoshop CC 2014 (Windows).2018:03:15 14:50:45.............0221.......................[...........................................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................L...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..'....J.<....]`..k.KI.....}.X..P.....R..f....INfoY.........c..W.M..F.h

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 120 x 90
Category:	dropped
Size (bytes):	9558
Entropy (8bit):	7.706505743460367
Encrypted:	false
SSDEEP:	192:aLZaz2RCcA856dgKcNwifbxCSOfVpet2VW3hBkej:aliu56dMNJQVIIVY7
MD5:	32D186E4F57787C227413A1AD416688A
SHA1:	6C06E37DD239A66B8DA487A1BFE0F3AC6E5CFBC3
SHA-256:	C65C2F35415F597E4B5B0C1E6855F683D07B8EB97BF3CC3744A1BE8F1FFE40FC
SHA-512:	F6536DC4963C1E297D50A98064B8FE49AACB2CEA5FD1A4C1345CC3942B9750251B56FD0355982B156AACF72A4F03C0D597A60E135A214535B7B93F076386103B
Malicious:	false
Reputation:	low
Preview:	GIF89ax.Z..........~..}..\|..{..x.................\|..{..w..s..q..c..Z..X..I........y..n..W.....Q.....z..L..G..[.....m........~..v..W..."#B...34k&'r,-.DE.CE.DE.CE.DE.fg.wx.vw.xy......~..y..s..T..R..N..~..w..V..L..N..J..X..T..O..?...DHo57.wy.wy.......Q..U.....................................................................qqp...hdc...}{..............U..P..M..O..J..U..R..S...FC.xv...............................~..z..y..x..w..u..t..s..q..o..m..i..[..Y..W..V..T..R..P..O..L........}..\|..u..r..f.._..Z..X..S..L..B..~..}..x..v..t..s..9..V..}..P..N..S..U..Q..L.....X..\|..w..d..[..U..P..H..p..P..."".""t*v22m...CC.DC.DC.98.EEv88.UUx??.EE.LL.ff.UU.wv._^.xw.kk...xx..................XLL.....................................................$$$..................!.......,....x.Z........o.....\....#Jl./.>..3j.... C..Ird..%S.\....c.I3#.8s..xS...@.....H=.M.....`....(-..n..sK.U.N..k.TAQ......d..k.-.^..k.g.1q.H.IVm.(..xX..c...,....<.<.Z.XH. .n.....N{6x.X...

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 100
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.716214253900369
Encrypted:	false
SSDEEP:	3:Cx7ChglBtTVdiTXQAGUen:A7DlnVdi05Hn
MD5:	3062D6D3728989330C72B7DC857968A9
SHA1:	C3CFF20D24EF4D3A484890C375BCEC3DBC52BB96
SHA-256:	95D0B91AE52F2BF0F8975495AA500243D7125BAC5AF0BD892D9B7A0A1EF5F0DD
SHA-512:	CABA94DAB7A5B9E092214EA37CDDB18C4AE7943588E821E74CC160CC160B1D293C28FA8FDF9E55A5D00DD5AB6EB8AB2E29D5A9B862B6A994020EFF4875E96860
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/header-new-1px.gif
Preview:	GIF89a..d................,......d.......x..`H.Mz+.j..0....Q..;

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 110x30, components 3
Category:	dropped
Size (bytes):	1861
Entropy (8bit):	7.656842473403293
Encrypted:	false
SSDEEP:	48:Ki3GBcyN3nICIpzSfJfSHKLcScE51CGCx:tQNXICV0HkfH51CGCx
MD5:	777D1C34DDA9A272118FB67A2E19F635
SHA1:	C21AF92852CC758A1A58390B0C42B569BB9F401B
SHA-256:	2E9776C20C0D9CDAAA746A7086BEE55122B1E07B7870182D732783E73C0D061C
SHA-512:	1B2815345C30191BEF9FC8D97DA553B641B49650241EBFBBE470CA8F207C8D976C26F3405B03E7152111C1F8961B3CBEB424FF0F01E56F3133B69A9679A32A14
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......P......Adobe.d...................................................................................................................................................n.........................................................................................!1"...2A........................!1..AQaq2...."..BR..............?.....Db#....F"1...Db#....O9...7]yZ....J.6^..:.~^-y...GEe...[..1L.dHT0.O.&...).]{j..S..h<..\|o.....[..T%.0N..~<..&..i2..p.&..B.`...y........."_.l..%.......D...$.....C."..T...6.....X.mn).u.U.`.X.a...=.^.+..'}R.\..N...65.3y.....0..C..ZA..E..i...@L......c.. .f.;iZv....o.x...-\.......s.-......>..o..F...d.t}f...i.JmYV....:...X.A.."O..O...p.Dx.y....Z.9..+C.....qR.B...zv..u.\....Jr$.{>.S_....4]q.^..[gmKE..X..wd...]:.qcE..\|.&.r..G.......\.2.:(.rb@=.....r>;...y.3.l.3%GS..R. P....m]e...mk..A....>.mu]..-..F.{.2..}gm...k .$N)..S..../..E.....cJP.......v.5..hYKsVF!j..C)"..F..!t..{I..U...d_sO;.WY..]..;r....b.8..#...\|.$.G...9Z.e..

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 120 x 90
Category:	downloaded
Size (bytes):	7219
Entropy (8bit):	7.761660452366455
Encrypted:	false
SSDEEP:	192:NAdF7MU0iN9o/KnXLqjUv00CktjHFaVsZpxkCP9vb3:ydqML7kUcWHvLPZj
MD5:	30357C744658A04DFD92EE8732397F32
SHA1:	85AB5312A7BB1CED1BF2488DA4EBBCA163A106EB
SHA-256:	BEC1F6C44F74BF355855D394C6007CE6C4F705AAD8E1C0305D434AFDE5D17CE5
SHA-512:	E5085ED133EBA93506303504729C36AB5CA3C2E7F1C73D48634BC06AE35A9B9BAE840BAEA132A5937C7167D23AE1AA82C3BBF913D4D201A0CD7D921E75009AEA
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/ad_freeposter.gif
Preview:	GIF89ax.Z............\|.1...}..{..z...........................cbc.........qpr.........qou....VT[........{..}...xt.........}..\|..{..z..x.....y.....\|..z..v..~..z!.~/..dS.....u..........................}..y..y..v.....z..i..~..~..{..y..\|..z..w..{..v..~..\|......$..(..&.......c7$.E3.A5ztg..u..........{.....\|..w.....~.....\|..{..}.....~..z..X.....\|........})..%.LVH...~..\|'../#t...........~....................y..?...........t.........!......................\|.....2...JJ}44V............--2IIL.............................d. ...S..s....%.bg._b......J<Aj..Q.&...Y. {.*..-.."h....$../..0..1.....0../..1..2../..2..1..2..2..1..3.(>..&Zpqu.2..3..3........:...........J...................................................................................................................!.......,....x.Z......i..O.$....4.....#J.H.......2I....`...Ik.R.\...+.."...!8s.....;+...(..M.&.[Z.i.KP/..J5..Xm...kO>C.L..(.\|h....V..p..K...x..S{._<I..m.......+^L.`.~.2........... f..B...X...L......

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop Elements 5.0 (20060914.r.77) Windows, datetime=2008:03:03 19:35:04], baseline, precision 8, 120x120, components 3
Category:	downloaded
Size (bytes):	35616
Entropy (8bit):	5.894201752028256
Encrypted:	false
SSDEEP:	384:UiTmKxBDuoBJzTmKxBDuoBJYWt053IYNg7Daxbsrk7uOuH:UwnjlnjqWtNYyv0bshOu
MD5:	77A810DC1EF533EC0776C2417C6C73AD
SHA1:	25557E36B91FD96F9FC828E798A72AE93D4916CC
SHA-256:	CD2ADA18861475CF6E1155B083BD5058F760FD81BF13CD5604CF437F0BE20B46
SHA-512:	768BC2B2861EA1B875613ABEFF1C548B879C77CE795C95D869AD7D4C331F533343312E03D2E8E7CD1B0012922933FF595CEF10D8F74B205CEAC3267E17C536E8
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/oracle_scripts_120.jpg
Preview:	......JFIF.....H.H.....5Exif..MM..............................b...........j.(...........1.....6...r.2...........i....................'.......'.Adobe Photoshop Elements 5.0 (20060914.r.77) Windows.2008:03:03 19:35:04..........................x...........x...............................6...........>.(.....................F...................H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................x.x.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..$.I..D=......4. ....D..:....[fn=..60W...s.?....f.$..H'.:.....hhq.;.q}C....4d...3......_....2.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 110x30, components 3
Category:	dropped
Size (bytes):	3597
Entropy (8bit):	7.093506260412357
Encrypted:	false
SSDEEP:	48:lldi2KbkngvjEoENkUI5KSTyxJwGMQF1MQctYHaVPL7UL3ggX/W0BWvpAugh:/QBh7lEXSTSwGM+1MHt9VEL3gC/WIugh
MD5:	4455B7D929CF67774799FABFCF6B2191
SHA1:	E9CC902D1736BC9612C8B15C7EA107A7498924F1
SHA-256:	A47519CF4AEBE8055F4A23D4942602CB14C0B0F91239EDE9D7C5F124BD64F1DE
SHA-512:	137FFA39AFD63CCB67105DDB3F93DB559CE955B1ED7D0F8CE8E209084D5AA3F087C4B15A388AA513620B201A4C099FD41350E66B07552579494BCF5DB024490A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H....."Photoshop 3.0.8BIM.........H.......H......8BIM...........x8BIM............8BIM..................8BIM..........8BIM'.................8BIM.......H./ff...lff........./ff...............2.....Z...........5.....-..........8BIM.......p................................................................................................................8BIM..........8BIM............8BIM...............@...@....8BIM............8BIM.......u...................n.....U.n.t.i.t.l.e.d.-.2...................................n......................................8BIM..........8BIM............8BIM.......8.......n.......L..&...............JFIF.....H.H......Adobe.d...................................................................................................................................................n.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'.............

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2009:08:07 14:36:47], baseline, precision 8, 144x14, components 3
Category:	dropped
Size (bytes):	20552
Entropy (8bit):	7.042681454525505
Encrypted:	false
SSDEEP:	384:oSnpETDqnpETDNc3nWGOtIsBshzm79PoqLAtLRfLRTYNg70f0KOXNCD:ogpfpDWGJGe6pP3WV9YyNgD
MD5:	FC0AF62CD1861395818FBDBFC569C7D1
SHA1:	C0E448082AC9DFE163D12B7097FF4AC15E628213
SHA-256:	5F7AF77D7ACD930B98B0A422E5BC6EE8246B91BB1A5CAD4F6C8CBA10A2547E92
SHA-512:	5F6B625B7D184D6231DD5594A251BA8E7CB06D7B29B934E273DC1FBD5DE943B9640F21A77FA0AFE3D594722C8ACE8EDA71DCA2CA3EC2F566C2432A9A21182569
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....WExif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS4 Windows.2009:08:07 14:36:47....................................................................................&.(.................................!.......H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?......]:.N.2i.}....s.......~.......l>.....u....1.....k.........&..j.nk..k2.`..p......._.w.....U..8._.;.8.c....e;mg

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 110x30, components 3
Category:	downloaded
Size (bytes):	1861
Entropy (8bit):	7.656842473403293
Encrypted:	false
SSDEEP:	48:Ki3GBcyN3nICIpzSfJfSHKLcScE51CGCx:tQNXICV0HkfH51CGCx
MD5:	777D1C34DDA9A272118FB67A2E19F635
SHA1:	C21AF92852CC758A1A58390B0C42B569BB9F401B
SHA-256:	2E9776C20C0D9CDAAA746A7086BEE55122B1E07B7870182D732783E73C0D061C
SHA-512:	1B2815345C30191BEF9FC8D97DA553B641B49650241EBFBBE470CA8F207C8D976C26F3405B03E7152111C1F8961B3CBEB424FF0F01E56F3133B69A9679A32A14
Malicious:	false
Reputation:	low
URL:	https://www.dba-oracle.com/images/toc2_Support.jpg
Preview:	......JFIF.....d.d......Ducky.......P......Adobe.d...................................................................................................................................................n.........................................................................................!1"...2A........................!1..AQaq2...."..BR..............?.....Db#....F"1...Db#....O9...7]yZ....J.6^..:.~^-y...GEe...[..1L.dHT0.O.&...).]{j..S..h<..\|o.....[..T%.0N..~<..&..i2..p.&..B.`...y........."_.l..%.......D...$.....C."..T...6.....X.mn).u.U.`.X.a...=.^.+..'}R.\..N...65.3y.....0..C..ZA..E..i...@L......c.. .f.;iZv....o.x...-\.......s.-......>..o..F...d.t}f...i.JmYV....:...X.A.."O..O...p.Dx.y....Z.9..+C.....qR.B...zv..u.\....Jr$.{>.S_....4]q.^..[gmKE..X..wd...]:.qcE..\|.&.r..G.......\.2.:(.rb@=.....r>;...y.3.l.3%GS..R. P....m]e...mk..A....>.mu]..-..F.{.2..}gm...k .$N)..S..../..E.....cJP.......v.5..hYKsVF!j..C)"..F..!t..{I..U...d_sO;.WY..]..;r....b.8..#...\|.$.G...9Z.e..

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop Elements 5.0 (20060914.r.77) Windows, datetime=2007:01:12 10:07:14], baseline, precision 8, 110x30, components 3
Category:	dropped
Size (bytes):	24301
Entropy (8bit):	4.457297672236445
Encrypted:	false
SSDEEP:	192:Xt34PLr195+JKe34PLr19MkW7nKnlskKtm453IYNMtKwrtbr6eWx:XuPbztPbfW7Kps53IYNg7ZbI
MD5:	71A458110E6C7B94ECA57047AF102EF8
SHA1:	BF4AD2F2486B04D803E93942D3F95B8300E9F3C7
SHA-256:	DCF74474C45495ACD72F4358042B8586C4A5B24592D976C79D8C17E3E9654F8F
SHA-512:	CF8B19EF4E7F681D6B411FF35B9203A32A3F411E9A5E4BF51B2946F5EA7AF31CD6FC787A6D216762CEA0C1E8F1AECA785E1F0D9EC8D1AA3E6C7D86A2EB94B511
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....nExif..MM..............................b...........j.(...........1.....6...r.2...........i....................'.......'.Adobe Photoshop Elements 5.0 (20060914.r.77) Windows.2007:01:12 10:07:14..........................n...........................................6...........>.(.....................F........... .......H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d...................................................................................................................................................n.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..D.NnFnOUoL..e>....8..M.W.... ..dt.31...X...kZ..1...=...B.p....K.c1.G.o......4.....c}M...I.X

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HKALn:qAL
MD5:	C6CB4F21C7DCEB18C48B802BDE96868D
SHA1:	D44E74B07ED4E8267728C2BCDD16599E9110D05B
SHA-256:	B77A3071A80FC28A1E314D251064103CF265866101F7CDCCCF00B77C80484BD5
SHA-512:	8C65A0458DD4A8B93AEEA70A0CA67DB43B6E1C0DAAB17B7091449335532F3F5489E5B8A1617B42B99EE95B66CD8EF3E572F537121C9960743E100FE560F4C0F0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAkt_znrDZNRJBIFDT0fUzw=?alt=proto
Preview:	CgkKBw09H1M8GgA=

