Edit tour

Windows Analysis Report
https://sites.google.com/view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474

Overview

General Information

Sample URL:	https://sites.google.com/view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474
Analysis ID:	1431389
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML page contains hidden URLs or javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2012,i,2004731542745830163,9567229137091194842,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sites.google.com/view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /_/view/logImpressions?authuser=0 HTTP/1.1Host: sites.google.comConnection: keep-aliveContent-Length: 3047sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded;charset=UTF-8Accept: */*Origin: https://sites.google.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sites.google.com/view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=m8vzUKs7mdsDY9mgtbufDSFg9G1wJNJHyn0QIml-lFAT5b48tJsFSX83DjF5c8vLrOO3Qx0l4tVm-UogW_rLp6OMb6b_iL1dQRSc3jw9d0vH-9a03PTR9HdQHUA-e1a-YlTAKvBY84iaCWPDLmlkMC5bVwkvxura_tyrXwZgoOg

Source: chromecache_95.1.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_96.1.dr	String found in binary or memory: http://lh3.ggpht.com
Source: chromecache_96.1.dr	String found in binary or memory: http://lh4.ggpht.com
Source: chromecache_96.1.dr	String found in binary or memory: http://lh5.ggpht.com
Source: chromecache_96.1.dr	String found in binary or memory: http://lh6.ggpht.com
Source: chromecache_127.1.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_127.1.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_96.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_96.1.dr	String found in binary or memory: https://accounts.google.com/gsi/client
Source: chromecache_95.1.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_95.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_95.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_111.1.dr, chromecache_114.1.dr, chromecache_101.1.dr, chromecache_99.1.dr, chromecache_139.1.dr, chromecache_95.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_96.1.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/model-viewer/3.4.0/model-viewer.min.js
Source: chromecache_123.1.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_139.1.dr, chromecache_95.1.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_101.1.dr, chromecache_96.1.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_109.1.dr, chromecache_124.1.dr	String found in binary or memory: https://apis.google.com/js/api.js?checkCookie=1
Source: chromecache_139.1.dr, chromecache_96.1.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_96.1.dr	String found in binary or memory: https://apps-drive-picker-dev.corp.google.com/picker/minpick/main
Source: chromecache_127.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_127.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_127.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_127.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_127.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_127.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_127.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_127.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_127.1.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_127.1.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_127.1.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_127.1.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_96.1.dr	String found in binary or memory: https://clients5.google.com
Source: chromecache_96.1.dr	String found in binary or memory: https://clients5.google.com/webstore/wall/widget
Source: chromecache_95.1.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_112.1.dr, chromecache_97.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_112.1.dr, chromecache_97.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_95.1.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_95.1.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_95.1.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_111.1.dr, chromecache_99.1.dr, chromecache_95.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_95.1.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_95.1.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_95.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_112.1.dr, chromecache_97.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_112.1.dr, chromecache_97.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_112.1.dr, chromecache_97.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_95.1.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_111.1.dr, chromecache_99.1.dr, chromecache_95.1.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_96.1.dr	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/
Source: chromecache_96.1.dr	String found in binary or memory: https://drive.google.com
Source: chromecache_96.1.dr	String found in binary or memory: https://drive.google.com/drive/my-drive
Source: chromecache_96.1.dr	String found in binary or memory: https://drive.google.com/picker/minpick/main
Source: chromecache_96.1.dr	String found in binary or memory: https://drive.google.com/requestreview?id=
Source: chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_96.1.dr	String found in binary or memory: https://drive.google.com/viewer
Source: chromecache_96.1.dr	String found in binary or memory: https://drivemetadata.clients6.google.com
Source: chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_127.1.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_127.1.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_127.1.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_127.1.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_127.1.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_127.1.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_127.1.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_96.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_96.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialiconsfilled/close/v19/gm_grey200-24dp/1x/gm_filled_close
Source: chromecache_113.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2)
Source: chromecache_113.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2)
Source: chromecache_113.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_113.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_113.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2)
Source: chromecache_113.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2)
Source: chromecache_113.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_FQft1dw.woff2)
Source: chromecache_113.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2)
Source: chromecache_113.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_FQft1dw.woff2)
Source: chromecache_113.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2)
Source: chromecache_113.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_113.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlM-vWjMY.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMOvWjMY.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMevWjMY.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMuvWjMY.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlOevWjMY.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPuvWjMY.woff2)
Source: chromecache_127.1.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_127.1.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_127.1.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_127.1.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_96.1.dr	String found in binary or memory: https://onepick-autopush.sandbox.google.com/picker/minpick/main
Source: chromecache_96.1.dr	String found in binary or memory: https://onepick-preprod.sandbox.google.com/picker/minpick/main
Source: chromecache_96.1.dr	String found in binary or memory: https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main
Source: chromecache_96.1.dr	String found in binary or memory: https://onepick-staging.sandbox.google.com/picker/minpick/main
Source: chromecache_139.1.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_96.1.dr	String found in binary or memory: https://play.google.com
Source: chromecache_123.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_95.1.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_111.1.dr, chromecache_114.1.dr, chromecache_101.1.dr, chromecache_99.1.dr, chromecache_139.1.dr, chromecache_95.1.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_96.1.dr	String found in binary or memory: https://preprod-dynamite-alpha-us-signaler-pa.clients6.google.com
Source: chromecache_96.1.dr	String found in binary or memory: https://preprod-dynamite-alpha-us-signaler-pa.googleapis.com
Source: chromecache_96.1.dr	String found in binary or memory: https://punctual-dev.corp.google.com
Source: chromecache_123.1.dr	String found in binary or memory: https://rapid.corp.google.com/
Source: chromecache_97.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_127.1.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_127.1.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_127.1.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_127.1.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_127.1.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_123.1.dr	String found in binary or memory: https://scriptz.corp.google.com/
Source: chromecache_96.1.dr	String found in binary or memory: https://signaler-pa.clients6.google.com
Source: chromecache_96.1.dr	String found in binary or memory: https://signaler-pa.googleapis.com
Source: chromecache_96.1.dr	String found in binary or memory: https://signaler-pa.youtube.com
Source: chromecache_96.1.dr	String found in binary or memory: https://signaler-staging.sandbox.google.com
Source: chromecache_96.1.dr	String found in binary or memory: https://ssl.gstatic.com/atari/images/no_results_error.png
Source: chromecache_96.1.dr	String found in binary or memory: https://ssl.gstatic.com/docs/common/cleardot.gif
Source: chromecache_95.1.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_127.1.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com
Source: chromecache_127.1.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com/a/answer/33864?hl=en-US
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com/cloudsearch/answer/6172299
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com/docs/answer/148505
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com/docs/answer/37603
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com/docs/answer/49114
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com/drive/answer/2407404?hl=en
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com/drive/answer/2423485?hl=%s
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com/drive/answer/2423694
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com/drive/answer/7650301
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com/google-workspace-individual/?p=esignature_requester_terms
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com/google-workspace-individual/?p=esignature_signer_terms
Source: chromecache_96.1.dr	String found in binary or memory: https://support.google.com/google-workspace-individual/?p=esignature_signer_tos
Source: chromecache_127.1.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_127.1.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_97.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_112.1.dr, chromecache_97.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_112.1.dr, chromecache_97.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_112.1.dr, chromecache_97.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_127.1.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_123.1.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_96.1.dr	String found in binary or memory: https://workspace.google.com
Source: chromecache_111.1.dr, chromecache_114.1.dr, chromecache_101.1.dr, chromecache_99.1.dr, chromecache_139.1.dr, chromecache_95.1.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_123.1.dr	String found in binary or memory: https://workspace.google.com/products/sites/
Source: chromecache_96.1.dr	String found in binary or memory: https://workspacevideo-pa.googleapis.com
Source: chromecache_112.1.dr, chromecache_97.1.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_127.1.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_127.1.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_96.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_130.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?onload=onLoadCallback&render=explicit
Source: chromecache_96.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true
Source: chromecache_112.1.dr, chromecache_97.1.dr, chromecache_128.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_127.1.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_127.1.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_127.1.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_127.1.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_96.1.dr	String found in binary or memory: https://www.googleapis.com/auth/cloud_search.query
Source: chromecache_95.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_95.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_95.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_96.1.dr	String found in binary or memory: https://www.googleapis.com/auth/teams.readonly
Source: chromecache_96.1.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: chromecache_112.1.dr, chromecache_97.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.
Source: chromecache_96.1.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_128.1.dr, chromecache_98.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Source: chromecache_127.1.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_127.1.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_96.1.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1
Source: chromecache_96.1.dr	String found in binary or memory: https://www.youtubeeducation.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49859 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@19/94@26/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2012,i,2004731542745830163,9567229137091194842,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sites.google.com/view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2012,i,2004731542745830163,9567229137091194842,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sites.google.com/view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://csp.withgoogle.com/csp/lcreport/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/inapp/	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
plus.l.google.com	142.250.105.139	true	false	high
play.google.com	64.233.185.139	true	false	high
sites.google.com	64.233.185.139	true	false	high
www.google.com	74.125.136.103	true	false	high
drive.google.com	172.217.215.100	true	false	high
miroslawbaca.pl	153.92.220.230	true	false	unknown
googlehosted.l.googleusercontent.com	142.251.15.132	true	false	high
1466681747-atari-embeds.googleusercontent.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/recaptcha/api2/reload?k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL	false		high
about:blank	false	Avira URL Cloud: safe	low
https://sites.google.com/view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474	false		high
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_rpc/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs	false		high
https://apis.google.com/js/api.js?checkCookie=1	false		high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL&co=aHR0cHM6Ly9taXJvc2xhd2JhY2EucGw6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=ohmt2ae69ssp	false		high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA6eAkkpFQi7IwwJwhIUV0lP0m6te_VdTKclmnezSRY1QyMLvayGRt1NmniaIU-meakxVJRAT3g5zk4f0Z0otG3SMs8rhFiB_aaj6I76i2dlFu8g1U3pzEVk5A8qLADunZJlPqkIWkB30xLtz6Qp2p8iyWVJ4zr7OVM2V-vMx0VodlFwfTRjrbILAUoIsPeJz2gMWGtqBkWsr7TxTx_hBtC7_rSygw&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL	false		high
https://miroslawbaca.pl/wp-content/uploads/2020/boat.php?id=AwvqtMJyy0Vldu	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://signaler-staging.sandbox.google.com	chromecache_96.1.dr	false		high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_127.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_112.1.dr, chromecache_97.1.dr	false		high
https://apis.google.com/js/client.js	chromecache_139.1.dr, chromecache_96.1.dr	false		high
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_127.1.dr	false		high
http://lh3.ggpht.com	chromecache_96.1.dr	false		high
https://support.google.com	chromecache_96.1.dr	false		high
http://localhost.proxy.googlers.com/inapp/	chromecache_127.1.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_112.1.dr, chromecache_97.1.dr	false		high
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_127.1.dr	false		high
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	false		high
https://support.google.com/drive/answer/2423485?hl=%s	chromecache_96.1.dr	false		high
https://help.youtube.com/tools/feedback/	chromecache_127.1.dr	false		high
https://support.google.com/a/answer/33864?hl=en-US	chromecache_96.1.dr	false		high
https://onepick-autopush.sandbox.google.com/picker/minpick/main	chromecache_96.1.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_111.1.dr, chromecache_114.1.dr, chromecache_101.1.dr, chromecache_99.1.dr, chromecache_139.1.dr, chromecache_95.1.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_112.1.dr, chromecache_97.1.dr	false		high
https://www.youtube.com	chromecache_96.1.dr	false		high
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_127.1.dr	false		high
https://www.google.com	chromecache_96.1.dr	false		high
https://support.google.com/drive/answer/2407404?hl=en	chromecache_96.1.dr	false		high
https://pay.google.com/gp/v/widget/save	chromecache_139.1.dr	false		high
https://workspace.google.com	chromecache_96.1.dr	false		high
https://onepick-staging.sandbox.google.com/picker/minpick/main	chromecache_96.1.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_112.1.dr, chromecache_97.1.dr	false		high
https://support.google.com/docs/answer/49114	chromecache_96.1.dr	false		high
https://support.google.com/drive/answer/2423694	chromecache_96.1.dr	false		high
https://support.google.com/google-workspace-individual/?p=esignature_signer_terms	chromecache_96.1.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	chromecache_112.1.dr, chromecache_97.1.dr	false	Avira URL Cloud: safe	low
https://drive-thirdparty.googleusercontent.com/	chromecache_96.1.dr	false		high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_127.1.dr	false	URL Reputation: safe	unknown
https://onepick-preprod.sandbox.google.com/picker/minpick/main	chromecache_96.1.dr	false		high
https://developers.google.com/	chromecache_95.1.dr	false		high
https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main	chromecache_96.1.dr	false		high
https://support.google.com/cloudsearch/answer/6172299	chromecache_96.1.dr	false		high
https://support.google.com/recaptcha	chromecache_97.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_95.1.dr	false		high
https://www.google.com/tools/feedback	chromecache_127.1.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_127.1.dr	false		high
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_96.1.dr	false		high
https://apis.google.com/js/api.js	chromecache_101.1.dr, chromecache_96.1.dr	false		high
https://workspace.google.com/products/sites/	chromecache_123.1.dr	false		high
https://www.apache.org/licenses/	chromecache_112.1.dr, chromecache_97.1.dr	false		high
https://www.google.com/tools/feedback/	chromecache_127.1.dr	false		high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	false		high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_127.1.dr	false		high
https://punctual-dev.corp.google.com	chromecache_96.1.dr	false		high
https://plus.google.com	chromecache_95.1.dr	false		high
https://support.google.com/google-workspace-individual/?p=esignature_signer_tos	chromecache_96.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_112.1.dr, chromecache_97.1.dr	false		high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_127.1.dr	false		high
https://www.youtubeeducation.com	chromecache_96.1.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_127.1.dr	false		high
https://clients5.google.com/webstore/wall/widget	chromecache_96.1.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_123.1.dr	false		high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_127.1.dr	false		high
https://preprod-dynamite-alpha-us-signaler-pa.clients6.google.com	chromecache_96.1.dr	false		high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_127.1.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_127.1.dr	false		high
https://localhost.corp.google.com/inapp/	chromecache_127.1.dr	false		high
https://support.google.com/drive/answer/7650301	chromecache_96.1.dr	false		high
https://drive.google.com	chromecache_96.1.dr	false		high
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	false		high
https://rapid.corp.google.com/	chromecache_123.1.dr	false		high
https://drive.google.com/requestreview?id=	chromecache_96.1.dr	false		high
http://lh4.ggpht.com	chromecache_96.1.dr	false		high
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_127.1.dr	false		high
https://drive.google.com/drive/my-drive	chromecache_96.1.dr	false		high
https://fonts.google.com/license/googlerestricted	chromecache_134.1.dr	false		high
https://clients6.google.com	chromecache_95.1.dr	false		high
http://localhost.corp.google.com/inapp/	chromecache_127.1.dr	false		high
https://scriptz.corp.google.com/	chromecache_123.1.dr	false		high
https://play.google.com	chromecache_96.1.dr	false		high
https://clients5.google.com	chromecache_96.1.dr	false		high
https://console.developers.google.com/	chromecache_95.1.dr	false		high
https://signaler-pa.youtube.com	chromecache_96.1.dr	false		high
https://support.google.com/inapp/%	chromecache_127.1.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_127.1.dr	false		high
https://drivemetadata.clients6.google.com	chromecache_96.1.dr	false		high
https://cloud.google.com/contact	chromecache_112.1.dr, chromecache_97.1.dr	false		high
https://support.google.com/docs/answer/148505	chromecache_96.1.dr	false		high
https://support.google.com/	chromecache_127.1.dr	false		high
https://support.google.com/docs/answer/37603	chromecache_96.1.dr	false		high
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	false		high
https://csp.withgoogle.com/csp/lcreport/	chromecache_111.1.dr, chromecache_99.1.dr, chromecache_95.1.dr	false	URL Reputation: safe	unknown
https://drive.google.com/savetodrivebutton?usegapi=1	chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	false		high
https://scone-pa.clients6.google.com	chromecache_127.1.dr	false		high
https://support.google.com/inapp/	chromecache_127.1.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_127.1.dr	false	URL Reputation: safe	unknown
http://lh6.ggpht.com	chromecache_96.1.dr	false		high
https://developers.google.com/api-client-library/javascript/reference/referencedocs	chromecache_95.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.215.100	drive.google.com	United States	15169	GOOGLEUS	false
74.125.136.105	unknown	United States	15169	GOOGLEUS	false
172.217.215.104	unknown	United States	15169	GOOGLEUS	false
64.233.176.113	unknown	United States	15169	GOOGLEUS	false
74.125.136.103	www.google.com	United States	15169	GOOGLEUS	false
64.233.185.139	play.google.com	United States	15169	GOOGLEUS	false
142.251.15.132	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
108.177.122.101	unknown	United States	15169	GOOGLEUS	false
153.92.220.230	miroslawbaca.pl	United States	47583	AS-HOSTINGERLT	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431389
Start date and time:	2024-04-25 00:53:39 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sites.google.com/view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@19/94@26/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.177.94, 74.125.138.84, 142.250.105.102, 142.250.105.100, 142.250.105.139, 142.250.105.101, 142.250.105.113, 142.250.105.138, 34.104.35.123, 142.251.15.95, 64.233.185.94, 172.217.215.94, 142.250.105.95, 64.233.176.95, 172.253.124.95, 108.177.122.95, 142.250.9.95, 64.233.185.95, 64.233.177.95, 74.125.138.95, 172.217.215.95, 173.194.219.95, 173.194.219.94, 74.125.138.94, 172.253.124.94, 69.164.42.0, 192.229.211.108, 72.21.81.240, 142.250.105.94, 142.250.9.94, 142.250.9.102, 142.250.9.113, 142.250.9.100, 142.250.9.101, 142.250.9.139, 142.250.9.138
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, ssl.gstatic.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://sites.google.com/view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 21:54:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.984105194514344
Encrypted:	false
SSDEEP:	48:8Hd+T6a1WH6idAKZdA19ehwiZUklqehsJy+3:80TBBJy
MD5:	2BF140F494F8A47A23610E0EA848F695
SHA1:	7E23D9FABA53F141C695750765E2EABDCDD33194
SHA-256:	E200B7702FE1DDDC47A14AD86D88F3E075BA721DE818E17B7A2E2FF9528F25AC
SHA-512:	08154E0A8AF0A4CD85F97D67660D76004EED5FD52008292128E9ED45A3BA7DE9EB37564001E4B9E5376077194254D3CF882B1CB6ADFA4247DCB25888A197FA3B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....."._....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........w..K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 21:54:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9993120704799643
Encrypted:	false
SSDEEP:	48:85d+T6a1WH6idAKZdA1weh/iZUkAQkqehxJy+2:8aTz9Q+Jy
MD5:	1C93BBBE5E261F446D919B1679EB6843
SHA1:	F52111E2D00EC96F4FDE21F4CD8E21A9A403B5B9
SHA-256:	C470E85D73D02A75EDE83908E9510997666FE92A2F0633EED62DF555E834C60A
SHA-512:	42A53CC4B0DB5516E6A72BCE10EA0211C29B21A5B191DA2423AA9DCA0EC0C09C683083C63EDFDB1B014EF5CCA49151DD4BA6E98A267CB828B83871FB0E5EDF9F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....:..^....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........w..K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0069418124268
Encrypted:	false
SSDEEP:	48:8xzd+T6asH6idAKZdA14tseh7sFiZUkmgqeh7srJy+BX:8xATbndJy
MD5:	FD737A7216AB9E765A7664A07BE5C0FB
SHA1:	957374DBB28050F16D436BB547320B681D6F1C7A
SHA-256:	2B330CEA128806FB3BACDEED03E6108D167F6E550191C1C3F87ECA311E8DEA0B
SHA-512:	BE9902651B6D2CF4986399EA3007B0E755DD5D42D0461BCFE494CBF5142D5A4BA168442254723AA3359A8D3DBA6543AFF9A6272200E822B5E6490CE37F79BF27
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........w..K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 21:54:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.998946263575489
Encrypted:	false
SSDEEP:	48:8Ud+T6a1WH6idAKZdA1vehDiZUkwqeh1Jy+R:8JTwjJy
MD5:	7D3C9B812C8EA1329AA16F22BDCA0DBD
SHA1:	E257F494B27BADD6EFA5B822EC1448DFEC9E0197
SHA-256:	227351B5C1DDB7A8126273A5ACEBB4D082E3EE9C36C6A8ADC4C4CB57E46BA3BB
SHA-512:	E37FD9E29568964CA68CBC08DE11BA65086E0BBA0C8D78F94FF03851EEB76B54E7C6A972A2F0599DB217B09BC3DBCF9ED9993F451FCFCB0C2E5B4E549528B92A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....`.^....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........w..K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 21:54:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.986091131681281
Encrypted:	false
SSDEEP:	48:8sd+T6a1WH6idAKZdA1hehBiZUk1W1qehnJy+C:8hTw9HJy
MD5:	177967443846F5BB729F2357972CDE3C
SHA1:	39DEA3A8C8D21FF5C08B0A547C0C0954899AFF3F
SHA-256:	2C492FBB3581015733C9BDE21CAD52C934276CCFE940E60F68920BF51F697CA9
SHA-512:	9A020432A4A3DC30C5700B4482DD94F0127183B2CA50B4DB23B647B1AED9E2923706FC8BC73D0A25E32DD6E1AE39DCA80CC820F3FEFA928E4C2CF2B9892C244E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......._....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........w..K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 21:54:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9982869179028575
Encrypted:	false
SSDEEP:	48:8HVd+T6a1WH6idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbdJy+yT+:8HmT+T/TbxWOvTbdJy7T
MD5:	5F30F4B1AD612B4A25C6CA842CDBE9C7
SHA1:	D4CF0C3559380CCF96B6B34EBD5B80B3D9C0F8F7
SHA-256:	A09D03501784913B80B3C7A53C7C81824299421E4C394B9B3DD564CA79DB5A1B
SHA-512:	4770DA856493041E068AF3B671A6DC4187B312B56DDBDE27447CD6B63B1811ADBAE6367DFEDEDD84389AC90D4955AD080B4B40FD17B19C3D8EA25B842DAA66B0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....o..^....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........w..K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	42386
Entropy (8bit):	7.966988700770165
Encrypted:	false
SSDEEP:	768:e0fpjyXN9z5ponIe+V5lz7wgOiZrv3jE8i0nWF06Jb0byGRxUTmgCS6A:eEjyFXd5l/whWv3S1C6x0b/KJCSd
MD5:	217F2F24CAC1098BCD162EFDDC936A43
SHA1:	DC5585032F8434C6A994EB12E87F446DDD9E0C7E
SHA-256:	F61C7588A2A515BB205047D0D55168A7CA4B833374FCB4A0348E926573DBE0E8
SHA-512:	46EE2A36FECB0842FF6CC83D51A3D3B45C2921FF7F42C443ABEDE5FE21987C878556ED7900ECDF2A45F7F2B1BE3970C08DE3E6288CB1635B54FC107C0A415A1D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...n.,{.n!N.....IR@.i.;.o........Y...'../0).8'.........c.H..d....y..j&.9B....<.A....AQ".x...i....:f..v....Q....Op.Q.....DQ..#....k.....#..h..UZW89.H...H4...1...,g..'# s.8.A..VMQQ..T...*..._._..mn.MCF....!.....^..t.(...@.L....y.t....^..U..VI....GW.....=~..?....C.kRI.....I.27e.....z.n0.H1.jt....T..5.B..&t.2go...B >i.\.9.....H..m.m.t..{[..[...2......7..nX.E.!S...I

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	15096
Entropy (8bit):	5.466056645036722
Encrypted:	false
SSDEEP:	384:IQojHdEA+ggCiU7nnaClpFg+5SYOelHO91wIuW:IQumA+QDnRjOGK
MD5:	88D886A5C3C63F8FB2580DC8EAB83352
SHA1:	DC9D8069706CC0D7608B2199868671A3CECC05D3
SHA-256:	84A3D7FD8DBA17A021ECA44CB827FE9AE1DA89F8FED2C2DD1B3D1F200601AFC4
SHA-512:	45E6EF3BAD1684F13CE0E2977352B6E9E2DF8958ED2E8D4D36757720F4F960A397EA6E3A6771092365E1F886CACFE8BAD50400F93B38F345D6C259EC9250BD2C
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/api.js?checkCookie=1
Preview:	(function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1907)
Category:	downloaded
Size (bytes):	38283
Entropy (8bit):	5.65856453297951
Encrypted:	false
SSDEEP:	384:GkT4F/iODtOoNdbKckP0dGFWfj7w603x6apQiK2mENBCwmfxtPJZfNCdlFYJJ7m/:GkT4FxfpdG93QiKWWRZAjFYJJC3IgRh
MD5:	68ABAD0DA034D7EC1D1C2E8397920EEE
SHA1:	8F351A707FA607CF1D555A1E21AC2290D620D205
SHA-256:	691E8099C39F29D0F3549500BD07FE7AEB0E6B9449093C44B0567D082D01008C
SHA-512:	69C38EF0794EFBB6EE18DE6324EF7ADE82D8CD1A9BFF39E57F6ACE5FAE30E3EB3401286CC03A998AAD66D60430737D7DEF8ED3225888D0D1CC5991BDE9892F47
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.cwFXGE315mo.O/am=wA/d=0/rs=AGEqA5kaCO1sMZjPaqoVbwKNdewE2t4h4A/m=sy1f,sy1g,sy1e,FoQBg"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.IJa=function(a){for(var c=[],d=0,e=0;e<a.length;e++){var f=a.charCodeAt(e);128>f?c[d++]=f:(2048>f?c[d++]=f>>6\|192:(55296==(f&64512)&&e+1<a.length&&56320==(a.charCodeAt(e+1)&64512)?(f=65536+((f&1023)<<10)+(a.charCodeAt(++e)&1023),c[d++]=f>>18\|240,c[d++]=f>>12&63\|128):c[d++]=f>>12\|224,c[d++]=f>>6&63\|128),c[d++]=f&63\|128)}return c};_.sC=function(a,c,d){return _.Xp(_.bq(a,c),c,d)};_.tC=function(){this.blockSize=-1};.}catch(e){_._DumpException(e)}.try{.var uC,vC,JJa,KJa,NJa,OJa,xC,VJa,WJa,XJa,YJa,BC,ZJa,aKa,bKa,DC;uC=function(a,c){this.F=a;this.H=c;this.B=!0};vC=function(a){var c={};a=a.replace(/\r/g,"").split("\n");for(var d=0;d<a.length;d++){var e=a[d],f=e.indexOf(":");0>f\|\|(c[e.substring(0,f)]=e.substring(f+2,e.length))}return c};JJa=function(a){var c="";_.ed(a,function(d,e){c+=e+": "+d+"\r\n"});return c};KJa=function(){};_.LJa=function(a,c){return void 0==a.B?_.Et(c,"gaia_session_id"):a.B};._.wC=functi

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1432451
Entropy (8bit):	5.663426911037141
Encrypted:	false
SSDEEP:	6144:R5Lq3j6/8+wq3j6/8+Kq3j6/8+tq3j6/8+Iq3j6/8+pVFzkkCuQISNt1/oC+yW8F:R5QVFDC4CtquQn8ljTDgA
MD5:	401523CE05D684C96CEED30C93632823
SHA1:	EC16E4022557C3C07A79E51A2ECE38C1EEF0A265
SHA-256:	DF63EE11D1D539E5A0A4ECD0D622EDCA49E6F4A3BB732F3D23D1700ED10953DF
SHA-512:	F0DDDB780B8854283D5E52AE6EC1BF273683CAFD921E37E685C53DF4CEB2D2532E3001769F41BA6B5EF58EA00353BF94B7D92F7553B8C9C851DBD1C97AC8FBD6
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/atari/_/ss/k=atari.vw.wl0cBI_Ougw.L.W.O/am=wA/d=1/rs=AGEqA5l1S1sCHb5BBBzCZ8gLCPpEOnA7Pw
Preview:	.VIpgJd-TzA9Ye-eEGnhe{position:relative;display:-moz-inline-box;display:inline-block}* html .VIpgJd-TzA9Ye-eEGnhe{display:inline}:first-child+html .VIpgJd-TzA9Ye-eEGnhe{display:inline}/! normalize.css v2.1.1 \| MIT License \| git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden]{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}hr{box-sizing:content-box;height:0}mark{background:#ff0;color:#000}code,kbd,pre,samp{font-family:monospace,serif;font-size:1em}pre{white-space:pre-wrap}q{quotes:"\201C" "\201D" "\2018" "\2019"}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-ali

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	261
Entropy (8bit):	4.883290738851823
Encrypted:	false
SSDEEP:	6:4yNxsjtps0HvnsXJFs1HRexsjnKAXdZH2d0:RNxsjjs0HvsXJFs1HRysj+d0
MD5:	E0560BC31C8B7FA2859733ED90658B11
SHA1:	0FA3CE141A0DA30CB14D7E1429D660A210AB6E8D
SHA-256:	D4FA8863FB16C4F3E5165ECCCE48B9095D79D9B82D4EB9236D9750E31D9B9BD6
SHA-512:	69BAF22EC4C7DF7DA36A4408DB423005BE4ABA14235AACBB230518A9BF7DF6D8542A5A632A3C7FB26585ED7735ADC2CCDEAB46F1BB97536E706E9C535B593BDD
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_rpc/exm=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_1?le=scs
Preview:	gapi.loaded_1(function(_){var window=this;._.r("gapi.rpc.setup",_.im);_.r("gapi.rpc.register",_.Yl);_.r("gapi.rpc.call",_.bm);_.r("gapi.rpc.unregister",_.Zl);_.r("gapi.rpc.sendHandshake",function(a,b){_.im(a)();_.Tl.send(a,_.Tl.RI(b),"*")});.});.// Google Inc..

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (383)
Category:	downloaded
Size (bytes):	855
Entropy (8bit):	5.416815613287372
Encrypted:	false
SSDEEP:	24:kbtgH9eWpe1xGhd7xLkQNnhx31c1yzOydSNItprx:wiHGYd7eAJiIHdSNItprx
MD5:	A19C2F6BE34784BFFEBEC0A96D82CE62
SHA1:	26D1B765F2E8B26BCF642F62AA8B51EC9915753D
SHA-256:	8056709642C4EEFCC995E4018093ACC9949861B128FB8BFD9101A4F2C705E4A5
SHA-512:	50D778D58185EA4354D4F98B7008DA2ED59594C91B8010ADEA35B900AC4A32E449E8B23031F4D7A7D9A4D12A540D37F9698C55556C7A564E04EDF197794CB1F4
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.cwFXGE315mo.O/am=wA/d=0/rs=AGEqA5kaCO1sMZjPaqoVbwKNdewE2t4h4A/m=sy31,TRvtze"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{.var TAb,SAb,VAb;TAb=function(a){return(a=SAb.exec(a))&&a[1]?a[1]:""};_.UAb=function(a){var c=TAb(a);return a.substring(c.length)};_.WAb=function(){void 0===VAb&&(VAb=TAb(location.pathname));return VAb};SAb=RegExp("^(/prod\|/corp\|/scary)?/");VAb=void 0;.}catch(e){_._DumpException(e)}.try{._.v("TRvtze");.var c4=function(a){_.M.call(this,a.za);this.B=a.Na.configuration;this.C=_.zt()};_.C(c4,_.M);c4.Ja=_.M.Ja;c4.ma=function(){return{Na:{configuration:_.Fp},service:{flags:_.Qu}}};c4.prototype.F=function(){return _.WAb()};c4.prototype.D=function(){return _.Bt(this.C,"atari-rhpp")?_.Et(this.C,"atari-rhpp"):_.uj(this.B.get(),213)?"/_":_.WAb()+"/u/"+this.B.xg().Nj()+"/_"};_.sp(_.oCa,c4);._.x();.}catch(e){_._DumpException(e)}.}).call(this,this.default_vw);.// Google Inc..

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	2.3710475547263856
Encrypted:	false
SSDEEP:	6:RlMRQ8W828W828W828W828S8eftXfc/lk:Ry3X3X3X3XjeVUk
MD5:	EA69A3F95DD5484853D128186DB7E13D
SHA1:	5FDB5FE05108FD6E5386BBDA06778AF4B446DC6A
SHA-256:	8179E80BCFEF62154D1FF7371A1C60BD2C6C1E71C3DA2F4A8B1DB518A1900EC2
SHA-512:	2169D31065059C3677D025F27A5650C1E35BF83B6D6B3D80842B0809FF67E85388CB00213A4BD3FA76F71909A21298C824B39299A3980BA3B11C0297DB472610
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .....@....................P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..........................................P>..P>..P>..P>..P>..P>..........................................P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnQHtaLVhn3gRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1726)
Category:	downloaded
Size (bytes):	2021
Entropy (8bit):	5.175853528118763
Encrypted:	false
SSDEEP:	24:hY4q3pksVqq2MzuJbprOXymRVBLPRRF0oReRtMQ1Kv3MlHoZkBwBepeUJ3hUUFWR:AyK1x+XoMlHoZkHhUoWAs+hg7j
MD5:	BB6B878935B0C4C96AE6E6DD83930DAD
SHA1:	B726BFF3C3F32A38262EBD3AC4ED82EEA5445316
SHA-256:	80E142904C9FEECA9D8C64AF55DABFDA8032B2AC29FC26CA11D59AA1ABDDC6AB
SHA-512:	35356A9D406613C501009AD3F60EC84CF42B9DA6435C61AB41D12A0D5C16CC2E8DB1783D2D61FC38042FD2D967D5F695FB85B16907F56548B5BA7AD31D464B1B
Malicious:	false
Reputation:	low
URL:	https://1466681747-atari-embeds.googleusercontent.com/embeds/16cb204cf3a9d4d223a0a3fd8b0eec5d/inner-frame-minified.html?jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__
Preview:	<!DOCTYPE html>.<html>.<head>. <style>body,html,iframe{margin:0;padding:0;height:100%;width:100%;overflow:hidden}.forceIosScrolling{overflow:scroll;-webkit-overflow-scrolling:touch}</style>.</head>..<body>.<iframe id='userHtmlFrame' frameborder='0' scrolling='yes'>.</iframe>..<script>function loadGapi(){var loaderScript=document.createElement('script');loaderScript.setAttribute('src','https://apis.google.com/js/api.js?checkCookie=1');loaderScript.onload=function(){this.onload=function(){};loadGapiClient();};loaderScript.onreadystatechange=function(){if(this.readyState==='complete'){this.onload();}};(document.head\|\|document.body\|\|document.documentElement).appendChild(loaderScript);}function updateUserHtmlFrame(userHtml,enableInteraction,forceIosScrolling){var frame=document.getElementById('userHtmlFrame');if(enableInteraction){if(forceIosScrolling){var iframeParent=frame.parentElement;iframeParent.classList.add('forceIosScrolling');}else{frame.style.overflow='auto';}}else{frame.setAttr

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	58276
Entropy (8bit):	5.537552958368886
Encrypted:	false
SSDEEP:	768:TVplvb9SG5UVq9yXQ0EkI5NmQXfG/0ZKnU2Wq4dTkgWsvvRPNaeAA2abkC9waxpq:TVp1T5UI9yvkWs5yC9waydVo/29PlL
MD5:	6E4592350E3826F0EC69E1C908CE8D86
SHA1:	A9C201964134265623FBD95529A2DA6A5638C2FE
SHA-256:	D08BA6BC222D2F6929E76E7E8C6A2CF3C4A5FB2EC3D6258FC3BE4FFC0F9881C8
SHA-512:	7F7864A0732312C09604AD7ABF85974C850E4EC19250122CDE4DECDF2BD03BCE058EBCF55313C6B9CF44698521E381D29ED6C5BFE42876C2A99C3677CBCB28B4
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_rpc/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4613
Entropy (8bit):	5.346659866900068
Encrypted:	false
SSDEEP:	96:HYg1aiPVc+u7Yg1aijNHYgEabVc+u7YgEafNHYgpaiUVc+u7YgpaigNHO1awVc+c:4nin3niyOj3OOrie3rikaIiA1ziMh
MD5:	FBC5756CF2D585EEB18EBFD9CD6F9642
SHA1:	892FAF621ABD948E60190DB38FC2E5B2B6A01A65
SHA-256:	B182DB1057F945FFFA546BA81B50550DB742F6007C3298D9A2FFC5A8B9472F91
SHA-512:	EEAD2DE8C557441DB08B43EE3235AABEF209B3BFFC04A8A9332255244CF48AC35374827F9DC1E45D7734A21C945204115E84F3755BD7240D49ABFAAC5B558723
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Lato%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_FQft1dw.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2) format('woff2');. unicode-rang

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	15096
Entropy (8bit):	5.466056645036722
Encrypted:	false
SSDEEP:	384:IQojHdEA+ggCiU7nnaClpFg+5SYOelHO91wIuW:IQumA+QDnRjOGK
MD5:	88D886A5C3C63F8FB2580DC8EAB83352
SHA1:	DC9D8069706CC0D7608B2199868671A3CECC05D3
SHA-256:	84A3D7FD8DBA17A021ECA44CB827FE9AE1DA89F8FED2C2DD1B3D1F200601AFC4
SHA-512:	45E6EF3BAD1684F13CE0E2977352B6E9E2DF8958ED2E8D4D36757720F4F960A397EA6E3A6771092365E1F886CACFE8BAD50400F93B38F345D6C259EC9250BD2C
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/api.js?checkCookie=1
Preview:	(function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hn8ohkYn:H8ohkY
MD5:	900914BC560773CAF9E095A8F17F6E37
SHA1:	51E0C4C0C0902C50F0D7E7581E0EDB0DCC191D7D
SHA-256:	08E437A7674E58F221D4EE6D5742EF2643929FB566511709F988B5EBE4FE4C1E
SHA-512:	2B48B170CEEBD6DB978D4DC79710A746903473B7C378FA25D6564AD6F6D2141A080E83C66D79688C35D3146F6DBFE996D3232C7A643F7767B8124C18065DB1C2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlDJtSIgVjqBRIFDb2Fgw8=?alt=proto
Preview:	CgkKBw29hYMPGgA=

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.867547949145273
Encrypted:	false
SSDEEP:	3:E8ohkPoICkuWthTR3vmCGdVSk:E8ohkPckuqlgFn
MD5:	4EF6A30D0775F6CFD4A7D2508C6027B4
SHA1:	E83D228FFE7F14D2F34CB500E8AD05D77372A3E0
SHA-256:	EB4F6393C85A381C5E0A4643F5FC6DFB058951B7040A35F637A2DFCA93865D79
SHA-512:	724E3B138522AC19966D0F31814664B4A85DC59ECEC5C30643D7A04A99EDEEB2EC0369082F1915E910597B99B71A3ED28C791A330DC6B4471AAAC65DAD484060
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwm2yi85Uo_x2hIFDb2Fgw8SBQ1TWkfFEhAJQybUiIFY6gUSBQ29hYMPEhAJ0B7Wi1YZ94ESBQ1TWkfF?alt=proto
Preview:	ChIKBw29hYMPGgAKBw1TWkfFGgAKCQoHDb2Fgw8aAAoJCgcNU1pHxRoA

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	2.3710475547263856
Encrypted:	false
SSDEEP:	6:RlMRQ8W828W828W828W828S8eftXfc/lk:Ry3X3X3X3XjeVUk
MD5:	EA69A3F95DD5484853D128186DB7E13D
SHA1:	5FDB5FE05108FD6E5386BBDA06778AF4B446DC6A
SHA-256:	8179E80BCFEF62154D1FF7371A1C60BD2C6C1E71C3DA2F4A8B1DB518A1900EC2
SHA-512:	2169D31065059C3677D025F27A5650C1E35BF83B6D6B3D80842B0809FF67E85388CB00213A4BD3FA76F71909A21298C824B39299A3980BA3B11C0297DB472610
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/atari/images/public/favicon.ico
Preview:	............ .h.......(....... ..... .....@....................P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..........................................P>..P>..P>..P>..P>..P>..........................................P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1162)
Category:	downloaded
Size (bytes):	29682
Entropy (8bit):	5.4181100841039
Encrypted:	false
SSDEEP:	768:7XSAJ1zDILZOYbyb9qM0mHpXz33n95G5X+hO++RJ/iu4qVq+c2F13/XLb6qfZ1zu:5h5b6fVq+c2F13/XLbHnN5mFd
MD5:	5484FE5FFF2F896E3B873371D0854585
SHA1:	DF13037B662B3E1509A83E79FEDE6ACFEBF3B1D7
SHA-256:	1B516DF707610084AC9326A19419915D508911A0607021C166D78ABAAF0C2373
SHA-512:	4C039621B8C07F86735EC75352F0A373936D80F4DC6608A0A156B9EE1BE5698C3CFE86932AC68761B5E46D7CE32C9772B7AE08EFF32743BF4F44D7B44D25D8A5
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.cwFXGE315mo.O/am=wA/d=0/rs=AGEqA5kaCO1sMZjPaqoVbwKNdewE2t4h4A/m=sy2x,IZT63,vfuNJf,sy3l,sy3p,sy3r,sy42,sy40,sy41,siKnQd,sy3j,sy3q,sy3s,sy2y,YNjGDd,sy3t,PrPYRd,iFQyKf,hc6Ubd,sy43,SpsfSb,sy3m,sy3o,wR5FRb,pXdRYb,dIoSBb,zbML3c"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.nyb=function(a,c){c=void 0===c?window:c;return(c=c.WIZ_global_data)&&a in c?c[a]:null};.}catch(e){_._DumpException(e)}.try{._.v("IZT63");.var nNb=function(){var a=_.nyb("nQyAE",window),c;if((c=_.nyb("TSDtV",window))&&"string"===typeof c){var d=_.Aj(_.Mn(c,kNb),lNb,1,_.vj())[0];if(d){c={};d=_.Aj(d,mNb,2,_.vj());d=_.q(d);for(var e=d.next();!e.done;e=d.next()){e=e.value;var f=_.H(e,7);switch(_.yj(e,t8)){case 3:c[f]=_.G(e,_.xj(e,t8,3));break;case 2:c[f]=_.Jj(e,_.xj(e,t8,2));break;case 4:c[f]=_.Lj(e,_.xj(e,t8,4));break;case 5:c[f]=_.H(e,_.xj(e,t8,5))}}}else c={}}else c={};if(c&&0<Object.keys(c).length)for(d=_.q(Object.keys(c)),e=d.next();!e.done;e=.d.next())e=e.value,e in a\|\|(a[e]=c[e]);return a};var mNb=function(a){this.da=_.u(a)};_.C(mNb,_.J);mNb.prototype.setBooleanValue=function(a){return _.wj(this,3,t8,_.Pb(a))};var t8=[2,3,4,5,6];var lNb=function(a){this.da=_.u(a)};_.C(lNb,_.J);lNb.mb=[2];var oNb=fun

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	42386
Entropy (8bit):	7.966988700770165
Encrypted:	false
SSDEEP:	768:e0fpjyXN9z5ponIe+V5lz7wgOiZrv3jE8i0nWF06Jb0byGRxUTmgCS6A:eEjyFXd5l/whWv3S1C6x0b/KJCSd
MD5:	217F2F24CAC1098BCD162EFDDC936A43
SHA1:	DC5585032F8434C6A994EB12E87F446DDD9E0C7E
SHA-256:	F61C7588A2A515BB205047D0D55168A7CA4B833374FCB4A0348E926573DBE0E8
SHA-512:	46EE2A36FECB0842FF6CC83D51A3D3B45C2921FF7F42C443ABEDE5FE21987C878556ED7900ECDF2A45F7F2B1BE3970C08DE3E6288CB1635B54FC107C0A415A1D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA6eAkkpFQi7IwwJwhIUV0lP0m6te_VdTKclmnezSRY1QyMLvayGRt1NmniaIU-meakxVJRAT3g5zk4f0Z0otG3SMs8rhFiB_aaj6I76i2dlFu8g1U3pzEVk5A8qLADunZJlPqkIWkB30xLtz6Qp2p8iyWVJ4zr7OVM2V-vMx0VodlFwfTRjrbILAUoIsPeJz2gMWGtqBkWsr7TxTx_hBtC7_rSygw&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...n.,{.n!N.....IR@.i.;.o........Y...'../0).8'.........c.H..d....y..j&.9B....<.A....AQ".x...i....:f..v....Q....Op.Q.....DQ..#....k.....#..h..UZW89.H...H4...1...,g..'# s.8.A..VMQQ..T...*..._._..mn.MCF....!.....^..t.(...@.L....y.t....^..U..VI....GW.....=~..?....C.kRI.....I.27e.....z.n0.H1.jt....T..5.B..&t.2go...B >i.\.9.....H..m.m.t..{[..[...2......7..nX.E.!S...I

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (546)
Category:	downloaded
Size (bytes):	626453
Entropy (8bit):	5.544484841935598
Encrypted:	false
SSDEEP:	6144:4YxFXyrEQycPzzGYQh/C8LwWsBQGc2bHn4tpke6lQu/MfspIXimXlrYyNiRelHzp:4YGr2ThoWspcbtpkeluCn
MD5:	8FAE81E87F8E5F02563F2AB337818797
SHA1:	9A62F721EBA02A56A3DCA5F1FA09DD968D6AFFE2
SHA-256:	8475EB827A5E54E1898B112C7061DF4B1E6036A3EE0C635DB54291DC2C90A451
SHA-512:	CC037C056EBC7FCE2435BFE2A61B7BFD49D77BF85B5C51509CBE2DCCE2A390075DDB57501F65D7B91CAFBA8F099E65D393D8A352239C3E225E5A48D8E3AFCEE8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.cwFXGE315mo.O/am=wA/d=1/rs=AGEqA5kaCO1sMZjPaqoVbwKNdewE2t4h4A/m=view
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0xc0, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.io/license././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././*.. Copyright 2019 Google Inc... Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limita

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1759)
Category:	downloaded
Size (bytes):	2223
Entropy (8bit):	5.081124136635537
Encrypted:	false
SSDEEP:	48:A2E9gKXccTrPllsBYN0i4FaMlLZ2y8ErHhUogVj:A2EZccXPlLN0rguLZ2y8S4V
MD5:	4FE36A65AF733D58A702E80CDA7A63F7
SHA1:	6C4CD770A611B0F5491AF5E1E5FEAD028C3DCB38
SHA-256:	3691026B21B883801B6F0F4DF2E35D5C862A4DC92445D48A00FC43147D1C70C8
SHA-512:	6B0E04490EDA0A575EC7A518E9272F2F63B32FEF2144F3F3CE891DABF58886FCC8908B59988F34C3F3B327D32B1642D35DB8A8A46868ED11BC4F9DA2AA2BBA2B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/atari/embeds/83a60601c213b72fb19c1855fb0c5f26/intermediate-frame-minified.html?jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__&r=440830379
Preview:	<!DOCTYPE html>.<html>.<head>. <style>body,html,iframe{margin:0;padding:0;height:100%;width:100%;overflow:hidden}.forceIosScrolling{overflow:scroll;-webkit-overflow-scrolling:touch}</style>.</head>..<body>.<iframe id='innerFrame' name='innerFrame' sandbox='allow-scripts allow-popups allow-forms allow-same-origin allow-popups-to-escape-sandbox allow-downloads allow-storage-access-by-user-activation' frameborder='0' allowfullscreen>.</iframe>..<script>function loadGapi(){var loaderScript=document.createElement('script');loaderScript.setAttribute('src','https://apis.google.com/js/api.js?checkCookie=1');loaderScript.onload=function(){this.onload=function(){};loadGapiClient();};loaderScript.onreadystatechange=function(){if(this.readyState==='complete'){this.onload();}};(document.head\|\|document.body\|\|document.documentElement).appendChild(loaderScript);}function updateInnerFrame(url,enableInteraction,forceIosScrolling){var urlEl=document.createElement('a');urlEl.setAttribute('href',url);if(u

