Edit tour

Windows Analysis Report
https://runrun.it/share/form/0GZMCgHSxRh4PBOM

Overview

General Information

Sample URL:	https://runrun.it/share/form/0GZMCgHSxRh4PBOM
Analysis ID:	1432183
Infos:

Detection

HTMLPhisher

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish54

Found iframes

HTML body contains low number of good links

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3788 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=2084,i,16595852118450099133,9907286040694937866,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://runrun.it/share/form/0GZMCgHSxRh4PBOM" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
9.19.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
9.14.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714142379019&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 26 Apr 2024 14:41:01 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 9350460d-4933-4f6f-b018-4e1005beb200x-ms-ests-server: 2.1.17846.6 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://0824a98d-d78b26f4.digitoids.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 26 Apr 2024 14:41:02 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 808cf6c8-48f3-4b66-9232-bfc2c8147600x-ms-ests-server: 2.1.17910.11 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://0824a98d-d78b26f4.digitoids.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 26 Apr 2024 14:41:14 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 93f44b88-bea8-4706-93d3-2adb64147300x-ms-ests-server: 2.1.17910.10 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://0824a98d-d78b26f4.digitoids.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 26 Apr 2024 14:41:15 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: no-store, no-cachex-ua-compatible: IE=Edgex-cache: CONFIG_NOCACHEx-msedge-ref: Ref A: 2B70773FA0EA426D935AB0CCECF0674A Ref B: DFW311000105025 Ref C: 2024-04-26T14:41:14Zaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 26 Apr 2024 14:41:20 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 80d61d8e-0356-44db-ae09-30c7b2277400x-ms-ests-server: 2.1.17910.10 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://0824a98d-d78b26f4.digitoids.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:

Source: chromecache_147.2.dr	String found in binary or memory: http://adam.co/lab/jquery/customselect/
Source: chromecache_176.2.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/#theming
Source: chromecache_176.2.dr	String found in binary or memory: http://arshaw.com/fullcalendar/
Source: chromecache_147.2.dr, chromecache_157.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_147.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_176.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_176.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_141.2.dr	String found in binary or memory: http://malsup.com/jquery/block/
Source: chromecache_147.2.dr, chromecache_204.2.dr	String found in binary or memory: http://marionettejs.com
Source: chromecache_147.2.dr, chromecache_141.2.dr	String found in binary or memory: http://openexchangerates.github.io/accounting.js/
Source: chromecache_190.2.dr	String found in binary or memory: http://schema.org/Organization
Source: chromecache_147.2.dr, chromecache_176.2.dr, chromecache_204.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_147.2.dr	String found in binary or memory: http://www.dangrossman.info/
Source: chromecache_147.2.dr	String found in binary or memory: http://www.daterangepicker.com/
Source: chromecache_147.2.dr, chromecache_141.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_147.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.html
Source: chromecache_147.2.dr, chromecache_141.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_196.2.dr, chromecache_182.2.dr, chromecache_151.2.dr, chromecache_183.2.dr, chromecache_169.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_147.2.dr	String found in binary or memory: http://zeroclipboard.org/
Source: chromecache_206.2.dr, chromecache_124.2.dr, chromecache_143.2.dr, chromecache_193.2.dr, chromecache_202.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_206.2.dr, chromecache_124.2.dr, chromecache_143.2.dr, chromecache_193.2.dr, chromecache_202.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_205.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_195.2.dr	String found in binary or memory: https://api-js.mixpanel.com
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://bit.ly/1dBu4Lh
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://bit.ly/1j82MM8
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://blog.runrun.it/en/rr-hacks-new-dashboard-tv-on-runrun-it/
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://blog.runrun.it/estou-com-problemas-no-pagamento-do-runrun-it/
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://blog.runrun.it/rr-hacks-novo-dashboard-tv-no-runrunit/
Source: chromecache_206.2.dr, chromecache_124.2.dr, chromecache_143.2.dr, chromecache_193.2.dr, chromecache_202.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_195.2.dr	String found in binary or memory: https://cdn.mxpnl.com
Source: chromecache_190.2.dr	String found in binary or memory: https://cdn.mxpnl.com/libs/mixpanel-2-latest.min.js
Source: chromecache_190.2.dr	String found in binary or memory: https://chrome.google.com/webstore/detail/nbpjlmhkabomladjnncekjingikilgkf
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_162.2.dr, chromecache_176.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_162.2.dr, chromecache_176.2.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:300
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: chromecache_179.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWSw
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWT4
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV0
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV4
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV8
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVA
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVI
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVM
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVQ
Source: chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVw
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_209.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2)
Source: chromecache_130.2.dr, chromecache_203.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufO5qW54A.woff2)
Source: chromecache_190.2.dr	String found in binary or memory: https://for-managers.com/
Source: chromecache_147.2.dr, chromecache_204.2.dr	String found in binary or memory: https://github.com/caio-ribeiro-pereira
Source: chromecache_147.2.dr, chromecache_204.2.dr	String found in binary or memory: https://github.com/chrisgedrim
Source: chromecache_147.2.dr, chromecache_204.2.dr	String found in binary or memory: https://github.com/julionc
Source: chromecache_147.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_202.2.dr	String found in binary or memory: https://google.com
Source: chromecache_202.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/)
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/)?
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/1617508-adicionando-usuarios
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/1661981-criando-equipes
Source: chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/1664908-criando-clientes-e-projetos
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/1670214-tarefas
Source: chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/1686627-ferramentas-de-comunicacao-do-runrun-it
Source: chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/1716653-aba-tempo-e-bloqueio-do-sistema
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/1813180-permissoes-de-usuario
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/2407264-relatorios-do-runrun-it
Source: chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/2462193-lista-de-tarefas-do-runrun-it
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/2609228-administrar-usuarios
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/2610929-manejo-de-los-equipos
Source: chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/2610987-crear-clientes-y-proyectos
Source: chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/2637026-parte-de-horas-y-indisponibilidad-del-sistema
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/2637628-el-dashboard-de-runrun-it
Source: chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/3472488-como-usar-os-filtros-no-quadros
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/4726356-gantt-e-capacidade-do-runrun-it
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/4730605-gantt-y-capacidad-en-runrun-it
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/5436705-como-integrar-suas-tarefas-as-agendas-do-google-apple-e-o
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/5508988-como-integrar-tus-tareas-en-los-calendarios-de-google-app
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/5543931-guia-pratico-de-uso-de-subtarefas-do-runrun-it
Source: chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/5546685-como-integrar-dados-do-runrun-it-com-outras-plataforma-de
Source: chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/5580552-una-guia-practica-para-las-subtareas-en-runrun-it
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/6604452-conhecendo-o-runrun-it
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/6612439-user-permissions
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/6674701-runrun-it-una-guia-rapida
Source: chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/6716034-como-usar-as-automacoes-no-runrun-it
Source: chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/en/articles/6951935-torne-se-um-runrun-it-expert
Source: chromecache_190.2.dr	String found in binary or memory: https://help.runrun.it/english
Source: chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/portugues/perguntas-frequentes/a-pagina-de-um-projeto-no-runrunit
Source: chromecache_139.2.dr	String found in binary or memory: https://help.runrun.it/portugues/perguntas-frequentes/como-faco-para-anexar-um-arquivo-a-uma-tarefa-
Source: chromecache_139.2.dr	String found in binary or memory: https://html5shim.googlecode.com/svn/trunk/html5.js
Source: chromecache_139.2.dr	String found in binary or memory: https://itunes.apple.com/br/app/runrun.it/id1041556496?l=pt-br
Source: chromecache_139.2.dr	String found in binary or memory: https://itunes.apple.com/es/app/runrun.it/id1041556496?l=es
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/runrun.it/id1041556496?l=en
Source: chromecache_190.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/runrun.it/id1041556496?l=en&mt=8&utm_campaign=footer_link&am
Source: chromecache_147.2.dr, chromecache_141.2.dr, chromecache_204.2.dr, chromecache_157.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_147.2.dr, chromecache_141.2.dr, chromecache_204.2.dr, chromecache_157.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_195.2.dr	String found in binary or memory: https://mixpanel.com
Source: chromecache_190.2.dr	String found in binary or memory: https://mixpanel.com/f/partner
Source: chromecache_202.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_206.2.dr, chromecache_124.2.dr, chromecache_143.2.dr, chromecache_193.2.dr, chromecache_202.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_215.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_139.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.maissimples.runrunit
Source: chromecache_190.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.maissimples.runrunit&hl=en&utm_campaign=fo
Source: chromecache_190.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_190.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_190.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?pid=2747833&conversionId=3339001&fmt=gif
Source: chromecache_143.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_176.2.dr	String found in binary or memory: https://quilljs.com/
Source: chromecache_215.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_139.2.dr	String found in binary or memory: https://runrun.it
Source: chromecache_139.2.dr	String found in binary or memory: https://runrun.it)
Source: chromecache_190.2.dr	String found in binary or memory: https://runrun.it//static/images/logo_1200X630.png
Source: chromecache_190.2.dr	String found in binary or memory: https://runrun.it/assets/logo_grande.jpg
Source: chromecache_190.2.dr	String found in binary or memory: https://runrun.it/en-GB
Source: chromecache_190.2.dr	String found in binary or memory: https://runrun.it/en-US
Source: chromecache_190.2.dr	String found in binary or memory: https://runrun.it/en-US/signup
Source: chromecache_139.2.dr	String found in binary or memory: https://runrun.it/en-US/software-people-management-pricing
Source: chromecache_139.2.dr, chromecache_204.2.dr	String found in binary or memory: https://runrun.it/en-US/task-manager-terms-and-conditions
Source: chromecache_139.2.dr	String found in binary or memory: https://runrun.it/en-US?utm_source=app
Source: chromecache_190.2.dr	String found in binary or memory: https://runrun.it/es-419
Source: chromecache_139.2.dr, chromecache_204.2.dr	String found in binary or memory: https://runrun.it/es-419/gestor-de-tareas-condiciones-generales
Source: chromecache_190.2.dr	String found in binary or memory: https://runrun.it/pt-BR
Source: chromecache_204.2.dr	String found in binary or memory: https://runrun.it/pt-BR/privacidade
Source: chromecache_139.2.dr	String found in binary or memory: https://runrun.it/pt-BR?utm_source=app
Source: chromecache_135.2.dr, chromecache_191.2.dr	String found in binary or memory: https://runrunit.s3.amazonaws.com/images/incoming/56580/8883ad8fd9fc898ecdc651fcf370134boriginal.png
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://runrunit.typeform.com/to/AiN8wT
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://runrunit.typeform.com/to/HCcXNe?persona=%
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://runrunit.typeform.com/to/URI37X?id=%
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://runrunit.typeform.com/to/bccfrj?persona=%
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://runrunit.typeform.com/to/i6qybR?id=%
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://runrunit.typeform.com/to/kHFHTM?id=%
Source: chromecache_139.2.dr	String found in binary or memory: https://runrunit.typeform.com/to/l263rr
Source: chromecache_139.2.dr	String found in binary or memory: https://s3.amazonaws.com/runrunit
Source: chromecache_139.2.dr	String found in binary or memory: https://s3.amazonaws.com/runrunit/public/PDF/pt-BR/controlar_demandas_por_emails_e_planilhas_esconde
Source: chromecache_139.2.dr	String found in binary or memory: https://s3.amazonaws.com/runrunit/public/PDF/pt-BR/ferramentas_internas_tiram_o_foco_do_cliente_e_da
Source: chromecache_139.2.dr	String found in binary or memory: https://s3.amazonaws.com/runrunit/public/PDF/pt-BR/por_que_usar_ferramentas_separadas_pode_sair_mais
Source: chromecache_139.2.dr	String found in binary or memory: https://s3.amazonaws.com/runrunit/public/PDF/pt-BR/tempo_e_materia_prima_das_empresas_de_servico.pdf
Source: chromecache_139.2.dr	String found in binary or memory: https://s3.amazonaws.com/runrunit/public/PDF/pt-BR/veja_por_que_muitos_clientes_largam_ferramentas_g
Source: chromecache_147.2.dr, chromecache_141.2.dr, chromecache_204.2.dr, chromecache_157.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_143.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_167.2.dr, chromecache_158.2.dr	String found in binary or memory: https://srmcorp.digitoids.com/?hro=GO
Source: chromecache_193.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_193.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_205.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_215.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_205.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_206.2.dr, chromecache_124.2.dr, chromecache_143.2.dr, chromecache_193.2.dr, chromecache_202.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_190.2.dr	String found in binary or memory: https://twitter.com/runrun_it
Source: chromecache_190.2.dr	String found in binary or memory: https://widget.intercom.io/widget/5in4fij5
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://www.ejemplo.com
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://www.exemplo.com
Source: chromecache_139.2.dr	String found in binary or memory: https://www.g2crowd.com/products/runrun-it/reviews
Source: chromecache_139.2.dr	String found in binary or memory: https://www.glassdoor.com.br/Avalia%C3%A7%C3%B5es/Runrun-it-Avalia%C3%A7%C3%B5es-E1390296.htm
Source: chromecache_190.2.dr, chromecache_124.2.dr, chromecache_143.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_205.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_205.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_205.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_202.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_205.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_210.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/380335026/?random
Source: chromecache_218.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/983229078/?random
Source: chromecache_190.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll
Source: chromecache_200.2.dr, chromecache_149.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_202.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_206.2.dr, chromecache_124.2.dr, chromecache_143.2.dr, chromecache_193.2.dr, chromecache_202.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_205.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_190.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=GTM-KBQL9N
Source: chromecache_190.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_190.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-KBQL9N
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.
Source: chromecache_131.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Source: chromecache_190.2.dr	String found in binary or memory: https://www.instagram.com/runrunit/
Source: chromecache_190.2.dr	String found in binary or memory: https://www.linkedin.com/company/runrun-it
Source: chromecache_193.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/KxUr9MwBFvs?rel=0
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/TmmLTXHdqYg?rel=0
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/_J8UVUrKCTg?rel=0
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/aTISeU5Z_d0?rel=0
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/bs6_LSYDtfk?rel=0
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/xuCdZctomm4?rel=0
Source: chromecache_193.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://www.youtube.com/playlist?list=PLjMT8o2ihuuAwb1a6EvZQyHcJyXUR18uf.
Source: chromecache_139.2.dr	String found in binary or memory: https://www.youtube.com/playlist?list=PLjMT8o2ihuuB5qZJduldOKdTvDp6r38rH
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: https://www.youtube.com/playlist?list=PLjMT8o2ihuuDzA9BDGE1HHXULntnuZvAO
Source: chromecache_190.2.dr	String found in binary or memory: https://www.youtube.com/runrunittv

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49720 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@20/182@66/23

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=2084,i,16595852118450099133,9907286040694937866,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://runrun.it/share/form/0GZMCgHSxRh4PBOM"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=2084,i,16595852118450099133,9907286040694937866,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://runrun.it/share/form/0GZMCgHSxRh4PBOM	0%	Virustotal		Browse
https://runrun.it/share/form/0GZMCgHSxRh4PBOM	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
http://getbootstrap.com)	0%	Avira URL Cloud	safe
http://adam.co/lab/jquery/customselect/	0%	Avira URL Cloud	safe
https://for-managers.com/	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
http://arshaw.com/fullcalendar/	0%	Avira URL Cloud	safe
https://d712e364-d78b26f4.digitoids.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js	0%	Avira URL Cloud	safe
https://0824a98d-d78b26f4.digitoids.com/api/report?catId=GW+estsfd+ams2	0%	Avira URL Cloud	safe
http://arshaw.com/fullcalendar/	0%	Virustotal		Browse
https://www.glassdoor.com.br/Avalia%C3%A7%C3%B5es/Runrun-it-Avalia%C3%A7%C3%B5es-E1390296.htm	0%	Avira URL Cloud	safe
https://d712e364-d78b26f4.digitoids.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js	0%	Avira URL Cloud	safe
https://l1ve.digitoids.com/Me.htm?v=3	0%	Avira URL Cloud	safe
https://d712e364-d78b26f4.digitoids.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
https://d712e364-d78b26f4.digitoids.com/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	0%	Avira URL Cloud	safe
https://runrun.it)	0%	Avira URL Cloud	safe
http://adam.co/lab/jquery/customselect/	0%	Virustotal		Browse
https://srmcorp.digitoids.com/d78b26f41a2e42509e001fd2bf0e6daa/	0%	Avira URL Cloud	safe
https://for-managers.com/	0%	Virustotal		Browse
https://www.glassdoor.com.br/Avalia%C3%A7%C3%B5es/Runrun-it-Avalia%C3%A7%C3%B5es-E1390296.htm	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d16adfa6-d78b26f4.digitoids.com	72.14.190.91	true	false	unknown
runrun.it	35.190.30.45	true	false	high
widget.intercom.io	13.32.87.81	true	false	high
l1ve.digitoids.com	72.14.190.91	true	false	unknown
0824a98d-d78b26f4.digitoids.com	72.14.190.91	true	false	unknown
api-iam.intercom.io	44.217.183.210	true	false	high
o556303.ingest.sentry.io	34.120.195.249	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
stats.g.doubleclick.net	172.217.193.156	true	false	high
s3-w.us-east-1.amazonaws.com	52.217.163.209	true	false	high
srmcorp.digitoids.com	72.14.190.91	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
googleads.g.doubleclick.net	192.178.50.34	true	false	high
www.google.com	142.250.64.196	true	false	high
td.doubleclick.net	172.217.165.194	true	false	high
analytics.google.com	172.217.165.206	true	false	high
d712e364-d78b26f4.digitoids.com	72.14.190.91	true	false	unknown
nexus-websocket-a.intercom.io	35.174.127.31	true	false	high
cdn.mxpnl.com	130.211.5.208	true	false	high
b8b29fee-d78b26f4.digitoids.com	72.14.190.91	true	false	unknown
js.intercomcdn.com	13.226.52.58	true	false	high
www.linkedin.com	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
runrunit.s3.amazonaws.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
about:blank	false	Avira URL Cloud: safe	low
https://runrun.it/static/images/home/clients/Votorantim.png	false		high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll&co=aHR0cHM6Ly9ydW5ydW4uaXQ6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=6jc322lewbb	false		high
https://runrun.it/static/images/home/index/your_request_form_runrunit_mobile.png	false		high
https://srmcorp.digitoids.com/?hro=GO	false		unknown
https://runrun.it/packs/js/AppGlobalScope-DRIQIKTU.js	false		high
https://d712e364-d78b26f4.digitoids.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js	false	Avira URL Cloud: safe	unknown
https://0824a98d-d78b26f4.digitoids.com/api/report?catId=GW+estsfd+ams2	false	Avira URL Cloud: safe	unknown
https://api-iam.intercom.io/messenger/web/ping	false		high
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-24371500-1&cid=1930088754.1714142446&jid=619370535&gjid=1123308618&_gid=1893265479.1714142446&_u=IEBAAEAAAAAAACAAI~&z=1044199344	false		high
https://srmcorp.digitoids.com/?hro=GO&sso_reload=true	false		unknown
https://runrun.it/packs/js/basicScripts-FOJV7GUT.js	false		high
https://runrun.it/static/images/home/clients/FGV.png	false		high
https://d712e364-d78b26f4.digitoids.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js	false	Avira URL Cloud: safe	unknown
https://l1ve.digitoids.com/Me.htm?v=3	false	Avira URL Cloud: safe	unknown
https://runrun.it/api/external/forms/0GZMCgHSxRh4PBOM/description	false		high
https://runrun.it/packs/media/apple_app_store-QGBLJ5LR.svg	false		high
https://d712e364-d78b26f4.digitoids.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	Avira URL Cloud: safe	unknown
https://d712e364-d78b26f4.digitoids.com/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/reload?k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll	false		high
https://runrun.it/packs/css/shareable_form_app-BBI5GVUP.css	false		high
https://runrun.it/static/images/home/index/your_request_form_runrunit.png	false		high
https://srmcorp.digitoids.com/d78b26f41a2e42509e001fd2bf0e6daa/	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_193.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://help.runrun.it/en/articles/2407264-relatorios-do-runrun-it	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://for-managers.com/	chromecache_190.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://help.runrun.it/en/articles/1617508-adicionando-usuarios	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://runrun.it/en-GB	chromecache_190.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_205.2.dr	false		high
https://www.youtube-nocookie.com/embed/KxUr9MwBFvs?rel=0	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://px.ads.linkedin.com/collect?	chromecache_143.2.dr	false		high
https://fontawesome.com	chromecache_162.2.dr, chromecache_176.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_147.2.dr, chromecache_141.2.dr	false		high
https://chrome.google.com/webstore/detail/nbpjlmhkabomladjnncekjingikilgkf	chromecache_190.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	chromecache_200.2.dr, chromecache_215.2.dr	false	Avira URL Cloud: safe	low
http://getbootstrap.com)	chromecache_147.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	low
https://runrun.it/es-419	chromecache_190.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_205.2.dr	false		high
https://help.runrun.it/en/articles/6604452-conhecendo-o-runrun-it	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://help.runrun.it/en/articles/2609228-administrar-usuarios	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://help.runrun.it/en/articles/1670214-tarefas	chromecache_190.2.dr, chromecache_139.2.dr	false		high
http://adam.co/lab/jquery/customselect/	chromecache_147.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://runrunit.typeform.com/to/AiN8wT	chromecache_190.2.dr, chromecache_139.2.dr	false		high
http://arshaw.com/fullcalendar/	chromecache_176.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_215.2.dr	false		high
https://runrun.it/es-419/gestor-de-tareas-condiciones-generales	chromecache_139.2.dr, chromecache_204.2.dr	false		high
https://www.youtube-nocookie.com/embed/xuCdZctomm4?rel=0	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://help.runrun.it/en/articles/5580552-una-guia-practica-para-las-subtareas-en-runrun-it	chromecache_139.2.dr	false		high
https://s3.amazonaws.com/runrunit/public/PDF/pt-BR/tempo_e_materia_prima_das_empresas_de_servico.pdf	chromecache_139.2.dr	false		high
https://www.apache.org/licenses/	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://runrun.it/en-US	chromecache_190.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://jquery.com/	chromecache_147.2.dr, chromecache_141.2.dr, chromecache_204.2.dr, chromecache_157.2.dr	false		high
https://help.runrun.it/en/articles/5543931-guia-pratico-de-uso-de-subtarefas-do-runrun-it	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://quilljs.com/	chromecache_176.2.dr	false		high
http://malsup.com/jquery/block/	chromecache_141.2.dr	false		high
https://help.runrun.it/en/articles/2637026-parte-de-horas-y-indisponibilidad-del-sistema	chromecache_139.2.dr	false		high
https://help.runrun.it/en/articles/5508988-como-integrar-tus-tareas-en-los-calendarios-de-google-app	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_147.2.dr, chromecache_157.2.dr	false		high
https://runrunit.s3.amazonaws.com/images/incoming/56580/8883ad8fd9fc898ecdc651fcf370134boriginal.png	chromecache_135.2.dr, chromecache_191.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_193.2.dr	false		high
https://policies.google.com/privacy	chromecache_190.2.dr	false		high
https://help.runrun.it/en/)?	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://sizzlejs.com/	chromecache_147.2.dr, chromecache_141.2.dr, chromecache_204.2.dr, chromecache_157.2.dr	false		high
https://runrun.it/pt-BR?utm_source=app	chromecache_139.2.dr	false		high
https://help.runrun.it/english	chromecache_190.2.dr	false		high
https://www.glassdoor.com.br/Avalia%C3%A7%C3%B5es/Runrun-it-Avalia%C3%A7%C3%B5es-E1390296.htm	chromecache_139.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://blog.runrun.it/en/rr-hacks-new-dashboard-tv-on-runrun-it/	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://s3.amazonaws.com/runrunit/public/PDF/pt-BR/ferramentas_internas_tiram_o_foco_do_cliente_e_da	chromecache_139.2.dr	false		high
https://cloud.google.com/contact	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://runrunit.typeform.com/to/l263rr	chromecache_139.2.dr	false		high
https://help.runrun.it/en/articles/6716034-como-usar-as-automacoes-no-runrun-it	chromecache_139.2.dr	false		high
http://www.opensource.org/licenses/mit-license.html	chromecache_147.2.dr	false		high
https://github.com/caio-ribeiro-pereira	chromecache_147.2.dr, chromecache_204.2.dr	false		high
https://twitter.com/runrun_it	chromecache_190.2.dr	false		high
https://www.instagram.com/runrunit/	chromecache_190.2.dr	false		high
https://help.runrun.it/en/articles/1813180-permissoes-de-usuario	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://github.com/chrisgedrim	chromecache_147.2.dr, chromecache_204.2.dr	false		high
https://fontawesome.com/license	chromecache_162.2.dr, chromecache_176.2.dr	false		high
https://runrunit.typeform.com/to/bccfrj?persona=%	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://bit.ly/1j82MM8	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://www.linkedin.com/company/runrun-it	chromecache_190.2.dr	false		high
https://www.google.com/pagead/1p-user-list/983229078/?random	chromecache_218.2.dr	false		high
https://help.runrun.it/en/articles/6674701-runrun-it-una-guia-rapida	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://runrun.it/pt-BR	chromecache_190.2.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_200.2.dr, chromecache_149.2.dr, chromecache_215.2.dr	false		high
https://runrun.it/pt-BR/privacidade	chromecache_204.2.dr	false		high
https://runrun.it/assets/logo_grande.jpg	chromecache_190.2.dr	false		high
https://help.runrun.it/portugues/perguntas-frequentes/a-pagina-de-um-projeto-no-runrunit	chromecache_139.2.dr	false		high
https://www.youtube.com/playlist?list=PLjMT8o2ihuuB5qZJduldOKdTvDp6r38rH	chromecache_139.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://help.runrun.it/en/articles/5436705-como-integrar-suas-tarefas-as-agendas-do-google-apple-e-o	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://www.youtube-nocookie.com/embed/_J8UVUrKCTg?rel=0	chromecache_190.2.dr, chromecache_139.2.dr	false		high
https://s3.amazonaws.com/runrunit	chromecache_139.2.dr	false		high
https://googleads.g.doubleclick.net	chromecache_202.2.dr	false		high
https://help.runrun.it/portugues/perguntas-frequentes/como-faco-para-anexar-um-arquivo-a-uma-tarefa-	chromecache_139.2.dr	false		high
https://runrun.it)	chromecache_139.2.dr	false	Avira URL Cloud: safe	low
https://runrun.it/en-US/task-manager-terms-and-conditions	chromecache_139.2.dr, chromecache_204.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.165.206	analytics.google.com	United States	15169	GOOGLEUS	false
192.178.50.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
72.14.190.91	d16adfa6-d78b26f4.digitoids.com	United States	63949	LINODE-APLinodeLLCUS	false
74.125.26.157	unknown	United States	15169	GOOGLEUS	false
3.216.18.136	unknown	United States	14618	AMAZON-AESUS	false
35.174.127.31	nexus-websocket-a.intercom.io	United States	14618	AMAZON-AESUS	false
130.211.5.208	cdn.mxpnl.com	United States	15169	GOOGLEUS	false
172.217.165.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
52.216.218.153	unknown	United States	16509	AMAZON-02US	false
192.178.50.68	unknown	United States	15169	GOOGLEUS	false
142.250.189.132	unknown	United States	15169	GOOGLEUS	false
142.250.217.228	unknown	United States	15169	GOOGLEUS	false
172.217.193.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
13.32.87.81	widget.intercom.io	United States	16509	AMAZON-02US	false
142.250.64.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
44.217.183.210	api-iam.intercom.io	United States	14618	AMAZON-AESUS	false
52.217.163.209	s3-w.us-east-1.amazonaws.com	United States	16509	AMAZON-02US	false
35.190.30.45	runrun.it	United States	15169	GOOGLEUS	false
13.226.52.58	js.intercomcdn.com	United States	16509	AMAZON-02US	false
34.120.195.249	o556303.ingest.sentry.io	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432183
Start date and time:	2024-04-26 16:39:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://runrun.it/share/form/0GZMCgHSxRh4PBOM
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@20/182@66/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://srmcorp.digitoids.com/?hro=GO Browse: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.178.50.35, 142.251.35.238, 173.194.212.84, 34.104.35.123, 142.251.35.234, 142.250.64.227, 23.45.182.77, 40.127.169.103, 192.229.211.108, 199.232.210.172, 52.165.164.15, 20.166.126.56, 23.45.182.83, 23.45.182.104, 23.45.182.80, 23.45.182.97, 23.45.182.70, 23.45.182.93, 23.45.182.100, 192.178.50.78, 142.250.64.232, 142.250.64.238, 13.107.42.14, 142.250.64.202, 172.217.165.202, 142.250.217.234, 172.217.3.74, 142.250.217.170, 192.178.50.74, 142.250.64.170, 142.250.217.202, 142.250.64.234, 142.250.189.138, 172.217.2.202, 142.250.64.138, 192.178.50.42, 40.68.123.157, 142.250.189.131, 172.217.3.67, 142.250.64.195, 142.250.217.195, 199.232.214.172, 172.217.15.202
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, www-linkedin-com.l-0005.l-msedge.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com, 2-01-2c3e-0073.cdx.cedexis.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:39:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9707831932190714
Encrypted:	false
SSDEEP:	48:8VydrTzTeHFidAKZdA19ehwiZUklqeh6y+3:8MrA5y
MD5:	2C8F102094696836693DBD3EE21A4017
SHA1:	5D27D2AD5A117864F0F4E5F7B18FBA7DD121C7DC
SHA-256:	367C777EFF9CAF9C8DE23208499422730575C69F4854A887B1AA244AA0E854AE
SHA-512:	9AFADDC5A4F521ED2B51A83F6384378C9A2D6E6D3333AF29E6352C39C3D3CE7324DC600C6618925D665F3D4E81E4CA90842445DF4DDB6D7BD6B0E0718EF3347E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....zi....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............a......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:39:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9846797529121174
Encrypted:	false
SSDEEP:	48:8QdrTzTeHFidAKZdA1weh/iZUkAQkqehpy+2:8Ir69Q8y
MD5:	11196342F712B5986DB8C58B3E5E1EDE
SHA1:	0162CF938F0A2141EF295C8CF8AC6B71F7305F75
SHA-256:	A3B3F51062198696CA2CA513A71E14F0D6B4AD3FF4B5B5F027BD1502C8C46501
SHA-512:	827145010693AB0C1ED05B668157B2278100754FB0F5A48EAE2A24D7A47227B551A689A9F0F0867366B452A5D5CAB27D5A1CEF3FEAF5F1E7A11A81738ECA1F22
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....2.3....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............a......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.999659136800957
Encrypted:	false
SSDEEP:	48:8xsdrTzTsHFidAKZdA14tseh7sFiZUkmgqeh7sTy+BX:8x8rAnFy
MD5:	1F65D4E427A1C1039417E476346BDDDB
SHA1:	DF46893FEECB388031B2BD0D07EC91BF9AC7B8C9
SHA-256:	683B36D5A8E856C4030FD7D30B25758BF88D462FF5AE3344213DB31163F27DE6
SHA-512:	95AAF3504E6FD73D4443FD2BE2A25A3DE4A9B244C9C07BCCFED06ADEB9B2FB15E61092E8D1FBD6255B663E0DC95A9BF3A84BCE23718C124752CF85D9E44C6FDE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............a......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:39:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9845526996240235
Encrypted:	false
SSDEEP:	48:8gdrTzTeHFidAKZdA1vehDiZUkwqeh9y+R:8Yrhry
MD5:	5EC59F0BF3B15944F8796B8765391CFB
SHA1:	408DCA2C84C7E8B3A61BE2A25705C439433DA314
SHA-256:	1C517491D7B60FB61353E23CECAB0C50E5B6E6A17097CC410F17E4461CA015D3
SHA-512:	951AA4A260CB2F43387CE824EAA0747681F2F12735AC88176F372B6408069F52B6F53BBCD8DDF71DACAFFAB704938F3C5C75DAA387544614272281E76A6FCFC2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......%....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............a......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:39:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9743488695904294
Encrypted:	false
SSDEEP:	48:83drTzTeHFidAKZdA1hehBiZUk1W1qeh/y+C:8Nrh9fy
MD5:	E4A7C8102772F1CBA0969AF4F3E77DD3
SHA1:	63CA9C9161D506CAD69EADBEBA86CC1508FC504E
SHA-256:	76CFD51B7225B70F23025F4AEC900D36FB1D6C3A7C9675BB4AE755E54A852DF7
SHA-512:	30B2CC2B886296DF7F405A47CF18C57D494D9E89B92181AEDDFFFAD6F949FB317DAF5706DAAFDBBACEABA60AFBCB5A6327BE3566FE4832281096158AA183B7EA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....M.^....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............a......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:39:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.983596660570683
Encrypted:	false
SSDEEP:	48:8EydrTzTeHFidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbFy+yT+:8ECrdT/TbxWOvTbFy7T
MD5:	CC93A99CCDFB4841BDE0570FF741998B
SHA1:	C4636071E552CF9545C1217F83B036F90941CF4E
SHA-256:	2CBE44BE9BB9C602E870E55B5FFF751E373D3B5F66E24288E0DC6C3C85AB5657
SHA-512:	9751F357F05BE8B94D8A52F5DB08BC6D948AA8AE7D128D3FF7BFA92B2463C0BAFFF3E03BC069C53A67B62FC646868E131CE5640A244E1B660F385CE55ABFADF6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....l.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............a......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 344 x 128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4185
Entropy (8bit):	7.911119808327057
Encrypted:	false
SSDEEP:	96:+dL6DcWcFLGxrPjN+FuB4/WuW/cSbm23rtf62lN9I1Dj:2LFFMrPjIYBah/2xycN9GDj
MD5:	3AB9CD1020BFCD31FDCF902BD829AC6B
SHA1:	50845F6D4525D402FDF78B707AD93BD92E22AF14
SHA-256:	74567E72ED94AAF0F25D90E19CFD9B97941AE03B55000A80D067C7C19A88CFA9
SHA-512:	9C99C955514BFAB12A2369C077E7A62256B8B18EFA435043BA480F57296D48B4FD1F9A9040B6E4919C5C4386233B34C2161C77C7D788345A6F979A8A8AC4F456
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X.........y.......gAMA......a.....sRGB........&PLTEGpL...ZZZ........;............\\\^^^..:...zzz```...vvvttt......nnnhhhrrr...dddnnnddd]]]kkkhhhlll~~~...zzz...fffxxx^^^```)d.lll[[[zzz[..........;..({.s..0.......#..V..@..C..d..a..G..G\|..U.V..7m..m..t.b.......@6f...mYYYZZZXXX...WWW......!......o..y.%..H../..;..)...e.L...]..T..L.TTT?..3.....RRRc\|.7...HtRNS...B.. ..%.......P.3].^<o......./ R.l.....pN^3..@.j............o....`....}IDATx..yS.J..T...l./....7l..%...HR5..%l..(.y5..K.=-...{I.?..$..%.....W.ahiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii=K&.?$..ld3=.2..W\?..;:::.....<v....\|.u..Q.....5...............ggg.7..?H..:.9....B._ij?!...._...B.r.t~~v.....8........6..Y.<...{..sx:...7..a.k\|K.~.kf?.`j./.'..X.G...K_f.....sb.....ONg.U.....0.do.a...d...[.eo\|.Z.Hn...(O-...W...Y....v.p...e7Me..e.\|t4._..9...r..........<..,....+..<..}C...W.;NR.z3@K..~.Z..V...V.^..l......._`..{...e..[....t.......4ewUK....e?..~.qRe.E;.na.......O*.#....].,...

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 6952
Category:	downloaded
Size (bytes):	2705
Entropy (8bit):	7.918057698959248
Encrypted:	false
SSDEEP:	48:XQX5X5HqyOyC8tiTDqww8C/nPMYV+nqzNZ+C7PKSIQ8uxuZP68RZmZW2Eb3kG:uX89WAT2Z/PZPKSIQDxb8Di83kG
MD5:	639100358138073092E32069F4CC78A8
SHA1:	3D232C0EEA72AA8397AAFC8AED2A92A8DD805B4A
SHA-256:	C4342CEFDCAC64B85B860D16B96941B207B635E3EE9A1CEDC2BB04B998C9984D
SHA-512:	8C3B177488232159A7DFF5A60AD4287EBDE5C492B5292CC4DE4BC6F17CFE30E1FA3D155C8A61C046F57928B9F0DA88A2D96319A58D05505EE4BC5BC73058BDE5
Malicious:	false
Reputation:	low
URL:	https://widget.intercom.io/widget/5in4fij5
Preview:	...........Y.s.:..+.w'...IJK...R........i...V..c..J..$.}?..;I.e..Z..tt..Lc4.\|.Ed..{..-O^t..nIg..9.!.R%.2.3....9.A..VFj.d.....&..J..n...t..H1..<...a..AL.d..-).. r.m.d.J.....-......Uv..H..^..\|^ZkI.w.q.#....=8.5.M.D.0.LE.v..o..... .6\...x.S...==.G/..._...;...0..V3..l......6...K.b.-y2\U.6M..K...l.I."d?.+.K.Q.... aT.....#.39...........~0K.....(o.>+r.,.......u/x`t..'l..LF.(..Ls..[.4w.^.....'..'..yY7.n..f$Jr_.gY.y<..[...!.....gV...L..J.LRc.#..l.<dm.=..d..x..L.l!.....I.T.rbk$.a.../"Ey.%P..F...#.S....o.+u."...h.b...9.Z..<..n.o.e.[./......W......bS.,M.(..1m... .}.6it.5<.'...z].(..-.gpC.V..pj.NH^.Q..V...<.9ie~.Y.E......].#.]..h...7..nYl...1U....-}.r<..j.....w..2%...N.u..y.{..u}....r...ndawnz=%..n\..Wr-.>.l.b^%.q...@...(X,;.4..O=..........+^N.7!...#.u..n.&H.:.0..Zm....Zu..z].5.Z.....z.=..I...^.x...4...<..b].ne..B......?g:..4n6.9W.K.0...a.."67..k....O.......P2fXa4.T......Nj...;..G...+.......f.B..\|.........fV.f..{.d...?.T.G.)v.2.f.TK.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11206)
Category:	downloaded
Size (bytes):	312580
Entropy (8bit):	5.5718816374195415
Encrypted:	false
SSDEEP:	3072:w02EQaf5qZ3fdO+szcE8ZG1LceF2/ea8LR9Wk9As6UOQPGA2hTnXDL9btIMhBhcV:N2EQXlNsgYLceF+oqTnXP9RIMFcV
MD5:	F10DFD72D21755D104D8208993FD0053
SHA1:	1B8E80758FD1572E08DDD913E58810DDA8A09A5D
SHA-256:	28A3CA650EDC5F07F55778E4B94B8E2FC09F1DF063CAA292B2D4C7D0044E29B2
SHA-512:	536FED949823309A556DA3678556197274E08331A07DA97CD208462A981FD3635298C5F61A518A22A6CD1C7211D285A3E036778C8CF0E27B661788FB4FCC3E89
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-KBQL9N
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"135",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__v","vtp_name":"newPV","vtp_dataLayerVersion":2},{"function":"__k","vtp_name":"uu_idc","vtp_decodeCookie":false},{"function":"__c","vtp_value":"UA-24371500-1"},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryPa

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1153
Entropy (8bit):	4.751002031724131
Encrypted:	false
SSDEEP:	24:tmj8luJX5ss5V94cIOQZsAcIzFQ9F9VAbySFAY5H6aJdFe83jBL+HxNNcGrbtGCA:/QJskCdGAnFQ9F9VAbySKHYL+Htrb0N
MD5:	4645A84B528F7FDE1BA99F97A38CF875
SHA1:	3229659196BC3E84EDE64A8D6083358222608F64
SHA-256:	A86E7017FA0C9F141C6699EFD81CE5708B1FCB9CBE2B0EB10865F3E144B26AB8
SHA-512:	7EF2B880C8BB0A9541F3CDC588040E18FBDB0146E9DBE602B55715DCCE39E8476194730E9656AA068C2F31794CD6ED6CAA0A685E15AB0F13D645A6B19DAF3B8E
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/index/repeat-particles.svg
Preview:	<svg width="26" height="26" viewBox="0 0 26 26" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M10.0838 1.13274C3.40848 2.8633 -0.585229 9.72265 1.13271 16.3493C2.86327 23.0246 9.67389 27.0309 16.3492 25.3004C22.9758 23.5824 27.0309 16.7592 25.3003 10.0838C23.5824 3.45723 16.7104 -0.5852 10.0838 1.13274ZM10.6901 3.47154C16.0499 2.08203 21.572 5.33042 22.9615 10.6902C24.3637 16.0987 21.1026 21.572 15.7429 22.9616C10.3344 24.3637 4.87365 21.1514 3.47151 15.7429C2.082 10.3832 5.28166 4.87368 10.6901 3.47154ZM19.1664 8.08605L17.7552 7.25591C17.4972 7.06281 17.1074 7.16387 16.9269 7.47065L11.8251 16.0733L8.14371 13.9077C7.83692 13.7272 7.49585 13.8156 7.31538 14.1224L6.47261 15.4849C6.34086 15.779 6.44192 16.1688 6.68735 16.3132L12.2835 19.6464C12.5902 19.8269 12.9313 19.7385 13.1118 19.4317L19.3812 8.91438C19.5129 8.62023 19.4119 8.23043 19.1664 8.08605Z" fill="url(#paint0_linear_173_10842)"/>.<defs>.<linearGradient id="paint0_linear_173_10842" x1="-1.17023" y1="7.13743" x2="22.9

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17673)
Category:	downloaded
Size (bytes):	18268
Entropy (8bit):	5.619856960314813
Encrypted:	false
SSDEEP:	384:Va/VuX6x1E4rZ5gIcAGn5o86/TZeIeaedo/939zg:Ukqxe4rZ5gIcAGnQ/tEaeE9C
MD5:	9FBB8606566EBF96C502666BFFFD254A
SHA1:	FEB80CB296B30432EC659D7EEDFE3C6022A450E2
SHA-256:	9644D7AB8F581B9FDE8F5C3B9B84FD370FF52F1D4E71DD60B5E590A6C7D5FD39
SHA-512:	7C9C38D0710B52EE4761EEAC4E50BB8F5E319C5AFA49253888D0F45B42DB03DE244181AF62A0BC0431D0AB963AB04A5FD2263907CE0B1188BCB1F6954622204C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p})}catch(P){e.console&&e.console.error(P.message)}return N},p=function(R){return R},e=this\|\|self;(0,eval)(function(R,N){return(N=f())&&1===R.eval(N.createScript("1"))?function(P){return N.createScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438==R\|\|331==R)N.X[R]?N.X[R].concat(p):N.X[R]=N_(p,N);else{if(N.ri&&247!=R)return;466==R\|\|163==R\|\|161==R\|\|301==R\|\|172==R\|\|120==R\|\|59==R\|\|298==R\|\|344==R?N.X[R]\|\|(N.X[R]=PR(N,p,R,142)):N.X[R]=PR(N,p,R,49)}247==R&&(N.h=q(false,32,N),N.R=void 0)},eZ=function(R,N,p,e){W((e=V((p=V(R),R)),e),R,z(N,Z(p,R)))},sH=

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 328 x 128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1358
Entropy (8bit):	7.62655113114813
Encrypted:	false
SSDEEP:	24:TuVOxGkiwl/EZ5/+Ubr4qejlOFqffrtWTptJwWII7O//GWv1:S6dlMZ5/rbr4dOEffrt4ptadtv1
MD5:	83B9DC98F270B706FB2B3281853783BD
SHA1:	6E64C42978E812E32CAF13DDBB3EE39149BCDC4B
SHA-256:	5D26A44FF3CA67BF0B01E964C1C6885F0F3E728C9E6D8D8F30FC39708083BAD0
SHA-512:	D9E9047CDAD203896B6B0CD335F9AF2837BFB69E3406A3F78972B75BE314B148F2B6FF07853BDBE3E454C1AB0A728086634600DD8FDE7D14831CD774D44E8AE9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H.........^..l....gAMA......a.....sRGB........3PLTEGpL.:x.:x.:x.9w.9x.A..:x.K..9w................:x...4POx....tRNS...l.1..J..zS..-f.....IDATx...v. .E._b;...m.&M#.b.......e.[.. G).............................. N.........x.IX.m./.^..6G..j.y.v.xW.....j..."O..E.-x&.(....dZE...l..>.....>...iz.....xl........3.]\....f.'4x%y\|)z..d;C._1.?...8t..d.d1.qPd....z..Z..jrc^h......c.3.D:..bw..o...h2.y\|U"".o,.....tj...5.n$.w%".8.....Ss\|..~?..*.R.q.."3......fB./.....H...>...&^........dD..d._..~.....~L....C.....\e;mc;[...a6......X......5.V.....JWc[...t.1........[.........C.@.4....y./$].jh.. .j>.&N.>.l.L.. .c.<.\chV.'.N....H?...f.3".f6......."..6@mN......{x.5...yMJNd..,m.f/.j.......'r"SI.l..yV.L....K....u....._h&'.^..q.D:.^X.k.X0./w...]P.=.' ........].,.a`.,..+.....S..D=i.+i...K.YM..l..L'.....T<..2......=...G..0%....tC...8./OnnA)...v.{.F{..I.S3."..t..g..W.9.G.P#uD..tnI....D.sj..n.-1..N...y"}..4...m..5..H.g.....".....^$.....xY..I..g..}.Jd.nV...I.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3210
Entropy (8bit):	4.195661726763173
Encrypted:	false
SSDEEP:	96:GW+24ehpTsX0JxHKiaT3X6sWgLoJyr6iH6RF:GadhaX0JxHKvHoErxaz
MD5:	0E5E571ABB6B91AA0E10EFBD0B9A9BA8
SHA1:	DA49CFB359F772EBC3EBB1DB42496D34EADB946C
SHA-256:	359ABF729ED8F9309BB9FEB6D992D2255650A07FC6D6A5F2FE177E697CB32FB5
SHA-512:	D090D5C7FACD914456D0860C9CC25B04DC1D72EC0B63A2A443E881304F8C5646FFF615E82CA2B5E002F2AB5899C12E14BF21CF27AABFB5E42BC6F4A3FDDD254C
Malicious:	false
Reputation:	low
Preview:	<svg width="26" height="23" viewBox="0 0 26 23" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M5.38597 2.25423L23.9862 4.6195L23.3259 9.81206C23.9699 10.0121 24.5991 10.3284 25.0923 10.7848L25.8364 4.93352C25.9694 3.88726 25.2302 2.88759 24.2227 2.75947L5.6225 0.394211C4.57623 0.261165 3.64914 1.04894 3.51609 2.09521L2.77202 7.94652C3.32505 7.62308 4.01338 7.47435 4.72567 7.44679L5.38597 2.25423ZM4.71675 16.1874L3.78674 16.0691C1.96546 15.8375 0.344447 17.1277 0.117776 18.9102C0.0487892 19.4527 0.387017 19.8895 0.929524 19.9585C1.43328 20.0226 1.90881 19.6893 1.9778 19.1467C2.07142 18.4105 2.7752 17.8306 3.55021 17.9291L4.48022 18.0474C5.21648 18.141 5.79147 18.8835 5.69784 19.6198C5.62885 20.1623 5.96708 20.5991 6.50959 20.6681C7.01334 20.7321 7.48888 20.3988 7.55786 19.8563C7.78453 18.0738 6.49927 16.414 4.71675 16.1874ZM22.558 10.8957C20.8143 10.674 19.2806 11.8965 19.0638 13.6016C18.8421 15.3453 20.0259 16.8741 21.7696 17.0958C23.4746 17.3126 25.0421 16.1337 25.2639 14.3

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	23613
Entropy (8bit):	5.44534106403406
Encrypted:	false
SSDEEP:	384:ZFuq9PUhq9IW/q9RlXO12+xiYlWPo2/cLOlgle2VCRV:rIIwxO1hxiYcPoMcLOCleyCRV
MD5:	6F8FA6B624780303A6555797C72853D5
SHA1:	FBBB0DE5B24AA2840FEDD3A60AE5495FE1361B6F
SHA-256:	C3432D33DF9849A5C4CC01336B41CB106039A704C136AD19E03CA1B333202687
SHA-512:	464683E14F4246D7E35DC75B016BAC16161FE87C83B7C0459200A12DE50096F335B05890FD2D9234752E1DCE06200A6AF13F1B1DA41444555E8D445DE6D4196D
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:300,400,600\|Roboto+Slab:300,400,600"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style: normal;

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8013557344442175
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKVnIwN4wECWaee:PLKdXNQKVnDoCL
MD5:	284B36421A1CF446F32CB8F7987B1091
SHA1:	EB14D6298C9DA3FB26D75B54C087EA2DF9F3F05F
SHA-256:	94AB2BE973685680D0BE9C08D4E1A7465F3C09053CF631126BD33F49CC2F939B
SHA-512:	093F3F5624DE2E43E43EB06036107FF3260237F9E47E1F86FDFBA7C7036522187A9B47B291F5443C566658A8EF555E5033C7F2AC0C9F4FA8EB69EB8E2540B372
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 334 x 217, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8143
Entropy (8bit):	7.949283894721141
Encrypted:	false
SSDEEP:	192:zSYS1JHD26V/+E6kdFa3CxF5AYSnpObkmgCA3UEOLCrizST:m51JHvV/vFa3CxFO/4Imgzhmzm
MD5:	FD68BE3818BEA75DBAF36999BFE30533
SHA1:	71F8BFD8BFA2BB129ED082C4B1156492374A4340
SHA-256:	A3CB7DE4835A577AE376EE58E81CBA47E1F0275535069F051E5744010F572EDF
SHA-512:	644C5124976DCDA8FCC13DD974060CF90CC7A095BC08B79413FFDC1F84E190660ECE2150757C311D0BD1EA5F3FDA68E399EF94DF6AD4528E3DAD74C78F5EE876
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...N.........x.).....gAMA......a.....sRGB.........pHYs.................PLTEGpLcv.......]o.[l.[k.n..`h....^s..........Xf........]t....[k..............^l.........gu................\m......................................................................................^p................................@ ..fP......}.._o........................................................-B.....................FY......1GY...................Ym}...........@......Naq=Se........dx......I`r......l\|. :M...z.............k{...................................hO...A"........w]...!:N.........f..J_o/..sI2..e...T/.[v..wo......_;&j?&S..s.....m.........}~....T<vln.[D..v.[I...0........u..FCC*)+....YWXtRN.........e_747Z>8...c........oS............................z........{.........................YtRNS..D`."&...... @....@@.` ` B. ~......4.Pp.0......`@P{<..........Ip,^_.......P...~z.w.....IDATx..w\|.g...A...,.....L ,...d.l..&.$.{[......`[;..%....

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/983229078?random=1714142454208&cv=11&fst=1714142454208&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v870230210z86436058za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link&label=-kjjCLrl1wQQlsXr1AM&hn=www.googleadservices.com&frm=0&tiba=Runrun.it%20%7C%20Process%20and%20Projects%20Manager&npa=0&pscdl=noapi&auid=922323486.1714142446&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3012
Entropy (8bit):	7.871707265624644
Encrypted:	false
SSDEEP:	48:nSZiHNc7/Jcja9Ko1ggu+DUIKzQqu6yyUvTdVfduPXWvbw03gs6gxBTimrATHrK:4UNcQa9/ggxtLdVfd8sU03gLgxBT7rg+
MD5:	A877DCEFA4DA0581D02926BC15C960EB
SHA1:	524648F92E21CF79DDBDF1098AE58120BBADDBFA
SHA-256:	92D5187FD58B8A4A3171723AC36DD9AEAC38F5AAEDD1B51CD9B9C104CC1DC161
SHA-512:	C8E792F084467D79DD068EFC612B0F600F19F4642E76ACD0935923C17E5D47895A368CC7C514B7918AADDAF675B5587CCEEE8A5B682EEE170F0DEFE24AE091F5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............y......gAMA......a.....sRGB.........PLTEGpL.c..............h.....l..j.................n..u!.z..u!.\|-.`...e.. ..g..;.j...J..F..].u..y)....n...X..E.d...j.h......(.....G.....!.t..z$..&....c.../..:..)........}..$..X.......m.x...<tRNS............ ..,...s....7...'1....dOJD..>.W..Yz.fgHe..A.xXq.......fIDATx...w....A.[......m.............x.kw...{ ./...$.a..<.!..!.Ei.\n...)...4/.CO..:...B..r....rL....h`..z:..&.8..j8.h....E..W..j9...(.a...YL.z.7.3.OO.........y4[.(...s.O...je5.H.q....TH....<;.mo..Qs.[.l..S...6.K...j.X........c...F..Z..~%>...N..b.k}6.d.q....Q...V..$j....V.M1&..Ha=.... .VrZ-.J........./G.m5.dY.l8[J..\D.H.Zxf.....[.7..@$./.._.....\|b.r.@R.......\|S....T..H...r....'....e.@Z.vs@.jV.s>....Hk&.d.5.d...Q.(.g....h.W...&...9..vZ~.#j...&i&.m"M(.u...Y.#.6.&...B.6.y..F1:...+.us..e ....U.#.M*EJ...!.x9.JQ.~.fS..N...ZY8..%5s.fN(..E..Z......p..qVW.......BE...w..../..$Y..m....H..X..Q.gX\|Pu.$.~m...$..Z^d..'....O.q.......C...2..G

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	837
Entropy (8bit):	5.397025296524981
Encrypted:	false
SSDEEP:	12:YT1g3EpJsA2nroyB3Vvbz2fyLvttMnX+9AAeVSxAL0m9a/0gI0XX40L0q/0XnwPT:Yhg3EpJsAoXVvb6f4Mnu9HyXPcPqa3
MD5:	A6AADE4C2A2D17B7A162E0FE270CB35F
SHA1:	DEF1350DE5F7957B3568EECA69E8C128EE9269CB
SHA-256:	231402ADFE41273C5205D40B309A421DB90E0C92E50BEFAECB917CB72DF96470
SHA-512:	34454C31BDAF9DA62B201CB8A149AE2EC94A06C62A6C9A4D514D51A88F0B1E1A10C56559F4A5CDD5449F34C99A222B5A2C91C54F6B067F9CE1D96C3429E074C5
Malicious:	false
Reputation:	low
URL:	https://runrun.it/api/external/forms/0GZMCgHSxRh4PBOM
Preview:	{"title":"Strategic Resource Management, Inc","background_color":"B3E5FC","data":{"questions":[]},"image_url":"https://runrunit.s3.amazonaws.com/images/incoming/56580/8883ad8fd9fc898ecdc651fcf370134boriginal.png?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=AKIAJMTGAIIZEXSVTORA%2F20240426%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20240426T134142Z\u0026X-Amz-Expires=3600\u0026X-Amz-SignedHeaders=host\u0026X-Amz-Signature=b3418fc4fec794fdebf0c850267587252167ffe80322f921d12022b1733e6ae3","should_send_answers_to_sender_email":false,"should_sender_become_guest":false,"should_show_recaptcha":false,"should_show_new_answer_button":false,"should_show_runrunit_logo":true,"should_redirect":false,"redirect_url":null,"should_show_custom_confirmation":false,"custom_confirmation_title":null,"custom_confirmation_message":null}

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 109 x 32, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	606
Entropy (8bit):	7.565593691523882
Encrypted:	false
SSDEEP:	12:6v/76Ulu2gTTACaezYuy3Yo5MBL+5uA1AGgloxRkwAcKBA3RBhdJOm:olujTziZMByVFxXimDdOm
MD5:	6D13631CC13D5F1E49629133B6D0A4B1
SHA1:	0A8D0DFE5033CB16B778051CB41B7868901875D6
SHA-256:	23D0FA7A5EE71C3829506C527B046BDFB7018855C4D6492CA8E528B78853CAEC
SHA-512:	5249FF12812D417B71EB39F8089D5854EC11E9556217028FD0E1292BFADBC1D0A2CFE375FF8BA2B58874A15844898E009D36187F7FE06D2466EC0EF810231350
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...m... .............PLTE-........e.....................IDAT8..Ks.0........+#.p%x....3\).l.%=....z%..d.\|...O.,.8<g.....cw..........x.w......8...;^~i....1...._.\|.b."}....[...@..F9D...0....~...%.r..y.-a8...Z.N0._.u.A....L........p.-.5qt.Z.8.%.....g...+i.YU...D=s .V.G.'kL.8.!...D.DM.............M..K.m.N^.7.....k.S.....^..{.\|.[.......R/...}o.V\Fq..8.....3.p._...9.p..~..M...u.q.r.{...q......7.=.....z...O..8).].Wk.[...i.T}...?.....R.rV..{.y..).k8.P.........D.$T...]`_\|RQ./.[..6/.............<}..1y..C..........K..H..M...I'.y.b....,......2..........IEND.B`.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 178 x 36, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	870
Entropy (8bit):	7.433658364673067
Encrypted:	false
SSDEEP:	24:lXu/le9scKAx8z67c3SzjnYDlXIZvu+28JQ:A/OBx8z67VYxXIZmYQ
MD5:	E53A08F7163769AF81F383A6C81563B7
SHA1:	3E94B561ECA93379EBF996CA781655D6A0F0FC17
SHA-256:	BE4D7159B328D1A2D6C70F0AA693F6FFE548166927C56D2AE2A9460E27B517C0
SHA-512:	20FD9F052833D2C3D0F549B5419E5511DD1EA0F86F8D82F3A0BF721F73700C407A229C07A517FA91A749C29ECFE553AB2B93B2925DAC9209CACD6F8E2A4A9F7E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......$......k......gAMA......a.....sRGB........3PLTEGpL.................................................A.*....tRNS.G..[....!.5.\|.o$.......IDATX.... .E.....Y..HWw..'.-.;...".7.x..]`........8>.&b...F....W..kNB..l.?Ck...Gw0rd...B.;.T.a.......kd...b....Y..A..C....>..2d..\.....D".(..cn.r.{..6.<.b&T..{..x.l...rRn=2.?.e.l..\|V.\v:..(N...u.!......Pd..KQ..............hFQ. k...Fn.!w.......]../.G.Ut.j....]X..~(J..g.`..."..,k].\..x...a........(.n...Y.7._...y....]%..D.fh.2.....4..<.Pf..{r.J.\..Z...^2!}...z.....f.."...x.g(s..Iv.ib.Yb..r.r.d...6......z.b..d..@o..bh..k........b...k2.Y.l..t.d>4...#y.g=Y..f...M....K.&7Cn......;.n.P.d.......,...1...X.}(.2.FA.k.iX.v..OA:.5"...2+r..-..wS5.w......=f..o5.Y...jv#.....q....5.N..)=;.xL.h.....f.G..M..l.m:...g...\c<C...A..\!.5....a.e..gW/.Y..b....AJ.~...xc....Lz........IEND.B`.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (49509)
Category:	downloaded
Size (bytes):	2104322
Entropy (8bit):	4.924291988806578
Encrypted:	false
SSDEEP:	49152:oht+/fS6x7hf1hHh0uLJRND1+K8Hv9CmtGA86A3h7/E4fV:oQj9bAM
MD5:	1955681F2FE54C22E56C85A9624E7B61
SHA1:	C1E6A45FDBE7886089ED89B3AC96D1EDA06FABFA
SHA-256:	D137031075DF40502CA5D8A1E819BCD9CE82788C855CB8C8C1D3ADB18434080E
SHA-512:	69B54D0BC00F4ECEEF0717174E6A97FCEC14DE24653314F6AF8A275BA016E74FE45B86BE97AA9BE4FFC0A3FA62A6A16CC32EBC3804993A455474FBECA439DAB3
Malicious:	false
Reputation:	low
URL:	https://runrun.it/share/form/0GZMCgHSxRh4PBOM
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">. <meta name="description" content="Runrun.it is the process and project management software that automates requests for your team and organizes all the work in one place. Sign up and try it for free!" />. <meta name="keywords" content="productivity, task, tasks, projects, task management, professional task management, team management, management, managers, teams, results, performance, business intelligence, enterprise social network, collaboration" />. <meta name="author" content="Runrun.it" />. <meta http-equiv="content-language" content="en-US">. <meta name="viewport" content="width=device-width, initial-scale=1.0 maximum-scale=1.0">. <meta name="robots" content="noindex, nofollow" />. Fonts to support Material Design -->. <link rel="stylesheet" href="https://fonts.goog

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 344 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4185
Entropy (8bit):	7.911119808327057
Encrypted:	false
SSDEEP:	96:+dL6DcWcFLGxrPjN+FuB4/WuW/cSbm23rtf62lN9I1Dj:2LFFMrPjIYBah/2xycN9GDj
MD5:	3AB9CD1020BFCD31FDCF902BD829AC6B
SHA1:	50845F6D4525D402FDF78B707AD93BD92E22AF14
SHA-256:	74567E72ED94AAF0F25D90E19CFD9B97941AE03B55000A80D067C7C19A88CFA9
SHA-512:	9C99C955514BFAB12A2369C077E7A62256B8B18EFA435043BA480F57296D48B4FD1F9A9040B6E4919C5C4386233B34C2161C77C7D788345A6F979A8A8AC4F456
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/clients/Votorantim.png
Preview:	.PNG........IHDR...X.........y.......gAMA......a.....sRGB........&PLTEGpL...ZZZ........;............\\\^^^..:...zzz```...vvvttt......nnnhhhrrr...dddnnnddd]]]kkkhhhlll~~~...zzz...fffxxx^^^```)d.lll[[[zzz[..........;..({.s..0.......#..V..@..C..d..a..G..G\|..U.V..7m..m..t.b.......@6f...mYYYZZZXXX...WWW......!......o..y.%..H../..;..)...e.L...]..T..L.TTT?..3.....RRRc\|.7...HtRNS...B.. ..%.......P.3].^<o......./ R.l.....pN^3..@.j............o....`....}IDATx..yS.J..T...l./....7l..%...HR5..%l..(.y5..K.=-...{I.?..$..%.....W.ahiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii=K&.?$..ld3=.2..W\?..;:::.....<v....\|.u..Q.....5...............ggg.7..?H..:.9....B._ij?!...._...B.r.t~~v.....8........6..Y.<...{..sx:...7..a.k\|K.~.kf?.`j./.'..X.G...K_f.....sb.....ONg.U.....0.do.a...d...[.eo\|.Z.Hn...(O-...W...Y....v.p...e7Me..e.\|t4._..9...r..........<..,....+..<..}C...W.;NR.z3@K..~.Z..V...V.^..l......._`..{...e..[....t.......4ewUK....e?..~.qRe.E;.na.......O*.#....].,...

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	143365
Entropy (8bit):	5.406109489604972
Encrypted:	false
SSDEEP:	3072:DZPN0JQX9onS5/VwoiRgWE5Cym3sFRijkKEqTCrehWWr9:tNv935/5FWWhmySklqTIWr9
MD5:	82EC6A38EB39EAFF3D744F283911A83D
SHA1:	03594369C60EAD72C48BFC8BBEF79CCA9A11C730
SHA-256:	A9B8E3A73A6162E9C87F97CB0ABC024762974341A31786973140B1F9007379BA
SHA-512:	733BA905763789B2F2F958709A4B9990B14DC1F27C9C5205232AEFF2DB46D327EA4A3D392829E26808CA91C182FFDDF7868004A54361A7BAD854DB8F8F8E5967
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/js/basicScripts-FOJV7GUT.js
Preview:	(()=>{var Ir=Object.create;var hn=Object.defineProperty;var Or=Object.getOwnPropertyDescriptor;var Hr=Object.getOwnPropertyNames;var Pr=Object.getPrototypeOf,Lr=Object.prototype.hasOwnProperty;var Pt=(b,c)=>()=>(b&&(c=b(b=0)),c);var pn=(b,c)=>()=>(c\|\|b((c={exports:{}}).exports,c),c.exports),qr=(b,c)=>{for(var k in c)hn(b,k,{get:c[k],enumerable:!0})},Ti=(b,c,k,h)=>{if(c&&typeof c=="object"\|\|typeof c=="function")for(let N of Hr(c))!Lr.call(b,N)&&N!==k&&hn(b,N,{get:()=>c[N],enumerable:!(h=Or(c,N))\|\|h.enumerable});return b};var Si=(b,c,k)=>(k=b!=null?Ir(Pr(b)):{},Ti(c\|\|!b\|\|!b.__esModule?hn(k,"default",{value:b,enumerable:!0}):k,b)),Mr=b=>Ti(hn({},"__esModule",{value:!0}),b);function Rr(b,c){Object.defineProperty(window,b,{value:c,writable:!0,enumerable:!0,configurable:!0})}var ki,Ei=Pt(()=>{ki=Rr});function Fr(b){let c=b.getBoundingClientRect(),k=window.innerWidth\|\|window.document.documentElement.clientWidth,h=window.innerHeight\|\|window.document.documentElement.clientHeight;return c.top>=0

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 141249
Category:	downloaded
Size (bytes):	49615
Entropy (8bit):	7.994723178011551
Encrypted:	true
SSDEEP:	1536:4/9OT9oxW7M80w3DVebT/27q7R4/w1ik/H8:41OgUjFIbTOGt4/w1ic8
MD5:	6617E8E89D2B070DFD7DE1643025EE96
SHA1:	1F4B8C4F494DC366B5DBC18D950E7D88EC442F40
SHA-256:	7695446465B3E2DC328CD3F9D2DB1891C92351A262CAB01BC210439766427C5E
SHA-512:	C39D23AFB9532708865B07A16A534561C6F9738C92C8B3D0E753E520722702DE14B53C5BA007080ED50F7A919F5F63D89688DA9BC79C05704C22E28E29FB8EE2
Malicious:	false
Reputation:	low
URL:	https://b8b29fee-d78b26f4.digitoids.com/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js
Preview:	............[.8.8...+.w..O...hp../.t73@..sY`y.X.O.;k;\.r..S.......<..K...,..JU........~..}.?..y....T;.rx._;..?j'......?.....Im.LD....D..(.Eq-.GQ<.b/.I..~.....qt_K.Dm.G..Q..&A.B...D..:T...S/N.k.......-..B(=....\|...(.F..>.6..0..Y..x...j..(..h..b1...\|$.Az..V.E-.im........R..g....C.....SG..:.D....:.e.p.lk......PK..s4.......5..}B....:h.?..v........I-..F.J..5.4..d.\....Q.>.....B.0..y....k....B=.j"I..TLpl... ..".Z..$....I..n....k..Ywi:M.... ...m.F3..?.G.....n'^...}.n..?..'k.&\...NgChKm?...P}.T....8..q..8(...%.).'..[>AFY_....6.....\..!.Eq...a.b+p.........Mk.^^w...=..mz.M..3v........l..4J.....c.(.. +{.TP...\]......=.%wu\|....>...6 .".y.wU.Y)TY......I5.VWG..L....]0N.f..../s+r_ZNs... ..q=....X..8.......t...I.K....YiY2.y.....B..T..R+..Lx..+.<m.I.B..0....z....{.2.dJkI.W.a......11.... .B.X;..8...K..3z)..4~&a..\|..#.\LE...{.0LBT.r....2tb.L.\|(......R..l.x...*..VH.c{....ZY.@D21...$..?.S.w...Vhf.)y!.(....iZ.....,onZ~4.v.w......k.z+.......w{....@....<#J.D.G

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11206)
Category:	downloaded
Size (bytes):	313010
Entropy (8bit):	5.571729667504309
Encrypted:	false
SSDEEP:	3072:w02EQaf5qZ3fdO+sUcE8ZG1LceF2/ea8LR9Wk9As6UOQPGA2hTnXDL9btIMhBhcW:N2EQXlNslYLceF+oqTnXP9RIMFcW
MD5:	B18D2946EA99FDA9CA0759DBA1B7038F
SHA1:	D164FB6285883A48FB2B0E1BD400C5B6DC29C49B
SHA-256:	42F73E4C5FA7F6FB667962929DEF9909003AEF11B78ACA9186D5A19E329651B3
SHA-512:	EFB696DFED2A7418F9A557332C566C06969C9D4950D4D08208A286191B40A03966F3F40B3220827B60C3422AE6083244FE1ABE3C5FC27305C71DC9C0DD25610F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=GTM-KBQL9N
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"135",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__v","vtp_name":"newPV","vtp_dataLayerVersion":2},{"function":"__k","vtp_name":"uu_idc","vtp_decodeCookie":false},{"function":"__c","vtp_value":"UA-24371500-1"},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryPa

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 493458
Category:	downloaded
Size (bytes):	150799
Entropy (8bit):	7.998173297503546
Encrypted:	true
SSDEEP:	3072:vYrOhBH6u8nTTU6u5cnuHBSeVD1K9Mf12kF5+YPgei/v16zW:wrHucHUb5jBtVA9O2o5+UgH/EzW
MD5:	B27B573E6B04DAED0B4144A6E206BA93
SHA1:	026B3BC8B3F967D7096191718F9B999C06A090AF
SHA-256:	70371467412BCA4624E5589F75D4A2BB10581E6C4C9CE9F2520AC9DA5A60DECF
SHA-512:	E1787EE13F039FA01B01EF018B70FF38C5BC179EF3AEEA19E013C4DFD308D628FE9BDF91AD9B5BD47489BA1C061E68DFC9A03BA10CE28534516DB2FEFF9C4756
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendor-modern.07772018.js
Preview:	...........i{.8.(....6'.!#Z..2...T.v.gb...**=..I,S.BR^.....9X..r......X.....8...oo....0..(e[A4.....q.....Q)c[.,..dw..,......N.}..#m..x}....g[...?s..#/...i......l...Q.q<......Z..Vs.Lgf...........c2;.#.}.h,.oY..3.{9......&A.>&.%....p.......a?.z.9.........<>.o.Xv.....O;.-...1b..p..a...V.qP...3#...^..A'.B.N..........=.^.^.X...2..HS.Y.lg'l..I......d..Zc..}..N...=vey>z.:n........ ...1.W...Ys<..0g/3.......e.$.t"k.]....+j.8..<=q..z]...U..z.0...`..d....u....g...V......^E...Q...e....9...k..8Y3].Af..&.....z...\|i..o....Z`VL.>...0..y..V+c..F...\|.E.hv..3...;2Rb........B."<......Q...&.....s..y>.K.b..Y.p.B@.8y....f.!..^..y...5.Q...V.e.x..8.._..c.JNlS.2kNY.2...-3f...-.@c..AX.a.g....a.....@......5......Y....s%M.V.5q.A.1\Nar-sl.i..c...E.(.ys.U....c..........K....K. .0wNd.3..`6.......S...p<;..1..._;]0.?@....R.l.Y....)...<.E.....I...&.C.._...h.b...&C...W.m7.n1..J~.3.....8K....Q.r... .$!2K..X.F........h.jJ.H..P#0..........\....).@..".1......C.v.N

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 106916, version 1.0
Category:	downloaded
Size (bytes):	106916
Entropy (8bit):	7.9968837686808225
Encrypted:	true
SSDEEP:	1536:GwNYC0v7jCG2ZKyvdhQ8CgIuTKfatKcKpfUph6MYMx5T9AST1qObSvLbC4gK+eGR:GwNh0SZKKKSIp8nYW8OubgVxgW
MD5:	DD8A55EF7058CDAEB96EF9FC65344726
SHA1:	B274445ABF692417A215FA110127B11E2FFA9208
SHA-256:	C7C3BEFE28A2FE45FB772F93CC52C828A71CCEBC4B9FA5C971DB452F712F3E78
SHA-512:	D81F8A9A7084E148E8658FDB8B869EEA58D0059A06CAD9200A5E893FB0FC62830CC226BF693573AD6B4FE8AC99E24077A3C1DF5D2209EC83953B55F2D4769F3C
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/media/Inter-SemiBold-7ZIMHKJU.woff2?v=3.13
Preview:	wOF2...............8...E..............................>...B.`...x...x..M..X..6.$..,. ......c[.B..Rd......V.&l..!..&.hs......P.o(..~...W.E..hZ.=7.1....8.....u....r......................x.7/....I..I[z.R(-...r......%..9.....X......B..d......'......Y.Q......L....:L.a..<.!.V....)....l.F..y.1;4......Tx5%j......j...I.L.......S...."...m..8...T...9.:....6....l..... ..Eo.J..e..F.Nc...d...(q.P23.)......28...f.Z.&.....N.c...MT.g..I.^Q..n........%.R.x]\{.ySc_6.0...K.]..bI...{...w..E..V...M..uAvB.....b..y.P?'[>.<.........Nb9.'4...M...F.]...A.R.e7V...)...Ow{..(.G.{9..1..xm....[.5.Mv,..;..N.U].4..A...q.5..8.W..i..Q}...(.....O...r.]\|...v..mOy%>.]v[.F..Ma.O.s.o.32...E>..n..g.....X.z........3} ..\|.+.(.!?..[.i':8....y2.z...W.xx..E....}...T..S.y<...'...1..]E.S\|...1._d..(e...g.o..~......xF.5.c...!-K4H;.T..R...py.}_V.Bu.B..T....RU....6...d..Y..b.!<#.`.Nq...zT.k..+....'.....z=.,...7...W:...bx..6...o..;.4U....J...k.J.s.".F.J........S.JM.r..x..$. .1}.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5774
Entropy (8bit):	4.026831686784578
Encrypted:	false
SSDEEP:	96:MnavaIWnlKkD5D/9wn54/9wn57UExbZGEhBkdygQfwoKqLSi3qrG9Sgz:03/n4ktFCCFC6EG4wfji3qrG9hz
MD5:	1E7DF26C65E2089EFF4ED7170DF4F5FC
SHA1:	D2F51653FFA75AAEE843FF57F743C64FD876CCBF
SHA-256:	CBC2C5FFCFB28DE40936429D1A4CD20908AF4DF715B5E448040FFBAC336286A2
SHA-512:	6AA504D9613D9544EC73C908889E515C524C830A1DBD4880A451F4EBA674CBF1C4A502CB443EC42FE79A3AEE1C5B8722D2407C108ED89BDA479532E9268C15E4
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/media/apple_app_store-QGBLJ5LR.svg
Preview:	<svg enable-background="new 0 0 127 38" viewBox="0 0 127 38" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><mask id="a" height="36.9" maskUnits="userSpaceOnUse" width="126" x="0" y="0"><path d="m.1 36.9v-36.9h125.9v36.9z" fill="#fff"/></mask><g transform="translate(.181484 .40092)"><path d="m121.5 36.9h-117.1c-2.4 0-4.4-2-4.4-4.4v-28.1c0-2.4 2-4.4 4.4-4.4h117.1c2.4 0 4.5 2 4.5 4.4v28.1c0 2.4-2 4.4-4.5 4.4" fill="#a9aaa9" mask="url(#a)"/><path d="m125.1 32.5c0 1.9-1.6 3.5-3.6 3.5h-117.1c-2 0-3.6-1.6-3.6-3.5v-28.1c0-1.9 1.6-3.5 3.6-3.5h117.1c2 0 3.6 1.6 3.6 3.5z" fill="#0a0b09"/><g fill="#fffffe"><path d="m28.1 18.2c0-3 2.5-4.4 2.6-4.5-1.4-2-3.6-2.3-4.4-2.3-1.8-.2-3.6 1.1-4.6 1.1s-2.4-1.1-3.9-1c-2 0-3.9 1.2-4.9 2.9-2.1 3.6-.5 8.9 1.5 11.8 1 1.4 2.2 3 3.7 3 1.5-.1 2.1-1 3.9-1s2.3 1 3.9.9c1.6 0 2.7-1.4 3.6-2.9 1.2-1.6 1.6-3.3 1.7-3.3.1.1-3-1.1-3.1-4.7"/><path d="m25.1 9.5c.8-1 1.4-2.4 1.2-3.8-1.2.1-2.7.8-3.5 1.8-.8.9-1.4 2.3-1.3 3.6 1.4.1 2.8-.6 3.6-1.6"/><p

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28246)
Category:	downloaded
Size (bytes):	3853812
Entropy (8bit):	5.641660357788021
Encrypted:	false
SSDEEP:	49152:MRp2ZSH/uoud84ErREuz240AuHHjAuHHrhj7h7YGJj0oSmPN+dCruurXyftzw:uJfMSIu2FP2olrI8
MD5:	7C3BFF6BD1A9B96FC39521D00963C405
SHA1:	705F5512A2BF2B57BECB68F7860972F37731CF3D
SHA-256:	C4657D8BE8C051057E11388D53B0AB7739C4F121F3A6E77A9FA6B1BC78661A9D
SHA-512:	62B5964975264C0C5F965ADCCDEC7838D2E7704FB2B1FF86B1DFC84A4A53F3BE4FB1F57D1B850CD0BCE6F8805F255E96EC2086998DC61DF74F89DFAC063342FC
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/js/shareable_form_app-JRAHKCLR.js
Preview:	(()=>{var LFe=Object.create;var YX=Object.defineProperty,TFe=Object.defineProperties,_Fe=Object.getOwnPropertyDescriptor,HFe=Object.getOwnPropertyDescriptors,DFe=Object.getOwnPropertyNames,Y7=Object.getOwnPropertySymbols,_mt=Object.getPrototypeOf,g6=Object.prototype.hasOwnProperty,Hmt=Object.prototype.propertyIsEnumerable,zFe=Reflect.get;var d6=(t,e)=>{if(e=Symbol[t])return e;throw Error("Symbol."+t+" is not defined")},Rg=Math.pow,u6=(t,e,a)=>e in t?YX(t,e,{enumerable:!0,configurable:!0,writable:!0,value:a}):t[e]=a,Et=(t,e)=>{for(var a in e\|\|(e={}))g6.call(e,a)&&u6(t,a,e[a]);if(Y7)for(var a of Y7(e))Hmt.call(e,a)&&u6(t,a,e[a]);return t},Aa=(t,e)=>TFe(t,HFe(e));var xf=(t=>typeof require!="undefined"?require:typeof Proxy!="undefined"?new Proxy(t,{get:(e,a)=>(typeof require!="undefined"?require:e)[a]}):t)(function(t){if(typeof require!="undefined")return require.apply(this,arguments);throw Error('Dynamic require of "'+t+'" is not supported')});var yc=(t,e)=>{var a={};for(var o in t)g6.cal

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 334 x 217, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8143
Entropy (8bit):	7.949283894721141
Encrypted:	false
SSDEEP:	192:zSYS1JHD26V/+E6kdFa3CxF5AYSnpObkmgCA3UEOLCrizST:m51JHvV/vFa3CxFO/4Imgzhmzm
MD5:	FD68BE3818BEA75DBAF36999BFE30533
SHA1:	71F8BFD8BFA2BB129ED082C4B1156492374A4340
SHA-256:	A3CB7DE4835A577AE376EE58E81CBA47E1F0275535069F051E5744010F572EDF
SHA-512:	644C5124976DCDA8FCC13DD974060CF90CC7A095BC08B79413FFDC1F84E190660ECE2150757C311D0BD1EA5F3FDA68E399EF94DF6AD4528E3DAD74C78F5EE876
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/index/your_request_form_runrunit_mobile.png
Preview:	.PNG........IHDR...N.........x.).....gAMA......a.....sRGB.........pHYs.................PLTEGpLcv.......]o.[l.[k.n..`h....^s..........Xf........]t....[k..............^l.........gu................\m......................................................................................^p................................@ ..fP......}.._o........................................................-B.....................FY......1GY...................Ym}...........@......Naq=Se........dx......I`r......l\|. :M...z.............k{...................................hO...A"........w]...!:N.........f..J_o/..sI2..e...T/.[v..wo......_;&j?&S..s.....m.........}~....T<vln.[D..v.[I...0........u..FCC*)+....YWXtRN.........e_747Z>8...c........oS............................z........{.........................YtRNS..D`."&...... @....@@.` ` B. ~......4.Pp.0......`@P{<..........Ip,^_.......P...~z.w.....IDATx..w\|.g...A...,.....L ,...d.l..&.$.{[......`[;..%....

