Edit tour

Windows Analysis Report
http://www.webcargo.net/d/23171122/s4s7muKhWe/

Overview

General Information

Sample URL:	http://www.webcargo.net/d/23171122/s4s7muKhWe/
Analysis ID:	1432176
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7072 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.webcargo.net/d/23171122/s4s7muKhWe/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1904,i,18130982064645696334,9330544172059271562,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.webcargo.net/d/23171122/s4s7muKhWe/	HTTP Parser: Iframe src: /empty.html
Source: https://www.webcargo.net/d/23171122/s4s7muKhWe/	HTTP Parser: Iframe src: /empty.html
Source: https://www.webcargo.net/d/23171122/s4s7muKhWe/	HTTP Parser: Iframe src: /empty.html
Source: https://www.webcargo.net/	HTTP Parser: Iframe src: /empty.html

Source: https://www.webcargo.net/d/23171122/s4s7muKhWe/	HTTP Parser: <input type="password" .../> found
Source: https://www.webcargo.net/	HTTP Parser: <input type="password" .../> found

Source: https://www.webcargo.net/d/23171122/s4s7muKhWe/	HTTP Parser: No favicon
Source: https://www.webcargo.net/d/23171122/s4s7muKhWe/	HTTP Parser: No favicon
Source: https://www.webcargo.net/d/23171122/s4s7muKhWe/	HTTP Parser: No favicon
Source: https://www.webcargo.net/	HTTP Parser: No favicon

Source: https://www.webcargo.net/d/23171122/s4s7muKhWe/	HTTP Parser: No <meta name="author".. found
Source: https://www.webcargo.net/d/23171122/s4s7muKhWe/	HTTP Parser: No <meta name="author".. found
Source: https://www.webcargo.net/d/23171122/s4s7muKhWe/	HTTP Parser: No <meta name="author".. found
Source: https://www.webcargo.net/	HTTP Parser: No <meta name="author".. found

Source: https://www.webcargo.net/d/23171122/s4s7muKhWe/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.webcargo.net/d/23171122/s4s7muKhWe/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.webcargo.net/d/23171122/s4s7muKhWe/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.webcargo.net/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49735 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.112.29
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203

Source: global traffic	HTTP traffic detected: GET /d/23171122/s4s7muKhWe/ HTTP/1.1Host: www.webcargo.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/font-awesome.min.css?r=4.41 HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.webcargo.net/d/23171122/s4s7muKhWe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
Source: global traffic	HTTP traffic detected: GET /assets/css/responsive-theme.css?r=4.41 HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.webcargo.net/d/23171122/s4s7muKhWe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
Source: global traffic	HTTP traffic detected: GET /assets/css/wc-responsive.css?r=4.41 HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.webcargo.net/d/23171122/s4s7muKhWe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
Source: global traffic	HTTP traffic detected: GET /assets/js/jquery-2.0.3.min.js?r=4.41 HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.webcargo.net/d/23171122/s4s7muKhWe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
Source: global traffic	HTTP traffic detected: GET /assets/js/jquery.tmpl.js?r=4.41 HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.webcargo.net/d/23171122/s4s7muKhWe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
Source: global traffic	HTTP traffic detected: GET /assets/js/bootstrap.min.js?r=4.41 HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.webcargo.net/d/23171122/s4s7muKhWe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
Source: global traffic	HTTP traffic detected: GET /assets/plugins/bookmark-bubble/bookmark_bubble.js HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.webcargo.net/d/23171122/s4s7muKhWe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
Source: global traffic	HTTP traffic detected: GET /assets/js/webcargo-code.js?r=4.41 HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.webcargo.net/d/23171122/s4s7muKhWe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
Source: global traffic	HTTP traffic detected: GET /assets/images/wc-text-f5f5f5-50.svg HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.webcargo.net/d/23171122/s4s7muKhWe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
Source: global traffic	HTTP traffic detected: GET /assets/images/wc-text-f5f5f5-50.svg HTTP/1.1Host: www.webcargo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
Source: global traffic	HTTP traffic detected: GET /empty.html HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.webcargo.net/d/23171122/s4s7muKhWe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
Source: global traffic	HTTP traffic detected: GET /assets/fonts/fontawesome-webfont.woff2?v=4.4.0 HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.webcargo.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.webcargo.net/assets/css/font-awesome.min.css?r=4.41Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
Source: global traffic	HTTP traffic detected: GET /zdZZDs33EvNA8n7Oj9AH9Q.js HTTP/1.1Host: widget.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.webcargo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/app-icons/favicon.ico HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.webcargo.net/d/23171122/s4s7muKhWe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; user_timezone=Europe/Amsterdam
Source: global traffic	HTTP traffic detected: GET /t2/117705/web/track.js?_=1714141793544&s=0&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL3d3dy53ZWJjYXJnby5uZXQvZC8yMzE3MTEyMi9zNHM3bXVLaFdlLyIsInIiOiIifX0%3D HTTP/1.1Host: by2.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.webcargo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=kEsF.ttOLS1INyMb3y_D7Dm_3QNOI6cJDQn0hDJoRI8-1714141794-1.0.1.1-R8tFWuBfk3UWGWW7gU5YsBwoFAXh_dLwrtovOHZdt5a1busm684_2YZTeRDaFWWtCU545APKqfs1pU1nlFq.lg
Source: global traffic	HTTP traffic detected: GET /assets/app-icons/favicon.ico HTTP/1.1Host: www.webcargo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; user_timezone=Europe/Amsterdam
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yynUUGmL8UHR6Lc&MD=TEYAa2dk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fwww.webcargo.net&oit=3&cp=24&pgcl=4&gs_rn=42&psi=3QnChvIfJHsNfRPD&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yynUUGmL8UHR6Lc&MD=TEYAa2dk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; user_timezone=Europe/Amsterdam; uvts=0f955114-3b2f-41de-7052-3df54ef80720
Source: global traffic	HTTP traffic detected: GET /assets/images/wc-logo-400.svg HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.webcargo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; user_timezone=Europe/Amsterdam; uvts=0f955114-3b2f-41de-7052-3df54ef80720
Source: global traffic	HTTP traffic detected: GET /zdZZDs33EvNA8n7Oj9AH9Q.js HTTP/1.1Host: widget.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.webcargo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=kEsF.ttOLS1INyMb3y_D7Dm_3QNOI6cJDQn0hDJoRI8-1714141794-1.0.1.1-R8tFWuBfk3UWGWW7gU5YsBwoFAXh_dLwrtovOHZdt5a1busm684_2YZTeRDaFWWtCU545APKqfs1pU1nlFq.lgIf-None-Match: W/"eebe51f3818400117425afb443305030"
Source: global traffic	HTTP traffic detected: GET /assets/images/wc-logo-400.svg HTTP/1.1Host: www.webcargo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; user_timezone=Europe/Amsterdam; uvts=0f955114-3b2f-41de-7052-3df54ef80720
Source: global traffic	HTTP traffic detected: GET /t2/117705/web/0f955114-3b2f-41de-7052-3df54ef80720/track.js?_=1714141855808&s=1&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL3d3dy53ZWJjYXJnby5uZXQvIiwiciI6IiJ9fQ%3D%3D HTTP/1.1Host: by2.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.webcargo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=kEsF.ttOLS1INyMb3y_D7Dm_3QNOI6cJDQn0hDJoRI8-1714141794-1.0.1.1-R8tFWuBfk3UWGWW7gU5YsBwoFAXh_dLwrtovOHZdt5a1busm684_2YZTeRDaFWWtCU545APKqfs1pU1nlFq.lg; uvts=0f955114-3b2f-41de-7052-3df54ef80720; uvts=0f955114-3b2f-41de-7052-3df54ef80720
Source: global traffic	HTTP traffic detected: GET /d/23171122/s4s7muKhWe/ HTTP/1.1Host: www.webcargo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; user_timezone=Europe/Amsterdam; uvts=0f955114-3b2f-41de-7052-3df54ef80720
Source: global traffic	HTTP traffic detected: GET /t2/117705/web/0f955114-3b2f-41de-7052-3df54ef80720/track.js?_=1714141874161&s=1&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL3d3dy53ZWJjYXJnby5uZXQvZC8yMzE3MTEyMi9zNHM3bXVLaFdlLyIsInIiOiIifX0%3D HTTP/1.1Host: by2.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.webcargo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=kEsF.ttOLS1INyMb3y_D7Dm_3QNOI6cJDQn0hDJoRI8-1714141794-1.0.1.1-R8tFWuBfk3UWGWW7gU5YsBwoFAXh_dLwrtovOHZdt5a1busm684_2YZTeRDaFWWtCU545APKqfs1pU1nlFq.lg; uvts=0f955114-3b2f-41de-7052-3df54ef80720; uvts=0f955114-3b2f-41de-7052-3df54ef80720
Source: global traffic	HTTP traffic detected: GET /d/23171122/s4s7muKhWe/ HTTP/1.1Host: www.webcargo.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.webcargo.net
Source: global traffic	DNS traffic detected: DNS query: widget.uservoice.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: by2.uservoice.com

Source: chromecache_106.1.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_106.1.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_96.1.dr	String found in binary or memory: http://forums.devshed.com/html-programming-1/sprintf-39065.html
Source: chromecache_95.1.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_96.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_88.1.dr	String found in binary or memory: http://pingendo.com
Source: chromecache_96.1.dr	String found in binary or memory: http://widget-cdn.rpxnow.com/js/lib/webcargo/engage.js
Source: chromecache_82.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_100.1.dr	String found in binary or memory: http://www.google-analytics.com
Source: chromecache_96.1.dr	String found in binary or memory: http://www.jacklmoore.com/autosize
Source: chromecache_96.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_88.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_83.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI
Source: chromecache_83.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVI
Source: chromecache_83.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVI
Source: chromecache_83.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVI
Source: chromecache_83.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVI
Source: chromecache_83.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVI
Source: chromecache_83.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI
Source: chromecache_83.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVI
Source: chromecache_83.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVI
Source: chromecache_83.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVI
Source: chromecache_88.1.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_96.1.dr	String found in binary or memory: https://github.com/twitter/typeahead.js
Source: chromecache_96.1.dr	String found in binary or memory: https://rpxnow.com/js/lib/webcargo/engage.js
Source: chromecache_100.1.dr	String found in binary or memory: https://ssl.google-analytics.com
Source: chromecache_100.1.dr	String found in binary or memory: https://ssl.google-analytics.com/j/__utm.gif
Source: chromecache_100.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect?
Source: chromecache_100.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences?
Source: chromecache_100.1.dr	String found in binary or memory: https://www.google.com/analytics/web/inpage/pub/inpage.js?
Source: chromecache_85.1.dr	String found in binary or memory: https://www.webcargo.net

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49735 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@15/57@18/9

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.webcargo.net/d/23171122/s4s7muKhWe/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1904,i,18130982064645696334,9330544172059271562,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1904,i,18130982064645696334,9330544172059271562,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://www.webcargo.net/d/23171122/s4s7muKhWe/	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://www.google.%/ads/ga-audiences?	0%	URL Reputation	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
virginia.webcargo.net	3.216.119.164	true	false	high
widget.uservoice.com	104.17.27.92	true	false	high
www.google.com	142.250.217.164	true	false	high
by2.uservoice.com	104.17.27.92	true	false	high
www.webcargo.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://by2.uservoice.com/t2/117705/web/track.js?_=1714141793544&s=0&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL3d3dy53ZWJjYXJnby5uZXQvZC8yMzE3MTEyMi9zNHM3bXVLaFdlLyIsInIiOiIifX0%3D	false	high
https://www.webcargo.net/empty.html	false	high
https://www.webcargo.net/assets/js/jquery.tmpl.js?r=4.41	false	high
https://www.webcargo.net/assets/js/webcargo-code.js?r=4.41	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fwww.webcargo.net&oit=3&cp=24&pgcl=4&gs_rn=42&psi=3QnChvIfJHsNfRPD&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://widget.uservoice.com/zdZZDs33EvNA8n7Oj9AH9Q.js	false	high
https://by2.uservoice.com/t2/117705/web/0f955114-3b2f-41de-7052-3df54ef80720/track.js?_=1714141874161&s=1&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL3d3dy53ZWJjYXJnby5uZXQvZC8yMzE3MTEyMi9zNHM3bXVLaFdlLyIsInIiOiIifX0%3D	false	high
https://by2.uservoice.com/t2/117705/web/0f955114-3b2f-41de-7052-3df54ef80720/track.js?_=1714141855808&s=1&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL3d3dy53ZWJjYXJnby5uZXQvIiwiciI6IiJ9fQ%3D%3D	false	high
https://www.webcargo.net/assets/plugins/bookmark-bubble/bookmark_bubble.js	false	high
https://www.webcargo.net/assets/app-icons/favicon.ico	false	high
http://www.webcargo.net/d/23171122/s4s7muKhWe/	false	high
https://www.webcargo.net/assets/css/font-awesome.min.css?r=4.41	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://www.webcargo.net/assets/js/jquery-2.0.3.min.js?r=4.41	false	high
https://www.webcargo.net/assets/js/bootstrap.min.js?r=4.41	false	high
https://www.webcargo.net/assets/images/wc-logo-400.svg	false	high
https://www.webcargo.net/assets/fonts/fontawesome-webfont.woff2?v=4.4.0	false	high
https://www.webcargo.net/d/23171122/s4s7muKhWe/	false	high
https://www.webcargo.net/assets/css/wc-responsive.css?r=4.41	false	high
https://www.webcargo.net/	false	high
https://www.webcargo.net/assets/images/wc-text-f5f5f5-50.svg	false	high
https://www.webcargo.net/assets/css/responsive-theme.css?r=4.41	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_106.1.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	chromecache_82.1.dr	false		high
http://widget-cdn.rpxnow.com/js/lib/webcargo/engage.js	chromecache_96.1.dr	false		high
https://github.com/twitter/typeahead.js	chromecache_96.1.dr	false		high
http://jqueryui.com	chromecache_96.1.dr	false		high
http://pingendo.com	chromecache_88.1.dr	false		high
https://www.webcargo.net	chromecache_85.1.dr	false		high
http://fontawesome.io/license	chromecache_106.1.dr	false		high
https://rpxnow.com/js/lib/webcargo/engage.js	chromecache_96.1.dr	false		high
https://www.google.%/ads/ga-audiences?	chromecache_100.1.dr	false	URL Reputation: safe	low
http://www.opensource.org/licenses/mit-license.php	chromecache_96.1.dr	false		high
https://stats.g.doubleclick.net/j/collect?	chromecache_100.1.dr	false		high
http://forums.devshed.com/html-programming-1/sprintf-39065.html	chromecache_96.1.dr	false		high
http://getbootstrap.com)	chromecache_95.1.dr	false	Avira URL Cloud: safe	low
http://www.jacklmoore.com/autosize	chromecache_96.1.dr	false		high
https://www.google.com/analytics/web/inpage/pub/inpage.js?	chromecache_100.1.dr	false		high
https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css	chromecache_88.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.216.119.164	virginia.webcargo.net	United States	14618	AMAZON-AESUS	false
34.198.52.69	unknown	United States	14618	AMAZON-AESUS	false
34.199.143.213	unknown	United States	14618	AMAZON-AESUS	false
104.17.27.92	widget.uservoice.com	United States	13335	CLOUDFLARENETUS	false
142.250.217.164	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.31.92	unknown	United States	13335	CLOUDFLARENETUS	false
54.157.137.212	unknown	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432176
Start date and time:	2024-04-26 16:29:20 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://www.webcargo.net/d/23171122/s4s7muKhWe/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@15/57@18/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.189.131, 142.250.189.142, 74.125.139.84, 34.104.35.123, 199.232.210.172, 142.250.189.138, 172.217.2.195, 172.217.2.200, 142.250.217.170, 142.250.64.202, 172.217.15.202, 142.250.217.234, 172.217.2.202, 142.250.64.234, 172.217.165.202, 142.250.217.202, 142.251.35.234, 192.178.50.42, 192.178.50.74, 142.250.217.227, 142.250.64.170, 142.250.64.138, 172.217.2.206
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, ssl.google-analytics.com, clients2.google.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:29:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9857388082736316
Encrypted:	false
SSDEEP:	48:8ldpQTJ0EbOHIidAKZdA1FehwiZUklqehvy+3:8C3hYy
MD5:	BA78B557984E1C0B29CAE80F306F2DA7
SHA1:	5CEC0925AE6CF9D24F165939489C611A9F0F1316
SHA-256:	A8F3AC4C8C43A6A41CD7337DF3A8011BAAD12FFD7AE219FE8AF38DC9FF1C1251
SHA-512:	37F913CB5E8D019F0F202A27BDBD175B7B71C02C2B35DF4BCB368CB6072C7C5CE04FEAFEA332CBF8802A00380587A01CCADE3026341EAD71FD4997303633C52A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......`2...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.s....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.s....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.s....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.s..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.s...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............m.s.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:29:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.001106674588926
Encrypted:	false
SSDEEP:	48:83dpQTJ0EbOHIidAKZdA1seh/iZUkAQkqehIy+2:8E339QNy
MD5:	18E23777FD8AC26F6CF9244982E21D2A
SHA1:	D05DC340FEFE8EC8FD5A601375F8AFFBA642383A
SHA-256:	557FE6E4084E7A95844BAF21F0D6B504CD6AB471ECD91C10A5EBAEFAC5CCD38F
SHA-512:	463573DF2B13341CE5F288E9DE2552C678A1D9881F88080B1C498C82F79E82BC16E2914A32F06308B701CE31FDF3D43FCCBFA08715955FD9C598440B22381C57
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....I.O2...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.s....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.s....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.s....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.s..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.s...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............m.s.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.0087956069127415
Encrypted:	false
SSDEEP:	48:82dpQTJ0EbAHIidAKZdA14meh7sFiZUkmgqeh7sGy+BX:8L3lncy
MD5:	D189F1384E331FBA3A156843DF81F02B
SHA1:	1D8BBFB195039AA915033F442D0E4A4CAE31F596
SHA-256:	92C794469B21243894091D46D164246C40D3B2DFCEB8D4BABDFCCF8EF3B98270
SHA-512:	420C30B0561E802B0702B560EF284FF990D5B488531DCB5377ECB7DA85F8C5D85F083C08D8D32EBE72C1294CD56232FD46946DFC558147810F7FABF6B9B4884D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.s....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.s....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.s....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.s..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............m.s.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:29:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.998854578725436
Encrypted:	false
SSDEEP:	48:89dpQTJ0EbOHIidAKZdA1TehDiZUkwqehUy+R:8a3Eey
MD5:	CCBB0A3B6CBD0C8F04C11C6DEEBEBCF0
SHA1:	C8FAFA1BAD64D8CEDC2B1A764B8B906623EF904A
SHA-256:	8C64ECFFB8942794686B079515BC4899BD8945EEB203246B8EFFDA50D60AC9AE
SHA-512:	61A6A9F76887D2360201EDACF215586CE841FD1037B422DEA96DEAC927B5B3976AB0BA87120BFE2486769C43E0E8ED9E9F3B99D50607788C89B0BE65AB69D972
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....}0I2...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.s....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.s....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.s....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.s..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.s...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............m.s.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:29:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9872519292070434
Encrypted:	false
SSDEEP:	48:8cdpQTJ0EbOHIidAKZdA1dehBiZUk1W1qehay+C:8R3k96y
MD5:	C3894CE126AB94FD6475FA8BEBB31BC5
SHA1:	8FB7D0B557F1D3EE18E636DEC731B3A369429217
SHA-256:	86E0A04E36594F0032223B9FC6483127FB083723F07A3E48DF6F87FF55FACBDE
SHA-512:	B225C6D93F31B1A875960E2F4E37BEEE7E48E3CFCA38E06569C8D8CE780C254D8BFCBCDCFE6CC84B50C9BD1E32793C6D6EE86F6B6D3649D91D0F0BD98B3A796C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....OV2...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.s....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.s....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.s....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.s..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.s...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............m.s.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:29:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.999170107472051
Encrypted:	false
SSDEEP:	48:8FdpQTJ0EbOHIidAKZdA1duTeehOuTbbiZUk5OjqehOuTbcy+yT+:8i3WTfTbxWOvTbcy7T
MD5:	A75C6B49BDAE111103FD592AEC92E3EC
SHA1:	CD0BECC55F9C4F02C0DE7F9843B5D56A48EE3A6B
SHA-256:	747C1F0AF7E5147B8C4547D4955EBBD3186FADCB0AFC81F92BCE2D19FCFDF53F
SHA-512:	94F8D6DC9D71D020FF07633961815B5B902819BA555D6E3167772AD632DE3B47E77C048FB4B4A13E85919D4A58E1DEA437FB57615BD42AF24EAEE902173FAE82
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......?2...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.s....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.s....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.s....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.s..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.s...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............m.s.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305)
Category:	downloaded
Size (bytes):	46274
Entropy (8bit):	5.48786904450865
Encrypted:	false
SSDEEP:	768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m
MD5:	E9372F0EBBCF71F851E3D321EF2A8E5A
SHA1:	2C7D19D1AF7D97085C977D1B69DCB8B84483D87C
SHA-256:	1259EA99BD76596239BFD3102C679EB0A5052578DC526B0452F4D42F8BCDD45F
SHA-512:	C3A1C74AC968FC2FA366D9C25442162773DB9AF1289ADFB165FC71E7750A7E62BD22F424F241730F3C2427AFFF8A540C214B3B97219A360A231D4875E6DDEE6F
Malicious:	false
Reputation:	low
URL:	https://ssl.google-analytics.com/ga.js
Preview:	(function(){var E;var g=window,n=document,p=function(a){var b=g._gaUserPrefs;if(b&&b.ioo&&b.ioo()\|\|a&&!0===g["ga-disable-"+a])return!0;try{var c=g.external;if(c&&c._gaUserPrefs&&"oo"==c._gaUserPrefs)return!0}catch(f){}a=[];b=n.cookie.split(";");c=/^\sAMP_TOKEN=\s(.?)\s$/;for(var d=0;d<b.length;d++){var e=b[d].match(c);e&&a.push(e[1])}for(b=0;b<a.length;b++)if("$OPT_OUT"==decodeURIComponent(a[b]))return!0;return!1};var q=function(a){return encodeURIComponent?encodeURIComponent(a).replace(/$/g,"%28").replace(/$/g,"%29"):a},r=/^(www\.)?google(\.com?)?(\.[a-z]{2})?$/,u=/(^\|\.)doubleclick\.net$/i;function Aa(a,b){switch(b){case 0:return""+a;case 1:return 1a;case 2:return!!a;case 3:return 1E3a}return a}function Ba(a){return"function"==typeof a}function Ca(a){return void 0!=a&&-1<(a.constructor+"").indexOf("String")}function F(a,b){return void 0==a\|\|"-"==a&&!b\|\|""==a}function Da(a){if(!a\|\|""==a)return"";for(;a&&-1<" \n\r\t".indexOf(a.charAt(0));)a=a.substring(1);for(;a&&-1<" \n\r\t".i

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	11135
Entropy (8bit):	4.143716041135646
Encrypted:	false
SSDEEP:	192:cvIialWcnGVm3QbjNv/nnezBKZSa/x6/OgH6j0siY+Pc8sxSxy83d2hAL41hXkwF:cBd1sqN3nez4SHK+4xSxy83d2aL415SS
MD5:	C98DA4BA9084E2879D9147AA21ECACDC
SHA1:	7795365668CD04D46DAAD20510E266037B333AEA
SHA-256:	CC9C276A5B60C292582FD871AB0F37EBAC4DA4895E856B10074CCE17EA1E8FF3
SHA-512:	7C1C65D6F15584179CF3D16C87F2DDBEF186505C766FF994EB072BE2055E061DF58701EE6FE94C681A6AF3F83F81CAE2DF3B4D7A5CEE0BE92E87710D22032206
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0" y="0" width="400" height="300" viewBox="0, 0, 400, 300">. <g id="Calque_1">. <g>. <path d="M153.25,89.5 C153.75,81.5 155.25,50.5 187.5,41 C219.75,31.5 281.5,51.25 281.5,51.25 C281.5,51.25 195.25,74.5 138.25,102 C138.25,102 136.084,98.75 136.334,96 C136.334,96 138.5,95.75 141,95.25 C141,95.25 147.543,93.636 152.857,90.225 L153.25,89.5 z" fill="#6EC83C"/>. <path d="M226.678,72.057 C234.619,77.591 243.5,85.335 243.168,86.001 C242.834,86.667 224.391,77.332 219.076,74.645 C213.806,76.463 208.662,78.286 203.728,80.067 C208.396,83.527 223.999,97.086 223.499,98.669 C222.999,100.252 205.749,90.085 195.638,83.023 C189.55,85.27 183.913,87.403 178.909,89.328 C188.925,95.329 209.667,110.752 209.167,112.335 C208.667,113.918 179.333,99.585 171.425,92

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (5963)
Category:	downloaded
Size (bytes):	28455
Entropy (8bit):	5.12341198314187
Encrypted:	false
SSDEEP:	384:qh9bYeC7emCqRcXfvJevOXXDhOMA9unhzfEMA8ffin1ieJ1ycUKk2LjbtTqW1NXT:qnBPhTMMA9uhDEMA6fkieJwcUVU
MD5:	3128C41DAA1556CCA5EC151670992CBA
SHA1:	2F137BA268F0DDEC748DA585A376F54ABE01010E
SHA-256:	4092704C65CBFDA45A5EC11FDA9186A577FE7B5384FEEB47FBDC547A77FE8909
SHA-512:	E0EB1B7EC3183364E1FE779EEF5EAD15DCB3012F6C091D52CE4D95E7DE4B99342A265EC8E800DA83D08275E06C5AB266C63B9836034061B58A2FD329BAA8B846
Malicious:	false
Reputation:	low
URL:	https://www.webcargo.net/assets/css/wc-responsive.css?r=4.41
Preview:	/* bootstrap slider */..slider .tooltip-inner,.slider.slider-vertical .slider-tick-label-container{white-space:nowrap}.slider-selection,.slider-track-high,.slider-track-low{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;border-radius:4px}.slider-handle.custom::before,.slider-tick.custom::before{line-height:20px;font-size:20px;content:'\2605';color:#726204}.slider{display:inline-block;vertical-align:middle;position:relative}.slider.slider-horizontal{width:210px;height:20px}.slider.slider-horizontal .slider-track{height:10px;width:100%;margin-top:-5px;top:50%;left:0}.slider.slider-horizontal .slider-selection,.slider.slider-horizontal .slider-track-high,.slider.slider-horizontal .slider-track-low{height:100%;top:0;bottom:0}.slider.slider-horizontal .slider-handle,.slider.slider-horizontal .slider-tick{margin-left:-10px;margin-top:-5px}.slider.slider-horizontal .slider-handle.triangle,.slider.slider-horizontal .slider-tick.triangle{border-width:0 10px 10px;width:0;height:0;borde

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.816701311166856
Encrypted:	false
SSDEEP:	12:XJa3a3acaraXafiUa4NaTV0zaJ68V4Uga6sE+bmhdviQ8WQW032Y3jCSGfZG:XUqqrOKfhnIZ02JL2t+bXW70GY3kR
MD5:	46E15D195B88A4748FA967DDC27DEC7F
SHA1:	E867D9CF6A65374107C5DA3404A09E159492B3B0
SHA-256:	BDFD968602F00E5538B1BBB629AD0B2380887D63E5B0D99995DCA86BFB4EB7D7
SHA-512:	784B21FFB3F7F852C3ED89F0200DEE1C008349F66FC0FFA6D33685591CA4BA22FACB8AF9FDB07A60FFBC0E90A095C84F2C4D3889A41FB82766CE13F944FFE938
Malicious:	false
Reputation:	low
URL:	https://www.webcargo.net/assets/app-icons/favicon.ico
Preview:	............ .h.......(....... ..... .........................................................................................................................................................................................................................................................................................................uuu.ACB.CEC.cfd.ced.............................................]]].OGL.XNT..\|..........kll..................................................................................................j..'._.5.h.S.~./.c.y..........................................5.g.g.....W..L.x.8.j.V..................................~.........k..y.....6.h.:.k.m.................................'.].F.t.q......t.....i....V................................1.d.;.l.4.g.2.f.Z.....z..p..N.{................................+.`.2.e.5.g.,.a.$.[./.c.F.t.Z.....................................w..a..b..p..................................................................