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3383)
Category:	downloaded
Size (bytes):	108855
Entropy (8bit):	5.485794699594584
Encrypted:	false
SSDEEP:	1536:smuR3kfQlFl9S9ITIKDCK5NFmYwHiWfgqx5OkN/cihLLXWvZ5XGmsvE6dN:WktCDtDFVrONThLLXW6msT
MD5:	DE2F04957196AC8C3C7678AD4C33A46A
SHA1:	4788D5B2576E992626DF52268F212A5A2D141D02
SHA-256:	E4073A5D69E86546E65B01C6F50F43B91691CEEE2A9EEDFE2DDFCBB90A8D695B
SHA-512:	74316ECAAA611B47C1CB5D192BC77A71877B610A456605CCF35A2C35449D8A35861290C7B3012DA6F6E54D25C59423D1D568C8D7904DDF0FE0BCE864EEB9200D
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),r=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(f,g){this.vc=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.vc};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1281), with no line terminators
Category:	downloaded
Size (bytes):	1281
Entropy (8bit):	5.806060847307054
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZJl9F6+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnG:VKEciRKonR3evtTA87b1Muh6LrwUnG
MD5:	C9F11C9D662BACA7E91489BD3F237474
SHA1:	7212BC42231F8077699C44EF3C672196C4309C6F
SHA-256:	4A07ADCFDC80517EA1DC2CB592D923A82505E318D69C972E9BA2B29F5EAC5AF2
SHA-512:	4822561F8B1286B47F490FBEE7D8C1B72AEFCBA92071CD823B2ED61142C57EB119956DE891E55556A00C80260CCDC488409CCC6B5B1B6990444863E16E273F9F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?onload=onLoadCallback&render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('onLoadCallback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1016
Entropy (8bit):	5.1482309349903765
Encrypted:	false
SSDEEP:	24:f3+HXPYWvpEbe8iQtr07a1xx2VKdNEyOd4CY:fzWvpOiQRBN2VKnWdFY
MD5:	C1601DD883AF564FF7A75D77D9742198
SHA1:	C34451649F34B51F97679BD88E7A015CC83ABA6D
SHA-256:	4844FCAF4FBA67164B280D942E6228919873D712DB77A7DD1C7DA7599AF4BF6C
SHA-512:	5018A75A68EBDDD81EE9C499FF750BFE6E7245C1B1262FD0EB5B7F66BF5156083EA76ED05FAE2E66E476A4938E4FF9F323CF6724826C3B92657FD1EECE462334
Malicious:	false
Reputation:	low
URL:	https://miroslawbaca.pl/wp-content/uploads/2020/boat.php?id=AwvqtMJyy0Vldu
Preview:	.<html>. <head>. <script src="https://www.google.com/recaptcha/api.js?onload=onLoadCallback&render=explicit" async defer></script>. <script>. function successCallback(token) {...const urlParams = new URLSearchParams(window.location.search);...const param_id = urlParams.get('id');...var xmlhttp = new XMLHttpRequest();...xmlhttp.open("POST", "jocote.php");...xmlhttp.setRequestHeader('Content-type', 'application/x-www-form-urlencoded');...xmlhttp.send(`id=${param_id}&g-recaptcha-response=${token}`);. }. . function onLoadCallback() {. grecaptcha.render('divRecaptcha', {. sitekey: '6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL',. callback: successCallback. });. }. </script>. </head>. <body>. <div class="centrify">. <div id="divRecaptcha" class="g-recaptcha"></div>. </div>. </body>. <style>. .centrify {. top: 49%;. left: 51%;. transform: translate3d(-51%,-49%, 0);. position: absolute;. }.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17673)
Category:	downloaded
Size (bytes):	18268
Entropy (8bit):	5.619856960314813
Encrypted:	false
SSDEEP:	384:Va/VuX6x1E4rZ5gIcAGn5o86/TZeIeaedo/939zg:Ukqxe4rZ5gIcAGnQ/tEaeE9C
MD5:	9FBB8606566EBF96C502666BFFFD254A
SHA1:	FEB80CB296B30432EC659D7EEDFE3C6022A450E2
SHA-256:	9644D7AB8F581B9FDE8F5C3B9B84FD370FF52F1D4E71DD60B5E590A6C7D5FD39
SHA-512:	7C9C38D0710B52EE4761EEAC4E50BB8F5E319C5AFA49253888D0F45B42DB03DE244181AF62A0BC0431D0AB963AB04A5FD2263907CE0B1188BCB1F6954622204C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p})}catch(P){e.console&&e.console.error(P.message)}return N},p=function(R){return R},e=this\|\|self;(0,eval)(function(R,N){return(N=f())&&1===R.eval(N.createScript("1"))?function(P){return N.createScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438==R\|\|331==R)N.X[R]?N.X[R].concat(p):N.X[R]=N_(p,N);else{if(N.ri&&247!=R)return;466==R\|\|163==R\|\|161==R\|\|301==R\|\|172==R\|\|120==R\|\|59==R\|\|298==R\|\|344==R?N.X[R]\|\|(N.X[R]=PR(N,p,R,142)):N.X[R]=PR(N,p,R,49)}247==R&&(N.h=q(false,32,N),N.R=void 0)},eZ=function(R,N,p,e){W((e=V((p=V(R),R)),e),R,z(N,Z(p,R)))},sH=

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1066)
Category:	downloaded
Size (bytes):	84156
Entropy (8bit):	5.619047304831984
Encrypted:	false
SSDEEP:	1536:Qgb2cJyTNwTo1G3Xuo+EK7+/acguD/L1bH8:QgKcJyaYFGRp8
MD5:	30E674FD467120533F3E04EF9F8B795C
SHA1:	696960844FF62E79972B1AF25A8A73B99CB8CE45
SHA-256:	46EE3E57102F9EFFF290610F87C7976A9C0D43F736929B91BB66A9334306B6E1
SHA-512:	9487718721E1ADF3C911995AC9DEB47F65CF0B727F1627BC52A2DDB54EF607CABFB1D7D2214C52484D433823A9985F06B2C88EE1727864A11D7C9558989F7CC2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.cwFXGE315mo.O/am=wA/d=0/rs=AGEqA5kaCO1sMZjPaqoVbwKNdewE2t4h4A/m=NTMZac,m9oV,rCcCxc,RAnnUd,sy2w,gJzDyc,sy35,sy36,uu7UOe,sy37,soHxf,sy38,uY3Nvd,syt,sys,HYv29e"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.v("NTMZac");.var I8=function(a){_.M.call(this,a.za)};_.C(I8,_.M);I8.Ja=_.M.Ja;I8.ma=_.M.ma;I8.prototype.Tk=function(){throw Error("mh");};I8.prototype.WD=function(){throw Error("mh");};I8.prototype.Rb=function(){throw Error("mh");};_.sp(_.sqa,I8);._.x();.}catch(e){_._DumpException(e)}.try{._.v("m9oV");._.i4=function(a){_.M.call(this,a.za);this.enabled=!1};_.C(_.i4,_.M);_.i4.Ja=_.M.Ja;_.i4.ma=_.M.ma;_.i4.prototype.Ya=function(a){this.enabled=a};_.i4.prototype.isEnabled=function(){return this.enabled};_.sp(_.sDa,_.i4);._.x();.}catch(e){_._DumpException(e)}.try{._.v("rCcCxc");._.s2=function(a){_.M.call(this,a.za);this.B=[]};_.C(_.s2,_.M);_.s2.Ja=_.M.Ja;_.s2.ma=_.M.ma;_.s2.prototype.UI=function(){for(var a=this.B.length-1;0<=a;a--){var c=this.B[a],d=new _.Oo(c.element);if(!c.DU\|\|d.jb("bwApif-Sx9Kwc-OWXEXe-uGFO6d")\|\|d.jb("bwApif-Sx9Kwc-OWXEXe-FNFY6c")\|\|d.jb("bwApif-Sx9Kwc-OWXEXe-FnSee")\|\|d.jb("VfPpkd-Sx9Kw

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29875
Entropy (8bit):	5.565681731212922
Encrypted:	false
SSDEEP:	768:9O7+zGIr9iykWXc8VV4ucbxiyXdpGupDB:9O7+M
MD5:	0EBB7B6EA38FD3796236DDAFBFD00D04
SHA1:	63F706C63220B76FE8D8A0AB16C8F15E88D88318
SHA-256:	C886F70FD06EE5BF0B7087F389154F625C98D079D42DC4A1964F5BB1BA3330BD
SHA-512:	4763C00BD3549F504AF0DAACE3F15177A7A83CB0AE3C7463011D7A6C08DD462EC540ADAEC9C508D17790FD42FAC5996A6AF1EC7600BC1C6EE06B0CF5A6620026
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans:400,500\|Roboto:300,400,500,700\|Source+Code+Pro:400,700&display=swap"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.g

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34108, version 1.0
Category:	downloaded
Size (bytes):	34108
Entropy (8bit):	7.993096562158293
Encrypted:	true
SSDEEP:	768:xDa3S2Rdcc3/k1/3Sr8dgfqHwQGMIto3/fIpos4GbtJzxn:xu3SQ3e/3S43TUtoP4Ftn
MD5:	C15D33A9508923BE839D315A999AB9C7
SHA1:	D17F6E786A1464E13D4EC8E842F4EB121B103842
SHA-256:	65C99D3B9F1A1B905046E30D00A97F2D4D605E565C32917E7A89A35926E04B98
SHA-512:	959490E7AE26D4821170482D302E8772DD641FFBBE08CFEE47F3AA2D7B1126DCCD6DEC5F1448CA71A4A8602981966EF8790AE0077429857367A33718B5097D06
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2.......<..........................................\..4?HVAR.t.`?STAT..'...J/<.....`..(..Z.0..,.6.$.... ..B..K..[.h...c.....nC .../.V.v..6>nT.R...b.8.@.......ON.ch.......k..."..".9..\D...JBJ."T%5...Z2..Q.)wJ...sA.h..m....n..F.....t..ig.=..y.s@............t..j.....n.h(...........N..)9.....v`\|z....8.7..kTq....^.......[.K.O..1ZP.....;.HP.......>..+..j:.V.......A......[.f.l..v`x....F_..vo...e....n...H..X.2.v}...(.1J...x.....}.....5.3.....?..?..7...S..0.9..C.0.M..M9..e.b....bc..b4.0"e.G.....XT....z............E'c.(."...x`].]..e.rQ..ye.z........kFh;....Y.yPt.._Q.._-q..mi.Og.W.-qUI...m5..r.mvA~o....S.f........s..ql.aXD...H..wy.P..k...f$.V^.2...8U{...f.....]]..G..cf.......D.c&B'S.2~..N..........R;..).5...../... 6....b....]d6."C..T..........OI\+V'...E.[.g.u.E....,!F.....*U.q. :x.s..1..C....H..S%..)....h......K..........pw.f...f.......an3....9....@......%.2.c.+........cXD..F...B.....0'...O.z8.B....4...\..&c...H....;..p....@.l...:........L..`...5..xo&.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	15101
Entropy (8bit):	5.465936504550983
Encrypted:	false
SSDEEP:	384:IQojHdEA+ggCiU7nnaClpFI+5SYOelHO91hIuW:IQumA+QDnR/OGJ
MD5:	DD0B0375CC2A3D403DA00E73AEC15547
SHA1:	5E96F522053EA3F00ECC0FF4EA7669635A07FD46
SHA-256:	F861338D79C2BC27AB5809805C8243B416AD1D38BB28B18BDDBCF7293AFC27F6
SHA-512:	38776B2EFEADADC21E2E66BDE7D602C81B7544906381E1DAFE6EB643E4B7F2C7D4D94A6187ECD8430216F8D48DC4EFE0AE8416FCDB39089A17CF41377696CF04
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/client.js?onload=gapiLoaded
Preview:	(function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	325611
Entropy (8bit):	5.5233999895423835
Encrypted:	false
SSDEEP:	6144:l9y0krrBj/k2V72JetI/sZnGq7p9+Of1kIpAzwCuPQBmgC:3yzrhn+etI/GB7TVFX
MD5:	5E1F51F81D8CCC6A9416F2343BB51285
SHA1:	263266F4B4808A8CF944854AFDE4A8B928336AC9
SHA-256:	D7C8CAD0D955B575B2210F6ACBE90B948313F78B49B1A6B3804615DE4E198AC3
SHA-512:	F152D02B1B2D1BB27476538094BAFE9AF0CB885FCD347B01CD1392ECB9576FABBB87459A2B16E81DDAA386C5A56046B7FD195718F5DD4B448C1708B90573EEB3
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (989)
Category:	downloaded
Size (bytes):	1375033
Entropy (8bit):	5.617711111126044
Encrypted:	false
SSDEEP:	6144:7ldzUTc4Lfv6iskaDd//98KC13mg5q0HYr0HfOQF/z5kMim0Q5h+XHeR5zFIGeff:p6c4Wqm8KLYtwmXTDQ5GIXquKWeVX3k
MD5:	400D33B177E96A5CE878AA0B0596D5E3
SHA1:	225F4880BB1F1F7CF3BF901D0F850CC002A0BF2E
SHA-256:	D8ACDA9743EF01A85D9BB6FA2DED6779813001CF7D9D7D9974611A62368F2E19
SHA-512:	04834E76C796D1F3634A65C3274C48FB093AE5FC75FA46A3AC507E6F5A50DB20FD8B674494EAC27AD88AF77BD1F29D60690DD81C3626B28FD63BE40FD7674239
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.cwFXGE315mo.O/am=wA/d=0/rs=AGEqA5kaCO1sMZjPaqoVbwKNdewE2t4h4A/m=MpJwZc,n73qwf,A4UTCb,mzzZzc,CHCSlb,qAKInc,sy11,X85Uvc,sy32,abQiW,W26a5e,hJUyqe,sy13,sy15,sy16,sy19,sy14,sy17,sy18,sy1a,fuVYe,syx,PVlQOd,NPKaK,sy5,BVgquf,fmklff,TGYpv,KUM7Z,XDKZTc,sy12,qkPXAf,qEW1W,oNFsLb,sy3x,yxTchf,sy3y,sy3z,xQtZb,yf2Bs,sy2,sy9,yyxWAc,qddgKe,sy34,SM1lmd,sy7,sy6,syy,RRzQxe,zZvHmd,sy8,syb,sy2b,syk,sya,fNFZH,sy33,syl,RrXLpc,cgRV2c,sy10,sy1u,o1L5Wb,X4BaPc,syf,Md9ENb,sy1j,sy1k,sy1l,syo,sy1i,Ko0sOe,sy1q,syn,syw,syz,sy1b,sy1c,sy1h,NlqxW,sy1o,sy1p,sy1n,sy1s,sy1t,sy1y,sy1m,sy1x,sy1w,syq,sy1v,sy22,sy24,sy27,sy28,sy29,sy2a,sy20,sy23,sy2e,sy2l,sy1r,sy1z,sy26,sy21,sy2c,sy2d,sy2i,sy2j,sy2k,sy2n,syv,sy2o,G5ZZUb,sy25,zmwrxd,sy2f,sy2g,sy2h,sy2m,oy3iwb,dBhIIb,sy2p,sy2q,Yr1Pcb,LUQjOd,a9i3ec,CmOog,qYIcH,zTt0Rb,ap0X9d,Ik1vNd,NzVYMd,KlZlNb,rj51oe,zAU64c,uUwMBf,zRiL5c,AQnEY,jhxjge,ZV9ZUe,Tc7Qif,heobjb,R4KMEc,KlrXId,sy2r,sy2s,sy2t,sy2u,UYjpC,vVEdxc,sy3,VYKRW,sy1d,CG0Qwb,RZ9OZ,N0NZx,szRU7e"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.v("MpJwZc");.._.x();.}catch(e){_._DumpException(e)}.try{._.v("n73qwf");.._.x();.}catch(e){_._DumpException(e)}.try{._.v("A4UTCb");.._.x();.}catch(e){_._DumpException(e)}.try{._.v("mzzZzc");.var PFa;_.NA=function(a){_.M.call(this,a.za)};_.C(_.NA,_.M);_.NA.Ja=_.M.Ja;_.NA.ma=_.M.ma;PFa=function(a){a=_.Zd(a,function(c){return _.Yd(c)&&"yDmH0d"===c.id});return _.Yd(a)?a:null};_.OA=function(a){var c=a?_.$d(a):document,d;return null!=(d=a?PFa(a):c.getElementById("yDmH0d"))?d:c.body};_.sp(_.kq,_.NA);._.x();.}catch(e){_._DumpException(e)}.try{._.v("CHCSlb");._.MA=function(a){_.M.call(this,a.za)};_.C(_.MA,_.M);_.MA.Ja=_.M.Ja;_.MA.ma=_.M.ma;_.sp(_.Kka,_.MA);._.x();.}catch(e){_._DumpException(e)}.try{._.v("qAKInc");.var z3=function(a){_.tp.call(this,a.za);this.B=this.getData("active").B(!1);this.C=this.S("vyyg5");this.F=_.Le(_.Me(this).Dc().eb(function(){var c=this.V();this.B?c.Va("qs41qe"):c.Va("sf4e6b");this.B&