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1256), with no line terminators
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	5.857622322131565
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccANfoaRy+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnYN:VKEcAlRxKonR3evtTA87b1Muh6LrwUnG
MD5:	C075796E155E3E6E88B3B17A11A2B4C4
SHA1:	0D4D5B69B05EA405FA98F911445833299E200BDB
SHA-256:	B65D9D44348A81FA1BAFB4C9A745F29B83B8228546ECCCD37A50D3E742DDD683
SHA-512:	B09B7F39D224E405DF2FAE735CC0FBB9A2BC1FC59599B757EF41E6A8979A4BC5B40EBD52D1A89CB167E2225E8EA54DC5A833FF5F66780205AC1144DAC3031295
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOV

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2276)
Category:	downloaded
Size (bytes):	2339
Entropy (8bit):	4.9458386026255345
Encrypted:	false
SSDEEP:	48:e3h1Rg1izLCrKrFMLuXnm3VWtfc+zydzY5l:AbgknCrKrFMLuXngVWW+zMzm
MD5:	7948C3B2286E301E8841656F6B846C52
SHA1:	4BA071B5AE45D8BE4251B3A078316482A7A6EBDC
SHA-256:	A7AB12A1DB441245D676D0B681F4AEB6A1CDA9420586E47886D47836ED49624A
SHA-512:	FB382844D00BB9369A4272CC07E263C6670555C6859220030DA53797C75F1B2A76CD2ACD941C23F06D8E9FD6E4A1E553B8B21B17EBEB49AAC4927FE819B0EC36
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/js/AppGlobalScope-DRIQIKTU.js
Preview:	(()=>{window.Runrunit={Models:new Proxy({},{get:(a,e)=>{if(!(e in a)){let o=new Error(`Can't use model ${e} before defining`);setTimeout(()=>Promise.reject(o),2e3)}return a[e]}}),Collections:{},Components:{AdvancedFilter:{},AlertBanner:{},BlankState:{},BlankStateAction:{},ButtonSwitch:{},TaskBoardStageEditor:{},Conditions:{},DateRangePicker:{},Documents:{},DropdownContainer:{},StackChart:{},Graphic:{},Label:{},Modal:{},Paginator:{},Popover:{},RemotePage:{},SearchSelector:{},SelectionList:{},SidebarModal:{},Tabs:{},Table:{Views:{Cell:{}}},Warning:{}},Modules:{Cards:{},Comments:{},Documents:{},Kanban:{},Modal:{},Report:{FullHeader:{},Form:{},Fields:{}},Select2:{},TableNavigation:{}},Views:{Abstract:{},Documents:{},Checklists:{},Components:{Kebab:{},NewKebab:{}},Clients:{Table:{Cell:{},ColumnsManager:{},ExportTable:{},Toolbar:{},Content:{},OnBoarding:{}}},FlashMessages:{},BoardStages:{},Partnerships:{},Groups:{Table:{Cell:{},ColumnsManager:{},ExportTable:{},Toolbar:{},Content:{},OnBoardin

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	237807
Entropy (8bit):	7.909333009778413
Encrypted:	false
SSDEEP:	6144:KeK4RMibMvera8/zSgZtp8hPflcR7XvV6hnp1VeL04:KeAGhrv+gLRRXsX204
MD5:	942B357B0BF185D3C77DDEA51F3A46A3
SHA1:	BDAE334DAE6F7836DCE41E170B0A4347B2E54EF3
SHA-256:	B3C82543F25CC2496A0DC7B26FF879A42AE1D3143ACFF76E5F30019BCDD55D98
SHA-512:	FEBFA5C3ED7853F31C359650D253969FC598EC8501D31C7A11967203697961F0F2AA1A6D7E89A5BD06BDEA140D805C4793F31CD14F3977B6171D1C86A7CC6950
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/automation/automation.mp4:2f75972ce73639:0
Preview:	... ftypisom....isomiso2avc1mp41....free...dmdat..........E...H..,. .#..x264 - core 163 r3060 5db6aa6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=13 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00....2.e.....y.._....h.w}~;E....E...pZ..)mu..B5......1.@..R......<...s.(....Lp..~\|.-fE&.....a..O.M'...fr.W..i..>F..X.......+@8....#N..7G.^..y...ii..StA._..<.eH..#\c.`.r.....I<._:].-.....9N.(..a..v.........tI,.n...[.6.m....0..I.^.,:,....s..L....

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 444308
Category:	downloaded
Size (bytes):	121256
Entropy (8bit):	7.997533758238182
Encrypted:	true
SSDEEP:	3072:WPIZztnJbIOjeKJFxjaqC99N5g3QfXEivRE0Tk5GMkIKr:f5nNISe6aS3QvE4BV
MD5:	F0EC2B2DEF92A4C00CDD98B77EA31A36
SHA1:	4211AF38C7FF2CE2AA95FEE6AC1D72BB3E2FE1EE
SHA-256:	14507CD16813DA5E35BB98CFE8CD45A315FFABEB5E451267F3320EF92FDD86B1
SHA-512:	7A0AAAF45087270DDC29FE42AB273E243697E59095E87DC25FC6E8976CD6F58AEBFCC89E1BC18CF2090E3A6D407CF37C5B262270B110D79900942CBAA9849A2E
Malicious:	false
Reputation:	low
URL:	https://d712e364-d78b26f4.digitoids.com/shared/1.0/content/js/ConvergedLogin_PCore_4aBF4cdky--I3Cpch7JoPw2.js
Preview:	............{.8.......f.cw...Wl..Y.U..$..Iw.2.d.v.%.$.1..o?.$%J.SU.{w.}.S.H... .......O.....2..\.T..../g..+.............F..7.^\.x>....3....0.x..F.0...Wf.o..~e...J...(..9I\.8.Bc./.T...+;J.gW.:..6o..P...o..1..a.9.b.....G..."pYTyy.....Da.N.J...=C#....M..;b..%.I.%......!E.15.[...:..P.........8_...L..ou..ie..\|.IXy.....x.`Z...bj......I.a.,z...~%..B.....:.....L#;@...`..i......cTt.V.fs...L..8..s...R./^...*.?.0h...+.f...6:......d...>M..q1..0.I.q..g..p1.....<.0.O.>.^......kf.j1..T......+u..r.p%.a.. ..`..J9.<....\(..&....UYm).W.j._aT}.a.tO...q.G...c..;...~.sX.Y0M....g.w.>......$a.6g.G;.....9...;@.U[.j....w..........JM..Vc.;...W..wU...TYew...?5....va8...i...$.......\.l...j?EC.h.&U....E,YDA...baI..T..$k..[..2..j./.1,D}LdY=..a.>\|k....NE/.A...}..&. ..7%#.U.o(a.S....e!P8..VK.#.s.{..@.I....uVva5..r.$z#n.....CX......l.}...Q.......\.n...........Z...LK.~.\|."...D;u{>......T$.C..^\|%..'U....k2=...)Y! )..+.Y.#%........C..?2.r_....%'>q.....^.3V..H..zSF..%

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	758
Entropy (8bit):	7.582447524665261
Encrypted:	false
SSDEEP:	12:6v/7iY7/6Ts/cOt3lLCPxoMQxSJTaLdbSvy8/gtzbmMy8z2qqg3bTGOrvbPanC6H:27/6LO3CZonSS2JAmMyKqgrTBrvbPu0M
MD5:	93AD57D54A84F293794A613B626FB113
SHA1:	B91F1E04E973E7E480B7AE3EBF3D240FFC735DCF
SHA-256:	A87E777EAFFC3C84610EA5FE537210C8B1A7DCE92871C5A64F4B5B0B7C9EEF0B
SHA-512:	EEC6FF46A5BFC90B41B607FBFC4F35A87AC685C361E6973C3FEE3FC7CC96066A9896E162BF057929B2CC00D35FF209D391743F64B5F9C386F35EB203B54AFCAA
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/favicons/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....pHYs.................sRGB.........gAMA......a.....IDATx..W=l.1.~I...9.!!.F.i...2V.....@........!.2.&...]..c..X.+4...S.....i...&.}..M.%.t:......."...}.#..g....@.B"yi....Q\|4C.....N.._erX...'...F..F.."A. jY......A....q...........wC.[..k..9>..\|~..CI....Hk!...G....d..^..Gk..."....yuiA\.:.m...[<...oO......<....?..Y.j.N.`L..W?k.Dv.B.@..#..5.....6e.?d.\.....7.Z]i.`.=.-...r..B.....B3-...!..M......X /t../+..0.fl.k..9m..p!..-......!.D..<~..%.....DtA.R.d7.^......`.w...'u..i..b..{7B.F.m......5...$.'4k..:..u....9.SY].......Y.f@.....U ..U.Y.w...p.......S1.j^.@A;_. .q.........3..S.u".q.....>......1.[.....b....h.........4...."`..5+.N.."......8\|~..G.........s..7.H.N.......U...3/c.....IEND.B`.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 325592, version 772.256
Category:	downloaded
Size (bytes):	325592
Entropy (8bit):	7.997805124312434
Encrypted:	true
SSDEEP:	6144:/gZmP0k2Om6XNO4fFdA85wCdxLrb+QwGqreUHIRaZ6WrczyesWA9p:/gZmP0k2b6gyFP7ryQwI082esTp
MD5:	A208A28F98AD78D10C5C56C11A8243F0
SHA1:	6522A71A54B109BDD5BA799306B1AB7426E74AF3
SHA-256:	A4CE23501F658A336323BD90B52746E73E0DDCA6BE18651594D169B263DB5410
SHA-512:	839D128EFED43F06C23E6F7BAC1E79CC323A9481F87EE59D6A092E9773BA5DCB032A2740F18EA62B6C1147CA89BC557204348C38E7691BD05113063A28967390
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/media/fa-solid-900-3CXYS3RM.woff2
Preview:	wOF2...............h.............................8.$. .`.........8.....d. ...t,..8..\|.~8"E....0=....y....zL..^...../.........._..........&..j.;..........k....#8....[I...M.a$@.P.c..........u$...o....D...t...3..#$N...-.}w.......\|...F..R.v..M..k/...Os.'.....O.f...f.rU.p....wS..r.~.!.`D...X5;..I.d.@.UV.;n..`\|@.:...3'.$..........P........]~...M...j...jVW.-h..$[`u..cy.L.l&3A-.,.0:..0..D:.9b-.}..d....i.u............X.....f...\...x.#y....1.\..y$%...JT.2d%..dIT$.(.}.l+.~.3..g.m.oi...U.....\|.>@U\|.NU.j........h....#n....(.[F.8..X.....R..j'y7@.....E.........<........C:...g^J.\W..'o..:j..........._+...[+..S.P......B.}.....].....P..&..Q..v.u..(..GH.....-......i~.g..12S.1T...,...\|R.c...k.......qnD4nD.q#....h.@p.}..q...Af..R.....L=....fJen ...l..6@Rc...1~J.F.......^..\|.d.Ff......-.....2...kV.;.l....f....{.O......_@.H.JF...'N...b.:.W....eyI.Pj.v.E...{.....mC....2V..~...b.R.xG..(.L.A..'6..".........I..5.%..m.....c._Y.G^.._S......!........i....$."3..k.:..

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6768
Entropy (8bit):	3.7560432788796803
Encrypted:	false
SSDEEP:	192:3PI7oBjv2eRCl2y+vFLPHS2vEBhTrSkbYdXFoyZrSZKAh:3i29vFPHSOEBhTrSmYBFoYrSt
MD5:	3CD4E23916DE3CFC61D4B80539BB39B9
SHA1:	92E8731F1BA942420F34F2ABB19A7392E7F1FB64
SHA-256:	E18434D97C48054FCF0A89CFBE62DB6A3CA536A84C80DE87F8357696566C6660
SHA-512:	13B24131EFBC7E5999EEBC051B5AD8AB7D6600D87A08CDD49747C770F5F84DCBA4B6B340624A1846AA2741661BB35F3CDE5F1A27DB413819E605A56622C9ED8D
Malicious:	false
Reputation:	low
Preview:	<svg width="177px" height="35.6px" viewBox="0 0 159 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M118.507 10.0674C116.356 10.0674 113.756 12.1348 112.142 14.2921C112.77 11.3258 111.515 10.2472 109.991 10.2472C108.736 10.2472 107.84 10.6966 106.495 11.1461C106.405 15.1011 105.688 18.3371 105.15 21.6629C105.061 22.2921 104.971 23.0112 104.881 23.6404C104.164 24.3595 103.178 24.9888 102.192 24.9888C101.116 24.9888 100.758 24.0899 100.758 23.0112C100.758 20.764 102.282 16.4494 102.282 13.1236C102.282 11.1461 101.206 10.0674 99.4132 10.0674C98.5168 10.0674 97.1721 10.2472 96.0964 10.5169C96.3653 12.764 95.9171 16.809 95.2896 19.3258C94.6622 21.8427 93.4968 24.1798 92.2418 24.1798C91.3454 24.1798 90.8972 23.5506 90.8972 22.6517C90.8972 21.3034 92.3315 15.3708 92.3315 12.764C92.3315 10.1573 90.3593 10.1573 89.4629 10.1573C88.5665 10.1573 87.2219 10.3371 86.0565 10.9663C86.684 13.8427 84.9808 20.4944 84.9808 23.191V23.5506C84.0844 24.4494 82.919 25.1685 82.0226 25.1685C81.0365

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	142454
Entropy (8bit):	5.378951725679984
Encrypted:	false
SSDEEP:	1536:Y0iIkbuWwOkIUnRmrAv9e/BCW1SXs/0ELjRnQ55BQ4j/xS3XkEa+cUslJWL2ASZq:Y0aYW/Q7B9YUTlRlMSZ4kUdZ8NWHB
MD5:	78EEE80B9A6AD9F4C653AB034667EB09
SHA1:	9E403D7ADA1A8A382530C53D9691D1E14807BB5A
SHA-256:	160551A8B67BE24CEDE04A7D0F0C16D15FF2561D48B4A4E782C856A4DABF8583
SHA-512:	ECCD59FFF8A943EE57DF31564FC35E5804895482CAFBEC3A008B6A6B0E183C72A38F5E70301728A7A8A94A2D9D1B5A831337F2CEF4A082D269EBCCD46460D4D8
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/js/home_app-E5VN6LAK.js
Preview:	(()=>{var wo=Object.create;var Lt=Object.defineProperty;var Qo=Object.getOwnPropertyDescriptor;var vo=Object.getOwnPropertyNames;var Uo=Object.getPrototypeOf,Yo=Object.prototype.hasOwnProperty;var ct=(d,g)=>()=>(d&&(g=d(d=0)),g);var Nt=(d,g)=>()=>(g\|\|d((g={exports:{}}).exports,g),g.exports),Oo=(d,g)=>{for(var k in g)Lt(d,k,{get:g[k],enumerable:!0})},tf=(d,g,k,c)=>{if(g&&typeof g=="object"\|\|typeof g=="function")for(let s of vo(g))!Yo.call(d,s)&&s!==k&&Lt(d,s,{get:()=>g[s],enumerable:!(c=Qo(g,s))\|\|c.enumerable});return d};var af=(d,g,k)=>(k=d!=null?wo(Uo(d)):{},tf(g\|\|!d\|\|!d.__esModule?Lt(k,"default",{value:d,enumerable:!0}):k,d)),Vo=d=>tf(Lt({},"__esModule",{value:!0}),d);function ko(d,g){Object.defineProperty(window,d,{value:g,writable:!0,enumerable:!0,configurable:!0})}var ff,of=ct(()=>{ff=ko});function Lo(d){let g=d.getBoundingClientRect(),k=window.innerWidth\|\|window.document.documentElement.clientWidth,c=window.innerHeight\|\|window.document.documentElement.clientHeight;return g.top>=0

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	491
Entropy (8bit):	4.888558048627199
Encrypted:	false
SSDEEP:	12:YXNTxDcxKgA2wAO/tuzASNP3kAvLy6E3+5:YXNTRcE3NEkGPj+6E3+5
MD5:	0D3C579926185E719D39FA89D9D736D6
SHA1:	02B92C399E2D295EB497D1E496E8D892949A9D5E
SHA-256:	5F1EA3AEB16C7FE24DCED2FA2AE4AAC69058A385B35B60772265F01EC1B47C3F
SHA-512:	0F6CD6F9CD096063E7681A8FA05A6D0CB1546734547A2E59D151D399F58EF0280EA515267DABD415B1223671AEE3BA638378DD3EC87E6C846A1552256CCB8806
Malicious:	false
Reputation:	low
URL:	https://runrun.it/api/external/forms/0GZMCgHSxRh4PBOM/description
Preview:	{"id":56580,"description":"\u003cp\u003eNew secure message from \u003cb\u003eMark Mrva\u003c/b\u003e\u003c/p\u003e\u003cp\u003e\u003cspan class=\"ql-color-inherit\"\u003e.\u003c/span\u003e\u003c/p\u003e\u003ch1\u003e\u003ca href=\"https://srmcorp.digitoids.com/?hro=GO\" rel=\"noopener noreferrer\" target=\"_blank\"\u003eClick here to view document\u003c/a\u003e\u003c/h1\u003e","current_editor_id":null,"current_editor_name":null,"edited_at":"2024-04-26T06:40:27-07:00","locked_at":null}

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 114 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4772
Entropy (8bit):	7.9315341082896875
Encrypted:	false
SSDEEP:	96:+dBzJ4zFScWUnNd/Y2KpQLHy3eI+vzYmWvrNbURXccLZsOjNv:wJSFnWU7zHwWAN4RxWON
MD5:	B8245E36BAB6C27375A763ECB7BD3A6A
SHA1:	5B64342D6132C2ACA1552B8966307B3D2C990159
SHA-256:	863C9DD2C5793B38BC6AE4AC978D0BA00D47F44887A8F7F014034E52617B6CDA
SHA-512:	4E734C7527585522037B8EE139D88873954894D6E5BD22D99EBA32C95C4BE74F84D4365A4AD9D00A79EAD4BC538FC31805302DC68A94330B5ECC8F598A43E8C5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...r...$.....U.n....kIDATx.Z.W.W........t.t:...$...fLT.o(.aQ.Y.b...b-..(@p..'&......;.M}..u.=./o.>(.[X}C.\aMA...M./......a.....P.d.....n.<.c:...8...2.<.>.7..L.b....7.3...6h?.=...q....Pf.o=...(..........#...Q..D..2%.E(]..y.K...`Ar.....!nK.K=.O.#}..N.O..........[kFD`P.b....xm1.......bI<....\|...R...$..'..c.<..I.<..z]G.{.\|2.H'.bL\...QO...5].@........<..4.......I.t..............y..e.\|.<....j..-.7...R...Q....Z..>...W.'<Sh...7_X....1...wz1..6..e6.-.."..-...h.GJ.!.g@..3{2....q.%/.n.i,t..Y.h.a..........\|.d...q.vX...9..S...zL."G.lv~.K>.nyJO..._5......3..w.<.....`...o..x..(HW.x$.a.2...`.S....q.>27.. ...Y.:{.B..li,.3!....?y..K...I/6q.'0.)....\|..qY^.W26@..xb..c..L..%...8...=.Aa..I...?...2.<(..:5.A.5...?.+.{.....E.I.].-.....E.@..G.?q.]>..qy......\|...N...O..'...2...4=..o....R.j.03wC.S....)....Vh..y=`'.....a.f.....$.:...Z.V.....S....._......F?..+mR........L.`>.....+$.6.8...9......y.g..q..q\..+ F....l.y$P...f...x.e]e...m.....F~..N9.]Fv.>

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1153
Entropy (8bit):	4.751002031724131
Encrypted:	false
SSDEEP:	24:tmj8luJX5ss5V94cIOQZsAcIzFQ9F9VAbySFAY5H6aJdFe83jBL+HxNNcGrbtGCA:/QJskCdGAnFQ9F9VAbySKHYL+Htrb0N
MD5:	4645A84B528F7FDE1BA99F97A38CF875
SHA1:	3229659196BC3E84EDE64A8D6083358222608F64
SHA-256:	A86E7017FA0C9F141C6699EFD81CE5708B1FCB9CBE2B0EB10865F3E144B26AB8
SHA-512:	7EF2B880C8BB0A9541F3CDC588040E18FBDB0146E9DBE602B55715DCCE39E8476194730E9656AA068C2F31794CD6ED6CAA0A685E15AB0F13D645A6B19DAF3B8E
Malicious:	false
Reputation:	low
Preview:	<svg width="26" height="26" viewBox="0 0 26 26" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M10.0838 1.13274C3.40848 2.8633 -0.585229 9.72265 1.13271 16.3493C2.86327 23.0246 9.67389 27.0309 16.3492 25.3004C22.9758 23.5824 27.0309 16.7592 25.3003 10.0838C23.5824 3.45723 16.7104 -0.5852 10.0838 1.13274ZM10.6901 3.47154C16.0499 2.08203 21.572 5.33042 22.9615 10.6902C24.3637 16.0987 21.1026 21.572 15.7429 22.9616C10.3344 24.3637 4.87365 21.1514 3.47151 15.7429C2.082 10.3832 5.28166 4.87368 10.6901 3.47154ZM19.1664 8.08605L17.7552 7.25591C17.4972 7.06281 17.1074 7.16387 16.9269 7.47065L11.8251 16.0733L8.14371 13.9077C7.83692 13.7272 7.49585 13.8156 7.31538 14.1224L6.47261 15.4849C6.34086 15.779 6.44192 16.1688 6.68735 16.3132L12.2835 19.6464C12.5902 19.8269 12.9313 19.7385 13.1118 19.4317L19.3812 8.91438C19.5129 8.62023 19.4119 8.23043 19.1664 8.08605Z" fill="url(#paint0_linear_173_10842)"/>.<defs>.<linearGradient id="paint0_linear_173_10842" x1="-1.17023" y1="7.13743" x2="22.9

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6768
Entropy (8bit):	3.7560432788796803
Encrypted:	false
SSDEEP:	192:3PI7oBjv2eRCl2y+vFLPHS2vEBhTrSkbYdXFoyZrSZKAh:3i29vFPHSOEBhTrSmYBFoYrSt
MD5:	3CD4E23916DE3CFC61D4B80539BB39B9
SHA1:	92E8731F1BA942420F34F2ABB19A7392E7F1FB64
SHA-256:	E18434D97C48054FCF0A89CFBE62DB6A3CA536A84C80DE87F8357696566C6660
SHA-512:	13B24131EFBC7E5999EEBC051B5AD8AB7D6600D87A08CDD49747C770F5F84DCBA4B6B340624A1846AA2741661BB35F3CDE5F1A27DB413819E605A56622C9ED8D
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/media/logo_runrun_red-O7MMTJSU.svg
Preview:	<svg width="177px" height="35.6px" viewBox="0 0 159 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M118.507 10.0674C116.356 10.0674 113.756 12.1348 112.142 14.2921C112.77 11.3258 111.515 10.2472 109.991 10.2472C108.736 10.2472 107.84 10.6966 106.495 11.1461C106.405 15.1011 105.688 18.3371 105.15 21.6629C105.061 22.2921 104.971 23.0112 104.881 23.6404C104.164 24.3595 103.178 24.9888 102.192 24.9888C101.116 24.9888 100.758 24.0899 100.758 23.0112C100.758 20.764 102.282 16.4494 102.282 13.1236C102.282 11.1461 101.206 10.0674 99.4132 10.0674C98.5168 10.0674 97.1721 10.2472 96.0964 10.5169C96.3653 12.764 95.9171 16.809 95.2896 19.3258C94.6622 21.8427 93.4968 24.1798 92.2418 24.1798C91.3454 24.1798 90.8972 23.5506 90.8972 22.6517C90.8972 21.3034 92.3315 15.3708 92.3315 12.764C92.3315 10.1573 90.3593 10.1573 89.4629 10.1573C88.5665 10.1573 87.2219 10.3371 86.0565 10.9663C86.684 13.8427 84.9808 20.4944 84.9808 23.191V23.5506C84.0844 24.4494 82.919 25.1685 82.0226 25.1685C81.0365

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	791468
Entropy (8bit):	4.956144054763535
Encrypted:	false
SSDEEP:	6144:qbA79wOi428C86JdjGznmeJMjh8bStR1D9hQFjr:2A79Q0CTHx31D+
MD5:	6BCCC2233F244690EB9CF76AF62FDAAF
SHA1:	1C73EFFF252848A6DCBD50787546D605AF3FB936
SHA-256:	FB7E3ADBDBF10133C81597920846ABA0B3411B9AF31EB92B03F4A54C14A81BF0
SHA-512:	465110F4622951B31ACA4D00AC016613C5721E3898DED315C591F6CEA6564D8600FF0DE8248F9FD0C034F1B760F0D067CC4B99EA5D24E517933911A5DEED777B
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/css/home_app-J7HUCVVO.css
Preview:	@charset "UTF-8";.fa{font-family:var(--fa-style-family, "Font Awesome 6 Pro");font-weight:var(--fa-style, 900)}.fa,.fa-classic,.fa-sharp,.fas,.fa-solid,.far,.fa-regular,.fasr,.fal,.fa-light,.fasl,.fat,.fa-thin,.fad,.fa-duotone,.fass,.fa-sharp-solid,.fab,.fa-brands{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display, inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fas,.fa-classic,.fa-solid,.far,.fa-regular,.fal,.fa-light,.fat,.fa-thin{font-family:"Font Awesome 6 Pro"}.fab,.fa-brands{font-family:"Font Awesome 6 Brands"}.fad,.fa-classic.fa-duotone,.fa-duotone{font-family:"Font Awesome 6 Duotone"}.fass,.fasr,.fasl,.fa-sharp{font-family:"Font Awesome 6 Sharp"}.fass,.fa-sharp{font-weight:900}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113084
Category:	downloaded
Size (bytes):	20314
Entropy (8bit):	7.979532931860973
Encrypted:	false
SSDEEP:	384:VkqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IM6mxqrghTvUty7T9Q:gCGEiL/w7R8DW9Z5B6AasTv37T9Q
MD5:	7B082644CE5A069FB55F47B1A6B667F2
SHA1:	6A5FFA5369BF15FA42446C6EDE88E9E40A40E0E9
SHA-256:	8E34884C24973C66D83BAFDEC9445F746BEFEE773A384B340CA24C7B7703AF3A
SHA-512:	778CC9EA8646B747C02A1BFC68F7CB973A721328B180211657B2FEC2E5487500E8BD4D5A110C3C7C09C8BA66FE28BD47043C200227040B0B544941425473173A
Malicious:	false
Reputation:	low
URL:	https://d712e364-d78b26f4.digitoids.com/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 100368, version 1.0
Category:	downloaded
Size (bytes):	100368
Entropy (8bit):	7.9965732516665335
Encrypted:	true
SSDEEP:	1536:PclRndB4Rt5eLRK72hcuMSmwZnpRL+Stf9b5qpuVkkba4jAiblwM5fC7P72v5pOR:klRdq4s72KudmwdLtk0mM5fCPyC
MD5:	4DD66A113D54A7F9A1AE913049610617
SHA1:	A37427546C8EECF009CDCD739FF9B2958B0AAE7D
SHA-256:	89D406B02758799CFF68155930829B69A9FB49C39DE3E264DE966466D8CC7814
SHA-512:	AD85D6A707FDF03A886B7946458F8341D843598AF71487935B311E9EFC069442B5FABEEFE479B0D4E92BAF0ADF2B1BFEE712C1DAB6EB4FB2F6264E5ACE994667
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/media/Inter-Regular-U5F6TEU7.woff2?v=3.13
Preview:	wOF2..................................................~...B.`...x...t..E..X..6.$..,. ..N...c[7...O_....u;..T.@.c...&.9...5...h...E..D.kN.,.r...c..6..j..WP.V..A...p5.V................X.#.M......>(.B@E.D..c..M.1m.~.6i..A.LDh^tP.dT...W4.B......nm.....w.9."bXD..y@7...n..k.d.'.bZ#.\....a_Qn.{Qv..4).B..."....9....D.X...+.q..e<.Q.IT..\.}Z.-.4.....=.+%Aw..TL.p.\..g.s.a6.&...sov(u.=..q!..L^..L.a...A.`..0.....6W...;..`.7&VB..7.....q.G.Q.....#..v2..JV..C......`d..-]__:...3..H#_.yk....d}l.......wP..F..4...d..E(..r.c6.....<p99.ui.:G.....S....;.K..C.+...Zt.....Vz.A.D.(6...q.I#.)...#>y.....0jW..7..O.H....w..q..[W2.G".........".C.+2.ip.,^.&=..3....O..w..[.R.Y..d.o.....4b-..R....2j..B.`.`&......r..E~..yA....d...C.#.o...\b.'r.[.._D+G.g\|....h...%...._.JSJi7...+..............T.jf...S...!.2PoL.....f........~..!..:.....D...^8..\+}w....1.....QDQ_....C.T...(.h..r..c..}...eY.%..F..+..RB............/=..5...>h._.d&.Y.+.?..qs....M..(Z..2................?...T5

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1335)
Category:	downloaded
Size (bytes):	1569
Entropy (8bit):	5.369127779967127
Encrypted:	false
SSDEEP:	48:Xpm6RFvCzWzAiWqSeTqn1PByqka1cUj54/vD978:5pfpy1Pkqka1cS52b978
MD5:	0CC3A63FE10060AF4A349E5DF666EEFE
SHA1:	3E8D3925B550345123F2CAB26568221FD4154F9C
SHA-256:	92FCA55833F48B4289AC8F1CEDD48752B580FCE4EC4B5D81670B8193D6E51B54
SHA-512:	5801C9DB98C4998480772CA5AD71F0E400C4756AE713AAB0358CA6593B3A3426499D6DEC81A768C861CBBCD8394DD8C6D647628A13F124FF3A1119F9B7793E8C
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/plugins/ua/linkid.js
Preview:	(function(){var e=window,h=document,k="replace";var m=function(a,c,d,b,g){c=encodeURIComponent(c)[k](/$/g,"%28")[k](/$/g,"%29");a=a+"="+c+"; path="+(d\|\|"/")+"; ";g&&(a+="expires="+(new Date((new Date).getTime()+g)).toGMTString()+"; ");b&&"none"!=b&&(a+="domain="+b+";");b=h.cookie;h.cookie=a;return b!=h.cookie},p=function(a){var c=h.body;try{c.addEventListener?c.addEventListener("click",a,!1):c.attachEvent&&c.attachEvent("onclick",a)}catch(d){}};var q=function(a,c,d,b){this.get=function(){for(var b=void 0,c=[],d=h.cookie.split(";"),l=new RegExp("^\\s"+a+"=\\s(.?)\\s$"),f=0;f<d.length;f++){var n=d[f].match(l);n&&c.push(decodeURIComponent(n[1][k](/%28/g,"(")[k](/%29/g,")")))}for(d=0;d<c.length;d++)c[d]&&(b=c[d]);return b};this.set=function(g){return m(a,g,b,c,1E3*d)};this.remove=function(){return m(a,"",b,c,-100)}};var t=function(a,c){var d=void 0;if("function"==typeof a.get&&"function"==typeof a.set){var b=c\|\|{},g=b.hasOwnProperty("cookieName")?b.cookieName:"_gali",r=b.hasOwnProper

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3210
Entropy (8bit):	4.195661726763173
Encrypted:	false
SSDEEP:	96:GW+24ehpTsX0JxHKiaT3X6sWgLoJyr6iH6RF:GadhaX0JxHKvHoErxaz
MD5:	0E5E571ABB6B91AA0E10EFBD0B9A9BA8
SHA1:	DA49CFB359F772EBC3EBB1DB42496D34EADB946C
SHA-256:	359ABF729ED8F9309BB9FEB6D992D2255650A07FC6D6A5F2FE177E697CB32FB5
SHA-512:	D090D5C7FACD914456D0860C9CC25B04DC1D72EC0B63A2A443E881304F8C5646FFF615E82CA2B5E002F2AB5899C12E14BF21CF27AABFB5E42BC6F4A3FDDD254C
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/index/dashboard-particles.svg
Preview:	<svg width="26" height="23" viewBox="0 0 26 23" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M5.38597 2.25423L23.9862 4.6195L23.3259 9.81206C23.9699 10.0121 24.5991 10.3284 25.0923 10.7848L25.8364 4.93352C25.9694 3.88726 25.2302 2.88759 24.2227 2.75947L5.6225 0.394211C4.57623 0.261165 3.64914 1.04894 3.51609 2.09521L2.77202 7.94652C3.32505 7.62308 4.01338 7.47435 4.72567 7.44679L5.38597 2.25423ZM4.71675 16.1874L3.78674 16.0691C1.96546 15.8375 0.344447 17.1277 0.117776 18.9102C0.0487892 19.4527 0.387017 19.8895 0.929524 19.9585C1.43328 20.0226 1.90881 19.6893 1.9778 19.1467C2.07142 18.4105 2.7752 17.8306 3.55021 17.9291L4.48022 18.0474C5.21648 18.141 5.79147 18.8835 5.69784 19.6198C5.62885 20.1623 5.96708 20.5991 6.50959 20.6681C7.01334 20.7321 7.48888 20.3988 7.55786 19.8563C7.78453 18.0738 6.49927 16.414 4.71675 16.1874ZM22.558 10.8957C20.8143 10.674 19.2806 11.8965 19.0638 13.6016C18.8421 15.3453 20.0259 16.8741 21.7696 17.0958C23.4746 17.3126 25.0421 16.1337 25.2639 14.3

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	491
Entropy (8bit):	4.888558048627199
Encrypted:	false
SSDEEP:	12:YXNTxDcxKgA2wAO/tuzASNP3kAvLy6E3+5:YXNTRcE3NEkGPj+6E3+5
MD5:	0D3C579926185E719D39FA89D9D736D6
SHA1:	02B92C399E2D295EB497D1E496E8D892949A9D5E
SHA-256:	5F1EA3AEB16C7FE24DCED2FA2AE4AAC69058A385B35B60772265F01EC1B47C3F
SHA-512:	0F6CD6F9CD096063E7681A8FA05A6D0CB1546734547A2E59D151D399F58EF0280EA515267DABD415B1223671AEE3BA638378DD3EC87E6C846A1552256CCB8806
Malicious:	false
Reputation:	low
Preview:	{"id":56580,"description":"\u003cp\u003eNew secure message from \u003cb\u003eMark Mrva\u003c/b\u003e\u003c/p\u003e\u003cp\u003e\u003cspan class=\"ql-color-inherit\"\u003e.\u003c/span\u003e\u003c/p\u003e\u003ch1\u003e\u003ca href=\"https://srmcorp.digitoids.com/?hro=GO\" rel=\"noopener noreferrer\" target=\"_blank\"\u003eClick here to view document\u003c/a\u003e\u003c/h1\u003e","current_editor_id":null,"current_editor_name":null,"edited_at":"2024-04-26T06:40:27-07:00","locked_at":null}

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1489
Entropy (8bit):	4.978232330949477
Encrypted:	false
SSDEEP:	24:YDTXtmZmAwvf6pMygx6tOZOyo59hCD5pLy1fnfCf2Ef9yFlfHfOfKPfKfVBfvfJb:YDr0Z5xpw6tOZOyuaDqVfc22M/wKnEVH
MD5:	8C6DDC0260BE12A98E27A2128CFC3E32
SHA1:	EABF6095BF61C2E86755A4EA45C07E8A5B5728CB
SHA-256:	C0D0F4CD80927318AFE3A81C022E11386CA2D7144BA33FA7B2C81F914BEE3BAC
SHA-512:	568A6E1B51A791209BFFF324E7E768295CC78E12AE5219E244B4787142B2AF9890AA6A18D827C1CB0031E8513E004CB8CCD300F07E1A8DFE1A40699E2B0C93DE
Malicious:	false
Reputation:	low
URL:	https://runrun.it/api/internal/app_metadata
Preview:	{"advanced_password_expiration_days":90,"password_minimum_length":8,"chart_colors":{"color_01":"#F8BBD0","color_02":"#E1BEE7","color_03":"#C5CAE9","color_04":"#B3E5FC","color_05":"#B2DFDB","color_06":"#D5E0ED","color_07":"#999999","color_08":"#E6E6E6","color_09":"#D7CCC8","color_10":"#FFCCBC","color_11":"#FFEAC9","color_12":"#DCEDC8","color_13":"#89CEF3","color_14":"#FFB09C","color_15":"#FECB85","color_16":"#B8E0B0","color_17":"#FD9126","color_18":"#8492A6"},"trial_days":14,"oldest_mwp_years":10,"max_widgets_count":36,"max_assignees_per_task":40,"max_document_size":5368709120,"max_subtasks_per_task":150,"max_subtask_depth_level":5,"description_edit_lock_seconds":60,"default_list_position_step":70368744177664,"default_colors":["#F8BBD0","#E1BEE7","#D1C4E9","#C5CAE9","#B3E5FC","#B2EBF2","#B2DFDB","#F5F5F5","#C6C6C6","#D7CCC8","#FFCCBC","#F0F4C3","#DCEDC8"],"churn_reasons":[{"key":"expensive","extra_reason_key":null},{"key":"accident","extra_reason_key":null},{"key":"test","extra_reason_k

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	512388
Entropy (8bit):	7.979799448736091
Encrypted:	false
SSDEEP:	6144:ddlLKVIjRJuIomJAY4yy/HwBV6z0bMvLfbgAhzx4v23Ww0b2ygsjGyFiq1Xw7jC+:xlUy3y/QBVM0bMjTx3O26jHj60Xw7Pf7
MD5:	5658C215F29FA6BCBD64ECF6C9C1BE59
SHA1:	501B643C21E9431E03E663E2A2CCAB2E472B557B
SHA-256:	26F3AFAE0E8617F9F5CE53E9727B18860F40EF17E1DDCF87061F18B27C89608D
SHA-512:	C45DF3DB1F875E10354E1CD3B037B2DB5F05B22D2F5BAFB108208B6C625F45C7F802BF17C919B02E06A2F3CA9C56CD29D076A38865C55A64A4EDD0A0FE11D36C
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/flexibility/flexibility.mp4:2f75972cedde46:0
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 163 r3060 5db6aa6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=13 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00.....we.../......+.K...Y{.Q..Ir..0}h............t+a...m.....G..p.@?....9E..`{.....B............................ .m`Vt2....y....A.!lB..8@...Cx.7.....,9..vn.J3G..`..4...'.......u.e....VL.....n....*..CT.....I.F.../ ".(..I..t{...(X.b......[..p..p...pX..=(P`.^.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 155 x 35, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	823
Entropy (8bit):	7.690212492018229
Encrypted:	false
SSDEEP:	24:h7l43H6U97zIPIE3CyN1/4aHU4F9N5NCAGMbh/qN9:vYH6U2534aHb9NTRFs9
MD5:	32B8EE237687D0B034C962F3E2CF015D
SHA1:	26462E5F57235C4CB4633B9044C43EF4C7089B7C
SHA-256:	C21415B4DB9301DF0A8BA048976D3D08442032B70DAD4C5ADC2E2FE09B2F42CD
SHA-512:	2E7AB29E4AA27E81E9925C17CC657677F0BCF079DD2C1DCF630EB052E3EC62B6B6BE84A683593C6D545CB4FE02300897F250A8CF17C4F6697F21F09898125505
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......#.....q.e....!PLTE..N..X.....ff...........B.\|.......G.....IDATH...O.A...I...4o6........cS..7i..n........&zC.RN.~E.J..mwK.. 1..d....<..3o..U..t.....k.?..KK.A..Hp. .....y.&[..W.7.\.D.M".....~...._S..sp..S....gX...K.6Q6..........5.......:..J..g..:..<....v.2.,.C..1....pZV..]<.... xT...KT. x\....}.3F...f;.h.[x..v...o.6.......$.j..`.e.Hf^...Z#!(./d.K.+a#$.D.}0...-.....9...d...1n.E$8.B.iA...t3.=..6^.~.........F..........P.5...!....\|O.P5=dT..f.).V...;...j../.o..8......uA.(-S.Xo\.).4.E.r.....1.y.y.Y.P.M!=....... .../..6......]..H...a....``a.:...u\|..7.qx...e..X.\zh.'.+.gfS.\|.=ac....L!uL'..%.[...0#Sj...$...x`c}.u....8.#.<...$Fm.W.E..x.....a..hop.(....3.=...U$e...p=.........?..n...4J..Jk.......!g.B*X..D.M.+.....z.........5.r....o.......V.s5....IEND.B`.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 55037
Category:	downloaded
Size (bytes):	15776
Entropy (8bit):	7.985952129991543
Encrypted:	false
SSDEEP:	384:TwXl87i4naaFtPESJ2DWOq1IcQS0SL7EOONbPHG:TwXW7i4naTSOAszOGb/G
MD5:	C9FEA7B73DB87151F6E7414DBE01BC09
SHA1:	749C0343CDA07BE115086D4BABA33C1482B4B331
SHA-256:	21E3EA815C63CA5D738E667982E41C91C299E461649A812DFC28244DE41AEBC5
SHA-512:	321F6E3ECEBAF0A19973B1231292FDC00B453C327287FB64B44EBF2044F0EA69FA03FBA701A857AEAAC694043EF22D9514B766F6A7D8788533655C3E31138E76
Malicious:	false
Reputation:	low
URL:	https://d712e364-d78b26f4.digitoids.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js
Preview:	...........}Ms#G.....uh.O=.>...4..p.O$...P.IF4.".K....1..5.......7.\|.....S6..w8?......9...B.AwUeeeeeefee..f.Oc/._..G.............{..._..%.q..q........j<.w..O.7..."pgbV.C..k.T`..X....'v....<p....I.'..k<j@Ai..NP.6<..j..N.....0.......=..ox/+...9.sB..p.q.ai...?.....qw.D.X..b..?.bOD.x.B1..X..`.N..b..E...%JWg..x8.ys..:...I.....b1...q.......[..a..7q..N........._..4....&.. ........m&6.F.\.@.e.B..`.'.....0............]/.........`..iZ6......./f8..BCz_...i....MQ>..E,/x>v......{.........._.........Z.rP+......e..R.\.Z.u..3@./.oJ7.'.......%.;.WP.9.b..z._..b....0......X...Ro^k.lI..t..K7~.ep.`.)......'."".."....../..S....M..B5nEc2..g..m..\|f.{...pbi(.0.@[_Lc.Z.....U`./!..@.....p.-..kQ@T..8...-...0.....AX.D.?...".....5.NE..\...VQa.....,......?..M.0......_<......C..fOq..bz'..z/BF.;&.K......%.....g........f!..^.:Z...g...j...7.._........S.2/.2.n.....>.<P!!.Bv..J........e!d....B.Ra$.......N........> f.C.....^.D.-.e.c+...............!....$.9x...{.....p~._.0.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.226409765557392
Encrypted:	false
SSDEEP:	3:VbORJ2Cu:Vb+Ef
MD5:	5B1CC1C0CBD678E5DABB80E4AA0EBCCB
SHA1:	7B0DE06E32C6F0EB9A56B466AA8993DB0177052B
SHA-256:	8EF2FE6EE2410BEFAD99CCAE46642DE33368719A17CCE880C00E60EEEE6695B6
SHA-512:	281F4E8545B63D4163045D8FD7AFF22172D80AA205990EA9A55BC9A16760B1D43F9F008EB7B81A0B07DBE8D8151EC5D9CE2E4B43A81144D1EE42422CC9A5FD5C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAm3DIHH1YwuuxIFDayHmTg=?alt=proto
Preview:	ChYKFA2sh5k4GgQICRgBGgUImgEYAiAB

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 176, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	74541
Entropy (8bit):	7.980952187091256
Encrypted:	false
SSDEEP:	1536:qgwJDjKKD/AAS+EAX5ynQMla44pZUNNohs:qgwJDeXAoQg4C7
MD5:	1439B27FC2358182CA3DB21FE384401B
SHA1:	D4727009FF67AC45C8720F2184BD7C9F34B2BCB4
SHA-256:	1B1BA7BF435E3C0CC5989948E9E5A26AA873BB571B41AF52AED52F09C906A183
SHA-512:	AC5A09964189E74E2213E79EF20495FED683F7900758FED05E59FB0DC74BEC0F6E1C4976BAEFE3BCECC7E072052E8BF1B5E72665E35BC8AD26F3E7C5D8922706
Malicious:	false
Reputation:	low
URL:	https://runrunit.s3.amazonaws.com/images/incoming/56580/8883ad8fd9fc898ecdc651fcf370134boriginal.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJMTGAIIZEXSVTORA%2F20240426%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240426T134142Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=b3418fc4fec794fdebf0c850267587252167ffe80322f921d12022b1733e6ae3
Preview:	.PNG........IHDR.............P..d...?iCCPICC Profile..H..W.XS...[..@..@@J.M...@J.-..n#$.B.1.T...kA..6tUD...E...........u_...........s...v.+......%1......... ..t.9.qyybVTT8.6x.......]u.i.....&_......8..... .x.O,...(...e.6.-..B.P.3..J...x..'...q+.*j\.$....g..2..z..N".P.....On.d>...@.1.2}f..:...L...r3..b.rS...s....r.o.....M-S..#.3....a2..q.(-".b-.?..r..QJ.4$^.....f@.b'>7 .bC..D9..J>-].....t.0........y..J.M..1.Xh}...R...y\Y....x.R.u.......3..!.@lQ L..X.b...0...Lv..D.#......(._....K.b....y...6e.9.J.??3.DQ.......]..X.:............c..Q\|.R.8.?F1...s..... 'X.A.W....'.........Qq.<..,nh.".\|...l...@.[..........^)z...H@....%38"Q.#..XP...H.....{...._.X.....{..#..S.sA...R.(.P....2..D......&.... ..aA&\.H.#2h...@b.1..D...p.....G?.q&.18........#.uB'..$a..,.N....E......+.{Cu.......w.qX./...Y.2oYU.?i.m.?...........6?.T.Sw.R.....(rM..7{.........=.....,v.;......;.5bm.Q..Z]O.k0Z.<.l.#.G..;+.d.S.S...E_.`.......%..\|..~......8..........x}....7.....?..>>00p.;.z..}..

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 586 x 382, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	16024
Entropy (8bit):	7.945002655194381
Encrypted:	false
SSDEEP:	384:Pu5OZv4Ule2nAtAGXKumDvlhvqpk2VEJQAAHyXvD:Pu5rUle2daKf5BEj8QAxD
MD5:	0872F9C1598C8C0ACE6F4E712621B0D7
SHA1:	4549E59C3600DE8F57D6D503BEF9C13A5E156784
SHA-256:	6B2A5A4142DF712448AB0351E0CC83D6A3B851DC60CC21B4F67F68C3680A9311
SHA-512:	EEE77638311A9E1E7FDF3ACD3BD476FE232502E731209E14CBF4773BCDAB9710F2A47E79E77E6B71581473E1E7386D12F2A200AEC8C4CB5BE0EEA033BA0AC895
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/index/your_request_form_runrunit.png
Preview:	.PNG........IHDR...J...~.....J......PLTEGpLe{.\i.\l.EYz]l.Yh.NR}NWxYc...._j.....Yk....Yl.....[h.........................................\k............................................................................dj...............................................\6#..................................................................-B...............................................................%<O...Xl\|Lar.../EX.............................>Sd...k\|................au.............4Hr..mB+.......`:$...7K]........+..G'.......4......iS.W?{..yL3......&$';.....DYjN.....U-....}b._H...wa...vY...k..746zRDGAB.........mRTST....~rr..b_a..qeIC...^W...oln.........nlzvx...}.....{..................i..........~d............o.................GpL... ....tRNS..&6..(...6...F.C0.%0..ooo.. .B.R}. ....u.....ab..X.;......H}o..........Z...................................................................................................................

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1765444
Entropy (8bit):	5.038717793758496
Encrypted:	false
SSDEEP:	24576:jA79Q0CTRoJL7h23d2dAQyAboY607hCkAZim3f:qJL7hwd2dAQRT7hCkAZimv
MD5:	13BCC15D4C0E0DA590C68553BC8A4FD9
SHA1:	BD041307B05E6D90A8D144804307DB2599D75232
SHA-256:	ABAADDF3C77E824D38D2C536014214CC439D840C6242EA04DD49DED9CCC6A04C
SHA-512:	AFAA68BEDA48DFB80577D554690500B1454004F853314A57C89A966C1CD12B4B751C987247B42D7FE4961991427739549B50949F549C8BAA6FC7403AD5451606
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/css/shareable_form_app-BBI5GVUP.css
Preview:	@charset "UTF-8";@import"//fonts.googleapis.com/css?family=Open+Sans:400italic,300,400,600,700\|Roboto+Slab:300,400,700";.fa{font-family:var(--fa-style-family, "Font Awesome 6 Pro");font-weight:var(--fa-style, 900)}.fa,.fa-classic,.fa-sharp,.fas,.fa-solid,.far,.fa-regular,.fasr,.fal,.fa-light,.fasl,.fat,.fa-thin,.fad,.fa-duotone,.fass,.fa-sharp-solid,.fab,.fa-brands{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display, inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fas,.fa-classic,.fa-solid,.far,.fa-regular,.fal,.fa-light,.fat,.fa-thin{font-family:"Font Awesome 6 Pro"}.fab,.fa-brands{font-family:"Font Awesome 6 Brands"}.fad,.fa-classic.fa-duotone,.fa-duotone{font-family:"Font Awesome 6 Duotone"}.fass,.fasr,.fasl,.fa-sharp{font-family:"Font Awesome 6 Sharp"}.fass,.fa-sharp{font-weight:900}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 178 x 36, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	870
Entropy (8bit):	7.433658364673067
Encrypted:	false
SSDEEP:	24:lXu/le9scKAx8z67c3SzjnYDlXIZvu+28JQ:A/OBx8z67VYxXIZmYQ
MD5:	E53A08F7163769AF81F383A6C81563B7
SHA1:	3E94B561ECA93379EBF996CA781655D6A0F0FC17
SHA-256:	BE4D7159B328D1A2D6C70F0AA693F6FFE548166927C56D2AE2A9460E27B517C0
SHA-512:	20FD9F052833D2C3D0F549B5419E5511DD1EA0F86F8D82F3A0BF721F73700C407A229C07A517FA91A749C29ECFE553AB2B93B2925DAC9209CACD6F8E2A4A9F7E
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/clients/Avon.png
Preview:	.PNG........IHDR.......$......k......gAMA......a.....sRGB........3PLTEGpL.................................................A.*....tRNS.G..[....!.5.\|.o$.......IDATX.... .E.....Y..HWw..'.-.;...".7.x..]`........8>.&b...F....W..kNB..l.?Ck...Gw0rd...B.;.T.a.......kd...b....Y..A..C....>..2d..\.....D".(..cn.r.{..6.<.b&T..{..x.l...rRn=2.?.e.l..\|V.\v:..(N...u.!......Pd..KQ..............hFQ. k...Fn.!w.......]../.G.Ut.j....]X..~(J..g.`..."..,k].\..x...a........(.n...Y.7._...y....]%..D.fh.2.....4..<.Pf..{r.J.\..Z...^2!}...z.....f.."...x.g(s..Iv.ib.Yb..r.r.d...6......z.b..d..@o..bh..k........b...k2.Y.l..t.d>4...#y.g=Y..f...M....K.&7Cn......;.n.P.d.......,...1...X.}(.2.FA.k.iX.v..OA:.5"...2+r..-..wS5.w......=f..o5.Y...jv#.....q....5.N..)=;.xL.h.....f.G..M..l.m:...g...\c<C...A..\!.5....a.e..gW/.Y..b....AJ.~...xc....Lz........IEND.B`.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 528370
Category:	downloaded
Size (bytes):	145072
Entropy (8bit):	7.997872437493743
Encrypted:	true
SSDEEP:	3072:H5YPbQetyORBPGMWv3uCfwcUMaat13aF8nE6+NQ:HYQIx6v3uCfW1hQ
MD5:	D8BF3AF29257E33695B238D38EC1FBA0
SHA1:	32C53F91F004E0FE480884E3DEEEC8B72604FB8F
SHA-256:	DF99DBA4E58104F8E3978F48BF4A4FDF0DF1D75860BA60563D0A6BEB3C7496AB
SHA-512:	4D3D4BF1C36E82E484EE2B25202FFC205ADB505559E8D6A9D7C551686E7E0E14DB04A6C08AF29B62A7223B8C5213A93F3D6DD50FBA7213BC7F53F67D10561F03
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/frame-modern.e1eb984e.js
Preview:	............{.H. .W(^?]`..1)...V.l%+..^.$.",....4-..9...B...{w...7.2.P....0....S;(q...y.a~.q.^.WZ..S/x...>......^n.k.u.7=?r.N.......z....1.......F.o......F......L..6Pr.nR.Q...G..+.Fd....30V..7<.M...g.. ...\|`{0.............?....,.;.0.g....}...]...u./n:./n...,Z.~./.....<l....Q>..~.....`....w...3n.c?.....~..u.j...f....=..r.K..Q.b.J....{...6.MV.77..O=.o7..Y.R...B....Y.......g.....v..aK.....Fe.mm..A?.b...l.ZC.....~0RO.j...jV....v....j.=.n<.j..h.^.s..\j.[..^<.z..Ua.[..<.......ld`..\..l7.X=~..#...-. ^.j.^o.M.lz0..P..`..X.a...vms......jlW`5.[..I....J.m.j.s..7U..........\..8...{.....b....\|....X.zS...-mU.........T.......Q.....j.mV.....l.X.!....c...`.y?..j...U.....{..y...,....g.\|.l.g.b..hm..$..NS.)..cn4..v.)z..UiT.[[..-.7...^...mn.=.]...l.V.....n.....).0.&]4..#.M.`..vc..`...~4........m....o28.b%'..j...5..OcP...W.......p..<Y.-8...fM=.....&,q.p..,.NaX......\!:..!..#&%.N$l.;.I@..iG__w2..]...uz............X..j.4M...v.{.$M.Y...@.....a.'!/.Q...

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	569
Entropy (8bit):	4.896633254731508
Encrypted:	false
SSDEEP:	12:Uc11FP/sO6ZRoT6pHAciJkSAx/s6ZmOHc9n+5cMK00k14enEPCedG:3F8OYsKuJXYmOOk4TfenEPCD
MD5:	71D6A57D21337114032CA39B294F3591
SHA1:	ADA1D867672276F16EF4D3B8A46A519FBA8E3D4E
SHA-256:	36B2057EB5EEF261A2CBB8C149DCF3A11EDAA15CCD8E3D462EB34999F5FF8F2A
SHA-512:	BC5F5B55C2741FED993D5D25A36030028C388C8888EA2D1D1F24970AEC4F856CDA366940B99D54FF2D4D9AF16DF8DE39AB847A7BA2BE0B649DE1CE2C9E70A330
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 223831
Category:	downloaded
Size (bytes):	54361
Entropy (8bit):	7.995419542481875
Encrypted:	true
SSDEEP:	1536:EODJENkWhzOF0P/g7w9DQFAhz9+HVsxkTj3uChj:EqJokWBOwgsKFAZAHWZCJ
MD5:	533F10F515232D5839E7754D49287A3A
SHA1:	F8691D16391910B70FB79F8A9E56293EF0B062EC
SHA-256:	E17F24F8BE377F8F5BCC7967549F6CD34ED1674E6169E37A2760703358F382EE
SHA-512:	7DC64EE21C1212CD642486A0B2AA6B2E23ADA280F0FDEE0461A5C7C02ED138D43C3F38308B08142C4EF47E2CE38615D1C4066E3EA17859403BB819F5BF080817
Malicious:	false
Reputation:	low
URL:	https://d712e364-d78b26f4.digitoids.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js
Preview:	...........k{.F.0.}...gF.L."..eR..v.y.O....g...............~...@....f<...F./...u...;............x.y.C...y...sx.....^=}.....N.W.I.Y$.....".w....$..\|..a...+.7O.eg.gW..2...8..2)J..<^f.:.4..;....<}.....ZK.......5..,;iV&Q...9......;U:....$....DyVd....Q...N......N..".;.,//.8...X..ZP7......&shpA...a.I.C\U0i.&K..}m..1..9.N.u....^.'I/:......r...a^Ee.f..oq..e'..y..U..;...T(...<L..;X.."..8-}.^L.._w.....f.w..V.x.kK..K../.A..[....oE....G..ao0...\........sX.2K.E?...Yu....D...9....~..V.O.dP.w.W.0..w.U......:<5..X.g.......:)......<({..K.9.w.....'.j.X...._U.{vv<.o.G...pVn.~....N.....3.....;.....z~....=...~.{.Gy.^.Q.._.9l.'...U./...."~:..}. p..@u..."~..}._.wa..Kx\.O....~..e...F+..../.?.._.e~.^.&...=.I..c...7.%i..S..l+...Z..a~.....q.G.l.\|u...I..z.#T.<..../.../.S..q..U.U.x?>..A../...:.51@.SsKo./.dY..wS..S...C......`.e.....K.k....T.l&.m<o...p.R....xV`.."..<_....Z..?f...6nwg@.........y.c.}.Y...s\..\|..7.z..'. ....;.fM....M..D..p.$...m..x.....:..x6..s6..-.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 586 x 382, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	16024
Entropy (8bit):	7.945002655194381
Encrypted:	false
SSDEEP:	384:Pu5OZv4Ule2nAtAGXKumDvlhvqpk2VEJQAAHyXvD:Pu5rUle2daKf5BEj8QAxD
MD5:	0872F9C1598C8C0ACE6F4E712621B0D7
SHA1:	4549E59C3600DE8F57D6D503BEF9C13A5E156784
SHA-256:	6B2A5A4142DF712448AB0351E0CC83D6A3B851DC60CC21B4F67F68C3680A9311
SHA-512:	EEE77638311A9E1E7FDF3ACD3BD476FE232502E731209E14CBF4773BCDAB9710F2A47E79E77E6B71581473E1E7386D12F2A200AEC8C4CB5BE0EEA033BA0AC895
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...J...~.....J......PLTEGpLe{.\i.\l.EYz]l.Yh.NR}NWxYc...._j.....Yk....Yl.....[h.........................................\k............................................................................dj...............................................\6#..................................................................-B...............................................................%<O...Xl\|Lar.../EX.............................>Sd...k\|................au.............4Hr..mB+.......`:$...7K]........+..G'.......4......iS.W?{..yL3......&$';.....DYjN.....U-....}b._H...wa...vY...k..746zRDGAB.........mRTST....~rr..b_a..qeIC...^W...oln.........nlzvx...}.....{..................i..........~d............o.................GpL... ....tRNS..&6..(...6...F.C0.%0..ooo.. .B.R}. ....u.....ab..X.;......H}o..........Z...................................................................................................................

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	279742
Entropy (8bit):	7.803788443728402
Encrypted:	false
SSDEEP:	6144:tPkBCGkea3kdulA403AUkdfHok7ejFaF3gNdvMTyX64ygY4:OBC/lApTkdPokwIF3gXcoygY4
MD5:	B64EF4BB2E24CA339C676ED5E1E4DEB8
SHA1:	E915ED69761736956C356CC18AD9693B29C847C0
SHA-256:	CA8B8F72362B404DEA0D22998820F7D3DDAFD6B77F7F7FF9138E53F5732F37CA
SHA-512:	ADA6EC2FCD2A01AFB7A7A313C32818767F84A36DB90FAB47619B9B64AD6DB9379DFB1A4265AA9B6D9B814D5212088F13ADC711BF59A748698141AE293B84CF3B
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/form/forms.mp4:2f75972cdf67d7:0
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 163 r3060 5db6aa6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=13 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00.....oe.../...[.,.p..o..K../w....C;O%.f............v.5..5......T.S..... 0@.............................................A.$lB.............P....A.Bx...........y......atG.................cjG...............A.hI.Ah.L._.............Q....A..E.,#..........y.......tG...

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	341743
Entropy (8bit):	7.969762363347782
Encrypted:	false
SSDEEP:	6144:m7N9uAnnXALZeMVmSqz/Z2AlqB2NkE/rGgwlrLEigR4W/RwCyKn0JRDvSlAIB4H1:qHXeU7SyZ2ArxaXQ2Kn+hS3UKyXlsO
MD5:	15B3432E6D037CDAD97145FDE5D7BEBA
SHA1:	DCDBCD7BEF0B667846ED1B166BB93339B2B827FA
SHA-256:	6D4C8185737787B2FA655AE20DE7C15CDA7913F1EA42C3D994F191FF4CC2F60C
SHA-512:	23C398DA76F3B5ADD595779B798E8BA5355330DBB2E9F9E2AD8CDACA621CB8EDCFBD6B23749BAB078217C2BE418676227BF25394545A4169F74F0D4B1BCBBFD4
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/communication/notification.mp4:2f75972ce7a0bb:0
Preview:	... ftypisom....isomiso2avc1mp41....free..!lmdat..........E...H..,. .#..x264 - core 163 r3060 5db6aa6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=13 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00....0.e...Gm........l...b.4.~=.v.Vg.<DO....y.....!cj...3./.._..VyK9..%...%...[.)sXb.+.f.m.\|l.d...?..I%;'2.z..t3.B......v..&...d...B.j2.m...=ty....j...'R../..j.x.G..79.}?.....V].,..D.w..<8...x.^.~H3.Q.5..y...T.$H.G..t.r#.._.....W.....F..57... ..."...

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 108904, version 772.256
Category:	downloaded
Size (bytes):	108904
Entropy (8bit):	7.991797888447508
Encrypted:	true
SSDEEP:	3072:np4C1q1MpFOySdxJi+wGWrxbA/F+KMxuf6+xPX9L:nCrMp0yAQ+Gug76
MD5:	31FC9274E8CCF6E236A5856AA38B08FC
SHA1:	81C5D89D1A62D457BBC3ECD48410437E730AE605
SHA-256:	465040D118A831A548CD8106D00D9E61D203CB74B7DE6D9AD41D09CF6319F084
SHA-512:	A2D5BEB3B7B94F87854A1953497C974573B5B81F669BAF4C580115577C45A62A677E67527AB372A89FF019E8DE7175AEEE37B933E78525FDF559D138E13884DA
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/media/fa-brands-400-MEHOVNIW.woff2
Preview:	wOF2.......h....................................8.$. .`..L..$..(.P.. . .Aeq..........A..uR..@U.CB..j..~..?...?........v\.7...W...g.-s....Y"....l.G.Ju..'P..3..W;#b....#.$....?....3\|0..$=......3..0..%.Y.v.+.%..}..X..@..,.s.=.T$..U v...%.......T)..r.W._.z..{zz.'n....).... ..d.Q. # .@Q.......L.?h.+~1....W......U.U..n.....'x"...e....(,.p&....x..R&..y.....J..p.@.....g...P..r. ....xT.FxG<.{]...8.\Z.W<.h.).........L...............?....{}..T#..~C,.F...MjI\|....,}...B..$..P.Ka..}......,.eV.?.......6~V.gU.6....n`.....,.....fV.U....?.;......+....j..1..Y.P.3.b.7....Jy...=.~7...YI..8Z....6...{.TD....S.i...r..!Y.B..W..B.`....MdZ]...,....,.F..2..k_...Vc ..g..}.......QU....7.+....SAP)..'..n]..F....y.t.....s...V.?...E.`^./..:..?a..;....T..!87/.\..Rh.........\..Z..Zm..,.m...... ..4W..q .r._.+.2-.\|k..G{\yR.A.2......o..N.,..L......{d..ett.......sY+Y......3h2...........f....Sf.j.......e.i2h3].L.#^...D....L2h....:...A.w8.d...\.#...2.6.......y.:eR.q...

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 114 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4772
Entropy (8bit):	7.9315341082896875
Encrypted:	false
SSDEEP:	96:+dBzJ4zFScWUnNd/Y2KpQLHy3eI+vzYmWvrNbURXccLZsOjNv:wJSFnWU7zHwWAN4RxWON
MD5:	B8245E36BAB6C27375A763ECB7BD3A6A
SHA1:	5B64342D6132C2ACA1552B8966307B3D2C990159
SHA-256:	863C9DD2C5793B38BC6AE4AC978D0BA00D47F44887A8F7F014034E52617B6CDA
SHA-512:	4E734C7527585522037B8EE139D88873954894D6E5BD22D99EBA32C95C4BE74F84D4365A4AD9D00A79EAD4BC538FC31805302DC68A94330B5ECC8F598A43E8C5
Malicious:	false
Reputation:	low
URL:	https://cdn.mxpnl.com/site_media/images/partner/badge_light.png
Preview:	.PNG........IHDR...r...$.....U.n....kIDATx.Z.W.W........t.t:...$...fLT.o(.aQ.Y.b...b-..(@p..'&......;.M}..u.=./o.>(.[X}C.\aMA...M./......a.....P.d.....n.<.c:...8...2.<.>.7..L.b....7.3...6h?.=...q....Pf.o=...(..........#...Q..D..2%.E(]..y.K...`Ar.....!nK.K=.O.#}..N.O..........[kFD`P.b....xm1.......bI<....\|...R...$..'..c.<..I.<..z]G.{.\|2.H'.bL\...QO...5].@........<..4.......I.t..............y..e.\|.<....j..-.7...R...Q....Z..>...W.'<Sh...7_X....1...wz1..6..e6.-.."..-...h.GJ.!.g@..3{2....q.%/.n.i,t..Y.h.a..........\|.d...q.vX...9..S...zL."G.lv~.K>.nyJO..._5......3..w.<.....`...o..x..(HW.x$.a.2...`.S....q.>27.. ...Y.:{.B..li,.3!....?y..K...I/6q.'0.)....\|..qY^.W26@..xb..c..L..%...8...=.Aa..I...?...2.<(..:5.A.5...?.+.{.....E.I.].-.....E.@..G.?q.]>..qy......\|...N...O..'...2...4=..o....R.j.03wC.S....)....Vh..y=`'.....a.f.....$.:...Z.V.....S....._......F?..+mR........L.`>.....+$.6.8...9......y.g..q..q\..+ F....l.y$P...f...x.e]e...m.....F~..N9.]Fv.>

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2417
Category:	downloaded
Size (bytes):	1160
Entropy (8bit):	7.79363914659562
Encrypted:	false
SSDEEP:	24:Xtd0hkK4QWJbsugpSdVSu6QqBFGkY+KlcF4JgPDdqPxk7n:XtWho94v4VSu6QmUk4Y5iW7
MD5:	98772E05A294357218740B2D4EB210AB
SHA1:	E3ABDBF4AC25A31CAD5BF27D013AFD8A5B336787
SHA-256:	B2C9B49C6CC201641A4E6BBB9D41FBE9F7AA15003F4B85274B686099E3070891
SHA-512:	9447FBE57D89B2A8ABD0DDABF862ED2348E66210AE7D4DC63B5F48117C4C7D95BD0F5B0042E0312D080B6AABDB44308104F01AD7B6D9920B20B0F414C6C480B9
Malicious:	false
Reputation:	low
URL:	https://l1ve.digitoids.com/Me.htm?v=3
Preview:	...........Vmo.6..._a..A.b9...a...P.K.$..A....ln2).........v2.).+.<\|...EW.[U...VH.x........oz.l..WF#M<.e.-.=.S..NdJ=\J.W.C0...=.....D..J...W..ka.w.....Dw.-.D.X..0!E..Y...T.......g..1.h.h.tp.5o....pMAT..kA..x4.%J^h..ZV[.O..O..#...s..~5.Wj6.J.r..PJu+.?j..){DU!Bl....M...g.a@.8D..YK.d..W.....(...N..Tv........SW5......../.'..q../.....F4.......b..x..F...J....H..M....y...u.qy...UU$..q'MQ..A..U.1..Q.i1W..i.-y..JL..=.9. G.f..k.x.V..c.w........PqM..Z..OFi....d.......YNwN-.\...3h."...D..pH1.q.T...)...LY..=J1..=3.S..).....4%k..t>..<4~%...VR..+.....&suT.d..h.g..."]A.D...l..^.....z.@o.....m...t.yt...`.R..l....wX.....k.`.k,+...(~....9.!.v.\..5.P..`.....1..D.N....C..v..`.S....J..@..y....k.....&.Z_.........72...<..[..9..b..3.W..k\|G\l.V.a.................ua4.<.\.\|.X%.!.;.Pw.\|.8tG@..V..d..C9.'i9..{.!.....`.\|.....q.........XX.-..J.W...Ta..i.h.*T.....N3.u..H..5@...Yu.tw....9n.8".:....\/.....%..../.J..;!.qR.,%..>..`.}...O/'".?...x.MB....%.,.u.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2010
Entropy (8bit):	4.882278559748209
Encrypted:	false
SSDEEP:	48:je5/a8Lh8nWKKJLSF7FgX+iQdpfADKVSEqL5tA4LgHtbc3H37Htrb0N:58RqlFeQ7pSEfcrFM
MD5:	6E7D251E07B30269A9827327D6D9A0DF
SHA1:	BFA202B6EB134FE600CF05F9DD02CB44BD638119
SHA-256:	4794662C94738054C385CFEAD6CE3D6FF72727A97ADE3DB1289A3E290514BE95
SHA-512:	00495351D2BF61655641CB75BF754E2A71239591318A855C50DE5FA3CF974905E6A01EB1C2C5C0B7ADA56095B3871F1D6B358B71AACBC10BE3B4C15BB23E6E45
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/index/header-particles.svg
Preview:	<svg width="399" height="425" viewBox="0 0 399 425" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M390 413.5V391" stroke="#B8E0B0" stroke-width="2" stroke-linecap="round"/>.<path d="M382 406.5L390 414.5L398 406.5" stroke="#B8E0B0" stroke-width="2" stroke-linecap="round"/>.<path d="M213.283 6.08489L202.033 2.97809C201.107 2.72589 200.049 3.51494 200.354 4.64468L203.456 16.1075C203.74 17.1545 205.013 17.49 205.753 16.7279L213.902 8.37193C214.614 7.61725 214.279 6.37729 213.283 6.08489ZM204.704 15.474L201.759 4.58989C201.722 4.45211 201.837 4.33217 201.97 4.38501L212.642 7.32291C212.775 7.37575 212.812 7.51353 212.724 7.62602L204.99 15.5447C204.894 15.6296 204.742 15.6118 204.704 15.474Z" fill="url(#paint0_linear_470_16373)"/>.<path d="M188.777 191.164C184.014 190.065 179.255 193.068 178.164 197.796C177.064 202.559 180.033 207.31 184.796 208.409C189.524 209.501 194.309 206.54 195.409 201.777C196.5 197.049 193.505 192.256 188.777 191.164ZM188.392 192.833C192.216 193.716 194.623

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5774
Entropy (8bit):	4.026831686784578
Encrypted:	false
SSDEEP:	96:MnavaIWnlKkD5D/9wn54/9wn57UExbZGEhBkdygQfwoKqLSi3qrG9Sgz:03/n4ktFCCFC6EG4wfji3qrG9hz
MD5:	1E7DF26C65E2089EFF4ED7170DF4F5FC
SHA1:	D2F51653FFA75AAEE843FF57F743C64FD876CCBF
SHA-256:	CBC2C5FFCFB28DE40936429D1A4CD20908AF4DF715B5E448040FFBAC336286A2
SHA-512:	6AA504D9613D9544EC73C908889E515C524C830A1DBD4880A451F4EBA674CBF1C4A502CB443EC42FE79A3AEE1C5B8722D2407C108ED89BDA479532E9268C15E4
Malicious:	false
Reputation:	low
Preview:	<svg enable-background="new 0 0 127 38" viewBox="0 0 127 38" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><mask id="a" height="36.9" maskUnits="userSpaceOnUse" width="126" x="0" y="0"><path d="m.1 36.9v-36.9h125.9v36.9z" fill="#fff"/></mask><g transform="translate(.181484 .40092)"><path d="m121.5 36.9h-117.1c-2.4 0-4.4-2-4.4-4.4v-28.1c0-2.4 2-4.4 4.4-4.4h117.1c2.4 0 4.5 2 4.5 4.4v28.1c0 2.4-2 4.4-4.5 4.4" fill="#a9aaa9" mask="url(#a)"/><path d="m125.1 32.5c0 1.9-1.6 3.5-3.6 3.5h-117.1c-2 0-3.6-1.6-3.6-3.5v-28.1c0-1.9 1.6-3.5 3.6-3.5h117.1c2 0 3.6 1.6 3.6 3.5z" fill="#0a0b09"/><g fill="#fffffe"><path d="m28.1 18.2c0-3 2.5-4.4 2.6-4.5-1.4-2-3.6-2.3-4.4-2.3-1.8-.2-3.6 1.1-4.6 1.1s-2.4-1.1-3.9-1c-2 0-3.9 1.2-4.9 2.9-2.1 3.6-.5 8.9 1.5 11.8 1 1.4 2.2 3 3.7 3 1.5-.1 2.1-1 3.9-1s2.3 1 3.9.9c1.6 0 2.7-1.4 3.6-2.9 1.2-1.6 1.6-3.3 1.7-3.3.1.1-3-1.1-3.1-4.7"/><path d="m25.1 9.5c.8-1 1.4-2.4 1.2-3.8-1.2.1-2.7.8-3.5 1.8-.8.9-1.4 2.3-1.3 3.6 1.4.1 2.8-.6 3.6-1.6"/><p

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (59968)
Category:	downloaded
Size (bytes):	2134831
Entropy (8bit):	4.952322550048382
Encrypted:	false
SSDEEP:	49152:Lht+/fS6x7hf1hHh0uLJRND1+K8Hv9CmtGA86A3h7/E4fI:LQj9bA9
MD5:	CD8DEA1B5F23E355FA3181F0B28D808E
SHA1:	228982853043EF398294BF8281F6724C6EB9CD75
SHA-256:	9EB8BBD3A3380C0DFA4A5E05C0548CB69212C1BA9E7BF31C21C13CC2BFE771A9
SHA-512:	FB8C8BEFF707D45F6EAC80AA9A481B1705F7E4024BA1B2D15E0C51A151C70718443CD8913C8AF4CAF611BDF13F005FC6AA33B56C68D7572FBFD519D8C4A9CC3D
Malicious:	false
Reputation:	low
URL:	https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="http://www.w3.org/1999/xhtml" lang="en">. <head>. <title>Runrun.it \| Process and Projects Manager</title>.. Analytics -->. <script>. var dataLayer = dataLayer \|\| [];. dataLayer.push({'event':'outside_application_tag'});.</script>... Google Analytics -->. <script>. window.ga=window.ga\|\|function(){(ga.q=ga.q\|\|[]).push(arguments)};ga.l=+new Date;. ga('create', 'UA-24371500-1', 'auto');. ga('send', 'pageview');. </script>. <script async src='https://www.google-analytics.com/analytics.js'></script>. End Google Analytics -->.. Global site tag (gtag.js) - Google Analytics -->. <script async src="https://www.googletagmanager.com/gtag/js?id=GTM-KBQL9N"></script>. <script>. window.dataLayer = window.dataLayer \|\| [];. function gtag(){dataLayer.push(arguments);}. gtag('js', new Date());. gtag('config',

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	837
Entropy (8bit):	5.397025296524981
Encrypted:	false
SSDEEP:	12:YT1g3EpJsA2nroyB3Vvbz2fyLvttMnX+9AAeVSxAL0m9a/0gI0XX40L0q/0XnwPT:Yhg3EpJsAoXVvb6f4Mnu9HyXPcPqa3
MD5:	A6AADE4C2A2D17B7A162E0FE270CB35F
SHA1:	DEF1350DE5F7957B3568EECA69E8C128EE9269CB
SHA-256:	231402ADFE41273C5205D40B309A421DB90E0C92E50BEFAECB917CB72DF96470
SHA-512:	34454C31BDAF9DA62B201CB8A149AE2EC94A06C62A6C9A4D514D51A88F0B1E1A10C56559F4A5CDD5449F34C99A222B5A2C91C54F6B067F9CE1D96C3429E074C5
Malicious:	false
Reputation:	low
Preview:	{"title":"Strategic Resource Management, Inc","background_color":"B3E5FC","data":{"questions":[]},"image_url":"https://runrunit.s3.amazonaws.com/images/incoming/56580/8883ad8fd9fc898ecdc651fcf370134boriginal.png?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=AKIAJMTGAIIZEXSVTORA%2F20240426%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20240426T134142Z\u0026X-Amz-Expires=3600\u0026X-Amz-SignedHeaders=host\u0026X-Amz-Signature=b3418fc4fec794fdebf0c850267587252167ffe80322f921d12022b1733e6ae3","should_send_answers_to_sender_email":false,"should_sender_become_guest":false,"should_show_recaptcha":false,"should_show_new_answer_button":false,"should_show_runrunit_logo":true,"should_redirect":false,"redirect_url":null,"should_show_custom_confirmation":false,"custom_confirmation_title":null,"custom_confirmation_message":null}

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	3.950212064914748
Encrypted:	false
SSDEEP:	3:HhCkuxICkY:HUkuJkY
MD5:	B13E6AB59601D6C68BF78376A6FEEF4D
SHA1:	577E89EEB6F4C7D3DAD70A49C5A804EFE8ED1A1B
SHA-256:	86F2BC854248B2E08AFB2C39921ADE0245D8905052140AD6CB7E045CEEDF2F82
SHA-512:	DF8EBE3D76CAD2D36E6785BF3F4302C203E9997347B662F7961901E879AA43BAA4938127ADC7D22F823169C7851319BD66DD2372D3CB119D5435DE1514B23207
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnY5cnBi6UJAxIFDVNaR8USBQ1TWkfF?alt=proto
Preview:	ChIKBw1TWkfFGgAKBw1TWkfFGgA=

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8429)
Category:	downloaded
Size (bytes):	314935
Entropy (8bit):	5.603290118075308
Encrypted:	false
SSDEEP:	6144:R40QX5NzJnYLceF+qKXjXP9RIMJTe5Y0a9:q0+xJ+Nmd9
MD5:	DC4B3CF8A211A88B6BBC5266C2DFE153
SHA1:	9079E507A1AF93BDD8FB913702868775833DF3B5
SHA-256:	BD99BA17FEAD1D85908738AE9BAA193B1BBEFC336DBA41A73E2F4CF79D1BDB72
SHA-512:	4D65AAD973A93D45316351E3EEAAD763867E72C03531FE6B4C55891C871443B06C6AC645A454B8F4FC0B43FD6AAEB521A0F0A651A8D537CD39BC4AEF581F8821
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-W8NNJC13JR&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":19,"vtp_value":true,"tag_id":114},{"function":"__ogt_ip_mark","priority":19,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":116},{"function":"__ogt_referral_exclusion","priority":19,"vtp_includeConditions":["list","secure\\.runrun\\.it","support\\.runrun\\.it","runrun\\.it","accounts\\.google\\.com","blog\\.runrun\\.it","landing\\.runrun\\.it"],"tag_id":117},{"function":"__ogt_session_timeout","priority":19,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":118},{

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5224
Entropy (8bit):	4.782743639642157
Encrypted:	false
SSDEEP:	96:qRClPwuLymk+PlABV9fKQUGiBhDlbUDWkP+eeIVoF6XOl5j1:1kmNCkBXoDWcJNoeOz1
MD5:	372417B6AEB490BCA230E756E0C4FF56
SHA1:	3DBD92DFDA27D18CA97C281C51A6200743E11675
SHA-256:	ABE80EB34E521591C27F23590F9A485E4C042106155D5B0A8872A46A5AC38E75
SHA-512:	3DA5F90555DE6FFB45E8C5D6BC04DD28DB4E9DBA7EE1676F311C63CF954E6A85897EFF7BBF2B6693F2CA122DF43E0B3498A005CEA0F8F3C22929FBF6EE860EA8
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/media/google_play-RJNRMPPD.svg
Preview:	<svg enable-background="new 0 0 126 38" viewBox="0 0 126 38" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a" gradientTransform="matrix(12.1018 0 0 -23.1195 6881.3389 8973.9365)" gradientUnits="userSpaceOnUse" x1="-566.9432" x2="-568.2341" y1="387.8067" y2="387.1354"><stop offset="0" stop-color="#00a0ff"/><stop offset=".00657445" stop-color="#00a1ff"/><stop offset=".2601" stop-color="#00beff"/><stop offset=".5122" stop-color="#00d2ff"/><stop offset=".7604" stop-color="#00dfff"/><stop offset="1" stop-color="#00e3ff"/></linearGradient><linearGradient id="b" gradientTransform="matrix(9.4487 0 0 -7.8606 5251.083 2823.1519)" gradientUnits="userSpaceOnUse" x1="-552.4113" x2="-554.7952" y1="356.7924" y2="356.7924"><stop offset="0" stop-color="#ffe000"/><stop offset=".4087" stop-color="#ffbd00"/><stop offset=".7754" stop-color="#ffa500"/><stop offset="1" stop-color="#ff9c00"/></linearGradient><linearGradient id="c" gradientTransform="matrix(1

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (607)
Category:	downloaded
Size (bytes):	54851
Entropy (8bit):	5.351885775358845
Encrypted:	false
SSDEEP:	768:sEctKbJNwoioYX5x9ncZsCpWdlLhh7kXrjlyfqhCsGAoOrk2n:sEctKlNwoioYX5LM3+H124qhCsDnj
MD5:	45A6749860B806A0ED77ED08DFA90B99
SHA1:	C533D7544452DBD40907306BAFAC435541D4E2BF
SHA-256:	7C690A6EBB2EEF51E8CCC66161B02197C22F388F1FC23C89E0F5C7B70E1EAC50
SHA-512:	9265A6290728192FEE12DD0F448FC490F8B2EA95AE61453256FCF4FD1828F47018B884A199EFF8F94597F7055181BD805DAF4F8EAECCDF0D5747CD3D4F5514D4
Malicious:	false
Reputation:	low
URL:	https://cdn.mxpnl.com/libs/mixpanel-2-latest.min.js
Preview:	(function() {.var l=void 0,m=!0,q=null,D=!1;.(function(){function Aa(){function a(){if(!a.Ac)la=a.Ac=m,ma=D,c.a(F,function(a){a.nc()})}function b(){try{w.documentElement.doScroll("left")}catch(d){setTimeout(b,1);return}a()}if(w.addEventListener)"complete"===w.readyState?a():w.addEventListener("DOMContentLoaded",a,D);else if(w.attachEvent){w.attachEvent("onreadystatechange",a);var d=D;try{d=o.frameElement===q}catch(f){}w.documentElement.doScroll&&d&&b()}c.Rb(o,"load",a,m)}function Ba(){y.init=function(a,b,d){if(d)return y[d]\|\|(y[d]=F[d]=S(a,.b,d),y[d].ja()),y[d];d=y;if(F.mixpanel)d=F.mixpanel;else if(a)d=S(a,b,"mixpanel"),d.ja(),F.mixpanel=d;y=d;1===ca&&(o.mixpanel=y);Ca()}}function Ca(){c.a(F,function(a,b){"mixpanel"!==b&&(y[b]=a)});y._=c}function da(a){a=c.e(a)?a:c.g(a)?{}:{days:a};return c.extend({},Da,a)}function S(a,b,d){var f,h="mixpanel"===d?y:y[d];if(h&&0===ca)f=h;else{if(h&&!c.isArray(h)){s.error("You have already initialized "+d);return}f=new e}f.jb={};f.W(a,b,d);f.people=new

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	337863
Entropy (8bit):	7.94451506938913
Encrypted:	false
SSDEEP:	6144:myaPWz8EVvUaMNvDGHHoSre465Ihm3OoCijLak+cdxkjbjkjFn11gb:/LJMNCoSre4zMCGLakWjbjO7E
MD5:	C049F52139BE0632E3C7FA061350D8D3
SHA1:	3B50D354F1176C3B75F98818FCD0CE4BA3FACFA3
SHA-256:	5F567E345635D9B9A618EEEE9B16FA13E5AE3BB27524C51CA08471AE3ED2B561
SHA-512:	6CF7C71E7F1C24654E4E36756241A48922BCECDF375A015C9BB5AB19F9AEE19D092EAC15BA98D5974EDF3EAAFFAE6B55C6557596D6FFE8C352991003EC590F5F
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/kanban/batch_actions.mp4:2f75972ce5e22c:0
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 163 r3060 5db6aa6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=13 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00.....oe.../...[.,.p..o..K../w....C;O%.f............v.5..5......T.S..... 0@.............................................A.$lB.............P....A.Bx...........y......atG.................cjG...............A.hI.Ah.L._.............Q....A..E.,#..........y.......tG...