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34842)
Category:	downloaded
Size (bytes):	74154
Entropy (8bit):	5.448824222638733
Encrypted:	false
SSDEEP:	1536:k9SmeA6MqUNpGKmBJw2s9keLR85qGNyrbftmqOeTcVZ4Ci8WHqaQV0uZKum+Ridm:kYmhNoyrbf8eTG2CEHgKum8idQlFP
MD5:	8419B01C462C6B5238026511FCED81CC
SHA1:	E5251F60EA2C13BD4B6ECF02C072D0C89CF18B59
SHA-256:	2E513E7618450D11C45256CBD9F375E5AD695D2168E5CD9714D96513F22A7693
SHA-512:	43D969B705E40A4EA342C61CC3079965A9A7D17E1253584872FA16465D9827899F5A6D84C102BFAFA973CB9AAF17F367F5628ACD11223973AC0B1DE40A3EB581
Malicious:	false
Reputation:	low
URL:	https://widget.uservoice.com/zdZZDs33EvNA8n7Oj9AH9Q.js
Preview:	window.UserVoice = {events:window.UserVoice\|\|[],push:function(x){window.UserVoice.events.push(x)},account:{"active_widgets":[],"campaign":null,"name":"Webcargo","white_labeled":true,"widget2_domain":"webcargo.uservoice.com","subdomain_ssl_host":"support.webcargo.net","subdomain_site_host":"support.webcargo.net","subdomain_key":"webcargo","subdomain_id":117705,"client_key":"iTvQ29O4PJzUY6cC3ppDLg","client_options":null,"satisfaction_autoprompt_enabled":true,"messages":{"Loading":"Loading","OpenContactWidget":"Open Contact Widget","OpenFeedbackWidget":"Open Feedback Widget"},"has_ticketing_system":true,"has_feedback_system":true,"has_satisfaction":true,"private_site_enabled":false,"source_version":1713448665,"deactivated":false},client_widgets:{},manifest:{"tab-left-dark-no-bullhorn":"/pkg/clients/widget2/tab-left-dark-no-bullhorn-9669fb4a9d79416e9dc17618c9ed226faf8171ce461449f1282d6fcc2d6aa338.png","tab-left-light-no-bullhorn":"/pkg/clients/widget2/tab-left-light-no-bullhorn-22005a1309b

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64464, version 4.262
Category:	downloaded
Size (bytes):	64464
Entropy (8bit):	7.997087814135465
Encrypted:	true
SSDEEP:	1536:wOhGmmMET1VwoQNDerkOtxhncPvaAAGzw9jD8RlhANsK1q:JhkhVINDerkO+aAAGA/aANX1q
MD5:	4B5A84AAF1C9485E060C503A0FF8CADB
SHA1:	574EA2698C03AE9477DB2EA3BAF460EE32F1A7EA
SHA-256:	3C4A1BB7CE3234407184F0D80CC4DEC075E4AD616B44DCC5778E1CFB1BC24019
SHA-512:	05196036C41398616C077925FC4BF252E81F11B6EBEF8745047D75CB2C8B80441B8C3593F4D5B2617089E9F3D8D957F9EDCDF8E43993661A277BE8F4B6A32111
Malicious:	false
Reputation:	low
URL:	https://www.webcargo.net/assets/fonts/fontawesome-webfont.woff2?v=4.4.0
Preview:	wOF2...................q........................?FFTM....`..j.....\..X.6.$..D..r.. .....7?webf.[f......!...8...4..D...U..a.....f......GE.L..n..@UU._....A.{..{.)).4c....2i..\|.I.N../l.j...:..o.r..A.h$W<.@.3.....c.+VNt..tz.8..h..:.:....W6....e'[T.,.d47n.a.6.nlsm.c..li....K.w..c.f..3.&......&.m^....O...{..-r.......]~Ck.SM..UfH...>.F......G..Z1..X.aY..[.(...X.e..._..o.S..8.s@.....oy...5#d......x....LTUw....dT....W..:.9@..(....EBL...0.TP@.{f.=usF/ts.n.\.v]..W..._...].3.O...j.."...H.&..~?..A....B.s.0...?..5..;...8....(....w.....1......@X%..A.\..8.....[R..`...F..F.Q5h...BJ.NP...~D...........`$3......Wg.,Wg...{....!........S...H...t..?...+..K.dSL7.O.l#&...>...@.K<.6u'....Wr.q.....Tu......F.8.....1..f...T..}U.....I...<..>"....p.xxy.?..........`..By...Zm.?......X...Vnj.S.^.....j...x3..9...@7..t....:.gS[Y>.&,8............5.).w...e.eI.I....9..^..wj.d;.d')<$.0..[v...~fz..;..N..vJ..]F......*S=..b....I......7uk.....)...L\w.k.n.vq.=#S.=..L.kx#....

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26548)
Category:	downloaded
Size (bytes):	26711
Entropy (8bit):	4.753681219070429
Encrypted:	false
SSDEEP:	384:/i5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/7:klr+Klk3YlKfwYUf8l8yQ/7
MD5:	0831CBA6A670E405168B84AA20798347
SHA1:	05EA25BC9B3AC48993E1FEE322D3BC94B49A6E22
SHA-256:	936FFCCDC35BC55221E669D0E76034AF76BA8C080C1B1149144DBBD3B5311829
SHA-512:	655F4A6B01B62DE824C29DE7025C4B21516E7536AE5AE0690B5D2E11A7CC1D82F449AAEBCF903B1BBF645E1E7EE7EC28C50E47339E7D5D7D94663309DFA5A996
Malicious:	false
Reputation:	low
URL:	https://www.webcargo.net/assets/css/font-awesome.min.css?r=4.41
Preview:	/!. Font Awesome 4.4.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.4.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.4.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.4.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.4.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.4.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.4.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6098
Entropy (8bit):	4.232529563322856
Encrypted:	false
SSDEEP:	96:cbswcegytxihjTrsXuKCmhkJbi1fGuJwPVcpzLjtcpVlW8Pro8MyOYr1oQTJ7CLE:c4zIxihHrsXTClJbi1fBWwXyRPrxMyOE
MD5:	D9A08F94857AC99762A7FBD6FB0A2306
SHA1:	08B501E0BC00D7BE81F25881F61EF48FBD9CDCA7
SHA-256:	D3DC2494FD80A3EB7CCDBFA665B93DF9EFDE3AD2B5A1DE05DDFE01D58EE137A1
SHA-512:	757CC21C2F6A0B4F2F9BDF032F1D9606322959CEE7493177B71B725C2F6B27E5ECA0523EE69B72827F63CA70855761E2977D25DDF77D43CA0FC817894C5A21BE
Malicious:	false
Reputation:	low
URL:	https://www.webcargo.net/assets/images/wc-text-f5f5f5-50.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0" y="0" width="180" height="50" viewBox="0, 0, 360, 100">. <g id="Calque_1">. <g>. <path d="M2.7,26.689 C2.065,25.31 3.02,24.25 4.507,24.25 L12.142,24.25 C12.777,24.25 13.837,24.781 14.05,25.523 L20.413,44.505 L20.518,44.505 L31.334,24.144 C31.547,23.72 32.076,23.189 33.031,23.189 L33.881,23.189 C34.834,23.189 35.258,23.615 35.576,24.144 L46.289,44.505 L46.394,44.505 L52.757,25.523 C53.183,24.355 54.03,24.25 55.198,24.25 L62.091,24.25 C63.573,24.25 64.529,25.311 63.999,26.689 L50.745,66.566 C50.53,67.201 49.893,67.732 48.833,67.732 L48.409,67.732 C47.561,67.732 47.032,67.308 46.712,66.777 L33.349,42.066 L33.244,42.066 L19.986,66.777 C19.67,67.308 19.14,67.732 18.289,67.732 L17.762,67.732 C16.805,67.732 16.17,67.201 15.957,66.566 L2.7,26.689 z

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18668, version 1.0
Category:	downloaded
Size (bytes):	18668
Entropy (8bit):	7.988119248989337
Encrypted:	false
SSDEEP:	384:1stcBfAVaR8i6XzMsb4fcjakBudFyBqrgeU0hipgwfqj09nOt/a:1k0F6Xz1bFjaPbyBqr9hIgkM3Fa
MD5:	8655D20BBCC8CDBFAB17B6BE6CF55DF3
SHA1:	90EDBFA9A7DABB185487B4774076F82EB6412270
SHA-256:	E7AF9D60D875EB1C1B1037BBBFDEC41FCB096D0EBCF98A48717AD8B07906CED6
SHA-512:	47308DE25BD7E4CA27F59A2AE681BA64393FE4070E730C1F00C4053BAC956A9B4F7C0763C04145BC50A5F91C12A0BF80BDD4B03EECC2036CD56B2DB31494CBAF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
Preview:	wOF2......H...........H..........................\|.....h.`?STAT^..0..\|...........+..2..6.$..`. ..x........z'o..w;....6.E....6....E...'$H.#.....n1X..JU/.d.O..JC.'J".v.v.l.h.....u.S...SY.....B.hz.o.}......W......%m6...A..=....\..m. .]..~.[..........]...I..h.=.....6.xt..F....Lt...Qs-.7..{...~BI.".F.Q......F...P..dMw..#I2........Rq.Q&.0@.;..;...3VG..:c.nki..-Q..2##e.u...8n....\?....T..b....^..#...../.J\|OM..St....e.S.}!.....>..i.T/a.ES%.W.P3..`..a.R.A.....!~g..74.np8o.....d[6?.P.4)P.....AG.3.......;#0.y....M..O/2.@.4..N.vA$.:M&H,.AT".........@..a.~..L->...0@h...~.._..N"......t......C./g7..............2E.N.J...TW.F..."A.B...n.......i.?.{\.L.!.B..x...S..!........?.\,... .@.....y"xw.A8.w..!E..-^P O..+.T.r.R.zz..K..].E.....Ri.)g.P...j..w..c.M.F.v../........Q....'...(....X..;.K.!BZ3.........f.....N.A(....cA`.b'...`.~sa^.....?..../.L.S......t..`@h..C.....>N.W...;>..._h.+~=\|......uOGA{.7.....h....q.d.4$.x<.....^0\|...@....@Q[RC.0....b....'...RID

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2158)
Category:	downloaded
Size (bytes):	35486
Entropy (8bit):	5.732638469857684
Encrypted:	false
SSDEEP:	384:YGJrrUKpVLbilTabkPxsnDMzinDDDAKECQ9lk3BRRqq6BhjnDyucHXa57u9F01+1:YGd3b2zcC0CdiucHXaIx3Tf/DE9g
MD5:	FE7503C44A594238B6DACABAFB8AAD7E
SHA1:	D6495A02970DE941478AC23F319CF1F75BCDBF5B
SHA-256:	FC6D02A745069897C9009740931296070401E0F367EFEDB55BCFAF7DDA1AEA58
SHA-512:	E590D65572D2743D49AAC28B13D3A21C74E4F45B90F5912EC8C98F5F1265F1AB46B93882B9A4A26875BA047369E753D87DB6AD41EE72C7DFA0B055F47545A5B8
Malicious:	false
Reputation:	low
URL:	https://www.webcargo.net/assets/plugins/bookmark-bubble/bookmark_bubble.js
Preview:	/*. Modified by Robert Gerald Porter, for Weever Apps Inc... Version: 1.1.3. Release: October 21, 2011.. Based upon Mobile Bookmark Bubble by Google Inc., original copyrights and license below... Changelog:.. 1.0.1 : - First public release of fork.. - Added support for Android phones, Blackberry Touch Smartphones (OS6+), BlackBerry PlayBook.. - Modified colour and layout.. - Added WebkitBackgroundSize = "contain" to handle high-resolution icons. - Added base64-encoded images for iOS Safari "forward" button, PlayBook "save bookmark" icon, BlackBerry button icon.. - Fixed layout issue with close button.. - Moved location of bubble on PlayBook to match location of the "save bookmark" UI.. 1.1.0 : - Fork by okamototk. - Support jQuery Mobile.. - Internationalization and Japanese translation.. - Optimize bubble icon size.. 1.1.1 : - Android 4.0 support.. 1.1.2 : - Android 4.0 Tablet / Mobile both s

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	5776
Entropy (8bit):	5.406333618109174
Encrypted:	false
SSDEEP:	96:ZOEMIJOEMiDFZ8OEMXkOEMhYOEMvOEMkyhZcyJzV+zmnWOEMfubqGIFuYUOEMmOb:wIAiXBh1Skuy22bqGIwYR3XqO
MD5:	C840A8EFA9639BA51FFFF865A6D5B3ED
SHA1:	00C77DA03DDCFA49CC08A7229BA8FA3F9AFCCC38
SHA-256:	C3061C3788AD5783EF8A5D10C454BAFE7EB942C48200DCCC852CC6D3C9F303D4
SHA-512:	E73A55A7CB4906133D3C85F7F7F5BC1435FB1AE023A565B446B9A628D2540B7501EECC6D6CDC3276871BC418C16DAAE14FF0C84E9A10A691CC40597400ECDEC1
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans&subset=vietnamese,cyrillic-ext"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVIGxA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVIGxA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVIGxA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-fa

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	66
Entropy (8bit):	4.780998998369758
Encrypted:	false
SSDEEP:	3:4WLQifQe6uIsUfIWBQqV2In:bLQYx6uI1fV0I
MD5:	299BCE33571F3909F30322818EFCFE75
SHA1:	1E7C3BBC9A26BB6E74382ABA392ED698F60C9CE9
SHA-256:	F2499FCBA409BE550347D3E9103240F7AFD25C21FB5898D286290B6EF68B183C
SHA-512:	9FEDDADE5908E182EA952BBAB22AF2EA4E5625395030A65E9769D5633611682267E8AC8B7E679A3B524198C9E454A9C34A46DACF6CC9E7AADDD211C8A5085846
Malicious:	false
Reputation:	low
URL:	https://by2.uservoice.com/t2/117705/web/0f955114-3b2f-41de-7052-3df54ef80720/track.js?_=1714141874161&s=1&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL3d3dy53ZWJjYXJnby5uZXQvZC8yMzE3MTEyMi9zNHM3bXVLaFdlLyIsInIiOiIifX0%3D
Preview:	__uvSessionData0({"uvts":"0f955114-3b2f-41de-7052-3df54ef80720"});

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	244
Entropy (8bit):	4.798215339414347
Encrypted:	false
SSDEEP:	6:Vw2OLSEABeTUrNnBHsL2YriFGHLTwGRVtwZwGdUwWeXFELH/V:u2qZUnBHslriFuPwuEw4UwzyV
MD5:	7F4453D4B8A50638676BA63736C39768
SHA1:	A074E71B36AC9B096145C0F868B066F4B5ED2703
SHA-256:	C463A409A3673A70A96CDA64BFA7CDFEEC804DEF5FC2C1F671CBDEA306430C2A
SHA-512:	924179DFD82A701763DE2B26266CEFC10D79576D344018518F0793390EDDE2F7F0A902C0836C0EA9B86BB0CD72B33B93A72921D5940B6F61015E01C74D5A93FE
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fwww.webcargo.net&oit=3&cp=24&pgcl=4&gs_rn=42&psi=3QnChvIfJHsNfRPD&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["https://www.webcargo.net",["www webcargo net ipg"],[""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[600],"google:suggestsubtypes":[[30,13]],"google:suggesttype":["QUERY"],"google:verbatimrelevance":1300}]

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	19
Entropy (8bit):	3.366091329119193
Encrypted:	false
SSDEEP:	3:j4RYQ:0
MD5:	1FF22912DBFE3347B25BE5B0AF442DD9
SHA1:	5841430B7219765A4709F56F1F04BE3BAB16C77B
SHA-256:	5B40B086E4BF72E1A56DCEA09F583A4AD0F8848D874E0F41CCE4B8E1F801F84F
SHA-512:	0A419E8817404A565F0252D61A026F89489F58AFF53F1ED7A5473E9E29D20F7AAC4D318328848DA47B26D0BA61599B15870496386B5CB79162E7DB8865605F74
Malicious:	false
Reputation:	low
URL:	https://www.webcargo.net/empty.html
Preview:	empty page -->

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	11135
Entropy (8bit):	4.143716041135646
Encrypted:	false
SSDEEP:	192:cvIialWcnGVm3QbjNv/nnezBKZSa/x6/OgH6j0siY+Pc8sxSxy83d2hAL41hXkwF:cBd1sqN3nez4SHK+4xSxy83d2aL415SS
MD5:	C98DA4BA9084E2879D9147AA21ECACDC
SHA1:	7795365668CD04D46DAAD20510E266037B333AEA
SHA-256:	CC9C276A5B60C292582FD871AB0F37EBAC4DA4895E856B10074CCE17EA1E8FF3
SHA-512:	7C1C65D6F15584179CF3D16C87F2DDBEF186505C766FF994EB072BE2055E061DF58701EE6FE94C681A6AF3F83F81CAE2DF3B4D7A5CEE0BE92E87710D22032206
Malicious:	false
Reputation:	low
URL:	https://www.webcargo.net/assets/images/wc-logo-400.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0" y="0" width="400" height="300" viewBox="0, 0, 400, 300">. <g id="Calque_1">. <g>. <path d="M153.25,89.5 C153.75,81.5 155.25,50.5 187.5,41 C219.75,31.5 281.5,51.25 281.5,51.25 C281.5,51.25 195.25,74.5 138.25,102 C138.25,102 136.084,98.75 136.334,96 C136.334,96 138.5,95.75 141,95.25 C141,95.25 147.543,93.636 152.857,90.225 L153.25,89.5 z" fill="#6EC83C"/>. <path d="M226.678,72.057 C234.619,77.591 243.5,85.335 243.168,86.001 C242.834,86.667 224.391,77.332 219.076,74.645 C213.806,76.463 208.662,78.286 203.728,80.067 C208.396,83.527 223.999,97.086 223.499,98.669 C222.999,100.252 205.749,90.085 195.638,83.023 C189.55,85.27 183.913,87.403 178.909,89.328 C188.925,95.329 209.667,110.752 209.167,112.335 C208.667,113.918 179.333,99.585 171.425,92

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (540)
Category:	downloaded
Size (bytes):	145024
Entropy (8bit):	5.037984433779178
Encrypted:	false
SSDEEP:	1536:XA6vlc5XjNSYKxu1pZBfzOhOVieeRd3Se2im1D4aNWiwUf0lO6UI:Xi5XBXTbB0OQNlSFz1D4aNWiwUf0lF
MD5:	94902B4D38B1F6A2135987A6DE555E84
SHA1:	F4A734687F9FC8C5652EC26ECD92CFC4CC7AE920
SHA-256:	7D4AB3D6029DE59371B1968E07AFFDBE4AFFC0DC63DEDF44FD842970E6C15DC7
SHA-512:	DCA4BB1776A6F4140485C0A386AF181E32BA4D6917B0E98FFE8EA91CA3C784D3AA0404D8ED3FCB0AACFB7E2641A5A3E0680E0BBF61286256FCB3D9360D07AFFD
Malicious:	false
Reputation:	low
URL:	https://www.webcargo.net/assets/css/responsive-theme.css?r=4.41
Preview:	@import url('https://fonts.googleapis.com/css?family=Open+Sans&subset=vietnamese,cyrillic-ext');./!. Default theme for Pingendo . * Homepage: http://pingendo.com . * Copyright 2015 Pingendo . * Licensed under MIT . * Based on Bootstrap v3.3.4./../! normalize.css v3.0.2 \| MIT License \| git.io/normalize */.html {. font-family: sans-serif;. -ms-text-size-adjust: 100%;. -webkit-text-size-adjust: 100%;.}.body {. margin: 0;.}.article,.aside,.details,.figcaption,.figure,.footer,.header,.hgroup,.main,.menu,.nav,.section,.summary {. display: block;.}.audio,.canvas,.progress,.video {. display: inline-block;. vertical-align: baseline;.}.audio:not([controls]) {. display: none;. height: 0;.}.[hidden],.template {. display: none;.}.a {. background-color: transparent;.}.a:active,.a:hover {. outline: 0;.}.abbr[title] {. border-bottom: 1px dotted;.}.b,.strong {. font-weight: bold;.}.dfn {. font-style: italic;.}.h1 {. font-size: 2em;. margin: 0.67em 0;.}.mark {. background: #ff0;.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	66
Entropy (8bit):	4.780998998369758
Encrypted:	false
SSDEEP:	3:4WLQifQe6uIsUfIWBQqV2In:bLQYx6uI1fV0I
MD5:	299BCE33571F3909F30322818EFCFE75
SHA1:	1E7C3BBC9A26BB6E74382ABA392ED698F60C9CE9
SHA-256:	F2499FCBA409BE550347D3E9103240F7AFD25C21FB5898D286290B6EF68B183C
SHA-512:	9FEDDADE5908E182EA952BBAB22AF2EA4E5625395030A65E9769D5633611682267E8AC8B7E679A3B524198C9E454A9C34A46DACF6CC9E7AADDD211C8A5085846
Malicious:	false
Reputation:	low
URL:	https://by2.uservoice.com/t2/117705/web/track.js?_=1714141793544&s=0&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL3d3dy53ZWJjYXJnby5uZXQvZC8yMzE3MTEyMi9zNHM3bXVLaFdlLyIsInIiOiIifX0%3D
Preview:	__uvSessionData0({"uvts":"0f955114-3b2f-41de-7052-3df54ef80720"});

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (793)
Category:	downloaded
Size (bytes):	798
Entropy (8bit):	5.121309317816835
Encrypted:	false
SSDEEP:	24:BTuh1RvOgqqOBHslgT9lCuABub3m7HHHHHHHYqmffffffo:0zRWgiKlgZ01Bub2Eqmffffffo
MD5:	8DC93FAE108FCE61AE08C6ABB897FFC0
SHA1:	93BBA40E7BDA7643F686C960D248B194977C0A4A
SHA-256:	E610AAEC5445FDA35AE81EB213AA987A9596B92A223F8EA4272FA799115F7C04
SHA-512:	95E5413210DF97261E9225D35A076A92B9EC1B2CE328120CA7F1C5396D2F4417F7E32E7F3764734D85448A14BAA1E2B2F724911E13E9EC73901BC9684F88DF33
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["amazing race season 36","philly pretzel factory free pretzel day","lions draft","apple iphone 16 pro max","weather storms tornadoes","hearthstone battlegrounds patch notes","alphabet stock earnings","columbia university student protests"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1251,1250,1055,1054,1053,1052,1051,1050],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.572955285773964
Encrypted:	false
SSDEEP:	3:81OTsPLgCfF/FKk:88szF/F/
MD5:	836BF2A4A8FBD7EA142A4EA952E6A9C1
SHA1:	962BC905D8CA9FFDA8D59EDB05402F697F9A9251
SHA-256:	23C9F94C77A82522E38E12C0E9D3E488B522A2208C8D70EDE06D9E1EABA4A6A2
SHA-512:	77EC9B27577A70D50F32DBB269E9910EB0AF6684BA946FE416B0375B9048C24CC9FDF9C32A47467C69D633AF6D7B18D164E053C99A30D1695551284EF49FEBCF
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlBjH1_BzdJlxIFDdeZ3zsSBQ2OhiioEhAJTdRz3ux0ucASBQ1AHr8d?alt=proto
Preview:	ChoKCw3Xmd87GgQIVhgCCgsNjoYoqBoECEsYAgoJCgcNQB6/HRoA

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.816701311166856
Encrypted:	false
SSDEEP:	12:XJa3a3acaraXafiUa4NaTV0zaJ68V4Uga6sE+bmhdviQ8WQW032Y3jCSGfZG:XUqqrOKfhnIZ02JL2t+bXW70GY3kR
MD5:	46E15D195B88A4748FA967DDC27DEC7F
SHA1:	E867D9CF6A65374107C5DA3404A09E159492B3B0
SHA-256:	BDFD968602F00E5538B1BBB629AD0B2380887D63E5B0D99995DCA86BFB4EB7D7
SHA-512:	784B21FFB3F7F852C3ED89F0200DEE1C008349F66FC0FFA6D33685591CA4BA22FACB8AF9FDB07A60FFBC0E90A095C84F2C4D3889A41FB82766CE13F944FFE938
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .........................................................................................................................................................................................................................................................................................................uuu.ACB.CEC.cfd.ced.............................................]]].OGL.XNT..\|..........kll..................................................................................................j..'._.5.h.S.~./.c.y..........................................5.g.g.....W..L.x.8.j.V..................................~.........k..y.....6.h.:.k.m.................................'.].F.t.q......t.....i....V................................1.d.;.l.4.g.2.f.Z.....z..p..N.{................................+.`.2.e.5.g.,.a.$.[./.c.F.t.Z.....................................w..a..b..p..................................................................