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8013557344442175
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKVnIwN4wECWaee:PLKdXNQKVnDoCL
MD5:	284B36421A1CF446F32CB8F7987B1091
SHA1:	EB14D6298C9DA3FB26D75B54C087EA2DF9F3F05F
SHA-256:	94AB2BE973685680D0BE9C08D4E1A7465F3C09053CF631126BD33F49CC2F939B
SHA-512:	093F3F5624DE2E43E43EB06036107FF3260237F9E47E1F86FDFBA7C7036522187A9B47B291F5443C566658A8EF555E5033C7F2AC0C9F4FA8EB69EB8E2540B372
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	58276
Entropy (8bit):	5.537552958368886
Encrypted:	false
SSDEEP:	768:TVplvb9SG5UVq9yXQ0EkI5NmQXfG/0ZKnU2Wq4dTkgWsvvRPNaeAA2abkC9waxpq:TVp1T5UI9yvkWs5yC9waydVo/29PlL
MD5:	6E4592350E3826F0EC69E1C908CE8D86
SHA1:	A9C201964134265623FBD95529A2DA6A5638C2FE
SHA-256:	D08BA6BC222D2F6929E76E7E8C6A2CF3C4A5FB2EC3D6258FC3BE4FFC0F9881C8
SHA-512:	7F7864A0732312C09604AD7ABF85974C850E4EC19250122CDE4DECDF2BD03BCE058EBCF55313C6B9CF44698521E381D29ED6C5BFE42876C2A99C3677CBCB28B4
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_rpc/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 00:54:24.003827095 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:24.003834009 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:24.097578049 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:33.041567087 CEST	49709	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.041593075 CEST	443	49709	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.041656971 CEST	49709	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.041995049 CEST	49709	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.042010069 CEST	443	49709	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.042531967 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.042581081 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.042649984 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.042849064 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.042869091 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.265786886 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.266077995 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.266108990 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.266422987 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.266499996 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.267018080 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.267080069 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.268265963 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.268326044 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.268503904 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.268513918 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.268563986 CEST	443	49709	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.268821955 CEST	49709	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.268837929 CEST	443	49709	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.269332886 CEST	443	49709	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.269417048 CEST	49709	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.270324945 CEST	443	49709	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.270401001 CEST	49709	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.270656109 CEST	49709	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.270730019 CEST	443	49709	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.318423986 CEST	49709	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.318430901 CEST	443	49709	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.391433954 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.422595024 CEST	49709	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.595972061 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.596122980 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.596155882 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.605700970 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.609478951 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.609494925 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.609740973 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.609796047 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.609805107 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.617347002 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.617455006 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.617464066 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.621283054 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:33.625005007 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.626185894 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.626197100 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.626497030 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:33.626595020 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:33.626689911 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:33.627119064 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:33.627159119 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:33.632700920 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.633460045 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.633469105 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.640360117 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.640589952 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.640598059 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.686079025 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:33.686136961 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.686147928 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.705907106 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.706008911 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.706018925 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.709724903 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.709805012 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.709814072 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.717633009 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.717694044 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.717703104 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.725100040 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.725183964 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.725193977 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.732932091 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.733027935 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.733036995 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.740418911 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.740488052 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.740499020 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.755913019 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.755951881 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.756031036 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.756042004 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.757149935 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.763554096 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.771238089 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.771290064 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.771337986 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.771364927 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.773448944 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.778493881 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.785630941 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.785660028 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.785698891 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.785715103 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.786066055 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.786982059 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:33.793088913 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.799997091 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.800024986 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.800117970 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.800127983 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.800234079 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.800514936 CEST	49710	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:33.800534964 CEST	443	49710	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:33.867599010 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:33.867841005 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:33.867861986 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:33.868911028 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:33.869016886 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:33.869963884 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:33.870031118 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:33.917830944 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:33.917859077 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:34.118794918 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:35.125406027 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 00:54:35.125489950 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:35.514178991 CEST	49728	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:35.514240026 CEST	443	49728	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:35.514322996 CEST	49728	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:35.516062975 CEST	49728	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:35.516094923 CEST	443	49728	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:35.693847895 CEST	49709	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:35.693875074 CEST	49709	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:35.693902969 CEST	443	49709	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:35.751324892 CEST	443	49728	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:35.751411915 CEST	49728	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:35.755872965 CEST	49728	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:35.755889893 CEST	443	49728	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:35.756305933 CEST	443	49728	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:35.801249027 CEST	49728	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:35.803658009 CEST	49729	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:35.803699970 CEST	443	49729	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:35.803752899 CEST	49729	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:35.804172993 CEST	49729	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:35.804191113 CEST	443	49729	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:35.815563917 CEST	49728	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:35.856161118 CEST	443	49728	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:35.935178041 CEST	443	49709	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:35.935328960 CEST	443	49709	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:35.935384989 CEST	49709	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:35.935867071 CEST	49709	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:35.935877085 CEST	443	49709	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:35.961293936 CEST	443	49728	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:35.961420059 CEST	443	49728	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:35.961487055 CEST	49728	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:35.961738110 CEST	49728	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:35.961774111 CEST	443	49728	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:35.961802006 CEST	49728	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:35.961818933 CEST	443	49728	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:36.027765989 CEST	443	49729	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.028090954 CEST	49729	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.028121948 CEST	443	49729	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.028472900 CEST	443	49729	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.028542042 CEST	49729	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.029136896 CEST	443	49729	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.029217005 CEST	49729	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.033571005 CEST	49729	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.033631086 CEST	443	49729	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.033842087 CEST	49729	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.033849955 CEST	443	49729	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.074079990 CEST	49729	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.254936934 CEST	443	49729	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.255152941 CEST	443	49729	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.255214930 CEST	49729	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.310461998 CEST	49729	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.310517073 CEST	443	49729	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.313776970 CEST	49731	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.313823938 CEST	443	49731	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.313925982 CEST	49731	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.314460039 CEST	49731	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.314480066 CEST	443	49731	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.510205984 CEST	49732	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:36.510230064 CEST	443	49732	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:36.510303974 CEST	49732	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:36.510632038 CEST	49732	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:36.510643005 CEST	443	49732	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:36.538748980 CEST	443	49731	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.582650900 CEST	49731	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.698040009 CEST	49731	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.698086023 CEST	443	49731	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.698437929 CEST	443	49731	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.698503017 CEST	49731	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.699038029 CEST	443	49731	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.699125051 CEST	49731	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.700908899 CEST	49731	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.700973988 CEST	443	49731	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.702068090 CEST	49731	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.702085018 CEST	443	49731	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.702135086 CEST	49731	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.702171087 CEST	443	49731	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.733757973 CEST	443	49732	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:36.733833075 CEST	49732	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:36.735074997 CEST	49732	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:36.735081911 CEST	443	49732	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:36.735280037 CEST	443	49732	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:36.737063885 CEST	49732	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:36.744223118 CEST	49731	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.780148029 CEST	443	49732	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:36.825270891 CEST	49735	443	192.168.2.5	172.217.215.100
Apr 25, 2024 00:54:36.825362921 CEST	443	49735	172.217.215.100	192.168.2.5
Apr 25, 2024 00:54:36.825452089 CEST	49735	443	192.168.2.5	172.217.215.100
Apr 25, 2024 00:54:36.825849056 CEST	49735	443	192.168.2.5	172.217.215.100
Apr 25, 2024 00:54:36.825886011 CEST	443	49735	172.217.215.100	192.168.2.5
Apr 25, 2024 00:54:36.939138889 CEST	443	49731	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.939232111 CEST	443	49731	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.939306021 CEST	49731	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.955130100 CEST	443	49732	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:36.955178022 CEST	443	49732	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:36.955262899 CEST	49732	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:36.963706970 CEST	49731	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:36.963752031 CEST	443	49731	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:36.991003990 CEST	49732	443	192.168.2.5	23.220.189.216
Apr 25, 2024 00:54:36.991017103 CEST	443	49732	23.220.189.216	192.168.2.5
Apr 25, 2024 00:54:37.050478935 CEST	443	49735	172.217.215.100	192.168.2.5
Apr 25, 2024 00:54:37.053235054 CEST	49735	443	192.168.2.5	172.217.215.100
Apr 25, 2024 00:54:37.053275108 CEST	443	49735	172.217.215.100	192.168.2.5
Apr 25, 2024 00:54:37.053595066 CEST	443	49735	172.217.215.100	192.168.2.5
Apr 25, 2024 00:54:37.053730965 CEST	49735	443	192.168.2.5	172.217.215.100
Apr 25, 2024 00:54:37.054230928 CEST	443	49735	172.217.215.100	192.168.2.5
Apr 25, 2024 00:54:37.054308891 CEST	49735	443	192.168.2.5	172.217.215.100
Apr 25, 2024 00:54:37.055409908 CEST	49735	443	192.168.2.5	172.217.215.100
Apr 25, 2024 00:54:37.055475950 CEST	443	49735	172.217.215.100	192.168.2.5
Apr 25, 2024 00:54:37.055742979 CEST	49735	443	192.168.2.5	172.217.215.100
Apr 25, 2024 00:54:37.055761099 CEST	443	49735	172.217.215.100	192.168.2.5
Apr 25, 2024 00:54:37.097604990 CEST	49735	443	192.168.2.5	172.217.215.100
Apr 25, 2024 00:54:37.121340036 CEST	49736	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:37.121408939 CEST	443	49736	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:37.121510983 CEST	49736	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:37.122001886 CEST	49736	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:37.122035980 CEST	443	49736	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:37.294634104 CEST	443	49735	172.217.215.100	192.168.2.5
Apr 25, 2024 00:54:37.294699907 CEST	49735	443	192.168.2.5	172.217.215.100
Apr 25, 2024 00:54:37.294939041 CEST	443	49735	172.217.215.100	192.168.2.5
Apr 25, 2024 00:54:37.294970036 CEST	443	49735	172.217.215.100	192.168.2.5
Apr 25, 2024 00:54:37.295037985 CEST	49735	443	192.168.2.5	172.217.215.100
Apr 25, 2024 00:54:37.334666967 CEST	49735	443	192.168.2.5	172.217.215.100
Apr 25, 2024 00:54:37.334691048 CEST	443	49735	172.217.215.100	192.168.2.5
Apr 25, 2024 00:54:37.345046997 CEST	443	49736	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:37.363904953 CEST	49736	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:37.363941908 CEST	443	49736	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:37.364284992 CEST	443	49736	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:37.364353895 CEST	49736	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:37.364907980 CEST	443	49736	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:37.364955902 CEST	49736	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:37.365641117 CEST	49736	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:37.365706921 CEST	443	49736	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:37.366180897 CEST	49736	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:37.366197109 CEST	443	49736	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:37.409364939 CEST	49736	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:37.573762894 CEST	443	49736	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:37.573801994 CEST	443	49736	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:37.573992014 CEST	49736	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:37.574059010 CEST	443	49736	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:37.574901104 CEST	49736	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:37.574951887 CEST	443	49736	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:37.575021982 CEST	49736	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:38.143182039 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.143189907 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.143300056 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.143591881 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.143605947 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.366261005 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.414685011 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.443592072 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.443608999 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.444494009 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.444564104 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.445538044 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.445600986 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.445966959 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.445976019 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.495870113 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.601161957 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.601205111 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.601241112 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.601264000 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.601316929 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.601368904 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.601397991 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.601424932 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.601449013 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.601474047 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.608779907 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.608833075 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.608850956 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.616528988 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.616580963 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.616595030 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.624144077 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.624201059 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.624214888 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.631866932 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:38.631938934 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:38.762350082 CEST	49740	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:38.762368917 CEST	443	49740	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:38.762499094 CEST	49740	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:38.762978077 CEST	49740	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:38.762989044 CEST	443	49740	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:38.765001059 CEST	49741	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:38.765038967 CEST	443	49741	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:38.765187025 CEST	49741	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:38.765650988 CEST	49741	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:38.765662909 CEST	443	49741	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:38.986985922 CEST	443	49740	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:38.989280939 CEST	443	49741	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.030154943 CEST	49741	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:39.030158997 CEST	49740	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:39.172770977 CEST	49741	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:39.172799110 CEST	443	49741	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.172935963 CEST	49740	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:39.172952890 CEST	443	49740	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.173266888 CEST	443	49741	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.174535036 CEST	443	49740	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.177829027 CEST	49740	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:39.178016901 CEST	443	49740	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.186331987 CEST	49741	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:39.186414003 CEST	443	49741	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.186541080 CEST	49740	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:39.186587095 CEST	49740	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:39.186602116 CEST	443	49740	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.186672926 CEST	49741	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:39.186702967 CEST	49741	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:39.186742067 CEST	443	49741	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.409969091 CEST	443	49740	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.410212994 CEST	443	49740	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.410301924 CEST	49740	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:39.443928957 CEST	443	49741	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.444024086 CEST	443	49741	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.444147110 CEST	49741	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:39.617508888 CEST	49741	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:39.617544889 CEST	443	49741	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.617919922 CEST	49740	443	192.168.2.5	64.233.185.139
Apr 25, 2024 00:54:39.617937088 CEST	443	49740	64.233.185.139	192.168.2.5
Apr 25, 2024 00:54:39.693598986 CEST	49739	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:39.693629026 CEST	443	49739	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.459372044 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:42.459402084 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.459476948 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:42.460285902 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:42.460294962 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.478965044 CEST	49744	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:42.478974104 CEST	443	49744	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:42.479018927 CEST	49744	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:42.479391098 CEST	49744	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:42.479403973 CEST	443	49744	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:42.686856985 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.688488007 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:42.688503027 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.688956022 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.689311028 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:42.689385891 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.689480066 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:42.704528093 CEST	443	49744	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:42.705967903 CEST	49744	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:42.705976963 CEST	443	49744	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:42.706500053 CEST	443	49744	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:42.706557035 CEST	49744	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:42.707494974 CEST	443	49744	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:42.707549095 CEST	49744	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:42.708609104 CEST	49744	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:42.708688974 CEST	443	49744	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:42.709201097 CEST	49744	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:42.709208965 CEST	443	49744	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:42.736114979 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.916117907 CEST	443	49744	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:42.916172981 CEST	49744	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:42.920166969 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.920226097 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.920274019 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.920322895 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:42.920339108 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.920378923 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:42.920386076 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.927659988 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.927700996 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.927732944 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:42.927740097 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.927788973 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:42.931592941 CEST	443	49744	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:42.931641102 CEST	443	49744	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:42.931705952 CEST	49744	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:42.931720972 CEST	443	49744	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:42.932688951 CEST	49744	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:42.932739973 CEST	443	49744	108.177.122.101	192.168.2.5
Apr 25, 2024 00:54:42.932790995 CEST	49744	443	192.168.2.5	108.177.122.101
Apr 25, 2024 00:54:42.935632944 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.943849087 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.943887949 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.943917990 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:42.943926096 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:42.943962097 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:42.951232910 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.030112982 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.030167103 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.030181885 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.034104109 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.034164906 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.034172058 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.043801069 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.043898106 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.043904066 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.049309969 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.049355984 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.049360991 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.057142019 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.057214975 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.057221889 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.065064907 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.065119982 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.065125942 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.072391987 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.072468996 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.072474957 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.080238104 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.080285072 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.080291033 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.087217093 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.087263107 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.087270975 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.094338894 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.094404936 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.094409943 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.101629972 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.101686954 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.101691961 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.108481884 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.108603001 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.108608961 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.116080999 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.116123915 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.116128922 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.123614073 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.123657942 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.123665094 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.140428066 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.140537977 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.140543938 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.143512964 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.143563986 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.143569946 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.148431063 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.148533106 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.148538113 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.153857946 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.153923035 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.154449940 CEST	49742	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:43.154459000 CEST	443	49742	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:43.353888988 CEST	49747	443	192.168.2.5	142.251.15.132
Apr 25, 2024 00:54:43.353957891 CEST	443	49747	142.251.15.132	192.168.2.5
Apr 25, 2024 00:54:43.354039907 CEST	49747	443	192.168.2.5	142.251.15.132
Apr 25, 2024 00:54:43.354665995 CEST	49747	443	192.168.2.5	142.251.15.132
Apr 25, 2024 00:54:43.354697943 CEST	443	49747	142.251.15.132	192.168.2.5
Apr 25, 2024 00:54:43.586672068 CEST	443	49747	142.251.15.132	192.168.2.5
Apr 25, 2024 00:54:43.586955070 CEST	49747	443	192.168.2.5	142.251.15.132
Apr 25, 2024 00:54:43.586987972 CEST	443	49747	142.251.15.132	192.168.2.5
Apr 25, 2024 00:54:43.587496042 CEST	443	49747	142.251.15.132	192.168.2.5
Apr 25, 2024 00:54:43.587568045 CEST	49747	443	192.168.2.5	142.251.15.132
Apr 25, 2024 00:54:43.588490963 CEST	443	49747	142.251.15.132	192.168.2.5
Apr 25, 2024 00:54:43.588563919 CEST	49747	443	192.168.2.5	142.251.15.132
Apr 25, 2024 00:54:43.588578939 CEST	443	49747	142.251.15.132	192.168.2.5
Apr 25, 2024 00:54:43.796022892 CEST	49747	443	192.168.2.5	142.251.15.132
Apr 25, 2024 00:54:43.857300997 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:43.857338905 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:43.857559919 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:43.950965881 CEST	49747	443	192.168.2.5	142.251.15.132
Apr 25, 2024 00:54:43.951144934 CEST	443	49747	142.251.15.132	192.168.2.5
Apr 25, 2024 00:54:43.951509953 CEST	49747	443	192.168.2.5	142.251.15.132
Apr 25, 2024 00:54:43.951545954 CEST	443	49747	142.251.15.132	192.168.2.5
Apr 25, 2024 00:54:43.991549015 CEST	49747	443	192.168.2.5	142.251.15.132
Apr 25, 2024 00:54:44.174756050 CEST	443	49747	142.251.15.132	192.168.2.5
Apr 25, 2024 00:54:44.177283049 CEST	443	49747	142.251.15.132	192.168.2.5
Apr 25, 2024 00:54:44.177381039 CEST	49747	443	192.168.2.5	142.251.15.132
Apr 25, 2024 00:54:44.177445889 CEST	443	49747	142.251.15.132	192.168.2.5
Apr 25, 2024 00:54:44.181886911 CEST	443	49747	142.251.15.132	192.168.2.5
Apr 25, 2024 00:54:44.181956053 CEST	49747	443	192.168.2.5	142.251.15.132
Apr 25, 2024 00:54:44.311683893 CEST	49747	443	192.168.2.5	142.251.15.132
Apr 25, 2024 00:54:44.311724901 CEST	443	49747	142.251.15.132	192.168.2.5
Apr 25, 2024 00:54:44.462555885 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:44.462600946 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:44.463033915 CEST	49748	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.463099957 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.463190079 CEST	49748	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.463470936 CEST	49748	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.463506937 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.604413033 CEST	49749	443	192.168.2.5	52.165.165.26
Apr 25, 2024 00:54:44.604435921 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:44.604505062 CEST	49749	443	192.168.2.5	52.165.165.26
Apr 25, 2024 00:54:44.606008053 CEST	49749	443	192.168.2.5	52.165.165.26
Apr 25, 2024 00:54:44.606036901 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:44.688247919 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.692950964 CEST	49748	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.692980051 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.693451881 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.693993092 CEST	49748	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.694084883 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.694175959 CEST	49748	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.736119032 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.921524048 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.921592951 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.921633005 CEST	49748	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.921636105 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.921663046 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.921704054 CEST	49748	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.921711922 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.921762943 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.921798944 CEST	49748	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.921806097 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.929023981 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.929065943 CEST	49748	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.929075956 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.936744928 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.936789989 CEST	49748	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.936800003 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.944385052 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.944425106 CEST	49748	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.944434881 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.952183962 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.952228069 CEST	49748	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.952703953 CEST	49748	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.952722073 CEST	443	49748	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.975332975 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.975375891 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:44.975435972 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.975639105 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:44.975658894 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.040710926 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:45.040796995 CEST	49749	443	192.168.2.5	52.165.165.26
Apr 25, 2024 00:54:45.045197010 CEST	49749	443	192.168.2.5	52.165.165.26
Apr 25, 2024 00:54:45.045226097 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:45.045452118 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:45.113603115 CEST	49749	443	192.168.2.5	52.165.165.26
Apr 25, 2024 00:54:45.205377102 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.205888987 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.205912113 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.206990957 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.207456112 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.207628012 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.207859993 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.248121023 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.431015968 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.431139946 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.431190014 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.431212902 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.431294918 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.431339025 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.431348085 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.431444883 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.431487083 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.431495905 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.438674927 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.438725948 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.438740015 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.446708918 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.446768045 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.446782112 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.452374935 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:45.452588081 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:45.452977896 CEST	49754	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:45.453010082 CEST	443	49754	23.1.237.91	192.168.2.5
Apr 25, 2024 00:54:45.453082085 CEST	49754	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:45.453432083 CEST	49754	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:45.453448057 CEST	443	49754	23.1.237.91	192.168.2.5
Apr 25, 2024 00:54:45.454709053 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.454758883 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.454771042 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.473005056 CEST	49749	443	192.168.2.5	52.165.165.26
Apr 25, 2024 00:54:45.516140938 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:45.540735006 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.540801048 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.540822029 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.544831991 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.544892073 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.544905901 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.544934034 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.544992924 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.552872896 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.560797930 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.560870886 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.560885906 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.560909033 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.560971975 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.568826914 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.576803923 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.576874971 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.576877117 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.576900005 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.577090025 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.584820032 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.592334032 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.592406034 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.592418909 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.592442036 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.592478991 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.599790096 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.607343912 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.607415915 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.607424021 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.607448101 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.607556105 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.610017061 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 00:54:45.610250950 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 00:54:45.614860058 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.622332096 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.622405052 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.622438908 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.622457981 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.622493982 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.629903078 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.637367010 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.637444019 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.637447119 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.637469053 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.637521982 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.650791883 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.653815031 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.653933048 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.653948069 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.659559965 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.659637928 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.659648895 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.665132999 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.665177107 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.665189981 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.665319920 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.665380001 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.665474892 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.665493965 CEST	443	49751	64.233.176.113	192.168.2.5
Apr 25, 2024 00:54:45.665505886 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.665586948 CEST	49751	443	192.168.2.5	64.233.176.113
Apr 25, 2024 00:54:45.755390882 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:45.755414009 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:45.755420923 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:45.755441904 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:45.755449057 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:45.755451918 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:45.755490065 CEST	49749	443	192.168.2.5	52.165.165.26
Apr 25, 2024 00:54:45.755521059 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:45.755543947 CEST	49749	443	192.168.2.5	52.165.165.26
Apr 25, 2024 00:54:45.755574942 CEST	49749	443	192.168.2.5	52.165.165.26
Apr 25, 2024 00:54:45.755654097 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:45.755707026 CEST	49749	443	192.168.2.5	52.165.165.26
Apr 25, 2024 00:54:45.755707979 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:45.755749941 CEST	49749	443	192.168.2.5	52.165.165.26
Apr 25, 2024 00:54:45.780464888 CEST	443	49754	23.1.237.91	192.168.2.5
Apr 25, 2024 00:54:45.780558109 CEST	49754	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:45.800002098 CEST	49754	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:45.800020933 CEST	443	49754	23.1.237.91	192.168.2.5
Apr 25, 2024 00:54:45.800247908 CEST	443	49754	23.1.237.91	192.168.2.5
Apr 25, 2024 00:54:45.800329924 CEST	49754	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:45.800802946 CEST	49754	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:45.800831079 CEST	443	49754	23.1.237.91	192.168.2.5
Apr 25, 2024 00:54:45.801254988 CEST	49754	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:45.801273108 CEST	443	49754	23.1.237.91	192.168.2.5
Apr 25, 2024 00:54:45.900265932 CEST	49757	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:45.900290012 CEST	443	49757	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:45.900408983 CEST	49757	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:45.900645971 CEST	49757	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:45.900655985 CEST	443	49757	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:46.007313013 CEST	49749	443	192.168.2.5	52.165.165.26
Apr 25, 2024 00:54:46.007375002 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:46.007415056 CEST	49749	443	192.168.2.5	52.165.165.26
Apr 25, 2024 00:54:46.007431984 CEST	443	49749	52.165.165.26	192.168.2.5
Apr 25, 2024 00:54:46.146300077 CEST	443	49754	23.1.237.91	192.168.2.5
Apr 25, 2024 00:54:46.146436930 CEST	49754	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:46.146891117 CEST	443	49754	23.1.237.91	192.168.2.5
Apr 25, 2024 00:54:46.146928072 CEST	443	49754	23.1.237.91	192.168.2.5
Apr 25, 2024 00:54:46.146996975 CEST	49754	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:46.146996975 CEST	49754	443	192.168.2.5	23.1.237.91
Apr 25, 2024 00:54:46.340286970 CEST	443	49757	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:46.340847015 CEST	49757	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:46.340862036 CEST	443	49757	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:46.342457056 CEST	443	49757	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:46.342520952 CEST	49757	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:46.343621969 CEST	49757	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:46.343700886 CEST	443	49757	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:46.343835115 CEST	49757	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:46.343841076 CEST	443	49757	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:46.425630093 CEST	49757	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:46.646775007 CEST	49759	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:46.646795988 CEST	443	49759	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:46.646874905 CEST	49759	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:46.647206068 CEST	49759	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:46.647217035 CEST	443	49759	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:46.796952009 CEST	443	49757	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:46.797338963 CEST	443	49757	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:46.797399998 CEST	49757	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:46.797800064 CEST	49757	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:46.797810078 CEST	443	49757	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:46.928250074 CEST	49760	443	192.168.2.5	74.125.136.105
Apr 25, 2024 00:54:46.928327084 CEST	443	49760	74.125.136.105	192.168.2.5
Apr 25, 2024 00:54:46.928478956 CEST	49760	443	192.168.2.5	74.125.136.105
Apr 25, 2024 00:54:46.928739071 CEST	49760	443	192.168.2.5	74.125.136.105
Apr 25, 2024 00:54:46.928772926 CEST	443	49760	74.125.136.105	192.168.2.5
Apr 25, 2024 00:54:47.073451042 CEST	443	49759	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:47.073695898 CEST	49759	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:47.073718071 CEST	443	49759	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:47.074594975 CEST	443	49759	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:47.074651957 CEST	49759	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:47.075021982 CEST	49759	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:47.075074911 CEST	443	49759	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:47.075175047 CEST	49759	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:47.075186968 CEST	443	49759	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:47.116844893 CEST	49759	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:47.157740116 CEST	443	49760	74.125.136.105	192.168.2.5
Apr 25, 2024 00:54:47.158019066 CEST	49760	443	192.168.2.5	74.125.136.105
Apr 25, 2024 00:54:47.158035994 CEST	443	49760	74.125.136.105	192.168.2.5
Apr 25, 2024 00:54:47.161555052 CEST	443	49760	74.125.136.105	192.168.2.5
Apr 25, 2024 00:54:47.161621094 CEST	49760	443	192.168.2.5	74.125.136.105
Apr 25, 2024 00:54:47.162053108 CEST	49760	443	192.168.2.5	74.125.136.105
Apr 25, 2024 00:54:47.162223101 CEST	443	49760	74.125.136.105	192.168.2.5
Apr 25, 2024 00:54:47.162249088 CEST	49760	443	192.168.2.5	74.125.136.105
Apr 25, 2024 00:54:47.204195976 CEST	443	49760	74.125.136.105	192.168.2.5
Apr 25, 2024 00:54:47.206770897 CEST	49760	443	192.168.2.5	74.125.136.105
Apr 25, 2024 00:54:47.206790924 CEST	443	49760	74.125.136.105	192.168.2.5
Apr 25, 2024 00:54:47.253645897 CEST	49760	443	192.168.2.5	74.125.136.105
Apr 25, 2024 00:54:47.399087906 CEST	443	49760	74.125.136.105	192.168.2.5
Apr 25, 2024 00:54:47.399528980 CEST	443	49760	74.125.136.105	192.168.2.5
Apr 25, 2024 00:54:47.399600983 CEST	49760	443	192.168.2.5	74.125.136.105
Apr 25, 2024 00:54:47.399888992 CEST	49760	443	192.168.2.5	74.125.136.105
Apr 25, 2024 00:54:47.399919033 CEST	443	49760	74.125.136.105	192.168.2.5
Apr 25, 2024 00:54:47.533077002 CEST	443	49759	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:47.533684969 CEST	443	49759	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:47.533735991 CEST	49759	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:47.534429073 CEST	49759	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:47.534444094 CEST	443	49759	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:47.603238106 CEST	49762	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:47.603293896 CEST	443	49762	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:47.603362083 CEST	49762	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:47.603602886 CEST	49762	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:47.603619099 CEST	443	49762	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.040764093 CEST	443	49762	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.046772003 CEST	49762	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.046794891 CEST	443	49762	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.047087908 CEST	443	49762	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.047192097 CEST	49763	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.047211885 CEST	443	49763	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.047358036 CEST	49763	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.047569036 CEST	49762	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.047630072 CEST	443	49762	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.047787905 CEST	49763	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.047799110 CEST	443	49763	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.047966003 CEST	49762	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.088162899 CEST	443	49762	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.488235950 CEST	443	49763	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.488569021 CEST	49763	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.488581896 CEST	443	49763	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.489419937 CEST	443	49763	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.489479065 CEST	49763	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.490299940 CEST	49763	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.490351915 CEST	443	49763	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.490734100 CEST	49763	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.490739107 CEST	443	49763	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.503848076 CEST	443	49762	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.504369020 CEST	443	49762	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.504420996 CEST	49762	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.510255098 CEST	49762	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.510271072 CEST	443	49762	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.544980049 CEST	49763	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.618956089 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:48.618990898 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:48.619090080 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:48.619482040 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:48.619497061 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:48.620400906 CEST	49765	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.620430946 CEST	443	49765	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.620579958 CEST	49765	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.620841026 CEST	49765	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.620857954 CEST	443	49765	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.849319935 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:48.849613905 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:48.849637985 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:48.850716114 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:48.851469040 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:48.851639986 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:48.851829052 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:48.896116018 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:48.961307049 CEST	443	49763	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.961350918 CEST	443	49763	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:48.961416006 CEST	49763	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.987718105 CEST	49763	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:48.987726927 CEST	443	49763	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.012904882 CEST	49768	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.012990952 CEST	443	49768	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.013130903 CEST	49768	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.013475895 CEST	49768	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.013515949 CEST	443	49768	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.053770065 CEST	443	49765	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.054353952 CEST	49765	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.054371119 CEST	443	49765	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.054661036 CEST	443	49765	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.055139065 CEST	49765	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.055196047 CEST	443	49765	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.055248022 CEST	49765	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.096146107 CEST	443	49765	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.106051922 CEST	49765	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.109787941 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.109960079 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.110052109 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.110203981 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.110276937 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.110512972 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.110531092 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.116745949 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.117082119 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.124753952 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.124826908 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.124842882 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.124854088 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.124893904 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.130422115 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.138179064 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.138235092 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.138242960 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.186741114 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.220366955 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.223973989 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.224050045 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.224091053 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.224104881 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.224181890 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.231766939 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.239542007 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.239608049 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.239615917 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.247162104 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.247227907 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.247246027 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.254782915 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.254849911 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.254915953 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.254926920 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.254988909 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.262417078 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.269545078 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.269596100 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.269612074 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.276513100 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.276587009 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.276595116 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.283569098 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.283621073 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.283629894 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.290707111 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.290831089 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.290877104 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.290884018 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.291126966 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.297750950 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.297919035 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.297972918 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.297990084 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.305727005 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.305792093 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.305799007 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.306030989 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.306143999 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.306190014 CEST	49764	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:49.306200027 CEST	443	49764	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:49.448705912 CEST	443	49768	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.448932886 CEST	49768	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.448956013 CEST	443	49768	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.449238062 CEST	443	49768	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.449677944 CEST	49768	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.449733973 CEST	443	49768	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.449848890 CEST	49768	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.492116928 CEST	443	49768	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.504002094 CEST	49768	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.521898985 CEST	443	49765	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.522481918 CEST	443	49765	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.522538900 CEST	49765	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.522767067 CEST	49765	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.522783041 CEST	443	49765	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.647144079 CEST	49771	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.647169113 CEST	443	49771	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.647288084 CEST	49771	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.648087978 CEST	49771	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.648102045 CEST	443	49771	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.915219069 CEST	443	49768	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.915740967 CEST	443	49768	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.915838957 CEST	49768	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.917678118 CEST	49768	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.917691946 CEST	443	49768	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.920025110 CEST	49772	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.920059919 CEST	443	49772	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:49.920156956 CEST	49772	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.920844078 CEST	49772	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:49.920862913 CEST	443	49772	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.090830088 CEST	443	49771	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.091393948 CEST	49771	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.091407061 CEST	443	49771	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.093002081 CEST	443	49771	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.093588114 CEST	49771	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.093766928 CEST	443	49771	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.093800068 CEST	49771	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.136118889 CEST	443	49771	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.144530058 CEST	49771	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.347002029 CEST	443	49772	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.386779070 CEST	49772	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.392030001 CEST	49772	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.392060041 CEST	443	49772	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.392395020 CEST	443	49772	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.396275997 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.396311998 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.396506071 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.397402048 CEST	49772	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.397480011 CEST	443	49772	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.411875963 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.411890984 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.412281036 CEST	49772	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.456144094 CEST	443	49772	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.557797909 CEST	443	49771	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.558165073 CEST	443	49771	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.558234930 CEST	49771	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.560331106 CEST	49771	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.560343027 CEST	443	49771	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.562374115 CEST	49776	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.562412024 CEST	443	49776	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.562609911 CEST	49776	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.563205957 CEST	49776	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.563220978 CEST	443	49776	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.635612011 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.636550903 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.636564970 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.636847019 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.637834072 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.637888908 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.638756990 CEST	49777	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.638818979 CEST	443	49777	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.638926983 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.638961077 CEST	49777	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.639399052 CEST	49777	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.639414072 CEST	443	49777	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.684118986 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.811501980 CEST	443	49772	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.811934948 CEST	443	49772	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.812002897 CEST	49772	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.813417912 CEST	49772	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.813452005 CEST	443	49772	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.814121008 CEST	49778	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.814143896 CEST	443	49778	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.814824104 CEST	49778	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.815195084 CEST	49778	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.815208912 CEST	443	49778	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.861537933 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.861628056 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.861658096 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.861709118 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.861732006 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.861743927 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.861767054 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.869162083 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.869183064 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.869240046 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.869250059 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.869329929 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.870682955 CEST	443	49777	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.871040106 CEST	49777	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.871048927 CEST	443	49777	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.872205019 CEST	443	49777	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.872549057 CEST	49777	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.872670889 CEST	49777	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.872683048 CEST	443	49777	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.872725964 CEST	443	49777	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.876904011 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.884589911 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.884608030 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.884655952 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.884673119 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.884958029 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.892286062 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.916018963 CEST	49777	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.941250086 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.971347094 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.975209951 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.975261927 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.975298882 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.975310087 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.975440979 CEST	49774	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:50.975455046 CEST	443	49774	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:50.990942001 CEST	443	49776	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.991153955 CEST	49776	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.991174936 CEST	443	49776	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.991626978 CEST	443	49776	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.991947889 CEST	49776	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:50.992028952 CEST	443	49776	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:50.992070913 CEST	49776	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.032139063 CEST	443	49776	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.035000086 CEST	49776	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.111036062 CEST	443	49777	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:51.111340046 CEST	443	49777	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:51.118043900 CEST	49777	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:51.119683981 CEST	49777	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:51.119697094 CEST	443	49777	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:51.240778923 CEST	443	49778	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.241013050 CEST	49778	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.241024971 CEST	443	49778	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.241312027 CEST	443	49778	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.242095947 CEST	49778	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.242152929 CEST	443	49778	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.242261887 CEST	49778	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.284147024 CEST	443	49778	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.446981907 CEST	443	49776	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.447808981 CEST	443	49776	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.447873116 CEST	49776	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.660986900 CEST	49776	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.661010027 CEST	443	49776	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.701803923 CEST	443	49778	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.702334881 CEST	443	49778	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.702440023 CEST	49778	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.775952101 CEST	49779	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:51.775988102 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:51.776163101 CEST	49779	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:51.776535988 CEST	49780	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.776559114 CEST	443	49780	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.776752949 CEST	49779	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:51.776767969 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:51.776778936 CEST	49780	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.777143002 CEST	49780	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.777152061 CEST	443	49780	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.777725935 CEST	49778	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.777749062 CEST	443	49778	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.812485933 CEST	49781	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.812560081 CEST	443	49781	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:51.812916994 CEST	49781	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.813098907 CEST	49781	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:51.813131094 CEST	443	49781	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.009098053 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:52.011861086 CEST	49779	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:52.011878967 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:52.013010979 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:52.019164085 CEST	49779	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:52.019251108 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:52.019592047 CEST	49779	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:52.064117908 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:52.213782072 CEST	443	49780	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.216526985 CEST	49780	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.216555119 CEST	443	49780	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.216909885 CEST	443	49780	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.219754934 CEST	49780	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.219818115 CEST	443	49780	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.220361948 CEST	49780	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.256607056 CEST	443	49781	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.256876945 CEST	49781	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.256896019 CEST	443	49781	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.257355928 CEST	443	49781	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.257694960 CEST	49781	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.257802010 CEST	443	49781	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.257829905 CEST	49781	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.264127016 CEST	443	49780	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.299962997 CEST	49781	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.299984932 CEST	443	49781	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.323509932 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:52.323652983 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:52.323705912 CEST	49779	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:52.323725939 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:52.323798895 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:52.323905945 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:52.323915005 CEST	49779	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:52.323931932 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:52.324284077 CEST	49779	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:52.324292898 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:52.333553076 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:52.333612919 CEST	49779	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:52.333708048 CEST	49779	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:54:52.333720922 CEST	443	49779	74.125.136.103	192.168.2.5
Apr 25, 2024 00:54:52.680250883 CEST	443	49780	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.680658102 CEST	443	49780	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.680710077 CEST	49780	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.726023912 CEST	443	49781	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.726095915 CEST	443	49781	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.726267099 CEST	49781	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.746062994 CEST	49780	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.746078014 CEST	443	49780	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.746891975 CEST	49783	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.746983051 CEST	443	49783	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.747107029 CEST	49781	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.747131109 CEST	443	49781	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.747153997 CEST	49783	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.747569084 CEST	49783	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.747615099 CEST	443	49783	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.867840052 CEST	49784	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.867881060 CEST	443	49784	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:52.867981911 CEST	49784	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.868221998 CEST	49784	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:52.868241072 CEST	443	49784	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.181005955 CEST	443	49783	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.204114914 CEST	49783	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.204185963 CEST	443	49783	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.204699993 CEST	443	49783	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.205465078 CEST	49783	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.205555916 CEST	443	49783	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.205729961 CEST	49783	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.252129078 CEST	443	49783	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.290652990 CEST	443	49784	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.291006088 CEST	49784	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.291023016 CEST	443	49784	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.291327953 CEST	443	49784	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.291821003 CEST	49784	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.291877985 CEST	443	49784	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.291939020 CEST	49784	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.331533909 CEST	49784	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.331547022 CEST	443	49784	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.644898891 CEST	443	49783	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.645453930 CEST	443	49783	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.645535946 CEST	49783	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.647114992 CEST	49783	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.647156954 CEST	443	49783	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.647836924 CEST	49785	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.647922039 CEST	443	49785	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.648117065 CEST	49785	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.648343086 CEST	49785	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.648382902 CEST	443	49785	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.745912075 CEST	443	49784	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.746367931 CEST	443	49784	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.746417046 CEST	49784	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.747242928 CEST	49784	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.747262001 CEST	443	49784	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.747973919 CEST	49786	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.748022079 CEST	443	49786	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:53.748089075 CEST	49786	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.748590946 CEST	49786	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:53.748610020 CEST	443	49786	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.079545021 CEST	443	49785	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.079838991 CEST	49785	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.079874039 CEST	443	49785	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.081172943 CEST	443	49785	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.081588984 CEST	49785	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.081732035 CEST	49785	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.081737995 CEST	443	49785	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.081769943 CEST	443	49785	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.132152081 CEST	49785	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.173577070 CEST	443	49786	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.173837900 CEST	49786	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.173881054 CEST	443	49786	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.174223900 CEST	443	49786	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.174587965 CEST	49786	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.174652100 CEST	443	49786	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.174726009 CEST	49786	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.216149092 CEST	443	49786	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.222786903 CEST	49786	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.538639069 CEST	443	49785	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.539248943 CEST	443	49785	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.539319992 CEST	49785	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.540205956 CEST	49787	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.540294886 CEST	443	49787	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.540296078 CEST	49785	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.540334940 CEST	443	49785	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.540420055 CEST	49787	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.540802002 CEST	49787	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.540858984 CEST	443	49787	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.628664017 CEST	443	49786	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.629232883 CEST	443	49786	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.629287004 CEST	49786	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.629841089 CEST	49788	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.629862070 CEST	443	49788	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.629919052 CEST	49788	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.630218983 CEST	49788	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.630225897 CEST	443	49788	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.630337000 CEST	49786	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.630357027 CEST	443	49786	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.974435091 CEST	443	49787	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.974867105 CEST	49787	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.974906921 CEST	443	49787	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.975414991 CEST	443	49787	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.975871086 CEST	49787	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:54.975964069 CEST	443	49787	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:54.976012945 CEST	49787	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.016149998 CEST	443	49787	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.020350933 CEST	49787	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.052268028 CEST	443	49788	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.052499056 CEST	49788	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.052510977 CEST	443	49788	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.052798033 CEST	443	49788	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.053103924 CEST	49788	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.053145885 CEST	443	49788	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.053240061 CEST	49788	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.096117973 CEST	443	49788	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.441867113 CEST	443	49787	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.442315102 CEST	443	49787	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.442418098 CEST	49787	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.442733049 CEST	49787	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.442764044 CEST	443	49787	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.444825888 CEST	49789	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.444865942 CEST	443	49789	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.445002079 CEST	49789	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.445193052 CEST	49789	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.445209980 CEST	443	49789	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.508044958 CEST	443	49788	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.508670092 CEST	443	49788	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.508723021 CEST	49788	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.513492107 CEST	49788	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.513499975 CEST	443	49788	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.514483929 CEST	49790	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.514513969 CEST	443	49790	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.514597893 CEST	49790	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.515155077 CEST	49790	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.515171051 CEST	443	49790	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.877660990 CEST	443	49789	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.878026962 CEST	49789	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.878056049 CEST	443	49789	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.878524065 CEST	443	49789	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.878848076 CEST	49789	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.878931046 CEST	443	49789	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.878995895 CEST	49789	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.924150944 CEST	443	49789	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.926608086 CEST	49789	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.941663980 CEST	443	49790	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.941921949 CEST	49790	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.941950083 CEST	443	49790	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.942238092 CEST	443	49790	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.942636013 CEST	49790	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.942696095 CEST	443	49790	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.942764044 CEST	49790	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:55.988127947 CEST	443	49790	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:55.989114046 CEST	49790	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.336661100 CEST	443	49789	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.337008953 CEST	443	49789	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.337080956 CEST	49789	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.338618994 CEST	49789	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.338643074 CEST	443	49789	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.340590000 CEST	49791	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.340655088 CEST	443	49791	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.340950966 CEST	49791	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.341358900 CEST	49791	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.341389894 CEST	443	49791	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.416563988 CEST	443	49790	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.417725086 CEST	49792	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.417756081 CEST	443	49792	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.417876959 CEST	49792	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.418137074 CEST	49792	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.418159962 CEST	443	49792	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.419125080 CEST	443	49790	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.419457912 CEST	49790	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.419457912 CEST	49790	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.722294092 CEST	49790	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.722313881 CEST	443	49790	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.767566919 CEST	443	49791	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.767939091 CEST	49791	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.767997026 CEST	443	49791	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.768496990 CEST	443	49791	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.768946886 CEST	49791	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.769035101 CEST	443	49791	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.769211054 CEST	49791	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.816116095 CEST	443	49791	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.858625889 CEST	443	49792	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.859190941 CEST	49792	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.859205008 CEST	443	49792	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.859651089 CEST	443	49792	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.860853910 CEST	49792	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.860934973 CEST	443	49792	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:56.861325979 CEST	49792	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:56.908118010 CEST	443	49792	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.222712994 CEST	443	49791	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.223294973 CEST	443	49791	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.223419905 CEST	49791	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.228766918 CEST	49791	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.228806019 CEST	443	49791	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.233767033 CEST	49793	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.233858109 CEST	443	49793	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.234030962 CEST	49793	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.234415054 CEST	49793	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.234466076 CEST	443	49793	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.325469971 CEST	443	49792	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.325985909 CEST	443	49792	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.326055050 CEST	49792	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.327158928 CEST	49792	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.327188015 CEST	443	49792	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.333750963 CEST	49794	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.333789110 CEST	443	49794	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.333854914 CEST	49794	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.334260941 CEST	49794	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.334280014 CEST	443	49794	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.663857937 CEST	443	49793	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.664180040 CEST	49793	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.664242983 CEST	443	49793	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.664726973 CEST	443	49793	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.665522099 CEST	49793	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.665615082 CEST	443	49793	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.665930033 CEST	49793	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.708116055 CEST	443	49793	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.764470100 CEST	443	49794	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.765012026 CEST	49794	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.765032053 CEST	443	49794	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.765332937 CEST	443	49794	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.766284943 CEST	49794	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.766352892 CEST	443	49794	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:57.766709089 CEST	49794	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:57.812117100 CEST	443	49794	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.120672941 CEST	443	49793	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.121285915 CEST	443	49793	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.121377945 CEST	49793	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.224344015 CEST	443	49794	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.224956036 CEST	443	49794	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.225043058 CEST	49794	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.306240082 CEST	49793	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.306273937 CEST	443	49793	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.307468891 CEST	49794	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.307496071 CEST	443	49794	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.309501886 CEST	49795	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.309593916 CEST	443	49795	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.309730053 CEST	49795	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.313812971 CEST	49795	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.313858032 CEST	443	49795	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.322282076 CEST	49796	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.322309017 CEST	443	49796	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.322396040 CEST	49796	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.322658062 CEST	49796	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.322671890 CEST	443	49796	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.733973980 CEST	443	49795	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.734298944 CEST	49795	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.734338999 CEST	443	49795	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.734858990 CEST	443	49795	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.735310078 CEST	49795	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.735402107 CEST	443	49795	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.735510111 CEST	49795	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.756310940 CEST	443	49796	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.756567001 CEST	49796	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.756587982 CEST	443	49796	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.757683992 CEST	443	49796	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.758090019 CEST	49796	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.758229017 CEST	49796	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:58.758255959 CEST	443	49796	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.776139021 CEST	443	49795	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:58.800477028 CEST	49796	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.182682991 CEST	443	49795	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.183257103 CEST	443	49795	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.183306932 CEST	49795	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.184494972 CEST	49795	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.184520960 CEST	443	49795	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.186115026 CEST	49797	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.186168909 CEST	443	49797	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.186263084 CEST	49797	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.187479019 CEST	49797	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.187525988 CEST	443	49797	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.216181040 CEST	443	49796	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.216324091 CEST	443	49796	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.216382980 CEST	49796	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.217179060 CEST	49796	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.217192888 CEST	443	49796	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.217911005 CEST	49798	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.217946053 CEST	443	49798	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.218014956 CEST	49798	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.218699932 CEST	49798	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.218715906 CEST	443	49798	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.622221947 CEST	443	49797	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.622834921 CEST	49797	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.622873068 CEST	443	49797	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.623354912 CEST	443	49797	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.623948097 CEST	49797	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.624047041 CEST	443	49797	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.624362946 CEST	49797	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.657061100 CEST	443	49798	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.657346010 CEST	49798	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.657371998 CEST	443	49798	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.657851934 CEST	443	49798	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.658294916 CEST	49798	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.658374071 CEST	443	49798	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.658479929 CEST	49798	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:54:59.668133020 CEST	443	49797	153.92.220.230	192.168.2.5
Apr 25, 2024 00:54:59.700154066 CEST	443	49798	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.088673115 CEST	443	49797	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.088860035 CEST	443	49797	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.089114904 CEST	49797	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.089651108 CEST	49797	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.089672089 CEST	443	49797	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.090581894 CEST	49799	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.090663910 CEST	443	49799	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.090744019 CEST	49799	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.091617107 CEST	49799	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.091654062 CEST	443	49799	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.120899916 CEST	443	49798	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.121275902 CEST	443	49798	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.121341944 CEST	49798	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.122045040 CEST	49798	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.122061968 CEST	443	49798	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.122646093 CEST	49800	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.122690916 CEST	443	49800	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.122836113 CEST	49800	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.123342991 CEST	49800	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.123362064 CEST	443	49800	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.515007973 CEST	443	49799	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.515795946 CEST	49799	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.515832901 CEST	443	49799	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.517024040 CEST	443	49799	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.518049955 CEST	49799	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.518229961 CEST	443	49799	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.518452883 CEST	49799	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.550347090 CEST	443	49800	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.550718069 CEST	49800	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.550744057 CEST	443	49800	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.551850080 CEST	443	49800	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.552409887 CEST	49800	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.552582979 CEST	443	49800	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.552614927 CEST	49800	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.560141087 CEST	443	49799	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.596143961 CEST	443	49800	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.598123074 CEST	49800	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.965487003 CEST	443	49799	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.966182947 CEST	443	49799	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.966268063 CEST	49799	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.967432976 CEST	49799	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:00.967461109 CEST	443	49799	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:00.999862909 CEST	443	49800	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.000304937 CEST	443	49800	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.001061916 CEST	49800	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.007594109 CEST	49800	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.007620096 CEST	443	49800	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.009640932 CEST	49801	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.009742022 CEST	443	49801	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.009834051 CEST	49801	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.010137081 CEST	49801	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.010188103 CEST	443	49801	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.017113924 CEST	49802	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.017154932 CEST	443	49802	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.017355919 CEST	49802	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.017836094 CEST	49802	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.017852068 CEST	443	49802	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.430447102 CEST	443	49801	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.430711031 CEST	49801	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.430752039 CEST	443	49801	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.431237936 CEST	443	49801	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.431695938 CEST	49801	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.431787014 CEST	443	49801	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.431818008 CEST	49801	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.459980011 CEST	443	49802	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.460315943 CEST	49802	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.460330963 CEST	443	49802	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.461468935 CEST	443	49802	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.461872101 CEST	49802	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.462050915 CEST	443	49802	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.462054014 CEST	49802	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.472517014 CEST	49801	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.472546101 CEST	443	49801	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.503772020 CEST	49802	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.503782034 CEST	443	49802	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.884058952 CEST	443	49801	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.884546041 CEST	443	49801	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.884613991 CEST	49801	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.885066986 CEST	49801	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.885101080 CEST	443	49801	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.921952009 CEST	443	49802	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.922451019 CEST	443	49802	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.922513962 CEST	49802	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.924699068 CEST	49802	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.924729109 CEST	443	49802	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.930453062 CEST	49803	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.930490017 CEST	443	49803	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.930545092 CEST	49803	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.930921078 CEST	49803	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.930937052 CEST	443	49803	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.980011940 CEST	49804	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.980046034 CEST	443	49804	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:01.980123043 CEST	49804	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.980866909 CEST	49804	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:01.980885029 CEST	443	49804	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.371563911 CEST	443	49803	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.371963024 CEST	49803	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:02.371992111 CEST	443	49803	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.372493982 CEST	443	49803	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.372879028 CEST	49803	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:02.372961044 CEST	443	49803	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.373245955 CEST	49803	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:02.408390045 CEST	443	49804	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.408768892 CEST	49804	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:02.408778906 CEST	443	49804	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.409887075 CEST	443	49804	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.411061049 CEST	49804	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:02.411173105 CEST	49804	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:02.411176920 CEST	443	49804	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.411228895 CEST	443	49804	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.420119047 CEST	443	49803	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.456888914 CEST	49804	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:02.842098951 CEST	443	49803	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.842493057 CEST	443	49803	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.842597961 CEST	49803	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:02.843193054 CEST	49803	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:02.843208075 CEST	443	49803	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.863823891 CEST	443	49804	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.863966942 CEST	443	49804	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:02.864028931 CEST	49804	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:02.864466906 CEST	49804	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:02.864475012 CEST	443	49804	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.012778044 CEST	49805	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.012855053 CEST	443	49805	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.012953043 CEST	49805	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.013154984 CEST	49805	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.013176918 CEST	443	49805	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.022486925 CEST	49806	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.022519112 CEST	443	49806	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.022594929 CEST	49806	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.023293018 CEST	49806	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.023307085 CEST	443	49806	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.440720081 CEST	443	49805	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.443336964 CEST	49805	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.443408012 CEST	443	49805	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.444581985 CEST	443	49805	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.445878983 CEST	49805	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.446053028 CEST	443	49805	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.446161985 CEST	49805	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.449285984 CEST	443	49806	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.449584961 CEST	49806	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.449604034 CEST	443	49806	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.450700998 CEST	443	49806	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.451642036 CEST	49806	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.451816082 CEST	443	49806	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.451847076 CEST	49806	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.492126942 CEST	443	49805	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.496129036 CEST	443	49806	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.503766060 CEST	49806	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.895524025 CEST	443	49805	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.895987988 CEST	443	49805	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.896058083 CEST	49805	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.898251057 CEST	443	49806	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.898847103 CEST	443	49806	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.898900032 CEST	49806	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.899430990 CEST	49805	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.899470091 CEST	443	49805	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.903415918 CEST	49807	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.903455973 CEST	443	49807	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.903512955 CEST	49807	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.904079914 CEST	49807	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.904094934 CEST	443	49807	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.904908895 CEST	49806	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.904921055 CEST	443	49806	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.910172939 CEST	49808	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.910185099 CEST	443	49808	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:03.910429001 CEST	49808	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.910726070 CEST	49808	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:03.910737991 CEST	443	49808	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.336788893 CEST	443	49807	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.337059021 CEST	49807	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.337079048 CEST	443	49807	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.338193893 CEST	443	49807	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.338629961 CEST	49807	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.338768959 CEST	49807	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.338774920 CEST	443	49807	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.338804960 CEST	443	49807	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.350490093 CEST	443	49808	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.350697041 CEST	49808	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.350703955 CEST	443	49808	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.351828098 CEST	443	49808	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.352178097 CEST	49808	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.352309942 CEST	49808	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.352387905 CEST	443	49808	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.378767967 CEST	49807	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.394404888 CEST	49808	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.793962002 CEST	443	49807	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.794378996 CEST	443	49807	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.794450998 CEST	49807	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.796627998 CEST	49807	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.796644926 CEST	443	49807	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.805947065 CEST	443	49808	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.806595087 CEST	443	49808	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.806674004 CEST	49808	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.807636976 CEST	49808	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.807642937 CEST	443	49808	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.809287071 CEST	49809	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.809319019 CEST	443	49809	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.809390068 CEST	49809	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.809647083 CEST	49809	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.809658051 CEST	443	49809	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.898369074 CEST	49810	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.898442030 CEST	443	49810	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:04.898533106 CEST	49810	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.898875952 CEST	49810	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:04.898909092 CEST	443	49810	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.244721889 CEST	443	49809	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.244986057 CEST	49809	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.245023966 CEST	443	49809	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.246124983 CEST	443	49809	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.246478081 CEST	49809	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.246623993 CEST	49809	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.246645927 CEST	443	49809	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.297900915 CEST	49809	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.340504885 CEST	443	49810	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.391661882 CEST	49810	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.396742105 CEST	49810	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.396768093 CEST	443	49810	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.398039103 CEST	443	49810	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.398520947 CEST	49810	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.398711920 CEST	443	49810	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.398838043 CEST	49810	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.438541889 CEST	49810	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.438565016 CEST	443	49810	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.702280998 CEST	443	49809	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.702769041 CEST	443	49809	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.702838898 CEST	49809	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.703126907 CEST	49809	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.703140974 CEST	443	49809	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.807426929 CEST	443	49810	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.807887077 CEST	443	49810	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.807986021 CEST	49810	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.808587074 CEST	49810	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.808625937 CEST	443	49810	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.809803009 CEST	49811	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.809835911 CEST	443	49811	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.809916019 CEST	49811	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.810359955 CEST	49811	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.810372114 CEST	443	49811	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.812349081 CEST	49812	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.812381029 CEST	443	49812	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:05.812438965 CEST	49812	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.812612057 CEST	49812	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:05.812625885 CEST	443	49812	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.236742020 CEST	443	49811	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.237092018 CEST	49811	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.237123966 CEST	443	49811	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.238313913 CEST	443	49811	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.239814997 CEST	49811	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.239986897 CEST	443	49811	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.240272999 CEST	49811	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.247951984 CEST	443	49812	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.248156071 CEST	49812	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.248186111 CEST	443	49812	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.249308109 CEST	443	49812	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.249743938 CEST	49812	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.249743938 CEST	49812	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.249921083 CEST	443	49812	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.284126043 CEST	443	49811	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.300292015 CEST	49812	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.688798904 CEST	443	49811	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.689249039 CEST	443	49811	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.689374924 CEST	49811	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.690419912 CEST	49811	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.690435886 CEST	443	49811	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.709791899 CEST	443	49812	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.710314989 CEST	443	49812	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.710772038 CEST	49813	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.710819006 CEST	443	49813	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.710850000 CEST	49812	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.711003065 CEST	49812	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.711021900 CEST	443	49812	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.711067915 CEST	49813	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.711862087 CEST	49813	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.711880922 CEST	443	49813	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.771286011 CEST	49814	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.771388054 CEST	443	49814	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:06.771483898 CEST	49814	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.773729086 CEST	49814	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:06.773766994 CEST	443	49814	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.134022951 CEST	443	49813	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.137109995 CEST	49813	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.137131929 CEST	443	49813	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.138277054 CEST	443	49813	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.138786077 CEST	49813	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.138786077 CEST	49813	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.138959885 CEST	443	49813	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.193001032 CEST	49813	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.196048021 CEST	443	49814	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.196352005 CEST	49814	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.196384907 CEST	443	49814	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.196872950 CEST	443	49814	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.197324038 CEST	49814	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.197324038 CEST	49814	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.197355032 CEST	443	49814	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.197422028 CEST	443	49814	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.237413883 CEST	49814	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.548005104 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:07.548058987 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:07.548352003 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:07.548352003 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:07.548396111 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:07.586088896 CEST	443	49813	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.586492062 CEST	443	49813	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.586565018 CEST	49813	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.586905956 CEST	49813	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.586926937 CEST	443	49813	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.647141933 CEST	443	49814	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.647638083 CEST	443	49814	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.647716999 CEST	49814	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.648722887 CEST	49814	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.648763895 CEST	443	49814	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.652354002 CEST	49816	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.652436972 CEST	443	49816	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.652524948 CEST	49816	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.652744055 CEST	49816	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.652776003 CEST	443	49816	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.724319935 CEST	49817	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.724364996 CEST	443	49817	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.724519968 CEST	49817	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.724709988 CEST	49817	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:07.724721909 CEST	443	49817	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:07.776772022 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:07.776983023 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:07.777004957 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:07.777460098 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:07.777785063 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:07.777868032 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:07.777911901 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:07.777992010 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:07.778018951 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.059336901 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.061841965 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.061898947 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.061922073 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.062215090 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.062267065 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.062277079 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.071718931 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.071772099 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.071794987 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.079193115 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.079243898 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.079256058 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.083058119 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.083123922 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.083153009 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.083164930 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.083197117 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.092379093 CEST	443	49816	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.092668056 CEST	49816	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.092703104 CEST	443	49816	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.093174934 CEST	443	49816	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.093705893 CEST	49816	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.093774080 CEST	443	49816	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.093884945 CEST	49816	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.136157990 CEST	443	49816	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.146311998 CEST	443	49817	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.146543026 CEST	49817	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.146572113 CEST	443	49817	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.147067070 CEST	443	49817	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.147373915 CEST	49817	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.147454977 CEST	443	49817	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.147497892 CEST	49817	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.169194937 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.172770023 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.172830105 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.172832966 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.172866106 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.172976971 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.180573940 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.180951118 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.181016922 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.181212902 CEST	49815	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.181231976 CEST	443	49815	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.188119888 CEST	443	49817	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.191883087 CEST	49817	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.249684095 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.249712944 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.249936104 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.250489950 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.250503063 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.315817118 CEST	49824	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:08.315855980 CEST	443	49824	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:08.316006899 CEST	49824	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:08.316404104 CEST	49824	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:08.316422939 CEST	443	49824	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:08.475438118 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.479110956 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.479125023 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.479602098 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.480361938 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.480446100 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.480808973 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.524117947 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.545738935 CEST	443	49824	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:08.554935932 CEST	49824	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:08.554951906 CEST	443	49824	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:08.558775902 CEST	443	49824	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:08.558840990 CEST	49824	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:08.559431076 CEST	49824	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:08.559602976 CEST	443	49824	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:08.559681892 CEST	49824	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:08.559690952 CEST	443	49824	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:08.569639921 CEST	443	49816	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.569802999 CEST	443	49816	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.569924116 CEST	49816	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.571670055 CEST	49816	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.571722984 CEST	443	49816	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.598895073 CEST	443	49817	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.599210024 CEST	443	49817	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.599276066 CEST	49817	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.600667953 CEST	49817	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.600687027 CEST	443	49817	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.603451967 CEST	49824	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:08.607081890 CEST	49825	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.607121944 CEST	443	49825	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.607184887 CEST	49825	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.607372046 CEST	49825	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.607389927 CEST	443	49825	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.686342955 CEST	49826	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.686378956 CEST	443	49826	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.686486006 CEST	49826	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.686855078 CEST	49826	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:08.686872959 CEST	443	49826	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:08.716626883 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.716739893 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.716794014 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.716839075 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.716856956 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.717030048 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.717459917 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.725188017 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.725238085 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.725249052 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.732887030 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.732932091 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.732950926 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.732960939 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.732995033 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.740602970 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.789006948 CEST	443	49824	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:08.789364100 CEST	443	49824	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:08.789422989 CEST	49824	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:08.789971113 CEST	49824	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:08.789988041 CEST	443	49824	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:08.800580025 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.800601959 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.826591969 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.826642990 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.826652050 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.830373049 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.830424070 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.830430984 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.838430882 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.838495970 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.838506937 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.845861912 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.845932961 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.845944881 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.853650093 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.854768991 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.854777098 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.861244917 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.861376047 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.861382961 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.868606091 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.868652105 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.868659019 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.875384092 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.875432014 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.875438929 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.882002115 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.882051945 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.882059097 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.889441013 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.889496088 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.889503956 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.897564888 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.897649050 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.897661924 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.903393984 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.903450012 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.903734922 CEST	49821	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:08.903748035 CEST	443	49821	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:08.912043095 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:08.912089109 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:08.912161112 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:08.912381887 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:08.912398100 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.044924021 CEST	443	49825	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.045133114 CEST	49825	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.045150995 CEST	443	49825	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.046348095 CEST	443	49825	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.046644926 CEST	49825	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.046772957 CEST	49825	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.046819925 CEST	443	49825	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.097945929 CEST	49825	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.127950907 CEST	443	49826	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.128195047 CEST	49826	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.128216028 CEST	443	49826	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.128726006 CEST	443	49826	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.129049063 CEST	49826	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.129134893 CEST	443	49826	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.129159927 CEST	49826	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.138870001 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.139102936 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.139132977 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.139578104 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.139946938 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.140039921 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.140053034 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.176052094 CEST	49826	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.176070929 CEST	443	49826	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.180154085 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.180383921 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.442279100 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.443219900 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.443253994 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.443285942 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.443295002 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.443309069 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.443336964 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.450665951 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.450845003 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.450860023 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.458437920 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.458581924 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.458590031 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.466048956 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.466103077 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.466109991 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.474500895 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.474555016 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.474561930 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.507718086 CEST	443	49825	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.508040905 CEST	443	49825	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.508089066 CEST	49825	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.515151024 CEST	49825	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.515166998 CEST	443	49825	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.529774904 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.552381039 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.556194067 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.556323051 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.556428909 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.556438923 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.556480885 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.563918114 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.571571112 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.571619987 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.571677923 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.571686029 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.571738958 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.579334974 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.586982965 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.587085962 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.587091923 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.587209940 CEST	443	49826	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.587650061 CEST	443	49826	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.587800026 CEST	49826	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.588260889 CEST	49826	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.588283062 CEST	443	49826	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.591686964 CEST	49831	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.591716051 CEST	443	49831	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.591960907 CEST	49831	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.592037916 CEST	49831	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.592044115 CEST	443	49831	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.594748974 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.594789982 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.594820023 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.594829082 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.594914913 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.602375984 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.609591961 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.609769106 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.609776020 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.616694927 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.616775990 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.616782904 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.623858929 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.623899937 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.623930931 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.623939991 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.624023914 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.624036074 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.624097109 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.625624895 CEST	49830	443	192.168.2.5	172.217.215.104
Apr 25, 2024 00:55:09.625636101 CEST	443	49830	172.217.215.104	192.168.2.5
Apr 25, 2024 00:55:09.631530046 CEST	49832	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.631580114 CEST	443	49832	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:09.631639957 CEST	49832	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.631923914 CEST	49832	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:09.631942034 CEST	443	49832	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.025516033 CEST	443	49831	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.025794029 CEST	49831	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.025831938 CEST	443	49831	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.026336908 CEST	443	49831	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.026870966 CEST	49831	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.026870966 CEST	49831	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.026951075 CEST	443	49831	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.067095041 CEST	49831	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.074176073 CEST	443	49832	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.074399948 CEST	49832	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.074415922 CEST	443	49832	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.074897051 CEST	443	49832	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.075371981 CEST	49832	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.075371981 CEST	49832	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.075383902 CEST	443	49832	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.075455904 CEST	443	49832	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.115812063 CEST	49832	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.484297037 CEST	443	49831	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.484715939 CEST	443	49831	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.485042095 CEST	49831	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.485969067 CEST	49831	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.485992908 CEST	443	49831	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.536936045 CEST	443	49832	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.537686110 CEST	443	49832	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.537918091 CEST	49832	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.541964054 CEST	49832	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.541986942 CEST	443	49832	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.542681932 CEST	49833	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.542771101 CEST	443	49833	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.544152975 CEST	49833	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.544243097 CEST	49833	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.544264078 CEST	443	49833	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.600605965 CEST	49834	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.600657940 CEST	443	49834	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.600830078 CEST	49834	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.601067066 CEST	49834	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.601083040 CEST	443	49834	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.978019953 CEST	443	49833	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.978324890 CEST	49833	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.978357077 CEST	443	49833	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.978811979 CEST	443	49833	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.979171038 CEST	49833	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:10.979237080 CEST	443	49833	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:10.979331017 CEST	49833	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.024110079 CEST	443	49833	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.033834934 CEST	443	49834	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.034195900 CEST	49834	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.034223080 CEST	443	49834	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.034667969 CEST	443	49834	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.034970999 CEST	49834	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.035036087 CEST	443	49834	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.035085917 CEST	49834	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.080115080 CEST	443	49834	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.082715034 CEST	49834	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.440109015 CEST	443	49833	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.440449953 CEST	443	49833	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.440501928 CEST	49833	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.441463947 CEST	49833	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.441478968 CEST	443	49833	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.496877909 CEST	443	49834	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.497550964 CEST	443	49834	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.497602940 CEST	49834	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.498441935 CEST	49834	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.498459101 CEST	443	49834	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.501868010 CEST	49835	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.501890898 CEST	443	49835	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.501955032 CEST	49835	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.502135992 CEST	49835	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.502149105 CEST	443	49835	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.552835941 CEST	49836	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.552885056 CEST	443	49836	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.553020000 CEST	49836	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.553227901 CEST	49836	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.553240061 CEST	443	49836	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.938740969 CEST	443	49835	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.939151049 CEST	49835	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.939165115 CEST	443	49835	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.940377951 CEST	443	49835	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.940876961 CEST	49835	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.940876961 CEST	49835	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.941123962 CEST	443	49835	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.989124060 CEST	49835	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.989485979 CEST	443	49836	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.989810944 CEST	49836	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.989846945 CEST	443	49836	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.990338087 CEST	443	49836	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.990742922 CEST	49836	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:11.990834951 CEST	443	49836	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:11.990874052 CEST	49836	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.032126904 CEST	443	49836	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.035842896 CEST	49836	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.403480053 CEST	443	49835	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.404005051 CEST	443	49835	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.404896021 CEST	49835	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.405288935 CEST	49835	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.405318975 CEST	443	49835	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.451004982 CEST	443	49836	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.454233885 CEST	443	49836	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.454524994 CEST	49836	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.457285881 CEST	49837	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.457288980 CEST	49836	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.457328081 CEST	443	49837	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.457341909 CEST	443	49836	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.457510948 CEST	49837	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.457658052 CEST	49837	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.457673073 CEST	443	49837	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.506040096 CEST	49838	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.506081104 CEST	443	49838	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.506335020 CEST	49838	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.506335020 CEST	49838	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.506370068 CEST	443	49838	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.903558016 CEST	443	49837	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.904031992 CEST	49837	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.904073954 CEST	443	49837	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.904561996 CEST	443	49837	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.904970884 CEST	49837	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.905067921 CEST	443	49837	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.905376911 CEST	49837	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.931552887 CEST	443	49838	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.931960106 CEST	49838	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.931986094 CEST	443	49838	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.933135986 CEST	443	49838	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.933623075 CEST	49838	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.933809042 CEST	443	49838	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.934072018 CEST	49838	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:12.952121019 CEST	443	49837	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:12.976125002 CEST	443	49838	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:13.368454933 CEST	443	49837	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:13.369019032 CEST	443	49837	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:13.370255947 CEST	49837	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:13.381757021 CEST	443	49838	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:13.382155895 CEST	443	49838	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:13.386214018 CEST	49838	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:13.834747076 CEST	49838	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:13.834779978 CEST	443	49838	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:13.837035894 CEST	49839	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:13.837075949 CEST	443	49839	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:13.837147951 CEST	49839	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:13.837588072 CEST	49839	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:13.837599993 CEST	443	49839	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:13.837863922 CEST	49837	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:13.837894917 CEST	443	49837	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.271007061 CEST	443	49839	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.271286964 CEST	49839	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:14.271310091 CEST	443	49839	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.271755934 CEST	443	49839	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.272079945 CEST	49839	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:14.272154093 CEST	443	49839	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.272249937 CEST	49839	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:14.320106983 CEST	443	49839	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.521847963 CEST	49840	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:14.521889925 CEST	443	49840	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.521951914 CEST	49840	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:14.522599936 CEST	49840	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:14.522610903 CEST	443	49840	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.728632927 CEST	443	49839	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.729238033 CEST	443	49839	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.729461908 CEST	49839	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:14.734205961 CEST	49839	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:14.734229088 CEST	443	49839	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.735723019 CEST	49841	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:14.735768080 CEST	443	49841	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.735837936 CEST	49841	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:14.737602949 CEST	49841	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:14.737631083 CEST	443	49841	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.958312035 CEST	443	49840	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.969219923 CEST	49840	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:14.969244003 CEST	443	49840	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.969665051 CEST	443	49840	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.981664896 CEST	49840	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:14.981770992 CEST	443	49840	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:14.982162952 CEST	49840	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.028111935 CEST	443	49840	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.176656008 CEST	443	49841	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.197474003 CEST	49841	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.197511911 CEST	443	49841	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.198867083 CEST	443	49841	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.199774981 CEST	49841	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.199956894 CEST	443	49841	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.200321913 CEST	49841	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.244119883 CEST	443	49841	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.426697016 CEST	443	49840	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.427241087 CEST	443	49840	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.427301884 CEST	49840	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.429305077 CEST	49840	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.429320097 CEST	443	49840	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.431984901 CEST	49842	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.432022095 CEST	443	49842	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.432079077 CEST	49842	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.432452917 CEST	49842	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.432462931 CEST	443	49842	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.631593943 CEST	443	49841	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.632030964 CEST	443	49841	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.632106066 CEST	49841	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.632438898 CEST	49841	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.632457972 CEST	443	49841	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.633104086 CEST	49843	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.633157969 CEST	443	49843	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.633225918 CEST	49843	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.633496046 CEST	49843	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.633510113 CEST	443	49843	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.855880976 CEST	443	49842	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.856177092 CEST	49842	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.856201887 CEST	443	49842	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.856508970 CEST	443	49842	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.856815100 CEST	49842	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.856868029 CEST	443	49842	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:15.856954098 CEST	49842	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:15.900115013 CEST	443	49842	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.068624973 CEST	443	49843	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.069089890 CEST	49843	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.069152117 CEST	443	49843	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.070424080 CEST	443	49843	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.070909023 CEST	49843	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.071088076 CEST	443	49843	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.071109056 CEST	49843	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.112128019 CEST	443	49843	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.113154888 CEST	49843	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.313679934 CEST	443	49842	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.313999891 CEST	443	49842	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.314066887 CEST	49842	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.315288067 CEST	49842	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.315304995 CEST	443	49842	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.316231012 CEST	49844	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.316268921 CEST	443	49844	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.316508055 CEST	49844	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.316979885 CEST	49844	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.316992044 CEST	443	49844	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.525876045 CEST	443	49843	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.526437998 CEST	443	49843	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.526520967 CEST	49843	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.528263092 CEST	49843	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.528302908 CEST	443	49843	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.531651020 CEST	49845	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.531698942 CEST	443	49845	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.531780958 CEST	49845	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.532263041 CEST	49845	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.532284021 CEST	443	49845	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.743623018 CEST	443	49844	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.744144917 CEST	49844	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.744158030 CEST	443	49844	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.744473934 CEST	443	49844	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.745104074 CEST	49844	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.745173931 CEST	443	49844	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.745524883 CEST	49844	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.792113066 CEST	443	49844	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.961611986 CEST	443	49845	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.961896896 CEST	49845	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.961958885 CEST	443	49845	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.963124990 CEST	443	49845	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.963515997 CEST	49845	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.963660955 CEST	49845	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:16.963675022 CEST	443	49845	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:16.963706970 CEST	443	49845	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.017486095 CEST	49845	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.200680017 CEST	443	49844	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.201141119 CEST	443	49844	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.201242924 CEST	49844	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.201745987 CEST	49844	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.201769114 CEST	443	49844	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.202291012 CEST	49846	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.202337980 CEST	443	49846	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.202507973 CEST	49846	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.202709913 CEST	49846	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.202724934 CEST	443	49846	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.415649891 CEST	443	49845	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.415844917 CEST	443	49845	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.415908098 CEST	49845	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.416731119 CEST	49845	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.416754007 CEST	443	49845	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.423585892 CEST	49847	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.423624992 CEST	443	49847	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.423698902 CEST	49847	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.423979044 CEST	49847	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.423995018 CEST	443	49847	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.633968115 CEST	443	49846	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.634346962 CEST	49846	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.634385109 CEST	443	49846	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.634697914 CEST	443	49846	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.635373116 CEST	49846	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.635432005 CEST	443	49846	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.635653019 CEST	49846	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.676126003 CEST	443	49846	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.864953041 CEST	443	49847	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.908952951 CEST	49847	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.915261984 CEST	49847	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.915272951 CEST	443	49847	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.916821957 CEST	443	49847	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.918395042 CEST	49847	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.918592930 CEST	443	49847	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:17.918819904 CEST	49847	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:17.964116096 CEST	443	49847	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.096988916 CEST	443	49846	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.097206116 CEST	443	49846	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.097286940 CEST	49846	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.098793030 CEST	49846	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.098834991 CEST	443	49846	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.099827051 CEST	49848	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.099917889 CEST	443	49848	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.100001097 CEST	49848	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.100482941 CEST	49848	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.100517988 CEST	443	49848	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.331446886 CEST	443	49847	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.331640005 CEST	443	49847	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.331778049 CEST	49847	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.333137989 CEST	49847	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.333180904 CEST	443	49847	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.334433079 CEST	49849	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.334485054 CEST	443	49849	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.334551096 CEST	49849	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.334808111 CEST	49849	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.334826946 CEST	443	49849	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.530668974 CEST	443	49848	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.530935049 CEST	49848	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.530968904 CEST	443	49848	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.531285048 CEST	443	49848	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.531800985 CEST	49848	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.531856060 CEST	443	49848	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.532114983 CEST	49848	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.576117039 CEST	443	49848	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.777983904 CEST	443	49849	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.778332949 CEST	49849	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.778393984 CEST	443	49849	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.778878927 CEST	443	49849	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.779459000 CEST	49849	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.779537916 CEST	443	49849	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.779800892 CEST	49849	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:18.824120045 CEST	443	49849	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.989262104 CEST	443	49848	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.989708900 CEST	443	49848	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:18.989806890 CEST	49848	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.000041008 CEST	49848	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.000082016 CEST	443	49848	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.000972033 CEST	49850	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.001003981 CEST	443	49850	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.001055956 CEST	49850	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.001611948 CEST	49850	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.001625061 CEST	443	49850	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.249696970 CEST	443	49849	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.250191927 CEST	443	49849	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.250247002 CEST	49849	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.250852108 CEST	49849	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.250874996 CEST	443	49849	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.252569914 CEST	49851	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.252609015 CEST	443	49851	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.252670050 CEST	49851	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.253330946 CEST	49851	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.253341913 CEST	443	49851	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.425188065 CEST	443	49850	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.425456047 CEST	49850	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.425484896 CEST	443	49850	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.425818920 CEST	443	49850	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.426222086 CEST	49850	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.426264048 CEST	443	49850	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.426373005 CEST	49850	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.472110033 CEST	443	49850	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.684787989 CEST	443	49851	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.685084105 CEST	49851	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.685107946 CEST	443	49851	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.686292887 CEST	443	49851	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.686676025 CEST	49851	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.686808109 CEST	49851	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.686813116 CEST	443	49851	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.686850071 CEST	443	49851	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.741070032 CEST	49851	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.880815983 CEST	443	49850	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.881783009 CEST	443	49850	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.882739067 CEST	49852	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.882785082 CEST	443	49852	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.882896900 CEST	49850	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.882906914 CEST	49852	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.883153915 CEST	49852	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.883172989 CEST	443	49852	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:19.883196115 CEST	49850	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:19.883213043 CEST	443	49850	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.149442911 CEST	443	49851	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.149625063 CEST	443	49851	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.150125980 CEST	49851	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.151830912 CEST	49851	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.151849031 CEST	443	49851	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.168916941 CEST	49853	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.168953896 CEST	443	49853	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.169112921 CEST	49853	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.169259071 CEST	49853	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.169277906 CEST	443	49853	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.315114021 CEST	443	49852	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.315357924 CEST	49852	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.315376043 CEST	443	49852	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.315680981 CEST	443	49852	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.316118002 CEST	49852	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.316118002 CEST	49852	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.316164970 CEST	443	49852	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.359611988 CEST	49852	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.597575903 CEST	443	49853	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.597888947 CEST	49853	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.597914934 CEST	443	49853	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.598400116 CEST	443	49853	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.598957062 CEST	49853	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.598957062 CEST	49853	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.598972082 CEST	443	49853	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.599042892 CEST	443	49853	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.640836000 CEST	49853	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.778620958 CEST	443	49852	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.779052019 CEST	443	49852	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.779129028 CEST	49852	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.779926062 CEST	49852	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.779951096 CEST	443	49852	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.780791998 CEST	49854	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.780824900 CEST	443	49854	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:20.780914068 CEST	49854	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.782020092 CEST	49854	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:20.782036066 CEST	443	49854	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.050946951 CEST	443	49853	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.051547050 CEST	443	49853	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.051605940 CEST	49853	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.052902937 CEST	49853	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.052920103 CEST	443	49853	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.142817020 CEST	49855	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.142914057 CEST	443	49855	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.143002987 CEST	49855	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.143863916 CEST	49855	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.143903017 CEST	443	49855	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.217164040 CEST	443	49854	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.217474937 CEST	49854	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.217487097 CEST	443	49854	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.217840910 CEST	443	49854	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.218169928 CEST	49854	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.218235016 CEST	443	49854	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.218305111 CEST	49854	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.264113903 CEST	443	49854	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.271162033 CEST	49854	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.579922915 CEST	443	49855	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.580291986 CEST	49855	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.580353975 CEST	443	49855	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.580678940 CEST	443	49855	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.580997944 CEST	49855	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.581068039 CEST	443	49855	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.581140995 CEST	49855	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.624123096 CEST	443	49855	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.684396029 CEST	443	49854	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.684645891 CEST	443	49854	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.684700966 CEST	49854	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.685556889 CEST	49854	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.685575962 CEST	443	49854	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.686162949 CEST	49856	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.686249018 CEST	443	49856	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:21.686317921 CEST	49856	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.686657906 CEST	49856	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:21.686691999 CEST	443	49856	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.041409969 CEST	443	49855	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.042354107 CEST	443	49855	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.042440891 CEST	49855	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.042952061 CEST	49855	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.042973995 CEST	443	49855	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.099278927 CEST	49857	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.099328995 CEST	443	49857	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.099544048 CEST	49857	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.099746943 CEST	49857	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.099761009 CEST	443	49857	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.138883114 CEST	443	49856	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.142592907 CEST	49856	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.142631054 CEST	443	49856	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.142942905 CEST	443	49856	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.143460035 CEST	49856	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.143520117 CEST	443	49856	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.143608093 CEST	49856	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.188122988 CEST	443	49856	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.196069002 CEST	49856	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.538100958 CEST	443	49857	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.539298058 CEST	49857	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.539324999 CEST	443	49857	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.539632082 CEST	443	49857	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.540808916 CEST	49857	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.540865898 CEST	443	49857	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.541440964 CEST	49857	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.588114023 CEST	443	49857	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.604154110 CEST	443	49856	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.604921103 CEST	443	49856	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.605359077 CEST	49856	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.605818033 CEST	49856	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.605839968 CEST	443	49856	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.607139111 CEST	49858	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.607168913 CEST	443	49858	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.607539892 CEST	49858	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.607821941 CEST	49858	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:22.607836962 CEST	443	49858	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:22.969357967 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:22.969393969 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:22.969516993 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:22.971477032 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:22.971493006 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:23.008433104 CEST	443	49857	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.008505106 CEST	443	49857	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.008625984 CEST	49857	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.032051086 CEST	49857	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.032071114 CEST	443	49857	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.037019014 CEST	443	49858	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.037296057 CEST	49858	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.037307024 CEST	443	49858	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.037609100 CEST	443	49858	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.038944960 CEST	49858	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.039004087 CEST	443	49858	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.039576054 CEST	49858	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.084115982 CEST	443	49858	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.455353022 CEST	49860	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.455437899 CEST	443	49860	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.455660105 CEST	49860	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.456057072 CEST	49860	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.456090927 CEST	443	49860	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.495625973 CEST	443	49858	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.495810986 CEST	443	49858	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.495893002 CEST	49858	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.543181896 CEST	49858	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.543204069 CEST	443	49858	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.544089079 CEST	49861	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.544182062 CEST	443	49861	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.544262886 CEST	49861	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.544481039 CEST	49861	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.544516087 CEST	443	49861	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.588010073 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:23.588089943 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:23.631752968 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:23.631772995 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:23.632184029 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:23.653666973 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:23.700123072 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:23.892807961 CEST	443	49860	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.893337965 CEST	49860	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.893399954 CEST	443	49860	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.893735886 CEST	443	49860	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.894576073 CEST	49860	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.894644976 CEST	443	49860	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.894798040 CEST	49860	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.936125040 CEST	443	49860	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.936800957 CEST	49860	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.972198963 CEST	443	49861	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.972691059 CEST	49861	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.972713947 CEST	443	49861	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.973009109 CEST	443	49861	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.973531961 CEST	49861	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:23.973582983 CEST	443	49861	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:23.973926067 CEST	49861	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.020112991 CEST	443	49861	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.186285973 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:24.186345100 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:24.186388016 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:24.186465979 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:24.186466932 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:24.186484098 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:24.186549902 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:24.186553955 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:24.186582088 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:24.186614990 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:24.186630964 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:24.186630964 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:24.186640024 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:24.186745882 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:24.186752081 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:24.186777115 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:24.186836958 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:24.202047110 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:24.202047110 CEST	49859	443	192.168.2.5	40.127.169.103