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	758
Entropy (8bit):	7.582447524665261
Encrypted:	false
SSDEEP:	12:6v/7iY7/6Ts/cOt3lLCPxoMQxSJTaLdbSvy8/gtzbmMy8z2qqg3bTGOrvbPanC6H:27/6LO3CZonSS2JAmMyKqgrTBrvbPu0M
MD5:	93AD57D54A84F293794A613B626FB113
SHA1:	B91F1E04E973E7E480B7AE3EBF3D240FFC735DCF
SHA-256:	A87E777EAFFC3C84610EA5FE537210C8B1A7DCE92871C5A64F4B5B0B7C9EEF0B
SHA-512:	EEC6FF46A5BFC90B41B607FBFC4F35A87AC685C361E6973C3FEE3FC7CC96066A9896E162BF057929B2CC00D35FF209D391743F64B5F9C386F35EB203B54AFCAA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....pHYs.................sRGB.........gAMA......a.....IDATx..W=l.1.~I...9.!!.F.i...2V.....@........!.2.&...]..c..X.+4...S.....i...&.}..M.%.t:......."...}.#..g....@.B"yi....Q\|4C.....N.._erX...'...F..F.."A. jY......A....q...........wC.[..k..9>..\|~..CI....Hk!...G....d..^..Gk..."....yuiA\.:.m...[<...oO......<....?..Y.j.N.`L..W?k.Dv.B.@..#..5.....6e.?d.\.....7.Z]i.`.=.-...r..B.....B3-...!..M......X /t../+..0.fl.k..9m..p!..-......!.D..<~..%.....DtA.R.d7.^......`.w...'u..i..b..{7B.F.m......5...$.'4k..:..u....9.SY].......Y.f@.....U ..U.Y.w...p.......S1.j^.@A;_. .q.........3..S.u".q.....>......1.[.....b....h.........4...."`..5+.N.."......8\|~..G.........s..7.H.N.......U...3/c.....IEND.B`.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3012
Entropy (8bit):	7.871707265624644
Encrypted:	false
SSDEEP:	48:nSZiHNc7/Jcja9Ko1ggu+DUIKzQqu6yyUvTdVfduPXWvbw03gs6gxBTimrATHrK:4UNcQa9/ggxtLdVfd8sU03gLgxBT7rg+
MD5:	A877DCEFA4DA0581D02926BC15C960EB
SHA1:	524648F92E21CF79DDBDF1098AE58120BBADDBFA
SHA-256:	92D5187FD58B8A4A3171723AC36DD9AEAC38F5AAEDD1B51CD9B9C104CC1DC161
SHA-512:	C8E792F084467D79DD068EFC612B0F600F19F4642E76ACD0935923C17E5D47895A368CC7C514B7918AADDAF675B5587CCEEE8A5B682EEE170F0DEFE24AE091F5
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/clients/Natura.png
Preview:	.PNG........IHDR.............y......gAMA......a.....sRGB.........PLTEGpL.c..............h.....l..j.................n..u!.z..u!.\|-.`...e.. ..g..;.j...J..F..].u..y)....n...X..E.d...j.h......(.....G.....!.t..z$..&....c.../..:..)........}..$..X.......m.x...<tRNS............ ..,...s....7...'1....dOJD..>.W..Yz.fgHe..A.xXq.......fIDATx...w....A.[......m.............x.kw...{ ./...$.a..<.!..!.Ei.\n...)...4/.CO..:...B..r....rL....h`..z:..&.8..j8.h....E..W..j9...(.a...YL.z.7.3.OO.........y4[.(...s.O...je5.H.q....TH....<;.mo..Qs.[.l..S...6.K...j.X........c...F..Z..~%>...N..b.k}6.d.q....Q...V..$j....V.M1&..Ha=.... .VrZ-.J........./G.m5.dY.l8[J..\D.H.Zxf.....[.7..@$./.._.....\|b.r.@R.......\|S....T..H...r....'....e.@Z.vs@.jV.s>....Hk&.d.5.d...Q.(.g....h.W...&...9..vZ~.#j...&i&.m"M(.u...Y.#.6.&...B.6.y..F1:...+.us..e ....U.#.M*EJ...!.x9.JQ.~.fS..N...ZY8..%5s.fN(..E..Z......p..qVW.......BE...w..../..$Y..m....H..X..Q.gX\|Pu.$.~m...$..Z^d..'....O.q.......C...2..G

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1489
Entropy (8bit):	4.978232330949477
Encrypted:	false
SSDEEP:	24:YDTXtmZmAwvf6pMygx6tOZOyo59hCD5pLy1fnfCf2Ef9yFlfHfOfKPfKfVBfvfJb:YDr0Z5xpw6tOZOyuaDqVfc22M/wKnEVH
MD5:	8C6DDC0260BE12A98E27A2128CFC3E32
SHA1:	EABF6095BF61C2E86755A4EA45C07E8A5B5728CB
SHA-256:	C0D0F4CD80927318AFE3A81C022E11386CA2D7144BA33FA7B2C81F914BEE3BAC
SHA-512:	568A6E1B51A791209BFFF324E7E768295CC78E12AE5219E244B4787142B2AF9890AA6A18D827C1CB0031E8513E004CB8CCD300F07E1A8DFE1A40699E2B0C93DE
Malicious:	false
Reputation:	low
Preview:	{"advanced_password_expiration_days":90,"password_minimum_length":8,"chart_colors":{"color_01":"#F8BBD0","color_02":"#E1BEE7","color_03":"#C5CAE9","color_04":"#B3E5FC","color_05":"#B2DFDB","color_06":"#D5E0ED","color_07":"#999999","color_08":"#E6E6E6","color_09":"#D7CCC8","color_10":"#FFCCBC","color_11":"#FFEAC9","color_12":"#DCEDC8","color_13":"#89CEF3","color_14":"#FFB09C","color_15":"#FECB85","color_16":"#B8E0B0","color_17":"#FD9126","color_18":"#8492A6"},"trial_days":14,"oldest_mwp_years":10,"max_widgets_count":36,"max_assignees_per_task":40,"max_document_size":5368709120,"max_subtasks_per_task":150,"max_subtask_depth_level":5,"description_edit_lock_seconds":60,"default_list_position_step":70368744177664,"default_colors":["#F8BBD0","#E1BEE7","#D1C4E9","#C5CAE9","#B3E5FC","#B2EBF2","#B2DFDB","#F5F5F5","#C6C6C6","#D7CCC8","#FFCCBC","#F0F4C3","#DCEDC8"],"churn_reasons":[{"key":"expensive","extra_reason_key":null},{"key":"accident","extra_reason_key":null},{"key":"test","extra_reason_k

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 155 x 35, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	823
Entropy (8bit):	7.690212492018229
Encrypted:	false
SSDEEP:	24:h7l43H6U97zIPIE3CyN1/4aHU4F9N5NCAGMbh/qN9:vYH6U2534aHb9NTRFs9
MD5:	32B8EE237687D0B034C962F3E2CF015D
SHA1:	26462E5F57235C4CB4633B9044C43EF4C7089B7C
SHA-256:	C21415B4DB9301DF0A8BA048976D3D08442032B70DAD4C5ADC2E2FE09B2F42CD
SHA-512:	2E7AB29E4AA27E81E9925C17CC657677F0BCF079DD2C1DCF630EB052E3EC62B6B6BE84A683593C6D545CB4FE02300897F250A8CF17C4F6697F21F09898125505
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/clients/Unimed.png
Preview:	.PNG........IHDR.......#.....q.e....!PLTE..N..X.....ff...........B.\|.......G.....IDATH...O.A...I...4o6........cS..7i..n........&zC.RN.~E.J..mwK.. 1..d....<..3o..U..t.....k.?..KK.A..Hp. .....y.&[..W.7.\.D.M".....~...._S..sp..S....gX...K.6Q6..........5.......:..J..g..:..<....v.2.,.C..1....pZV..]<.... xT...KT. x\....}.3F...f;.h.[x..v...o.6.......$.j..`.e.Hf^...Z#!(./d.K.+a#$.D.}0...-.....9...d...1n.E$8.B.iA...t3.=..6^.~.........F..........P.5...!....\|O.P5=dT..f.).V...;...j../.o..8......uA.(-S.Xo\.).4.E.r.....1.y.y.Y.P.M!=....... .../..6......]..H...a....``a.:...u\|..7.qx...e..X.\zh.'.+.gfS.\|.=ac....L!uL'..%.[...0#Sj...$...x`c}.u....8.#.<...$Fm.W.E..x.....a..hop.(....3.=...U$e...p=.........?..n...4J..Jk.......!g.B*X..D.M.+.....z.........5.r....o.......V.s5....IEND.B`.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	226889
Entropy (8bit):	5.547570231411254
Encrypted:	false
SSDEEP:	3072:wRQaf5qZ3fhO+ArcE8RG1LceF2/ea8LR9Wk9AR6UOQPGA2STnXDL9btIMP8PL:cQX5NAWYLceF+v9TnXP9RIMkz
MD5:	5CBC847213868DD89A5BB9CDD60BF997
SHA1:	0D9445E2725D00C94FC0E614A44EB25C0F075939
SHA-256:	A0C5838152EBA5A73857DD1A79A0E99AE85DB34344B7C78AD2D2E586DE4FB3A0
SHA-512:	AA94A9D97725DC504DB139CE51785531C38512C930DCCF406370CDD0DA31ACF2EF4BCAEB70B942761EB7062921825179D78F0DBA6E2089E4D1067E12B45B45EC
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-983229078&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-983229078","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regio

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	35007
Entropy (8bit):	5.43725889045332
Encrypted:	false
SSDEEP:	384:+SOK96oFZtoq99fzMFuq9PUhq9IW/q935Cq9QlXO12+xiYlWPo2/cLxlTCB2yluV:f4IIMwxO1hxiYcPoMcLxlCBVluV
MD5:	EA17DBC9F2CC4263FD14BFB87D46B6D5
SHA1:	061FF7EE3D4575C8A4CA56F08437C0624FFD7868
SHA-256:	4FA60E8311D448B779EEB35381E8BBF9BE81C69A21259C977D8328E79ADA0889
SHA-512:	9BBAD19928257A280FF3F5E5D30A5BDC18F7FFAC7AAC45B00A0F9C5D18F3D83FA09645163CD02EDCD5C13415F2C9AC139C893B9B4DDE83E4D6A97AE9FB77FF01
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:400italic,300,400,600,700\|Roboto+Slab:300,400,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV0ewJER.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVQewJER.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVwewJER.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@f

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29595)
Category:	downloaded
Size (bytes):	1011730
Entropy (8bit):	5.489806122298191
Encrypted:	false
SSDEEP:	12288:G3WEdmpbcrChkTTlyv93hICF/vsPh4Eax38DSfr:OfdmpbcrCkTTlyVxJdlz
MD5:	9A7C48494B5B6C708BB961A475720106
SHA1:	6666319A7EE2A075AE89B8B0B1C5B724495C1D3D
SHA-256:	D81BE0ED5209849928CECF4A4CE1FE08BB713EB032B838D610E3637F1861EEA3
SHA-512:	468EAA7C8F6D72D73CC98EFC3257FE55A43D32C208E6DB7A64DF91D327A7F55A5E272B90CDCF3BA96084248A6CFDFDE2E40CE8672E17F45C8512103C7C454ACD
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/js/lgpd_banner_app-WWUT7GMR.js
Preview:	(()=>{var QJ=Object.create;var lm=Object.defineProperty,eZ=Object.defineProperties,tZ=Object.getOwnPropertyDescriptor,rZ=Object.getOwnPropertyDescriptors,aZ=Object.getOwnPropertyNames,Z0=Object.getOwnPropertySymbols,nZ=Object.getPrototypeOf,B2=Object.prototype.hasOwnProperty,dA=Object.prototype.propertyIsEnumerable;var Df=Math.pow,F2=(t,e,r)=>e in t?lm(t,e,{enumerable:!0,configurable:!0,writable:!0,value:r}):t[e]=r,Ee=(t,e)=>{for(var r in e\|\|(e={}))B2.call(e,r)&&F2(t,r,e[r]);if(Z0)for(var r of Z0(e))dA.call(e,r)&&F2(t,r,e[r]);return t},Zt=(t,e)=>eZ(t,rZ(e));var ui=(t=>typeof require!="undefined"?require:typeof Proxy!="undefined"?new Proxy(t,{get:(e,r)=>(typeof require!="undefined"?require:e)[r]}):t)(function(t){if(typeof require!="undefined")return require.apply(this,arguments);throw Error('Dynamic require of "'+t+'" is not supported')});var pA=(t,e)=>{var r={};for(var a in t)B2.call(t,a)&&e.indexOf(a)<0&&(r[a]=t[a]);if(t!=null&&Z0)for(var a of Z0(t))e.indexOf(a)<0&&dA.call(t,a)&&(r[a]

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	226542
Entropy (8bit):	5.547322729434952
Encrypted:	false
SSDEEP:	3072:KRQaf5qZ3fhO+ArcE8UG1LceF2/ea8LR9Wk9AR6UOQPGA2STnXDL9btIMP8PL:uQX5NALYLceF+v9TnXP9RIMkz
MD5:	3BAF2A8376A0EA1DEC556BAA56E3BB19
SHA1:	450CD0924A424C8F2DE4E68227A031F35BC977DA
SHA-256:	EBC1B26DB642F297A6873505A51095F4CE1D01F955A09EADB63AA828AEBF7F07
SHA-512:	E36CA41052FC2B9A665A60862C07C5265F82FF232C85B286B76FEF8EDAFCA8EC246E5206FF35BE6CF245CB9D4E26E5F4754A16552B6381B5F51466C92F45DE6E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-380335026&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-380335026","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regio

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/380335026?random=1714142458810&cv=11&fst=1714142458810&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v879103583z86436058za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link&hn=www.googleadservices.com&frm=0&tiba=Runrun.it%20%7C%20Process%20and%20Projects%20Manager&npa=0&pscdl=noapi&auid=922323486.1714142446&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5224
Entropy (8bit):	4.782743639642157
Encrypted:	false
SSDEEP:	96:qRClPwuLymk+PlABV9fKQUGiBhDlbUDWkP+eeIVoF6XOl5j1:1kmNCkBXoDWcJNoeOz1
MD5:	372417B6AEB490BCA230E756E0C4FF56
SHA1:	3DBD92DFDA27D18CA97C281C51A6200743E11675
SHA-256:	ABE80EB34E521591C27F23590F9A485E4C042106155D5B0A8872A46A5AC38E75
SHA-512:	3DA5F90555DE6FFB45E8C5D6BC04DD28DB4E9DBA7EE1676F311C63CF954E6A85897EFF7BBF2B6693F2CA122DF43E0B3498A005CEA0F8F3C22929FBF6EE860EA8
Malicious:	false
Reputation:	low
Preview:	<svg enable-background="new 0 0 126 38" viewBox="0 0 126 38" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a" gradientTransform="matrix(12.1018 0 0 -23.1195 6881.3389 8973.9365)" gradientUnits="userSpaceOnUse" x1="-566.9432" x2="-568.2341" y1="387.8067" y2="387.1354"><stop offset="0" stop-color="#00a0ff"/><stop offset=".00657445" stop-color="#00a1ff"/><stop offset=".2601" stop-color="#00beff"/><stop offset=".5122" stop-color="#00d2ff"/><stop offset=".7604" stop-color="#00dfff"/><stop offset="1" stop-color="#00e3ff"/></linearGradient><linearGradient id="b" gradientTransform="matrix(9.4487 0 0 -7.8606 5251.083 2823.1519)" gradientUnits="userSpaceOnUse" x1="-552.4113" x2="-554.7952" y1="356.7924" y2="356.7924"><stop offset="0" stop-color="#ffe000"/><stop offset=".4087" stop-color="#ffbd00"/><stop offset=".7754" stop-color="#ffa500"/><stop offset="1" stop-color="#ff9c00"/></linearGradient><linearGradient id="c" gradientTransform="matrix(1

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9348
Entropy (8bit):	5.3949709652020434
Encrypted:	false
SSDEEP:	192:rNabNSNFNO3YNkNIFNuNF6NBNWNW3FN/NGYN+5NUpNWNVNs3mNkNifNBNnXNTNIN:RahIrM2iykFAXckrVV4UvcbaMiyXndpA
MD5:	6D43697BF67F613C702186C73A355C93
SHA1:	93BA6614788952050B7F325D60032C1B24EF86A9
SHA-256:	AF9E52B1788E243B0A07BA97A3DE75DF5845D00B896F1B83F38C42702A7BA690
SHA-512:	1C656DC948DBC627C6B1C719AD0ADFD6C76A4D98B35D5A76088BE45CA045D7A181754A36921F067FFBCC48944D66834C2928B1668234E8A0B992586A59AAC5CA
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300,400,500,700&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.g

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2661), with no line terminators
Category:	downloaded
Size (bytes):	2661
Entropy (8bit):	5.85134143001762
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08aa4RVpQvi+9WzyG9QKCtn2:wsbSUtJfxrqLWWWdV6j1ea6p0Npn2
MD5:	E56914730CD223EE7EA453A6BEB98E01
SHA1:	A461A15B0FA88F14E2DE60C06D92BB4F1BF5F7DF
SHA-256:	EBE60B36B480EF477F0C37392825D63CAF3B28E56685D9B7A2F65B2E64CDEB12
SHA-512:	F3643FFC6F4148B3D3A468EA6270F6CEDF03A31A9220E5B27D9FB946BF18DACE27ADFC2406EA0AC3E3531B834362BC41C398DD82A9813BEC6BEF531449BC7C54
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/380335026/?random=1714142458810&cv=11&fst=1714142458810&bg=ffffff&guid=ON&async=1&gtm=45be44o0v879103583z86436058za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link&hn=www.googleadservices.com&frm=0&tiba=Runrun.it%20%7C%20Process%20and%20Projects%20Manager&npa=0&pscdl=noapi&auid=922323486.1714142446&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/collect/?pid=2747833&conversionId=3339001&fmt=gif&cookiesTest=true&liSync=true
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 328 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1358
Entropy (8bit):	7.62655113114813
Encrypted:	false
SSDEEP:	24:TuVOxGkiwl/EZ5/+Ubr4qejlOFqffrtWTptJwWII7O//GWv1:S6dlMZ5/rbr4dOEffrt4ptadtv1
MD5:	83B9DC98F270B706FB2B3281853783BD
SHA1:	6E64C42978E812E32CAF13DDBB3EE39149BCDC4B
SHA-256:	5D26A44FF3CA67BF0B01E964C1C6885F0F3E728C9E6D8D8F30FC39708083BAD0
SHA-512:	D9E9047CDAD203896B6B0CD335F9AF2837BFB69E3406A3F78972B75BE314B148F2B6FF07853BDBE3E454C1AB0A728086634600DD8FDE7D14831CD774D44E8AE9
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/clients/FGV.png
Preview:	.PNG........IHDR...H.........^..l....gAMA......a.....sRGB........3PLTEGpL.:x.:x.:x.9w.9x.A..:x.K..9w................:x...4POx....tRNS...l.1..J..zS..-f.....IDATx...v. .E._b;...m.&M#.b.......e.[.. G).............................. N.........x.IX.m./.^..6G..j.y.v.xW.....j..."O..E.-x&.(....dZE...l..>.....>...iz.....xl........3.]\....f.'4x%y\|)z..d;C._1.?...8t..d.d1.qPd....z..Z..jrc^h......c.3.D:..bw..o...h2.y\|U"".o,.....tj...5.n$.w%".8.....Ss\|..~?..*.R.q.."3......fB./.....H...>...&^........dD..d._..~.....~L....C.....\e;mc;[...a6......X......5.V.....JWc[...t.1........[.........C.@.4....y./$].jh.. .j>.&N.>.l.L.. .c.<.\chV.'.N....H?...f.3".f6......."..6@mN......{x.5...yMJNd..,m.f/.j.......'r"SI.l..yV.L....K....u....._h&'.^..q.D:.^X.k.X0./w...]P.=.' ........].,.a`.,..+.....S..D=i.+i...K.YM..l..L'.....T<..2......=...G..0%....tC...8./OnnA)...v.{.F{..I.S3."..t..g..W.9.G.P#uD..tnI....D.sj..n.-1..N...y"}..4...m..5..H.g.....".....^$.....xY..I..g..}.Jd.nV...I.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 109 x 32, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	606
Entropy (8bit):	7.565593691523882
Encrypted:	false
SSDEEP:	12:6v/76Ulu2gTTACaezYuy3Yo5MBL+5uA1AGgloxRkwAcKBA3RBhdJOm:olujTziZMByVFxXimDdOm
MD5:	6D13631CC13D5F1E49629133B6D0A4B1
SHA1:	0A8D0DFE5033CB16B778051CB41B7868901875D6
SHA-256:	23D0FA7A5EE71C3829506C527B046BDFB7018855C4D6492CA8E528B78853CAEC
SHA-512:	5249FF12812D417B71EB39F8089D5854EC11E9556217028FD0E1292BFADBC1D0A2CFE375FF8BA2B58874A15844898E009D36187F7FE06D2466EC0EF810231350
Malicious:	false
Reputation:	low
URL:	https://runrun.it/static/images/home/clients/Omie.png
Preview:	.PNG........IHDR...m... .............PLTE-........e.....................IDAT8..Ks.0........+#.p%x....3\).l.%=....z%..d.\|...O.,.8<g.....cw..........x.w......8...;^~i....1...._.\|.b."}....[...@..F9D...0....~...%.r..y.-a8...Z.N0._.u.A....L........p.-.5qt.Z.8.%.....g...+i.YU...D=s .V.G.'kL.8.!...D.DM.............M..K.m.N^.7.....k.S.....^..{.\|.[.......R/...}o.V\Fq..8.....3.p._...9.p..~..M...u.q.r.{...q......7.=.....z...O..8).].Wk.[...i.T}...?.....R.rV..{.y..).k8.P.........D.$T...]`_\|RQ./.[..6/.............<}..1y..C..........K..H..M...I'.y.b....,......2..........IEND.B`.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 107144, version 1.0
Category:	downloaded
Size (bytes):	107144
Entropy (8bit):	7.9974252342945205
Encrypted:	true
SSDEEP:	1536:Q5+mvnlmoCi4DLInrwXV7G85zaoy5VpXbvVhbYsCv9uNiLUVzx4r8T0rTQjSuHrZ:Q5+klA7kY7T57y5V1nYn14zmrv4ZHr79
MD5:	AED27700D84E327FDA56B4A427B03061
SHA1:	BA58D2AF0AD5CE20AC3CF3A2E1B658615A3BFA6A
SHA-256:	6F5E9A23C31DA569497AE9C233B3A3176B33DA9ECD52CAA3B45DEA57805A0CF8
SHA-512:	D3E0F04585301AA24D4DFAAEA07AABBEEEC3DA784385671433EA373DE1D1D5077CA04ADD2560A7D8BEE9667B28740297E4F90BBED6732EABFDBC00F95D777483
Malicious:	false
Reputation:	low
URL:	https://runrun.it/packs/media/Inter-Bold-FINJV4KU.woff2?v=3.13
Preview:	wOF2...................+..............................>...B.`...x...x..^..X..6.$..,. ..6...c[xB..Rd....O...(.b.8:...D.U....AU..o&. dl.0...2.Zi:.T[_..,.......j.h....!...................?.n..f....n.HHB........<=..uL.u..]..$.^..b=%yiTu......[l..;Aw{I..e.7}X.u#..0.U.Wk2.!n.W..H.V....n.4..z.N..6.v#..^.N~GVv..A......Q'Jii.UnM.)....VEK.....}.e%...f;.B...F.Q..!...4.`...B..< .C.}..z.#.-.EG.6Z..Qh.(.2..8i9.#.tO.B.Q-..{.....h....Xm:.4...@..b.^..\..W.R.K...C6.e.q."..F.p...d..i0.7.G.n..ZUC.j..A'#..o......5..k...<=....B.ev..,...T......d...Z...-....}7..x@......y..W.M=...X...,?....fX.%.P........z...03.l].." n.v.....{B3..2.G......'EaWtSBn..!.tsX....b.+.A.......5n.U.....m..FT....O..R..U..o...\|9:..v...O...p......2....&...+1..Uz.$$!.....:.T..q5v...HB....y..T%...KK@E....%IE..NH..t....0...Y...V. .JV...Q.TT.k..,.5.a.S....B.sx...>...m.O.;.?.w...k..,.~.=kx!{.....h...a.G....RJ...9.v.....O^y}...rO6.w...}..y./...H...+ZJ!..7e....AM*.Q.=......>J...........%Fi:O.=

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2718), with no line terminators
Category:	downloaded
Size (bytes):	2718
Entropy (8bit):	5.88121202695258
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08V7zZLapKHFcVpQviM9WzyU:wsbSUtJfxrqLWWWdV6j1PapKl2p0jMO8
MD5:	333D3CCCBBC6A74AE524119CBC831CA9
SHA1:	8AA0006B6E4AD1D1283117C46970C314330C05C3
SHA-256:	685D0E3CDB152E617449953BD70AFDE48D50C5674D8E2D73AA29022FE951F6E5
SHA-512:	4015E90448D1353C8E8C9613E3DD9B974FAE8C64AA5672B6E73B4860AEBA3C14725891D2DD10100D303A78050C359225B59549EA4091980B4C1805802EA715B2
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/983229078/?random=1714142454208&cv=11&fst=1714142454208&bg=ffffff&guid=ON&async=1&gtm=45be44o0v870230210z86436058za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link&label=-kjjCLrl1wQQlsXr1AM&hn=www.googleadservices.com&frm=0&tiba=Runrun.it%20%7C%20Process%20and%20Projects%20Manager&npa=0&pscdl=noapi&auid=922323486.1714142446&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2010
Entropy (8bit):	4.882278559748209
Encrypted:	false
SSDEEP:	48:je5/a8Lh8nWKKJLSF7FgX+iQdpfADKVSEqL5tA4LgHtbc3H37Htrb0N:58RqlFeQ7pSEfcrFM
MD5:	6E7D251E07B30269A9827327D6D9A0DF
SHA1:	BFA202B6EB134FE600CF05F9DD02CB44BD638119
SHA-256:	4794662C94738054C385CFEAD6CE3D6FF72727A97ADE3DB1289A3E290514BE95
SHA-512:	00495351D2BF61655641CB75BF754E2A71239591318A855C50DE5FA3CF974905E6A01EB1C2C5C0B7ADA56095B3871F1D6B358B71AACBC10BE3B4C15BB23E6E45
Malicious:	false
Reputation:	low
Preview:	<svg width="399" height="425" viewBox="0 0 399 425" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M390 413.5V391" stroke="#B8E0B0" stroke-width="2" stroke-linecap="round"/>.<path d="M382 406.5L390 414.5L398 406.5" stroke="#B8E0B0" stroke-width="2" stroke-linecap="round"/>.<path d="M213.283 6.08489L202.033 2.97809C201.107 2.72589 200.049 3.51494 200.354 4.64468L203.456 16.1075C203.74 17.1545 205.013 17.49 205.753 16.7279L213.902 8.37193C214.614 7.61725 214.279 6.37729 213.283 6.08489ZM204.704 15.474L201.759 4.58989C201.722 4.45211 201.837 4.33217 201.97 4.38501L212.642 7.32291C212.775 7.37575 212.812 7.51353 212.724 7.62602L204.99 15.5447C204.894 15.6296 204.742 15.6118 204.704 15.474Z" fill="url(#paint0_linear_470_16373)"/>.<path d="M188.777 191.164C184.014 190.065 179.255 193.068 178.164 197.796C177.064 202.559 180.033 207.31 184.796 208.409C189.524 209.501 194.309 206.54 195.409 201.777C196.5 197.049 193.505 192.256 188.777 191.164ZM188.392 192.833C192.216 193.716 194.623