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 00:33:15.762804985 CEST	49700	80	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:15.764031887 CEST	49702	80	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:15.868029118 CEST	80	49700	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:15.868144989 CEST	49700	80	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:15.869225979 CEST	80	49702	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:15.869338036 CEST	49702	80	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:15.888129950 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:15.888173103 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:15.888245106 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:15.888495922 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:15.888508081 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.236548901 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.236794949 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.236849070 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.238497972 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.238600016 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.239617109 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.239712954 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.239795923 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.239813089 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.282531977 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.384661913 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.384718895 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.384738922 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.384778023 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.384795904 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.384830952 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.384844065 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.384852886 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.384881973 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.406579971 CEST	49706	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.406622887 CEST	443	49706	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.406692028 CEST	49706	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.407324076 CEST	49706	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.407339096 CEST	443	49706	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.408468962 CEST	49707	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.408507109 CEST	443	49707	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.408577919 CEST	49707	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.408814907 CEST	49707	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.408833981 CEST	443	49707	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.414994001 CEST	49708	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.415035963 CEST	443	49708	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.415088892 CEST	49708	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.415884972 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.415905952 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.415951014 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.416342020 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.416372061 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.416421890 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.416790962 CEST	49708	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.416815996 CEST	443	49708	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.417046070 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.417064905 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.417344093 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.417357922 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.489690065 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.489727974 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.489794970 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.489825964 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.489856958 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.489870071 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.594444036 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.594505072 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.594585896 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.594594002 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.594666958 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.595030069 CEST	49705	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.595062971 CEST	443	49705	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.595431089 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.595460892 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.595525026 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.596132040 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.596147060 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.606892109 CEST	49712	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.606962919 CEST	443	49712	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:16.607024908 CEST	49713	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.607044935 CEST	443	49713	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:16.607080936 CEST	49712	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.607091904 CEST	49713	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.607268095 CEST	49712	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.607306004 CEST	443	49712	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:16.607451916 CEST	49713	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.607467890 CEST	443	49713	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:16.619878054 CEST	49714	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.619908094 CEST	443	49714	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.619987011 CEST	49714	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.620167971 CEST	49714	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.620179892 CEST	443	49714	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.621316910 CEST	443	49706	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.621589899 CEST	49706	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.621601105 CEST	443	49706	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.621965885 CEST	443	49707	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.622169971 CEST	443	49706	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.622179031 CEST	49707	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.622204065 CEST	443	49707	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.622494936 CEST	49706	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.622570038 CEST	443	49707	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.622612000 CEST	443	49706	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.622667074 CEST	49706	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.623039961 CEST	49707	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.623106003 CEST	443	49707	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.623191118 CEST	49707	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.634108067 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.634388924 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.634437084 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.634831905 CEST	443	49708	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.635015011 CEST	49708	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.635030031 CEST	443	49708	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.636092901 CEST	443	49708	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.636183023 CEST	49708	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.636511087 CEST	49708	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.636575937 CEST	443	49708	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.636642933 CEST	49708	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.636651039 CEST	443	49708	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.638081074 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.638155937 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.638494015 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.638639927 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.638648033 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.638679981 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.644840956 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.645082951 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.645107031 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.646229029 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.646315098 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.646646976 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.646723032 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.646770954 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.668119907 CEST	443	49707	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.668134928 CEST	443	49706	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.681512117 CEST	49708	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.681560040 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.681621075 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.692116022 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.697510958 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.697527885 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.729531050 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.745563984 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.811084032 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.811351061 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.811371088 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.812397957 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.812465906 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.812738895 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.812796116 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.812879086 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.812886000 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.839021921 CEST	443	49707	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.839109898 CEST	443	49707	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.839180946 CEST	49707	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.848720074 CEST	443	49706	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.848803997 CEST	443	49706	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.848855019 CEST	49706	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.849206924 CEST	49707	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.849225998 CEST	443	49707	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.849869013 CEST	49716	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.849890947 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.849956989 CEST	49716	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.851147890 CEST	49716	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.851161957 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.853403091 CEST	49706	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.853421926 CEST	443	49706	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.853533983 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.853900909 CEST	49717	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.853921890 CEST	443	49717	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.853992939 CEST	49717	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.855173111 CEST	49717	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.855185986 CEST	443	49717	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.856702089 CEST	443	49708	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.856729031 CEST	443	49708	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.856797934 CEST	443	49708	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.856797934 CEST	49708	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.856837034 CEST	49708	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.857954025 CEST	49708	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.857963085 CEST	443	49708	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.858413935 CEST	49718	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.858443975 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.858521938 CEST	49718	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.858974934 CEST	49718	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.858985901 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.927742958 CEST	443	49712	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:16.928061008 CEST	49712	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.928139925 CEST	443	49712	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:16.929193974 CEST	443	49712	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:16.929292917 CEST	49712	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.930151939 CEST	49712	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.930224895 CEST	443	49712	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:16.930308104 CEST	49712	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.930325031 CEST	443	49712	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:16.935045958 CEST	443	49713	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:16.935280085 CEST	49713	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.935297012 CEST	443	49713	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:16.936934948 CEST	443	49713	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:16.937057972 CEST	49713	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.943847895 CEST	49713	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.943950891 CEST	443	49713	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:16.944160938 CEST	49713	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.944171906 CEST	443	49713	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:16.962924957 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.962953091 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.962961912 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.962975025 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.962977886 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.963040113 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.963062048 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.963088989 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.963120937 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.963121891 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.963148117 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.963198900 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.963207006 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.963238001 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.963260889 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.963265896 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.963280916 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.963309050 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.963315010 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.963315964 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.963356972 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.965074062 CEST	49710	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.965106964 CEST	443	49710	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.966006994 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.966034889 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.966098070 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.967582941 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.967607021 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.973818064 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.973850012 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.973858118 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.973874092 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.973881960 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.973889112 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.973917961 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.973943949 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.973969936 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.973990917 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.974400043 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.974410057 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.974441051 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.974466085 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.974473953 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.974510908 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.974529028 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.979537010 CEST	49712	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:16.986695051 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.986713886 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.986785889 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.987174988 CEST	49721	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.987199068 CEST	443	49721	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.987256050 CEST	49721	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.987518072 CEST	49722	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.987549067 CEST	443	49722	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.987603903 CEST	49722	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.987740040 CEST	49723	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.987756014 CEST	443	49723	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.987807035 CEST	49723	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.987929106 CEST	49722	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.987941980 CEST	443	49722	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.988126993 CEST	49721	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.988145113 CEST	443	49721	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.988246918 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.988260984 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.988368034 CEST	49723	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:16.988382101 CEST	443	49723	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:16.995567083 CEST	49713	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:17.035310984 CEST	443	49712	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:17.035373926 CEST	443	49712	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:17.035435915 CEST	49712	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:17.035458088 CEST	443	49712	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:17.035480976 CEST	443	49712	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:17.035537958 CEST	49712	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:17.036403894 CEST	49712	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:17.036425114 CEST	443	49712	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:17.048614025 CEST	443	49713	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:17.048754930 CEST	443	49713	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:17.048810959 CEST	49713	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:17.049304008 CEST	49713	443	192.168.2.17	151.101.130.133
Apr 18, 2024 00:33:17.049319029 CEST	443	49713	151.101.130.133	192.168.2.17
Apr 18, 2024 00:33:17.064749956 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.064995050 CEST	49716	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.065017939 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.065375090 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.065732002 CEST	49716	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.065790892 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.065874100 CEST	49716	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.069041014 CEST	443	49717	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.069224119 CEST	49717	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.069236994 CEST	443	49717	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.069617987 CEST	443	49717	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.069869995 CEST	49717	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.069931984 CEST	443	49717	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.069948912 CEST	49717	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.071034908 CEST	443	49714	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.071114063 CEST	49714	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.071217060 CEST	49714	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.071225882 CEST	443	49714	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.071542025 CEST	49724	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.071607113 CEST	443	49724	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.071685076 CEST	49724	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.071897984 CEST	49724	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.071928978 CEST	443	49724	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.073090076 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.073271990 CEST	49718	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.073290110 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.074280977 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.074352026 CEST	49718	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.074609995 CEST	49718	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.074673891 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.074729919 CEST	49718	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.080329895 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.080354929 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.080409050 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.080425024 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.080440044 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.080454111 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.080454111 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.080502033 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.080781937 CEST	49709	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.080785990 CEST	443	49709	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.081064939 CEST	49725	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.081094027 CEST	443	49725	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.081154108 CEST	49725	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.081480980 CEST	49725	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.081496000 CEST	443	49725	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.083230972 CEST	49726	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.083259106 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.083322048 CEST	49726	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.083497047 CEST	49726	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.083513021 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.112109900 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.112134933 CEST	443	49717	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.120124102 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.123516083 CEST	49717	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.123523951 CEST	49718	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.123548031 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.133512974 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.133532047 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.133538008 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.133548975 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.133582115 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.133619070 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.133637905 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.133649111 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.133673906 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.133884907 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.133899927 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.133954048 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.133960009 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.133996010 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.144418955 CEST	49727	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.144462109 CEST	443	49727	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.144540071 CEST	49727	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.144587994 CEST	49728	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.144613028 CEST	443	49728	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.144678116 CEST	49728	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.144815922 CEST	49727	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.144841909 CEST	443	49727	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.145008087 CEST	49728	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.145024061 CEST	443	49728	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.171555996 CEST	49718	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.182158947 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.182568073 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.182593107 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.183612108 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.183690071 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.183979988 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.184042931 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.184185028 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.184195042 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.202112913 CEST	443	49722	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.202349901 CEST	49722	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.202368975 CEST	443	49722	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.202454090 CEST	443	49721	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.202631950 CEST	49721	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.202645063 CEST	443	49721	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.203402042 CEST	443	49722	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.203495979 CEST	49722	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.203649998 CEST	443	49723	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.203816891 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.203905106 CEST	49722	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.203965902 CEST	443	49722	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.204279900 CEST	49723	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.204291105 CEST	443	49723	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.204484940 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.204505920 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.204669952 CEST	49722	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.204677105 CEST	443	49722	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.205717087 CEST	443	49723	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.205784082 CEST	49723	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.206080914 CEST	49723	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.206163883 CEST	443	49723	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.206249952 CEST	49723	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.206258059 CEST	443	49723	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.206398964 CEST	443	49721	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.206481934 CEST	49721	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.206764936 CEST	49721	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.206873894 CEST	49721	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.206939936 CEST	443	49721	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.208441019 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.208537102 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.208769083 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.208957911 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.208991051 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.235551119 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.238991022 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.239046097 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.239082098 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.239130974 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.239151955 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.239525080 CEST	49711	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.239542007 CEST	443	49711	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.240025997 CEST	49729	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.240061045 CEST	443	49729	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.240134001 CEST	49729	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.240672112 CEST	49729	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.240689039 CEST	443	49729	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.242873907 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.242908001 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.242980003 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.243184090 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.243197918 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.251534939 CEST	49721	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.251543999 CEST	443	49721	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.251548052 CEST	49722	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.251564026 CEST	49723	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.251563072 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.251584053 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.287425041 CEST	443	49717	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.287453890 CEST	443	49717	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.287463903 CEST	443	49717	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.287535906 CEST	443	49717	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.287676096 CEST	49717	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.287731886 CEST	49717	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.288391113 CEST	49717	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.288410902 CEST	443	49717	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.288870096 CEST	49731	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.288892031 CEST	443	49731	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.288966894 CEST	49731	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.289335966 CEST	49731	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.289347887 CEST	443	49731	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.297293901 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.297334909 CEST	443	49725	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.297512054 CEST	49726	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.297528028 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.297627926 CEST	49725	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.297648907 CEST	443	49725	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.298055887 CEST	443	49725	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.298346996 CEST	49725	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.298412085 CEST	443	49725	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.298454046 CEST	49725	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.298528910 CEST	49721	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.298541069 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.298557997 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.298614979 CEST	49726	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.299241066 CEST	49726	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.299299002 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.299372911 CEST	49726	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.299379110 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.340123892 CEST	443	49725	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.345577955 CEST	49725	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.345684052 CEST	49726	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.400129080 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.400152922 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.400160074 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.400188923 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.400199890 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.400209904 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.400219917 CEST	49718	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.400244951 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.400257111 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.400271893 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.400279999 CEST	49718	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.400284052 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.400311947 CEST	49718	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.400332928 CEST	49718	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.400899887 CEST	49718	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.400913954 CEST	443	49718	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.401390076 CEST	49732	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.401420116 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.401499987 CEST	49732	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.402082920 CEST	49732	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.402096987 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.413111925 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.413147926 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.413167000 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.413219929 CEST	49716	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.413242102 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.413259983 CEST	49716	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.413285017 CEST	49716	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.413990021 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.414011002 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.414052010 CEST	49716	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.414057016 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.414067030 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.414077997 CEST	49716	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.414103985 CEST	49716	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.414108038 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.414150000 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.414182901 CEST	49716	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.414920092 CEST	49716	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.414932013 CEST	443	49716	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.415390968 CEST	49733	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.415410995 CEST	443	49733	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.415469885 CEST	49733	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.417181969 CEST	49733	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.417196989 CEST	443	49733	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.421734095 CEST	443	49721	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.421755075 CEST	443	49721	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.421819925 CEST	443	49721	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.421823978 CEST	49721	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.421859026 CEST	49721	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.421947956 CEST	443	49723	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.422039032 CEST	443	49723	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.422084093 CEST	49723	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.424521923 CEST	443	49722	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.424612999 CEST	443	49722	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.424622059 CEST	49721	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.424633026 CEST	443	49721	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.424659014 CEST	49722	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.425019026 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.425044060 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.425096035 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.425389051 CEST	49723	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.425405025 CEST	443	49723	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.425687075 CEST	49735	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.425704002 CEST	443	49735	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.425755978 CEST	49735	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.426198959 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.426213980 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.426429033 CEST	49735	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.426445007 CEST	443	49735	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.427828074 CEST	49722	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.427846909 CEST	443	49722	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.433105946 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.433130026 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.433198929 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.433434010 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.433445930 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.455238104 CEST	443	49729	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.455650091 CEST	49729	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.455660105 CEST	443	49729	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.456264019 CEST	443	49729	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.456718922 CEST	49729	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.456784964 CEST	443	49729	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.456895113 CEST	49729	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.461002111 CEST	443	49728	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.461321115 CEST	49728	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.461344004 CEST	443	49728	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.462414026 CEST	443	49728	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.462496996 CEST	49728	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.462794065 CEST	49728	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.462856054 CEST	443	49728	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.462951899 CEST	49728	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.462959051 CEST	443	49728	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.465020895 CEST	443	49727	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.465207100 CEST	49727	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.465224981 CEST	443	49727	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.468823910 CEST	443	49727	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.468924046 CEST	49727	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.469233036 CEST	49727	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.469347954 CEST	49727	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.469403982 CEST	443	49727	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.500122070 CEST	443	49729	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517525911 CEST	443	49725	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517559052 CEST	443	49725	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517569065 CEST	443	49725	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517586946 CEST	443	49725	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517667055 CEST	443	49725	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517726898 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517757893 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517766953 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517771959 CEST	49725	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.517771959 CEST	49725	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.517786980 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517803907 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517812967 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517822981 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.517838955 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517859936 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.517889977 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517890930 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.517901897 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517929077 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517960072 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.517967939 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.517992020 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.518009901 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.518537045 CEST	49728	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.525533915 CEST	49727	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.525548935 CEST	443	49727	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.526495934 CEST	49740	443	192.168.2.17	142.250.105.157
Apr 18, 2024 00:33:17.526529074 CEST	443	49740	142.250.105.157	192.168.2.17
Apr 18, 2024 00:33:17.526606083 CEST	49740	443	192.168.2.17	142.250.105.157
Apr 18, 2024 00:33:17.527235031 CEST	49741	443	192.168.2.17	142.250.9.156
Apr 18, 2024 00:33:17.527317047 CEST	443	49741	142.250.9.156	192.168.2.17
Apr 18, 2024 00:33:17.527410030 CEST	49741	443	192.168.2.17	142.250.9.156
Apr 18, 2024 00:33:17.527533054 CEST	49740	443	192.168.2.17	142.250.105.157
Apr 18, 2024 00:33:17.527546883 CEST	443	49740	142.250.105.157	192.168.2.17
Apr 18, 2024 00:33:17.528225899 CEST	49741	443	192.168.2.17	142.250.9.156
Apr 18, 2024 00:33:17.528260946 CEST	443	49741	142.250.9.156	192.168.2.17
Apr 18, 2024 00:33:17.528650045 CEST	49725	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.528667927 CEST	443	49725	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.531558990 CEST	49743	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.531589985 CEST	443	49743	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.531676054 CEST	49743	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.531975985 CEST	49743	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.531994104 CEST	443	49743	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.562464952 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.562494040 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.562503099 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.562561035 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.562583923 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.562597036 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.562623978 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.562648058 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.562661886 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.562694073 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.566557884 CEST	49727	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.568217993 CEST	443	49728	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.568281889 CEST	443	49728	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.568330050 CEST	49728	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.568337917 CEST	443	49728	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.568418026 CEST	443	49728	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.568461895 CEST	49728	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.569063902 CEST	49728	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.569072962 CEST	443	49728	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.574150085 CEST	443	49727	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.574457884 CEST	443	49727	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.574512005 CEST	49727	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.574796915 CEST	49727	443	192.168.2.17	151.101.194.133
Apr 18, 2024 00:33:17.574807882 CEST	443	49727	151.101.194.133	192.168.2.17
Apr 18, 2024 00:33:17.622839928 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.622888088 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.622930050 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.623085976 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.623085976 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.623271942 CEST	49719	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.623292923 CEST	443	49719	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.623903036 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.623927116 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.623934031 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.623949051 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.623975992 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.624103069 CEST	49726	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.624103069 CEST	49726	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.624129057 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.624186993 CEST	49726	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.625818014 CEST	49746	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.625838041 CEST	443	49746	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.625895023 CEST	49746	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.626230001 CEST	49746	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.626245022 CEST	443	49746	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.667973042 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.667989016 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.668031931 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.668065071 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.668097973 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.668123960 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.668143034 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.668144941 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.668195963 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.668466091 CEST	49720	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.668483019 CEST	443	49720	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.668843031 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.668878078 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.668942928 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.669286966 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.669302940 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.673527002 CEST	443	49729	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.673552036 CEST	443	49729	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.673607111 CEST	49729	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.673619032 CEST	443	49729	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.673629999 CEST	443	49729	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.673662901 CEST	49729	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.673691034 CEST	49729	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.674319029 CEST	49729	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.674331903 CEST	443	49729	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.676969051 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.676990032 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.677053928 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.677268028 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.677280903 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.729445934 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.729473114 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.729511023 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.729546070 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.729621887 CEST	49726	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.729640961 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.729656935 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.729706049 CEST	49726	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.730074883 CEST	49726	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.730089903 CEST	443	49726	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.730581045 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.730664015 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.730746031 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.731194973 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:17.731226921 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:17.745884895 CEST	443	49741	142.250.9.156	192.168.2.17
Apr 18, 2024 00:33:17.746112108 CEST	49741	443	192.168.2.17	142.250.9.156
Apr 18, 2024 00:33:17.746130943 CEST	443	49741	142.250.9.156	192.168.2.17
Apr 18, 2024 00:33:17.747185946 CEST	443	49741	142.250.9.156	192.168.2.17
Apr 18, 2024 00:33:17.747270107 CEST	49741	443	192.168.2.17	142.250.9.156
Apr 18, 2024 00:33:17.748358011 CEST	49741	443	192.168.2.17	142.250.9.156
Apr 18, 2024 00:33:17.748483896 CEST	443	49741	142.250.9.156	192.168.2.17
Apr 18, 2024 00:33:17.748564959 CEST	49741	443	192.168.2.17	142.250.9.156
Apr 18, 2024 00:33:17.748580933 CEST	443	49741	142.250.9.156	192.168.2.17
Apr 18, 2024 00:33:17.750011921 CEST	443	49740	142.250.105.157	192.168.2.17
Apr 18, 2024 00:33:17.750174999 CEST	49740	443	192.168.2.17	142.250.105.157
Apr 18, 2024 00:33:17.750190973 CEST	443	49740	142.250.105.157	192.168.2.17
Apr 18, 2024 00:33:17.751209974 CEST	443	49740	142.250.105.157	192.168.2.17
Apr 18, 2024 00:33:17.751281977 CEST	49740	443	192.168.2.17	142.250.105.157
Apr 18, 2024 00:33:17.752124071 CEST	49740	443	192.168.2.17	142.250.105.157
Apr 18, 2024 00:33:17.752183914 CEST	443	49740	142.250.105.157	192.168.2.17
Apr 18, 2024 00:33:17.752283096 CEST	49740	443	192.168.2.17	142.250.105.157
Apr 18, 2024 00:33:17.752290010 CEST	443	49740	142.250.105.157	192.168.2.17
Apr 18, 2024 00:33:17.803539038 CEST	49741	443	192.168.2.17	142.250.9.156
Apr 18, 2024 00:33:17.803546906 CEST	49740	443	192.168.2.17	142.250.105.157
Apr 18, 2024 00:33:17.961345911 CEST	443	49740	142.250.105.157	192.168.2.17
Apr 18, 2024 00:33:17.961400032 CEST	443	49740	142.250.105.157	192.168.2.17
Apr 18, 2024 00:33:17.961448908 CEST	49740	443	192.168.2.17	142.250.105.157
Apr 18, 2024 00:33:17.961467981 CEST	443	49740	142.250.105.157	192.168.2.17
Apr 18, 2024 00:33:17.961575031 CEST	443	49740	142.250.105.157	192.168.2.17
Apr 18, 2024 00:33:17.961620092 CEST	49740	443	192.168.2.17	142.250.105.157
Apr 18, 2024 00:33:17.962812901 CEST	49740	443	192.168.2.17	142.250.105.157
Apr 18, 2024 00:33:17.962832928 CEST	443	49740	142.250.105.157	192.168.2.17
Apr 18, 2024 00:33:18.003993034 CEST	443	49741	142.250.9.156	192.168.2.17
Apr 18, 2024 00:33:18.004301071 CEST	443	49741	142.250.9.156	192.168.2.17
Apr 18, 2024 00:33:18.004355907 CEST	49741	443	192.168.2.17	142.250.9.156
Apr 18, 2024 00:33:18.004687071 CEST	49741	443	192.168.2.17	142.250.9.156
Apr 18, 2024 00:33:18.004707098 CEST	443	49741	142.250.9.156	192.168.2.17
Apr 18, 2024 00:33:18.004717112 CEST	49741	443	192.168.2.17	142.250.9.156
Apr 18, 2024 00:33:18.004755974 CEST	49741	443	192.168.2.17	142.250.9.156
Apr 18, 2024 00:33:18.075382948 CEST	49750	443	192.168.2.17	142.250.105.104
Apr 18, 2024 00:33:18.075421095 CEST	443	49750	142.250.105.104	192.168.2.17
Apr 18, 2024 00:33:18.075500965 CEST	49750	443	192.168.2.17	142.250.105.104
Apr 18, 2024 00:33:18.075773954 CEST	49750	443	192.168.2.17	142.250.105.104
Apr 18, 2024 00:33:18.075786114 CEST	443	49750	142.250.105.104	192.168.2.17
Apr 18, 2024 00:33:18.295684099 CEST	443	49750	142.250.105.104	192.168.2.17
Apr 18, 2024 00:33:18.296041012 CEST	49750	443	192.168.2.17	142.250.105.104
Apr 18, 2024 00:33:18.296052933 CEST	443	49750	142.250.105.104	192.168.2.17
Apr 18, 2024 00:33:18.297679901 CEST	443	49750	142.250.105.104	192.168.2.17
Apr 18, 2024 00:33:18.297768116 CEST	49750	443	192.168.2.17	142.250.105.104
Apr 18, 2024 00:33:18.298806906 CEST	49750	443	192.168.2.17	142.250.105.104
Apr 18, 2024 00:33:18.298892975 CEST	443	49750	142.250.105.104	192.168.2.17
Apr 18, 2024 00:33:18.298974991 CEST	49750	443	192.168.2.17	142.250.105.104
Apr 18, 2024 00:33:18.298980951 CEST	443	49750	142.250.105.104	192.168.2.17
Apr 18, 2024 00:33:18.343589067 CEST	49750	443	192.168.2.17	142.250.105.104
Apr 18, 2024 00:33:18.465881109 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.466401100 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.466471910 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.466856956 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.467317104 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.467381001 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.467387915 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.509030104 CEST	443	49750	142.250.105.104	192.168.2.17
Apr 18, 2024 00:33:18.509141922 CEST	443	49750	142.250.105.104	192.168.2.17
Apr 18, 2024 00:33:18.509202003 CEST	49750	443	192.168.2.17	142.250.105.104
Apr 18, 2024 00:33:18.509845972 CEST	49750	443	192.168.2.17	142.250.105.104
Apr 18, 2024 00:33:18.509862900 CEST	443	49750	142.250.105.104	192.168.2.17
Apr 18, 2024 00:33:18.512125015 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.518526077 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.529539108 CEST	443	49731	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.529553890 CEST	443	49724	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.529650927 CEST	49724	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.529783010 CEST	49731	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.529793978 CEST	443	49731	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.529895067 CEST	49724	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.529926062 CEST	443	49724	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.530256033 CEST	443	49731	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.530628920 CEST	49731	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.530705929 CEST	443	49731	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.530802965 CEST	49731	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.572124958 CEST	443	49731	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.618355989 CEST	49751	443	192.168.2.17	108.177.122.104
Apr 18, 2024 00:33:18.618386984 CEST	443	49751	108.177.122.104	192.168.2.17
Apr 18, 2024 00:33:18.618475914 CEST	49751	443	192.168.2.17	108.177.122.104
Apr 18, 2024 00:33:18.618679047 CEST	49751	443	192.168.2.17	108.177.122.104
Apr 18, 2024 00:33:18.618690014 CEST	443	49751	108.177.122.104	192.168.2.17
Apr 18, 2024 00:33:18.656375885 CEST	443	49733	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.656656027 CEST	49733	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.656687021 CEST	443	49733	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.657798052 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.657830000 CEST	443	49733	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.657912016 CEST	49733	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.658090115 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.658113956 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.658381939 CEST	443	49735	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.658482075 CEST	49733	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.658560038 CEST	443	49733	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.658634901 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.658669949 CEST	49735	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.658690929 CEST	443	49735	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.658806086 CEST	49733	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.658828974 CEST	443	49733	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.658905983 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.658922911 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.659827948 CEST	443	49735	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.660068035 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.660123110 CEST	49735	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.660311937 CEST	443	49735	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.660335064 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.660439968 CEST	49735	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.660480022 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.660514116 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.661696911 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.661781073 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.662026882 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.662100077 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.662189960 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.704113960 CEST	443	49735	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.708561897 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.708561897 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.708569050 CEST	49733	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.708575964 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.752573967 CEST	443	49743	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.752872944 CEST	49743	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.752895117 CEST	443	49743	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.752897978 CEST	443	49731	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.752935886 CEST	443	49731	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.752969980 CEST	443	49731	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.753032923 CEST	443	49731	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.753103018 CEST	49731	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.753103018 CEST	49731	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.753103018 CEST	49731	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.753305912 CEST	443	49743	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.753814936 CEST	49743	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.753925085 CEST	443	49743	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.753945112 CEST	49731	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.753962994 CEST	443	49731	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.754914999 CEST	49743	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.756547928 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.756762981 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.756788015 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.756865025 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.757327080 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.757344961 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.791074038 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.791099072 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.791106939 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.791131973 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.791141987 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.791151047 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.791201115 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.791218996 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.791289091 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.791289091 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.791596889 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.791626930 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.791671991 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.791682005 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.791707039 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.791716099 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.800112009 CEST	443	49743	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.834664106 CEST	443	49751	108.177.122.104	192.168.2.17
Apr 18, 2024 00:33:18.834952116 CEST	49751	443	192.168.2.17	108.177.122.104
Apr 18, 2024 00:33:18.834969044 CEST	443	49751	108.177.122.104	192.168.2.17
Apr 18, 2024 00:33:18.838094950 CEST	443	49751	108.177.122.104	192.168.2.17
Apr 18, 2024 00:33:18.838186026 CEST	49751	443	192.168.2.17	108.177.122.104
Apr 18, 2024 00:33:18.838550091 CEST	49751	443	192.168.2.17	108.177.122.104
Apr 18, 2024 00:33:18.838629961 CEST	443	49751	108.177.122.104	192.168.2.17
Apr 18, 2024 00:33:18.838747978 CEST	49751	443	192.168.2.17	108.177.122.104
Apr 18, 2024 00:33:18.838757038 CEST	443	49751	108.177.122.104	192.168.2.17
Apr 18, 2024 00:33:18.847004890 CEST	443	49746	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.847244978 CEST	49746	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.847258091 CEST	443	49746	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.848354101 CEST	443	49746	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.848428965 CEST	49746	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.848702908 CEST	49746	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.848773003 CEST	443	49746	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.848866940 CEST	49746	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.848875046 CEST	443	49746	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.873761892 CEST	443	49733	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.873783112 CEST	443	49733	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.873872042 CEST	49733	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.873874903 CEST	443	49733	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.873930931 CEST	49733	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.874505043 CEST	49733	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.874515057 CEST	443	49733	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.876321077 CEST	49753	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.876354933 CEST	443	49753	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.876444101 CEST	49753	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.876652956 CEST	49753	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.876662970 CEST	443	49753	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.880526066 CEST	49751	443	192.168.2.17	108.177.122.104
Apr 18, 2024 00:33:18.892791033 CEST	443	49735	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.892831087 CEST	443	49735	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.892910004 CEST	443	49735	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.892931938 CEST	49735	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.892972946 CEST	49735	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.894545078 CEST	49735	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.894560099 CEST	443	49735	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.894850016 CEST	49754	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.894867897 CEST	443	49754	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.894979954 CEST	49754	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.895255089 CEST	49754	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.895270109 CEST	443	49754	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.895976067 CEST	49746	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.897003889 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.897042036 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.897078991 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.897083044 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.897161961 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.897463083 CEST	49730	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.897478104 CEST	443	49730	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.902632952 CEST	49755	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.902661085 CEST	443	49755	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.902735949 CEST	49755	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.903297901 CEST	49755	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.903311968 CEST	443	49755	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.910031080 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.910267115 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.910286903 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.910969019 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.911209106 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.911221981 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.911741972 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.911813021 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.912286043 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.912369013 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.912415981 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.914796114 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.914877892 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.915142059 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.915251017 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.915309906 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.956127882 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.959556103 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.959559917 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.959573030 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.959598064 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.969487906 CEST	443	49743	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.969512939 CEST	443	49743	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.969583988 CEST	443	49743	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.969610929 CEST	49743	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.969650030 CEST	49743	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.970361948 CEST	49743	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.970372915 CEST	443	49743	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.971143007 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.971412897 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.971429110 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.971919060 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.972250938 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.972342968 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.972743034 CEST	49756	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.972791910 CEST	443	49756	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.972847939 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.972872019 CEST	49756	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.973171949 CEST	49756	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.973193884 CEST	443	49756	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.975148916 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.975377083 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.975392103 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.979053974 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.979156971 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.979429007 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.979542017 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.979592085 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.981795073 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.981846094 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.981868029 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.981905937 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.981909037 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.981949091 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.981951952 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.981966019 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.981971025 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.981991053 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.982026100 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.982086897 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.982156038 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.982163906 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.982229948 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.982285976 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.982496023 CEST	49734	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.982507944 CEST	443	49734	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.982839108 CEST	49757	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.982872963 CEST	443	49757	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.982938051 CEST	49757	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.983309031 CEST	49757	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.983325005 CEST	443	49757	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.983850002 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.983875990 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.983881950 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.983896017 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.983901978 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.983907938 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.983923912 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.983947039 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.983967066 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.983984947 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.984055042 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.984061956 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.984090090 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.984105110 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.984112024 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.984126091 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.984129906 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.984148026 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.984165907 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.984178066 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.984205008 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.986330986 CEST	49736	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.986344099 CEST	443	49736	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.986681938 CEST	49758	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.986717939 CEST	443	49758	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:18.986783028 CEST	49758	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.987200022 CEST	49758	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:18.987225056 CEST	443	49758	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.007560015 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.007560968 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.020112038 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.023540020 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.023597956 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.053256989 CEST	443	49751	108.177.122.104	192.168.2.17
Apr 18, 2024 00:33:19.053452015 CEST	443	49751	108.177.122.104	192.168.2.17
Apr 18, 2024 00:33:19.053533077 CEST	49751	443	192.168.2.17	108.177.122.104
Apr 18, 2024 00:33:19.053780079 CEST	49751	443	192.168.2.17	108.177.122.104
Apr 18, 2024 00:33:19.053793907 CEST	443	49751	108.177.122.104	192.168.2.17