Apr 25, 2024 00:55:24.202069044 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:24.202075958 CEST	443	49859	40.127.169.103	192.168.2.5
Apr 25, 2024 00:55:24.362402916 CEST	443	49860	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.362777948 CEST	443	49860	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.363063097 CEST	49860	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.364669085 CEST	49860	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.364712000 CEST	443	49860	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.369441986 CEST	49862	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.369467020 CEST	443	49862	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.369535923 CEST	49862	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.369910955 CEST	49862	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.369918108 CEST	443	49862	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.429547071 CEST	443	49861	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.430180073 CEST	443	49861	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.430241108 CEST	49861	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.430732965 CEST	49863	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.430778980 CEST	443	49863	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.430815935 CEST	49861	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.430835962 CEST	49863	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.430871964 CEST	443	49861	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.431216002 CEST	49863	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.431235075 CEST	443	49863	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.803039074 CEST	443	49862	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.803344011 CEST	49862	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.803354979 CEST	443	49862	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.803647995 CEST	443	49862	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.804117918 CEST	49862	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.804163933 CEST	443	49862	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.804280996 CEST	49862	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.852113962 CEST	443	49862	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.859791040 CEST	443	49863	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.870884895 CEST	49863	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.870910883 CEST	443	49863	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.871223927 CEST	443	49863	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.871934891 CEST	49863	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.871997118 CEST	443	49863	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:24.872138023 CEST	49863	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:24.920113087 CEST	443	49863	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.265166044 CEST	443	49862	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.265526056 CEST	443	49862	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.265571117 CEST	49862	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.268731117 CEST	49862	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.268740892 CEST	443	49862	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.272269964 CEST	49864	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.272305965 CEST	443	49864	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.272418976 CEST	49864	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.272861004 CEST	49864	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.272875071 CEST	443	49864	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.321099997 CEST	443	49863	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.321614981 CEST	443	49863	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.321726084 CEST	49863	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.323509932 CEST	49863	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.323534012 CEST	443	49863	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.324913979 CEST	49865	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.324995995 CEST	443	49865	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.325063944 CEST	49865	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.325419903 CEST	49865	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.325454950 CEST	443	49865	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.692059040 CEST	443	49864	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.696345091 CEST	49864	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.696365118 CEST	443	49864	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.696683884 CEST	443	49864	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.699412107 CEST	49864	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.699470043 CEST	443	49864	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.699599028 CEST	49864	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.744115114 CEST	443	49864	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.746929884 CEST	443	49865	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.747781992 CEST	49865	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.747802019 CEST	443	49865	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.748125076 CEST	443	49865	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.748821974 CEST	49865	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.748878002 CEST	443	49865	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:25.749288082 CEST	49865	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:25.796113014 CEST	443	49865	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.150298119 CEST	443	49864	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.150754929 CEST	443	49864	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.150871992 CEST	49864	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.151458025 CEST	49864	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.151479959 CEST	443	49864	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.161293983 CEST	49866	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.161381006 CEST	443	49866	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.161849022 CEST	49866	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.162041903 CEST	49866	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.162071943 CEST	443	49866	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.198569059 CEST	443	49865	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.199193001 CEST	443	49865	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.199264050 CEST	49865	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.199907064 CEST	49865	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.199949026 CEST	443	49865	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.201096058 CEST	49867	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.201179028 CEST	443	49867	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.201261997 CEST	49867	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.201556921 CEST	49867	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.201592922 CEST	443	49867	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.582663059 CEST	443	49866	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.635350943 CEST	443	49867	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.638087034 CEST	49866	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.684968948 CEST	49867	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.723766088 CEST	49867	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.723812103 CEST	443	49867	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.723865986 CEST	49866	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.723896980 CEST	443	49866	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.724293947 CEST	443	49867	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.724322081 CEST	443	49866	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.724663019 CEST	49866	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.724730015 CEST	443	49866	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.725059986 CEST	49867	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.725137949 CEST	443	49867	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.725239038 CEST	49866	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.725281000 CEST	49867	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:26.772118092 CEST	443	49867	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:26.772138119 CEST	443	49866	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.032233953 CEST	443	49866	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.032788038 CEST	443	49866	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.032865047 CEST	49866	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.034373045 CEST	49866	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.034418106 CEST	443	49866	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.035335064 CEST	49868	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.035357952 CEST	443	49868	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.035439014 CEST	49868	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.036191940 CEST	49868	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.036200047 CEST	443	49868	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.095560074 CEST	443	49867	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.095947027 CEST	443	49867	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.096018076 CEST	49867	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.096602917 CEST	49867	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.096642017 CEST	443	49867	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.097270012 CEST	49869	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.097306013 CEST	443	49869	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.097361088 CEST	49869	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.097939968 CEST	49869	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.097958088 CEST	443	49869	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.459250927 CEST	443	49868	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.459618092 CEST	49868	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.459630013 CEST	443	49868	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.459922075 CEST	443	49868	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.460310936 CEST	49868	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.460355997 CEST	443	49868	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.460459948 CEST	49868	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.508116007 CEST	443	49868	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.535577059 CEST	443	49869	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.535854101 CEST	49869	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.535887003 CEST	443	49869	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.537029028 CEST	443	49869	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.537412882 CEST	49869	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.537549019 CEST	49869	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.537595034 CEST	443	49869	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.584494114 CEST	49869	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.913528919 CEST	443	49868	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.913669109 CEST	443	49868	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.913721085 CEST	49868	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.915041924 CEST	49868	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.915054083 CEST	443	49868	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.915740967 CEST	49870	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.915785074 CEST	443	49870	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.915853977 CEST	49870	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.916544914 CEST	49870	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.916568041 CEST	443	49870	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.997591972 CEST	443	49869	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.998140097 CEST	443	49869	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.998203039 CEST	49869	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.998594999 CEST	49869	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.998615980 CEST	443	49869	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.999330044 CEST	49871	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.999424934 CEST	443	49871	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:27.999500036 CEST	49871	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.999943972 CEST	49871	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:27.999979973 CEST	443	49871	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.347089052 CEST	443	49870	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.347439051 CEST	49870	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.347496986 CEST	443	49870	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.347832918 CEST	443	49870	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.348238945 CEST	49870	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.348318100 CEST	443	49870	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.348390102 CEST	49870	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.392143011 CEST	443	49870	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.422353983 CEST	443	49871	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.422647953 CEST	49871	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.422698021 CEST	443	49871	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.423065901 CEST	443	49871	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.423401117 CEST	49871	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.423485041 CEST	443	49871	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.423538923 CEST	49871	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.468113899 CEST	443	49871	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.474654913 CEST	49871	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.805785894 CEST	443	49870	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.806164980 CEST	443	49870	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.806951046 CEST	49870	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.807928085 CEST	49870	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.807966948 CEST	443	49870	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.808605909 CEST	49872	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.808689117 CEST	443	49872	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.808846951 CEST	49872	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.809513092 CEST	49872	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.809550047 CEST	443	49872	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.876360893 CEST	443	49871	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.877000093 CEST	443	49871	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.877208948 CEST	49871	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.877717018 CEST	49873	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.877785921 CEST	443	49873	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.877923012 CEST	49871	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.877944946 CEST	443	49871	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:28.878055096 CEST	49873	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.878385067 CEST	49873	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:28.878417015 CEST	443	49873	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.244553089 CEST	443	49872	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.245394945 CEST	49872	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.245455980 CEST	443	49872	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.245800972 CEST	443	49872	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.246367931 CEST	49872	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.246437073 CEST	443	49872	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.246676922 CEST	49872	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.292025089 CEST	49872	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.292042971 CEST	443	49872	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.305121899 CEST	443	49873	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.305605888 CEST	49873	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.305661917 CEST	443	49873	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.305963039 CEST	443	49873	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.306396961 CEST	49873	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.306396961 CEST	49873	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.306466103 CEST	443	49873	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.353811026 CEST	49873	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.717116117 CEST	443	49872	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.717173100 CEST	443	49872	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.717324018 CEST	49872	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.719825029 CEST	49872	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.719882011 CEST	443	49872	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.757563114 CEST	49875	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.757581949 CEST	443	49875	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.757738113 CEST	49875	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.758308887 CEST	49875	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.758318901 CEST	443	49875	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.765002012 CEST	443	49873	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.765114069 CEST	443	49873	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.765204906 CEST	49873	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.766421080 CEST	49873	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.766457081 CEST	443	49873	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.768126011 CEST	49876	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.768172979 CEST	443	49876	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:29.768321991 CEST	49876	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.768517017 CEST	49876	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:29.768536091 CEST	443	49876	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.176320076 CEST	443	49875	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.176577091 CEST	49875	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.176588058 CEST	443	49875	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.176903009 CEST	443	49875	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.177241087 CEST	49875	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.177284002 CEST	443	49875	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.177378893 CEST	49875	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.203295946 CEST	443	49876	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.203610897 CEST	49876	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.203636885 CEST	443	49876	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.204782009 CEST	443	49876	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.205188036 CEST	49876	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.205302000 CEST	49876	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.205421925 CEST	443	49876	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.224108934 CEST	443	49875	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.252258062 CEST	49876	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.626779079 CEST	443	49875	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.626890898 CEST	443	49875	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.626970053 CEST	49875	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.631213903 CEST	49875	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.631225109 CEST	443	49875	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.664084911 CEST	443	49876	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.664774895 CEST	443	49876	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.664836884 CEST	49876	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.687172890 CEST	49876	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.687237024 CEST	443	49876	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.689165115 CEST	49877	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.689249992 CEST	443	49877	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.689323902 CEST	49877	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.690100908 CEST	49877	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.690131903 CEST	443	49877	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.715586901 CEST	49878	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.715665102 CEST	443	49878	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:30.715734959 CEST	49878	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.716315985 CEST	49878	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:30.716351032 CEST	443	49878	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.125874043 CEST	443	49877	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.145814896 CEST	443	49878	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.162508965 CEST	49878	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.162550926 CEST	443	49878	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.162718058 CEST	49877	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.162775040 CEST	443	49877	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.163136005 CEST	443	49877	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.163887978 CEST	443	49878	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.164630890 CEST	49877	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.164700031 CEST	443	49877	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.170687914 CEST	49878	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.170794010 CEST	443	49878	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.171052933 CEST	49877	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.171339035 CEST	49878	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.216114998 CEST	443	49877	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.216120958 CEST	443	49878	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.595354080 CEST	443	49877	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.595469952 CEST	443	49877	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.595833063 CEST	49877	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.596203089 CEST	49877	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.596239090 CEST	443	49877	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.604571104 CEST	443	49878	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.604799032 CEST	443	49878	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.604963064 CEST	49878	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.605220079 CEST	49878	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.605251074 CEST	443	49878	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.898201942 CEST	49879	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.898243904 CEST	443	49879	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.898364067 CEST	49879	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.899138927 CEST	49879	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.899156094 CEST	443	49879	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.906207085 CEST	49880	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.906243086 CEST	443	49880	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:31.906316996 CEST	49880	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.906948090 CEST	49880	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:31.906961918 CEST	443	49880	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.325573921 CEST	443	49879	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.325928926 CEST	49879	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.325941086 CEST	443	49879	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.326245070 CEST	443	49879	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.327009916 CEST	49879	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.327065945 CEST	443	49879	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.327193022 CEST	49879	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.335099936 CEST	443	49880	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.335453987 CEST	49880	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.335470915 CEST	443	49880	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.335948944 CEST	443	49880	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.336328030 CEST	49880	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.336409092 CEST	443	49880	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.336453915 CEST	49880	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.368474960 CEST	49879	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.368483067 CEST	443	49879	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.380142927 CEST	443	49880	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.384048939 CEST	49880	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.783592939 CEST	443	49879	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.784504890 CEST	443	49879	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.784564972 CEST	49879	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.786262035 CEST	49879	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.786279917 CEST	443	49879	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.789740086 CEST	49881	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.789762974 CEST	443	49881	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.789918900 CEST	49881	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.790478945 CEST	49881	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.790486097 CEST	443	49881	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.796274900 CEST	443	49880	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.797035933 CEST	443	49880	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.797111034 CEST	49880	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.797673941 CEST	49882	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.797751904 CEST	443	49882	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.797833920 CEST	49882	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.798306942 CEST	49882	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.798340082 CEST	443	49882	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:32.798666954 CEST	49880	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:32.798683882 CEST	443	49880	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.228902102 CEST	443	49881	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.229204893 CEST	49881	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.229218006 CEST	443	49881	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.229510069 CEST	443	49881	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.229739904 CEST	443	49882	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.229924917 CEST	49881	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.229975939 CEST	443	49881	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.230112076 CEST	49882	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.230174065 CEST	443	49882	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.230233908 CEST	49881	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.231328964 CEST	443	49882	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.231659889 CEST	49882	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.231765985 CEST	49882	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.231843948 CEST	443	49882	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.272120953 CEST	443	49881	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.285192966 CEST	49882	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.540476084 CEST	49883	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:33.540525913 CEST	443	49883	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:33.540590048 CEST	49883	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:33.541332006 CEST	49883	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:33.541352034 CEST	443	49883	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:33.680588007 CEST	443	49882	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.680789948 CEST	443	49882	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.680872917 CEST	49882	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.687313080 CEST	49882	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.687350988 CEST	443	49882	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.695111990 CEST	443	49881	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.695549965 CEST	443	49881	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.695591927 CEST	49881	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.762106895 CEST	49881	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.762120962 CEST	443	49881	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.765152931 CEST	49884	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.765240908 CEST	443	49884	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.765326977 CEST	49884	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.765702963 CEST	49884	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.765729904 CEST	443	49884	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.770452023 CEST	49885	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.770490885 CEST	443	49885	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.770585060 CEST	49885	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.770924091 CEST	49885	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:33.770939112 CEST	443	49885	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:33.777549982 CEST	443	49883	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:33.778040886 CEST	49883	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:33.778065920 CEST	443	49883	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:33.779186964 CEST	443	49883	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:33.779938936 CEST	49883	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:33.780142069 CEST	443	49883	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:33.834182978 CEST	49883	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:34.191369057 CEST	443	49884	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.191759109 CEST	49884	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.191796064 CEST	443	49884	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.192096949 CEST	443	49884	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.193352938 CEST	49884	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.193416119 CEST	443	49884	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.195795059 CEST	49884	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.211797953 CEST	443	49885	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.212119102 CEST	49885	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.212131023 CEST	443	49885	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.213259935 CEST	443	49885	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.213711023 CEST	49885	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.213881969 CEST	443	49885	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.213975906 CEST	49885	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.236151934 CEST	443	49884	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.256140947 CEST	443	49885	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.652895927 CEST	443	49884	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.653471947 CEST	443	49884	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.653537989 CEST	49884	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.653924942 CEST	49884	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.653959990 CEST	443	49884	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.743665934 CEST	49886	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.743707895 CEST	443	49886	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.744021893 CEST	49886	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.744249105 CEST	49886	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.744266033 CEST	443	49886	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.966290951 CEST	443	49885	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.966480970 CEST	443	49885	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.966924906 CEST	49885	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.967472076 CEST	49885	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.967490911 CEST	443	49885	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.968168020 CEST	49887	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.968240023 CEST	443	49887	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:34.969346046 CEST	49887	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.969672918 CEST	49887	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:34.969703913 CEST	443	49887	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.182542086 CEST	443	49886	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.239021063 CEST	49886	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.318217993 CEST	49886	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.318233967 CEST	443	49886	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.318556070 CEST	443	49886	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.319051981 CEST	49886	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.319111109 CEST	443	49886	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.319214106 CEST	49886	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.364119053 CEST	443	49886	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.368730068 CEST	49886	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.406341076 CEST	443	49887	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.426376104 CEST	49887	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.426424980 CEST	443	49887	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.427671909 CEST	443	49887	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.428339958 CEST	49887	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.428339958 CEST	49887	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.428528070 CEST	443	49887	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.480237961 CEST	49887	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.651262045 CEST	443	49886	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.651797056 CEST	443	49886	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.651949883 CEST	49886	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.662822008 CEST	49886	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.662847042 CEST	443	49886	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.664272070 CEST	49888	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.664297104 CEST	443	49888	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.664351940 CEST	49888	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.665393114 CEST	49888	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.665412903 CEST	443	49888	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.871124983 CEST	443	49887	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.872077942 CEST	443	49887	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.872165918 CEST	49887	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.872951984 CEST	49887	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.872992039 CEST	443	49887	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.873996019 CEST	49889	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.874043941 CEST	443	49889	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:35.874123096 CEST	49889	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.875152111 CEST	49889	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:35.875178099 CEST	443	49889	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.096048117 CEST	443	49888	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.096302032 CEST	49888	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.096333027 CEST	443	49888	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.096640110 CEST	443	49888	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.097289085 CEST	49888	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.097289085 CEST	49888	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.097311020 CEST	443	49888	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.097353935 CEST	443	49888	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.151201963 CEST	49888	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.312849045 CEST	443	49889	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.313128948 CEST	49889	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.313158989 CEST	443	49889	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.314392090 CEST	443	49889	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.314774036 CEST	49889	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.314857006 CEST	443	49889	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.315108061 CEST	49889	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.356137991 CEST	443	49889	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.559894085 CEST	443	49888	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.560035944 CEST	443	49888	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.560096979 CEST	49888	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.560738087 CEST	49888	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.560780048 CEST	443	49888	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.561846972 CEST	49890	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.561935902 CEST	443	49890	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.562030077 CEST	49890	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.562990904 CEST	49890	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.563040972 CEST	443	49890	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.772037983 CEST	443	49889	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.772576094 CEST	443	49889	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.773317099 CEST	49891	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.773350954 CEST	443	49891	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.773391962 CEST	49889	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.773624897 CEST	49891	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.773624897 CEST	49891	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.773660898 CEST	443	49891	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.774008036 CEST	49889	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.774060011 CEST	443	49889	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.983316898 CEST	443	49890	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.983616114 CEST	49890	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.983637094 CEST	443	49890	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.983947039 CEST	443	49890	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.984417915 CEST	49890	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.984417915 CEST	49890	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:36.984436989 CEST	443	49890	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:36.984481096 CEST	443	49890	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:37.035459995 CEST	49890	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.212129116 CEST	443	49891	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:37.212445021 CEST	49891	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.212460041 CEST	443	49891	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:37.213594913 CEST	443	49891	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:37.214068890 CEST	49891	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.214068890 CEST	49891	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.214242935 CEST	443	49891	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:37.254174948 CEST	49891	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.437423944 CEST	443	49890	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:37.438091040 CEST	443	49890	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:37.438437939 CEST	49890	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.438641071 CEST	49892	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.438728094 CEST	443	49892	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:37.438822985 CEST	49890	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.438824892 CEST	49892	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.438853979 CEST	443	49890	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:37.439254999 CEST	49892	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.439291954 CEST	443	49892	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:37.676878929 CEST	443	49891	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:37.677566051 CEST	443	49891	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:37.677647114 CEST	49891	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.678312063 CEST	49893	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.678394079 CEST	443	49893	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:37.678479910 CEST	49893	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.678690910 CEST	49893	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.678724051 CEST	443	49893	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:37.678785086 CEST	49891	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:37.678807020 CEST	443	49891	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.109611034 CEST	443	49893	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.109894991 CEST	49893	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.109930992 CEST	443	49893	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.111042976 CEST	443	49893	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.113679886 CEST	49893	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.113850117 CEST	49893	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.113863945 CEST	443	49893	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.160123110 CEST	443	49893	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.160336018 CEST	49893	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.498487949 CEST	443	49892	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.498748064 CEST	49892	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.498790979 CEST	443	49892	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.499120951 CEST	443	49892	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.499511957 CEST	49892	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.499583960 CEST	443	49892	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.499634981 CEST	49892	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.544116020 CEST	443	49892	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.550986052 CEST	49892	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.565346003 CEST	443	49893	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.565764904 CEST	443	49893	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.565840960 CEST	49893	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.566131115 CEST	49893	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.566162109 CEST	443	49893	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.961525917 CEST	443	49892	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.962049961 CEST	443	49892	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.962308884 CEST	49892	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.962874889 CEST	49894	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.962914944 CEST	443	49894	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.963098049 CEST	49894	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.963114977 CEST	49892	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.963146925 CEST	443	49892	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.963525057 CEST	49894	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.963540077 CEST	443	49894	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.966330051 CEST	49895	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.966348886 CEST	443	49895	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:38.966417074 CEST	49895	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.966617107 CEST	49895	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:38.966629028 CEST	443	49895	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.402273893 CEST	443	49895	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.402919054 CEST	49895	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.402945042 CEST	443	49895	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.404088974 CEST	443	49895	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.404711962 CEST	443	49894	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.405132055 CEST	49895	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.405240059 CEST	443	49895	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.405652046 CEST	49894	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.405689955 CEST	443	49894	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.406033039 CEST	443	49894	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.406045914 CEST	49895	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.408509016 CEST	49894	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.408571005 CEST	443	49894	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.411046982 CEST	49894	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.448160887 CEST	443	49895	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.452119112 CEST	443	49894	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.864583015 CEST	443	49894	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.865063906 CEST	443	49894	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.865123034 CEST	49894	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.867290974 CEST	443	49895	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.867453098 CEST	443	49895	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.867506027 CEST	49895	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.869468927 CEST	49894	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.869492054 CEST	443	49894	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.871627092 CEST	49896	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.871711969 CEST	443	49896	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.871778011 CEST	49896	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.874037027 CEST	49896	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.874073029 CEST	443	49896	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.880975008 CEST	49895	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.880990028 CEST	443	49895	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.887769938 CEST	49897	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.887800932 CEST	443	49897	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:39.887859106 CEST	49897	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.888256073 CEST	49897	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:39.888268948 CEST	443	49897	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.305346012 CEST	443	49896	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.305594921 CEST	49896	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.305658102 CEST	443	49896	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.306000948 CEST	443	49896	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.306294918 CEST	49896	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.306364059 CEST	443	49896	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.306405067 CEST	49896	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.316668987 CEST	443	49897	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.316895962 CEST	49897	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.316909075 CEST	443	49897	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.317414999 CEST	443	49897	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.317765951 CEST	49897	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.317843914 CEST	443	49897	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.317965031 CEST	49897	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.352109909 CEST	443	49896	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.360070944 CEST	49896	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.360162020 CEST	443	49897	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.768857956 CEST	443	49896	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.769948959 CEST	443	49896	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.770342112 CEST	49896	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.770431042 CEST	443	49897	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.770595074 CEST	443	49897	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.771193981 CEST	49898	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.771281004 CEST	443	49898	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.771317959 CEST	49897	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.771692991 CEST	49898	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.773122072 CEST	49898	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.773124933 CEST	49896	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.773159027 CEST	443	49898	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.773169994 CEST	443	49896	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.776127100 CEST	49897	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.776143074 CEST	443	49897	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.781177998 CEST	49899	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.781219959 CEST	443	49899	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:40.781510115 CEST	49899	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.784041882 CEST	49899	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:40.784059048 CEST	443	49899	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.206630945 CEST	443	49898	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.207305908 CEST	49898	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.207341909 CEST	443	49898	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.207670927 CEST	443	49898	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.208884001 CEST	49898	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.208956003 CEST	443	49898	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.209186077 CEST	49898	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.219542027 CEST	443	49899	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.219971895 CEST	49899	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.219985962 CEST	443	49899	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.221168995 CEST	443	49899	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.226160049 CEST	49899	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.226242065 CEST	443	49899	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.228049040 CEST	49899	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.252120018 CEST	443	49898	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.268150091 CEST	443	49899	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.669972897 CEST	443	49898	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.670342922 CEST	443	49898	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.670414925 CEST	49898	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.670907974 CEST	49898	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.670947075 CEST	443	49898	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.671628952 CEST	49900	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.671669006 CEST	443	49900	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.671736956 CEST	49900	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.672013998 CEST	49900	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.672029972 CEST	443	49900	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.680915117 CEST	443	49899	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.681402922 CEST	443	49899	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.681478977 CEST	49899	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.681752920 CEST	49899	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.681796074 CEST	443	49899	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.811384916 CEST	49901	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.811414957 CEST	443	49901	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:41.811484098 CEST	49901	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.813435078 CEST	49901	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:41.813446999 CEST	443	49901	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.102668047 CEST	443	49900	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.103380919 CEST	49900	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.103401899 CEST	443	49900	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.103893042 CEST	443	49900	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.104784966 CEST	49900	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.104868889 CEST	443	49900	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.105566978 CEST	49900	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.152127028 CEST	443	49900	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.244044065 CEST	443	49901	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.244349957 CEST	49901	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.244376898 CEST	443	49901	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.245033026 CEST	443	49901	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.246263981 CEST	49901	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.246349096 CEST	443	49901	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.247081041 CEST	49901	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.292121887 CEST	443	49901	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.698914051 CEST	443	49901	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.699505091 CEST	443	49901	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.699594975 CEST	49901	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.700459003 CEST	49901	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.700480938 CEST	443	49901	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.828177929 CEST	443	49900	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.828349113 CEST	443	49900	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.828933954 CEST	49900	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.829607010 CEST	49900	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.829629898 CEST	443	49900	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.833549023 CEST	49902	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.833636999 CEST	443	49902	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.834440947 CEST	49902	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.834927082 CEST	49902	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.834964037 CEST	443	49902	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.837800026 CEST	49903	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.837845087 CEST	443	49903	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:42.837955952 CEST	49903	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.838287115 CEST	49903	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:42.838306904 CEST	443	49903	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.257762909 CEST	443	49902	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.258224010 CEST	49902	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.258287907 CEST	443	49902	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.259450912 CEST	443	49902	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.260060072 CEST	49902	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.260262012 CEST	443	49902	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.260435104 CEST	49902	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.270428896 CEST	443	49903	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.270853043 CEST	49903	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.270910978 CEST	443	49903	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.272223949 CEST	443	49903	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.272844076 CEST	49903	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.273046017 CEST	443	49903	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.273211956 CEST	49903	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.308113098 CEST	443	49902	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.316147089 CEST	443	49903	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.705959082 CEST	443	49902	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.706402063 CEST	443	49902	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.707027912 CEST	49902	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.725502014 CEST	443	49903	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.725775003 CEST	443	49903	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.725857019 CEST	49903	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.790273905 CEST	443	49883	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:43.790446997 CEST	443	49883	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:43.790524960 CEST	49883	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:43.855532885 CEST	49903	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.855576992 CEST	443	49903	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.856149912 CEST	49902	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.856195927 CEST	443	49902	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.856976986 CEST	49883	443	192.168.2.5	74.125.136.103
Apr 25, 2024 00:55:43.857003927 CEST	443	49883	74.125.136.103	192.168.2.5
Apr 25, 2024 00:55:43.857275009 CEST	49904	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.857316971 CEST	443	49904	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.857444048 CEST	49904	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.858088970 CEST	49904	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.858117104 CEST	443	49904	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.863425016 CEST	49905	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.863468885 CEST	443	49905	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:43.863534927 CEST	49905	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.863802910 CEST	49905	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:43.863837957 CEST	443	49905	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.290666103 CEST	443	49904	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.291176081 CEST	49904	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.291234016 CEST	443	49904	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.292581081 CEST	443	49904	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.293189049 CEST	49904	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.293343067 CEST	49904	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.293354034 CEST	443	49904	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.293468952 CEST	443	49904	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.309509039 CEST	443	49905	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.309750080 CEST	49905	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.309811115 CEST	443	49905	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.311022997 CEST	443	49905	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.311489105 CEST	49905	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.311614037 CEST	49905	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.311677933 CEST	443	49905	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.337445021 CEST	49904	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.353087902 CEST	49905	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.752850056 CEST	443	49904	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.753088951 CEST	443	49904	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.753166914 CEST	49904	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.753741026 CEST	49904	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.753774881 CEST	443	49904	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.754745007 CEST	49906	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.754780054 CEST	443	49906	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.754842997 CEST	49906	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.755394936 CEST	49906	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.755409002 CEST	443	49906	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.783323050 CEST	443	49905	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.783751011 CEST	443	49905	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.783838987 CEST	49905	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.784390926 CEST	49907	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.784427881 CEST	443	49907	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.784552097 CEST	49905	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.784584045 CEST	49907	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.784596920 CEST	443	49905	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:44.785176039 CEST	49907	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:44.785191059 CEST	443	49907	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.189228058 CEST	443	49906	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.189496994 CEST	49906	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.189531088 CEST	443	49906	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.190001011 CEST	443	49906	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.190320015 CEST	49906	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.190403938 CEST	443	49906	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.190464020 CEST	49906	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.216633081 CEST	443	49907	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.216860056 CEST	49907	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.216881990 CEST	443	49907	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.217361927 CEST	443	49907	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.217755079 CEST	49907	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.217833996 CEST	443	49907	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.217866898 CEST	49907	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.236125946 CEST	443	49906	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.264122963 CEST	443	49907	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.268346071 CEST	49907	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.652904987 CEST	443	49906	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.653353930 CEST	443	49906	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.653413057 CEST	49906	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.655123949 CEST	49906	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.655138016 CEST	443	49906	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.657418013 CEST	49909	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.657473087 CEST	443	49909	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.657721996 CEST	49909	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.658113003 CEST	49909	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.658129930 CEST	443	49909	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.674205065 CEST	443	49907	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.674633026 CEST	443	49907	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.675184965 CEST	49907	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.675353050 CEST	49910	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.675390959 CEST	443	49910	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.675512075 CEST	49910	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.675862074 CEST	49910	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.675865889 CEST	49907	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:45.675875902 CEST	443	49910	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:45.675879955 CEST	443	49907	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.098323107 CEST	443	49909	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.098732948 CEST	49909	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.098793030 CEST	443	49909	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.099298000 CEST	443	49909	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.099709988 CEST	49909	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.099806070 CEST	443	49909	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.099929094 CEST	49909	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.112442970 CEST	443	49910	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.112791061 CEST	49910	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.112804890 CEST	443	49910	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.113270044 CEST	443	49910	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.113699913 CEST	49910	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.113699913 CEST	49910	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.113775969 CEST	443	49910	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.140136003 CEST	443	49909	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.165940046 CEST	49910	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.562002897 CEST	443	49909	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.562091112 CEST	443	49909	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.562278986 CEST	49909	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.563674927 CEST	49909	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.563694000 CEST	49912	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.563718081 CEST	443	49909	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.563731909 CEST	443	49912	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.563853025 CEST	49912	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.564062119 CEST	49912	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.564073086 CEST	443	49912	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.572367907 CEST	443	49910	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.572936058 CEST	443	49910	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.573349953 CEST	49913	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.573389053 CEST	443	49913	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.573452950 CEST	49910	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.573621035 CEST	49913	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.573621988 CEST	49913	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.573647022 CEST	443	49913	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:46.574492931 CEST	49910	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:46.574508905 CEST	443	49910	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.001457930 CEST	443	49912	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.001720905 CEST	49912	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.001750946 CEST	443	49912	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.002863884 CEST	443	49912	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.003190994 CEST	49912	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.003314018 CEST	49912	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.003319025 CEST	443	49912	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.003360987 CEST	443	49912	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.015398026 CEST	443	49913	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.015619040 CEST	49913	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.015638113 CEST	443	49913	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.015989065 CEST	443	49913	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.016347885 CEST	49913	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.016415119 CEST	443	49913	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.016473055 CEST	49913	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.043445110 CEST	49912	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.059134960 CEST	49913	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.059148073 CEST	443	49913	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.464593887 CEST	443	49912	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.465231895 CEST	443	49912	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.465308905 CEST	49912	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.466427088 CEST	49914	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.466511965 CEST	443	49914	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.466590881 CEST	49914	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.466731071 CEST	49912	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.466752052 CEST	443	49912	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.467430115 CEST	49914	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.467463970 CEST	443	49914	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.475619078 CEST	443	49913	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.475989103 CEST	443	49913	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.476043940 CEST	49913	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.476295948 CEST	49913	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.476313114 CEST	443	49913	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.476984024 CEST	49915	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.477063894 CEST	443	49915	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.477143049 CEST	49915	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.477462053 CEST	49915	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.477494955 CEST	443	49915	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.901844978 CEST	443	49914	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.903148890 CEST	49914	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.903192043 CEST	443	49914	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.904478073 CEST	443	49914	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.907016039 CEST	49914	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.907104969 CEST	443	49914	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.907367945 CEST	49914	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.919358969 CEST	443	49915	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.919698954 CEST	49915	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.919764042 CEST	443	49915	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.920097113 CEST	443	49915	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.920567989 CEST	49915	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.920567989 CEST	49915	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:47.920650005 CEST	443	49915	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.948142052 CEST	443	49914	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:47.974124908 CEST	49915	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.361115932 CEST	443	49914	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.361215115 CEST	443	49914	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.361309052 CEST	49914	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.364120007 CEST	49914	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.364140987 CEST	443	49914	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.365051985 CEST	49916	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.365112066 CEST	443	49916	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.366396904 CEST	49916	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.367752075 CEST	49916	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.367763042 CEST	443	49916	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.381560087 CEST	443	49915	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.382165909 CEST	443	49915	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.384481907 CEST	49917	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.384560108 CEST	443	49917	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.384602070 CEST	49915	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.385364056 CEST	49915	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.385382891 CEST	443	49915	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.385420084 CEST	49917	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.386717081 CEST	49917	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.386766911 CEST	443	49917	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.809855938 CEST	443	49916	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.810192108 CEST	49916	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.810206890 CEST	443	49916	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.810879946 CEST	443	49916	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.811299086 CEST	49916	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.811387062 CEST	443	49916	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.811429977 CEST	49916	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.813594103 CEST	443	49917	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.813818932 CEST	49917	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.813877106 CEST	443	49917	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.814248085 CEST	443	49917	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.814575911 CEST	49917	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.814649105 CEST	443	49917	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.814762115 CEST	49917	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:48.856106043 CEST	443	49916	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.860109091 CEST	443	49917	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:48.866182089 CEST	49916	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.272855997 CEST	443	49917	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.273183107 CEST	443	49917	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.273278952 CEST	49917	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.274621010 CEST	49917	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.274662971 CEST	443	49917	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.281821966 CEST	443	49916	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.281907082 CEST	443	49916	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.281960011 CEST	49916	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.284823895 CEST	49916	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.284838915 CEST	443	49916	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.290132046 CEST	49918	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.290214062 CEST	443	49918	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.290302038 CEST	49918	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.290817976 CEST	49918	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.290847063 CEST	443	49918	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.296556950 CEST	49919	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.296633005 CEST	443	49919	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.296700001 CEST	49919	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.297574043 CEST	49919	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.297610044 CEST	443	49919	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.715703964 CEST	443	49919	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.716042042 CEST	49919	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.716088057 CEST	443	49919	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.716409922 CEST	443	49919	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.717387915 CEST	49919	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.717453003 CEST	443	49919	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.717938900 CEST	49919	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.726207018 CEST	443	49918	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.745209932 CEST	49918	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.745275021 CEST	443	49918	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.746006012 CEST	443	49918	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.746597052 CEST	49918	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.746687889 CEST	443	49918	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.746792078 CEST	49918	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.760124922 CEST	443	49919	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:49.787949085 CEST	49918	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:49.787976980 CEST	443	49918	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.167782068 CEST	443	49919	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.168262005 CEST	443	49919	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.168669939 CEST	49919	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.169182062 CEST	49919	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.169218063 CEST	443	49919	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.189631939 CEST	443	49918	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.190057039 CEST	443	49918	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.190381050 CEST	49918	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.190381050 CEST	49918	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.190949917 CEST	49920	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.190985918 CEST	443	49920	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.191127062 CEST	49920	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.191339970 CEST	49920	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.191354036 CEST	443	49920	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.435131073 CEST	49921	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.435170889 CEST	443	49921	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.435292006 CEST	49921	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.436085939 CEST	49921	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.436113119 CEST	443	49921	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.481292963 CEST	49918	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.481348991 CEST	443	49918	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.624838114 CEST	443	49920	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.625545025 CEST	49920	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.625597000 CEST	443	49920	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.626720905 CEST	443	49920	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.627768040 CEST	49920	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.627950907 CEST	443	49920	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.628395081 CEST	49920	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.672117949 CEST	443	49920	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.855437994 CEST	443	49921	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.856045961 CEST	49921	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.856081009 CEST	443	49921	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.856446981 CEST	443	49921	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.857050896 CEST	49921	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.857117891 CEST	443	49921	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:50.857315063 CEST	49921	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:50.900111914 CEST	443	49921	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.080301046 CEST	443	49920	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.080764055 CEST	443	49920	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.080843925 CEST	49920	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.081774950 CEST	49920	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.081810951 CEST	443	49920	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.084388018 CEST	49922	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.084422112 CEST	443	49922	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.084541082 CEST	49922	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.085056067 CEST	49922	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.085067987 CEST	443	49922	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.307214022 CEST	443	49921	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.307621956 CEST	443	49921	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.307681084 CEST	49921	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.315635920 CEST	49921	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.315656900 CEST	443	49921	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.328073978 CEST	49923	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.328114033 CEST	443	49923	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.328229904 CEST	49923	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.328603029 CEST	49923	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.328613043 CEST	443	49923	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.521298885 CEST	443	49922	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.521581888 CEST	49922	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.521598101 CEST	443	49922	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.522089958 CEST	443	49922	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.522591114 CEST	49922	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.522679090 CEST	443	49922	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.522797108 CEST	49922	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.568123102 CEST	443	49922	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.756870985 CEST	443	49923	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.760061026 CEST	49923	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.760082006 CEST	443	49923	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.761018038 CEST	443	49923	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.761598110 CEST	49923	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.761727095 CEST	443	49923	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.761950016 CEST	49923	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.804126024 CEST	443	49923	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.986092091 CEST	443	49922	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.986496925 CEST	443	49922	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.986555099 CEST	49922	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.988305092 CEST	49922	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.988316059 CEST	443	49922	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.990444899 CEST	49924	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.990534067 CEST	443	49924	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:51.990602970 CEST	49924	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.990885973 CEST	49924	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:51.990922928 CEST	443	49924	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.214392900 CEST	443	49923	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.214653015 CEST	443	49923	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.214740038 CEST	49923	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.326401949 CEST	49923	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.326431036 CEST	443	49923	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.327228069 CEST	49925	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.327299118 CEST	443	49925	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.327368021 CEST	49925	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.327575922 CEST	49925	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.327610016 CEST	443	49925	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.428414106 CEST	443	49924	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.428864002 CEST	49924	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.428885937 CEST	443	49924	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.429563046 CEST	443	49924	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.430197001 CEST	49924	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.430283070 CEST	443	49924	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.430346012 CEST	49924	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.472160101 CEST	443	49924	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.481821060 CEST	49924	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.769556046 CEST	443	49925	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.769915104 CEST	49925	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.769953012 CEST	443	49925	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.770417929 CEST	443	49925	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.770708084 CEST	49925	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.770778894 CEST	443	49925	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.770838976 CEST	49925	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.816114902 CEST	443	49925	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.896128893 CEST	443	49924	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.896755934 CEST	443	49924	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.896831989 CEST	49924	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.899027109 CEST	49924	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.899071932 CEST	443	49924	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.903549910 CEST	49926	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.903588057 CEST	443	49926	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:52.903640985 CEST	49926	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.904059887 CEST	49926	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:52.904073000 CEST	443	49926	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.234129906 CEST	443	49925	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.234837055 CEST	443	49925	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.234905005 CEST	49925	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.235479116 CEST	49927	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.235507965 CEST	443	49927	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.235562086 CEST	49925	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.235573053 CEST	49927	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.235600948 CEST	443	49925	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.235981941 CEST	49927	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.235994101 CEST	443	49927	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.340697050 CEST	443	49926	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.340965986 CEST	49926	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.340977907 CEST	443	49926	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.342108965 CEST	443	49926	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.342484951 CEST	49926	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.342617035 CEST	49926	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.342622042 CEST	443	49926	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.342653036 CEST	443	49926	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.391069889 CEST	49926	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.669891119 CEST	443	49927	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.670160055 CEST	49927	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.670176983 CEST	443	49927	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.670634985 CEST	443	49927	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.670973063 CEST	49927	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.671070099 CEST	443	49927	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.671174049 CEST	49927	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.712125063 CEST	443	49927	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.804419041 CEST	443	49926	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.804821014 CEST	443	49926	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.806354046 CEST	49928	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.806390047 CEST	443	49928	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.806420088 CEST	49926	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.806607962 CEST	49928	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.807296991 CEST	49926	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.807320118 CEST	443	49926	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:53.808126926 CEST	49928	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:53.808135033 CEST	443	49928	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.222656965 CEST	443	49927	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.222758055 CEST	443	49927	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.223987103 CEST	49929	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.224025965 CEST	443	49929	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.224059105 CEST	49927	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.224298000 CEST	49929	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.224433899 CEST	49929	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.224436045 CEST	49927	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.224442959 CEST	443	49929	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.224451065 CEST	443	49927	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.253722906 CEST	443	49928	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.254151106 CEST	49928	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.254168987 CEST	443	49928	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.254826069 CEST	443	49928	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.255230904 CEST	49928	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.255230904 CEST	49928	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.255243063 CEST	443	49928	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.255283117 CEST	443	49928	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.296495914 CEST	49928	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.663990974 CEST	443	49929	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.664324999 CEST	49929	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.664349079 CEST	443	49929	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.664810896 CEST	443	49929	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.665234089 CEST	49929	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.665301085 CEST	443	49929	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.665462017 CEST	49929	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.712121964 CEST	443	49929	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.720463991 CEST	443	49928	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.720900059 CEST	443	49928	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.721170902 CEST	49928	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.722251892 CEST	49928	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.722269058 CEST	443	49928	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.722996950 CEST	49930	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.723090887 CEST	443	49930	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:54.723215103 CEST	49930	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.723926067 CEST	49930	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:54.723961115 CEST	443	49930	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.132618904 CEST	443	49929	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.133203030 CEST	443	49929	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.133279085 CEST	49929	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.133646011 CEST	49929	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.133663893 CEST	443	49929	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.134335995 CEST	49931	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.134394884 CEST	443	49931	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.134476900 CEST	49931	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.134994984 CEST	49931	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.135008097 CEST	443	49931	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.151952028 CEST	443	49930	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.152230978 CEST	49930	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.152287006 CEST	443	49930	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.152766943 CEST	443	49930	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.153119087 CEST	49930	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.153198957 CEST	443	49930	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.153413057 CEST	49930	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.196120024 CEST	443	49930	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.562483072 CEST	443	49931	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.562913895 CEST	49931	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.562977076 CEST	443	49931	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.564089060 CEST	443	49931	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.564472914 CEST	49931	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.564610958 CEST	49931	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.564665079 CEST	443	49931	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.610430956 CEST	443	49930	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.611073971 CEST	443	49930	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.611176014 CEST	49930	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.611499071 CEST	49930	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.611541033 CEST	443	49930	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.612699032 CEST	49931	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.614727020 CEST	49932	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.614763021 CEST	443	49932	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:55.614975929 CEST	49932	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.615350008 CEST	49932	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:55.615366936 CEST	443	49932	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.015494108 CEST	443	49931	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.016024113 CEST	443	49931	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.016288042 CEST	49931	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.016947031 CEST	49931	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.016988039 CEST	443	49931	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.017601967 CEST	49933	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.017640114 CEST	443	49933	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.017859936 CEST	49933	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.018362045 CEST	49933	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.018373966 CEST	443	49933	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.042660952 CEST	443	49932	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.042946100 CEST	49932	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.042959929 CEST	443	49932	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.044187069 CEST	443	49932	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.044610023 CEST	49932	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.044610023 CEST	49932	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.044626951 CEST	443	49932	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.044692039 CEST	443	49932	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.086918116 CEST	49932	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.439388990 CEST	443	49933	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.439697981 CEST	49933	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.439714909 CEST	443	49933	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.440193892 CEST	443	49933	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.444192886 CEST	49933	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.444192886 CEST	49933	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.444328070 CEST	443	49933	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.494395971 CEST	49933	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.497178078 CEST	443	49932	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.497529984 CEST	443	49932	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.497761011 CEST	49932	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.498697042 CEST	49932	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.498720884 CEST	443	49932	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.575056076 CEST	49934	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.575130939 CEST	443	49934	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.575217009 CEST	49934	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.575588942 CEST	49934	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.575624943 CEST	443	49934	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.890423059 CEST	443	49933	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.890901089 CEST	443	49933	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.890955925 CEST	49933	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.912734985 CEST	49933	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.912759066 CEST	443	49933	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.914623022 CEST	49935	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.914716959 CEST	443	49935	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:56.914803028 CEST	49935	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.915494919 CEST	49935	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:56.915532112 CEST	443	49935	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.018574953 CEST	443	49934	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.019130945 CEST	49934	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.019171953 CEST	443	49934	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.020323038 CEST	443	49934	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.021588087 CEST	49934	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.021780968 CEST	443	49934	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.022533894 CEST	49934	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.068123102 CEST	443	49934	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.339898109 CEST	443	49935	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.340187073 CEST	49935	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.340223074 CEST	443	49935	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.341353893 CEST	443	49935	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.341811895 CEST	49935	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.341952085 CEST	49935	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.341988087 CEST	443	49935	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.390942097 CEST	49935	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.483827114 CEST	443	49934	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.484222889 CEST	443	49934	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.484287977 CEST	49934	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.485259056 CEST	49934	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.485294104 CEST	443	49934	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.620271921 CEST	49936	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.620356083 CEST	443	49936	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.620429993 CEST	49936	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.621347904 CEST	49936	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.621378899 CEST	443	49936	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.788499117 CEST	443	49935	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.788995028 CEST	443	49935	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.789192915 CEST	49935	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.794312000 CEST	49937	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.794323921 CEST	49935	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.794353008 CEST	443	49935	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.794368029 CEST	443	49937	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:57.796267986 CEST	49937	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.796727896 CEST	49937	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:57.796758890 CEST	443	49937	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.051836014 CEST	443	49936	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.052310944 CEST	49936	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.052371025 CEST	443	49936	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.053601027 CEST	443	49936	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.054275036 CEST	49936	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.054457903 CEST	443	49936	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.054502010 CEST	49936	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.095516920 CEST	49936	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.095577002 CEST	443	49936	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.221627951 CEST	443	49937	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.231750011 CEST	49937	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.231807947 CEST	443	49937	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.232345104 CEST	443	49937	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.235043049 CEST	49937	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.235135078 CEST	443	49937	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.235411882 CEST	49937	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.280113935 CEST	443	49937	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.289194107 CEST	49937	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.506418943 CEST	443	49936	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.506994963 CEST	443	49936	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.507200003 CEST	49936	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.507901907 CEST	49936	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.507942915 CEST	443	49936	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.676983118 CEST	443	49937	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.677583933 CEST	443	49937	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.677741051 CEST	49937	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.678225040 CEST	49937	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.678273916 CEST	443	49937	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.857283115 CEST	49938	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.857350111 CEST	443	49938	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.857423067 CEST	49938	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.860136032 CEST	49938	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.860168934 CEST	443	49938	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.870021105 CEST	49939	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.870053053 CEST	443	49939	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:58.870111942 CEST	49939	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.870831966 CEST	49939	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:58.870845079 CEST	443	49939	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.296659946 CEST	443	49938	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.297156096 CEST	49938	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.297202110 CEST	443	49938	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.298317909 CEST	443	49938	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.298794031 CEST	49938	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.298903942 CEST	49938	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.298918962 CEST	443	49938	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.298983097 CEST	443	49938	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.303785086 CEST	443	49939	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.328835011 CEST	49939	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.328857899 CEST	443	49939	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.330123901 CEST	443	49939	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.331013918 CEST	49939	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.331183910 CEST	443	49939	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.331191063 CEST	49939	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.350147009 CEST	49938	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.372112989 CEST	443	49939	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.381417990 CEST	49939	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.762613058 CEST	443	49939	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.762785912 CEST	443	49939	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.762964010 CEST	49939	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.764055967 CEST	49939	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.764075994 CEST	443	49939	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.833544970 CEST	443	49938	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.833700895 CEST	443	49938	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.834095001 CEST	49938	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.835606098 CEST	49938	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.835639954 CEST	443	49938	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.839241028 CEST	49941	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.839317083 CEST	443	49941	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.839437962 CEST	49941	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.841676950 CEST	49942	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.841690063 CEST	49941	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.841708899 CEST	443	49942	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.841722965 CEST	443	49941	153.92.220.230	192.168.2.5
Apr 25, 2024 00:55:59.841873884 CEST	49942	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.842236042 CEST	49942	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:55:59.842251062 CEST	443	49942	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.289894104 CEST	443	49941	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.290451050 CEST	49941	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.290510893 CEST	443	49941	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.291640997 CEST	443	49941	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.292257071 CEST	443	49942	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.292299986 CEST	49941	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.292479038 CEST	443	49941	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.292922974 CEST	49942	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.292927027 CEST	49941	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.292941093 CEST	443	49942	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.294051886 CEST	443	49942	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.294923067 CEST	49942	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.294923067 CEST	49942	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.295006990 CEST	443	49942	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.340164900 CEST	443	49941	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.340241909 CEST	49942	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.340282917 CEST	49941	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.748648882 CEST	443	49941	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.749094009 CEST	443	49941	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.749183893 CEST	49941	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.763221025 CEST	443	49942	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.763427019 CEST	443	49942	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.766302109 CEST	49942	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.877686024 CEST	49942	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.877707005 CEST	443	49942	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.878293037 CEST	49941	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.878355980 CEST	443	49941	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.879087925 CEST	49943	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.879122972 CEST	443	49943	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.880261898 CEST	49943	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.880747080 CEST	49943	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.880762100 CEST	443	49943	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.884607077 CEST	49944	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.884691000 CEST	443	49944	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:00.884864092 CEST	49944	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.884933949 CEST	49944	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:00.884951115 CEST	443	49944	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.320799112 CEST	443	49944	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.321172953 CEST	49944	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.321206093 CEST	443	49944	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.321805000 CEST	443	49943	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.322021008 CEST	49943	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.322041035 CEST	443	49943	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.322415113 CEST	443	49944	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.322933912 CEST	49944	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.323142052 CEST	443	49944	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.323225021 CEST	49944	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.323338032 CEST	443	49943	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.323801994 CEST	49943	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.323915005 CEST	49943	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.323920012 CEST	443	49943	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.324022055 CEST	443	49943	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.364142895 CEST	443	49944	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.377867937 CEST	49943	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.782742977 CEST	443	49944	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.783272982 CEST	443	49944	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.783340931 CEST	49944	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.783737898 CEST	49944	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.783766985 CEST	443	49944	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.785002947 CEST	443	49943	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.785352945 CEST	443	49943	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.785419941 CEST	49943	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.785705090 CEST	49943	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.785720110 CEST	443	49943	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.787175894 CEST	49945	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.787214041 CEST	443	49945	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.787313938 CEST	49945	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.787552118 CEST	49945	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.787561893 CEST	443	49945	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.789052010 CEST	49946	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.789089918 CEST	443	49946	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:01.789231062 CEST	49946	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.789408922 CEST	49946	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:01.789426088 CEST	443	49946	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.226135969 CEST	443	49945	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.226423025 CEST	49945	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.226437092 CEST	443	49945	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.227915049 CEST	443	49945	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.228277922 CEST	49945	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.228425026 CEST	49945	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.228430033 CEST	443	49945	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.228463888 CEST	443	49945	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.236181974 CEST	443	49946	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.236377001 CEST	49946	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.236397982 CEST	443	49946	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.236881971 CEST	443	49946	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.237171888 CEST	49946	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.237252951 CEST	443	49946	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.237273932 CEST	49946	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.269403934 CEST	49945	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.280144930 CEST	443	49946	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.285043955 CEST	49946	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.687740088 CEST	443	49945	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.688146114 CEST	443	49945	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.688214064 CEST	49945	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.688641071 CEST	49945	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.688657045 CEST	443	49945	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.689599037 CEST	49947	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.689646006 CEST	443	49947	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.689729929 CEST	49947	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.690974951 CEST	49947	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.691008091 CEST	443	49947	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.709883928 CEST	443	49946	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.710062027 CEST	443	49946	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.711126089 CEST	49946	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.712059021 CEST	49946	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.712080956 CEST	443	49946	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.714252949 CEST	49948	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.714298964 CEST	443	49948	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:02.715874910 CEST	49948	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.716051102 CEST	49948	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:02.716065884 CEST	443	49948	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.134517908 CEST	443	49947	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.134838104 CEST	49947	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.134865999 CEST	443	49947	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.136147976 CEST	443	49947	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.136626005 CEST	49947	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.136626005 CEST	49947	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.136656046 CEST	443	49947	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.136842966 CEST	443	49947	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.162573099 CEST	443	49948	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.162801027 CEST	49948	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.162828922 CEST	443	49948	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.164074898 CEST	443	49948	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.164558887 CEST	49948	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.164560080 CEST	49948	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.164731979 CEST	443	49948	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.182410955 CEST	49947	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.213624001 CEST	49948	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.600543022 CEST	443	49947	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.601084948 CEST	443	49947	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.602262020 CEST	49949	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.602266073 CEST	49947	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.602305889 CEST	443	49949	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.604240894 CEST	49947	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.604274988 CEST	443	49947	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.604432106 CEST	49949	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.604639053 CEST	49949	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.604652882 CEST	443	49949	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.630588055 CEST	443	49948	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.631056070 CEST	443	49948	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.631604910 CEST	49950	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.631680965 CEST	49948	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.631717920 CEST	443	49950	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.631949902 CEST	49948	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.631966114 CEST	443	49948	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:03.632076025 CEST	49950	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.632482052 CEST	49950	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:03.632519007 CEST	443	49950	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.041265011 CEST	443	49949	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.041606903 CEST	49949	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.041635036 CEST	443	49949	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.043178082 CEST	443	49949	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.043668985 CEST	49949	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.043951035 CEST	443	49949	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.044024944 CEST	49949	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.064901114 CEST	443	49950	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.065222979 CEST	49950	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.065283060 CEST	443	49950	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.065869093 CEST	443	49950	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.066262007 CEST	49950	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.066355944 CEST	443	49950	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.066427946 CEST	49950	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.088119984 CEST	443	49949	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.108217001 CEST	443	49950	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.503251076 CEST	443	49949	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.503824949 CEST	443	49949	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.503906012 CEST	49949	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.506051064 CEST	49949	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.506078959 CEST	443	49949	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.509772062 CEST	49951	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.509865046 CEST	443	49951	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.510073900 CEST	49951	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.510551929 CEST	49951	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.510585070 CEST	443	49951	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.517973900 CEST	443	49950	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.518554926 CEST	443	49950	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.518636942 CEST	49950	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.519251108 CEST	49950	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.519289970 CEST	443	49950	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.520056009 CEST	49952	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.520097017 CEST	443	49952	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.520307064 CEST	49952	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.520898104 CEST	49952	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.520930052 CEST	443	49952	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.935419083 CEST	443	49951	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.936588049 CEST	49951	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.936623096 CEST	443	49951	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.937745094 CEST	443	49951	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.938455105 CEST	49951	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.938637972 CEST	443	49951	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.938663006 CEST	49951	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.953661919 CEST	443	49952	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.953905106 CEST	49952	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.953963995 CEST	443	49952	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.955148935 CEST	443	49952	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.956003904 CEST	49952	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.956118107 CEST	443	49952	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.956195116 CEST	49952	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.980160952 CEST	443	49951	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:04.982332945 CEST	49951	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.997948885 CEST	49952	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:04.997973919 CEST	443	49952	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.386002064 CEST	443	49951	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.387181044 CEST	49953	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:05.387295961 CEST	443	49953	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.387378931 CEST	49953	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:05.387675047 CEST	49953	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:05.387693882 CEST	443	49953	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.388138056 CEST	443	49951	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.388202906 CEST	49951	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:05.388377905 CEST	49951	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:05.388417959 CEST	443	49951	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.415617943 CEST	443	49952	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.415775061 CEST	443	49952	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.415843010 CEST	49952	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:05.416357040 CEST	49952	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:05.416397095 CEST	443	49952	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.801035881 CEST	49954	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:05.801095009 CEST	443	49954	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.801362038 CEST	49954	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:05.801667929 CEST	49954	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:05.801688910 CEST	443	49954	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.821439028 CEST	443	49953	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.821667910 CEST	49953	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:05.821722984 CEST	443	49953	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.823190928 CEST	443	49953	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.823909998 CEST	49953	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:05.824038029 CEST	49953	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:05.824049950 CEST	443	49953	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.824088097 CEST	443	49953	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:05.874280930 CEST	49953	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.241700888 CEST	443	49954	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.242206097 CEST	49954	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.242244005 CEST	443	49954	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.243699074 CEST	443	49954	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.244172096 CEST	49954	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.244482994 CEST	443	49954	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.244519949 CEST	49954	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.279175043 CEST	443	49953	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.279424906 CEST	443	49953	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.279622078 CEST	49953	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.281200886 CEST	49953	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.281263113 CEST	443	49953	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.283509016 CEST	49955	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.283555031 CEST	443	49955	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.283638954 CEST	49955	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.283857107 CEST	49955	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.283873081 CEST	443	49955	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.284462929 CEST	49954	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.284475088 CEST	443	49954	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.706717968 CEST	443	49954	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.706892014 CEST	443	49954	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.707150936 CEST	49954	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.708499908 CEST	49954	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.708523989 CEST	443	49954	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.709670067 CEST	49956	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.709717989 CEST	443	49956	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.709918976 CEST	49956	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.710102081 CEST	49956	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.710114002 CEST	443	49956	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.717854977 CEST	443	49955	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.718106031 CEST	49955	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.718137026 CEST	443	49955	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.719360113 CEST	443	49955	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.719665051 CEST	49955	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.719779015 CEST	49955	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:06.719785929 CEST	443	49955	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.719837904 CEST	443	49955	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:06.766905069 CEST	49955	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.151086092 CEST	443	49956	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.151514053 CEST	49956	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.151549101 CEST	443	49956	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.152784109 CEST	443	49956	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.155404091 CEST	49956	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.155466080 CEST	443	49956	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.155735970 CEST	49956	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.177925110 CEST	443	49955	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.178607941 CEST	443	49955	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.178685904 CEST	49955	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.180309057 CEST	49955	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.180330038 CEST	443	49955	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.196127892 CEST	443	49956	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.196597099 CEST	49957	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.196643114 CEST	443	49957	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.196702003 CEST	49957	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.196923018 CEST	49957	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.196939945 CEST	443	49957	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.613320112 CEST	443	49956	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.613538027 CEST	443	49956	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.613605976 CEST	49956	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.614806890 CEST	49956	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.614825010 CEST	443	49956	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.616041899 CEST	49958	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.616128922 CEST	443	49958	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.616199017 CEST	49958	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.616692066 CEST	49958	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.616724014 CEST	443	49958	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.638678074 CEST	443	49957	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.638928890 CEST	49957	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.638955116 CEST	443	49957	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.640127897 CEST	443	49957	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.640855074 CEST	49957	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.641005039 CEST	49957	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:07.641011000 CEST	443	49957	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.641026020 CEST	443	49957	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:07.686229944 CEST	49957	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.046906948 CEST	443	49958	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.047192097 CEST	49958	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.047269106 CEST	443	49958	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.048805952 CEST	443	49958	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.049146891 CEST	49958	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.049345970 CEST	443	49958	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.049346924 CEST	49958	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.096116066 CEST	443	49958	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.096503973 CEST	443	49957	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.096674919 CEST	443	49957	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.096734047 CEST	49957	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.097399950 CEST	49957	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.097421885 CEST	443	49957	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.103745937 CEST	49958	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.414275885 CEST	49959	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.414314032 CEST	443	49959	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.414381027 CEST	49959	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.414621115 CEST	49959	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.414632082 CEST	443	49959	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.500534058 CEST	443	49958	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.500933886 CEST	443	49958	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.501122952 CEST	49958	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.503079891 CEST	49958	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.503118038 CEST	443	49958	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.504818916 CEST	49960	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.504856110 CEST	443	49960	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.504931927 CEST	49960	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.505774975 CEST	49960	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.505789995 CEST	443	49960	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.845249891 CEST	443	49959	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.892133951 CEST	49959	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.942709923 CEST	443	49960	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.991269112 CEST	49960	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.991295099 CEST	443	49960	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.991556883 CEST	49959	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.991570950 CEST	443	49959	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.992767096 CEST	443	49960	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.993000984 CEST	443	49959	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.993321896 CEST	49960	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.993504047 CEST	443	49960	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.993933916 CEST	49959	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.994127989 CEST	443	49959	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:08.994242907 CEST	49960	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:08.994349003 CEST	49959	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.036128998 CEST	443	49959	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.036149979 CEST	443	49960	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.300867081 CEST	443	49959	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.301366091 CEST	443	49959	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.301444054 CEST	49959	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.311005116 CEST	49959	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.311022043 CEST	443	49959	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.314579964 CEST	49961	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.314618111 CEST	443	49961	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.314734936 CEST	49961	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.315314054 CEST	49961	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.315327883 CEST	443	49961	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.405282974 CEST	443	49960	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.405982971 CEST	443	49960	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.406071901 CEST	49960	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.407011986 CEST	49962	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.407097101 CEST	443	49962	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.407130957 CEST	49960	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.407155991 CEST	443	49960	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.407175064 CEST	49962	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.407996893 CEST	49962	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.408030987 CEST	443	49962	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.747303009 CEST	443	49961	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.747667074 CEST	49961	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.747687101 CEST	443	49961	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.749058008 CEST	443	49961	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.749387980 CEST	49961	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.749520063 CEST	49961	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.749525070 CEST	443	49961	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.749558926 CEST	443	49961	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.796703100 CEST	49961	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.841589928 CEST	443	49962	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.841949940 CEST	49962	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.842010021 CEST	443	49962	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.843158960 CEST	443	49962	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.843651056 CEST	49962	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.843651056 CEST	49962	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:09.843839884 CEST	443	49962	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:09.890438080 CEST	49962	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.201452017 CEST	443	49961	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.202202082 CEST	443	49961	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.202388048 CEST	49961	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.203015089 CEST	49961	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.203032970 CEST	443	49961	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.203742027 CEST	49963	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.203830004 CEST	443	49963	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.203915119 CEST	49963	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.205044031 CEST	49963	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.205090046 CEST	443	49963	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.299078941 CEST	443	49962	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.299683094 CEST	443	49962	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.299745083 CEST	49962	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.300427914 CEST	49962	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.300463915 CEST	443	49962	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.301158905 CEST	49964	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.301237106 CEST	443	49964	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.301321030 CEST	49964	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.302108049 CEST	49964	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.302139997 CEST	443	49964	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.646466970 CEST	443	49963	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.646780014 CEST	49963	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.646842957 CEST	443	49963	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.648088932 CEST	443	49963	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.648435116 CEST	49963	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.648624897 CEST	443	49963	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.648634911 CEST	49963	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.696129084 CEST	443	49963	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.697164059 CEST	49963	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.729007959 CEST	443	49964	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.729331017 CEST	49964	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.729382992 CEST	443	49964	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.730528116 CEST	443	49964	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.730937004 CEST	49964	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.731121063 CEST	443	49964	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:10.731159925 CEST	49964	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.775373936 CEST	49964	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:10.775408030 CEST	443	49964	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.120424986 CEST	443	49963	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.120950937 CEST	443	49963	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.122667074 CEST	49965	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.122714043 CEST	443	49965	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.122771025 CEST	49963	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.122967958 CEST	49965	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.123529911 CEST	49963	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.123547077 CEST	49965	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.123560905 CEST	443	49965	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.123574018 CEST	443	49963	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.178972960 CEST	443	49964	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.179733992 CEST	443	49964	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.179869890 CEST	49964	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.180198908 CEST	49966	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.180247068 CEST	443	49966	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.180453062 CEST	49966	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.180560112 CEST	49966	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.180569887 CEST	49964	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.180572987 CEST	443	49966	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.180622101 CEST	443	49964	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.557486057 CEST	443	49965	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.557776928 CEST	49965	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.557791948 CEST	443	49965	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.558878899 CEST	443	49965	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.559216976 CEST	49965	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.559360027 CEST	49965	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.559365988 CEST	443	49965	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.559387922 CEST	443	49965	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.608386040 CEST	49965	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.622018099 CEST	443	49966	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.622564077 CEST	49966	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.622589111 CEST	443	49966	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.623683929 CEST	443	49966	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.624197006 CEST	49966	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.624197006 CEST	49966	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:11.624381065 CEST	443	49966	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:11.670958996 CEST	49966	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.014772892 CEST	443	49965	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.015194893 CEST	443	49965	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.015260935 CEST	49965	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.016086102 CEST	49965	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.016108990 CEST	443	49965	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.016887903 CEST	49967	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.016925097 CEST	443	49967	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.017129898 CEST	49967	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.017401934 CEST	49967	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.017416954 CEST	443	49967	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.084338903 CEST	443	49966	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.085020065 CEST	443	49966	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.085089922 CEST	49966	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.085257053 CEST	49968	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.085268974 CEST	443	49968	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.085345030 CEST	49968	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.085618019 CEST	49968	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.085630894 CEST	443	49968	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.085777998 CEST	49966	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.085817099 CEST	443	49966	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.456368923 CEST	443	49967	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.456811905 CEST	49967	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.456825018 CEST	443	49967	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.457947969 CEST	443	49967	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.458235025 CEST	49967	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.458349943 CEST	49967	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.458353996 CEST	443	49967	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.458400011 CEST	443	49967	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.518424988 CEST	49967	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.519821882 CEST	443	49968	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.520036936 CEST	49968	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.520045996 CEST	443	49968	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.521188021 CEST	443	49968	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.521547079 CEST	49968	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.521699905 CEST	49968	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.521714926 CEST	443	49968	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.565326929 CEST	49968	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.920538902 CEST	443	49967	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.921186924 CEST	443	49967	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.921415091 CEST	49967	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.921890974 CEST	49967	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.921907902 CEST	443	49967	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.921910048 CEST	49969	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.922010899 CEST	443	49969	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:12.922194958 CEST	49969	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.924334049 CEST	49969	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:12.924367905 CEST	443	49969	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.005419016 CEST	443	49968	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.005592108 CEST	443	49968	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.005671024 CEST	49968	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.006160975 CEST	49968	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.006169081 CEST	443	49968	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.006925106 CEST	49970	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.006953955 CEST	443	49970	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.007277012 CEST	49970	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.007447004 CEST	49970	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.007462025 CEST	443	49970	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.356870890 CEST	443	49969	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.357172012 CEST	49969	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.357194901 CEST	443	49969	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.357487917 CEST	443	49969	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.357836962 CEST	49969	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.357899904 CEST	443	49969	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.358022928 CEST	49969	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.404120922 CEST	443	49969	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.407521009 CEST	49969	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.438637972 CEST	443	49970	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.439218998 CEST	49970	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.439234018 CEST	443	49970	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.440377951 CEST	443	49970	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.440812111 CEST	49970	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.440844059 CEST	49970	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.440982103 CEST	443	49970	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.486063004 CEST	49970	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.817744017 CEST	443	49969	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.817816973 CEST	443	49969	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.818041086 CEST	49969	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.818931103 CEST	49969	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.818978071 CEST	443	49969	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.821058989 CEST	49971	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.821089029 CEST	443	49971	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.821377039 CEST	49971	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.821485043 CEST	49971	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.821492910 CEST	443	49971	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.895809889 CEST	443	49970	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.896485090 CEST	443	49970	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.896732092 CEST	49970	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.898525953 CEST	49970	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.898544073 CEST	443	49970	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.899378061 CEST	49972	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.899462938 CEST	443	49972	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:13.899595976 CEST	49972	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.899817944 CEST	49972	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:13.899852037 CEST	443	49972	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.249532938 CEST	443	49971	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.250978947 CEST	49971	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.250992060 CEST	443	49971	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.251312017 CEST	443	49971	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.254751921 CEST	49971	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.254802942 CEST	443	49971	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.256899118 CEST	49971	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.300146103 CEST	443	49971	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.333385944 CEST	443	49972	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.333690882 CEST	49972	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.333765984 CEST	443	49972	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.334903002 CEST	443	49972	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.338898897 CEST	49972	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.338964939 CEST	443	49972	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.339003086 CEST	49972	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.384119987 CEST	443	49972	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.394356012 CEST	49972	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.706454039 CEST	443	49971	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.707166910 CEST	443	49971	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.707748890 CEST	49971	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.707916975 CEST	49971	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.707928896 CEST	443	49971	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.778354883 CEST	49973	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.778434992 CEST	443	49973	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.778517008 CEST	49973	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.778732061 CEST	49973	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.778767109 CEST	443	49973	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.790872097 CEST	443	49972	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.791526079 CEST	443	49972	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.791604996 CEST	49972	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.791713953 CEST	49974	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.791739941 CEST	443	49974	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.791850090 CEST	49974	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.792026043 CEST	49974	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.792037964 CEST	443	49974	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:14.792167902 CEST	49972	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:14.792187929 CEST	443	49972	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:15.219049931 CEST	443	49973	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:15.234103918 CEST	443	49974	153.92.220.230	192.168.2.5
Apr 25, 2024 00:56:15.266545057 CEST	49973	443	192.168.2.5	153.92.220.230
Apr 25, 2024 00:56:15.282073021 CEST	49974	443	192.168.2.5	153.92.220.230