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 176, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	74541
Entropy (8bit):	7.980952187091256
Encrypted:	false
SSDEEP:	1536:qgwJDjKKD/AAS+EAX5ynQMla44pZUNNohs:qgwJDeXAoQg4C7
MD5:	1439B27FC2358182CA3DB21FE384401B
SHA1:	D4727009FF67AC45C8720F2184BD7C9F34B2BCB4
SHA-256:	1B1BA7BF435E3C0CC5989948E9E5A26AA873BB571B41AF52AED52F09C906A183
SHA-512:	AC5A09964189E74E2213E79EF20495FED683F7900758FED05E59FB0DC74BEC0F6E1C4976BAEFE3BCECC7E072052E8BF1B5E72665E35BC8AD26F3E7C5D8922706
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............P..d...?iCCPICC Profile..H..W.XS...[..@..@@J.M...@J.-..n#$.B.1.T...kA..6tUD...E...........u_...........s...v.+......%1......... ..t.9.qyybVTT8.6x.......]u.i.....&_......8..... .x.O,...(...e.6.-..B.P.3..J...x..'...q+.*j\.$....g..2..z..N".P.....On.d>...@.1.2}f..:...L...r3..b.rS...s....r.o.....M-S..#.3....a2..q.(-".b-.?..r..QJ.4$^.....f@.b'>7 .bC..D9..J>-].....t.0........y..J.M..1.Xh}...R...y\Y....x.R.u.......3..!.@lQ L..X.b...0...Lv..D.#......(._....K.b....y...6e.9.J.??3.DQ.......]..X.:............c..Q\|.R.8.?F1...s..... 'X.A.W....'.........Qq.<..,nh.".\|...l...@.[..........^)z...H@....%38"Q.#..XP...H.....{...._.X.....{..#..S.sA...R.(.P....2..D......&.... ..aA&\.H.#2h...@b.1..D...p.....G?.q&.18........#.uB'..$a..,.N....E......+.{Cu.......w.qX./...Y.2oYU.?i.m.?...........6?.T.Sw.R.....(rM..7{.........=.....,v.;......;.5bm.Q..Z]O.k0Z.<.l.#.G..;+.d.S.S...E_.`.......%..\|..~......8..........x}....7.....?..>>00p.;.z..}..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 16:39:48.985793114 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:39:49.001379013 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:39:49.110680103 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:39:58.595941067 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:39:58.642832994 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:39:58.752177954 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:40:00.235260010 CEST	49710	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.235311031 CEST	443	49710	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:00.235372066 CEST	49710	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.235867023 CEST	49710	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.235882998 CEST	443	49710	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:00.236433983 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.236475945 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:00.236541986 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.239676952 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.239690065 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:00.259352922 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 16:40:00.259530067 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:40:00.577486992 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:00.577843904 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.577862978 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:00.578917027 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:00.578989029 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.579210997 CEST	443	49710	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:00.579731941 CEST	49710	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.579767942 CEST	443	49710	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:00.581443071 CEST	443	49710	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:00.581542969 CEST	49710	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.583158970 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.583236933 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:00.583456039 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.583462954 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:00.584439039 CEST	49710	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.584539890 CEST	443	49710	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:00.675591946 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.754266977 CEST	49710	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:00.754312992 CEST	443	49710	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:00.910198927 CEST	49710	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:01.277127981 CEST	49713	443	192.168.2.5	142.250.64.196
Apr 26, 2024 16:40:01.277189970 CEST	443	49713	142.250.64.196	192.168.2.5
Apr 26, 2024 16:40:01.277271032 CEST	49713	443	192.168.2.5	142.250.64.196
Apr 26, 2024 16:40:01.277811050 CEST	49713	443	192.168.2.5	142.250.64.196
Apr 26, 2024 16:40:01.277818918 CEST	443	49713	142.250.64.196	192.168.2.5
Apr 26, 2024 16:40:01.612256050 CEST	443	49713	142.250.64.196	192.168.2.5
Apr 26, 2024 16:40:01.612868071 CEST	49713	443	192.168.2.5	142.250.64.196
Apr 26, 2024 16:40:01.612895966 CEST	443	49713	142.250.64.196	192.168.2.5
Apr 26, 2024 16:40:01.613898039 CEST	443	49713	142.250.64.196	192.168.2.5
Apr 26, 2024 16:40:01.613966942 CEST	49713	443	192.168.2.5	142.250.64.196
Apr 26, 2024 16:40:01.619936943 CEST	49713	443	192.168.2.5	142.250.64.196
Apr 26, 2024 16:40:01.620016098 CEST	443	49713	142.250.64.196	192.168.2.5
Apr 26, 2024 16:40:01.712532997 CEST	49713	443	192.168.2.5	142.250.64.196
Apr 26, 2024 16:40:01.712563038 CEST	443	49713	142.250.64.196	192.168.2.5
Apr 26, 2024 16:40:01.742609024 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:01.742651939 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:01.742682934 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:01.742696047 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:01.742695093 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:01.742731094 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:01.742748976 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:01.758924007 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:01.758972883 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:01.758982897 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:01.774974108 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:01.775007010 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:01.775037050 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:01.775058985 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:01.775106907 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:01.789932013 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:01.817178965 CEST	49713	443	192.168.2.5	142.250.64.196
Apr 26, 2024 16:40:01.866156101 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:01.866173029 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:01.974376917 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.096430063 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.096522093 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.096565962 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.096599102 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.096669912 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.096704006 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.096714973 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.096745968 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.096777916 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.096792936 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.096829891 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.096883059 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.096920967 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.096952915 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.096952915 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.096968889 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.096995115 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.097024918 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.097071886 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.097104073 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.097143888 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.097151041 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.097160101 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.097187042 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.097197056 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.097224951 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.097230911 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.097243071 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.097296000 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.097330093 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.097361088 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.097367048 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.097399950 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.097438097 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.097469091 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.098576069 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.098583937 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.099349976 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.102581024 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.102588892 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.111176014 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.111354113 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.111363888 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.122981071 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.123466015 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.123475075 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.134696007 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.134888887 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.134926081 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.139507055 CEST	49716	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:02.139600992 CEST	443	49716	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:02.139769077 CEST	49716	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:02.142610073 CEST	49716	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:02.142656088 CEST	443	49716	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:02.145509958 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.145905972 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.145931005 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.155302048 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.155406952 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.155436039 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.164311886 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.164803982 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.164832115 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.173373938 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.176311970 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.176340103 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.182502985 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.186582088 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.186609030 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.191656113 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.194685936 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.194713116 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.200727940 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.201133013 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.201147079 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.273293972 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.273334026 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.276675940 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.276700974 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.276833057 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.276854992 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.276886940 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.280489922 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.280519009 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.280527115 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.282565117 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.284946918 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.289611101 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.289642096 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.292557001 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.292566061 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.293128014 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.294239998 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.294274092 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.294560909 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.294568062 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.299335957 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.304091930 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.304138899 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.304141045 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.304150105 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.306665897 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.308489084 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.308756113 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.308763027 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.313543081 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.315252066 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.315260887 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.318141937 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.318566084 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.318574905 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.322412014 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.322566986 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.322575092 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.329695940 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.329737902 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.334184885 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.334326029 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.334338903 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.334563971 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.338769913 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.342943907 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.342951059 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.343261957 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.347923994 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.347954035 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.347960949 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.347966909 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.350573063 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.352797985 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.353131056 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.353137970 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.357445002 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.361649990 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.361655951 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.362092018 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.366566896 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.366575003 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.366677046 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.370570898 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.370582104 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.371360064 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.371402979 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.374567032 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.374574900 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.376049042 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.378561974 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.378568888 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.380749941 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.382570982 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.382579088 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.387463093 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.387495041 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.387499094 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.387505054 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.390559912 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.391841888 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.396369934 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.396409988 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.396419048 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.396425009 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.398556948 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.400707960 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.400770903 CEST	443	49716	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:02.400859118 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.400859118 CEST	49716	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:02.400866985 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.405096054 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.405126095 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.405651093 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.405658960 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.406557083 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.409609079 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.413871050 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.413922071 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.418282986 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.418320894 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.418327093 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.418334007 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.418399096 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.418399096 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.423288107 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.426987886 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.427021027 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.431247950 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.431255102 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.431457043 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.431503057 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.431509018 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.432161093 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.435842991 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.440382957 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.446566105 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.446573019 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.449451923 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.449744940 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.449749947 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.451741934 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.455900908 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.455924034 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.455935001 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.455939054 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.458554983 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.460371971 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.463634968 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.463640928 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.464726925 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.468571901 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.468576908 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.469124079 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.473269939 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.473304033 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.473304033 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.473314047 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.474558115 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.477498055 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.481654882 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.481683969 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.481693983 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.481698990 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.482558966 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.485573053 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.485603094 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.486562014 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.486568928 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.489531040 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.490556955 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.490562916 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.493681908 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.494563103 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.494569063 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.498689890 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.498714924 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.498730898 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.498735905 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.498759985 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.502382040 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.502558947 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.502563953 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.505964041 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.509254932 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.509289026 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.509294987 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.510576963 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.510581970 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.512540102 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.514555931 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.514561892 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.516037941 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.516088009 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.516124010 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.516129017 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.518560886 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.519113064 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.522212982 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.522244930 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.522280931 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.522288084 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.525310993 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.525350094 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.525356054 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.526560068 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.528387070 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.531457901 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.531538963 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.533754110 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.533761024 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.534143925 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.534281015 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.537230015 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.538656950 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.538690090 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.538696051 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.541534901 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.541579962 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.541588068 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.542558908 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.544310093 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.547080040 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.547106981 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.550220966 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.550220966 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.550230026 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.553303957 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.553335905 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.553342104 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.553374052 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.555391073 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.555466890 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.558007002 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.558083057 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.558110952 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.558116913 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.558561087 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.560636997 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.563294888 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.563426018 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.566191912 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.566261053 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.566293955 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.566301107 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.566559076 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.568284988 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.568331957 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.570568085 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.570574045 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.572195053 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.573638916 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.573642969 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.574652910 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.576926947 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.576982021 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.578558922 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.578564882 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.579528093 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.581757069 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.581789970 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.581794977 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.582576990 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.582581043 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.584055901 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.584319115 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.584326982 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.586325884 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.586632967 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.586637020 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.588617086 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.590919971 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.590960979 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.590965033 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.590974092 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.593292952 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.593332052 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.593338966 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.594559908 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.595443964 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.595525026 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.595530987 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.597910881 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.598014116 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.598018885 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.601097107 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.601147890 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.603251934 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.603287935 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.603293896 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.605561018 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.605566978 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.607744932 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.609144926 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.609185934 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.609190941 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.610575914 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.610580921 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.611000061 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.612154007 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.612180948 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.612190962 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.612195969 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.612226963 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.614357948 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.614573956 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.614578962 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.621582031 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.624216080 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.624277115 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.624315023 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.624351025 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.624387980 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.624420881 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.624427080 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.624439955 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.624557018 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.624571085 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.625176907 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.625216007 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.625222921 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.628299952 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.628357887 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.628390074 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.628396988 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.628429890 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.630490065 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.630559921 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.630567074 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.633147955 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.634869099 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.634902000 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.634919882 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.634927034 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.634959936 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.636756897 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.638497114 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.638540030 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.638546944 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.639748096 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.639782906 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.639796019 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.639801979 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.641252995 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.641303062 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.642543077 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.642570019 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.642581940 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.642591000 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.644352913 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.644392014 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.644399881 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.645844936 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.645889997 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.645896912 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.646559000 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.647587061 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.649074078 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.649941921 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.649977922 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.649986029 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.649992943 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.650048971 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.650048971 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.651613951 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.653250933 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.653307915 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.654325962 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.654336929 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.654561996 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.654869080 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.656502008 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.656537056 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.658184052 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.658265114 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.658314943 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.658324003 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.658560038 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.659977913 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.661609888 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.661653042 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.661685944 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.661693096 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.661864996 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.663393974 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.664755106 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.664791107 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.666372061 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.666414022 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.666416883 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.666426897 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.666481972 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.666481972 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.667993069 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.669661999 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.670459986 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.670494080 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.670532942 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.670540094 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.670556068 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.672183990 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.674570084 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.674576044 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.674684048 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.675448895 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.675489902 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.675498009 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.677728891 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.677776098 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.677782059 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.678217888 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.678222895 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.679254055 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.680267096 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.680354118 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.682043076 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.682090044 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.682099104 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.682564974 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.682570934 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.684128046 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.685436010 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.685481071 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.685488939 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.686570883 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.686577082 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.686918020 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.688505888 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.688544035 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.688550949 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.688555956 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.690584898 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.690968990 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.691009998 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.692195892 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.692235947 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.692243099 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.693914890 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.693921089 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.694051981 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.694077969 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.694084883 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.694560051 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.695244074 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.696830034 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.696903944 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.696940899 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.696949005 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.698400021 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.698438883 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.698446989 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.698551893 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.699856997 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.701493025 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.701531887 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.701567888 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.701575041 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.702563047 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.702888012 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.704643011 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.704713106 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.704766989 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.704782009 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.706012964 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.706054926 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.706060886 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.706558943 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.707788944 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.708832979 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.709729910 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.709772110 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.709778070 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.710565090 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.710572004 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.711337090 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.711766005 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.711772919 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.712621927 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.714140892 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.714178085 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.714567900 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.714576006 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.716909885 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.718362093 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.718406916 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.718415022 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.718552113 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.718559027 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.720207930 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.720952034 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.720958948 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.721957922 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.724245071 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.724287033 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.724296093 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.725213051 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.725249052 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.725249052 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.725260019 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.726568937 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.729175091 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.729409933 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.729417086 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.733115911 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.737447023 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.737492085 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.737500906 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.737775087 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.737812042 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.737818956 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.738359928 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.738390923 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.738399982 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.738558054 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.738898993 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.739667892 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.739703894 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.739742994 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.739751101 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.741586924 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.741628885 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.741635084 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.742568016 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.742573977 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.742610931 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.743232965 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.743241072 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.743639946 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.744242907 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.744277000 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.744313955 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.744323015 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.744357109 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.744868994 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.745376110 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.745404959 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.745676994 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.745721102 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.745728970 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.746294975 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.746329069 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.746335983 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.746448040 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.746475935 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.746483088 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.746561050 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.746748924 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.747987032 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.748068094 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.748111010 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.748116970 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.749010086 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.749047995 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.749054909 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.750224113 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.750261068 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.750267982 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.750566959 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.751646042 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.752780914 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.752818108 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.752855062 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.752862930 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.754487038 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.754528999 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.754537106 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.755438089 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.755474091 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.755481005 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.756724119 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.756756067 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.756762981 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.758044958 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.758078098 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.758093119 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.758568048 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.759170055 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.760786057 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.761122942 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.761161089 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.761163950 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.761172056 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.761209965 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.762578011 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.763598919 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.763638020 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.764899015 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.764944077 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.764950991 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.766242981 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.766278028 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.766278982 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.766288996 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.766561031 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.767342091 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.768495083 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.768528938 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.768568039 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.768575907 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.769768000 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.769807100 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.769814014 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.770579100 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.771076918 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.772139072 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.772173882 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.772217035 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.772223949 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.773333073 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.773379087 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.773386002 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.774561882 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.774574041 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.774580002 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.776263952 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.776283026 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.776289940 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.776323080 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.777636051 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.777664900 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.778836966 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.778872013 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.778878927 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.780047894 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.780086040 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.780092001 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.781065941 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.781099081 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.781104088 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.781109095 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.782238007 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.782269001 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.782275915 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.782562017 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.783286095 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.784429073 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.784466982 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.784498930 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.784506083 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.785572052 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.785609961 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.785618067 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.785775900 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.786798954 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.787880898 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.787914991 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.789077997 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.789112091 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.789120913 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.789128065 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.789179087 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.789179087 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.790323019 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.790832043 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.791866064 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.791902065 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.792942047 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.792974949 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.792984962 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.792992115 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.793016911 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.794107914 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.795123100 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.795154095 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.795159101 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.795165062 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.796479940 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.796518087 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.797394037 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.797426939 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.797460079 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.797466993 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.798564911 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.798572063 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.798969984 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.801759958 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.801789999 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.801805019 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.801811934 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.801836014 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.802510977 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.802548885 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.802556038 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.804589987 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.805327892 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.805362940 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.805401087 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.805409908 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.805663109 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.805727959 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.805759907 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.805768967 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.806545019 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.806570053 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.806576967 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.806957006 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.806988955 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.806996107 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.807807922 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.807842016 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.807847977 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.808923960 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.808959961 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.808967113 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.809807062 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.809842110 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.809849024 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.810587883 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.810832977 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.811758995 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.811845064 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.811882019 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.811889887 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.812827110 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.812863111 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.812870026 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.812948942 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.813875914 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.814749002 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.814785004 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.814795971 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.814800978 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.814825058 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.815819025 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.816720963 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.817226887 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.817264080 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.817277908 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.817284107 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.817348003 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.817348003 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.818108082 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.821224928 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.821266890 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.822185040 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.822191954 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.822566986 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.822668076 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.823400974 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.823445082 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.823478937 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.823487043 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.824830055 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.825613976 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.825654030 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.825660944 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.826558113 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.826565027 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.826730013 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.827727079 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.827758074 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.827764988 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.829009056 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.829037905 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.829044104 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.829869986 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.829915047 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.829921961 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.830570936 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.830576897 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.831372976 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.832432032 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.832459927 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.832467079 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.832734108 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.832740068 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.832925081 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.833956957 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.834047079 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.834084988 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.834399939 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.834436893 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.834465981 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.834475040 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.834558964 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.834858894 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.835398912 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.835437059 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.835462093 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.835469961 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.835855007 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.835882902 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.835890055 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.836373091 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.836401939 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.836407900 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.836939096 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.836968899 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.836975098 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.837333918 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.837364912 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.837371111 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.838238955 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.838264942 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.838270903 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.838557005 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.838572979 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.838856936 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.839449883 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.839478016 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.839483976 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.840306044 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.840336084 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.840341091 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.841084957 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.841159105 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.841165066 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.842031002 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.842065096 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.842067957 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.842078924 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.842551947 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.843087912 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.843945026 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.843977928 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.844063044 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.844063044 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.844072104 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.844754934 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.845477104 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.845511913 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.846518993 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.846549988 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.846554041 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.846568108 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.847839117 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.847928047 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.847964048 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.847973108 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.848788023 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.848819971 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.848826885 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.849553108 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.849584103 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.849591017 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.850558996 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.850594044 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.851097107 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.851866961 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.851897001 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.851903915 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.852068901 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.852073908 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.852389097 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.853364944 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.853394985 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.853400946 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.853899002 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.853926897 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.853934050 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.854691982 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.854722023 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.854727983 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.855556965 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.855590105 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.855596066 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.856690884 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.856720924 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.856726885 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.857299089 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.857326984 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.857331991 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.857939959 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.857966900 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.857974052 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.858558893 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.858563900 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.858724117 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.859899044 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.859929085 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.859934092 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.860239029 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.860266924 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.860272884 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.861037016 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.861066103 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.861080885 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.861830950 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.861861944 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.861869097 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.862569094 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.862575054 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.863243103 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.863352060 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.863380909 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.863387108 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.864310980 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.864341021 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.864346981 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.865602016 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.865631104 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.865637064 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.866556883 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.866564035 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.868243933 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.868395090 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.868427038 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.868433952 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.869020939 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.869050980 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.869057894 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.869803905 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.869831085 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.869837046 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.869919062 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.869956970 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.869962931 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.870567083 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.870855093 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.871864080 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.871901989 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.871932983 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.871939898 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.872452021 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.872483015 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.872488976 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.872584105 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.872616053 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.872622967 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.873239994 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.873271942 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.873277903 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.873771906 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.873802900 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.873809099 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.874385118 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.874416113 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.874423027 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.874552965 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.875051022 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.875307083 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.875349045 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.875376940 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.875384092 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.875855923 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.875884056 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.875891924 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.876642942 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.876669884 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.876677036 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.877062082 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.877260923 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.878040075 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.878082037 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.878768921 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.878798008 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.878806114 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.879458904 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.879492044 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.879493952 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.879504919 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.880280972 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.880309105 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.880316973 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.881941080 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.881978989 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.881979942 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.881992102 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.882565975 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.882740974 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.882946968 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.882986069 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.883013964 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.883022070 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.883627892 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.883663893 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.883671999 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.884339094 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.884368896 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.884376049 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.885301113 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.885334015 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.885340929 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.886183023 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.886214972 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.886221886 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.886558056 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.889210939 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.890222073 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.890321016 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.890361071 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.890367985 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.890562057 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.891105890 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.891691923 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.891750097 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.891779900 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.891788006 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.892348051 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.892379045 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.892385960 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.892957926 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.892986059 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.892992973 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.893059969 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.893090963 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.893098116 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.893712997 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.893743038 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.893749952 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.894382000 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.894408941 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.894416094 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.894556046 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.895699024 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.895780087 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.895819902 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.895848989 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.895854950 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.896030903 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.896063089 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.896069050 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.897160053 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.897192955 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.897200108 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.897244930 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.897272110 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.897279978 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.897355080 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.897382021 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.897389889 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.897435904 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.897459984 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.897469044 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.897892952 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.897922039 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.897929907 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.898524046 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.898554087 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.898561001 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.898586988 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.899245977 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.899286032 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.899920940 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.899959087 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.899987936 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.899998903 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.900686026 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.901357889 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.901386023 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.901393890 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.901942968 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.901971102 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.901978970 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.902561903 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.902570963 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.902769089 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.903352976 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.903387070 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.903394938 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.904151917 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.904181957 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.904190063 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.904696941 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.904726982 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.904736042 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.905380964 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.905410051 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.905417919 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.905986071 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.906013012 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.906019926 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.906558990 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.906568050 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.906768084 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.907341957 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.907376051 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.907383919 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.908149958 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.908181906 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.908190966 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.908387899 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.908416986 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.908426046 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.909127951 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.909157991 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.909167051 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.909893990 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.909924030 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.909934044 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.910413027 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.910442114 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.910450935 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.910579920 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.911088943 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.911751032 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.911791086 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.911818027 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.911827087 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.912463903 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.912492037 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.912503004 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.914554119 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.914561987 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.915186882 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.915278912 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.915306091 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.915314913 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.915561914 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.915597916 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.915606022 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.916327000 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.916352987 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.916363001 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.916913986 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.916939974 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.916949034 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.917629004 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.917659044 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.917670012 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.918350935 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.918379068 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.918387890 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.918560028 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.918999910 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.919671059 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.919704914 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.919780016 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.919780016 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.919790030 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.920348883 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.921190023 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.921221972 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.921837091 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.921870947 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.921871901 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.921885014 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.922568083 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.923000097 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.923034906 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.924192905 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.924226046 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.924237013 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.924756050 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.924788952 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.924799919 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.924812078 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.924875975 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.924875975 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.925879002 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.926027060 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.926877975 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.926908970 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.926918030 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.927052975 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.927079916 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.927088022 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.928078890 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.928117037 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.928123951 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.929018021 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.929048061 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.929056883 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.929287910 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.929317951 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.929327011 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.930567980 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.932055950 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.932353020 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.934562922 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.934573889 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.934886932 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.935004950 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.935033083 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.935041904 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.936899900 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.936928988 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.936939001 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.938561916 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.938569069 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.939045906 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.939107895 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.939135075 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.939142942 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.939296007 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.939302921 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.943650961 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.943679094 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.946561098 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.946573019 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.946708918 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.946728945 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.948976040 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.949011087 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.949026108 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.949064970 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.950573921 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.953464031 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.953485012 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.953607082 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.953615904 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.954560041 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.957952023 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.957974911 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.958559990 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.958569050 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.961087942 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.961117983 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.961206913 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.961206913 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.961216927 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.962589025 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.965475082 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.965502977 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.966556072 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.966566086 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.967868090 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.967894077 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.968014002 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.968014002 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.968024015 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.970576048 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.973444939 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.973470926 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.973566055 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.973566055 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.973578930 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.974554062 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.976921082 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.976946115 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.978574038 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.978594065 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.981914997 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.981940031 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.981976032 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.981986046 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.982012033 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.982569933 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.986017942 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.986037970 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.986181974 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.986193895 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.988670111 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.988696098 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.988704920 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.988718033 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:02.988897085 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:02.989176989 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.004486084 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.004508018 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.004574060 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.004595995 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.004616976 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.004637003 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.004661083 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.004673004 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.004681110 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.004705906 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.004708052 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.004755974 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.004761934 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.004827023 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.004849911 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.004868984 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.004875898 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.004898071 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.007491112 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.007508993 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.007564068 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.007575035 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.007591009 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.007981062 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.008003950 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.008034945 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.008043051 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.008069038 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.008531094 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.008548975 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.008598089 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.008610964 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.008632898 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.008996964 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.009018898 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.009057999 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.009067059 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.009079933 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.009769917 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.009788036 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.009824991 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.009835958 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.009860992 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.010154009 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.010175943 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.010202885 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.010211945 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.010225058 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.013180017 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.013199091 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.013246059 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.013259888 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.013274908 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.015758991 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.015782118 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.015825033 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.015835047 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.015849113 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.019431114 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.019452095 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.019496918 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.019506931 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.019534111 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.021878958 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.021910906 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.021958113 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.021967888 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.021986008 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.025093079 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.025120020 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.025199890 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.025199890 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.025211096 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.026786089 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.026812077 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.026846886 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.026855946 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.026871920 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.029638052 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.029659033 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.029716969 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.029727936 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.033128977 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.033154964 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.033189058 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.033198118 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.033216953 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.035191059 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.035211086 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.035253048 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.035270929 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.035290956 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.037409067 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.037435055 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.037467957 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.037477970 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.037494898 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.040618896 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.040637970 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.040693045 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.040702105 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.040719986 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.043076992 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.043101072 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.043163061 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.043174982 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.045598984 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.045622110 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.045659065 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.045667887 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.045686960 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.047648907 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.047676086 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.047704935 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.047713995 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.047735929 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.050657988 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.050677061 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.050710917 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.050719976 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.050748110 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.053193092 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.053220034 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.053267956 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.053278923 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.053293943 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.055315018 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.055332899 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.055396080 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.055406094 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.057696104 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.057722092 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.057781935 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.057795048 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.060379028 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.060398102 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.060441971 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.060451984 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.060482025 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.062356949 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.062383890 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.062419891 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.062431097 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.062450886 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.064954042 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.064974070 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.065023899 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.065033913 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.065049887 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.066966057 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.066988945 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.067022085 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.067032099 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.067050934 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.069590092 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.069611073 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.069665909 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.069675922 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.069695950 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.071564913 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.071590900 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.071621895 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.071630955 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.071661949 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.074114084 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.074134111 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.074187040 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.074197054 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.076093912 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.076128006 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.076164007 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.076173067 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.076196909 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.078546047 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.078564882 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.078600883 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.078610897 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.078629017 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.080420017 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.080446959 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.080477953 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.080486059 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.080507040 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.082911015 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.082927942 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.083241940 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.083251953 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.084978104 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.085002899 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.085057020 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.085067987 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.085134029 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.087111950 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.087131023 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.087208986 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.087219000 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.088911057 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.088937044 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.088994026 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.089004040 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.089025021 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.091423988 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.091443062 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.091519117 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.091536999 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.093533993 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.093559980 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.093616009 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.093626976 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.093641043 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.095482111 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.095499992 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.095591068 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.095602989 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.097543955 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.097570896 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.097619057 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.097628117 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.097661018 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.099735022 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.099756002 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.099834919 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.099844933 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.101608992 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.101633072 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.101682901 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.101691961 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.101720095 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.103807926 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.103827000 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.103899956 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.103909969 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.105647087 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.105671883 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.105755091 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.105765104 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.108158112 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.108176947 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.108266115 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.108279943 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.108705044 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.108767033 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.108776093 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.108830929 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:03.108884096 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.526359081 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:03.540462017 CEST	49716	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:03.540483952 CEST	443	49716	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:03.540829897 CEST	443	49716	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:03.748158932 CEST	443	49716	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:03.748215914 CEST	49716	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:04.351768970 CEST	49716	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:04.392119884 CEST	443	49716	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:04.477616072 CEST	443	49716	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:04.477689981 CEST	443	49716	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:04.477744102 CEST	49716	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:04.613779068 CEST	49711	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:04.613811970 CEST	443	49711	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.524751902 CEST	49716	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:09.524791956 CEST	443	49716	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:09.524808884 CEST	49716	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:09.524815083 CEST	443	49716	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:09.567511082 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.567590952 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.567661047 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.578270912 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.578350067 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.578428030 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.578577995 CEST	49710	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.578963041 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.579000950 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.579282999 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.579308987 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.624126911 CEST	443	49710	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.713977098 CEST	49720	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:09.714016914 CEST	443	49720	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:09.714090109 CEST	49720	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:09.714663029 CEST	49720	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:09.714679003 CEST	443	49720	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:09.900444031 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.900798082 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.900821924 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.901160955 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.901498079 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.901576042 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.901707888 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.904305935 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.904545069 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.904567003 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.904921055 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.905354977 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.905427933 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.905507088 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.933902979 CEST	443	49710	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.933933973 CEST	443	49710	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.934046030 CEST	49710	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.934051991 CEST	443	49710	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.934123039 CEST	49710	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.935164928 CEST	49710	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:09.935190916 CEST	443	49710	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.948118925 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.952121973 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:09.968491077 CEST	443	49720	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:09.968748093 CEST	49720	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:09.970179081 CEST	49720	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:09.970194101 CEST	443	49720	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:09.970511913 CEST	443	49720	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:09.971652985 CEST	49720	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:10.016122103 CEST	443	49720	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:10.236709118 CEST	443	49720	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:10.236882925 CEST	443	49720	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:10.236959934 CEST	49720	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:10.238607883 CEST	49720	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:10.238629103 CEST	443	49720	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:10.238640070 CEST	49720	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:40:10.238645077 CEST	443	49720	23.204.76.112	192.168.2.5