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	66
Entropy (8bit):	4.780998998369758
Encrypted:	false
SSDEEP:	3:4WLQifQe6uIsUfIWBQqV2In:bLQYx6uI1fV0I
MD5:	299BCE33571F3909F30322818EFCFE75
SHA1:	1E7C3BBC9A26BB6E74382ABA392ED698F60C9CE9
SHA-256:	F2499FCBA409BE550347D3E9103240F7AFD25C21FB5898D286290B6EF68B183C
SHA-512:	9FEDDADE5908E182EA952BBAB22AF2EA4E5625395030A65E9769D5633611682267E8AC8B7E679A3B524198C9E454A9C34A46DACF6CC9E7AADDD211C8A5085846
Malicious:	false
Reputation:	low
URL:	https://by2.uservoice.com/t2/117705/web/0f955114-3b2f-41de-7052-3df54ef80720/track.js?_=1714141855808&s=1&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL3d3dy53ZWJjYXJnby5uZXQvIiwiciI6IiJ9fQ%3D%3D
Preview:	__uvSessionData0({"uvts":"0f955114-3b2f-41de-7052-3df54ef80720"});

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6098
Entropy (8bit):	4.232529563322856
Encrypted:	false
SSDEEP:	96:cbswcegytxihjTrsXuKCmhkJbi1fGuJwPVcpzLjtcpVlW8Pro8MyOYr1oQTJ7CLE:c4zIxihHrsXTClJbi1fBWwXyRPrxMyOE
MD5:	D9A08F94857AC99762A7FBD6FB0A2306
SHA1:	08B501E0BC00D7BE81F25881F61EF48FBD9CDCA7
SHA-256:	D3DC2494FD80A3EB7CCDBFA665B93DF9EFDE3AD2B5A1DE05DDFE01D58EE137A1
SHA-512:	757CC21C2F6A0B4F2F9BDF032F1D9606322959CEE7493177B71B725C2F6B27E5ECA0523EE69B72827F63CA70855761E2977D25DDF77D43CA0FC817894C5A21BE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0" y="0" width="180" height="50" viewBox="0, 0, 360, 100">. <g id="Calque_1">. <g>. <path d="M2.7,26.689 C2.065,25.31 3.02,24.25 4.507,24.25 L12.142,24.25 C12.777,24.25 13.837,24.781 14.05,25.523 L20.413,44.505 L20.518,44.505 L31.334,24.144 C31.547,23.72 32.076,23.189 33.031,23.189 L33.881,23.189 C34.834,23.189 35.258,23.615 35.576,24.144 L46.289,44.505 L46.394,44.505 L52.757,25.523 C53.183,24.355 54.03,24.25 55.198,24.25 L62.091,24.25 C63.573,24.25 64.529,25.311 63.999,26.689 L50.745,66.566 C50.53,67.201 49.893,67.732 48.833,67.732 L48.409,67.732 C47.561,67.732 47.032,67.308 46.712,66.777 L33.349,42.066 L33.244,42.066 L19.986,66.777 C19.67,67.308 19.14,67.732 18.289,67.732 L17.762,67.732 C16.805,67.732 16.17,67.201 15.957,66.566 L2.7,26.689 z

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32034)
Category:	downloaded
Size (bytes):	36816
Entropy (8bit):	5.1752334723079825
Encrypted:	false
SSDEEP:	768:r8iUD27UwlNEMl9RqNuCqNjhqg8epm5VCoFXflR8Gf3ZsbQ:4875vhqKGvlp3ZsQ
MD5:	4BECDC9104623E891FBB9D38BBA01BE4
SHA1:	6C264E0E0026AB5ECE49350C6A8812398E696CBB
SHA-256:	4A4DE7903EA62D330E17410EA4DB6C22BCBEB350AC6AA402D6B54B4C0CBED327
SHA-512:	2B5AA343E35C1764D83BF788DCCEAFF0488D6197C0F79A50BA67EF715AD31EDC105431BE68746A2E2FC44E7DAE07ED49AB062A546DCB22F766F658FA8A64BFA5
Malicious:	false
Reputation:	low
URL:	https://www.webcargo.net/assets/js/bootstrap.min.js?r=4.41
Preview:	/!. Bootstrap v3.3.5 (http://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.special.bsTransitionEnd={bindType:

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (26139)
Category:	downloaded
Size (bytes):	196786
Entropy (8bit):	4.977542886365187
Encrypted:	false
SSDEEP:	1536:J2ZhEfJQ5XUPYXDFT9CTFcptkRA/J9/u+0D0DzHfZTNX70/lobib7OskCv+tOxZZ:J2NT1QTFcLkqBu+fHLib7O70ZKuWgL
MD5:	33E8259C3810D9987271C94D34734ECB
SHA1:	7A34B92590CED6881B44A23DD908C7C6C5EF3F8B
SHA-256:	C0C577BF1E46997DB24F39A17C2679BC906EA84B50140AC492BF6DE5A1764BFD
SHA-512:	1C1D08B64250610E3A2E8E39979DF91F56D3167F28E7D3EA1B0C7676507AB42D0B830E73E6E64E86768C35FB6A427DF9FE24FA3D1DB303830E6B6218271C15B2
Malicious:	false
Reputation:	low
URL:	https://www.webcargo.net/assets/js/webcargo-code.js?r=4.41
Preview:	/! jQuery UI - v1.11.4 - 2015-10-20. http://jqueryui.com.* Includes: widget.js.* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT */..(function(e){"function"==typeof define&&define.amd?define(["jquery"],e):e(jQuery)})(function(e){var t=0,i=Array.prototype.slice;e.cleanData=function(t){return function(i){var s,n,a;for(a=0;null!=(n=i[a]);a++)try{s=e._data(n,"events"),s&&s.remove&&e(n).triggerHandler("remove")}catch(o){}t(i)}}(e.cleanData),e.widget=function(t,i,s){var n,a,o,r,h={},l=t.split(".")[0];return t=t.split(".")[1],n=l+"-"+t,s\|\|(s=i,i=e.Widget),e.expr[":"][n.toLowerCase()]=function(t){return!!e.data(t,n)},e[l]=e[l]\|\|{},a=e[l][t],o=e[l][t]=function(e,t){return this._createWidget?(arguments.length&&this._createWidget(e,t),void 0):new o(e,t)},e.extend(o,a,{version:s.version,_proto:e.extend({},s),_childConstructors:[]}),r=new i,r.options=e.widget.extend({},r.options),e.each(s,function(t,s){return e.isFunction(s)?(h[t]=function(){var e=function(){return i.prototy

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32023)
Category:	downloaded
Size (bytes):	83611
Entropy (8bit):	5.276981039757003
Encrypted:	false
SSDEEP:	1536:knWi6p4BmVLFijGb2gXke71t5tgPBHlxNLIJBanUEwf7rmvsMn3lhM7:0UL5uxNL/4Cr3lO7
MD5:	103417C8826BF79206D953F8871F9B1F
SHA1:	3BA3BC0562381569E95D1F13F08105891BD18DA3
SHA-256:	81B6A1684A01EFD545E67B5C43FDB43327DFB2E74E7DF47D7CFDC7C56A79D252
SHA-512:	ABDC3105FA05E3926381F0E29E1E2441467A535263982C9F18BDC073E6042A9F2EC238A6E14B467139BBE4C02A5130A1E1B83B60D0127175B503DAA7903F9C09
Malicious:	false
Reputation:	low
URL:	https://www.webcargo.net/assets/js/jquery-2.0.3.min.js?r=4.41
Preview:	/! jQuery v2.0.3 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery-2.0.3.min.map./.(function(e,undefined){var t,n,r=typeof undefined,i=e.location,o=e.document,s=o.documentElement,a=e.jQuery,u=e.$,l={},c=[],p="2.0.3",f=c.concat,h=c.push,d=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=p.trim,x=function(e,n){return new x.fn.init(e,n,t)},b=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^(?:\s(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s*\/?>(?:<\/\1>\|)$/,k=/^-ms-/,N=/-([\da-z])/gi,E=function(e,t){return t.toUpperCase()},S=function(){o.removeEventListener("DOMContentLoaded",S,!1),e.removeEventListener("load",S,!1),x.ready()};x.fn=x.prototype={jquery:p,constructor:x,init:function(e,t,n){var r,i;if(!e)return this;if("string"==typeof e){if(r="<"===e.charAt(0)&&">"===e.charAt(e.length-1)&&e.length>=3?[null,e,null]:T.exec(e),!r\|\|!r[1]&&t)return!t\|\|t.jquery?(t\|\|n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof x?t[0]:t,x.me

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	4.929137533295487
Encrypted:	false
SSDEEP:	3:81OTsPLgCfmC1Qp8IyhhhCEAvFRtY:88s7ucVAvFRtY
MD5:	2B87CCCB90F84F19F55A98A1F976B745
SHA1:	EE9EB9B0B8EE2A464CA57B736C6DD6B87AC42356
SHA-256:	4A71D8F3DDE777BF0E1FB8F159E725FF41E30A71B5A60140093E998ED766CF27
SHA-512:	6828DFD0A71F4485B644070236695E882D036511C1259A6C090E1EDD57275AAF9FD936BBD3585088BE8B47F55B0BD7C7632E682491B73111EA298E847576CE78
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwknUQgsz5hD3hIFDdeZ3zsSBQ2OhiioEhcJQYx9fwc3SZcSBQ3Xmd87EgUNjoYoqBIQCU3Uc97sdLnAEgUNQB6_HQ==?alt=proto
Preview:	ChoKCw3Xmd87GgQIVhgCCgsNjoYoqBoECEsYAgoaCgsN15nfOxoECFYYAgoLDY6GKKgaBAhLGAIKCQoHDUAevx0aAA==

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6007), with no line terminators
Category:	downloaded
Size (bytes):	6007
Entropy (8bit):	5.36836371350238
Encrypted:	false
SSDEEP:	96:oySNxOSTS9LlekgEZkRftBV56CM96Wo6gC9c9ozdMMRP9oWTuY8FZIMJSd7vq:CSplekiRftBaC1WXgC0ozdvN9oWTuY8n
MD5:	2B26540D6761FA6EB1E66D97EC176364
SHA1:	5C6750574795FA5B9E2A7DB63A3373D9522448EE
SHA-256:	DFEE1FE127C3A828A6F88E3EF6E8D1D7F8A3750E6F9D9E24520992A2294696A6
SHA-512:	2DAD16D0DD393EFAA37AF594D0DBB0CABF59925089DE87CB1FE7A7AB6EE5474DD36FC43E63B395D172C646426C981F65EEB926E32BB3ADA90EC789A503EFAE3A
Malicious:	false
Reputation:	low
URL:	https://www.webcargo.net/assets/js/jquery.tmpl.js?r=4.41
Preview:	(function(a){var r=a.fn.domManip,d="_tmplitem",q=/^[^<](<[\w\W]+>)[^>]$\|\{\{\! /,b={},f={},e,p={key:0,data:{}},h=0,c=0,l=[];function g(e,d,g,i){var c={data:i\|\|(d?d.data:{}),_wrap:d?d._wrap:null,tmpl:null,parent:d\|\|null,nodes:[],calls:u,nest:w,wrap:x,html:v,update:t};e&&a.extend(c,e,{nodes:[],parent:d});if(g){c.tmpl=g;c._ctnt=c._ctnt\|\|c.tmpl(a,c);c.key=++h;(l.length?f:b)[h]=c}return c}a.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(f,d){a.fn[f]=function(n){var g=[],i=a(n),k,h,m,l,j=this.length===1&&this[0].parentNode;e=b\|\|{};if(j&&j.nodeType===11&&j.childNodes.length===1&&i.length===1){i[d](this[0]);g=this}else{for(h=0,m=i.length;h<m;h++){c=h;k=(h>0?this.clone(true):this).get();a.fn[d].apply(a(i[h]),k);g=g.concat(k)}c=0;g=this.pushStack(g,f,i.selector)}l=e;e=null;a.tmpl.complete(l);return g}});a.fn.extend({tmpl:function(d,c,b){return a.tmpl(this[0],d,c,b)},tmplItem:function(){return a.tmplItem(this[0])},templat