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 00:54:29.828218937 CEST	53	51584	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:30.139770985 CEST	53	54770	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:30.968041897 CEST	53	54809	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:32.914587021 CEST	62756	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:32.914860010 CEST	50662	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:33.024907112 CEST	53	62756	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:33.030703068 CEST	53	50662	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:33.489510059 CEST	63922	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:33.489655972 CEST	57698	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:33.599601030 CEST	53	57698	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:33.604628086 CEST	53	63922	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:33.739192963 CEST	53	57959	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:33.740567923 CEST	53	54635	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:33.742968082 CEST	57433	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:33.743084908 CEST	65162	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:33.852988005 CEST	53	57433	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:33.853140116 CEST	53	65162	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:34.305993080 CEST	53	56331	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:35.181957960 CEST	53	60163	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:35.693098068 CEST	63865	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:35.693276882 CEST	49398	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:35.802937031 CEST	53	63865	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:35.803239107 CEST	53	49398	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:35.946105003 CEST	64029	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:35.946240902 CEST	63697	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:36.056271076 CEST	53	64029	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:36.057866096 CEST	53	63697	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:36.712688923 CEST	51276	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:36.713293076 CEST	59182	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:36.822982073 CEST	53	51276	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:36.824421883 CEST	53	59182	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:37.000931978 CEST	60070	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:37.001302004 CEST	55076	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:37.112085104 CEST	53	60070	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:37.112221956 CEST	53	55076	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:37.344410896 CEST	53	50464	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:38.029453993 CEST	51060	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:38.029902935 CEST	61272	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:38.139621019 CEST	53	51060	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:38.140490055 CEST	53	61272	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:38.140503883 CEST	53	51861	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:42.592792988 CEST	53	51444	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:43.230256081 CEST	63051	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:43.230446100 CEST	56835	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:43.348802090 CEST	53	56835	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:43.353312969 CEST	53	63051	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:45.703361988 CEST	62990	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:45.703507900 CEST	60280	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:45.865215063 CEST	53	60280	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:45.899696112 CEST	53	62990	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:46.817011118 CEST	52860	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:46.817212105 CEST	63235	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:46.927072048 CEST	53	63235	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:46.927095890 CEST	53	52860	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:47.538028002 CEST	60124	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:47.538350105 CEST	51914	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:54:47.691009045 CEST	53	51914	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:48.040031910 CEST	53	60124	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:48.813364029 CEST	53	61840	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:49.753961086 CEST	53	51337	1.1.1.1	192.168.2.5
Apr 25, 2024 00:54:51.920749903 CEST	53	51254	1.1.1.1	192.168.2.5
Apr 25, 2024 00:55:08.204827070 CEST	57145	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:55:08.205050945 CEST	60459	53	192.168.2.5	1.1.1.1
Apr 25, 2024 00:55:08.315069914 CEST	53	60459	1.1.1.1	192.168.2.5
Apr 25, 2024 00:55:08.315088034 CEST	53	57145	1.1.1.1	192.168.2.5
Apr 25, 2024 00:55:08.506992102 CEST	53	51753	1.1.1.1	192.168.2.5
Apr 25, 2024 00:55:29.037029028 CEST	53	53593	1.1.1.1	192.168.2.5
Apr 25, 2024 00:55:31.099395990 CEST	53	64443	1.1.1.1	192.168.2.5
Apr 25, 2024 00:55:56.592700958 CEST	53	63451	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 00:54:32.914587021 CEST	192.168.2.5	1.1.1.1	0xa112	Standard query (0)	sites.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:32.914860010 CEST	192.168.2.5	1.1.1.1	0xf28a	Standard query (0)	sites.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:54:33.489510059 CEST	192.168.2.5	1.1.1.1	0x7990	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.489655972 CEST	192.168.2.5	1.1.1.1	0xb56	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:54:33.742968082 CEST	192.168.2.5	1.1.1.1	0x9a9f	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.743084908 CEST	192.168.2.5	1.1.1.1	0x5942	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:54:35.693098068 CEST	192.168.2.5	1.1.1.1	0x42d7	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:35.693276882 CEST	192.168.2.5	1.1.1.1	0x3213	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:54:35.946105003 CEST	192.168.2.5	1.1.1.1	0xb91c	Standard query (0)	sites.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:35.946240902 CEST	192.168.2.5	1.1.1.1	0xd6c8	Standard query (0)	sites.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:54:36.712688923 CEST	192.168.2.5	1.1.1.1	0x30a1	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:36.713293076 CEST	192.168.2.5	1.1.1.1	0x3219	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:54:37.000931978 CEST	192.168.2.5	1.1.1.1	0x195d	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:37.001302004 CEST	192.168.2.5	1.1.1.1	0xbbe9	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:54:38.029453993 CEST	192.168.2.5	1.1.1.1	0xa4d1	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:38.029902935 CEST	192.168.2.5	1.1.1.1	0x3430	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:54:43.230256081 CEST	192.168.2.5	1.1.1.1	0x3ed4	Standard query (0)	1466681747-atari-embeds.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:43.230446100 CEST	192.168.2.5	1.1.1.1	0x22b9	Standard query (0)	1466681747-atari-embeds.googleusercontent.com	65	IN (0x0001)	false
Apr 25, 2024 00:54:45.703361988 CEST	192.168.2.5	1.1.1.1	0x36a1	Standard query (0)	miroslawbaca.pl	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:45.703507900 CEST	192.168.2.5	1.1.1.1	0x33d7	Standard query (0)	miroslawbaca.pl	65	IN (0x0001)	false
Apr 25, 2024 00:54:46.817011118 CEST	192.168.2.5	1.1.1.1	0x9ed2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:46.817212105 CEST	192.168.2.5	1.1.1.1	0x908d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:54:47.538028002 CEST	192.168.2.5	1.1.1.1	0x6d5c	Standard query (0)	miroslawbaca.pl	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:47.538350105 CEST	192.168.2.5	1.1.1.1	0xb30f	Standard query (0)	miroslawbaca.pl	65	IN (0x0001)	false
Apr 25, 2024 00:55:08.204827070 CEST	192.168.2.5	1.1.1.1	0x4522	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:55:08.205050945 CEST	192.168.2.5	1.1.1.1	0xd890	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 00:54:33.024907112 CEST	1.1.1.1	192.168.2.5	0xa112	No error (0)	sites.google.com		64.233.185.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.024907112 CEST	1.1.1.1	192.168.2.5	0xa112	No error (0)	sites.google.com		64.233.185.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.024907112 CEST	1.1.1.1	192.168.2.5	0xa112	No error (0)	sites.google.com		64.233.185.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.024907112 CEST	1.1.1.1	192.168.2.5	0xa112	No error (0)	sites.google.com		64.233.185.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.024907112 CEST	1.1.1.1	192.168.2.5	0xa112	No error (0)	sites.google.com		64.233.185.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.024907112 CEST	1.1.1.1	192.168.2.5	0xa112	No error (0)	sites.google.com		64.233.185.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.599601030 CEST	1.1.1.1	192.168.2.5	0xb56	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 00:54:33.604628086 CEST	1.1.1.1	192.168.2.5	0x7990	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.604628086 CEST	1.1.1.1	192.168.2.5	0x7990	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.604628086 CEST	1.1.1.1	192.168.2.5	0x7990	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.604628086 CEST	1.1.1.1	192.168.2.5	0x7990	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.604628086 CEST	1.1.1.1	192.168.2.5	0x7990	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.604628086 CEST	1.1.1.1	192.168.2.5	0x7990	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.852988005 CEST	1.1.1.1	192.168.2.5	0x9a9f	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 00:54:33.852988005 CEST	1.1.1.1	192.168.2.5	0x9a9f	No error (0)	plus.l.google.com		142.250.105.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.852988005 CEST	1.1.1.1	192.168.2.5	0x9a9f	No error (0)	plus.l.google.com		142.250.105.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.852988005 CEST	1.1.1.1	192.168.2.5	0x9a9f	No error (0)	plus.l.google.com		142.250.105.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.852988005 CEST	1.1.1.1	192.168.2.5	0x9a9f	No error (0)	plus.l.google.com		142.250.105.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.852988005 CEST	1.1.1.1	192.168.2.5	0x9a9f	No error (0)	plus.l.google.com		142.250.105.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.852988005 CEST	1.1.1.1	192.168.2.5	0x9a9f	No error (0)	plus.l.google.com		142.250.105.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:33.853140116 CEST	1.1.1.1	192.168.2.5	0x5942	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 00:54:35.802937031 CEST	1.1.1.1	192.168.2.5	0x42d7	No error (0)	play.google.com		64.233.185.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:35.802937031 CEST	1.1.1.1	192.168.2.5	0x42d7	No error (0)	play.google.com		64.233.185.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:35.802937031 CEST	1.1.1.1	192.168.2.5	0x42d7	No error (0)	play.google.com		64.233.185.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:35.802937031 CEST	1.1.1.1	192.168.2.5	0x42d7	No error (0)	play.google.com		64.233.185.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:35.802937031 CEST	1.1.1.1	192.168.2.5	0x42d7	No error (0)	play.google.com		64.233.185.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:35.802937031 CEST	1.1.1.1	192.168.2.5	0x42d7	No error (0)	play.google.com		64.233.185.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:36.056271076 CEST	1.1.1.1	192.168.2.5	0xb91c	No error (0)	sites.google.com		142.250.105.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:36.056271076 CEST	1.1.1.1	192.168.2.5	0xb91c	No error (0)	sites.google.com		142.250.105.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:36.056271076 CEST	1.1.1.1	192.168.2.5	0xb91c	No error (0)	sites.google.com		142.250.105.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:36.056271076 CEST	1.1.1.1	192.168.2.5	0xb91c	No error (0)	sites.google.com		142.250.105.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:36.056271076 CEST	1.1.1.1	192.168.2.5	0xb91c	No error (0)	sites.google.com		142.250.105.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:36.056271076 CEST	1.1.1.1	192.168.2.5	0xb91c	No error (0)	sites.google.com		142.250.105.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:36.822982073 CEST	1.1.1.1	192.168.2.5	0x30a1	No error (0)	drive.google.com		172.217.215.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:36.822982073 CEST	1.1.1.1	192.168.2.5	0x30a1	No error (0)	drive.google.com		172.217.215.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:36.822982073 CEST	1.1.1.1	192.168.2.5	0x30a1	No error (0)	drive.google.com		172.217.215.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:36.822982073 CEST	1.1.1.1	192.168.2.5	0x30a1	No error (0)	drive.google.com		172.217.215.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:36.822982073 CEST	1.1.1.1	192.168.2.5	0x30a1	No error (0)	drive.google.com		172.217.215.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:36.822982073 CEST	1.1.1.1	192.168.2.5	0x30a1	No error (0)	drive.google.com		172.217.215.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:37.112085104 CEST	1.1.1.1	192.168.2.5	0x195d	No error (0)	play.google.com		108.177.122.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:37.112085104 CEST	1.1.1.1	192.168.2.5	0x195d	No error (0)	play.google.com		108.177.122.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:37.112085104 CEST	1.1.1.1	192.168.2.5	0x195d	No error (0)	play.google.com		108.177.122.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:37.112085104 CEST	1.1.1.1	192.168.2.5	0x195d	No error (0)	play.google.com		108.177.122.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:37.112085104 CEST	1.1.1.1	192.168.2.5	0x195d	No error (0)	play.google.com		108.177.122.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:37.112085104 CEST	1.1.1.1	192.168.2.5	0x195d	No error (0)	play.google.com		108.177.122.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:38.139621019 CEST	1.1.1.1	192.168.2.5	0xa4d1	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 00:54:38.139621019 CEST	1.1.1.1	192.168.2.5	0xa4d1	No error (0)	plus.l.google.com		64.233.176.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:38.139621019 CEST	1.1.1.1	192.168.2.5	0xa4d1	No error (0)	plus.l.google.com		64.233.176.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:38.139621019 CEST	1.1.1.1	192.168.2.5	0xa4d1	No error (0)	plus.l.google.com		64.233.176.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:38.139621019 CEST	1.1.1.1	192.168.2.5	0xa4d1	No error (0)	plus.l.google.com		64.233.176.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:38.139621019 CEST	1.1.1.1	192.168.2.5	0xa4d1	No error (0)	plus.l.google.com		64.233.176.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:38.139621019 CEST	1.1.1.1	192.168.2.5	0xa4d1	No error (0)	plus.l.google.com		64.233.176.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:38.140490055 CEST	1.1.1.1	192.168.2.5	0x3430	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 00:54:43.348802090 CEST	1.1.1.1	192.168.2.5	0x22b9	No error (0)	1466681747-atari-embeds.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 00:54:43.353312969 CEST	1.1.1.1	192.168.2.5	0x3ed4	No error (0)	1466681747-atari-embeds.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 00:54:43.353312969 CEST	1.1.1.1	192.168.2.5	0x3ed4	No error (0)	googlehosted.l.googleusercontent.com		142.251.15.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:45.899696112 CEST	1.1.1.1	192.168.2.5	0x36a1	No error (0)	miroslawbaca.pl		153.92.220.230	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:46.927072048 CEST	1.1.1.1	192.168.2.5	0x908d	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 00:54:46.927095890 CEST	1.1.1.1	192.168.2.5	0x9ed2	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:46.927095890 CEST	1.1.1.1	192.168.2.5	0x9ed2	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:46.927095890 CEST	1.1.1.1	192.168.2.5	0x9ed2	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:46.927095890 CEST	1.1.1.1	192.168.2.5	0x9ed2	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:46.927095890 CEST	1.1.1.1	192.168.2.5	0x9ed2	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:46.927095890 CEST	1.1.1.1	192.168.2.5	0x9ed2	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:54:48.040031910 CEST	1.1.1.1	192.168.2.5	0x6d5c	No error (0)	miroslawbaca.pl		153.92.220.230	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:55:08.315069914 CEST	1.1.1.1	192.168.2.5	0xd890	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 00:55:08.315088034 CEST	1.1.1.1	192.168.2.5	0x4522	No error (0)	www.google.com		172.217.215.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:55:08.315088034 CEST	1.1.1.1	192.168.2.5	0x4522	No error (0)	www.google.com		172.217.215.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:55:08.315088034 CEST	1.1.1.1	192.168.2.5	0x4522	No error (0)	www.google.com		172.217.215.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:55:08.315088034 CEST	1.1.1.1	192.168.2.5	0x4522	No error (0)	www.google.com		172.217.215.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:55:08.315088034 CEST	1.1.1.1	192.168.2.5	0x4522	No error (0)	www.google.com		172.217.215.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:55:08.315088034 CEST	1.1.1.1	192.168.2.5	0x4522	No error (0)	www.google.com		172.217.215.106	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