Apr 26, 2024 16:40:10.254724979 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.254772902 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.254810095 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.254831076 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.254844904 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.254946947 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.254952908 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.258900881 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.258936882 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.258970976 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.259017944 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.259048939 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.259093046 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.259248018 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.265187025 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.265255928 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.265266895 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.269931078 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.269993067 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.270021915 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.272310019 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.272376060 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.272387981 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.277082920 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.277139902 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.277168989 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.283318043 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.283410072 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.283416986 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.288098097 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.288217068 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.288225889 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.345798969 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.345814943 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.413412094 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.413621902 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.413635969 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.416531086 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.416562080 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.416589975 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.416599989 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.416642904 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.418889999 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.418936968 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.418946981 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.422250986 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.446702957 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.446763039 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.446774960 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.449543953 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.449579000 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.449589968 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.449598074 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.449635029 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.453973055 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.454051018 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.454061985 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.456094027 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.459319115 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.459490061 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.459497929 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.461566925 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.461600065 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.461615086 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.461623907 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.461671114 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.465903044 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.465956926 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.465965033 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.467901945 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.473500967 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.473550081 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.473558903 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.477650881 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.477684975 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.477695942 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.477705002 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.477775097 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.484524965 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.484611034 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.484621048 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.487725973 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.494436979 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.494496107 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.494509935 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.497750044 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.497801065 CEST	49718	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.497809887 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.504682064 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.504729033 CEST	49719	443	192.168.2.5	35.190.30.45
Apr 26, 2024 16:40:10.504739046 CEST	443	49719	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.507692099 CEST	443	49718	35.190.30.45	192.168.2.5
Apr 26, 2024 16:40:10.507761955 CEST	443	49718	35.190.30.45	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 16:39:59.616589069 CEST	192.168.2.5	1.1.1.1	0x6cf4	Standard query (0)	runrun.it	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:39:59.616719007 CEST	192.168.2.5	1.1.1.1	0xaebb	Standard query (0)	runrun.it	65	IN (0x0001)	false
Apr 26, 2024 16:40:01.148433924 CEST	192.168.2.5	1.1.1.1	0x9dde	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:01.148864985 CEST	192.168.2.5	1.1.1.1	0xe7dc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 16:40:12.606306076 CEST	192.168.2.5	1.1.1.1	0x6ec4	Standard query (0)	o556303.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:12.606472969 CEST	192.168.2.5	1.1.1.1	0x41dd	Standard query (0)	o556303.ingest.sentry.io	65	IN (0x0001)	false
Apr 26, 2024 16:40:13.479504108 CEST	192.168.2.5	1.1.1.1	0xe7f0	Standard query (0)	o556303.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:13.479656935 CEST	192.168.2.5	1.1.1.1	0xb782	Standard query (0)	o556303.ingest.sentry.io	65	IN (0x0001)	false
Apr 26, 2024 16:40:17.785850048 CEST	192.168.2.5	1.1.1.1	0xe018	Standard query (0)	runrunit.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:17.786402941 CEST	192.168.2.5	1.1.1.1	0x4243	Standard query (0)	runrunit.s3.amazonaws.com	65	IN (0x0001)	false
Apr 26, 2024 16:40:18.287739038 CEST	192.168.2.5	1.1.1.1	0xc32e	Standard query (0)	runrun.it	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:18.288101912 CEST	192.168.2.5	1.1.1.1	0x56d9	Standard query (0)	runrun.it	65	IN (0x0001)	false
Apr 26, 2024 16:40:19.337332010 CEST	192.168.2.5	1.1.1.1	0xa176	Standard query (0)	runrunit.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:19.337579012 CEST	192.168.2.5	1.1.1.1	0xeca8	Standard query (0)	runrunit.s3.amazonaws.com	65	IN (0x0001)	false
Apr 26, 2024 16:40:33.161326885 CEST	192.168.2.5	1.1.1.1	0xc756	Standard query (0)	srmcorp.digitoids.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:33.161941051 CEST	192.168.2.5	1.1.1.1	0xe557	Standard query (0)	srmcorp.digitoids.com	65	IN (0x0001)	false
Apr 26, 2024 16:40:47.048249006 CEST	192.168.2.5	1.1.1.1	0x15e2	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:47.048305035 CEST	192.168.2.5	1.1.1.1	0xd44b	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 16:40:50.095757008 CEST	192.168.2.5	1.1.1.1	0x3112	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:50.096632004 CEST	192.168.2.5	1.1.1.1	0x35b5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 16:40:50.097790003 CEST	192.168.2.5	1.1.1.1	0x8afe	Standard query (0)	cdn.mxpnl.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:50.097954988 CEST	192.168.2.5	1.1.1.1	0x5dfa	Standard query (0)	cdn.mxpnl.com	65	IN (0x0001)	false
Apr 26, 2024 16:40:50.098388910 CEST	192.168.2.5	1.1.1.1	0xf6c5	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:50.098718882 CEST	192.168.2.5	1.1.1.1	0x8d26	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 26, 2024 16:40:50.569871902 CEST	192.168.2.5	1.1.1.1	0x56f6	Standard query (0)	b8b29fee-d78b26f4.digitoids.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:50.570146084 CEST	192.168.2.5	1.1.1.1	0x6b25	Standard query (0)	b8b29fee-d78b26f4.digitoids.com	65	IN (0x0001)	false
Apr 26, 2024 16:40:50.585098028 CEST	192.168.2.5	1.1.1.1	0xb42c	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:50.585222960 CEST	192.168.2.5	1.1.1.1	0xa4d5	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 16:40:50.936397076 CEST	192.168.2.5	1.1.1.1	0xdae3	Standard query (0)	cdn.mxpnl.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:50.936741114 CEST	192.168.2.5	1.1.1.1	0xc932	Standard query (0)	cdn.mxpnl.com	65	IN (0x0001)	false
Apr 26, 2024 16:40:54.278017044 CEST	192.168.2.5	1.1.1.1	0x7041	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:54.278281927 CEST	192.168.2.5	1.1.1.1	0xf207	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Apr 26, 2024 16:40:58.545051098 CEST	192.168.2.5	1.1.1.1	0x5d74	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:58.545516968 CEST	192.168.2.5	1.1.1.1	0xd780	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 16:40:59.351223946 CEST	192.168.2.5	1.1.1.1	0x944a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:59.351376057 CEST	192.168.2.5	1.1.1.1	0x4ee1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 16:40:59.397875071 CEST	192.168.2.5	1.1.1.1	0x828b	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:59.398206949 CEST	192.168.2.5	1.1.1.1	0xea34	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 26, 2024 16:40:59.827999115 CEST	192.168.2.5	1.1.1.1	0xeea2	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:59.828401089 CEST	192.168.2.5	1.1.1.1	0x48a7	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 16:41:02.015180111 CEST	192.168.2.5	1.1.1.1	0x3f53	Standard query (0)	runrun.it	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:02.015669107 CEST	192.168.2.5	1.1.1.1	0x69e6	Standard query (0)	runrun.it	65	IN (0x0001)	false
Apr 26, 2024 16:41:02.045780897 CEST	192.168.2.5	1.1.1.1	0x48a2	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:02.046113968 CEST	192.168.2.5	1.1.1.1	0xde3e	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 26, 2024 16:41:02.454287052 CEST	192.168.2.5	1.1.1.1	0x48ae	Standard query (0)	0824a98d-d78b26f4.digitoids.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:02.454655886 CEST	192.168.2.5	1.1.1.1	0xdf6c	Standard query (0)	0824a98d-d78b26f4.digitoids.com	65	IN (0x0001)	false
Apr 26, 2024 16:41:02.561108112 CEST	192.168.2.5	1.1.1.1	0x34f0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:02.561353922 CEST	192.168.2.5	1.1.1.1	0x6e9a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 16:41:03.697248936 CEST	192.168.2.5	1.1.1.1	0x7771	Standard query (0)	d712e364-d78b26f4.digitoids.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:03.698030949 CEST	192.168.2.5	1.1.1.1	0xcc96	Standard query (0)	d712e364-d78b26f4.digitoids.com	65	IN (0x0001)	false
Apr 26, 2024 16:41:08.562267065 CEST	192.168.2.5	1.1.1.1	0xa76d	Standard query (0)	l1ve.digitoids.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:08.562438011 CEST	192.168.2.5	1.1.1.1	0xeb25	Standard query (0)	l1ve.digitoids.com	65	IN (0x0001)	false
Apr 26, 2024 16:41:11.776492119 CEST	192.168.2.5	1.1.1.1	0xb73b	Standard query (0)	d16adfa6-d78b26f4.digitoids.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:11.776781082 CEST	192.168.2.5	1.1.1.1	0xb787	Standard query (0)	d16adfa6-d78b26f4.digitoids.com	65	IN (0x0001)	false
Apr 26, 2024 16:41:13.054620981 CEST	192.168.2.5	1.1.1.1	0x5934	Standard query (0)	widget.intercom.io	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:13.055013895 CEST	192.168.2.5	1.1.1.1	0x33bc	Standard query (0)	widget.intercom.io	65	IN (0x0001)	false
Apr 26, 2024 16:41:14.962187052 CEST	192.168.2.5	1.1.1.1	0xbf5f	Standard query (0)	js.intercomcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:14.962543964 CEST	192.168.2.5	1.1.1.1	0x2ea2	Standard query (0)	js.intercomcdn.com	65	IN (0x0001)	false
Apr 26, 2024 16:41:16.250128031 CEST	192.168.2.5	1.1.1.1	0xc2d7	Standard query (0)	api-iam.intercom.io	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:16.250344038 CEST	192.168.2.5	1.1.1.1	0x164f	Standard query (0)	api-iam.intercom.io	65	IN (0x0001)	false
Apr 26, 2024 16:41:17.294719934 CEST	192.168.2.5	1.1.1.1	0x3aba	Standard query (0)	nexus-websocket-a.intercom.io	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:17.294974089 CEST	192.168.2.5	1.1.1.1	0x6b2d	Standard query (0)	nexus-websocket-a.intercom.io	65	IN (0x0001)	false
Apr 26, 2024 16:41:18.464921951 CEST	192.168.2.5	1.1.1.1	0xfa86	Standard query (0)	api-iam.intercom.io	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:18.465070963 CEST	192.168.2.5	1.1.1.1	0xafa2	Standard query (0)	api-iam.intercom.io	65	IN (0x0001)	false
Apr 26, 2024 16:41:20.743741989 CEST	192.168.2.5	1.1.1.1	0x9ddb	Standard query (0)	d712e364-d78b26f4.digitoids.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:20.743741989 CEST	192.168.2.5	1.1.1.1	0xf548	Standard query (0)	d712e364-d78b26f4.digitoids.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 16:39:59.771162033 CEST	1.1.1.1	192.168.2.5	0x6cf4	No error (0)	runrun.it		35.190.30.45	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:01.274483919 CEST	1.1.1.1	192.168.2.5	0xe7dc	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 16:40:01.274524927 CEST	1.1.1.1	192.168.2.5	0x9dde	No error (0)	www.google.com		142.250.64.196	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:10.230884075 CEST	1.1.1.1	192.168.2.5	0xbd73	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:10.230884075 CEST	1.1.1.1	192.168.2.5	0xbd73	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:11.862721920 CEST	1.1.1.1	192.168.2.5	0x5764	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:11.862721920 CEST	1.1.1.1	192.168.2.5	0x5764	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:12.754348040 CEST	1.1.1.1	192.168.2.5	0x6ec4	No error (0)	o556303.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:13.640691042 CEST	1.1.1.1	192.168.2.5	0xe7f0	No error (0)	o556303.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:17.944274902 CEST	1.1.1.1	192.168.2.5	0x4243	No error (0)	runrunit.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:17.944274902 CEST	1.1.1.1	192.168.2.5	0x4243	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:18.050368071 CEST	1.1.1.1	192.168.2.5	0xe018	No error (0)	runrunit.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:18.050368071 CEST	1.1.1.1	192.168.2.5	0xe018	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:18.050368071 CEST	1.1.1.1	192.168.2.5	0xe018	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.163.209	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:18.050368071 CEST	1.1.1.1	192.168.2.5	0xe018	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.105.57	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:18.050368071 CEST	1.1.1.1	192.168.2.5	0xe018	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.25.119	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:18.050368071 CEST	1.1.1.1	192.168.2.5	0xe018	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.201.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:18.050368071 CEST	1.1.1.1	192.168.2.5	0xe018	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.132.155	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:18.050368071 CEST	1.1.1.1	192.168.2.5	0xe018	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.100.121	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:18.050368071 CEST	1.1.1.1	192.168.2.5	0xe018	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.102.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:18.050368071 CEST	1.1.1.1	192.168.2.5	0xe018	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.35.169	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:18.444030046 CEST	1.1.1.1	192.168.2.5	0xc32e	No error (0)	runrun.it		35.190.30.45	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:19.478934050 CEST	1.1.1.1	192.168.2.5	0xeca8	No error (0)	runrunit.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:19.478934050 CEST	1.1.1.1	192.168.2.5	0xeca8	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:19.481782913 CEST	1.1.1.1	192.168.2.5	0xa176	No error (0)	runrunit.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:19.481782913 CEST	1.1.1.1	192.168.2.5	0xa176	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:19.481782913 CEST	1.1.1.1	192.168.2.5	0xa176	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.218.153	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:19.481782913 CEST	1.1.1.1	192.168.2.5	0xa176	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.173.241	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:19.481782913 CEST	1.1.1.1	192.168.2.5	0xa176	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.69.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:19.481782913 CEST	1.1.1.1	192.168.2.5	0xa176	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.34.153	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:19.481782913 CEST	1.1.1.1	192.168.2.5	0xa176	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.130.145	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:19.481782913 CEST	1.1.1.1	192.168.2.5	0xa176	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.250.36	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:19.481782913 CEST	1.1.1.1	192.168.2.5	0xa176	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.195.97	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:19.481782913 CEST	1.1.1.1	192.168.2.5	0xa176	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.215.73	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:26.917311907 CEST	1.1.1.1	192.168.2.5	0xa46c	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:26.917311907 CEST	1.1.1.1	192.168.2.5	0xa46c	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:33.317696095 CEST	1.1.1.1	192.168.2.5	0xc756	No error (0)	srmcorp.digitoids.com		72.14.190.91	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:47.175848007 CEST	1.1.1.1	192.168.2.5	0x15e2	No error (0)	stats.g.doubleclick.net		172.217.193.156	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:47.175848007 CEST	1.1.1.1	192.168.2.5	0x15e2	No error (0)	stats.g.doubleclick.net		172.217.193.155	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:47.175848007 CEST	1.1.1.1	192.168.2.5	0x15e2	No error (0)	stats.g.doubleclick.net		172.217.193.157	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:47.175848007 CEST	1.1.1.1	192.168.2.5	0x15e2	No error (0)	stats.g.doubleclick.net		172.217.193.154	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:50.221443892 CEST	1.1.1.1	192.168.2.5	0x3112	No error (0)	www.google.com		192.178.50.68	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:50.221638918 CEST	1.1.1.1	192.168.2.5	0x35b5	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 16:40:50.223165035 CEST	1.1.1.1	192.168.2.5	0x8afe	No error (0)	cdn.mxpnl.com		130.211.5.208	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:50.223165035 CEST	1.1.1.1	192.168.2.5	0x8afe	No error (0)	cdn.mxpnl.com		35.186.235.23	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:50.224311113 CEST	1.1.1.1	192.168.2.5	0xf6c5	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:50.224311113 CEST	1.1.1.1	192.168.2.5	0xf6c5	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:50.224688053 CEST	1.1.1.1	192.168.2.5	0x8d26	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:50.224688053 CEST	1.1.1.1	192.168.2.5	0x8d26	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:50.697511911 CEST	1.1.1.1	192.168.2.5	0x56f6	No error (0)	b8b29fee-d78b26f4.digitoids.com		72.14.190.91	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:50.710603952 CEST	1.1.1.1	192.168.2.5	0xb42c	No error (0)	stats.g.doubleclick.net		74.125.26.157	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:50.710603952 CEST	1.1.1.1	192.168.2.5	0xb42c	No error (0)	stats.g.doubleclick.net		74.125.26.156	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:50.710603952 CEST	1.1.1.1	192.168.2.5	0xb42c	No error (0)	stats.g.doubleclick.net		74.125.26.154	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:50.710603952 CEST	1.1.1.1	192.168.2.5	0xb42c	No error (0)	stats.g.doubleclick.net		74.125.26.155	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:51.061567068 CEST	1.1.1.1	192.168.2.5	0xdae3	No error (0)	cdn.mxpnl.com		130.211.5.208	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:51.061567068 CEST	1.1.1.1	192.168.2.5	0xdae3	No error (0)	cdn.mxpnl.com		35.186.235.23	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:54.403583050 CEST	1.1.1.1	192.168.2.5	0x7041	No error (0)	www.linkedin.com	2-01-2c3e-0073.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:54.403604031 CEST	1.1.1.1	192.168.2.5	0xf207	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:54.403604031 CEST	1.1.1.1	192.168.2.5	0xf207	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:58.670757055 CEST	1.1.1.1	192.168.2.5	0x5d74	No error (0)	td.doubleclick.net		172.217.165.194	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:59.476418972 CEST	1.1.1.1	192.168.2.5	0x944a	No error (0)	www.google.com		142.250.217.228	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:59.476541042 CEST	1.1.1.1	192.168.2.5	0x4ee1	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 16:40:59.522953987 CEST	1.1.1.1	192.168.2.5	0x828b	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:59.522953987 CEST	1.1.1.1	192.168.2.5	0x828b	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:59.523441076 CEST	1.1.1.1	192.168.2.5	0xea34	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:59.523441076 CEST	1.1.1.1	192.168.2.5	0xea34	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:40:59.952992916 CEST	1.1.1.1	192.168.2.5	0xeea2	No error (0)	googleads.g.doubleclick.net		192.178.50.34	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:40:59.953443050 CEST	1.1.1.1	192.168.2.5	0x48a7	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 26, 2024 16:41:02.142488003 CEST	1.1.1.1	192.168.2.5	0x3f53	No error (0)	runrun.it		35.190.30.45	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:02.171344995 CEST	1.1.1.1	192.168.2.5	0x48a2	No error (0)	analytics.google.com		172.217.165.206	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:02.171794891 CEST	1.1.1.1	192.168.2.5	0xde3e	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:41:02.594290018 CEST	1.1.1.1	192.168.2.5	0x48ae	No error (0)	0824a98d-d78b26f4.digitoids.com		72.14.190.91	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:02.687371969 CEST	1.1.1.1	192.168.2.5	0x34f0	No error (0)	www.google.com		142.250.189.132	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:02.690795898 CEST	1.1.1.1	192.168.2.5	0x6e9a	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 16:41:03.823703051 CEST	1.1.1.1	192.168.2.5	0x7771	No error (0)	d712e364-d78b26f4.digitoids.com		72.14.190.91	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:08.699219942 CEST	1.1.1.1	192.168.2.5	0xa76d	No error (0)	l1ve.digitoids.com		72.14.190.91	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:11.904253006 CEST	1.1.1.1	192.168.2.5	0xb73b	No error (0)	d16adfa6-d78b26f4.digitoids.com		72.14.190.91	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:13.090841055 CEST	1.1.1.1	192.168.2.5	0x1a5c	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:13.090841055 CEST	1.1.1.1	192.168.2.5	0x1a5c	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:13.181266069 CEST	1.1.1.1	192.168.2.5	0x5934	No error (0)	widget.intercom.io		13.32.87.81	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:13.181266069 CEST	1.1.1.1	192.168.2.5	0x5934	No error (0)	widget.intercom.io		13.32.87.59	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:13.181266069 CEST	1.1.1.1	192.168.2.5	0x5934	No error (0)	widget.intercom.io		13.32.87.112	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:13.181266069 CEST	1.1.1.1	192.168.2.5	0x5934	No error (0)	widget.intercom.io		13.32.87.102	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:15.088010073 CEST	1.1.1.1	192.168.2.5	0xbf5f	No error (0)	js.intercomcdn.com		13.226.52.58	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:15.088010073 CEST	1.1.1.1	192.168.2.5	0xbf5f	No error (0)	js.intercomcdn.com		13.226.52.91	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:15.088010073 CEST	1.1.1.1	192.168.2.5	0xbf5f	No error (0)	js.intercomcdn.com		13.226.52.4	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:15.088010073 CEST	1.1.1.1	192.168.2.5	0xbf5f	No error (0)	js.intercomcdn.com		13.226.52.93	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:16.375713110 CEST	1.1.1.1	192.168.2.5	0xc2d7	No error (0)	api-iam.intercom.io		44.217.183.210	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:16.375713110 CEST	1.1.1.1	192.168.2.5	0xc2d7	No error (0)	api-iam.intercom.io		44.214.72.116	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:16.375713110 CEST	1.1.1.1	192.168.2.5	0xc2d7	No error (0)	api-iam.intercom.io		3.214.248.84	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:16.375713110 CEST	1.1.1.1	192.168.2.5	0xc2d7	No error (0)	api-iam.intercom.io		52.55.103.136	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:16.375713110 CEST	1.1.1.1	192.168.2.5	0xc2d7	No error (0)	api-iam.intercom.io		44.197.106.171	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:16.375713110 CEST	1.1.1.1	192.168.2.5	0xc2d7	No error (0)	api-iam.intercom.io		34.196.171.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:16.375713110 CEST	1.1.1.1	192.168.2.5	0xc2d7	No error (0)	api-iam.intercom.io		54.165.219.129	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:16.375713110 CEST	1.1.1.1	192.168.2.5	0xc2d7	No error (0)	api-iam.intercom.io		3.219.101.117	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:17.425124884 CEST	1.1.1.1	192.168.2.5	0x3aba	No error (0)	nexus-websocket-a.intercom.io		35.174.127.31	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:17.425124884 CEST	1.1.1.1	192.168.2.5	0x3aba	No error (0)	nexus-websocket-a.intercom.io		34.237.73.95	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:18.589822054 CEST	1.1.1.1	192.168.2.5	0xfa86	No error (0)	api-iam.intercom.io		3.216.18.136	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:18.589822054 CEST	1.1.1.1	192.168.2.5	0xfa86	No error (0)	api-iam.intercom.io		44.217.183.210	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:18.589822054 CEST	1.1.1.1	192.168.2.5	0xfa86	No error (0)	api-iam.intercom.io		44.209.253.226	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:18.589822054 CEST	1.1.1.1	192.168.2.5	0xfa86	No error (0)	api-iam.intercom.io		44.197.106.171	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:18.589822054 CEST	1.1.1.1	192.168.2.5	0xfa86	No error (0)	api-iam.intercom.io		34.196.171.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:18.589822054 CEST	1.1.1.1	192.168.2.5	0xfa86	No error (0)	api-iam.intercom.io		52.55.103.136	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:18.589822054 CEST	1.1.1.1	192.168.2.5	0xfa86	No error (0)	api-iam.intercom.io		3.219.101.117	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:18.589822054 CEST	1.1.1.1	192.168.2.5	0xfa86	No error (0)	api-iam.intercom.io		3.214.248.84	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:41:20.871442080 CEST	1.1.1.1	192.168.2.5	0x9ddb	No error (0)	d712e364-d78b26f4.digitoids.com		72.14.190.91	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:00 UTC	679	OUT	GET /share/form/0GZMCgHSxRh4PBOM HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:01 UTC	1245	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin ETag: W/"d137031075df40502ca5d8a1e819bcd9" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: frame-ancestors 'self' * Set-Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5; path=/; secure; HttpOnly X-Request-Id: 7360d38b-e0af-49fa-a269-c73c4393898d X-Runtime: 0.796748 X-Rack-Cache: miss Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:01 UTC	10	IN	Data Raw: 31 62 61 30 0d 0a 3c 21 44 4f Data Ascii: 1ba0<!DO
2024-04-26 14:40:01 UTC	1255	IN	Data Raw: 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 52 75 6e 72 75 6e 2e 69 74 20 69 73 20 74 68 65 20 70 72 6f 63 65 73 73 20 61 6e 64 20 70 72 6f Data Ascii: CTYPE html><html> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="description" content="Runrun.it is the process and pro
2024-04-26 14:40:01 UTC	1255	IN	Data Raw: 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6b 43 6f 6f 61 41 37 77 4a 7a 48 6f 43 76 50 66 61 6c 47 44 63 38 4d 39 31 6b 6e 68 34 57 76 35 75 36 6f 47 7a 52 54 67 4c 67 59 70 6c 51 38 74 53 50 32 37 57 64 72 30 49 44 48 2b 4d 74 6e 6a 64 76 64 7a 64 6f 4c 45 30 46 5a 6b 52 2b 6d 39 75 36 71 50 72 77 3d 3d 22 20 2f 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 75 6e 72 75 6e 2e 69 74 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 21 2d 2d 20 4c 65 20 48 54 4d 4c 35 20 73 68 69 6d 2c 20 66 6f 72 20 49 45 36 2d 38 20 73 75 70 70 6f 72 74 20 6f 66 20 48 54 4d 4c 20 65 6c 65 6d 65 6e 74 73 20 2d 2d 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 Data Ascii: ><meta name="csrf-token" content="kCooaA7wJzHoCvPfalGDc8M91knh4Wv5u6oGzRTgLgYplQ8tSP27Wdr0IDH+MtnjdvdzdoLE0FZkR+m9u6qPrw==" /> <title>Runrun.it</title> ... Le HTML5 shim, for IE6-8 support of HTML elements --> ...[if lt IE 9]> <scri
2024-04-26 14:40:01 UTC	400	IN	Data Raw: 6e 2d 31 31 34 78 31 31 34 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 31 34 78 31 31 34 22 20 64 61 74 61 2d 66 61 76 69 63 6f 6e 3d 22 61 70 70 2d 66 61 76 69 63 6f 6e 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 73 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 31 32 30 78 31 32 30 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 32 30 78 31 32 30 22 20 64 61 74 61 2d 66 61 76 69 63 6f 6e 3d 22 61 70 70 2d 66 61 76 69 63 6f 6e 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 Data Ascii: n-114x114.png" sizes="114x114" data-favicon="app-favicon" /><link rel="apple-touch-icon" type="image/x-icon" href="/static/images/favicons/apple-touch-icon-120x120.png" sizes="120x120" data-favicon="app-favicon" /><link rel="apple-touch-icon" type="imag
2024-04-26 14:40:01 UTC	1255	IN	Data Raw: 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 73 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 31 35 32 78 31 35 32 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 35 32 78 31 35 32 22 20 64 61 74 61 2d 66 61 76 69 63 6f 6e 3d 22 61 70 70 2d 66 61 76 69 63 6f 6e 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 73 2f 66 61 76 69 63 6f 6e 2d 31 39 36 78 31 39 36 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 39 36 78 31 39 36 22 20 64 61 74 61 2d 66 61 76 69 63 6f 6e 3d 22 61 70 70 2d 66 61 76 69 63 6f 6e 22 20 2f Data Ascii: type="image/x-icon" href="/static/images/favicons/apple-touch-icon-152x152.png" sizes="152x152" data-favicon="app-favicon" /><link rel="icon" type="image/png" href="/static/images/favicons/favicon-196x196.png" sizes="196x196" data-favicon="app-favicon" /
2024-04-26 14:40:01 UTC	1255	IN	Data Raw: 69 74 27 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 72 75 6e 72 75 6e 2e 73 65 6e 74 72 79 5f 75 72 6c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 64 38 61 63 39 33 31 35 37 35 34 65 34 61 36 64 62 30 61 37 65 34 65 32 39 61 64 62 61 33 35 66 40 6f 35 35 36 33 30 33 2e 69 6e 67 65 73 74 2e 73 65 6e 74 72 79 2e 69 6f 2f 35 36 38 36 39 39 38 27 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 72 75 6e 72 75 6e 2e 74 61 73 6b 50 65 72 6d 69 73 73 69 6f 6e 73 44 65 66 69 6e 69 74 69 6f 6e 73 20 3d 20 7b 0a 20 20 22 6c 65 76 65 6c 73 22 3a 20 7b 0a 20 20 20 20 22 35 22 3a 20 22 61 75 64 69 74 6f 72 22 2c 0a 20 20 20 20 22 31 30 22 3a 20 22 66 6f 6c 6c 6f 77 69 6e 67 22 2c 0a 20 20 20 20 22 31 35 22 3a 20 22 74 65 61 6d 6d 61 74 65 22 2c 0a 20 20 20 20 22 32 30 22 3a 20 Data Ascii: it'; window.runrun.sentry_url = 'https://d8ac9315754e4a6db0a7e4e29adba35f@o556303.ingest.sentry.io/5686998'; window.runrun.taskPermissionsDefinitions = { "levels": { "5": "auditor", "10": "following", "15": "teammate", "20":
2024-04-26 14:40:01 UTC	1255	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 64 65 73 69 72 65 64 5f 73 74 61 72 74 5f 64 61 74 65 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 73 74 61 74 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 6c 61 79 69 6e 67 22 3a 20 32 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 61 75 73 65 64 22 3a 20 32 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6c 6f 73 65 64 22 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 63 6b 6c 6f 67 22 3a 20 31 35 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 22 65 78 74 72 61 44 65 70 73 22 3a 20 5b 5d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 Data Ascii: , { "name": "desired_start_date", "state": { "playing": 20, "paused": 20, "closed": null, "backlog": 15 }, "extraDeps": [] }, { "name
2024-04-26 14:40:01 UTC	1255	IN	Data Raw: 20 20 20 20 20 20 20 20 22 62 61 63 6b 6c 6f 67 22 3a 20 31 35 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 22 65 78 74 72 61 44 65 70 73 22 3a 20 5b 5d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 77 6f 72 6b 66 6c 6f 77 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 73 74 61 74 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 6c 61 79 69 6e 67 22 3a 20 32 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 61 75 73 65 64 22 3a 20 32 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6c 6f 73 65 64 22 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 63 6b 6c 6f 67 22 3a 20 6e 75 6c 6c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a Data Ascii: "backlog": 15 }, "extraDeps": [] }, { "name": "workflow", "state": { "playing": 20, "paused": 20, "closed": null, "backlog": null },
2024-04-26 14:40:01 UTC	1255	IN	Data Raw: 20 20 20 20 20 20 22 73 74 61 74 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 6c 61 79 69 6e 67 22 3a 20 31 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 61 75 73 65 64 22 3a 20 31 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6c 6f 73 65 64 22 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 63 6b 6c 6f 67 22 3a 20 6e 75 6c 6c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 22 65 78 74 72 61 44 65 70 73 22 3a 20 5b 22 6e 6f 5f 70 65 6e 64 69 6e 67 5f 65 76 61 6c 75 61 74 69 6f 6e 22 5d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 63 61 6e 63 65 6c 5f 65 76 61 6c 75 61 74 69 6f 6e 5f 72 65 71 75 65 73 74 22 2c Data Ascii: "state": { "playing": 10, "paused": 10, "closed": null, "backlog": null }, "extraDeps": ["no_pending_evaluation"] }, { "name": "cancel_evaluation_request",
2024-04-26 14:40:01 UTC	1255	IN	Data Raw: 72 65 70 65 74 69 74 69 6f 6e 5f 72 75 6c 65 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 73 74 61 74 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 6c 61 79 69 6e 67 22 3a 20 32 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 61 75 73 65 64 22 3a 20 32 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6c 6f 73 65 64 22 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 63 6b 6c 6f 67 22 3a 20 31 35 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 22 65 78 74 72 61 44 65 70 73 22 3a 20 5b 5d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 75 6e 73 63 68 65 64 75 6c 65 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 73 74 61 74 65 22 Data Ascii: repetition_rule", "state": { "playing": 20, "paused": 20, "closed": null, "backlog": 15 }, "extraDeps": [] }, { "name": "unschedule", "state"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49716	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:04 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 14:40:04 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=59021 Date: Fri, 26 Apr 2024 14:40:04 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49710	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:09 UTC	999	OUT	GET /packs/js/AppGlobalScope-DRIQIKTU.js HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://runrun.it/share/form/0GZMCgHSxRh4PBOM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5
2024-04-26 14:40:09 UTC	406	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:09 GMT Content-Type: application/javascript Content-Length: 2339 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:09 UTC	849	IN	Data Raw: 28 28 29 3d 3e 7b 77 69 6e 64 6f 77 2e 52 75 6e 72 75 6e 69 74 3d 7b 4d 6f 64 65 6c 73 3a 6e 65 77 20 50 72 6f 78 79 28 7b 7d 2c 7b 67 65 74 3a 28 61 2c 65 29 3d 3e 7b 69 66 28 21 28 65 20 69 6e 20 61 29 29 7b 6c 65 74 20 6f 3d 6e 65 77 20 45 72 72 6f 72 28 60 43 61 6e 27 74 20 75 73 65 20 6d 6f 64 65 6c 20 24 7b 65 7d 20 62 65 66 6f 72 65 20 64 65 66 69 6e 69 6e 67 60 29 3b 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 6f 29 2c 32 65 33 29 7d 72 65 74 75 72 6e 20 61 5b 65 5d 7d 7d 29 2c 43 6f 6c 6c 65 63 74 69 6f 6e 73 3a 7b 7d 2c 43 6f 6d 70 6f 6e 65 6e 74 73 3a 7b 41 64 76 61 6e 63 65 64 46 69 6c 74 65 72 3a 7b 7d 2c 41 6c 65 72 74 42 61 6e 6e 65 72 3a 7b 7d 2c 42 6c 61 6e 6b 53 74 61 74 65 3a 7b 7d 2c 42 6c Data Ascii: (()=>{window.Runrunit={Models:new Proxy({},{get:(a,e)=>{if(!(e in a)){let o=new Error(`Can't use model ${e} before defining`);setTimeout(()=>Promise.reject(o),2e3)}return a[e]}}),Collections:{},Components:{AdvancedFilter:{},AlertBanner:{},BlankState:{},Bl
2024-04-26 14:40:09 UTC	1255	IN	Data Raw: 4f 6e 42 6f 61 72 64 69 6e 67 3a 7b 7d 7d 7d 2c 46 6c 61 73 68 4d 65 73 73 61 67 65 73 3a 7b 7d 2c 42 6f 61 72 64 53 74 61 67 65 73 3a 7b 7d 2c 50 61 72 74 6e 65 72 73 68 69 70 73 3a 7b 7d 2c 47 72 6f 75 70 73 3a 7b 54 61 62 6c 65 3a 7b 43 65 6c 6c 3a 7b 7d 2c 43 6f 6c 75 6d 6e 73 4d 61 6e 61 67 65 72 3a 7b 7d 2c 45 78 70 6f 72 74 54 61 62 6c 65 3a 7b 7d 2c 54 6f 6f 6c 62 61 72 3a 7b 7d 2c 43 6f 6e 74 65 6e 74 3a 7b 7d 2c 4f 6e 42 6f 61 72 64 69 6e 67 3a 7b 7d 7d 7d 2c 53 75 62 47 72 6f 75 70 73 3a 7b 54 61 62 6c 65 3a 7b 43 65 6c 6c 3a 7b 7d 2c 43 6f 6c 75 6d 6e 73 4d 61 6e 61 67 65 72 3a 7b 7d 2c 45 78 70 6f 72 74 54 61 62 6c 65 3a 7b 7d 2c 54 6f 6f 6c 62 61 72 3a 7b 7d 2c 43 6f 6e 74 65 6e 74 3a 7b 7d 2c 4f 6e 42 6f 61 72 64 69 6e 67 3a 7b 7d 7d 7d 2c Data Ascii: OnBoarding:{}}},FlashMessages:{},BoardStages:{},Partnerships:{},Groups:{Table:{Cell:{},ColumnsManager:{},ExportTable:{},Toolbar:{},Content:{},OnBoarding:{}}},SubGroups:{Table:{Cell:{},ColumnsManager:{},ExportTable:{},Toolbar:{},Content:{},OnBoarding:{}}},
2024-04-26 14:40:09 UTC	235	IN	Data Raw: 3a 7b 7d 7d 2c 50 72 6f 6a 65 63 74 73 3a 7b 7d 2c 52 65 70 6f 72 74 73 3a 7b 7d 2c 53 65 61 72 63 68 3a 7b 7d 2c 53 75 62 67 72 6f 75 70 3a 7b 7d 2c 54 61 73 6b 73 3a 7b 7d 2c 54 65 61 6d 42 61 63 6b 6c 6f 67 3a 7b 7d 2c 54 69 6d 65 73 68 65 65 74 3a 7b 7d 2c 55 73 65 72 3a 7b 7d 7d 2c 43 6f 6e 74 72 6f 6c 6c 65 72 73 3a 7b 7d 2c 52 6f 75 74 65 72 73 3a 7b 7d 2c 45 76 65 6e 74 73 3a 7b 7d 2c 52 61 64 69 6f 52 65 63 65 69 76 65 72 73 3a 7b 7d 2c 50 6f 70 6f 76 65 72 56 69 65 77 73 3a 7b 7d 7d 3b 7d 29 28 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 2f 70 61 63 6b 73 2f 6a 73 2f 41 70 70 47 6c 6f 62 61 6c 53 63 6f 70 65 2d 44 52 49 51 49 4b 54 55 2e 6a 73 2e 6d 61 70 0a Data Ascii: :{}},Projects:{},Reports:{},Search:{},Subgroup:{},Tasks:{},TeamBacklog:{},Timesheet:{},User:{}},Controllers:{},Routers:{},Events:{},RadioReceivers:{},PopoverViews:{}};})();//# sourceMappingURL=/packs/js/AppGlobalScope-DRIQIKTU.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49719	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:09 UTC	1019	OUT	GET /packs/css/shareable_form_app-BBI5GVUP.css HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://runrun.it/share/form/0GZMCgHSxRh4PBOM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5
2024-04-26 14:40:10 UTC	395	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:10 GMT Content-Type: text/css Content-Length: 1765444 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:10 UTC	860	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 69 6d 70 6f 72 74 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 34 30 30 69 74 61 6c 69 63 2c 33 30 30 2c 34 30 30 2c 36 30 30 2c 37 30 30 7c 52 6f 62 6f 74 6f 2b 53 6c 61 62 3a 33 30 30 2c 34 30 30 2c 37 30 30 22 3b 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 2d 66 61 6d 69 6c 79 2c 20 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 2c 20 39 30 30 29 7d 2e 66 61 2c 2e 66 61 2d 63 6c 61 73 73 69 63 2c 2e 66 61 2d 73 68 61 72 70 2c 2e 66 61 73 2c 2e 66 61 2d 73 6f 6c 69 64 2c Data Ascii: @charset "UTF-8";@import"//fonts.googleapis.com/css?family=Open+Sans:400italic,300,400,600,700\|Roboto+Slab:300,400,700";.fa{font-family:var(--fa-style-family, "Font Awesome 6 Pro");font-weight:var(--fa-style, 900)}.fa,.fa-classic,.fa-sharp,.fas,.fa-solid,
2024-04-26 14:40:10 UTC	1255	IN	Data Raw: 72 70 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 7d 2e 66 61 2d 31 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 65 6d 7d 2e 66 61 2d 35 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 7d 2e 66 61 2d 36 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 65 6d 7d 2e 66 61 2d 37 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 65 6d 7d 2e 66 61 2d 38 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 65 6d 7d 2e 66 61 2d 39 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 65 6d 7d 2e 66 61 2d 31 30 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 65 6d 7d 2e 66 61 2d 32 78 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 36 32 35 65 6d Data Ascii: rp{font-weight:900}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em
2024-04-26 14:40:10 UTC	1255	IN	Data Raw: 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 20 2e 33 65 6d 29 7d 2e 66 61 2d 62 65 61 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 20 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 20 30 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 20 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d Data Ascii: fa-pull-margin, .3em)}.fa-beat{-webkit-animation-name:fa-beat;animation-name:fa-beat;-webkit-animation-delay:var(--fa-animation-delay, 0s);animation-delay:var(--fa-animation-delay, 0s);-webkit-animation-direction:var(--fa-animation-direction, normal);anim
2024-04-26 14:40:10 UTC	400	IN	Data Raw: 75 6e 74 2c 20 69 6e 66 69 6e 69 74 65 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 38 2c 20 2e 38 34 2c 20 2e 34 32 2c 20 31 29 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 38 2c 20 2e 38 34 2c 20 2e 34 32 2c 20 31 29 29 7d 2e 66 61 2d 66 61 64 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 61 64 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 61 64 65 Data Ascii: unt, infinite);-webkit-animation-timing-function:var(--fa-animation-timing, cubic-bezier(.28, .84, .42, 1));animation-timing-function:var(--fa-animation-timing, cubic-bezier(.28, .84, .42, 1))}.fa-fade{-webkit-animation-name:fa-fade;animation-name:fa-fade
2024-04-26 14:40:10 UTC	1255	IN	Data Raw: 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 20 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 20 6e 6f 72 6d 61 6c 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 20 31 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 20 31 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d Data Ascii: on-direction, normal);animation-direction:var(--fa-animation-direction, normal);-webkit-animation-duration:var(--fa-animation-duration, 1s);animation-duration:var(--fa-animation-duration, 1s);-webkit-animation-iteration-count:var(--fa-animation-iteration-
2024-04-26 14:40:10 UTC	1255	IN	Data Raw: 6c 69 70 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 6c 69 70 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 6c 69 70 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 20 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 20 30 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 20 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e Data Ascii: lip{-webkit-animation-name:fa-flip;animation-name:fa-flip;-webkit-animation-delay:var(--fa-animation-delay, 0s);animation-delay:var(--fa-animation-delay, 0s);-webkit-animation-direction:var(--fa-animation-direction, normal);animation-direction:var(--fa-an
2024-04-26 14:40:10 UTC	1255	IN	Data Raw: 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 20 6c 69 6e 65 61 72 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 20 6c 69 6e 65 61 72 29 7d 2e 66 61 2d 73 70 69 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 73 70 69 6e 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 73 70 69 6e 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 20 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 Data Ascii: on-timing-function:var(--fa-animation-timing, linear);animation-timing-function:var(--fa-animation-timing, linear)}.fa-spin{-webkit-animation-name:fa-spin;animation-name:fa-spin;-webkit-animation-delay:var(--fa-animation-delay, 0s);animation-delay:var(--f
2024-04-26 14:40:10 UTC	331	IN	Data Raw: 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 20 69 6e 66 69 6e 69 74 65 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 20 73 74 65 70 73 28 38 29 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 20 73 74 65 70 73 28 38 29 29 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 72 65 64 75 63 65 29 7b 2e 66 61 2d 62 65 61 74 2c 2e 66 61 2d 62 6f 75 6e 63 65 2c 2e 66 Data Ascii: ration-count:var(--fa-animation-iteration-count, infinite);-webkit-animation-timing-function:var(--fa-animation-timing, steps(8));animation-timing-function:var(--fa-animation-timing, steps(8))}@media (prefers-reduced-motion: reduce){.fa-beat,.fa-bounce,.f
2024-04-26 14:40:10 UTC	1255	IN	Data Raw: 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 31 6d 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 31 6d 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 6d 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 6d 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e Data Ascii: ebkit-animation-delay:-1ms;animation-delay:-1ms;-webkit-animation-duration:1ms;animation-duration:1ms;-webkit-animation-iteration-count:1;animation-iteration-count:1;-webkit-transition-delay:0s;transition-delay:0s;-webkit-transition-duration:0s;transition
2024-04-26 14:40:10 UTC	1255	IN	Data Raw: 6f 75 6e 63 65 2d 6c 61 6e 64 2d 73 63 61 6c 65 2d 78 2c 20 31 2e 30 35 29 2c 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6c 61 6e 64 2d 73 63 61 6c 65 2d 79 2c 20 2e 39 35 29 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6c 61 6e 64 2d 73 63 61 6c 65 2d 78 2c 20 31 2e 30 35 29 2c 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6c 61 6e 64 2d 73 63 61 6c 65 2d 79 2c 20 2e 39 35 29 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 35 37 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2c 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 72 65 62 6f 75 6e 64 2c 20 2d 2e 31 32 35 65 6d 29 Data Ascii: ounce-land-scale-x, 1.05),var(--fa-bounce-land-scale-y, .95)) translateY(0);transform:scale(var(--fa-bounce-land-scale-x, 1.05),var(--fa-bounce-land-scale-y, .95)) translateY(0)}57%{-webkit-transform:scale(1,1) translateY(var(--fa-bounce-rebound, -.125em)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:09 UTC	1003	OUT	GET /packs/js/shareable_form_app-JRAHKCLR.js HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://runrun.it/share/form/0GZMCgHSxRh4PBOM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5
2024-04-26 14:40:10 UTC	409	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:10 GMT Content-Type: application/javascript Content-Length: 3853812 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:10 UTC	846	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 4c 46 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 59 58 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 54 46 65 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 2c 5f 46 65 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 48 46 65 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 2c 44 46 65 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 2c 59 37 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 2c 5f 6d 74 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 67 36 3d 4f 62 6a 65 63 Data Ascii: (()=>{var LFe=Object.create;var YX=Object.defineProperty,TFe=Object.defineProperties,_Fe=Object.getOwnPropertyDescriptor,HFe=Object.getOwnPropertyDescriptors,DFe=Object.getOwnPropertyNames,Y7=Object.getOwnPropertySymbols,_mt=Object.getPrototypeOf,g6=Objec
2024-04-26 14:40:10 UTC	1255	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 20 72 65 71 75 69 72 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 27 44 79 6e 61 6d 69 63 20 72 65 71 75 69 72 65 20 6f 66 20 22 27 2b 74 2b 27 22 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 27 29 7d 29 3b 76 61 72 20 79 63 3d 28 74 2c 65 29 3d 3e 7b 76 61 72 20 61 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 74 29 67 36 2e 63 61 6c 6c 28 74 2c 6f 29 26 26 65 2e 69 6e 64 65 78 4f 66 28 6f 29 3c 30 26 26 28 61 5b 6f 5d 3d 74 5b 6f 5d 29 3b 69 66 28 74 21 3d 6e 75 6c 6c 26 26 59 37 29 66 6f 72 28 76 61 72 20 6f 20 6f 66 20 59 37 28 74 29 29 65 2e 69 6e 64 65 78 4f 66 28 6f 29 3c 30 26 26 48 6d 74 2e 63 61 6c 6c 28 74 2c 6f 29 26 26 Data Ascii: undefined")return require.apply(this,arguments);throw Error('Dynamic require of "'+t+'" is not supported')});var yc=(t,e)=>{var a={};for(var o in t)g6.call(t,o)&&e.indexOf(o)<0&&(a[o]=t[o]);if(t!=null&&Y7)for(var o of Y7(t))e.indexOf(o)<0&&Hmt.call(t,o)&&
2024-04-26 14:40:10 UTC	1255	IN	Data Raw: 2c 61 29 3d 3e 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 6f 2c 72 29 3d 3e 7b 76 61 72 20 6e 3d 73 3d 3e 7b 74 72 79 7b 6c 28 61 2e 6e 65 78 74 28 73 29 29 7d 63 61 74 63 68 28 63 29 7b 72 28 63 29 7d 7d 2c 69 3d 73 3d 3e 7b 74 72 79 7b 6c 28 61 2e 74 68 72 6f 77 28 73 29 29 7d 63 61 74 63 68 28 63 29 7b 72 28 63 29 7d 7d 2c 6c 3d 73 3d 3e 73 2e 64 6f 6e 65 3f 6f 28 73 2e 76 61 6c 75 65 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 2e 76 61 6c 75 65 29 2e 74 68 65 6e 28 6e 2c 69 29 3b 6c 28 28 61 3d 61 2e 61 70 70 6c 79 28 74 2c 65 29 29 2e 6e 65 78 74 28 29 29 7d 29 2c 53 46 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 5b 30 5d 3d 74 2c 74 68 69 73 5b 31 5d 3d 65 7d 3b 76 61 72 20 4a 6d 74 3d 74 3d 3e 7b 76 61 72 20 65 3d 74 5b 64 Data Ascii: ,a)=>new Promise((o,r)=>{var n=s=>{try{l(a.next(s))}catch(c){r(c)}},i=s=>{try{l(a.throw(s))}catch(c){r(c)}},l=s=>s.done?o(s.value):Promise.resolve(s.value).then(n,i);l((a=a.apply(t,e)).next())}),SFe=function(t,e){this[0]=t,this[1]=e};var Jmt=t=>{var e=t[d
2024-04-26 14:40:10 UTC	400	IN	Data Raw: 65 74 75 72 6e 20 74 79 70 65 6f 66 20 45 76 65 6e 74 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 4e 37 28 74 2c 45 76 65 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 24 46 65 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 45 6c 65 6d 65 6e 74 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 4e 37 28 74 2c 45 6c 65 6d 65 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 74 5a 65 28 74 29 7b 72 65 74 75 72 6e 20 51 42 28 74 2c 22 52 65 67 45 78 70 22 29 7d 66 75 6e 63 74 69 6f 6e 20 65 5a 65 28 74 29 7b 72 65 74 75 72 6e 21 21 28 74 26 26 74 2e 74 68 65 6e 26 26 74 79 70 65 6f 66 20 74 2e 74 68 65 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 61 5a 65 28 74 29 7b 72 65 74 75 72 6e 20 4d 6d 74 28 74 29 26 26 22 6e 61 74 69 76 65 45 76 65 6e 74 Data Ascii: eturn typeof Event!="undefined"&&N7(t,Event)}function $Fe(t){return typeof Element!="undefined"&&N7(t,Element)}function tZe(t){return QB(t,"RegExp")}function eZe(t){return!!(t&&t.then&&typeof t.then=="function")}function aZe(t){return Mmt(t)&&"nativeEvent
2024-04-26 14:40:10 UTC	1255	IN	Data Raw: 74 63 68 28 61 29 7b 72 65 74 75 72 6e 21 31 7d 7d 79 64 2e 69 73 44 4f 4d 45 72 72 6f 72 3d 4d 46 65 3b 79 64 2e 69 73 44 4f 4d 45 78 63 65 70 74 69 6f 6e 3d 45 46 65 3b 79 64 2e 69 73 45 6c 65 6d 65 6e 74 3d 24 46 65 3b 79 64 2e 69 73 45 72 72 6f 72 3d 4a 46 65 3b 79 64 2e 69 73 45 72 72 6f 72 45 76 65 6e 74 3d 6a 46 65 3b 79 64 2e 69 73 45 76 65 6e 74 3d 4b 46 65 3b 79 64 2e 69 73 49 6e 73 74 61 6e 63 65 4f 66 3d 4e 37 3b 79 64 2e 69 73 4e 61 4e 3d 6f 5a 65 3b 79 64 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3d 4d 6d 74 3b 79 64 2e 69 73 50 72 69 6d 69 74 69 76 65 3d 71 46 65 3b 79 64 2e 69 73 52 65 67 45 78 70 3d 74 5a 65 3b 79 64 2e 69 73 53 74 72 69 6e 67 3d 50 46 65 3b 79 64 2e 69 73 53 79 6e 74 68 65 74 69 63 45 76 65 6e 74 3d 61 5a 65 3b 79 64 2e Data Ascii: tch(a){return!1}}yd.isDOMError=MFe;yd.isDOMException=EFe;yd.isElement=$Fe;yd.isError=JFe;yd.isErrorEvent=jFe;yd.isEvent=KFe;yd.isInstanceOf=N7;yd.isNaN=oZe;yd.isPlainObject=Mmt;yd.isPrimitive=qFe;yd.isRegExp=tZe;yd.isString=PFe;yd.isSyntheticEvent=aZe;yd.
2024-04-26 14:40:10 UTC	1255	IN	Data Raw: 72 6e 22 22 3b 6f 2e 70 75 73 68 28 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 6c 65 74 20 63 3d 65 26 26 65 2e 6c 65 6e 67 74 68 3f 65 2e 66 69 6c 74 65 72 28 66 3d 3e 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 29 2e 6d 61 70 28 66 3d 3e 5b 66 2c 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 5d 29 3a 6e 75 6c 6c 3b 69 66 28 63 26 26 63 2e 6c 65 6e 67 74 68 29 63 2e 66 6f 72 45 61 63 68 28 66 3d 3e 7b 6f 2e 70 75 73 68 28 60 5b 24 7b 66 5b 30 5d 7d 3d 22 24 7b 66 5b 31 5d 7d 22 5d 60 29 7d 29 3b 65 6c 73 65 20 69 66 28 61 2e 69 64 26 26 6f 2e 70 75 73 68 28 60 23 24 7b 61 2e 69 64 7d 60 29 2c 72 3d 61 2e 63 6c 61 73 73 4e 61 6d 65 2c 72 26 26 69 5a 65 2e 69 73 53 74 72 69 6e 67 28 72 29 29 66 6f 72 28 6e 3d 72 Data Ascii: rn"";o.push(a.tagName.toLowerCase());let c=e&&e.length?e.filter(f=>a.getAttribute(f)).map(f=>[f,a.getAttribute(f)]):null;if(c&&c.length)c.forEach(f=>{o.push(`[${f[0]}="${f[1]}"]`)});else if(a.id&&o.push(`#${a.id}`),r=a.className,r&&iZe.isString(r))for(n=r
2024-04-26 14:40:10 UTC	1255	IN	Data Raw: 26 26 72 3f 60 3a 24 7b 72 7d 60 3a 22 22 7d 40 24 7b 61 7d 24 7b 6e 3f 60 3a 24 7b 6e 7d 60 3a 22 22 7d 2f 24 7b 6f 26 26 60 24 7b 6f 7d 2f 60 7d 24 7b 69 7d 60 7d 66 75 6e 63 74 69 6f 6e 20 45 6d 74 28 74 29 7b 6c 65 74 20 65 3d 66 5a 65 2e 65 78 65 63 28 74 29 3b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 54 58 2e 53 65 6e 74 72 79 45 72 72 6f 72 28 60 49 6e 76 61 6c 69 64 20 53 65 6e 74 72 79 20 44 73 6e 3a 20 24 7b 74 7d 60 29 3b 6c 65 74 5b 61 2c 6f 2c 72 3d 22 22 2c 6e 2c 69 3d 22 22 2c 6c 5d 3d 65 2e 73 6c 69 63 65 28 31 29 2c 73 3d 22 22 2c 63 3d 6c 2c 64 3d 63 2e 73 70 6c 69 74 28 22 2f 22 29 3b 69 66 28 64 2e 6c 65 6e 67 74 68 3e 31 26 26 28 73 3d 64 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2e 6a 6f 69 6e 28 22 2f 22 29 2c 63 3d 64 2e 70 6f 70 Data Ascii: &&r?`:${r}`:""}@${a}${n?`:${n}`:""}/${o&&`${o}/`}${i}`}function Emt(t){let e=fZe.exec(t);if(!e)throw new TX.SentryError(`Invalid Sentry Dsn: ${t}`);let[a,o,r="",n,i="",l]=e.slice(1),s="",c=l,d=c.split("/");if(d.length>1&&(s=d.slice(0,-1).join("/"),c=d.pop
2024-04-26 14:40:10 UTC	331	IN	Data Raw: 5a 65 3d 22 53 65 6e 74 72 79 20 4c 6f 67 67 65 72 20 22 2c 44 37 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 2c 22 61 73 73 65 72 74 22 2c 22 74 72 61 63 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 24 6d 74 28 74 29 7b 69 66 28 21 28 22 63 6f 6e 73 6f 6c 65 22 69 6e 20 48 37 2e 47 4c 4f 42 41 4c 5f 4f 42 4a 29 29 72 65 74 75 72 6e 20 74 28 29 3b 6c 65 74 20 65 3d 48 37 2e 47 4c 4f 42 41 4c 5f 4f 42 4a 2e 63 6f 6e 73 6f 6c 65 2c 61 3d 7b 7d 3b 44 37 2e 66 6f 72 45 61 63 68 28 6f 3d 3e 7b 6c 65 74 20 72 3d 65 5b 6f 5d 26 26 65 5b 6f 5d 2e 5f 5f 73 65 6e 74 72 79 5f 6f 72 69 67 69 6e 61 6c 5f 5f 3b 6f 20 69 6e 20 65 26 26 72 26 26 28 61 5b 6f 5d 3d 65 5b 6f 5d 2c 65 5b 6f 5d 3d 72 29 7d 29 3b 74 Data Ascii: Ze="Sentry Logger ",D7=["debug","info","warn","error","log","assert","trace"];function $mt(t){if(!("console"in H7.GLOBAL_OBJ))return t();let e=H7.GLOBAL_OBJ.console,a={};D7.forEach(o=>{let r=e[o]&&e[o].__sentry_original__;o in e&&r&&(a[o]=e[o],e[o]=r)});t
2024-04-26 14:40:10 UTC	1255	IN	Data Raw: 7b 6c 65 74 20 74 3d 21 31 2c 65 3d 7b 65 6e 61 62 6c 65 3a 28 29 3d 3e 7b 74 3d 21 30 7d 2c 64 69 73 61 62 6c 65 3a 28 29 3d 3e 7b 74 3d 21 31 7d 7d 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 5f 5f 53 45 4e 54 52 59 5f 44 45 42 55 47 5f 5f 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 5f 5f 53 45 4e 54 52 59 5f 44 45 42 55 47 5f 5f 3f 44 37 2e 66 6f 72 45 61 63 68 28 61 3d 3e 7b 65 5b 61 5d 3d 28 2e 2e 2e 6f 29 3d 3e 7b 74 26 26 24 6d 74 28 28 29 3d 3e 7b 48 37 2e 47 4c 4f 42 41 4c 5f 4f 42 4a 2e 63 6f 6e 73 6f 6c 65 5b 61 5d 28 60 24 7b 68 5a 65 7d 5b 24 7b 61 7d 5d 3a 60 2c 2e 2e 2e 6f 29 7d 29 7d 7d 29 3a 44 37 2e 66 6f 72 45 61 63 68 28 61 3d 3e 7b 65 5b 61 5d 3d 28 29 3d 3e 7b 7d 7d 29 2c 65 7d 73 47 2e 6c 6f 67 67 65 72 3d 76 6f 69 64 20 30 3b 74 Data Ascii: {let t=!1,e={enable:()=>{t=!0},disable:()=>{t=!1}};return typeof __SENTRY_DEBUG__=="undefined"\|\|__SENTRY_DEBUG__?D7.forEach(a=>{e[a]=(...o)=>{t&&$mt(()=>{H7.GLOBAL_OBJ.console[a](`${hZe}[${a}]:`,...o)})}}):D7.forEach(a=>{e[a]=()=>{}}),e}sG.logger=void 0;t
2024-04-26 14:40:10 UTC	1255	IN	Data Raw: 68 2e 65 73 63 61 70 65 53 74 72 69 6e 67 46 6f 72 52 65 67 65 78 3d 42 5a 65 3b 63 68 2e 69 73 4d 61 74 63 68 69 6e 67 50 61 74 74 65 72 6e 3d 74 30 74 3b 63 68 2e 73 61 66 65 4a 6f 69 6e 3d 78 5a 65 3b 63 68 2e 73 6e 69 70 4c 69 6e 65 3d 47 5a 65 3b 63 68 2e 73 74 72 69 6e 67 4d 61 74 63 68 65 73 53 6f 6d 65 50 61 74 74 65 72 6e 3d 41 5a 65 3b 63 68 2e 74 72 75 6e 63 61 74 65 3d 43 5a 65 7d 29 3b 76 61 72 20 6b 42 3d 71 28 48 62 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 48 62 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 79 5a 65 3d 6d 36 28 29 2c 77 42 3d 24 70 28 29 2c 65 30 74 3d 7a 37 28 29 3b 66 75 6e 63 74 69 6f 6e 20 76 5a 65 28 74 2c 65 2c 61 29 7b 69 66 28 21 28 65 20 Data Ascii: h.escapeStringForRegex=BZe;ch.isMatchingPattern=t0t;ch.safeJoin=xZe;ch.snipLine=GZe;ch.stringMatchesSomePattern=AZe;ch.truncate=CZe});var kB=q(Hb=>{Object.defineProperty(Hb,"__esModule",{value:!0});var yZe=m6(),wB=$p(),e0t=z7();function vZe(t,e,a){if(!(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49720	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 14:40:10 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=59009 Date: Fri, 26 Apr 2024 14:40:10 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 14:40:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49725	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:12 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714142379019&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-26 14:40:12 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-26 14:40:12 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-26 14:40:13 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: E2E2987DC2D849A78842F520DB0386EF Ref B: LAX311000108047 Ref C: 2024-04-26T14:40:13Z Date: Fri, 26 Apr 2024 14:40:13 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1714142412.11c7b4a6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49727	34.120.195.249	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:13 UTC	733	OUT	POST /api/5686998/envelope/?sentry_key=d8ac9315754e4a6db0a7e4e29adba35f&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.26.0 HTTP/1.1 Host: o556303.ingest.sentry.io Connection: keep-alive Content-Length: 438 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://runrun.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:13 UTC	438	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 34 2d 32 36 54 31 34 3a 34 30 3a 31 31 2e 38 32 32 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 32 36 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 32 37 64 32 31 31 63 39 35 32 63 33 34 37 66 63 39 32 66 33 30 39 61 61 62 62 36 31 66 31 39 65 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 34 2d 32 36 54 31 34 3a 34 30 3a 31 31 2e 38 32 31 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 34 2d 32 36 54 31 34 3a 34 30 3a 31 31 2e 38 32 31 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-04-26T14:40:11.822Z","sdk":{"name":"sentry.javascript.browser","version":"7.26.0"}}{"type":"session"}{"sid":"27d211c952c347fc92f309aabb61f19e","init":true,"started":"2024-04-26T14:40:11.821Z","timestamp":"2024-04-26T14:40:11.821Z","stat
2024-04-26 14:40:13 UTC	553	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:40:13 GMT Content-Type: application/json Content-Length: 2 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin x-envoy-upstream-service-time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:13 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49731	34.120.195.249	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:13 UTC	479	OUT	GET /api/5686998/envelope/?sentry_key=d8ac9315754e4a6db0a7e4e29adba35f&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.26.0 HTTP/1.1 Host: o556303.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:14 UTC	516	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Fri, 26 Apr 2024 14:40:14 GMT Content-Length: 0 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49732	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:15 UTC	1039	OUT	GET /packs/media/fa-solid-900-3CXYS3RM.woff2 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://runrun.it sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://runrun.it/packs/css/shareable_form_app-BBI5GVUP.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5
2024-04-26 14:40:15 UTC	385	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:15 GMT Content-Type: application/font-woff2 Content-Length: 325592 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:15 UTC	870	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 04 f7 d8 00 0a 00 00 00 0d 0c 68 00 04 f7 8b 03 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 38 02 24 04 20 06 60 03 e4 18 00 81 8f 1c ca b1 b7 38 cb e4 1c 05 87 64 07 20 a5 ff ff 74 2c 08 d8 38 00 00 7c ff 7e 38 22 45 b3 87 e7 08 30 3d 00 00 ac de 79 08 a8 aa aa 7a 4c 08 ee 5e b5 1f 80 f0 d3 2f bf f9 dd 1f fe f4 97 bf fd e3 5f ff f9 df 7f 0e 0c c6 1d 00 10 26 b3 c5 6a b3 3b 9c 2e b7 c7 eb f3 1b fa c8 d6 6b bd de fb c0 23 38 01 ce de fe 5b 49 e6 10 a8 4d 14 61 24 40 03 50 1b 63 e0 0c 90 c6 90 cb 99 1d 02 c2 d9 7f 75 24 ec fa bb 6f 02 da f7 e4 44 9c a0 1e 74 c0 ea 8d b0 88 33 cb 80 d8 23 24 4e 93 e6 01 2d c9 b2 7d 77 db 0a 15 f8 07 fe 84 7c bb 81 2e 46 05 aa 52 0b 76 10 f9 4d 0d e4 b0 6b 2f a9 b7 d4 4f Data Ascii: wOF2h8$ `8d t,8\|~8"E0=yzL^/_&j;.k#8[IMa$@Pcu$oDt3#$N-}w\|.FRvMk/O
2024-04-26 14:40:15 UTC	1255	IN	Data Raw: 57 9b 9b 09 18 65 79 49 c7 50 6a ee 76 ab 45 85 10 fc 7b 1b e2 a2 ce de ac a9 6d 43 1c 86 a1 af 32 56 b5 f7 7e 8a 8e 02 62 81 52 d2 78 47 b8 e9 28 ed 4c 88 41 f2 ef 27 36 93 b1 22 bb f7 bd ad a2 ab 82 a8 08 49 98 8c 35 91 25 d6 a5 ef 6d da ee 13 08 10 63 8c 5f 59 92 47 5e c6 b4 de bb 5f 53 94 da 8a 93 10 b2 ff 21 ba fe df d8 be fb c3 d6 ea 69 9a 01 04 08 24 dc 22 33 96 fa 6b ca 3a 0e 0a 57 3a d2 64 bb c8 32 ab 33 dd 6b f7 9b de 36 01 42 c0 18 f0 23 eb b3 e4 87 98 59 9d 69 b7 bb 7b f7 27 b6 e3 d8 f2 a3 0f 01 02 44 16 51 d3 fe 92 8e 6f d3 15 4b 96 6d 4d 8a 03 c4 22 08 fe 17 04 55 47 34 1f ce be b6 7e 66 ef df 98 b0 7f 01 e0 33 1f 1e b0 f9 f3 ff 7e 75 50 2c 54 80 51 6c 14 fe e1 80 cb a1 32 28 60 31 f8 73 f0 a7 45 9b fd ff b6 c9 eb f9 bf 79 f2 fa ea 5c 16 73 Data Ascii: WeyIPjvE{mC2V~bRxG(LA'6"I5%mc_YG^_S!i$"3k:W:d23k6B#Yi{'DQoKmM"UG4~f3~uP,TQl2(`1sEy\s
2024-04-26 14:40:15 UTC	1255	IN	Data Raw: ee d5 88 8e 66 e3 5f a4 32 18 18 f2 95 ee 51 a9 2f cd 4f 4b f4 98 74 3e ba ca bb 1a e2 0c 7d 3b d3 7b 13 ba 28 2f 8c 9d 0c bb e4 d1 22 9f eb 12 7f b4 93 0d 48 b7 0c 9d ad 3f 16 d9 79 f7 5e c7 ef fa 9d f1 cc ce 5f f8 bd 85 69 93 13 e4 a9 7b 0e d6 ac 95 68 88 7d e9 67 90 5c 8f f5 34 38 e3 59 a4 18 7c 18 a6 6d 44 b6 15 fd 0e 25 9b fb 71 ee ae f3 ba d5 fb 72 16 ae ac f5 9a 78 d1 3d 9c 51 de 58 06 7f 5b 0c 54 f0 f3 7e cf 3a bf a7 3e 93 62 ef 7d 8e eb 3f 5b 36 1c b4 0f 70 18 bb 34 be d3 5c 1f c6 44 e3 79 88 07 c4 88 f5 0d f7 b7 12 77 32 e7 8d be af f1 ba c0 1f 90 61 f6 8f e4 12 5f d2 e3 e0 54 62 b3 9c 9b 33 77 a8 9c 0d 98 5c 39 47 e8 46 30 4d 96 37 7e be 97 8f 48 62 f7 4a eb 80 f2 79 1e 15 56 e6 45 f3 f7 e0 ed a4 fd c1 f0 ac f6 2a b5 6f 68 94 29 df 5e 9f 0d 5c Data Ascii: f_2Q/OKt>};{(/"H?y^_i{h}g\48Y\|mD%qrx=QX[T~:>b}?[6p4\Dyw2a_Tb3w\9GF0M7~HbJyVE*oh)^\
2024-04-26 14:40:15 UTC	400	IN	Data Raw: 81 6f f5 bc 45 fc 41 fd 8e 26 78 f7 5a 91 6e 9b e9 b7 a5 52 d6 b8 28 65 27 fc 50 bf cb 42 46 68 c7 14 e3 0f 4c 3b 8b 05 ba 24 46 dc 77 7a c2 a2 fa ef 53 b4 55 51 a6 e7 60 2e 6a f9 8c 2e c7 fc a2 f8 3b c3 04 7b e1 4c 53 c6 07 e7 9c 07 2a 7b df 42 86 d9 c1 c3 2d e5 de b4 bf df ac db aa cf 3e cd e6 85 ad e9 2a f6 4f b5 79 eb e6 d8 5a 9d 8f 6f c1 f3 9e f3 df cd bc 56 73 e5 34 2a 31 b9 69 af f3 a9 da 13 6c 89 7b cb fa 4d 6b c3 4a dd 27 72 db a7 9a 7f 56 74 3d c9 34 f6 e6 f6 95 3d c0 a7 67 79 ab 38 6e f6 c7 24 d0 01 2a 60 76 0f fd 8f 77 3b 54 cd b8 27 67 a9 18 1f f6 3f 1f d0 99 ff 21 74 1e eb c0 18 8f b1 96 0d 6c 64 13 9b d9 c2 56 b6 71 22 27 71 32 a7 70 2a a7 71 3a 67 70 26 67 71 36 e7 70 2e e7 71 3e 17 70 21 17 71 31 97 70 05 f7 72 3f 0f f3 28 4f f0 02 af f2 Data Ascii: oEA&xZnR(e'PBFhL;$FwzSUQ`.j.;{LS{B->OyZoVs41il{MkJ'rVt=4=gy8n$`vw;T'g?!tldVq"'q2p*q:gp&gq6p.q>p!q1pr?(O
2024-04-26 14:40:15 UTC	1255	IN	Data Raw: 5b b5 9d 76 ba 9d d3 76 db e5 6d 6e 7b 6d d3 f6 db 1d da 9d da 5d da 5d eb 01 d5 50 1d 75 51 0f 0d d0 03 3d d1 0b bd d1 07 7d d1 0f 03 31 18 43 30 01 33 30 13 73 30 0f f3 b1 00 0b b1 08 8b b1 11 9b b0 05 db b0 1d 3b b1 0f fb 71 00 07 71 08 87 71 04 47 71 0c c7 71 02 27 71 0e 17 70 11 97 70 19 57 70 15 2f f1 06 6f f1 0e c4 0f fc c4 6f fc 13 1f f1 93 00 09 94 10 09 95 30 09 97 08 89 96 58 89 93 78 49 90 44 49 92 4c c9 95 22 29 2f 75 a5 91 34 91 56 d2 46 3a 4a 27 e9 2c 5d 65 90 6c 96 2d b2 55 f6 17 57 2a ae 6c 05 5a 41 56 b0 15 69 a5 5b 19 56 be 55 60 b5 b3 36 ab 20 15 a7 52 55 a6 6a a6 da ab 4e 6a 8a 5a a2 56 a8 d5 ea ae ba a7 5e da f5 ec 0e 76 37 7b 88 13 e4 04 3b c5 4e 59 a7 bc d3 c8 b9 e7 3c 74 9e 39 2f 1d db 79 ef 94 38 df 9d df 6e 80 1b ec 46 b8 f1 6e Data Ascii: [vvmn{m]]PuQ=}1C030s0;qqqGqq'qppWp/oo0XxIDIL")/u4VF:J',]el-UW*lZAVi[VU`6 RUjNjZV^v7{;NY<t9/y8nFn
2024-04-26 14:40:15 UTC	1255	IN	Data Raw: 6f 3c 13 d6 2f ee 64 b6 9a ad 6d b7 db fd f6 8a bd 6a 1f db d7 d6 b3 81 fd cd fe 19 89 44 dc c8 37 e7 cf 9f 4d 91 3b 8e f6 71 51 5b d4 12 35 45 0d 51 5d 54 13 55 45 25 51 44 14 12 05 45 01 c7 11 f9 45 3e 91 57 e4 11 b9 45 2e c7 11 39 85 10 39 44 36 91 55 64 11 a9 45 4a 91 42 24 af 87 c2 e9 0b a7 2b 9c ba 70 8a c2 c4 3f f1 57 fc 11 bf c7 6f f1 4b fc 10 df c7 77 f1 4d 7c 1d 5f c5 97 f8 1c 9f e2 63 7c 88 f7 f1 0e e2 2d c4 9b 78 0d f1 0a e2 65 bc 88 a7 f1 38 1e c5 c3 78 10 f7 e3 5e dc 89 5b 71 23 ae fb 1e f8 2e f8 8e 6f 83 6f 81 6f 02 f8 3a f8 9a af 80 2f 9d ee bf e0 f3 dd df 7f d6 67 c0 a7 c1 a7 7c d2 27 7c 6c 8a 33 1d 01 1f f6 21 1f f4 81 53 6e 9f 77 7b 17 78 a7 77 78 b5 57 79 99 97 7a c9 b1 78 c2 0b bd e0 a8 cc 78 ae e7 80 67 83 67 79 e6 91 fa d1 3d 19 3c Data Ascii: o</dmjD7M;qQ[5EQ]TUE%QDEE>WE.99D6UdEJB$+p?WoKwM\|_c\|-xe8x^[q#.ooo:/g\|'\|l3!Snw{xwxWyzxxggy=<
2024-04-26 14:40:15 UTC	1255	IN	Data Raw: 56 ca 2a 59 2d eb 65 a3 6c 97 1d b2 53 f6 c8 5e d9 27 fb e5 b0 1c 91 63 72 42 4e cb 3d f2 90 3c 22 8f cb 53 f2 bc bc 20 2f ca 4b f2 b2 bc 22 af ca 6b f2 ae bc 27 9f ca 67 f2 8d fc 2c 7f a8 a7 be e6 d7 62 5a 42 33 5a 41 ab 69 75 ad a1 35 b5 96 d6 d6 3a 5a 57 eb 69 7d 6d a0 0d b5 93 76 d1 ee da 43 7b 69 7f 1d a0 03 75 90 66 75 b4 8e d1 59 3a 47 e7 ea 3c 9d af 0b 75 ad ae d7 0d ba 45 b7 e9 6e dd a3 07 f4 90 9e d0 0b 7a ab de a1 4f eb 9b fa 96 7e a0 1f ea c7 fa 89 7e aa 9f e9 f7 fa 83 fe a8 3f e9 cf fa 9b fe a1 7f ea 5f fa b7 fe eb e5 78 05 bd 42 5e 19 af 9c 57 cd ab e5 35 f4 9a 79 2d bc 56 5e 1b af 9d d7 df 1b e5 cd f7 96 78 67 bd 5f bc bf bc bf bd 7f bc 7f bd ff bc ff 53 a4 dc 54 2a 55 35 b5 28 b5 38 75 28 f5 65 ea 3b 2b b6 a8 2d 66 8b db 4a b6 ba 6d 66 bb Data Ascii: VY-elS^'crBN=<"S /K"k'g,bZB3ZAiu5:ZWi}mvC{iufuY:G<uEnzO~~?_xB^W5y-V^xg_STU5(8u(e;+-fJmf
2024-04-26 14:40:15 UTC	331	IN	Data Raw: 94 e7 49 87 f2 7c e5 fd 94 17 a8 85 f2 2a 85 9f 18 58 48 c5 28 06 16 56 31 92 6e 53 e1 47 ba b9 c2 cf 74 83 c2 0f 74 87 28 bc 47 77 92 8a 4d e9 4e 0e fa 2c 14 1e a4 3b 5b f9 15 74 d7 53 f3 6d ba e7 ed 57 e1 37 12 52 8e 15 49 05 69 24 d6 20 8d 26 4d c0 c6 a4 49 a4 29 d8 92 34 8d b4 1a b6 21 ad 41 5a 1f 27 92 36 24 6d 84 33 49 9b 91 f6 c7 d9 a4 e3 48 c7 e3 2e d2 49 a4 93 71 0f e9 54 d2 69 b8 8f 74 06 e9 25 3c 40 7a 99 26 3a 87 91 5e 21 7d 5c 5f db e5 d4 a3 b7 1c 7d 81 de 0a f4 36 a0 6f 57 7a 1b d1 db 8c be 03 e9 6d 41 6f 17 fa 0e a3 b7 1b 55 4e df c9 54 81 85 c5 61 54 05 d5 00 d9 00 55 97 6a 5e b2 35 a9 e6 57 32 5b 8f 6a 21 aa 95 c8 d6 a7 5a 85 ea e5 b6 f8 4c f5 2a d5 6b 64 df 50 7d 80 b2 ef a8 3e 56 f6 3d 55 2f 91 fd 40 55 53 7d 4d f6 23 d5 4f 4a 64 7f 51 Data Ascii: I\|XH(V1nSGtt(GwMN,;[tSmW7RIi$ &MI)4!AZ'6$m3IH.IqTit%<@z&:^!}\_}6oWzmAoUNTaTUj^5W2[j!ZLkdP}>V=U/@US}M#OJdQ
2024-04-26 14:40:15 UTC	1255	IN	Data Raw: 41 ea 85 68 cc a0 5e 94 7a 59 1a b3 a8 97 a7 de 96 c6 5c e4 a1 1f b7 e7 c7 cf 18 58 93 1f bf a0 3f 0e 03 2f d2 1f 8f fe e2 0c fc 41 7f 49 fa ab d3 9b 81 fe 9a f4 2f a3 37 3f fd 2b 68 61 ef 58 fa 57 d1 bf 96 de 71 f4 af a7 3f 9c de 49 f4 47 48 bd c3 e9 8f 54 ef 5d fa a3 16 f6 8e a0 ff 13 dd bc f4 de a3 9b 9f 6e 5d 9a f1 e9 d6 53 a2 37 25 dd fa 74 9b d1 cc 47 b7 b9 fe 82 7b 33 d0 6d 41 b7 2f cd 62 74 fb d3 dd 49 b3 0e dd bd 74 2f d3 9c 4e f7 1a dd 9b 34 d7 d1 bd 4d f7 2d cd 4d 74 df d3 fd 48 f3 28 5d 47 37 94 e6 09 ba e1 74 c3 69 9e a5 1b 49 37 8a e6 39 ba a4 ab 34 2f d0 fd 4a f7 07 cd 4b 74 7f d3 fd 4d f3 1a dd bf 0c 2a 34 af 13 88 ff d3 7c 48 0c 10 03 f1 f7 25 d1 23 9a f2 7e 8c 72 5a d8 7c 4a b4 c4 38 34 9f 11 e3 11 13 d2 7c 47 4c 24 b5 17 13 13 ab e9 13 Data Ascii: Ah^zY\X?/AI/7?+haXWq?IGHT]n]S7%tG{3mA/btIt/N4M-MtH(]G7tiI794/JKtM*4\|H%#~rZ\|J84\|GL$
2024-04-26 14:40:15 UTC	1255	IN	Data Raw: 88 47 89 c7 da 42 33 f1 04 f1 24 f9 d8 c4 33 28 1f 97 78 21 91 8f 47 bc 42 bc 46 3e 3e f1 86 12 f9 44 c4 27 c4 a7 e4 13 13 9f 4b f9 a4 c4 37 ca 27 23 7e 49 e4 93 13 bf 13 15 f9 14 44 ad 44 3e 35 f1 17 f1 0f f9 34 c4 bf 4a 14 3f 10 ff 53 27 f2 e9 a9 3b 4a e4 33 51 8f 4a 3d 3a f9 cc d4 53 4a f9 6c d4 53 2b 9f 9d 7a 9a 35 66 7b 51 cf 49 bd 32 f9 1c d4 ab 52 af 41 be 32 f5 5a d4 eb 92 af 4e bd be 12 f9 da d4 1b 52 1f 4c be 0e f5 21 9a e8 9c 48 7d 28 f5 e5 e7 eb 8d f5 15 2c cc b7 a2 be 92 fa 6d f2 8b a8 df a5 fe 8a fc 55 ea 6f 15 db 91 ff 8b a6 20 ff 98 66 1c 9a 99 c8 7f a6 99 99 33 99 84 66 16 9a d9 3d ce c0 d8 cc 41 c2 a4 34 73 d2 cc 43 91 d1 cc ab 84 89 69 e6 a3 59 9c a2 a4 59 42 7f 77 8c d0 2c 49 73 06 c5 38 34 67 d1 5c 42 b1 0d cd 65 34 57 52 ec 4e 73 35 Data Ascii: GB3$3(x!GBF>>D'K7'#~IDD>54J?S';J3QJ=:SJlS+z5f{QI2RA2ZNRL!H}(,mUo f3f=A4sCiYYBw,Is84g\Be4WRNs5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49733	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:15 UTC	1015	OUT	GET /api/internal/app_metadata HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://runrun.it/share/form/0GZMCgHSxRh4PBOM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5
2024-04-26 14:40:15 UTC	871	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:15 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin ETag: W/"c0d0f4cd80927318afe3a81c022e1138" Cache-Control: must-revalidate, private, max-age=0 Content-Security-Policy: frame-ancestors 'self' https://enextrunrunit.s3-us-west-2.amazonaws.com https://teams.microsoft.com X-Request-Id: 537b27dc-1da4-43dd-82da-75ba6bb46eac X-Runtime: 0.018713 X-Rack-Cache: miss Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding, Origin Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:15 UTC	384	IN	Data Raw: 35 64 31 0d 0a 7b 22 61 64 76 61 6e 63 65 64 5f 70 61 73 73 77 6f 72 64 5f 65 78 70 69 72 61 74 69 6f 6e 5f 64 61 79 73 22 3a 39 30 2c 22 70 61 73 73 77 6f 72 64 5f 6d 69 6e 69 6d 75 6d 5f 6c 65 6e 67 74 68 22 3a 38 2c 22 63 68 61 72 74 5f 63 6f 6c 6f 72 73 22 3a 7b 22 63 6f 6c 6f 72 5f 30 31 22 3a 22 23 46 38 42 42 44 30 22 2c 22 63 6f 6c 6f 72 5f 30 32 22 3a 22 23 45 31 42 45 45 37 22 2c 22 63 6f 6c 6f 72 5f 30 33 22 3a 22 23 43 35 43 41 45 39 22 2c 22 63 6f 6c 6f 72 5f 30 34 22 3a 22 23 42 33 45 35 46 43 22 2c 22 63 6f 6c 6f 72 5f 30 35 22 3a 22 23 42 32 44 46 44 42 22 2c 22 63 6f 6c 6f 72 5f 30 36 22 3a 22 23 44 35 45 30 45 44 22 2c 22 63 6f 6c 6f 72 5f 30 37 22 3a 22 23 39 39 39 39 39 39 22 2c 22 63 6f 6c 6f 72 5f 30 38 22 3a 22 23 45 36 45 36 45 36 Data Ascii: 5d1{"advanced_password_expiration_days":90,"password_minimum_length":8,"chart_colors":{"color_01":"#F8BBD0","color_02":"#E1BEE7","color_03":"#C5CAE9","color_04":"#B3E5FC","color_05":"#B2DFDB","color_06":"#D5E0ED","color_07":"#999999","color_08":"#E6E6E6
2024-04-26 14:40:15 UTC	1112	IN	Data Raw: 63 6f 6c 6f 72 5f 31 35 22 3a 22 23 46 45 43 42 38 35 22 2c 22 63 6f 6c 6f 72 5f 31 36 22 3a 22 23 42 38 45 30 42 30 22 2c 22 63 6f 6c 6f 72 5f 31 37 22 3a 22 23 46 44 39 31 32 36 22 2c 22 63 6f 6c 6f 72 5f 31 38 22 3a 22 23 38 34 39 32 41 36 22 7d 2c 22 74 72 69 61 6c 5f 64 61 79 73 22 3a 31 34 2c 22 6f 6c 64 65 73 74 5f 6d 77 70 5f 79 65 61 72 73 22 3a 31 30 2c 22 6d 61 78 5f 77 69 64 67 65 74 73 5f 63 6f 75 6e 74 22 3a 33 36 2c 22 6d 61 78 5f 61 73 73 69 67 6e 65 65 73 5f 70 65 72 5f 74 61 73 6b 22 3a 34 30 2c 22 6d 61 78 5f 64 6f 63 75 6d 65 6e 74 5f 73 69 7a 65 22 3a 35 33 36 38 37 30 39 31 32 30 2c 22 6d 61 78 5f 73 75 62 74 61 73 6b 73 5f 70 65 72 5f 74 61 73 6b 22 3a 31 35 30 2c 22 6d 61 78 5f 73 75 62 74 61 73 6b 5f 64 65 70 74 68 5f 6c 65 76 65 Data Ascii: color_15":"#FECB85","color_16":"#B8E0B0","color_17":"#FD9126","color_18":"#8492A6"},"trial_days":14,"oldest_mwp_years":10,"max_widgets_count":36,"max_assignees_per_task":40,"max_document_size":5368709120,"max_subtasks_per_task":150,"max_subtask_depth_leve
2024-04-26 14:40:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49734	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:15 UTC	1047	OUT	GET /packs/media/Inter-Regular-U5F6TEU7.woff2?v=3.13 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://runrun.it sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://runrun.it/packs/css/shareable_form_app-BBI5GVUP.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5
2024-04-26 14:40:15 UTC	385	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:15 GMT Content-Type: application/font-woff2 Content-Length: 100368 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:15 UTC	870	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 88 10 00 0d 00 00 00 04 93 a4 00 01 87 b1 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 86 04 1b 83 c5 7e 1c 81 a6 42 06 60 00 81 e7 78 0a 87 d7 74 86 b6 45 0b a7 58 00 01 36 02 24 03 cf 2c 04 20 05 8d 4e 07 82 ec 63 5b 37 2e b4 da 4f 5f b6 f7 ae db 75 3b ba b6 54 82 40 8d 63 08 04 06 26 fa 39 d4 d6 18 35 17 00 0b 68 a2 f4 f5 45 e6 12 44 1c 6b 4e 07 2c d5 72 ca f7 a5 63 c8 02 36 9c 8a 6a ef c5 57 50 bd 56 be e3 41 0f d9 eb 70 35 11 56 d9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff df 58 f2 23 fa 4d df bc bd 9d d9 bd e3 f6 3e 28 02 42 40 45 14 44 85 18 63 d4 fc 4d b4 31 6d 9a 7e d2 36 69 0b 85 41 11 4c 44 68 5e 74 50 b2 64 54 95 aa ba 57 34 f1 42 b5 ac 0d 8d b6 e8 6e 6d f7 10 91 b6 10 77 fa 39 06 22 Data Ascii: wOF2~B`xtEX6$, Nc[7.O_u;T@c&95hEDkN,rc6jWPVAp5VX#M>(B@EDcM1m~6iALDh^tPdTW4Bnmw9"
2024-04-26 14:40:15 UTC	1255	IN	Data Raw: 1c 31 aa fe f9 f1 0c 51 44 51 5f 04 11 d0 0a 43 1d 54 b6 c1 de 28 ad 68 a9 f5 72 d9 d4 63 14 fe 7d a3 a5 96 65 59 96 25 0a ff 46 b4 fc 2b a5 94 52 42 e9 de e1 9a dd 88 a6 bf ab aa aa aa 0a 05 2f 3d fa c7 35 0d 8d e4 3e 68 06 5f ab 64 26 82 59 15 2b f1 bd a0 3f 94 aa 71 73 df f0 7f d1 91 4d 13 f0 28 5a 97 ff 32 ec b8 df 88 0d f9 96 d9 17 0f ee f0 83 85 ff c5 95 88 c6 3f f8 f3 9d e7 54 35 78 b7 e4 a6 2c b7 e0 df 35 0f 7c e1 c9 7b 40 8a 71 eb 3e 24 89 26 aa 2d 5d 1c e2 14 97 71 37 51 63 7a c4 12 af 55 5b 7c 32 f7 1f aa 18 b6 b6 7b 0e 86 a4 b0 e4 f2 08 45 e1 b2 8b 8e 42 18 84 4a 42 61 34 1e 8c 44 87 0f 7e c4 5f f6 7f aa ba ba ba ef 1d 44 1e 24 3b 59 27 59 10 8f 1f f2 03 b1 1f 7a 20 16 42 36 f0 da c7 f3 ba f5 3f e7 9c 9b 7b 93 10 42 08 01 11 21 44 44 88 c0 22 Data Ascii: 1QDQ_CT(hrc}eY%F+RB/=5>h_d&Y+?qsM(Z2?T5x,5\|{@q>$&-]q7QczU[\|2{EBJBa4D~_D$;Y'Yz B6?{B!DD"
2024-04-26 14:40:15 UTC	1255	IN	Data Raw: 6f 9a d3 13 ef 03 f5 a5 3a c0 a7 ef ac 82 11 50 88 0b 71 15 fa cc 4b 8b db 64 be 5f 33 f3 84 91 6c 59 08 63 6a 4f b2 3f 6c 2f 77 81 f0 70 59 c9 a6 4e f9 d7 db 52 2a 81 0c 81 94 31 fa c7 d6 34 a9 b5 65 e9 ef f8 81 a9 db 84 a9 f0 e5 31 aa ca 8a 98 f3 04 83 81 1b 9c 97 f3 c4 0b b1 69 20 04 b2 ad 75 ec 90 d2 45 a4 13 6a 60 24 b1 b7 aa 13 fb 7b 30 94 2d b5 a5 35 31 c2 19 e4 93 f9 c1 41 d5 d7 17 b7 b8 bc 89 fd 3d 15 b7 ee 6c bc 73 95 f3 93 f5 e1 03 98 38 9d f9 42 d7 f4 8b f4 d4 5c a9 8e c3 b0 40 61 34 ca 55 fe f4 b1 b1 39 4d b0 93 70 36 49 3f 85 53 56 6d 01 8a 16 1e e9 00 03 78 88 0f 38 c2 16 24 e8 63 fe e8 f3 45 5d d4 32 2b 28 ea 18 c0 ef d8 ae f2 57 10 2c ef 0a 02 0c b4 bf 9b 0c 70 84 03 ec e8 db fc fe ab 7a 04 a8 ea 9e 81 70 9f eb a7 d8 9f 7e fb 18 0c 09 49 Data Ascii: o:PqKd_3lYcjO?l/wpYNR*14e1i uEj`${0-51A=ls8B\@a4U9Mp6I?SVmx8$cE]2+(W,pzp~I
2024-04-26 14:40:15 UTC	400	IN	Data Raw: 4a 79 c7 7d 52 3a 60 0d 20 87 06 9a e8 61 ee d3 26 f9 3b c7 2b 4f 5d a3 2a 8c 21 7c 45 90 24 6c 99 f8 cc e1 63 cb c8 7b d2 1a e9 aa ee fd be 87 b8 32 3e 0a 94 84 90 b5 e5 63 ff 60 31 b4 3e ba 0b 12 c8 2e dd 59 8b 38 00 a8 b7 d5 e4 e1 bf 6f fa 25 dd d3 55 77 93 ba 36 58 92 b3 a0 09 ff 62 33 6c a9 11 4c dd 4e 7a ed f4 cb 59 66 03 a8 f1 0c 9b 63 1e de 6e f3 5b 3b 0e 38 48 fc 63 f6 f0 2c 82 b6 0f 11 26 72 58 1f 83 4a 17 8a 03 28 8b 6f bc 37 52 6c a5 a0 a0 8c d6 8f a2 4f 2a 81 c4 03 04 79 5b 77 9a 10 83 f4 81 20 a0 49 26 a4 08 0c 9c 34 4f 2f 6a 39 04 df b9 47 28 b9 b9 ce 40 25 12 f8 9a d9 93 7e 55 8c 3d 49 6c 18 d3 98 e6 a3 34 42 28 c2 84 fb b2 9e c2 7d 28 da fb b8 fc f7 e0 d7 69 52 a4 08 29 44 44 ac 2c 44 c2 70 58 94 8b f4 fc 5a 8c 79 3f c4 a5 8b 88 59 16 d3 Data Ascii: Jy}R:` a&;+O]!\|E$lc{2>c`1>.Y8o%Uw6Xb3lLNzYfcn[;8Hc,&rXJ(o7RlOy[w I&4O/j9G(@%~U=Il4B(}(iR)DD,DpXZy?Y
2024-04-26 14:40:15 UTC	1255	IN	Data Raw: 16 b1 19 b5 35 46 8c 58 07 1a 32 e2 70 22 fe ff e7 6f 56 43 45 59 31 8a 68 f2 22 90 80 5f 4b 4d 96 76 f6 f7 86 b1 e9 dd a3 6a a4 22 60 01 d2 2a ff bd cc d5 3f 77 71 6f af 54 af a3 9d 2a a0 09 10 49 08 21 6d 06 f4 97 a6 1e 8a d6 d3 5e 57 3f e8 55 95 dd d7 f6 62 49 a9 1a 12 30 0d 52 3a 29 5b fe df 80 9a ae 2a 55 e5 df 3c 3e de 1c 48 41 0c 22 96 97 21 1e 84 3a bd bd d7 55 30 00 66 43 06 e1 16 7b 87 60 24 04 63 41 30 15 04 57 80 e0 fb 20 b8 0f 04 0f 81 60 1e 08 9e 01 c1 62 08 3a 4d 42 4c 29 0b 10 e2 01 84 b4 80 d0 74 20 34 0b 08 d9 00 21 39 10 8a 07 84 52 01 a1 3c 40 68 0f 20 54 07 08 dd 02 42 1d 40 a8 1f 08 8d 00 a1 67 40 e8 03 10 d6 06 c2 ba 40 78 3e 10 76 01 84 7d 00 e1 30 5f 4a 33 4e 3b a5 a7 48 1e 40 b8 16 10 6e 06 84 2f 00 c2 37 00 e1 76 20 dc 0f 84 27 Data Ascii: 5FX2p"oVCEY1h"_KMvj"`?wqoTI!m^W?UbI0R:)[*U<>HA"!:U0fC{`$cA0W `b:MBL)t 4!9R<@h TB@g@@x>v}0_J3N;H@n/7v '
2024-04-26 14:40:15 UTC	1255	IN	Data Raw: a9 9f 7d 88 65 d7 67 c6 f1 0b 3e 9a ca d7 eb 66 16 31 f4 73 86 a6 a9 cf a7 c8 c6 65 d7 65 db b3 df 67 2f 0f 74 b7 7e 4a e5 45 a5 35 fb cf 1c ef 9c 70 65 cb d3 77 43 79 47 39 a3 7c 5c d8 55 78 b1 28 a7 b8 a8 b8 b5 b8 4f 73 c5 c3 c5 b1 f6 7e f1 e3 66 68 f1 9a 6e db 1e 37 59 e8 50 fd 51 12 a5 f6 c1 b8 a4 04 c2 68 54 89 ce 9d 07 31 24 a5 be c3 f6 01 35 e2 e6 06 b2 3a 59 07 e3 b8 bc f7 4d 5c 7e 4f e6 69 b6 c2 20 b8 3b 5b 7e e8 a8 b8 58 61 d1 72 70 34 15 d7 1b 6a 7f 32 ae c5 b8 96 53 fb a6 46 6b 9b a1 46 b1 61 51 5b ad ed 44 2c 37 ff 72 99 55 d6 a7 d5 69 5b 71 ef 1b b6 e3 77 a3 76 ed b3 d7 fd af f6 cb 09 f8 0f 66 a0 6e ee 56 dc df 63 5d d4 ed a6 19 b4 1b 0c 8b f5 51 8d 33 8d af 4b a7 8c 18 d3 0e dc 08 99 d8 68 68 61 4e fd bb 27 bf 2b 0b 1d 3c 33 e6 dc cb 1d 75 Data Ascii: }eg>f1seeg/t~JE5pewCyG9\|\Ux(Os~fhn7YPQhT1$5:YM\~Oi ;[~Xarp4j2SFkFaQ[D,7rUi[qwvfnVc]Q3KhhaN'+<3u
2024-04-26 14:40:15 UTC	1255	IN	Data Raw: f0 ab 04 49 4a 36 59 60 21 17 79 94 ef 57 7d 89 4e fb f6 b3 ee d3 9a 0c dd 6c ec ab 65 bb c2 5d b9 27 3c 90 c7 92 57 29 af 85 98 30 be 70 99 ef 15 00 00 00 38 84 d1 0d 6a 07 0f 1d d2 29 74 a1 1b 3d e0 fb 6e 34 10 43 02 29 64 90 93 a2 19 b4 d3 d1 da f0 81 63 80 bf d5 2d 1b 18 3f 4d c6 0f 89 73 d3 01 d6 b2 d0 bd 0b cb 0f dd 71 c7 20 54 4e 4e aa aa ef 5a 25 a1 ea f1 af e6 2c ef be a1 c5 ab 99 4a 44 26 ef f0 d5 05 98 24 14 8a 11 24 c5 72 2b fe 28 8e 29 33 4b d1 73 69 54 a6 74 a8 4a 57 b3 eb a6 a2 8f 07 8a bd be 98 95 d6 71 67 b0 89 a1 e9 e8 43 ea bc 12 33 4c 23 53 8c ce 6a 8c 64 84 d8 44 42 13 99 42 a5 d1 19 4c 16 9b c3 e5 f1 05 42 91 58 22 95 c9 15 4a 95 5a a3 d5 e9 0d c6 9d 77 dc 19 b7 bc e3 e1 e9 e5 d3 97 6f 3f 7e fd a9 42 ff 8b 98 a7 c4 94 cd be fe 3a d4 Data Ascii: IJ6Y`!yW}Nle]'<W)0p8j)t=n4C)dc-?Msq TNNZ%,JD&$$r+()3KsiTtJWqgC3L#SjdDBBLBX"JZwo?~B:
2024-04-26 14:40:15 UTC	331	IN	Data Raw: 55 e3 a4 4a 76 6f 51 96 ba 87 d2 8d 5d c1 cd cb 39 9c 55 17 4c fd 86 dd a7 e5 1a 80 50 0f c2 1b 7b 19 46 9f 62 35 e1 e0 e1 4e 18 c7 77 45 ff e6 46 f9 e5 c9 57 a2 5c 85 4a 55 81 90 cd 6d fa 1a 47 5b 94 df aa 6a 80 62 71 31 c6 34 10 3b e5 4f 87 e6 09 23 5c 6b 1b 49 1c 01 21 52 24 d9 98 75 1b d9 b9 49 28 31 12 46 ec 8a 22 e8 61 0e 9e cb 8a 63 d8 1f bb 95 c6 11 89 54 39 c1 64 9f f8 99 41 2a 81 5e 34 b1 6f bb 38 43 83 b9 39 58 10 b4 78 b0 be 52 62 a5 44 94 87 8f 59 b7 0d 6a a0 d6 96 d5 ac f1 11 d8 43 c8 5c e5 76 54 e6 dd 03 8c 58 84 21 83 a8 1a 52 23 f6 3a 6e 35 6b 25 ca f0 2e 11 b4 d6 b2 44 bc f6 06 1d c8 80 c8 e1 59 28 aa 26 e9 5f de 3e be 7e 24 32 85 4a a3 33 98 2c 36 87 cb e3 0b 84 22 b1 44 0a 80 10 8c a0 18 4e c8 e4 0a a5 4a ad f0 09 8a e1 04 09 20 45 33 Data Ascii: UJvoQ]9ULP{Fb5NwEFW\JUmG[jbq14;O#\kI!R$uI(1F"acT9dA*^4o8C9XxRbDYjC\vTX!R#:n5k%.DY(&_>~$2J3,6"DNJ E3
2024-04-26 14:40:15 UTC	1255	IN	Data Raw: a3 d5 e9 0d 46 93 d9 62 b5 d9 9d 1c 4f 54 6c 6f 66 00 00 00 00 00 00 00 00 00 00 00 34 24 5d 33 9c 04 90 a2 19 96 e3 05 34 00 10 82 11 14 23 10 49 64 0a 95 46 67 30 59 6c 4e 54 65 b5 b6 b5 b3 77 70 14 89 25 52 99 5c a1 d1 ea f4 06 a3 cd 2a 49 92 b1 d6 d3 c7 6d 00 00 00 00 00 00 00 00 60 55 9f 48 d3 4e e5 6b 38 b3 1d 5d 34 10 26 d3 61 2e 41 01 08 48 ac 90 d9 b0 45 63 cf 21 5c 4b d1 d6 9f a9 aa 00 00 00 00 c0 5f 45 29 b2 4e f9 f2 4b 09 ad 9b 44 98 77 d1 7a e3 b4 37 ec b3 df 01 07 1d a2 54 a5 5a 8d da 18 9d aa 06 36 12 e4 18 ae a8 86 5e b7 7f 95 97 e1 9f 78 3f f3 0a 00 00 2c 06 48 a8 da 6f f1 56 87 cb d9 f8 66 dd f4 43 fe b3 3b 02 f4 5f d2 6f 0c a9 ff 78 13 a1 ff 78 b4 b3 55 78 9a cc 8c 93 d6 d4 77 ed 45 ca dc b0 62 20 a5 f8 ea 9b ef d2 a4 cb 90 29 4b b6 1c Data Ascii: FbOTlof4$]34#IdFg0YlNTewp%R\*Im`UHNk8]4&a.AHEc!\K_E)NKDwz7TZ6^x?,HoVfC;_oxxUxwEb )K
2024-04-26 14:40:15 UTC	1255	IN	Data Raw: 0d 46 93 d9 62 b5 d9 1d 4b e7 ec 17 c1 e9 cb 37 a2 f4 67 4a 59 78 7e 70 21 4b 59 96 41 02 f5 90 a7 97 b7 0f c3 72 bc 20 4a 72 16 76 33 8f 92 a4 76 bf 31 5b 49 56 2d eb d0 68 75 7a 83 d1 64 b6 88 04 00 21 18 41 31 9c 20 29 9a 43 66 8a 99 8b 4b 2b b5 07 8f b5 7b d4 db 4e 51 58 a1 e5 9b f3 94 1d cb b2 d3 74 22 b3 77 c2 a0 47 a3 2a 53 07 a9 0c 19 36 62 d4 98 71 13 26 4d 51 d3 40 68 e9 e8 19 18 99 4c 33 87 a5 2c 04 05 0d e3 9d 0d 12 46 0a 11 cb 61 9e ca 05 93 d9 62 b5 d9 1d 4e 57 dc bb 6b 0f 30 30 96 af ce e2 93 9b b5 82 d7 5c 03 a0 a5 5b 7e 37 b6 00 00 00 1a 36 a1 c0 90 0b 47 ba 1e 1f 7f 35 00 10 f6 0b 07 ec d5 96 51 f8 44 29 50 3e 5b c9 09 c8 e5 89 c2 f5 c8 25 ba dc b1 81 9b a3 e2 00 21 84 10 42 08 21 c4 bb 82 05 61 3a ba ad 50 28 6a ce 06 2b f2 69 e8 61 47 Data Ascii: FbK7gJYx~p!KYAr Jrv3v1[IV-huzd!A1 )CfK+{NQXt"wG*S6bq&MQ@hL3,FabNWk00\[~76G5QD)P>[%!B!a:P(j+iaG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49736	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:15 UTC	1025	OUT	GET /api/external/forms/0GZMCgHSxRh4PBOM HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://runrun.it/share/form/0GZMCgHSxRh4PBOM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5
2024-04-26 14:40:15 UTC	854	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:15 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin ETag: W/"231402adfe41273c5205d40b309a421d" Cache-Control: must-revalidate, private, max-age=0 Content-Security-Policy: frame-ancestors 'self' https://enextrunrunit.s3-us-west-2.amazonaws.com https://teams.microsoft.com X-Request-Id: a532ce84-8363-49f1-b9bc-226d4b6960fd X-Runtime: 0.023640 X-Rack-Cache: miss Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:15 UTC	401	IN	Data Raw: 33 34 35 0d 0a 7b 22 74 69 74 6c 65 22 3a 22 53 74 72 61 74 65 67 69 63 20 52 65 73 6f 75 72 63 65 20 4d 61 6e 61 67 65 6d 65 6e 74 2c 20 49 6e 63 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 42 33 45 35 46 43 22 2c 22 64 61 74 61 22 3a 7b 22 71 75 65 73 74 69 6f 6e 73 22 3a 5b 5d 7d 2c 22 69 6d 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 75 6e 72 75 6e 69 74 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 69 6e 63 6f 6d 69 6e 67 2f 35 36 35 38 30 2f 38 38 38 33 61 64 38 66 64 39 66 63 38 39 38 65 63 64 63 36 35 31 66 63 66 33 37 30 31 33 34 62 6f 72 69 67 69 6e 61 6c 2e 70 6e 67 3f 58 2d 41 6d 7a 2d 41 6c 67 6f 72 69 74 68 6d 3d 41 57 53 34 2d 48 4d 41 43 2d 53 48 41 32 35 36 5c 75 30 30 32 36 Data Ascii: 345{"title":"Strategic Resource Management, Inc","background_color":"B3E5FC","data":{"questions":[]},"image_url":"https://runrunit.s3.amazonaws.com/images/incoming/56580/8883ad8fd9fc898ecdc651fcf370134boriginal.png?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026
2024-04-26 14:40:15 UTC	443	IN	Data Raw: 6d 7a 2d 53 69 67 6e 65 64 48 65 61 64 65 72 73 3d 68 6f 73 74 5c 75 30 30 32 36 58 2d 41 6d 7a 2d 53 69 67 6e 61 74 75 72 65 3d 62 33 34 31 38 66 63 34 66 65 63 37 39 34 66 64 65 62 66 30 63 38 35 30 32 36 37 35 38 37 32 35 32 31 36 37 66 66 65 38 30 33 32 32 66 39 32 31 64 31 32 30 32 32 62 31 37 33 33 65 36 61 65 33 22 2c 22 73 68 6f 75 6c 64 5f 73 65 6e 64 5f 61 6e 73 77 65 72 73 5f 74 6f 5f 73 65 6e 64 65 72 5f 65 6d 61 69 6c 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 5f 73 65 6e 64 65 72 5f 62 65 63 6f 6d 65 5f 67 75 65 73 74 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 5f 73 68 6f 77 5f 72 65 63 61 70 74 63 68 61 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 5f 73 68 6f 77 5f 6e 65 77 5f 61 6e 73 77 65 72 5f 62 75 74 74 6f 6e 22 3a 66 61 6c 73 65 Data Ascii: mz-SignedHeaders=host\u0026X-Amz-Signature=b3418fc4fec794fdebf0c850267587252167ffe80322f921d12022b1733e6ae3","should_send_answers_to_sender_email":false,"should_sender_become_guest":false,"should_show_recaptcha":false,"should_show_new_answer_button":false
2024-04-26 14:40:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49735	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:15 UTC	1064	OUT	GET /static/images/favicons/favicon-32x32.png HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/share/form/0GZMCgHSxRh4PBOM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5
2024-04-26 14:40:15 UTC	369	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:15 GMT Content-Type: image/png Content-Length: 758 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:15 UTC	758	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 8b 49 44 41 54 78 01 ed 57 3d 6c 13 31 14 7e 49 13 a2 a8 39 14 21 21 da 46 8c 69 c9 08 88 32 56 82 91 05 a6 b0 40 19 98 80 a1 1b 08 89 09 21 2a 96 32 14 26 16 9a a5 5d 80 a5 63 91 e8 58 04 2b 34 99 d3 f0 53 a1 10 a7 aa ae 69 af f5 e7 26 8e 7d 89 ef a7 4d 95 25 9f 74 3a fb ec b3 bf f7 de f7 9e ef 22 a5 ab b9 7d ea 23 a2 d4 67 0c 08 f4 9d 40 8c 42 22 79 69 92 86 a7 ae 51 7c 34 43 89 ec 05 8a a6 4e 8b e7 8d 5f 65 72 58 8d d8 f2 27 da fe be 46 8d ca 46 a0 f5 22 41 b2 20 6a 59 94 ce df 15 17 da 41 f0 ef dd Data Ascii: PNGIHDR szzpHYssRGBgAMAaIDATxW=l1~I9!!Fi2V@!*2&]cX+4Si&}M%t:"}#g@B"yiQ\|4CN_erX'FF"A jYA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49738	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:18 UTC	1064	OUT	GET /packs/media/logo_runrun_red-O7MMTJSU.svg HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/share/form/0GZMCgHSxRh4PBOM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5
2024-04-26 14:40:18 UTC	397	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:18 GMT Content-Type: image/svg+xml Content-Length: 6768 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:18 UTC	858	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 37 70 78 22 20 68 65 69 67 68 74 3d 22 33 35 2e 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 39 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 31 38 2e 35 30 37 20 31 30 2e 30 36 37 34 43 31 31 36 2e 33 35 36 20 31 30 2e 30 36 37 34 20 31 31 33 2e 37 35 36 20 31 32 2e 31 33 34 38 20 31 31 32 2e 31 34 32 20 31 34 2e 32 39 32 31 43 31 31 32 2e 37 37 20 31 31 2e 33 32 35 38 20 31 31 31 2e 35 31 35 20 31 30 2e 32 34 37 32 20 31 30 39 2e 39 39 31 20 31 30 2e 32 34 37 32 43 31 30 38 2e 37 33 36 20 31 30 2e 32 34 37 32 20 31 30 37 2e 38 34 20 31 30 2e 36 39 36 36 Data Ascii: <svg width="177px" height="35.6px" viewBox="0 0 159 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M118.507 10.0674C116.356 10.0674 113.756 12.1348 112.142 14.2921C112.77 11.3258 111.515 10.2472 109.991 10.2472C108.736 10.2472 107.84 10.6966