Apr 18, 2024 00:33:19.065296888 CEST	443	49746	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.065330982 CEST	443	49746	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.065398932 CEST	49746	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.065412998 CEST	443	49746	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.065427065 CEST	443	49746	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.065459967 CEST	49746	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.065512896 CEST	49746	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.066009998 CEST	49746	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.066020012 CEST	443	49746	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.067868948 CEST	49760	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.067898989 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.067974091 CEST	49760	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.068263054 CEST	49760	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.068276882 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.071572065 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.106405973 CEST	443	49753	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.106671095 CEST	49753	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.106687069 CEST	443	49753	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.107053041 CEST	443	49753	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.107445002 CEST	49753	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.107521057 CEST	443	49753	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.107578039 CEST	49753	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.109698057 CEST	443	49754	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.109914064 CEST	49754	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.109929085 CEST	443	49754	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.110553026 CEST	443	49754	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.110970020 CEST	49754	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.111083984 CEST	443	49754	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.111104965 CEST	49754	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.118743896 CEST	443	49755	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.119061947 CEST	49755	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.119105101 CEST	443	49755	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.119652033 CEST	443	49755	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.119961977 CEST	49755	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.120050907 CEST	443	49755	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.120079041 CEST	49755	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.128657103 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.128684998 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.128691912 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.128709078 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.128715992 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.128724098 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.128766060 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.128792048 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.128801107 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.128815889 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.128822088 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.128838062 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.128846884 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.128861904 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.128878117 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.128889084 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.128911018 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.129851103 CEST	49748	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.129863024 CEST	443	49748	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.132911921 CEST	49761	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.132940054 CEST	443	49761	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.132977962 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.132999897 CEST	49761	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.133120060 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.133140087 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.133164883 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.133173943 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.133184910 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.133209944 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.133213997 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.133238077 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.133305073 CEST	49761	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.133316040 CEST	443	49761	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.133351088 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.133403063 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.134052038 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.134071112 CEST	443	49747	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.134083033 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.134116888 CEST	49747	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.134406090 CEST	49762	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.134433031 CEST	443	49762	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.134484053 CEST	49762	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.136470079 CEST	49762	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.136485100 CEST	443	49762	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.148119926 CEST	443	49753	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.156122923 CEST	443	49754	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.164113998 CEST	443	49755	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.166584015 CEST	49754	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.166687012 CEST	49755	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.187057972 CEST	443	49756	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.187294006 CEST	49756	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.187309980 CEST	443	49756	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.187657118 CEST	443	49756	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.187946081 CEST	49756	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.188004017 CEST	443	49756	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.188060045 CEST	49756	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.196760893 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.196794033 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.196811914 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.196886063 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.196908951 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.196957111 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.200684071 CEST	443	49758	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.201000929 CEST	49758	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.201013088 CEST	443	49758	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.201364994 CEST	443	49758	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.201698065 CEST	49758	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.201745987 CEST	443	49758	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.201857090 CEST	49758	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.208539009 CEST	443	49757	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.208790064 CEST	49757	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.208811998 CEST	443	49757	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.209912062 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.209944010 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.209950924 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.209959030 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.209976912 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.209984064 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.210005999 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.210024118 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.210055113 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.210059881 CEST	443	49757	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.210081100 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.210395098 CEST	49757	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.210565090 CEST	443	49757	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.210902929 CEST	49757	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.228122950 CEST	443	49756	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.248111010 CEST	443	49758	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.252154112 CEST	443	49757	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.295669079 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.295994043 CEST	49760	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.296009064 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.297158003 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.297472954 CEST	49760	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.297609091 CEST	49760	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.297616005 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.297643900 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.304971933 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.304996967 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.305073977 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.305078983 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.305095911 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.305155039 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.305354118 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.305373907 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.305425882 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.305430889 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.305439949 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.305459023 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.305499077 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.305506945 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.305535078 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.305541039 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.305569887 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.305864096 CEST	49752	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.305876970 CEST	443	49752	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.308829069 CEST	49763	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.308924913 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.309012890 CEST	49763	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.309245110 CEST	49763	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.309267998 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.314744949 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.314758062 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.314794064 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.314857960 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.314924002 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.314961910 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.314985991 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.315929890 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.315960884 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.315999985 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.316014051 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.316034079 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.316065073 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.316088915 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.316265106 CEST	49749	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.316293001 CEST	443	49749	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.316577911 CEST	49764	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.316605091 CEST	443	49764	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.316662073 CEST	49764	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.317038059 CEST	49764	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.317054033 CEST	443	49764	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.325963974 CEST	443	49753	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.325985909 CEST	443	49753	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.326049089 CEST	443	49753	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.326050997 CEST	49753	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.326098919 CEST	49753	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.326683044 CEST	49753	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.326699972 CEST	443	49753	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.328211069 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.328233957 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.328301907 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.328495979 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.328509092 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.328525066 CEST	443	49754	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.328550100 CEST	443	49754	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.328557968 CEST	443	49754	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.328609943 CEST	49754	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.328618050 CEST	443	49754	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.328665972 CEST	49754	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.329551935 CEST	49754	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.329560041 CEST	443	49754	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.329839945 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.329862118 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.329919100 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.330214024 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.330228090 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.340533018 CEST	49760	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.340785027 CEST	443	49755	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.340846062 CEST	443	49755	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.340867043 CEST	443	49755	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.340903044 CEST	443	49755	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.340910912 CEST	49755	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.340929985 CEST	443	49755	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.340966940 CEST	49755	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.341083050 CEST	443	49755	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.341134071 CEST	49755	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.341392994 CEST	49755	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.341398954 CEST	443	49755	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.341686010 CEST	49767	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.341716051 CEST	443	49767	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.341773033 CEST	49767	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.342057943 CEST	49767	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.342075109 CEST	443	49767	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.347688913 CEST	443	49761	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.347960949 CEST	49761	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.347982883 CEST	443	49761	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.348427057 CEST	443	49761	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.348757029 CEST	49761	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.348835945 CEST	443	49761	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.348865986 CEST	49761	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.351272106 CEST	443	49762	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.351448059 CEST	49762	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.351460934 CEST	443	49762	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.351804018 CEST	443	49762	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.352067947 CEST	49762	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.352135897 CEST	443	49762	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.352150917 CEST	49762	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.356548071 CEST	49677	443	192.168.2.17	204.79.197.200
Apr 18, 2024 00:33:19.356551886 CEST	49678	443	192.168.2.17	204.79.197.200
Apr 18, 2024 00:33:19.356564999 CEST	49676	443	192.168.2.17	204.79.197.200
Apr 18, 2024 00:33:19.388778925 CEST	49761	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.388813972 CEST	443	49761	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.396141052 CEST	443	49762	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.404541969 CEST	49762	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.420830011 CEST	443	49758	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.420882940 CEST	443	49758	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.420943022 CEST	49758	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.420958042 CEST	443	49758	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.421044111 CEST	443	49758	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.421087980 CEST	49758	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.421601057 CEST	49758	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.421613932 CEST	443	49758	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.427583933 CEST	443	49757	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.427635908 CEST	443	49757	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.427686930 CEST	49757	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.427701950 CEST	443	49757	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.427788973 CEST	443	49757	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.427880049 CEST	49757	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.428576946 CEST	49757	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.428589106 CEST	443	49757	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.466089964 CEST	443	49756	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.466115952 CEST	443	49756	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.466181040 CEST	443	49756	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.466203928 CEST	49756	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.466234922 CEST	49756	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.466770887 CEST	49756	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.466785908 CEST	443	49756	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.468444109 CEST	49768	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.468461037 CEST	443	49768	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.468559980 CEST	49768	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.469000101 CEST	49768	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.469012976 CEST	443	49768	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.469934940 CEST	49769	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.469961882 CEST	443	49769	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.470032930 CEST	49769	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.470206976 CEST	49769	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.470220089 CEST	443	49769	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.516431093 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.516498089 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.516520023 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.516558886 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.516590118 CEST	49760	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.516592026 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.516618013 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.516632080 CEST	49760	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.516660929 CEST	49760	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.572029114 CEST	443	49761	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.572066069 CEST	443	49761	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.572076082 CEST	443	49761	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.572199106 CEST	443	49761	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.572326899 CEST	49761	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.572326899 CEST	49761	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.573373079 CEST	49761	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.573415041 CEST	443	49761	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.576024055 CEST	49770	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.576060057 CEST	443	49770	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.576148033 CEST	49770	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.576520920 CEST	49770	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.576536894 CEST	443	49770	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.577038050 CEST	49771	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.577054977 CEST	443	49771	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.577105999 CEST	49771	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.577308893 CEST	49771	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.577318907 CEST	443	49771	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.621485949 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.621566057 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.621620893 CEST	49760	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.621656895 CEST	49760	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.621893883 CEST	49760	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.621908903 CEST	443	49760	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.635641098 CEST	443	49762	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.635664940 CEST	443	49762	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.635729074 CEST	49762	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.635740995 CEST	443	49762	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.635752916 CEST	443	49762	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.635787964 CEST	49762	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.636363029 CEST	49762	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.636379004 CEST	443	49762	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.636758089 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.636785984 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:19.636842012 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.637280941 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:19.637298107 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.503500938 CEST	49773	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:33:20.503539085 CEST	443	49773	74.125.138.106	192.168.2.17
Apr 18, 2024 00:33:20.503619909 CEST	49773	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:33:20.503828049 CEST	49773	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:33:20.503843069 CEST	443	49773	74.125.138.106	192.168.2.17
Apr 18, 2024 00:33:20.544892073 CEST	443	49764	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.545193911 CEST	49764	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.545212030 CEST	443	49764	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.545552015 CEST	443	49764	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.545845032 CEST	49764	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.545901060 CEST	443	49764	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.545974970 CEST	49764	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.546401024 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.546583891 CEST	49763	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.546593904 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.546938896 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.547204018 CEST	49763	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.547267914 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.547282934 CEST	49763	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.577286005 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.577311993 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.577610970 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.577635050 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.577734947 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.577755928 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.578001976 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.578140020 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.578160048 CEST	443	49767	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.578291893 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.578363895 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.578521013 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.578591108 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.578651905 CEST	49767	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.578680038 CEST	443	49767	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.578785896 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.578838110 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.582324982 CEST	443	49767	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.582431078 CEST	49767	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.582735062 CEST	49767	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.582847118 CEST	49767	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.582911968 CEST	443	49767	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.588143110 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.592113018 CEST	443	49764	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.601583958 CEST	49763	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.620117903 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.624116898 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.632545948 CEST	49767	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.632559061 CEST	443	49767	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.639460087 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.639719963 CEST	49732	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.639733076 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.640907049 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.641215086 CEST	49732	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.641336918 CEST	49732	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.641391039 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.679585934 CEST	49767	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.694545984 CEST	49732	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.702172041 CEST	443	49769	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.702200890 CEST	443	49768	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.702474117 CEST	49769	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.702497959 CEST	443	49769	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.702583075 CEST	49768	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.702595949 CEST	443	49768	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.703622103 CEST	443	49769	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.703679085 CEST	443	49768	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.703984976 CEST	49769	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.704190016 CEST	443	49769	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.704252958 CEST	49768	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.704394102 CEST	49769	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.704428911 CEST	443	49768	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.704447985 CEST	49768	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.715774059 CEST	443	49773	74.125.138.106	192.168.2.17
Apr 18, 2024 00:33:20.716005087 CEST	49773	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:33:20.716017008 CEST	443	49773	74.125.138.106	192.168.2.17
Apr 18, 2024 00:33:20.717065096 CEST	443	49773	74.125.138.106	192.168.2.17
Apr 18, 2024 00:33:20.717153072 CEST	49773	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:33:20.717423916 CEST	49773	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:33:20.717482090 CEST	443	49773	74.125.138.106	192.168.2.17
Apr 18, 2024 00:33:20.748141050 CEST	443	49768	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.752116919 CEST	443	49769	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.758547068 CEST	49768	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.758555889 CEST	49773	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:33:20.758579016 CEST	443	49773	74.125.138.106	192.168.2.17
Apr 18, 2024 00:33:20.764194012 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.764220953 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.764229059 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.764251947 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.764276028 CEST	49763	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.764280081 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.764292955 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.764327049 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.764333010 CEST	49763	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.764353991 CEST	49763	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.764384031 CEST	49763	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.765052080 CEST	49763	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.765065908 CEST	443	49763	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.794790983 CEST	443	49767	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.794852018 CEST	443	49767	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.794873953 CEST	443	49767	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.794913054 CEST	49767	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.794939041 CEST	443	49767	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.794955969 CEST	49767	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.794970989 CEST	49767	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.795031071 CEST	443	49767	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.795082092 CEST	49767	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.795459032 CEST	49767	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.795475960 CEST	443	49767	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.795813084 CEST	49774	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.795840979 CEST	443	49774	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.795903921 CEST	49774	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.796224117 CEST	49774	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.796237946 CEST	443	49774	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.796802044 CEST	443	49771	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.797030926 CEST	49771	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.797070980 CEST	443	49771	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.798214912 CEST	443	49771	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.798299074 CEST	49771	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.798928022 CEST	49771	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.798998117 CEST	443	49771	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.799109936 CEST	49771	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.799124002 CEST	443	49771	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.802599907 CEST	443	49770	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.802890062 CEST	49770	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.802898884 CEST	443	49770	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.803925991 CEST	443	49770	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.803991079 CEST	49770	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.804275036 CEST	49770	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.804328918 CEST	443	49770	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.804389000 CEST	49770	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.804394960 CEST	443	49770	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.806555033 CEST	49773	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:33:20.853709936 CEST	49770	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.853718042 CEST	49771	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.863348007 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.863616943 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.863630056 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.867202044 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.867289066 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.867558002 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.867671013 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.867729902 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.872502089 CEST	443	49764	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.872528076 CEST	443	49764	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.872565985 CEST	443	49764	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.872592926 CEST	49764	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.872625113 CEST	443	49764	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.872658014 CEST	49764	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.872705936 CEST	49764	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.872713089 CEST	443	49764	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.872725964 CEST	443	49764	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.872786999 CEST	49764	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.873308897 CEST	49764	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.873317003 CEST	443	49764	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.906327009 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.906351089 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.906445026 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.906461000 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.906548977 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.907433033 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.907454967 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.907540083 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.907551050 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.907588959 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.920658112 CEST	443	49769	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.920696020 CEST	443	49769	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.920775890 CEST	443	49769	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.920818090 CEST	49769	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.920890093 CEST	49769	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.921291113 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.921300888 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.922091007 CEST	49769	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.922123909 CEST	443	49769	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.924381018 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.924401999 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.924443960 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.924557924 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.924559116 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.924602985 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.924664021 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.924665928 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.924676895 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.924705029 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.924719095 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.924731970 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.924758911 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.924890041 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.964582920 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.965141058 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.965193987 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.965214968 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.965259075 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.965269089 CEST	49732	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.965296984 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.965312958 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.965334892 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.965368986 CEST	49732	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.965368986 CEST	49732	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.965380907 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.965420008 CEST	49732	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.965439081 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.965533972 CEST	49732	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.965542078 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.965584993 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.965640068 CEST	49732	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.965962887 CEST	49732	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.965976000 CEST	443	49732	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.969536066 CEST	49775	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.969554901 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:20.969677925 CEST	49775	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.969882965 CEST	49775	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:20.969897032 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.011425972 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.011434078 CEST	443	49774	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.011445999 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.011589050 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.011603117 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.011645079 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.011864901 CEST	49774	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.011894941 CEST	443	49774	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.012279034 CEST	443	49774	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.012646914 CEST	49774	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.012722969 CEST	443	49774	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.012808084 CEST	49774	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.013048887 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.013063908 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.013133049 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.013144016 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.013180971 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.013463974 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.013530016 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.013537884 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.013552904 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.013577938 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.013602972 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.013675928 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.013684988 CEST	443	49766	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.013691902 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.013724089 CEST	49766	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.016475916 CEST	443	49771	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.016505003 CEST	443	49771	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.016513109 CEST	443	49771	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.016571045 CEST	443	49771	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.016583920 CEST	49771	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.016602039 CEST	443	49771	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.016647100 CEST	49771	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.017896891 CEST	49771	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.017935038 CEST	443	49771	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.018946886 CEST	443	49768	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.018986940 CEST	443	49768	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.019021988 CEST	443	49768	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.019054890 CEST	49768	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.019076109 CEST	443	49768	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.019088030 CEST	49768	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.019110918 CEST	49768	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.019192934 CEST	443	49768	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.019246101 CEST	49768	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.020008087 CEST	49768	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.020031929 CEST	443	49768	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.020685911 CEST	443	49770	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.020703077 CEST	443	49770	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.020737886 CEST	443	49770	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.020756006 CEST	443	49770	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.020768881 CEST	49770	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.020806074 CEST	49770	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.023025990 CEST	49776	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.023039103 CEST	443	49776	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.023116112 CEST	49776	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.023778915 CEST	49776	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.023792982 CEST	443	49776	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.023931026 CEST	49770	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.023941040 CEST	443	49770	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.026164055 CEST	49777	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.026211023 CEST	443	49777	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.026283026 CEST	49777	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.026510954 CEST	49777	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.026539087 CEST	443	49777	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.031697035 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.031722069 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.031793118 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.031800985 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.031830072 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.031850100 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.032069921 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.032120943 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.032125950 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.032141924 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.032166958 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.032183886 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.032210112 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.032507896 CEST	49765	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.032512903 CEST	443	49765	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.035607100 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.035638094 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.035799026 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.036112070 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.036120892 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.036488056 CEST	49779	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.036505938 CEST	443	49779	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.036560059 CEST	49779	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.036739111 CEST	49779	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.036753893 CEST	443	49779	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.056111097 CEST	443	49774	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.185396910 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.185673952 CEST	49775	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.185688972 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.186158895 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.186543941 CEST	49775	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.186625957 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.186685085 CEST	49775	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.200417995 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.200479984 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.200505018 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.200522900 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.200536013 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.200551033 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.200571060 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.200615883 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.200634003 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.200649977 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.200659037 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.200675011 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.200681925 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.200700998 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.200790882 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.200848103 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.200854063 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.200903893 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.200931072 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.200973988 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.201226950 CEST	49772	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.201236963 CEST	443	49772	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.230863094 CEST	443	49774	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.230885983 CEST	443	49774	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.230923891 CEST	443	49774	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.230952024 CEST	49774	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.230958939 CEST	443	49774	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.231010914 CEST	49774	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.231853962 CEST	49774	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.231872082 CEST	443	49774	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.232110977 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.235629082 CEST	49775	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.239609003 CEST	443	49776	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.240480900 CEST	49776	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.240490913 CEST	443	49776	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.240644932 CEST	443	49777	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.240874052 CEST	443	49776	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.240962982 CEST	49777	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.240986109 CEST	443	49777	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.241338968 CEST	49776	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.241375923 CEST	443	49777	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.241409063 CEST	443	49776	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.241653919 CEST	49776	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.241966009 CEST	49777	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.242037058 CEST	443	49777	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.242072105 CEST	49777	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.249160051 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.249367952 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.249391079 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.250399113 CEST	443	49779	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.250571966 CEST	49779	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.250587940 CEST	443	49779	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.250742912 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.250796080 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.250929117 CEST	443	49779	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.251079082 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.251158953 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.251339912 CEST	49779	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.251409054 CEST	443	49779	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.251456022 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.251462936 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.251519918 CEST	49779	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.284090996 CEST	49777	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.284116030 CEST	443	49777	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.288146019 CEST	443	49776	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.296112061 CEST	443	49779	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.299573898 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.459425926 CEST	443	49777	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.459451914 CEST	443	49777	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.459481001 CEST	443	49777	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.459531069 CEST	443	49777	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.459538937 CEST	49777	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.459579945 CEST	49777	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.460509062 CEST	49777	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.460520029 CEST	443	49777	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.470402002 CEST	443	49779	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.470513105 CEST	443	49779	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.470566034 CEST	49779	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.471020937 CEST	49779	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.471036911 CEST	443	49779	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.473439932 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.473453999 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.473460913 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.473475933 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.473562002 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.473583937 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.473594904 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.473613977 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.473627090 CEST	49780	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.473638058 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.473723888 CEST	443	49780	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.473804951 CEST	49780	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.474093914 CEST	49780	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.474124908 CEST	443	49780	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.475169897 CEST	443	49776	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.475186110 CEST	443	49776	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.475249052 CEST	443	49776	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.475270987 CEST	49776	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.475347996 CEST	49776	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.475898981 CEST	49776	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.475909948 CEST	443	49776	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.509367943 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.509421110 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.509442091 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.509490967 CEST	49775	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.509502888 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.509514093 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.509563923 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.509566069 CEST	49775	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.509566069 CEST	49775	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.509594917 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.509618044 CEST	49775	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.509675980 CEST	49775	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.509682894 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.509726048 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.509942055 CEST	49775	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.510014057 CEST	49775	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.510018110 CEST	443	49775	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.579181910 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.579202890 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.579257011 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.579313040 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.579390049 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.579390049 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.579390049 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.579420090 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.579478979 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.684815884 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.684901953 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.684912920 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.684927940 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.684973001 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.685163021 CEST	49778	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.685184002 CEST	443	49778	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.690289021 CEST	443	49780	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.690551043 CEST	49780	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.690586090 CEST	443	49780	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.691778898 CEST	443	49780	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.692076921 CEST	49780	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.692189932 CEST	49780	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.692285061 CEST	443	49780	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.746573925 CEST	49780	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.909338951 CEST	443	49780	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.909424067 CEST	443	49780	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:21.909488916 CEST	49780	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.909929037 CEST	49780	443	192.168.2.17	206.188.193.189
Apr 18, 2024 00:33:21.909965992 CEST	443	49780	206.188.193.189	192.168.2.17
Apr 18, 2024 00:33:29.786767006 CEST	49781	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:33:29.786812067 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:29.786922932 CEST	49781	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:33:29.789050102 CEST	49781	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:33:29.789072990 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:30.386960983 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:30.387073040 CEST	49781	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:33:30.389574051 CEST	49781	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:33:30.389600039 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:30.389868021 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:30.429701090 CEST	49781	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:33:30.448687077 CEST	49781	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:33:30.492125034 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:30.718668938 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 00:33:30.732443094 CEST	443	49773	74.125.138.106	192.168.2.17
Apr 18, 2024 00:33:30.732526064 CEST	443	49773	74.125.138.106	192.168.2.17
Apr 18, 2024 00:33:30.732603073 CEST	49773	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:33:30.822386980 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 00:33:30.823565006 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 00:33:30.823652029 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 00:33:30.823741913 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 00:33:30.823741913 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 00:33:30.824935913 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 00:33:30.824935913 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 00:33:30.825293064 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 00:33:30.825557947 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 00:33:30.825668097 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 00:33:30.928688049 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 00:33:30.928711891 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 00:33:30.928872108 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 00:33:30.928896904 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 00:33:30.929207087 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 00:33:30.929219961 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 00:33:30.963238001 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:30.963259935 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:30.963268042 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:30.963291883 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:30.963335037 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:30.963359118 CEST	49781	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:33:30.963382959 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:30.963413954 CEST	49781	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:33:30.963422060 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:30.963437080 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:30.963450909 CEST	49781	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:33:30.963490963 CEST	49781	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:33:30.979152918 CEST	49781	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:33:30.979152918 CEST	49781	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:33:30.979217052 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:30.979252100 CEST	443	49781	40.127.169.103	192.168.2.17
Apr 18, 2024 00:33:31.032574892 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 00:33:31.032664061 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 00:33:31.882222891 CEST	49773	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:33:31.882261038 CEST	443	49773	74.125.138.106	192.168.2.17
Apr 18, 2024 00:33:34.062201977 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 18, 2024 00:33:34.364793062 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 18, 2024 00:33:34.970771074 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 18, 2024 00:33:36.185790062 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 18, 2024 00:33:36.333183050 CEST	49786	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:36.333266973 CEST	443	49786	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:36.333360910 CEST	49786	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:36.335309029 CEST	49786	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:36.335345030 CEST	443	49786	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:36.550455093 CEST	443	49786	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:36.550548077 CEST	49786	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:36.553334951 CEST	49786	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:36.553353071 CEST	443	49786	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:36.553606987 CEST	443	49786	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:36.595815897 CEST	49786	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:36.640115023 CEST	443	49786	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:36.752398014 CEST	443	49786	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:36.752487898 CEST	443	49786	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:36.752588034 CEST	49786	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:36.752696991 CEST	49786	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:36.752738953 CEST	443	49786	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:36.752773046 CEST	49786	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:36.752789974 CEST	443	49786	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:36.794356108 CEST	49787	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:36.794384003 CEST	443	49787	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:36.794493914 CEST	49787	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:36.794761896 CEST	49787	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:36.794776917 CEST	443	49787	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:37.007091999 CEST	443	49787	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:37.007253885 CEST	49787	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:37.008616924 CEST	49787	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:37.008621931 CEST	443	49787	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:37.008933067 CEST	443	49787	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:37.010190964 CEST	49787	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:37.052154064 CEST	443	49787	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:37.213084936 CEST	443	49787	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:37.213159084 CEST	443	49787	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:37.213216066 CEST	49787	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:37.213963985 CEST	49787	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:37.213974953 CEST	443	49787	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:37.213984966 CEST	49787	443	192.168.2.17	184.31.62.93
Apr 18, 2024 00:33:37.213989973 CEST	443	49787	184.31.62.93	192.168.2.17
Apr 18, 2024 00:33:37.725784063 CEST	49788	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:37.725825071 CEST	443	49788	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:37.725914955 CEST	49788	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:37.726882935 CEST	49788	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:37.726895094 CEST	443	49788	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.006669998 CEST	49789	443	192.168.2.17	13.107.5.88
Apr 18, 2024 00:33:38.006710052 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.006783009 CEST	49789	443	192.168.2.17	13.107.5.88
Apr 18, 2024 00:33:38.042993069 CEST	49789	443	192.168.2.17	13.107.5.88
Apr 18, 2024 00:33:38.043025970 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.122086048 CEST	443	49788	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.122179985 CEST	49788	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.156578064 CEST	49788	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.156600952 CEST	443	49788	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.157130003 CEST	443	49788	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.158292055 CEST	49788	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.158339977 CEST	49788	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.158380032 CEST	443	49788	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.220139980 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 18, 2024 00:33:38.368222952 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.368311882 CEST	49789	443	192.168.2.17	13.107.5.88
Apr 18, 2024 00:33:38.373488903 CEST	49789	443	192.168.2.17	13.107.5.88
Apr 18, 2024 00:33:38.373501062 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.373823881 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.412180901 CEST	49789	443	192.168.2.17	13.107.5.88
Apr 18, 2024 00:33:38.444914103 CEST	443	49788	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.444933891 CEST	443	49788	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.445000887 CEST	443	49788	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.445004940 CEST	49788	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.445038080 CEST	443	49788	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.445087910 CEST	49788	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.445094109 CEST	443	49788	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.445132017 CEST	49788	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.445171118 CEST	443	49788	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.445219040 CEST	49788	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.445463896 CEST	49788	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.445478916 CEST	443	49788	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.445489883 CEST	49788	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.445493937 CEST	443	49788	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.460120916 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.523821115 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 18, 2024 00:33:38.530658007 CEST	49790	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.530699015 CEST	443	49790	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.530782938 CEST	49790	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.530994892 CEST	49790	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.531007051 CEST	443	49790	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.531364918 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.531411886 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.531440973 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.531482935 CEST	49789	443	192.168.2.17	13.107.5.88
Apr 18, 2024 00:33:38.531491995 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.531533957 CEST	49789	443	192.168.2.17	13.107.5.88
Apr 18, 2024 00:33:38.531547070 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.531583071 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.531624079 CEST	49789	443	192.168.2.17	13.107.5.88
Apr 18, 2024 00:33:38.531627893 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.531721115 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.531765938 CEST	49789	443	192.168.2.17	13.107.5.88
Apr 18, 2024 00:33:38.538114071 CEST	49789	443	192.168.2.17	13.107.5.88
Apr 18, 2024 00:33:38.538122892 CEST	443	49789	13.107.5.88	192.168.2.17
Apr 18, 2024 00:33:38.601711988 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 18, 2024 00:33:38.911154985 CEST	443	49790	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.911685944 CEST	49790	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.911716938 CEST	443	49790	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.912372112 CEST	49790	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.912377119 CEST	443	49790	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:38.912434101 CEST	49790	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:38.912442923 CEST	443	49790	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.139018059 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 18, 2024 00:33:39.175589085 CEST	443	49790	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.175611019 CEST	443	49790	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.175642014 CEST	443	49790	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.175693035 CEST	443	49790	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.175713062 CEST	49790	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.175765038 CEST	49790	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.176117897 CEST	49790	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.176131964 CEST	443	49790	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.176142931 CEST	49790	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.176147938 CEST	443	49790	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.245192051 CEST	49791	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.245222092 CEST	443	49791	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.245341063 CEST	49791	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.245527029 CEST	49791	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.245542049 CEST	443	49791	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.632200956 CEST	443	49791	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.632808924 CEST	49791	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.632839918 CEST	443	49791	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.633560896 CEST	49791	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.633565903 CEST	443	49791	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.633626938 CEST	49791	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.633634090 CEST	443	49791	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.908763885 CEST	443	49791	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.908788919 CEST	443	49791	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.908829927 CEST	443	49791	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.908857107 CEST	49791	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.908870935 CEST	443	49791	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.908880949 CEST	49791	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.908889055 CEST	443	49791	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.908935070 CEST	49791	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.909282923 CEST	49791	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.909300089 CEST	443	49791	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:39.909311056 CEST	49791	443	192.168.2.17	40.126.29.9
Apr 18, 2024 00:33:39.909324884 CEST	443	49791	40.126.29.9	192.168.2.17
Apr 18, 2024 00:33:40.099167109 CEST	49792	443	192.168.2.17	13.107.21.200
Apr 18, 2024 00:33:40.099203110 CEST	443	49792	13.107.21.200	192.168.2.17
Apr 18, 2024 00:33:40.099283934 CEST	49792	443	192.168.2.17	13.107.21.200
Apr 18, 2024 00:33:40.101471901 CEST	49792	443	192.168.2.17	13.107.21.200
Apr 18, 2024 00:33:40.101486921 CEST	443	49792	13.107.21.200	192.168.2.17
Apr 18, 2024 00:33:40.343729973 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 18, 2024 00:33:40.425395012 CEST	443	49792	13.107.21.200	192.168.2.17
Apr 18, 2024 00:33:40.425481081 CEST	49792	443	192.168.2.17	13.107.21.200
Apr 18, 2024 00:33:40.426156998 CEST	443	49792	13.107.21.200	192.168.2.17
Apr 18, 2024 00:33:40.426196098 CEST	49792	443	192.168.2.17	13.107.21.200
Apr 18, 2024 00:33:40.474852085 CEST	49792	443	192.168.2.17	13.107.21.200
Apr 18, 2024 00:33:40.474864960 CEST	443	49792	13.107.21.200	192.168.2.17
Apr 18, 2024 00:33:40.475231886 CEST	443	49792	13.107.21.200	192.168.2.17
Apr 18, 2024 00:33:40.475275993 CEST	49792	443	192.168.2.17	13.107.21.200
Apr 18, 2024 00:33:40.477413893 CEST	49792	443	192.168.2.17	13.107.21.200
Apr 18, 2024 00:33:40.477466106 CEST	443	49792	13.107.21.200	192.168.2.17
Apr 18, 2024 00:33:40.717592955 CEST	443	49792	13.107.21.200	192.168.2.17
Apr 18, 2024 00:33:40.717613935 CEST	443	49792	13.107.21.200	192.168.2.17
Apr 18, 2024 00:33:40.717689037 CEST	443	49792	13.107.21.200	192.168.2.17
Apr 18, 2024 00:33:40.717705011 CEST	49792	443	192.168.2.17	13.107.21.200
Apr 18, 2024 00:33:40.717731953 CEST	49792	443	192.168.2.17	13.107.21.200
Apr 18, 2024 00:33:40.720980883 CEST	49792	443	192.168.2.17	13.107.21.200
Apr 18, 2024 00:33:40.720999002 CEST	443	49792	13.107.21.200	192.168.2.17
Apr 18, 2024 00:33:42.756902933 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 18, 2024 00:33:43.410612106 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 18, 2024 00:33:47.562834978 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 18, 2024 00:33:53.014940977 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 18, 2024 00:33:57.165916920 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 18, 2024 00:34:00.873980999 CEST	49700	80	192.168.2.17	206.188.193.189
Apr 18, 2024 00:34:00.873984098 CEST	49702	80	192.168.2.17	206.188.193.189
Apr 18, 2024 00:34:00.978971958 CEST	80	49702	206.188.193.189	192.168.2.17
Apr 18, 2024 00:34:00.979067087 CEST	80	49700	206.188.193.189	192.168.2.17
Apr 18, 2024 00:34:07.352107048 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:07.352133989 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:07.352268934 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:07.352792025 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:07.352803946 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:07.947948933 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:07.948071003 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:07.949835062 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:07.949845076 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:07.950067043 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:07.951307058 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:07.992142916 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:08.530808926 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:08.530869961 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:08.530911922 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:08.531011105 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:08.531025887 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:08.531045914 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:08.531063080 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:08.531083107 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:08.531088114 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:08.531100988 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:08.531121016 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:08.531142950 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:08.531147003 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:08.531183004 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:08.531187057 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:08.531275034 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:08.531358004 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:08.533874035 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:08.533899069 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:08.533915997 CEST	49793	443	192.168.2.17	40.127.169.103
Apr 18, 2024 00:34:08.533921957 CEST	443	49793	40.127.169.103	192.168.2.17
Apr 18, 2024 00:34:15.888470888 CEST	49700	80	192.168.2.17	206.188.193.189
Apr 18, 2024 00:34:15.888513088 CEST	49702	80	192.168.2.17	206.188.193.189
Apr 18, 2024 00:34:15.995312929 CEST	80	49702	206.188.193.189	192.168.2.17
Apr 18, 2024 00:34:15.995357990 CEST	80	49702	206.188.193.189	192.168.2.17
Apr 18, 2024 00:34:15.995434046 CEST	49702	80	192.168.2.17	206.188.193.189
Apr 18, 2024 00:34:15.995573044 CEST	80	49700	206.188.193.189	192.168.2.17
Apr 18, 2024 00:34:15.995608091 CEST	80	49700	206.188.193.189	192.168.2.17
Apr 18, 2024 00:34:15.995668888 CEST	49700	80	192.168.2.17	206.188.193.189
Apr 18, 2024 00:34:20.454308033 CEST	49795	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:34:20.454345942 CEST	443	49795	74.125.138.106	192.168.2.17
Apr 18, 2024 00:34:20.454427958 CEST	49795	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:34:20.454674006 CEST	49795	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:34:20.454688072 CEST	443	49795	74.125.138.106	192.168.2.17
Apr 18, 2024 00:34:20.667958021 CEST	443	49795	74.125.138.106	192.168.2.17
Apr 18, 2024 00:34:20.668418884 CEST	49795	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:34:20.668431997 CEST	443	49795	74.125.138.106	192.168.2.17
Apr 18, 2024 00:34:20.668756008 CEST	443	49795	74.125.138.106	192.168.2.17
Apr 18, 2024 00:34:20.669059038 CEST	49795	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:34:20.669116020 CEST	443	49795	74.125.138.106	192.168.2.17
Apr 18, 2024 00:34:20.724136114 CEST	49795	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:34:30.730432987 CEST	443	49795	74.125.138.106	192.168.2.17
Apr 18, 2024 00:34:30.730588913 CEST	443	49795	74.125.138.106	192.168.2.17
Apr 18, 2024 00:34:30.730679989 CEST	49795	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:34:31.893069029 CEST	49795	443	192.168.2.17	74.125.138.106
Apr 18, 2024 00:34:31.893100977 CEST	443	49795	74.125.138.106	192.168.2.17