sites.google.com

https:

play.google.com

drive.google.com

apis.google.com

1466681747-atari-embeds.googleusercontent.com

www.bing.com

miroslawbaca.pl

www.google.com

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	64.233.185.139	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:33 UTC	885	OUT	GET /view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474 HTTP/1.1 Host: sites.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:33 UTC	2229	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: DENY Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 22:54:33 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Cross-Origin-Opener-Policy: unsafe-none Cross-Origin-Resource-Policy: same-site Content-Security-Policy: base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-STQNbRbBB9p2gFwZI6Pfpw' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://google-admin.corp.google.com/ reporting-endpoints: default="/web-reports?jobset=prod&context=eJwVw2lIVGEUBuDTd88tMSmXKDQzjEpss_CH4aijs6hJkEj0XYJSMktTplXNitRSBJcyQzIsxq0NFcfKUrCyBdJCMCQUCtK0SCzCZXKkmuntgce9cpHVTVLrYkmJyyTtxmcrJFmKJZ3H7RWS4tGrUlIgOmskLbkuiRskLUPjfUmbOyRF4qHXknJwtE_SFKb1S8rG3gFJwyg_STqML79LGsQbs5Ja0DovqQ0znJLy8IGHRi9xv69GFvy9UqPF_hrNrtKIAzTKXqtRMfoFabQBJ6I1msdUs0YnMRdLMHS_RkZcnqLRegw6rlEYZpzQKA9rszVqxvCNQ-TEhZuGKAB99k2JlZiUPiX24uqqaRGEP65NCzvqP0-LOGzNnxEdGBRiFyFYvNUuKvBnoV3MYV7mnCjEvgiHeIfdkQ7xCmtjHKIRf6U5hBPvlDpEGx54My-O4MPQP6Ib75z7K9qwJskp6tBCLpGDDn-XoFUukXTGJfbiFU9SruPOo6TsxopxUqoxv18oJTg_IpQFo0LZpSiKxPgvipKIp3-GcwEmLNVxEnoV6NgXmyZ03IIhdh2HoaiJYHfsaong55hliORTaPON4k70Do1iP7xwMIpLcY2q5w0oYvTsjo80PT_F8D49GzAwM5qD0a05mj1xMDaGP2BZjYGvYmezgXuw-piRb2JqjpEzMfCskYNx20Ujx6CwGdkd7743sg0tgSbOwV6DiQfwVpeJW_Fij4nLsOGLie9j1qSJT2GpauYqXHfczJvRYDVzAhZ9NXM5bk-O5ZDLcRyGY947eBLzz-zgEryrJrANPy5K4HEcfmxVR_5_YVW_YfKYVT2MRaN1ajm-9alXB7F9uF7tQv2WBjUOOy41qk_QNdOopnQ2qeno7eF2r_Z2-0LP3smJAuHHezLScv8BdX1KIQ" Referrer-Policy: strict-origin-when-cross-origin Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Set-Cookie: NID=513=m8vzUKs7mdsDY9mgtbufDSFg9G1wJNJHyn0QIml-lFAT5b48tJsFSX83DjF5c8vLrOO3Qx0l4tVm-UogW_rLp6OMb6b_iL1dQRSc3jw9d0vH-9a03PTR9HdQHUA-e1a-YlTAKvBY84iaCWPDLmlkMC5bVwkvxura_tyrXwZgoOg; expires=Thu, 24-Oct-2024 22:54:33 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 22:54:33 UTC	308	IN	Data Raw: 31 32 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 53 54 51 4e 62 52 62 42 42 39 70 32 67 46 77 5a 49 36 50 66 70 77 22 3e 76 61 72 20 44 4f 43 53 5f 74 69 6d 69 6e 67 3d 7b 7d 3b 20 44 4f 43 53 5f 74 69 6d 69 6e 67 5b 27 73 6c 27 5d 3d 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 53 54 51 4e 62 52 62 42 42 39 70 32 67 46 77 5a 49 36 50 Data Ascii: 12d<!DOCTYPE html><html lang="en-US" itemscope itemtype="http://schema.org/WebPage"><head><meta charset="utf-8"><script nonce="STQNbRbBB9p2gFwZI6Pfpw">var DOCS_timing={}; DOCS_timing['sl']=new Date().getTime();</script><script nonce="STQNbRbBB9p2gFwZI6P
2024-04-24 22:54:33 UTC	1255	IN	Data Raw: 38 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 53 54 51 4e 62 52 62 42 42 39 70 32 67 46 77 5a 49 36 50 66 70 77 22 3e 5f 64 6f 63 73 5f 66 6c 61 67 5f 69 6e 69 74 69 61 6c 44 61 74 61 3d 7b 22 61 74 61 72 69 2d 65 6d 74 70 72 22 3a 66 61 6c 73 65 2c 22 61 74 61 72 69 2d 65 62 69 64 6d 22 3a 74 72 75 65 2c 22 61 74 61 72 69 2d 65 62 69 64 73 22 3a 74 72 75 65 2c 22 61 74 61 72 69 2d 65 64 74 6d 22 3a 74 72 75 65 2c 22 61 74 61 72 69 2d 65 69 62 72 6d 22 3a 66 61 6c 73 65 2c 22 61 74 61 72 69 2d 65 63 74 6d 22 3a 66 61 6c 73 65 2c 22 61 74 61 72 69 2d 65 63 74 73 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 74 65 78 74 2d 65 6c 65 69 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 74 65 78 74 2d 75 73 63 22 3a 74 72 75 65 2c 22 61 74 61 72 69 2d 62 Data Ascii: 8000<script nonce="STQNbRbBB9p2gFwZI6Pfpw">_docs_flag_initialData={"atari-emtpr":false,"atari-ebidm":true,"atari-ebids":true,"atari-edtm":true,"atari-eibrm":false,"atari-ectm":false,"atari-ects":false,"docs-text-elei":false,"docs-text-usc":true,"atari-b
2024-04-24 22:54:33 UTC	1255	IN	Data Raw: 65 65 63 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 63 6f 74 22 3a 22 22 2c 22 64 6f 63 73 2d 74 65 78 74 2d 65 6e 62 63 72 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 74 65 78 74 2d 73 76 6f 66 63 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 73 75 70 22 3a 22 22 2c 22 75 6d 73 73 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 6c 64 69 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 64 6c 69 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 6c 69 61 70 22 3a 22 2f 6c 6f 67 49 6d 70 72 65 73 73 69 6f 6e 73 22 2c 22 69 6c 63 6d 22 3a 7b 22 65 75 69 22 3a 22 41 48 4b 58 6d 4c 31 7a 51 4d 34 71 70 36 6f 50 42 32 43 67 59 45 6c 56 33 35 78 74 78 6b 54 42 77 62 39 63 6d 46 74 71 44 4a 39 5f 2d 7a 5f 62 30 4e 6b 57 56 4f 6c 48 5f 73 4d 6b 63 76 31 6d 41 6d 4f 37 35 67 6f 64 5a 58 Data Ascii: eec":false,"docs-ecot":"","docs-text-enbcr":false,"docs-text-svofc":false,"docs-sup":"","umss":false,"docs-eldi":false,"docs-dli":false,"docs-liap":"/logImpressions","ilcm":{"eui":"AHKXmL1zQM4qp6oPB2CgYElV35xtxkTBwb9cmFtqDJ9_-z_b0NkWVOlH_sMkcv1mAmO75godZX
2024-04-24 22:54:33 UTC	1255	IN	Data Raw: 37 38 33 35 2c 37 31 39 32 34 33 35 39 2c 37 31 39 35 39 39 38 34 2c 37 31 39 36 30 35 34 38 2c 39 34 33 35 33 33 37 36 2c 39 34 33 35 36 32 30 30 2c 39 34 33 36 34 35 31 39 2c 39 34 34 32 39 35 38 30 2c 39 34 34 34 32 34 35 31 2c 39 34 34 39 32 38 35 37 2c 39 34 35 31 34 37 35 39 2c 39 34 36 30 34 39 38 39 2c 39 34 36 33 30 39 31 31 2c 39 34 36 38 31 31 39 32 5d 2c 22 63 72 63 22 3a 30 2c 22 63 76 69 22 3a 5b 5d 7d 2c 22 64 6f 63 73 2d 63 63 64 69 6c 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 69 6c 22 3a 74 72 75 65 2c 22 69 6e 66 6f 5f 70 61 72 61 6d 73 22 3a 7b 7d 2c 22 64 6f 63 73 2d 63 61 6a 63 74 22 3a 22 43 41 4e 41 52 59 5f 54 59 50 45 5f 4e 4f 4e 45 22 2c 22 62 75 69 6c 64 4c 61 62 65 6c 22 3a 22 65 64 69 74 6f 72 73 2e 73 69 74 65 73 2d 76 69 Data Ascii: 7835,71924359,71959984,71960548,94353376,94356200,94364519,94429580,94442451,94492857,94514759,94604989,94630911,94681192],"crc":0,"cvi":[]},"docs-ccdil":false,"docs-eil":true,"info_params":{},"docs-cajct":"CANARY_TYPE_NONE","buildLabel":"editors.sites-vi
2024-04-24 22:54:33 UTC	1255	IN	Data Raw: 65 2d 70 64 66 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 25 33 41 33 30 30 25 32 43 33 30 30 69 74 61 6c 69 63 25 32 43 34 30 30 25 32 43 34 30 30 69 74 61 6c 69 63 25 32 43 37 30 30 25 32 43 37 30 30 69 74 61 6c 69 63 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6e 6f 6e 63 65 3d 22 31 46 62 68 45 4f 46 76 4b 6a 53 74 4a 33 69 5f 73 48 65 2d 4f 51 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 47 6f 6f 67 6c 65 2b 53 61 6e 73 3a 34 30 30 2c 35 30 30 7c 52 6f 62 Data Ascii: e-pdf"><link href="https://fonts.googleapis.com/css?family=Lato%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic&display=swap" rel="stylesheet" nonce="1FbhEOFvKjStJ3i_sHe-OQ"><link href="https://fonts.googleapis.com/css?family=Google+Sans:400,500\|Rob
2024-04-24 22:54:33 UTC	1255	IN	Data Raw: 31 31 30 2c 31 34 37 2c 31 29 3b 7d 2e 71 65 4c 5a 66 64 20 2e 61 48 4d 37 65 64 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 34 2c 31 31 30 2c 31 34 37 2c 31 29 3b 7d 2e 71 65 4c 5a 66 64 20 2e 4f 6d 51 47 35 65 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 7d 2e 71 65 4c 5a 66 64 20 2e 4e 48 44 34 47 66 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 7d 2e 71 65 4c 5a 66 64 20 2e 61 77 35 4f 64 63 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 31 30 31 2c 31 32 38 2c 31 29 3b 7d 2e 71 65 4c 5a 66 64 20 2e 64 68 74 67 44 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 31 29 3b 7d 2e 71 65 4c 5a 66 64 20 2e 64 68 74 67 44 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 20 72 67 62 Data Ascii: 110,147,1);}.qeLZfd .aHM7ed{color: rgba(34,110,147,1);}.qeLZfd .OmQG5e{color: rgba(33,33,33,1);}.qeLZfd .NHD4Gf{color: rgba(33,33,33,1);}.qeLZfd .aw5Odc{color: rgba(0,101,128,1);}.qeLZfd .dhtgD:hover{color: rgba(0,0,0,1);}.qeLZfd .dhtgD:visited{color: rgb
2024-04-24 22:54:33 UTC	1255	IN	Data Raw: 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 6c 51 41 48 62 64 20 2e 4a 59 56 42 65 65 20 2e 4f 55 47 45 72 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 6c 51 41 48 62 64 20 2e 4f 6d 51 47 35 65 20 2e 4f 55 47 45 72 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 6c 51 41 48 62 64 20 2e 43 62 69 4d 4b 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 6c 51 41 48 62 64 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 30 2c 31 30 38 2c 31 34 37 2c 31 29 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d Data Ascii: {color: rgba(255,255,255,1);}.lQAHbd .JYVBee .OUGEr{color: rgba(255,255,255,1);}.lQAHbd .OmQG5e .OUGEr{color: rgba(255,255,255,1);}.lQAHbd .CbiMKe{background-color: rgba(255,255,255,1);}.lQAHbd:before{background-color: rgba(30,108,147,1); display: block;}
2024-04-24 22:54:33 UTC	1255	IN	Data Raw: 29 3b 7d 2e 4f 31 33 58 4a 66 20 2e 4f 6d 51 47 35 65 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 4f 31 33 58 4a 66 20 2e 4e 48 44 34 47 66 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 74 70 6d 6d 43 62 20 2e 7a 66 72 33 51 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 7d 2e 74 70 6d 6d 43 62 20 2e 7a 66 72 33 51 20 2e 4f 55 47 45 72 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 7d 2e 74 70 6d 6d 43 62 20 2e 71 6e 56 53 6a 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 7d 2e 74 70 6d 6d 43 62 20 2e 47 6c 77 62 7a 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 Data Ascii: );}.O13XJf .OmQG5e{color: rgba(255,255,255,1);}.O13XJf .NHD4Gf{color: rgba(255,255,255,1);}.tpmmCb .zfr3Q{color: rgba(33,33,33,1);}.tpmmCb .zfr3Q .OUGEr{color: rgba(33,33,33,1);}.tpmmCb .qnVSj{color: rgba(33,33,33,1);}.tpmmCb .Glwbz{color: rgba(33,33,33,1
2024-04-24 22:54:33 UTC	1255	IN	Data Raw: 61 28 31 37 38 2c 31 37 38 2c 31 37 38 2c 31 29 3b 7d 2e 59 54 76 34 57 65 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 31 31 39 39 39 39 39 39 37 33 29 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 2e 59 54 76 34 57 65 2e 63 68 67 34 4a 64 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 33 36 30 30 30 30 30 31 34 33 29 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 2e 65 57 44 6c 6a 63 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 7d 2e 65 57 44 6c 6a 63 20 2e 68 44 72 68 45 65 7b Data Ascii: a(178,178,178,1);}.YTv4We:hover:before{background-color: rgba(255,255,255,0.1199999973); display: block;}.YTv4We.chg4Jd:focus:before{border-color: rgba(255,255,255,0.3600000143); display: block;}.eWDljc{background-color: rgba(33,33,33,1);}.eWDljc .hDrhEe{
2024-04-24 22:54:33 UTC	1255	IN	Data Raw: 7d 2e 66 4f 55 34 36 62 20 2e 74 43 48 58 44 63 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 38 37 30 30 30 30 30 30 34 38 29 3b 7d 2e 66 4f 55 34 36 62 20 2e 69 57 73 33 67 66 2e 63 68 67 34 4a 64 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 31 31 39 39 39 39 39 39 37 33 29 3b 7d 2e 66 4f 55 34 36 62 20 2e 47 38 51 52 6e 63 20 2e 4d 7a 38 67 76 62 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 30 30 30 30 30 30 31 31 39 29 3b 7d 2e 66 4f 55 34 36 62 20 2e 47 38 51 52 6e 63 20 2e 4d 7a 38 67 76 62 2e 63 68 67 34 4a 64 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 Data Ascii: }.fOU46b .tCHXDc{color: rgba(255,255,255,0.8700000048);}.fOU46b .iWs3gf.chg4Jd:focus{background-color: rgba(255,255,255,0.1199999973);}.fOU46b .G8QRnc .Mz8gvb{color: rgba(0,0,0,0.8000000119);}.fOU46b .G8QRnc .Mz8gvb.chg4Jd:focus:before{border-color: rgba(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	64.233.185.139	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:35 UTC	1080	OUT	POST /_/view/logImpressions?authuser=0 HTTP/1.1 Host: sites.google.com Connection: keep-alive Content-Length: 3047 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://sites.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=m8vzUKs7mdsDY9mgtbufDSFg9G1wJNJHyn0QIml-lFAT5b48tJsFSX83DjF5c8vLrOO3Qx0l4tVm-UogW_rLp6OMb6b_iL1dQRSc3jw9d0vH-9a03PTR9HdQHUA-e1a-YlTAKvBY84iaCWPDLmlkMC5bVwkvxura_tyrXwZgoOg
2024-04-24 22:54:35 UTC	3047	OUT	Data Raw: 69 6d 70 72 65 73 73 69 6f 6e 42 61 74 63 68 3d 25 35 42 25 35 42 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 31 25 32 43 31 37 31 33 39 39 39 32 37 35 30 33 33 30 30 30 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 31 37 31 33 39 39 39 32 37 35 30 33 33 30 30 30 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 31 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 37 31 36 25 32 43 6e 75 6c 6c 25 32 43 31 25 32 43 31 25 35 44 25 35 44 25 32 43 25 35 42 25 32 32 43 4c 50 50 34 4f 37 34 32 34 55 44 46 55 65 50 54 77 6b 64 58 61 59 49 49 41 25 32 32 25 32 43 31 37 31 33 39 39 39 32 37 35 30 33 32 30 30 30 25 32 43 31 37 31 33 39 39 39 32 37 33 35 33 35 34 31 37 25 32 43 25 32 32 41 48 4b 58 6d 4c 31 7a 51 4d 34 71 70 36 6f 50 42 Data Ascii: impressionBatch=%5B%5B%5Bnull%2Cnull%2C1%2C1713999275033000%2Cnull%2Cnull%2Cnull%2C%5B%5B1713999275033000%5D%2Cnull%2C1%5D%2Cnull%2C716%2Cnull%2C1%2C1%5D%5D%2C%5B%22CLPP4O7424UDFUePTwkdXaYIIA%22%2C1713999275032000%2C1713999273535417%2C%22AHKXmL1zQM4qp6oPB
2024-04-24 22:54:35 UTC	699	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 22:54:35 GMT Content-Disposition: attachment; filename="response.bin"; filename*=UTF-8''response.bin X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 22:54:35 UTC	22	IN	Data Raw: 31 30 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 66 2e 6d 74 22 5d 5d 0d 0a Data Ascii: 10)]}'[["f.mt"]]
2024-04-24 22:54:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49728	23.220.189.216	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:35 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 22:54:35 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=202103 Date: Wed, 24 Apr 2024 22:54:35 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49729	64.233.185.139	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:36 UTC	543	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://sites.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:36 UTC	517	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 24 Apr 2024 22:54:36 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49731	64.233.185.139	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:36 UTC	1000	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 2559 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sites.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=m8vzUKs7mdsDY9mgtbufDSFg9G1wJNJHyn0QIml-lFAT5b48tJsFSX83DjF5c8vLrOO3Qx0l4tVm-UogW_rLp6OMb6b_iL1dQRSc3jw9d0vH-9a03PTR9HdQHUA-e1a-YlTAKvBY84iaCWPDLmlkMC5bVwkvxura_tyrXwZgoOg
2024-04-24 22:54:36 UTC	2559	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 33 33 2c 5b 5b 22 31 37 31 33 39 39 39 32 37 35 30 33 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 37 31 33 39 39 39 32 37 35 30 33 33 30 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 37 31 33 39 39 39 32 37 35 30 33 33 30 30 30 5d 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 37 31 36 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,null,[4,0,0,0,0]]],2033,[["1713999275034",null,null,null,null,null,null,"[[[null,null,1,1713999275033000,null,null,null,[[1713999275033000],null,1],null,716,null,
2024-04-24 22:54:36 UTC	922	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs; expires=Thu, 24-Oct-2024 22:54:36 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 24 Apr 2024 22:54:36 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 24 Apr 2024 22:54:36 GMT Connection: close Transfer-Encoding: chunked
2024-04-24 22:54:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-24 22:54:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49732	23.220.189.216	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:36 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 22:54:36 UTC	521	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/074E) X-CID: 11 Cache-Control: public, max-age=202101 Date: Wed, 24 Apr 2024 22:54:36 GMT Content-Range: bytes 0-54/55 Content-Length: 55 Connection: close X-CID: 2
2024-04-24 22:54:36 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49735	172.217.215.100	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:37 UTC	1023	OUT	GET /auth_warmup HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=m8vzUKs7mdsDY9mgtbufDSFg9G1wJNJHyn0QIml-lFAT5b48tJsFSX83DjF5c8vLrOO3Qx0l4tVm-UogW_rLp6OMb6b_iL1dQRSc3jw9d0vH-9a03PTR9HdQHUA-e1a-YlTAKvBY84iaCWPDLmlkMC5bVwkvxura_tyrXwZgoOg
2024-04-24 22:54:37 UTC	1658	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 22:54:37 GMT Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveOsidBootstrap/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-7JqtPPAFA5TVjuTrm30ZxA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveOsidBootstrap/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveOsidBootstrap/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/DriveOsidBootstrap/web-reports?context=eJzjEtDikmII0JBicEqfwRoCxELcHGtnL9vIJnDg9dRCAGfPCSQ" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49736	108.177.122.101	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:37 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:54:37 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 22:54:37 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 22:54:37 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-24 22:54:37 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49739	64.233.176.113	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:38 UTC	871	OUT	GET /js/api.js?checkCookie=1 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.gstatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:54:38 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 15096 Date: Wed, 24 Apr 2024 22:54:38 GMT Expires: Wed, 24 Apr 2024 22:54:38 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "8d878cdab360f65f" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 22:54:38 UTC	418	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-04-24 22:54:38 UTC	1255	IN	Data Raw: 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 63 61 3d 62 61 28 74 68 69 73 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 63 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 0a 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: d global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a
2024-04-24 22:54:38 UTC	1255	IN	Data Raw: 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 6e 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2c 64 61 3d 30 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 79 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 78 21 3d 3d 78 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 61 66 65 55 72 6c 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 22 29 3b 74 68 69 73 2e 76 3d 61 7d 3b 79 Data Ascii: ght The Closure Library Authors. SPDX-License-Identifier: Apache-2.0/var m=this\|\|self,n="closure_uid_"+(1E9Math.random()>>>0),da=0,r=function(a){return a};var y=function(a){if(x!==x)throw Error("SafeUrl is not meant to be built directly");this.v=a};y
2024-04-24 22:54:38 UTC	1255	IN	Data Raw: 2c 6d 61 3d 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 5b 62 5d 3d 61 5b 62 5d 7c 7c 63 7d 2c 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 6f 72 74 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 76 6f 69 64 20 30 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 65 21 3d 63 26 26 62 2e 70 75 73 68 28 65 29 3b 63 3d 65 7d 72 65 74 75 72 6e 20 62 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 69 66 28 28 61 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 29 26 26 6d 61 2e 74 65 73 74 28 61 29 29 61 3d 61 28 6e 75 6c 6c 29 3b 65 6c 73 65 7b 61 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 Data Ascii: ,ma=/\[native code\]/,H=function(a,b,c){return a[b]=a[b]\|\|c},na=function(a){a=a.sort();for(var b=[],c=void 0,d=0;d<a.length;d++){var e=a[d];e!=c&&b.push(e);c=e}return b},I=function(){var a;if((a=Object.create)&&ma.test(a))a=a(null);else{a={};for(var b in
2024-04-24 22:54:38 UTC	1255	IN	Data Raw: 3b 7d 3b 55 2e 70 75 73 68 28 5b 22 6a 73 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 61 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 3f 4b 5b 62 5d 3d 48 28 4b 2c 62 2c 5b 5d 29 2e 63 6f 6e 63 61 74 28 63 29 3a 48 28 4b 2c 62 2c 63 29 7d 69 66 28 62 3d 61 2e 75 29 61 3d 48 28 4b 2c 22 75 73 22 2c 5b 5d 29 2c 61 2e 70 75 73 68 28 62 29 2c 28 62 3d 2f 5e 68 74 74 70 73 3a 28 2e 2a 29 24 2f 2e 65 78 65 63 28 62 29 29 26 26 61 2e 70 75 73 68 28 22 68 74 74 70 3a 22 2b 62 5b 31 5d 29 7d 5d 29 3b 76 61 72 20 76 61 3d 2f 5e 28 5c 2f 5b 61 2d Data Ascii: ;};U.push(["jsl",function(a){for(var b in a)if(Object.prototype.hasOwnProperty.call(a,b)){var c=a[b];"object"==typeof c?K[b]=H(K,b,[]).concat(c):H(K,b,c)}if(b=a.u)a=H(K,"us",[]),a.push(b),(b=/^https:(.*)$/.exec(b))&&a.push("http:"+b[1])}]);var va=/^(\/[a-
2024-04-24 22:54:38 UTC	1255	IN	Data Raw: 2c 0a 22 2c 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 2c 22 2f 6b 3d 22 2c 65 28 61 2e 76 65 72 73 69 6f 6e 29 2c 22 2f 6d 3d 22 2c 65 28 62 29 2c 64 3f 22 2f 65 78 6d 3d 22 2b 65 28 64 29 3a 22 22 2c 22 2f 72 74 3d 6a 2f 73 76 3d 31 2f 64 3d 31 2f 65 64 3d 31 22 2c 61 2e 67 3f 22 2f 61 6d 3d 22 2b 65 28 61 2e 67 29 3a 22 22 2c 61 2e 69 3f 22 2f 72 73 3d 22 2b 65 28 61 2e 69 29 3a 22 22 2c 61 2e 6a 3f 22 2f 74 3d 22 2b 65 28 61 2e 6a 29 3a 22 22 2c 22 2f 63 62 3d 22 2c 65 28 63 29 5d 2e 6a 6f 69 6e 28 22 22 29 7d 2c 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 2f 22 21 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 26 26 56 28 22 72 65 6c 61 74 69 76 65 20 70 61 74 68 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 61 2e 73 75 62 73 74 72 69 6e Data Ascii: ,",").replace(/%2F/g,"/"),"/k=",e(a.version),"/m=",e(b),d?"/exm="+e(d):"","/rt=j/sv=1/d=1/ed=1",a.g?"/am="+e(a.g):"",a.i?"/rs="+e(a.i):"",a.j?"/t="+e(a.j):"","/cb=",e(c)].join("")},Ea=function(a){"/"!==a.charAt(0)&&V("relative path");for(var b=a.substrin
2024-04-24 22:54:38 UTC	1255	IN	Data Raw: 5f 30 2d 39 5c 2f 41 2d 5a 61 2d 7a 5d 2b 3d 7b 30 2c 32 7d 24 2f 2c 49 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 30 3e 66 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4b 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 61 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 48 61 29 3f 61 3a 4b 2e 6e Data Ascii: _0-9\/A-Za-z]+={0,2}$/,Ia=function(a,b){for(var c=[],d=0;d<a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=0>f}f&&c.push(e)}return c},Ja=function(){var a=K.nonce;return void 0!==a?a&&a===String(a)&&a.match(Ha)?a:K.n
2024-04-24 22:54:38 UTC	1255	IN	Data Raw: 3a 20 21 68 69 6e 74 22 29 3b 4f 61 28 62 7c 7c 5b 5d 2c 63 2c 61 29 7d 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 21 21 4b 2e 67 6c 72 70 3b 61 3d 6e 61 28 61 29 7c 7c 5b 5d 3b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 62 61 63 6b 2c 66 3d 62 2e 63 6f 6e 66 69 67 2c 6b 3d 62 2e 74 69 6d 65 6f 75 74 2c 74 3d 62 2e 6f 6e 74 69 6d 65 6f 75 74 2c 6c 3d 62 2e 6f 6e 65 72 72 6f 72 2c 70 3d 76 6f 69 64 20 30 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6c 26 26 28 70 3d 6c 29 3b 76 61 72 20 7a 3d 6e 75 6c 6c 2c 52 3d 21 31 3b 69 66 28 6b 26 26 21 74 7c 7c 21 6b 26 26 74 29 74 68 72 6f 77 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 Data Ascii: : !hint");Oa(b\|\|[],c,a)},Oa=function(a,b,c){var d=!!K.glrp;a=na(a)\|\|[];var e=b.callback,f=b.config,k=b.timeout,t=b.ontimeout,l=b.onerror,p=void 0;"function"==typeof l&&(p=l);var z=null,R=!1;if(k&&!t\|\|!k&&t)throw"Timeout requires both the timeout parameter
2024-04-24 22:54:38 UTC	1255	IN	Data Raw: 61 2e 6d 65 73 73 61 67 65 29 7d 51 61 3d 52 61 3b 76 61 72 20 59 3d 51 61 3b 76 61 72 20 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 4b 2e 68 65 65 26 26 30 3c 4b 2e 68 65 6c 29 74 72 79 7b 72 65 74 75 72 6e 20 61 28 29 7d 63 61 74 63 68 28 63 29 7b 62 26 26 62 28 63 29 2c 4b 2e 68 65 6c 2d 2d 2c 50 61 28 22 64 65 62 75 67 5f 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 77 69 6e 64 6f 77 2e 5f 5f 5f 6a 73 6c 2e 68 65 66 6e 28 63 29 7d 63 61 74 63 68 28 64 29 7b 74 68 72 6f 77 20 63 3b 7d 7d 29 7d 65 6c 73 65 20 74 72 79 7b 72 65 74 75 72 6e 20 61 28 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 62 26 26 62 28 63 29 2c 63 3b 7d 7d 3b 76 61 72 20 53 61 3d 4a 2e 6c 6f 61 64 3b 53 61 26 26 48 28 4b 2c 22 6f 6c 22 2c Data Ascii: a.message)}Qa=Ra;var Y=Qa;var Ma=function(a,b){if(K.hee&&0<K.hel)try{return a()}catch(c){b&&b(c),K.hel--,Pa("debug_error",function(){try{window.___jsl.hefn(c)}catch(d){throw c;}})}else try{return a()}catch(c){throw b&&b(c),c;}};var Sa=J.load;Sa&&H(K,"ol",
2024-04-24 22:54:38 UTC	1255	IN	Data Raw: 2c 0a 64 69 73 61 62 6c 65 52 65 61 6c 74 69 6d 65 43 61 6c 6c 62 61 63 6b 3a 21 31 2c 64 72 69 76 65 5f 73 68 61 72 65 3a 7b 73 6b 69 70 49 6e 69 74 43 6f 6d 6d 61 6e 64 3a 21 30 7d 2c 63 73 69 3a 7b 72 61 74 65 3a 2e 30 31 7d 2c 63 6c 69 65 6e 74 3a 7b 63 6f 72 73 3a 21 31 7d 2c 73 69 67 6e 49 6e 44 65 70 72 65 63 61 74 69 6f 6e 3a 7b 72 61 74 65 3a 30 7d 2c 69 6e 63 6c 75 64 65 5f 67 72 61 6e 74 65 64 5f 73 63 6f 70 65 73 3a 21 30 2c 6c 6c 61 6e 67 3a 22 65 6e 22 2c 69 66 72 61 6d 65 73 3a 7b 79 6f 75 74 75 62 65 3a 7b 70 61 72 61 6d 73 3a 7b 6c 6f 63 61 74 69 6f 6e 3a 5b 22 73 65 61 72 63 68 22 2c 22 68 61 73 68 22 5d 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f Data Ascii: ,disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49740	64.233.185.139	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:39 UTC	1000	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 3638 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sites.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:54:39 UTC	3638	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 33 33 2c 5b 5b 22 31 37 31 33 39 39 39 32 37 38 30 34 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],2033,[["1713999278042",null,null,n
2024-04-24 22:54:39 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 24 Apr 2024 22:54:39 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 22:54:39 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-24 22:54:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49741	64.233.185.139	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:39 UTC	1080	OUT	POST /_/view/logImpressions?authuser=0 HTTP/1.1 Host: sites.google.com Connection: keep-alive Content-Length: 4499 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://sites.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:54:39 UTC	4499	OUT	Data Raw: 69 6d 70 72 65 73 73 69 6f 6e 42 61 74 63 68 3d 25 35 42 25 35 42 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 32 25 32 43 31 37 31 33 39 39 39 32 37 35 30 34 31 30 30 30 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 25 35 42 39 30 37 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 39 38 34 25 32 43 31 32 38 30 25 35 44 25 35 44 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 30 25 32 43 30 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c Data Ascii: impressionBatch=%5B%5B%5Bnull%2Cnull%2C2%2C1713999275041000%2C%5Bnull%2Cnull%2Cnull%2C%5B%5B%5B907%2C1280%5D%2C%5B984%2C1280%5D%5D%5D%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B0%2C0%5D%2Cnull%2Cnull
2024-04-24 22:54:39 UTC	699	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 22:54:39 GMT Content-Disposition: attachment; filename="response.bin"; filename*=UTF-8''response.bin X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 22:54:39 UTC	22	IN	Data Raw: 31 30 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 66 2e 6d 74 22 5d 5d 0d 0a Data Ascii: 10)]}'[["f.mt"]]
2024-04-24 22:54:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49742	64.233.176.113	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:42 UTC	996	OUT	GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_rpc/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.gstatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:54:42 UTC	902	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 58276 Date: Wed, 24 Apr 2024 22:54:42 GMT Expires: Thu, 24 Apr 2025 22:54:42 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 18:15:45 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 22:54:42 UTC	353	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-04-24 22:54:42 UTC	1255	IN	Data Raw: 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 Data Ascii: n"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==type
2024-04-24 22:54:42 UTC	1255	IN	Data Raw: 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f Data Ascii: &&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!0,writable:!0,value:function(){return pa(ba(this))}})}return a});pa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.ua=function(a){var b="undefined"!=typeo
2024-04-24 22:54:42 UTC	1255	IN	Data Raw: 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 74 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 45 37 28 29 7d 29 7d 74 68 69 73 2e 50 66 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 64 3d 5f 2e 6d 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 45 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 50 66 26 26 74 68 69 73 2e 50 66 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 50 66 3b 74 68 69 73 2e 50 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 6b 29 7b 76 61 72 20 6c 3d 68 5b 6b 5d 3b 68 5b 6b 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6c 28 29 7d 63 Data Ascii: ];var k=this;this.tP(function(){k.E7()})}this.Pf.push(h)};var d=_.ma.setTimeout;b.prototype.tP=function(h){d(h,0)};b.prototype.E7=function(){for(;this.Pf&&this.Pf.length;){var h=this.Pf;this.Pf=[];for(var k=0;k<h.length;++k){var l=h[k];h[k]=null;try{l()}c
2024-04-24 22:54:42 UTC	1255	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 68 2e 67 63 61 28 29 29 7b 76 61 72 20 6b 3d 5f 2e 6d 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6b 26 26 6b 2e 65 72 72 6f 72 28 68 2e 46 66 29 7d 7d 2c 0a 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 63 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 73 56 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 68 3d 5f 2e 6d 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 6b 3d 5f 2e 6d 61 2e 45 76 65 6e 74 2c 6c 3d 5f 2e 6d 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 29 72 65 74 75 72 6e 21 30 3b 22 66 75 6e 63 74 69 6f Data Ascii: ction(){var h=this;d(function(){if(h.gca()){var k=_.ma.console;"undefined"!==typeof k&&k.error(h.Ff)}},1)};e.prototype.gca=function(){if(this.sV)return!1;var h=_.ma.CustomEvent,k=_.ma.Event,l=_.ma.dispatchEvent;if("undefined"===typeof l)return!0;"functio
2024-04-24 22:54:42 UTC	1255	IN	Data Raw: 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6c 28 68 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 5f 2e 75 61 28 68 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6d 2e 6e 65 78 74 28 29 29 63 28 6e 2e 76 61 6c 75 65 29 2e 42 79 28 6b 2c 6c 29 7d 29 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 5f 2e 75 61 28 68 29 2c 6c 3d 6b 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6c 2e 64 6f 6e 65 3f 63 28 5b 5d 29 3a 6e 65 77 20 65 28 66 75 6e Data Ascii: .resolve=c;e.reject=function(h){return new e(function(k,l){l(h)})};e.race=function(h){return new e(function(k,l){for(var m=_.ua(h),n=m.next();!n.done;n=m.next())c(n.value).By(k,l)})};e.all=function(h){var k=_.ua(h),l=k.next();return l.done?c([]):new e(fun
2024-04-24 22:54:42 UTC	1255	IN	Data Raw: 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6d 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 Data Ascii: !1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set(m,4);return!n.has(l)&&4==n.get(m)}catch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");e("preventExte
2024-04-24 22:54:42 UTC	1255	IN	Data Raw: 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 0a 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6b 29 7b 6b 3d 5f 2e 75 61 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6b 3d 30 3d 3d 3d 6b 3f 30 3a 6b 3b 76 61 72 20 6d 3d 64 28 74 68 69 73 2c 6b 29 3b 6d 2e 6c 69 73 74 7c 7c 28 6d 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6d 2e 69 64 5d 3d 5b 5d 29 3b 6d 2e 6e 66 3f 6d 2e 6e 66 2e 76 61 6c 75 65 3d 6c 3a 28 6d 2e 6e 66 3d 7b 6e 65 78 74 3a 74 68 69 73 Data Ascii: ,c=function(k){this[0]={};this[1]=f();this.size=0;if(k){k=_.ua(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};c.prototype.set=function(k,l){k=0===k?0:k;var m=d(this,k);m.list\|\|(m.list=this[0][m.id]=[]);m.nf?m.nf.value=l:(m.nf={next:this
2024-04-24 22:54:42 UTC	1255	IN	Data Raw: 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6c 2c 6d 29 29 3a 6d 3d 22 70 5f 22 2b 6c 3b 76 61 72 20 6e 3d 6b 5b 30 5d 5b 6d 5d 3b 69 66 28 6e 26 26 76 61 28 6b 5b 30 5d 2c 6d 29 29 66 6f 72 28 6b 3d 30 3b 6b 3c 6e 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 70 3d 6e 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6c 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 6b 2c 6e 66 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 2d 31 2c 6e 66 3a 76 6f 69 64 20 30 7d 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 76 61 72 20 6d 3d 6b 5b 31 5d 3b 72 65 74 75 72 6e 20 70 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6d Data Ascii: ""+ ++h,b.set(l,m)):m="p_"+l;var n=k[0][m];if(n&&va(k[0],m))for(k=0;k<n.length;k++){var p=n[k];if(l!==l&&p.key!==p.key\|\|l===p.key)return{id:m,list:n,index:k,nf:p}}return{id:m,list:n,index:-1,nf:void 0}},e=function(k,l){var m=k[1];return pa(function(){if(m
2024-04-24 22:54:42 UTC	1255	IN	Data Raw: 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 44 61 3d 6e 65 77 20 4d 61 70 3b 69 66 28 63 29 7b 63 3d 0a 5f 2e 75 61 28 63 29 3b 66 6f 72 28 76 Data Ascii: entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|4!=f.value[0].x\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var b=function(c){this.Da=new Map;if(c){c=_.ua(c);for(v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49744	108.177.122.101	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:42 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:54:42 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 22:54:42 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 22:54:42 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-24 22:54:42 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49747	142.251.15.132	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:43 UTC	1070	OUT	GET /embeds/16cb204cf3a9d4d223a0a3fd8b0eec5d/inner-frame-minified.html?jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ HTTP/1.1 Host: 1466681747-atari-embeds.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.gstatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:44 UTC	701	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="apps-sites" Report-To: {"group":"apps-sites","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-sites"}]} Content-Length: 2021 Date: Wed, 24 Apr 2024 22:54:44 GMT Expires: Thu, 24 Apr 2025 22:54:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 12 Dec 2023 13:42:01 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 22:54:44 UTC	554	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 2c 68 74 6d 6c 2c 69 66 72 61 6d 65 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 66 6f 72 63 65 49 6f 73 53 63 72 6f 6c 6c 69 6e 67 7b 6f 76 65 72 66 6c 6f 77 3a 73 63 72 6f 6c 6c 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 69 66 72 61 6d 65 20 69 64 3d 27 75 73 65 72 48 74 6d 6c 46 72 61 6d 65 27 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 27 30 27 20 73 63 72 6f 6c Data Ascii: <!DOCTYPE html><html><head> <style>body,html,iframe{margin:0;padding:0;height:100%;width:100%;overflow:hidden}.forceIosScrolling{overflow:scroll;-webkit-overflow-scrolling:touch}</style></head><body><iframe id='userHtmlFrame' frameborder='0' scrol
2024-04-24 22:54:44 UTC	1255	IN	Data Raw: 28 29 7b 69 66 28 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 27 63 6f 6d 70 6c 65 74 65 27 29 7b 74 68 69 73 2e 6f 6e 6c 6f 61 64 28 29 3b 7d 7d 3b 28 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6c 6f 61 64 65 72 53 63 72 69 70 74 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 75 70 64 61 74 65 55 73 65 72 48 74 6d 6c 46 72 61 6d 65 28 75 73 65 72 48 74 6d 6c 2c 65 6e 61 62 6c 65 49 6e 74 65 72 61 63 74 69 6f 6e 2c 66 6f 72 63 65 49 6f 73 53 63 72 6f 6c 6c 69 6e 67 29 7b 76 61 72 20 66 72 61 6d 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 75 73 65 72 48 74 6d 6c Data Ascii: (){if(this.readyState==='complete'){this.onload();}};(document.head\|\|document.body\|\|document.documentElement).appendChild(loaderScript);}function updateUserHtmlFrame(userHtml,enableInteraction,forceIosScrolling){var frame=document.getElementById('userHtml
2024-04-24 22:54:44 UTC	212	IN	Data Raw: 20 47 4d 54 22 3b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 6e 61 6d 65 2b 22 3d 3b 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 20 3b 64 6f 6d 61 69 6e 3d 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 22 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 74 6f 72 61 67 65 28 29 7b 74 72 79 7b 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 63 6c 65 61 72 28 29 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 63 6c 65 61 72 28 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 7d 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: GMT";document.cookie=name+"=;expires=Thu, 01 Jan 1970 00:00:01 GMT ;domain=.googleusercontent.com";}}function clearStorage(){try{localStorage.clear();sessionStorage.clear();}catch(e){}}</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49748	64.233.176.113	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:44 UTC	901	OUT	GET /js/api.js?checkCookie=1 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:54:44 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 15096 Date: Wed, 24 Apr 2024 22:54:44 GMT Expires: Wed, 24 Apr 2024 22:54:44 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "8d878cdab360f65f" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 22:54:44 UTC	418	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-04-24 22:54:44 UTC	1255	IN	Data Raw: 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 63 61 3d 62 61 28 74 68 69 73 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 63 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 0a 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: d global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a
2024-04-24 22:54:44 UTC	1255	IN	Data Raw: 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 6e 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2c 64 61 3d 30 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 79 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 78 21 3d 3d 78 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 61 66 65 55 72 6c 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 22 29 3b 74 68 69 73 2e 76 3d 61 7d 3b 79 Data Ascii: ght The Closure Library Authors. SPDX-License-Identifier: Apache-2.0/var m=this\|\|self,n="closure_uid_"+(1E9Math.random()>>>0),da=0,r=function(a){return a};var y=function(a){if(x!==x)throw Error("SafeUrl is not meant to be built directly");this.v=a};y
2024-04-24 22:54:44 UTC	1255	IN	Data Raw: 2c 6d 61 3d 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 5b 62 5d 3d 61 5b 62 5d 7c 7c 63 7d 2c 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 6f 72 74 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 76 6f 69 64 20 30 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 65 21 3d 63 26 26 62 2e 70 75 73 68 28 65 29 3b 63 3d 65 7d 72 65 74 75 72 6e 20 62 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 69 66 28 28 61 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 29 26 26 6d 61 2e 74 65 73 74 28 61 29 29 61 3d 61 28 6e 75 6c 6c 29 3b 65 6c 73 65 7b 61 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 Data Ascii: ,ma=/\[native code\]/,H=function(a,b,c){return a[b]=a[b]\|\|c},na=function(a){a=a.sort();for(var b=[],c=void 0,d=0;d<a.length;d++){var e=a[d];e!=c&&b.push(e);c=e}return b},I=function(){var a;if((a=Object.create)&&ma.test(a))a=a(null);else{a={};for(var b in
2024-04-24 22:54:44 UTC	1255	IN	Data Raw: 3b 7d 3b 55 2e 70 75 73 68 28 5b 22 6a 73 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 61 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 3f 4b 5b 62 5d 3d 48 28 4b 2c 62 2c 5b 5d 29 2e 63 6f 6e 63 61 74 28 63 29 3a 48 28 4b 2c 62 2c 63 29 7d 69 66 28 62 3d 61 2e 75 29 61 3d 48 28 4b 2c 22 75 73 22 2c 5b 5d 29 2c 61 2e 70 75 73 68 28 62 29 2c 28 62 3d 2f 5e 68 74 74 70 73 3a 28 2e 2a 29 24 2f 2e 65 78 65 63 28 62 29 29 26 26 61 2e 70 75 73 68 28 22 68 74 74 70 3a 22 2b 62 5b 31 5d 29 7d 5d 29 3b 76 61 72 20 76 61 3d 2f 5e 28 5c 2f 5b 61 2d Data Ascii: ;};U.push(["jsl",function(a){for(var b in a)if(Object.prototype.hasOwnProperty.call(a,b)){var c=a[b];"object"==typeof c?K[b]=H(K,b,[]).concat(c):H(K,b,c)}if(b=a.u)a=H(K,"us",[]),a.push(b),(b=/^https:(.*)$/.exec(b))&&a.push("http:"+b[1])}]);var va=/^(\/[a-
2024-04-24 22:54:44 UTC	1255	IN	Data Raw: 2c 0a 22 2c 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 2c 22 2f 6b 3d 22 2c 65 28 61 2e 76 65 72 73 69 6f 6e 29 2c 22 2f 6d 3d 22 2c 65 28 62 29 2c 64 3f 22 2f 65 78 6d 3d 22 2b 65 28 64 29 3a 22 22 2c 22 2f 72 74 3d 6a 2f 73 76 3d 31 2f 64 3d 31 2f 65 64 3d 31 22 2c 61 2e 67 3f 22 2f 61 6d 3d 22 2b 65 28 61 2e 67 29 3a 22 22 2c 61 2e 69 3f 22 2f 72 73 3d 22 2b 65 28 61 2e 69 29 3a 22 22 2c 61 2e 6a 3f 22 2f 74 3d 22 2b 65 28 61 2e 6a 29 3a 22 22 2c 22 2f 63 62 3d 22 2c 65 28 63 29 5d 2e 6a 6f 69 6e 28 22 22 29 7d 2c 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 2f 22 21 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 26 26 56 28 22 72 65 6c 61 74 69 76 65 20 70 61 74 68 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 61 2e 73 75 62 73 74 72 69 6e Data Ascii: ,",").replace(/%2F/g,"/"),"/k=",e(a.version),"/m=",e(b),d?"/exm="+e(d):"","/rt=j/sv=1/d=1/ed=1",a.g?"/am="+e(a.g):"",a.i?"/rs="+e(a.i):"",a.j?"/t="+e(a.j):"","/cb=",e(c)].join("")},Ea=function(a){"/"!==a.charAt(0)&&V("relative path");for(var b=a.substrin
2024-04-24 22:54:44 UTC	1255	IN	Data Raw: 5f 30 2d 39 5c 2f 41 2d 5a 61 2d 7a 5d 2b 3d 7b 30 2c 32 7d 24 2f 2c 49 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 30 3e 66 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4b 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 61 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 48 61 29 3f 61 3a 4b 2e 6e Data Ascii: _0-9\/A-Za-z]+={0,2}$/,Ia=function(a,b){for(var c=[],d=0;d<a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=0>f}f&&c.push(e)}return c},Ja=function(){var a=K.nonce;return void 0!==a?a&&a===String(a)&&a.match(Ha)?a:K.n
2024-04-24 22:54:44 UTC	1255	IN	Data Raw: 3a 20 21 68 69 6e 74 22 29 3b 4f 61 28 62 7c 7c 5b 5d 2c 63 2c 61 29 7d 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 21 21 4b 2e 67 6c 72 70 3b 61 3d 6e 61 28 61 29 7c 7c 5b 5d 3b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 62 61 63 6b 2c 66 3d 62 2e 63 6f 6e 66 69 67 2c 6b 3d 62 2e 74 69 6d 65 6f 75 74 2c 74 3d 62 2e 6f 6e 74 69 6d 65 6f 75 74 2c 6c 3d 62 2e 6f 6e 65 72 72 6f 72 2c 70 3d 76 6f 69 64 20 30 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6c 26 26 28 70 3d 6c 29 3b 76 61 72 20 7a 3d 6e 75 6c 6c 2c 52 3d 21 31 3b 69 66 28 6b 26 26 21 74 7c 7c 21 6b 26 26 74 29 74 68 72 6f 77 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 Data Ascii: : !hint");Oa(b\|\|[],c,a)},Oa=function(a,b,c){var d=!!K.glrp;a=na(a)\|\|[];var e=b.callback,f=b.config,k=b.timeout,t=b.ontimeout,l=b.onerror,p=void 0;"function"==typeof l&&(p=l);var z=null,R=!1;if(k&&!t\|\|!k&&t)throw"Timeout requires both the timeout parameter
2024-04-24 22:54:44 UTC	1255	IN	Data Raw: 61 2e 6d 65 73 73 61 67 65 29 7d 51 61 3d 52 61 3b 76 61 72 20 59 3d 51 61 3b 76 61 72 20 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 4b 2e 68 65 65 26 26 30 3c 4b 2e 68 65 6c 29 74 72 79 7b 72 65 74 75 72 6e 20 61 28 29 7d 63 61 74 63 68 28 63 29 7b 62 26 26 62 28 63 29 2c 4b 2e 68 65 6c 2d 2d 2c 50 61 28 22 64 65 62 75 67 5f 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 77 69 6e 64 6f 77 2e 5f 5f 5f 6a 73 6c 2e 68 65 66 6e 28 63 29 7d 63 61 74 63 68 28 64 29 7b 74 68 72 6f 77 20 63 3b 7d 7d 29 7d 65 6c 73 65 20 74 72 79 7b 72 65 74 75 72 6e 20 61 28 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 62 26 26 62 28 63 29 2c 63 3b 7d 7d 3b 76 61 72 20 53 61 3d 4a 2e 6c 6f 61 64 3b 53 61 26 26 48 28 4b 2c 22 6f 6c 22 2c Data Ascii: a.message)}Qa=Ra;var Y=Qa;var Ma=function(a,b){if(K.hee&&0<K.hel)try{return a()}catch(c){b&&b(c),K.hel--,Pa("debug_error",function(){try{window.___jsl.hefn(c)}catch(d){throw c;}})}else try{return a()}catch(c){throw b&&b(c),c;}};var Sa=J.load;Sa&&H(K,"ol",
2024-04-24 22:54:44 UTC	1255	IN	Data Raw: 2c 0a 64 69 73 61 62 6c 65 52 65 61 6c 74 69 6d 65 43 61 6c 6c 62 61 63 6b 3a 21 31 2c 64 72 69 76 65 5f 73 68 61 72 65 3a 7b 73 6b 69 70 49 6e 69 74 43 6f 6d 6d 61 6e 64 3a 21 30 7d 2c 63 73 69 3a 7b 72 61 74 65 3a 2e 30 31 7d 2c 63 6c 69 65 6e 74 3a 7b 63 6f 72 73 3a 21 31 7d 2c 73 69 67 6e 49 6e 44 65 70 72 65 63 61 74 69 6f 6e 3a 7b 72 61 74 65 3a 30 7d 2c 69 6e 63 6c 75 64 65 5f 67 72 61 6e 74 65 64 5f 73 63 6f 70 65 73 3a 21 30 2c 6c 6c 61 6e 67 3a 22 65 6e 22 2c 69 66 72 61 6d 65 73 3a 7b 79 6f 75 74 75 62 65 3a 7b 70 61 72 61 6d 73 3a 7b 6c 6f 63 61 74 69 6f 6e 3a 5b 22 73 65 61 72 63 68 22 2c 22 68 61 73 68 22 5d 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f Data Ascii: ,disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49751	64.233.176.113	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:45 UTC	1026	OUT	GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_rpc/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:54:45 UTC	910	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 58276 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 24 Apr 2024 22:54:42 GMT Expires: Thu, 24 Apr 2025 22:54:42 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 18:15:45 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 22:54:45 UTC	345	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-04-24 22:54:45 UTC	1255	IN	Data Raw: 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 Data Ascii: "function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"objec
2024-04-24 22:54:45 UTC	1255	IN	Data Raw: 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 66 69 6e 65 64 Data Ascii: typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!0,writable:!0,value:function(){return pa(ba(this))}})}return a});pa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.ua=function(a){var b="undefined
2024-04-24 22:54:45 UTC	1255	IN	Data Raw: 68 69 73 2e 50 66 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 74 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 45 37 28 29 7d 29 7d 74 68 69 73 2e 50 66 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 64 3d 5f 2e 6d 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 45 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 50 66 26 26 74 68 69 73 2e 50 66 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 50 66 3b 74 68 69 73 2e 50 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 6b 29 7b 76 61 72 20 6c 3d 68 5b 6b 5d 3b 68 5b 6b 5d 3d 6e 75 6c 6c 3b 74 Data Ascii: his.Pf=[];var k=this;this.tP(function(){k.E7()})}this.Pf.push(h)};var d=_.ma.setTimeout;b.prototype.tP=function(h){d(h,0)};b.prototype.E7=function(){for(;this.Pf&&this.Pf.length;){var h=this.Pf;this.Pf=[];for(var k=0;k<h.length;++k){var l=h[k];h[k]=null;t
2024-04-24 22:54:45 UTC	1255	IN	Data Raw: 2e 6e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 68 2e 67 63 61 28 29 29 7b 76 61 72 20 6b 3d 5f 2e 6d 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6b 26 26 6b 2e 65 72 72 6f 72 28 68 2e 46 66 29 7d 7d 2c 0a 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 63 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 73 56 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 68 3d 5f 2e 6d 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 6b 3d 5f 2e 6d 61 2e 45 76 65 6e 74 2c 6c 3d 5f 2e 6d 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 29 72 65 74 75 72 6e 21 30 3b Data Ascii: .nea=function(){var h=this;d(function(){if(h.gca()){var k=_.ma.console;"undefined"!==typeof k&&k.error(h.Ff)}},1)};e.prototype.gca=function(){if(this.sV)return!1;var h=_.ma.CustomEvent,k=_.ma.Event,l=_.ma.dispatchEvent;if("undefined"===typeof l)return!0;
2024-04-24 22:54:45 UTC	1255	IN	Data Raw: 73 56 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6c 28 68 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 5f 2e 75 61 28 68 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6d 2e 6e 65 78 74 28 29 29 63 28 6e 2e 76 61 6c 75 65 29 2e 42 79 28 6b 2c 6c 29 7d 29 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 5f 2e 75 61 28 68 29 2c 6c 3d 6b 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6c 2e 64 6f 6e 65 3f 63 28 5b 5d 29 3a 6e Data Ascii: sV=!0};e.resolve=c;e.reject=function(h){return new e(function(k,l){l(h)})};e.race=function(h){return new e(function(k,l){for(var m=_.ua(h),n=m.next();!n.done;n=m.next())c(n.value).By(k,l)})};e.all=function(h){var k=_.ua(h),l=k.next();return l.done?c([]):n
2024-04-24 22:54:45 UTC	1255	IN	Data Raw: 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6d 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 Data Ascii: l)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set(m,4);return!n.has(l)&&4==n.get(m)}catch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");e("pre
2024-04-24 22:54:45 UTC	1255	IN	Data Raw: 20 57 65 61 6b 4d 61 70 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 0a 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6b 29 7b 6b 3d 5f 2e 75 61 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6b 3d 30 3d 3d 3d 6b 3f 30 3a 6b 3b 76 61 72 20 6d 3d 64 28 74 68 69 73 2c 6b 29 3b 6d 2e 6c 69 73 74 7c 7c 28 6d 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6d 2e 69 64 5d 3d 5b 5d 29 3b 6d 2e 6e 66 3f 6d 2e 6e 66 2e 76 61 6c 75 65 3d 6c 3a 28 6d 2e 6e 66 3d 7b 6e Data Ascii: WeakMap,c=function(k){this[0]={};this[1]=f();this.size=0;if(k){k=_.ua(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};c.prototype.set=function(k,l){k=0===k?0:k;var m=d(this,k);m.list\|\|(m.list=this[0][m.id]=[]);m.nf?m.nf.value=l:(m.nf={n
2024-04-24 22:54:45 UTC	1255	IN	Data Raw: 74 28 6c 29 3a 28 6d 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6c 2c 6d 29 29 3a 6d 3d 22 70 5f 22 2b 6c 3b 76 61 72 20 6e 3d 6b 5b 30 5d 5b 6d 5d 3b 69 66 28 6e 26 26 76 61 28 6b 5b 30 5d 2c 6d 29 29 66 6f 72 28 6b 3d 30 3b 6b 3c 6e 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 70 3d 6e 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6c 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 6b 2c 6e 66 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 2d 31 2c 6e 66 3a 76 6f 69 64 20 30 7d 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 76 61 72 20 6d 3d 6b 5b 31 5d 3b 72 65 74 75 72 6e 20 70 61 28 66 75 6e 63 74 69 6f Data Ascii: t(l):(m=""+ ++h,b.set(l,m)):m="p_"+l;var n=k[0][m];if(n&&va(k[0],m))for(k=0;k<n.length;k++){var p=n[k];if(l!==l&&p.key!==p.key\|\|l===p.key)return{id:m,list:n,index:k,nf:p}}return{id:m,list:n,index:-1,nf:void 0}},e=function(k,l){var m=k[1];return pa(functio
2024-04-24 22:54:45 UTC	1255	IN	Data Raw: 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 44 61 3d 6e 65 77 20 4d 61 70 3b 69 66 28 63 29 7b 63 3d 0a 5f 2e 75 61 28 Data Ascii: var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|4!=f.value[0].x\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var b=function(c){this.Da=new Map;if(c){c=_.ua(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49749	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:45 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7e44NlrWBxlKG34&MD=NfXmMBB2 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-24 22:54:45 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 8ab35440-f601-4b1e-b94e-2e177925b2af MS-RequestId: 3683b2a1-af52-4e71-8f3d-b63162e40ff7 MS-CV: IYL0P4bpPkObTPRg.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 22:54:44 GMT Connection: close Content-Length: 24490
2024-04-24 22:54:45 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-24 22:54:45 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49754	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:45 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713999254022&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-24 22:54:45 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-24 22:54:45 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-24 22:54:46 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 798922694ECB4A1AB40EA4057F6429DE Ref B: LAX311000109021 Ref C: 2024-04-24T22:54:46Z Date: Wed, 24 Apr 2024 22:54:46 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1713999285.62a5a73