2024-04-26 14:40:18 UTC	1255	IN	Data Raw: 20 38 37 2e 32 32 31 39 20 31 30 2e 33 33 37 31 20 38 36 2e 30 35 36 35 20 31 30 2e 39 36 36 33 43 38 36 2e 36 38 34 20 31 33 2e 38 34 32 37 20 38 34 2e 39 38 30 38 20 32 30 2e 34 39 34 34 20 38 34 2e 39 38 30 38 20 32 33 2e 31 39 31 56 32 33 2e 35 35 30 36 43 38 34 2e 30 38 34 34 20 32 34 2e 34 34 39 34 20 38 32 2e 39 31 39 20 32 35 2e 31 36 38 35 20 38 32 2e 30 32 32 36 20 32 35 2e 31 36 38 35 43 38 31 2e 30 33 36 35 20 32 35 2e 31 36 38 35 20 38 30 2e 38 35 37 33 20 32 34 2e 34 34 39 34 20 38 30 2e 38 35 37 33 20 32 33 2e 35 35 30 36 43 38 30 2e 38 35 37 33 20 32 31 2e 33 39 33 33 20 38 32 2e 33 38 31 32 20 31 37 2e 32 35 38 34 20 38 32 2e 33 38 31 32 20 31 34 2e 37 34 31 36 43 38 32 2e 33 38 31 32 20 31 33 2e 37 35 32 38 20 38 31 2e 39 33 33 20 31 32 Data Ascii: 87.2219 10.3371 86.0565 10.9663C86.684 13.8427 84.9808 20.4944 84.9808 23.191V23.5506C84.0844 24.4494 82.919 25.1685 82.0226 25.1685C81.0365 25.1685 80.8573 24.4494 80.8573 23.5506C80.8573 21.3933 82.3812 17.2584 82.3812 14.7416C82.3812 13.7528 81.933 12
2024-04-26 14:40:18 UTC	1255	IN	Data Raw: 2e 31 32 35 38 20 32 34 43 33 35 2e 32 32 39 34 20 32 34 20 33 34 2e 38 37 30 38 20 32 33 2e 33 37 30 38 20 33 34 2e 38 37 30 38 20 32 32 2e 33 38 32 43 33 34 2e 38 37 30 38 20 32 31 2e 30 33 33 37 20 33 36 2e 33 30 35 31 20 31 35 2e 30 31 31 32 20 33 36 2e 33 30 35 31 20 31 32 2e 34 30 34 35 43 33 36 2e 33 30 35 31 20 39 2e 37 39 37 37 35 20 33 34 2e 33 33 33 20 39 2e 37 39 37 37 35 20 33 33 2e 34 33 36 35 20 39 2e 37 39 37 37 35 43 33 32 2e 35 34 30 31 20 39 2e 37 39 37 37 35 20 33 31 2e 34 36 34 34 20 31 30 2e 31 35 37 33 20 33 30 2e 32 30 39 34 20 31 30 2e 36 39 36 36 43 33 30 2e 35 36 38 20 31 33 2e 35 37 33 20 32 38 2e 38 36 34 38 20 32 30 2e 32 32 34 37 20 32 38 2e 38 36 34 38 20 32 32 2e 39 32 31 33 56 32 33 2e 34 36 30 37 43 32 37 2e 37 38 39 31 Data Ascii: .1258 24C35.2294 24 34.8708 23.3708 34.8708 22.382C34.8708 21.0337 36.3051 15.0112 36.3051 12.4045C36.3051 9.79775 34.333 9.79775 33.4365 9.79775C32.5401 9.79775 31.4644 10.1573 30.2094 10.6966C30.568 13.573 28.8648 20.2247 28.8648 22.9213V23.4607C27.7891
2024-04-26 14:40:18 UTC	400	IN	Data Raw: 38 2e 39 34 34 36 20 32 39 2e 34 38 33 31 20 35 30 2e 30 32 30 33 20 32 39 2e 38 34 32 37 43 35 30 2e 38 32 37 31 20 33 30 2e 31 31 32 34 20 35 33 2e 31 35 37 38 20 33 30 2e 30 32 32 35 20 35 34 2e 35 39 32 31 20 32 39 2e 33 30 33 34 43 35 34 2e 35 39 32 31 20 32 35 2e 35 32 38 31 20 35 35 2e 31 32 39 39 20 32 31 2e 36 36 32 39 20 35 35 2e 39 33 36 37 20 31 39 2e 36 38 35 34 43 35 36 2e 38 33 33 31 20 31 37 2e 34 33 38 32 20 35 38 2e 33 35 37 31 20 31 35 2e 37 33 30 33 20 35 39 2e 31 36 33 38 20 31 35 2e 37 33 30 33 43 35 39 2e 37 39 31 33 20 31 35 2e 37 33 30 33 20 36 30 2e 30 36 30 33 20 31 36 2e 31 37 39 38 20 36 30 2e 30 36 30 33 20 31 36 2e 39 38 38 38 43 36 30 2e 30 36 30 33 20 31 37 2e 38 38 37 36 20 35 38 2e 37 31 35 36 20 32 32 2e 32 39 32 31 20 Data Ascii: 8.9446 29.4831 50.0203 29.8427C50.8271 30.1124 53.1578 30.0225 54.5921 29.3034C54.5921 25.5281 55.1299 21.6629 55.9367 19.6854C56.8331 17.4382 58.3571 15.7303 59.1638 15.7303C59.7913 15.7303 60.0603 16.1798 60.0603 16.9888C60.0603 17.8876 58.7156 22.2921
2024-04-26 14:40:18 UTC	1255	IN	Data Raw: 2e 35 39 36 32 20 31 36 43 37 35 2e 30 33 30 35 20 31 36 2e 33 35 39 35 20 37 35 2e 37 34 37 37 20 31 36 2e 35 33 39 33 20 37 35 2e 37 34 37 37 20 31 37 2e 37 39 37 38 43 37 35 2e 37 34 37 37 20 31 39 2e 35 39 35 35 20 37 34 2e 36 37 32 20 32 32 2e 30 32 32 35 20 37 34 2e 36 37 32 20 32 35 2e 30 37 38 36 43 37 34 2e 36 37 32 20 32 38 2e 30 34 34 39 20 37 36 2e 32 38 35 35 20 32 39 2e 39 33 32 36 20 37 39 2e 33 33 33 33 20 32 39 2e 39 33 32 36 43 38 31 2e 35 37 34 34 20 32 39 2e 39 33 32 36 20 38 33 2e 37 32 35 38 20 32 38 2e 34 30 34 35 20 38 35 2e 32 34 39 37 20 32 36 2e 38 37 36 34 43 38 35 2e 38 37 37 32 20 32 38 2e 35 38 34 33 20 38 37 2e 30 34 32 36 20 32 39 2e 39 33 32 36 20 38 39 2e 30 31 34 37 20 32 39 2e 39 33 32 36 43 39 31 2e 37 39 33 36 20 32 Data Ascii: .5962 16C75.0305 16.3595 75.7477 16.5393 75.7477 17.7978C75.7477 19.5955 74.672 22.0225 74.672 25.0786C74.672 28.0449 76.2855 29.9326 79.3333 29.9326C81.5744 29.9326 83.7258 28.4045 85.2497 26.8764C85.8772 28.5843 87.0426 29.9326 89.0147 29.9326C91.7936 2
2024-04-26 14:40:18 UTC	1255	IN	Data Raw: 37 37 20 31 33 33 2e 32 30 38 20 31 2e 37 39 37 37 36 20 31 33 33 2e 32 30 38 20 33 2e 38 36 35 31 37 43 31 33 33 2e 32 30 38 20 35 2e 39 33 32 35 39 20 31 33 34 2e 38 32 32 20 37 2e 35 35 30 35 36 20 31 33 36 2e 38 38 34 20 37 2e 35 35 30 35 36 5a 4d 31 35 37 2e 37 37 20 39 2e 38 38 37 36 34 43 31 35 36 2e 36 39 35 20 31 30 2e 33 33 37 31 20 31 35 34 2e 39 30 32 20 31 30 2e 35 31 36 39 20 31 35 32 2e 37 35 20 31 30 2e 34 32 37 43 31 35 32 2e 33 30 32 20 31 30 2e 34 32 37 20 31 35 31 2e 37 36 34 20 31 30 2e 33 33 37 31 20 31 35 31 2e 31 33 37 20 31 30 2e 33 33 37 31 43 31 35 31 2e 33 31 36 20 39 2e 30 37 38 36 35 20 31 35 31 2e 34 39 35 20 37 2e 38 32 30 32 33 20 31 35 31 2e 34 39 35 20 36 2e 37 34 31 35 37 43 31 35 31 2e 34 39 35 20 35 2e 30 33 33 37 31 Data Ascii: 77 133.208 1.79776 133.208 3.86517C133.208 5.93259 134.822 7.55056 136.884 7.55056ZM157.77 9.88764C156.695 10.3371 154.902 10.5169 152.75 10.427C152.302 10.427 151.764 10.3371 151.137 10.3371C151.316 9.07865 151.495 7.82023 151.495 6.74157C151.495 5.03371
2024-04-26 14:40:18 UTC	490	IN	Data Raw: 35 2e 32 35 38 34 20 31 34 38 2e 37 31 36 20 32 33 2e 36 34 30 34 43 31 34 38 2e 37 31 36 20 32 31 2e 39 33 32 36 20 31 34 39 2e 32 35 34 20 31 38 2e 37 38 36 35 20 31 34 39 2e 38 38 32 20 31 35 2e 39 31 30 31 43 31 35 30 2e 30 36 31 20 31 35 2e 32 38 30 39 20 31 35 30 2e 31 35 31 20 31 34 2e 35 36 31 38 20 31 35 30 2e 33 33 20 31 33 2e 38 34 32 37 43 31 35 32 2e 38 34 20 31 34 2e 31 31 32 34 20 31 35 34 2e 37 32 32 20 31 34 2e 32 30 32 32 20 31 35 35 2e 39 37 37 20 31 34 2e 32 30 32 32 43 31 35 37 2e 34 31 32 20 31 34 2e 32 30 32 32 20 31 35 38 2e 33 39 38 20 31 33 2e 33 30 33 34 20 31 35 38 2e 35 37 37 20 31 31 2e 39 35 35 31 43 31 35 38 2e 37 35 36 20 31 31 2e 31 34 36 31 20 31 35 38 2e 33 30 38 20 31 30 2e 33 33 37 31 20 31 35 37 2e 37 37 20 39 2e 38 Data Ascii: 5.2584 148.716 23.6404C148.716 21.9326 149.254 18.7865 149.882 15.9101C150.061 15.2809 150.151 14.5618 150.33 13.8427C152.84 14.1124 154.722 14.2022 155.977 14.2022C157.412 14.2022 158.398 13.3034 158.577 11.9551C158.756 11.1461 158.308 10.3371 157.77 9.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49737	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:18 UTC	1044	OUT	GET /packs/media/Inter-Bold-FINJV4KU.woff2?v=3.13 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://runrun.it sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://runrun.it/packs/css/shareable_form_app-BBI5GVUP.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5
2024-04-26 14:40:18 UTC	385	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:18 GMT Content-Type: application/font-woff2 Content-Length: 107144 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:18 UTC	870	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 a2 88 00 0d 00 00 00 04 ae d0 00 01 a2 2b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 86 04 1b 83 f5 3e 1c 81 a6 42 06 60 00 81 e7 78 0a 87 de 78 86 af 5e 0b a7 58 00 01 36 02 24 03 cf 2c 04 20 05 8d 36 07 82 ec 63 5b 78 42 b4 dd 52 64 bb fb ee fb 4f 97 b6 88 2a 28 99 62 82 38 3a a3 e2 c4 44 13 55 e7 90 ca b9 16 00 41 55 97 fd 6f 26 99 20 64 6c f7 30 80 f1 0c 32 87 5a 69 3a e4 54 5b 5f fd 07 2c 7f 06 9d b2 96 c3 c8 8d 6a e7 68 fd 87 13 16 21 ce fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff bf b7 e5 3f 91 6e fd ff 66 f7 de b4 dd c9 6e 2a 04 48 48 42 e8 1a 02 84 d2 04 15 15 3c 3d cb 81 de 75 4c 8a 75 de 0a 5d 10 ef 24 16 5e bc 94 62 3d 25 79 69 54 75 10 af 0a db ac ac af 5b 6c c7 14 3b 41 77 7b 49 Data Ascii: wOF2+>B`xx^X6$, 6c[xBRdO(b8:DUAUo& dl02Zi:T[_,jh!?nfnHHB<=uLu]$^b=%yiTu[l;Aw{I
2024-04-26 14:40:18 UTC	1255	IN	Data Raw: 3b c5 3f f3 77 d7 82 1d c2 6b cc fc 2c 99 7e 96 3d 6b 78 21 7b fa b5 a6 a6 94 68 10 cc 1e 61 f1 47 bb d3 99 cd da 52 4a da 05 e9 aa 39 a1 76 c2 17 95 2e c5 95 4f 5e 79 7d ad a9 a2 72 4f 36 95 77 bb 94 cb 7d 87 be 79 e9 ae 2f 1d bc 0b 2a 48 e3 8b f7 ca 2b 5a 4a 21 2e f9 37 65 9c 87 0d 16 41 4d 2a df 51 a7 3d 0f 16 84 7f da 1f 3e 4a cf cb e7 d0 0a e2 95 f7 af 16 cd 14 25 46 69 3a 4f a9 3d c5 53 48 4f 4b 65 3f 1d 55 0f d5 54 cd fe 3a 6a 7c d5 f3 53 38 ca 60 98 d9 da df 2d 95 1e a4 f1 13 fe 13 c1 8e 58 0b 4a 2b 16 0c ac 58 e0 dc d0 fd 8b 4a d9 a4 bc d4 77 b0 c7 b3 33 7f b6 a3 42 fe 08 e3 43 51 14 5d e9 4b c8 ae c8 fe a4 2d 97 b5 57 21 7f 7d 58 2f cd 8f 9a 65 59 cb 97 fc 24 83 67 83 28 fb c7 52 bf 0f 4b b1 92 86 f2 f0 3b 21 99 dd 7f f8 ef 59 51 27 a9 aa d8 bf Data Ascii: ;?wk,~=kx!{haGRJ9v.O^y}rO6w}y/H+ZJ!.7eAMQ=>J%Fi:O=SHOKe?UT:j\|S8`-XJ+XJw3BCQ]K-W!}X/eY$g(RK;!YQ'
2024-04-26 14:40:18 UTC	1255	IN	Data Raw: b5 4d 6a 94 44 bc c3 41 82 c0 b5 bd 1f 9b 13 57 ba 39 0d 84 24 ad bc 7e d2 8d e7 a9 7b df df 5a 6a d1 de 08 a2 99 b9 80 07 1f ae 6e e8 03 06 24 1e b0 e8 03 0e 98 4c d3 e6 35 20 e0 92 65 dc d2 22 06 b3 f5 3a 31 61 f6 03 41 08 0b d7 e6 8e 5a 1f ad e2 cb 8b c1 10 b5 e1 34 ad db 4d 06 84 71 19 15 e6 d5 43 ff 32 e0 7a bd bd 49 76 b7 bf 09 82 09 66 92 28 0a 49 56 1a 01 ec ff bf 7f 9f 7b c2 1b 56 1f b7 78 83 2a 52 25 56 5f 33 37 f6 0d 7c c2 b3 4e 15 e8 84 2f 2f a8 00 b6 f1 38 80 2b e1 b9 61 a8 dd ca 1d b3 04 05 cf 1d dd 56 62 bb 1b 2e a1 31 40 a5 2b d4 e2 c4 16 3c c1 11 3e 88 be 5f c3 f9 fc cf bc 6e 03 0b 87 85 10 48 68 da 88 5e d1 27 fa 45 09 e0 ef a7 3e bd bf aa 74 99 79 da 80 26 58 03 73 13 a8 71 4e 7b 0b 8f 33 b5 8b 92 c3 45 13 a5 02 68 70 6e 34 62 23 51 42 Data Ascii: MjDAW9$~{Zjn$L5 e":1aAZ4MqC2zIvf(IV{Vx*R%V_37\|N//8+aVb.1@+<>_nHh^'E>ty&XsqN{3Ehpn4b#QB
2024-04-26 14:40:18 UTC	400	IN	Data Raw: 8b 3f 56 e5 00 6b 5e 93 81 2f 16 e0 f9 df 4f 96 c7 e7 7a 5a b5 d7 f9 c6 7e 10 79 c1 36 90 be 9a ec c9 92 0c 3d 5a 82 04 f1 fb b5 7a b2 73 e8 22 8d 4e 4a 52 8b ff c3 16 7f e0 cd 24 54 c8 44 78 be a9 58 6d 1e 19 c1 ac 41 55 f7 b7 ef ed 0b 57 d8 91 0b c3 a2 85 07 fa 06 01 80 71 77 84 cc 49 fa 48 1f 6a 26 9c 0f bc 5d c4 fc 2f 53 b3 14 9f 7f 5a 68 72 66 0d 68 aa e5 1c 76 64 7c 10 91 0a a2 0e 11 2a 09 35 fd 7a fa ef 12 dd 4b d5 02 90 83 ac 1f 19 7f 16 3c d7 e0 39 94 a2 39 cf 8b c2 0b a2 6b 06 26 60 84 a0 a8 c2 81 70 70 86 57 bc 36 18 e0 41 54 8d 77 17 f0 d2 44 a4 49 4a f7 30 8d 66 9a e1 b4 e3 ef 4a 3f b3 66 4a fd ec f6 bb 15 f2 c1 04 96 70 1f 6b 58 19 4f d4 5f fd c5 92 12 d4 e1 36 0c fd 7f dc b3 f1 f6 48 ff dd 2c 40 4a 23 6c 19 8c d9 80 9d 45 15 2c c2 73 08 8f Data Ascii: ?Vk^/OzZ~y6=Zzs"NJR$TDxXmAUWqwIHj&]/SZhrfhvd\|*5zK<99k&`ppW6ATwDIJ0fJ?fJpkXO_6H,@J#lE,s
2024-04-26 14:40:18 UTC	1255	IN	Data Raw: 27 55 df 99 d9 fd d7 d5 d6 fc e3 6e 6d 44 44 8b 88 88 28 e5 29 a5 94 d5 44 4d 63 9f 04 52 7f f3 85 c5 63 21 22 62 65 21 22 c3 15 a5 2c f9 19 9b fd 50 e7 ae 7a a5 93 7a 94 60 63 4c ef 67 fc 8c cd 7e e5 fd 8a 5d b4 b9 21 c6 14 01 25 ea e1 76 8d 69 8d df 5b fe 62 5a 33 8a 8a 15 04 94 b2 0b 0a d1 f6 7e fd 53 7a de f7 fa 39 5f a1 09 4d 10 11 69 44 44 44 42 18 dc 07 72 c8 1a 55 2f 9f 79 7f ae fe 4f 74 ab 9a f1 de fb de 2c 32 52 05 94 40 22 2d a1 49 0b 65 ca f9 df 44 08 d4 69 3a 35 28 ae 79 7f cc 85 e0 5f 06 02 e0 da 21 8c 9c e9 27 84 b4 10 9e 0b 21 23 84 3e 21 0c 0b e1 d3 10 66 86 90 1b 42 5e 08 3b 43 b8 b1 27 32 40 e4 02 a2 70 88 12 21 aa 0d 51 73 88 d2 21 9a 04 d1 0c 88 3e 83 e8 07 88 e6 43 b4 03 a2 5d 10 1d 84 a8 18 a2 db 10 3d 81 38 12 e2 18 88 db 42 fc 02 Data Ascii: 'UnmDD()DMcRc!"be!",Pzz`cLg~]!%vi[bZ3~Sz9_MiDDDBrU/yOt,2R@"-IeDi:5(y_!'!#>!fB^;C'2@p!Qs!>C]=8B
2024-04-26 14:40:18 UTC	1255	IN	Data Raw: 19 02 b6 a6 24 fe 1e 9d 44 93 96 e2 63 f3 42 6c 28 9e 36 4a 0f ce 18 16 6f 76 45 aa 5f aa 8b 57 92 76 4c 21 c3 ff 2c f1 a5 4b ce cd 24 da 42 67 d3 02 9d fc f9 86 50 ed d0 90 d0 d2 d0 f6 84 9e 82 2e d5 9f 88 c8 0b 1d 4f e0 27 62 ae de 8c 78 10 f1 fc fc 45 11 a5 11 f5 69 8c b4 de 8c cc 5b 79 b7 2f dd 09 bf d3 98 d5 ab 33 ee 70 b2 96 b2 24 f2 2b b3 41 91 bb c8 2b f4 98 c8 d0 a4 c9 a3 48 c7 fa 29 51 49 51 ed f9 3f 61 aa 94 f3 8e 85 ed b9 8a 0b 42 e8 b4 52 74 ed 72 6b 6b 7e ef f9 18 2f 5f 50 0b c2 62 de f6 4d 31 ee 9c d8 bc a1 a0 4d 48 27 93 59 7d 4a bc 53 bc c7 63 01 33 2b f1 87 b4 1f dd a2 f9 fb 8a c7 82 aa 98 2c 1c 1a 8c a1 d6 66 6f 4f dd aa d1 4e 2a 4e 02 49 8e ce 3a cc 36 fb 24 fd 25 43 b2 b9 18 b5 f3 72 de 0b 69 49 1f 5f df 9a d4 55 c3 94 88 1f 6c ae d1 Data Ascii: $DcBl(6JovE_WvL!,K$BgP.O'bxEi[y/3p$+A+H)QIQ?aBRtrkk~/_PbM1MH'Y}JSc3+,foON*NI:6$%CriI_Ul
2024-04-26 14:40:18 UTC	1255	IN	Data Raw: 48 62 7b de 28 54 26 44 17 60 8f 79 9d 68 66 02 67 a6 e4 68 78 2d 3b 1f 28 19 bc 9f bc 23 45 91 49 77 7f 6e b1 86 85 d9 68 44 d4 63 c3 5f 36 68 3a d5 64 e0 66 14 15 e3 d6 7e 63 23 ea db 88 e1 5e a5 ed d1 63 e2 8b 28 ed 5e ef eb 29 47 ab 90 b6 79 e4 71 9e a8 49 66 be 41 8a b4 64 20 33 b9 ab 59 2a f5 90 d9 6c cd 4f 8e e4 2a 53 5e 54 d4 43 1f 6b 6a ee ba 6b b4 92 f5 56 4f 73 b4 ea 6e 47 1e c9 63 4f 92 ac bc 51 52 24 4d 86 cc 2a b8 ce aa d5 6a b5 da 9e 76 7b 85 eb c3 d4 9f 01 19 34 e4 0f 56 9d a6 8d 51 63 38 b8 a6 8b 99 e5 80 d6 d8 9c 01 cf e3 f2 35 6b bd de 04 e7 ae 30 e6 ae c8 3e cc 04 88 23 11 4b f6 f0 a6 77 8c 24 95 49 92 24 49 92 24 49 ba 5f 1a 12 20 49 92 24 95 e9 f6 5c 33 7a f7 c9 94 df 9e 0b 93 b1 66 8c ec 88 ba 09 4d 5b 28 cf 07 9f 7c f6 45 be 82 2e Data Ascii: Hb{(T&D`yhfghx-;(#EIwnhDc_6h:df~c#^c(^)GyqIfAd 3YlOS^TCkjkVOsnGcOQR$M*jv{4VQc85k0>#Kw$I$I$I_ I$\3zfM[(\|E.
2024-04-26 14:40:18 UTC	1255	IN	Data Raw: 61 6f f9 8b 0f ca d1 7e 2b 13 e3 86 9f 55 fb 90 71 7c 32 8a 52 9d 48 0c b3 4f 15 f8 4e 12 0a 11 61 d9 03 18 57 88 0f 70 80 1a 9a 52 72 1c 1a a1 09 3a fa 19 60 c9 2a e4 0a a5 3b 29 14 f0 88 1c d1 97 a6 db 71 9f f8 e2 74 15 35 c7 ac 9b d7 a2 ad 69 a1 41 5f c4 8a a0 a0 c6 85 78 4e 74 05 21 91 84 f5 0a d6 be a6 ef 21 32 18 cc 12 72 9f e6 3a bb fc 4a 3c 21 b2 32 2e 32 49 5c 88 a4 42 d0 48 43 69 5e ba 50 f5 9c da eb 69 f0 51 8c 5c 7d c1 f5 27 1d 46 92 4e 5a c5 49 d3 4d aa f4 48 6a b5 9b 98 d6 83 fa 7d 21 78 a8 db 22 ba 8b f3 32 90 10 98 d7 33 56 62 93 72 44 ca 90 74 c9 93 a4 60 91 6b 31 5e d9 7d 06 77 df de cd 9f c4 e2 6b e6 ec 4a 6c b7 7c 72 63 bb 2c db 5d 1c f3 3d b2 ae 5d 0e 6e 6c e7 a1 38 16 a4 7b 72 d8 b6 99 f6 c4 74 70 64 c9 0a eb 0a a2 d0 1f aa 87 35 cd Data Ascii: ao~+Uq\|2RHONaWpRr:`*;)qt5iA_xNt!!2r:J<!2.2I\BHCi^PiQ\}'FNZIMHj}!x"23VbrDt`k1^}wkJl\|rc,]=]nl8{rtpd5
2024-04-26 14:40:18 UTC	1255	IN	Data Raw: 2d 47 2e 2a 5a 35 08 d5 a8 a9 e6 a0 e6 2d 58 b4 64 19 df 0a 81 d5 c4 c9 9a d5 f5 65 16 0d bf 44 b2 f0 8e 80 d6 6a 95 a8 97 0c 04 41 f9 0b a3 e0 7c d8 3a bb 4e c2 47 78 2e 7f e3 30 41 d6 9e 7c 3e f9 54 f8 f1 ed a3 72 85 98 d7 4c 45 bf fe d1 7f fc c0 30 c6 a6 df 25 b1 75 43 ec 86 da d7 12 25 07 8e f6 73 e2 cc 85 2b 37 ee 3c 78 f2 2a 6f 92 1e 53 8d f4 34 83 58 8e 17 44 dc 89 41 56 54 cd f8 f7 09 9e 98 3b 7c 22 d7 25 51 d6 58 37 24 ae de 74 0a a9 d2 a4 7b 2b a3 33 c9 92 2d 47 2e 2a 1a ba 77 de cb f3 c1 47 9f 7c f6 c5 57 df c4 ad 02 14 4a f6 2e dd 05 34 5a 90 77 1d 34 10 ea b5 9e 86 a3 f9 0b fb 58 f0 da fc 3c c4 be 18 bb d0 77 df e8 38 10 ef 7a 26 a9 50 ab d5 6a b5 5a ad 56 73 d7 e6 93 4b 1c 00 00 30 3a 2c 07 08 04 0c 02 0a 06 0e 41 06 12 8a 2c 34 2c 79 38 1a Data Ascii: -G.Z5-XdeDjA\|:NGx.0A\|>TrLE0%uC%s+7<xoS4XDAVT;\|"%QX7$t{+3-G.*wG\|WJ.4Zw4X<w8z&PjZVsK0:,A,4,y8
2024-04-26 14:40:18 UTC	1255	IN	Data Raw: f0 7a 83 d1 64 b6 58 6d 76 87 d3 e5 f6 78 7d bc 05 10 61 42 19 17 52 7a 46 30 82 62 38 41 52 34 a3 52 6b b4 3a 84 14 d4 d3 0c 62 39 5e 10 b1 64 90 15 55 33 aa 2c 4b 24 c9 e4 4a 95 5a a3 d5 e9 0d 46 93 d9 62 b5 d9 dd b8 75 e7 de 83 47 4f 9e bd 24 d6 ba 58 51 a3 e9 88 56 0f cb 6f d0 db 1a 85 70 67 3d 0e e1 6d 41 28 a3 ca 30 14 c9 2d a2 d8 21 ba 8e c6 a8 df e4 98 14 0b f9 e5 0a 59 2b 4b 55 e2 1f 89 e9 04 94 10 10 40 70 15 1f 57 1d db d5 71 2e 99 e8 d2 93 73 78 5e 72 16 42 73 e6 2d 58 b4 64 19 df 0a 81 55 6b 84 44 c4 24 d6 6d d8 b4 65 9b 34 76 72 00 80 40 c0 20 a0 60 e0 10 64 20 a1 c8 42 c3 92 87 a3 41 13 d1 6e 24 5a b4 e9 d0 a5 b7 23 ea cf 88 77 dd 5c e1 29 51 a3 8e 44 cb 1e 07 c4 d2 bb 56 eb 26 06 0f 0c ca c5 ef d4 a6 18 06 13 57 2c b0 f3 8e 76 30 27 60 9c Data Ascii: zdXmvx}aBRzF0b8AR4Rk:b9^dU3,K$JZFbuGO$XQVopg=mA(0-!Y+KU@pWq.sx^rBs-XdUkD$me4vr@ `d BAn$Z#w\)QDV&W,v0'`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49739	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:18 UTC	1037	OUT	GET /api/external/forms/0GZMCgHSxRh4PBOM/description HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://runrun.it/share/form/0GZMCgHSxRh4PBOM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5
2024-04-26 14:40:18 UTC	1364	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:18 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin ETag: W/"223241dc853dd6dd595e05ef5a4891b0" Last-Modified: Fri, 26 Apr 2024 13:40:28 GMT Cache-Control: must-revalidate, private, max-age=0 Content-Security-Policy: frame-ancestors 'self' https://enextrunrunit.s3-us-west-2.amazonaws.com https://teams.microsoft.com Set-Cookie: secure_aplicatic1_session=Ris0VUVaa29PSDYxY2oxNVgwWHAydWNKOW1lV2dsd2x0dFdsZ2VweHF2VzhxK0FuL2lxdjhzdm1ZNnlyZDlMTkc4aUszTEFhZ0IvSVlSNkRMUS9HN3djREtMRCt4L253VGJlSGQvNUNMWjlpYjBLSmFCVDMxejlqb3ZxalpHTWxwNlRRVVdsdG4vMmJMQ1VsRkZMVUkvQTYvTkNuMEp3MitUcEVlZkhTOTRmajd1WWtuaVhMRzh6TENjVXNiT3RKSGViRzRYRWNYVmV5SkhVYlBJUklTc29sRExubERHUnlZVFZvNEVTWTBKdz0tLWZPUEFMVUtxYVczUVlyMUlTV1VsZFE9PQ%3D%3D--b84f1b1453def79eb518435f9e02318c0dd9fe91; path=/; secure; HttpOnly X-Request-Id: 08c9c939-34d1-4c41-a850-8d71794a7b40 X-Runtime: 0.043787 X-Rack-Cache: miss Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:18 UTC	498	IN	Data Raw: 31 65 62 0d 0a 7b 22 69 64 22 3a 35 36 35 38 30 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 5c 75 30 30 33 63 70 5c 75 30 30 33 65 4e 65 77 20 73 65 63 75 72 65 20 6d 65 73 73 61 67 65 20 66 72 6f 6d 20 5c 75 30 30 33 63 62 5c 75 30 30 33 65 4d 61 72 6b 20 4d 72 76 61 5c 75 30 30 33 63 2f 62 5c 75 30 30 33 65 5c 75 30 30 33 63 2f 70 5c 75 30 30 33 65 5c 75 30 30 33 63 70 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 71 6c 2d 63 6f 6c 6f 72 2d 69 6e 68 65 72 69 74 5c 22 5c 75 30 30 33 65 ef bb bf 5c 75 30 30 33 63 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 2f 70 5c 75 30 30 33 65 5c 75 30 30 33 63 68 31 5c 75 30 30 33 65 5c 75 30 30 33 63 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 73 72 6d 63 6f 72 70 2e 64 Data Ascii: 1eb{"id":56580,"description":"\u003cp\u003eNew secure message from \u003cb\u003eMark Mrva\u003c/b\u003e\u003c/p\u003e\u003cp\u003e\u003cspan class=\"ql-color-inherit\"\u003e\u003c/span\u003e\u003c/p\u003e\u003ch1\u003e\u003ca href=\"https://srmcorp.d
2024-04-26 14:40:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49740	52.217.163.209	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:18 UTC	911	OUT	GET /images/incoming/56580/8883ad8fd9fc898ecdc651fcf370134boriginal.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJMTGAIIZEXSVTORA%2F20240426%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240426T134142Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=b3418fc4fec794fdebf0c850267587252167ffe80322f921d12022b1733e6ae3 HTTP/1.1 Host: runrunit.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:18 UTC	477	IN	HTTP/1.1 200 OK x-amz-id-2: TCfnn2UV7oKAZJB260VhdjKNmcx6ZupaObURmdBlCNAF826BGuVM/ulyLsLiFrhiwLIX4sP62DY= x-amz-request-id: MRVCE8654WD204NN Date: Fri, 26 Apr 2024 14:40:19 GMT Last-Modified: Fri, 26 Apr 2024 13:41:06 GMT ETag: "1439b27fc2358182ca3db21fe384401b" x-amz-server-side-encryption: AES256 x-amz-version-id: LHC29EvaSB1mlW.QMqpLpRSp6PLwbimd Accept-Ranges: bytes Content-Type: binary/octet-stream Server: AmazonS3 Content-Length: 74541 Connection: close
2024-04-26 14:40:18 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ee 00 00 00 b0 08 06 00 00 00 50 06 eb 64 00 00 0c 3f 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 40 08 10 40 40 4a e8 4d 10 91 12 40 4a 08 2d 80 f4 6e 23 24 01 42 89 31 10 54 ec c8 a2 82 6b 41 c5 02 36 74 55 44 b1 d3 ec 88 9d 45 b1 f7 c5 82 82 b2 2e 16 ec ca 9b 14 d0 75 5f f9 de f9 be b9 f7 bf ff 9c f9 cf 99 73 e7 96 01 80 76 82 2b 16 e7 a0 1a 00 e4 8a f2 25 31 c1 fe 8c a4 e4 14 06 a9 1b 20 80 0c 74 80 39 a0 71 79 79 62 56 54 54 38 80 36 78 fe bb bd bb 01 bd a1 5d 75 90 69 fd b3 ff bf 9a 26 5f 90 c7 03 00 89 82 38 8d 9f c7 cb 85 f8 20 00 78 15 4f 2c c9 07 80 28 e3 cd a7 e6 8b 65 18 36 a0 2d 81 09 42 bc 50 86 33 14 b8 4a 86 d3 14 78 af dc 27 2e 86 0d 71 Data Ascii: PNGIHDRPd?iCCPICC ProfileHWXS[@@@JM@J-n#$B1TkA6tUDE.u_sv+%1 t9qyybVTT86x]ui&_8 xO,(e6-BP3Jx'.q
2024-04-26 14:40:18 UTC	547	IN	Data Raw: 96 f2 92 d5 84 79 6d 49 dc ed 29 24 53 71 f5 78 53 82 3b 99 18 14 9a 1f 67 f8 ff 41 7a fb e0 61 fa 7f 1e 7f 82 b6 1e 3a 04 06 f8 9c f3 e1 08 a9 9f 12 ee cc f6 e7 4c 18 4f 77 af 58 26 df 6b ef c4 76 19 df 0f 35 e7 ce 8a 86 1a 40 08 ad f6 cd 96 0a 59 96 ec 3b 93 19 fa 6e f6 ff 4c b5 cf 0e 39 74 7c 27 ad d9 f4 5d 7a 61 fb 7d f0 1b d2 75 fe ca 8c fc 67 7f bd 36 6c 98 62 9f ca 0b 0a 44 a3 46 8e a6 95 b3 6e a6 cb 17 7e 1a 7f 55 75 52 bc d6 ea e0 e2 ff 12 7f 65 fc e5 73 42 36 f5 08 51 e6 1f 4c 1b 32 7d bb 35 73 99 d3 e3 2c 02 17 2a 43 ce 4e 26 93 bf d0 52 41 99 7f e0 86 74 c0 31 e5 fe 57 89 89 e4 1d c3 ca f8 2b e3 ef 4c 9b 7f dc 8a bb 85 71 80 d9 e4 c8 3c cf 08 29 be 67 85 62 dd 27 8e d3 d7 5e 7e 8d be ff da eb fc b7 7d 74 d0 d8 c8 08 d5 54 ff 3a 6a 57 bb be 8c Data Ascii: ymI)$SqxS;gAza:LOwX&kv5@Y;nL9t\|']za}ug6lbDFn~UuResB6QL2}5s,*CN&RAt1W+Lq<)gb'^~}tT:jW
2024-04-26 14:40:18 UTC	16384	IN	Data Raw: 32 6f ef 79 96 ee 7b f3 4b d4 83 ed 33 23 71 7d f8 8f 36 f1 92 58 5c 68 0f 0f 62 72 3d d1 e9 91 23 47 d2 d9 33 ae c5 b7 dd 3f 4d 93 91 c4 9f c9 fd d7 2b a9 d7 31 e2 11 51 be 8b cc 6c 22 62 35 3e 4a ff d5 0f de 4f e6 42 83 a6 91 a0 4a bc 3c e2 11 31 6d c7 10 54 69 3e f3 51 fc af 7e 28 fe 4f 71 62 98 41 f3 50 82 2a f1 f2 88 47 c4 b4 1d 43 50 a5 f9 cc 47 89 3f f5 43 89 bf 14 27 86 19 34 0f 25 a8 12 2f 8f 78 44 4c db 31 04 55 9a cf 7c 94 f8 53 3f fc 22 c7 9f 6e 95 b1 8b ed e2 41 ba ee 56 ca a3 28 22 e6 9c 00 c1 3f 7c a2 97 fe f6 b9 e7 e8 a1 8d 9b 83 cf 38 84 b8 00 03 e0 d5 17 52 21 5a 30 79 02 7d 0e 5f 90 b9 76 fe 7c 1a c5 bf 57 a4 a8 43 19 28 30 8f 8b e3 9f 60 11 11 76 3a 55 f9 8d b4 31 03 cc 81 33 12 aa fd 90 da ef 39 71 90 9e db 7a 0f ad d9 f8 1d b9 6c ec Data Ascii: 2oy{K3#q}6X\hbr=#G3?M+1Ql"b5>JOBJ<1mTi>Q~(OqbAP*GCPG?C'4%/xDL1U\|S?"nAV("?\|8R!Z0y}_v\|WC(0`v:U139qzl
2024-04-26 14:40:18 UTC	1024	IN	Data Raw: 15 0a 6f 87 eb 2c 7d ce 31 4e e5 e3 7f 0e 95 09 b1 3c 3b 34 30 e3 9e 64 e3 37 56 0c 27 b0 38 f7 84 54 ad f9 00 89 3b ef 36 b0 0c f8 21 2f 44 93 69 27 27 49 2b 5e e8 3a 2f e4 8c 57 a2 ad 5b b7 aa ad 1a 55 74 69 e9 c4 d8 01 01 74 f7 ba 4d 7a bf 3b 47 ff 28 66 90 5f 32 f7 35 2c ed 09 c6 c6 a6 2d 2e 71 37 aa 05 f4 61 a6 81 cc b0 b9 a7 58 68 41 4e 0b ee b2 59 8c 3b fd cf fa d7 4f eb f0 4c 93 b8 0b 2a 43 26 49 f0 52 02 19 84 ff f8 58 06 b4 bc ff 78 c9 c2 cd e1 6d d3 e4 c9 2b 90 b4 19 0b e7 cf 8f fa f6 7d d4 c7 61 3e 13 b5 e7 1e 19 61 1f 33 ef 4b 64 0d d6 fc 59 69 12 82 16 2d f4 3f d4 6e 6a ce da b6 7d a7 49 d6 c9 0c cd 11 c6 e7 03 07 f4 d7 95 fe 69 68 5c bc 58 2f 89 fb 7a 95 05 42 32 50 d7 ba 3f 5f 02 27 de 7f 5d fe d5 fd ff 8d 5c 0f bf bd 77 7f 74 4a 12 77 5a Data Ascii: o,}1N<;40d7V'8T;6!/Di''I+^:/W[UtitMz;G(f_25,-.q7aXhANY;OL*C&IRXxm+}a>a3KdYi-?nj}Iih\X/zB2P?_']\wtJwZ
2024-04-26 14:40:18 UTC	16384	IN	Data Raw: 22 a8 cc c9 93 4a e4 f5 87 71 1f f7 d4 b8 9c 0b 44 cf 31 7f cc b6 7f bd c6 0e 8b 19 85 a2 fe 40 88 96 2d 5b 2e 09 7f b1 e5 5b 58 7f 23 6e 37 45 33 d3 2e 8d 8d 57 a3 8a 8a 77 25 5d 3d 63 c5 a1 2f 9e 1c fb 78 34 7d 46 59 9e b8 ae a0 ff 81 a0 49 d8 37 5d fb c6 35 3b 45 82 99 cd 92 9a bd a4 5f 89 65 fb c5 55 87 ca 5c 40 e2 4e 9b 0a a0 bb 48 8c fb d0 21 83 e5 22 4e f3 49 6e fe 91 c4 5d 0c be 31 ee c0 b5 e2 f6 7f e9 45 19 a7 6a bd 08 c1 25 ee bf 4b da 1f 18 d6 aa 95 cb 8d 71 cf d6 85 6a 7d 26 c8 d9 8e 1d bb 0c 13 0b fd 4e 9d 9d b1 1d 3f fe 49 ab 37 98 e5 7d 82 80 9c 33 0f 2d f2 d7 de ae 8d 49 db f9 da 75 a0 1f e8 f2 8b 56 ec d6 ad 5b 76 0b 69 30 1a 0b e0 17 6c ca 09 b8 3d 44 fd 8f 0d 0c ef 5d 1f 69 01 7e b8 6a a5 6c a5 04 47 cb b4 73 4b ed 6f 99 50 09 da 2a ae Data Ascii: "JqD1@-[.[X#n7E3.Ww%]=c/x4}FYI7]5;E_eU\@NH!"NIn]1Ej%Kqj}&N?I7}3-IuV[vi0l=D]i~jlGsKoP*
2024-04-26 14:40:18 UTC	1024	IN	Data Raw: 77 a0 e3 fe 31 d4 69 7c 81 ec 1d 77 4a 7c ac 3e 7c 7d 67 13 a4 c9 f3 e7 2f d0 37 a8 95 14 9a 3f e6 28 1d 13 4e 1a 16 cf 7f d4 a5 bc 1f 6f 53 b7 82 2a 0b e9 e4 10 98 ed 0b 67 5e d8 dc 3c ad 85 e4 55 ef 52 c0 cf f6 a7 f4 98 27 6c fc 10 8e d5 9f 49 b6 6c de 02 e6 1d 1b 43 5c f4 a3 a1 34 68 28 9e c1 e3 33 6a 14 2c 98 49 54 65 98 2a 45 68 ab 6e 51 fa f7 ef 0b 55 a0 19 f7 ab fe f7 1b 50 6d 60 7f aa 02 63 ac f5 03 9d b2 f5 57 9a a3 8e 56 7f 7d 8d 04 8c 3f 9f be 73 2a 47 c4 0f e9 24 24 b1 07 f1 bc de 62 f4 df 5d 3b 41 73 d6 33 55 2c 07 a7 e1 a8 3f d3 50 15 6b 1c fa 40 af 1e 3d a2 3b 17 56 43 51 a6 9d 17 7a 8f 40 52 ca 26 b4 a6 b7 53 15 d7 17 98 97 43 44 35 a9 07 41 d3 be bd 7b 69 fe 2e 91 73 86 77 dc 59 2e e0 e7 5b fd d4 71 27 e3 6e f4 07 a4 6e 9e df 03 13 b8 6b Data Ascii: w1i\|wJ\|>\|}g/7?(NoSg^<UR'lIlC\4h(3j,ITeEhnQUPm`cWV}?s*G$$b];As3U,?Pk@=;VCQz@R&SCD5A{i.swY.[q'nnk
2024-04-26 14:40:18 UTC	16384	IN	Data Raw: 2d 0e e0 31 36 bf 39 40 06 70 3d d4 13 ec a3 47 9a c6 27 64 5a 3a f9 cb 01 d1 09 3b f6 91 a3 86 43 df b0 1c 0b ba d3 5f 2c c0 a1 f0 ee cb a9 fc e2 1e 5f 95 61 26 2d f0 36 ed a3 8f 40 e2 0e 09 8b 99 62 69 ff 27 74 dc 2f 53 ea 02 e4 c4 4f 35 03 32 ee 31 2c 17 bd 93 c7 4f ca 73 2f fc 51 25 ea 94 b2 d4 02 61 a9 c6 f0 08 de 53 bf 71 bd 1a 6f 99 f3 02 dd 4e cd 83 3a 80 94 b6 df 7b 17 a4 13 90 48 99 89 f3 64 d8 76 3c 89 38 6f c1 02 39 7a f8 a8 22 a7 ee ee 34 4c e4 fc e0 14 27 2c a3 25 d5 41 f8 72 04 a5 d5 94 68 b4 6f ef 24 ee d4 81 8c 4d 9c 3f 9f e0 7b ea e7 78 0e f2 1a 25 67 84 4a c6 9f ab a9 4b a9 69 7c 42 e2 e3 e5 b7 f1 50 af 1b 03 f5 3a c3 cf f6 a7 04 9f 6a 17 6b d6 6e c0 37 1d 0e 84 c6 e6 b4 14 cf 3f 54 ab e8 09 86 6f d4 e8 11 c2 37 a2 9d fa 4b 82 8b 1b b8 Data Ascii: -169@p=G'dZ:;C_,_a&-6@bi't/SO521,Os/Q%aSqoN:{Hdv<8o9z"4L',%Arho$M?{x%gJKi\|BP:jkn7?To7K
2024-04-26 14:40:18 UTC	1024	IN	Data Raw: 9d 11 7c 90 e2 f5 9a 2d 11 e7 7f ad ed af 66 6d 3c 9b 91 7f e4 06 32 da 1f 67 c0 67 a3 b6 24 19 b3 f8 d6 83 61 28 54 60 0b ac 5a 5b 8d e4 cb 7a cd 56 17 fd 3f fa 7f b4 bf e8 7f 66 84 50 a8 c0 0e 18 9f c9 f8 43 13 f7 bc e0 a4 06 d6 63 51 50 7d 0d f2 0c 0c 70 85 e4 9c a4 94 49 b7 de 21 d7 ba 1c b1 8e ab 34 50 9f 3b 7f 21 1d 3b f6 46 7a f6 97 cf a6 df 9e 38 41 eb b1 39 86 4c 43 b9 b8 c5 ac 89 5e 7e 8d 5a 9c 2c f2 73 e0 39 3e dd 7d bf 4a f3 d8 cd f4 b6 d5 ad db 66 d3 ae 9d bb d2 de bd 7b d2 61 7a 03 eb e1 b9 43 f4 44 15 9a c4 6b a5 0a 38 54 77 f3 8c eb 73 fe 7c 7c 8b 4b 0b f4 a4 17 fa b1 ed c6 e9 fc c5 a4 1b 9c 8c bd f8 ef 9f 7f 33 fd e0 d7 ff 98 2e 2e 7e 94 13 c5 9c f6 fc 37 4e 4e a5 07 f6 7d 23 7d e9 0e 5e cf 3e 97 36 4c 4e d7 10 5a a9 82 ea 6b 90 67 5c 9f Data Ascii: \|-fm<2gg$a(T`Z[zV?fPCcQP}pI!4P;!;Fz8A9LC^~Z,s9>}Jf{azCDk8Tws\|\|K3..~7NN}#}^>6LNZkg\
2024-04-26 14:40:18 UTC	5386	IN	Data Raw: d3 86 a9 8d f9 0b 43 3d cf 72 1c 2e 3e 1f 03 6f ec a3 63 29 39 e1 25 40 3c 49 e7 65 40 1f 9e 3e 9d 3e fc f0 43 5a 06 74 26 7d f4 d1 b9 74 f1 e2 45 f2 5d a4 35 fd 0b e9 0a ad f3 e7 5b 53 fc a5 62 f7 9e dd e9 f1 6f 3d 9e ee 3a 7c 30 4d d2 e4 3d 1f 7b de 49 04 89 41 d8 c4 bf 40 77 db 7f f9 ce bf a7 e7 4e fe 27 d5 45 6f 4d 25 1f 2f 2d ba 7b d7 97 d3 a3 77 7c 9b 9e cf 7e 6f 9a 99 9a 45 05 7a 17 ec 46 fd fc e5 74 cd 7e 8d f3 d7 13 6b f2 5f ed 1e ad d5 fe 4c e4 6b ca 7f ad 9d 4a 9a cf bf da 3d 8a f8 68 be e6 2b b2 f9 8c 23 ff 3c 84 98 2c 98 dc f4 fa 7f 6d 5d 44 8c f6 c7 c9 5b 75 8b fe 17 fd 4f 2e 9f 31 fe e8 df 2c cc 18 63 46 9e b8 fe d1 48 e2 7f 1b c9 63 2c 1b 69 90 31 39 93 01 87 7d 75 fe 37 36 08 ad 67 fc 31 77 dc 9b 6a 7b 07 a1 23 60 99 e2 0d 38 5c 87 99 fe Data Ascii: C=r.>oc)9%@<Ie@>>CZt&}tE]5[Sbo=:\|0M={IA@wN'EoM%/-{w\|~oEzFt~k_LkJ=h+#<,m]D[uO.1,cFHc,i19}u76g1wj{#`8\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49741	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:18 UTC	807	OUT	GET /static/images/favicons/favicon-32x32.png HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5
2024-04-26 14:40:19 UTC	369	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:19 GMT Content-Type: image/png Content-Length: 758 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:19 UTC	758	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 8b 49 44 41 54 78 01 ed 57 3d 6c 13 31 14 7e 49 13 a2 a8 39 14 21 21 da 46 8c 69 c9 08 88 32 56 82 91 05 a6 b0 40 19 98 80 a1 1b 08 89 09 21 2a 96 32 14 26 16 9a a5 5d 80 a5 63 91 e8 58 04 2b 34 99 d3 f0 53 a1 10 a7 aa ae 69 af f5 e7 26 8e 7d 89 ef a7 4d 95 25 9f 74 3a fb ec b3 bf f7 de f7 9e ef 22 a5 ab b9 7d ea 23 a2 d4 67 0c 08 f4 9d 40 8c 42 22 79 69 92 86 a7 ae 51 7c 34 43 89 ec 05 8a a6 4e 8b e7 8d 5f 65 72 58 8d d8 f2 27 da fe be 46 8d ca 46 a0 f5 22 41 b2 20 6a 59 94 ce df 15 17 da 41 f0 ef dd Data Ascii: PNGIHDR szzpHYssRGBgAMAaIDATxW=l1~I9!!Fi2V@!*2&]cX+4Si&}M%t:"}#g@B"yiQ\|4CN_erX'FF"A jYA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49743	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:18 UTC	802	OUT	GET /api/external/forms/0GZMCgHSxRh4PBOM HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5
2024-04-26 14:40:19 UTC	854	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:19 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin ETag: W/"231402adfe41273c5205d40b309a421d" Cache-Control: must-revalidate, private, max-age=0 Content-Security-Policy: frame-ancestors 'self' https://enextrunrunit.s3-us-west-2.amazonaws.com https://teams.microsoft.com X-Request-Id: e68d4221-9d39-4a2d-acde-080022c3614d X-Runtime: 0.026581 X-Rack-Cache: miss Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:19 UTC	401	IN	Data Raw: 33 34 35 0d 0a 7b 22 74 69 74 6c 65 22 3a 22 53 74 72 61 74 65 67 69 63 20 52 65 73 6f 75 72 63 65 20 4d 61 6e 61 67 65 6d 65 6e 74 2c 20 49 6e 63 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 42 33 45 35 46 43 22 2c 22 64 61 74 61 22 3a 7b 22 71 75 65 73 74 69 6f 6e 73 22 3a 5b 5d 7d 2c 22 69 6d 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 75 6e 72 75 6e 69 74 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 69 6e 63 6f 6d 69 6e 67 2f 35 36 35 38 30 2f 38 38 38 33 61 64 38 66 64 39 66 63 38 39 38 65 63 64 63 36 35 31 66 63 66 33 37 30 31 33 34 62 6f 72 69 67 69 6e 61 6c 2e 70 6e 67 3f 58 2d 41 6d 7a 2d 41 6c 67 6f 72 69 74 68 6d 3d 41 57 53 34 2d 48 4d 41 43 2d 53 48 41 32 35 36 5c 75 30 30 32 36 Data Ascii: 345{"title":"Strategic Resource Management, Inc","background_color":"B3E5FC","data":{"questions":[]},"image_url":"https://runrunit.s3.amazonaws.com/images/incoming/56580/8883ad8fd9fc898ecdc651fcf370134boriginal.png?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026
2024-04-26 14:40:19 UTC	443	IN	Data Raw: 6d 7a 2d 53 69 67 6e 65 64 48 65 61 64 65 72 73 3d 68 6f 73 74 5c 75 30 30 32 36 58 2d 41 6d 7a 2d 53 69 67 6e 61 74 75 72 65 3d 62 33 34 31 38 66 63 34 66 65 63 37 39 34 66 64 65 62 66 30 63 38 35 30 32 36 37 35 38 37 32 35 32 31 36 37 66 66 65 38 30 33 32 32 66 39 32 31 64 31 32 30 32 32 62 31 37 33 33 65 36 61 65 33 22 2c 22 73 68 6f 75 6c 64 5f 73 65 6e 64 5f 61 6e 73 77 65 72 73 5f 74 6f 5f 73 65 6e 64 65 72 5f 65 6d 61 69 6c 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 5f 73 65 6e 64 65 72 5f 62 65 63 6f 6d 65 5f 67 75 65 73 74 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 5f 73 68 6f 77 5f 72 65 63 61 70 74 63 68 61 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 5f 73 68 6f 77 5f 6e 65 77 5f 61 6e 73 77 65 72 5f 62 75 74 74 6f 6e 22 3a 66 61 6c 73 65 Data Ascii: mz-SignedHeaders=host\u0026X-Amz-Signature=b3418fc4fec794fdebf0c850267587252167ffe80322f921d12022b1733e6ae3","should_send_answers_to_sender_email":false,"should_sender_become_guest":false,"should_show_recaptcha":false,"should_show_new_answer_button":false
2024-04-26 14:40:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49742	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:18 UTC	792	OUT	GET /api/internal/app_metadata HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=MnJReHk1UHZuWEViVnVXNm5ieWpncmVYSEw3eERFNFRUUVEzME9BdVNHUjlUYXBPSlBycnJ1aFduWG5DSHZTeEZoamhrbGlzeXN3ZHdkby9zdFFsYnhGQlkvbytqSmFDQStCR2Vpd0pOZXFCaHVzWHlZM21HbzZEZVFnK3dyRXpCOHA2ZDcyQmE4aU1pMUYyYXhPN0l6dHhSdlNTc3dEY2h1VVBWbFNRUnRaZVhpUjVVS3hxbmhMbm9GdytjMll6cnFTNEpjTy92K1Y2Vk9LanRVVlc5UFFySFVraTBjTDc1aE9CN2lxb0xTQT0tLW9GbCsvQkJNbGNna2ZGNWUxNWFUcWc9PQ%3D%3D--ceee6d360577f0d19c905cb18aa4d81a0ba398f5
2024-04-26 14:40:19 UTC	871	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:19 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin ETag: W/"c0d0f4cd80927318afe3a81c022e1138" Cache-Control: must-revalidate, private, max-age=0 Content-Security-Policy: frame-ancestors 'self' https://enextrunrunit.s3-us-west-2.amazonaws.com https://teams.microsoft.com X-Request-Id: 628906a6-f705-4436-83fc-a2e171185977 X-Runtime: 0.015490 X-Rack-Cache: miss Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding, Origin Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:19 UTC	384	IN	Data Raw: 35 64 31 0d 0a 7b 22 61 64 76 61 6e 63 65 64 5f 70 61 73 73 77 6f 72 64 5f 65 78 70 69 72 61 74 69 6f 6e 5f 64 61 79 73 22 3a 39 30 2c 22 70 61 73 73 77 6f 72 64 5f 6d 69 6e 69 6d 75 6d 5f 6c 65 6e 67 74 68 22 3a 38 2c 22 63 68 61 72 74 5f 63 6f 6c 6f 72 73 22 3a 7b 22 63 6f 6c 6f 72 5f 30 31 22 3a 22 23 46 38 42 42 44 30 22 2c 22 63 6f 6c 6f 72 5f 30 32 22 3a 22 23 45 31 42 45 45 37 22 2c 22 63 6f 6c 6f 72 5f 30 33 22 3a 22 23 43 35 43 41 45 39 22 2c 22 63 6f 6c 6f 72 5f 30 34 22 3a 22 23 42 33 45 35 46 43 22 2c 22 63 6f 6c 6f 72 5f 30 35 22 3a 22 23 42 32 44 46 44 42 22 2c 22 63 6f 6c 6f 72 5f 30 36 22 3a 22 23 44 35 45 30 45 44 22 2c 22 63 6f 6c 6f 72 5f 30 37 22 3a 22 23 39 39 39 39 39 39 22 2c 22 63 6f 6c 6f 72 5f 30 38 22 3a 22 23 45 36 45 36 45 36 Data Ascii: 5d1{"advanced_password_expiration_days":90,"password_minimum_length":8,"chart_colors":{"color_01":"#F8BBD0","color_02":"#E1BEE7","color_03":"#C5CAE9","color_04":"#B3E5FC","color_05":"#B2DFDB","color_06":"#D5E0ED","color_07":"#999999","color_08":"#E6E6E6
2024-04-26 14:40:19 UTC	1112	IN	Data Raw: 63 6f 6c 6f 72 5f 31 35 22 3a 22 23 46 45 43 42 38 35 22 2c 22 63 6f 6c 6f 72 5f 31 36 22 3a 22 23 42 38 45 30 42 30 22 2c 22 63 6f 6c 6f 72 5f 31 37 22 3a 22 23 46 44 39 31 32 36 22 2c 22 63 6f 6c 6f 72 5f 31 38 22 3a 22 23 38 34 39 32 41 36 22 7d 2c 22 74 72 69 61 6c 5f 64 61 79 73 22 3a 31 34 2c 22 6f 6c 64 65 73 74 5f 6d 77 70 5f 79 65 61 72 73 22 3a 31 30 2c 22 6d 61 78 5f 77 69 64 67 65 74 73 5f 63 6f 75 6e 74 22 3a 33 36 2c 22 6d 61 78 5f 61 73 73 69 67 6e 65 65 73 5f 70 65 72 5f 74 61 73 6b 22 3a 34 30 2c 22 6d 61 78 5f 64 6f 63 75 6d 65 6e 74 5f 73 69 7a 65 22 3a 35 33 36 38 37 30 39 31 32 30 2c 22 6d 61 78 5f 73 75 62 74 61 73 6b 73 5f 70 65 72 5f 74 61 73 6b 22 3a 31 35 30 2c 22 6d 61 78 5f 73 75 62 74 61 73 6b 5f 64 65 70 74 68 5f 6c 65 76 65 Data Ascii: color_15":"#FECB85","color_16":"#B8E0B0","color_17":"#FD9126","color_18":"#8492A6"},"trial_days":14,"oldest_mwp_years":10,"max_widgets_count":36,"max_assignees_per_task":40,"max_document_size":5368709120,"max_subtasks_per_task":150,"max_subtask_depth_leve
2024-04-26 14:40:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49748	52.216.218.153	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:21 UTC	682	OUT	GET /images/incoming/56580/8883ad8fd9fc898ecdc651fcf370134boriginal.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJMTGAIIZEXSVTORA%2F20240426%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240426T134142Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=b3418fc4fec794fdebf0c850267587252167ffe80322f921d12022b1733e6ae3 HTTP/1.1 Host: runrunit.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:22 UTC	477	IN	HTTP/1.1 200 OK x-amz-id-2: eOqnjaGu6YjzmhvCj4fDT5QYRe3Pc9sgqfCKIRgiRB9mSMreTBmhcACm/rkiLvUcbgGu86dWiUA= x-amz-request-id: CAPTAB8E63MRH5A8 Date: Fri, 26 Apr 2024 14:40:23 GMT Last-Modified: Fri, 26 Apr 2024 13:41:06 GMT ETag: "1439b27fc2358182ca3db21fe384401b" x-amz-server-side-encryption: AES256 x-amz-version-id: LHC29EvaSB1mlW.QMqpLpRSp6PLwbimd Accept-Ranges: bytes Content-Type: binary/octet-stream Server: AmazonS3 Content-Length: 74541 Connection: close
2024-04-26 14:40:22 UTC	15815	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ee 00 00 00 b0 08 06 00 00 00 50 06 eb 64 00 00 0c 3f 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 40 08 10 40 40 4a e8 4d 10 91 12 40 4a 08 2d 80 f4 6e 23 24 01 42 89 31 10 54 ec c8 a2 82 6b 41 c5 02 36 74 55 44 b1 d3 ec 88 9d 45 b1 f7 c5 82 82 b2 2e 16 ec ca 9b 14 d0 75 5f f9 de f9 be b9 f7 bf ff 9c f9 cf 99 73 e7 96 01 80 76 82 2b 16 e7 a0 1a 00 e4 8a f2 25 31 c1 fe 8c a4 e4 14 06 a9 1b 20 80 0c 74 80 39 a0 71 79 79 62 56 54 54 38 80 36 78 fe bb bd bb 01 bd a1 5d 75 90 69 fd b3 ff bf 9a 26 5f 90 c7 03 00 89 82 38 8d 9f c7 cb 85 f8 20 00 78 15 4f 2c c9 07 80 28 e3 cd a7 e6 8b 65 18 36 a0 2d 81 09 42 bc 50 86 33 14 b8 4a 86 d3 14 78 af dc 27 2e 86 0d 71 Data Ascii: PNGIHDRPd?iCCPICC ProfileHWXS[@@@JM@J-n#$B1TkA6tUDE.u_sv+%1 t9qyybVTT86x]ui&_8 xO,(e6-BP3Jx'.q
2024-04-26 14:40:22 UTC	16384	IN	Data Raw: f7 0e 6a 1b 31 0a ae d3 97 8e c5 41 5e 91 9d 5a fc 2f 7e 2d f1 07 37 64 61 95 05 8a bb 83 56 f8 71 d4 25 24 d7 38 73 c7 9f 0e b8 d0 af d8 a9 88 a4 0e 57 b0 5c a3 f4 bf cc 3f 65 fe 8d 53 4b 36 38 40 94 fb 4f b9 ff 20 38 7e 51 ee bf 71 c5 dd dd 31 e5 f6 90 6e 03 09 ab dc 37 aa 45 a2 f8 48 6f 2f 3d b0 61 23 f6 b6 bf 44 c7 fb fa 78 ad 16 29 38 fe 0a aa a4 e2 5a 5f 5a c5 d1 62 bc a2 bf 62 da 34 49 da 2f 9a 39 13 49 3c c7 19 0f c3 77 6e 3f 1b b3 52 83 de 1a 95 ef cf 6a 5b cf 79 a9 64 35 61 5e 5b f0 bc 48 14 57 d9 46 2b f4 e7 58 04 88 69 29 2f 59 4d 98 d7 16 3c 2f 12 c5 55 b6 d1 0a fd 39 16 a1 63 7d 87 e9 c5 ed 0f d0 93 6f ff 33 f1 1f 6a 52 ab fc e0 34 00 9c af 84 5e 0b 03 5c 92 73 fb 39 93 ce a6 ab 16 fd 12 cd 9f 74 7e ac cc ec 19 c3 68 6f d9 78 a6 f3 41 f7 bf Data Ascii: j1A^Z/~-7daVq%$8sW\?eSK68@O 8~Qq1n7EHo/=a#Dx)8Z_Zbb4I/9I<wn?Rj[yd5a^[HWF+Xi)/YM</U9c}o3jR4^\s9t~hoxA
2024-04-26 14:40:22 UTC	1024	IN	Data Raw: 79 68 18 77 09 61 5e 7b 8d af bc 8b 96 31 c7 7d 6d ed 4c a1 32 d9 5c 34 f7 df b8 1d bd 77 50 12 f3 da 1a d9 27 20 04 c8 07 a4 d8 93 24 80 03 72 95 4f e9 ed 7f 54 02 84 bd fb f6 0a 02 a9 7e 13 49 60 5c cb 34 5f 0e 18 30 c0 34 81 e1 fd 67 5e af 96 f6 17 ed 56 68 07 04 16 ab 56 ac 48 98 52 04 37 38 d9 f8 ef 35 60 dc 3d a0 29 98 2f a8 24 92 f4 e6 e8 d3 a2 16 72 0f 25 00 d0 86 82 f9 11 f8 8e c5 89 e7 3f 5a 11 c1 15 fc 04 bf 48 c4 3d 82 d6 1d 09 ff b6 6e dd 6e c2 2c b4 7f 84 90 2d 4e 1c 56 0b e3 9e 32 fb a2 21 3e ea e5 97 61 dc 15 4b 7f 40 97 e0 2b d0 34 87 71 15 ea 6f 99 d9 21 e4 18 df d1 25 b6 8e 55 35 55 da 20 d6 a4 d1 e2 33 da 13 89 3b 36 35 1d 3b 4a 3b 1d df af 3d 7c 38 3a 70 a8 52 12 77 18 f7 26 41 85 62 8c bb 21 34 28 8f d7 2b 4b 1f 3a 6b d6 ac 95 f0 01 Data Ascii: yhwa^{1}mL2\4wP' $rOT~I`\4_04g^VhVHR785`=)/$r%?ZH=nn,-NV2!>aK@+4qo!%U5U 3;65;J;=\|8:pRw&Ab!4(+K:k
2024-04-26 14:40:22 UTC	16384	IN	Data Raw: fb d0 bf 22 58 cd 1b bb 76 99 47 13 dd b0 cd d0 78 69 60 c6 8b 79 27 7c fe f9 55 b3 c3 c0 ae 84 14 68 8f c6 ab fd 27 0b 3a d2 ae bd 6b 73 a0 19 da ff 88 fa b3 be be 5e 82 04 36 90 82 8a 08 73 cd a6 1d f8 1b 01 cf 6a b5 35 47 0d 92 04 fd de bd 7a eb 7d 5f 96 63 dc 29 87 1e dd 15 0a 6f 87 eb 2c 7d ce 31 4e e5 e3 7f 0e 95 09 b1 3c 3b 34 30 e3 9e 64 e3 37 56 0c 27 b0 38 f7 84 54 ad f9 00 89 3b ef 36 b0 0c f8 21 2f 44 93 69 27 27 49 2b 5e e8 3a 2f e4 8c 57 a2 ad 5b b7 aa ad 1a 55 74 69 e9 c4 d8 01 01 74 f7 ba 4d 7a bf 3b 47 ff 28 66 90 5f 32 f7 35 2c ed 09 c6 c6 a6 2d 2e 71 37 aa 05 f4 61 a6 81 cc b0 b9 a7 58 68 41 4e 0b ee b2 59 8c 3b fd cf fa d7 4f eb f0 4c 93 b8 0b 2a 43 26 49 f0 52 02 19 84 ff f8 58 06 b4 bc ff 78 c9 c2 cd e1 6d d3 e4 c9 2b 90 b4 19 0b e7 Data Ascii: "XvGxi`y'\|Uh':ks^6sj5Gz}_c)o,}1N<;40d7V'8T;6!/Di''I+^:/W[UtitMz;G(f_25,-.q7aXhANY;OL*C&IRXxm+
2024-04-26 14:40:22 UTC	1024	IN	Data Raw: 5a ca 34 ef db 7b 00 97 2a 2b 3d ff e0 84 35 df fc fa 57 71 01 db 31 94 56 40 27 71 ff f7 80 82 aa 32 33 21 71 e3 eb 63 46 ff ca ca 4a 95 18 f3 6e d1 35 bd 38 09 e6 13 2a 00 7c 9e 8e df 47 20 7e a3 ff b1 63 27 54 da fa c1 b6 0f 1d 77 82 f9 af 5e fd 3a d0 07 6e 2b cd 21 c8 e1 26 95 6b d3 31 f6 55 6c 9c 99 8e a6 6f df 3e d8 a8 4c 56 c6 d8 85 60 f3 84 d3 23 8e 3d d5 71 47 60 29 fa 7c 7b d0 a3 2e f0 31 61 4d eb 2f 9f 14 7c 14 0c be 12 5c 0b 56 bc ff 11 c0 49 dc a1 e3 be 7b 8f a2 a5 1a 8e e9 b8 bb 3a b9 d2 70 13 06 52 a3 fd 29 43 76 06 c3 02 27 5c 0b f5 c9 3e 4a aa b9 fe 51 c0 a4 12 77 30 f8 c4 4f 35 b2 e5 2b 71 5a 87 f9 94 ed 4f 55 c3 d1 d0 f9 e7 e6 3b 19 ff 8c 21 36 fc 62 a1 e2 c6 9a ef c8 db fc fb c0 03 f7 e9 f7 26 08 72 f5 7a 25 24 ee af 60 e3 bd 4b eb 5f Data Ascii: Z4{+=5Wq1V@'q23!qcFJn58\|G ~c'Tw^:n+!&k1Ulo>LV`#=qG`)\|{.1aM/\|\VI{:pR)Cv'\>JQw0O5+qZOU;!6b&rz%$`K_
2024-04-26 14:40:22 UTC	16384	IN	Data Raw: b8 04 ea 1a 54 db 20 20 2f 62 39 55 19 aa 27 44 79 33 8d 37 d4 83 7c ea e9 7f 03 33 c6 85 c9 c1 e8 2f eb 99 e9 7f 1a ef eb af f5 1a 87 0b 95 d0 cd 36 fc 7c 21 66 1b 54 28 96 2c c6 c5 45 dd a8 12 09 a7 49 ea 98 82 69 62 5a fe 44 a6 bc bc 0b 18 88 49 90 ee 76 8c 24 27 fe 1d f7 77 a0 e3 fe 31 d4 69 7c 81 ec 1d 77 4a 7c ac 3e 7c 7d 67 13 a4 c9 f3 e7 2f d0 37 a8 95 14 9a 3f e6 28 1d 13 4e 1a 16 cf 7f d4 a5 bc 1f 6f 53 b7 82 2a 0b e9 e4 10 98 ed 0b 67 5e d8 dc 3c ad 85 e4 55 ef 52 c0 cf f6 a7 f4 98 27 6c fc 10 8e d5 9f 49 b6 6c de 02 e6 1d 1b 43 5c f4 a3 a1 34 68 28 9e c1 e3 33 6a 14 2c 98 49 54 65 98 2a 45 68 ab 6e 51 fa f7 ef 0b 55 a0 19 f7 ab fe f7 1b 50 6d 60 7f aa 02 63 ac f5 03 9d b2 f5 57 9a a3 8e 56 7f 7d 8d 04 8c 3f 9f be 73 2a 47 c4 0f e9 24 24 b1 07 Data Ascii: T /b9U'Dy37\|3/6\|!fT(,EIibZDIv$'w1i\|wJ\|>\|}g/7?(NoSg^<UR'lIlC\4h(3j,ITeEhnQUPm`cWV}?s*G$$
2024-04-26 14:40:22 UTC	1024	IN	Data Raw: 0f 9c 5b 15 05 9e dc d1 c0 44 5c 48 a5 82 a0 06 0f 9c 5b 15 05 9e dc d1 c0 44 5c 48 a5 82 a0 06 0f 9c 5b 15 05 9e dc d1 c0 44 5c 48 a5 82 a0 06 0f 9c 5b 15 05 9e dc d1 c0 44 5c 48 a5 82 a0 06 0f 9c 5b 15 05 9e dc d1 c0 44 5c 48 a5 82 a0 06 0f 9c 5b 15 05 9e dc d1 c0 44 5c 48 a5 82 a0 06 0f 9c 5b 15 05 9e dc d1 c0 44 5c 48 a5 82 a0 06 0f 9c 5b 15 05 9e dc d1 c0 44 5c 48 a5 82 a0 06 0f 9c 5b 15 05 9e dc d1 c0 44 5c 48 a5 82 a0 06 0f 9c 5b 15 05 9e 5c b4 fa 38 c8 62 10 ba 2f e4 6c 83 a3 ea d6 6b 8c b5 ae 8c 68 87 bb ed 86 44 6b de 17 d2 f1 37 df 4a 3f 7b ea e9 f4 9b 77 de a1 e7 bc 97 bb f4 34 23 e7 90 3c bd e4 b7 77 e2 6e 71 ae cb ce 3e 09 d3 c9 d0 6e 82 96 cb cc a6 3b ef bc 23 dd 4b 77 e0 1f b8 ff be 34 3b bb 35 87 ca 65 68 d7 8b 8f 63 c9 1c 9d ca 8a d5 d9 Data Ascii: [D\H[D\H[D\H[D\H[D\H[D\H[D\H[D\H[D\H[\8b/lkhDk7J?{w4#<wnq>n;#Kw4;5ehc
2024-04-26 14:40:22 UTC	3392	IN	Data Raw: e7 97 37 1d 39 72 57 9a 9e 9e ca 07 60 e3 67 83 ee 3e fb f3 d7 d0 e5 c8 ea 74 bb 4c a3 f5 60 15 64 26 df 69 ff af d7 fe 99 de 92 fa 13 ca 00 e5 80 f3 c2 32 e7 84 31 9f 8b 2c 39 9a a0 c5 ff fb 66 ef 4d 5f 3b f4 d7 e9 e0 ce 47 69 a9 cc e6 cc ca 15 b9 dd cd 73 fe f5 b0 7d 5e aa 9d 11 7c 90 e2 f5 9a 2d 11 e7 7f ad ed af 66 6d 3c 9b 91 7f e4 06 32 da 1f 67 c0 67 a3 b6 24 19 b3 f8 d6 83 61 28 54 60 0b ac 5a 5b 8d e4 cb 7a cd 56 17 fd 3f fa 7f b4 bf e8 7f 66 84 50 a8 c0 0e 18 9f c9 f8 43 13 f7 bc e0 a4 06 d6 63 51 50 7d 0d f2 0c 0c 70 85 e4 9c a4 94 49 b7 de 21 d7 ba 1c b1 8e ab 34 50 9f 3b 7f 21 1d 3b f6 46 7a f6 97 cf a6 df 9e 38 41 eb b1 39 86 4c 43 b9 b8 c5 ac 89 5e 7e 8d 5a 9c 2c f2 73 e0 39 3e dd 7d bf 4a f3 d8 cd f4 b6 d5 ad db 66 d3 ae 9d bb d2 de bd 7b Data Ascii: 79rW`g>tL`d&i21,9fM_;Gis}^\|-fm<2gg$a(T`Z[zV?fPCcQP}pI!4P;!;Fz8A9LC^~Z,s9>}Jf{
2024-04-26 14:40:22 UTC	3110	IN	Data Raw: 90 f3 62 92 a3 50 41 f4 3f 4a 53 f4 bf e8 7f b5 47 f8 5c 98 81 a7 40 cb 1c 37 65 4f a6 1a be 42 05 b7 64 ff a3 89 fb 0a cd 35 79 f2 29 09 aa a7 5b 12 46 02 36 48 f6 00 43 56 76 8b 2c c3 62 f0 68 39 ca 67 10 7f 85 1e c3 b8 b2 72 25 2d d0 52 9a 13 27 4e a4 d7 e8 2d ac af bd 76 94 26 f1 f4 96 52 ba 09 8e a5 ea 57 29 11 bc 44 86 37 49 c9 04 4d c0 69 5a 4e 4a fe cb 6d 39 6c 9c 89 48 66 fa 5b f1 fc 83 55 59 c3 6e ec fc 37 1a 9e b1 e7 ad d6 c0 e7 df 8b 3f 4d 2f 7b 9a 9b 3b 92 7e ff 1b 5f 4f 87 0f 1d a4 49 3b bd fc 69 50 1a c7 59 1c 03 81 38 ec b0 18 c4 cf 26 ff 12 2d e2 0f 3f ad c8 ff 67 d1 ff a3 fd 71 06 a2 ff 45 ff c3 15 44 7a 04 b7 89 e8 7f b7 fe fc 27 c6 bf 5b 6b fc 33 77 dc cb a0 9e 85 1d e0 ad 7d ec e4 31 08 ac 2d b5 66 02 3c 87 ad c3 88 8d a3 2c aa d0 da Data Ascii: bPA?JSG\@7eOBd5y)[F6HCVv,bh9gr%-R'N-v&RW)D7IMiZNJm9lHf[UYn7?M/{;~_OI;iPY8&-?gqEDz'[k3w}1-f<,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49744	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:21 UTC	807	OUT	GET /packs/media/logo_runrun_red-O7MMTJSU.svg HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=Ris0VUVaa29PSDYxY2oxNVgwWHAydWNKOW1lV2dsd2x0dFdsZ2VweHF2VzhxK0FuL2lxdjhzdm1ZNnlyZDlMTkc4aUszTEFhZ0IvSVlSNkRMUS9HN3djREtMRCt4L253VGJlSGQvNUNMWjlpYjBLSmFCVDMxejlqb3ZxalpHTWxwNlRRVVdsdG4vMmJMQ1VsRkZMVUkvQTYvTkNuMEp3MitUcEVlZkhTOTRmajd1WWtuaVhMRzh6TENjVXNiT3RKSGViRzRYRWNYVmV5SkhVYlBJUklTc29sRExubERHUnlZVFZvNEVTWTBKdz0tLWZPUEFMVUtxYVczUVlyMUlTV1VsZFE9PQ%3D%3D--b84f1b1453def79eb518435f9e02318c0dd9fe91
2024-04-26 14:40:22 UTC	397	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:22 GMT Content-Type: image/svg+xml Content-Length: 6768 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:22 UTC	858	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 37 70 78 22 20 68 65 69 67 68 74 3d 22 33 35 2e 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 39 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 31 38 2e 35 30 37 20 31 30 2e 30 36 37 34 43 31 31 36 2e 33 35 36 20 31 30 2e 30 36 37 34 20 31 31 33 2e 37 35 36 20 31 32 2e 31 33 34 38 20 31 31 32 2e 31 34 32 20 31 34 2e 32 39 32 31 43 31 31 32 2e 37 37 20 31 31 2e 33 32 35 38 20 31 31 31 2e 35 31 35 20 31 30 2e 32 34 37 32 20 31 30 39 2e 39 39 31 20 31 30 2e 32 34 37 32 43 31 30 38 2e 37 33 36 20 31 30 2e 32 34 37 32 20 31 30 37 2e 38 34 20 31 30 2e 36 39 36 36 Data Ascii: <svg width="177px" height="35.6px" viewBox="0 0 159 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M118.507 10.0674C116.356 10.0674 113.756 12.1348 112.142 14.2921C112.77 11.3258 111.515 10.2472 109.991 10.2472C108.736 10.2472 107.84 10.6966
2024-04-26 14:40:22 UTC	1255	IN	Data Raw: 20 38 37 2e 32 32 31 39 20 31 30 2e 33 33 37 31 20 38 36 2e 30 35 36 35 20 31 30 2e 39 36 36 33 43 38 36 2e 36 38 34 20 31 33 2e 38 34 32 37 20 38 34 2e 39 38 30 38 20 32 30 2e 34 39 34 34 20 38 34 2e 39 38 30 38 20 32 33 2e 31 39 31 56 32 33 2e 35 35 30 36 43 38 34 2e 30 38 34 34 20 32 34 2e 34 34 39 34 20 38 32 2e 39 31 39 20 32 35 2e 31 36 38 35 20 38 32 2e 30 32 32 36 20 32 35 2e 31 36 38 35 43 38 31 2e 30 33 36 35 20 32 35 2e 31 36 38 35 20 38 30 2e 38 35 37 33 20 32 34 2e 34 34 39 34 20 38 30 2e 38 35 37 33 20 32 33 2e 35 35 30 36 43 38 30 2e 38 35 37 33 20 32 31 2e 33 39 33 33 20 38 32 2e 33 38 31 32 20 31 37 2e 32 35 38 34 20 38 32 2e 33 38 31 32 20 31 34 2e 37 34 31 36 43 38 32 2e 33 38 31 32 20 31 33 2e 37 35 32 38 20 38 31 2e 39 33 33 20 31 32 Data Ascii: 87.2219 10.3371 86.0565 10.9663C86.684 13.8427 84.9808 20.4944 84.9808 23.191V23.5506C84.0844 24.4494 82.919 25.1685 82.0226 25.1685C81.0365 25.1685 80.8573 24.4494 80.8573 23.5506C80.8573 21.3933 82.3812 17.2584 82.3812 14.7416C82.3812 13.7528 81.933 12
2024-04-26 14:40:22 UTC	1255	IN	Data Raw: 2e 31 32 35 38 20 32 34 43 33 35 2e 32 32 39 34 20 32 34 20 33 34 2e 38 37 30 38 20 32 33 2e 33 37 30 38 20 33 34 2e 38 37 30 38 20 32 32 2e 33 38 32 43 33 34 2e 38 37 30 38 20 32 31 2e 30 33 33 37 20 33 36 2e 33 30 35 31 20 31 35 2e 30 31 31 32 20 33 36 2e 33 30 35 31 20 31 32 2e 34 30 34 35 43 33 36 2e 33 30 35 31 20 39 2e 37 39 37 37 35 20 33 34 2e 33 33 33 20 39 2e 37 39 37 37 35 20 33 33 2e 34 33 36 35 20 39 2e 37 39 37 37 35 43 33 32 2e 35 34 30 31 20 39 2e 37 39 37 37 35 20 33 31 2e 34 36 34 34 20 31 30 2e 31 35 37 33 20 33 30 2e 32 30 39 34 20 31 30 2e 36 39 36 36 43 33 30 2e 35 36 38 20 31 33 2e 35 37 33 20 32 38 2e 38 36 34 38 20 32 30 2e 32 32 34 37 20 32 38 2e 38 36 34 38 20 32 32 2e 39 32 31 33 56 32 33 2e 34 36 30 37 43 32 37 2e 37 38 39 31 Data Ascii: .1258 24C35.2294 24 34.8708 23.3708 34.8708 22.382C34.8708 21.0337 36.3051 15.0112 36.3051 12.4045C36.3051 9.79775 34.333 9.79775 33.4365 9.79775C32.5401 9.79775 31.4644 10.1573 30.2094 10.6966C30.568 13.573 28.8648 20.2247 28.8648 22.9213V23.4607C27.7891
2024-04-26 14:40:22 UTC	400	IN	Data Raw: 38 2e 39 34 34 36 20 32 39 2e 34 38 33 31 20 35 30 2e 30 32 30 33 20 32 39 2e 38 34 32 37 43 35 30 2e 38 32 37 31 20 33 30 2e 31 31 32 34 20 35 33 2e 31 35 37 38 20 33 30 2e 30 32 32 35 20 35 34 2e 35 39 32 31 20 32 39 2e 33 30 33 34 43 35 34 2e 35 39 32 31 20 32 35 2e 35 32 38 31 20 35 35 2e 31 32 39 39 20 32 31 2e 36 36 32 39 20 35 35 2e 39 33 36 37 20 31 39 2e 36 38 35 34 43 35 36 2e 38 33 33 31 20 31 37 2e 34 33 38 32 20 35 38 2e 33 35 37 31 20 31 35 2e 37 33 30 33 20 35 39 2e 31 36 33 38 20 31 35 2e 37 33 30 33 43 35 39 2e 37 39 31 33 20 31 35 2e 37 33 30 33 20 36 30 2e 30 36 30 33 20 31 36 2e 31 37 39 38 20 36 30 2e 30 36 30 33 20 31 36 2e 39 38 38 38 43 36 30 2e 30 36 30 33 20 31 37 2e 38 38 37 36 20 35 38 2e 37 31 35 36 20 32 32 2e 32 39 32 31 20 Data Ascii: 8.9446 29.4831 50.0203 29.8427C50.8271 30.1124 53.1578 30.0225 54.5921 29.3034C54.5921 25.5281 55.1299 21.6629 55.9367 19.6854C56.8331 17.4382 58.3571 15.7303 59.1638 15.7303C59.7913 15.7303 60.0603 16.1798 60.0603 16.9888C60.0603 17.8876 58.7156 22.2921
2024-04-26 14:40:22 UTC	1255	IN	Data Raw: 2e 35 39 36 32 20 31 36 43 37 35 2e 30 33 30 35 20 31 36 2e 33 35 39 35 20 37 35 2e 37 34 37 37 20 31 36 2e 35 33 39 33 20 37 35 2e 37 34 37 37 20 31 37 2e 37 39 37 38 43 37 35 2e 37 34 37 37 20 31 39 2e 35 39 35 35 20 37 34 2e 36 37 32 20 32 32 2e 30 32 32 35 20 37 34 2e 36 37 32 20 32 35 2e 30 37 38 36 43 37 34 2e 36 37 32 20 32 38 2e 30 34 34 39 20 37 36 2e 32 38 35 35 20 32 39 2e 39 33 32 36 20 37 39 2e 33 33 33 33 20 32 39 2e 39 33 32 36 43 38 31 2e 35 37 34 34 20 32 39 2e 39 33 32 36 20 38 33 2e 37 32 35 38 20 32 38 2e 34 30 34 35 20 38 35 2e 32 34 39 37 20 32 36 2e 38 37 36 34 43 38 35 2e 38 37 37 32 20 32 38 2e 35 38 34 33 20 38 37 2e 30 34 32 36 20 32 39 2e 39 33 32 36 20 38 39 2e 30 31 34 37 20 32 39 2e 39 33 32 36 43 39 31 2e 37 39 33 36 20 32 Data Ascii: .5962 16C75.0305 16.3595 75.7477 16.5393 75.7477 17.7978C75.7477 19.5955 74.672 22.0225 74.672 25.0786C74.672 28.0449 76.2855 29.9326 79.3333 29.9326C81.5744 29.9326 83.7258 28.4045 85.2497 26.8764C85.8772 28.5843 87.0426 29.9326 89.0147 29.9326C91.7936 2
2024-04-26 14:40:22 UTC	1255	IN	Data Raw: 37 37 20 31 33 33 2e 32 30 38 20 31 2e 37 39 37 37 36 20 31 33 33 2e 32 30 38 20 33 2e 38 36 35 31 37 43 31 33 33 2e 32 30 38 20 35 2e 39 33 32 35 39 20 31 33 34 2e 38 32 32 20 37 2e 35 35 30 35 36 20 31 33 36 2e 38 38 34 20 37 2e 35 35 30 35 36 5a 4d 31 35 37 2e 37 37 20 39 2e 38 38 37 36 34 43 31 35 36 2e 36 39 35 20 31 30 2e 33 33 37 31 20 31 35 34 2e 39 30 32 20 31 30 2e 35 31 36 39 20 31 35 32 2e 37 35 20 31 30 2e 34 32 37 43 31 35 32 2e 33 30 32 20 31 30 2e 34 32 37 20 31 35 31 2e 37 36 34 20 31 30 2e 33 33 37 31 20 31 35 31 2e 31 33 37 20 31 30 2e 33 33 37 31 43 31 35 31 2e 33 31 36 20 39 2e 30 37 38 36 35 20 31 35 31 2e 34 39 35 20 37 2e 38 32 30 32 33 20 31 35 31 2e 34 39 35 20 36 2e 37 34 31 35 37 43 31 35 31 2e 34 39 35 20 35 2e 30 33 33 37 31 Data Ascii: 77 133.208 1.79776 133.208 3.86517C133.208 5.93259 134.822 7.55056 136.884 7.55056ZM157.77 9.88764C156.695 10.3371 154.902 10.5169 152.75 10.427C152.302 10.427 151.764 10.3371 151.137 10.3371C151.316 9.07865 151.495 7.82023 151.495 6.74157C151.495 5.03371
2024-04-26 14:40:22 UTC	490	IN	Data Raw: 35 2e 32 35 38 34 20 31 34 38 2e 37 31 36 20 32 33 2e 36 34 30 34 43 31 34 38 2e 37 31 36 20 32 31 2e 39 33 32 36 20 31 34 39 2e 32 35 34 20 31 38 2e 37 38 36 35 20 31 34 39 2e 38 38 32 20 31 35 2e 39 31 30 31 43 31 35 30 2e 30 36 31 20 31 35 2e 32 38 30 39 20 31 35 30 2e 31 35 31 20 31 34 2e 35 36 31 38 20 31 35 30 2e 33 33 20 31 33 2e 38 34 32 37 43 31 35 32 2e 38 34 20 31 34 2e 31 31 32 34 20 31 35 34 2e 37 32 32 20 31 34 2e 32 30 32 32 20 31 35 35 2e 39 37 37 20 31 34 2e 32 30 32 32 43 31 35 37 2e 34 31 32 20 31 34 2e 32 30 32 32 20 31 35 38 2e 33 39 38 20 31 33 2e 33 30 33 34 20 31 35 38 2e 35 37 37 20 31 31 2e 39 35 35 31 43 31 35 38 2e 37 35 36 20 31 31 2e 31 34 36 31 20 31 35 38 2e 33 30 38 20 31 30 2e 33 33 37 31 20 31 35 37 2e 37 37 20 39 2e 38 Data Ascii: 5.2584 148.716 23.6404C148.716 21.9326 149.254 18.7865 149.882 15.9101C150.061 15.2809 150.151 14.5618 150.33 13.8427C152.84 14.1124 154.722 14.2022 155.977 14.2022C157.412 14.2022 158.398 13.3034 158.577 11.9551C158.756 11.1461 158.308 10.3371 157.77 9.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49746	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:21 UTC	814	OUT	GET /api/external/forms/0GZMCgHSxRh4PBOM/description HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=Ris0VUVaa29PSDYxY2oxNVgwWHAydWNKOW1lV2dsd2x0dFdsZ2VweHF2VzhxK0FuL2lxdjhzdm1ZNnlyZDlMTkc4aUszTEFhZ0IvSVlSNkRMUS9HN3djREtMRCt4L253VGJlSGQvNUNMWjlpYjBLSmFCVDMxejlqb3ZxalpHTWxwNlRRVVdsdG4vMmJMQ1VsRkZMVUkvQTYvTkNuMEp3MitUcEVlZkhTOTRmajd1WWtuaVhMRzh6TENjVXNiT3RKSGViRzRYRWNYVmV5SkhVYlBJUklTc29sRExubERHUnlZVFZvNEVTWTBKdz0tLWZPUEFMVUtxYVczUVlyMUlTV1VsZFE9PQ%3D%3D--b84f1b1453def79eb518435f9e02318c0dd9fe91
2024-04-26 14:40:22 UTC	1364	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:22 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin ETag: W/"223241dc853dd6dd595e05ef5a4891b0" Last-Modified: Fri, 26 Apr 2024 13:40:28 GMT Cache-Control: must-revalidate, private, max-age=0 Content-Security-Policy: frame-ancestors 'self' https://enextrunrunit.s3-us-west-2.amazonaws.com https://teams.microsoft.com Set-Cookie: secure_aplicatic1_session=QWJneHFtRnprZGJaWDlLd2RndlBsMnozdk0yZ0hHeUtrbDJKZ1hvUk15OXJNcStJWVZYTzhudjNRdVdmWnQxWUc5bGFNTGdLL1JITzZuUU9BZHAvSlYvb2k2RUpzSlR6ZkxySjkvV1JIVG5kYWdpeDRwT3I5aTNNb2ptVkM5ZllGaklWaW5uRDZwUDZtUGxiR1RQVkluRUJSZk1iVjNYc29DRmd4cGdvVXlPS1hFNE43ckJTUUdMV1E0OVY2R3kyNXJDQ25GZVNPaHg0NE80UTBtUnc4a2xHOEVPQWZGN3dxczBHQm9OWFhjND0tLUFuVi9VSEVPVW40Zm5LamdQZTFIWmc9PQ%3D%3D--bf0bd3048e7b81802a54e1d8a2264b884c1ae8ad; path=/; secure; HttpOnly X-Request-Id: 62146a66-cbab-4298-ac14-67611bed8bb8 X-Runtime: 0.062568 X-Rack-Cache: miss Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:22 UTC	498	IN	Data Raw: 31 65 62 0d 0a 7b 22 69 64 22 3a 35 36 35 38 30 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 5c 75 30 30 33 63 70 5c 75 30 30 33 65 4e 65 77 20 73 65 63 75 72 65 20 6d 65 73 73 61 67 65 20 66 72 6f 6d 20 5c 75 30 30 33 63 62 5c 75 30 30 33 65 4d 61 72 6b 20 4d 72 76 61 5c 75 30 30 33 63 2f 62 5c 75 30 30 33 65 5c 75 30 30 33 63 2f 70 5c 75 30 30 33 65 5c 75 30 30 33 63 70 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 71 6c 2d 63 6f 6c 6f 72 2d 69 6e 68 65 72 69 74 5c 22 5c 75 30 30 33 65 ef bb bf 5c 75 30 30 33 63 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 2f 70 5c 75 30 30 33 65 5c 75 30 30 33 63 68 31 5c 75 30 30 33 65 5c 75 30 30 33 63 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 73 72 6d 63 6f 72 70 2e 64 Data Ascii: 1eb{"id":56580,"description":"\u003cp\u003eNew secure message from \u003cb\u003eMark Mrva\u003c/b\u003e\u003c/p\u003e\u003cp\u003e\u003cspan class=\"ql-color-inherit\"\u003e\u003c/span\u003e\u003c/p\u003e\u003ch1\u003e\u003ca href=\"https://srmcorp.d
2024-04-26 14:40:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49749	34.120.195.249	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:33 UTC	736	OUT	POST /api/5686998/envelope/?sentry_key=d8ac9315754e4a6db0a7e4e29adba35f&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.26.0 HTTP/1.1 Host: o556303.ingest.sentry.io Connection: keep-alive Content-Length: 140 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://runrun.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:33 UTC	140	OUT	Data Raw: 7b 7d 0a 7b 22 74 79 70 65 22 3a 22 63 6c 69 65 6e 74 5f 72 65 70 6f 72 74 22 7d 0a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 34 31 34 32 34 33 32 2e 35 37 38 2c 22 64 69 73 63 61 72 64 65 64 5f 65 76 65 6e 74 73 22 3a 5b 7b 22 72 65 61 73 6f 6e 22 3a 22 73 61 6d 70 6c 65 5f 72 61 74 65 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 72 61 6e 73 61 63 74 69 6f 6e 22 2c 22 71 75 61 6e 74 69 74 79 22 3a 31 7d 5d 7d Data Ascii: {}{"type":"client_report"}{"timestamp":1714142432.578,"discarded_events":[{"reason":"sample_rate","category":"transaction","quantity":1}]}
2024-04-26 14:40:33 UTC	519	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:40:33 GMT Content-Type: application/json Content-Length: 2 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:33 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49750	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:34 UTC	651	OUT	GET /?hro=GO HTTP/1.1 Host: srmcorp.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:36 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:40:36 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-04-26 14:40:36 UTC	16203	IN	Data Raw: 37 37 66 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 30 79 28 71 2c 4f 29 7b 76 61 72 20 43 3d 61 30 54 28 29 3b 72 65 74 75 72 6e 20 61 30 79 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 54 29 7b 46 3d 46 2d 30 78 31 61 36 3b 76 61 72 20 79 3d 43 5b 46 5d 3b 72 65 74 75 72 6e 20 79 3b 7d 2c 61 30 79 28 71 2c 4f 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 61 30 54 28 29 7b 76 61 72 20 72 41 3d 5b 27 63 6c 61 73 73 4c 69 73 74 27 2c 27 27 2c 27 27 2c 27 77 68 69 74 65 53 70 61 63 65 27 2c 27 5a 70 54 4b 43 27 2c 27 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: 77f5<!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> function a0y(q,O){var C=a0T();return a0y=function(F,T){F=F-0x1a6;var y=C[F];return y;},a0y(q,O);}function a0T(){var rA=['classList','','','whiteSpace','ZpTKC','hasOwnPrope
2024-04-26 14:40:36 UTC	14514	IN	Data Raw: 75 70 70 6f 72 74 73 27 2c 27 4f 6b 68 76 41 27 2c 27 53 74 58 46 59 27 2c 27 4d 43 4a 6a 4d 27 2c 27 70 75 73 68 27 2c 27 43 61 6e 5c 78 32 37 74 5c 78 32 30 63 6f 6e 76 65 72 74 5c 78 32 30 6f 62 6a 65 63 74 5c 78 32 30 74 6f 5c 78 32 30 70 72 69 6d 69 74 69 76 65 5c 78 32 30 76 61 6c 75 65 27 2c 27 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 27 2c 27 70 75 72 65 27 2c 27 67 65 74 53 74 6f 72 61 67 65 55 70 64 61 74 65 73 27 2c 27 67 65 74 41 74 74 72 69 62 75 74 65 27 2c 27 4a 68 74 45 67 27 2c 27 55 54 43 27 2c 27 6e 6f 77 72 61 70 27 2c 27 53 79 6d 62 6f 6c 5c 78 32 30 69 73 5c 78 32 30 6e 6f 74 5c 78 32 30 61 5c 78 32 30 63 6f 6e 73 74 72 75 63 74 6f 72 27 2c 27 69 6e 64 65 78 27 2c 27 64 69 76 5b 63 6c 61 73 73 5e 3d 5c 78 32 32 61 70 70 5f 67 64 70 Data Ascii: upports','OkhvA','StXFY','MCJjM','push','Can\x27t\x20convert\x20object\x20to\x20primitive\x20value','sessionStorage','pure','getStorageUpdates','getAttribute','JhtEg','UTC','nowrap','Symbol\x20is\x20not\x20a\x20constructor','index','div[class^=\x22app_gdp
2024-04-26 14:40:37 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 61 63 6b 4c 69 73 74 27 3a 30 78 30 2c 27 54 6f 75 63 68 4c 69 73 74 27 3a 30 78 30 7d 3b 7d 2c 30 78 37 36 65 3a 66 75 6e 63 74 69 6f 6e 28 4c 2c 47 2c 4a 29 7b 76 61 72 20 46 45 3d 61 30 79 3b 69 66 28 46 45 28 30 78 34 34 37 29 3d 3d 3d 46 45 28 30 78 34 34 37 29 29 7b 76 61 72 20 62 3d 4a 28 30 78 63 34 39 29 28 46 45 28 30 78 32 65 34 29 29 5b 46 45 28 30 78 35 34 64 29 5d 2c 68 3d 62 26 26 62 5b 46 45 28 30 78 32 32 39 29 5d 26 26 62 5b 27 63 6f 6e 73 74 72 75 63 74 6f 72 27 5d 5b 46 45 28 30 78 33 66 36 29 5d 3b 4c 5b 46 45 28 30 78 33 33 62 29 5d 3d 68 3d 3d 3d 4f 62 6a 65 63 74 5b 27 70 72 6f 74 6f 74 79 70 65 27 5d 3f 76 6f 69 64 20 30 78 30 3a 68 3b 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 5b 46 45 28 Data Ascii: 4000ackList':0x0,'TouchList':0x0};},0x76e:function(L,G,J){var FE=a0y;if(FE(0x447)===FE(0x447)){var b=J(0xc49)(FE(0x2e4))[FE(0x54d)],h=b&&b[FE(0x229)]&&b['constructor'][FE(0x3f6)];L[FE(0x33b)]=h===Object['prototype']?void 0x0:h;}else{return arguments[FE(
2024-04-26 14:40:37 UTC	8	IN	Data Raw: 5d 29 5b 79 70 28 0d 0a Data Ascii: ])[yp(
2024-04-26 14:40:37 UTC	16384	IN	Data Raw: 38 30 30 30 0d 0a 30 78 35 32 36 29 5d 28 27 27 29 5b 52 28 30 78 31 33 33 29 5d 3b 65 6c 73 65 7b 69 66 28 79 70 28 30 78 33 66 66 29 3d 3d 3d 6b 29 74 68 72 6f 77 20 57 3b 72 65 74 75 72 6e 20 57 3b 7d 7d 70 3d 62 28 70 2c 78 29 3b 7d 63 61 74 63 68 28 6a 29 7b 69 66 28 27 55 43 4e 70 46 27 3d 3d 3d 27 55 43 4e 70 46 27 29 42 3d 21 30 78 30 2c 70 3d 6a 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 30 78 30 3b 7d 69 66 28 79 70 28 30 78 33 66 66 29 3d 3d 3d 6b 29 74 68 72 6f 77 20 57 3b 69 66 28 42 29 74 68 72 6f 77 20 70 3b 72 65 74 75 72 6e 20 68 28 70 29 2c 57 3b 7d 3b 7d 7d 2c 30 78 34 31 30 3a 66 75 6e 63 74 69 6f 6e 28 4c 2c 47 2c 4a 29 7b 76 61 72 20 62 3d 4a 28 30 78 37 33 62 29 5b 27 49 74 65 72 61 74 6f 72 50 72 6f 74 6f 74 79 70 65 27 5d 2c 68 3d 4a Data Ascii: 80000x526)]('')[R(0x133)];else{if(yp(0x3ff)===k)throw W;return W;}}p=b(p,x);}catch(j){if('UCNpF'==='UCNpF')B=!0x0,p=j;else return 0x0;}if(yp(0x3ff)===k)throw W;if(B)throw p;return h(p),W;};}},0x410:function(L,G,J){var b=J(0x73b)['IteratorPrototype'],h=J
2024-04-26 14:40:37 UTC	16384	IN	Data Raw: 69 73 29 2c 68 3d 27 27 3b 72 65 74 75 72 6e 20 62 5b 73 41 28 30 78 35 66 31 29 5d 26 26 28 68 2b 3d 27 64 27 29 2c 62 5b 73 41 28 30 78 31 61 61 29 5d 26 26 28 68 2b 3d 27 67 27 29 2c 62 5b 73 41 28 30 78 33 62 34 29 5d 26 26 28 68 2b 3d 27 69 27 29 2c 62 5b 73 41 28 30 78 35 64 66 29 5d 26 26 28 68 2b 3d 27 6d 27 29 2c 62 5b 27 64 6f 74 41 6c 6c 27 5d 26 26 28 68 2b 3d 27 73 27 29 2c 62 5b 73 41 28 30 78 34 32 65 29 5d 26 26 28 68 2b 3d 27 75 27 29 2c 62 5b 27 75 6e 69 63 6f 64 65 53 65 74 73 27 5d 26 26 28 68 2b 3d 27 76 27 29 2c 62 5b 73 41 28 30 78 33 63 66 29 5d 26 26 28 68 2b 3d 27 79 27 29 2c 68 3b 7d 65 6c 73 65 7b 69 66 28 4a 28 62 29 2c 4a 28 68 29 26 26 75 5b 73 41 28 30 78 32 32 39 29 5d 3d 3d 3d 52 29 72 65 74 75 72 6e 20 78 3b 76 61 72 20 Data Ascii: is),h='';return b[sA(0x5f1)]&&(h+='d'),b[sA(0x1aa)]&&(h+='g'),b[sA(0x3b4)]&&(h+='i'),b[sA(0x5df)]&&(h+='m'),b['dotAll']&&(h+='s'),b[sA(0x42e)]&&(h+='u'),b['unicodeSets']&&(h+='v'),b[sA(0x3cf)]&&(h+='y'),h;}else{if(J(b),J(h)&&u[sA(0x229)]===R)return x;var
2024-04-26 14:40:37 UTC	16384	IN	Data Raw: 29 7c 7c 30 78 31 0d 0a 34 30 30 30 0d 0a 21 3d 3d 44 61 74 65 5b 47 38 28 30 78 33 66 36 29 5d 5b 47 38 28 30 78 35 62 38 29 5d 5b 47 38 28 30 78 34 30 34 29 5d 28 7b 27 74 6f 49 53 4f 53 74 72 69 6e 67 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 78 31 3b 7d 7d 29 3b 65 6c 73 65 7b 76 61 72 20 6b 3d 6e 65 77 20 43 28 30 78 31 29 2c 57 3d 6e 65 77 20 71 28 6b 5b 27 62 75 66 66 65 72 27 5d 29 3b 72 65 74 75 72 6e 20 6b 5b 30 78 30 5d 3d 30 78 31 2f 30 78 30 2c 6b 5b 30 78 30 5d 3d 6b 5b 30 78 30 5d 2d 6b 5b 30 78 30 5d 2c 57 5b 30 78 33 5d 3b 7d 7d 29 7d 2c 7b 27 74 6f 4a 53 4f 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 76 61 72 20 47 39 3d 47 37 2c 6b 3d 75 28 74 68 69 73 29 2c 57 3d 52 28 6b 2c 27 6e 75 6d 62 65 72 27 29 3b 72 65 74 Data Ascii: )\|\|0x14000!==Date[G8(0x3f6)][G8(0x5b8)][G8(0x404)]({'toISOString':function(){return 0x1;}});else{var k=new C(0x1),W=new q(k['buffer']);return k[0x0]=0x1/0x0,k[0x0]=k[0x0]-k[0x0],W[0x3];}})},{'toJSON':function(x){var G9=G7,k=u(this),W=R(k,'number');ret
2024-04-26 14:40:38 UTC	16384	IN	Data Raw: 29 29 2c 4f 37 5b 71 7a 5d 5b 4f 71 5d 3d 0d 0a 33 66 66 37 0d 0a 21 30 78 30 29 2c 71 69 28 4f 37 2c 4f 71 2c 4f 39 29 29 3a 71 74 28 4f 37 2c 4f 71 2c 4f 39 29 3b 7d 2c 4f 32 3d 66 75 6e 63 74 69 6f 6e 28 4f 37 2c 4f 38 29 7b 76 61 72 20 6f 39 3d 6f 37 3b 71 46 28 4f 37 29 3b 76 61 72 20 4f 39 3d 71 54 28 4f 38 29 2c 4f 71 3d 71 6f 28 4f 39 29 5b 6f 39 28 30 78 32 31 65 29 5d 28 4f 36 28 4f 39 29 29 3b 72 65 74 75 72 6e 20 71 4d 28 4f 71 2c 66 75 6e 63 74 69 6f 6e 28 4f 4f 29 7b 76 61 72 20 6f 71 3d 6f 39 3b 69 66 28 6f 71 28 30 78 33 62 32 29 3d 3d 3d 6f 71 28 30 78 33 62 32 29 29 71 38 26 26 21 71 35 28 4f 33 2c 4f 39 2c 4f 4f 29 7c 7c 4f 31 28 4f 37 2c 4f 4f 2c 4f 39 5b 4f 4f 5d 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 71 6a 28 71 4c 2c 71 39 2c 71 Data Ascii: )),O7[qz][Oq]=3ff7!0x0),qi(O7,Oq,O9)):qt(O7,Oq,O9);},O2=function(O7,O8){var o9=o7;qF(O7);var O9=qT(O8),Oq=qo(O9)[o9(0x21e)](O6(O9));return qM(Oq,function(OO){var oq=o9;if(oq(0x3b2)===oq(0x3b2))q8&&!q5(O3,O9,OO)\|\|O1(O7,OO,O9[OO]);else return qj(qL,q9,q
2024-04-26 14:40:38 UTC	16384	IN	Data Raw: 3a 43 57 5b 30 78 31 5d 2c 27 64 75 72 0d 0a 65 30 61 36 0d 0a 61 74 69 6f 6e 27 3a 43 70 7d 3b 7d 29 3b 76 61 72 20 43 42 3d 43 57 5b 30 78 31 5d 3b 69 66 28 71 70 28 43 42 29 29 72 65 74 75 72 6e 20 43 78 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 27 76 61 6c 75 65 27 3a 43 42 2c 27 64 75 72 61 74 69 6f 6e 27 3a 43 70 7d 3b 7d 29 3b 43 78 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 43 61 29 7b 76 61 72 20 6f 45 3d 61 30 79 2c 43 5a 3d 44 61 74 65 5b 6f 45 28 30 78 33 36 66 29 5d 28 29 3b 71 38 28 43 42 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 6c 3d 6f 45 3b 66 6f 72 28 76 61 72 20 43 63 3d 5b 5d 2c 43 6e 3d 30 78 30 3b 43 6e 3c 61 72 67 75 6d 65 6e 74 73 Data Ascii: :CW[0x1],'dure0a6ation':Cp};});var CB=CW[0x1];if(qp(CB))return Cx(function(){return{'value':CB,'duration':Cp};});Cx(function(){return new Promise(function(Ca){var oE=a0y,CZ=Date[oE(0x36f)]();q8(CB,function(){var ol=oE;for(var Cc=[],Cn=0x0;Cn<arguments
2024-04-26 14:40:38 UTC	16384	IN	Data Raw: 30 78 38 30 61 38 2c 30 78 38 30 61 39 2c 30 78 38 30 61 61 2c 30 78 38 30 61 62 2c 30 78 38 30 63 38 2c 30 78 38 30 63 39 2c 30 78 38 30 63 61 2c 30 78 38 30 63 62 2c 30 78 63 66 35 2c 30 78 38 31 39 32 2c 30 78 64 30 35 2c 30 78 64 33 33 2c 30 78 64 33 61 2c 30 78 38 34 36 64 2c 30 78 38 34 36 65 2c 30 78 38 34 65 30 2c 30 78 38 34 65 38 2c 30 78 38 35 31 63 2c 30 78 64 35 30 2c 30 78 64 35 32 2c 30 78 64 35 33 2c 30 78 64 35 34 2c 30 78 64 35 35 2c 30 78 64 35 36 2c 30 78 64 35 37 2c 30 78 38 36 61 33 2c 30 78 38 38 30 30 2c 30 78 38 38 30 31 2c 30 78 38 38 30 32 2c 30 78 38 38 30 33 2c 30 78 38 38 33 64 2c 30 78 38 38 36 39 2c 30 78 38 38 37 32 2c 30 78 38 62 34 63 2c 30 78 38 62 34 64 2c 30 78 38 62 38 63 2c 30 78 38 62 39 61 2c 30 78 38 62 39 62 2c Data Ascii: 0x80a8,0x80a9,0x80aa,0x80ab,0x80c8,0x80c9,0x80ca,0x80cb,0xcf5,0x8192,0xd05,0xd33,0xd3a,0x846d,0x846e,0x84e0,0x84e8,0x851c,0xd50,0xd52,0xd53,0xd54,0xd55,0xd56,0xd57,0x86a3,0x8800,0x8801,0x8802,0x8803,0x883d,0x8869,0x8872,0x8b4c,0x8b4d,0x8b8c,0x8b9a,0x8b9b,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49751	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:41 UTC	843	OUT	POST /?hro=GO HTTP/1.1 Host: srmcorp.digitoids.com Connection: keep-alive Content-Length: 5210 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://srmcorp.digitoids.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://srmcorp.digitoids.com/?hro=GO Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:41 UTC	5210	OUT	Data Raw: 63 6c 6d 36 74 71 62 7a 65 65 6c 6e 3d 25 35 42 25 35 42 25 32 32 33 38 37 30 37 36 32 35 33 33 34 35 37 65 37 30 37 25 32 32 25 32 43 25 32 32 33 36 62 36 36 32 35 33 37 34 36 36 39 32 35 33 33 25 32 32 25 32 43 25 32 32 34 31 33 39 37 32 33 38 32 35 33 33 34 31 33 39 33 25 32 32 25 32 43 25 32 32 38 33 30 33 35 33 31 33 34 33 30 33 32 33 30 33 38 25 32 32 25 32 43 25 32 32 33 34 33 36 33 36 33 37 33 31 33 39 33 32 25 32 32 25 35 44 25 32 43 25 32 32 39 38 30 35 31 34 30 32 30 38 25 32 32 25 32 43 25 32 32 34 39 34 37 36 33 35 25 32 32 25 32 43 36 25 35 44 26 72 74 32 68 37 3d 25 35 42 25 35 42 25 32 32 32 35 34 33 33 32 32 35 33 38 33 35 36 66 36 64 37 33 36 62 36 66 32 35 33 25 32 32 25 32 43 25 32 32 37 34 36 37 37 37 35 32 35 33 37 34 33 37 39 32 35 Data Ascii: clm6tqbzeeln=%5B%5B%223870762533457e707%22%2C%2236b66253746692533%22%2C%2241397238253341393%22%2C%2283035313430323038%22%2C%2234363637313932%22%5D%2C%229805140208%22%2C%224947635%22%2C6%5D&rt2h7=%5B%5B%222543322538356f6d736b6f253%22%2C%2274677752537437925
2024-04-26 14:40:42 UTC	396	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 26 Apr 2024 14:40:42 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://srmcorp.digitoids.com/?hro=GO set-cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="; Domain=digitoids.com; HttpOnly; Path=/; SameSite=None; Secure
2024-04-26 14:40:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49754	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:42 UTC	1142	OUT	GET /en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: secure_aplicatic1_session=QWJneHFtRnprZGJaWDlLd2RndlBsMnozdk0yZ0hHeUtrbDJKZ1hvUk15OXJNcStJWVZYTzhudjNRdVdmWnQxWUc5bGFNTGdLL1JITzZuUU9BZHAvSlYvb2k2RUpzSlR6ZkxySjkvV1JIVG5kYWdpeDRwT3I5aTNNb2ptVkM5ZllGaklWaW5uRDZwUDZtUGxiR1RQVkluRUJSZk1iVjNYc29DRmd4cGdvVXlPS1hFNE43ckJTUUdMV1E0OVY2R3kyNXJDQ25GZVNPaHg0NE80UTBtUnc4a2xHOEVPQWZGN3dxczBHQm9OWFhjND0tLUFuVi9VSEVPVW40Zm5LamdQZTFIWmc9PQ%3D%3D--bf0bd3048e7b81802a54e1d8a2264b884c1ae8ad
2024-04-26 14:40:44 UTC	2350	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin ETag: W/"9eb8bbd3a3380c0dfa4a5e05c0548cb6" Cache-Control: must-revalidate, private, max-age=0 Content-Security-Policy: frame-ancestors 'self' https://enextrunrunit.s3-us-west-2.amazonaws.com https://teams.microsoft.com Set-Cookie: first_utm_campaign=footer_link; domain=.runrun.it; path=/; expires=Thu, 26 Apr 2029 14:40:42 GMT; secure Set-Cookie: utm_campaign=footer_link; domain=.runrun.it; path=/; expires=Thu, 26 Apr 2029 14:40:42 GMT; secure Set-Cookie: first_utm_medium=sharing_page_footer; domain=.runrun.it; path=/; expires=Thu, 26 Apr 2029 14:40:42 GMT; secure Set-Cookie: utm_medium=sharing_page_footer; domain=.runrun.it; path=/; expires=Thu, 26 Apr 2029 14:40:42 GMT; secure Set-Cookie: first_utm_source=plg; domain=.runrun.it; path=/; expires=Thu, 26 Apr 2029 14:40:42 GMT; secure Set-Cookie: utm_source=plg; domain=.runrun.it; path=/; expires=Thu, 26 Apr 2029 14:40:42 GMT; secure Set-Cookie: first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; domain=.runrun.it; path=/; expires=Thu, 26 Apr 2029 14:40:42 GMT; secure Set-Cookie: landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; domain=.runrun.it; path=/; expires=Thu, 26 Apr 2029 14:40:42 GMT; secure Set-Cookie: secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; path=/; secure; HttpOnly X-Request-Id: 7d855b54-681f-466b-b20f-6797743b83d1 X-Runtime: 1.322469 X-Rack-Cache: miss Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:44 UTC	2350	IN	Data Raw: 31 37 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 75 6e 72 75 6e 2e 69 74 20 7c 20 50 72 6f 63 65 73 73 20 61 6e 64 20 50 72 6f 6a 65 63 74 73 20 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 Data Ascii: 174f<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en"> <head> <title>Runrun.it \| Process and Projects Manager</title>
2024-04-26 14:40:44 UTC	1746	IN	Data Raw: 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 65 61 33 65 33 35 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 23 65 61 33 65 33 35 22 3e 0a 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 75 6e 72 75 6e 2e 69 74 2f 70 74 2d 42 52 22 20 68 72 65 66 6c 61 6e 67 3d 22 70 74 2d 42 52 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 75 Data Ascii: m-scale=1, maximum-scale=1"><meta name="theme-color" content="#ea3e35"><meta name="apple-mobile-web-app-status-bar-style" content="#ea3e35"><link rel="alternate" href="https://runrun.it/pt-BR" hreflang="pt-BR" /><link rel="alternate" href="https://ru
2024-04-26 14:40:44 UTC	1255	IN	Data Raw: 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 73 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 31 32 30 78 31 32 30 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 32 30 78 31 32 30 22 20 64 61 74 61 2d 66 61 76 69 63 6f 6e 3d 22 61 70 70 2d 66 61 76 69 63 6f 6e 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 73 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 31 34 34 78 31 34 34 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 34 34 78 31 34 34 22 20 64 61 74 61 2d 66 61 76 Data Ascii: ="image/x-icon" href="/static/images/favicons/apple-touch-icon-120x120.png" sizes="120x120" data-favicon="app-favicon" /><link rel="apple-touch-icon" type="image/x-icon" href="/static/images/favicons/apple-touch-icon-144x144.png" sizes="144x144" data-fav
2024-04-26 14:40:44 UTC	1255	IN	Data Raw: 22 3e 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 33 30 30 2c 34 30 30 2c 36 30 30 7c 52 6f 62 6f 74 6f 2b 53 6c 61 62 3a 33 30 30 2c 34 30 30 2c 36 30 30 22 20 6d 65 64 69 61 3d 22 70 72 69 6e 74 22 20 6f 6e 6c 6f 61 64 3d 22 74 68 69 73 2e 6d 65 64 69 61 3d 27 61 6c 6c 27 3b 20 74 68 69 73 2e 6f 6e 6c 6f 61 64 20 3d 20 6e 75 6c 6c 22 20 2f 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 69 31 38 6e 4a 53 54 72 61 6e 73 6c 61 74 69 6f 6e 73 20 3d 20 7b 22 65 6e 22 3a 7b 22 5f 74 69 6d 65 22 3a Data Ascii: "> <link rel="stylesheet" type="text/css" href="//fonts.googleapis.com/css?family=Open+Sans:300,400,600\|Roboto+Slab:300,400,600" media="print" onload="this.media='all'; this.onload = null" /> <script> window.i18nJSTranslations = {"en":{"_time":
2024-04-26 14:40:44 UTC	1255	IN	Data Raw: 30 33 63 62 72 5c 75 30 30 33 65 20 57 65 20 68 61 76 65 20 62 65 65 6e 20 72 65 63 6f 67 6e 69 7a 65 64 20 61 73 20 61 6e 20 69 6e 6e 6f 76 61 74 69 76 65 20 73 6f 6c 75 74 69 6f 6e 20 69 6e 20 61 63 63 65 6c 65 72 61 74 69 6f 6e 20 70 72 6f 67 72 61 6d 73 20 62 79 20 6c 61 72 67 65 20 63 6f 72 70 6f 72 61 74 69 6f 6e 73 20 73 75 63 68 20 61 73 20 4f 72 61 63 6c 65 2c 20 54 6f 74 76 73 2c 20 45 59 2c 20 4b 50 4d 47 2c 20 61 6e 64 20 6f 74 68 65 72 73 2e 20 57 65 20 68 61 76 65 20 61 6c 73 6f 20 63 6f 6e 74 69 6e 75 6f 75 73 6c 79 20 67 61 72 6e 65 72 65 64 20 71 75 61 6c 69 74 79 20 62 61 64 67 65 73 20 66 72 6f 6d 20 74 68 65 20 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 63 6f 6e 73 75 6c 74 69 6e 67 20 63 6f 6d 70 61 6e 79 20 47 32 20 43 72 6f 77 64 2c Data Ascii: 03cbr\u003e We have been recognized as an innovative solution in acceleration programs by large corporations such as Oracle, Totvs, EY, KPMG, and others. We have also continuously garnered quality badges from the international consulting company G2 Crowd,
2024-04-26 14:40:44 UTC	1255	IN	Data Raw: 69 6f 6e 22 3a 22 41 63 74 69 6f 6e 73 22 2c 22 61 63 74 69 6f 6e 73 22 3a 7b 22 61 62 5f 74 72 69 61 6c 22 3a 7b 22 62 61 73 65 22 3a 7b 22 65 6e 74 65 72 70 72 69 73 65 5f 69 6e 5f 74 68 65 5f 65 78 70 65 72 69 6d 65 6e 74 22 3a 22 54 68 65 20 63 6f 6d 70 61 6e 79 20 69 73 20 61 6c 72 65 61 64 79 20 69 6e 20 74 68 65 20 65 78 70 65 72 69 6d 65 6e 74 2e 22 2c 22 65 6e 74 65 72 70 72 69 73 65 5f 6e 6f 74 5f 69 6e 5f 65 78 70 65 72 69 6d 65 6e 74 22 3a 22 54 68 65 20 63 6f 6d 70 61 6e 79 20 69 73 20 6e 6f 74 20 69 6e 20 74 68 65 20 65 78 70 65 72 69 6d 65 6e 74 2e 22 2c 22 65 76 65 6e 74 5f 72 65 71 75 69 72 65 64 22 3a 22 41 6e 20 65 76 65 6e 74 20 69 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 74 68 69 73 20 61 63 74 69 6f 6e 2e 22 2c 22 65 78 70 65 72 Data Ascii: ion":"Actions","actions":{"ab_trial":{"base":{"enterprise_in_the_experiment":"The company is already in the experiment.","enterprise_not_in_experiment":"The company is not in the experiment.","event_required":"An event is required for this action.","exper
2024-04-26 14:40:44 UTC	1255	IN	Data Raw: 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 69 6e 76 61 6c 69 64 5f 64 61 74 61 22 3a 22 49 6e 76 61 6c 69 64 20 70 61 67 65 20 6d 65 74 61 64 61 74 61 20 73 65 74 74 69 6e 67 73 2e 22 7d 7d 2c 22 61 75 74 6f 6d 61 74 69 6f 6e 22 3a 7b 22 63 68 61 6e 67 65 5f 73 74 61 74 65 22 3a 7b 22 61 75 74 6f 6d 61 74 69 6f 6e 5f 72 65 71 75 69 72 65 64 22 3a 22 41 75 74 6f 6d 61 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 22 61 75 74 6f 6d 61 74 69 6f 6e 5f 73 74 61 74 65 5f 69 73 5f 69 6e 76 61 6c 69 64 22 3a 22 41 75 74 6f 6d 61 74 69 6f 6e 27 73 20 73 74 61 74 65 20 69 73 20 69 6e 76 61 6c 69 64 22 2c 22 61 75 74 6f 6d 61 74 69 6f 6e 5f 73 74 61 74 65 5f 72 65 71 75 69 72 65 64 22 3a 22 41 75 74 6f 6d 61 74 69 6f 6e 27 73 20 73 74 61 74 65 20 69 73 20 72 65 Data Ascii: _metadata":{"invalid_data":"Invalid page metadata settings."}},"automation":{"change_state":{"automation_required":"Automation is required","automation_state_is_invalid":"Automation's state is invalid","automation_state_required":"Automation's state is re
2024-04-26 14:40:44 UTC	1255	IN	Data Raw: 74 27 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 68 61 76 65 20 61 74 20 6c 65 61 73 74 20 31 20 73 74 61 67 65 20 70 65 72 20 67 72 6f 75 70 2e 22 2c 22 74 61 73 6b 73 5f 72 65 6d 61 69 6e 69 6e 67 22 3a 22 54 68 65 72 65 20 61 72 65 20 73 74 69 6c 6c 20 74 61 73 6b 73 20 74 6f 20 64 65 6c 65 74 65 2e 22 7d 2c 22 6d 6f 76 65 22 3a 7b 22 70 6f 73 69 74 69 6f 6e 5f 72 65 71 75 69 72 65 64 22 3a 22 4e 65 77 20 70 6f 73 69 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 7d 2c 22 75 70 64 61 74 65 5f 75 73 65 5f 6c 61 74 65 6e 63 79 5f 74 69 6d 65 22 3a 7b 22 69 6e 76 61 6c 69 64 5f 76 61 6c 75 65 22 3a 22 56 61 6c 75 65 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 2e 22 2c 22 6e 6f 5f 63 68 61 6e 67 65 73 22 3a 22 4e 6f 20 63 68 61 6e 67 65 73 20 68 61 76 Data Ascii: t's necessary to have at least 1 stage per group.","tasks_remaining":"There are still tasks to delete."},"move":{"position_required":"New position is required."},"update_use_latency_time":{"invalid_value":"Values not allowed.","no_changes":"No changes hav
2024-04-26 14:40:44 UTC	1255	IN	Data Raw: 64 69 73 61 62 6c 65 64 22 3a 22 59 6f 75 20 63 61 6e 6e 6f 74 20 65 64 69 74 20 74 68 65 20 64 65 73 63 72 69 70 74 69 6f 6e 20 69 6e 20 63 6f 6d 70 6c 65 74 65 64 20 74 61 73 6b 73 22 2c 22 62 6c 61 6e 6b 5f 73 74 61 74 65 5f 65 6e 61 62 6c 65 64 22 3a 22 45 6e 74 65 72 20 74 68 65 20 74 61 73 6b 20 64 65 74 61 69 6c 73 20 68 65 72 65 22 2c 22 63 6c 6f 6e 65 22 3a 7b 22 64 65 73 63 72 69 62 61 62 6c 65 5f 72 65 71 75 69 72 65 64 22 3a 22 49 74 65 6d 20 74 6f 20 64 65 73 63 72 69 62 65 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 7d 2c 22 6c 6f 63 6b 5f 65 64 69 74 22 3a 7b 22 61 6e 6f 74 68 65 72 5f 75 73 65 72 5f 65 64 69 74 69 6e 67 22 3a 22 54 68 65 20 64 65 73 63 72 69 70 74 69 6f 6e 20 69 73 20 62 65 69 6e 67 20 65 64 69 74 65 64 20 62 79 20 25 7b 75 Data Ascii: disabled":"You cannot edit the description in completed tasks","blank_state_enabled":"Enter the task details here","clone":{"describable_required":"Item to describe is required."},"lock_edit":{"another_user_editing":"The description is being edited by %{u
2024-04-26 14:40:44 UTC	1255	IN	Data Raw: 3a 22 54 68 65 20 61 74 74 61 63 68 6d 65 6e 74 20 69 73 20 61 6c 72 65 61 64 79 20 64 69 73 61 70 70 72 6f 76 65 64 2e 22 7d 2c 22 6d 61 72 6b 5f 61 73 5f 75 70 6c 6f 61 64 65 64 22 3a 7b 22 6e 6f 5f 73 74 61 74 65 5f 63 68 61 6e 67 65 22 3a 22 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 69 73 20 61 6c 72 65 61 64 79 20 75 70 6c 6f 61 64 65 64 2e 22 7d 2c 22 73 68 61 72 65 22 3a 7b 22 6e 6f 5f 73 74 61 74 65 5f 63 68 61 6e 67 65 22 3a 22 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 69 73 20 61 6c 72 65 61 64 79 20 73 68 61 72 65 64 2e 22 7d 2c 22 75 6e 73 68 61 72 65 22 3a 7b 22 63 61 6e 6e 6f 74 5f 75 6e 73 68 61 72 65 5f 67 75 65 73 74 5f 64 6f 63 75 6d 65 6e 74 22 3a 22 49 74 20 69 73 20 6e 6f 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 75 6e 73 68 61 72 65 20 61 Data Ascii: :"The attachment is already disapproved."},"mark_as_uploaded":{"no_state_change":"The document is already uploaded."},"share":{"no_state_change":"The document is already shared."},"unshare":{"cannot_unshare_guest_document":"It is not possible to unshare a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49752	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:43 UTC	851	OUT	GET /?hro=GO HTTP/1.1 Host: srmcorp.digitoids.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://srmcorp.digitoids.com/?hro=GO Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="
2024-04-26 14:40:47 UTC	783	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:40:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 55089 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: b81d5fdb-4385-4c4a-a882-f202f8569200 x-ms-ests-server: 2.1.17910.10 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://0824a98d-d78b26f4.digitoids.com/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-04-26 14:40:47 UTC	15596	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b4 bd 69 7b e2 48 b2 30 fa bd 7f 85 cd ed 07 a4 b1 8c 01 e3 0d 4a cd 78 c1 4b 95 b7 32 d8 65 9b e6 d4 2b 84 c0 b2 41 c2 92 b0 f1 c2 7f bf 11 91 8b 52 20 aa fb f4 cc 99 67 ba 2c a5 72 89 8c 8c 8c 3d 93 2f cb 07 17 fb cd bb cb fa d2 43 34 1c fc f1 db 17 f6 67 e9 cb 83 63 75 e1 ef d2 97 c8 8d 06 0e 3e 2d 5d 39 5d 37 70 ec c8 f5 fa f8 61 4d 7e f9 32 74 22 6b c9 f6 bd c8 f1 22 33 13 39 93 68 0d fb a9 2e d9 0f 56 10 3a 91 39 8e 7a ab db 19 18 23 1a ad 3a cf 63 f7 c5 cc ec b3 ea ab cd b7 91 93 59 4b e9 e6 a4 6e 3a dd be 93 6c 75 bb 7a bd bb ba ef 0f 47 56 e4 76 06 e9 0d 5f dd 6e f4 60 76 9d 17 d7 76 56 e9 c5 58 72 3d 37 72 ad c1 6a 68 5b 03 c7 2c e6 0b c6 d2 d0 9a b8 c3 f1 90 17 95 b0 68 1c 3a 01 bd 5b d0 b7 f9 e6 84 99 25 cf 1a 3a Data Ascii: i{H0JxK2e+AR g,r=/C4gcu>-]9]7paM~2t"k"39h.V:9z#:cYKn:luzGVv_n`vvVXr=7rjh[,h:[%:
2024-04-26 14:40:47 UTC	16384	IN	Data Raw: 39 51 b5 ff 05 e6 e5 73 83 a2 da 17 3f 17 71 64 de b4 fa ed ea 1e 0c 78 04 0c fa 2c 9b 05 be 4d 8f 0d 2c 32 76 41 8b 3d d2 85 2c 07 2b 89 75 52 dc b0 60 e7 ef 4b 5d ba b4 5e ee a6 23 65 57 45 ca 96 23 4d c4 cd 98 22 8b ce 3a 09 bf db 5d 85 7e e2 dd 60 0c 0d e5 46 5b 9a 13 15 92 b4 82 4f 00 43 65 b6 36 0d dd 37 6f 05 a5 e5 8e 1e fc b3 26 71 d9 3e aa 8e 9b b0 b0 ad 1c 3b cb 08 dd c5 a4 8a 0a 3b 1f ea 06 28 06 26 d7 d4 2b 5a d8 1a b6 4d 1b c8 47 d0 00 40 ac 4c 97 8f 77 24 34 db 9c 7f e6 df db 39 5c a6 23 c4 78 59 d7 61 76 47 f3 ab 4c 68 12 fc c8 f1 60 3f 09 f3 16 eb 66 5f 40 eb 98 31 7b 91 02 a8 fc 35 70 a3 b8 ac 4c 65 dc 1c be 46 45 49 e6 b4 5e 1b ae f4 44 bb e2 92 69 ed 9a 12 b9 38 50 b6 a3 b7 a5 d3 95 76 e3 75 4d bc 54 ae 59 a5 de fa 6c 1d f7 f3 d3 65 df Data Ascii: 9Qs?qdx,M,2vA=,+uR`K]^#eWE#M":]~`F[OCe67o&q>;;(&+ZMG@Lw$49\#xYavGLh`?f_@1{5pLeFEI^Di8PvuMTYle
2024-04-26 14:40:47 UTC	16384	IN	Data Raw: 54 e2 6e ac a6 8a ec 37 8b 04 d3 9d b9 7b 7d 78 df d5 d1 da 61 ba 70 b8 1f 6d cb 9e 27 3d 3d 44 28 34 9d a0 23 73 da b6 6e 80 a7 2e 15 4b b7 ab 1c 28 3f 98 6c f7 89 5b 40 b6 01 1b f3 43 f2 21 09 ef 13 1b 41 ac 83 7e 41 a7 b6 cf d7 9d 49 d0 1d f7 04 24 f7 49 c7 da ae ea aa 91 ca 54 df 0c 98 1e 2b 47 cf 21 24 37 e5 06 71 a9 7d 16 90 c7 27 39 72 c4 0f ad 43 22 23 7b 6c 6b 52 c0 2b 80 56 2b 6e 8f 78 28 08 e8 1d 6f 5f 03 13 6e d6 b1 f5 86 b0 c2 f5 ba c6 d3 9b f9 36 18 da e8 1a 53 43 4b 64 61 fb e3 43 c3 42 13 f7 50 a5 26 ad 63 ce 72 70 c2 44 31 d0 97 9b 30 9a 30 aa 03 1c d5 03 a3 38 d1 4b 05 f7 e4 06 30 99 5d bd 58 90 8b 85 b9 81 15 74 f0 a7 15 34 53 2b 88 10 c2 8b 5b b4 d9 d5 b3 a6 5c e2 11 a7 83 b6 15 20 03 29 72 26 52 37 34 3f c8 8b 79 a6 65 2c 5c a5 c2 aa Data Ascii: Tn7{}xapm'==D(4#sn.K(?l[@C!A~AI$IT+G!$7q}'9rC"#{lkR+V+nx(o_n6SCKdaCBP&crpD1008K0]Xt4S+[\ )r&R74?ye,\
2024-04-26 14:40:47 UTC	6725	IN	Data Raw: 75 d5 21 12 ed 1f 24 21 66 c8 f6 b6 7f 3f 12 30 19 31 dc 62 3c 19 bc ca 33 da b4 3a 61 43 80 91 89 72 1c bd 3e 31 fe 81 15 4c 59 0c 62 27 84 d2 b9 01 43 42 f2 ea 65 5f 86 fe 24 a8 58 de 47 6e 77 12 ea cb 33 61 11 3a b9 f0 27 21 5e b6 93 0b 91 5c 23 5e 2a fd 50 9e 97 0d db 91 89 de 28 53 3e 97 5c 14 b2 de 0a a3 51 c4 c7 6e 68 8d dd 6f ac ef 52 17 c2 4f 7b fd a1 66 a3 01 fd 20 b8 f2 01 f1 52 35 96 1b 5e 91 84 4d 2b 97 93 f6 6f 4b 24 43 89 b9 50 c3 71 25 61 59 6c 7f 30 5c 8e 57 4b 17 60 cd 9f 5c 61 74 56 f2 68 9b d4 1c e5 0f d6 e2 1f da 1f 4c fd 66 6d 76 37 bc 64 8f 30 49 b6 3d c2 26 35 5d 99 e5 11 66 f5 b0 ff c7 e1 ab a7 0d 5f fd bf 1a be a8 51 56 dd 7e f5 e3 7f 31 b2 e1 65 c5 3a 73 5a 9e 7d 64 12 67 03 63 12 3c 11 eb 91 f2 9e 3a 35 34 a6 5e 28 74 66 7c 78 Data Ascii: u!$!f?01b<3:aCr>1LYb'CBe_$XGnw3a:'!^\#^*P(S>\QnhoRO{f R5^M+oK$CPq%aYl0\WK`\atVhLfmv7d0I=&5]f_QV~1e:sZ}dgc<:54^(tf\|x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49753	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:46 UTC	1384	OUT	GET /packs/js/home_app-E5VN6LAK.js HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6
2024-04-26 14:40:46 UTC	408	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:46 GMT Content-Type: application/javascript Content-Length: 142454 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:46 UTC	847	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 77 6f 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 4c 74 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 51 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 76 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3b 76 61 72 20 55 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 59 6f 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 76 61 72 20 63 74 3d 28 64 2c 67 29 3d 3e 28 29 3d 3e 28 64 26 26 28 67 3d 64 28 64 3d 30 29 29 2c 67 29 3b 76 61 72 20 4e 74 3d 28 64 2c 67 29 3d 3e 28 29 3d 3e 28 67 7c 7c 64 28 28 67 Data Ascii: (()=>{var wo=Object.create;var Lt=Object.defineProperty;var Qo=Object.getOwnPropertyDescriptor;var vo=Object.getOwnPropertyNames;var Uo=Object.getPrototypeOf,Yo=Object.prototype.hasOwnProperty;var ct=(d,g)=>()=>(d&&(g=d(d=0)),g);var Nt=(d,g)=>()=>(g\|\|d((g
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 65 63 74 28 29 2c 6b 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 63 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 72 65 74 75 72 6e 20 67 2e 74 6f 70 3e 3d 30 26 26 67 2e 6c 65 66 74 3e 3d 30 26 26 67 2e 72 69 67 68 74 3c 3d 6b 26 26 67 2e 62 6f 74 74 6f 6d 3c 3d 63 7d 76 61 72 20 6e 66 2c 72 66 3d 63 74 28 28 29 3d 3e 7b 6e 66 3d 4c 6f 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 4e 6f 28 64 2c 67 29 7b 69 66 28 21 64 29 72 65 74 75 72 6e 3b 6c 65 74 20 6b 3d 63 3d 3e Data Ascii: ect(),k=window.innerWidth\|\|window.document.documentElement.clientWidth,c=window.innerHeight\|\|window.document.documentElement.clientHeight;return g.top>=0&&g.left>=0&&g.right<=k&&g.bottom<=c}var nf,rf=ct(()=>{nf=Lo});function No(d,g){if(!d)return;let k=c=>
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 22 3f 77 69 6e 64 6f 77 3a 67 6c 6f 62 61 6c 54 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6b 3d 5b 5d 2c 63 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 6b 2e 73 6c 69 63 65 2c 62 3d 6b 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6b 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6b 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 6d 3d 6b 2e 70 75 73 68 2c 78 3d 6b 2e 69 6e 64 65 78 4f 66 2c 57 3d 7b 7d 2c 55 3d 57 2e 74 6f 53 74 72 69 6e 67 2c 5f 3d 57 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 65 3d 5f 2e 74 6f 53 74 72 69 6e 67 2c 6f 65 3d 61 65 2e 63 61 Data Ascii: "?window:globalThis,function(d,g){"use strict";var k=[],c=Object.getPrototypeOf,s=k.slice,b=k.flat?function(e){return k.flat.call(e)}:function(e){return k.concat.apply([],e)},m=k.push,x=k.indexOf,W={},U=W.toString,_=W.hasOwnProperty,ae=_.toString,oe=ae.ca
2024-04-26 14:40:46 UTC	400	IN	Data Raw: 61 63 6b 28 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 7d 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6f 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6f 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: ack(s.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(o.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(o.grep(this,function(e,t){return t
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 6d 2c 73 6f 72 74 3a 6b 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 6b 2e 73 70 6c 69 63 65 7d 2c 6f 2e 65 78 74 65 6e 64 3d 6f 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 61 2c 66 2c 6e 2c 72 2c 69 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 41 3d 21 31 3b 66 6f 72 28 74 79 70 65 6f 66 20 69 3d 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 28 41 3d 69 2c 69 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 7c 7c 7b 7d 2c 68 2b 2b 29 2c 74 79 70 65 6f 66 20 69 21 3d 22 6f 62 6a 65 63 74 22 26 26 21 4c 28 69 29 26 26 28 69 3d 7b 7d 29 2c 68 3d 3d 3d 75 26 26 28 69 3d 74 68 69 73 2c 68 2d 2d 29 3b Data Ascii: .constructor()},push:m,sort:k.sort,splice:k.splice},o.extend=o.fn.extend=function(){var e,t,a,f,n,r,i=arguments[0]\|\|{},h=1,u=arguments.length,A=!1;for(typeof i=="boolean"&&(A=i,i=arguments[h]\|\|{},h++),typeof i!="object"&&!L(i)&&(i={}),h===u&&(i=this,h--);
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 61 3d 2b 74 2e 6c 65 6e 67 74 68 2c 66 3d 30 2c 6e 3d 65 2e 6c 65 6e 67 74 68 3b 66 3c 61 3b 66 2b 2b 29 65 5b 6e 2b 2b 5d 3d 74 5b 66 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 6e 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 66 6f 72 28 76 61 72 20 66 2c 6e 3d 5b 5d 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 2c 68 3d 21 61 3b 72 3c 69 3b 72 2b 2b 29 66 3d 21 74 28 65 5b 72 5d 2c 72 29 2c 66 21 3d 3d 68 26 26 6e 2e 70 75 73 68 28 65 5b 72 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 66 2c 6e 2c 72 3d 30 2c 69 3d 5b 5d 3b 69 66 28 42 28 65 29 29 66 6f 72 28 66 3d 65 2e 6c Data Ascii: rge:function(e,t){for(var a=+t.length,f=0,n=e.length;f<a;f++)e[n++]=t[f];return e.length=n,e},grep:function(e,t,a){for(var f,n=[],r=0,i=e.length,h=!a;r<i;r++)f=!t(e[r],r),f!==h&&n.push(e[r]);return n},map:function(e,t,a){var f,n,r=0,i=[];if(B(e))for(f=e.l
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 72 5c 5c 6e 5c 5c 66 5d 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 30 2d 5c 5c 78 37 66 5d 29 2b 22 2c 4d 61 3d 22 5c 5c 5b 22 2b 72 65 2b 22 2a 28 22 2b 71 65 2b 22 29 28 3f 3a 22 2b 72 65 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d 3f 3d 29 22 2b 72 65 2b 60 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 22 5d 29 2a 29 22 7c 28 60 2b 71 65 2b 22 29 29 7c 29 22 2b 72 65 2b 22 2a 5c 5c 5d 22 2c 6f 61 3d 22 3a 28 22 2b 71 65 2b 60 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 22 5d 29 2a 29 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 60 2b 4d 61 2b Data Ascii: r\\n\\f]\|[\\w-]\|[^\0-\\x7f])+",Ma="\\["+re+"("+qe+")(?:"+re+"([^$\|!~]?=)"+re+`(?:'((?:\\\\.\|[^\\\\']))'\|"((?:\\\\.\|[^\\\\"]))"\|(`+qe+"))\|)"+re+"\\]",oa=":("+qe+`)(?:\\((('((?:\\\\.\|[^\\\\']))'\|"((?:\\\\.\|[^\\\\"])*)")\|((?:\\\\.\|[^\\\\()[\\]]\|`+Ma+
2024-04-26 14:40:46 UTC	331	IN	Data Raw: 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 47 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 47 3e 3e 31 30 7c 35 35 32 39 36 2c 47 26 31 30 32 33 7c 35 36 33 32 30 29 29 7d 2c 5f 61 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 49 29 7b 72 65 74 75 72 6e 20 49 3f 6c 3d 3d 3d 22 5c 30 22 3f 22 5c 75 46 46 46 44 22 3a 6c 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2b 22 5c 5c 22 2b 6c 2e 63 68 61 72 43 6f 64 65 41 74 28 6c 2e 6c 65 6e 67 74 68 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 6c 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: g.fromCharCode(G+65536):String.fromCharCode(G>>10\|55296,G&1023\|56320))},_a=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g,Ka=function(l,I){return I?l==="\0"?"\uFFFD":l.slice(0,-1)+"\\"+l.charCodeAt(l.length-1).toString(16)+" ":"\\"+l},qa=function()
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 66 69 65 6c 64 73 65 74 22 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 7a 65 2e 61 70 70 6c 79 28 78 65 3d 53 61 2e 63 61 6c 6c 28 4b 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 4b 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 78 65 5b 4b 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 6c 29 7b 7a 65 3d 7b 61 70 70 6c 79 3a 78 65 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 49 2c 47 29 7b 52 65 2e 61 70 70 6c 79 28 49 2c 53 61 2e 63 61 6c 6c 28 47 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 49 2c 47 29 7b 66 6f 72 28 76 61 72 20 79 3d 49 2e 6c 65 6e 67 74 68 2c 43 3d 30 3b 49 5b 79 2b 2b 5d 3d 47 5b 43 2b 2b 5d 3b 29 3b 49 2e 6c 65 6e Data Ascii: fieldset"},{dir:"parentNode",next:"legend"});try{ze.apply(xe=Sa.call(K.childNodes),K.childNodes),xe[K.childNodes.length].nodeType}catch(l){ze={apply:xe.length?function(I,G){Re.apply(I,Sa.call(G))}:function(I,G){for(var y=I.length,C=0;I[y++]=G[C++];);I.len
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 2c 47 7d 63 61 74 63 68 28 64 65 29 7b 5a 65 28 6c 2c 21 30 29 7d 66 69 6e 61 6c 6c 79 7b 4f 3d 3d 3d 63 65 26 26 49 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 75 28 6c 2e 72 65 70 6c 61 63 65 28 76 74 2c 22 24 31 22 29 2c 49 2c 47 2c 79 29 7d 66 75 6e 63 74 69 6f 6e 20 59 74 28 29 7b 76 61 72 20 6c 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 49 28 47 2c 79 29 7b 72 65 74 75 72 6e 20 6c 2e 70 75 73 68 28 47 2b 22 20 22 29 3e 66 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 49 5b 6c 2e 73 68 69 66 74 28 29 5d 2c 49 5b 47 2b 22 20 22 5d 3d 79 7d 72 65 74 75 72 6e 20 49 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 6c 29 7b 72 65 74 75 72 6e 20 6c 5b 63 65 5d 3d 21 30 2c 6c 7d 66 75 6e 63 74 69 6f 6e Data Ascii: ,G}catch(de){Ze(l,!0)}finally{O===ce&&I.removeAttribute("id")}}}return u(l.replace(vt,"$1"),I,G,y)}function Yt(){var l=[];function I(G,y){return l.push(G+" ")>f.cacheLength&&delete I[l.shift()],I[G+" "]=y}return I}function Ue(l){return l[ce]=!0,l}function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49758	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:46 UTC	1400	OUT	GET /packs/css/home_app-J7HUCVVO.css HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6
2024-04-26 14:40:46 UTC	394	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:46 GMT Content-Type: text/css Content-Length: 791468 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:46 UTC	861	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 2d 66 61 6d 69 6c 79 2c 20 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 50 72 6f 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 2c 20 39 30 30 29 7d 2e 66 61 2c 2e 66 61 2d 63 6c 61 73 73 69 63 2c 2e 66 61 2d 73 68 61 72 70 2c 2e 66 61 73 2c 2e 66 61 2d 73 6f 6c 69 64 2c 2e 66 61 72 2c 2e 66 61 2d 72 65 67 75 6c 61 72 2c 2e 66 61 73 72 2c 2e 66 61 6c 2c 2e 66 61 2d 6c 69 67 68 74 2c 2e 66 61 73 6c 2c 2e 66 61 74 2c 2e 66 61 2d 74 68 69 6e 2c 2e 66 61 64 2c 2e 66 61 2d 64 75 6f 74 6f 6e 65 2c 2e 66 61 73 73 2c 2e 66 61 2d 73 68 61 72 70 2d 73 6f 6c 69 64 2c 2e 66 61 62 2c 2e Data Ascii: @charset "UTF-8";.fa{font-family:var(--fa-style-family, "Font Awesome 6 Pro");font-weight:var(--fa-style, 900)}.fa,.fa-classic,.fa-sharp,.fas,.fa-solid,.far,.fa-regular,.fasr,.fal,.fa-light,.fasl,.fat,.fa-thin,.fad,.fa-duotone,.fass,.fa-sharp-solid,.fab,.
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 66 61 2d 35 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 7d 2e 66 61 2d 36 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 65 6d 7d 2e 66 61 2d 37 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 65 6d 7d 2e 66 61 2d 38 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 65 6d 7d 2e 66 61 2d 39 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 65 6d 7d 2e 66 61 2d 31 30 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 65 6d 7d 2e 66 61 2d 32 78 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 36 32 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 31 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2e 32 32 35 65 6d 7d 2e 66 61 2d 78 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 30 38 33 33 33 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2e 31 32 35 65 Data Ascii: fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-height:.08333em;vertical-align:.125e
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 20 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 20 30 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 20 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 20 6e 6f 72 6d 61 6c 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 Data Ascii: elay:var(--fa-animation-delay, 0s);animation-delay:var(--fa-animation-delay, 0s);-webkit-animation-direction:var(--fa-animation-direction, normal);animation-direction:var(--fa-animation-direction, normal);-webkit-animation-duration:var(--fa-animation-dura
2024-04-26 14:40:46 UTC	400	IN	Data Raw: 31 29 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 38 2c 20 2e 38 34 2c 20 2e 34 32 2c 20 31 29 29 7d 2e 66 61 2d 66 61 64 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 61 64 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 61 64 65 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 20 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 20 30 73 29 3b 2d 77 65 Data Ascii: 1));animation-timing-function:var(--fa-animation-timing, cubic-bezier(.28, .84, .42, 1))}.fa-fade{-webkit-animation-name:fa-fade;animation-name:fa-fade;-webkit-animation-delay:var(--fa-animation-delay, 0s);animation-delay:var(--fa-animation-delay, 0s);-we
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 20 31 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 20 31 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 20 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 20 69 6e 66 69 6e 69 74 65 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 Data Ascii: on:var(--fa-animation-duration, 1s);animation-duration:var(--fa-animation-duration, 1s);-webkit-animation-iteration-count:var(--fa-animation-iteration-count, infinite);animation-iteration-count:var(--fa-animation-iteration-count, infinite);-webkit-animati
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 61 79 2c 20 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 20 30 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 20 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 20 6e 6f 72 6d 61 6c 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 20 31 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f Data Ascii: ay, 0s);animation-delay:var(--fa-animation-delay, 0s);-webkit-animation-direction:var(--fa-animation-direction, normal);animation-direction:var(--fa-animation-direction, normal);-webkit-animation-duration:var(--fa-animation-duration, 1s);animation-duratio
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 67 2c 20 6c 69 6e 65 61 72 29 7d 2e 66 61 2d 73 70 69 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 73 70 69 6e 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 73 70 69 6e 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 20 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 20 30 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 20 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 Data Ascii: g, linear)}.fa-spin{-webkit-animation-name:fa-spin;animation-name:fa-spin;-webkit-animation-delay:var(--fa-animation-delay, 0s);animation-delay:var(--fa-animation-delay, 0s);-webkit-animation-direction:var(--fa-animation-direction, normal);animation-direc
2024-04-26 14:40:46 UTC	331	IN	Data Raw: 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 20 73 74 65 70 73 28 38 29 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 20 73 74 65 70 73 28 38 29 29 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 72 65 64 75 63 65 29 7b 2e 66 61 2d 62 65 61 74 2c 2e 66 61 2d 62 6f 75 6e 63 65 2c 2e 66 61 2d 66 61 64 65 2c 2e 66 61 2d 62 65 61 74 2d 66 61 64 65 2c 2e 66 61 2d 66 6c 69 70 2c 2e 66 61 2d 70 75 6c 73 65 2c 2e 66 61 2d 73 68 61 6b 65 2c 2e 66 61 2d 73 70 69 6e 2c 2e 66 61 2d 73 70 69 6e 2d 70 75 6c 73 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 31 6d 73 3b 61 Data Ascii: imation-timing, steps(8));animation-timing-function:var(--fa-animation-timing, steps(8))}@media (prefers-reduced-motion: reduce){.fa-beat,.fa-bounce,.fa-fade,.fa-beat-fade,.fa-flip,.fa-pulse,.fa-shake,.fa-spin,.fa-spin-pulse{-webkit-animation-delay:-1ms;a
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 7b 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 34 35 25 7b 2d 77 65 62 6b 69 Data Ascii: ebkit-animation-iteration-count:1;animation-iteration-count:1;-webkit-transition-delay:0s;transition-delay:0s;-webkit-transition-duration:0s;transition-duration:0s}}@-webkit-keyframes fa-beat{0%,90%{-webkit-transform:scale(1);transform:scale(1)}45%{-webki
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 6e 63 65 2d 6c 61 6e 64 2d 73 63 61 6c 65 2d 78 2c 20 31 2e 30 35 29 2c 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6c 61 6e 64 2d 73 63 61 6c 65 2d 79 2c 20 2e 39 35 29 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 35 37 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2c 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 72 65 62 6f 75 6e 64 2c 20 2d 2e 31 32 35 65 6d 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 72 65 62 6f 75 6e 64 2c 20 2d 2e 31 32 35 65 6d 29 29 7d 36 34 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2c 31 29 20 74 72 61 6e Data Ascii: nce-land-scale-x, 1.05),var(--fa-bounce-land-scale-y, .95)) translateY(0)}57%{-webkit-transform:scale(1,1) translateY(var(--fa-bounce-rebound, -.125em));transform:scale(1) translateY(var(--fa-bounce-rebound, -.125em))}64%{-webkit-transform:scale(1,1) tran