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 16:29:48.358536959 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 26, 2024 16:29:48.659064054 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 26, 2024 16:29:49.265083075 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 26, 2024 16:29:49.413877010 CEST	49697	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:29:49.414441109 CEST	49698	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:29:49.537548065 CEST	49701	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:29:49.566066980 CEST	80	49697	3.216.119.164	192.168.2.16
Apr 26, 2024 16:29:49.566165924 CEST	49697	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:29:49.566437960 CEST	49697	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:29:49.566754103 CEST	80	49698	3.216.119.164	192.168.2.16
Apr 26, 2024 16:29:49.566838026 CEST	49698	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:29:49.689708948 CEST	80	49701	3.216.119.164	192.168.2.16
Apr 26, 2024 16:29:49.689822912 CEST	49701	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:29:49.718492031 CEST	80	49697	3.216.119.164	192.168.2.16
Apr 26, 2024 16:29:49.724149942 CEST	80	49697	3.216.119.164	192.168.2.16
Apr 26, 2024 16:29:49.774089098 CEST	49697	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:29:49.857031107 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:49.857114077 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:49.857191086 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:49.857409954 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:49.857441902 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.325412989 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.325700998 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.325747013 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.326889992 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.326989889 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.327951908 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.328039885 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.328197002 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.328212976 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.378081083 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.474090099 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 26, 2024 16:29:50.753334999 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.753364086 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.753371000 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.753438950 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.753494024 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.753597975 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.753597975 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.753673077 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.753722906 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.753746033 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.754328966 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.754345894 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.754400969 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.754419088 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.754476070 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.754534006 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.754776955 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.754837036 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.754853010 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.754878998 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:50.754913092 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.754944086 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.766781092 CEST	49702	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:50.766809940 CEST	443	49702	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.367355108 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.367434978 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.367527962 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.367748022 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.367779970 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.368206024 CEST	49706	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.368230104 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.368304014 CEST	49706	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.368613005 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.368638039 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.368686914 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.369128942 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.369219065 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.369285107 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.369328022 CEST	49706	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.369338036 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.369462967 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.369471073 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.369605064 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.369649887 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.687470913 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.687721014 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.687783957 CEST	49706	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.687794924 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.688296080 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.688359022 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.689791918 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.689853907 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.689912081 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.689922094 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.691133022 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.691406012 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.691466093 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.691514015 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.691871881 CEST	49706	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.692033052 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.692087889 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.692167044 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.693301916 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.693367958 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.693870068 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.693960905 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.695640087 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.695836067 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.697525978 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.697618008 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.697731972 CEST	49706	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.697784901 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.697793007 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.697829962 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.699408054 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.699424982 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.737317085 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:51.740142107 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.744119883 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:51.752505064 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.149638891 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.149709940 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.149729967 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.149770021 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.149815083 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.149900913 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.149900913 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.149910927 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.149971962 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.149993896 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.150033951 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.150093079 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.150098085 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.150146008 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.150768042 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.150826931 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.150870085 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.150921106 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.150984049 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151042938 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.151067972 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.151068926 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151117086 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151138067 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.151156902 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151180029 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.151195049 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151222944 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.151267052 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.151278973 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151316881 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151371002 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.151411057 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151439905 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151488066 CEST	49706	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.151490927 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151510954 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151563883 CEST	49706	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.151576996 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151618958 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151640892 CEST	49706	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.151652098 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151664972 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.151689053 CEST	49706	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.151715994 CEST	49706	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.154182911 CEST	49705	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.154212952 CEST	443	49705	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.154450893 CEST	49706	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.154464960 CEST	443	49706	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.155191898 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.155213118 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.155220985 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.155234098 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.155241013 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.155247927 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.155282974 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.155304909 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.155334949 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.155364037 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.155667067 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.155700922 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.155731916 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.155739069 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.155782938 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.158648014 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.158679008 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.158747911 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.158910036 CEST	49713	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.158936977 CEST	443	49713	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.158987999 CEST	49713	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.159142971 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.159156084 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.159651041 CEST	49713	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.159665108 CEST	443	49713	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.301640034 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.301690102 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.301734924 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.301748037 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.301780939 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.301800966 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.301834106 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.301872969 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.301903963 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.301908016 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.301939964 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.301978111 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.307760000 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.307781935 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.307857990 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.307898045 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.307965994 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.308088064 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.308111906 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.308146954 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.308160067 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.308190107 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.308229923 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.308840036 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.308855057 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.308917999 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.308933020 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.308999062 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.309248924 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.309312105 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.309324980 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.309350967 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.309396029 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.309519053 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.309550047 CEST	443	49708	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.309573889 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.309606075 CEST	49708	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.320491076 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.320564985 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.320672989 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.320741892 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.320807934 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.320884943 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.320930958 CEST	49716	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.320960045 CEST	443	49716	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.321016073 CEST	49716	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.321141005 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.321173906 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.321295023 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.321329117 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.321422100 CEST	49716	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.321429968 CEST	443	49716	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.344161034 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.344213009 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.344261885 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.344274998 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.344306946 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.344330072 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.455600977 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.455647945 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.455703974 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.455715895 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.455775976 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.455800056 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.456911087 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.456954002 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.456989050 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.456994057 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.457026005 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.457058907 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.457561016 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.457600117 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.457628965 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.457633972 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.457667112 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.457690001 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.457782030 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.457820892 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.457843065 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.457847118 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.457875967 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.457894087 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.457896948 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.457992077 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.458046913 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.458178997 CEST	49707	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.458194971 CEST	443	49707	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.469300032 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.469650030 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.469662905 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.469901085 CEST	443	49713	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.470187902 CEST	49713	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.470210075 CEST	443	49713	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.470724106 CEST	443	49713	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.470841885 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.472218990 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.472394943 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.472506046 CEST	49713	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.472619057 CEST	443	49713	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.472650051 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.472700119 CEST	49713	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.516151905 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.520124912 CEST	443	49713	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.629559040 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.629646063 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.630445957 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.630470991 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.630490065 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.630536079 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.631561995 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.631656885 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.631679058 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.631732941 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.631747007 CEST	443	49716	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.631937027 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.632009029 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.632179976 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.632251978 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.632280111 CEST	49716	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.632291079 CEST	443	49716	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.632409096 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.632427931 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.632467031 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.632484913 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.633436918 CEST	443	49716	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.633497953 CEST	49716	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.633728027 CEST	49716	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.633778095 CEST	443	49716	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.633795977 CEST	49716	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.677117109 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.677126884 CEST	49716	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.677129984 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.677139997 CEST	443	49716	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.725191116 CEST	49716	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.782763958 CEST	443	49713	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.782800913 CEST	443	49713	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.782912970 CEST	49713	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.782942057 CEST	443	49713	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.783013105 CEST	49713	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.783772945 CEST	49713	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.783822060 CEST	443	49713	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.783888102 CEST	49713	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.885099888 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 26, 2024 16:29:52.943592072 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.943655968 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.943701029 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.943849087 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.943849087 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.943861961 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.943953037 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.945059061 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.945122957 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.945147991 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.945153952 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.945188999 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.945221901 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.945241928 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.945363045 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.945368052 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.945399046 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.945426941 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.945434093 CEST	443	49712	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.945449114 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.945470095 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.945470095 CEST	49712	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.949822903 CEST	443	49716	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.949841976 CEST	443	49716	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.949851036 CEST	443	49716	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.949913025 CEST	443	49716	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:52.949955940 CEST	49716	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.950016022 CEST	49716	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.950628996 CEST	49716	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:52.950650930 CEST	443	49716	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.084136009 CEST	49719	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:53.084203005 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.084291935 CEST	49719	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:53.084491968 CEST	49719	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:53.084512949 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.098325968 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.098354101 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.098360062 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.098429918 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.098469973 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.098517895 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.098541021 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.098578930 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.098579884 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.098623037 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.098726988 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.098784924 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.100641966 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.100644112 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.100657940 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.100665092 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.100672007 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.100693941 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.100730896 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.100733995 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.100749016 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.100769997 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.100821972 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.100833893 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.100882053 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.100904942 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.101392984 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.101408958 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.101458073 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.101468086 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.101484060 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.101514101 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.101531029 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.101587057 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.101877928 CEST	49715	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.101906061 CEST	443	49715	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.250758886 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.250804901 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.250914097 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.250936985 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.250956059 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.250984907 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.251126051 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.251146078 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.251207113 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.251215935 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.251266003 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.252580881 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.252602100 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.252665043 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.252675056 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.252734900 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.252756119 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.402892113 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.402910948 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.403016090 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.403053045 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.403120041 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.403554916 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.403569937 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.403635025 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.403649092 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.403714895 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.404320955 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.404336929 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.404418945 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.404433012 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.404496908 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.405067921 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.405081987 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.405142069 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.405154943 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.405220985 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.405901909 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.405919075 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.405981064 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.405997038 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.406025887 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.406070948 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.406785011 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.406800032 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.406872988 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.406888962 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.406951904 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.423257113 CEST	49720	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.423332930 CEST	443	49720	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.423418045 CEST	49720	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.423953056 CEST	49720	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.423978090 CEST	443	49720	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.424444914 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.424529076 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.424608946 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.424770117 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.424804926 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.550793886 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.551058054 CEST	49719	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:53.551089048 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.554681063 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.554773092 CEST	49719	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:53.554812908 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.554887056 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.554896116 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.554918051 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.554970026 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.554971933 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.555044889 CEST	49719	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:53.555052042 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.555217981 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.555228949 CEST	49719	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:53.555324078 CEST	49714	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.555346966 CEST	443	49714	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.600117922 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.601093054 CEST	49719	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:53.601109982 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.649116993 CEST	49719	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:53.709141016 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:53.709213972 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:53.709312916 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:53.709583044 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:53.709616899 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:53.712013006 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.712060928 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.712096930 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.712125063 CEST	49719	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:53.712146997 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.712162018 CEST	49719	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:53.712184906 CEST	49719	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:53.712189913 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.712270975 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.712322950 CEST	49719	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:53.712825060 CEST	49719	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:53.712841988 CEST	443	49719	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:53.731440067 CEST	443	49720	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.731683016 CEST	49720	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.731708050 CEST	443	49720	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.732078075 CEST	443	49720	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.732403040 CEST	49720	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.732481956 CEST	443	49720	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.732503891 CEST	49720	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.734369040 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.734560013 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.734595060 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.735754967 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.736125946 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.736262083 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.736275911 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.736327887 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.776093960 CEST	49720	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.776097059 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:53.776123047 CEST	443	49720	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:53.967319965 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:53.967612028 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:53.967664957 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:53.968681097 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:53.968775034 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:53.969737053 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:53.969815969 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:53.969893932 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:53.969912052 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.012083054 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.038227081 CEST	443	49720	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.038292885 CEST	443	49720	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.038362980 CEST	49720	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.039311886 CEST	49720	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.039351940 CEST	443	49720	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.193003893 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.193083048 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.193104982 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.193197966 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.193202972 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.193253040 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.193320036 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.193361044 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.193361044 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.193361044 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.193372965 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.193409920 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.193422079 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.193475962 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.193597078 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.193646908 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.193669081 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.193681955 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.193726063 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.193746090 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.268079042 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.268131018 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.268166065 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.268203974 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.268214941 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.268256903 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.268285036 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.268304110 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.268333912 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.268348932 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.268352985 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.268363953 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.268393993 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.268846989 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.268887043 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.268898964 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.268914938 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.268982887 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.268997908 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.269685984 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.269736052 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.269737959 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.269747019 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.269784927 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.269788980 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.269803047 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.269872904 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.270585060 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.270692110 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.270721912 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.270756960 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.270772934 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.270828009 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.271460056 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.271519899 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.271545887 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.271569967 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.271572113 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.271588087 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.271621943 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.272294044 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.272361994 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.272378922 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.272383928 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.272392035 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.272433996 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.273222923 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.273252964 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.273276091 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.273274899 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.273288965 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.273329020 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.274029970 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.274058104 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.274084091 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.274084091 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.274101973 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.274132967 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.274163961 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.274214983 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.274230003 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.275099993 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.275155067 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.275170088 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.308639050 CEST	49726	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:29:54.308737040 CEST	443	49726	142.250.217.164	192.168.2.16
Apr 26, 2024 16:29:54.308845043 CEST	49726	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:29:54.309195042 CEST	49726	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:29:54.309233904 CEST	443	49726	142.250.217.164	192.168.2.16
Apr 26, 2024 16:29:54.327074051 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.346431017 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.346484900 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.346524000 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.346554041 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.346582890 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.346601009 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.347368956 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.347428083 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.347440958 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.347455978 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.347487926 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.347565889 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.347619057 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.393330097 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.393351078 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.393392086 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.393598080 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.393651009 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.393666983 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.394208908 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.394251108 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.394258022 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.394268036 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.394293070 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.394341946 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.394399881 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.478692055 CEST	49721	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.478727102 CEST	443	49721	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.479039907 CEST	49723	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.479065895 CEST	443	49723	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.640724897 CEST	443	49726	142.250.217.164	192.168.2.16
Apr 26, 2024 16:29:54.689073086 CEST	49726	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:29:54.813410997 CEST	49726	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:29:54.813442945 CEST	443	49726	142.250.217.164	192.168.2.16
Apr 26, 2024 16:29:54.817316055 CEST	443	49726	142.250.217.164	192.168.2.16
Apr 26, 2024 16:29:54.817409992 CEST	49726	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:29:54.823901892 CEST	49726	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:29:54.824126959 CEST	443	49726	142.250.217.164	192.168.2.16
Apr 26, 2024 16:29:54.833877087 CEST	49727	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.833900928 CEST	443	49727	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.833964109 CEST	49727	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.834182978 CEST	49727	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:54.834197044 CEST	443	49727	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:54.867556095 CEST	49726	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:29:54.867578983 CEST	443	49726	142.250.217.164	192.168.2.16
Apr 26, 2024 16:29:54.909106016 CEST	49726	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:29:54.960658073 CEST	49728	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.960692883 CEST	443	49728	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:54.960758924 CEST	49728	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.960952997 CEST	49728	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:54.960958958 CEST	443	49728	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:55.078994989 CEST	49729	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.079082966 CEST	443	49729	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.079169989 CEST	49729	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.080899954 CEST	49729	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.080941916 CEST	443	49729	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.144860029 CEST	443	49727	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:55.145339012 CEST	49727	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:55.145358086 CEST	443	49727	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:55.146545887 CEST	443	49727	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:55.147938967 CEST	49727	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:55.148125887 CEST	49727	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:55.148133993 CEST	443	49727	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:55.148169994 CEST	443	49727	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:55.196082115 CEST	49727	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:55.223015070 CEST	443	49728	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:55.223249912 CEST	49728	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:55.223259926 CEST	443	49728	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:55.226841927 CEST	443	49728	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:55.226911068 CEST	49728	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:55.227905035 CEST	49728	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:55.228070974 CEST	49728	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:55.228075981 CEST	443	49728	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:55.228230953 CEST	443	49728	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:55.276107073 CEST	49728	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:55.276129961 CEST	443	49728	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:55.324209929 CEST	49728	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:55.343414068 CEST	443	49729	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.343529940 CEST	49729	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.360985041 CEST	49729	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.361026049 CEST	443	49729	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.361251116 CEST	443	49729	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.405834913 CEST	49729	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.412976027 CEST	49729	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.460114002 CEST	443	49729	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.460779905 CEST	443	49727	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:55.460952997 CEST	443	49727	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:55.461013079 CEST	49727	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:55.461987972 CEST	49727	443	192.168.2.16	54.157.137.212
Apr 26, 2024 16:29:55.462009907 CEST	443	49727	54.157.137.212	192.168.2.16
Apr 26, 2024 16:29:55.464740038 CEST	49730	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:55.464771986 CEST	443	49730	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:55.464850903 CEST	49730	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:55.465049982 CEST	49730	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:55.465059042 CEST	443	49730	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:55.548573971 CEST	443	49728	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:55.548743963 CEST	443	49728	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:55.548815966 CEST	49728	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:55.549274921 CEST	49728	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:29:55.549298048 CEST	443	49728	104.17.27.92	192.168.2.16
Apr 26, 2024 16:29:55.588653088 CEST	443	49729	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.588882923 CEST	443	49729	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.588903904 CEST	49729	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.588903904 CEST	49729	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.588989973 CEST	443	49729	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.589076996 CEST	49729	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.589093924 CEST	443	49729	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.628407001 CEST	49731	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.628448963 CEST	443	49731	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.628546000 CEST	49731	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.628774881 CEST	49731	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.628787994 CEST	443	49731	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.787374973 CEST	443	49730	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:55.787792921 CEST	49730	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:55.787808895 CEST	443	49730	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:55.788156986 CEST	443	49730	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:55.788450003 CEST	49730	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:55.788518906 CEST	443	49730	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:55.788588047 CEST	49730	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:55.832154036 CEST	443	49730	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:55.915218115 CEST	443	49731	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.915311098 CEST	49731	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.916436911 CEST	49731	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.916445971 CEST	443	49731	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.917212009 CEST	443	49731	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:55.918649912 CEST	49731	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:55.964109898 CEST	443	49731	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:56.097836971 CEST	443	49730	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:56.097934961 CEST	443	49730	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:56.098012924 CEST	49730	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:56.099005938 CEST	49730	443	192.168.2.16	34.199.143.213
Apr 26, 2024 16:29:56.099026918 CEST	443	49730	34.199.143.213	192.168.2.16
Apr 26, 2024 16:29:56.164995909 CEST	443	49731	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:56.165224075 CEST	443	49731	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:56.165317059 CEST	49731	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:56.165848017 CEST	49731	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:56.165875912 CEST	443	49731	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:56.165888071 CEST	49731	443	192.168.2.16	23.204.76.112
Apr 26, 2024 16:29:56.165896893 CEST	443	49731	23.204.76.112	192.168.2.16
Apr 26, 2024 16:29:56.534537077 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 26, 2024 16:29:56.837198973 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 26, 2024 16:29:57.095936060 CEST	49688	443	192.168.2.16	23.50.112.29
Apr 26, 2024 16:29:57.442126036 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 26, 2024 16:29:57.700138092 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 26, 2024 16:29:58.648137093 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 26, 2024 16:30:00.997330904 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 26, 2024 16:30:01.061127901 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 26, 2024 16:30:01.304455042 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 26, 2024 16:30:01.922903061 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 26, 2024 16:30:02.801429987 CEST	49732	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:02.801470041 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:02.801563025 CEST	49732	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:02.802690983 CEST	49732	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:02.802696943 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:03.129141092 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 26, 2024 16:30:03.420206070 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:03.420332909 CEST	49732	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:03.422771931 CEST	49732	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:03.422786951 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:03.423158884 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:03.464123964 CEST	49732	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:03.483664989 CEST	49732	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:03.528125048 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:04.018882990 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:04.018915892 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:04.018923044 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:04.018932104 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:04.018958092 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:04.018986940 CEST	49732	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:04.019002914 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:04.019047022 CEST	49732	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:04.019058943 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:04.019102097 CEST	49732	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:04.031815052 CEST	49732	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:04.031832933 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:04.031848907 CEST	49732	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:04.031853914 CEST	443	49732	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:04.633919001 CEST	443	49726	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:04.634073973 CEST	443	49726	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:04.634135008 CEST	49726	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:05.545908928 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 26, 2024 16:30:05.711936951 CEST	49726	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:05.711965084 CEST	443	49726	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:05.874125004 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 26, 2024 16:30:07.305103064 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 26, 2024 16:30:10.351185083 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 26, 2024 16:30:10.624773979 CEST	49733	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:10.624813080 CEST	443	49733	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:10.624944925 CEST	49733	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:10.625263929 CEST	49733	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:10.625277996 CEST	443	49733	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:10.969750881 CEST	443	49733	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:11.024113894 CEST	49733	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:11.075311899 CEST	49733	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:11.075336933 CEST	443	49733	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:11.076878071 CEST	443	49733	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:11.131108999 CEST	49733	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:11.384308100 CEST	49733	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:11.384483099 CEST	49733	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:11.384720087 CEST	443	49733	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:11.435142994 CEST	49733	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:11.722986937 CEST	443	49733	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:11.723104000 CEST	443	49733	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:11.723175049 CEST	49733	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:11.723201990 CEST	443	49733	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:11.726998091 CEST	443	49733	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:11.727073908 CEST	49733	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:11.727173090 CEST	49733	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:11.727190018 CEST	443	49733	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:15.489175081 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 26, 2024 16:30:15.524981976 CEST	49734	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:15.525039911 CEST	443	49734	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:15.525208950 CEST	49734	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:15.525398016 CEST	49734	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:15.525428057 CEST	443	49734	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:15.918229103 CEST	443	49734	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:15.918543100 CEST	49734	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:15.918581009 CEST	443	49734	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:15.919656992 CEST	443	49734	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:15.919939041 CEST	49734	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:15.920062065 CEST	49734	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:15.920089960 CEST	443	49734	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:15.920144081 CEST	443	49734	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:15.968148947 CEST	49734	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:16.343547106 CEST	443	49734	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:16.344629049 CEST	443	49734	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:16.344712973 CEST	49734	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:16.345423937 CEST	49734	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:16.345441103 CEST	443	49734	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:19.962268114 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 26, 2024 16:30:34.570333004 CEST	49698	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:34.698215961 CEST	49701	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:34.722665071 CEST	80	49698	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:34.730179071 CEST	49697	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:34.850188971 CEST	80	49701	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:34.882565022 CEST	80	49697	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:40.457761049 CEST	49735	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:40.457853079 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:40.458018064 CEST	49735	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:40.458319902 CEST	49735	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:40.458370924 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.084630013 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.084738016 CEST	49735	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:41.086042881 CEST	49735	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:41.086064100 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.087171078 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.088654995 CEST	49735	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:41.132143974 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.682847977 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.682910919 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.682955027 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.682998896 CEST	49735	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:41.683056116 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.683094978 CEST	49735	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:41.683162928 CEST	49735	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:41.683213949 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.683284044 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.683288097 CEST	49735	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:41.683315039 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.683391094 CEST	49735	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:41.683408022 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.683530092 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.683583975 CEST	49735	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:41.843686104 CEST	49735	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:41.843729019 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:41.843790054 CEST	49735	443	192.168.2.16	20.114.59.183
Apr 26, 2024 16:30:41.843808889 CEST	443	49735	20.114.59.183	192.168.2.16
Apr 26, 2024 16:30:51.857300997 CEST	49698	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:51.857367992 CEST	49701	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:52.009392977 CEST	80	49701	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:52.009484053 CEST	49701	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:52.009561062 CEST	80	49698	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:52.009637117 CEST	49698	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:54.184204102 CEST	49737	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:54.184289932 CEST	443	49737	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:54.184410095 CEST	49737	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:54.184648037 CEST	49737	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:54.184672117 CEST	443	49737	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:54.516280890 CEST	443	49737	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:54.516624928 CEST	49737	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:54.516670942 CEST	443	49737	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:54.517194033 CEST	443	49737	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:54.517481089 CEST	49737	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:54.517627001 CEST	443	49737	142.250.217.164	192.168.2.16
Apr 26, 2024 16:30:54.571214914 CEST	49737	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:30:55.541088104 CEST	49738	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:55.541136026 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:55.541235924 CEST	49738	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:55.541429043 CEST	49738	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:55.541440010 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:55.541461945 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:55.541558981 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:55.541635036 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:55.541774988 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:55.541789055 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.010746002 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.011029959 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.011044979 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.011703968 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.011897087 CEST	49738	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.011924028 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.012262106 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.012561083 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.012701988 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.012706041 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.012729883 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.013165951 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.013432980 CEST	49738	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.013622046 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.066199064 CEST	49738	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.066252947 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.337196112 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.337261915 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.337285995 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.337304115 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.337338924 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.337342978 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.337363005 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.337398052 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.337410927 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.337428093 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.337455988 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.337475061 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.337516069 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.337542057 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.337552071 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.337594986 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.337611914 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.337776899 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.337838888 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.338140011 CEST	49739	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.338156939 CEST	443	49739	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.351917982 CEST	49738	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.392164946 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.508646011 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.508842945 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.508865118 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.508882999 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.508918047 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.508966923 CEST	49738	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.508989096 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.509145021 CEST	49738	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.509157896 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.509176970 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.509258032 CEST	49738	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.509612083 CEST	49738	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:30:56.509629965 CEST	443	49738	34.198.52.69	192.168.2.16
Apr 26, 2024 16:30:56.517497063 CEST	49742	443	192.168.2.16	104.17.31.92
Apr 26, 2024 16:30:56.517571926 CEST	443	49742	104.17.31.92	192.168.2.16
Apr 26, 2024 16:30:56.517661095 CEST	49742	443	192.168.2.16	104.17.31.92
Apr 26, 2024 16:30:56.517817020 CEST	49742	443	192.168.2.16	104.17.31.92
Apr 26, 2024 16:30:56.517852068 CEST	443	49742	104.17.31.92	192.168.2.16
Apr 26, 2024 16:30:56.649090052 CEST	49743	443	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:56.649189949 CEST	443	49743	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:56.649285078 CEST	49743	443	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:56.649487019 CEST	49743	443	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:56.649519920 CEST	443	49743	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:56.773050070 CEST	443	49742	104.17.31.92	192.168.2.16
Apr 26, 2024 16:30:56.773338079 CEST	49742	443	192.168.2.16	104.17.31.92
Apr 26, 2024 16:30:56.773376942 CEST	443	49742	104.17.31.92	192.168.2.16
Apr 26, 2024 16:30:56.773858070 CEST	443	49742	104.17.31.92	192.168.2.16
Apr 26, 2024 16:30:56.774139881 CEST	49742	443	192.168.2.16	104.17.31.92
Apr 26, 2024 16:30:56.774243116 CEST	49742	443	192.168.2.16	104.17.31.92
Apr 26, 2024 16:30:56.774251938 CEST	443	49742	104.17.31.92	192.168.2.16
Apr 26, 2024 16:30:56.816140890 CEST	443	49742	104.17.31.92	192.168.2.16
Apr 26, 2024 16:30:56.829216003 CEST	49742	443	192.168.2.16	104.17.31.92
Apr 26, 2024 16:30:57.084815025 CEST	443	49742	104.17.31.92	192.168.2.16
Apr 26, 2024 16:30:57.084897995 CEST	443	49742	104.17.31.92	192.168.2.16
Apr 26, 2024 16:30:57.084983110 CEST	49742	443	192.168.2.16	104.17.31.92
Apr 26, 2024 16:30:57.085251093 CEST	49742	443	192.168.2.16	104.17.31.92
Apr 26, 2024 16:30:57.085285902 CEST	443	49742	104.17.31.92	192.168.2.16
Apr 26, 2024 16:30:57.092835903 CEST	49744	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:30:57.092875004 CEST	443	49744	104.17.27.92	192.168.2.16
Apr 26, 2024 16:30:57.092966080 CEST	49744	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:30:57.093178034 CEST	49744	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:30:57.093184948 CEST	443	49744	104.17.27.92	192.168.2.16
Apr 26, 2024 16:30:57.116879940 CEST	443	49743	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:57.117136002 CEST	49743	443	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:57.117177010 CEST	443	49743	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:57.117686033 CEST	443	49743	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:57.118011951 CEST	49743	443	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:57.118119955 CEST	443	49743	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:57.118127108 CEST	49743	443	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:57.160141945 CEST	443	49743	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:57.164290905 CEST	49743	443	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:57.274416924 CEST	443	49743	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:57.274450064 CEST	443	49743	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:57.274458885 CEST	443	49743	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:57.274483919 CEST	443	49743	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:57.274565935 CEST	443	49743	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:57.274581909 CEST	49743	443	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:57.274638891 CEST	49743	443	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:57.275526047 CEST	49743	443	192.168.2.16	3.216.119.164
Apr 26, 2024 16:30:57.275562048 CEST	443	49743	3.216.119.164	192.168.2.16
Apr 26, 2024 16:30:57.350517988 CEST	443	49744	104.17.27.92	192.168.2.16
Apr 26, 2024 16:30:57.350888968 CEST	49744	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:30:57.350908041 CEST	443	49744	104.17.27.92	192.168.2.16
Apr 26, 2024 16:30:57.351375103 CEST	443	49744	104.17.27.92	192.168.2.16
Apr 26, 2024 16:30:57.351675034 CEST	49744	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:30:57.351758003 CEST	443	49744	104.17.27.92	192.168.2.16
Apr 26, 2024 16:30:57.351808071 CEST	49744	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:30:57.396114111 CEST	443	49744	104.17.27.92	192.168.2.16
Apr 26, 2024 16:30:57.404232025 CEST	49744	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:30:57.676975965 CEST	443	49744	104.17.27.92	192.168.2.16
Apr 26, 2024 16:30:57.677107096 CEST	443	49744	104.17.27.92	192.168.2.16
Apr 26, 2024 16:30:57.677326918 CEST	49744	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:30:57.677922010 CEST	49744	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:30:57.677941084 CEST	443	49744	104.17.27.92	192.168.2.16
Apr 26, 2024 16:31:04.499753952 CEST	443	49737	142.250.217.164	192.168.2.16
Apr 26, 2024 16:31:04.499855042 CEST	443	49737	142.250.217.164	192.168.2.16
Apr 26, 2024 16:31:04.499958038 CEST	49737	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:31:05.501970053 CEST	49737	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:31:05.502008915 CEST	443	49737	142.250.217.164	192.168.2.16
Apr 26, 2024 16:31:09.349528074 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:09.349575043 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:09.349653959 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:09.359692097 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:09.359714031 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:09.668685913 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:09.669351101 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:09.669377089 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:09.670522928 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:09.671467066 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:09.671643019 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:09.721348047 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:14.855616093 CEST	49746	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:14.855671883 CEST	443	49746	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:14.855762959 CEST	49746	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:14.856410980 CEST	49746	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:14.856431007 CEST	443	49746	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:14.856620073 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:14.904119968 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.165061951 CEST	443	49746	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.165494919 CEST	49746	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:15.165529013 CEST	443	49746	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.166640043 CEST	443	49746	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.166995049 CEST	49746	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:15.167165041 CEST	443	49746	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.215418100 CEST	49746	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:15.375572920 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.375674963 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.375696898 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.375736952 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.375757933 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:15.375778913 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.375804901 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.375835896 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:15.375869036 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:15.375927925 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.375971079 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.376008034 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:15.376014948 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.376029968 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:15.376056910 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:15.376061916 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.420041084 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.420135021 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:15.420145035 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.420169115 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.420216084 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:15.420372009 CEST	49745	443	192.168.2.16	34.198.52.69
Apr 26, 2024 16:31:15.420387030 CEST	443	49745	34.198.52.69	192.168.2.16
Apr 26, 2024 16:31:15.445713997 CEST	49749	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:31:15.445768118 CEST	443	49749	104.17.27.92	192.168.2.16
Apr 26, 2024 16:31:15.445868015 CEST	49749	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:31:15.446096897 CEST	49749	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:31:15.446110964 CEST	443	49749	104.17.27.92	192.168.2.16
Apr 26, 2024 16:31:15.709594965 CEST	443	49749	104.17.27.92	192.168.2.16
Apr 26, 2024 16:31:15.710027933 CEST	49749	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:31:15.710046053 CEST	443	49749	104.17.27.92	192.168.2.16
Apr 26, 2024 16:31:15.710999966 CEST	443	49749	104.17.27.92	192.168.2.16
Apr 26, 2024 16:31:15.711395979 CEST	49749	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:31:15.711477041 CEST	443	49749	104.17.27.92	192.168.2.16
Apr 26, 2024 16:31:15.711572886 CEST	49749	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:31:15.752161026 CEST	443	49749	104.17.27.92	192.168.2.16
Apr 26, 2024 16:31:16.062434912 CEST	443	49749	104.17.27.92	192.168.2.16
Apr 26, 2024 16:31:16.062602997 CEST	443	49749	104.17.27.92	192.168.2.16
Apr 26, 2024 16:31:16.062676907 CEST	49749	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:31:16.661041975 CEST	49749	443	192.168.2.16	104.17.27.92
Apr 26, 2024 16:31:16.661068916 CEST	443	49749	104.17.27.92	192.168.2.16
Apr 26, 2024 16:31:19.888254881 CEST	49697	80	192.168.2.16	3.216.119.164
Apr 26, 2024 16:31:20.040389061 CEST	80	49697	3.216.119.164	192.168.2.16
Apr 26, 2024 16:31:54.242520094 CEST	49751	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:31:54.242579937 CEST	443	49751	142.250.217.164	192.168.2.16
Apr 26, 2024 16:31:54.242671013 CEST	49751	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:31:54.243067980 CEST	49751	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:31:54.243079901 CEST	443	49751	142.250.217.164	192.168.2.16
Apr 26, 2024 16:31:54.573292017 CEST	443	49751	142.250.217.164	192.168.2.16
Apr 26, 2024 16:31:54.573767900 CEST	49751	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:31:54.573800087 CEST	443	49751	142.250.217.164	192.168.2.16
Apr 26, 2024 16:31:54.574290037 CEST	443	49751	142.250.217.164	192.168.2.16
Apr 26, 2024 16:31:54.574645996 CEST	49751	443	192.168.2.16	142.250.217.164
Apr 26, 2024 16:31:54.574750900 CEST	443	49751	142.250.217.164	192.168.2.16
Apr 26, 2024 16:31:54.624329090 CEST	49751	443	192.168.2.16	142.250.217.164