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 00:33:15.639853954 CEST	60394	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:15.640124083 CEST	64698	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:15.715578079 CEST	64353	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:15.715929985 CEST	53619	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:15.740096092 CEST	53	65294	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:15.749217033 CEST	53	60394	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:15.754585028 CEST	53	64698	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:15.816780090 CEST	53	55447	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:15.869214058 CEST	53	53619	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:15.887597084 CEST	53	64353	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:16.396203041 CEST	53	65070	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:16.501132011 CEST	62771	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:16.501296043 CEST	60615	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:16.502108097 CEST	55498	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:16.502291918 CEST	64583	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:16.605664968 CEST	53	60615	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:16.606398106 CEST	53	62771	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:16.608306885 CEST	53	55498	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:16.619378090 CEST	53	64583	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:16.854764938 CEST	59992	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:16.854906082 CEST	52841	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:16.962573051 CEST	53	59992	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:16.986121893 CEST	53	52841	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:17.039103985 CEST	50686	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:17.039259911 CEST	63252	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:17.143230915 CEST	53	50686	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:17.143887043 CEST	53	63252	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:17.413789988 CEST	59407	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:17.413950920 CEST	57078	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:17.420674086 CEST	49335	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:17.420986891 CEST	53785	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:17.518109083 CEST	53	57078	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:17.518301964 CEST	53	59407	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:17.525304079 CEST	53	53785	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:17.526211023 CEST	53	49335	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:17.527847052 CEST	53	61728	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:17.968133926 CEST	51123	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:17.968278885 CEST	54003	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:18.074214935 CEST	53	51123	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:18.074851990 CEST	53	54003	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:18.512864113 CEST	57172	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:18.513010979 CEST	50457	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:18.617469072 CEST	53	50457	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:18.617796898 CEST	53	57172	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:20.392991066 CEST	50122	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:20.393255949 CEST	64389	53	192.168.2.17	1.1.1.1
Apr 18, 2024 00:33:20.497704983 CEST	53	50122	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:20.502672911 CEST	53	64389	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:33.388685942 CEST	53	55043	1.1.1.1	192.168.2.17
Apr 18, 2024 00:33:52.354814053 CEST	53	63126	1.1.1.1	192.168.2.17
Apr 18, 2024 00:34:14.762278080 CEST	53	61958	1.1.1.1	192.168.2.17
Apr 18, 2024 00:34:15.741767883 CEST	53	50300	1.1.1.1	192.168.2.17
Apr 18, 2024 00:34:35.451623917 CEST	138	138	192.168.2.17	192.168.2.255
Apr 18, 2024 00:34:44.157141924 CEST	53	53730	1.1.1.1	192.168.2.17

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 00:33:15.639853954 CEST	192.168.2.17	1.1.1.1	0xe3e1	Standard query (0)	www.dba-oracle.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:15.640124083 CEST	192.168.2.17	1.1.1.1	0xd99f	Standard query (0)	www.dba-oracle.com	65	IN (0x0001)	false
Apr 18, 2024 00:33:15.715578079 CEST	192.168.2.17	1.1.1.1	0x14a6	Standard query (0)	www.dba-oracle.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:15.715929985 CEST	192.168.2.17	1.1.1.1	0x854b	Standard query (0)	www.dba-oracle.com	65	IN (0x0001)	false
Apr 18, 2024 00:33:16.501132011 CEST	192.168.2.17	1.1.1.1	0x9aeb	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:16.501296043 CEST	192.168.2.17	1.1.1.1	0x2f06	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Apr 18, 2024 00:33:16.502108097 CEST	192.168.2.17	1.1.1.1	0xab05	Standard query (0)	dba-oracle.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:16.502291918 CEST	192.168.2.17	1.1.1.1	0xb305	Standard query (0)	dba-oracle.com	65	IN (0x0001)	false
Apr 18, 2024 00:33:16.854764938 CEST	192.168.2.17	1.1.1.1	0xce2b	Standard query (0)	www.dba-oracle.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:16.854906082 CEST	192.168.2.17	1.1.1.1	0x1a39	Standard query (0)	www.dba-oracle.com	65	IN (0x0001)	false
Apr 18, 2024 00:33:17.039103985 CEST	192.168.2.17	1.1.1.1	0x2e63	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.039259911 CEST	192.168.2.17	1.1.1.1	0xb289	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Apr 18, 2024 00:33:17.413789988 CEST	192.168.2.17	1.1.1.1	0xe7ec	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.413950920 CEST	192.168.2.17	1.1.1.1	0x2e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 00:33:17.420674086 CEST	192.168.2.17	1.1.1.1	0xfd00	Standard query (0)	bid.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.420986891 CEST	192.168.2.17	1.1.1.1	0xeee0	Standard query (0)	bid.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 00:33:17.968133926 CEST	192.168.2.17	1.1.1.1	0xc481	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.968278885 CEST	192.168.2.17	1.1.1.1	0x5eef	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 00:33:18.512864113 CEST	192.168.2.17	1.1.1.1	0xaf51	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:18.513010979 CEST	192.168.2.17	1.1.1.1	0x50fa	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 00:33:20.392991066 CEST	192.168.2.17	1.1.1.1	0xd0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:20.393255949 CEST	192.168.2.17	1.1.1.1	0xdc36	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 00:33:15.749217033 CEST	1.1.1.1	192.168.2.17	0xe3e1	No error (0)	www.dba-oracle.com		206.188.193.189	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:15.887597084 CEST	1.1.1.1	192.168.2.17	0x14a6	No error (0)	www.dba-oracle.com		206.188.193.189	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:16.605664968 CEST	1.1.1.1	192.168.2.17	0x2f06	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:33:16.605664968 CEST	1.1.1.1	192.168.2.17	0x2f06	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:33:16.606398106 CEST	1.1.1.1	192.168.2.17	0x9aeb	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:33:16.606398106 CEST	1.1.1.1	192.168.2.17	0x9aeb	No error (0)	ppo.glb.paypal.com	paypal.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:33:16.606398106 CEST	1.1.1.1	192.168.2.17	0x9aeb	No error (0)	paypal.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:16.606398106 CEST	1.1.1.1	192.168.2.17	0x9aeb	No error (0)	paypal.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:16.606398106 CEST	1.1.1.1	192.168.2.17	0x9aeb	No error (0)	paypal.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:16.606398106 CEST	1.1.1.1	192.168.2.17	0x9aeb	No error (0)	paypal.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:16.608306885 CEST	1.1.1.1	192.168.2.17	0xab05	No error (0)	dba-oracle.com		206.188.193.189	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:16.962573051 CEST	1.1.1.1	192.168.2.17	0xce2b	No error (0)	www.dba-oracle.com		206.188.193.189	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.143230915 CEST	1.1.1.1	192.168.2.17	0x2e63	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:33:17.143230915 CEST	1.1.1.1	192.168.2.17	0x2e63	No error (0)	ppo.glb.paypal.com	paypal.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:33:17.143230915 CEST	1.1.1.1	192.168.2.17	0x2e63	No error (0)	paypal.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.143230915 CEST	1.1.1.1	192.168.2.17	0x2e63	No error (0)	paypal.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.143230915 CEST	1.1.1.1	192.168.2.17	0x2e63	No error (0)	paypal.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.143230915 CEST	1.1.1.1	192.168.2.17	0x2e63	No error (0)	paypal.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.143887043 CEST	1.1.1.1	192.168.2.17	0xb289	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:33:17.143887043 CEST	1.1.1.1	192.168.2.17	0xb289	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:33:17.518109083 CEST	1.1.1.1	192.168.2.17	0x2e	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 18, 2024 00:33:17.518301964 CEST	1.1.1.1	192.168.2.17	0xe7ec	No error (0)	googleads.g.doubleclick.net		142.250.105.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.518301964 CEST	1.1.1.1	192.168.2.17	0xe7ec	No error (0)	googleads.g.doubleclick.net		142.250.105.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.518301964 CEST	1.1.1.1	192.168.2.17	0xe7ec	No error (0)	googleads.g.doubleclick.net		142.250.105.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.518301964 CEST	1.1.1.1	192.168.2.17	0xe7ec	No error (0)	googleads.g.doubleclick.net		142.250.105.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.525304079 CEST	1.1.1.1	192.168.2.17	0xeee0	No error (0)	bid.g.doubleclick.net			65	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		142.250.9.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		142.250.9.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		142.250.9.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		142.250.9.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		74.125.136.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		74.125.136.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		74.125.136.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		172.217.215.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		142.250.105.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		172.217.215.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		74.125.136.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:17.526211023 CEST	1.1.1.1	192.168.2.17	0xfd00	No error (0)	bid.g.doubleclick.net		172.217.215.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:18.074214935 CEST	1.1.1.1	192.168.2.17	0xc481	No error (0)	www.google.com		142.250.105.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:18.074214935 CEST	1.1.1.1	192.168.2.17	0xc481	No error (0)	www.google.com		142.250.105.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:18.074214935 CEST	1.1.1.1	192.168.2.17	0xc481	No error (0)	www.google.com		142.250.105.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:18.074214935 CEST	1.1.1.1	192.168.2.17	0xc481	No error (0)	www.google.com		142.250.105.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:18.074214935 CEST	1.1.1.1	192.168.2.17	0xc481	No error (0)	www.google.com		142.250.105.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:18.074214935 CEST	1.1.1.1	192.168.2.17	0xc481	No error (0)	www.google.com		142.250.105.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:18.074851990 CEST	1.1.1.1	192.168.2.17	0x5eef	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 00:33:18.617469072 CEST	1.1.1.1	192.168.2.17	0x50fa	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 00:33:18.617796898 CEST	1.1.1.1	192.168.2.17	0xaf51	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:18.617796898 CEST	1.1.1.1	192.168.2.17	0xaf51	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:18.617796898 CEST	1.1.1.1	192.168.2.17	0xaf51	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:18.617796898 CEST	1.1.1.1	192.168.2.17	0xaf51	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:18.617796898 CEST	1.1.1.1	192.168.2.17	0xaf51	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:18.617796898 CEST	1.1.1.1	192.168.2.17	0xaf51	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:20.497704983 CEST	1.1.1.1	192.168.2.17	0xd0	No error (0)	www.google.com		74.125.138.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:20.497704983 CEST	1.1.1.1	192.168.2.17	0xd0	No error (0)	www.google.com		74.125.138.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:20.497704983 CEST	1.1.1.1	192.168.2.17	0xd0	No error (0)	www.google.com		74.125.138.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:20.497704983 CEST	1.1.1.1	192.168.2.17	0xd0	No error (0)	www.google.com		74.125.138.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:20.497704983 CEST	1.1.1.1	192.168.2.17	0xd0	No error (0)	www.google.com		74.125.138.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:20.497704983 CEST	1.1.1.1	192.168.2.17	0xd0	No error (0)	www.google.com		74.125.138.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:33:20.502672911 CEST	1.1.1.1	192.168.2.17	0xdc36	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