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49757	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:46 UTC	757	OUT	GET /wp-content/uploads/2020/boat.php?id=AwvqtMJyy0Vldu HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:46 UTC	433	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 content-type: text/html; charset=UTF-8 content-length: 1016 date: Wed, 24 Apr 2024 22:54:46 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:46 UTC	935	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 2e 6a 73 3f 6f 6e 6c 6f 61 64 3d 6f 6e 4c 6f 61 64 43 61 6c 6c 62 61 63 6b 26 72 65 6e 64 65 72 3d 65 78 70 6c 69 63 69 74 22 20 61 73 79 6e 63 20 64 65 66 65 72 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 75 63 63 65 73 73 43 61 6c 6c 62 61 63 6b 28 74 6f 6b 65 6e 29 20 7b 0a 09 09 63 6f 6e 73 74 20 75 72 6c 50 61 72 61 6d 73 20 3d 20 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 09 09 Data Ascii: <html> <head> <script src="https://www.google.com/recaptcha/api.js?onload=onLoadCallback&render=explicit" async defer></script> <script> function successCallback(token) {const urlParams = new URLSearchParams(window.location.search);
2024-04-24 22:54:46 UTC	81	IN	Data Raw: 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 31 25 2c 2d 34 39 25 2c 20 30 29 3b 0a 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: rm: translate3d(-51%,-49%, 0); position: absolute; } </style></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49759	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:47 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:47 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:47 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:47 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49760	74.125.136.105	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:47 UTC	853	OUT	GET /recaptcha/api.js?onload=onLoadCallback&render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://miroslawbaca.pl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:54:47 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 24 Apr 2024 22:54:47 GMT Date: Wed, 24 Apr 2024 22:54:47 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 22:54:47 UTC	727	IN	Data Raw: 35 30 31 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 501/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-24 22:54:47 UTC	561	IN	Data Raw: 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f Data Ascii: SI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.cro
2024-04-24 22:54:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49762	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:48 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:48 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:48 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:48 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49763	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:48 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:48 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:48 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:48 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49764	74.125.136.103	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:48 UTC	1132	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL&co=aHR0cHM6Ly9taXJvc2xhd2JhY2EucGw6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=ohmt2ae69ssp HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://miroslawbaca.pl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:54:49 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 22:54:49 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-dt8E6jYTt4YuZLag_b7nIA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 22:54:49 UTC	364	IN	Data Raw: 32 61 66 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2af3<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-24 22:54:49 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-24 22:54:49 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-24 22:54:49 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 22:54:49 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-24 22:54:49 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-24 22:54:49 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 64 74 38 45 36 6a 59 54 74 34 59 75 5a 4c 61 67 5f 62 37 6e 49 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="dt8E6jYTt4YuZLag_b7nIA" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-24 22:54:49 UTC	1255	IN	Data Raw: 32 30 7a 57 5f 63 59 4c 42 61 42 7a 6b 31 6e 62 47 52 66 57 59 56 4b 5a 74 72 49 36 47 31 4b 79 36 43 64 73 5a 67 72 38 53 36 6a 36 6c 37 6f 44 74 5a 41 69 4d 4b 64 52 59 38 77 64 44 6e 43 53 6b 4e 5a 37 5a 5a 6b 41 6b 54 67 52 36 42 47 78 73 6c 33 70 71 7a 78 6d 74 44 76 54 4e 39 47 58 5f 4e 5a 61 70 4e 6a 67 5f 36 68 62 45 45 6e 72 63 58 7a 76 73 63 4c 67 39 65 39 45 38 69 6d 5f 59 57 76 58 4f 79 73 73 36 75 64 77 2d 64 70 61 73 72 59 6e 73 6d 55 49 7a 59 53 77 43 75 72 31 76 42 4c 69 30 35 57 53 48 53 64 2d 4d 32 30 2d 46 71 54 47 43 2d 42 35 59 5f 59 6b 74 53 49 6d 68 67 47 51 46 76 79 35 73 70 34 72 63 78 52 78 6f 6f 38 35 69 4a 46 69 50 31 59 45 52 38 39 54 43 45 66 68 6d 6a 41 50 6c 58 62 38 63 4f 53 77 69 36 4a 73 46 6c 47 37 55 32 51 6e 62 55 77 Data Ascii: 20zW_cYLBaBzk1nbGRfWYVKZtrI6G1Ky6CdsZgr8S6j6l7oDtZAiMKdRY8wdDnCSkNZ7ZZkAkTgR6BGxsl3pqzxmtDvTN9GX_NZapNjg_6hbEEnrcXzvscLg9e9E8im_YWvXOyss6udw-dpasrYnsmUIzYSwCur1vBLi05WSHSd-M20-FqTGC-B5Y_YktSImhgGQFvy5sp4rcxRxoo85iJFiP1YER89TCEfhmjAPlXb8cOSwi6JsFlG7U2QnbUw
2024-04-24 22:54:49 UTC	1255	IN	Data Raw: 70 5a 4a 62 6b 35 71 6d 53 79 72 54 72 39 6f 63 6f 77 31 61 4d 6f 51 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 74 38 45 36 6a 59 54 74 34 59 75 5a 4c 61 67 5f 62 37 6e 49 41 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 73 61 31 52 59 63 54 51 35 57 55 63 31 58 32 56 71 4d 58 63 33 62 54 52 55 4f 55 35 33 58 7a 46 4d 65 44 46 50 59 32 51 78 5a 33 52 6c 56 31 46 77 63 32 5a 57 58 31 52 72 4c 6d 70 7a 5c 78 32 32 Data Ascii: pZJbk5qmSyrTr9ocow1aMoQ"><script type="text/javascript" nonce="dt8E6jYTt4YuZLag_b7nIA"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9sa1RYcTQ5WUc1X2VqMXc3bTRUOU53XzFMeDFPY2QxZ3RlV1Fwc2ZWX1RrLmpz\x22
2024-04-24 22:54:49 UTC	599	IN	Data Raw: 52 4a 5a 6d 68 32 54 57 64 30 53 44 52 4d 51 6c 56 45 51 30 63 79 63 6e 5a 44 56 55 35 55 63 31 67 31 57 54 4a 76 65 6d 45 77 57 6b 5a 46 4c 7a 56 30 5a 31 64 73 53 6e 64 49 4c 32 6c 36 4d 55 74 50 5a 55 78 34 61 48 70 31 61 6a 59 76 59 6c 4e 74 64 47 78 35 63 46 6c 4b 63 6e 6c 55 54 6b 34 72 59 31 67 78 64 6b 31 58 62 30 4a 4a 4e 47 78 4e 5a 45 35 6a 52 31 4e 59 52 57 46 77 65 56 5a 71 53 44 6c 76 55 30 31 4a 54 32 74 32 51 6e 6c 31 4d 6b 78 5a 4e 6b 4e 59 4d 7a 68 6f 56 44 46 4d 61 55 78 33 51 57 46 44 65 55 56 61 63 31 5a 45 62 45 31 54 54 57 31 31 63 53 74 31 56 47 64 71 59 6c 46 4c 4d 44 42 35 4d 33 5a 4b 62 30 67 72 64 6d 56 69 4f 47 6c 44 5a 6a 52 42 61 56 46 74 51 55 70 4c 55 47 31 73 54 6b 39 6d 4b 7a 42 4b 4f 55 6b 78 59 6a 6c 46 57 6d 4e 56 59 Data Ascii: RJZmh2TWd0SDRMQlVEQ0cycnZDVU5Uc1g1WTJvemEwWkZFLzV0Z1dsSndIL2l6MUtPZUx4aHp1ajYvYlNtdGx5cFlKcnlUTk4rY1gxdk1Xb0JJNGxNZE5jR1NYRWFweVZqSDlvU01JT2t2Qnl1MkxZNkNYMzhoVDFMaUx3QWFDeUVac1ZEbE1TTW11cSt1VGdqYlFLMDB5M3ZKb0grdmViOGlDZjRBaVFtQUpLUG1sTk9mKzBKOUkxYjlFWmNVY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49765	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:49 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:49 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:49 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:49 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49768	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:49 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:49 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:49 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:49 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49771	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:50 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:50 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:50 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:50 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49772	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:50 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:50 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:50 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:50 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49774	74.125.136.103	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:50 UTC	1069	OUT	GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL&co=aHR0cHM6Ly9taXJvc2xhd2JhY2EucGw6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=ohmt2ae69ssp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:54:50 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18268 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 23 Apr 2024 14:01:11 GMT Expires: Wed, 23 Apr 2025 14:01:11 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 118419 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 22:54:50 UTC	443	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 21 28 4e 3d 28 52 3d 65 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 52 29 7c 7c 21 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4e 3b 74 72 79 7b 4e 3d 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 70 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p}
2024-04-24 22:54:50 UTC	1255	IN	Data Raw: 72 65 61 74 65 53 63 72 69 70 74 28 50 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 50 29 7b 72 65 74 75 72 6e 22 22 2b 50 7d 7d 28 65 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 52 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 72 65 74 75 72 6e 20 52 5b 4e 5d 3c 3c 32 34 7c 52 5b 28 4e 7c 30 29 2b 31 5d 3c 3c 31 36 7c 52 5b 28 4e 7c 30 29 2b 32 5d 3c 3c 38 7c 52 5b 28 4e 7c 30 29 2b 33 5d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 34 33 38 Data Ascii: reateScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438
2024-04-24 22:54:50 UTC	1255	IN	Data Raw: 2e 67 5b 77 5d 2c 52 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 66 6f 72 28 4e 3d 5b 5d 3b 52 2d 2d 3b 29 4e 2e 70 75 73 68 28 32 35 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 4e 3d 4e 2e 58 5b 52 5d 2c 4e 29 29 74 68 72 6f 77 5b 4d 2c 33 30 2c 52 5d 3b 69 66 28 4e 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 4e 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 28 4e 2e 63 72 65 61 74 65 28 33 2a 52 2a 52 2b 32 31 2a 52 2b 2d 33 34 29 2c 4e 29 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 50 52 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 2c 6b 2c 50 29 7b 72 65 74 75 72 6e 20 50 3d Data Ascii: .g[w],R);return N},c=function(R,N){for(N=[];R--;)N.push(255Math.random()\|0);return N},Z=function(R,N){if(void 0===(N=N.X[R],N))throw[M,30,R];if(N.value)return N.create();return(N.create(3RR+21R+-34),N).prototype},PR=function(R,N,p,e,w,T,k,P){return P=
2024-04-24 22:54:50 UTC	1255	IN	Data Raw: 54 2e 67 69 3d 66 2c 32 5d 5d 2c 66 29 3c 3c 33 29 2d 34 3b 74 72 79 7b 54 2e 63 4f 3d 74 41 28 52 65 28 54 2c 28 66 7c 30 29 2b 34 29 2c 52 65 28 54 2c 66 29 2c 79 29 7d 63 61 74 63 68 28 61 29 7b 74 68 72 6f 77 20 61 3b 7d 7d 54 2e 70 75 73 68 28 54 2e 63 4f 5b 50 26 37 5d 5e 6b 29 7d 2c 77 3d 5a 28 35 39 2c 4e 29 29 3a 52 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 54 2e 70 75 73 68 28 6b 29 7d 2c 65 26 26 52 28 65 26 32 35 35 29 2c 4e 3d 70 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 4e 3b 65 2b 2b 29 52 28 70 5b 65 5d 29 7d 2c 45 2c 56 30 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 28 70 3d 74 79 70 65 6f 66 20 52 2c 70 29 29 69 66 28 52 29 7b 69 66 28 52 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 Data Ascii: T.gi=f,2]],f)<<3)-4;try{T.cO=tA(Re(T,(f\|0)+4),Re(T,f),y)}catch(a){throw a;}}T.push(T.cO[P&7]^k)},w=Z(59,N)):R=function(k){T.push(k)},e&&R(e&255),N=p.length,e=0;e<N;e++)R(p[e])},E,V0=function(R,N,p){if("object"==(p=typeof R,p))if(R){if(R instanceof Array)r
2024-04-24 22:54:50 UTC	1255	IN	Data Raw: 37 37 2c 28 4b 28 33 33 36 2c 52 2c 28 4b 28 34 38 35 2c 28 4b 28 28 64 28 35 35 2c 52 2c 28 4b 28 28 64 28 28 64 28 35 30 33 2c 52 2c 28 4b 28 31 32 37 2c 28 64 28 32 39 38 2c 52 2c 63 28 28 4b 28 34 31 38 2c 52 2c 28 4b 28 33 37 2c 52 2c 28 64 28 28 64 28 33 30 31 2c 52 2c 28 64 28 31 36 37 2c 28 4b 28 28 64 28 35 39 2c 52 2c 5b 30 2c 28 4b 28 31 37 31 2c 52 2c 28 4b 28 32 35 2c 28 4b 28 31 31 37 2c 28 4b 28 31 35 33 2c 52 2c 28 64 28 31 36 33 2c 52 2c 28 64 28 33 33 31 2c 28 64 28 34 33 38 2c 52 2c 28 52 2e 61 79 3d 28 4e 3d 28 28 52 2e 57 4f 3d 32 35 2c 52 29 2e 53 3d 28 52 2e 50 3d 5b 5d 2c 28 52 2e 54 3d 28 52 2e 6a 3d 66 61 6c 73 65 2c 52 29 2c 52 29 2e 4c 43 3d 30 2c 52 2e 5a 3d 28 28 28 28 52 2e 73 3d 30 2c 52 2e 59 3d 76 6f 69 64 20 30 2c 52 2e Data Ascii: 77,(K(336,R,(K(485,(K((d(55,R,(K((d((d(503,R,(K(127,(d(298,R,c((K(418,R,(K(37,R,(d((d(301,R,(d(167,(K((d(59,R,[0,(K(171,R,(K(25,(K(117,(K(153,R,(d(163,R,(d(331,(d(438,R,(R.ay=(N=((R.WO=25,R).S=(R.P=[],(R.T=(R.j=false,R),R).LC=0,R.Z=((((R.s=0,R.Y=void 0,R.
2024-04-24 22:54:50 UTC	1255	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 64 28 28 66 3d 28 61 3d 56 28 28 79 3d 56 28 50 29 2c 50 29 29 2c 56 29 28 50 29 2c 66 29 2c 50 2c 5a 28 79 2c 50 29 7c 7c 5a 28 61 2c 50 29 29 7d 29 2c 39 34 31 29 29 2c 34 34 29 2c 52 2c 72 29 2c 31 37 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 21 58 28 66 2c 74 72 75 65 2c 66 61 6c 73 65 2c 50 29 26 26 28 66 3d 54 32 28 50 29 2c 61 3d 66 2e 73 52 2c 79 3d 66 2e 6e 43 2c 50 2e 54 3d 3d 50 7c 7c 61 3d 3d 50 2e 5a 55 26 26 79 3d 3d 50 29 26 26 28 64 28 66 2e 7a 73 2c 50 2c 61 2e 61 70 70 6c 79 28 79 2c 66 2e 67 29 29 2c 50 2e 41 3d 50 2e 4e 28 29 29 7d 29 2c 30 29 29 2c 35 30 38 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 2c 74 2c 47 2c 53 2c 43 2c 62 2c 42 2c Data Ascii: ,function(P,f,y,a){d((f=(a=V((y=V(P),P)),V)(P),f),P,Z(y,P)\|\|Z(a,P))}),941)),44),R,r),17),R,function(P,f,y,a){!X(f,true,false,P)&&(f=T2(P),a=f.sR,y=f.nC,P.T==P\|\|a==P.ZU&&y==P)&&(d(f.zs,P,a.apply(y,f.g)),P.A=P.N())}),0)),508),R,function(P,f,y,a,t,G,S,C,b,B,
2024-04-24 22:54:50 UTC	1255	IN	Data Raw: 50 29 2c 50 29 29 2c 56 29 28 50 29 2c 5a 28 66 2c 50 29 29 2c 74 29 2c 50 29 2c 5a 28 53 2c 50 29 29 2c 79 3d 5a 28 79 2c 50 29 2c 53 29 29 29 7b 66 6f 72 28 61 20 69 6e 20 47 3d 5b 5d 2c 53 29 47 2e 70 75 73 68 28 61 29 3b 53 3d 47 7d 69 66 28 50 2e 54 3d 3d 50 29 66 6f 72 28 66 3d 30 3c 66 3f 66 3a 31 2c 50 3d 53 2e 6c 65 6e 67 74 68 2c 61 3d 30 3b 61 3c 50 3b 61 2b 3d 66 29 74 28 53 2e 73 6c 69 63 65 28 61 2c 28 61 7c 30 29 2b 28 66 7c 30 29 29 2c 79 29 7d 7d 29 2c 52 29 2e 48 4f 3d 30 2c 52 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 28 61 3d 56 28 28 79 3d 28 66 3d 56 28 50 29 2c 56 28 50 29 29 2c 50 29 29 2c 50 2e 54 3d 3d 50 29 26 26 28 79 3d 5a 28 79 2c 50 29 2c 61 3d 5a 28 61 2c 50 29 2c 5a 28 66 2c 50 29 5b 79 5d 3d 61 2c 32 34 Data Ascii: P),P)),V)(P),Z(f,P)),t),P),Z(S,P)),y=Z(y,P),S))){for(a in G=[],S)G.push(a);S=G}if(P.T==P)for(f=0<f?f:1,P=S.length,a=0;a<P;a+=f)t(S.slice(a,(a\|0)+(f\|0)),y)}}),R).HO=0,R),function(P,f,y,a){(a=V((y=(f=V(P),V(P)),P)),P.T==P)&&(y=Z(y,P),a=Z(a,P),Z(f,P)[y]=a,24
2024-04-24 22:54:50 UTC	1255	IN	Data Raw: 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 28 52 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 70 28 4e 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 5d 7d 2c 72 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 29 7b 72 65 74 75 72 6e 20 5a 28 28 64 28 34 33 38 2c 52 2c 28 46 79 28 4e 2c 28 28 65 3d 5a 28 34 33 38 2c 52 29 2c 52 2e 50 29 26 26 65 3c 52 2e 73 3f 28 64 28 34 33 38 2c 52 2c 52 2e 73 29 2c 5a 65 28 52 2c 70 29 29 3a 64 28 34 33 38 2c 52 2c 70 29 2c 52 29 29 2c 65 29 29 2c 32 36 31 29 2c 52 29 7d 2c 4e 5f 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 72 65 74 75 72 6e 28 70 3d 6c 5b 4e 2e 57 5d 28 4e 2e 4f 52 29 2c 70 5b 4e 2e 57 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: rn[function(){return N},(R(function(p){p(N)}),function(){})]},r=this\|\|self,Ie=function(R,N,p,e){return Z((d(438,R,(Fy(N,((e=Z(438,R),R.P)&&e<R.s?(d(438,R,R.s),Ze(R,p)):d(438,R,p),R)),e)),261),R)},N_=function(R,N,p){return(p=l[N.W](N.OR),p[N.W]=function(){
2024-04-24 22:54:50 UTC	1255	IN	Data Raw: 5b 4e 5d 7c 30 29 2d 28 52 5b 28 28 4e 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 65 7c 30 29 5e 28 31 3d 3d 4e 3f 65 3c 3c 70 3a 65 3e 3e 3e 70 29 7d 63 61 74 63 68 28 77 29 7b 74 68 72 6f 77 20 77 3b 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 29 7b 69 66 28 21 70 2e 72 69 26 26 28 54 3d 76 6f 69 64 20 30 2c 4e 26 26 4e 5b 30 5d 3d 3d 3d 4d 26 26 28 54 3d 4e 5b 32 5d 2c 52 3d 4e 5b 31 5d 2c 4e 3d 76 6f 69 64 20 30 29 2c 65 3d 5a 28 31 37 32 2c 70 29 2c 30 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 77 3d 5a 28 33 33 31 2c 70 29 3e 3e 33 2c 65 2e 70 75 73 68 28 52 2c 77 3e 3e 38 26 32 35 35 2c 77 26 32 35 35 29 2c 76 6f 69 64 20 30 21 3d 54 26 26 65 2e 70 75 73 68 28 54 26 32 35 35 29 29 2c 52 3d 22 22 2c 4e 26 26 28 4e 2e 6d 65 Data Ascii: [N]\|0)-(R[((N\|0)+1)%3]\|0)-(e\|0)^(1==N?e<<p:e>>>p)}catch(w){throw w;}},n=function(R,N,p,e,w,T){if(!p.ri&&(T=void 0,N&&N[0]===M&&(T=N[2],R=N[1],N=void 0),e=Z(172,p),0==e.length&&(w=Z(331,p)>>3,e.push(R,w>>8&255,w&255),void 0!=T&&e.push(T&255)),R="",N&&(N.me
2024-04-24 22:54:50 UTC	1255	IN	Data Raw: 65 2e 41 3d 54 3b 69 66 28 21 6b 7c 7c 54 2d 65 2e 43 3c 65 2e 42 4f 2d 28 70 3f 32 35 35 3a 4e 3f 35 3a 32 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 20 65 2e 5a 3d 28 64 28 34 33 38 2c 28 70 3d 5a 28 28 65 2e 74 54 3d 52 2c 4e 29 3f 33 33 31 3a 34 33 38 2c 65 29 2c 65 29 2c 65 2e 73 29 2c 65 2e 56 2e 70 75 73 68 28 5b 69 47 2c 70 2c 4e 3f 52 2b 31 3a 52 2c 65 2e 44 2c 65 2e 6a 2c 65 2e 76 2c 65 2e 69 5d 29 2c 44 65 29 2c 74 72 75 65 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 4e 2e 42 3d 28 28 4e 2e 42 3f 4e 2e 42 2b 22 7e 22 3a 22 45 3a 22 29 2b 52 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 52 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 30 2c 32 30 34 38 29 7d 2c 44 65 3d 72 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 Data Ascii: e.A=T;if(!k\|\|T-e.C<e.BO-(p?255:N?5:2))return false;return e.Z=(d(438,(p=Z((e.tT=R,N)?331:438,e),e),e.s),e.V.push([iG,p,N?R+1:R,e.D,e.j,e.v,e.i]),De),true},H=function(R,N){N.B=((N.B?N.B+"~":"E:")+R.message+":"+R.stack).slice(0,2048)},De=r.requestIdleCallba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49777	74.125.136.103	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:50 UTC	1081	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL&co=aHR0cHM6Ly9taXJvc2xhd2JhY2EucGw6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=ohmt2ae69ssp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:54:51 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Wed, 24 Apr 2024 22:54:51 GMT Date: Wed, 24 Apr 2024 22:54:51 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 22:54:51 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');
2024-04-24 22:54:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49776	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:50 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:51 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:51 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:51 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49778	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:51 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:51 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:51 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:51 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49779	74.125.136.103	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:52 UTC	1059	OUT	GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://miroslawbaca.pl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:54:52 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 22:54:52 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-IITHQlJphMiYvVPWHxt_hA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 22:54:52 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-24 22:54:52 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-24 22:54:52 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-24 22:54:52 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 22:54:52 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-24 22:54:52 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-24 22:54:52 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 49 49 54 48 51 6c 4a 70 68 4d 69 59 76 56 50 57 48 78 74 5f 68 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="IITHQlJphMiYvVPWHxt_hA" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-24 22:54:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49780	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:52 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:52 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:52 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:52 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49781	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:52 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:52 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:52 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:52 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49783	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:53 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:53 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:53 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:53 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49784	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:53 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:53 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:53 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:53 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49785	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:54 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:54 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:54 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:54 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49786	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:54 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:54 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:54 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:54 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49787	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:54 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:55 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:55 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:55 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49788	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:55 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:55 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:55 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:55 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49789	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:55 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:56 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:56 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:56 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49790	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:55 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:56 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:56 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:56 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49791	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:56 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:57 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:57 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:57 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49792	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:56 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:57 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:57 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:57 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49793	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:57 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:58 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:58 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:58 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49794	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:57 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:58 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:58 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:58 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49795	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:58 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:59 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:59 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:59 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49796	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:58 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:54:59 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:59 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:54:59 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49797	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:59 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:00 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:54:59 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:00 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49798	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:54:59 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:00 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:00 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:00 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49799	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:00 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:00 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:00 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:00 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49800	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:00 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:00 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:00 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:00 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49801	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:01 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:01 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:01 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:01 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49802	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:01 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:01 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:01 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:01 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49803	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:02 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:02 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:02 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:02 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49804	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:02 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:02 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:02 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:02 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49805	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:03 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:03 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:03 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:03 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49806	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:03 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:03 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:03 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:03 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49807	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:04 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:04 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:04 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:04 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49808	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:04 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:04 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:04 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:04 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49809	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:05 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:05 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:05 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:05 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49810	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:05 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:05 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:05 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:05 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49811	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:06 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:06 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:06 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:06 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49812	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:06 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:06 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:06 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:06 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49813	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:07 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:07 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:07 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:07 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49814	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:07 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:07 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:07 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:07 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49815	74.125.136.103	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:07 UTC	1100	OUT	POST /recaptcha/api2/reload?k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7480 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:55:07 UTC	7480	OUT	Data Raw: 0a 18 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 12 a4 0f 30 33 41 46 63 57 65 41 35 44 32 33 35 67 5a 62 79 4b 58 76 57 76 76 5f 36 46 67 65 71 74 43 36 36 4d 6d 46 4e 45 6e 61 4b 7a 41 5f 64 77 54 4e 6e 58 31 7a 54 46 4b 6a 47 78 6e 44 73 38 4c 50 58 4a 5a 4f 62 62 78 65 6a 68 43 79 6a 70 77 52 75 5a 6a 50 67 44 38 6f 4a 32 6f 54 57 65 61 6b 5a 5f 63 5a 6a 2d 73 37 2d 4e 37 4e 76 45 48 77 53 58 66 48 61 56 59 59 78 43 75 32 30 4d 4c 78 79 78 34 45 62 51 6c 34 56 56 6e 79 68 7a 4c 70 6b 4f 36 68 56 73 4b 71 77 71 38 31 42 51 37 61 61 48 4c 38 68 63 5f 62 57 68 34 67 31 79 78 69 51 77 6d 76 6d 35 77 6f 79 57 50 6d 56 38 4d 66 6c 71 58 41 4a 4b 65 4e 75 34 2d 52 37 37 53 4e 33 76 57 5f 51 6b 4c 5a 71 51 69 58 77 59 5a 32 76 54 Data Ascii: V6_85qpc2Xf2sbe3xTnRte7m03AFcWeA5D235gZbyKXvWvv_6FgeqtC66MmFNEnaKzA_dwTNnX1zTFKjGxnDs8LPXJZObbxejhCyjpwRuZjPgD8oJ2oTWeakZ_cZj-s7-N7NvEHwSXfHaVYYxCu20MLxyx4EbQl4VVnyhzLpkO6hVsKqwq81BQ7aaHL8hc_bWh4g1yxiQwmvm5woyWPmV8MflqXAJKeNu4-R77SN3vW_QkLZqQiXwYZ2vT
2024-04-24 22:55:08 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 22:55:07 GMT Expires: Wed, 24 Apr 2024 22:55:07 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AKPP-6dEMQS_Lz-CFhhQ0fCy3_nPKIJRrvqcrCjRuf5bHQvhYav98b_UTFEYyyCguNcClyN0LBTK15QjcsVgUqc;Path=/recaptcha;Expires=Mon, 21-Oct-2024 22:55:07 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 22:55:08 UTC	559	IN	Data Raw: 32 33 39 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 6e 49 63 50 6d 73 45 64 5a 52 5f 6f 5a 4c 38 58 6f 56 70 33 4d 35 61 6a 70 78 4e 42 41 42 6c 71 49 44 36 55 54 49 53 54 59 50 53 4f 4e 67 5a 6f 5f 33 49 4e 78 4e 4b 57 78 68 41 54 49 4f 59 4f 54 46 69 74 71 59 4c 4c 7a 38 41 73 46 5f 4c 57 39 68 47 31 31 4c 33 73 34 66 53 4d 7a 6f 6b 78 57 33 34 75 70 66 6d 71 5f 72 46 53 55 76 38 65 6e 37 35 46 6e 68 32 30 41 74 38 58 50 4a 78 6c 34 71 30 47 59 5f 77 77 56 57 63 6e 44 58 63 72 67 6f 51 66 76 67 72 44 41 6d 4b 63 37 32 72 53 68 4d 6b 5a 53 45 6d 47 4f 43 58 6d 48 45 31 42 6f 4c 4e 62 52 46 6a 4a 45 33 35 6f 4b 38 4b 6a 79 4e 70 4f 4e 4c 45 63 6a 63 65 2d 37 46 4f 47 55 7a 2d 78 2d 72 39 53 44 58 47 4b 4c 6a 36 77 33 4a Data Ascii: 239)]}'["rresp","03AFcWeA7nIcPmsEdZR_oZL8XoVp3M5ajpxNBABlqID6UTISTYPSONgZo_3INxNKWxhATIOYOTFitqYLLz8AsF_LW9hG11L3s4fSMzokxW34upfmq_rFSUv8en75Fnh20At8XPJxl4q0GY_wwVWcnDXcrgoQfvgrDAmKc72rShMkZSEmGOCXmHE1BoLNbRFjJE35oK8KjyNpONLEcjce-7FOGUz-x-r9SDXGKLj6w3J
2024-04-24 22:55:08 UTC	17	IN	Data Raw: 6b 56 75 54 75 49 75 66 58 75 6a 5a 54 70 51 0d 0a Data Ascii: kVuTuIufXujZTpQ
2024-04-24 22:55:08 UTC	1255	IN	Data Raw: 61 33 30 0d 0a 74 78 31 78 43 74 45 43 63 62 33 48 6b 54 70 36 65 58 70 77 65 76 49 5f 64 65 54 4f 76 36 49 48 67 69 33 5f 75 6a 31 2d 6b 64 35 70 67 41 33 65 58 54 69 41 33 67 52 63 75 36 59 34 31 6d 53 4d 57 4e 70 56 64 66 44 58 55 61 45 43 57 5f 6e 61 45 55 7a 50 70 36 50 68 36 35 31 6b 6f 73 36 42 45 30 65 62 61 49 4a 36 58 70 56 4c 69 4f 34 53 39 36 4d 57 4d 5a 6e 41 4f 5f 41 78 72 67 45 65 71 75 38 4a 30 76 6d 5a 47 78 71 46 4a 71 62 38 34 49 51 63 33 30 6d 61 61 74 74 79 79 42 77 35 56 33 38 42 4e 6f 4d 78 2d 4d 35 68 74 33 6c 54 6b 6b 2d 75 39 6e 54 50 74 72 4c 55 78 56 68 67 66 5f 30 71 49 6c 69 46 35 62 51 36 4e 49 4f 31 62 57 70 5f 59 49 56 44 59 73 6d 6b 61 43 48 42 69 62 75 6b 30 68 42 6b 51 47 52 77 46 39 61 65 4f 6d 4b 70 36 46 49 70 43 56 Data Ascii: a30tx1xCtECcb3HkTp6eXpwevI_deTOv6IHgi3_uj1-kd5pgA3eXTiA3gRcu6Y41mSMWNpVdfDXUaECW_naEUzPp6Ph651kos6BE0ebaIJ6XpVLiO4S96MWMZnAO_AxrgEequ8J0vmZGxqFJqb84IQc30maattyyBw5V38BNoMx-M5ht3lTkk-u9nTPtrLUxVhgf_0qIliF5bQ6NIO1bWp_YIVDYsmkaCHBibuk0hBkQGRwF9aeOmKp6FIpCV
2024-04-24 22:55:08 UTC	1255	IN	Data Raw: 4f 75 39 6d 72 52 69 6f 65 44 32 35 50 75 78 57 48 46 42 62 77 41 38 47 50 34 58 4f 39 63 49 77 4e 50 6b 61 4c 53 71 6a 35 66 63 70 66 41 53 33 50 47 6c 33 4c 33 74 33 48 47 58 53 61 46 43 51 31 37 6f 44 43 74 7a 42 58 32 47 47 67 54 34 33 79 57 56 51 33 45 65 55 73 6a 4b 44 71 38 4a 45 6b 53 4a 37 4e 59 6c 67 69 37 38 75 74 75 73 61 37 54 78 79 31 49 67 79 6d 39 4e 64 6b 32 68 65 31 30 38 4c 59 4c 43 37 33 31 36 46 67 70 67 50 37 66 6f 6f 34 46 6a 6f 6e 4d 78 75 6a 68 7a 64 4d 33 41 4c 54 37 31 62 4d 6a 4a 44 67 43 78 65 63 6b 68 67 36 33 71 62 57 35 6e 42 31 32 64 6b 47 4c 6a 37 46 47 45 32 5a 41 58 5f 42 46 77 79 61 36 70 55 75 5a 4c 59 6a 70 4a 4f 5f 4c 5f 6b 32 6a 50 49 77 31 6e 31 6a 56 51 38 39 53 31 72 48 72 30 32 38 6f 79 78 66 71 37 45 34 31 68 Data Ascii: Ou9mrRioeD25PuxWHFBbwA8GP4XO9cIwNPkaLSqj5fcpfAS3PGl3L3t3HGXSaFCQ17oDCtzBX2GGgT43yWVQ3EeUsjKDq8JEkSJ7NYlgi78utusa7Txy1Igym9Ndk2he108LYLC7316FgpgP7foo4FjonMxujhzdM3ALT71bMjJDgCxeckhg63qbW5nB12dkGLj7FGE2ZAX_BFwya6pUuZLYjpJO_L_k2jPIw1n1jVQ89S1rHr028oyxfq7E41h
2024-04-24 22:55:08 UTC	105	IN	Data Raw: 61 69 35 63 79 64 33 78 58 42 32 77 6e 61 63 33 54 32 70 75 49 58 58 6a 34 54 69 61 72 67 52 56 6f 2d 36 78 71 6f 6f 78 4a 64 6e 70 4e 67 67 61 6c 46 4c 49 69 4b 4b 5f 7a 66 39 57 48 73 6d 64 77 67 6c 79 6e 7a 42 4f 43 42 6c 44 57 64 69 77 4e 4a 66 47 6f 46 6b 56 67 50 71 75 78 74 76 43 49 65 70 38 6f 48 49 0d 0a Data Ascii: ai5cyd3xXB2wnac3T2puIXXj4TiargRVo-6xqooxJdnpNggalFLIiKK_zf9WHsmdwglynzBOCBlDWdiwNJfGoFkVgPquxtvCIep8oHI
2024-04-24 22:55:08 UTC	1255	IN	Data Raw: 31 35 39 32 0d 0a 50 4e 6b 31 31 4f 51 66 6d 5a 6c 4f 55 35 59 4e 37 50 61 57 67 72 63 70 43 76 58 30 4d 32 37 6f 55 4d 4e 48 61 52 4a 56 6b 34 54 52 4b 58 66 33 48 34 6c 54 4a 56 4c 6b 66 62 30 41 73 46 6b 6e 76 38 70 67 71 74 48 4d 55 76 62 33 38 67 53 79 39 66 5f 77 45 5a 79 48 4d 51 2d 68 5a 4e 56 36 5f 56 4b 71 38 65 34 58 52 57 76 74 35 4d 45 49 78 61 39 79 61 59 72 6d 5a 36 79 57 5f 6c 41 46 63 50 64 6b 52 46 53 64 42 48 75 33 59 48 70 6e 4b 71 71 45 51 4c 41 6a 49 50 57 37 33 67 33 43 49 6c 67 35 50 75 32 6d 46 45 45 31 57 35 52 50 78 6a 2d 2d 33 76 7a 73 76 69 45 49 33 47 62 52 64 35 73 54 68 74 4e 4f 34 5f 37 75 72 55 38 71 58 37 62 6c 2d 4a 72 32 6e 31 58 59 68 58 57 69 6f 6e 55 36 55 55 67 47 68 63 36 5a 6b 4f 68 43 30 76 64 76 7a 45 6a 4b 2d Data Ascii: 1592PNk11OQfmZlOU5YN7PaWgrcpCvX0M27oUMNHaRJVk4TRKXf3H4lTJVLkfb0AsFknv8pgqtHMUvb38gSy9f_wEZyHMQ-hZNV6_VKq8e4XRWvt5MEIxa9yaYrmZ6yW_lAFcPdkRFSdBHu3YHpnKqqEQLAjIPW73g3CIlg5Pu2mFEE1W5RPxj--3vzsviEI3GbRd5sThtNO4_7urU8qX7bl-Jr2n1XYhXWionU6UUgGhc6ZkOhC0vdvzEjK-
2024-04-24 22:55:08 UTC	1255	IN	Data Raw: 35 74 54 53 64 55 39 33 50 38 61 50 65 70 41 39 4c 2d 4a 35 58 6c 72 79 71 72 6c 35 78 6d 42 68 65 47 42 54 6d 71 34 61 48 69 6d 66 47 7a 32 6b 30 5a 43 6f 30 57 74 63 57 35 58 4a 71 51 51 52 49 57 47 35 67 54 35 34 76 42 4f 6c 5f 4e 75 63 33 36 51 37 42 6e 55 78 70 69 73 4f 44 78 46 6f 49 73 58 5f 4d 76 6a 76 75 5f 79 5a 35 45 74 34 49 6c 66 51 7a 76 68 67 37 74 36 57 45 35 48 67 4d 64 6f 75 79 48 6f 53 31 58 42 65 35 69 55 77 4c 34 2d 78 79 7a 70 38 57 43 57 7a 50 36 30 52 79 72 47 52 55 54 4e 34 35 63 34 36 4e 58 47 76 4f 32 75 4d 41 59 4d 74 4c 55 79 4e 69 48 6a 49 48 42 52 53 51 76 34 78 36 63 59 58 42 5f 50 33 52 5f 4a 4f 63 78 49 78 61 42 4c 41 41 2d 6a 73 64 5a 64 4b 6e 53 63 74 44 69 4f 63 63 49 74 54 6c 64 6a 76 73 30 46 6d 73 67 30 79 6d 2d 55 Data Ascii: 5tTSdU93P8aPepA9L-J5Xlryqrl5xmBheGBTmq4aHimfGz2k0ZCo0WtcW5XJqQQRIWG5gT54vBOl_Nuc36Q7BnUxpisODxFoIsX_Mvjvu_yZ5Et4IlfQzvhg7t6WE5HgMdouyHoS1XBe5iUwL4-xyzp8WCWzP60RyrGRUTN45c46NXGvO2uMAYMtLUyNiHjIHBRSQv4x6cYXB_P3R_JOcxIxaBLAA-jsdZdKnSctDiOccItTldjvs0Fmsg0ym-U
2024-04-24 22:55:08 UTC	1255	IN	Data Raw: 68 43 64 6d 68 74 57 48 68 36 64 6e 52 6c 52 32 46 31 54 47 64 53 5a 43 74 4a 63 58 68 6c 4d 6e 51 34 63 47 6c 47 53 43 74 73 56 6d 70 30 4d 44 56 54 55 46 5a 74 64 6d 64 61 56 45 74 54 4f 57 74 6d 61 6b 56 68 62 57 64 48 51 31 52 74 59 30 39 54 62 6b 46 72 61 33 6f 30 52 54 64 76 56 44 64 4c 4c 79 39 79 51 57 4a 31 55 46 41 30 4e 7a 4e 61 4e 58 6c 6e 4d 45 78 32 55 6b 70 43 5a 33 41 7a 65 54 45 72 63 56 56 4a 54 47 6c 70 4f 57 35 59 65 6b 5a 69 5a 48 46 42 59 33 59 34 64 56 67 34 52 54 64 4e 62 55 78 33 53 32 74 35 61 55 56 6f 65 69 74 73 64 32 78 78 65 44 64 61 56 58 4a 53 63 33 68 44 64 7a 4a 59 54 31 70 59 57 6b 4a 74 64 6c 4a 50 4f 46 64 59 4d 6e 63 78 51 7a 5a 54 4b 79 39 54 62 55 4a 55 4e 58 70 6d 52 6c 42 4a 64 57 52 79 55 44 42 68 4d 6e 4e 56 4b Data Ascii: hCdmhtWHh6dnRlR2F1TGdSZCtJcXhlMnQ4cGlGSCtsVmp0MDVTUFZtdmdaVEtTOWtmakVhbWdHQ1RtY09TbkFra3o0RTdvVDdLLy9yQWJ1UFA0NzNaNXlnMEx2UkpCZ3AzeTErcVVJTGlpOW5YekZiZHFBY3Y4dVg4RTdNbUx3S2t5aUVoeitsd2xxeDdaVXJSc3hDdzJYT1pYWkJtdlJPOFdYMncxQzZTKy9TbUJUNXpmRlBJdWRyUDBhMnNVK
2024-04-24 22:55:08 UTC	1255	IN	Data Raw: 58 55 78 54 6b 78 4a 64 56 4e 74 54 54 6c 36 54 45 4e 6d 4e 30 35 78 55 6e 5a 56 63 57 5a 5a 5a 6e 6c 44 61 33 46 78 4d 7a 6c 49 51 58 5a 33 4e 55 52 4a 61 48 56 4d 63 31 68 4c 64 45 74 31 4e 32 73 35 56 47 74 72 52 48 64 6f 56 56 46 59 61 45 70 72 53 57 68 76 56 45 45 30 65 6d 56 6d 4e 58 4a 48 5a 6b 35 75 61 47 39 6b 62 30 74 54 54 6d 56 6a 5a 6a 63 34 4d 31 4e 6f 61 30 56 50 51 7a 5a 51 52 6d 46 68 65 6d 4e 69 62 47 70 4d 53 55 52 75 4f 54 4a 78 4e 6d 74 69 54 58 6b 35 4f 57 46 72 4d 55 78 74 57 6b 64 79 55 55 68 76 51 53 74 50 64 6e 42 32 53 45 46 70 56 7a 68 42 5a 44 5a 6f 4e 6b 68 6a 55 31 4e 4e 56 48 42 54 4e 31 42 43 57 47 46 36 61 44 64 70 55 55 4e 6f 62 58 70 55 57 6c 4e 6a 56 45 70 77 4d 31 5a 61 61 7a 64 4a 63 48 67 32 61 6d 6c 6f 65 47 52 5a Data Ascii: XUxTkxJdVNtTTl6TENmN05xUnZVcWZZZnlDa3FxMzlIQXZ3NURJaHVMc1hLdEt1N2s5VGtrRHdoVVFYaEprSWhvVEE0emVmNXJHZk5uaG9kb0tTTmVjZjc4M1Noa0VPQzZQRmFhemNibGpMSURuOTJxNmtiTXk5OWFrMUxtWkdyUUhvQStPdnB2SEFpVzhBZDZoNkhjU1NNVHBTN1BCWGF6aDdpUUNobXpUWlNjVEpwM1ZaazdJcHg2amloeGRZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49816	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:08 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:08 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:08 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:08 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49817	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:08 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:08 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:08 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:08 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49821	74.125.136.103	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:08 UTC	1403	OUT	GET /recaptcha/api2/payload?p=06AFcWeA6eAkkpFQi7IwwJwhIUV0lP0m6te_VdTKclmnezSRY1QyMLvayGRt1NmniaIU-meakxVJRAT3g5zk4f0Z0otG3SMs8rhFiB_aaj6I76i2dlFu8g1U3pzEVk5A8qLADunZJlPqkIWkB30xLtz6Qp2p8iyWVJ4zr7OVM2V-vMx0VodlFwfTRjrbILAUoIsPeJz2gMWGtqBkWsr7TxTx_hBtC7_rSygw&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6dEMQS_Lz-CFhhQ0fCy3_nPKIJRrvqcrCjRuf5bHQvhYav98b_UTFEYyyCguNcClyN0LBTK15QjcsVgUqc; NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:55:08 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 24 Apr 2024 22:55:08 GMT Date: Wed, 24 Apr 2024 22:55:08 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 22:55:08 UTC	6	IN	Data Raw: 41 35 39 32 0d 0a Data Ascii: A592
2024-04-24 22:55:08 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-04-24 22:55:08 UTC	1255	IN	Data Raw: 0e bc ae 42 9e 41 aa de 20 d7 11 24 65 0d b8 f7 e2 b8 2d 05 85 a5 a8 d5 ae 51 b7 3a fe e5 73 c6 7d 69 cd 72 f7 8d be 47 dc 0e 58 30 ef 51 6b b1 39 d9 1a c7 5a 79 26 dc ae 7e 5e 7d bf 0a d6 d3 f5 88 25 da 1c 80 5b b1 ae 42 e0 33 45 94 dc c4 0c 10 46 29 2c c3 f9 d9 50 63 38 fe 0e 71 54 e0 ac 28 dc f4 c8 e4 8c ae 56 44 f5 00 9c d3 65 7d e0 7d dc e7 38 ae 4e d6 69 e0 db bc 67 23 8e c2 ae 1d 41 89 50 d8 1f 4a c6 51 e5 d4 b7 1b 9b 32 4c aa ac 4e d2 49 e9 5c 1f c4 fb 4b dd 57 4f 36 d6 16 ad 2c c7 80 a0 76 f6 ae e6 df ec f2 c6 1d e3 62 c3 92 69 b2 dd db a0 21 40 18 38 f4 af 3e 78 8e 59 59 1d 34 b0 bc cc f1 8f 0d 7c 34 d6 4b 47 2e a4 16 d2 00 bc 8d f9 7c d6 c6 a9 e0 f5 b1 80 88 f5 0b b7 88 f6 5e 6b d1 6e 27 12 63 6b e5 6a 9d d0 49 23 28 f8 da 45 73 4a bd 45 7d 4e Data Ascii: BA $e-Q:s}irGX0Qk9Zy&~^}%[B3EF),Pc8qT(VDe}}8Nig#APJQ2LNI\KWO6,vbi!@8>xYY4\|4KG.\|^kn'ckjI#(EsJE}N
2024-04-24 22:55:08 UTC	1255	IN	Data Raw: 2a 8d dc db d8 96 04 1c 37 fb 3f 4a e6 24 9a 5b 82 cd 2c a6 66 cf f1 36 31 47 27 2c 11 a7 35 96 87 59 71 ae c8 fa a2 2d ac 6d 23 c8 e0 28 03 b9 e2 bd ff 00 c2 7f 0f 84 36 b6 fa b6 bb 7b 38 52 a1 cd b0 23 e6 38 e8 73 d0 7d 2b e7 df 84 56 43 51 f1 f6 97 6b 23 e6 35 b8 52 db b8 f7 af ab 3c 45 a9 23 aa c4 ac 00 42 40 e2 b4 70 8c d2 6c e6 ab 05 29 73 19 3a 9c ab 75 70 02 02 b1 20 da b1 29 fb 8a 07 15 25 b0 c4 2a cb 86 00 00 bc 60 d5 44 65 59 09 63 b8 11 c3 1f e5 56 d6 40 24 52 c7 6a 83 80 3b 1a da d6 46 2d df 56 5a 92 32 23 3d 38 5f ce a1 88 b8 6c e1 50 11 95 e6 a4 6d e1 09 2f df 85 3d a9 b3 27 ee 4b 34 63 0d d0 8e d5 92 91 48 b3 04 9b d0 2b 3b 67 eb 9c d4 37 97 02 d4 0c 8e 49 c7 5a 65 a9 11 9d c7 a2 f5 15 8b af 5e 17 bf 8e 08 ca 96 2d 91 83 c6 2a 66 d3 8b 35 Data Ascii: 7?J$[,f61G',5Yq-m#(6{8R#8s}+VCQk#5R<E#B@pl)s:up )%`DeYcV@$Rj;F-VZ2#=8_lPm/='K4cH+;g7IZe^-*f5
2024-04-24 22:55:08 UTC	333	IN	Data Raw: 02 96 26 54 f9 6b 59 d5 6c e6 9a b6 c2 b8 cc 80 90 33 ef de 9f 3a f2 a4 0c 91 de 95 f9 b9 1c 00 05 4c 3e e3 67 9e 29 c2 57 92 46 91 e8 6d 78 23 51 fe cb f1 1d 9e a0 e7 02 29 57 f1 cd 7d 29 6f 72 2e a0 5b 85 97 cd 47 5d cb de be 55 b7 c9 41 21 dd 84 65 5e 3d eb dd be 12 ea a6 e3 40 4b 19 a5 dd 2d b7 ca 09 ea 46 6b b9 b8 a8 e8 18 95 6b 1d ed ba 86 da 5b 93 8c fa 60 55 a8 80 47 2e ca 09 27 3e e4 55 38 a6 20 a8 5c e0 f0 1b e9 56 84 8c d1 72 b8 24 e3 ad 63 2b cb 53 81 45 97 d0 ac 88 42 a0 39 e0 7b 1a bb 6f a6 b3 04 04 e3 3d aa a5 a2 07 95 10 7c a4 7f 17 f5 ad df 36 2b 2b 43 2d c4 81 40 1c b1 e9 c7 7a 85 1d 4d 2d 68 98 5e 28 92 db 48 d2 da 6d e0 33 7c aa 0f 7a e7 fc 3f 64 66 d3 e1 be b8 1f e9 73 c8 59 55 87 dc 51 d8 7d 6b 9c f8 85 e2 d4 d4 2f 22 b3 b5 64 99 04 Data Ascii: &TkYl3:L>g)WFmx#Q)W})or.[G]UA!e^=@K-Fkk[`UG.'>U8 \Vr$c+SEB9{o=\|6++C-@zM-h^(Hm3\|z?dfsYUQ}k/"d
2024-04-24 22:55:08 UTC	1255	IN	Data Raw: b1 42 78 81 7e 0f 3d ea b3 60 30 0a a3 de ae 38 66 fb a7 8c d4 08 a4 3b 64 67 1e 95 2d e8 cd 62 ba 98 f6 cc e7 53 9d 58 b7 96 ad 84 f6 ab 77 45 79 dd c1 3e 95 6e 6b 18 d6 e1 a6 b7 99 1d dc 6e 70 0f 4f c2 aa 48 a0 a1 46 00 67 90 7d e9 46 37 57 22 49 c1 ea 8c 99 21 0d 28 ce 0e ee a7 a6 2b 47 48 91 54 61 9c b6 ce 72 c3 1c fd 6a ac e8 0b 72 71 db 9e f4 96 e4 96 20 13 91 d0 1e 86 b4 8d e3 aa 33 70 6f 53 d5 3c 31 ac d9 6a 96 8d 65 38 47 3f 71 d4 8c e4 74 af 9c be 2a 69 43 c3 5e 37 bf d3 a0 50 2d 9d bc d8 78 c6 14 fa 57 a3 e8 4e b1 ea af 7b 14 cf 1c ca 42 b2 1e 15 bd ea 6f 8d 5e 14 3e 23 82 c3 5a b5 d8 66 8d 42 4c 4b 63 8e d5 d5 7d a4 8e 4a d0 69 1e 28 d3 14 80 6d 23 e6 1c fb 53 2c 24 92 6b 94 f2 c9 93 23 18 3e b5 d5 9f 00 ea 2d 0b 28 ba b6 04 0c 93 8e bf e3 5a Data Ascii: Bx~=`08f;dg-bSXwEy>nknpOHFg}F7W"I!(+GHTarjrq 3poS<1je8G?qt*iC^7P-xWN{Bo^>#ZfBLKc}Ji(m#S,$k#>-(Z
2024-04-24 22:55:08 UTC	1255	IN	Data Raw: 99 4e 47 62 8d b4 3d 8a 68 24 4d 84 7e ef 38 25 7d ea 58 cb 86 0d c1 1d ce 6b 95 f8 4f f1 07 4a f1 45 9a 68 fa bd c4 76 fa bc 38 4c 3e 17 ce f4 2a 2b ae be b2 36 f3 e3 76 01 3c 60 f1 8a e5 9d 39 45 bb a3 68 a4 c5 4d 4a c2 d2 7d d7 db 4a 05 ce d2 71 9f 7a e5 75 cf 1e e9 31 b4 8b 62 f1 61 65 c1 25 b3 8a b1 e3 ab 7b 75 b6 b7 bd 9e 32 f1 46 ac b2 81 c6 47 6a f2 db 8b 7d 11 67 9b ca b7 59 21 72 19 46 79 5f f1 ac a2 94 99 d7 08 45 ab 1e c4 f7 da 64 76 90 eb 07 ed 17 a0 03 fe ac 1d a3 3e b5 42 ea fe 3b f9 56 e2 cc 32 21 c1 2a d5 e5 56 fa fd de 98 c6 c6 da f2 4f b3 cb 90 88 18 b9 3e b9 f4 af 47 d0 50 2e 90 8e 01 24 a8 3c f5 cd 1c bc af 42 2a 54 4d 72 dc d6 90 20 8b 38 1c 8e e6 a9 13 24 c4 c3 1e 03 31 c2 9e 95 52 f9 e5 56 da 58 fc ab 9c f6 c5 3e d5 a4 95 c7 94 79 Data Ascii: NGb=h$M~8%}XkOJEhv8L>+6v<`9EhMJ}Jqzu1bae%{u2FGj}gY!rFy_Edv>B;V2!VO>GP.$<B*TMr 8$1RVX>y
2024-04-24 22:55:08 UTC	1255	IN	Data Raw: 56 11 19 2c 47 d4 71 53 e9 eb 71 e3 4f 14 c1 04 8d fe 86 65 18 20 60 ed 1c 9c d5 3a ce 71 d4 df 95 cb 44 75 de 02 f0 e4 f7 65 6f ef 62 69 a4 b8 6d c2 3e ab 8f 53 5e a9 61 a7 ae 95 6a d2 4c aa 19 86 02 47 d0 7a 54 ba 35 95 ad a4 4b 1c 51 ed 8a 24 01 48 e3 81 49 2a 4b aa dc 05 52 c1 07 4e c2 bc a9 d4 6d e8 77 d1 8f 2a b1 8b a8 4c f3 a3 ca c0 85 51 90 14 f3 f8 d7 07 e3 44 8c 59 ab a7 ef 32 0e 57 a9 fc 6b d0 7c 72 ab a5 69 09 0a 32 2c 92 3f 27 be 2b c9 b5 ed 71 6e ae 30 23 08 aa 76 a9 e8 09 a5 06 e3 aa 2a 5a 9e 55 e2 4b 7b dd 3f 56 37 50 bb a9 55 0c 1e 36 20 a0 27 3f 5a f4 1f 0b 7c 58 f1 16 9f 65 1c 57 32 47 7d 68 a0 6d f3 72 4e 3d 14 f5 fc ea 97 8a ad 22 d5 34 ef 33 26 39 d0 0c 05 18 ce 3b e6 b1 3c 2d a6 db 5e 78 92 c6 2b 86 64 89 db 61 3d 33 f5 1d 2b b2 35 Data Ascii: V,GqSqOe `:qDueobim>S^ajLGzT5KQ$HIKRNmwLQDY2Wk\|ri2,?'+qn0#v*ZUK{?V7PU6 '?Z\|XeW2G}hmrN="43&9;<-^x+da=3+5
2024-04-24 22:55:08 UTC	1255	IN	Data Raw: 6a 17 2d 1a 17 b9 98 13 c1 65 38 38 a8 95 50 32 94 8c 92 ad 80 4f 42 69 67 92 3f 3c c0 ca 0b 01 b9 9b b1 ad 95 38 93 52 2a 6a cc c7 d5 64 93 cd 92 41 23 e5 8e 40 35 46 2b 89 e4 25 1d ca 9e d8 ab 97 cc b3 16 73 db de a9 42 55 9b 7e 70 56 b6 48 d3 64 6f e8 1a d9 d2 f5 2d 3a 4b 81 bc 5b ca ac ca 7b 8c f0 6b e8 e9 fc 46 b2 5b 2f 94 c0 ac 81 4f 5c 01 91 d8 fe 35 f2 c5 e3 a4 b1 45 26 d1 b9 17 04 e7 a8 af 64 f8 41 e2 7d 23 56 d0 c6 8b ad 34 49 3c 3c 23 48 7a 8f 6a e9 85 2b c6 e7 3b de c7 6c 35 59 d4 31 f3 c7 cc 70 dc 67 8a c4 d5 bc fd 40 22 47 aa 08 e2 2a 4b 8e 0f e1 5b d2 78 3f 4b b8 91 65 8f 53 9c 46 e3 a2 3e 73 4f 9b 46 d0 f4 d8 a4 48 ad 1e e2 50 30 1b ad 65 37 d0 ca 4f c8 f2 ed 43 c2 72 5d 5e 27 93 72 ee 9d 49 00 01 9f f0 ae cf e0 a7 87 26 b4 d4 6f ef e7 19 Data Ascii: j-e88P2OBig?<8RjdA#@5F+%sBU~pVHdo-:K[{kF[/O\5E&dA}#V4I<<#Hzj+;l5Y1pg@"GK[x?KeSF>sOFHP0e7OCr]^'rI&o
2024-04-24 22:55:08 UTC	1255	IN	Data Raw: 8e c0 0c 9a 3a b1 6c 80 71 c0 c7 34 e8 d9 49 60 43 7b 53 76 86 dc a0 90 7d 6a 75 6e c0 db 17 20 86 19 c3 0f e2 3c 62 9d 09 f2 a3 1c ae 36 90 5b 1d 69 8b 14 80 00 48 60 47 5f 4f ad 4f 85 0b 96 42 cc 07 7e 94 f6 d0 d1 4a e8 68 4d c9 c1 1f 2f 5a 58 58 72 4a ee 2a 3b 9a 62 e7 07 a2 ee ec 29 61 19 04 37 27 f8 88 35 42 ba 7a 58 7c 39 e4 80 02 7b 9a 2e ad 23 bf 81 ed ae fe 68 64 05 08 3c e4 1e bf fe ba 76 d0 ec 36 c8 a0 0e 00 3d ea 68 64 50 e4 b8 c9 1f 78 01 59 cf 6b 93 63 e6 1f 13 78 76 7d 37 c4 7a 86 95 1c 81 d2 1c f9 60 2e 32 be b9 ae 5f 50 b0 96 0b 61 e6 4c 18 38 c2 90 b8 e7 eb 5e d1 f1 3a c1 61 f1 2c 9a 82 c6 e1 67 04 36 2b cd 7c 48 c8 ac a8 af b6 28 fe 62 84 53 a1 29 ca 17 63 f6 32 86 b2 ea 79 ec 85 bc bd d9 07 8e 40 ef 55 c0 2c 54 8f 94 31 c1 15 a7 72 91 Data Ascii: :lq4I`C{Sv}jun <b6[iH`G_OOB~JhM/ZXXrJ*;b)a7'5BzX\|9{.#hd<v6=hdPxYkcxv}7z`.2_PaL8^:a,g6+\|H(bS)c2y@U,T1r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49824	172.217.215.104	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:08 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6dEMQS_Lz-CFhhQ0fCy3_nPKIJRrvqcrCjRuf5bHQvhYav98b_UTFEYyyCguNcClyN0LBTK15QjcsVgUqc; NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:55:08 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Wed, 24 Apr 2024 22:55:08 GMT Expires: Wed, 24 Apr 2024 22:55:08 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 22:55:08 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-24 22:55:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49825	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:09 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:09 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:09 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:09 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49826	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:09 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:09 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:09 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:09 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49830	172.217.215.104	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:09 UTC	1023	OUT	GET /recaptcha/api2/payload?p=06AFcWeA6eAkkpFQi7IwwJwhIUV0lP0m6te_VdTKclmnezSRY1QyMLvayGRt1NmniaIU-meakxVJRAT3g5zk4f0Z0otG3SMs8rhFiB_aaj6I76i2dlFu8g1U3pzEVk5A8qLADunZJlPqkIWkB30xLtz6Qp2p8iyWVJ4zr7OVM2V-vMx0VodlFwfTRjrbILAUoIsPeJz2gMWGtqBkWsr7TxTx_hBtC7_rSygw&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6dEMQS_Lz-CFhhQ0fCy3_nPKIJRrvqcrCjRuf5bHQvhYav98b_UTFEYyyCguNcClyN0LBTK15QjcsVgUqc; NID=513=Sh8JdJOhXavgcdk6B9-VauJmKduoaBO5Uk9b9iXOaeua30V0WiW64bD4667FOZOoBo0KoHjdtCUonLlmhbQ_B2g1poVEoRJQCu5Rbb5P4hHgx038-z9FcHxt01J-vJ6xQekdiAv2-DtEem6ohRCYDZZJvGwjwIh9AM3GrgXqxYs
2024-04-24 22:55:09 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 24 Apr 2024 22:55:09 GMT Date: Wed, 24 Apr 2024 22:55:09 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 22:55:09 UTC	6	IN	Data Raw: 41 35 39 32 0d 0a Data Ascii: A592
2024-04-24 22:55:09 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-04-24 22:55:09 UTC	1255	IN	Data Raw: 0e bc ae 42 9e 41 aa de 20 d7 11 24 65 0d b8 f7 e2 b8 2d 05 85 a5 a8 d5 ae 51 b7 3a fe e5 73 c6 7d 69 cd 72 f7 8d be 47 dc 0e 58 30 ef 51 6b b1 39 d9 1a c7 5a 79 26 dc ae 7e 5e 7d bf 0a d6 d3 f5 88 25 da 1c 80 5b b1 ae 42 e0 33 45 94 dc c4 0c 10 46 29 2c c3 f9 d9 50 63 38 fe 0e 71 54 e0 ac 28 dc f4 c8 e4 8c ae 56 44 f5 00 9c d3 65 7d e0 7d dc e7 38 ae 4e d6 69 e0 db bc 67 23 8e c2 ae 1d 41 89 50 d8 1f 4a c6 51 e5 d4 b7 1b 9b 32 4c aa ac 4e d2 49 e9 5c 1f c4 fb 4b dd 57 4f 36 d6 16 ad 2c c7 80 a0 76 f6 ae e6 df ec f2 c6 1d e3 62 c3 92 69 b2 dd db a0 21 40 18 38 f4 af 3e 78 8e 59 59 1d 34 b0 bc cc f1 8f 0d 7c 34 d6 4b 47 2e a4 16 d2 00 bc 8d f9 7c d6 c6 a9 e0 f5 b1 80 88 f5 0b b7 88 f6 5e 6b d1 6e 27 12 63 6b e5 6a 9d d0 49 23 28 f8 da 45 73 4a bd 45 7d 4e Data Ascii: BA $e-Q:s}irGX0Qk9Zy&~^}%[B3EF),Pc8qT(VDe}}8Nig#APJQ2LNI\KWO6,vbi!@8>xYY4\|4KG.\|^kn'ckjI#(EsJE}N
2024-04-24 22:55:09 UTC	1255	IN	Data Raw: 2a 8d dc db d8 96 04 1c 37 fb 3f 4a e6 24 9a 5b 82 cd 2c a6 66 cf f1 36 31 47 27 2c 11 a7 35 96 87 59 71 ae c8 fa a2 2d ac 6d 23 c8 e0 28 03 b9 e2 bd ff 00 c2 7f 0f 84 36 b6 fa b6 bb 7b 38 52 a1 cd b0 23 e6 38 e8 73 d0 7d 2b e7 df 84 56 43 51 f1 f6 97 6b 23 e6 35 b8 52 db b8 f7 af ab 3c 45 a9 23 aa c4 ac 00 42 40 e2 b4 70 8c d2 6c e6 ab 05 29 73 19 3a 9c ab 75 70 02 02 b1 20 da b1 29 fb 8a 07 15 25 b0 c4 2a cb 86 00 00 bc 60 d5 44 65 59 09 63 b8 11 c3 1f e5 56 d6 40 24 52 c7 6a 83 80 3b 1a da d6 46 2d df 56 5a 92 32 23 3d 38 5f ce a1 88 b8 6c e1 50 11 95 e6 a4 6d e1 09 2f df 85 3d a9 b3 27 ee 4b 34 63 0d d0 8e d5 92 91 48 b3 04 9b d0 2b 3b 67 eb 9c d4 37 97 02 d4 0c 8e 49 c7 5a 65 a9 11 9d c7 a2 f5 15 8b af 5e 17 bf 8e 08 ca 96 2d 91 83 c6 2a 66 d3 8b 35 Data Ascii: 7?J$[,f61G',5Yq-m#(6{8R#8s}+VCQk#5R<E#B@pl)s:up )%`DeYcV@$Rj;F-VZ2#=8_lPm/='K4cH+;g7IZe^-*f5
2024-04-24 22:55:09 UTC	1255	IN	Data Raw: 02 96 26 54 f9 6b 59 d5 6c e6 9a b6 c2 b8 cc 80 90 33 ef de 9f 3a f2 a4 0c 91 de 95 f9 b9 1c 00 05 4c 3e e3 67 9e 29 c2 57 92 46 91 e8 6d 78 23 51 fe cb f1 1d 9e a0 e7 02 29 57 f1 cd 7d 29 6f 72 2e a0 5b 85 97 cd 47 5d cb de be 55 b7 c9 41 21 dd 84 65 5e 3d eb dd be 12 ea a6 e3 40 4b 19 a5 dd 2d b7 ca 09 ea 46 6b b9 b8 a8 e8 18 95 6b 1d ed ba 86 da 5b 93 8c fa 60 55 a8 80 47 2e ca 09 27 3e e4 55 38 a6 20 a8 5c e0 f0 1b e9 56 84 8c d1 72 b8 24 e3 ad 63 2b cb 53 81 45 97 d0 ac 88 42 a0 39 e0 7b 1a bb 6f a6 b3 04 04 e3 3d aa a5 a2 07 95 10 7c a4 7f 17 f5 ad df 36 2b 2b 43 2d c4 81 40 1c b1 e9 c7 7a 85 1d 4d 2d 68 98 5e 28 92 db 48 d2 da 6d e0 33 7c aa 0f 7a e7 fc 3f 64 66 d3 e1 be b8 1f e9 73 c8 59 55 87 dc 51 d8 7d 6b 9c f8 85 e2 d4 d4 2f 22 b3 b5 64 99 04 Data Ascii: &TkYl3:L>g)WFmx#Q)W})or.[G]UA!e^=@K-Fkk[`UG.'>U8 \Vr$c+SEB9{o=\|6++C-@zM-h^(Hm3\|z?dfsYUQ}k/"d
2024-04-24 22:55:09 UTC	1255	IN	Data Raw: 41 1a 75 c5 3c 10 df 30 18 e7 a5 15 64 c7 62 40 8a 40 24 73 53 2a 80 98 03 a8 a6 a1 8f 62 e7 ae 39 ab 16 56 b3 df 4c 22 b6 5c 01 d4 f5 ab a7 a3 b9 48 58 e3 9a 6b 61 1c 10 b3 9d e0 00 bd cf 6c d7 6f e0 73 7d e1 9d 42 c0 df 2b c6 27 27 cc 56 fe e9 e9 5d 17 c1 cf 08 ca 2f 1e ea ea 21 22 ef 1b 01 1c 74 ad 0f 8d b6 6e 1e c9 a0 58 d1 d3 20 9c fb d5 ca 7c b3 5d 99 85 6a b2 94 d2 ec 77 96 e6 36 ca c6 0e cd a0 86 cd 4d 69 2c 6d 30 c3 87 2a 71 cf 00 1a e3 bc 09 aa fd b7 49 58 a6 7f 32 e2 33 b1 82 f3 81 d8 d7 67 a7 85 5c 33 38 c0 1d 08 ae a9 2e 53 36 dd f5 3a 3d 37 ec 96 56 f2 5c 4d c9 3c 81 9e bf 4f 7a f2 7f 8b 1e 2e bc bb 57 d2 ec 64 da 24 27 05 4f 20 77 cf bf 4a d0 f1 df 8a 9d ac cd 85 90 2d 26 70 cc 0f dd 1e b5 cc 78 6f 40 be bf be 5b a6 b6 9a e6 56 fb 87 18 5f Data Ascii: Au<0db@@$sSb9VL"\HXkalos}B+''V]/!"tnX \|]jw6Mi,m0qIX23g\38.S6:=7V\M<Oz.Wd$'O wJ-&pxo@[V_
2024-04-24 22:55:09 UTC	1255	IN	Data Raw: 91 d7 1d aa 64 6f 36 31 d8 63 8a 63 6c 32 08 d4 64 63 9e 29 f0 fc 87 fb ca 07 6a 56 b9 7d 0f 33 fd a5 74 86 b9 f0 b5 be a7 08 0d 25 a4 bf 30 cf f0 91 5f 33 c1 6e cd 1b 5c 32 b2 c3 1e 40 3d 09 35 f6 07 c5 13 14 de 12 ba b5 92 20 e0 ae 76 7a 57 80 6a d6 56 f7 3a 5c b0 41 67 89 08 dd b8 60 67 da 8a 4e c9 98 e2 1b 8c 75 67 97 be 47 27 bf 3c 50 cc db 32 16 ad 5d 69 f7 68 e5 5c 6d 20 e3 1e 94 c6 b1 b9 f2 c6 4d 75 c6 29 a2 d2 d0 8e c6 29 2e a6 58 15 09 77 6e 0f 6c 0e b5 eb 3e 11 f0 66 a6 d6 d1 49 61 66 c5 5c 0c 49 21 f9 47 d6 b8 5f 08 d9 dc 7d b2 cd 7c 80 64 37 02 24 62 3a ef 3d 6b eb 8d 1a c1 6d b4 db 6b 68 e2 1b 23 88 0c 16 c6 78 ea 69 38 5d 68 4c 9b 6b 46 66 78 33 49 9f 4c d3 96 de 45 c4 91 7d ec 1c 82 4f 3c 1f c6 b8 9f 8d 16 db a0 8a 43 1a e1 49 f9 ab d3 0d Data Ascii: do61ccl2dc)jV}3t%0_3n\2@=5 vzWjV:\Ag`gNugG'<P2]ih\m Mu)).Xwnl>fIaf\I!G_}\|d7$b:=kmkh#xi8]hLkFfx3ILE}O<CI
2024-04-24 22:55:09 UTC	1255	IN	Data Raw: 37 7b 10 4f 73 ef 46 24 4c a8 da d8 3f 78 73 cd 68 c5 2d c0 12 63 f9 46 41 e3 02 94 6f 46 d8 cc 71 8f 97 da 9d 1a a1 5d cb c7 af d6 9a ac c9 26 c2 37 0e bc f6 a1 68 37 64 87 c8 c7 68 f9 77 0c 7c c2 a3 90 92 17 70 20 1e 46 3d 29 d9 dd 2f cc 0e 48 ea 3a 01 4c 93 84 20 82 55 4f c8 47 7a 99 6a 4c 55 c9 80 f3 4e 01 5d a3 a1 ee 69 ca b8 e7 70 20 0c 7e 35 5c 6e 53 96 8f 2d fc 38 3d aa 52 15 c2 a9 c8 07 92 47 4c d5 37 ca b4 29 31 18 28 52 49 20 8e bd 38 a7 29 42 49 0a 72 7a 9c d3 00 f9 f6 14 04 9e 87 ad 2c 80 ee 04 e1 73 c0 51 f4 a1 ea ae 3f 51 40 53 b8 20 03 1e a7 ad 3c 39 11 86 51 b8 74 39 a6 21 52 a4 ba e3 03 1c 53 ad dc 2f 24 00 3b 7b d2 7b 03 4c 71 75 f3 09 61 c8 eb 4a 58 f5 66 3c 9e 00 e9 4d 66 54 42 c7 e6 07 a8 f5 a4 8c 61 b2 06 d0 dd 14 d5 5f 41 3d ae 5a Data Ascii: 7{OsF$L?xsh-cFAoFq]&7h7dhw\|p F=)/H:L UOGzjLUN]ip ~5\nS-8=RGL7)1(RI 8)BIrz,sQ?Q@S <9Qt9!RS/$;{{LquaJXf<MfTBa_A=Z
2024-04-24 22:55:09 UTC	1255	IN	Data Raw: 6b 11 95 1d 05 26 b5 2a da 0d 2a a5 c8 21 76 fb 52 82 48 70 8b c0 1c 03 da 82 eb b4 32 ae 09 e2 98 ad 22 82 5b 86 3e 82 a9 24 24 08 ec b1 81 8d c3 bf 1c d2 4b 6e a1 bc e9 1d 8f a7 35 2c 28 c4 31 dc 32 bf 77 de a3 93 fb ca 09 19 db 8f 7a 36 d8 49 0d 0c a8 db 48 c8 07 9c 9e 29 92 cb 1e f2 a0 b0 1e 8b 4f 8c 33 06 49 15 48 ce 7a 74 a4 10 b0 8d b0 40 e7 39 c5 3b 6a 5a 7a 58 54 50 39 04 82 07 39 ea 68 c8 12 90 ca ee 0f 4c 74 a5 52 ad f7 89 dd d3 81 d2 91 54 82 46 4b 30 38 eb f7 45 0d 12 c9 85 bb e3 b7 e7 45 28 e8 3e 53 f9 d1 53 64 22 b7 94 3a 0c 06 3d 4b 7f 4a 45 00 17 64 07 df b5 48 ac 0a ab 67 24 0e 37 54 71 89 03 b0 63 93 db 3d 0d 5d ca 69 08 31 85 dd 91 8e 4e 3b d2 39 f3 0a bc 6f 92 0f 01 85 3a 54 5c 02 17 07 d4 1e f4 8e a0 6e ca 82 d8 ca b0 34 2b 5c 1d 85 Data Ascii: k&**!vRHp2"[>$$Kn5,(12wz6IH)O3IHzt@9;jZzXTP99hLtRTFK08EE(>SSd":=KJEdHg$7Tqc=]i1N;9o:T\n4+\
2024-04-24 22:55:09 UTC	1255	IN	Data Raw: 1b e0 5f 85 e7 d3 7c 30 fa f5 d4 e8 66 ba 6c 79 20 e4 a8 1e b5 dd cc d9 42 e8 42 8e 85 71 d6 b2 95 ae 26 b5 b8 c7 40 a7 08 15 f1 4d 74 76 41 92 0f 3d 31 49 1a b1 60 30 54 d3 c8 6c 14 df b6 a2 7b 89 91 30 d8 73 85 c7 5c 62 9a 8c 37 b6 c5 f9 ba 93 4f c1 04 0d c4 83 d7 34 98 d8 cc c1 18 02 6a d2 d0 63 9c 6e db c0 c9 e3 f1 a8 d5 19 1b 0c a7 9e 73 4a c3 27 38 6c 90 7f 03 4e 75 62 83 77 60 07 d6 a1 a4 45 d2 63 5a 51 b7 a6 e0 1b 8e 29 61 32 3b b7 ca 54 02 3a f7 a8 c6 01 23 a9 1d 29 c1 e4 68 89 1f 29 c1 e9 d0 d5 2b 15 a9 65 c2 b2 74 03 07 24 83 d6 a0 fd d2 10 80 37 cc 7a 67 a5 32 3f 33 c9 25 98 0e f8 f7 a5 4f bb e6 1d ab 9e a1 4e 68 04 3f 72 2f 08 a4 81 d7 9a 1c 06 70 88 48 c8 ce 7b 0a 48 dd 23 c3 16 c8 cf 19 1d 4d 36 67 8c 96 0b 91 27 a1 1c 51 21 21 ca 8c 25 00 Data Ascii: _\|0fly BBq&@MtvA=1I`0Tl{0s\b7O4jcnsJ'8lNubw`EcZQ)a2;T:#)h)+et$7zg2?3%ONh?r/pH{H#M6g'Q!!%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49831	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:10 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:10 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:10 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:10 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49832	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:10 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:10 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:10 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:10 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49833	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:10 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:11 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:11 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:11 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49834	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:11 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:11 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:11 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:11 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49835	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:11 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:12 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:12 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:12 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49836	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:11 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:12 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:12 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:12 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49837	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:12 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:13 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:13 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:13 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49838	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:12 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:13 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:13 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:13 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49839	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:14 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:14 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:14 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:14 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49840	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:14 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:15 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:15 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:15 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49841	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:15 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:15 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:15 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:15 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49842	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:15 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:16 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:16 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:16 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49843	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:16 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:16 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:16 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:16 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49844	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:16 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:17 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:17 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:17 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49845	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:16 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:17 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:17 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:17 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49846	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:17 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:18 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:17 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:18 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49847	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:17 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:18 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:18 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:18 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49848	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:18 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:18 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:18 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:18 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49849	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:18 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:19 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:19 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:19 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49850	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:19 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:19 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:19 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:19 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49851	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:19 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:20 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:20 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:20 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49852	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:20 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:20 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:20 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:20 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49853	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:20 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:21 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:20 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:21 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49854	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:21 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:21 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:21 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:21 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49855	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:21 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:22 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:21 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:22 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49856	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:22 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:22 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:22 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:22 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49857	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:22 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:23 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:22 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:23 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49858	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:23 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:23 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:23 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:23 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49859	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:23 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7e44NlrWBxlKG34&MD=NfXmMBB2 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-24 22:55:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 78802938-1f3a-431a-82c5-4eb87eb6cdc3 MS-RequestId: d6a5a869-4935-440e-b570-c6a4fe606872 MS-CV: PXohaxdF8EaQlqc9.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 22:55:23 GMT Connection: close Content-Length: 25457
2024-04-24 22:55:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-24 22:55:24 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49860	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:23 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:24 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:24 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:24 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49861	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:23 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:24 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:24 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:24 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49862	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:24 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:25 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:25 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:25 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49863	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:24 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:25 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:25 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:25 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49864	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:25 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:26 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:26 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:26 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49865	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:25 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:26 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:26 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:26 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49866	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:26 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:27 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:26 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:27 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49867	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:26 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:27 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:26 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:27 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49868	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:27 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:27 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:27 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:27 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49869	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:27 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:27 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:27 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:27 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49870	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:28 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:28 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:28 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:28 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49871	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:28 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:28 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:28 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:28 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49872	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:29 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:29 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:29 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:29 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49873	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:29 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:29 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:29 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:29 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49875	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:30 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:30 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:30 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:30 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49876	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:30 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:30 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:30 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:30 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49877	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:31 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:31 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:31 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:31 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49878	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:31 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:31 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:31 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:31 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49879	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:32 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:32 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:32 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:32 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49880	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:32 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:32 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:32 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:32 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49881	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:33 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:33 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:33 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:33 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49882	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:33 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:33 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:33 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:33 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49884	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:34 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:34 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:34 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:34 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49885	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:34 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:34 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:34 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:34 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49886	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:35 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:35 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:35 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:35 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49887	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:35 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:35 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:35 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:35 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49888	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:36 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:36 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:36 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:36 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49889	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:36 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:36 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:36 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:36 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49890	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:36 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:37 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:37 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:37 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49891	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:37 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:37 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:37 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:37 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49893	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:38 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:38 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:38 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:38 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49892	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:38 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:38 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:38 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:38 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49895	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:39 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:39 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:39 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:39 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49894	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:39 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:39 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:39 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:39 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49896	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:40 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:40 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:40 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:40 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49897	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:40 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:40 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:40 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:40 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49898	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:41 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:41 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:41 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:41 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49899	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:41 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:41 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:41 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:41 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49900	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:42 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:42 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:42 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:42 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49901	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:42 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:42 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:42 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:42 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49902	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:43 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:43 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:43 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:43 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49903	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:43 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:43 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:43 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:43 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49904	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:44 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:44 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:44 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:44 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49905	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:44 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:44 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:44 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:44 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49906	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:45 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:45 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:45 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:45 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49907	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:45 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:45 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:45 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:45 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	49909	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:46 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:46 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:46 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:46 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	49910	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:46 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:46 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:46 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:46 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	49912	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:46 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:47 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:47 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:47 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	49913	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:47 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:47 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:47 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:47 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	49914	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:47 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:48 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:48 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:48 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	49915	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:47 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:48 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:48 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:48 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	49916	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:48 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:49 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:49 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:49 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	49917	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:48 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:49 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:49 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:49 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	49919	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:49 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:50 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:50 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:50 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	49918	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:49 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:50 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:50 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:50 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	49920	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:50 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:51 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:50 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:51 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	49921	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:50 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:51 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:51 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:51 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	49922	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:51 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:51 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:51 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:51 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	49923	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:51 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:52 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:52 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:52 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	49924	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:52 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:52 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:52 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:52 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	49925	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:52 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:53 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:53 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:53 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	49926	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:53 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:53 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:53 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:53 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	49927	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:53 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:54 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:54 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:54 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	49928	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:54 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:54 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:54 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:54 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	49929	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:54 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:55 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:55 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:55 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	49930	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:55 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:55 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:55 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:55 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	49931	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:55 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:56 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:55 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:56 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	49932	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:56 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:56 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:56 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:56 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	49933	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:56 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:56 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:56 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:56 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	49934	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:57 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:57 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:57 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:57 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	49935	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:57 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:57 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:57 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:57 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	49936	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:58 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:58 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:58 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:58 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	49937	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:58 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:58 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:58 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:58 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	49938	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:59 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:59 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:59 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:59 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	49939	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:55:59 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:55:59 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:55:59 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:55:59 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	49941	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:00 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:00 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:00 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:00 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	49942	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:00 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:00 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:00 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:00 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	49944	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:01 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:01 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:01 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:01 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	49943	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:01 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:01 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:01 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:01 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	49945	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:02 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:02 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:02 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:02 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	49946	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:02 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:02 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:02 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:02 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	49947	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:03 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:03 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:03 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:03 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	49948	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:03 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:03 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:03 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:03 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	49949	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:04 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:04 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:04 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:04 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	49950	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:04 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:04 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:04 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:04 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	49951	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:04 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:05 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:05 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:05 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	49952	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:04 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:05 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:05 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:05 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	49953	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:05 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:06 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:06 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:06 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	49954	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:06 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:06 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:06 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:06 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	49955	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:06 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:07 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:07 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:07 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	49956	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:07 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:07 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:07 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:07 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	49957	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:07 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:08 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:07 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:08 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	49958	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:08 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:08 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:08 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:08 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	49960	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:08 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:09 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:09 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:09 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	49959	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:08 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:09 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:09 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:09 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	49961	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:09 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:10 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:10 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:10 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	49962	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:09 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:10 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:10 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:10 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	49963	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:10 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:11 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:11 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:11 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	49964	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:10 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:11 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:11 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:11 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	49965	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:11 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:12 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:11 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:12 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	49966	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:11 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:12 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:11 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:12 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	49967	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:12 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:12 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:12 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:12 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	49968	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:12 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:13 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:12 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:13 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	49969	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:13 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:13 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:13 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:13 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	49970	153.92.220.230	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:13 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:13 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:13 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:13 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
210	192.168.2.5	49971	153.92.220.230	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:14 UTC	688	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1466681747-atari-embeds.googleusercontent.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1466681747-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:14 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:14 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:14 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
211	192.168.2.5	49972	153.92.220.230	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:56:14 UTC	424	OUT	GET /wp-content/uploads/2020/jocote.php?id=AwvqtMJyy0Vldu&file=Chasebank_Statement_Apr.pdf HTTP/1.1 Host: miroslawbaca.pl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:56:14 UTC	463	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.2.15 access-control-allow-origin: * content-type: text/html; charset=UTF-8 content-length: 15 date: Wed, 24 Apr 2024 22:56:14 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 22:56:14 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 4e 4f 22 7d Data Ascii: {"status":"NO"}