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 16:29:49.286046028 CEST	51465	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:29:49.286215067 CEST	53376	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:29:49.402031898 CEST	53	51783	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:49.412854910 CEST	53	53376	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:49.413445950 CEST	53	51465	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:49.434669018 CEST	53	54232	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:49.726784945 CEST	64760	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:29:49.726989985 CEST	60791	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:29:49.855463028 CEST	53	60791	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:49.856513977 CEST	53	64760	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:50.389080048 CEST	53	53952	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:52.589482069 CEST	53	49859	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:52.953150034 CEST	57572	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:29:52.953349113 CEST	60196	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:29:53.081150055 CEST	53	60196	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:53.083540916 CEST	53	57572	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:53.509223938 CEST	53	63974	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:53.582916975 CEST	59207	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:29:53.583054066 CEST	56551	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:29:53.707870960 CEST	53	56551	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:53.708690882 CEST	53	59207	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:53.710541010 CEST	53	50414	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:53.725517988 CEST	53	56332	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:54.128549099 CEST	64696	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:29:54.128762960 CEST	60749	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:29:54.253783941 CEST	53	60749	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:54.254162073 CEST	53	64696	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:54.830295086 CEST	57511	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:29:54.830665112 CEST	60787	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:29:54.958864927 CEST	53	57511	1.1.1.1	192.168.2.16
Apr 26, 2024 16:29:54.960166931 CEST	53	60787	1.1.1.1	192.168.2.16
Apr 26, 2024 16:30:07.590861082 CEST	53	55550	1.1.1.1	192.168.2.16
Apr 26, 2024 16:30:26.343374968 CEST	53	56522	1.1.1.1	192.168.2.16
Apr 26, 2024 16:30:49.023807049 CEST	53	55385	1.1.1.1	192.168.2.16
Apr 26, 2024 16:30:49.409127951 CEST	53	55598	1.1.1.1	192.168.2.16
Apr 26, 2024 16:30:52.706190109 CEST	138	138	192.168.2.16	192.168.2.255
Apr 26, 2024 16:30:55.410943985 CEST	62884	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:30:55.411078930 CEST	55314	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:30:55.538587093 CEST	53	55314	1.1.1.1	192.168.2.16
Apr 26, 2024 16:30:55.540363073 CEST	53	62884	1.1.1.1	192.168.2.16
Apr 26, 2024 16:30:56.389302015 CEST	50146	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:30:56.389461994 CEST	49903	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:30:56.482546091 CEST	53	62629	1.1.1.1	192.168.2.16
Apr 26, 2024 16:30:56.512497902 CEST	63094	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:30:56.512645960 CEST	62574	53	192.168.2.16	1.1.1.1
Apr 26, 2024 16:30:56.514147043 CEST	53	50146	1.1.1.1	192.168.2.16
Apr 26, 2024 16:30:56.515650988 CEST	53	55052	1.1.1.1	192.168.2.16
Apr 26, 2024 16:30:56.517045021 CEST	53	49903	1.1.1.1	192.168.2.16
Apr 26, 2024 16:30:56.641249895 CEST	53	63094	1.1.1.1	192.168.2.16
Apr 26, 2024 16:30:56.648433924 CEST	53	62574	1.1.1.1	192.168.2.16
Apr 26, 2024 16:31:14.985933065 CEST	53	63935	1.1.1.1	192.168.2.16
Apr 26, 2024 16:31:17.165956020 CEST	53	65316	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 16:29:49.286046028 CEST	192.168.2.16	1.1.1.1	0xa6fe	Standard query (0)	www.webcargo.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:49.286215067 CEST	192.168.2.16	1.1.1.1	0x8073	Standard query (0)	www.webcargo.net	65	IN (0x0001)	false
Apr 26, 2024 16:29:49.726784945 CEST	192.168.2.16	1.1.1.1	0xcd85	Standard query (0)	www.webcargo.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:49.726989985 CEST	192.168.2.16	1.1.1.1	0xad15	Standard query (0)	www.webcargo.net	65	IN (0x0001)	false
Apr 26, 2024 16:29:52.953150034 CEST	192.168.2.16	1.1.1.1	0x788b	Standard query (0)	www.webcargo.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:52.953349113 CEST	192.168.2.16	1.1.1.1	0xc8df	Standard query (0)	www.webcargo.net	65	IN (0x0001)	false
Apr 26, 2024 16:29:53.582916975 CEST	192.168.2.16	1.1.1.1	0xc638	Standard query (0)	widget.uservoice.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:53.583054066 CEST	192.168.2.16	1.1.1.1	0x723	Standard query (0)	widget.uservoice.com	65	IN (0x0001)	false
Apr 26, 2024 16:29:54.128549099 CEST	192.168.2.16	1.1.1.1	0x2e5d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:54.128762960 CEST	192.168.2.16	1.1.1.1	0xc105	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 16:29:54.830295086 CEST	192.168.2.16	1.1.1.1	0x72ae	Standard query (0)	by2.uservoice.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:54.830665112 CEST	192.168.2.16	1.1.1.1	0x9fe6	Standard query (0)	by2.uservoice.com	65	IN (0x0001)	false
Apr 26, 2024 16:30:55.410943985 CEST	192.168.2.16	1.1.1.1	0x8249	Standard query (0)	www.webcargo.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:55.411078930 CEST	192.168.2.16	1.1.1.1	0xae03	Standard query (0)	www.webcargo.net	65	IN (0x0001)	false
Apr 26, 2024 16:30:56.389302015 CEST	192.168.2.16	1.1.1.1	0xac6f	Standard query (0)	widget.uservoice.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:56.389461994 CEST	192.168.2.16	1.1.1.1	0xee46	Standard query (0)	widget.uservoice.com	65	IN (0x0001)	false
Apr 26, 2024 16:30:56.512497902 CEST	192.168.2.16	1.1.1.1	0x391f	Standard query (0)	www.webcargo.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:56.512645960 CEST	192.168.2.16	1.1.1.1	0xbcec	Standard query (0)	www.webcargo.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 16:29:49.412854910 CEST	1.1.1.1	192.168.2.16	0x8073	No error (0)	www.webcargo.net	virginia.webcargo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:29:49.413445950 CEST	1.1.1.1	192.168.2.16	0xa6fe	No error (0)	www.webcargo.net	virginia.webcargo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:29:49.413445950 CEST	1.1.1.1	192.168.2.16	0xa6fe	No error (0)	virginia.webcargo.net		3.216.119.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:49.413445950 CEST	1.1.1.1	192.168.2.16	0xa6fe	No error (0)	virginia.webcargo.net		34.198.52.69	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:49.413445950 CEST	1.1.1.1	192.168.2.16	0xa6fe	No error (0)	virginia.webcargo.net		54.157.137.212	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:49.413445950 CEST	1.1.1.1	192.168.2.16	0xa6fe	No error (0)	virginia.webcargo.net		34.199.143.213	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:49.855463028 CEST	1.1.1.1	192.168.2.16	0xad15	No error (0)	www.webcargo.net	virginia.webcargo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:29:49.856513977 CEST	1.1.1.1	192.168.2.16	0xcd85	No error (0)	www.webcargo.net	virginia.webcargo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:29:49.856513977 CEST	1.1.1.1	192.168.2.16	0xcd85	No error (0)	virginia.webcargo.net		54.157.137.212	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:49.856513977 CEST	1.1.1.1	192.168.2.16	0xcd85	No error (0)	virginia.webcargo.net		34.199.143.213	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:49.856513977 CEST	1.1.1.1	192.168.2.16	0xcd85	No error (0)	virginia.webcargo.net		34.198.52.69	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:49.856513977 CEST	1.1.1.1	192.168.2.16	0xcd85	No error (0)	virginia.webcargo.net		3.216.119.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:53.081150055 CEST	1.1.1.1	192.168.2.16	0xc8df	No error (0)	www.webcargo.net	virginia.webcargo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:29:53.083540916 CEST	1.1.1.1	192.168.2.16	0x788b	No error (0)	www.webcargo.net	virginia.webcargo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:29:53.083540916 CEST	1.1.1.1	192.168.2.16	0x788b	No error (0)	virginia.webcargo.net		34.199.143.213	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:53.083540916 CEST	1.1.1.1	192.168.2.16	0x788b	No error (0)	virginia.webcargo.net		54.157.137.212	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:53.083540916 CEST	1.1.1.1	192.168.2.16	0x788b	No error (0)	virginia.webcargo.net		3.216.119.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:53.083540916 CEST	1.1.1.1	192.168.2.16	0x788b	No error (0)	virginia.webcargo.net		34.198.52.69	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:53.707870960 CEST	1.1.1.1	192.168.2.16	0x723	No error (0)	widget.uservoice.com			65	IN (0x0001)	false
Apr 26, 2024 16:29:53.708690882 CEST	1.1.1.1	192.168.2.16	0xc638	No error (0)	widget.uservoice.com		104.17.27.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:53.708690882 CEST	1.1.1.1	192.168.2.16	0xc638	No error (0)	widget.uservoice.com		104.17.29.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:53.708690882 CEST	1.1.1.1	192.168.2.16	0xc638	No error (0)	widget.uservoice.com		104.17.30.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:53.708690882 CEST	1.1.1.1	192.168.2.16	0xc638	No error (0)	widget.uservoice.com		104.17.31.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:53.708690882 CEST	1.1.1.1	192.168.2.16	0xc638	No error (0)	widget.uservoice.com		104.17.28.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:54.253783941 CEST	1.1.1.1	192.168.2.16	0xc105	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 16:29:54.254162073 CEST	1.1.1.1	192.168.2.16	0x2e5d	No error (0)	www.google.com		142.250.217.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:54.958864927 CEST	1.1.1.1	192.168.2.16	0x72ae	No error (0)	by2.uservoice.com		104.17.27.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:54.958864927 CEST	1.1.1.1	192.168.2.16	0x72ae	No error (0)	by2.uservoice.com		104.17.31.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:54.958864927 CEST	1.1.1.1	192.168.2.16	0x72ae	No error (0)	by2.uservoice.com		104.17.28.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:54.958864927 CEST	1.1.1.1	192.168.2.16	0x72ae	No error (0)	by2.uservoice.com		104.17.30.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:54.958864927 CEST	1.1.1.1	192.168.2.16	0x72ae	No error (0)	by2.uservoice.com		104.17.29.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:29:54.960166931 CEST	1.1.1.1	192.168.2.16	0x9fe6	No error (0)	by2.uservoice.com			65	IN (0x0001)	false
Apr 26, 2024 16:30:55.538587093 CEST	1.1.1.1	192.168.2.16	0xae03	No error (0)	www.webcargo.net	virginia.webcargo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:30:55.540363073 CEST	1.1.1.1	192.168.2.16	0x8249	No error (0)	www.webcargo.net	virginia.webcargo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:30:55.540363073 CEST	1.1.1.1	192.168.2.16	0x8249	No error (0)	virginia.webcargo.net		34.198.52.69	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:55.540363073 CEST	1.1.1.1	192.168.2.16	0x8249	No error (0)	virginia.webcargo.net		34.199.143.213	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:55.540363073 CEST	1.1.1.1	192.168.2.16	0x8249	No error (0)	virginia.webcargo.net		3.216.119.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:55.540363073 CEST	1.1.1.1	192.168.2.16	0x8249	No error (0)	virginia.webcargo.net		54.157.137.212	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:56.514147043 CEST	1.1.1.1	192.168.2.16	0xac6f	No error (0)	widget.uservoice.com		104.17.31.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:56.514147043 CEST	1.1.1.1	192.168.2.16	0xac6f	No error (0)	widget.uservoice.com		104.17.29.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:56.514147043 CEST	1.1.1.1	192.168.2.16	0xac6f	No error (0)	widget.uservoice.com		104.17.28.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:56.514147043 CEST	1.1.1.1	192.168.2.16	0xac6f	No error (0)	widget.uservoice.com		104.17.30.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:56.514147043 CEST	1.1.1.1	192.168.2.16	0xac6f	No error (0)	widget.uservoice.com		104.17.27.92	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:56.517045021 CEST	1.1.1.1	192.168.2.16	0xee46	No error (0)	widget.uservoice.com			65	IN (0x0001)	false
Apr 26, 2024 16:30:56.641249895 CEST	1.1.1.1	192.168.2.16	0x391f	No error (0)	www.webcargo.net	virginia.webcargo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:30:56.641249895 CEST	1.1.1.1	192.168.2.16	0x391f	No error (0)	virginia.webcargo.net		3.216.119.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:56.641249895 CEST	1.1.1.1	192.168.2.16	0x391f	No error (0)	virginia.webcargo.net		34.199.143.213	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:56.641249895 CEST	1.1.1.1	192.168.2.16	0x391f	No error (0)	virginia.webcargo.net		54.157.137.212	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:56.641249895 CEST	1.1.1.1	192.168.2.16	0x391f	No error (0)	virginia.webcargo.net		34.198.52.69	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:30:56.648433924 CEST	1.1.1.1	192.168.2.16	0xbcec	No error (0)	www.webcargo.net	virginia.webcargo.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

www.webcargo.net

https:

widget.uservoice.com

by2.uservoice.com

fs.microsoft.com

slscr.update.microsoft.com

www.google.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49697	3.216.119.164	80	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 16:29:49.566437960 CEST	453	OUT	GET /d/23171122/s4s7muKhWe/ HTTP/1.1 Host: www.webcargo.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 16:29:49.724149942 CEST	358	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Fri, 26 Apr 2024 14:29:49 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://www.webcargo.net:443/d/23171122/s4s7muKhWe/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Apr 26, 2024 16:30:34.730179071 CEST	6	OUT	Data Raw: 00 Data Ascii:
Apr 26, 2024 16:31:19.888254881 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49698	3.216.119.164	80	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 16:30:34.570333004 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49701	3.216.119.164	80	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 16:30:34.698215961 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49702	54.157.137.212	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:50 UTC	681	OUT	GET /d/23171122/s4s7muKhWe/ HTTP/1.1 Host: www.webcargo.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:29:50 UTC	1090	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: Apache Set-Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; expires=Sat, 27-Apr-2024 14:30:13 GMT; Max-Age=86400; path=/; domain=.webcargo.net Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; path=/; domain=.webcargo.net Set-Cookie: nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; path=/; domain=.webcargo.net Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:50 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:50 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:50 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:50 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:50 UTC	15294	IN	Data Raw: 37 64 36 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 20 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 Data Ascii: 7d6b<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1.0, user-scalable=0"><meta http-equiv="X-UA-Compatible
2024-04-26 14:29:50 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 77 6e 6c 6f 61 64 41 6c 6c 50 61 72 61 6d 73 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 6d 6f 64 61 6c 2d 64 6f 77 6e 6c 6f 61 64 2d 61 6c 6c 27 29 2e 6f 6e 65 28 27 68 69 64 65 2e 62 73 2e 6d 6f 64 61 6c 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 64 6f 77 6e 6c 6f 61 64 41 6c 6c 50 72 6f 63 65 73 73 69 6e 67 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 77 6e 6c 6f 61 64 41 6c 6c 50 72 6f 63 65 73 73 69 6e 67 2e 61 62 6f 72 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 64 6f 77 6e 6c 6f 61 64 2d 61 6c 6c 27 Data Ascii: var downloadAllParams = null; $('#modal-download-all').one('hide.bs.modal', function(){ if(downloadAllProcessing) downloadAllProcessing.abort(); }); $('.download-all'
2024-04-26 14:29:50 UTC	437	IN	Data Raw: 70 72 69 6f 72 20 73 65 65 20 74 68 69 73 20 66 6f 6c 64 65 72 2e 27 2c 27 4a 53 5f 46 49 4c 45 4d 41 4e 41 47 45 52 5f 53 48 41 52 49 4e 47 5f 44 45 4c 45 54 45 53 48 41 52 49 4e 47 5f 42 55 54 54 4f 4e 5f 54 45 58 54 27 3a 27 44 65 6c 65 74 65 27 2c 27 4a 53 5f 46 49 4c 45 4d 41 4e 41 47 45 52 5f 53 48 41 52 49 4e 47 5f 44 45 4c 45 54 45 53 48 41 52 49 4e 47 5f 43 4f 4e 46 49 52 4d 5f 44 49 41 4c 4f 47 5f 54 49 54 4c 45 27 3a 27 43 6f 6e 66 69 72 6d 20 75 73 65 72 20 64 65 6c 65 74 65 27 2c 27 4a 53 5f 46 49 4c 45 4d 41 4e 41 47 45 52 5f 53 48 41 52 49 4e 47 5f 55 4e 53 48 41 52 45 5f 43 4f 4e 46 49 52 4d 5f 44 49 41 4c 4f 47 5f 54 49 54 4c 45 27 3a 27 43 6f 6e 66 69 72 6d 20 75 6e 73 68 61 72 69 6e 67 20 6f 6e 27 2c 27 4a 53 5f 46 49 4c 45 4d 41 4e 41 Data Ascii: prior see this folder.','JS_FILEMANAGER_SHARING_DELETESHARING_BUTTON_TEXT':'Delete','JS_FILEMANAGER_SHARING_DELETESHARING_CONFIRM_DIALOG_TITLE':'Confirm user delete','JS_FILEMANAGER_SHARING_UNSHARE_CONFIRM_DIALOG_TITLE':'Confirm unsharing on','JS_FILEMANA
2024-04-26 14:29:50 UTC	5838	IN	Data Raw: 31 36 63 36 0d 0a 46 49 4c 45 4d 41 4e 41 47 45 52 5f 44 52 4f 50 5a 4f 4e 45 5f 43 4f 4e 54 41 49 4e 45 52 5f 4c 41 42 45 4c 27 3a 27 44 52 4f 50 20 5a 4f 4e 45 3c 62 72 2f 3e 44 72 6f 70 20 66 69 6c 65 20 68 65 72 65 20 66 72 6f 6d 20 79 6f 75 72 20 64 65 73 6b 74 6f 70 20 74 6f 20 75 70 6c 6f 61 64 20 74 68 65 6d 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 66 6f 6c 64 65 72 27 2c 27 4a 53 5f 46 49 4c 45 4d 41 4e 41 47 45 52 5f 4e 42 5f 49 54 45 4d 53 5f 53 45 4c 45 43 54 45 44 5f 53 49 4e 47 55 4c 41 52 27 3a 27 66 69 6c 65 20 73 65 6c 65 63 74 65 64 27 2c 27 4a 53 5f 46 49 4c 45 4d 41 4e 41 47 45 52 5f 4e 42 5f 49 54 45 4d 53 5f 53 45 4c 45 43 54 45 44 5f 50 4c 55 52 41 4c 27 3a 27 66 69 6c 65 73 20 73 65 6c 65 63 74 65 64 27 2c 27 4a 53 5f 46 Data Ascii: 16c6FILEMANAGER_DROPZONE_CONTAINER_LABEL':'DROP ZONE<br/>Drop file here from your desktop to upload them in the selected folder','JS_FILEMANAGER_NB_ITEMS_SELECTED_SINGULAR':'file selected','JS_FILEMANAGER_NB_ITEMS_SELECTED_PLURAL':'files selected','JS_F
2024-04-26 14:29:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49706	54.157.137.212	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:51 UTC	812	OUT	GET /assets/css/font-awesome.min.css?r=4.41 HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.webcargo.net/d/23171122/s4s7muKhWe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
2024-04-26 14:29:52 UTC	674	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:51 GMT Content-Type: text/css Content-Length: 26711 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:52 UTC	15710	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 34 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 34 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.4.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.4.0');s
2024-04-26 14:29:52 UTC	11001	IN	Data Raw: 6e 74 3a 22 5c 66 31 35 63 22 7d 2e 66 61 2d 73 6f 72 74 2d 61 6c 70 68 61 2d 61 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 64 22 7d 2e 66 61 2d 73 6f 72 74 2d 61 6c 70 68 61 2d 64 65 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 65 22 7d 2e 66 61 2d 73 6f 72 74 2d 61 6d 6f 75 6e 74 2d 61 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 30 22 7d 2e 66 61 2d 73 6f 72 74 2d 61 6d 6f 75 6e 74 2d 64 65 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 31 22 7d 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 61 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 32 22 7d 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 64 65 73 63 3a 62 65 66 6f 72 65 Data Ascii: nt:"\f15c"}.fa-sort-alpha-asc:before{content:"\f15d"}.fa-sort-alpha-desc:before{content:"\f15e"}.fa-sort-amount-asc:before{content:"\f160"}.fa-sort-amount-desc:before{content:"\f161"}.fa-sort-numeric-asc:before{content:"\f162"}.fa-sort-numeric-desc:before