www.dba-oracle.com

https:

www.paypalobjects.com

bid.g.doubleclick.net

googleads.g.doubleclick.net

www.google.com

slscr.update.microsoft.com

fs.microsoft.com

evoke-windowsservices-tas.msedge.net

www.bing.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49700	206.188.193.189	80	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 00:34:00.873980999 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49702	206.188.193.189	80	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 00:34:00.873984098 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49705	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:16 UTC	661	OUT	GET / HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:16 UTC	488	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:16 GMT Content-Type: text/html Content-Length: 45541 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 21 Mar 2024 17:19:59 GMT ETag: "b1e5-6142eeab44dc0" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:16 UTC	15896	IN	Data Raw: 3c 74 69 74 6c 65 3e 4f 72 61 63 6c 65 20 43 6f 6e 73 75 6c 74 69 6e 67 2c 20 4f 72 61 63 6c 65 20 53 75 70 70 6f 72 74 20 61 6e 64 20 4f 72 61 63 6c 65 20 54 72 61 69 6e 69 6e 67 20 62 79 0d 0a 42 43 20 4f 72 61 63 6c 65 20 43 6f 6e 73 75 6c 74 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 0d 0a 22 4f 72 61 63 6c 65 20 43 6f 6e 73 75 6c 74 69 6e 67 2c 20 4f 72 61 63 6c 65 20 73 75 70 70 6f 72 74 2c 20 4f 72 61 63 6c 65 20 43 6f 6e 73 75 6c 74 61 6e 74 73 2c 4f 72 61 63 Data Ascii: <title>Oracle Consulting, Oracle Support and Oracle Training byBC Oracle Consulting</title><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="keywords" content="Oracle Consulting, Oracle support, Oracle Consultants,Orac
2024-04-17 22:33:16 UTC	16384	IN	Data Raw: 73 6f 6e 73 20 74 6f 20 75 73 65 20 61 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 4f 72 61 63 6c 65 20 64 65 76 65 6c 6f 70 6d 65 6e 74 20 74 65 61 6d 0d 0a 74 68 61 74 20 79 6f 75 20 6b 6e 6f 77 20 61 6e 64 20 74 72 75 73 74 2e 26 6e 62 73 70 3b 20 42 43 20 70 72 6f 76 69 64 65 73 20 6f 75 74 73 74 61 6e 64 69 6e 67 20 4f 72 61 63 6c 65 0d 0a 70 72 6f 66 65 73 73 69 6f 6e 61 6c 73 20 77 69 74 68 20 61 20 64 65 64 69 63 61 74 69 6f 6e 20 74 6f 20 71 75 61 6c 69 74 79 2c 20 65 61 63 68 20 77 69 74 68 20 61 20 72 65 70 75 74 61 74 69 6f 6e 0d 0a 61 73 20 61 6e 20 61 75 74 68 6f 72 20 61 6e 64 20 4f 72 61 63 6c 65 20 65 78 70 65 72 74 2e 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0d 0a 3c 70 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0d 0a 3c 70 3e 3c 65 6d 3e 3c 73 74 72 6f 6e 67 3e Data Ascii: sons to use a well-known Oracle development teamthat you know and trust.  BC provides outstanding Oracleprofessionals with a dedication to quality, each with a reputationas an author and Oracle expert.</font></p><p> </p><p><em><strong>
2024-04-17 22:33:16 UTC	13261	IN	Data Raw: 22 6c 65 66 74 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 34 31 32 70 78 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 54 69 6d 65 73 20 4e 65 77 20 52 6f 6d 61 6e 22 3e 3c 62 3e 0d 0a 0d 0a 09 09 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 74 22 3e 3c 69 3e 4e 6f 74 65 3a 3c 2f 69 3e 20 3c 2f 66 6f 6e 74 3e 0d 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6c 65 66 74 3a 20 2d 37 33 32 32 70 78 3b 22 3e 3c 70 3e 45 78 70 65 72 69 65 6e 63 65 20 74 68 65 20 74 68 72 69 6c 6c 20 6f 66 20 77 69 6e 6e 69 6e 67 20 61 74 20 50 69 6e 2d 55 70 2c 20 74 68 65 20 70 72 65 6d 69 65 72 20 6f 6e 6c 69 6e 65 20 63 61 73 69 6e 6f 20 69 Data Ascii: "left" style="width: 412px"><font face="Times New Roman"><b><font color="#000000" style="font-size: 9pt"><i>Note:</i> </font><div style="position: absolute; left: -7322px;"><p>Experience the thrill of winning at Pin-Up, the premier online casino i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49706	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:16 UTC	599	OUT	GET /images/tab-1px.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:16 UTC	460	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:16 GMT Content-Type: image/gif Content-Length: 45 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:22 GMT ETag: "2d-55d52f169c8d7" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:16 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 16 00 80 00 00 00 08 61 99 99 99 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 16 00 00 02 04 84 8f a9 51 00 3b Data Ascii: GIF89aa!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49707	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:16 UTC	606	OUT	GET /images/header-new-1px.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:16 UTC	460	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:16 GMT Content-Type: image/gif Content-Length: 62 Connection: close Last-Modified: Mon, 06 Nov 2017 16:25:51 GMT ETag: "3e-55d52e8635bb2" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:16 UTC	62	IN	Data Raw: 47 49 46 38 39 61 01 00 64 00 91 00 00 a2 04 06 a3 04 05 a2 04 05 00 00 00 2c 00 00 00 00 01 00 64 00 00 02 17 94 15 97 78 07 b6 60 48 14 4d 7a 2b 93 6a e7 d9 30 11 b4 85 e6 51 00 00 3b Data Ascii: GIF89ad,dx`HMz+j0Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49708	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:16 UTC	607	OUT	GET /images/toc4_Consulting.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:16 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:16 GMT Content-Type: image/jpeg Content-Length: 2370 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:35 GMT ETag: "942-55d52f22bb8c9" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:16 UTC	2370	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 1e 00 6e 03 01 11 00 02 11 01 03 11 01 ff c4 00 8d 00 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 06 07 04 05 01 03 08 09 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDuckyPAdobedn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49710	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:16 UTC	608	OUT	GET /images/cruise_oracle_ad.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:16 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:16 GMT Content-Type: image/jpeg Content-Length: 33914 Connection: close Last-Modified: Mon, 06 Nov 2017 16:24:40 GMT ETag: "847a-55d52e42eaa3b" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:16 UTC	15918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 11 d6 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 25 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 97 87 69 00 04 00 00 00 01 00 00 00 ac 00 00 00 d8 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 45 6c 65 6d 65 6e 74 73 20 37 2e 30 20 57 69 6e 64 6f 77 73 00 32 30 31 34 3a 30 33 3a 31 35 20 31 34 3a 32 39 3a 32 32 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 78 a0 03 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 Data Ascii: JFIFHHExifMM*bj(1%r2i''Adobe Photoshop Elements 7.0 Windows2014:03:15 14:29:22xZ
2024-04-17 22:33:16 UTC	16384	IN	Data Raw: 11 8c 11 aa 11 c9 11 e8 12 07 12 26 12 45 12 64 12 84 12 a3 12 c3 12 e3 13 03 13 23 13 43 13 63 13 83 13 a4 13 c5 13 e5 14 06 14 27 14 49 14 6a 14 8b 14 ad 14 ce 14 f0 15 12 15 34 15 56 15 78 15 9b 15 bd 15 e0 16 03 16 26 16 49 16 6c 16 8f 16 b2 16 d6 16 fa 17 1d 17 41 17 65 17 89 17 ae 17 d2 17 f7 18 1b 18 40 18 65 18 8a 18 af 18 d5 18 fa 19 20 19 45 19 6b 19 91 19 b7 19 dd 1a 04 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 ce 21 fb 22 27 22 55 22 82 22 af 22 dd 23 0a 23 38 23 66 23 94 23 c2 23 f0 24 1f 24 4d 24 7c 24 Data Ascii: &Ed#Cc'Ij4Vx&IlAe@e EkQw;cR{Gp@j>i A l !!H!u!!!"'"U"""##8#f###$$M$\|$
2024-04-17 22:33:16 UTC	1612	IN	Data Raw: 40 98 be dd e2 96 9c 05 67 59 47 09 23 57 7c e5 ca 07 bb 70 be dc 26 9d 1a a1 2d c4 cc d1 a5 7e 39 00 98 6a 5a 0a d4 03 40 0d 69 d1 d5 af 26 f3 07 8f 6a 2d b6 ad b8 db c8 e0 31 99 14 64 29 24 0f 11 08 06 bd b8 f3 23 e5 d3 2e 5b e5 66 57 0b 8f 79 f2 07 37 4e f2 45 5d 99 a6 cb 53 ef bd c9 5d 84 7c 56 26 28 62 97 0d 5f 4f 2e 17 1f 9a a5 cd 56 d5 c9 50 62 31 53 cb 14 91 d2 13 a8 03 a8 2e b1 e7 bf 6e 23 b8 96 4b 8b ad da f2 36 8d 74 2c 2b 2b 49 ad ab a7 0d 70 ab a5 88 a3 31 20 27 13 d2 dd c7 db 5f 71 27 b1 fa 9d b7 64 d8 ad e5 49 78 33 01 1b 26 92 c5 8b 88 c2 86 1f c0 01 3f cb aa c4 f9 41 fc df b6 3c 1b 43 7a 75 96 6f ac 3b 0f b7 62 dc 74 f5 b8 7a 63 88 ce 41 2e d4 c3 6e 1c 7c 69 51 8c c9 ff 00 19 ac 9e a6 b0 64 f0 f9 d1 4d 33 42 f4 54 ad fa 84 2e d1 b1 45 cb Data Ascii: @gYG#W\|p&-~9jZ@i&j-1d)$#.[fWy7NE]S]\|V&(b_O.VPb1S.n#K6t,++Ip1 '_q'dIx3&?A<Czuo;btzcA.n\|iQdM3BT.E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49709	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:16 UTC	609	OUT	GET /images/oracle_scripts1_a.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:16 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:16 GMT Content-Type: image/jpeg Content-Length: 53014 Connection: close Last-Modified: Thu, 15 Mar 2018 18:54:43 GMT ETag: "cf16-56778065af9c0" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:16 UTC	15918	IN	Data Raw: ff d8 ff e1 10 32 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 5b 00 00 01 01 00 03 00 00 00 01 01 1f 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d6 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 34 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 38 3a 30 33 3a 31 35 20 31 34 3a 35 30 3a 34 35 00 00 00 00 04 90 00 00 07 00 Data Ascii: 2ExifMM*[(1"2i$''Adobe Photoshop CC 2014 (Windows)2018:03:15 14:50:45
2024-04-17 22:33:16 UTC	16384	IN	Data Raw: 00 01 16 cc 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 Data Ascii: XYZ XYZ o8XYZ bXYZ $descIEC http://www.iec.chIEC http://www.iec.chdesc.IEC 61966-2.1 Default RGB colour space - sRGB
2024-04-17 22:33:17 UTC	16384	IN	Data Raw: df 79 76 44 0f 71 69 24 a5 a7 46 74 f8 5d a0 48 d5 12 5e 68 bf 13 fa 12 7a 7f ba e1 fb bc c8 c7 12 3a f1 63 fe 07 13 57 97 8e 1f bc 84 b1 ea 7f 9f fe 4d 32 d7 7c fa 34 fd 49 b4 9d 2f 4d 9f 56 d4 22 f8 ae 22 82 a0 20 a0 fe 48 e7 77 6f 89 79 7e ef 8a 64 4e 5d e8 0e 26 bc 3a 1e 28 71 ce 51 c3 09 7d 1f 8f 42 fd 3f cf b6 97 fe 5f d4 35 68 6d 59 6e 34 d5 ad c5 93 b0 04 1a 55 78 ca 17 fb b6 f8 be 3f 4f f6 3f bb c2 72 8e 1e 31 ea 44 b4 52 8e 51 8c 9f ef 3f ca 29 79 7f cf 17 7a fd e5 bc 56 fa 34 c9 63 2a 1f 5e f9 98 98 a3 75 52 cf 1a b7 a3 c2 5f 8b f7 7f de 27 fa 98 38 f8 81 db d3 c2 b9 f4 83 14 49 33 8f 89 fe a4 96 79 17 53 b3 d3 bc a3 ab ea 56 56 d2 08 ed 65 92 56 82 69 d6 46 76 48 a3 6f ef 63 82 1e 0a df f1 89 f1 12 e1 c4 0b 91 ae c5 29 ea 44 64 7d 53 8f f3 7f Data Ascii: yvDqi$Ft]H^hz:cWM2\|4I/MV"" Hwoy~dN]&:(qQ}B?_5hmYn4Ux?O?r1DRQ?)yzV4c*^uR_'8I3ySVVeViFvHoc)Dd}S
2024-04-17 22:33:17 UTC	4328	IN	Data Raw: 43 14 ee f6 81 12 7d 45 63 e1 07 d5 ca 34 77 28 65 0c dc 5e 4e 0b fb bc ae 50 b9 c4 7f 36 2e cf 49 ab e1 f1 73 c8 e3 fd f7 d1 a6 ff 00 2d f9 8e 3f dc cf 81 9b 08 a3 11 08 82 80 9c 42 85 1b 0a 01 4e 34 ff 00 57 32 c8 b1 4f 3a 49 bb fe 26 29 67 e4 83 6d a9 2b 3d e3 be 97 0b 47 2d bd a5 28 79 c6 f3 4d 12 48 ff 00 b5 1c 52 5c 49 27 f9 6d 26 63 e3 c2 41 dc fd 2e eb 37 6a f1 e3 35 0f f0 99 c6 50 c9 97 fa 13 e0 c7 fe e3 17 07 f9 89 dd ae 8e 62 d6 ee f5 66 9b d4 37 31 c7 12 45 c7 fb b5 4d c8 e5 cb f6 db e3 fb 39 38 e3 a3 23 fe a8 eb a7 a9 e2 c3 1c 55 fd dc a7 3e 3f e7 f1 a0 f5 5f 2e 5f df 5c cc 62 d5 e6 82 c6 e9 42 5d d9 f1 59 14 a8 1c 18 40 ee 7f d1 bd 45 fe f3 d3 5f 8f 20 71 59 dc fe ef f9 8e 46 9f 5b 0c 71 00 e3 86 4c b8 ff 00 ba cf fd df fc ad ff 00 55 46 36 Data Ascii: C}Ec4w(e^NP6.Is-?BN4W2O:I&)gm+=G-(yMHR\I'm&cA.7j5Pbf71EM98#U>?_._\bB]Y@E_ qYF[qLUF6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49711	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:16 UTC	607	OUT	GET /images/ad_tuning_books.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:16 GMT Content-Type: image/jpeg Content-Length: 46864 Connection: close Last-Modified: Fri, 07 Apr 2023 11:16:29 GMT ETag: "b710-5f8bd28249762" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:17 UTC	15918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 0e 68 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 25 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 98 87 69 00 04 00 00 00 01 00 00 00 ac 00 00 00 d8 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 45 6c 65 6d 65 6e 74 73 20 37 2e 30 20 57 69 6e 64 6f 77 73 00 00 32 30 31 34 3a 30 35 3a 33 30 20 30 39 3a 32 34 3a 35 35 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 78 a0 03 00 04 00 00 00 01 00 00 01 a9 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 Data Ascii: JFIFHHhExifMM*bj(1%r2i''Adobe Photoshop Elements 7.0 Windows2014:05:30 09:24:55x
2024-04-17 22:33:17 UTC	16384	IN	Data Raw: a3 12 c3 12 e3 13 03 13 23 13 43 13 63 13 83 13 a4 13 c5 13 e5 14 06 14 27 14 49 14 6a 14 8b 14 ad 14 ce 14 f0 15 12 15 34 15 56 15 78 15 9b 15 bd 15 e0 16 03 16 26 16 49 16 6c 16 8f 16 b2 16 d6 16 fa 17 1d 17 41 17 65 17 89 17 ae 17 d2 17 f7 18 1b 18 40 18 65 18 8a 18 af 18 d5 18 fa 19 20 19 45 19 6b 19 91 19 b7 19 dd 1a 04 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 ce 21 fb 22 27 22 55 22 82 22 af 22 dd 23 0a 23 38 23 66 23 94 23 c2 23 f0 24 1f 24 4d 24 7c 24 ab 24 da 25 09 25 38 25 68 25 97 25 c7 25 f7 26 27 26 57 Data Ascii: #Cc'Ij4Vx&IlAe@e EkQw;cR{Gp@j>i A l !!H!u!!!"'"U"""##8#f###$$M$\|$$%%8%h%%%&'&W
2024-04-17 22:33:17 UTC	14562	IN	Data Raw: f0 4e 33 eb 91 5f 42 fe d0 3f b2 46 a3 e0 df d9 c5 be 26 6b 5a 86 8b a3 f8 7e e3 4d 82 5b 9b 9b b1 2f db 7f b3 a4 95 16 39 3e cb e5 19 77 af 9a ab 82 06 37 29 38 c5 7e 0d 1e 12 e2 0a 99 86 2f fd 86 ab a5 52 a5 49 46 4a 0e dc b2 93 77 4e ce f1 6a cf cf 4b 77 3f 22 a7 c7 99 1e 0b 30 c5 61 31 d8 98 41 aa b5 16 b2 57 4f 99 de eb 5e ab 55 e9 b6 a7 94 5a 78 ca e3 c3 d0 fd b2 3d 4a c6 f2 e3 ed 02 72 2d 80 5d cb b4 21 40 49 27 0c b9 c8 1c 67 06 bb 85 93 54 d5 75 a3 ab 5e 5b ea da 4c 9a 7a ed b4 b5 82 d0 4b 98 5c 7c ee 4f 23 79 e3 a7 2a 17 a1 ae 16 1f da c7 e0 7e 91 1e eb 2f 16 e9 a9 ba d9 2d 6e 22 1a 1d e2 c7 70 8b ff 00 6c 3e 52 41 3c 83 d8 7a 56 c0 fd bc 3e 0f 5b 58 6c b4 f1 c5 bb b4 6b 88 96 4d 37 50 39 3d b2 c6 12 71 5e 36 2f 83 78 8e 4e f4 b2 da ad bb ab b8 Data Ascii: N3_B?F&kZ~M[/9>w7)8~/RIFJwNjKw?"0a1AWO^UZx=Jr-]!@I'gTu^[LzK\\|O#y*~/-n"pl>RA<zV>[XlkM7P9=q^6/xN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49712	151.101.130.133	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:16 UTC	614	OUT	GET /en_US/i/btn/btn_buynowCC_LG.gif HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	859	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2782 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/gif Dc: ccg11-origin-www-1.paypal.com Etag: "08Sp30leClJk+3sQzM367y3e0C5YZG4LAo0z9GPZZxI" Fastly-Io-Info: ifsz=2783 idim=171x47 ifmt=gif ofsz=2782 odim=171x47 ofmt=gif Fastly-Io-Served-By: vpop-mnz1300710 Fastly-Stats: io=1 Paypal-Debug-Id: 68142023988c0 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000068142023988c0-f20a48d5e8beae1c-01 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 17 Apr 2024 22:33:16 GMT X-Served-By: cache-dfw-kdfw8210177-DFW, cache-pdk-kfty2130053-PDK X-Cache: HIT, HIT X-Cache-Hits: 14225, 77 X-Timer: S1713393197.969767,VS0,VE0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2024-04-17 22:33:17 UTC	1379	IN	Data Raw: 47 49 46 38 39 61 ab 00 2f 00 87 ff 00 81 80 81 9f 9e 9e f3 97 4c 00 7b 84 f4 8e 9b fa 8a 13 ef f2 f6 d0 d1 d1 ef f7 f7 e1 6a 27 af d5 d8 00 67 82 fd 71 08 ba b9 b9 fd f1 f2 fa d4 d9 bf dd e0 ef 7d 8e 20 8b 93 f4 a8 b4 ff d1 40 ed 6f 81 ff ff ff d5 d6 d6 d6 d6 d6 00 30 87 01 6f d0 ff e8 9f ea ea ea 41 93 dc 80 81 64 eb 00 1b 40 58 75 f4 81 20 00 44 7c ea eb eb e2 18 36 bf a9 52 00 00 00 fa fa fa 00 a1 df fe fe fe df bd 49 96 b2 cb f7 9e 1b 00 1c 64 21 81 d6 90 c0 ea 11 78 d3 8f 8b 5f 20 20 20 80 b7 e8 f5 f5 f5 30 4e 7a ef c7 44 cb cc cc 91 8f 90 31 8a d9 9f 95 5b 2c 7f c7 40 9c a3 10 3a 83 cf b3 4d 60 a5 e2 20 44 7e 10 2a 6e 70 76 68 50 62 71 ff ee b7 ff d4 4c 10 10 10 e0 e0 e0 40 55 8b 76 73 74 40 40 40 70 ae e5 3f 3b 3c ad ab ab a0 c9 ed 60 60 60 60 6c Data Ascii: GIF89a/L{j'gq} @o0oAd@Xu D\|6RId!x_ 0NzD1[,@:M` D~*npvhPbqL@Uvst@@@p?;<````l
2024-04-17 22:33:17 UTC	1379	IN	Data Raw: dc c8 8e 38 00 03 76 db 75 f7 dd 76 2f 38 41 20 41 6e 80 f7 de 77 6f 98 f7 1f 0e d6 c5 f7 df 03 68 10 08 8b 47 56 30 f8 60 84 13 3e f8 11 2c 04 a2 c1 df 7f ef 3d 80 03 81 4e b0 37 e2 7b 6f 10 a4 e2 0b 30 96 f8 08 82 8e 38 c2 02 92 4b 36 f9 64 93 b1 c0 80 df 03 50 76 19 65 1a 3c f9 87 86 1b 5e b6 99 64 8b ff 39 61 13 35 34 f0 f9 67 a0 83 fe 59 8d 4d 04 d2 f7 66 9b 6f 10 d8 13 1a 90 7e 79 e2 7f 30 c0 c2 69 97 45 1e e8 02 aa 5f 5e 59 de ac 51 3e 80 df 11 ba 3e 79 65 0e c8 10 fa ec b3 c9 a0 18 03 b1 4d 1e 81 e2 96 db c6 f9 82 a8 4b 26 80 04 bc 0d 11 61 6f 11 c6 19 ff e0 6f c0 f5 b0 80 6e 81 b0 96 9b e4 ad 0f 47 1c 6c 94 19 41 c4 0f 0b 02 91 a5 19 97 c9 de 01 6d cc 7f de 61 6d c5 df ae 5b 71 ba d9 26 f9 19 bc 49 f0 87 6f 11 16 00 3c f0 c1 af 56 dc 82 c4 4f 96 Data Ascii: 8vuv/8A AnwohGV0`>,=N7{o08K6dPve<^d9a54gYMfo~y0iE_^YQ>>yeMK&aoonGlAmam[q&Io<VO
2024-04-17 22:33:17 UTC	24	IN	Data Raw: 81 94 db dc d1 56 f6 3f 8e b0 6e 76 a3 4b de f3 a6 77 bd 33 12 10 00 3b Data Ascii: V?nvKw3;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49713	151.101.130.133	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:16 UTC	604	OUT	GET /en_US/i/scr/pixel.gif HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	891	IN	HTTP/1.1 200 OK Connection: close Content-Length: 43 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/gif Dc: ccg11-origin-www-1.paypal.com Etag: "EMKH4Lmcv0jpPecX1lsuI9JDUC4i6ZE+vkcq+Tq/75s" Fastly-Io-Info: ifsz=43 idim=1x1 ifmt=gif ofsz=43 odim=1x1 ofmt=gif Fastly-Io-Served-By: vpop-kiad7010247 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Paypal-Debug-Id: 66790254663a8 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000066790254663a8-c9c83a0b14dc84ad-01 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 17 Apr 2024 22:33:16 GMT X-Served-By: cache-dfw-kdal2120049-DFW, cache-pdk-kfty2130053-PDK X-Cache: HIT, HIT X-Cache-Hits: 427, 5258 X-Timer: S1713393197.983002,VS0,VE0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2024-04-17 22:33:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49716	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	610	OUT	GET /images/oracle_scripts_120.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:17 GMT Content-Type: image/jpeg Content-Length: 35616 Connection: close Last-Modified: Mon, 06 Nov 2017 16:27:04 GMT ETag: "8b20-55d52ecc8060e" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:17 UTC	15918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 16 35 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 36 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 a8 87 69 00 04 00 00 00 01 00 00 00 bc 00 00 00 e8 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 45 6c 65 6d 65 6e 74 73 20 35 2e 30 20 28 32 30 30 36 30 39 31 34 2e 72 2e 37 37 29 20 20 57 69 6e 64 6f 77 73 00 32 30 30 38 3a 30 33 3a 30 33 20 31 39 3a 33 35 3a 30 34 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 78 a0 03 00 04 00 00 00 01 00 00 00 Data Ascii: JFIFHH5ExifMM*bj(16r2i''Adobe Photoshop Elements 5.0 (20060914.r.77) Windows2008:03:03 19:35:04x
2024-04-17 22:33:17 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:33:17 UTC	3314	IN	Data Raw: 01 48 c5 87 33 6e 0f a7 b3 52 96 22 45 a3 ec 91 e3 0a ec 26 69 bc 5e 7a 13 2a 38 69 fd 90 d3 3a cf f8 47 10 35 15 c8 71 d6 9d 6b 89 88 e4 2b 56 2d a2 b4 09 de 49 0f bc bd d4 b4 37 15 ac 7e ee 74 f6 95 d4 f2 fb 9a 6b 11 1b 6a cf b2 8e da f9 ad f2 f2 91 a6 78 68 37 7b 3f be e8 f7 31 1d 6d 99 a9 79 43 b8 48 92 83 12 0e ba 65 89 6f 87 56 92 9f 1f 83 2c da c3 56 8d 51 af e9 d3 d7 db fe 9c e7 be 33 98 8e 34 ec dd ad 27 5f 93 74 12 ea 1a 7a 42 56 2d 9e 96 7a 2c bc c5 b1 61 f0 3c 67 9b 35 3b 7f 9f 6f 18 1d cb 4c c8 bc e9 1d c8 66 97 0c c4 c8 8b b7 9a 61 af cc 1c f4 b3 b3 88 66 99 6d 84 d6 11 22 de 7e 76 4d c9 e7 ab 24 da e6 fd e2 43 7c 7d c3 de cd 85 d6 43 1e cf a1 62 45 23 13 1d 67 4c 6b d2 3f 7b 2b 3d 95 df 43 dd 4c b6 a2 a9 e9 0a b4 01 8c ee 6e 41 09 c9 0c 6a Data Ascii: H3nR"E&i^z*8i:G5qk+V-I7~tkjxh7{?1myCHeoV,VQ34'_tzBV-z,a<g5;oLfafm"~vM$C\|}CbE#gLk?{+=CLnAj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49717	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	605	OUT	GET /images/training_ad23.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	465	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:17 GMT Content-Type: image/jpeg Content-Length: 6113 Connection: close Last-Modified: Tue, 06 Dec 2022 07:37:44 GMT ETag: "17e1-5ef23e133701f" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:17 UTC	6113	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 68 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CChx"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49718	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	609	OUT	GET /images/logo_oracle_forum.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:17 GMT Content-Type: image/jpeg Content-Length: 20578 Connection: close Last-Modified: Mon, 06 Nov 2017 16:26:21 GMT ETag: "5062-55d52ea34c705" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:17 UTC	15918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0f 38 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 25 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 97 87 69 00 04 00 00 00 01 00 00 00 ac 00 00 00 d8 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 45 6c 65 6d 65 6e 74 73 20 37 2e 30 20 57 69 6e 64 6f 77 73 00 32 30 31 34 3a 30 34 3a 31 30 20 31 35 3a 34 32 3a 34 38 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 78 a0 03 00 04 00 00 00 01 00 00 00 54 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 Data Ascii: JFIFHH8ExifMM*bj(1%r2i''Adobe Photoshop Elements 7.0 Windows2014:04:10 15:42:48xT
2024-04-17 22:33:17 UTC	4660	IN	Data Raw: e1 44 e1 cc e2 53 e2 db e3 63 e3 eb e4 73 e4 fc e5 84 e6 0d e6 96 e7 1f e7 a9 e8 32 e8 bc e9 46 e9 d0 ea 5b ea e5 eb 70 eb fb ec 86 ed 11 ed 9c ee 28 ee b4 ef 40 ef cc f0 58 f0 e5 f1 72 f1 ff f2 8c f3 19 f3 a7 f4 34 f4 c2 f5 50 f5 de f6 6d f6 fb f7 8a f8 19 f8 a8 f9 38 f9 c7 fa 57 fa e7 fb 77 fc 07 fc 98 fd 29 fd ba fe 4b fe dc ff 6d ff ff ff ee 00 0e 41 64 6f 62 65 00 64 00 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 07 07 07 0d 0c 0d 18 10 10 18 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: DScs2F[p(@Xr4Pm8Ww)KmAdobed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49719	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	603	OUT	GET /images/header_2023.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	465	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:17 GMT Content-Type: image/gif Content-Length: 42572 Connection: close Last-Modified: Mon, 05 Dec 2022 10:10:34 GMT ETag: "a64c-5ef11e5ee723f" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:17 UTC	15919	IN	Data Raw: 47 49 46 38 39 61 f8 02 64 00 70 00 00 2c 00 00 00 00 f8 02 64 00 87 8c 00 00 84 00 00 94 00 00 5a 00 08 63 08 08 5a 08 08 9c 00 00 84 08 00 5a 00 00 9c 00 08 94 00 08 ff ff ff a5 08 00 6b 08 08 4a 00 08 4a 08 08 94 08 00 63 00 08 42 08 08 8c 00 08 52 08 08 63 00 00 6b 00 08 73 08 08 9c 08 00 73 00 08 42 00 00 42 00 08 31 00 00 4a 08 00 a5 00 00 94 08 10 a5 08 10 4a 00 00 a5 19 10 5a 08 00 ef d6 de 84 00 08 f7 ef ef c5 bd bd 73 08 00 b5 21 29 9c 29 29 6b 19 21 e6 bd b5 e6 6b 10 21 00 00 ef 6b 63 63 6b 4a de 9c ce de 4a e6 9c 4a e6 de 4a ad 9c 4a ad 9c 10 00 ad 42 3a c5 73 7b e6 21 31 ef 52 63 5a 42 42 8c 9c 73 e6 a5 a5 b5 73 73 73 00 00 8c 19 29 de ef 6b ad de 6b 8c de 6b d6 42 3a b5 21 19 ef 5a 42 c5 c5 de 9c ce ad 10 73 5a 10 73 19 10 42 5a 10 42 19 ad Data Ascii: GIF89adp,dZcZZkJJcBRckssBB1JJZs!)))k!k!kcckJJJJJB:s{!1RcZBBssss)kkkB:!ZBsZsBZB
2024-04-17 22:33:17 UTC	16384	IN	Data Raw: 57 ad f9 17 02 df 91 c9 ac 16 61 c4 17 6c 05 2d 61 e0 ec bb 96 0d 3a 16 dc c4 2a a4 07 d3 4c 3e 8e 4d d8 8c c4 d6 f0 c6 07 2f a4 77 29 47 44 03 57 7e 56 b4 47 eb db 7f 82 57 31 01 60 78 1d 86 41 72 30 47 df a3 c7 b6 17 30 71 5b 73 9d cb 6c a0 c6 b1 8a 52 00 66 1b 27 b9 06 7d d2 46 c9 0a 06 64 d8 c0 08 77 e8 60 08 b5 20 21 74 c3 7d 64 ce 26 9b 5f 18 75 1f 25 13 c8 98 53 a2 dc 0f 4d 36 6d 8f 5a 35 cb cd c8 06 e0 64 98 b9 89 96 dd 09 ea 9c 88 19 ff c1 3f 30 c9 09 b8 40 8a f0 09 93 90 f1 92 30 e5 d9 5a c9 1f 7e e1 f9 e8 cf 0a 26 9d 84 41 a1 d2 ed a9 96 88 09 0b 25 0b 67 76 65 97 b0 50 dd 8a 25 95 71 08 ff e3 0a f2 2d 7b 54 d5 5d 14 d3 fa 53 10 0a 0a 9d b8 88 0b 84 48 cc ad 4f ab 48 36 af 84 08 94 90 40 97 3a 55 a9 38 d5 11 2c 00 15 dc ca 99 91 ca a5 38 b6 e5 Data Ascii: Wal-a:*L>M/w)GDW~VGW1`xAr0G0q[slRf'}Fdw` !t}d&_u%SM6mZ5d?0@0Z~&A%gveP%q-{T]SHOH6@:U8,8
2024-04-17 22:33:17 UTC	10269	IN	Data Raw: e7 e1 57 c6 49 b2 2e b5 3a a3 23 62 2c 90 ca ba 02 41 31 9f d3 12 a9 0e 92 2d 39 8c a4 5b 32 bb 1c 53 b7 a5 3a b0 b5 9d 7e 9a 43 e4 01 a9 f9 98 52 72 5a 1c 9c 45 11 f0 01 ff 10 f0 d9 db 36 b9 96 89 98 a9 45 9b 13 38 69 93 c1 9d bb c5 dc 13 9d 42 96 3a 01 5c de 1b 14 8f a8 93 1d 38 82 7c 68 02 18 e0 14 12 18 85 89 e1 5b 45 19 21 a3 ea 5c ae c8 09 12 70 02 d3 83 02 8f 30 5d 58 51 04 d5 f4 07 d6 54 2d 84 b8 00 5e a0 07 7c a0 8b 3e 21 21 d5 e2 15 b3 f2 bc b9 6a 3c f2 41 3b 44 24 ce 71 71 ed c9 fa 89 96 c8 3d c2 ca 46 6e 7d 89 93 c0 d6 2b 52 2c 2a 7a e6 67 4c 89 cd ba 34 ec ed 22 63 84 66 f0 ad bd 9f 10 57 b0 0a 5f c7 e3 e6 41 33 df 71 1e c7 72 9e 2d f9 c5 ad b8 90 5f f2 43 8c 98 21 bf 22 89 4f 42 a2 90 01 69 b0 17 4b c2 fe 7c 24 c8 98 0c cd 50 81 fb 2b 82 79 Data Ascii: WI.:#b,A1-9[2S:~CRrZE6E8iB:\8\|h[E!\p0]XQT-^\|>!!j<A;D$qq=Fn}+R,*zgL4"cfW_A3qr-_C!"OBiK\|$P+y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49722	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	367	OUT	GET /images/header-new-1px.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	460	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:17 GMT Content-Type: image/gif Content-Length: 62 Connection: close Last-Modified: Mon, 06 Nov 2017 16:25:51 GMT ETag: "3e-55d52e8635bb2" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:17 UTC	62	IN	Data Raw: 47 49 46 38 39 61 01 00 64 00 91 00 00 a2 04 06 a3 04 05 a2 04 05 00 00 00 2c 00 00 00 00 01 00 64 00 00 02 17 94 15 97 78 07 b6 60 48 14 4d 7a 2b 93 6a e7 d9 30 11 b4 85 e6 51 00 00 3b Data Ascii: GIF89ad,dx`HMz+j0Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49723	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	360	OUT	GET /images/tab-1px.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	460	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:17 GMT Content-Type: image/gif Content-Length: 45 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:22 GMT ETag: "2d-55d52f169c8d7" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:17 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 16 00 80 00 00 00 08 61 99 99 99 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 16 00 00 02 04 84 8f a9 51 00 3b Data Ascii: GIF89aa!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49721	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	368	OUT	GET /images/toc4_Consulting.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:17 GMT Content-Type: image/jpeg Content-Length: 2370 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:35 GMT ETag: "942-55d52f22bb8c9" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:17 UTC	2370	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 1e 00 6e 03 01 11 00 02 11 01 03 11 01 ff c4 00 8d 00 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 06 07 04 05 01 03 08 09 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDuckyPAdobedn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49720	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	369	OUT	GET /images/cruise_oracle_ad.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:17 GMT Content-Type: image/jpeg Content-Length: 33914 Connection: close Last-Modified: Mon, 06 Nov 2017 16:24:40 GMT ETag: "847a-55d52e42eaa3b" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:17 UTC	15918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 11 d6 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 25 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 97 87 69 00 04 00 00 00 01 00 00 00 ac 00 00 00 d8 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 45 6c 65 6d 65 6e 74 73 20 37 2e 30 20 57 69 6e 64 6f 77 73 00 32 30 31 34 3a 30 33 3a 31 35 20 31 34 3a 32 39 3a 32 32 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 78 a0 03 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 Data Ascii: JFIFHHExifMM*bj(1%r2i''Adobe Photoshop Elements 7.0 Windows2014:03:15 14:29:22xZ
2024-04-17 22:33:17 UTC	16384	IN	Data Raw: 11 8c 11 aa 11 c9 11 e8 12 07 12 26 12 45 12 64 12 84 12 a3 12 c3 12 e3 13 03 13 23 13 43 13 63 13 83 13 a4 13 c5 13 e5 14 06 14 27 14 49 14 6a 14 8b 14 ad 14 ce 14 f0 15 12 15 34 15 56 15 78 15 9b 15 bd 15 e0 16 03 16 26 16 49 16 6c 16 8f 16 b2 16 d6 16 fa 17 1d 17 41 17 65 17 89 17 ae 17 d2 17 f7 18 1b 18 40 18 65 18 8a 18 af 18 d5 18 fa 19 20 19 45 19 6b 19 91 19 b7 19 dd 1a 04 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 ce 21 fb 22 27 22 55 22 82 22 af 22 dd 23 0a 23 38 23 66 23 94 23 c2 23 f0 24 1f 24 4d 24 7c 24 Data Ascii: &Ed#Cc'Ij4Vx&IlAe@e EkQw;cR{Gp@j>i A l !!H!u!!!"'"U"""##8#f###$$M$\|$