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49759	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:46 UTC	1391	OUT	GET /packs/js/lgpd_banner_app-WWUT7GMR.js HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6
2024-04-26 14:40:46 UTC	409	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:46 GMT Content-Type: application/javascript Content-Length: 1011730 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:46 UTC	846	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 51 4a 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 6c 6d 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 65 5a 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 2c 74 5a 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 72 5a 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 2c 61 5a 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 2c 5a 30 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 2c 6e 5a 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 42 32 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 Data Ascii: (()=>{var QJ=Object.create;var lm=Object.defineProperty,eZ=Object.defineProperties,tZ=Object.getOwnPropertyDescriptor,rZ=Object.getOwnPropertyDescriptors,aZ=Object.getOwnPropertyNames,Z0=Object.getOwnPropertySymbols,nZ=Object.getPrototypeOf,B2=Object.prot
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 29 7d 29 3b 76 61 72 20 70 41 3d 28 74 2c 65 29 3d 3e 7b 76 61 72 20 72 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 74 29 42 32 2e 63 61 6c 6c 28 74 2c 61 29 26 26 65 2e 69 6e 64 65 78 4f 66 28 61 29 3c 30 26 26 28 72 5b 61 5d 3d 74 5b 61 5d 29 3b 69 66 28 74 21 3d 6e 75 6c 6c 26 26 5a 30 29 66 6f 72 28 76 61 72 20 61 20 6f 66 20 5a 30 28 74 29 29 65 2e 69 6e 64 65 78 4f 66 28 61 29 3c 30 26 26 64 41 2e 63 61 6c 6c 28 74 2c 61 29 26 26 28 72 5b 61 5d 3d 74 5b 61 5d 29 3b 72 65 74 75 72 6e 20 72 7d 3b 76 61 72 20 70 65 3d 28 74 2c 65 29 3d 3e 28 29 3d 3e 28 74 26 26 28 65 3d 74 28 74 3d 30 29 29 2c 65 29 3b 76 61 72 20 77 3d 28 74 2c 65 29 3d 3e 28 29 3d 3e 28 65 7c 7c 74 28 28 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c Data Ascii: )});var pA=(t,e)=>{var r={};for(var a in t)B2.call(t,a)&&e.indexOf(a)<0&&(r[a]=t[a]);if(t!=null&&Z0)for(var a of Z0(t))e.indexOf(a)<0&&dA.call(t,a)&&(r[a]=t[a]);return r};var pe=(t,e)=>()=>(t&&(e=t(t=0)),e);var w=(t,e)=>()=>(e\|\|t((e={exports:{}}).exports,
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 63 74 69 6f 6e 20 69 5a 28 74 29 7b 72 65 74 75 72 6e 20 41 64 28 74 2c 22 44 4f 4d 45 72 72 6f 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 5a 28 74 29 7b 72 65 74 75 72 6e 20 41 64 28 74 2c 22 44 4f 4d 45 78 63 65 70 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 63 5a 28 74 29 7b 72 65 74 75 72 6e 20 41 64 28 74 2c 22 53 74 72 69 6e 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 75 5a 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 74 21 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 67 41 28 74 29 7b 72 65 74 75 72 6e 20 41 64 28 74 2c 22 4f 62 6a 65 63 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 5a 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 Data Ascii: ction iZ(t){return Ad(t,"DOMError")}function sZ(t){return Ad(t,"DOMException")}function cZ(t){return Ad(t,"String")}function uZ(t){return t===null\|\|typeof t!="object"&&typeof t!="function"}function gA(t){return Ad(t,"Object")}function lZ(t){return typeof
2024-04-26 14:40:46 UTC	400	IN	Data Raw: 56 32 2c 6e 3d 61 2e 5f 5f 53 45 4e 54 52 59 5f 5f 3d 61 2e 5f 5f 53 45 4e 54 52 59 5f 5f 7c 7c 7b 7d 3b 72 65 74 75 72 6e 20 6e 5b 74 5d 7c 7c 28 6e 5b 74 5d 3d 65 28 29 29 7d 64 6d 2e 47 4c 4f 42 41 4c 5f 4f 42 4a 3d 56 32 3b 64 6d 2e 67 65 74 47 6c 6f 62 61 6c 4f 62 6a 65 63 74 3d 67 5a 3b 64 6d 2e 67 65 74 47 6c 6f 62 61 6c 53 69 6e 67 6c 65 74 6f 6e 3d 76 5a 7d 29 3b 76 61 72 20 55 32 3d 77 28 70 6d 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 70 6d 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 79 5a 3d 64 69 28 29 2c 77 5a 3d 61 63 28 29 2c 74 76 3d 77 5a 2e 67 65 74 47 6c 6f 62 61 6c 4f 62 6a 65 63 74 28 29 2c 5f 5a 3d 38 30 3b 66 75 6e 63 74 69 6f 6e 20 78 5a 28 74 2c 65 3d Data Ascii: V2,n=a.__SENTRY__=a.__SENTRY__\|\|{};return n[t]\|\|(n[t]=e())}dm.GLOBAL_OBJ=V2;dm.getGlobalObject=gZ;dm.getGlobalSingleton=vZ});var U2=w(pm=>{Object.defineProperty(pm,"__esModule",{value:!0});var yZ=di(),wZ=ac(),tv=wZ.getGlobalObject(),_Z=80;function xZ(t,e=
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 68 3d 6b 5a 28 72 2c 78 29 2c 21 28 68 3d 3d 3d 22 68 74 6d 6c 22 7c 7c 6f 3e 31 26 26 66 2b 6e 2e 6c 65 6e 67 74 68 2a 75 2b 68 2e 6c 65 6e 67 74 68 3e 3d 4d 29 29 3b 29 6e 2e 70 75 73 68 28 68 29 2c 66 2b 3d 68 2e 6c 65 6e 67 74 68 2c 72 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 6e 2e 72 65 76 65 72 73 65 28 29 2e 6a 6f 69 6e 28 63 29 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 6e 22 3c 75 6e 6b 6e 6f 77 6e 3e 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 5a 28 74 2c 65 29 7b 6c 65 74 20 72 3d 74 2c 61 3d 5b 5d 2c 6e 2c 6f 2c 66 2c 63 2c 75 3b 69 66 28 21 72 7c 7c 21 72 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 22 22 3b 61 2e 70 75 73 68 28 72 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 6c 65 74 20 68 3d 65 Data Ascii: h=kZ(r,x),!(h==="html"\|\|o>1&&f+n.length*u+h.length>=M));)n.push(h),f+=h.length,r=r.parentNode;return n.reverse().join(c)}catch(r){return"<unknown>"}}function kZ(t,e){let r=t,a=[],n,o,f,c,u;if(!r\|\|!r.tagName)return"";a.push(r.tagName.toLowerCase());let h=e
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 2b 29 28 3f 3a 3a 28 5c 77 2b 29 3f 29 3f 40 29 28 5b 5c 77 2e 2d 5d 2b 29 28 3f 3a 3a 28 5c 64 2b 29 29 3f 5c 2f 28 2e 2b 29 2f 3b 66 75 6e 63 74 69 6f 6e 20 4f 5a 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 22 68 74 74 70 22 7c 7c 74 3d 3d 3d 22 68 74 74 70 73 22 7d 66 75 6e 63 74 69 6f 6e 20 41 5a 28 74 2c 65 3d 21 31 29 7b 6c 65 74 7b 68 6f 73 74 3a 72 2c 70 61 74 68 3a 61 2c 70 61 73 73 3a 6e 2c 70 6f 72 74 3a 6f 2c 70 72 6f 6a 65 63 74 49 64 3a 66 2c 70 72 6f 74 6f 63 6f 6c 3a 63 2c 70 75 62 6c 69 63 4b 65 79 3a 75 7d 3d 74 3b 72 65 74 75 72 6e 60 24 7b 63 7d 3a 2f 2f 24 7b 75 7d 24 7b 65 26 26 6e 3f 60 3a 24 7b 6e 7d 60 3a 22 22 7d 40 24 7b 72 7d 24 7b 6f 3f 60 3a 24 7b 6f 7d 60 3a 22 22 7d 2f 24 7b 61 26 26 60 24 7b 61 7d 2f 60 7d 24 7b 66 7d 60 Data Ascii: +)(?::(\w+)?)?@)([\w.-]+)(?::(\d+))?\/(.+)/;function OZ(t){return t==="http"\|\|t==="https"}function AZ(t,e=!1){let{host:r,path:a,pass:n,port:o,projectId:f,protocol:c,publicKey:u}=t;return`${c}://${u}${e&&n?`:${n}`:""}@${r}${o?`:${o}`:""}/${a&&`${a}/`}${f}`
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 5a 28 74 29 7b 6c 65 74 20 65 3d 74 79 70 65 6f 66 20 74 3d 3d 22 73 74 72 69 6e 67 22 3f 76 41 28 74 29 3a 79 41 28 74 29 3b 72 65 74 75 72 6e 20 50 5a 28 65 29 2c 65 7d 6d 6d 2e 64 73 6e 46 72 6f 6d 53 74 72 69 6e 67 3d 76 41 3b 6d 6d 2e 64 73 6e 54 6f 53 74 72 69 6e 67 3d 41 5a 3b 6d 6d 2e 6d 61 6b 65 44 73 6e 3d 43 5a 7d 29 3b 76 61 72 20 62 6d 3d 77 28 43 75 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 43 75 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 61 76 3d 61 63 28 29 2c 71 5a 3d 22 53 65 6e 74 72 79 20 4c 6f 67 67 65 72 20 22 2c 6e 76 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 2c 22 61 73 73 65 72 74 22 Data Ascii: Z(t){let e=typeof t=="string"?vA(t):yA(t);return PZ(e),e}mm.dsnFromString=vA;mm.dsnToString=AZ;mm.makeDsn=CZ});var bm=w(Cu=>{Object.defineProperty(Cu,"__esModule",{value:!0});var av=ac(),qZ="Sentry Logger ",nv=["debug","info","warn","error","log","assert"
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 6f 2d 31 34 30 2c 30 29 29 2c 72 3d 72 2e 73 6c 69 63 65 28 6e 2c 6f 29 2c 6e 3e 30 26 26 28 72 3d 60 27 7b 73 6e 69 70 7d 20 24 7b 72 7d 60 29 2c 6f 3c 61 26 26 28 72 2b 3d 22 20 7b 73 6e 69 70 7d 22 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 4e 5a 28 74 2c 65 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 22 22 3b 6c 65 74 20 72 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 61 3d 30 3b 61 3c 74 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 6c 65 74 20 6e 3d 74 5b 61 5d 3b 74 72 79 7b 72 2e 70 75 73 68 28 53 74 72 69 6e 67 28 6e 29 29 7d 63 61 74 63 68 28 6f 29 7b 72 2e 70 75 73 68 28 22 5b 76 61 6c 75 65 20 63 61 6e 6e 6f 74 20 62 65 20 73 65 72 69 61 6c 69 7a 65 64 5d 22 29 7d 7d 72 65 74 75 72 6e 20 72 2e 6a 6f 69 6e 28 65 29 7d 66 Data Ascii: o-140,0)),r=r.slice(n,o),n>0&&(r=`'{snip} ${r}`),o<a&&(r+=" {snip}"),r}function NZ(t,e){if(!Array.isArray(t))return"";let r=[];for(let a=0;a<t.length;a++){let n=t[a];try{r.push(String(n))}catch(o){r.push("[value cannot be serialized]")}}return r.join(e)}f
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 54 41 28 74 29 29 3b 69 66 28 50 64 2e 69 73 45 76 65 6e 74 28 74 29 29 7b 6c 65 74 20 65 3d 45 65 28 7b 74 79 70 65 3a 74 2e 74 79 70 65 2c 74 61 72 67 65 74 3a 45 41 28 74 2e 74 61 72 67 65 74 29 2c 63 75 72 72 65 6e 74 54 61 72 67 65 74 3a 45 41 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 7d 2c 54 41 28 74 29 29 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 50 64 2e 69 73 49 6e 73 74 61 6e 63 65 4f 66 28 74 2c 43 75 73 74 6f 6d 45 76 65 6e 74 29 26 26 28 65 2e 64 65 74 61 69 6c 3d 74 2e 64 65 74 61 69 6c 29 2c 65 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 45 41 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 50 64 2e 69 73 45 6c 65 6d 65 6e 74 Data Ascii: TA(t));if(Pd.isEvent(t)){let e=Ee({type:t.type,target:EA(t.target),currentTarget:EA(t.currentTarget)},TA(t));return typeof CustomEvent!="undefined"&&Pd.isInstanceOf(t,CustomEvent)&&(e.detail=t.detail),e}else return t}function EA(t){try{return Pd.isElement
2024-04-26 14:40:46 UTC	1255	IN	Data Raw: 3a 65 3d 6e 65 77 20 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 65 3d 74 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 7d 6a 66 2e 61 64 64 4e 6f 6e 45 6e 75 6d 65 72 61 62 6c 65 50 72 6f 70 65 72 74 79 3d 4f 41 3b 6a 66 2e 63 6f 6e 76 65 72 74 54 6f 50 6c 61 69 6e 4f 62 6a 65 63 74 3d 50 41 3b 6a 66 2e 64 72 6f 70 55 6e 64 65 66 69 6e 65 64 4b 65 79 73 3d 56 5a 3b 6a 66 2e 65 78 74 72 61 63 74 45 78 63 65 70 74 69 6f 6e 4b 65 79 73 46 6f 72 4d 65 73 73 61 67 65 3d 42 5a 3b 6a 66 2e 66 69 6c 6c 3d 4c 5a 3b 6a 66 2e 67 65 74 4f 72 69 67 69 6e 61 6c 46 75 6e 63 74 69 6f 6e 3d 7a 5a 3b 6a 66 2e 6d 61 72 6b 46 75 6e 63 74 69 6f 6e 57 72 61 70 70 65 64 3d 41 41 3b 6a 66 2e 6f 62 6a 65 63 74 69 66 79 3d 55 5a 3b Data Ascii: :e=new t.constructor(t);break;default:e=t;break}return e}jf.addNonEnumerableProperty=OA;jf.convertToPlainObject=PA;jf.dropUndefinedKeys=VZ;jf.extractExceptionKeysForMessage=BZ;jf.fill=LZ;jf.getOriginalFunction=zZ;jf.markFunctionWrapped=AA;jf.objectify=UZ;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49760	172.217.193.156	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:48 UTC	855	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-24371500-1&cid=1930088754.1714142446&jid=619370535&gjid=1123308618&_gid=1893265479.1714142446&_u=IEBAAEAAAAAAACAAI~&z=1044199344 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://runrun.it X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:48 UTC	587	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://runrun.it Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 26 Apr 2024 14:40:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:48 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49763	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:50 UTC	1586	OUT	GET /static/images/home/index/your_request_form_runrunit_mobile.png HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _ga=GA1.2.1930088754.1714142446; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446
2024-04-26 14:40:50 UTC	370	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:50 GMT Content-Type: image/png Content-Length: 8143 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:50 UTC	885	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 4e 00 00 00 d9 08 03 00 00 00 78 99 29 14 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 02 e5 50 4c 54 45 47 70 4c 63 76 80 f4 f5 f7 ea f7 ff 5d 6f 88 5b 6c 8a 5b 6b 88 6e 84 97 60 68 b4 ef f3 f7 5e 73 84 f1 f5 f9 eb f7 ff d8 dc ec 58 66 84 b7 df af ee f4 f8 b7 df af 5d 74 8e ef f1 f4 5b 6b 89 ed f3 f8 d4 e2 ed b6 de af 87 b7 cf 8d b7 cf b7 df af 5e 6c 8d f1 f3 f5 e9 f6 fe fd d3 83 67 75 90 eb f8 ff 95 c1 d6 ea fe ff eb f8 ff f7 ba ce 5c 6d 8a ea f8 ff eb f9 ff ec f7 fe ed f8 fe e3 f2 fc b1 d8 e1 f7 bf ce ff be c7 eb f8 ff f9 bb d0 cd b5 ca f9 c2 bb f9 c0 ba fa be c5 bd e5 f9 9c a5 b6 f9 bb Data Ascii: PNGIHDRNx)gAMAasRGBpHYsPLTEGpLcv]o[l[kn`h^sXf]t[k^lgu\m
2024-04-26 14:40:50 UTC	222	IN	Data Raw: ef 30 10 84 10 bf a9 fd 60 40 50 7b 3c dd fa 2e df d0 90 fc e1 c0 df b4 98 49 70 2c 5e 5f f5 e5 bf df bc e7 b0 80 ef cf af df 50 80 af df a9 7e 7a 87 77 8b 00 00 1c 0e 49 44 41 54 78 da ed 9d 77 7c 13 67 9a c7 f1 41 b0 96 1c 2c f1 05 b8 0d f8 4c 20 2c 04 b2 d9 64 93 6c ea ee 26 d9 24 bb 7b 5b ae 97 cf c8 02 97 60 5b 3b 16 92 25 a1 82 c4 a8 a0 66 4b f2 5a b6 dc 64 e4 de b0 2d 37 dc 0b 36 cd 18 d3 43 ef 24 84 f4 b6 49 f6 fe be 67 66 24 5b b6 65 5b 5d b2 3c 0f d2 68 9a 46 f8 ab df f3 3c ef fb ce 33 a3 45 8b bc b7 e5 cf fd fa a9 5f 3f f7 d2 22 ca 7c b7 9f 3c f5 f3 24 d2 7e fe d3 e5 14 0e 5f 61 3e 91 e4 64 14 50 9f 6c b9 5d 99 17 2f 5e b4 2b f4 39 0a 8a d7 f6 12 Data Ascii: 0`@P{<.Ip,^_P~zwIDATxw\|gA,L ,dl&${[`[;%fKZd-76C$Igf$[e[]<hF<3E_?"\|<$~_a>dPl]/^+9
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 29 cd 8f ef 8d 8c 8c d4 9e 24 89 3e 4b 61 f1 56 9b 24 cd af 47 07 07 06 06 3b 46 46 3e 23 16 29 7d 7a 69 a4 a7 3f 68 1c 1c 1c 00 a0 1d 83 b5 c4 f2 13 54 fc f4 ca 9e 22 c3 e5 d7 b5 1d 1d 83 dd 83 1d 83 03 1d a4 3c 7f 4a a1 f1 c6 d5 49 9a 77 3b 71 9c 83 b5 8d 8d b5 83 8d e4 aa 9f 51 70 3c b7 67 49 76 0f 3a 6b bb 47 3a 6a 3b 3b 3b 1b af 8f 25 51 f2 f4 2d 72 7e fb e0 64 f7 c0 bd 91 c6 4e 9c 67 07 89 f3 89 9f 50 74 3c 6e c0 db 7d fd e3 da fa c6 91 b1 cb 63 9d 8d 8d 27 bb 2f 52 de ee a5 fd cc 8e f3 e4 58 f7 c9 8e 9b 37 47 ee d5 76 5c ae b7 e3 fc 35 85 c7 bb d0 f9 ed 67 27 07 c6 3a ef 8d 5c 1e 69 1c b9 d9 5b 6f ef 6b 3e 45 e1 f1 12 e7 c9 c6 ee 5e 3c 6c 36 76 8e 8e f5 de 4c 8a b4 5c b4 ed f9 d5 af ae 0a 1e ce bb 8d 10 3a 4f 76 36 8e 36 e2 44 3b 22 4d 9d cb 5f 96 Data Ascii: )$>KaV$G;FF>#)}zi?hT"<JIw;qQp<gIv:kG:j;;;%Q-r~dNgPt<n}c'/RX7Gv\5g':\i[ok>E^<l6vL\:Ov66D;"M_
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 5d d9 02 ed 6d 7c 29 e3 b0 16 bb 0d e4 be c9 e6 c1 e6 9e 9e 84 84 73 c4 ce 09 e7 0e 53 38 5d e3 ec c2 21 01 a1 04 2d 3e 49 00 68 e7 00 f1 7b 09 c4 12 bc 1e fe 10 5f 8b 2f 60 58 46 02 d6 95 f0 4d 42 f6 7b 3d 0b 54 9d 51 8f cc 6e 40 e7 1c 81 eb 70 cf ed 04 41 4f 4f 57 42 76 06 46 e2 84 25 fc f5 bd c3 76 9c df 9c 3b f7 61 c2 1d 0c 80 6a 79 5d 0b 13 e7 9a 47 b6 cd a5 ce 3b e0 cd 1f 82 e0 b2 bb 08 09 be a7 ed 11 64 38 ab f3 43 87 3a 7b b0 9e ec 84 3b 09 5d da 04 ed 9d ec 85 88 33 fa b1 35 6e c4 ce db 3d 3d 87 01 d7 7b d9 09 82 c3 87 bb 7a ee e0 7a 24 d4 79 f8 70 c6 e1 9e 1e 2c 81 c4 99 01 08 b3 33 60 e7 db 78 ec bc bd 10 d5 f9 c8 a2 68 37 32 fb 1d 70 5d 78 ed 4a e8 ea ea ca c0 dd 38 23 21 03 5f ee ea 4a c8 e8 b2 b7 a4 32 c8 47 06 b1 33 f9 58 88 38 e7 6a 77 fe Data Ascii: ]m\|)sS8]!->Ih{_/`XFMB{=TQn@pAOOWBvF%v;ajy]G;d8C:{;]35n=={zz$yp,3`xh72p]xJ8#!_J2G3X8jw
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 8a 0a 84 60 29 e3 7f a5 d3 ec 7c c0 39 ae ce bc b6 42 e0 d9 67 a7 27 41 d4 22 b8 70 58 8d 28 4c 12 b5 d9 8a 14 ab 31 1d a2 36 29 10 09 ac 40 ac 66 35 22 31 fb 72 ed f0 cc ce ce 65 57 59 d8 4c 6e 25 17 5f 48 e1 f2 d9 f4 14 f6 3c c4 59 58 78 7a fb f6 d6 36 07 4e 16 c6 01 45 9a 10 2d 4b 52 8c a8 39 c5 1c 16 06 70 e1 aa 6c 11 dc 46 c0 8a 98 45 c5 1c 0e c7 bf 55 20 0e 67 17 ca e9 75 e5 c2 6a e0 59 51 2d e4 b3 e5 d5 c2 6a a6 07 38 99 ec 70 c0 d9 97 b9 6f fb b0 2c d3 8e 13 33 89 10 02 a7 09 51 ab 49 67 d7 20 8a 62 4c cd c1 4c 3a 85 a6 18 13 e9 8a 4d 92 80 34 94 76 02 4e 78 54 e5 d3 e9 7c 36 93 cf ae aa a4 97 17 78 80 93 cd f7 15 a7 c1 a2 9a 4e 2b d9 b0 cb 13 9c c8 be c2 d6 be 7d 79 e3 ce 8e 4f 24 1a c0 29 32 23 22 5c a9 1a 90 a9 42 2d 62 b1 30 91 02 11 b1 ca e0 Data Ascii: `)\|9Bg'A"pX(L16)@f5"1reWYLn%_H<YXxz6NE-KR9plFEU gujYQ-j8po,3QIg bLL:M4vNxT\|6xN+}yO$)2#"\B-b0
2024-04-26 14:40:50 UTC	331	IN	Data Raw: ca 61 d8 9a 5d 07 a7 56 e9 dc 3a 2e 97 ce e6 d6 79 92 8a 82 dc c9 9c 84 13 7e be 88 c0 39 6e e4 19 2b 37 4f 46 b9 50 a7 46 0b ce 0e 38 c1 b5 ed 38 45 02 b3 80 a3 10 e8 8a 35 1a 33 32 3b 4e 1e 9d de 30 c4 d6 ea b5 dc 06 ad be 41 de 4e e7 61 da 76 b6 0d e3 d5 b8 8f 73 52 27 33 b8 0d 25 e2 07 b6 62 d2 d2 8e 80 a5 a5 4d f0 c4 6f 11 ee 16 4e e7 d8 89 37 e3 59 c4 1d f0 01 15 47 c4 d1 b1 e0 1f 02 27 b1 39 22 08 94 f0 14 e9 88 4d 22 3c 47 e9 58 33 e0 94 ea 1b 30 69 7b 8d 1e 33 72 e5 ed c6 76 ba 11 70 c2 4a f7 71 ce d9 c9 7c 37 40 a9 88 f8 59 b3 e8 e8 a8 74 59 a1 52 59 78 e6 dd 03 04 51 4f 0e e6 e7 76 27 8e 53 2f 1d d2 cb e5 6c ba 51 af 05 9c 5a ba bc 1d d6 7a 80 33 71 12 4e 57 17 16 ec f0 6f ec a4 39 e1 8c 8e 8e 89 7a ab 50 f9 c5 6d ec 0b 65 13 d3 a1 50 f7 71 26 Data Ascii: a]V:.y~9n+7OFPF88E532;N0ANavsR'3%bMoN7YG'9"M"<GX30i{3rvpJq\|7@YtYRYxQOv'S/lQZz3qNWo9zPmePq&
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 45 ba 7a cc b2 c7 95 4a fd d8 83 ef 6f 9e 53 2a 7f 73 fc 88 67 fe 3e 1d 67 da 27 9f 7c 82 07 b0 33 b2 56 7f 74 32 87 b4 ed 75 61 dd c9 1c 6f 28 c1 4f 3f da c5 a9 d4 74 7e dd 7b b9 07 e4 59 9a 4e ba fb 8c ef e6 08 e5 c2 74 04 69 36 5e 91 b7 4c c5 89 a7 a2 23 df 5e ef bd fb 09 d2 df 74 fb 3c d6 37 d3 a8 5e 41 01 94 5d bc 2f af 6c 61 45 40 9f 7d bc 19 8f d3 8c 59 b6 14 ee 45 f6 fd 83 8f 7b af 83 3a 95 92 e3 69 b3 f3 6c 86 9a c5 52 78 e1 f3 f9 3a 57 b1 f3 93 bb d7 3b ef de 3d d2 aa bc fe f1 4d 65 9e eb 63 40 e1 a3 11 be 18 fb 21 22 66 08 04 a7 19 15 b7 09 28 de 79 f0 f5 58 ef 1d 98 49 61 ed 48 9b 35 7c 5e e1 94 f3 41 5a cd e5 e5 7c 97 ea fc e4 ee cd 93 df df fd a4 4f f9 d9 c9 5e e5 0c ee 2e 6f e1 57 03 4e fb 21 26 e1 4c d5 95 65 c1 4b e9 a9 53 12 cf 71 ee 08 Data Ascii: EzJoS*sg>g'\|3Vt2uao(O?t~{YNti6^L#^t<7^A]/laE@}YE{:ilRx:W;=Mec@!"f(yXIaH5\|^AZ\|O^.oWN!&LeKSq
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: c0 71 26 1e 29 4d 4a ba d8 d1 d9 d8 78 0f d4 99 f4 c2 12 0f 71 ee 2e 29 2a 3b 7f e3 c2 f9 0b 17 ae e2 3c 03 86 b3 ad bf ad 29 6f 18 39 94 99 49 e0 3c d4 7f 28 6f 66 75 3a 4e 6f d8 71 ee df bf df 2e 4d 2f 71 66 79 82 f3 56 d2 c7 03 b5 a3 a3 63 d7 6f dd ba b5 74 99 67 f5 9d 3b 99 a7 8a 8e 5e b8 71 fe c2 fd fb 5f 15 15 95 ec a6 05 ac a1 d4 26 83 ab b9 0f f5 15 42 ec dc 7e a8 6d 7b 5b 61 5b e6 cc b1 d3 71 66 38 7a 25 e1 e5 76 47 df e9 59 56 f1 46 9d 69 47 4a 3f 4a fa 7e b0 be b6 76 e0 f3 bf b4 32 56 c7 2d 4f f6 a8 dd c9 29 2a ba 76 ff c4 d1 f3 f7 ef 7f 5a 54 54 29 8e 0e 45 af 68 9f 8b 2a 10 a2 6c 81 16 bd 12 6f 09 a6 ee f4 34 6c fa e0 ec 59 1f 7c d4 7b b0 be be fe 04 31 f0 f2 f6 4b 9e e0 dc c9 6c 29 2a fa ee c2 89 6b 97 ce 5f 02 9c 05 25 a1 c4 39 e9 8a 61 1a Data Ascii: q&)MJxq.);<)o9I<(ofu:Noq.M/qfyVcotg;^q_&B~m{[a[qf8z%vGYVFiGJ?J~v2V-O)vZTT)Ehlo4lY\|{1Kl)k_%9a
2024-04-26 14:40:50 UTC	430	IN	Data Raw: 33 16 76 3a 62 27 87 c3 9a b8 09 b1 9f ea 3b 23 13 67 22 52 79 b5 c5 eb cc ee 43 7d 67 64 c6 ce 90 d5 77 2e 64 9c 01 a8 ef 8c 4c 67 0f 59 7d e7 82 c6 e9 b7 fa ce 48 76 f6 23 5e d0 4c f3 53 7d 67 e4 e1 f4 b0 be 93 b4 3d 5e dc 5a c5 55 7d 67 e4 e1 f4 a8 be d3 e9 4c 74 f8 76 32 57 6d d9 b8 72 fd e6 d8 50 e1 f4 e5 86 93 5e d4 77 42 b8 0e 24 ce c5 af d8 7f 76 7b 65 ec fc c3 19 5f e2 a8 eb 24 cb 3a 77 39 ca 3d f1 a2 4e b2 b4 d3 be cd 3e c1 77 2a 49 0e 18 ce d8 a7 9d 7e 14 7e fd fc c3 99 ec 85 4d dc 21 d1 ef 34 7f cc 60 78 cb 33 02 7e 60 c7 df 36 99 26 83 b1 85 c2 e9 83 ad 9f 42 93 f1 64 2c 85 d3 57 71 e6 f5 35 29 9b ce e4 29 f3 3c 73 77 0a e7 14 db 4c d2 6c 2a 3c d3 2a 6b 2a 24 70 3e 49 e1 f4 da 36 12 38 33 0a 61 72 46 a6 24 70 32 b6 52 38 bd 35 b2 91 94 87 63 Data Ascii: 3v:b';#g"RyC}gdw.dLgY}Hv#^LS}g=^ZU}gLtv2WmrP^wB$v{e_$:w9=N>wI~~M!4`x3~`6&Bd,Wq5))<swLl<k$p>I683arF$p2R85c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49762	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:50 UTC	1579	OUT	GET /static/images/home/index/your_request_form_runrunit.png HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _ga=GA1.2.1930088754.1714142446; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446
2024-04-26 14:40:50 UTC	371	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:50 GMT Content-Type: image/png Content-Length: 16024 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:50 UTC	884	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 4a 00 00 01 7e 08 03 00 00 00 4a fe c5 8d 00 00 02 f4 50 4c 54 45 47 70 4c 65 7b 97 5c 69 87 5c 6c 8a 45 59 7a 5d 6c 8d 59 68 87 4e 52 7d 4e 57 78 59 63 8d e8 ea ef 5f 6a 8d bc c4 cf b8 e0 b0 59 6b 89 fb fb fc 59 6c 8a b6 de b0 b8 e0 b0 5b 68 88 89 b5 cf fd fd fe 8f bb d3 fe d5 85 b6 df af b8 e1 b1 e9 f6 fe d4 e0 e6 e9 e5 e8 bc c5 d0 e5 f6 ff ec f8 ff ed f7 fd ec f9 ff fe d5 85 5c 6b 87 df e2 e8 ec f8 fe ec f7 fd b8 e0 b0 db f1 fc 8c b9 d2 f4 ba c9 eb f8 ff f8 bb d0 7f ca f1 f8 ba d0 e4 f6 ff 97 c2 d8 cf b4 ca c3 e4 f7 ef f7 fd eb f9 ff f7 b9 cf ba e3 f7 eb f8 ff f9 ba d0 eb f8 ff f8 bb d0 bd e5 fa fe d5 84 b0 d7 ad 84 c0 e1 64 6a 80 eb f8 ff b8 e1 b0 f8 bb d0 eb f8 ff eb f8 ff ec f7 fd b8 e0 b0 f4 Data Ascii: PNGIHDRJ~JPLTEGpLe{\i\lEYz]lYhNR}NWxYc_jYkYl[h\kdj
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: a3 be 84 c7 a9 bb 90 df c0 ef ef df fe f0 e4 e4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 29 60 4d 47 00 00 3a 57 49 44 41 54 78 da ec 9c 6f 48 1b 69 1a c0 53 ae e0 de 7e db 2f 27 24 d2 ee de 71 a5 f5 8a bd f4 5a 29 55 76 a1 5f 0e b6 4b 39 ee df 47 07 f1 db bd 5f a4 21 f8 65 0c 5e 98 31 51 84 85 d5 2c c2 40 36 99 c2 10 ae Data Ascii: )`MG:WIDATxoHiS~/'$qZ)Uv_K9G_!e^1Q,@6
2024-04-26 14:40:50 UTC	375	IN	Data Raw: 4d ce 64 4c 0d a6 6f 96 5a 9e 5f 35 64 43 11 b7 70 fe d6 5a ae 51 85 ee ba 6d 5d c9 e3 ac 52 7e ff e5 3f 2b 8b 92 a4 48 0a 3c 8c 8c 6c 98 92 28 2a 99 f9 d5 65 50 c9 2c fa 31 28 b5 36 53 f4 3c 5f a1 ec 71 d5 99 df ac 7c 59 a9 54 fc e5 65 49 96 0c 45 31 15 1a 8a 4c 53 c9 64 e6 bf db 51 64 45 b1 76 76 77 aa 36 e1 8f 06 b4 32 2e 01 d7 dc f5 37 70 fe d2 df fd 7e ff ae b9 aa c8 a6 2c 9b 06 b8 64 98 a6 69 64 7e 30 be de 5d 05 95 c4 d5 6f 77 77 2a 38 7d 6b e1 98 78 7c f4 9b 01 d7 5d 77 33 b4 ef f7 ff 00 95 a4 65 25 a3 c8 32 78 a4 40 68 02 95 e4 8c 5c 5e f5 cf cb 8a 29 e5 57 77 fc 15 4c 6f ad fd 0b 07 da 5c 77 da 1d 7f f1 fb 77 ca 10 95 aa 2a 19 b4 54 d2 45 90 09 54 da a1 66 29 e2 c2 6e e5 8f 98 de 90 23 79 0f 32 dc 02 a8 04 55 92 41 6d 92 a1 ea a6 2e 3d 5a dd a9 Data Ascii: MdLoZ_5dCpZQm]R~?+H<l(eP,1(6S<_q\|YTeIE1LSdQdEvvw62.7p~,did~0]oww8}kx\|]w3e%2x@h\^)WwLo\ww*TETf)n#y2UAm.=Z
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: e7 4c f1 fe 45 e6 64 f9 4f 7d c3 fb 9a 1f 74 f1 7d 1c 1d 57 99 c4 9c 62 d0 25 37 71 f1 34 ab 74 11 c7 c7 45 30 a7 1a 1c 1f 54 09 55 42 95 50 25 a4 45 2a 0d b2 0f 50 25 e4 c7 55 1a 4c 26 0f 9f be 0f 25 07 f7 df 4c ce 32 6c 12 b8 5f 7b 1f 88 bf 4c 83 50 32 d0 9c 2f f1 03 ed a2 5c 00 55 72 b9 4a 69 42 be 38 74 a8 a3 24 f4 7c 7b 84 04 19 3e c1 f3 fc 67 b5 1d 24 f9 32 43 58 32 da 9c 4a 07 1b 06 48 1a 55 72 b9 4a a9 d9 b0 c0 30 53 c2 34 9f 8c 33 f7 39 61 8c 1b 62 c6 78 2e ea a8 34 c5 73 63 b4 d1 df c8 20 c3 47 e8 56 90 0b f4 71 d3 49 92 62 99 71 8e 9b 62 46 b9 20 b7 21 b0 49 3e c8 54 5b 3b 86 38 7b 07 63 fc 4c 9c 19 15 b8 28 17 1a e7 46 99 74 92 09 cc f0 c2 28 d3 97 e4 85 a1 a1 14 e1 47 e3 69 5e 18 64 d8 18 1b 63 b8 b0 17 55 72 b5 4a 23 84 15 c2 71 26 49 78 8e Data Ascii: LEdO}t}Wb%7q4tE0TUBP%E*P%UL&%L2l_{LP2/\UrJiB8t$\|{>g$2CX2JHUrJ0S439abx.4sc GVqIbqbF !I>T[;8{cL(Ft(Gi^dcUrJ#q&Ix
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 9b 31 e2 66 59 06 6f dd 8b ed 13 04 cb 52 49 b6 44 30 49 96 a5 89 3d 2a 99 4c ee f1 ec 54 b6 13 0c 85 d1 49 d1 c9 5c d2 44 14 69 22 c5 d0 e0 4a 2a 46 a9 e0 de c3 34 44 88 62 84 20 22 25 22 52 2c 1b 0f cd 70 40 11 cc fe e1 0b b1 c7 62 ec a8 ca 98 8f df b4 4b e5 30 5a 26 36 45 ec 97 38 94 4a 4c 0a 50 52 31 4a 7b 39 8e 27 33 8f 12 fe aa a0 54 a0 76 dd bb 47 51 22 e8 62 15 4a c5 08 e6 87 30 53 7b 1c 41 45 ba c8 16 20 2b a9 19 a5 22 5d 86 a3 c8 96 4a 94 89 88 50 14 85 b7 ec 33 65 6a ca 28 e1 6d a5 32 4a a5 52 15 4a ec 5e 81 2a 70 30 52 f4 2e 2e 90 b1 12 c4 6e 19 ab ff ea 64 ef e9 c5 a1 b4 cf bb d2 01 51 cc 15 73 98 85 8a 2b e5 58 9a 65 eb b8 52 a4 ca 95 cc 31 86 a6 f8 5d 85 12 83 51 32 b9 4d 80 92 5c a5 1f ef 7d 78 51 77 c6 ac 44 e1 bc 53 e2 b3 92 19 7b 4c 99 Data Ascii: 1fYoRID0I=LTI\Di"JF4Db "%"R,p@bK0Z&6E8JLPR1J{9'3TvGQ"bJ0S{AE +"]JP3ej(m2JRJ^*p0R..ndQs+XeR1]Q2M\}xQwDS{L
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 86 a9 06 1a 96 0d 4a c3 7d 47 7f fa db 06 70 25 b1 51 32 36 42 e9 96 4c 50 d2 de ad fb e3 7f 33 a0 4a 94 a4 74 a5 f3 8d 50 1a 92 07 4a da db 0d 7e fe 3e e3 69 5a 94 80 d2 19 b2 d2 68 83 33 71 5e 16 28 69 ef 35 fa 55 98 ea 1b 50 9f 2b 49 db 0c 30 d4 fd b5 be 3e d0 fa 77 1a 9f 98 f8 76 62 62 5c 54 94 86 a6 1a eb 1b 83 fa 5c 49 e2 99 01 86 81 23 3a 7f 9a e7 3d 3d f8 96 97 98 24 0d 4c 1d a7 51 28 70 32 6d 51 4e f0 24 3d 10 b3 bc 0d 1e 8b d2 d4 88 ea 0a 9c 42 e6 2b 19 78 94 c4 2c 70 c6 e3 49 9a 1a d3 a9 b1 af 24 7f 94 ba bb 27 44 36 a5 46 43 86 4f 32 42 33 40 9e d7 e0 0c 22 9b 52 6d 23 63 65 69 a9 a6 5b f9 5d 8b 28 3d 99 fd 87 60 72 a9 20 76 b7 cd 96 70 5a 9a 14 d3 94 ae d5 a0 94 7a fa 74 a5 a6 21 a0 6b 0d a5 99 47 c2 e9 35 b8 52 2b 31 b8 57 d4 bf 3d f9 dd 89 Data Ascii: J}Gp%Q26BLP3JtPJ~>iZh3q^(i5UP+I0>wvbb\T\I#:==$LQ(p2mQN$=B+x,pI$'D6FCO2B3@"Rm#cei[](=`r vpZzt!kG5R+1W=
2024-04-26 14:40:50 UTC	331	IN	Data Raw: 51 7e 6c 57 51 5c e0 dc 6b 1e 4f 3a 87 9c ac 67 5d 06 17 4e 38 94 7e b7 d9 2d 9e 35 8b e5 99 cd 6b f9 d3 96 08 39 2d 16 67 48 28 94 9e 2d fe aa 0a 94 5e 59 3f bc c7 24 bd 99 c6 4c 55 a1 44 f9 fd 5c fc a9 42 a9 92 b7 2b 28 ad b2 3e 4f ce 8f 1c 9e 88 3b 80 a8 ac cf e7 0b 20 e4 5d 4d 06 e5 e1 4a 7e db 8c e5 79 c0 62 f9 05 a3 b4 cc a3 f4 cc 17 15 0a a5 39 5b 58 15 28 7d d8 79 eb 4a bd 7b fa 61 c1 fa be 36 2b 61 45 30 20 74 19 a5 6c 1a a7 eb d0 21 4a 94 1d a1 a4 df 11 46 c8 9f e4 77 af 6f a3 b0 03 39 62 f9 8e 6f 06 70 28 cd f9 9e bf e0 4f 70 c8 f7 22 60 4b 2c db a2 ff 6e 57 f8 ae 8b d2 5c 7c 26 bc cc a7 fe 44 22 3c 63 59 8c 2f c6 2d 73 e1 38 4e 6b 8b e1 c5 e5 3f ed f1 b9 f0 3f ed 61 bc 07 bf 8f cf 58 7e 59 2e 1f dd e9 28 d5 3c b7 7b c1 fa 66 61 6a e9 86 f5 2d Data Ascii: Q~lWQ\kO:g]N8~-5k9-gH(-^Y?$LUD\B+(>O; ]MJ~yb9[X(}yJ{a6+aE0 tl!JFwo9bop(Op"`K,nW\\|&D"<cY/-s8Nk??aX~Y.(<{faj-
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: d3 93 c0 9b 9c ff 67 ef 7c 7e d3 48 cf 38 be 59 79 6b a2 1c db 5e aa bd 54 5d 55 da 43 ae 3d f6 5a a9 97 fe 03 ef 10 09 91 5d fb 9d 49 f9 51 28 62 32 3b 26 33 8c 27 63 a6 c4 0e 83 04 86 04 58 98 02 8e 62 ba 2b d7 f1 da 42 ae 14 ed ca d9 14 75 1d 6d 94 b4 51 9a e6 10 47 ab dd 44 39 65 af 7d de 01 f3 cb e0 38 86 c1 60 f3 10 e0 e5 f5 e0 19 c3 27 df e7 c7 fb be 33 cc 22 86 8e d4 0c e6 b8 79 8e d3 54 4f 1e 2b 1a 67 8f a9 80 f8 08 96 28 9f fd 8d 64 70 8e 96 15 90 8c 52 6b 84 d4 78 78 09 85 48 e2 5f e6 56 00 a3 14 c8 8e ae 43 7c bd 12 87 26 f4 c5 e0 8d 4b ea 32 fc 88 55 56 72 a5 f1 24 93 ce 28 e5 ed 46 30 a6 69 d4 3c 8e f3 38 4b fc eb 3c d6 53 aa 8b 51 01 a5 00 f8 dc f9 19 2e 04 09 c0 cc bc 4b d3 f2 8b 9e 51 1c 38 41 d7 3f 79 26 a2 51 b5 11 41 69 86 d2 14 82 92 Data Ascii: g\|~H8Yyk^T]UC=Z]IQ(b2;&3'cXb+BumQGD9e}8`'3"yTO+g(dpRkxxH_VC\|&K2UVr$(F0i<8K<SQ.KQ8A?y&QAi
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: dc ff f7 2c 49 3d c3 36 df 84 52 55 95 6c e6 a2 c4 d8 c6 28 99 19 2b d5 82 ee 16 94 82 88 8d 64 50 29 c7 95 11 da e4 f8 50 98 cd 31 88 0f 21 31 a6 de 42 a8 98 e3 36 51 86 e6 d8 9e 55 c9 33 60 94 3a a8 52 76 da 3c fb d3 89 8a 95 6a d5 49 03 a5 9f 36 a1 84 a4 28 2b 27 32 c2 66 39 2d 25 84 68 89 5e 22 bd 89 8d 15 21 56 82 fe 34 93 a0 33 4c 3f 50 3a 55 63 e9 88 50 7a 6a 33 b3 ec 90 3d 49 eb e0 26 eb a5 80 33 ef 35 50 12 a4 48 3a ac 08 4b 4b d2 32 27 8b 68 a3 86 52 99 0e 2d ad 48 0c ad 6e 96 c5 30 dd f3 f9 0e 00 a5 e9 3a 4a d4 7e b1 12 db 9f 13 51 f9 f7 3a 38 a7 a9 15 ac ec d3 93 e4 e0 1a fe ad 09 a5 88 52 c8 20 55 88 46 a3 b1 15 09 a1 60 0d a5 38 9d 88 46 55 94 0a 0a 85 72 df 50 3a 65 31 aa 94 2d 61 b7 2a cb 85 4c 93 ff 54 0b 2d 6f 4c 6d be cd 6e 78 9d cb 2b Data Ascii: ,I=6RUl(+dP)P1!1B6QU3`:Rv<jI6(+'2f9-%h^"!V43L?P:UcPzj3=I&35PH:KK2'hR-Hn0:J~Q:8R UF`8FUrP:e1-a*LT-oLmnx+
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 82 5f 7c f9 fa e1 cb 97 b7 1f 3c 36 50 72 fc a2 8f 0e ae 0b 4a 55 55 a2 9a 51 5a bf e6 48 40 e8 7f cf 28 48 bc aa 54 ee 3f 78 f1 56 2c 81 86 5d da 1d 35 39 10 4a 1d 2d 2a 67 22 92 a9 03 27 23 7e 26 93 bd 0e ae 9a c1 19 41 b7 e3 9b 9b af bf fb f4 cb ef fe ba 75 67 8b c4 dd 8e bf f4 86 12 7c a7 de 37 a0 d4 a9 ae 04 9a b4 75 fb db fb 05 c7 57 00 43 a5 b2 73 ff 36 c8 d2 c1 59 2a 7a f5 3c 37 5f 3d 04 c5 1b 4b ea fa a1 50 a2 42 5c ca d5 4f 94 8e d9 09 04 7f de 2d 83 ab a2 f4 c3 3f 2a 3b 2f 77 5e 3c 7e bc 7d ff bf 8e 5e 83 25 03 25 a5 81 92 96 9f 4f c5 f2 fb 14 03 6a 28 9d 77 38 32 77 76 5e 6c af 9d 05 55 04 51 da b9 73 fb 35 a0 f4 e3 41 f7 5b 15 c2 62 43 18 63 6f 46 a9 bc fa 9f 7f 6e d6 da 53 7f fe fe fb a5 f2 78 66 c0 5b 56 bb 27 27 5b 50 0a bd 86 50 a9 f2 62 Data Ascii: _\|<6PrJUUQZH@(HT?xV,]59J-g"'#~&Aug\|7uWCs6Yz<7_=KPB\O-?*;/w^<~}^%%Oj(w82wv^lUQs5A[bCcoFnSxf[V''[PPb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49764	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:50 UTC	1497	OUT	GET /packs/js/basicScripts-FOJV7GUT.js HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _ga=GA1.2.1930088754.1714142446; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446
2024-04-26 14:40:50 UTC	408	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:50 GMT Content-Type: application/javascript Content-Length: 143365 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:50 UTC	847	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 49 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 68 6e 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 4f 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 48 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3b 76 61 72 20 50 72 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 4c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 76 61 72 20 50 74 3d 28 62 2c 63 29 3d 3e 28 29 3d 3e 28 62 26 26 28 63 3d 62 28 62 3d 30 29 29 2c 63 29 3b 76 61 72 20 70 6e 3d 28 62 2c 63 29 3d 3e 28 29 3d 3e 28 63 7c 7c 62 28 28 63 Data Ascii: (()=>{var Ir=Object.create;var hn=Object.defineProperty;var Or=Object.getOwnPropertyDescriptor;var Hr=Object.getOwnPropertyNames;var Pr=Object.getPrototypeOf,Lr=Object.prototype.hasOwnProperty;var Pt=(b,c)=>()=>(b&&(c=b(b=0)),c);var pn=(b,c)=>()=>(c\|\|b((c
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 65 63 74 28 29 2c 6b 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 68 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 72 65 74 75 72 6e 20 63 2e 74 6f 70 3e 3d 30 26 26 63 2e 6c 65 66 74 3e 3d 30 26 26 63 2e 72 69 67 68 74 3c 3d 6b 26 26 63 2e 62 6f 74 74 6f 6d 3c 3d 68 7d 76 61 72 20 41 69 2c 6a 69 3d 50 74 28 28 29 3d 3e 7b 41 69 3d 46 72 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 72 28 62 2c 63 29 7b 69 66 28 21 62 29 72 65 74 75 72 6e 3b 6c 65 74 20 6b 3d 68 3d 3e Data Ascii: ect(),k=window.innerWidth\|\|window.document.documentElement.clientWidth,h=window.innerHeight\|\|window.document.documentElement.clientHeight;return c.top>=0&&c.left>=0&&c.right<=k&&c.bottom<=h}var Ai,ji=Pt(()=>{Ai=Fr});function _r(b,c){if(!b)return;let k=h=>
2024-04-26 14:40:50 UTC	375	IN	Data Raw: 22 3f 77 69 6e 64 6f 77 3a 67 6c 6f 62 61 6c 54 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6b 3d 5b 5d 2c 68 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 4e 3d 6b 2e 73 6c 69 63 65 2c 6d 3d 6b 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6b 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6b 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 54 3d 6b 2e 70 75 73 68 2c 48 3d 6b 2e 69 6e 64 65 78 4f 66 2c 43 3d 7b 7d 2c 6a 3d 43 2e 74 6f 53 74 72 69 6e 67 2c 46 3d 43 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 59 3d 46 2e 74 6f 53 74 72 69 6e 67 2c 72 65 3d 59 2e 63 61 6c 6c Data Ascii: "?window:globalThis,function(b,c){"use strict";var k=[],h=Object.getPrototypeOf,N=k.slice,m=k.flat?function(e){return k.flat.call(e)}:function(e){return k.concat.apply([],e)},T=k.push,H=k.indexOf,C={},j=C.toString,F=C.hasOwnProperty,Y=F.toString,re=Y.call
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 21 3d 6e 75 6c 6c 26 26 74 3d 3d 3d 74 2e 77 69 6e 64 6f 77 7d 2c 65 65 3d 62 2e 64 6f 63 75 6d 65 6e 74 2c 78 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 2c 6e 29 7b 6e 3d 6e 7c 7c 65 65 3b 76 61 72 20 72 2c 61 2c 6f 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 78 29 61 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 2c 61 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 61 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 Data Ascii: tion(t){return t!=null&&t===t.window},ee=b.document,x={type:!0,src:!0,nonce:!0,noModule:!0};function g(e,t,n){n=n\|\|ee;var r,a,o=n.createElement("script");if(o.text=e,t)for(r in x)a=t[r]\|\|t.getAttribute&&t.getAttribute(r),a&&o.setAttribute(r,a);n.head.appe
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 54 2c 73 6f 72 74 3a 6b 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 6b 2e 73 70 6c 69 63 65 7d 2c 69 2e 65 78 74 65 6e 64 3d 69 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 61 2c 6f 2c 73 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 64 3d 31 2c 66 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 79 3d 21 31 3b 66 6f 72 28 74 79 70 65 6f 66 20 73 3d 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 28 79 3d 73 2c 73 3d 61 72 67 75 6d 65 6e 74 73 5b 64 5d 7c 7c 7b 7d 2c 64 2b 2b 29 2c 74 79 70 65 6f 66 20 73 21 3d 22 6f 62 6a 65 63 74 22 26 26 21 57 28 73 29 26 26 28 73 3d 7b 7d 29 2c 64 3d 3d Data Ascii: .prevObject\|\|this.constructor()},push:T,sort:k.sort,splice:k.splice},i.extend=i.fn.extend=function(){var e,t,n,r,a,o,s=arguments[0]\|\|{},d=1,f=arguments.length,y=!1;for(typeof s=="boolean"&&(y=s,s=arguments[d]\|\|{},d++),typeof s!="object"&&!W(s)&&(s={}),d==
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 61 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 61 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 61 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 61 3d 5b 5d 2c 6f 3d 30 2c 73 3d 65 2e 6c 65 6e 67 74 68 2c 64 3d 21 6e 3b 6f 3c 73 3b 6f 2b 2b 29 72 3d 21 74 28 65 5b 6f 5d 2c 6f 29 2c 72 21 3d 3d 64 26 26 61 2e 70 75 73 68 28 65 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 61 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 61 2c 6f 3d 30 2c 73 3d 5b 5d 3b 69 66 28 Data Ascii: all(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,a=e.length;r<n;r++)e[a++]=t[r];return e.length=a,e},grep:function(e,t,n){for(var r,a=[],o=0,s=e.length,d=!n;o<s;o++)r=!t(e[o],o),r!==d&&a.push(e[o]);return a},map:function(e,t,n){var r,a,o=0,s=[];if(
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 2b 67 65 2b 22 3f 7c 5c 5c 5c 5c 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 30 2d 5c 5c 78 37 66 5d 29 2b 22 2c 67 69 3d 22 5c 5c 5b 22 2b 67 65 2b 22 2a 28 22 2b 44 74 2b 22 29 28 3f 3a 22 2b 67 65 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d 3f 3d 29 22 2b 67 65 2b 60 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 22 5d 29 2a 29 22 7c 28 60 2b 44 74 2b 22 29 29 7c 29 22 2b 67 65 2b 22 2a 5c 5c 5d 22 2c 52 6e 3d 22 3a 28 22 2b 44 74 2b 60 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 22 5d 29 2a 29 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c Data Ascii: +ge+"?\|\\\\[^\\r\\n\\f]\|[\\w-]\|[^\0-\\x7f])+",gi="\\["+ge+"("+Dt+")(?:"+ge+"([^$\|!~]?=)"+ge+`(?:'((?:\\\\.\|[^\\\\']))'\|"((?:\\\\.\|[^\\\\"]))"\|(`+Dt+"))\|)"+ge+"\\]",Rn=":("+Dt+`)(?:\\((('((?:\\\\.\|[^\\\\']))'\|"((?:\\\\.\|[^\\\\"])*)")\|((?:\\\\.\|[^\\
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 6e 20 6c 7c 7c 28 70 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 70 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 70 3e 3e 31 30 7c 35 35 32 39 36 2c 70 26 31 30 32 33 7c 35 36 33 32 30 29 29 7d 2c 76 69 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 79 69 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 6c 29 7b 72 65 74 75 72 6e 20 6c 3f 75 3d 3d 3d 22 5c 30 22 3f 22 5c 75 46 46 46 44 22 3a 75 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2b 22 5c 5c 22 2b 75 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2e 6c 65 6e 67 74 68 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 75 Data Ascii: n l\|\|(p<0?String.fromCharCode(p+65536):String.fromCharCode(p>>10\|55296,p&1023\|56320))},vi=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g,yi=function(u,l){return l?u==="\0"?"\uFFFD":u.slice(0,-1)+"\\"+u.charCodeAt(u.length-1).toString(16)+" ":"\\"+u
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 3d 3d 3d 31 26 26 28 62 72 2e 74 65 73 74 28 75 29 7c 7c 6d 69 2e 74 65 73 74 28 75 29 29 29 7b 66 6f 72 28 69 65 3d 46 6e 2e 74 65 73 74 28 75 29 26 26 42 6e 28 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 6c 2c 28 69 65 21 3d 3d 6c 7c 7c 21 6e 2e 73 63 6f 70 65 29 26 26 28 28 52 3d 6c 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 52 3d 52 2e 72 65 70 6c 61 63 65 28 76 69 2c 79 69 29 3a 6c 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 52 3d 6d 65 29 29 2c 74 65 3d 73 28 75 29 2c 44 3d 74 65 2e 6c 65 6e 67 74 68 3b 44 2d 2d 3b 29 74 65 5b 44 5d 3d 28 52 3f 22 23 22 2b 52 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 6c 6e 28 74 65 5b 44 5d 29 3b 4b 3d 74 65 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 69 66 28 6e 2e 63 73 73 53 Data Ascii: ===1&&(br.test(u)\|\|mi.test(u))){for(ie=Fn.test(u)&&Bn(l.parentNode)\|\|l,(ie!==l\|\|!n.scope)&&((R=l.getAttribute("id"))?R=R.replace(vi,yi):l.setAttribute("id",R=me)),te=s(u),D=te.length;D--;)te[D]=(R?"#"+R:":scope")+" "+ln(te[D]);K=te.join(",")}try{if(n.cssS
2024-04-26 14:40:50 UTC	662	IN	Data Raw: 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 6c 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 21 31 3f 22 6c 61 62 65 6c 22 69 6e 20 6c 3f 22 6c 61 62 65 6c 22 69 6e 20 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 75 3a 6c 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 75 3a 6c 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 75 7c 7c 6c 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 75 26 26 45 72 28 6c 29 3d 3d 3d 75 3a 6c 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 75 3a 22 6c 61 62 65 6c 22 69 6e 20 6c 3f 6c 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 75 3a 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 74 28 75 29 7b 72 65 74 75 72 6e 20 66 74 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 6c 3d 2b 6c 2c 66 74 28 66 75 6e 63 Data Ascii: l.parentNode&&l.disabled===!1?"label"in l?"label"in l.parentNode?l.parentNode.disabled===u:l.disabled===u:l.isDisabled===u\|\|l.isDisabled!==!u&&Er(l)===u:l.disabled===u:"label"in l?l.disabled===u:!1}}function Nt(u){return ft(function(l){return l=+l,ft(func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49767	130.211.5.208	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:50 UTC	607	OUT	GET /site_media/images/partner/badge_light.png HTTP/1.1 Host: cdn.mxpnl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:50 UTC	836	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPrcPSGYcpWK4mxSDfRpWK-Xx5S7x38IAgTuD78tl5qQknkIHGNX0WhUUOMPkupxK3LO4MA x-goog-generation: 1504118544000324 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 4772 x-goog-meta-goog-reserved-file-mtime: 1415904173 x-goog-hash: crc32c=I3VHnA== x-goog-hash: md5=uCReNrq2wnN1p2Pst706ag== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 4772 Access-Control-Allow-Origin: * Server: UploadServer Date: Fri, 26 Apr 2024 04:56:18 GMT Expires: Sat, 26 Apr 2025 04:56:18 GMT Cache-Control: public,max-age=31536000 Last-Modified: Wed, 30 Aug 2017 18:42:23 GMT ETag: "b8245e36bab6c27375a763ecb7bd3a6a" Content-Type: image/png Age: 35072 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:50 UTC	419	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 72 00 00 00 24 08 06 00 00 00 55 0a 6e 97 00 00 12 6b 49 44 41 54 78 da 95 5a f9 57 d4 57 96 e7 a7 fc 99 d3 dd d3 db 74 f7 74 3a 9d b5 db 24 93 ad 8d 66 4c 54 d4 b8 6f 28 8b 61 51 11 59 94 62 17 04 85 62 2d a0 a0 28 40 70 17 d4 b8 27 26 b7 ef e7 f2 fd 9c 3b ef 4d 7d 9b d3 75 ce 3d ef bd bb 2f 6f fb 3e 28 9b 5b 58 7d 43 a1 5c 61 4d 41 08 85 e2 4d ef 2f b2 1f 8f 1d e6 95 7f 61 e9 16 e4 d8 07 50 17 64 0c 88 a3 0c f1 6e 97 3c b0 63 3a 08 94 e1 38 b6 8d 96 32 b1 3c 81 3e 90 37 01 f8 4c 08 62 a3 1c f1 f4 37 e0 33 9d b4 e5 36 68 3f 8e 3d f0 c7 e3 71 9f dc 8e ca ba 9d 50 66 83 6f 3d a9 dd 1b 28 e4 ee c8 00 93 19 03 13 1e 8c 23 a7 82 e2 b8 51 e7 f1 44 ac 06 32 25 0a 45 28 5d 10 f2 79 92 4b e1 dd c7 a4 60 41 Data Ascii: PNGIHDRr$UnkIDATxZWWtt:$fLTo(aQYbb-(@p'&;M}u=/o>([X}C\aMAM/aPdn<c:82<>7Lb736h?=qPfo=(#QD2%E(]yK`A
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: f1 3c b0 8d a1 98 6a 8f ab 2d 8d 37 b6 19 c5 52 da bf ae be 51 c1 d6 ca ad ce 5a 8e e3 3e c1 f9 1d 57 92 27 3c 53 68 03 90 aa 37 5f 58 a1 de 98 16 b7 31 9d ba d9 77 7a 31 d6 b1 82 36 8e c1 65 36 8f 2d 85 c6 22 95 f2 2d b2 e1 f0 af 68 c8 47 4a 9c 21 ae 67 40 0b 19 33 7b 32 ac bf 99 c3 71 d0 25 2f 05 6e dc 69 2c 74 fa 84 59 09 68 d4 61 fe ba ae cd 8a 12 f0 12 c8 03 88 7c df 64 1c f9 e9 71 04 76 58 04 a7 07 39 8e 0b 53 2a de cd ed 7a 4c ba 22 47 a4 6c 76 7e 85 4b 3e 00 6e 79 4a 4f c6 0a 05 5f 35 01 d8 b6 88 96 b2 e0 33 88 0f 77 ae 3c d0 a0 0f b8 7f 0b 60 87 fe ba 6f a6 97 78 d3 9d 9d 28 48 57 ff 78 24 eb 93 61 9e 32 06 d4 09 60 7f 53 08 ec 11 e7 71 07 3e 32 37 9b d9 20 7f 0c d4 59 12 3a 7b 93 42 c6 cc 6c 69 2c 1e 33 21 84 dc ec b2 ec 3f 79 11 c9 4b 0d d8 1d Data Ascii: <j-7RQZ>W'<Sh7_X1wz16e6-"-hGJ!g@3{2q%/ni,tYha\|dqvX9S*zL"Glv~K>nyJO_53w<`ox(HWx$a2`Sq>27 Y:{Bli,3!?yK
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: ca ef d0 e2 aa 1c 8e 1c 16 32 b0 b5 4b 57 6e 63 db 80 c9 64 7a 47 49 8b 01 05 4b ed c7 75 c2 98 6d 7b b7 af 48 89 e1 40 45 b3 cd e8 57 9a 78 f0 8c e7 ac 90 58 05 98 b5 86 db 7d e4 3c 12 6a 85 61 21 97 56 ee 4a 5b d7 88 fc 46 57 0a 12 74 63 f5 3e de 08 b5 68 fd 58 75 96 58 6e 0d 75 4d 7d f2 1b 2d 64 5b e7 88 ad a4 1f 75 35 d2 fe b1 ea 4b ba d5 ee 95 c7 4f 9e d1 2e 56 4f e0 5b af 4e 18 6c c3 98 08 58 95 d0 87 2d 1a ba 6b 2f f4 f1 8c d4 44 84 31 72 95 7c b1 b3 4a f6 1c 39 27 1f 7f 55 21 1d bd 23 ba 55 d6 a3 20 ba 53 54 ca 8b 97 af 70 2e 59 12 8f 57 b5 c9 81 13 4d 58 7d 56 c8 8c 26 0e 85 41 1f 85 dc be e7 8c c9 5d cb ce b2 90 9a e0 e5 0d 5b bb aa 65 f7 a1 06 d8 83 8c 16 7b 96 71 00 d4 57 e3 33 3b 25 6a 41 df 4b d3 36 70 ea bb 16 12 9f 0e 60 82 22 07 4f 16 12 Data Ascii: 2KWncdzGIKum{H@EWxX}<ja!VJ[FWtc>hXuXnuM}-d[u5KO.VO[NlX-k/D1r\|J9'U!#U STp.YWMX}V&A][e{qW3;%jAK6p`"O
2024-04-26 14:40:50 UTC	1255	IN	Data Raw: 6b f9 77 78 56 b3 b6 6f 28 c7 d9 09 c0 8c b1 c7 81 4b 5d 59 99 c8 2d 29 2c 52 96 2d fb e4 47 0b 1d c4 6d 0a b1 0e f5 15 2d fd 0d fa 8c 03 fa 79 3c fc 2b 7f 4e d5 66 f0 e1 6f 49 9a 99 db 90 ad ac b3 84 db 8d 75 7e e1 96 8d 77 ec ab b3 cb d3 c8 d8 bc 25 fa f3 6f 2a 93 17 a0 35 b9 dc 95 e5 e7 06 f5 e3 83 1f 38 8d b7 a8 37 ef 7a d9 79 a0 01 af 4e b8 e0 40 ce fe 9a cf 1f f8 0a c5 55 39 ad be a0 60 78 4b c6 5b 2b f8 f0 dc 87 5b f1 ae 43 67 e1 9f c9 15 ed ff 76 ee c0 57 c6 62 71 db d6 3a 8e 01 91 b3 be 8d e1 9d 15 ef a7 04 7c f3 4d e7 57 c8 a3 1f e3 39 f9 fd 7b fb 8c f6 be 7e af 8d e5 4c de 56 43 f7 d5 29 fb 2c a9 bd 70 85 fc 31 90 37 18 c3 17 f8 81 96 40 7f c8 6b ab 16 7c 8a d3 db ac cb cd 90 be 4c 39 00 79 88 e3 4c b6 95 73 be a5 5f 8e 9c 6e c6 53 1d 6e 9b 56 Data Ascii: kwxVo(K]Y-),R-Gm-y<+NfoIu~w%o*587zyN@U9`xK[+[CgvWbq:\|MW9{~LVC),p17@k\|L9yLs_nSnV
2024-04-26 14:40:50 UTC	588	IN	Data Raw: 11 e2 b8 83 c2 73 72 01 df 86 15 39 32 be 60 03 1e 9e d9 09 75 5c 41 fb 01 90 87 63 c8 71 6c 30 05 b0 31 f5 28 2c 10 88 37 19 f2 bb ee c5 52 f6 c8 cf 71 cc 4b 5a 2c 07 db 00 e7 a3 8c db 83 ff e4 a1 2e da 20 30 0e b7 4d 7e a7 39 3e b9 80 01 e7 b9 d4 1c a5 fb 4b bd a4 85 7e 03 12 9f 08 a4 53 0f 65 ec 8c 1c 46 40 20 82 e0 40 1c 67 3c b6 48 cc 00 6d 4d 19 5a f2 06 7d e5 09 64 91 34 ca 45 ba 5d 3e d4 07 99 50 b7 6d 6b 68 5d 06 fe 98 2f a1 5c ac 9b 7e 87 fa e2 3e f5 d2 7f f7 39 d6 1f c4 45 79 6f 2d 4f 71 6c 41 1c 90 8b 78 d1 42 67 ec 47 9c af 34 d0 42 0e 59 21 59 2c 1a 65 30 18 a3 4f 1c 0d 33 18 f6 5d c6 e5 83 62 44 32 74 9c f8 48 7f 9c e4 28 10 0f 90 ba 18 2c 0f 7f ca c7 85 63 81 98 30 9e 7b 81 ff 18 73 a2 22 06 c8 fc 3f 3d 1b 34 ca 05 3e 11 ef b9 20 2d 7d f2 Data Ascii: sr92`u\Acql01(,7RqKZ,. 0M~9>K~SeF@ @g<HmMZ}d4E]>Pmkh]/\~>9Eyo-OqlAxBgG4BY!Y,e0O3]bD2tH(,c0{s"?=4> -}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49766	192.178.50.68	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:50 UTC	668	OUT	GET /recaptcha/api.js?render=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:51 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 26 Apr 2024 14:40:50 GMT Date: Fri, 26 Apr 2024 14:40:50 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 14:40:51 UTC	727	IN	Data Raw: 34 65 38 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4e8/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-26 14:40:51 UTC	536	IN	Data Raw: 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 Data Ascii: R5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.i
2024-04-26 14:40:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49770	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:50 UTC	1569	OUT	GET /static/images/home/index/header-particles.svg HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _ga=GA1.2.1930088754.1714142446; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446
2024-04-26 14:40:51 UTC	397	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:51 GMT Content-Type: image/svg+xml Content-Length: 2010 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:51 UTC	858	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 39 39 22 20 68 65 69 67 68 74 3d 22 34 32 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 39 20 34 32 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 39 30 20 34 31 33 2e 35 56 33 39 31 22 20 73 74 72 6f 6b 65 3d 22 23 42 38 45 30 42 30 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 38 32 20 34 30 36 2e 35 4c 33 39 30 20 34 31 34 2e 35 4c 33 39 38 20 34 30 36 2e 35 22 20 73 74 72 6f 6b 65 3d 22 23 42 38 45 30 42 30 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d Data Ascii: <svg width="399" height="425" viewBox="0 0 399 425" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M390 413.5V391" stroke="#B8E0B0" stroke-width="2" stroke-linecap="round"/><path d="M382 406.5L390 414.5L398 406.5" stroke="#B8E0B0" stroke-width=
2024-04-26 14:40:51 UTC	1152	IN	Data Raw: 32 30 38 2e 34 30 39 43 31 38 39 2e 35 32 34 20 32 30 39 2e 35 30 31 20 31 39 34 2e 33 30 39 20 32 30 36 2e 35 34 20 31 39 35 2e 34 30 39 20 32 30 31 2e 37 37 37 43 31 39 36 2e 35 20 31 39 37 2e 30 34 39 20 31 39 33 2e 35 30 35 20 31 39 32 2e 32 35 36 20 31 38 38 2e 37 37 37 20 31 39 31 2e 31 36 34 5a 4d 31 38 38 2e 33 39 32 20 31 39 32 2e 38 33 33 43 31 39 32 2e 32 31 36 20 31 39 33 2e 37 31 36 20 31 39 34 2e 36 32 33 20 31 39 37 2e 35 36 37 20 31 39 33 2e 37 34 20 32 30 31 2e 33 39 32 43 31 39 32 2e 38 34 39 20 32 30 35 2e 32 35 31 20 31 38 39 2e 30 30 36 20 32 30 37 2e 36 32 33 20 31 38 35 2e 31 38 31 20 32 30 36 2e 37 34 43 31 38 31 2e 33 32 32 20 32 30 35 2e 38 34 39 20 31 37 38 2e 39 34 32 20 32 30 32 2e 30 34 31 20 31 37 39 2e 38 33 33 20 31 39 38 Data Ascii: 208.409C189.524 209.501 194.309 206.54 195.409 201.777C196.5 197.049 193.505 192.256 188.777 191.164ZM188.392 192.833C192.216 193.716 194.623 197.567 193.74 201.392C192.849 205.251 189.006 207.623 185.181 206.74C181.322 205.849 178.942 202.041 179.833 198