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49707	54.157.137.212	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:51 UTC	812	OUT	GET /assets/css/responsive-theme.css?r=4.41 HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.webcargo.net/d/23171122/s4s7muKhWe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
2024-04-26 14:29:52 UTC	675	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:51 GMT Content-Type: text/css Content-Length: 145024 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:52 UTC	15709	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 26 73 75 62 73 65 74 3d 76 69 65 74 6e 61 6d 65 73 65 2c 63 79 72 69 6c 6c 69 63 2d 65 78 74 27 29 3b 0a 2f 2a 21 0a 20 2a 20 44 65 66 61 75 6c 74 20 74 68 65 6d 65 20 66 6f 72 20 50 69 6e 67 65 6e 64 6f 20 0a 20 2a 20 48 6f 6d 65 70 61 67 65 3a 20 68 74 74 70 3a 2f 2f 70 69 6e 67 65 6e 64 6f 2e 63 6f 6d 20 20 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 20 50 69 6e 67 65 6e 64 6f 20 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 0a 20 2a 20 42 61 73 65 64 20 6f 6e 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 34 0a 2a 2f 0a 0a 2f 2a 21 20 Data Ascii: @import url('https://fonts.googleapis.com/css?family=Open+Sans&subset=vietnamese,cyrillic-ext');/! Default theme for Pingendo * Homepage: http://pingendo.com * Copyright 2015 Pingendo * Licensed under MIT * Based on Bootstrap v3.3.4//!
2024-04-26 14:29:52 UTC	1949	IN	Data Raw: 65 6e 74 3a 20 22 5c 65 32 31 36 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 6e 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 32 36 66 61 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6c 61 63 6b 62 6f 61 72 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 31 38 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 65 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 31 39 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 61 70 70 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 38 66 66 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 72 61 73 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 32 31 22 3b Data Ascii: ent: "\e216";}.glyphicon-tent:before { content: "\26fa";}.glyphicon-blackboard:before { content: "\e218";}.glyphicon-bed:before { content: "\e219";}.glyphicon-apple:before { content: "\f8ff";}.glyphicon-erase:before { content: "\e221";
2024-04-26 14:29:52 UTC	16384	IN	Data Raw: 6e 74 3a 20 22 5c 65 32 34 39 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 35 30 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 35 31 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 62 6f 74 74 6f 6d 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 35 32 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 74 6f 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 35 33 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 6e Data Ascii: nt: "\e249";}.glyphicon-triangle-right:before { content: "\e250";}.glyphicon-triangle-left:before { content: "\e251";}.glyphicon-triangle-bottom:before { content: "\e252";}.glyphicon-triangle-top:before { content: "\e253";}.glyphicon-con
2024-04-26 14:29:52 UTC	16384	IN	Data Raw: 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 30 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 25 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 0a 20 20 2e 63 6f 6c 2d 6c 67 2d 31 2c 20 2e 63 6f 6c 2d 6c 67 2d 32 2c 20 2e 63 6f 6c 2d 6c 67 2d 33 2c 20 2e 63 6f 6c 2d 6c 67 2d 34 2c 20 2e 63 6f 6c 2d 6c 67 2d 35 2c 20 2e 63 6f 6c 2d 6c 67 2d 36 2c 20 2e 63 6f 6c 2d 6c 67 2d 37 2c 20 2e 63 6f 6c 2d 6c 67 2d 38 2c 20 2e 63 6f 6c 2d 6c 67 2d 39 2c 20 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 20 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 20 2e 63 6f 6c 2d 6c 67 2d 31 32 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6c 67 2d 31 32 20 7b 0a 20 20 20 20 77 Data Ascii: .col-md-offset-0 { margin-left: 0%; }}@media (min-width: 1200px) { .col-lg-1, .col-lg-2, .col-lg-3, .col-lg-4, .col-lg-5, .col-lg-6, .col-lg-7, .col-lg-8, .col-lg-9, .col-lg-10, .col-lg-11, .col-lg-12 { float: left; } .col-lg-12 { w
2024-04-26 14:29:52 UTC	16384	IN	Data Raw: 67 68 74 3a 20 34 36 70 78 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 73 6d 20 2b 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 20 7b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 7d 0a 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 68 65 6c 70 2d 62 6c 6f 63 6b 2c 0a 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 2c 0a 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 72 61 64 69 6f 2c 0a 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 63 68 65 63 6b 62 6f 78 2c 0a 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 2c 0a 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 63 68 65 63 6b 62 6f 78 2d Data Ascii: ght: 46px;}.input-sm + .form-control-feedback { width: 30px; height: 30px; line-height: 30px;}.has-success .help-block,.has-success .control-label,.has-success .radio,.has-success .checkbox,.has-success .radio-inline,.has-success .checkbox-
2024-04-26 14:29:52 UTC	16384	IN	Data Raw: 31 32 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 33 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 37 38 37 38 37 38 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 7d 0a 2e 64 72 6f 70 64 6f 77 6e 2d 62 61 63 6b 64 72 6f 70 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 30 3b 0a 7d 0a 2e 70 75 6c 6c 2d 72 69 67 68 74 20 3e 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 7b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 64 72 6f 70 75 70 20 2e 63 61 72 65 74 2c 0a Data Ascii: 12px; line-height: 1.42857143; color: #787878; white-space: nowrap;}.dropdown-backdrop { position: fixed; left: 0; right: 0; bottom: 0; top: 0; z-index: 990;}.pull-right > .dropdown-menu { right: 0; left: auto;}.dropup .caret,
2024-04-26 14:29:52 UTC	16384	IN	Data Raw: 35 70 78 3b 0a 20 20 7d 0a 20 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 3e 20 6c 69 20 3e 20 61 20 7b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 3e 20 6c 69 20 3e 20 61 3a 68 6f 76 65 72 2c 0a 20 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 3e 20 6c 69 20 3e 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 2e 6e 61 76 62 61 Data Ascii: 5px; } .navbar-nav .open .dropdown-menu > li > a { line-height: 20px; } .navbar-nav .open .dropdown-menu > li > a:hover, .navbar-nav .open .dropdown-menu > li > a:focus { background-image: none; }}@media (min-width: 768px) { .navba
2024-04-26 14:29:52 UTC	16384	IN	Data Raw: 2d 77 61 72 6e 69 6e 67 20 2e 61 6c 65 72 74 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 65 63 39 37 31 66 3b 0a 7d 0a 2e 61 6c 65 72 74 2d 64 61 6e 67 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 62 61 35 61 33 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 65 37 38 65 39 61 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 39 35 33 34 66 3b 0a 7d 0a 2e 61 6c 65 72 74 2d 64 61 6e 67 65 72 20 68 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 20 23 65 32 37 39 38 37 3b 0a 7d 0a 2e 61 6c 65 72 74 2d 64 61 6e 67 65 72 20 2e 61 6c 65 72 74 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 39 33 30 32 63 3b 0a 7d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 Data Ascii: -warning .alert-link { color: #ec971f;}.alert-danger { background-color: #eba5a3; border-color: #e78e9a; color: #d9534f;}.alert-danger hr { border-top-color: #e27987;}.alert-danger .alert-link { color: #c9302c;}@-webkit-keyframes progr
2024-04-26 14:29:52 UTC	16384	IN	Data Raw: 61 6e 65 6c 20 3e 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 3e 20 74 68 65 61 64 20 3e 20 74 72 20 3e 20 74 68 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 0a 2e 70 61 6e 65 6c 20 3e 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 68 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 0a 2e 70 61 6e 65 6c 20 3e 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 68 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 0a 2e 70 61 6e 65 6c 20 3e 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 3e 20 74 66 6f 6f 74 20 3e 20 74 72 20 3e 20 74 68 3a 66 69 72 73 74 2d Data Ascii: anel > .table-responsive > .table-bordered > thead > tr > th:first-child,.panel > .table-bordered > tbody > tr > th:first-child,.panel > .table-responsive > .table-bordered > tbody > tr > th:first-child,.panel > .table-bordered > tfoot > tr > th:first-
2024-04-26 14:29:52 UTC	12678	IN	Data Raw: 2c 20 30 2e 35 29 20 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 30 30 31 29 20 31 30 30 25 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 72 65 70 65 61 74 2d 78 3b 0a 20 20 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 38 30 30 30 30 30 30 30 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 30 30 30 30 30 30 30 30 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 31 29 3b 0a 7d 0a 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2e 72 69 67 68 74 20 7b 0a 20 20 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 Data Ascii: , 0.5) 0%, rgba(0, 0, 0, 0.0001) 100%); background-repeat: repeat-x; filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#80000000', endColorstr='#00000000', GradientType=1);}.carousel-control.right { left: auto; right: 0; backgr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49705	54.157.137.212	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:51 UTC	809	OUT	GET /assets/css/wc-responsive.css?r=4.41 HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.webcargo.net/d/23171122/s4s7muKhWe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
2024-04-26 14:29:52 UTC	674	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:51 GMT Content-Type: text/css Content-Length: 28455 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:52 UTC	15710	IN	Data Raw: 2f 2a 20 62 6f 6f 74 73 74 72 61 70 20 73 6c 69 64 65 72 20 2a 2f 0a 2e 73 6c 69 64 65 72 20 2e 74 6f 6f 6c 74 69 70 2d 69 6e 6e 65 72 2c 2e 73 6c 69 64 65 72 2e 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 73 6c 69 64 65 72 2d 74 69 63 6b 2d 6c 61 62 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 73 6c 69 64 65 72 2d 73 65 6c 65 63 74 69 6f 6e 2c 2e 73 6c 69 64 65 72 2d 74 72 61 63 6b 2d 68 69 67 68 2c 2e 73 6c 69 64 65 72 2d 74 72 61 63 6b 2d 6c 6f 77 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 73 6c 69 64 65 72 Data Ascii: /* bootstrap slider */.slider .tooltip-inner,.slider.slider-vertical .slider-tick-label-container{white-space:nowrap}.slider-selection,.slider-track-high,.slider-track-low{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;border-radius:4px}.slider
2024-04-26 14:29:52 UTC	12745	IN	Data Raw: 74 6f 6d 3a 30 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 35 66 35 66 35 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 32 30 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 36 3b 20 2f 2a 20 6f 70 61 63 69 74 79 20 5b 30 2d 31 5d 20 2a 2f 0a 20 20 20 20 2d 6d 6f 7a 2d 6f 70 61 63 69 74 79 3a 20 30 2e 36 3b 20 2f 2a 20 6f 70 61 63 69 74 79 20 5b 30 2d 31 5d 20 2a 2f 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 6f 70 61 63 69 74 79 3a 20 30 2e 36 3b 20 2f 2a 20 6f 70 61 63 69 74 79 20 5b 30 2d 31 5d 20 2a 2f 0a 7d 0a 2e 66 69 6c 65 73 2d 6c 69 73 74 69 6e 67 20 2e 66 69 6c 65 2d 69 74 65 6d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 70 61 64 64 69 6e 67 3a 31 39 70 78 3b 7d 0a 2e 66 69 6c 65 73 2d 6c 69 73 74 69 6e 67 20 2e 6d Data Ascii: tom:0px; background:#f5f5f5; z-index:20; opacity: 0.6; /* opacity [0-1] / -moz-opacity: 0.6; / opacity [0-1] / -webkit-opacity: 0.6; / opacity [0-1] */}.files-listing .file-item{position:relative; padding:19px;}.files-listing .m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49708	54.157.137.212	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:51 UTC	796	OUT	GET /assets/js/jquery-2.0.3.min.js?r=4.41 HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.webcargo.net/d/23171122/s4s7muKhWe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
2024-04-26 14:29:52 UTC	688	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:51 GMT Content-Type: application/javascript Content-Length: 83611 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:51 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:52 UTC	15696	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 30 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 2f 2f 40 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 6a 71 75 65 72 79 2d 32 2e 30 2e 33 2e 6d 69 6e 2e 6d 61 70 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 75 6e 64 65 66 69 6e 65 64 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 74 79 70 65 6f 66 20 75 6e 64 65 66 69 6e 65 64 2c 69 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2c 6f 3d 65 2e 64 6f 63 75 6d 65 6e 74 2c 73 3d 6f 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 61 3d 65 2e 6a 51 75 65 72 79 2c 75 3d 65 2e 24 2c 6c 3d 7b 7d 2c 63 3d 5b 5d 2c 70 3d 22 32 2e 30 2e Data Ascii: /! jQuery v2.0.3 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license//@ sourceMappingURL=jquery-2.0.3.min.map/(function(e,undefined){var t,n,r=typeof undefined,i=e.location,o=e.document,s=o.documentElement,a=e.jQuery,u=e.$,l={},c=[],p="2.0.
2024-04-26 14:29:52 UTC	10898	IN	Data Raw: 26 6f 74 2e 65 72 72 6f 72 28 65 5b 30 5d 29 2c 65 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 21 65 5b 35 5d 26 26 65 5b 32 5d 3b 72 65 74 75 72 6e 20 4a 2e 43 48 49 4c 44 2e 74 65 73 74 28 65 5b 30 5d 29 3f 6e 75 6c 6c 3a 28 65 5b 33 5d 26 26 65 5b 34 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 65 5b 32 5d 3d 65 5b 34 5d 3a 6e 26 26 56 2e 74 65 73 74 28 6e 29 26 26 28 74 3d 67 74 28 6e 2c 21 30 29 29 26 26 28 74 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 6e 2e 6c 65 6e 67 74 68 2d 74 29 2d 6e 2e 6c 65 6e 67 74 68 29 26 26 28 65 5b 30 5d 3d 65 5b 30 5d 2e 73 6c 69 63 65 28 30 2c 74 29 2c 65 5b 32 5d 3d 6e 2e 73 6c 69 63 65 28 30 2c 74 29 29 2c 65 2e 73 6c 69 63 65 28 30 2c 33 29 29 7d 7d 2c 66 69 6c 74 65 72 3a Data Ascii: &ot.error(e[0]),e},PSEUDO:function(e){var t,n=!e[5]&&e[2];return J.CHILD.test(e[0])?null:(e[3]&&e[4]!==undefined?e[2]=e[4]:n&&V.test(n)&&(t=gt(n,!0))&&(t=n.indexOf(")",n.length-t)-n.length)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:
2024-04-26 14:29:52 UTC	16384	IN	Data Raw: 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 3f 78 2e 65 78 74 65 6e 64 28 65 2c 72 29 3a 72 7d 7d 2c 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 72 2e 70 69 70 65 3d 72 2e 74 68 65 6e 2c 78 2e 65 61 63 68 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 73 3d 6f 5b 32 5d 2c 61 3d 6f 5b 33 5d 3b 72 5b 6f 5b 31 5d 5d 3d 73 2e 61 64 64 2c 61 26 26 73 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 61 7d 2c 74 5b 31 5e 65 5d 5b 32 5d 2e 64 69 73 61 62 6c 65 2c 74 5b 32 5d 5b 32 5d 2e 6c 6f 63 6b 29 2c 69 5b 6f 5b 30 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 5b 6f 5b 30 5d 2b 22 57 69 74 68 22 5d 28 74 68 69 73 3d 3d 3d 69 3f 72 3a 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 7d 2c 69 5b 6f 5b 30 Data Ascii: n(e){return null!=e?x.extend(e,r):r}},i={};return r.pipe=r.then,x.each(t,function(e,o){var s=o[2],a=o[3];r[o[1]]=s.add,a&&s.add(function(){n=a},t[1^e][2].disable,t[2][2].lock),i[o[0]]=function(){return i[o[0]+"With"](this===i?r:this,arguments),this},i[o[0
2024-04-26 14:29:52 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 2e 77 68 69 63 68 26 26 28 65 2e 77 68 69 63 68 3d 6e 75 6c 6c 21 3d 74 2e 63 68 61 72 43 6f 64 65 3f 74 2e 63 68 61 72 43 6f 64 65 3a 74 2e 6b 65 79 43 6f 64 65 29 2c 65 7d 7d 2c 6d 6f 75 73 65 48 6f 6f 6b 73 3a 7b 70 72 6f 70 73 3a 22 62 75 74 74 6f 6e 20 62 75 74 74 6f 6e 73 20 63 6c 69 65 6e 74 58 20 63 6c 69 65 6e 74 59 20 6f 66 66 73 65 74 58 20 6f 66 66 73 65 74 59 20 70 61 67 65 58 20 70 61 67 65 59 20 73 63 72 65 65 6e 58 20 73 63 72 65 65 6e 59 20 74 6f 45 6c 65 6d 65 6e 74 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 73 3d 74 2e 62 75 74 74 6f 6e 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 2e 70 61 67 65 58 26 26 6e 75 Data Ascii: eturn null==e.which&&(e.which=null!=t.charCode?t.charCode:t.keyCode),e}},mouseHooks:{props:"button buttons clientX clientY offsetX offsetY pageX pageY screenX screenY toElement".split(" "),filter:function(e,t){var n,r,i,s=t.button;return null==e.pageX&&nu
2024-04-26 14:29:52 UTC	16384	IN	Data Raw: 2e 63 73 73 4e 75 6d 62 65 72 5b 61 5d 7c 7c 28 6e 2b 3d 22 70 78 22 29 2c 78 2e 73 75 70 70 6f 72 74 2e 63 6c 65 61 72 43 6c 6f 6e 65 53 74 79 6c 65 7c 7c 22 22 21 3d 3d 6e 7c 7c 30 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 62 61 63 6b 67 72 6f 75 6e 64 22 29 7c 7c 28 75 5b 74 5d 3d 22 69 6e 68 65 72 69 74 22 29 2c 73 26 26 22 73 65 74 22 69 6e 20 73 26 26 28 6e 3d 73 2e 73 65 74 28 65 2c 6e 2c 72 29 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7c 7c 28 75 5b 74 5d 3d 6e 29 29 2c 75 6e 64 65 66 69 6e 65 64 29 7d 7d 2c 63 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 73 2c 61 3d 78 2e 63 61 6d 65 6c 43 61 73 65 28 74 29 3b 72 65 74 75 72 6e 20 74 3d 78 2e 63 73 73 50 72 6f 70 73 5b 61 5d 7c 7c 28 78 2e 63 73 73 50 72 6f Data Ascii: .cssNumber[a]\|\|(n+="px"),x.support.clearCloneStyle\|\|""!==n\|\|0!==t.indexOf("background")\|\|(u[t]="inherit"),s&&"set"in s&&(n=s.set(e,n,r))===undefined\|\|(u[t]=n)),undefined)}},css:function(e,t,n,r){var i,o,s,a=x.camelCase(t);return t=x.cssProps[a]\|\|(x.cssPro
2024-04-26 14:29:52 UTC	7865	IN	Data Raw: 2c 70 72 65 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3f 6b 6e 2e 75 6e 73 68 69 66 74 28 65 29 3a 6b 6e 2e 70 75 73 68 28 65 29 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 41 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 73 2c 61 2c 75 2c 6c 3d 74 68 69 73 2c 63 3d 7b 7d 2c 70 3d 65 2e 73 74 79 6c 65 2c 66 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 4c 74 28 65 29 2c 68 3d 71 2e 67 65 74 28 65 2c 22 66 78 73 68 6f 77 22 29 3b 6e 2e 71 75 65 75 65 7c 7c 28 61 3d 78 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 65 2c 22 66 78 22 29 2c 6e 75 6c 6c 3d 3d 61 2e 75 6e 71 75 65 75 65 64 26 26 28 61 2e 75 6e 71 75 65 75 65 64 3d 30 2c 75 3d 61 2e 65 6d 70 74 79 2e 66 69 72 65 2c 61 2e 65 6d 70 74 79 2e 66 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ,prefilter:function(e,t){t?kn.unshift(e):kn.push(e)}});function An(e,t,n){var r,i,o,s,a,u,l=this,c={},p=e.style,f=e.nodeType&&Lt(e),h=q.get(e,"fxshow");n.queue\|\|(a=x._queueHooks(e,"fx"),null==a.unqueued&&(a.unqueued=0,u=a.empty.fire,a.empty.fire=function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49713	54.157.137.212	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:52 UTC	791	OUT	GET /assets/js/jquery.tmpl.js?r=4.41 HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.webcargo.net/d/23171122/s4s7muKhWe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
2024-04-26 14:29:52 UTC	687	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:52 GMT Content-Type: application/javascript Content-Length: 6007 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:52 UTC	6007	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 72 3d 61 2e 66 6e 2e 64 6f 6d 4d 61 6e 69 70 2c 64 3d 22 5f 74 6d 70 6c 69 74 65 6d 22 2c 71 3d 2f 5e 5b 5e 3c 5d 2a 28 3c 5b 5c 77 5c 57 5d 2b 3e 29 5b 5e 3e 5d 2a 24 7c 5c 7b 5c 7b 5c 21 20 2f 2c 62 3d 7b 7d 2c 66 3d 7b 7d 2c 65 2c 70 3d 7b 6b 65 79 3a 30 2c 64 61 74 61 3a 7b 7d 7d 2c 68 3d 30 2c 63 3d 30 2c 6c 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 64 2c 67 2c 69 29 7b 76 61 72 20 63 3d 7b 64 61 74 61 3a 69 7c 7c 28 64 3f 64 2e 64 61 74 61 3a 7b 7d 29 2c 5f 77 72 61 70 3a 64 3f 64 2e 5f 77 72 61 70 3a 6e 75 6c 6c 2c 74 6d 70 6c 3a 6e 75 6c 6c 2c 70 61 72 65 6e 74 3a 64 7c 7c 6e 75 6c 6c 2c 6e 6f 64 65 73 3a 5b 5d 2c 63 61 6c 6c 73 3a 75 2c 6e 65 73 74 3a 77 2c 77 72 61 70 3a 78 2c 68 74 6d Data Ascii: (function(a){var r=a.fn.domManip,d="_tmplitem",q=/^[^<](<[\w\W]+>)[^>]$\|\{\{\! /,b={},f={},e,p={key:0,data:{}},h=0,c=0,l=[];function g(e,d,g,i){var c={data:i\|\|(d?d.data:{}),_wrap:d?d._wrap:null,tmpl:null,parent:d\|\|null,nodes:[],calls:u,nest:w,wrap:x,htm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49712	54.157.137.212	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:52 UTC	793	OUT	GET /assets/js/bootstrap.min.js?r=4.41 HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.webcargo.net/d/23171122/s4s7muKhWe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
2024-04-26 14:29:52 UTC	688	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:52 GMT Content-Type: application/javascript Content-Length: 36816 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:52 UTC	15696	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 35 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 3d 61 2e 66 6e 2e 6a 71 75 65 72 Data Ascii: /! Bootstrap v3.3.5 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquer
2024-04-26 14:29:52 UTC	1949	IN	Data Raw: 77 6e 26 26 21 62 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 28 74 68 69 73 2e 69 73 53 68 6f 77 6e 3d 21 31 2c 74 68 69 73 2e 65 73 63 61 70 65 28 29 2c 74 68 69 73 2e 72 65 73 69 7a 65 28 29 2c 61 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 66 6f 63 75 73 69 6e 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 22 29 2e 6f 66 66 28 22 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2e 6f 66 66 28 22 6d 6f 75 73 65 75 70 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 74 68 69 73 2e 24 64 69 61 6c 6f 67 2e 6f 66 66 28 22 6d 6f 75 73 65 64 6f 77 6e 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 61 2e 73 75 Data Ascii: wn&&!b.isDefaultPrevented()&&(this.isShown=!1,this.escape(),this.resize(),a(document).off("focusin.bs.modal"),this.$element.removeClass("in").off("click.dismiss.bs.modal").off("mouseup.dismiss.bs.modal"),this.$dialog.off("mousedown.dismiss.bs.modal"),a.su
2024-04-26 14:29:52 UTC	16384	IN	Data Raw: 74 69 6f 6e 45 6e 64 28 63 2e 42 41 43 4b 44 52 4f 50 5f 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 3a 62 28 29 7d 65 6c 73 65 20 69 66 28 21 74 68 69 73 2e 69 73 53 68 6f 77 6e 26 26 74 68 69 73 2e 24 62 61 63 6b 64 72 6f 70 29 7b 74 68 69 73 2e 24 62 61 63 6b 64 72 6f 70 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 22 29 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 72 65 6d 6f 76 65 42 61 63 6b 64 72 6f 70 28 29 2c 62 26 26 62 28 29 7d 3b 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 66 61 64 65 22 29 3f 74 68 69 73 2e 24 62 61 63 6b 64 72 6f 70 2e 6f 6e 65 28 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 29 2e 65 6d Data Ascii: tionEnd(c.BACKDROP_TRANSITION_DURATION):b()}else if(!this.isShown&&this.$backdrop){this.$backdrop.removeClass("in");var g=function(){d.removeBackdrop(),b&&b()};a.support.transition&&this.$element.hasClass("fade")?this.$backdrop.one("bsTransitionEnd",g).em
2024-04-26 14:29:52 UTC	2787	IN	Data Raw: 73 69 74 69 6f 6e 45 6e 64 22 2c 66 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 63 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 3a 66 28 29 2c 67 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 22 29 7d 3b 76 61 72 20 64 3d 61 2e 66 6e 2e 74 61 62 3b 61 2e 66 6e 2e 74 61 62 3d 62 2c 61 2e 66 6e 2e 74 61 62 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 63 2c 61 2e 66 6e 2e 74 61 62 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 66 6e 2e 74 61 62 3d 64 2c 74 68 69 73 7d 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 62 2e 63 61 6c 6c 28 61 28 74 68 69 73 29 2c 22 73 68 6f 77 22 29 7d 3b 61 28 64 6f 63 75 6d Data Ascii: sitionEnd",f).emulateTransitionEnd(c.TRANSITION_DURATION):f(),g.removeClass("in")};var d=a.fn.tab;a.fn.tab=b,a.fn.tab.Constructor=c,a.fn.tab.noConflict=function(){return a.fn.tab=d,this};var e=function(c){c.preventDefault(),b.call(a(this),"show")};a(docum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49715	54.157.137.212	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:52 UTC	809	OUT	GET /assets/plugins/bookmark-bubble/bookmark_bubble.js HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.webcargo.net/d/23171122/s4s7muKhWe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
2024-04-26 14:29:53 UTC	688	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:52 GMT Content-Type: application/javascript Content-Length: 35486 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:53 UTC	15696	IN	Data Raw: 2f 2a 0a 20 20 4d 6f 64 69 66 69 65 64 20 62 79 20 52 6f 62 65 72 74 20 47 65 72 61 6c 64 20 50 6f 72 74 65 72 2c 20 66 6f 72 20 57 65 65 76 65 72 20 41 70 70 73 20 49 6e 63 2e 0a 0a 20 20 56 65 72 73 69 6f 6e 3a 20 20 31 2e 31 2e 33 0a 20 20 52 65 6c 65 61 73 65 3a 20 20 4f 63 74 6f 62 65 72 20 32 31 2c 20 32 30 31 31 0a 0a 20 20 42 61 73 65 64 20 75 70 6f 6e 20 4d 6f 62 69 6c 65 20 42 6f 6f 6b 6d 61 72 6b 20 42 75 62 62 6c 65 20 62 79 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 2c 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 73 20 61 6e 64 20 6c 69 63 65 6e 73 65 20 62 65 6c 6f 77 2e 0a 0a 20 20 43 68 61 6e 67 65 6c 6f 67 3a 0a 0a 20 20 31 2e 30 2e 31 20 20 3a 20 20 2d 20 46 69 72 73 74 20 70 75 62 6c 69 63 20 72 65 6c 65 61 73 65 20 6f 66 20 66 6f Data Ascii: /* Modified by Robert Gerald Porter, for Weever Apps Inc. Version: 1.1.3 Release: October 21, 2011 Based upon Mobile Bookmark Bubble by Google Inc., original copyrights and license below. Changelog: 1.0.1 : - First public release of fo
2024-04-26 14:29:53 UTC	16384	IN	Data Raw: 39 75 63 79 35 68 5a 47 39 69 5a 53 35 6a 62 32 30 76 65 47 46 77 4c 7a 45 75 4d 43 39 7a 56 48 6c 77 5a 53 39 53 5a 58 4e 76 64 58 4a 6a 5a 56 4a 6c 5a 69 4d 69 49 48 68 74 63 44 70 44 63 6d 56 68 64 47 39 79 56 47 39 76 62 44 30 69 51 57 52 76 59 6d 55 67 55 47 68 76 64 47 39 7a 61 47 39 77 49 45 4e 54 4e 53 42 4e 59 57 4e 70 62 6e 52 76 63 32 67 69 49 48 68 74 63 45 31 4e 4f 6b 6c 75 63 33 52 68 62 6d 4e 6c 53 55 51 39 49 6e 68 74 63 43 35 70 61 57 51 36 4e 6a 68 45 4d 6a 68 46 4f 54 5a 47 4d 7a 49 34 4d 54 46 46 4d 44 6b 31 4f 55 5a 47 4f 54 55 78 4d 7a 51 78 4f 54 5a 42 4f 54 55 69 49 48 68 74 63 45 31 4e 4f 6b 52 76 59 33 56 74 5a 57 35 30 53 55 51 39 49 6e 68 74 63 43 35 6b 61 57 51 36 4e 6a 68 45 4d 6a 68 46 4f 54 64 47 4d 7a 49 34 4d 54 46 46 4d Data Ascii: 9ucy5hZG9iZS5jb20veGFwLzEuMC9zVHlwZS9SZXNvdXJjZVJlZiMiIHhtcDpDcmVhdG9yVG9vbD0iQWRvYmUgUGhvdG9zaG9wIENTNSBNYWNpbnRvc2giIHhtcE1NOkluc3RhbmNlSUQ9InhtcC5paWQ6NjhEMjhFOTZGMzI4MTFFMDk1OUZGOTUxMzQxOTZBOTUiIHhtcE1NOkRvY3VtZW50SUQ9InhtcC5kaWQ6NjhEMjhFOTdGMzI4MTFFM
2024-04-26 14:29:53 UTC	435	IN	Data Raw: 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 20 3d 20 27 23 65 65 65 27 3b 0a 20 20 62 75 62 62 6c 65 49 6e 6e 65 72 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 20 3d 20 27 23 63 64 64 63 66 33 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 20 27 20 2b 0a 20 20 20 20 20 20 27 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 6c 65 66 74 20 74 6f 70 2c 20 27 20 2b 20 69 73 49 70 61 64 20 7c 7c 20 69 73 50 6c 61 79 42 6f 6f 6b 20 7c 7c 20 74 68 69 73 2e 67 65 74 41 6e 64 72 6f 69 64 56 65 72 73 69 6f 6e 5f 28 29 20 3e 3d 20 74 68 69 73 2e 67 65 74 56 65 72 73 69 6f 6e 5f 28 33 2c 20 30 29 20 3f 0a 20 20 20 20 20 20 20 20 20 20 27 66 72 6f 6d 28 23 63 64 64 63 66 33 29 2c 20 74 6f 28 23 62 33 63 61 65 64 29 29 20 6e Data Ascii: style.backgroundColor = '#eee'; bubbleInner.style.background = '#cddcf3 -webkit-gradient(linear, ' + 'left bottom, left top, ' + isIpad \|\| isPlayBook \|\| this.getAndroidVersion_() >= this.getVersion_(3, 0) ? 'from(#cddcf3), to(#b3caed)) n
2024-04-26 14:29:53 UTC	2971	IN	Data Raw: 53 63 72 65 65 6e 22 20 74 65 78 74 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 62 65 20 74 68 65 20 65 78 61 63 74 20 73 61 6d 65 20 74 65 78 74 0a 20 20 2f 2f 20 74 68 61 74 20 69 73 20 64 69 73 70 6c 61 79 65 64 20 69 6e 20 74 68 65 20 6d 65 6e 75 20 6f 66 20 41 6e 64 72 6f 69 64 20 2f 20 4d 6f 62 69 6c 65 20 53 61 66 61 72 69 2e 0a 20 20 69 66 20 28 69 73 41 6e 64 72 6f 69 64 29 20 7b 0a 20 20 20 20 62 75 62 62 6c 65 49 6e 6e 65 72 2e 73 74 79 6c 65 2e 66 6f 6e 74 20 3d 20 27 30 2e 36 32 35 65 6d 20 73 61 6e 73 2d 73 65 72 69 66 27 3b 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 67 65 74 41 6e 64 72 6f 69 64 56 65 72 73 69 6f 6e 5f 28 29 20 3c 20 74 68 69 73 2e 67 65 74 56 65 72 73 69 6f 6e 5f 28 33 2c 20 30 29 29 20 7b 0a 20 20 20 20 20 20 62 75 62 Data Ascii: Screen" text is intended to be the exact same text // that is displayed in the menu of Android / Mobile Safari. if (isAndroid) { bubbleInner.style.font = '0.625em sans-serif'; if (this.getAndroidVersion_() < this.getVersion_(3, 0)) { bub