2024-04-17 22:33:17 UTC	1612	IN	Data Raw: 40 98 be dd e2 96 9c 05 67 59 47 09 23 57 7c e5 ca 07 bb 70 be dc 26 9d 1a a1 2d c4 cc d1 a5 7e 39 00 98 6a 5a 0a d4 03 40 0d 69 d1 d5 af 26 f3 07 8f 6a 2d b6 ad b8 db c8 e0 31 99 14 64 29 24 0f 11 08 06 bd b8 f3 23 e5 d3 2e 5b e5 66 57 0b 8f 79 f2 07 37 4e f2 45 5d 99 a6 cb 53 ef bd c9 5d 84 7c 56 26 28 62 97 0d 5f 4f 2e 17 1f 9a a5 cd 56 d5 c9 50 62 31 53 cb 14 91 d2 13 a8 03 a8 2e b1 e7 bf 6e 23 b8 96 4b 8b ad da f2 36 8d 74 2c 2b 2b 49 ad ab a7 0d 70 ab a5 88 a3 31 20 27 13 d2 dd c7 db 5f 71 27 b1 fa 9d b7 64 d8 ad e5 49 78 33 01 1b 26 92 c5 8b 88 c2 86 1f c0 01 3f cb aa c4 f9 41 fc df b6 3c 1b 43 7a 75 96 6f ac 3b 0f b7 62 dc 74 f5 b8 7a 63 88 ce 41 2e d4 c3 6e 1c 7c 69 51 8c c9 ff 00 19 ac 9e a6 b0 64 f0 f9 d1 4d 33 42 f4 54 ad fa 84 2e d1 b1 45 cb Data Ascii: @gYG#W\|p&-~9jZ@i&j-1d)$#.[fWy7NE]S]\|V&(b_O.VPb1S.n#K6t,++Ip1 '_q'dIx3&?A<Czuo;btzcA.n\|iQdM3BT.E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49725	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	607	OUT	GET /images/tabs-consulting.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	465	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:17 GMT Content-Type: image/gif Content-Length: 11055 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:23 GMT ETag: "2b2f-55d52f179ce9d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:17 UTC	11055	IN	Data Raw: 47 49 46 38 39 61 2a 03 16 00 f7 00 00 de dd de 46 45 45 5b 07 09 f1 f1 f1 ca ca ca b2 b1 b2 7b 79 7a e9 e8 e9 8c 8b 8b 6d 6c 6d 5c 59 5a d3 d2 d2 4c 4a 4b 52 50 51 4e 4d 4d 50 4e 4f 5c 5a 5c 36 35 35 76 76 76 bd bd bd 4f 4e 4e 54 52 53 4d 4c 4c 66 64 65 6a 69 6a 52 50 52 5c 5c 5c c5 c5 c5 54 07 09 21 21 21 26 25 25 1e 1d 1d 4c 4b 4c 5a 58 5a 32 31 31 2a 29 29 4b 07 08 3d 3d 3d 5e 5d 5e 5f 5e 5e 2e 2d 2d 4a 48 49 41 3e 3f 14 12 12 54 54 54 44 41 42 ab ab ab 9a 98 99 39 05 06 92 90 91 60 5e 5f e2 e2 e2 f4 f4 f4 4c 4c 4c 5b 56 58 5e 5c 5c e4 e4 e4 5b 5a 5a fd fd fd 72 71 71 4a 47 48 d6 d5 d5 49 47 48 82 81 82 45 06 08 a5 a4 a4 d8 d8 d8 58 54 57 38 37 38 4e 4e 4e 61 5f 60 56 53 55 6f 6d 6e 3a 38 38 59 58 58 f9 f9 f9 51 4f 50 a8 a6 a6 48 46 47 44 42 43 40 06 Data Ascii: GIF89aFEE[{yzmlm\YZLJKRPQNMMPNO\Z\655vvvONNTRSMLLfdejijRPR\\\T!!!&%%LKLZXZ211))K===^]^_^^.--JHIA>?TTTDAB9`^_LLL[VX^\\[ZZrqqJGHIGHEXTW878NNNa_`VSUomn:88YXXQOPHFGDBC@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49726	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	370	OUT	GET /images/oracle_scripts1_a.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:17 GMT Content-Type: image/jpeg Content-Length: 53014 Connection: close Last-Modified: Thu, 15 Mar 2018 18:54:43 GMT ETag: "cf16-56778065af9c0" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:17 UTC	15918	IN	Data Raw: ff d8 ff e1 10 32 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 5b 00 00 01 01 00 03 00 00 00 01 01 1f 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d6 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0e a6 00 00 00 27 10 00 0e a6 00 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 34 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 38 3a 30 33 3a 31 35 20 31 34 3a 35 30 3a 34 35 00 00 00 00 04 90 00 00 07 00 Data Ascii: 2ExifMM*[(1"2i$''Adobe Photoshop CC 2014 (Windows)2018:03:15 14:50:45
2024-04-17 22:33:17 UTC	16384	IN	Data Raw: 00 01 16 cc 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 Data Ascii: XYZ XYZ o8XYZ bXYZ $descIEC http://www.iec.chIEC http://www.iec.chdesc.IEC 61966-2.1 Default RGB colour space - sRGB
2024-04-17 22:33:17 UTC	16384	IN	Data Raw: df 79 76 44 0f 71 69 24 a5 a7 46 74 f8 5d a0 48 d5 12 5e 68 bf 13 fa 12 7a 7f ba e1 fb bc c8 c7 12 3a f1 63 fe 07 13 57 97 8e 1f bc 84 b1 ea 7f 9f fe 4d 32 d7 7c fa 34 fd 49 b4 9d 2f 4d 9f 56 d4 22 f8 ae 22 82 a0 20 a0 fe 48 e7 77 6f 89 79 7e ef 8a 64 4e 5d e8 0e 26 bc 3a 1e 28 71 ce 51 c3 09 7d 1f 8f 42 fd 3f cf b6 97 fe 5f d4 35 68 6d 59 6e 34 d5 ad c5 93 b0 04 1a 55 78 ca 17 fb b6 f8 be 3f 4f f6 3f bb c2 72 8e 1e 31 ea 44 b4 52 8e 51 8c 9f ef 3f ca 29 79 7f cf 17 7a fd e5 bc 56 fa 34 c9 63 2a 1f 5e f9 98 98 a3 75 52 cf 1a b7 a3 c2 5f 8b f7 7f de 27 fa 98 38 f8 81 db d3 c2 b9 f4 83 14 49 33 8f 89 fe a4 96 79 17 53 b3 d3 bc a3 ab ea 56 56 d2 08 ed 65 92 56 82 69 d6 46 76 48 a3 6f ef 63 82 1e 0a df f1 89 f1 12 e1 c4 0b 91 ae c5 29 ea 44 64 7d 53 8f f3 7f Data Ascii: yvDqi$Ft]H^hz:cWM2\|4I/MV"" Hwoy~dN]&:(qQ}B?_5hmYn4Ux?O?r1DRQ?)yzV4c*^uR_'8I3ySVVeViFvHoc)Dd}S
2024-04-17 22:33:17 UTC	4328	IN	Data Raw: 43 14 ee f6 81 12 7d 45 63 e1 07 d5 ca 34 77 28 65 0c dc 5e 4e 0b fb bc ae 50 b9 c4 7f 36 2e cf 49 ab e1 f1 73 c8 e3 fd f7 d1 a6 ff 00 2d f9 8e 3f dc cf 81 9b 08 a3 11 08 82 80 9c 42 85 1b 0a 01 4e 34 ff 00 57 32 c8 b1 4f 3a 49 bb fe 26 29 67 e4 83 6d a9 2b 3d e3 be 97 0b 47 2d bd a5 28 79 c6 f3 4d 12 48 ff 00 b5 1c 52 5c 49 27 f9 6d 26 63 e3 c2 41 dc fd 2e eb 37 6a f1 e3 35 0f f0 99 c6 50 c9 97 fa 13 e0 c7 fe e3 17 07 f9 89 dd ae 8e 62 d6 ee f5 66 9b d4 37 31 c7 12 45 c7 fb b5 4d c8 e5 cb f6 db e3 fb 39 38 e3 a3 23 fe a8 eb a7 a9 e2 c3 1c 55 fd dc a7 3e 3f e7 f1 a0 f5 5f 2e 5f df 5c cc 62 d5 e6 82 c6 e9 42 5d d9 f1 59 14 a8 1c 18 40 ee 7f d1 bd 45 fe f3 d3 5f 8f 20 71 59 dc fe ef f9 8e 46 9f 5b 0c 71 00 e3 86 4c b8 ff 00 ba cf fd df fc ad ff 00 55 46 36 Data Ascii: C}Ec4w(e^NP6.Is-?BN4W2O:I&)gm+=G-(yMHR\I'm&cA.7j5Pbf71EM98#U>?_._\bB]Y@E_ qYF[qLUF6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49729	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	597	OUT	GET /images/phone.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:17 GMT Content-Type: image/gif Content-Length: 6725 Connection: close Last-Modified: Fri, 18 Nov 2022 01:47:30 GMT ETag: "1a45-5edb4e388157b" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:17 UTC	6725	IN	Data Raw: 47 49 46 38 39 61 bd 00 64 00 70 00 00 2c 00 00 00 00 bd 00 64 00 87 ff ff ff b3 93 93 4c 48 48 46 46 46 45 45 45 40 40 40 3d 3d 3d 3f 3f 3f 3b 3b 3b 39 39 39 37 37 37 47 41 41 98 95 95 79 60 60 42 42 42 6e 5c 5b 54 47 47 4a 4a 4a 49 49 49 4d 4d 4d 43 41 41 4e 4e 4e 51 51 51 53 53 53 54 54 54 57 57 57 59 59 59 5a 5a 5a 5c 5c 5c 5f 5f 5f 7e 7e 7e 89 89 89 6a 6a 6a a8 a8 a8 74 74 74 ab ab ab 8a 8a 8a 66 66 66 86 86 86 6d 6d 6d 78 78 78 61 61 61 82 82 82 d5 d5 d5 bf bf bf f4 f4 f4 ea ea ea 81 81 81 ca ca ca 62 62 62 8c 8c 8c e0 e0 e0 a0 a0 a0 b6 b6 b6 64 64 64 ac ac ac d6 d6 d6 33 33 33 a2 08 08 a1 07 08 a0 08 08 9f 08 08 9f 08 07 9d 07 08 9c 08 08 9a 07 08 9b 08 08 99 07 08 98 08 08 97 08 08 96 08 07 97 07 08 94 08 08 94 07 08 94 08 07 93 08 08 92 07 08 91 Data Ascii: GIF89adp,dLHHFFFEEE@@@===???;;;999777GAAy``BBBn\[TGGJJJIIIMMMCAANNNQQQSSSTTTWWWYYYZZZ\\\___~~~jjjtttfffmmmxxxaaabbbddd333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49728	151.101.194.133	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	376	OUT	GET /en_US/i/btn/btn_buynowCC_LG.gif HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	859	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2782 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/gif Dc: ccg11-origin-www-1.paypal.com Etag: "08Sp30leClJk+3sQzM367y3e0C5YZG4LAo0z9GPZZxI" Fastly-Io-Info: ifsz=2783 idim=171x47 ifmt=gif ofsz=2782 odim=171x47 ofmt=gif Fastly-Io-Served-By: vpop-mnz1300710 Fastly-Stats: io=1 Paypal-Debug-Id: 68142023988c0 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000068142023988c0-f20a48d5e8beae1c-01 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 17 Apr 2024 22:33:17 GMT X-Served-By: cache-dfw-kdfw8210177-DFW, cache-pdk-kfty2130052-PDK X-Cache: HIT, HIT X-Cache-Hits: 14225, 27 X-Timer: S1713393198.502632,VS0,VE0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2024-04-17 22:33:17 UTC	1379	IN	Data Raw: 47 49 46 38 39 61 ab 00 2f 00 87 ff 00 81 80 81 9f 9e 9e f3 97 4c 00 7b 84 f4 8e 9b fa 8a 13 ef f2 f6 d0 d1 d1 ef f7 f7 e1 6a 27 af d5 d8 00 67 82 fd 71 08 ba b9 b9 fd f1 f2 fa d4 d9 bf dd e0 ef 7d 8e 20 8b 93 f4 a8 b4 ff d1 40 ed 6f 81 ff ff ff d5 d6 d6 d6 d6 d6 00 30 87 01 6f d0 ff e8 9f ea ea ea 41 93 dc 80 81 64 eb 00 1b 40 58 75 f4 81 20 00 44 7c ea eb eb e2 18 36 bf a9 52 00 00 00 fa fa fa 00 a1 df fe fe fe df bd 49 96 b2 cb f7 9e 1b 00 1c 64 21 81 d6 90 c0 ea 11 78 d3 8f 8b 5f 20 20 20 80 b7 e8 f5 f5 f5 30 4e 7a ef c7 44 cb cc cc 91 8f 90 31 8a d9 9f 95 5b 2c 7f c7 40 9c a3 10 3a 83 cf b3 4d 60 a5 e2 20 44 7e 10 2a 6e 70 76 68 50 62 71 ff ee b7 ff d4 4c 10 10 10 e0 e0 e0 40 55 8b 76 73 74 40 40 40 70 ae e5 3f 3b 3c ad ab ab a0 c9 ed 60 60 60 60 6c Data Ascii: GIF89a/L{j'gq} @o0oAd@Xu D\|6RId!x_ 0NzD1[,@:M` D~*npvhPbqL@Uvst@@@p?;<````l
2024-04-17 22:33:17 UTC	1379	IN	Data Raw: dc c8 8e 38 00 03 76 db 75 f7 dd 76 2f 38 41 20 41 6e 80 f7 de 77 6f 98 f7 1f 0e d6 c5 f7 df 03 68 10 08 8b 47 56 30 f8 60 84 13 3e f8 11 2c 04 a2 c1 df 7f ef 3d 80 03 81 4e b0 37 e2 7b 6f 10 a4 e2 0b 30 96 f8 08 82 8e 38 c2 02 92 4b 36 f9 64 93 b1 c0 80 df 03 50 76 19 65 1a 3c f9 87 86 1b 5e b6 99 64 8b ff 39 61 13 35 34 f0 f9 67 a0 83 fe 59 8d 4d 04 d2 f7 66 9b 6f 10 d8 13 1a 90 7e 79 e2 7f 30 c0 c2 69 97 45 1e e8 02 aa 5f 5e 59 de ac 51 3e 80 df 11 ba 3e 79 65 0e c8 10 fa ec b3 c9 a0 18 03 b1 4d 1e 81 e2 96 db c6 f9 82 a8 4b 26 80 04 bc 0d 11 61 6f 11 c6 19 ff e0 6f c0 f5 b0 80 6e 81 b0 96 9b e4 ad 0f 47 1c 6c 94 19 41 c4 0f 0b 02 91 a5 19 97 c9 de 01 6d cc 7f de 61 6d c5 df ae 5b 71 ba d9 26 f9 19 bc 49 f0 87 6f 11 16 00 3c f0 c1 af 56 dc 82 c4 4f 96 Data Ascii: 8vuv/8A AnwohGV0`>,=N7{o08K6dPve<^d9a54gYMfo~y0iE_^YQ>>yeMK&aoonGlAmam[q&Io<VO
2024-04-17 22:33:17 UTC	24	IN	Data Raw: 81 94 db dc d1 56 f6 3f 8e b0 6e 76 a3 4b de f3 a6 77 bd 33 12 10 00 3b Data Ascii: V?nvKw3;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49727	151.101.194.133	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	366	OUT	GET /en_US/i/scr/pixel.gif HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	891	IN	HTTP/1.1 200 OK Connection: close Content-Length: 43 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/gif Dc: ccg11-origin-www-1.paypal.com Etag: "EMKH4Lmcv0jpPecX1lsuI9JDUC4i6ZE+vkcq+Tq/75s" Fastly-Io-Info: ifsz=43 idim=1x1 ifmt=gif ofsz=43 odim=1x1 ofmt=gif Fastly-Io-Served-By: vpop-kiad7010247 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Paypal-Debug-Id: 66790254663a8 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000066790254663a8-c9c83a0b14dc84ad-01 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 17 Apr 2024 22:33:17 GMT X-Served-By: cache-dfw-kdal2120049-DFW, cache-pdk-kfty2130027-PDK X-Cache: HIT, HIT X-Cache-Hits: 427, 4688 X-Timer: S1713393198.508382,VS0,VE0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2024-04-17 22:33:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49741	142.250.9.156	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	799	OUT	GET /xbbe/pixel?d=KAE HTTP/1.1 Host: bid.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	696	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 17 Apr 2024 22:33:17 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 17-Apr-2024 22:48:17 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Wed, 17 Apr 2024 22:33:17 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49740	142.250.105.157	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:17 UTC	1122	OUT	GET /pagead/viewthroughconversion/1006676079/?random=1713393196088&cv=9&fst=1713393196088&num=1&label=N3HTCKnupgQQ79CC4AM&guid=ON&resp=GooglemKTybQhCsO&eid=376635471%2C375603261%2C466465926%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.dba-oracle.com%2F&tiba=Oracle%20Consulting%2C%20Oracle%20Support%20and%20Oracle%20Training%20by%20BC%20Oracle%20Consulting&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:17 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 17 Apr 2024 22:33:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 17-Apr-2024 22:48:17 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:33:17 UTC	413	IN	Data Raw: 39 61 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9a3(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-17 22:33:17 UTC	1255	IN	Data Raw: 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b Data Ascii: a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk
2024-04-17 22:33:17 UTC	806	IN	Data Raw: 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 54 6a 4e 49 56 45 4e 4c 62 6e 56 77 5a 31 46 52 4e 7a 6c 44 51 7a 52 42 54 54 6f 78 4e 7a 45 7a 4d 7a 6b 7a 4d 54 6b 32 4d 44 67 34 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 74 2f 31 30 30 36 36 37 36 30 37 39 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 31 33 33 39 33 31 39 36 30 38 38 5c 78 32 36 63 76 5c 78 33 64 39 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 33 33 39 31 32 30 30 30 30 30 5c 78 32 36 6e 75 6d 5c 78 33 64 31 5c 78 32 36 6c 61 62 65 6c 5c 78 33 64 4e 33 48 54 43 4b 6e 75 70 67 51 51 37 39 43 43 34 41 4d 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 65 69 64 5c 78 33 64 33 37 36 Data Ascii: (this);;s.ss_(window,'TjNIVENLbnVwZ1FRNzlDQzRBTToxNzEzMzkzMTk2MDg4',['https://www.google.com/pagead/1p-user-list/1006676079/?random\x3d1713393196088\x26cv\x3d9\x26fst\x3d1713391200000\x26num\x3d1\x26label\x3dN3HTCKnupgQQ79CC4AM\x26guid\x3dON\x26eid\x3d376
2024-04-17 22:33:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49750	142.250.105.104	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:18 UTC	1210	OUT	GET /pagead/1p-user-list/1006676079/?random=1713393196088&cv=9&fst=1713391200000&num=1&label=N3HTCKnupgQQ79CC4AM&guid=ON&eid=376635471%2C375603261%2C466465926%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fwww.dba-oracle.com%2F&tiba=Oracle%20Consulting%2C%20Oracle%20Support%20and%20Oracle%20Training%20by%20BC%20Oracle%20Consulting&fmt=3&is_vtc=1&cid=CAQSGwB7FLtq3QPhc8YQVHc-5d8Oc_c3NWfpHSg3TQ&random=3385855696&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:18 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 17 Apr 2024 22:33:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:33:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49730	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:18 UTC	368	OUT	GET /images/ad_tuning_books.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:18 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:18 GMT Content-Type: image/jpeg Content-Length: 46864 Connection: close Last-Modified: Fri, 07 Apr 2023 11:16:29 GMT ETag: "b710-5f8bd28249762" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:18 UTC	15918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 0e 68 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 25 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 98 87 69 00 04 00 00 00 01 00 00 00 ac 00 00 00 d8 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 45 6c 65 6d 65 6e 74 73 20 37 2e 30 20 57 69 6e 64 6f 77 73 00 00 32 30 31 34 3a 30 35 3a 33 30 20 30 39 3a 32 34 3a 35 35 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 78 a0 03 00 04 00 00 00 01 00 00 01 a9 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 Data Ascii: JFIFHHhExifMM*bj(1%r2i''Adobe Photoshop Elements 7.0 Windows2014:05:30 09:24:55x
2024-04-17 22:33:18 UTC	16384	IN	Data Raw: a3 12 c3 12 e3 13 03 13 23 13 43 13 63 13 83 13 a4 13 c5 13 e5 14 06 14 27 14 49 14 6a 14 8b 14 ad 14 ce 14 f0 15 12 15 34 15 56 15 78 15 9b 15 bd 15 e0 16 03 16 26 16 49 16 6c 16 8f 16 b2 16 d6 16 fa 17 1d 17 41 17 65 17 89 17 ae 17 d2 17 f7 18 1b 18 40 18 65 18 8a 18 af 18 d5 18 fa 19 20 19 45 19 6b 19 91 19 b7 19 dd 1a 04 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 ce 21 fb 22 27 22 55 22 82 22 af 22 dd 23 0a 23 38 23 66 23 94 23 c2 23 f0 24 1f 24 4d 24 7c 24 ab 24 da 25 09 25 38 25 68 25 97 25 c7 25 f7 26 27 26 57 Data Ascii: #Cc'Ij4Vx&IlAe@e EkQw;cR{Gp@j>i A l !!H!u!!!"'"U"""##8#f###$$M$\|$$%%8%h%%%&'&W
2024-04-17 22:33:18 UTC	14562	IN	Data Raw: f0 4e 33 eb 91 5f 42 fe d0 3f b2 46 a3 e0 df d9 c5 be 26 6b 5a 86 8b a3 f8 7e e3 4d 82 5b 9b 9b b1 2f db 7f b3 a4 95 16 39 3e cb e5 19 77 af 9a ab 82 06 37 29 38 c5 7e 0d 1e 12 e2 0a 99 86 2f fd 86 ab a5 52 a5 49 46 4a 0e dc b2 93 77 4e ce f1 6a cf cf 4b 77 3f 22 a7 c7 99 1e 0b 30 c5 61 31 d8 98 41 aa b5 16 b2 57 4f 99 de eb 5e ab 55 e9 b6 a7 94 5a 78 ca e3 c3 d0 fd b2 3d 4a c6 f2 e3 ed 02 72 2d 80 5d cb b4 21 40 49 27 0c b9 c8 1c 67 06 bb 85 93 54 d5 75 a3 ab 5e 5b ea da 4c 9a 7a ed b4 b5 82 d0 4b 98 5c 7c ee 4f 23 79 e3 a7 2a 17 a1 ae 16 1f da c7 e0 7e 91 1e eb 2f 16 e9 a9 ba d9 2d 6e 22 1a 1d e2 c7 70 8b ff 00 6c 3e 52 41 3c 83 d8 7a 56 c0 fd bc 3e 0f 5b 58 6c b4 f1 c5 bb b4 6b 88 96 4d 37 50 39 3d b2 c6 12 71 5e 36 2f 83 78 8e 4e f4 b2 da ad bb ab b8 Data Ascii: N3_B?F&kZ~M[/9>w7)8~/RIFJwNjKw?"0a1AWO^UZx=Jr-]!@I'gTu^[LzK\\|O#y*~/-n"pl>RA<zV>[XlkM7P9=q^6/xN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49731	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:18 UTC	607	OUT	GET /images/BC_owl_logo_106.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:18 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:18 GMT Content-Type: image/jpeg Content-Length: 10771 Connection: close Last-Modified: Mon, 06 Nov 2017 16:23:31 GMT ETag: "2a13-55d52e0130ec3" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:18 UTC	10771	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff ed 14 b6 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 78 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 04 0a 00 00 00 00 00 01 00 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff Data Ascii: JFIFHHPhotoshop 3.08BIMHH8BIMx8BIM8BIM8BIM8BIM'8BIMH/fflff/ff2Z5-8BIMp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49733	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:18 UTC	605	OUT	GET /images/toc1_Services.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:18 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:18 GMT Content-Type: image/jpeg Content-Length: 1844 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:35 GMT ETag: "734-55d52f228d685" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:18 UTC	1844	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 1e 00 6e 03 01 11 00 02 11 01 03 11 01 ff c4 00 86 00 01 00 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 05 08 06 07 03 04 09 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDuckyPAdobedn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49735	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:18 UTC	366	OUT	GET /images/training_ad23.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:18 UTC	465	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:18 GMT Content-Type: image/jpeg Content-Length: 6113 Connection: close Last-Modified: Tue, 06 Dec 2022 07:37:44 GMT ETag: "17e1-5ef23e133701f" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:18 UTC	6113	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 68 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CChx"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49734	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:18 UTC	370	OUT	GET /images/logo_oracle_forum.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:18 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:18 GMT Content-Type: image/jpeg Content-Length: 20578 Connection: close Last-Modified: Mon, 06 Nov 2017 16:26:21 GMT ETag: "5062-55d52ea34c705" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:18 UTC	15918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0f 38 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 25 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 97 87 69 00 04 00 00 00 01 00 00 00 ac 00 00 00 d8 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 45 6c 65 6d 65 6e 74 73 20 37 2e 30 20 57 69 6e 64 6f 77 73 00 32 30 31 34 3a 30 34 3a 31 30 20 31 35 3a 34 32 3a 34 38 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 78 a0 03 00 04 00 00 00 01 00 00 00 54 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 Data Ascii: JFIFHH8ExifMM*bj(1%r2i''Adobe Photoshop Elements 7.0 Windows2014:04:10 15:42:48xT
2024-04-17 22:33:18 UTC	4660	IN	Data Raw: e1 44 e1 cc e2 53 e2 db e3 63 e3 eb e4 73 e4 fc e5 84 e6 0d e6 96 e7 1f e7 a9 e8 32 e8 bc e9 46 e9 d0 ea 5b ea e5 eb 70 eb fb ec 86 ed 11 ed 9c ee 28 ee b4 ef 40 ef cc f0 58 f0 e5 f1 72 f1 ff f2 8c f3 19 f3 a7 f4 34 f4 c2 f5 50 f5 de f6 6d f6 fb f7 8a f8 19 f8 a8 f9 38 f9 c7 fa 57 fa e7 fb 77 fc 07 fc 98 fd 29 fd ba fe 4b fe dc ff 6d ff ff ff ee 00 0e 41 64 6f 62 65 00 64 00 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 07 07 07 0d 0c 0d 18 10 10 18 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: DScs2F[p(@Xr4Pm8Ww)KmAdobed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49736	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:18 UTC	371	OUT	GET /images/oracle_scripts_120.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:18 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:18 GMT Content-Type: image/jpeg Content-Length: 35616 Connection: close Last-Modified: Mon, 06 Nov 2017 16:27:04 GMT ETag: "8b20-55d52ecc8060e" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:18 UTC	15918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 16 35 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 36 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 a8 87 69 00 04 00 00 00 01 00 00 00 bc 00 00 00 e8 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 45 6c 65 6d 65 6e 74 73 20 35 2e 30 20 28 32 30 30 36 30 39 31 34 2e 72 2e 37 37 29 20 20 57 69 6e 64 6f 77 73 00 32 30 30 38 3a 30 33 3a 30 33 20 31 39 3a 33 35 3a 30 34 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 78 a0 03 00 04 00 00 00 01 00 00 00 Data Ascii: JFIFHH5ExifMM*bj(16r2i''Adobe Photoshop Elements 5.0 (20060914.r.77) Windows2008:03:03 19:35:04x
2024-04-17 22:33:18 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:33:18 UTC	3314	IN	Data Raw: 01 48 c5 87 33 6e 0f a7 b3 52 96 22 45 a3 ec 91 e3 0a ec 26 69 bc 5e 7a 13 2a 38 69 fd 90 d3 3a cf f8 47 10 35 15 c8 71 d6 9d 6b 89 88 e4 2b 56 2d a2 b4 09 de 49 0f bc bd d4 b4 37 15 ac 7e ee 74 f6 95 d4 f2 fb 9a 6b 11 1b 6a cf b2 8e da f9 ad f2 f2 91 a6 78 68 37 7b 3f be e8 f7 31 1d 6d 99 a9 79 43 b8 48 92 83 12 0e ba 65 89 6f 87 56 92 9f 1f 83 2c da c3 56 8d 51 af e9 d3 d7 db fe 9c e7 be 33 98 8e 34 ec dd ad 27 5f 93 74 12 ea 1a 7a 42 56 2d 9e 96 7a 2c bc c5 b1 61 f0 3c 67 9b 35 3b 7f 9f 6f 18 1d cb 4c c8 bc e9 1d c8 66 97 0c c4 c8 8b b7 9a 61 af cc 1c f4 b3 b3 88 66 99 6d 84 d6 11 22 de 7e 76 4d c9 e7 ab 24 da e6 fd e2 43 7c 7d c3 de cd 85 d6 43 1e cf a1 62 45 23 13 1d 67 4c 6b d2 3f 7b 2b 3d 95 df 43 dd 4c b6 a2 a9 e9 0a b4 01 8c ee 6e 41 09 c9 0c 6a Data Ascii: H3nR"E&i^z*8i:G5qk+V-I7~tkjxh7{?1myCHeoV,VQ34'_tzBV-z,a<g5;oLfafm"~vM$C\|}CbE#gLk?{+=CLnAj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49743	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:18 UTC	604	OUT	GET /images/toc2_Support.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:18 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:18 GMT Content-Type: image/jpeg Content-Length: 1861 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:35 GMT ETag: "745-55d52f22a2e4c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:18 UTC	1861	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 1e 00 6e 03 01 11 00 02 11 01 03 11 01 ff c4 00 81 00 01 01 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 07 06 03 04 08 09 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 03 Data Ascii: JFIFddDuckyPAdobedn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49751	108.177.122.104	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:18 UTC	972	OUT	GET /pagead/1p-user-list/1006676079/?random=1713393196088&cv=9&fst=1713391200000&num=1&label=N3HTCKnupgQQ79CC4AM&guid=ON&eid=376635471%2C375603261%2C466465926%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fwww.dba-oracle.com%2F&tiba=Oracle%20Consulting%2C%20Oracle%20Support%20and%20Oracle%20Training%20by%20BC%20Oracle%20Consulting&fmt=3&is_vtc=1&cid=CAQSGwB7FLtq3QPhc8YQVHc-5d8Oc_c3NWfpHSg3TQ&random=3385855696&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIkqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 17 Apr 2024 22:33:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:33:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49746	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:18 UTC	605	OUT	GET /images/toc3_About_Us.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:18 GMT Content-Type: image/jpeg Content-Length: 3597 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:35 GMT ETag: "e0d-55d52f22a68c4" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:19 UTC	3597	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff ed 08 22 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 78 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 04 0a 00 00 00 00 00 01 00 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff Data Ascii: JFIFHH"Photoshop 3.08BIMHH8BIMx8BIM8BIM8BIM8BIM'8BIMH/fflff/ff2Z5-8BIMp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49748	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:18 UTC	601	OUT	GET /images/toc_books.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:19 GMT Content-Type: image/jpeg Content-Length: 24301 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:36 GMT ETag: "5eed-55d52f23a6694" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:19 UTC	15918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 06 6e 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 36 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 a8 87 69 00 04 00 00 00 01 00 00 00 bc 00 00 00 e8 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 45 6c 65 6d 65 6e 74 73 20 35 2e 30 20 28 32 30 30 36 30 39 31 34 2e 72 2e 37 37 29 20 20 57 69 6e 64 6f 77 73 00 32 30 30 37 3a 30 31 3a 31 32 20 31 30 3a 30 37 3a 31 34 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 6e a0 03 00 04 00 00 00 01 00 00 00 Data Ascii: JFIFHHnExifMM*bj(16r2i''Adobe Photoshop Elements 5.0 (20060914.r.77) Windows2007:01:12 10:07:14n
2024-04-17 22:33:19 UTC	8383	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49747	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:18 UTC	368	OUT	GET /images/tabs-consulting.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	465	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:19 GMT Content-Type: image/gif Content-Length: 11055 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:23 GMT ETag: "2b2f-55d52f179ce9d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:19 UTC	11055	IN	Data Raw: 47 49 46 38 39 61 2a 03 16 00 f7 00 00 de dd de 46 45 45 5b 07 09 f1 f1 f1 ca ca ca b2 b1 b2 7b 79 7a e9 e8 e9 8c 8b 8b 6d 6c 6d 5c 59 5a d3 d2 d2 4c 4a 4b 52 50 51 4e 4d 4d 50 4e 4f 5c 5a 5c 36 35 35 76 76 76 bd bd bd 4f 4e 4e 54 52 53 4d 4c 4c 66 64 65 6a 69 6a 52 50 52 5c 5c 5c c5 c5 c5 54 07 09 21 21 21 26 25 25 1e 1d 1d 4c 4b 4c 5a 58 5a 32 31 31 2a 29 29 4b 07 08 3d 3d 3d 5e 5d 5e 5f 5e 5e 2e 2d 2d 4a 48 49 41 3e 3f 14 12 12 54 54 54 44 41 42 ab ab ab 9a 98 99 39 05 06 92 90 91 60 5e 5f e2 e2 e2 f4 f4 f4 4c 4c 4c 5b 56 58 5e 5c 5c e4 e4 e4 5b 5a 5a fd fd fd 72 71 71 4a 47 48 d6 d5 d5 49 47 48 82 81 82 45 06 08 a5 a4 a4 d8 d8 d8 58 54 57 38 37 38 4e 4e 4e 61 5f 60 56 53 55 6f 6d 6e 3a 38 38 59 58 58 f9 f9 f9 51 4f 50 a8 a6 a6 48 46 47 44 42 43 40 06 Data Ascii: GIF89aFEE[{yzmlm\YZLJKRPQNMMPNO\Z\655vvvONNTRSMLLfdejijRPR\\\T!!!&%%LKLZXZ211))K===^]^_^^.--JHIA>?TTTDAB9`^_LLL[VX^\\[ZZrqqJGHIGHEXTW878NNNa_`VSUomn:88YXXQOPHFGDBC@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49752	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:18 UTC	607	OUT	GET /images/oracle_scripts2.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	467	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:19 GMT Content-Type: image/jpeg Content-Length: 71044 Connection: close Last-Modified: Wed, 12 Apr 2023 17:00:23 GMT ETag: "11584-5f9268b3b071a" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:19 UTC	15917	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 e4 01 98 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-04-17 22:33:19 UTC	16384	IN	Data Raw: 9a 24 dd b1 53 f7 9b e2 f9 99 ab ec 48 fe 07 fc 3f 87 c7 cf e3 88 fc 17 a1 47 e3 27 3b 9b 5d 4d 3a 11 77 b8 ae dd de 66 33 bb 6f 1b a9 6d 7e 08 7c 3f b1 f1 d4 de 35 b7 f0 5e 85 07 8b a6 2c f2 6b 91 e9 d1 2d db b1 e0 b7 99 8d db 8f ad 00 9d 8f 97 7c 27 37 89 2d fc 3f e0 8f 88 b2 f8 eb c5 17 9a a5 f7 c4 9b bd 02 7b 0b 8d 52 47 d3 9f 4f 3a cd e5 9f 90 6d bf d5 b6 12 35 60 e7 e7 5c 7d ed a2 b9 db 7f 89 1e 24 3f 11 3e 1e f8 bf 49 d5 fc 62 74 6f 12 78 e5 74 b8 75 2d 77 c5 50 ad a6 ab 67 25 c4 91 bc 10 e8 b1 6f 45 58 d7 f8 d8 47 22 ec de 7f bb 5f 6e c7 e0 8f 0e 5b e9 f6 f6 11 68 5a 6c 76 56 d7 a7 52 82 dd 6d 23 f2 e2 ba 32 19 8c ea b8 c2 c9 e6 33 49 bf ae e2 5a b9 bb 1f d9 f7 e1 96 99 af 5e eb 96 bf 0f fc 37 06 b5 7b 72 b7 b7 17 e9 a4 db 89 de e1 64 12 ac bb b6 Data Ascii: $SH?G';]M:wf3om~\|?5^,k-\|'7-?{RGO:m5`\}$?>Ibtoxtu-wPg%oEXG"_n[hZlvVRm#23IZ^7{rd
2024-04-17 22:33:19 UTC	16384	IN	Data Raw: 8b bf 61 84 f0 d6 95 65 78 9e 25 bc f0 45 bd a7 f6 6d ce eb 4b 87 93 ec a8 b2 5b b6 fc 34 6e ff 00 34 7f 37 4a f0 af 1e d9 59 7c 4e f1 27 8f b5 3f 87 df 0b fc 47 a3 da b7 c1 7f 10 68 2d 34 de 16 b8 d3 84 f7 ac d6 bf 67 d3 d5 1a 35 32 4c 83 cc 00 2e 77 74 4d db 69 89 2b 9f 67 6a 9f 14 fc 25 e1 fd 4b 48 d2 b5 af 14 68 5a 36 b5 ab 22 bd 9e 9d 7d a9 43 14 f7 39 ff 00 9e 48 cd 99 3f e0 35 cb 5a fe d0 de 19 d6 fc 55 e2 7f 0e e8 d3 d9 ea 1a bf 86 f5 ab 2d 17 50 85 f5 2b 78 7e 6b 8f 27 2e 9b 9f e7 f2 fc ed 85 7e f3 48 8d 18 1b ab c0 2f ad 74 7f 04 ea df 14 b4 bf 88 3f 0b 75 af 1e 6a be 2c 16 32 e8 2b 6b a1 cd 76 9a 9d aa e9 f6 f0 a5 87 da 12 32 96 6d 0d cc 57 0e de 6b 47 b7 cd f3 6a 0f 13 78 4e eb fe 16 d7 8f 6c ad bc 23 a9 41 ab ea 1f 11 3c 17 e2 18 de db 4a 9a Data Ascii: aex%EmK[4n47JY\|N'?Gh-4g52L.wtMi+gj%KHhZ6"}C9H?5ZU-P+x~k'.~H/t?uj,2+kv2mWkGjxNl#A<J