Target ID:	0
Start time:	00:54:24
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	00:54:27
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2012,i,2004731542745830163,9567229137091194842,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	00:54:30
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sites.google.com/view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.gstatic.com/atari/embeds/83a60601c213b72fb19c1855fb0c5f26/intermediate-frame-minified.html?jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__&r=440830379	HTTP Parser: No favicon
Source: https://www.gstatic.com/atari/embeds/83a60601c213b72fb19c1855fb0c5f26/intermediate-frame-minified.html?jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__&r=440830379	HTTP Parser: No favicon
Source: https://www.gstatic.com/atari/embeds/83a60601c213b72fb19c1855fb0c5f26/intermediate-frame-minified.html?jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__&r=440830379	HTTP Parser: No favicon
Source: https://1466681747-atari-embeds.googleusercontent.com/embeds/16cb204cf3a9d4d223a0a3fd8b0eec5d/inner-frame-minified.html?jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__	HTTP Parser: No favicon
Source: https://1466681747-atari-embeds.googleusercontent.com/embeds/16cb204cf3a9d4d223a0a3fd8b0eec5d/inner-frame-minified.html?jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__	HTTP Parser: No favicon
Source: https://1466681747-atari-embeds.googleusercontent.com/embeds/16cb204cf3a9d4d223a0a3fd8b0eec5d/inner-frame-minified.html?jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__	HTTP Parser: No favicon
Source: https://miroslawbaca.pl/wp-content/uploads/2020/boat.php?id=AwvqtMJyy0Vldu	HTTP Parser: No favicon
Source: https://miroslawbaca.pl/wp-content/uploads/2020/boat.php?id=AwvqtMJyy0Vldu	HTTP Parser: No favicon
Source: https://miroslawbaca.pl/wp-content/uploads/2020/boat.php?id=AwvqtMJyy0Vldu	HTTP Parser: No favicon
Source: https://miroslawbaca.pl/wp-content/uploads/2020/boat.php?id=AwvqtMJyy0Vldu	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL&co=aHR0cHM6Ly9taXJvc2xhd2JhY2EucGw6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=ohmt2ae69ssp	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL&co=aHR0cHM6Ly9taXJvc2xhd2JhY2EucGw6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=ohmt2ae69ssp	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL&co=aHR0cHM6Ly9taXJvc2xhd2JhY2EucGw6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=ohmt2ae69ssp	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfVIcYpAAAAAJxs1OJypixVLiu-KHsYa1fuwsHL	HTTP Parser: No favicon

Source: global traffic	DNS traffic detected: DNS query: sites.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: drive.google.com
Source: global traffic	DNS traffic detected: DNS query: 1466681747-atari-embeds.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: miroslawbaca.pl

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91

Source: chromecache_96.1.dr	String found in binary or memory: Otb.prototype.z7=function(a){a={youtube_videos:[{video_id:a}],provide_mrm_fields:!1};this.B&&(_.G(this.B,10,!1)&&(a.allow_all_signed_in_users=!0),_.G(this.B,11,!1)&&(a.provide_mrm_fields=!0));var c=ER(DR(CR(new BR(this.Sc,"v1/getEmbeddedYTPlayerValues"),3),"POST"),a).start().then(function(d){return d},function(d){throw d;});c.ae(function(){});this.addOnDisposeCallback(function(){c.cancel()});return c};var b1=function(a){LY.call(this,a.ca());this.context=a};_.C(b1,LY);b1.prototype.C=function(){return"onYouTubeIframeAPIReady"};b1.prototype.H=function(){var a=this.context.ha().bn()\|\|new _.eO;return _.dO(_.H(a,1,"https://www.youtube.com"),"iframe_api")};b1.prototype.B=function(){return _.Bi("YT.Player",this.ca().getWindow())};var c1=function(a){_.dn.call(this);this.B=a;this.la(this.B);var c=a.ha();a=a.ca();this.I=null;this.W=!1;this.U=0;this.J=null;c.mi()\|\|_.qj(c,83);var d=_.D(c,KV,112);d=null!=d?_.Gj(d,1):null;d="string"===typeof d?_.Rp(d):"https://drive.google.com";this.Da=Xbb(d);this.H=new _.ip(this);this.la(this.H);this.C=new amb;this.la(this.C);Ptb(this,c,a);d=this.B.ha();var e=_.D(d,KV,112);null!=e&&_.uj(e,7)&&(PX(this.C,new wW(this.B)),PX(this.C,new vW(this.B)));(e=cQ(d))&&_.G(e,7,!1)&&(PX(this.C,new zW(this.B)), equals www.youtube.com (Youtube)
Source: chromecache_96.1.dr	String found in binary or memory: _.h.ua=function(){this.item.isPlayable()\|\|this.item.tF();_.EE.prototype.ua.call(this)};_.h.NX=function(){this.pause()};var iO=function(a,c,d){hO.call(this,a,c,d);this.ready=this.aa=!1;this.J=d.ha().bn()\|\|new _.eO;this.host=_.H(this.J,1,"https://www.youtube.com");this.F={onReady:this.onReady.bind(this),onError:this.zU.bind(this),onKeyPress:this.onKeyPress.bind(this),onStateChange:this.onStateChange.bind(this),onTabOrderChange:this.tga.bind(this)}};_.C(iO,hO);_.h=iO.prototype;_.h.Es=function(){return this.host}; equals www.youtube.com (Youtube)
Source: chromecache_114.1.dr, chromecache_101.1.dr, chromecache_139.1.dr	String found in binary or memory: disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""}, equals www.youtube.com (Youtube)
Source: chromecache_127.1.dr	String found in binary or memory: gf=u(["https://sandbox.google.com/tools/feedback/"]),hf=u(["https://www.google.cn/tools/feedback/"]),jf=u(["https://help.youtube.com/tools/feedback/"]),kf=u(["https://asx-frontend-staging.corp.google.com/inapp/"]),lf=u(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),mf=u(["https://localhost.corp.google.com/inapp/"]),nf=u(["https://localhost.proxy.googlers.com/inapp/"]),of=S(Qe),pf=[S(Re),S(Se)],qf=[S(Te),S(Ue),S(Ve),S(We),S(Xe),S(Ye),S(Ze),S($e),S(af),S(bf)],rf=[S(cf),S(df)],sf= equals www.youtube.com (Youtube)

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sites.google.com/view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Windows Analysis Report
https://sites.google.com/view/scanned-files-jn1nn/google-pdf?file=Chasebank_Statement_Apr.pdf&fid=60231474