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49714	54.157.137.212	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:52 UTC	793	OUT	GET /assets/js/webcargo-code.js?r=4.41 HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.webcargo.net/d/23171122/s4s7muKhWe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
2024-04-26 14:29:53 UTC	689	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:52 GMT Content-Type: application/javascript Content-Length: 196786 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:53 UTC	15695	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 34 20 2d 20 32 30 31 35 2d 31 30 2d 32 30 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 65 29 3a 65 28 6a 51 75 65 72 79 29 7d 29 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 Data Ascii: /! jQuery UI - v1.11.4 - 2015-10-20 http://jqueryui.com* Includes: widget.js* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT */(function(e){"function"==typeof define&&define.amd?define(["jquery"],e):e(jQuery)})(function(e){va
2024-04-26 14:29:53 UTC	1949	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 28 20 73 69 7a 65 20 3e 20 31 30 32 34 20 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 69 7a 65 20 3d 20 74 68 69 73 2e 73 70 72 69 6e 74 66 28 20 22 25 2e 22 2b 6e 62 44 65 63 69 6d 61 6c 73 2b 22 66 20 6b 42 22 2c 20 73 69 7a 65 20 2f 20 31 30 32 34 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 28 20 73 69 7a 65 20 3c 20 30 20 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 69 7a 65 20 3d 20 74 68 69 73 2e 73 70 72 69 6e 74 66 28 20 22 25 64 20 26 6e 62 73 70 3b 42 22 2c 20 73 69 7a 65 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 69 7a 65 20 3d 20 74 68 69 73 2e 73 70 72 69 6e 74 66 28 Data Ascii: else if( size > 1024 ) size = this.sprintf( "%."+nbDecimals+"f kB", size / 1024 ); else if( size < 0 ) size = this.sprintf( "%d  B", size ); else size = this.sprintf(
2024-04-26 14:29:53 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 70 61 64 20 3d 20 27 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 50 61 64 20 26 26 20 70 50 61 64 2e 73 75 62 73 74 72 28 30 2c 31 29 20 3d 3d 20 22 27 22 29 20 70 61 64 20 3d 20 6c 65 66 74 70 61 72 74 2e 73 75 62 73 74 72 28 31 2c 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 70 50 61 64 29 20 70 61 64 20 3d 20 70 50 61 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6a 75 73 74 69 66 79 52 69 67 68 74 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 4a 75 73 74 69 66 79 20 26 26 20 70 4a 75 73 74 69 66 79 20 3d Data Ascii: var pad = ''; if (pPad && pPad.substr(0,1) == "'") pad = leftpart.substr(1,1); else if (pPad) pad = pPad; var justifyRight = true; if (pJustify && pJustify =
2024-04-26 14:29:53 UTC	16384	IN	Data Raw: 74 69 70 28 27 73 68 6f 77 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 63 6c 65 61 72 53 65 6c 65 63 74 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 57 43 47 6c 6f 62 61 6c 73 2e 63 6c 69 70 62 6f 61 72 64 2e 6f 6e 28 27 65 72 72 6f 72 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 65 2e 74 72 69 67 67 65 72 29 2e 70 72 6f 70 28 7b 74 69 74 6c 65 3a 57 43 47 6c 6f 62 61 6c 73 2e 74 72 61 6e 73 6c 61 74 65 28 27 4a 41 56 41 53 43 52 49 50 54 5f 43 4c 49 50 42 4f 41 52 44 5f 45 52 52 4f 52 5f 48 49 4e 54 5f 4c 41 42 45 4c 27 29 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 65 2e 74 72 69 67 67 65 72 29 2e 74 6f 6f 6c 74 69 70 28 7b 63 6f 6e 74 61 69 6e 65 72 Data Ascii: tip('show'); e.clearSelection(); }); WCGlobals.clipboard.on('error', function(e){ $(e.trigger).prop({title:WCGlobals.translate('JAVASCRIPT_CLIPBOARD_ERROR_HINT_LABEL')}); $(e.trigger).tooltip({container
2024-04-26 14:29:53 UTC	16384	IN	Data Raw: 68 69 73 2e 5f 73 74 61 74 65 2e 76 61 6c 75 65 3d 74 68 69 73 2e 5f 76 61 6c 69 64 61 74 65 49 6e 70 75 74 56 61 6c 75 65 28 74 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 5f 61 70 70 6c 79 50 72 65 63 69 73 69 6f 6e 2e 62 69 6e 64 28 74 68 69 73 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 61 6e 67 65 3f 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 76 61 6c 75 65 5b 30 5d 3d 6f 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 76 61 6c 75 65 5b 30 5d 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 76 61 6c 75 65 5b 31 5d 3d 6f 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 76 61 6c 75 65 5b 31 5d 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 76 61 6c 75 65 5b 30 5d 3d 4d 61 74 68 2e 6d 61 78 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 2c 4d 61 74 68 2e 6d 69 6e 28 74 68 69 73 2e 6f Data Ascii: his._state.value=this._validateInputValue(t);var o=this._applyPrecision.bind(this);this.options.range?(this._state.value[0]=o(this._state.value[0]),this._state.value[1]=o(this._state.value[1]),this._state.value[0]=Math.max(this.options.min,Math.min(this.o
2024-04-26 14:29:53 UTC	16384	IN	Data Raw: 65 6d 65 6e 74 2e 61 64 64 43 6c 61 73 73 28 27 72 65 63 69 70 69 65 6e 74 73 2d 6c 69 73 74 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 62 69 6e 64 20 73 6f 6d 65 20 65 76 65 6e 74 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 65 6c 65 6d 65 6e 74 2e 62 69 6e 64 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 21 73 65 6c 66 2e 65 64 69 74 69 6e 67 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 27 69 6e 70 75 74 2e 6e 65 77 2d 72 65 63 69 70 69 65 6e 74 27 29 2e 66 6f 63 75 73 28 29 2e 73 65 6c 65 63 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ement.addClass('recipients-list'); // bind some events self.element.bind('click', function(){ if(!self.editing) self.element.find('input.new-recipient').focus().select();
2024-04-26 14:29:53 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 68 65 61 64 65 72 73 2e 68 69 64 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 73 65 6c 66 2e 74 61 62 6c 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 74 61 62 6c 65 2e 68 69 64 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 77 72 61 70 70 65 72 2e 61 70 70 65 6e 64 28 73 65 6c 66 2e 65 72 72 6f 72 57 72 61 70 70 65 72 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 5f 73 68 6f 77 4e 6f 44 61 74 61 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 65 6c 66 Data Ascii: self.headers.hide(); if(self.table) self.table.hide(); self.wrapper.append(self.errorWrapper); }, _showNoData: function(){ var self
2024-04-26 14:29:53 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 28 73 65 6c 66 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6c 75 6d 6e 73 5b 63 6f 6c 75 6d 6e 43 6f 75 6e 74 65 72 5d 2e 74 79 70 65 20 3d 3d 3d 20 27 65 64 69 74 2d 69 6e 6c 69 6e 65 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 75 6d 6e 2e 61 70 70 65 6e 64 28 73 65 6c 66 2e 5f 72 65 6e 64 65 72 45 64 69 74 49 6e 6c 69 6e 65 28 66 69 65 6c 64 56 61 6c 75 65 2c 20 63 6f 6c 75 6d 6e 43 6f 75 6e 74 65 72 2e 74 6f 53 74 72 69 6e 67 28 29 2c 20 72 6f 77 43 6f 75 6e 74 65 72 2e 74 6f 53 74 72 69 6e 67 28 29 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 28 73 65 6c 66 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6c 75 6d 6e 73 5b 63 6f 6c 75 6d 6e Data Ascii: else if(self.options.columns[columnCounter].type === 'edit-inline') column.append(self._renderEditInline(fieldValue, columnCounter.toString(), rowCounter.toString())); else if(typeof(self.options.columns[column
2024-04-26 14:29:53 UTC	16384	IN	Data Raw: 2e 64 72 6f 70 64 6f 77 6e 42 75 74 74 6f 6e 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 62 75 74 74 6f 6e 27 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 64 72 6f 70 64 6f 77 6e 42 75 74 74 6f 6e 2e 70 72 6f 70 28 7b 74 79 70 65 3a 27 62 75 74 74 6f 6e 27 2c 69 64 3a 27 61 64 76 61 6e 63 65 64 2d 66 69 6c 74 65 72 73 27 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 64 72 6f 70 64 6f 77 6e 42 75 74 74 6f 6e 2e 61 64 64 43 6c 61 73 73 28 27 62 74 6e 20 62 74 6e 2d 64 65 66 61 75 6c 74 20 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 64 72 6f 70 64 6f 77 6e 42 75 74 74 6f 6e 2e 61 70 Data Ascii: .dropdownButton = $(document.createElement('button')); self.dropdownButton.prop({type:'button',id:'advanced-filters'}); self.dropdownButton.addClass('btn btn-default dropdown-toggle'); self.dropdownButton.ap
2024-04-26 14:29:53 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 24 28 27 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 27 2c 20 73 65 6c 66 2e 66 69 6c 74 65 72 73 5b 66 69 6c 74 65 72 43 6f 75 6e 74 65 72 5d 29 2e 62 69 6e 64 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 6a 51 75 65 72 79 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 73 65 6c 66 2e 5f 67 65 74 46 69 6c 74 65 72 73 28 29 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 63 6c 65 61 72 46 69 6c 74 65 72 73 42 75 74 74 6f 6e 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: $('input[type=checkbox]', self.filters[filterCounter]).bind('click', function(){ if(jQuery.isEmptyObject(self._getFilters())) self.clearFiltersButton.addClass('hidden');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49716	54.157.137.212	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:52 UTC	855	OUT	GET /assets/images/wc-text-f5f5f5-50.svg HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.webcargo.net/d/23171122/s4s7muKhWe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
2024-04-26 14:29:52 UTC	678	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:52 GMT Content-Type: image/svg+xml Content-Length: 6098 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:52 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:52 UTC	6098	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0" y="0" width="1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49719	34.199.143.213	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:53 UTC	596	OUT	GET /assets/images/wc-text-f5f5f5-50.svg HTTP/1.1 Host: www.webcargo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
2024-04-26 14:29:53 UTC	678	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:53 GMT Content-Type: image/svg+xml Content-Length: 6098 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:53 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:53 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:53 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:53 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:53 UTC	6098	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0" y="0" width="1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49720	54.157.137.212	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:53 UTC	933	OUT	GET /empty.html HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.webcargo.net/d/23171122/s4s7muKhWe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
2024-04-26 14:29:54 UTC	664	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:53 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 19 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:53 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:53 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:53 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:53 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:54 UTC	19	IN	Data Raw: 3c 21 2d 2d 20 65 6d 70 74 79 20 70 61 67 65 20 2d 2d 3e Data Ascii: ... empty page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49721	54.157.137.212	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:53 UTC	851	OUT	GET /assets/fonts/fontawesome-webfont.woff2?v=4.4.0 HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.webcargo.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.webcargo.net/assets/css/font-awesome.min.css?r=4.41 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
2024-04-26 14:29:54 UTC	682	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:53 GMT Content-Length: 64464 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.webcargo.net X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:53 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:53 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:53 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:53 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:54 UTC	15702	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 fb d0 00 0e 00 00 00 02 1b d4 00 00 fb 71 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 85 6a 11 08 0a 87 d9 5c 86 94 58 01 36 02 24 03 93 44 0b 89 72 00 04 20 05 87 08 07 af 37 3f 77 65 62 66 06 5b 66 b3 91 81 d1 ee f6 21 a1 db 10 38 fc cf d6 34 9d c2 8c 44 d8 a5 c1 0b 55 1d a8 61 e3 00 c0 fc bd 66 f6 ff ff ff ff d9 47 45 c6 4c c2 d2 6e 03 00 40 55 55 ff 5f d8 08 8b ac 41 ad 7b a4 84 7b e8 29 29 d8 34 63 c9 15 89 cd 32 69 a7 9a 7c f0 49 9e 4e 9c 95 2f 6c ec 6a c4 a8 12 f5 3a dd dc 6f f0 90 bb 72 a2 c3 41 eb 68 24 57 3c f2 40 c7 33 1b 1e 1c e8 c6 a3 63 e9 2b 56 4e 74 bc d0 87 74 7a df 38 c8 c2 68 b0 e8 3a c5 3a a4 cb 0d 9b 57 36 cf c2 bc 91 95 65 27 5b 54 e1 2c 10 64 Data Ascii: wOF2q?FFTM`j\X6$Dr 7?webf[f!84DUafGELn@UU_A{{))4c2i\|IN/lj:orAh$W<@3c+VNttz8h::W6e'[T,d
2024-04-26 14:29:54 UTC	1949	IN	Data Raw: 29 8e 98 c6 09 15 8d 37 d5 1e 34 9d 75 1a 61 9c 7f 4c 7a 45 9a 14 df 8f 0b ee 35 8a 8d 55 42 01 80 c9 e4 87 3e 66 66 d2 b9 22 2a d5 f0 78 1d cd 12 52 b9 7c 77 e8 a0 97 4c ad 9e 5f 24 e5 23 32 29 49 12 d1 7e 13 d0 c8 08 d9 af bd ec 73 4a 0e ee 26 c4 6e f1 d1 cb 7e ea a8 90 89 be ad 3d 4f 63 af ce da 87 47 0e d8 74 8a 4d 50 4e 3b 07 f5 f6 61 57 8a e0 8c 70 57 bc 40 21 94 63 09 14 80 7b 99 f2 9c 5a 1b ee 78 3f 43 54 2c e5 3e 01 e4 73 c9 45 f9 4f 9a f3 aa b5 5e 29 10 c8 01 9b 4f 5b 3f 9b 33 14 37 e8 df 52 9f 60 5a 53 59 e7 fc c1 bc cb af d0 0a 5f ec cb 38 4a 15 99 8a 85 eb 2c 7e 27 ca f3 81 fc 9a f3 40 be 76 10 a3 b2 4a 05 85 c7 5e ed 7f 19 d6 27 ca b1 cd 66 d5 2b 51 97 69 ac 87 57 c3 4a 6a f2 41 74 25 d1 d3 6a 15 4c 62 0b b7 c7 3f 22 c0 75 9f 3a 75 2d c7 5c Data Ascii: )74uaLzE5UB>ff"*xR\|wL_$#2)I~sJ&n~=OcGtMPN;aWpW@!c{Zx?CT,>sEO^)O[?37R`ZSY_8J,~'@vJ^'f+QiWJjAt%jLb?"u:u-\
2024-04-26 14:29:54 UTC	16384	IN	Data Raw: 6f f3 a6 9e ec d3 ce f5 97 7d 84 a0 be c0 0e 19 48 34 39 31 6c 0e 1e 2f 95 00 f5 25 9d 67 73 27 b6 fb c7 6f 9c 61 0e 20 0f 9b ca c1 43 87 64 af 84 b1 d8 93 b9 c8 62 e6 6c ec 32 d0 87 96 41 ed f4 f8 b1 b2 69 70 5f 44 62 87 36 2c 82 1d 71 59 dc dd cc b6 c0 9b 4e 68 2c 20 16 04 41 a4 7c 60 c4 72 db ba 42 13 cc 71 c1 25 28 40 25 2d ad 92 a2 1d 06 3c ac a8 df 0e 5c 9c 71 0e 18 b5 0a 40 90 01 ab 54 c7 bd d4 da 29 5f 04 90 bf e8 a8 39 8a cb 46 ab 39 9c b3 91 e0 35 d3 48 e9 b5 3e a4 d0 90 d4 c2 e3 32 66 7a 21 5b 35 2d 4a 27 f8 12 0b c3 0a 7f 51 e6 8a 03 4c 4a 5e e2 76 38 f3 57 a9 07 e4 e1 9d 70 25 17 cf ba 22 0b dd c1 06 1f 6b 63 ea 71 c5 fa 06 e5 e8 d8 5f c7 cc 57 49 48 4a ff 9d c2 12 be 22 6a e0 0d ab 3c e9 33 74 cf c1 4b ac 38 be 92 5e 03 a0 eb 90 6c 43 09 5d Data Ascii: o}H491l/%gs'oa Cdbl2Aip_Db6,qYNh, A\|`rBq%(@%-<\q@T)_9F95H>2fz![5-J'QLJ^v8Wp%"kcq_WIHJ"j<3tK8^lC]
2024-04-26 14:29:54 UTC	16384	IN	Data Raw: 8b 06 89 fa ef 93 1b 9d 7f 07 37 74 79 b1 57 2b 1b 7f a9 14 dc 0e 2d d9 d4 15 d3 aa 08 09 ef 89 97 7b 97 89 a5 92 40 eb ae 60 e7 48 ca 84 3c 3b 90 da 1e d2 90 a7 e1 bb ab 9d 8d bf 65 31 d1 d9 ee d9 41 9a 58 36 24 3b 2f 30 9f 10 cf f6 4d 0a 21 3c 7b 51 ea bb fa 9b d8 8b fa 85 c2 cd 81 17 39 6a fd b8 89 3c a9 24 bf 24 b0 c1 de 77 5f e1 3d db 88 47 05 8f ee 16 df 7d 58 00 2c a3 58 aa 71 b1 6c 70 a5 32 72 e8 0c 98 62 5c 7e be ca 6d 8d b2 be 51 35 22 20 40 e6 3e 16 dd b3 75 b0 af 3c 88 69 46 cf 55 82 fc b1 3b 1c e0 93 e2 39 b4 93 27 69 73 14 d8 0b f0 09 f1 76 f6 cc d3 71 00 9f 0c 7b 21 51 19 10 da 1f 1d 3f 2f 05 28 52 8d c6 54 38 2d fa 26 65 79 ac 19 f9 ca 62 0b cd 7e 87 ec 4b fd 5c e0 ac 4e 71 b3 11 c2 71 49 f3 bd 1e 5b 4e 0a 24 92 b8 55 89 f3 ed 79 7f 75 a4 Data Ascii: 7tyW+-{@`H<;e1AX6$;/0M!<{Q9j<$$w_=G}X,Xqlp2rb\~mQ5" @>u<iFU;9'isvq{!Q?/(RT8-&eyb~K\NqqI[N$Uyu
2024-04-26 14:29:54 UTC	14045	IN	Data Raw: d8 5a 48 89 16 6d 87 32 6b 35 29 73 93 47 03 b4 45 e0 a2 0b 38 0a da 54 6e 3a ed 22 d7 39 14 40 ec 33 48 c8 5e 15 04 89 36 ab 68 92 a2 19 0e 56 8b 1d b1 8d 7e 67 73 6d 0b 8b 9d 86 09 0e c7 db ef db a5 a4 f8 f9 4a dd 1d bb ba 9d cf 77 68 d0 d6 b9 fe 9e d8 66 13 31 9b 72 37 f5 0a 7d e5 71 1c b9 8a e1 b0 91 80 dd 31 71 08 e7 a9 e4 48 a5 b1 fe c4 b3 25 36 7e 56 d1 3e 4c 98 a7 8b ed 49 a2 8b bb 97 75 39 ce 24 3a 96 fa 1b a8 58 05 be 9f 95 06 42 e6 f8 7b da e4 98 27 73 2c 85 bf a6 ae 63 f8 bb c3 84 b4 6c 12 39 d2 95 eb ab 72 22 27 d6 5d 72 ed fb ef 77 ff d0 81 81 15 4d e5 8c 19 16 63 b8 34 db c0 04 eb 7c 33 4d e5 03 2b 0e 0c 7d ed ea fb cf 3e b5 ba c8 63 8c e5 d9 95 97 ac 40 1d ac bb b7 ba a8 77 d4 78 31 62 c9 ff 5a ef ff 9d ed 7d 29 08 f5 18 15 7c 24 a4 18 80 Data Ascii: ZHm2k5)sGE8Tn:"9@3H^6hV~gsmJwhf1r7}q1qH%6~V>LIu9$:XB{'s,cl9r"']rwMc4\|3M+}>c@wx1bZ})\|$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49723	104.17.27.92	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:53 UTC	545	OUT	GET /zdZZDs33EvNA8n7Oj9AH9Q.js HTTP/1.1 Host: widget.uservoice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.webcargo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:29:54 UTC	1036	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:54 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * etag: W/"eebe51f3818400117425afb443305030" Cache-Control: public, max-age=14400 content-security-policy: x-request-id: 226086c8946914ab03769a5d2364cf3e CF-Cache-Status: HIT Age: 354050 Expires: Fri, 26 Apr 2024 18:29:54 GMT Set-Cookie: __cf_bm=kEsF.ttOLS1INyMb3y_D7Dm_3QNOI6cJDQn0hDJoRI8-1714141794-1.0.1.1-R8tFWuBfk3UWGWW7gU5YsBwoFAXh_dLwrtovOHZdt5a1busm684_2YZTeRDaFWWtCU545APKqfs1pU1nlFq.lg; path=/; expires=Fri, 26-Apr-24 14:59:54 GMT; domain=.uservoice.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a74485adab6db3-MIA
2024-04-26 14:29:54 UTC	333	IN	Data Raw: 37 62 39 38 0d 0a 77 69 6e 64 6f 77 2e 55 73 65 72 56 6f 69 63 65 20 3d 20 7b 65 76 65 6e 74 73 3a 77 69 6e 64 6f 77 2e 55 73 65 72 56 6f 69 63 65 7c 7c 5b 5d 2c 70 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 77 69 6e 64 6f 77 2e 55 73 65 72 56 6f 69 63 65 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 78 29 7d 2c 61 63 63 6f 75 6e 74 3a 7b 22 61 63 74 69 76 65 5f 77 69 64 67 65 74 73 22 3a 5b 5d 2c 22 63 61 6d 70 61 69 67 6e 22 3a 6e 75 6c 6c 2c 22 6e 61 6d 65 22 3a 22 57 65 62 63 61 72 67 6f 22 2c 22 77 68 69 74 65 5f 6c 61 62 65 6c 65 64 22 3a 74 72 75 65 2c 22 77 69 64 67 65 74 32 5f 64 6f 6d 61 69 6e 22 3a 22 77 65 62 63 61 72 67 6f 2e 75 73 65 72 76 6f 69 63 65 2e 63 6f 6d 22 2c 22 73 75 62 64 6f 6d 61 69 6e 5f 73 73 6c 5f 68 6f 73 74 22 3a 22 73 75 70 Data Ascii: 7b98window.UserVoice = {events:window.UserVoice\|\|[],push:function(x){window.UserVoice.events.push(x)},account:{"active_widgets":[],"campaign":null,"name":"Webcargo","white_labeled":true,"widget2_domain":"webcargo.uservoice.com","subdomain_ssl_host":"sup
2024-04-26 14:29:54 UTC	1369	IN	Data Raw: 22 3a 22 77 65 62 63 61 72 67 6f 22 2c 22 73 75 62 64 6f 6d 61 69 6e 5f 69 64 22 3a 31 31 37 37 30 35 2c 22 63 6c 69 65 6e 74 5f 6b 65 79 22 3a 22 69 54 76 51 32 39 4f 34 50 4a 7a 55 59 36 63 43 33 70 70 44 4c 67 22 2c 22 63 6c 69 65 6e 74 5f 6f 70 74 69 6f 6e 73 22 3a 6e 75 6c 6c 2c 22 73 61 74 69 73 66 61 63 74 69 6f 6e 5f 61 75 74 6f 70 72 6f 6d 70 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6d 65 73 73 61 67 65 73 22 3a 7b 22 4c 6f 61 64 69 6e 67 22 3a 22 4c 6f 61 64 69 6e 67 22 2c 22 4f 70 65 6e 43 6f 6e 74 61 63 74 57 69 64 67 65 74 22 3a 22 4f 70 65 6e 20 43 6f 6e 74 61 63 74 20 57 69 64 67 65 74 22 2c 22 4f 70 65 6e 46 65 65 64 62 61 63 6b 57 69 64 67 65 74 22 3a 22 4f 70 65 6e 20 46 65 65 64 62 61 63 6b 20 57 69 64 67 65 74 22 7d 2c 22 68 Data Ascii: ":"webcargo","subdomain_id":117705,"client_key":"iTvQ29O4PJzUY6cC3ppDLg","client_options":null,"satisfaction_autoprompt_enabled":true,"messages":{"Loading":"Loading","OpenContactWidget":"Open Contact Widget","OpenFeedbackWidget":"Open Feedback Widget"},"h
2024-04-26 14:29:54 UTC	1369	IN	Data Raw: 2f 77 69 64 67 65 74 32 2f 63 6c 6f 73 65 2d 38 38 38 37 37 32 30 38 62 36 30 34 63 32 37 35 61 64 63 31 37 65 61 63 32 37 35 31 33 32 33 30 64 36 38 63 63 30 32 32 32 65 33 61 34 63 62 31 34 37 62 62 63 30 66 65 62 61 35 64 32 36 37 63 2e 70 6e 67 22 2c 22 70 62 22 3a 22 2f 70 6b 67 2f 63 6c 69 65 6e 74 73 2f 77 69 64 67 65 74 32 2f 55 73 65 72 56 6f 69 63 65 2d 6c 6f 67 6f 2d 6c 69 67 68 74 2d 63 34 30 61 66 32 66 30 35 63 35 66 31 64 66 65 30 36 64 65 31 61 38 33 38 37 35 37 33 30 35 35 33 64 39 62 36 63 38 63 36 36 33 66 39 38 30 65 37 30 30 65 31 63 35 61 31 66 31 66 61 63 35 36 2e 73 76 67 22 2c 22 73 63 72 65 65 6e 73 68 6f 74 22 3a 22 2f 70 6b 67 2f 63 6c 69 65 6e 74 73 2f 6f 6d 6e 69 62 6f 78 2f 73 63 72 65 65 6e 73 68 6f 74 2d 61 30 32 34 62 34 Data Ascii: /widget2/close-88877208b604c275adc17eac27513230d68cc0222e3a4cb147bbc0feba5d267c.png","pb":"/pkg/clients/widget2/UserVoice-logo-light-c40af2f05c5f1dfe06de1a83875730553d9b6c8c663f980e700e1c5a1f1fac56.svg","screenshot":"/pkg/clients/omnibox/screenshot-a024b4
2024-04-26 14:29:54 UTC	1369	IN	Data Raw: 29 2c 6d 65 74 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6f 6e 74 65 6e 74 22 2c 74 29 2c 65 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6d 65 74 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 66 6f 72 28 76 61 72 20 74 2c 69 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2c 6f 3d 30 3b 6f 3c 69 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 66 28 2f 76 69 65 77 70 6f 72 74 2f 69 2e 74 65 73 74 28 69 5b 6f 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 29 29 7b 74 3d 69 5b 6f 5d 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 69 66 28 21 44 29 7b 76 61 72 20 74 3d 6c 28 29 2c 65 3d 2f 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 5c 73 2a 3d 5c 73 Data Ascii: ),meta.setAttribute("content",t),e.head.appendChild(meta)}function l(){for(var t,i=e.getElementsByTagName("meta"),o=0;o<i.length;o++)if(/viewport/i.test(i[o].getAttribute("name"))){t=i[o];break}return t}function c(){if(!D){var t=l(),e=/user-scalable\s*=\s
2024-04-26 14:29:54 UTC	1369	IN	Data Raw: 64 28 65 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 74 29 29 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 50 7c 7c 28 6d 28 22 23 75 76 54 61 62 2c 2e 75 76 2d 74 72 61 79 2c 2e 75 76 2d 69 63 6f 6e 2c 2e 75 76 2d 70 6f 70 6f 76 65 72 2c 2e 75 76 2d 62 75 62 62 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 22 2c 22 70 72 69 6e 74 22 29 2c 50 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 52 7c 7c 28 6d 28 22 2e 75 76 2d 69 63 6f 6e 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 22 29 2c 52 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 65 Data Ascii: d(e.createTextNode(t)),e.getElementsByTagName("head")[0].appendChild(o)}function v(){P\|\|(m("#uvTab,.uv-tray,.uv-icon,.uv-popover,.uv-bubble{display:none!important}","print"),P=!0)}function b(){R\|\|(m(".uv-icon:hover{opacity:1}"),R=!0)}function y(){return e
2024-04-26 14:29:54 UTC	1369	IN	Data Raw: 65 6e 67 74 68 29 7d 72 65 74 75 72 6e 20 6f 74 5b 74 5d 5b 65 5d 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 4f 2e 66 69 72 65 64 7c 7c 28 4f 2e 66 69 72 65 64 3d 21 30 2c 55 73 65 72 56 6f 69 63 65 2e 61 63 63 6f 75 6e 74 2e 64 65 61 63 74 69 76 61 74 65 64 7c 7c 28 65 74 2e 74 72 61 63 6b 65 72 2e 74 72 61 63 6b 45 78 74 65 72 6e 61 6c 56 69 65 77 28 29 2c 65 74 2e 74 72 61 63 6b 65 72 2e 72 65 61 64 79 28 29 29 2c 65 74 2e 73 63 61 6e 28 29 29 7d 76 61 72 20 54 3d 7b 7d 3b 54 2e 73 61 6e 69 74 69 7a 65 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 69 66 28 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 Data Ascii: ength)}return ot[t][e]=!0}function O(){O.fired\|\|(O.fired=!0,UserVoice.account.deactivated\|\|(et.tracker.trackExternalView(),et.tracker.ready()),et.scan())}var T={};T.sanitizeValue=function(t,e){function i(t){if("[object Date]"===Object.prototype.toString.c
2024-04-26 14:29:54 UTC	1369	IN	Data Raw: 29 3c 3c 34 7c 69 3e 3e 34 2c 72 3d 28 31 35 26 69 29 3c 3c 32 7c 6f 3e 3e 36 2c 61 3d 36 33 26 6f 2c 69 73 4e 61 4e 28 69 29 3f 72 3d 61 3d 36 34 3a 69 73 4e 61 4e 28 6f 29 26 26 28 61 3d 36 34 29 2c 63 3d 63 2b 6c 2e 63 68 61 72 41 74 28 6e 29 2b 6c 2e 63 68 61 72 41 74 28 73 29 2b 6c 2e 63 68 61 72 41 74 28 72 29 2b 6c 2e 63 68 61 72 41 74 28 61 29 3b 72 65 74 75 72 6e 20 63 7d 2c 54 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 69 3d 65 2e 6c 65 6e 67 74 68 2c 6f 3d 30 3b 69 3e 6f 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 5b 6f 5d 29 65 5b 6f 5d 2e 68 61 73 4f 77 6e 50 72 6f Data Ascii: )<<4\|i>>4,r=(15&i)<<2\|o>>6,a=63&o,isNaN(i)?r=a=64:isNaN(o)&&(a=64),c=c+l.charAt(n)+l.charAt(s)+l.charAt(r)+l.charAt(a);return c},T.extend=function(t){for(var e=Array.prototype.slice.call(arguments,1),i=e.length,o=0;i>o;o++)for(var n in e[o])e[o].hasOwnPro
2024-04-26 14:29:54 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 28 63 6f 6e 73 6f 6c 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 31 30 3e 74 3f 22 30 22 2b 74 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 20 61 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 61 2e 74 65 73 74 28 74 29 3f 27 22 27 2b 74 2e 72 65 70 6c 61 63 65 28 61 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6c 5b 74 5d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 22 5c 5c 75 22 2b 28 22 30 30 30 30 22 2b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2e 74 6f 53 74 Data Ascii: =typeof console.log.apply&&console.log.apply(console,arguments)},function(){function e(t){return 10>t?"0"+t:t}function i(t){return a.lastIndex=0,a.test(t)?'"'+t.replace(a,function(t){var e=l[t];return"string"==typeof e?e:"\\u"+("0000"+t.charCodeAt(0).toSt
2024-04-26 14:29:54 UTC	1369	IN	Data Raw: 29 29 2b 22 3a 22 2b 65 28 74 68 69 73 2e 67 65 74 55 54 43 4d 69 6e 75 74 65 73 28 29 29 2b 22 3a 22 2b 65 28 74 68 69 73 2e 67 65 74 55 54 43 53 65 63 6f 6e 64 73 28 29 29 2b 22 5a 22 3a 6e 75 6c 6c 7d 2c 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 4e 75 6d 62 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 7d 29 3b 76 61 72 20 6e 2c 73 2c 72 2c 61 3d 2f 5b 5c 5c 5c 22 5c 78 30 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 78 39 66 5c 75 30 30 61 64 5c 75 30 36 30 30 2d 5c 75 30 36 30 34 5c 75 30 37 30 66 5c 75 31 37 62 34 5c 75 31 37 62 35 5c 75 32 30 30 Data Ascii: ))+":"+e(this.getUTCMinutes())+":"+e(this.getUTCSeconds())+"Z":null},String.prototype.toJSON=Number.prototype.toJSON=Boolean.prototype.toJSON=function(){return this.valueOf()});var n,s,r,a=/[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200
2024-04-26 14:29:54 UTC	1369	IN	Data Raw: 69 73 2e 72 65 63 75 72 72 65 6e 74 3d 74 68 69 73 2e 73 74 6f 72 65 2e 67 65 74 28 22 72 22 29 2c 74 68 69 73 2e 73 74 6f 72 65 2e 73 65 74 28 22 72 22 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 76 61 72 20 65 3d 22 78 22 3b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 75 6c 6c 3b 74 72 79 7b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 69 6e 20 74 26 26 74 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2c 74 68 69 73 2e 73 65 74 28 65 2c 65 29 2c 74 68 69 73 2e 67 65 74 28 65 29 21 3d 3d 65 3f 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 75 6c 6c 3a 74 68 69 73 2e 72 65 6d 6f 76 65 28 65 29 7d 63 61 74 63 68 28 69 29 7b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 75 6c 6c 7d 7d 76 61 72 20 61 3d 30 3b 74 2e 5f Data Ascii: is.recurrent=this.store.get("r"),this.store.set("r",!0)}function r(){var e="x";this.storage=null;try{this.storage="sessionStorage"in t&&t.sessionStorage,this.set(e,e),this.get(e)!==e?this.storage=null:this.remove(e)}catch(i){this.storage=null}}var a=0;t._