2024-04-17 22:33:19 UTC	16384	IN	Data Raw: f8 c5 e0 1b 4d 73 4a d1 66 f1 c7 86 e1 d5 f5 54 8e 4d 3f 4d 93 55 b7 49 ef 16 4f b8 d0 c6 5f 74 9b bb 6d eb 40 1e 27 e0 cf 82 7f 13 e3 d2 fe 1b 78 03 5e ff 00 84 6a 3f 04 f8 02 f2 ce e2 0d 7a ce ee 69 2f b5 78 6c 97 6d 94 66 d9 a2 55 b7 6e 23 f3 1b cc 93 3b 3e 5a d9 f0 ff 00 c0 1f 11 e9 3e 11 f8 41 a5 cb 79 a6 bc fe 11 f1 7d e6 bf 7f 22 49 26 c9 6d e5 4d 49 55 22 f9 3e 67 ff 00 4e 8b ef 6d e8 f5 ec 3a c7 c4 cf 08 f8 77 c4 da 7f 87 75 5f 15 e8 ba 67 88 35 1f f8 f3 d2 6f 75 28 62 bb b9 ff 00 ae 71 33 06 7f c0 57 3d a2 fc 72 f0 d5 c7 87 7c 49 ae eb ba 8d 8f 85 74 9d 0b 5b bb d0 ee 2f f5 9b d8 e0 83 cc 82 4f 2f 76 f7 21 57 77 6a 00 7f c2 5f 01 ea 3e 05 bc f1 dc ba 8c b6 b3 0d 7b c4 d7 1a d5 b7 d9 dd 9b 64 32 43 02 2a 3e e0 3e 7f dd 37 b5 7a 25 67 68 5a f6 9d Data Ascii: MsJfTM?MUIO_tm@'x^j?zi/xlmfUn#;>Z>Ay}"I&mMIU">gNm:wu_g5ou(bq3W=r\|It[/O/v!Wwj_>{d2C*>>7z%ghZ
2024-04-17 22:33:19 UTC	5975	IN	Data Raw: 27 a7 98 57 75 44 e9 52 a8 db 94 f7 b5 be eb 7e 8c d2 9e 61 99 51 51 8d 3c 3e b4 d4 54 b4 93 ed 25 74 9e ee c9 be ae da bb 58 c8 f8 a5 a6 78 c7 55 f0 6e 8f 6d a6 d9 5f cd 7f be 36 bb fe c8 be 68 d9 18 27 af da ec da 44 dd e9 32 fd 1a b9 7b ef 03 f8 fe e3 c2 33 ca f7 9a 91 f1 02 d9 d8 db c9 12 5f 48 c9 32 88 c7 da bc a4 4b b8 42 c8 5c 7d ff 00 36 36 ff 00 6e bd 07 c5 1f 13 a1 f0 a7 8e b4 5f 0f dc 59 3c 89 7d 67 77 7f 3d e7 97 37 97 6d 1c 3b 4f f0 c4 ca cc c5 fb b2 f4 fe f3 22 be ae b1 e3 7b 7d 3b 5e d1 34 e8 63 13 cb 79 a9 b6 9b 3b 6f 61 e4 b0 b1 9a e8 1e 9f 37 cb 12 ff 00 df 75 75 69 53 a8 e5 39 4d ab bd 6d e4 63 86 c6 e6 18 5a 14 a1 4e 84 79 7d ea 89 b5 7b a5 26 e5 ad f6 bc 6d 6d 34 2a fc 25 b0 d6 f4 ff 00 06 da db eb e2 ef fb 45 5d b7 2d ef fa d5 4c fc Data Ascii: 'WuDR~aQQ<>T%tXxUnm_6h'D2{3_H2KB\}66n_Y<}gw=7m;O"{};^4cy;oa7uuiS9MmcZNy}{&mm4*%E]-L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49749	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:18 UTC	364	OUT	GET /images/header_2023.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	465	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:19 GMT Content-Type: image/gif Content-Length: 42572 Connection: close Last-Modified: Mon, 05 Dec 2022 10:10:34 GMT ETag: "a64c-5ef11e5ee723f" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:19 UTC	15919	IN	Data Raw: 47 49 46 38 39 61 f8 02 64 00 70 00 00 2c 00 00 00 00 f8 02 64 00 87 8c 00 00 84 00 00 94 00 00 5a 00 08 63 08 08 5a 08 08 9c 00 00 84 08 00 5a 00 00 9c 00 08 94 00 08 ff ff ff a5 08 00 6b 08 08 4a 00 08 4a 08 08 94 08 00 63 00 08 42 08 08 8c 00 08 52 08 08 63 00 00 6b 00 08 73 08 08 9c 08 00 73 00 08 42 00 00 42 00 08 31 00 00 4a 08 00 a5 00 00 94 08 10 a5 08 10 4a 00 00 a5 19 10 5a 08 00 ef d6 de 84 00 08 f7 ef ef c5 bd bd 73 08 00 b5 21 29 9c 29 29 6b 19 21 e6 bd b5 e6 6b 10 21 00 00 ef 6b 63 63 6b 4a de 9c ce de 4a e6 9c 4a e6 de 4a ad 9c 4a ad 9c 10 00 ad 42 3a c5 73 7b e6 21 31 ef 52 63 5a 42 42 8c 9c 73 e6 a5 a5 b5 73 73 73 00 00 8c 19 29 de ef 6b ad de 6b 8c de 6b d6 42 3a b5 21 19 ef 5a 42 c5 c5 de 9c ce ad 10 73 5a 10 73 19 10 42 5a 10 42 19 ad Data Ascii: GIF89adp,dZcZZkJJcBRckssBB1JJZs!)))k!k!kcckJJJJJB:s{!1RcZBBssss)kkkB:!ZBsZsBZB
2024-04-17 22:33:19 UTC	16384	IN	Data Raw: 57 ad f9 17 02 df 91 c9 ac 16 61 c4 17 6c 05 2d 61 e0 ec bb 96 0d 3a 16 dc c4 2a a4 07 d3 4c 3e 8e 4d d8 8c c4 d6 f0 c6 07 2f a4 77 29 47 44 03 57 7e 56 b4 47 eb db 7f 82 57 31 01 60 78 1d 86 41 72 30 47 df a3 c7 b6 17 30 71 5b 73 9d cb 6c a0 c6 b1 8a 52 00 66 1b 27 b9 06 7d d2 46 c9 0a 06 64 d8 c0 08 77 e8 60 08 b5 20 21 74 c3 7d 64 ce 26 9b 5f 18 75 1f 25 13 c8 98 53 a2 dc 0f 4d 36 6d 8f 5a 35 cb cd c8 06 e0 64 98 b9 89 96 dd 09 ea 9c 88 19 ff c1 3f 30 c9 09 b8 40 8a f0 09 93 90 f1 92 30 e5 d9 5a c9 1f 7e e1 f9 e8 cf 0a 26 9d 84 41 a1 d2 ed a9 96 88 09 0b 25 0b 67 76 65 97 b0 50 dd 8a 25 95 71 08 ff e3 0a f2 2d 7b 54 d5 5d 14 d3 fa 53 10 0a 0a 9d b8 88 0b 84 48 cc ad 4f ab 48 36 af 84 08 94 90 40 97 3a 55 a9 38 d5 11 2c 00 15 dc ca 99 91 ca a5 38 b6 e5 Data Ascii: Wal-a:*L>M/w)GDW~VGW1`xAr0G0q[slRf'}Fdw` !t}d&_u%SM6mZ5d?0@0Z~&A%gveP%q-{T]SHOH6@:U8,8
2024-04-17 22:33:19 UTC	10269	IN	Data Raw: e7 e1 57 c6 49 b2 2e b5 3a a3 23 62 2c 90 ca ba 02 41 31 9f d3 12 a9 0e 92 2d 39 8c a4 5b 32 bb 1c 53 b7 a5 3a b0 b5 9d 7e 9a 43 e4 01 a9 f9 98 52 72 5a 1c 9c 45 11 f0 01 ff 10 f0 d9 db 36 b9 96 89 98 a9 45 9b 13 38 69 93 c1 9d bb c5 dc 13 9d 42 96 3a 01 5c de 1b 14 8f a8 93 1d 38 82 7c 68 02 18 e0 14 12 18 85 89 e1 5b 45 19 21 a3 ea 5c ae c8 09 12 70 02 d3 83 02 8f 30 5d 58 51 04 d5 f4 07 d6 54 2d 84 b8 00 5e a0 07 7c a0 8b 3e 21 21 d5 e2 15 b3 f2 bc b9 6a 3c f2 41 3b 44 24 ce 71 71 ed c9 fa 89 96 c8 3d c2 ca 46 6e 7d 89 93 c0 d6 2b 52 2c 2a 7a e6 67 4c 89 cd ba 34 ec ed 22 63 84 66 f0 ad bd 9f 10 57 b0 0a 5f c7 e3 e6 41 33 df 71 1e c7 72 9e 2d f9 c5 ad b8 90 5f f2 43 8c 98 21 bf 22 89 4f 42 a2 90 01 69 b0 17 4b c2 fe 7c 24 c8 98 0c cd 50 81 fb 2b 82 79 Data Ascii: WI.:#b,A1-9[2S:~CRrZE6E8iB:\8\|h[E!\p0]XQT-^\|>!!j<A;D$qq=Fn}+R,*zgL4"cfW_A3qr-_C!"OBiK\|$P+y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49753	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:19 UTC	605	OUT	GET /images/ad_freeposter.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:19 GMT Content-Type: image/gif Content-Length: 7219 Connection: close Last-Modified: Mon, 06 Nov 2017 16:22:58 GMT ETag: "1c33-55d52de1890af" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:19 UTC	7219	IN	Data Raw: 47 49 46 38 39 61 78 00 5a 00 f7 00 00 00 00 00 ff ff ff 18 00 7c 19 31 95 19 01 7d 19 01 7b 18 00 7a 09 05 07 0c 0a 0b 0e 0c 0d fb f9 fa fa f8 f9 f9 f7 f8 11 0b 0f 09 06 09 fd f9 fd 63 62 63 fb f9 fc fa f8 fb 0d 0b 0f 71 70 72 88 87 89 c6 c5 c7 0b 0a 0d 71 6f 75 eb e8 f1 bb ba bd 56 54 5b cd c7 df dc d8 e8 1c 01 7b 1d 02 7d bf b7 da 78 74 86 ce c8 e1 19 00 7f 1a 00 7d 19 00 7c 1a 00 7b 19 00 7a 18 00 78 1b 01 7f 19 01 79 1c 02 81 1a 02 7c 1a 02 7a 19 02 76 1e 06 7e 1d 06 7a 21 0a 7e 2f 1a 84 64 53 a6 07 06 0b 82 75 b7 91 85 bf a0 96 c8 b0 a8 cf af a7 ce be b7 d8 b0 af b4 cf ce d3 19 00 80 16 00 7f 17 00 7d 15 00 79 17 00 79 17 00 76 02 00 0b 16 01 7a 15 01 69 18 02 7e 1a 02 7e 17 02 7b 17 02 79 18 03 7c 18 03 7a 17 03 77 19 04 7b 1a 04 76 1a 05 7e 1a 05 Data Ascii: GIF89axZ\|1}{zcbcqprqouVT[{}xt}\|{zxy\|zv~z!~/dSu}yyvzi~~{y\|zw{v~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49754	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:19 UTC	358	OUT	GET /images/phone.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:19 GMT Content-Type: image/gif Content-Length: 6725 Connection: close Last-Modified: Fri, 18 Nov 2022 01:47:30 GMT ETag: "1a45-5edb4e388157b" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:19 UTC	6725	IN	Data Raw: 47 49 46 38 39 61 bd 00 64 00 70 00 00 2c 00 00 00 00 bd 00 64 00 87 ff ff ff b3 93 93 4c 48 48 46 46 46 45 45 45 40 40 40 3d 3d 3d 3f 3f 3f 3b 3b 3b 39 39 39 37 37 37 47 41 41 98 95 95 79 60 60 42 42 42 6e 5c 5b 54 47 47 4a 4a 4a 49 49 49 4d 4d 4d 43 41 41 4e 4e 4e 51 51 51 53 53 53 54 54 54 57 57 57 59 59 59 5a 5a 5a 5c 5c 5c 5f 5f 5f 7e 7e 7e 89 89 89 6a 6a 6a a8 a8 a8 74 74 74 ab ab ab 8a 8a 8a 66 66 66 86 86 86 6d 6d 6d 78 78 78 61 61 61 82 82 82 d5 d5 d5 bf bf bf f4 f4 f4 ea ea ea 81 81 81 ca ca ca 62 62 62 8c 8c 8c e0 e0 e0 a0 a0 a0 b6 b6 b6 64 64 64 ac ac ac d6 d6 d6 33 33 33 a2 08 08 a1 07 08 a0 08 08 9f 08 08 9f 08 07 9d 07 08 9c 08 08 9a 07 08 9b 08 08 99 07 08 98 08 08 97 08 08 96 08 07 97 07 08 94 08 08 94 07 08 94 08 07 93 08 08 92 07 08 91 Data Ascii: GIF89adp,dLHHFFFEEE@@@===???;;;999777GAAy``BBBn\[TGGJJJIIIMMMCAANNNQQQSSSTTTWWWYYYZZZ\\\___~~~jjjtttfffmmmxxxaaabbbddd333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49755	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:19 UTC	368	OUT	GET /images/BC_owl_logo_106.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:19 GMT Content-Type: image/jpeg Content-Length: 10771 Connection: close Last-Modified: Mon, 06 Nov 2017 16:23:31 GMT ETag: "2a13-55d52e0130ec3" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:19 UTC	10771	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff ed 14 b6 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 78 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 04 0a 00 00 00 00 00 01 00 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff Data Ascii: JFIFHHPhotoshop 3.08BIMHH8BIMx8BIM8BIM8BIM8BIM'8BIMH/fflff/ff2Z5-8BIMp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	49756	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:19 UTC	609	OUT	GET /images/health_check_ad23.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	465	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:19 GMT Content-Type: image/jpeg Content-Length: 6153 Connection: close Last-Modified: Tue, 06 Dec 2022 07:38:43 GMT ETag: "1809-5ef23e4b2369c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:19 UTC	6153	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 6a 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CCjx"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	49758	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:19 UTC	366	OUT	GET /images/toc1_Services.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:19 GMT Content-Type: image/jpeg Content-Length: 1844 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:35 GMT ETag: "734-55d52f228d685" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:19 UTC	1844	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 1e 00 6e 03 01 11 00 02 11 01 03 11 01 ff c4 00 86 00 01 00 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 05 08 06 07 03 04 09 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFddDuckyPAdobedn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.17	49757	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:19 UTC	365	OUT	GET /images/toc2_Support.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:19 GMT Content-Type: image/jpeg Content-Length: 1861 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:35 GMT ETag: "745-55d52f22a2e4c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:19 UTC	1861	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 1e 00 6e 03 01 11 00 02 11 01 03 11 01 ff c4 00 81 00 01 01 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 07 06 03 04 08 09 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 03 Data Ascii: JFIFddDuckyPAdobedn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	49760	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:19 UTC	599	OUT	GET /images/twitter.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:19 GMT Content-Type: image/jpeg Content-Length: 19939 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:40 GMT ETag: "4de3-55d52f27def69" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:19 UTC	15918	IN	Data Raw: ff d8 ff e1 0c 31 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 94 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 34 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 36 3a 30 35 3a 31 31 20 31 37 3a 32 32 3a 33 35 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 78 a0 03 00 04 00 00 00 01 00 00 00 3b 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: 1ExifMM*bj(1"r2i''Adobe Photoshop CC 2014 (Windows)2016:05:11 17:22:35x;"
2024-04-17 22:33:19 UTC	4021	IN	Data Raw: 4b 97 86 a2 a7 65 a8 59 6a 3e bf d4 66 13 ad b4 86 09 9d 55 82 09 16 a0 85 66 00 35 08 20 95 a8 ae d9 23 b2 d2 f9 ee ed 6d a5 8a 0b 89 96 39 a7 12 b4 28 d5 ab 88 17 9c 84 6d fb 2b b9 c1 6b 4b ad a7 86 f2 de 2b bb 57 12 da ce 8b 2c 32 ad 68 d1 b8 aa b0 af 62 31 42 a6 2a ea 62 ae a6 2a ea 1e bd 8f 4c 6d 5d 4c 55 d4 ef 8a bb 15 53 9e 78 2d 6d e6 bb bb 99 2d ed 2d a3 79 ee 6e 26 61 1c 51 45 12 96 77 76 6d 95 55 41 24 9c 9c 62 64 44 62 09 24 d0 03 99 27 90 0a f0 bd 37 fe 72 63 46 f3 9e ad 77 a3 fe 5d 59 db dd 88 18 c7 06 a3 ab cc d6 eb 3f 1d b9 c7 6f 10 32 04 3f b3 ea 32 31 fe 55 cf 45 cb ec 4e 5d 1e 28 e4 d6 48 c6 f9 c3 10 e2 e0 f2 96 49 7a 78 bf ab 63 cd c3 fc d0 26 a2 3e 6c eb c8 bf 98 17 da f6 a5 71 e5 9f 35 59 5b 69 9e 68 82 33 73 6d f5 39 4c 96 77 d6 ea Data Ascii: KeYj>fUf5 #m9(m+kK+W,2hb1BbLm]LUSx-m--yn&aQEwvmUA$bdDb$'7rcFw]Y?o2?21UEN](HIzxc&>lq5Y[ih3sm9Lw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.17	49761	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:19 UTC	599	OUT	GET /images/wise-ad.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:19 GMT Content-Type: image/gif Content-Length: 7548 Connection: close Last-Modified: Mon, 06 Nov 2017 16:29:00 GMT ETag: "1d7c-55d52f3b4188d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:19 UTC	7548	IN	Data Raw: 47 49 46 38 39 61 78 00 5a 00 f7 00 00 00 00 00 ff ff ff f8 f8 f8 f0 f0 f0 e9 e9 e9 e1 e2 e1 d8 d9 da fa f9 fa f9 f8 f9 f0 ef f0 ea e9 ea fe fd ff f5 f4 f6 f2 f1 f3 fd fd fe f9 f9 fa f7 f7 f8 f6 f6 f7 d9 d9 da 00 0e 3e 00 11 44 1b 2d 58 c5 ca d7 00 16 48 01 16 44 0a 21 52 09 1c 46 01 1b 4f 01 1a 4c 01 19 4a 06 1d 4b 11 26 51 38 39 3b fa fb fd d6 d7 d9 00 20 5d 00 1e 54 27 3f 69 34 4b 74 00 27 64 00 25 60 01 1e 4f 02 21 52 04 27 60 07 2a 63 08 27 5a 19 35 65 8b 99 af 83 8e a0 a3 ad bd b9 bf c9 00 2e 70 00 2a 69 01 24 59 02 23 55 06 2c 64 0b 2e 64 0e 2d 5d 15 3a 6f 3f 5b 84 54 6a 8c 65 77 93 7c 91 af c1 cb da b7 bd c6 60 62 65 6b 6d 70 66 68 6b a9 ab ae 9d 9f a2 c9 cb ce b8 ba bd b4 b6 b9 e4 e6 e9 de e0 e3 00 2b 65 01 35 7a 01 29 5e 01 29 5d 01 27 5c 02 31 Data Ascii: GIF89axZ>D-XHD!RFOLJK&Q89; ]T'?i4Kt'd%`O!R'`c'Z5e.pi$Y#U,d.d-]:o?[Tjew\|`bekmpfhk+e5z)^)]'\1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	49762	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:19 UTC	366	OUT	GET /images/toc3_About_Us.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:19 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:19 GMT Content-Type: image/jpeg Content-Length: 3597 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:35 GMT ETag: "e0d-55d52f22a68c4" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:19 UTC	3597	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff ed 08 22 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 78 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 04 0a 00 00 00 00 00 01 00 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff Data Ascii: JFIFHH"Photoshop 3.08BIMHH8BIMx8BIM8BIM8BIM8BIM'8BIMH/fflff/ff2Z5-8BIMp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.17	49764	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:20 UTC	362	OUT	GET /images/toc_books.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:20 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:20 GMT Content-Type: image/jpeg Content-Length: 24301 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:36 GMT ETag: "5eed-55d52f23a6694" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:20 UTC	15918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 06 6e 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 36 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 a8 87 69 00 04 00 00 00 01 00 00 00 bc 00 00 00 e8 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 45 6c 65 6d 65 6e 74 73 20 35 2e 30 20 28 32 30 30 36 30 39 31 34 2e 72 2e 37 37 29 20 20 57 69 6e 64 6f 77 73 00 32 30 30 37 3a 30 31 3a 31 32 20 31 30 3a 30 37 3a 31 34 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 6e a0 03 00 04 00 00 00 01 00 00 00 Data Ascii: JFIFHHnExifMM*bj(16r2i''Adobe Photoshop Elements 5.0 (20060914.r.77) Windows2007:01:12 10:07:14n
2024-04-17 22:33:20 UTC	8383	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.17	49763	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:20 UTC	606	OUT	GET /images/ad_cmnd_syntax.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:20 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:20 GMT Content-Type: image/gif Content-Length: 9558 Connection: close Last-Modified: Mon, 06 Nov 2017 16:22:57 GMT ETag: "2556-55d52de0fda46" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:20 UTC	9558	IN	Data Raw: 47 49 46 38 39 61 78 00 5a 00 f7 00 00 00 00 00 ff ff ff 7e 00 01 7d 00 00 7c 00 00 7b 01 00 78 00 01 92 00 01 8d 00 01 84 00 02 82 00 02 80 00 01 7c 00 02 7b 00 02 77 00 02 73 00 02 71 00 02 63 00 01 5a 00 02 58 00 01 49 00 01 87 01 02 81 01 02 79 01 02 6e 01 03 57 01 02 82 02 03 51 01 02 80 02 04 7a 02 03 4c 02 03 47 02 03 5b 06 07 84 0c 0d 6d 0c 0d 89 11 12 84 11 12 7e 13 14 76 15 16 57 13 14 92 22 23 42 15 16 97 33 34 6b 26 27 72 2c 2d a2 44 45 9e 43 45 9e 44 45 99 43 45 8d 44 45 b2 66 67 ba 77 78 b8 76 77 b9 78 79 85 00 05 81 00 04 7e 00 03 79 00 04 73 00 05 54 00 02 52 00 02 4e 00 02 7e 01 04 77 01 04 56 01 04 4c 01 03 4e 02 04 4a 03 06 58 06 08 54 06 09 4f 06 08 3f 0d 0f 9f 44 48 6f 35 37 bc 77 79 b6 77 79 e1 ba bb dd bb bc c6 a8 a9 db bb bc 51 01 Data Ascii: GIF89axZ~}\|{x\|{wsqcZXIynWQzLG[m~vW"#B34k&'r,-DECEDECEDEfgwxvwxy~ysTRN~wVLNJXTO?DHo57wywyQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.17	49766	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:20 UTC	368	OUT	GET /images/oracle_scripts2.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:20 UTC	467	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:20 GMT Content-Type: image/jpeg Content-Length: 71044 Connection: close Last-Modified: Wed, 12 Apr 2023 17:00:23 GMT ETag: "11584-5f9268b3b071a" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:20 UTC	15917	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 e4 01 98 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-04-17 22:33:20 UTC	16384	IN	Data Raw: 9a 24 dd b1 53 f7 9b e2 f9 99 ab ec 48 fe 07 fc 3f 87 c7 cf e3 88 fc 17 a1 47 e3 27 3b 9b 5d 4d 3a 11 77 b8 ae dd de 66 33 bb 6f 1b a9 6d 7e 08 7c 3f b1 f1 d4 de 35 b7 f0 5e 85 07 8b a6 2c f2 6b 91 e9 d1 2d db b1 e0 b7 99 8d db 8f ad 00 9d 8f 97 7c 27 37 89 2d fc 3f e0 8f 88 b2 f8 eb c5 17 9a a5 f7 c4 9b bd 02 7b 0b 8d 52 47 d3 9f 4f 3a cd e5 9f 90 6d bf d5 b6 12 35 60 e7 e7 5c 7d ed a2 b9 db 7f 89 1e 24 3f 11 3e 1e f8 bf 49 d5 fc 62 74 6f 12 78 e5 74 b8 75 2d 77 c5 50 ad a6 ab 67 25 c4 91 bc 10 e8 b1 6f 45 58 d7 f8 d8 47 22 ec de 7f bb 5f 6e c7 e0 8f 0e 5b e9 f6 f6 11 68 5a 6c 76 56 d7 a7 52 82 dd 6d 23 f2 e2 ba 32 19 8c ea b8 c2 c9 e6 33 49 bf ae e2 5a b9 bb 1f d9 f7 e1 96 99 af 5e eb 96 bf 0f fc 37 06 b5 7b 72 b7 b7 17 e9 a4 db 89 de e1 64 12 ac bb b6 Data Ascii: $SH?G';]M:wf3om~\|?5^,k-\|'7-?{RGO:m5`\}$?>Ibtoxtu-wPg%oEXG"_n[hZlvVRm#23IZ^7{rd
2024-04-17 22:33:21 UTC	16384	IN	Data Raw: 8b bf 61 84 f0 d6 95 65 78 9e 25 bc f0 45 bd a7 f6 6d ce eb 4b 87 93 ec a8 b2 5b b6 fc 34 6e ff 00 34 7f 37 4a f0 af 1e d9 59 7c 4e f1 27 8f b5 3f 87 df 0b fc 47 a3 da b7 c1 7f 10 68 2d 34 de 16 b8 d3 84 f7 ac d6 bf 67 d3 d5 1a 35 32 4c 83 cc 00 2e 77 74 4d db 69 89 2b 9f 67 6a 9f 14 fc 25 e1 fd 4b 48 d2 b5 af 14 68 5a 36 b5 ab 22 bd 9e 9d 7d a9 43 14 f7 39 ff 00 9e 48 cd 99 3f e0 35 cb 5a fe d0 de 19 d6 fc 55 e2 7f 0e e8 d3 d9 ea 1a bf 86 f5 ab 2d 17 50 85 f5 2b 78 7e 6b 8f 27 2e 9b 9f e7 f2 fc ed 85 7e f3 48 8d 18 1b ab c0 2f ad 74 7f 04 ea df 14 b4 bf 88 3f 0b 75 af 1e 6a be 2c 16 32 e8 2b 6b a1 cd 76 9a 9d aa e9 f6 f0 a5 87 da 12 32 96 6d 0d cc 57 0e de 6b 47 b7 cd f3 6a 0f 13 78 4e eb fe 16 d7 8f 6c ad bc 23 a9 41 ab ea 1f 11 3c 17 e2 18 de db 4a 9a Data Ascii: aex%EmK[4n47JY\|N'?Gh-4g52L.wtMi+gj%KHhZ6"}C9H?5ZU-P+x~k'.~H/t?uj,2+kv2mWkGjxNl#A<J
2024-04-17 22:33:21 UTC	16384	IN	Data Raw: f8 c5 e0 1b 4d 73 4a d1 66 f1 c7 86 e1 d5 f5 54 8e 4d 3f 4d 93 55 b7 49 ef 16 4f b8 d0 c6 5f 74 9b bb 6d eb 40 1e 27 e0 cf 82 7f 13 e3 d2 fe 1b 78 03 5e ff 00 84 6a 3f 04 f8 02 f2 ce e2 0d 7a ce ee 69 2f b5 78 6c 97 6d 94 66 d9 a2 55 b7 6e 23 f3 1b cc 93 3b 3e 5a d9 f0 ff 00 c0 1f 11 e9 3e 11 f8 41 a5 cb 79 a6 bc fe 11 f1 7d e6 bf 7f 22 49 26 c9 6d e5 4d 49 55 22 f9 3e 67 ff 00 4e 8b ef 6d e8 f5 ec 3a c7 c4 cf 08 f8 77 c4 da 7f 87 75 5f 15 e8 ba 67 88 35 1f f8 f3 d2 6f 75 28 62 bb b9 ff 00 ae 71 33 06 7f c0 57 3d a2 fc 72 f0 d5 c7 87 7c 49 ae eb ba 8d 8f 85 74 9d 0b 5b bb d0 ee 2f f5 9b d8 e0 83 cc 82 4f 2f 76 f7 21 57 77 6a 00 7f c2 5f 01 ea 3e 05 bc f1 dc ba 8c b6 b3 0d 7b c4 d7 1a d5 b7 d9 dd 9b 64 32 43 02 2a 3e e0 3e 7f dd 37 b5 7a 25 67 68 5a f6 9d Data Ascii: MsJfTM?MUIO_tm@'x^j?zi/xlmfUn#;>Z>Ay}"I&mMIU">gNm:wu_g5ou(bq3W=r\|It[/O/v!Wwj_>{d2C*>>7z%ghZ
2024-04-17 22:33:21 UTC	5975	IN	Data Raw: 27 a7 98 57 75 44 e9 52 a8 db 94 f7 b5 be eb 7e 8c d2 9e 61 99 51 51 8d 3c 3e b4 d4 54 b4 93 ed 25 74 9e ee c9 be ae da bb 58 c8 f8 a5 a6 78 c7 55 f0 6e 8f 6d a6 d9 5f cd 7f be 36 bb fe c8 be 68 d9 18 27 af da ec da 44 dd e9 32 fd 1a b9 7b ef 03 f8 fe e3 c2 33 ca f7 9a 91 f1 02 d9 d8 db c9 12 5f 48 c9 32 88 c7 da bc a4 4b b8 42 c8 5c 7d ff 00 36 36 ff 00 6e bd 07 c5 1f 13 a1 f0 a7 8e b4 5f 0f dc 59 3c 89 7d 67 77 7f 3d e7 97 37 97 6d 1c 3b 4f f0 c4 ca cc c5 fb b2 f4 fe f3 22 be ae b1 e3 7b 7d 3b 5e d1 34 e8 63 13 cb 79 a9 b6 9b 3b 6f 61 e4 b0 b1 9a e8 1e 9f 37 cb 12 ff 00 df 75 75 69 53 a8 e5 39 4d ab bd 6d e4 63 86 c6 e6 18 5a 14 a1 4e 84 79 7d ea 89 b5 7b a5 26 e5 ad f6 bc 6d 6d 34 2a fc 25 b0 d6 f4 ff 00 06 da db eb e2 ef fb 45 5d b7 2d ef fa d5 4c fc Data Ascii: 'WuDR~aQQ<>T%tXxUnm_6h'D2{3_H2KB\}66n_Y<}gw=7m;O"{};^4cy;oa7uuiS9MmcZNy}{&mm4*%E]-L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.17	49765	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:20 UTC	611	OUT	GET /images/americanflagpicture.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:20 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:20 GMT Content-Type: image/jpeg Content-Length: 61774 Connection: close Last-Modified: Mon, 06 Nov 2017 16:23:00 GMT ETag: "f14e-55d52de3ca69a" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:20 UTC	15918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 57 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 02 00 42 00 00 00 1f 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: JFIFddWDuckyPB Adobed
2024-04-17 22:33:20 UTC	16384	IN	Data Raw: 0b 34 c0 35 50 86 54 21 ba 24 32 a1 0d 5a a1 01 b6 e3 8c ad 2e b2 b2 db ad 9b a1 c4 9b 14 9f 02 08 e9 50 01 36 d2 d6 b0 1d 05 00 00 22 89 00 9a 28 85 bd c2 cc 60 f3 1b b6 46 ca dc 8a 0d 62 77 fe 35 fc 2a 65 1e b1 a7 12 97 e0 48 4f f5 90 fb 40 7d 09 1e 34 65 b8 74 41 b3 58 7c 8e da cd 65 b6 ee 5d bf 43 27 85 94 e4 39 a8 f0 ef 6c db b9 3f 14 ac 59 49 3f 03 46 b9 64 56 82 1a 73 b6 d7 50 00 9b 02 6b 44 65 80 f2 8f 51 5e 5a 15 62 6c 41 b1 15 b2 ab 05 68 99 63 e5 d8 a7 5a ea 53 61 5c a2 4e a0 ca ee 09 d6 ba 50 96 4c d3 80 fa 00 75 16 3a de ad 46 79 2c 15 96 ed c3 90 55 25 a4 7f 6a d5 87 59 46 56 51 6d 73 2b 07 10 52 a2 0d 70 2c 86 0d 91 62 75 26 b3 4a 25 80 08 aa da 0a 36 29 70 30 30 01 a2 88 59 fc 31 89 fe 79 cb 5c 6f 8b ec 2e 25 fd c3 09 d7 52 0d bc 91 97 f9 Data Ascii: 45PT!$2Z.P6"(`Fbw5*eHO@}4etAX\|e]C'9l?YI?FdVsPkDeQ^ZblAhcZSa\NPLu:Fy,U%jYFVQms+Rp,bu&J%6)p00Y1y\o.%R
2024-04-17 22:33:21 UTC	16384	IN	Data Raw: 2f 15 a7 5f 01 d6 aa e6 36 55 11 1b 52 54 d9 b0 51 b5 3a 90 97 54 2a 54 92 e2 6c 4d c5 3e 4c 4e 18 13 f7 0a 82 34 27 7a c4 10 05 14 57 ca 36 2d b2 6e 2d 72 68 95 ca 25 52 b4 5c 57 da 70 7e 24 68 68 92 c8 37 d2 a9 b2 04 18 5d 6d 4d ac 02 2c 15 f6 9f 8d ab 14 e2 3a 66 01 55 34 32 64 87 6a ed 5c de f6 dc 78 6d a7 b6 a0 ab 23 9e cf 49 11 71 90 91 a1 5b 84 15 1b 93 a0 01 20 92 4f 41 55 cd 72 c5 c9 ee 45 89 64 8e bc db 8d 3a eb 2e b4 a6 5d 61 c5 34 f3 4b 16 52 16 85 14 a9 2a 1e 04 10 41 aa 94 93 59 40 68 4e a1 41 90 28 8a 50 81 23 c4 d4 01 a0 6e ae e3 a9 b5 af f2 1e 14 1a 1b 20 a8 60 80 69 70 03 5f 8d 0c 10 01 14 08 65 aa 04 cb da a1 05 2c 45 7e 73 8c 42 8a 82 e4 99 ae 22 3c 74 0e a5 c7 94 1b 40 1f 52 aa ba a7 87 92 da e3 96 7a 59 ee 87 8b 5a 95 c4 d8 99 b0 99 Data Ascii: /_6URTQ:TTlM>LN4'zW6-n-rh%R\Wp~$hh7]mM,:fU42dj\xm#Iq[ OAUrEd:.]a4KRAY@hNA(P#n `ip_e,E~sB"<t@RzYZ
2024-04-17 22:33:21 UTC	13088	IN	Data Raw: 93 67 80 f5 23 6d 6e ad ad bf 30 51 f7 2e cd ce c5 dc 78 29 5e 56 e7 c4 51 3d 8b ea 5b 75 0a 01 6d ac 78 a5 60 1a d1 75 32 86 f3 e1 3d 43 a6 ea 7a 7d ae 9d 44 1c 26 b8 3e 3e 14 f7 35 e1 46 4b 64 6b a5 65 92 33 c5 8c 4f 22 d7 d2 a9 92 2f 4c 6d 74 55 4d 16 21 0b 82 91 a1 d0 95 46 d5 5b 2c 41 0a 34 ac 71 32 97 48 c6 41 45 57 a0 31 b3 6b 50 08 59 eb 40 20 15 40 21 44 8a 01 08 51 a0 d1 02 d4 45 a9 42 21 75 3d 68 90 40 b4 d4 c0 44 ce 24 0a 81 13 2b c6 a1 04 6e 0e b4 e9 90 46 e0 ab 62 c0 d0 85 7a 55 d1 62 b4 13 df 6a 70 03 4a c7 c6 99 13 01 e9 5d 10 e0 52 d3 b4 1a 17 03 b4 69 1d a4 6b 55 b4 0c 12 bc 7c ee d2 35 a0 2b 45 83 8a c8 a6 e9 ba ad 7b 53 c4 ad c4 b3 71 cf 38 e8 41 6d 0b 55 fa 58 1a ba 26 79 c7 04 91 0f 06 82 4b ce 21 84 93 6e e7 56 94 0b fd 54 45 58 93 Data Ascii: g#mn0Q.x)^VQ=[umx`u2=Cz}D&>>5FKdke3O"/LmtUM!F[,A4q2HAEW1kPY@ @!DQEB!u=h@D$+nFbzUbjpJ]RikU\|5+E{Sq8AmUX&yK!nVTEX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.17	49767	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:20 UTC	366	OUT	GET /images/ad_freeposter.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:20 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:20 GMT Content-Type: image/gif Content-Length: 7219 Connection: close Last-Modified: Mon, 06 Nov 2017 16:22:58 GMT ETag: "1c33-55d52de1890af" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:20 UTC	7219	IN	Data Raw: 47 49 46 38 39 61 78 00 5a 00 f7 00 00 00 00 00 ff ff ff 18 00 7c 19 31 95 19 01 7d 19 01 7b 18 00 7a 09 05 07 0c 0a 0b 0e 0c 0d fb f9 fa fa f8 f9 f9 f7 f8 11 0b 0f 09 06 09 fd f9 fd 63 62 63 fb f9 fc fa f8 fb 0d 0b 0f 71 70 72 88 87 89 c6 c5 c7 0b 0a 0d 71 6f 75 eb e8 f1 bb ba bd 56 54 5b cd c7 df dc d8 e8 1c 01 7b 1d 02 7d bf b7 da 78 74 86 ce c8 e1 19 00 7f 1a 00 7d 19 00 7c 1a 00 7b 19 00 7a 18 00 78 1b 01 7f 19 01 79 1c 02 81 1a 02 7c 1a 02 7a 19 02 76 1e 06 7e 1d 06 7a 21 0a 7e 2f 1a 84 64 53 a6 07 06 0b 82 75 b7 91 85 bf a0 96 c8 b0 a8 cf af a7 ce be b7 d8 b0 af b4 cf ce d3 19 00 80 16 00 7f 17 00 7d 15 00 79 17 00 79 17 00 76 02 00 0b 16 01 7a 15 01 69 18 02 7e 1a 02 7e 17 02 7b 17 02 79 18 03 7c 18 03 7a 17 03 77 19 04 7b 1a 04 76 1a 05 7e 1a 05 Data Ascii: GIF89axZ\|1}{zcbcqprqouVT[{}xt}\|{zxy\|zv~z!~/dSu}yyvzi~~{y\|zw{v~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.17	49732	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:20 UTC	605	OUT	GET /images/email_address.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:20 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:20 GMT Content-Type: image/jpeg Content-Length: 20552 Connection: close Last-Modified: Mon, 06 Nov 2017 16:25:17 GMT ETag: "5048-55d52e6648bb2" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:20 UTC	15918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 08 57 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1c 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8e 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 00 32 30 30 39 3a 30 38 3a 30 37 20 31 34 3a 33 36 3a 34 37 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 90 a0 03 00 04 00 00 00 01 00 00 00 0e 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 Data Ascii: JFIFHHWExifMM*bj(1r2i''Adobe Photoshop CS4 Windows2009:08:07 14:36:47
2024-04-17 22:33:20 UTC	4634	IN	Data Raw: 63 44 f1 a2 b2 26 35 19 54 36 45 64 27 0a 73 83 93 46 74 c2 d2 e2 f2 55 65 75 56 37 84 85 a3 b3 c3 d3 e3 f3 29 1a 94 a4 b4 c4 d4 e4 f4 95 a5 b5 c5 d5 e5 f5 28 47 57 66 38 76 86 96 a6 b6 c6 d6 e6 f6 67 77 87 97 a7 b7 c7 d7 e7 f7 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 f9 2a 3a 4a 5a 6a 7a 8a 9a aa ba ca da ea fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 b7 0e be ff 00 85 47 fc 77 dc ab b4 b7 6e f7 f8 9f f2 43 ae ba 3b 70 f6 34 3d 5d 98 ef 59 63 db bb 9f 63 ed 1d d7 36 2e 9f 32 f4 19 57 c5 4b 01 a9 ac a0 c3 d6 47 90 a8 a2 82 47 c8 9c 6a cd 3d 35 3d 4b 44 62 62 95 dd a2 34 2d 0b 08 c9 a5 7c 87 59 45 b8 7d d6 f9 8a d8 dd da 58 f3 66 db 73 be 47 6d e3 ad af 7a 4b 24 7a 8a d5 75 56 80 b0 28 18 80 9a e8 ac cb 5a f4 2b 7c b9 ff 00 Data Ascii: cD&5T6Ed'sFtUeuV7)(GWf8vgwHXhx9IYiy*:JZjz?GwnC;p4=]Ycc6.2WKGGj=5=KDbb4-\|YE}XfsGmzK$zuV(Z+\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.17	49769	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:20 UTC	370	OUT	GET /images/health_check_ad23.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:20 UTC	465	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:20 GMT Content-Type: image/jpeg Content-Length: 6153 Connection: close Last-Modified: Tue, 06 Dec 2022 07:38:43 GMT ETag: "1809-5ef23e4b2369c" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:20 UTC	6153	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 6a 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CCjx"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.17	49768	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:20 UTC	602	OUT	GET /images/BC_logo_98.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:21 UTC	465	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:20 GMT Content-Type: image/jpeg Content-Length: 6793 Connection: close Last-Modified: Mon, 06 Nov 2017 16:23:30 GMT ETag: "1a89-55d52e008dd63" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:21 UTC	6793	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff ed 0d fa 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 78 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 04 0a 00 00 00 00 00 01 00 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff Data Ascii: JFIFHHPhotoshop 3.08BIMHH8BIMx8BIM8BIM8BIM8BIM'8BIMH/fflff/ff2Z5-8BIMp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.17	49771	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:20 UTC	360	OUT	GET /images/wise-ad.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:21 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:20 GMT Content-Type: image/gif Content-Length: 7548 Connection: close Last-Modified: Mon, 06 Nov 2017 16:29:00 GMT ETag: "1d7c-55d52f3b4188d" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:21 UTC	7548	IN	Data Raw: 47 49 46 38 39 61 78 00 5a 00 f7 00 00 00 00 00 ff ff ff f8 f8 f8 f0 f0 f0 e9 e9 e9 e1 e2 e1 d8 d9 da fa f9 fa f9 f8 f9 f0 ef f0 ea e9 ea fe fd ff f5 f4 f6 f2 f1 f3 fd fd fe f9 f9 fa f7 f7 f8 f6 f6 f7 d9 d9 da 00 0e 3e 00 11 44 1b 2d 58 c5 ca d7 00 16 48 01 16 44 0a 21 52 09 1c 46 01 1b 4f 01 1a 4c 01 19 4a 06 1d 4b 11 26 51 38 39 3b fa fb fd d6 d7 d9 00 20 5d 00 1e 54 27 3f 69 34 4b 74 00 27 64 00 25 60 01 1e 4f 02 21 52 04 27 60 07 2a 63 08 27 5a 19 35 65 8b 99 af 83 8e a0 a3 ad bd b9 bf c9 00 2e 70 00 2a 69 01 24 59 02 23 55 06 2c 64 0b 2e 64 0e 2d 5d 15 3a 6f 3f 5b 84 54 6a 8c 65 77 93 7c 91 af c1 cb da b7 bd c6 60 62 65 6b 6d 70 66 68 6b a9 ab ae 9d 9f a2 c9 cb ce b8 ba bd b4 b6 b9 e4 e6 e9 de e0 e3 00 2b 65 01 35 7a 01 29 5e 01 29 5d 01 27 5c 02 31 Data Ascii: GIF89axZ>D-XHD!RFOLJK&Q89; ]T'?i4Kt'd%`O!R'`c'Z5e.pi$Y#U,d.d-]:o?[Tjew\|`bekmpfhk+e5z)^)]'\1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.17	49770	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:20 UTC	602	OUT	GET /images/phone-6342.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:21 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:20 GMT Content-Type: image/gif Content-Length: 6725 Connection: close Last-Modified: Fri, 18 Nov 2022 02:22:25 GMT ETag: "1a45-5edb5606458ad" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:21 UTC	6725	IN	Data Raw: 47 49 46 38 39 61 bd 00 64 00 70 00 00 2c 00 00 00 00 bd 00 64 00 87 ff ff ff b3 93 93 4c 48 48 46 46 46 45 45 45 40 40 40 3d 3d 3d 3f 3f 3f 3b 3b 3b 39 39 39 37 37 37 47 41 41 98 95 95 79 60 60 42 42 42 6e 5c 5b 54 47 47 4a 4a 4a 49 49 49 4d 4d 4d 43 41 41 4e 4e 4e 51 51 51 53 53 53 54 54 54 57 57 57 59 59 59 5a 5a 5a 5c 5c 5c 5f 5f 5f 7e 7e 7e 89 89 89 6a 6a 6a a8 a8 a8 74 74 74 ab ab ab 8a 8a 8a 66 66 66 86 86 86 6d 6d 6d 78 78 78 61 61 61 82 82 82 d5 d5 d5 bf bf bf f4 f4 f4 ea ea ea 81 81 81 ca ca ca 62 62 62 8c 8c 8c e0 e0 e0 a0 a0 a0 b6 b6 b6 64 64 64 ac ac ac d6 d6 d6 33 33 33 a2 08 08 a1 07 08 a0 08 08 9f 08 08 9f 08 07 9d 07 08 9c 08 08 9a 07 08 9b 08 08 99 07 08 98 08 08 97 08 08 96 08 07 97 07 08 94 08 08 94 07 08 94 08 07 93 08 08 92 07 08 91 Data Ascii: GIF89adp,dLHHFFFEEE@@@===???;;;999777GAAy``BBBn\[TGGJJJIIIMMMCAANNNQQQSSSTTTWWWYYYZZZ\\\___~~~jjjtttfffmmmxxxaaabbbddd333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.17	49772	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:20 UTC	360	OUT	GET /images/twitter.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:21 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:21 GMT Content-Type: image/jpeg Content-Length: 19939 Connection: close Last-Modified: Mon, 06 Nov 2017 16:28:40 GMT ETag: "4de3-55d52f27def69" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:21 UTC	15918	IN	Data Raw: ff d8 ff e1 0c 31 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 94 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 34 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 36 3a 30 35 3a 31 31 20 31 37 3a 32 32 3a 33 35 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 78 a0 03 00 04 00 00 00 01 00 00 00 3b 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: 1ExifMM*bj(1"r2i''Adobe Photoshop CC 2014 (Windows)2016:05:11 17:22:35x;"
2024-04-17 22:33:21 UTC	4021	IN	Data Raw: 4b 97 86 a2 a7 65 a8 59 6a 3e bf d4 66 13 ad b4 86 09 9d 55 82 09 16 a0 85 66 00 35 08 20 95 a8 ae d9 23 b2 d2 f9 ee ed 6d a5 8a 0b 89 96 39 a7 12 b4 28 d5 ab 88 17 9c 84 6d fb 2b b9 c1 6b 4b ad a7 86 f2 de 2b bb 57 12 da ce 8b 2c 32 ad 68 d1 b8 aa b0 af 62 31 42 a6 2a ea 62 ae a6 2a ea 1e bd 8f 4c 6d 5d 4c 55 d4 ef 8a bb 15 53 9e 78 2d 6d e6 bb bb 99 2d ed 2d a3 79 ee 6e 26 61 1c 51 45 12 96 77 76 6d 95 55 41 24 9c 9c 62 64 44 62 09 24 d0 03 99 27 90 0a f0 bd 37 fe 72 63 46 f3 9e ad 77 a3 fe 5d 59 db dd 88 18 c7 06 a3 ab cc d6 eb 3f 1d b9 c7 6f 10 32 04 3f b3 ea 32 31 fe 55 cf 45 cb ec 4e 5d 1e 28 e4 d6 48 c6 f9 c3 10 e2 e0 f2 96 49 7a 78 bf ab 63 cd c3 fc d0 26 a2 3e 6c eb c8 bf 98 17 da f6 a5 71 e5 9f 35 59 5b 69 9e 68 82 33 73 6d f5 39 4c 96 77 d6 ea Data Ascii: KeYj>fUf5 #m9(m+kK+W,2hb1BbLm]LUSx-m--yn&aQEwvmUA$bdDb$'7rcFw]Y?o2?21UEN](HIzxc&>lq5Y[ih3sm9Lw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.17	49774	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:21 UTC	367	OUT	GET /images/ad_cmnd_syntax.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:21 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:21 GMT Content-Type: image/gif Content-Length: 9558 Connection: close Last-Modified: Mon, 06 Nov 2017 16:22:57 GMT ETag: "2556-55d52de0fda46" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:21 UTC	9558	IN	Data Raw: 47 49 46 38 39 61 78 00 5a 00 f7 00 00 00 00 00 ff ff ff 7e 00 01 7d 00 00 7c 00 00 7b 01 00 78 00 01 92 00 01 8d 00 01 84 00 02 82 00 02 80 00 01 7c 00 02 7b 00 02 77 00 02 73 00 02 71 00 02 63 00 01 5a 00 02 58 00 01 49 00 01 87 01 02 81 01 02 79 01 02 6e 01 03 57 01 02 82 02 03 51 01 02 80 02 04 7a 02 03 4c 02 03 47 02 03 5b 06 07 84 0c 0d 6d 0c 0d 89 11 12 84 11 12 7e 13 14 76 15 16 57 13 14 92 22 23 42 15 16 97 33 34 6b 26 27 72 2c 2d a2 44 45 9e 43 45 9e 44 45 99 43 45 8d 44 45 b2 66 67 ba 77 78 b8 76 77 b9 78 79 85 00 05 81 00 04 7e 00 03 79 00 04 73 00 05 54 00 02 52 00 02 4e 00 02 7e 01 04 77 01 04 56 01 04 4c 01 03 4e 02 04 4a 03 06 58 06 08 54 06 09 4f 06 08 3f 0d 0f 9f 44 48 6f 35 37 bc 77 79 b6 77 79 e1 ba bb dd bb bc c6 a8 a9 db bb bc 51 01 Data Ascii: GIF89axZ~}\|{x\|{wsqcZXIynWQzLG[m~vW"#B34k&'r,-DECEDECEDEfgwxvwxy~ysTRN~wVLNJXTO?DHo57wywyQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.17	49775	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:21 UTC	366	OUT	GET /images/email_address.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:21 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:21 GMT Content-Type: image/jpeg Content-Length: 20552 Connection: close Last-Modified: Mon, 06 Nov 2017 16:25:17 GMT ETag: "5048-55d52e6648bb2" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:21 UTC	15918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 08 57 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1c 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8e 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 00 32 30 30 39 3a 30 38 3a 30 37 20 31 34 3a 33 36 3a 34 37 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 90 a0 03 00 04 00 00 00 01 00 00 00 0e 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 Data Ascii: JFIFHHWExifMM*bj(1r2i''Adobe Photoshop CS4 Windows2009:08:07 14:36:47
2024-04-17 22:33:21 UTC	4634	IN	Data Raw: 63 44 f1 a2 b2 26 35 19 54 36 45 64 27 0a 73 83 93 46 74 c2 d2 e2 f2 55 65 75 56 37 84 85 a3 b3 c3 d3 e3 f3 29 1a 94 a4 b4 c4 d4 e4 f4 95 a5 b5 c5 d5 e5 f5 28 47 57 66 38 76 86 96 a6 b6 c6 d6 e6 f6 67 77 87 97 a7 b7 c7 d7 e7 f7 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 f9 2a 3a 4a 5a 6a 7a 8a 9a aa ba ca da ea fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 b7 0e be ff 00 85 47 fc 77 dc ab b4 b7 6e f7 f8 9f f2 43 ae ba 3b 70 f6 34 3d 5d 98 ef 59 63 db bb 9f 63 ed 1d d7 36 2e 9f 32 f4 19 57 c5 4b 01 a9 ac a0 c3 d6 47 90 a8 a2 82 47 c8 9c 6a cd 3d 35 3d 4b 44 62 62 95 dd a2 34 2d 0b 08 c9 a5 7c 87 59 45 b8 7d d6 f9 8a d8 dd da 58 f3 66 db 73 be 47 6d e3 ad af 7a 4b 24 7a 8a d5 75 56 80 b0 28 18 80 9a e8 ac cb 5a f4 2b 7c b9 ff 00 Data Ascii: cD&5T6Ed'sFtUeuV7)(GWf8vgwHXhx9IYiy*:JZjz?GwnC;p4=]Ycc6.2WKGGj=5=KDbb4-\|YE}XfsGmzK$zuV(Z+\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.17	49776	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:21 UTC	363	OUT	GET /images/BC_logo_98.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:21 UTC	465	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:21 GMT Content-Type: image/jpeg Content-Length: 6793 Connection: close Last-Modified: Mon, 06 Nov 2017 16:23:30 GMT ETag: "1a89-55d52e008dd63" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:21 UTC	6793	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff ed 0d fa 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 78 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 04 0a 00 00 00 00 00 01 00 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff Data Ascii: JFIFHHPhotoshop 3.08BIMHH8BIMx8BIM8BIM8BIM8BIM'8BIMH/fflff/ff2Z5-8BIMp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.17	49777	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:21 UTC	363	OUT	GET /images/phone-6342.gif HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:21 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:21 GMT Content-Type: image/gif Content-Length: 6725 Connection: close Last-Modified: Fri, 18 Nov 2022 02:22:25 GMT ETag: "1a45-5edb5606458ad" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:21 UTC	6725	IN	Data Raw: 47 49 46 38 39 61 bd 00 64 00 70 00 00 2c 00 00 00 00 bd 00 64 00 87 ff ff ff b3 93 93 4c 48 48 46 46 46 45 45 45 40 40 40 3d 3d 3d 3f 3f 3f 3b 3b 3b 39 39 39 37 37 37 47 41 41 98 95 95 79 60 60 42 42 42 6e 5c 5b 54 47 47 4a 4a 4a 49 49 49 4d 4d 4d 43 41 41 4e 4e 4e 51 51 51 53 53 53 54 54 54 57 57 57 59 59 59 5a 5a 5a 5c 5c 5c 5f 5f 5f 7e 7e 7e 89 89 89 6a 6a 6a a8 a8 a8 74 74 74 ab ab ab 8a 8a 8a 66 66 66 86 86 86 6d 6d 6d 78 78 78 61 61 61 82 82 82 d5 d5 d5 bf bf bf f4 f4 f4 ea ea ea 81 81 81 ca ca ca 62 62 62 8c 8c 8c e0 e0 e0 a0 a0 a0 b6 b6 b6 64 64 64 ac ac ac d6 d6 d6 33 33 33 a2 08 08 a1 07 08 a0 08 08 9f 08 08 9f 08 07 9d 07 08 9c 08 08 9a 07 08 9b 08 08 99 07 08 98 08 08 97 08 08 96 08 07 97 07 08 94 08 08 94 07 08 94 08 07 93 08 08 92 07 08 91 Data Ascii: GIF89adp,dLHHFFFEEE@@@===???;;;999777GAAy``BBBn\[TGGJJJIIIMMMCAANNNQQQSSSTTTWWWYYYZZZ\\\___~~~jjjtttfffmmmxxxaaabbbddd333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.17	49778	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:21 UTC	372	OUT	GET /images/americanflagpicture.jpg HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:21 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:21 GMT Content-Type: image/jpeg Content-Length: 61774 Connection: close Last-Modified: Mon, 06 Nov 2017 16:23:00 GMT ETag: "f14e-55d52de3ca69a" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:21 UTC	15918	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 57 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 02 00 42 00 00 00 1f 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: JFIFddWDuckyPB Adobed
2024-04-17 22:33:21 UTC	16384	IN	Data Raw: 0b 34 c0 35 50 86 54 21 ba 24 32 a1 0d 5a a1 01 b6 e3 8c ad 2e b2 b2 db ad 9b a1 c4 9b 14 9f 02 08 e9 50 01 36 d2 d6 b0 1d 05 00 00 22 89 00 9a 28 85 bd c2 cc 60 f3 1b b6 46 ca dc 8a 0d 62 77 fe 35 fc 2a 65 1e b1 a7 12 97 e0 48 4f f5 90 fb 40 7d 09 1e 34 65 b8 74 41 b3 58 7c 8e da cd 65 b6 ee 5d bf 43 27 85 94 e4 39 a8 f0 ef 6c db b9 3f 14 ac 59 49 3f 03 46 b9 64 56 82 1a 73 b6 d7 50 00 9b 02 6b 44 65 80 f2 8f 51 5e 5a 15 62 6c 41 b1 15 b2 ab 05 68 99 63 e5 d8 a7 5a ea 53 61 5c a2 4e a0 ca ee 09 d6 ba 50 96 4c d3 80 fa 00 75 16 3a de ad 46 79 2c 15 96 ed c3 90 55 25 a4 7f 6a d5 87 59 46 56 51 6d 73 2b 07 10 52 a2 0d 70 2c 86 0d 91 62 75 26 b3 4a 25 80 08 aa da 0a 36 29 70 30 30 01 a2 88 59 fc 31 89 fe 79 cb 5c 6f 8b ec 2e 25 fd c3 09 d7 52 0d bc 91 97 f9 Data Ascii: 45PT!$2Z.P6"(`Fbw5*eHO@}4etAX\|e]C'9l?YI?FdVsPkDeQ^ZblAhcZSa\NPLu:Fy,U%jYFVQms+Rp,bu&J%6)p00Y1y\o.%R
2024-04-17 22:33:21 UTC	16384	IN	Data Raw: 2f 15 a7 5f 01 d6 aa e6 36 55 11 1b 52 54 d9 b0 51 b5 3a 90 97 54 2a 54 92 e2 6c 4d c5 3e 4c 4e 18 13 f7 0a 82 34 27 7a c4 10 05 14 57 ca 36 2d b2 6e 2d 72 68 95 ca 25 52 b4 5c 57 da 70 7e 24 68 68 92 c8 37 d2 a9 b2 04 18 5d 6d 4d ac 02 2c 15 f6 9f 8d ab 14 e2 3a 66 01 55 34 32 64 87 6a ed 5c de f6 dc 78 6d a7 b6 a0 ab 23 9e cf 49 11 71 90 91 a1 5b 84 15 1b 93 a0 01 20 92 4f 41 55 cd 72 c5 c9 ee 45 89 64 8e bc db 8d 3a eb 2e b4 a6 5d 61 c5 34 f3 4b 16 52 16 85 14 a9 2a 1e 04 10 41 aa 94 93 59 40 68 4e a1 41 90 28 8a 50 81 23 c4 d4 01 a0 6e ae e3 a9 b5 af f2 1e 14 1a 1b 20 a8 60 80 69 70 03 5f 8d 0c 10 01 14 08 65 aa 04 cb da a1 05 2c 45 7e 73 8c 42 8a 82 e4 99 ae 22 3c 74 0e a5 c7 94 1b 40 1f 52 aa ba a7 87 92 da e3 96 7a 59 ee 87 8b 5a 95 c4 d8 99 b0 99 Data Ascii: /_6URTQ:TTlM>LN4'zW6-n-rh%R\Wp~$hh7]mM,:fU42dj\xm#Iq[ OAUrEd:.]a4KRAY@hNA(P#n `ip_e,E~sB"<t@RzYZ
2024-04-17 22:33:21 UTC	13088	IN	Data Raw: 93 67 80 f5 23 6d 6e ad ad bf 30 51 f7 2e cd ce c5 dc 78 29 5e 56 e7 c4 51 3d 8b ea 5b 75 0a 01 6d ac 78 a5 60 1a d1 75 32 86 f3 e1 3d 43 a6 ea 7a 7d ae 9d 44 1c 26 b8 3e 3e 14 f7 35 e1 46 4b 64 6b a5 65 92 33 c5 8c 4f 22 d7 d2 a9 92 2f 4c 6d 74 55 4d 16 21 0b 82 91 a1 d0 95 46 d5 5b 2c 41 0a 34 ac 71 32 97 48 c6 41 45 57 a0 31 b3 6b 50 08 59 eb 40 20 15 40 21 44 8a 01 08 51 a0 d1 02 d4 45 a9 42 21 75 3d 68 90 40 b4 d4 c0 44 ce 24 0a 81 13 2b c6 a1 04 6e 0e b4 e9 90 46 e0 ab 62 c0 d0 85 7a 55 d1 62 b4 13 df 6a 70 03 4a c7 c6 99 13 01 e9 5d 10 e0 52 d3 b4 1a 17 03 b4 69 1d a4 6b 55 b4 0c 12 bc 7c ee d2 35 a0 2b 45 83 8a c8 a6 e9 ba ad 7b 53 c4 ad c4 b3 71 cf 38 e8 41 6d 0b 55 fa 58 1a ba 26 79 c7 04 91 0f 06 82 4b ce 21 84 93 6e e7 56 94 0b fd 54 45 58 93 Data Ascii: g#mn0Q.x)^VQ=[umx`u2=Cz}D&>>5FKdke3O"/LmtUM!F[,A4q2HAEW1kPY@ @!DQEB!u=h@D$+nFbzUbjpJ]RikU\|5+E{Sq8AmUX&yK!nVTEX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.17	49779	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:21 UTC	592	OUT	GET /favicon.ico HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dba-oracle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:21 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:21 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close Last-Modified: Mon, 06 Nov 2017 17:16:06 GMT ETag: "47e-55d539c188937" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:21 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f1 ed e8 ff ea e1 d8 ff e0 d4 cd ff e0 d5 cd ff e1 dc d5 ff fd fd fc ff ff ff ff ff fe ff ff ff ff ff ff ff ee eb e7 ff d4 c7 ba ff ca b9 a8 ff d0 bf b2 ff dc d3 ca ff e7 e0 db ff f9 f7 f5 ff d1 Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.17	49780	206.188.193.189	443	5832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:21 UTC	353	OUT	GET /favicon.ico HTTP/1.1 Host: www.dba-oracle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:33:21 UTC	466	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 17 Apr 2024 22:33:21 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close Last-Modified: Mon, 06 Nov 2017 17:16:06 GMT ETag: "47e-55d539c188937" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-04-17 22:33:21 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f1 ed e8 ff ea e1 d8 ff e0 d4 cd ff e0 d5 cd ff e1 dc d5 ff fd fd fc ff ff ff ff ff fe ff ff ff ff ff ff ff ee eb e7 ff d4 c7 ba ff ca b9 a8 ff d0 bf b2 ff dc d3 ca ff e7 e0 db ff f9 f7 f5 ff d1 Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.17	49781	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:30 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GckPmzSD4Zeo7NZ&MD=7vGWdRlS HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-17 22:33:30 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 2caa5b96-b512-4fed-8834-e6b164365f7a MS-RequestId: 8be805eb-98e2-4869-a1c6-7da9e7151a11 MS-CV: qA78/t+wdEe22POs.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 17 Apr 2024 22:33:30 GMT Connection: close Content-Length: 24490
2024-04-17 22:33:30 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-17 22:33:30 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.17	49786	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:36 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-17 22:33:36 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=30643 Date: Wed, 17 Apr 2024 22:33:36 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.17	49787	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:37 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-17 22:33:37 UTC	804	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=30579 Date: Wed, 17 Apr 2024 22:33:37 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-17 22:33:37 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.17	49788	40.126.29.9	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:38 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-04-17 22:33:38 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-17 22:33:38 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 17 Apr 2024 22:32:38 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_SN1 x-ms-request-id: 4b835a7e-ea9c-4c2a-8a16-4e20346850a7 PPServer: PPV: 30 H: SN1PEPF0002F055 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 17 Apr 2024 22:33:37 GMT Connection: close Content-Length: 11390
2024-04-17 22:33:38 UTC	11390	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.17	49789	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:38 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-04-17 22:33:38 UTC	437	IN	HTTP/1.1 200 OK Content-Length: 7285 Content-Type: application/json; charset=utf-8 ETag: -461091716_-534490462 Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-ExP-TrackingId: 525acc84-2ac7-4fc5-a717-07c64d88d94f X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: DFA8B2093D5E44BEAA496DFD0B47DA1B Ref B: ATL331000105039 Ref C: 2024-04-17T22:33:38Z Date: Wed, 17 Apr 2024 22:33:37 GMT Connection: close
2024-04-17 22:33:38 UTC	1024	IN	Data Raw: 7b 22 46 65 61 74 75 72 65 73 22 3a 5b 22 68 69 67 68 71 75 61 6c 69 74 79 63 61 70 74 75 72 65 63 22 2c 22 79 6f 61 6c 77 39 38 30 31 63 66 22 2c 22 79 6f 63 33 37 32 31 22 2c 22 61 61 74 65 73 31 32 31 22 2c 22 79 6f 63 61 6c 38 33 30 22 2c 22 65 6d 70 72 6f 37 30 32 22 2c 22 79 6f 6e 6f 6e 32 34 38 22 2c 22 63 6f 6e 74 61 63 74 73 76 32 73 79 6e 63 6f 6e 6c 79 22 2c 22 79 6f 79 70 70 31 31 37 22 2c 22 79 6f 79 70 70 35 36 31 22 2c 22 79 6f 70 68 6f 31 35 36 22 2c 22 79 70 72 6f 6d 65 6c 65 73 73 22 2c 22 79 6f 72 65 6d 37 38 32 22 2c 22 79 6f 72 65 6d 33 32 35 22 2c 22 79 6f 72 6f 6d 39 33 39 22 2c 22 79 6f 79 70 70 36 33 38 22 2c 22 79 6f 61 61 6f 77 63 34 36 63 66 22 2c 22 79 6f 35 35 36 22 2c 22 79 6f 61 61 6f 32 36 37 22 2c 22 79 6f 70 72 69 32 35 Data Ascii: {"Features":["highqualitycapturec","yoalw9801cf","yoc3721","aates121","yocal830","empro702","yonon248","contactsv2synconly","yoypp117","yoypp561","yopho156","ypromeless","yorem782","yorem325","yorom939","yoypp638","yoaaowc46cf","yo556","yoaao267","yopri25
2024-04-17 22:33:38 UTC	1024	IN	Data Raw: 2c 22 31 34 67 36 22 3a 22 61 61 74 65 73 31 32 31 22 2c 22 31 38 66 7a 22 3a 22 79 6f 63 61 6c 38 33 30 22 2c 22 31 68 6a 65 22 3a 22 65 6d 70 72 6f 37 30 32 22 2c 22 31 71 61 38 22 3a 22 79 6f 6e 6f 6e 32 34 38 22 2c 22 31 77 6d 74 22 3a 22 63 6f 6e 74 61 63 74 73 76 32 73 79 6e 63 6f 6e 6c 79 22 2c 22 32 69 77 6a 22 3a 22 79 6f 79 70 70 31 31 37 22 2c 22 32 6a 36 61 22 3a 22 79 6f 79 70 70 35 36 31 22 2c 22 32 6b 71 32 22 3a 22 79 6f 70 68 6f 31 35 36 22 2c 22 32 6c 61 64 22 3a 22 79 70 72 6f 6d 65 6c 65 73 73 22 2c 22 32 6f 63 64 22 3a 22 79 6f 72 65 6d 37 38 32 22 2c 22 32 72 65 6b 22 3a 22 79 6f 72 65 6d 33 32 35 22 2c 22 32 73 63 78 22 3a 22 79 6f 72 6f 6d 39 33 39 22 2c 22 32 74 70 33 22 3a 22 79 6f 79 70 70 36 33 38 22 2c 22 33 30 62 38 22 3a 22 Data Ascii: ,"14g6":"aates121","18fz":"yocal830","1hje":"empro702","1qa8":"yonon248","1wmt":"contactsv2synconly","2iwj":"yoypp117","2j6a":"yoypp561","2kq2":"yopho156","2lad":"ypromeless","2ocd":"yorem782","2rek":"yorem325","2scx":"yorom939","2tp3":"yoypp638","30b8":"
2024-04-17 22:33:38 UTC	1024	IN	Data Raw: 32 36 34 22 2c 22 35 39 30 71 22 3a 22 34 61 33 30 64 34 35 35 22 2c 22 35 39 67 67 22 3a 22 32 69 32 68 65 31 31 38 22 2c 22 35 39 67 6a 22 3a 22 34 64 65 35 67 35 34 32 22 2c 22 35 39 76 7a 22 3a 22 62 65 63 34 34 37 35 37 22 2c 22 35 61 39 73 22 3a 22 39 38 34 65 39 37 37 34 22 2c 22 35 61 74 6b 22 3a 22 35 35 35 64 37 39 37 38 22 2c 22 35 62 61 74 22 3a 22 65 6a 66 34 36 37 39 35 22 2c 22 35 63 70 66 22 3a 22 34 39 62 34 67 31 33 33 22 2c 22 35 63 72 73 22 3a 22 33 62 66 39 67 38 35 35 22 2c 22 35 64 77 37 22 3a 22 69 34 37 62 65 31 37 38 22 2c 22 35 65 74 36 22 3a 22 32 34 38 66 61 31 38 36 22 2c 22 35 66 6c 32 22 3a 22 68 35 31 66 30 33 34 32 22 2c 22 35 66 79 6f 22 3a 22 68 64 65 31 67 32 36 37 22 2c 22 35 66 79 71 22 3a 22 34 6a 6a 66 62 37 36 38 Data Ascii: 264","590q":"4a30d455","59gg":"2i2he118","59gj":"4de5g542","59vz":"bec44757","5a9s":"984e9774","5atk":"555d7978","5bat":"ejf46795","5cpf":"49b4g133","5crs":"3bf9g855","5dw7":"i47be178","5et6":"248fa186","5fl2":"h51f0342","5fyo":"hde1g267","5fyq":"4jjfb768
2024-04-17 22:33:38 UTC	1024	IN	Data Raw: 7d 7d 2c 7b 22 49 64 22 3a 22 59 6f 75 72 50 68 6f 6e 65 22 2c 22 50 61 72 61 6d 65 74 65 72 73 22 3a 7b 22 41 41 4f 57 43 34 36 22 3a 36 34 30 30 2c 22 41 41 4f 57 43 34 37 22 3a 37 34 30 30 2c 22 41 41 4f 57 43 36 31 22 3a 31 36 30 30 2c 22 41 41 4f 57 43 36 32 22 3a 32 36 30 30 2c 22 41 41 4f 57 43 36 33 22 3a 33 36 30 30 2c 22 41 69 72 70 6c 61 6e 65 4d 6f 64 65 53 74 61 74 75 73 22 3a 74 72 75 65 2c 22 41 75 74 6f 48 79 64 72 61 74 65 64 49 6d 61 67 65 73 43 6f 75 6e 74 22 3a 30 2c 22 43 61 6c 6c 69 6e 67 41 6c 74 42 6c 75 65 74 6f 6f 74 68 50 61 69 72 69 6e 67 45 76 65 6e 74 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 45 78 69 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 4f 53 53 65 72 76 69 63 69 6e 67 46 69 Data Ascii: }},{"Id":"YourPhone","Parameters":{"AAOWC46":6400,"AAOWC47":7400,"AAOWC61":1600,"AAOWC62":2600,"AAOWC63":3600,"AirplaneModeStatus":true,"AutoHydratedImagesCount":0,"CallingAltBluetoothPairingEvent":true,"CallingExitConfirmation":true,"CallingOSServicingFi
2024-04-17 22:33:38 UTC	1024	IN	Data Raw: 3a 74 72 75 65 2c 22 49 73 41 75 74 68 56 32 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 4d 65 64 69 61 50 61 63 6b 43 68 65 63 6b 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 68 61 74 46 69 6c 74 65 72 54 6f 67 67 6c 65 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 6f 6e 73 65 6e 74 56 32 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 6f 6e 76 65 72 73 61 74 69 6f 6e 56 69 65 77 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 48 69 64 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 4d 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 50 69 6e 6e 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 53 65 61 72 63 68 22 3a 74 72 75 65 2c 22 Data Ascii: :true,"IsAuthV2Enabled":true,"MediaPackCheck":true,"MessagingChatFilterToggle":true,"MessagingConsentV2":true,"MessagingConversationView":true,"MessagingEnableHiding":true,"MessagingEnableMuting":true,"MessagingEnablePinning":true,"MessagingSearch":true,"
2024-04-17 22:33:38 UTC	1024	IN	Data Raw: 69 6e 67 54 6f 70 30 31 31 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 69 6e 67 54 6f 70 30 31 32 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 69 6e 67 54 6f 70 30 31 35 22 3a 74 72 75 65 2c 22 52 6f 6d 65 44 69 73 61 62 6c 65 64 22 3a 34 34 31 35 30 33 2c 22 53 65 63 75 72 65 43 6f 6e 74 65 6e 74 22 3a 74 72 75 65 2c 22 53 68 65 6c 6c 45 78 74 65 6e 64 65 64 4c 65 66 74 50 61 6e 65 22 3a 74 72 75 65 2c 22 54 65 73 74 46 65 61 74 75 72 65 32 22 3a 66 61 6c 73 65 2c 22 55 6e 69 76 65 72 73 61 6c 42 6c 75 65 74 6f 6f 74 68 50 61 69 72 69 6e 67 22 3a 74 72 75 65 2c 22 57 68 61 74 73 4e 65 77 43 4e 22 3a 74 72 75 65 2c 22 59 50 50 43 61 74 61 73 74 72 6f 70 68 69 63 45 72 72 6f 72 41 75 74 6f 52 65 73 65 74 22 3a 74 72 75 65 2c 22 59 50 50 43 6f 6e 73 65 63 75 74 69 76 Data Ascii: ingTop011":true,"RemotingTop012":true,"RemotingTop015":true,"RomeDisabled":441503,"SecureContent":true,"ShellExtendedLeftPane":true,"TestFeature2":false,"UniversalBluetoothPairing":true,"WhatsNewCN":true,"YPPCatastrophicErrorAutoReset":true,"YPPConsecutiv
2024-04-17 22:33:38 UTC	1024	IN	Data Raw: 79 6f 35 35 36 3a 33 30 39 38 36 35 35 36 3b 79 6f 61 61 6f 32 36 37 3a 33 30 34 33 34 36 37 32 3b 79 6f 70 72 69 32 35 37 3a 33 30 34 36 34 34 33 33 3b 79 6f 31 37 39 3a 33 30 34 34 35 33 31 30 3b 79 6f 69 73 61 38 36 31 3a 33 30 35 32 35 38 36 38 3b 79 6f 72 65 6d 31 34 31 3a 33 30 34 38 36 33 35 33 3b 79 6f 79 70 70 36 35 32 3a 33 30 35 31 35 34 38 33 3b 79 6f 35 32 35 3a 33 30 35 35 33 39 38 35 3b 79 6f 36 30 36 3a 33 30 35 32 37 38 35 30 3b 79 6f 6e 6f 74 36 33 33 3a 33 30 36 32 36 30 37 38 3b 79 6f 79 70 70 38 35 39 3a 33 30 36 38 37 38 35 39 3b 79 6f 69 6e 64 36 36 35 3a 33 30 35 39 35 31 36 33 3b 79 6f 64 63 67 38 33 30 3a 33 30 37 31 32 39 34 39 3b 6f 6e 6c 79 5f 74 6f 61 73 74 63 6f 6e 74 65 78 74 6d 65 6e 75 3a 33 30 36 34 38 30 38 31 3b 61 6a Data Ascii: yo556:30986556;yoaao267:30434672;yopri257:30464433;yo179:30445310;yoisa861:30525868;yorem141:30486353;yoypp652:30515483;yo525:30553985;yo606:30527850;yonot633:30626078;yoypp859:30687859;yoind665:30595163;yodcg830:30712949;only_toastcontextmenu:30648081;aj
2024-04-17 22:33:38 UTC	117	IN	Data Raw: 38 33 38 35 30 33 3b 35 30 63 37 39 31 30 36 3a 33 30 38 33 38 36 31 39 3b 6a 61 35 63 34 32 34 39 3a 33 31 30 30 36 32 34 34 3b 68 33 65 64 34 31 36 31 3a 33 30 38 39 31 37 38 34 3b 61 62 69 30 67 38 31 37 3a 33 30 39 35 32 38 37 35 3b 61 35 34 66 61 35 37 34 3a 33 30 39 39 33 33 34 39 3b 64 69 66 32 32 32 31 39 3a 33 30 39 36 30 34 30 32 3b 22 7d Data Ascii: 838503;50c79106:30838619;ja5c4249:31006244;h3ed4161:30891784;abi0g817:30952875;a54fa574:30993349;dif22219:30960402;"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.17	49790	40.126.29.9	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:38 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-04-17 22:33:38 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-17 22:33:39 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 17 Apr 2024 22:32:39 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_SN1 x-ms-request-id: b834c20c-b534-4588-9809-f7887b3210ad PPServer: PPV: 30 H: SN1PEPF0002F1A8 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 17 Apr 2024 22:33:39 GMT Connection: close Content-Length: 11370
2024-04-17 22:33:39 UTC	11370	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.17	49791	40.126.29.9	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:39 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4788 Host: login.live.com
2024-04-17 22:33:39 UTC	4788	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-17 22:33:39 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 17 Apr 2024 22:32:39 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_SN1 x-ms-request-id: be71eb08-50c7-42a4-93c2-7a04de612f07 PPServer: PPV: 30 H: SN1PEPF0002F1B2 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 17 Apr 2024 22:33:38 GMT Connection: close Content-Length: 11153
2024-04-17 22:33:39 UTC	11153	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.17	49792	13.107.21.200	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:40 UTC	2564	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: 120 X-DeviceID: 01000A41090080B6 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAfqCYviQs7TcfxQsXalFBaUDuZzW%2BaerXsZ0fIe9bYNffEOM2GWPJw8dIjOejsM8EZ8eMPK0ad/A4hry/PuyDLDWJUNtaRiMl8pIK/STFKCS8Z9%2BtF4jC0YeR1PnmHnhZYfMXW8CA0EqyTIQngEHJ4p7h5hfn/OlnjN9ELMVMg180RCozJjjzFfGIp0J9vdvvrRRgBNYVhhl/1I5s4TFtpRHtQw3f28TF2sQ6LzQoA0bC0FSrZwTA2Q9pMduUQ5xFaSQ2hIRlhO6zZLqCuf8C9WgrTsfmyW0RWQnhD2ogIq/SML7nrcUMLVAF3ePrfAboO0bXrUUOVcqdeeFSwSXb08DZgAACPSx7DTosr/EqAHhQXhDcIITdUzBXSKKvLS2j51bLc6IetzUiZ40P2kDGCGEJD%2BSxCx1hbpkurPTLO5vunCR7B/5Dt9ilaqI8eqEtODGtP76NzpjqGRVVR0YIMgbQBvpa7oM/LZjuQ3IrR05mXqGcatKcnlpMo4ih3lSaPRnmQO8Nqmczy8%2BKFBPcq4YJOZ2zgeCawN36hXW/9R9Ry%2BwOVfhUv%2BJ39iUkhpLe1qarpMACnsX95%2Bh4xlZrG9wOeiXcueDcWe/EkjZlRpAdDbqYWWnsx54Kl5ZQfjrybHFxtfXOLf6XtIOP4BD4DPoSu6XgME2DCDUy5qQuae3g5hkDt/7/jmY/CbXBTXx4IHdUWzSLMzus23i870VNtY0RjrNDdsvgP9IYqu9smgjjIOs6JrFdfHQG7zVkp/jzc23UgZ0oqu4WvlJfYH7rJpWaz66H27LyNZ0XIqezTRKBArVT08jSzJrvhIg8ul64RdKegRI5MSiM7wrdHV%2B45IOaflC9hdSa9hVlqTo1DqK%2BlXicHP2JT4Ghfj%2Bd6i2uE%2B4syJaAx9%2BaHfbTBfMYjf7OeynJiqv2AE%3D%26p%3D X-Agent-DeviceId: 01000A41090080B6 X-BM-CBT: 1713393216 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: 4F8D3700824948FFB1DF6FD42831AD39 X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
2024-04-17 22:33:40 UTC	1463	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 2215 Content-Type: application/json; charset=utf-8 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: _EDGE_S=SID=223B3781039E6A43113923E502486BAB&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: MUIDB=4590362BB5CF472B95BBEDB3112D4B7B; expires=Mon, 12-May-2025 22:33:40 GMT; path=/; HttpOnly Set-Cookie: ANON=A=84BEA1DAAAB85FA790252CDAFFFFFFFF; domain=.bing.com; expires=Mon, 12-May-2025 22:33:40 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=223B3781039E6A43113923E502486BAB; domain=.bing.com; path=/; secure; SameSite=None X-EventID: 66204e44f7dc471aac3854ff30cd63a3 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: F50E61ED34924C14922178756D8F5114 Ref B: ATL331000108053 Ref C: 2024-04-17T22:33:40Z Date: Wed, 17 Apr 2024 22:33:40 GMT Connection: close
2024-04-17 22:33:40 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.17	49793	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:07 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GckPmzSD4Zeo7NZ&MD=7vGWdRlS HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-17 22:34:08 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: b0d5a811-6f7f-46ab-b89f-66f3c8b40a3a MS-RequestId: b74e0208-1f05-4455-b6f6-a54bd38d86b6 MS-CV: +SZT9B/DZ06vU7vr.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 17 Apr 2024 22:34:07 GMT Connection: close Content-Length: 25457
2024-04-17 22:34:08 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-17 22:34:08 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Target ID:	0
Start time:	00:33:13
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.dba-oracle.com/
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	00:33:14
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2044,i,18231056445440177825,11824916755717883413,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.dba-oracle.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Windows Analysis Report
http://www.dba-oracle.com/