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49727	54.157.137.212	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:55 UTC	880	OUT	GET /assets/app-icons/favicon.ico HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.webcargo.net/d/23171122/s4s7muKhWe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; user_timezone=Europe/Amsterdam
2024-04-26 14:29:55 UTC	666	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:55 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 1150 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:55 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:55 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:55 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:55 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:55 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff ff ff ff ff fe fe fe ff ff ff ff ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff fe fe fe ff ff ff ff ff ff ff ff ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff ff ff ff ff f2 f2 f2 ff f3 f3 f3 ff dd dd dd ff fb fb fb ff ee ee ee ff fa fa fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49728	104.17.27.92	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:55 UTC	842	OUT	GET /t2/117705/web/track.js?_=1714141793544&s=0&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL3d3dy53ZWJjYXJnby5uZXQvZC8yMzE3MTEyMi9zNHM3bXVLaFdlLyIsInIiOiIifX0%3D HTTP/1.1 Host: by2.uservoice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.webcargo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=kEsF.ttOLS1INyMb3y_D7Dm_3QNOI6cJDQn0hDJoRI8-1714141794-1.0.1.1-R8tFWuBfk3UWGWW7gU5YsBwoFAXh_dLwrtovOHZdt5a1busm684_2YZTeRDaFWWtCU545APKqfs1pU1nlFq.lg
2024-04-26 14:29:55 UTC	614	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:55 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 66 Connection: close Cache-Control: no-cache Cache-Control: private set-cookie: uvts=0f955114-3b2f-41de-7052-3df54ef80720; Path=/; Domain=by2.uservoice.com; Secure; SameSite=None set-cookie: uvts=0f955114-3b2f-41de-7052-3df54ef80720; Path=/; Domain=by2.uservoice.com; Secure; SameSite=None; Partitioned strict-transport-security: max-age=31536000; includeSubDomains expires: Fri, 26 Apr 2024 14:29:54 GMT CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87a7448d9d4aa570-MIA
2024-04-26 14:29:55 UTC	66	IN	Data Raw: 5f 5f 75 76 53 65 73 73 69 6f 6e 44 61 74 61 30 28 7b 22 75 76 74 73 22 3a 22 30 66 39 35 35 31 31 34 2d 33 62 32 66 2d 34 31 64 65 2d 37 30 35 32 2d 33 64 66 35 34 65 66 38 30 37 32 30 22 7d 29 3b Data Ascii: __uvSessionData0({"uvts":"0f955114-3b2f-41de-7052-3df54ef80720"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49729	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:55 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 14:29:55 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=59630 Date: Fri, 26 Apr 2024 14:29:55 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49730	34.199.143.213	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:55 UTC	621	OUT	GET /assets/app-icons/favicon.ico HTTP/1.1 Host: www.webcargo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; user_timezone=Europe/Amsterdam
2024-04-26 14:29:56 UTC	666	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:29:56 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 1150 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:29:56 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:29:56 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:29:56 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:29:56 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:29:56 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff ff ff ff ff fe fe fe ff ff ff ff ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff fe fe fe ff ff ff ff ff ff ff ff ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff ff ff ff ff f2 f2 f2 ff f3 f3 f3 ff dd dd dd ff fb fb fb ff ee ee ee ff fa fa fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49731	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:29:55 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 14:29:56 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=59623 Date: Fri, 26 Apr 2024 14:29:56 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 14:29:56 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49732	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:30:03 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yynUUGmL8UHR6Lc&MD=TEYAa2dk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-26 14:30:04 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 6722910d-fefd-441e-a2bc-db8af9189475 MS-RequestId: bb06cdb7-e985-4830-928e-815cdcfae952 MS-CV: d69piMUamU64gwEj.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 14:30:03 GMT Connection: close Content-Length: 24490
2024-04-26 14:30:04 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-26 14:30:04 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49733	142.250.217.164	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:30:11 UTC	613	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:30:11 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:30:11 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-gGEe55V5NUD8kjAE2PHtoA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 14:30:11 UTC	805	IN	Data Raw: 33 31 65 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 61 6d 61 7a 69 6e 67 20 72 61 63 65 20 73 65 61 73 6f 6e 20 33 36 22 2c 22 70 68 69 6c 6c 79 20 70 72 65 74 7a 65 6c 20 66 61 63 74 6f 72 79 20 66 72 65 65 20 70 72 65 74 7a 65 6c 20 64 61 79 22 2c 22 6c 69 6f 6e 73 20 64 72 61 66 74 22 2c 22 61 70 70 6c 65 20 69 70 68 6f 6e 65 20 31 36 20 70 72 6f 20 6d 61 78 22 2c 22 77 65 61 74 68 65 72 20 73 74 6f 72 6d 73 20 74 6f 72 6e 61 64 6f 65 73 22 2c 22 68 65 61 72 74 68 73 74 6f 6e 65 20 62 61 74 74 6c 65 67 72 6f 75 6e 64 73 20 70 61 74 63 68 20 6e 6f 74 65 73 22 2c 22 61 6c 70 68 61 62 65 74 20 73 74 6f 63 6b 20 65 61 72 6e 69 6e 67 73 22 2c 22 63 6f 6c 75 6d 62 69 61 20 75 6e 69 76 65 72 73 69 74 79 20 73 74 75 64 65 6e 74 20 70 72 6f 74 65 73 74 73 22 5d 2c Data Ascii: 31e)]}'["",["amazing race season 36","philly pretzel factory free pretzel day","lions draft","apple iphone 16 pro max","weather storms tornadoes","hearthstone battlegrounds patch notes","alphabet stock earnings","columbia university student protests"],
2024-04-26 14:30:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49734	142.250.217.164	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:30:15 UTC	677	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fwww.webcargo.net&oit=3&cp=24&pgcl=4&gs_rn=42&psi=3QnChvIfJHsNfRPD&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:30:16 UTC	1795	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:30:16 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-b_YXwv6UHv12k-NISGpzDw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Viewport-Width Accept-CH: Sec-CH-Viewport-Height Accept-CH: Sec-CH-DPR Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 14:30:16 UTC	250	IN	Data Raw: 66 34 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 65 62 63 61 72 67 6f 2e 6e 65 74 22 2c 5b 22 77 77 77 20 77 65 62 63 61 72 67 6f 20 6e 65 74 20 69 70 67 22 5d 2c 5b 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 36 30 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 33 30 2c 31 33 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 31 33 30 30 7d 5d 0d 0a Data Ascii: f4)]}'["https://www.webcargo.net",["www webcargo net ipg"],[""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[600],"google:suggestsubtypes":[[30,13]],"google:suggesttype":["QUERY"],"google:verbatimrelevance":1300}]
2024-04-26 14:30:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49735	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:30:41 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yynUUGmL8UHR6Lc&MD=TEYAa2dk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-26 14:30:41 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 0c91d0c2-b427-473e-ba5a-116026a253b2 MS-RequestId: 7b7eddd9-185c-4596-8279-d14d34f8bf5d MS-CV: gKyRwtOxD0q1D0RH.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 14:30:41 GMT Connection: close Content-Length: 25457
2024-04-26 14:30:41 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-26 14:30:41 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49739	34.198.52.69	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:30:56 UTC	955	OUT	GET / HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; user_timezone=Europe/Amsterdam; uvts=0f955114-3b2f-41de-7052-3df54ef80720
2024-04-26 14:30:56 UTC	1299	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:30:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; path=/; domain=.webcargo.net Set-Cookie: nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; path=/; domain=.webcargo.net Set-Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; expires=Sat, 27-Apr-2024 14:31:19 GMT; Max-Age=86400; path=/; domain=.webcargo.net Set-Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; path=/; domain=.webcargo.net Set-Cookie: nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; path=/; domain=.webcargo.net Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:30:56 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:30:56 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:30:56 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:30:56 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:30:56 UTC	15085	IN	Data Raw: 36 34 35 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 20 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 Data Ascii: 6451<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1.0, user-scalable=0"><meta http-equiv="X-UA-Compatible
2024-04-26 14:30:56 UTC	10604	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 64 65 66 61 75 6c 74 20 73 77 69 74 63 68 2d 6c 61 6e 67 22 20 64 61 74 61 2d 6c 61 6e 67 3d 22 64 65 22 3e 44 65 75 74 73 63 68 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 64 65 66 61 75 6c 74 20 73 77 69 74 63 68 2d 6c 61 6e 67 22 20 64 61 74 61 2d 6c 61 6e 67 3d 22 65 73 22 3e 45 73 70 61 c3 b1 6f 6c 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 64 65 66 61 75 6c Data Ascii: <a class="btn btn-default switch-lang" data-lang="de">Deutsch</a> <a class="btn btn-default switch-lang" data-lang="es">Espaol</a> <a class="btn btn-defaul
2024-04-26 14:30:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49738	34.198.52.69	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:30:56 UTC	902	OUT	GET /assets/images/wc-logo-400.svg HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.webcargo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; user_timezone=Europe/Amsterdam; uvts=0f955114-3b2f-41de-7052-3df54ef80720
2024-04-26 14:30:56 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:30:56 GMT Content-Type: image/svg+xml Content-Length: 11135 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:30:56 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:30:56 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:30:56 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:30:56 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:30:56 UTC	11135	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0" y="0" width="4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49742	104.17.31.92	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:30:56 UTC	765	OUT	GET /zdZZDs33EvNA8n7Oj9AH9Q.js HTTP/1.1 Host: widget.uservoice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.webcargo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=kEsF.ttOLS1INyMb3y_D7Dm_3QNOI6cJDQn0hDJoRI8-1714141794-1.0.1.1-R8tFWuBfk3UWGWW7gU5YsBwoFAXh_dLwrtovOHZdt5a1busm684_2YZTeRDaFWWtCU545APKqfs1pU1nlFq.lg If-None-Match: W/"eebe51f3818400117425afb443305030"
2024-04-26 14:30:57 UTC	700	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 14:30:57 GMT Connection: close vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * etag: W/"eebe51f3818400117425afb443305030" Cache-Control: public, max-age=14400 content-security-policy: x-request-id: 226086c8946914ab03769a5d2364cf3e CF-Cache-Status: HIT Age: 354113 Expires: Fri, 26 Apr 2024 18:30:57 GMT Server: cloudflare CF-RAY: 87a7460e39d9b3df-MIA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49743	3.216.119.164	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:30:57 UTC	665	OUT	GET /assets/images/wc-logo-400.svg HTTP/1.1 Host: www.webcargo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; user_timezone=Europe/Amsterdam; uvts=0f955114-3b2f-41de-7052-3df54ef80720
2024-04-26 14:30:57 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:30:57 GMT Content-Type: image/svg+xml Content-Length: 11135 Connection: close Server: Apache Last-Modified: Mon, 25 Mar 2024 10:33:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:30:57 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:30:57 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:30:57 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:30:57 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:30:57 UTC	11135	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0" y="0" width="4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49744	104.17.27.92	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:30:57 UTC	939	OUT	GET /t2/117705/web/0f955114-3b2f-41de-7052-3df54ef80720/track.js?_=1714141855808&s=1&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL3d3dy53ZWJjYXJnby5uZXQvIiwiciI6IiJ9fQ%3D%3D HTTP/1.1 Host: by2.uservoice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.webcargo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=kEsF.ttOLS1INyMb3y_D7Dm_3QNOI6cJDQn0hDJoRI8-1714141794-1.0.1.1-R8tFWuBfk3UWGWW7gU5YsBwoFAXh_dLwrtovOHZdt5a1busm684_2YZTeRDaFWWtCU545APKqfs1pU1nlFq.lg; uvts=0f955114-3b2f-41de-7052-3df54ef80720; uvts=0f955114-3b2f-41de-7052-3df54ef80720
2024-04-26 14:30:57 UTC	377	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:30:57 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 66 Connection: close Cache-Control: no-cache Cache-Control: private strict-transport-security: max-age=31536000; includeSubDomains expires: Fri, 26 Apr 2024 14:30:56 GMT CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87a74611deb82269-MIA
2024-04-26 14:30:57 UTC	66	IN	Data Raw: 5f 5f 75 76 53 65 73 73 69 6f 6e 44 61 74 61 30 28 7b 22 75 76 74 73 22 3a 22 30 66 39 35 35 31 31 34 2d 33 62 32 66 2d 34 31 64 65 2d 37 30 35 32 2d 33 64 66 35 34 65 66 38 30 37 32 30 22 7d 29 3b Data Ascii: __uvSessionData0({"uvts":"0f955114-3b2f-41de-7052-3df54ef80720"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49745	34.198.52.69	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:31:14 UTC	977	OUT	GET /d/23171122/s4s7muKhWe/ HTTP/1.1 Host: www.webcargo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; AWSALBAPP-0=_remove_; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; user_timezone=Europe/Amsterdam; uvts=0f955114-3b2f-41de-7052-3df54ef80720
2024-04-26 14:31:15 UTC	1299	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:31:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; path=/; domain=.webcargo.net Set-Cookie: nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; path=/; domain=.webcargo.net Set-Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; expires=Sat, 27-Apr-2024 14:31:31 GMT; Max-Age=86400; path=/; domain=.webcargo.net Set-Cookie: PHPSESSIDPRODUCTION=nssc1t2l1kpps4ikqts0t88spn; path=/; domain=.webcargo.net Set-Cookie: nssc1t2l1kpps4ikqts0t88spn=4JzjI0Qdkvb1VAcZJoalAMqkvKBVQ4fH7nTjLLud%2BHY%3D; path=/; domain=.webcargo.net Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: AWSALBAPP-0=_remove_; Expires=Fri, 03 May 2024 14:31:15 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Fri, 03 May 2024 14:31:15 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Fri, 03 May 2024 14:31:15 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Fri, 03 May 2024 14:31:15 GMT; Path=/; SameSite=None; Secure
2024-04-26 14:31:15 UTC	15085	IN	Data Raw: 37 63 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 20 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 Data Ascii: 7c9a<!DOCTYPE html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1.0, user-scalable=0"><meta http-equiv="X-UA-Compatible
2024-04-26 14:31:15 UTC	16384	IN	Data Raw: 65 6c 66 29 2e 64 61 74 61 28 27 66 69 6c 65 2d 69 64 27 29 2b 27 22 5d 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 2f 2f 20 2d 2d 2d 2d 2d 20 64 6f 77 6e 6c 6f 61 64 20 66 69 6c 65 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 2f 2f 20 64 6f 77 6e 6c 6f 61 64 20 61 6c 6c 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 77 6e 6c 6f 61 64 41 6c 6c 50 72 6f 63 65 73 73 69 6e 67 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 77 6e 6c 6f 61 64 41 6c 6c 50 61 72 61 6d 73 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 Data Ascii: elf).data('file-id')+'"]').addClass('hidden'); } }); }); // ----- download file // download all var downloadAllProcessing = false; var downloadAllParams = null;
2024-04-26 14:31:15 UTC	437	IN	Data Raw: 45 54 45 56 45 52 53 49 4f 4e 5f 43 4f 4e 46 49 52 4d 5f 44 49 41 4c 4f 47 5f 54 49 54 4c 45 27 3a 27 43 6f 6e 66 69 72 6d 20 76 65 72 73 69 6f 6e 20 64 65 6c 65 74 65 27 2c 27 4a 53 5f 46 49 4c 45 4d 41 4e 41 47 45 52 5f 53 48 41 52 49 4e 47 5f 44 49 41 4c 4f 47 5f 54 49 54 4c 45 27 3a 27 53 68 61 72 69 6e 67 20 6f 66 20 66 6f 6c 64 65 72 27 2c 27 4a 53 5f 46 49 4c 45 4d 41 4e 41 47 45 52 5f 53 48 41 52 49 4e 47 5f 54 45 4d 50 55 53 45 52 5f 4d 45 53 53 41 47 45 27 3a 27 54 68 69 73 20 75 73 65 72 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 57 65 62 63 61 72 67 6f 20 61 63 63 6f 75 6e 74 20 74 6f 20 70 72 69 6f 72 20 73 65 65 20 74 68 69 73 20 66 6f 6c 64 65 72 2e 27 2c 27 4a 53 5f 46 49 4c 45 4d 41 4e 41 47 45 52 5f 53 48 41 52 Data Ascii: ETEVERSION_CONFIRM_DIALOG_TITLE':'Confirm version delete','JS_FILEMANAGER_SHARING_DIALOG_TITLE':'Sharing of folder','JS_FILEMANAGER_SHARING_TEMPUSER_MESSAGE':'This user will need to create a Webcargo account to prior see this folder.','JS_FILEMANAGER_SHAR
2024-04-26 14:31:15 UTC	6049	IN	Data Raw: 31 37 39 39 0d 0a 66 69 72 6d 20 75 6e 73 68 61 72 69 6e 67 20 6f 6e 27 2c 27 4a 53 5f 46 49 4c 45 4d 41 4e 41 47 45 52 5f 47 45 54 55 52 4c 5f 43 4f 4e 46 49 52 4d 5f 44 49 41 4c 4f 47 5f 54 49 54 4c 45 27 3a 27 55 52 4c 20 6f 66 20 3a 27 2c 27 4a 53 5f 46 49 4c 45 4d 41 4e 41 47 45 52 5f 53 48 41 52 45 44 46 4f 4c 44 45 52 5f 54 49 50 5f 54 45 58 54 27 3a 27 53 68 61 72 65 64 20 62 79 27 2c 27 4a 53 5f 43 4f 4d 4d 45 4e 54 5f 43 4f 4e 46 49 52 4d 5f 44 45 4c 45 54 45 5f 54 45 58 54 27 3a 27 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 65 6c 65 74 65 20 74 68 69 73 20 63 6f 6d 6d 65 6e 74 3f 27 2c 27 4a 53 5f 46 49 4c 45 4d 41 4e 41 47 45 52 5f 44 52 4f 50 5a 4f 4e 45 5f 43 4f 4e 54 41 49 4e 45 52 5f 4c 41 42 45 4c 27 3a Data Ascii: 1799firm unsharing on','JS_FILEMANAGER_GETURL_CONFIRM_DIALOG_TITLE':'URL of :','JS_FILEMANAGER_SHAREDFOLDER_TIP_TEXT':'Shared by','JS_COMMENT_CONFIRM_DELETE_TEXT':'Are you sure you want to delete this comment?','JS_FILEMANAGER_DROPZONE_CONTAINER_LABEL':
2024-04-26 14:31:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49749	104.17.27.92	443	6340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:31:15 UTC	965	OUT	GET /t2/117705/web/0f955114-3b2f-41de-7052-3df54ef80720/track.js?_=1714141874161&s=1&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL3d3dy53ZWJjYXJnby5uZXQvZC8yMzE3MTEyMi9zNHM3bXVLaFdlLyIsInIiOiIifX0%3D HTTP/1.1 Host: by2.uservoice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.webcargo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=kEsF.ttOLS1INyMb3y_D7Dm_3QNOI6cJDQn0hDJoRI8-1714141794-1.0.1.1-R8tFWuBfk3UWGWW7gU5YsBwoFAXh_dLwrtovOHZdt5a1busm684_2YZTeRDaFWWtCU545APKqfs1pU1nlFq.lg; uvts=0f955114-3b2f-41de-7052-3df54ef80720; uvts=0f955114-3b2f-41de-7052-3df54ef80720
2024-04-26 14:31:16 UTC	377	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:31:15 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 66 Connection: close Cache-Control: no-cache Cache-Control: private strict-transport-security: max-age=31536000; includeSubDomains expires: Fri, 26 Apr 2024 14:31:14 GMT CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87a746849af767e4-MIA
2024-04-26 14:31:16 UTC	66	IN	Data Raw: 5f 5f 75 76 53 65 73 73 69 6f 6e 44 61 74 61 30 28 7b 22 75 76 74 73 22 3a 22 30 66 39 35 35 31 31 34 2d 33 62 32 66 2d 34 31 64 65 2d 37 30 35 32 2d 33 64 66 35 34 65 66 38 30 37 32 30 22 7d 29 3b Data Ascii: __uvSessionData0({"uvts":"0f955114-3b2f-41de-7052-3df54ef80720"});

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 7072, Parent PID: 4536

General

Target ID:	0
Start time:	16:29:47
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.webcargo.net/d/23171122/s4s7muKhWe/
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6340, Parent PID: 7072

General

Target ID:	1
Start time:	16:29:47
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1904,i,18130982064645696334,9330544172059271562,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.webcargo.net/d/23171122/s4s7muKhWe/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Windows Analysis Report
http://www.webcargo.net/d/23171122/s4s7muKhWe/