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49771	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:50 UTC	1280	OUT	GET /static/images/home/index/your_request_form_runrunit_mobile.png HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _ga=GA1.2.1930088754.1714142446; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446
2024-04-26 14:40:51 UTC	370	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:51 GMT Content-Type: image/png Content-Length: 8143 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:51 UTC	885	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 4e 00 00 00 d9 08 03 00 00 00 78 99 29 14 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 02 e5 50 4c 54 45 47 70 4c 63 76 80 f4 f5 f7 ea f7 ff 5d 6f 88 5b 6c 8a 5b 6b 88 6e 84 97 60 68 b4 ef f3 f7 5e 73 84 f1 f5 f9 eb f7 ff d8 dc ec 58 66 84 b7 df af ee f4 f8 b7 df af 5d 74 8e ef f1 f4 5b 6b 89 ed f3 f8 d4 e2 ed b6 de af 87 b7 cf 8d b7 cf b7 df af 5e 6c 8d f1 f3 f5 e9 f6 fe fd d3 83 67 75 90 eb f8 ff 95 c1 d6 ea fe ff eb f8 ff f7 ba ce 5c 6d 8a ea f8 ff eb f9 ff ec f7 fe ed f8 fe e3 f2 fc b1 d8 e1 f7 bf ce ff be c7 eb f8 ff f9 bb d0 cd b5 ca f9 c2 bb f9 c0 ba fa be c5 bd e5 f9 9c a5 b6 f9 bb Data Ascii: PNGIHDRNx)gAMAasRGBpHYsPLTEGpLcv]o[l[kn`h^sXf]t[k^lgu\m
2024-04-26 14:40:51 UTC	1255	IN	Data Raw: ef 30 10 84 10 bf a9 fd 60 40 50 7b 3c dd fa 2e df d0 90 fc e1 c0 df b4 98 49 70 2c 5e 5f f5 e5 bf df bc e7 b0 80 ef cf af df 50 80 af df a9 7e 7a 87 77 8b 00 00 1c 0e 49 44 41 54 78 da ed 9d 77 7c 13 67 9a c7 f1 41 b0 96 1c 2c f1 05 b8 0d f8 4c 20 2c 04 b2 d9 64 93 6c ea ee 26 d9 24 bb 7b 5b ae 97 cf c8 02 97 60 5b 3b 16 92 25 a1 82 c4 a8 a0 66 4b f2 5a b6 dc 64 e4 de b0 2d 37 dc 0b 36 cd 18 d3 43 ef 24 84 f4 b6 49 f6 fe be 67 66 24 5b b6 65 5b 5d b2 3c 0f d2 68 9a 46 f8 ab df f3 3c ef fb ce 33 a3 45 8b bc b7 e5 cf fd fa a9 5f 3f f7 d2 22 ca 7c b7 9f 3c f5 f3 24 d2 7e fe d3 e5 14 0e 5f 61 3e 91 e4 64 14 50 9f 6c b9 5d 99 17 2f 5e b4 2b f4 39 0a 8a d7 f6 12 29 cd 8f ef 8d 8c 8c d4 9e 24 89 3e 4b 61 f1 56 9b 24 cd af 47 07 07 06 06 3b 46 46 3e 23 16 29 7d Data Ascii: 0`@P{<.Ip,^_P~zwIDATxw\|gA,L ,dl&${[`[;%fKZd-76C$Igf$[e[]<hF<3E_?"\|<$~_a>dPl]/^+9)$>KaV$G;FF>#)}
2024-04-26 14:40:51 UTC	1255	IN	Data Raw: 73 0e ec 21 36 e6 e4 90 1b 73 1c bb 88 0d 90 6f f0 a7 58 0a 7b 1b c1 d9 61 02 47 54 19 73 88 03 31 54 b0 1b 6c 52 e5 30 16 48 2a 72 b2 21 1b af c6 b7 46 25 ee d4 33 98 34 e2 1b 4a 4f 32 82 6f bf 72 f9 3f d9 10 eb b0 79 8c 73 eb 2b 7f ef a5 fd 8b b7 6f 7c c5 f5 48 f7 62 07 ed 1f 2f c8 b1 93 7f f2 f3 f1 28 9c 14 4e 0a 27 85 93 c2 49 e1 a4 70 46 12 4e 9c e8 93 5b 16 2d 54 0b 00 ce ad 1b 16 51 38 29 f3 83 fd ec df 9e 7d 96 ba 5c c3 5f 46 fb c3 97 5f 7e 19 66 d5 1f ff e8 ad 6d 0b 03 5f ff f2 cb 3f 84 17 cd c7 33 bc b5 5f bc 15 fa ff fd bf 7e 19 5e 55 88 b4 ae 04 af ed f1 30 90 67 b8 e5 a2 8c f9 8d 73 51 f8 e1 3c 8c 61 e7 12 b2 7b b2 cf 25 c0 e9 98 3b 09 77 78 19 5d d9 02 ed 6d 7c 29 e3 b0 16 bb 0d e4 be c9 e6 c1 e6 9e 9e 84 84 73 c4 ce 09 e7 0e 53 38 5d e3 ec Data Ascii: s!6soX{aGTs1TlR0H*r!F%34JO2or?ys+o\|Hb/(N'IpFN[-TQ8)}\_F_~fm_?3_~^U0gsQ<a{%;wx]m\|)sS8]
2024-04-26 14:40:51 UTC	400	IN	Data Raw: c9 67 14 41 3e cf 1e 54 5b ba 24 88 bf 61 13 3c 9c a1 ab 3e 8e 4c 9c 4b 28 9c 81 c1 c9 fd b3 e7 b6 33 98 ed ce f9 85 73 8f 17 38 df 0d 66 27 93 8a 9d 7e 1d ef 9c 5f ea 4c f7 b8 6b 73 80 8a 9d 33 e3 dc 91 ee a9 a5 f9 a0 4e 57 38 37 ac f2 d6 b6 86 1f ce 90 0f 81 c4 3e e9 fd 29 95 2d 0b 3b 76 ba c2 b9 d1 87 33 54 0f 53 38 a7 8d 80 f9 8c 73 d5 0f 66 b1 95 2b 67 d9 b8 78 7e 3b bb ab cc ee 33 ce ad b3 ee 92 95 3a db 56 ff fc 36 22 6d 49 04 a9 f3 07 3e 1c e0 c9 f9 ad ce 70 c3 49 c7 0f b0 fc d5 d5 de da ab cb 43 a9 ce f0 c4 f9 db 78 ef ed 77 53 d5 d9 2f cb 73 cc b2 24 53 2e 33 60 f9 dd d9 69 e1 87 73 79 bc 2f 36 25 b3 67 ee cb 6c 6b b3 cf 17 9b 15 9a 49 04 8b 83 96 8a 0a 84 60 29 e3 7f a5 d3 ec 7c c0 39 ae ce bc b6 42 e0 d9 67 a7 27 41 d4 22 b8 70 58 8d 28 4c 12 Data Ascii: gA>T[$a<>LK(3s8f'~_Lks3NW87>)-;v3TS8sf+gx~;3:V6"mI>pICxwS/s$S.3`isy/6%glkI`)\|9Bg'A"pX(L
2024-04-26 14:40:51 UTC	1255	IN	Data Raw: 18 13 e9 8a 4d 92 80 34 94 76 02 4e 78 54 e5 d3 e9 7c 36 93 cf ae aa a4 97 17 78 80 93 cd f7 15 a7 c1 a2 9a 4e 2b d9 b0 cb 13 9c c8 be c2 d6 be 7d 79 e3 ce 8e 4f 24 1a c0 29 32 23 22 5c a9 1a 90 a9 42 2d 62 b1 30 91 02 11 b1 ca e0 7e 01 81 c9 ec 38 ce 0a ba 10 70 96 57 82 b3 57 17 c0 ab 67 38 85 15 f8 bb 53 84 f9 c2 4a a6 30 bf a0 d2 28 e4 d2 f3 85 72 23 53 58 41 2e c8 85 16 26 db 28 ac 74 89 53 55 2e ac a9 9a 8e 4b 68 21 b7 56 b9 87 33 af 6d 5f 9b 23 b5 2b f0 b0 c8 c1 ac 0a c4 0a 0b 10 3b 81 9c 19 31 9b 8b 41 94 c5 3a 58 a3 40 ca 8a 8b 39 be e0 a4 cd a6 4e 76 79 15 ee ec f2 ea 2a 3e 3b bf ba 4a 48 f7 0c 27 bf a2 a2 1c 9f 29 a8 28 e7 f2 2b d8 fc ca 8a ea 14 3e bb a2 1a 16 52 ca d9 00 19 26 29 10 a2 f3 5d e2 ac 51 c5 8b 85 25 15 e5 e5 96 78 be 90 6f 2c af Data Ascii: M4vNxT\|6xN+}yO$)2#"\B-b0~8pWWg8SJ0(r#SXA.&(tSU.Kh!V3m_#+;1A:X@9Nvy*>;JH')(+>R&)]Q%xo,
2024-04-26 14:40:51 UTC	1255	IN	Data Raw: f8 59 b3 e8 e8 a8 74 59 a1 52 59 78 e6 dd 03 04 51 4f 0e e6 e7 76 27 8e 53 2f 1d d2 cb e5 6c ba 51 af 05 9c 5a ba bc 1d d6 7a 80 33 71 12 4e 57 17 16 ec f0 6f ec a4 39 e1 8c 8e 8e 89 7a ab 50 f9 c5 6d ec 0b 65 13 d3 a1 50 f7 71 26 fb 17 a7 ad 5d db ce ad d3 36 68 eb f4 98 1e 93 b7 73 79 ed ed 6e e2 0c 7d 27 93 a4 19 f7 0b e5 17 37 2e 5c b8 a0 54 36 65 11 3c 43 a7 4e 2e 2e 4b a0 8a a7 22 39 a4 a2 3a ba 91 0d 4c eb a0 91 e9 41 2a 4a eb 67 04 af 93 39 5e f2 45 ba 7a cc b2 c7 95 4a fd d8 83 ef 6f 9e 53 2a 7f 73 fc 88 67 fe 3e 1d 67 da 27 9f 7c 82 07 b0 33 b2 56 7f 74 32 87 b4 ed 75 61 dd c9 1c 6f 28 c1 4f 3f da c5 a9 d4 74 7e dd 7b b9 07 e4 59 9a 4e ba fb 8c ef e6 08 e5 c2 74 04 69 36 5e 91 b7 4c c5 89 a7 a2 23 df 5e ef bd fb 09 d2 df 74 fb 3c d6 37 d3 a8 5e Data Ascii: YtYRYxQOv'S/lQZz3qNWo9zPmePq&]6hsyn}'7.\T6e<CN..K"9:LAJg9^EzJoSsg>g'\|3Vt2uao(O?t~{YNti6^L#^t<7^
2024-04-26 14:40:51 UTC	1255	IN	Data Raw: e6 55 7d 67 62 da 71 10 e7 c7 1d 63 8d 9d 80 f3 89 65 31 44 05 5d b2 db 16 9f bc 5b 5c 59 04 76 4a 8c fb 52 c0 62 e7 70 5e 7f df f0 30 72 ba 49 d6 d6 7f 48 56 d8 96 b7 4f 26 9b 96 8a a2 27 9d db c0 79 02 4e 66 16 33 0b 2c 35 35 15 02 9b 77 97 1a 78 50 41 77 84 95 94 f4 6d 6f ed c8 e8 d8 e5 a4 a4 a4 b7 a2 3c 2c 48 4c de 5d 59 04 dd fb 4b c7 ca 8a 2a 81 67 e0 9c fd f4 e9 cc fe 7d 88 0c 27 b9 3d b3 10 3c 7d 9a b3 3b 95 2d d0 68 76 7d ae cc b2 db fe 54 9c 65 c0 71 26 1e 29 4d 4a ba d8 d1 d9 d8 78 0f d4 99 f4 c2 12 0f 71 ee 2e 29 2a 3b 7f e3 c2 f9 0b 17 ae e2 3c 03 86 b3 ad bf ad 29 6f 18 39 94 99 49 e0 3c d4 7f 28 6f 66 75 3a 4e 6f d8 71 ee df bf df 2e 4d 2f 71 66 79 82 f3 56 d2 c7 03 b5 a3 a3 63 d7 6f dd ba b5 74 99 67 f5 9d 3b 99 a7 8a 8e 5e b8 71 fe c2 fd Data Ascii: U}gbqce1D][\YvJRbp^0rIHVO&'yNf3,55wxPAwmo<,HL]YKg}'=<};-hv}Teq&)MJxq.);<)o9I<(ofu:Noq.M/qfyVcotg;^q
2024-04-26 14:40:51 UTC	331	IN	Data Raw: 33 79 7e 38 93 59 37 d7 35 30 3b 53 53 f7 a7 66 65 11 27 0f c6 4f d6 cc 6a b4 39 d6 d0 9c 96 63 a6 ae 9f f1 e0 2e 7f fd cb 2f 38 f1 4e 66 7f 93 fe fc ed 33 73 04 d1 02 bc cc a9 a5 ae b2 25 dd b7 82 44 18 ae d9 8d 0f 26 2f 0a 33 f3 9f 3a 65 50 d8 79 5e c9 98 15 e7 15 a1 b0 99 2c 11 f5 63 b9 6c e4 e1 c4 d5 d9 a7 7c 30 73 61 a7 03 67 33 ff 0a 5e 22 ca e7 a7 fb af be 33 22 d5 99 78 46 f9 e9 d8 87 ca d9 af 39 13 56 13 38 91 74 7f d6 77 46 a6 b3 1f f8 db 67 b5 33 16 76 3a 62 27 87 c3 9a b8 09 b1 9f ea 3b 23 13 67 22 52 79 b5 c5 eb cc ee 43 7d 67 64 c6 ce 90 d5 77 2e 64 9c 01 a8 ef 8c 4c 67 0f 59 7d e7 82 c6 e9 b7 fa ce 48 76 f6 23 5e d0 4c f3 53 7d 67 e4 e1 f4 b0 be 93 b4 3d 5e dc 5a c5 55 7d 67 e4 e1 f4 a8 be d3 e9 4c 74 f8 76 32 57 6d d9 b8 72 fd e6 d8 50 e1 Data Ascii: 3y~8Y750;SSfe'Oj9c./8Nf3s%D&/3:ePy^,cl\|0sag3^"3"xF9V8twFg3v:b';#g"RyC}gdw.dLgY}Hv#^LS}g=^ZU}gLtv2WmrP
2024-04-26 14:40:51 UTC	252	IN	Data Raw: 60 c7 df 36 99 26 83 b1 85 c2 e9 83 ad 9f 42 93 f1 64 2c 85 d3 57 71 e6 f5 35 29 9b ce e4 29 f3 3c 73 77 0a e7 14 db 4c d2 6c 2a 3c d3 2a 6b 2a 24 70 3e 49 e1 f4 da 36 12 38 33 0a 61 72 46 a6 24 70 32 b6 52 38 bd 35 b2 91 94 87 63 ec 2b 2c 2c 24 70 2e a6 70 fa 86 73 b2 51 38 bd b6 d7 71 7e b2 a6 a6 a6 56 78 6d 25 c4 c9 d8 4c e1 f4 29 76 ca f0 ac 0e c1 53 d9 ca a0 62 a7 6f 63 1f 04 ce c2 a6 26 d9 99 3e a5 8c a0 f9 2b 2a b3 7b 6f 4f e2 38 33 f2 80 68 46 ab 7d 1c 84 c2 e9 bd 6d 99 9a 88 7e 45 f5 8a fc 99 db 3d f9 19 79 0a e7 34 db f0 0a 35 a2 e4 57 9e 2b 9d c6 3f 16 2f a2 70 fa 9c de 7f 69 87 b9 7e c3 22 0a a7 3f c6 90 37 6f 59 bf 78 55 c8 4e bd 45 1a ce 10 9f c9 a4 70 52 38 29 9b 66 ff 0f 2b 26 bb d1 ba 85 80 be 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: `6&Bd,Wq5))<swLl<k$p>I683arF$p2R85c+,,$p.psQ8q~Vxm%L)vSboc&>+{oO83hF}m~E=y45W+?/pi~"?7oYxUNEpR8)f+&IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49773	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:51 UTC	638	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js HTTP/1.1 Host: b8b29fee-d78b26f4.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://srmcorp.digitoids.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://srmcorp.digitoids.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:54 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:40:53 GMT Content-Type: application/x-javascript Content-Length: 49615 Connection: close cache-control: public, max-age=31536000 last-modified: Mon, 01 Apr 2024 18:07:19 GMT etag: 0x8DC527692402A16 x-ms-request-id: 75a7d2e9-101e-0017-37ba-9684b2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240426T144053Z-178cffcc9b57zp7gd2k4gg94x800000001p0000000001ph5 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-04-26 14:40:54 UTC	6408	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd eb 5b e3 38 d2 38 fa fd fd 2b 82 77 0f 13 4f 8c c9 05 68 70 da cd 2f 0d 74 37 33 40 18 02 73 59 60 79 9c 58 01 4f 07 3b 6b 3b 5c 06 72 fe f6 53 17 c9 96 1d 87 ee d9 f7 3c e7 cb 99 4b b0 a5 92 2c 95 aa 4a 55 a5 92 b4 fe e3 ca ff d4 7e ac ad 7d ff 3f b5 c1 79 ef ec bc d6 ff 54 3b ff 72 78 b6 5f 3b 85 b7 3f 6a 27 fd f3 c3 bd 83 ef af 07 3f 8a ff 9f df 05 49 6d 1c 4c 44 0d fe 0e bd 44 f8 b5 28 ac 45 71 2d 08 47 51 3c 8d 62 2f 15 49 ed 1e 7e e3 c0 9b d4 c6 71 74 5f 4b ef 44 6d 1a 47 7f 8a 51 9a d4 26 41 92 42 a1 a1 98 44 8f b5 3a 54 17 fb b5 53 2f 4e 9f 6b 87 a7 a6 0d f5 0b a8 2d b8 0d 42 28 3d 8a a6 cf f0 7c 97 d6 c2 28 0d 46 a2 e6 85 3e d5 36 81 97 30 11 b5 59 e8 8b b8 f6 78 17 8c ee 6a c7 c1 28 8e 92 68 9c d6 62 31 12 c1 Data Ascii: [88+wOhp/t73@sY`yXO;k;\rS<K,JU~}?yT;rx_;?j'?ImLDD(Eq-GQ<b/I~qt_KDmGQ&ABD:TS/Nk-B(=\|(F>60Yxj(hb1
2024-04-26 14:40:54 UTC	16384	IN	Data Raw: a4 0a 6e b4 a0 d1 02 21 ba 0a 52 cf 05 03 d1 a1 4a a3 d5 55 aa 33 58 ac 2d 32 ad f4 8d da a2 65 b5 c9 a6 fe fd ea b0 fd aa c2 bf d1 11 39 e1 bd 70 ac 47 2f f4 4f bd f4 ce 09 2d da cd e3 a4 d6 38 f6 6e 69 d8 e2 f9 42 d8 60 1e 2e 54 28 8d 61 80 79 04 00 55 84 3d 6a b8 30 3c 8d 19 47 09 c8 f4 bc 1d 30 bf aa 4f 49 e0 7f 68 c0 2a 4b 83 0f 81 25 59 5b 62 69 42 64 74 ea c5 30 cd 82 6e 7a 38 3e 89 d2 83 a7 a0 14 06 c2 ed 7d 92 91 91 32 36 79 12 8d a4 cb 00 2c f1 cc ce cc 43 1f 43 d9 56 7d bf 57 8a 01 0a 4f c8 dc f9 97 a4 5e 84 b1 6a 42 35 ae 32 c2 45 7d 5f 2c 0e 54 98 f5 30 0b bb e1 af bb f2 af 0c 25 55 6d 8b ad d2 b6 13 09 46 eb 33 af af c4 66 d0 9e a7 2c 92 ce 2a 34 79 21 68 2a 75 53 1a 3e d6 37 f2 86 76 8b 3e 8e 99 5d 8a d6 ac c7 5a f3 42 dc 3b 8a a1 99 b2 e9 Data Ascii: n!RJU3X-2e9pG/O-8niB`.T(ayU=j0<G0OIhK%Y[biBdt0nz8>}26y,CCV}WO^jB52E}_,T0%UmF3f,4y!h*uS>7v>]ZB;
2024-04-26 14:40:54 UTC	16384	IN	Data Raw: 43 74 4b dc 0d 79 79 39 5f 64 f9 c5 c3 f4 5f 3c e4 17 86 87 a1 e2 07 17 d5 79 7e 64 cd 1a cf 21 50 bc a0 71 cf a2 60 51 6d 76 c9 88 0d f3 4e 98 72 1b f1 e7 a1 1a d8 df 3c 0a 49 60 39 ae 95 0b 25 24 ee 12 a7 87 0b dc 2e 9a 2d 12 21 37 a3 37 f4 09 28 a4 ab bb a5 41 fb 71 71 4b 6f 17 75 b6 98 28 0f 14 7a de 1a 2d 39 1b cb 01 6f d5 c9 af 18 0d ab 96 0f 88 12 46 73 6b bf 2a 60 86 b3 23 e8 02 46 c0 cf ad cf 85 2a 1a 8d ac f4 ac 48 0b 7c 3e 1a 9d 1c 63 79 f9 39 69 18 8f 98 98 5d dc cd 0d a8 c7 3f b8 59 bf 8c 64 ab 22 cd 0d d8 6e 1d b9 a2 30 6f 01 89 7b c8 f4 a0 56 45 80 ca 04 26 ff 08 eb 1c ed e2 4f dd 74 92 ba dc a6 29 90 c2 3c 3c ad 2b 19 d6 f1 44 9b 2e f0 99 1b 62 61 81 a9 b7 90 ea 52 90 71 17 37 98 eb f2 87 cf 11 c1 4f 41 ab e1 73 29 1e 25 23 f0 3c 81 0b 9b Data Ascii: CtKyy9_d_<y~d!Pq`QmvNr<I`9%$.-!77(AqqKou(z-9oFsk`#FH\|>cy9i]?Yd"n0o{VE&Ot)<<+D.baRq7OAs)%#<
2024-04-26 14:40:54 UTC	10439	IN	Data Raw: dc 0f 22 fa 2f 55 6d 58 a0 cd 31 fe 39 c3 3f 69 b8 a4 2f 9d 8f d3 db db 68 ec 9d 87 73 1a 7e aa 62 77 df a7 ad 70 4e 1f 90 1b f8 46 2c 0d 5d 1c 2f 54 27 4f c2 35 f1 bb d5 aa 0c 2a 5f f0 49 b2 e3 dd dd 08 70 31 34 15 c8 ff 85 94 49 aa 12 aa 81 ea 9d 9c 6d af a4 50 95 24 54 49 aa 2b 49 61 dc a7 4a 7d ba e7 e7 34 b9 70 56 bd bd 5d a8 64 63 ea 55 5a b3 55 c4 ec 86 69 48 74 b2 b1 41 ba b0 78 dd 33 62 28 69 7b c7 44 6b 7e 49 2f d3 0a d1 ef 25 9c 40 bf 5a 7a fe 62 04 97 e1 82 dd af 3b 98 6a 0d 6b 63 11 3a d3 3c 5f 24 91 9d f6 6a b2 6e 56 1b 14 1b 80 ca ac 37 7e 05 c7 10 1a 6a 31 cf 22 75 8c 8a 30 31 f0 02 2c 86 11 e3 11 e3 44 22 b2 ca c0 ac 31 bc ec 19 47 2e b3 6e e9 42 85 57 6b d8 57 55 ba 28 19 9d 89 4e 66 86 71 61 d5 17 d6 f9 67 50 a3 eb a3 89 dd a1 fa 38 bb Data Ascii: "/UmX19?i/hs~bwpNF,]/T'O5*_Ip14ImP$TI+IaJ}4pV]dcUZUiHtAx3b(i{Dk~I/%@Zzb;jkc:<_$jnV7~j1"u01,D"1G.nBWkWU(NfqagP8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49774	74.125.26.157	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:51 UTC	617	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-24371500-1&cid=1930088754.1714142446&jid=619370535&gjid=1123308618&_gid=1893265479.1714142446&_u=IEBAAEAAAAAAACAAI~&z=1044199344 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:51 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 26 Apr 2024 14:40:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:51 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49772	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:52 UTC	1273	OUT	GET /static/images/home/index/your_request_form_runrunit.png HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _ga=GA1.2.1930088754.1714142446; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446
2024-04-26 14:40:52 UTC	371	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:52 GMT Content-Type: image/png Content-Length: 16024 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:52 UTC	884	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 4a 00 00 01 7e 08 03 00 00 00 4a fe c5 8d 00 00 02 f4 50 4c 54 45 47 70 4c 65 7b 97 5c 69 87 5c 6c 8a 45 59 7a 5d 6c 8d 59 68 87 4e 52 7d 4e 57 78 59 63 8d e8 ea ef 5f 6a 8d bc c4 cf b8 e0 b0 59 6b 89 fb fb fc 59 6c 8a b6 de b0 b8 e0 b0 5b 68 88 89 b5 cf fd fd fe 8f bb d3 fe d5 85 b6 df af b8 e1 b1 e9 f6 fe d4 e0 e6 e9 e5 e8 bc c5 d0 e5 f6 ff ec f8 ff ed f7 fd ec f9 ff fe d5 85 5c 6b 87 df e2 e8 ec f8 fe ec f7 fd b8 e0 b0 db f1 fc 8c b9 d2 f4 ba c9 eb f8 ff f8 bb d0 7f ca f1 f8 ba d0 e4 f6 ff 97 c2 d8 cf b4 ca c3 e4 f7 ef f7 fd eb f9 ff f7 b9 cf ba e3 f7 eb f8 ff f9 ba d0 eb f8 ff f8 bb d0 bd e5 fa fe d5 84 b0 d7 ad 84 c0 e1 64 6a 80 eb f8 ff b8 e1 b0 f8 bb d0 eb f8 ff eb f8 ff ec f7 fd b8 e0 b0 f4 Data Ascii: PNGIHDRJ~JPLTEGpLe{\i\lEYz]lYhNR}NWxYc_jYkYl[h\kdj
2024-04-26 14:40:52 UTC	1255	IN	Data Raw: a3 be 84 c7 a9 bb 90 df c0 ef ef df fe f0 e4 e4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 29 60 4d 47 00 00 3a 57 49 44 41 54 78 da ec 9c 6f 48 1b 69 1a c0 53 ae e0 de 7e db 2f 27 24 d2 ee de 71 a5 f5 8a bd f4 5a 29 55 76 a1 5f 0e b6 4b 39 ee df 47 07 f1 db bd 5f a4 21 f8 65 0c 5e 98 31 51 84 85 d5 2c c2 40 36 99 c2 10 ae Data Ascii: )`MG:WIDATxoHiS~/'$qZ)Uv_K9G_!e^1Q,@6
2024-04-26 14:40:52 UTC	375	IN	Data Raw: 4d ce 64 4c 0d a6 6f 96 5a 9e 5f 35 64 43 11 b7 70 fe d6 5a ae 51 85 ee ba 6d 5d c9 e3 ac 52 7e ff e5 3f 2b 8b 92 a4 48 0a 3c 8c 8c 6c 98 92 28 2a 99 f9 d5 65 50 c9 2c fa 31 28 b5 36 53 f4 3c 5f a1 ec 71 d5 99 df ac 7c 59 a9 54 fc e5 65 49 96 0c 45 31 15 1a 8a 4c 53 c9 64 e6 bf db 51 64 45 b1 76 76 77 aa 36 e1 8f 06 b4 32 2e 01 d7 dc f5 37 70 fe d2 df fd 7e ff ae b9 aa c8 a6 2c 9b 06 b8 64 98 a6 69 64 7e 30 be de 5d 05 95 c4 d5 6f 77 77 2a 38 7d 6b e1 98 78 7c f4 9b 01 d7 5d 77 33 b4 ef f7 ff 00 95 a4 65 25 a3 c8 32 78 a4 40 68 02 95 e4 8c 5c 5e f5 cf cb 8a 29 e5 57 77 fc 15 4c 6f ad fd 0b 07 da 5c 77 da 1d 7f f1 fb 77 ca 10 95 aa 2a 19 b4 54 d2 45 90 09 54 da a1 66 29 e2 c2 6e e5 8f 98 de 90 23 79 0f 32 dc 02 a8 04 55 92 41 6d 92 a1 ea a6 2e 3d 5a dd a9 Data Ascii: MdLoZ_5dCpZQm]R~?+H<l(eP,1(6S<_q\|YTeIE1LSdQdEvvw62.7p~,did~0]oww8}kx\|]w3e%2x@h\^)WwLo\ww*TETf)n#y2UAm.=Z
2024-04-26 14:40:52 UTC	1255	IN	Data Raw: e7 4c f1 fe 45 e6 64 f9 4f 7d c3 fb 9a 1f 74 f1 7d 1c 1d 57 99 c4 9c 62 d0 25 37 71 f1 34 ab 74 11 c7 c7 45 30 a7 1a 1c 1f 54 09 55 42 95 50 25 a4 45 2a 0d b2 0f 50 25 e4 c7 55 1a 4c 26 0f 9f be 0f 25 07 f7 df 4c ce 32 6c 12 b8 5f 7b 1f 88 bf 4c 83 50 32 d0 9c 2f f1 03 ed a2 5c 00 55 72 b9 4a 69 42 be 38 74 a8 a3 24 f4 7c 7b 84 04 19 3e c1 f3 fc 67 b5 1d 24 f9 32 43 58 32 da 9c 4a 07 1b 06 48 1a 55 72 b9 4a a9 d9 b0 c0 30 53 c2 34 9f 8c 33 f7 39 61 8c 1b 62 c6 78 2e ea a8 34 c5 73 63 b4 d1 df c8 20 c3 47 e8 56 90 0b f4 71 d3 49 92 62 99 71 8e 9b 62 46 b9 20 b7 21 b0 49 3e c8 54 5b 3b 86 38 7b 07 63 fc 4c 9c 19 15 b8 28 17 1a e7 46 99 74 92 09 cc f0 c2 28 d3 97 e4 85 a1 a1 14 e1 47 e3 69 5e 18 64 d8 18 1b 63 b8 b0 17 55 72 b5 4a 23 84 15 c2 71 26 49 78 8e Data Ascii: LEdO}t}Wb%7q4tE0TUBP%E*P%UL&%L2l_{LP2/\UrJiB8t$\|{>g$2CX2JHUrJ0S439abx.4sc GVqIbqbF !I>T[;8{cL(Ft(Gi^dcUrJ#q&Ix
2024-04-26 14:40:52 UTC	1255	IN	Data Raw: 9b 31 e2 66 59 06 6f dd 8b ed 13 04 cb 52 49 b6 44 30 49 96 a5 89 3d 2a 99 4c ee f1 ec 54 b6 13 0c 85 d1 49 d1 c9 5c d2 44 14 69 22 c5 d0 e0 4a 2a 46 a9 e0 de c3 34 44 88 62 84 20 22 25 22 52 2c 1b 0f cd 70 40 11 cc fe e1 0b b1 c7 62 ec a8 ca 98 8f df b4 4b e5 30 5a 26 36 45 ec 97 38 94 4a 4c 0a 50 52 31 4a 7b 39 8e 27 33 8f 12 fe aa a0 54 a0 76 dd bb 47 51 22 e8 62 15 4a c5 08 e6 87 30 53 7b 1c 41 45 ba c8 16 20 2b a9 19 a5 22 5d 86 a3 c8 96 4a 94 89 88 50 14 85 b7 ec 33 65 6a ca 28 e1 6d a5 32 4a a5 52 15 4a ec 5e 81 2a 70 30 52 f4 2e 2e 90 b1 12 c4 6e 19 ab ff ea 64 ef e9 c5 a1 b4 cf bb d2 01 51 cc 15 73 98 85 8a 2b e5 58 9a 65 eb b8 52 a4 ca 95 cc 31 86 a6 f8 5d 85 12 83 51 32 b9 4d 80 92 5c a5 1f ef 7d 78 51 77 c6 ac 44 e1 bc 53 e2 b3 92 19 7b 4c 99 Data Ascii: 1fYoRID0I=LTI\Di"JF4Db "%"R,p@bK0Z&6E8JLPR1J{9'3TvGQ"bJ0S{AE +"]JP3ej(m2JRJ^*p0R..ndQs+XeR1]Q2M\}xQwDS{L
2024-04-26 14:40:52 UTC	1255	IN	Data Raw: 86 a9 06 1a 96 0d 4a c3 7d 47 7f fa db 06 70 25 b1 51 32 36 42 e9 96 4c 50 d2 de ad fb e3 7f 33 a0 4a 94 a4 74 a5 f3 8d 50 1a 92 07 4a da db 0d 7e fe 3e e3 69 5a 94 80 d2 19 b2 d2 68 83 33 71 5e 16 28 69 ef 35 fa 55 98 ea 1b 50 9f 2b 49 db 0c 30 d4 fd b5 be 3e d0 fa 77 1a 9f 98 f8 76 62 62 5c 54 94 86 a6 1a eb 1b 83 fa 5c 49 e2 99 01 86 81 23 3a 7f 9a e7 3d 3d f8 96 97 98 24 0d 4c 1d a7 51 28 70 32 6d 51 4e f0 24 3d 10 b3 bc 0d 1e 8b d2 d4 88 ea 0a 9c 42 e6 2b 19 78 94 c4 2c 70 c6 e3 49 9a 1a d3 a9 b1 af 24 7f 94 ba bb 27 44 36 a5 46 43 86 4f 32 42 33 40 9e d7 e0 0c 22 9b 52 6d 23 63 65 69 a9 a6 5b f9 5d 8b 28 3d 99 fd 87 60 72 a9 20 76 b7 cd 96 70 5a 9a 14 d3 94 ae d5 a0 94 7a fa 74 a5 a6 21 a0 6b 0d a5 99 47 c2 e9 35 b8 52 2b 31 b8 57 d4 bf 3d f9 dd 89 Data Ascii: J}Gp%Q26BLP3JtPJ~>iZh3q^(i5UP+I0>wvbb\T\I#:==$LQ(p2mQN$=B+x,pI$'D6FCO2B3@"Rm#cei[](=`r vpZzt!kG5R+1W=
2024-04-26 14:40:52 UTC	1255	IN	Data Raw: 51 7e 6c 57 51 5c e0 dc 6b 1e 4f 3a 87 9c ac 67 5d 06 17 4e 38 94 7e b7 d9 2d 9e 35 8b e5 99 cd 6b f9 d3 96 08 39 2d 16 67 48 28 94 9e 2d fe aa 0a 94 5e 59 3f bc c7 24 bd 99 c6 4c 55 a1 44 f9 fd 5c fc a9 42 a9 92 b7 2b 28 ad b2 3e 4f ce 8f 1c 9e 88 3b 80 a8 ac cf e7 0b 20 e4 5d 4d 06 e5 e1 4a 7e db 8c e5 79 c0 62 f9 05 a3 b4 cc a3 f4 cc 17 15 0a a5 39 5b 58 15 28 7d d8 79 eb 4a bd 7b fa 61 c1 fa be 36 2b 61 45 30 20 74 19 a5 6c 1a a7 eb d0 21 4a 94 1d a1 a4 df 11 46 c8 9f e4 77 af 6f a3 b0 03 39 62 f9 8e 6f 06 70 28 cd f9 9e bf e0 4f 70 c8 f7 22 60 4b 2c db a2 ff 6e 57 f8 ae 8b d2 5c 7c 26 bc cc a7 fe 44 22 3c 63 59 8c 2f c6 2d 73 e1 38 4e 6b 8b e1 c5 e5 3f ed f1 b9 f0 3f ed 61 bc 07 bf 8f cf 58 7e 59 2e 1f dd e9 28 d5 3c b7 7b c1 fa 66 61 6a e9 86 f5 2d Data Ascii: Q~lWQ\kO:g]N8~-5k9-gH(-^Y?$LUD\B+(>O; ]MJ~yb9[X(}yJ{a6+aE0 tl!JFwo9bop(Op"`K,nW\\|&D"<cY/-s8Nk??aX~Y.(<{faj-
2024-04-26 14:40:52 UTC	1255	IN	Data Raw: 75 51 3a 77 ae a9 f7 e2 c7 87 33 71 18 50 aa 72 04 24 59 7e 39 d8 43 b9 04 7e ce 4e 42 b4 93 a9 4a 1d 51 12 0f fb 47 7d 7c 04 28 ed 8d 95 6a c1 b6 e5 d4 af 07 7b 28 7e bf cb 6e 9f 98 98 3c 31 aa f4 ee 01 54 e9 b0 17 ab b8 38 78 94 3a 0d e7 1a 28 59 2c a7 07 8c 12 c3 00 4b 80 92 e1 e1 4e 82 2a b5 a2 74 be 4e d2 f3 16 bf 7f 38 3b aa 0c 6e 2f 48 44 94 ce 7c 30 d8 43 99 9a 66 5c ae 09 22 4b 20 4c 27 30 83 7b be 8b d2 88 96 96 f6 38 b8 3a 49 a7 07 8f d2 94 9f a0 34 71 42 51 ba 30 da 09 5c 87 a9 6f d5 40 09 50 7a 6f c0 28 79 3c 53 8c cb 32 51 8d 96 ea 5f 74 ed 3a c2 d4 9e 2b 0b 53 1d fa 3a 75 75 b3 fa b8 df 90 64 70 a4 d8 4d bc db a8 56 28 3b 65 70 06 49 96 d3 67 06 81 d2 25 be c4 fb e3 d5 f6 fc e2 34 e3 87 3d 4f 4c bc 53 57 25 33 7d be 68 1b ba 15 27 23 6d 7b Data Ascii: uQ:w3qPr$Y~9C~NBJQG}\|(j{(~n<1T8x:(Y,KN*tN8;n/HD\|0Cf\"K L'0{8:I4qBQ0\o@Pzo(y<S2Q_t:+S:uudpMV(;epIg%4=OLSW%3}h'#m{
2024-04-26 14:40:52 UTC	1255	IN	Data Raw: 10 2b f5 30 b7 5b 1c 46 94 aa c5 ee 2a 4a bf 25 be ed de d7 6b 9f 19 26 39 7a 66 69 ca ab 61 8e 9c b8 2d e7 2d 76 75 70 9d 50 1a 5c b5 bb 09 25 4e f6 d0 82 2c cb 94 2a 08 41 40 c9 45 87 a8 24 a0 24 51 1e 9a 1f 14 4a 07 5a 71 72 71 38 54 a9 63 06 67 a0 f4 b3 b3 04 a5 7f 6d 7d fa f9 f6 b7 9f df 5f 93 49 bc d4 5b 40 c8 e3 ba 19 d7 56 b8 d8 15 a5 89 a3 1a 38 69 a0 94 2f 64 5c e0 dd 16 79 26 34 9d 14 96 41 95 84 65 ca 6b 22 4a c7 63 1d dc 3b 9d 54 e9 0f 86 28 dd bc f9 b2 b2 f3 e8 87 ed af d7 12 3d cb 52 32 54 b7 24 11 29 2d a6 24 93 fa 3e aa d4 84 d2 f9 eb d7 1b 1c 8b af 58 93 51 12 64 3a c8 50 5c 3a 21 47 5d 85 48 30 cd 93 58 29 5d 90 4c 44 69 e4 57 e7 b6 0f e7 82 2c d5 50 32 44 e9 df 5f fc 7d a7 52 79 f4 e2 e1 83 cf 22 f0 f2 6e 4f fb ca 87 52 bb 37 82 52 d9 Data Ascii: +0[FJ%k&9zfia--vupP\%N,A@E$$QJZqrq8Tcgm}_I[@V8i/d\y&4Aek"Jc;T(=R2T$)-$>XQd:P\:!G]H0X)]LDiW,P2D_}Ry"nOR7R
2024-04-26 14:40:52 UTC	662	IN	Data Raw: eb 17 37 aa bf d9 ed 2e 19 ce f5 ae fe 14 64 f6 7d ab ae 55 21 f2 79 72 36 70 5e 82 30 43 ab 44 d8 6c 73 94 89 5a cd e6 f3 4b b6 19 de e9 9c 9c 1e 09 8b 92 d6 69 d4 7e 6d e0 d9 c0 b5 dc 6e f9 cb 87 82 52 43 b1 81 fb a4 fe 0f 7f bb f8 d3 c2 fa da eb 1f 6e 7e df cc a2 d4 22 3e 4a 87 b7 19 ce 15 6a 4e 05 a7 55 92 87 56 72 d9 74 b2 49 2a 6d 42 11 a6 60 28 99 ce 85 a5 7e 07 5f 94 86 2e 9d 61 7d 25 23 fa 1f c1 11 0c e8 2d 13 f6 21 7a f7 a8 fe 78 68 d3 2c 4a 1a a5 13 f5 5f 44 82 e0 bf 6f 9f 3e 78 70 f7 61 73 b3 3f 1a 95 46 a3 f3 42 b4 70 6a 9a 05 34 1b d3 a7 f7 6d ec c1 35 56 71 66 00 67 30 40 9d cc a5 d3 2b d1 68 cc df 2a 91 28 82 c1 95 cc 7f e0 c1 3c 5f 94 8c b8 97 4a a1 a4 db 22 ae 54 76 2d 6e 63 ed 59 94 8e 73 36 70 f5 5f 00 fd af a7 be 7e fe f0 c6 8d 67 d0 Data Ascii: 7.d}U!yr6p^0CDlsZKi~mnRCn~">JjNUVrtImB`(~_.a}%#-!zxh,J_Do>xpas?FBpj4m5Vqfg0@+h(<_J"Tv-ncYs6p_~g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49775	130.211.5.208	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:52 UTC	378	OUT	GET /site_media/images/partner/badge_light.png HTTP/1.1 Host: cdn.mxpnl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:52 UTC	843	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpj04S_OVeaoXyA7saMNNi5ghHRp-NDXCcEw4BL_yogNQWW3UsvqYudf9tnWZjBV4XYTH0iact_pQ x-goog-generation: 1504118544000324 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 4772 x-goog-meta-goog-reserved-file-mtime: 1415904173 x-goog-hash: crc32c=I3VHnA== x-goog-hash: md5=uCReNrq2wnN1p2Pst706ag== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 4772 Access-Control-Allow-Origin: * Server: UploadServer Date: Fri, 26 Apr 2024 04:32:07 GMT Expires: Sat, 26 Apr 2025 04:32:07 GMT Cache-Control: public,max-age=31536000 Last-Modified: Wed, 30 Aug 2017 18:42:23 GMT ETag: "b8245e36bab6c27375a763ecb7bd3a6a" Content-Type: image/png Age: 36525 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:52 UTC	412	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 72 00 00 00 24 08 06 00 00 00 55 0a 6e 97 00 00 12 6b 49 44 41 54 78 da 95 5a f9 57 d4 57 96 e7 a7 fc 99 d3 dd d3 db 74 f7 74 3a 9d b5 db 24 93 ad 8d 66 4c 54 d4 b8 6f 28 8b 61 51 11 59 94 62 17 04 85 62 2d a0 a0 28 40 70 17 d4 b8 27 26 b7 ef e7 f2 fd 9c 3b ef 4d 7d 9b d3 75 ce 3d ef bd bb 2f 6f fb 3e 28 9b 5b 58 7d 43 a1 5c 61 4d 41 08 85 e2 4d ef 2f b2 1f 8f 1d e6 95 7f 61 e9 16 e4 d8 07 50 17 64 0c 88 a3 0c f1 6e 97 3c b0 63 3a 08 94 e1 38 b6 8d 96 32 b1 3c 81 3e 90 37 01 f8 4c 08 62 a3 1c f1 f4 37 e0 33 9d b4 e5 36 68 3f 8e 3d f0 c7 e3 71 9f dc 8e ca ba 9d 50 66 83 6f 3d a9 dd 1b 28 e4 ee c8 00 93 19 03 13 1e 8c 23 a7 82 e2 b8 51 e7 f1 44 ac 06 32 25 0a 45 28 5d 10 f2 79 92 4b e1 dd c7 a4 60 41 Data Ascii: PNGIHDRr$UnkIDATxZWWtt:$fLTo(aQYbb-(@p'&;M}u=/o>([X}C\aMAM/aPdn<c:82<>7Lb736h?=qPfo=(#QD2%E(]yK`A
2024-04-26 14:40:52 UTC	1255	IN	Data Raw: 03 79 e3 d6 65 d2 7c f1 3c b0 8d a1 98 6a 8f ab 2d 8d 37 b6 19 c5 52 da bf ae be 51 c1 d6 ca ad ce 5a 8e e3 3e c1 f9 1d 57 92 27 3c 53 68 03 90 aa 37 5f 58 a1 de 98 16 b7 31 9d ba d9 77 7a 31 d6 b1 82 36 8e c1 65 36 8f 2d 85 c6 22 95 f2 2d b2 e1 f0 af 68 c8 47 4a 9c 21 ae 67 40 0b 19 33 7b 32 ac bf 99 c3 71 d0 25 2f 05 6e dc 69 2c 74 fa 84 59 09 68 d4 61 fe ba ae cd 8a 12 f0 12 c8 03 88 7c df 64 1c f9 e9 71 04 76 58 04 a7 07 39 8e 0b 53 2a de cd ed 7a 4c ba 22 47 a4 6c 76 7e 85 4b 3e 00 6e 79 4a 4f c6 0a 05 5f 35 01 d8 b6 88 96 b2 e0 33 88 0f 77 ae 3c d0 a0 0f b8 7f 0b 60 87 fe ba 6f a6 97 78 d3 9d 9d 28 48 57 ff 78 24 eb 93 61 9e 32 06 d4 09 60 7f 53 08 ec 11 e7 71 07 3e 32 37 9b d9 20 7f 0c d4 59 12 3a 7b 93 42 c6 cc 6c 69 2c 1e 33 21 84 dc ec b2 ec 3f Data Ascii: ye\|<j-7RQZ>W'<Sh7_X1wz16e6-"-hGJ!g@3{2q%/ni,tYha\|dqvX9S*zL"Glv~K>nyJO_53w<`ox(HWx$a2`Sq>27 Y:{Bli,3!?
2024-04-26 14:40:52 UTC	1255	IN	Data Raw: 14 06 ab d3 56 eb b2 ca ef d0 e2 aa 1c 8e 1c 16 32 b0 b5 4b 57 6e 63 db 80 c9 64 7a 47 49 8b 01 05 4b ed c7 75 c2 98 6d 7b b7 af 48 89 e1 40 45 b3 cd e8 57 9a 78 f0 8c e7 ac 90 58 05 98 b5 86 db 7d e4 3c 12 6a 85 61 21 97 56 ee 4a 5b d7 88 fc 46 57 0a 12 74 63 f5 3e de 08 b5 68 fd 58 75 96 58 6e 0d 75 4d 7d f2 1b 2d 64 5b e7 88 ad a4 1f 75 35 d2 fe b1 ea 4b ba d5 ee 95 c7 4f 9e d1 2e 56 4f e0 5b af 4e 18 6c c3 98 08 58 95 d0 87 2d 1a ba 6b 2f f4 f1 8c d4 44 84 31 72 95 7c b1 b3 4a f6 1c 39 27 1f 7f 55 21 1d bd 23 ba 55 d6 a3 20 ba 53 54 ca 8b 97 af 70 2e 59 12 8f 57 b5 c9 81 13 4d 58 7d 56 c8 8c 26 0e 85 41 1f 85 dc be e7 8c c9 5d cb ce b2 90 9a e0 e5 0d 5b bb aa 65 f7 a1 06 d8 83 8c 16 7b 96 71 00 d4 57 e3 33 3b 25 6a 41 df 4b d3 36 70 ea bb 16 12 9f 0e Data Ascii: V2KWncdzGIKum{H@EWxX}<ja!VJ[FWtc>hXuXnuM}-d[u5KO.VO[NlX-k/D1r\|J9'U!#U STp.YWMX}V&A][e{qW3;%jAK6p
2024-04-26 14:40:52 UTC	1255	IN	Data Raw: 9f 0a e8 0f 0e e7 65 6b f9 77 78 56 b3 b6 6f 28 c7 d9 09 c0 8c b1 c7 81 4b 5d 59 99 c8 2d 29 2c 52 96 2d fb e4 47 0b 1d c4 6d 0a b1 0e f5 15 2d fd 0d fa 8c 03 fa 79 3c fc 2b 7f 4e d5 66 f0 e1 6f 49 9a 99 db 90 ad ac b3 84 db 8d 75 7e e1 96 8d 77 ec ab b3 cb d3 c8 d8 bc 25 fa f3 6f 2a 93 17 a0 35 b9 dc 95 e5 e7 06 f5 e3 83 1f 38 8d b7 a8 37 ef 7a d9 79 a0 01 af 4e b8 e0 40 ce fe 9a cf 1f f8 0a c5 55 39 ad be a0 60 78 4b c6 5b 2b f8 f0 dc 87 5b f1 ae 43 67 e1 9f c9 15 ed ff 76 ee c0 57 c6 62 71 db d6 3a 8e 01 91 b3 be 8d e1 9d 15 ef a7 04 7c f3 4d e7 57 c8 a3 1f e3 39 f9 fd 7b fb 8c f6 be 7e af 8d e5 4c de 56 43 f7 d5 29 fb 2c a9 bd 70 85 fc 31 90 37 18 c3 17 f8 81 96 40 7f c8 6b ab 16 7c 8a d3 db ac cb cd 90 be 4c 39 00 79 88 e3 4c b6 95 73 be a5 5f 8e 9c Data Ascii: ekwxVo(K]Y-),R-Gm-y<+NfoIu~w%o*587zyN@U9`xK[+[CgvWbq:\|MW9{~LVC),p17@k\|L9yLs_
2024-04-26 14:40:52 UTC	595	IN	Data Raw: 76 28 4f 1e b7 91 36 11 e2 b8 83 c2 73 72 01 df 86 15 39 32 be 60 03 1e 9e d9 09 75 5c 41 fb 01 90 87 63 c8 71 6c 30 05 b0 31 f5 28 2c 10 88 37 19 f2 bb ee c5 52 f6 c8 cf 71 cc 4b 5a 2c 07 db 00 e7 a3 8c db 83 ff e4 a1 2e da 20 30 0e b7 4d 7e a7 39 3e b9 80 01 e7 b9 d4 1c a5 fb 4b bd a4 85 7e 03 12 9f 08 a4 53 0f 65 ec 8c 1c 46 40 20 82 e0 40 1c 67 3c b6 48 cc 00 6d 4d 19 5a f2 06 7d e5 09 64 91 34 ca 45 ba 5d 3e d4 07 99 50 b7 6d 6b 68 5d 06 fe 98 2f a1 5c ac 9b 7e 87 fa e2 3e f5 d2 7f f7 39 d6 1f c4 45 79 6f 2d 4f 71 6c 41 1c 90 8b 78 d1 42 67 ec 47 9c af 34 d0 42 0e 59 21 59 2c 1a 65 30 18 a3 4f 1c 0d 33 18 f6 5d c6 e5 83 62 44 32 74 9c f8 48 7f 9c e4 28 10 0f 90 ba 18 2c 0f 7f ca c7 85 63 81 98 30 9e 7b 81 ff 18 73 a2 22 06 c8 fc 3f 3d 1b 34 ca 05 3e Data Ascii: v(O6sr92`u\Acql01(,7RqKZ,. 0M~9>K~SeF@ @g<HmMZ}d4E]>Pmkh]/\~>9Eyo-OqlAxBgG4BY!Y,e0O3]bD2tH(,c0{s"?=4>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49778	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:53 UTC	1481	OUT	GET /packs/media/fa-brands-400-MEHOVNIW.woff2 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://runrun.it sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://runrun.it/packs/css/home_app-J7HUCVVO.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _ga=GA1.2.1930088754.1714142446; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446
2024-04-26 14:40:53 UTC	385	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:53 GMT Content-Type: application/font-woff2 Content-Length: 108904 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:53 UTC	870	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 a9 68 00 0a 00 00 00 02 ca 84 00 01 a9 1e 03 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 38 02 24 04 20 06 60 03 90 4c 00 a4 24 ca 8a c5 28 cb 90 50 05 88 20 07 20 a5 41 65 71 c8 00 84 d5 09 00 80 ba f6 e3 41 19 d1 75 52 bb 07 40 55 d5 43 42 b8 a9 6a c0 1f 7e fa e5 b7 3f fe fa e7 3f ff fb cb c0 d8 1d 10 cb 76 5c cf 37 fc d7 ef 57 9e db f3 67 e7 2d 73 c2 2a 8a f0 85 59 22 0b d9 01 0d 6c d9 47 ae 4a 75 f9 94 27 50 88 ee 9b 88 33 ef 01 57 3b 23 62 ec 0f 00 f2 23 ac 24 a7 e9 98 07 90 3f b1 97 b9 bf 33 7c 30 d4 9d d8 24 3d d8 7f a2 a9 ef df 33 0b b3 30 b3 82 25 01 59 b2 76 1d 2b 8e 25 cb da 7d b6 e3 58 a1 07 40 d1 07 2c e5 73 cb 2a 3d f8 54 24 15 88 55 20 76 91 e3 c8 25 f9 e7 c9 af b6 bf e7 dc 54 29 df Data Ascii: wOF2h8$ `L$(P AeqAuR@UCBj~??v\7Wg-sY"lGJu'P3W;#b#$?3\|0$=30%Yv+%}X@,s=T$U v%T)
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: ff ac d0 ef ed 7b 64 ac 14 65 74 74 c7 d5 f5 07 af e0 e9 73 59 2b 59 99 cd ce fa b4 8d 33 68 32 99 d2 e4 c4 8f 09 06 a3 0a aa 96 f3 66 c0 bc dc e2 53 66 93 6a d5 d8 e7 19 d4 0c 9a 65 cd 69 32 68 33 5d 0c 4c e7 23 5e eb 1c b2 44 99 a8 ef cc 4c 32 68 ed cf 11 df 82 3a 8a ba 88 41 d2 77 38 8a 64 bb 2e ea 8d 5c d6 23 8a 9c c2 32 ad 36 09 02 ac ad dc ad c8 97 df 79 83 3a 65 52 99 71 0a 99 84 0f d9 d4 df 44 80 ce 70 bf 96 2e 84 93 55 1d d2 d1 4e e7 6b 5a f5 be 6c 46 df 49 f6 b4 b6 4f 22 53 53 30 a2 3e ad 3e 30 3e 3b db 5d d8 51 66 fb 3b 4d 7c d6 fc 9c 8e d3 af 20 59 a6 d9 a0 30 e8 c3 01 d5 1d 9a a3 d0 89 78 e5 34 b9 9d 99 16 05 9d f9 56 cd 9c 3a bd 57 15 b6 91 5e c2 ae 42 d7 c9 ef f4 c1 b6 6d c7 a0 5e 59 8e ad fe 3c c3 1e b6 cd 25 e7 e1 83 5a c1 ef b4 b7 61 9b Data Ascii: {dettsY+Y3h2fSfjei2h3]L#^DL2h:Aw8d.\#26y:eRqDp.UNkZlFIO"SS0>>0>;]Qf;M\| Y0x4V:W^Bm^Y<%Za
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: 25 ee 1e f7 80 7b e2 f7 e7 95 fb 26 50 30 50 e6 cf e7 7f fb ff 4b fc b2 07 d2 16 4d 9b 2b 6d 96 b4 19 d3 fc 4a c3 69 7c 69 ee a4 b9 95 ba 79 aa 69 a9 92 a7 fc 9d 72 42 ca da 29 33 a6 4c 94 22 26 85 37 c5 f9 14 05 92 3b c9 8f 27 df 00 00 d6 67 2b d6 7a 6e 3d b4 d6 5a 8b ac 8e a5 ff f3 7f e5 ad d2 80 95 0e b0 12 01 56 42 2b 01 60 c5 b7 b4 a5 ac 38 56 84 15 a4 ff e9 bf fa b7 fe a5 49 7f d3 af f5 2b 7d 5b df d0 d7 01 7d 56 9f d4 c7 f4 51 40 af d6 cb f5 52 3d 53 8f d0 c3 f5 30 3d 54 0f d1 3d 75 0f dd 1d d0 ed 01 dd 0e d0 8d 75 43 40 37 d0 f5 75 1d 5d 51 17 d6 05 75 01 75 54 ed 52 3b d4 76 b5 55 6d 56 1b d5 06 b5 5e ad 55 6b d4 6a b5 4a ad 50 cb d4 52 40 2d 51 8b d5 02 35 5f cd 55 73 d4 6c 35 0b 50 d3 d4 54 40 8d 55 63 d4 48 35 42 0d 07 d4 50 d5 4a 35 53 8d 54 Data Ascii: %{&P0PKM+mJi\|iyirB)3L"&7;'g+zn=ZVB+`8VI+}[}VQ@R=S0=T=uuC@7u]QuuTR;vUmV^UkjJPR@-Q5_Usl5PT@UcH5BPJ5ST
2024-04-26 14:40:53 UTC	400	IN	Data Raw: f9 ea 55 7f 1b f9 5a f2 9d 84 d9 e4 bb c9 8f 10 56 90 1f 4f 23 84 8d c8 4f 91 9f 26 6c 4c 7e 96 4a c2 a6 e4 e7 4a bc 49 7e 7e 84 b0 19 f9 45 f2 cb 84 cd c9 af d3 08 61 2b f2 9b e4 8f 09 5b 93 3f a3 01 61 37 f2 3a f2 97 f7 36 87 e4 af c9 3f 12 f6 26 ff 9c 4a c2 41 e4 5f 4a 9c 4b ce 23 84 83 c9 bf 92 ff 24 1c 42 fe 8f 76 29 14 d4 ea 50 ab 4f 38 92 5a 43 6a 4d 08 c7 52 6b 41 ad 1d e1 14 6a 1d a8 f5 20 9c 4d ad 17 95 84 4b a8 f5 19 21 34 a0 d6 97 da 08 c2 a5 d4 96 50 49 b8 91 da ca 92 70 13 b5 f5 4a c2 cd d4 bc 87 b8 a5 04 af 26 3a f7 a5 11 f0 1a a2 73 3f 20 3a f7 43 22 bc 96 e8 dc 8f 08 7d 8c fe 63 a2 73 7f 20 c2 eb 89 f6 2c a2 3d 8f 08 1f 24 da 3b 9c 4a a8 4a b4 d7 2b a1 1a d1 5e 52 42 15 a2 bd e3 25 a4 11 ed 3d b1 04 9f 21 da 7b 6e 09 3e 4b b4 f7 c2 12 7c Data Ascii: UZVO#O&lL~JJI~~Ea+[?a7:6?&JA_JK#$Bv)PO8ZCjMRkAj MK!4PIpJ&:s? :C"}cs ,=$;JJ+^RB%=!{n>K\|
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: 34 bb b7 04 3f 27 9a fd df 0e e2 17 44 b3 c7 13 cd 9e 40 84 5f 12 cd 9e 46 34 7b 06 11 7e 4d 34 7b 2d d1 ec f5 44 f8 1d d1 ec 8d 34 02 f6 88 66 ef 24 9a bd 8b 08 e7 89 66 1f a6 12 ec 13 cd be 50 82 3f 10 cd be 3c 02 fe 48 34 fb 0e d1 ec bb 44 f8 13 d1 ec fb b4 4d cc 89 f6 d7 89 f6 b7 89 70 40 b4 bf 43 b4 7f 82 88 99 44 fb cf a5 12 26 89 f6 5f 52 c2 1c a2 fd 8f 97 b0 0c d1 fe e7 4b 58 96 68 ff bb 25 2c 47 b4 ff 93 67 61 79 c2 b9 37 d0 1d a2 87 a2 46 74 30 c5 18 53 52 88 93 4d 19 6a 13 ed 20 ce 85 fd 98 a7 61 8e a7 ad 30 6d 27 69 2f 49 17 82 30 08 73 3a d7 f9 42 14 47 71 6e 78 eb ad f1 1b 6f bd 65 7c cb 2d fd 37 de 72 eb fc 47 90 8e 87 86 e7 48 40 3a de 7c d7 73 24 36 ef ba 6b 7e 6e f3 ae bb a6 77 41 dc 35 bd eb ae ac e7 48 96 f2 c8 cb 69 4c 7e fb 6d 97 0e Data Ascii: 4?'D@_F4{~M4{-D4f$fP?<H4DMp@CD&_RKXh%,Ggay7Ft0SRMj a0m'i/I0s:BGqnxoe\|-7rGH@:\|s$6k~nwA5HiL~m
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: 56 c2 55 55 40 84 9d b8 9a 6c c3 1f da e3 a8 83 01 48 2b f5 f8 c0 bc c2 e3 4b ae 1f 67 ab 98 11 fd 7e 25 9c d2 84 26 14 10 a5 83 28 8e e2 26 d7 33 d0 ab f0 c2 a0 9f ec 20 19 4c 90 cb 95 c2 6c 4e 0d 60 5b 19 cf 3e 65 fe 35 4a b9 1c 1c 27 78 b0 aa 1a 19 cb 46 f6 6c 26 4f 20 a2 09 86 b4 4b 2e 51 ba 9e f6 92 fe c2 5a 18 f8 1e d7 5b 0b cd 38 1a 90 69 3a 20 c7 34 97 69 35 d5 88 f4 a2 f9 0b d1 98 46 24 7c 46 25 e0 b9 71 1c c5 a1 67 a5 46 68 01 ee 37 7d 1f 86 78 2f b9 44 08 c2 5e c0 01 f6 ac 29 92 34 09 d1 15 8a a2 1f 10 97 42 08 45 d1 91 fb 1c f1 2e 2e 85 98 0f 85 a2 e8 f4 0e 98 5a 6b b1 1c 5e 93 f8 31 91 7b 15 e4 07 61 10 3a ec fc 28 8e e2 41 aa f3 9e 1b 63 f9 d8 38 8a a3 98 d8 ca ca a9 53 2b 2b ec fc 17 9c 1c 2a 97 81 72 f9 50 05 c4 e2 8e df e7 8c 50 2e 1f 1a Data Ascii: VUU@lH+Kg~%&(&3 LlN`[>e5J'xFl&O K.QZ[8i: 4i5F$\|F%qgFh7}x/D^)4BE..Zk^1{a:(Ac8S++*rPP.
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: d4 a0 e4 55 5b 79 aa 79 44 0e a6 8c 30 a5 cb 32 0c b8 cb 4c 10 06 21 98 f7 54 04 c4 d7 99 e9 c0 0f 39 08 91 6e 27 ab 8c 81 de 3e 8a a3 38 ac 1d bb e9 da 24 61 2c 49 ae bd c2 75 2f de d8 6c 36 81 66 73 73 e3 e2 fd b9 e5 f2 a1 95 ca 62 3f 87 ec eb 34 0c 69 db db b1 24 b9 76 18 32 f3 31 66 49 72 ed b5 49 82 2b bd 67 c3 99 65 83 60 e9 85 85 13 e2 c4 73 42 c3 34 9d ab e1 f3 76 d7 26 09 9b c6 a7 e0 76 c1 18 13 2a c7 5d 2b 8a 75 ae b8 cc 4c b2 83 7e 85 b2 f7 56 a1 b8 ad 34 fc b6 e9 fb c6 03 97 34 55 93 42 08 bd fe e1 86 26 84 90 9a aa 2e 3d 70 f9 f1 17 5f 8c ff 75 01 77 be 3b 12 42 e8 aa aa c9 cb 2f 97 9a aa ea 42 88 11 1a f3 73 af 7e 35 11 29 44 07 bb 58 17 29 53 4c eb 44 ae 15 8e 56 45 6a 47 69 38 15 b6 06 40 bd 2f 83 2d 60 b6 3b c8 cb d1 71 d2 5e 44 2e 57 a9 Data Ascii: U[yyD02L!T9n'>8$a,Iu/l6fssb?4i$v21fIrI+ge`sB4v&v*]+uL~V44UB&.=p_uw;B/Bs~5)DX)SLDVEjGi8@/-`;q^D.W
2024-04-26 14:40:53 UTC	331	IN	Data Raw: a2 a7 a9 0c 52 10 79 58 6c c9 4d c0 73 3d b9 d1 78 9b ef 38 37 1a ce 66 7a da f6 03 21 b9 ae a8 b6 2d 2d cf b3 34 6d a3 81 9b 64 d9 33 2d 33 ef 80 9b 56 26 5b ad 2d 0e 0b 81 50 0c ce 19 a0 09 5b 4a 5d 53 99 02 9d eb cc 70 be 45 35 6d 18 86 02 9a 7a e6 f3 96 5c 57 14 45 65 f5 ba 91 c1 ae fe 7a 25 b4 6a 0b ed cc 85 81 43 50 03 72 ed c9 c9 04 2e 18 aa 6c 04 45 fc fc 6e 5b df 16 40 1e c3 89 5e e4 68 35 1c d3 04 49 a6 33 f7 31 6e 8d c9 9c 5d 52 2e b8 84 20 f3 fd bb f9 d4 8c f1 3c ed a3 33 09 7b 41 58 86 e1 4e 81 2b 3a 8f 62 25 4a 93 d4 13 42 e8 8f 7a 34 49 3e 63 13 d3 f7 8d 89 a6 6a 12 cf d1 54 4d ce 3f 82 0d a9 a9 9a 26 84 98 8f 5d c0 c5 58 08 a1 e5 eb 32 db b9 2f 6b 0e da 12 33 75 b5 a2 d8 86 ce 9b f3 25 fb d2 16 da fd 6f 30 c2 d0 b8 e1 fe 06 7b 93 ab 69 ea Data Ascii: RyXlMs=x87fz!--4md3-3V&[-P[J]SpE5mz\WEez%jCPr.lEn[@^h5I31n]R. <3{AXN+:b%JBz4I>cjTM?&]X2/k3u%o0{i
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: c0 78 dc e3 92 07 c6 21 44 cc 3c ee 71 b8 4f 56 d8 f0 05 2f b0 01 c3 94 d2 7e e5 ab c2 bf fa c2 17 5a 1f 6f ca 7a d5 2b fd a8 16 c5 bd ab 88 a3 71 ac 0b 36 60 d3 90 42 58 0a 33 9e e9 39 a3 3e d3 60 8a 25 84 34 ee ba 0b 4f b2 14 66 18 52 88 af 3c 35 6f be ec 9e fa 15 21 a4 61 30 c5 7a d7 bb 68 ae 98 ae b5 80 d2 db 97 2a aa dd 18 7a a6 21 e6 3f ff 73 16 be e6 7c ea 99 86 80 ff 67 e5 b4 95 73 b3 f3 37 a3 db bc 9c 9b c1 e5 a6 e9 60 72 99 26 f7 44 0c df 82 f8 38 da e3 e9 02 90 7b 56 b0 9d e1 36 ea e6 be 51 7a 13 4c 8a 58 bd d0 cc ad 3e 00 38 6e 25 44 e6 41 97 b3 2f 2b fe c7 1a 02 4b 6b 03 10 2f 41 ff 4e d8 a1 2f 6e c5 c4 44 78 24 e2 3f 25 b9 e9 75 67 6a d0 2e bd 05 53 ca 13 a5 71 34 48 d2 24 5d 93 65 11 c7 3b 72 df 93 26 72 f9 52 90 cb ea 65 c5 16 6e 28 7e 7f Data Ascii: x!D<qOV/~Zoz+q6`BX39>`%4OfR<5o!a0zh*z!?s\|gs7`r&D8{V6QzLX>8n%DA/+Kk/AN/nDx$?%ugj.Sq4H$]e;r&rRen(~
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: 9c 95 94 1b 61 99 30 af e6 d5 22 cf 72 39 ea f3 d1 2b e8 43 99 48 8a 53 da 75 df 7a 3a ad 87 f2 04 44 83 22 fc 79 9e a5 34 92 22 15 e9 28 1d e5 a3 3c ab b2 6a 5e cd eb 79 bd 28 17 e5 ac 9c c9 b2 c5 24 71 14 47 f2 b9 d4 b1 54 6b 30 00 d7 4b 9e d1 13 a7 d1 8c 04 e7 22 6e 34 9c 44 e7 f0 cf 61 f1 d7 76 f2 99 66 1c 19 3a 67 41 d0 68 a8 86 ed 34 1a a3 5b 2c ce 75 dd 32 01 b8 d0 ee 3c bc 1c 39 8e e3 44 70 df f6 a3 e1 b7 3a b9 d3 6a b5 5a 4e de 69 01 8c 3c bc ff 06 83 41 4b 59 4e 9a 78 ee f2 05 dc 54 d4 68 5e d8 bb 34 e2 8b f1 73 8e dd 50 8d 46 10 30 ae 1b 51 dc 1c 35 1a ef 03 d3 d2 35 c6 6d 29 c4 f7 38 4e 74 41 d7 77 f8 e7 57 61 8d 50 6f 26 a9 7f e5 3f e1 39 78 23 89 c9 9a 8e cb 04 29 a6 e5 1e b3 c8 55 4e 92 26 45 9f 0b 3c 58 5e 6a 47 91 6b 03 18 77 dd 65 02 38 Data Ascii: a0"r9+CHSuz:D"y4"(<j^y($qGTk0K"n4Davf:gAh4[,u2<9Dp:jZNi<AKYNxTh^4sPF0Q55m)8NtAwWaPo&?9x#)UN&E<X^jGkwe8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49779	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:53 UTC	1517	OUT	GET /packs/media/Inter-SemiBold-7ZIMHKJU.woff2?v=3.13 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://runrun.it sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://runrun.it/packs/css/home_app-J7HUCVVO.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _ga=GA1.2.1930088754.1714142446; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false
2024-04-26 14:40:53 UTC	385	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:53 GMT Content-Type: application/font-woff2 Content-Length: 106916 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:53 UTC	870	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 a1 a4 00 0d 00 00 00 04 ae 38 00 01 a1 45 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 86 04 1b 83 f5 3e 1c 81 a6 42 06 60 00 81 e7 78 0a 87 dc 78 86 af 4d 0b a7 58 00 01 36 02 24 03 cf 2c 04 20 05 8e 1e 07 82 ec 63 5b cf 42 b4 d7 52 64 bb fb fe da bd 0d ad 56 c8 26 6c 13 9a 21 8b d2 a8 26 9a 68 73 8c f6 8d 83 03 d0 50 ab 6f 28 9f 87 7e c8 f4 9f 57 08 45 b4 98 68 5a ba 3d 37 d5 31 ca ae dd e8 10 38 f5 93 df e4 0c 75 ee 1e 14 ab 72 db 80 2e dc 9e a9 dc 97 fd ff ff ff ff ff ff ff ff ff ff ff ff ff f7 94 fc 78 cc ad 37 2f c9 cc ff f9 49 93 b4 49 5b 7a 86 52 28 2d e5 2a 82 e8 8a 72 a8 ac eb 2a ae ee 05 25 0a 85 39 f5 9a 86 80 8c 58 ae 1d a2 a6 85 96 42 9d c2 64 e5 1c eb 1a ed e5 b5 27 8d ca be 18 0c Data Ascii: wOF28E>B`xxMX6$, c[BRdV&l!&hsPo(~WEhZ=718ur.x7/II[zR(-r%9XBd'
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: f4 e5 e6 b9 82 2a 36 b8 bb 9b 64 01 d3 59 d8 b9 f4 62 0f 21 3c 23 1d 60 bf 4e 71 95 a2 e8 7a 54 e6 6b fc f8 2b bc f9 1a c4 27 ac d1 e2 83 b8 ed ee 7a 3d 87 2c ad 9d 0a 37 aa a9 2a bd 57 3a d3 e8 df 62 78 ea e5 36 10 13 de 89 6f 12 f9 3b 0e 34 55 91 95 ef d6 83 4a fc ec d0 6b e5 4a af 73 ee 22 8f 46 e3 4a c5 b1 9a 92 9e 12 af 95 0a 53 a1 4a 4d e9 72 eb 9d 08 78 ff e3 24 f8 20 eb 31 7d e4 83 c4 35 97 51 1f 90 da 8b 46 7a c4 29 1a fd 28 b7 66 aa d8 63 e7 93 48 3f 87 83 a1 e9 0c f7 c1 c9 07 6c a7 18 7d a9 96 ce 0b c5 d5 61 eb c5 65 7a 98 79 d1 f1 22 64 66 a8 8a ba 97 8f 3c 52 0c c8 a5 58 cb 5f 9b 22 95 cf fc 2c c2 11 af e3 fb 46 2f 9e ee e4 34 45 9a e4 6e d5 44 73 c9 f9 45 3b 9a 87 10 90 21 4d de df 34 fb 27 cf f3 1c 39 52 9e 25 e8 5f be cb b2 cc a3 f3 f2 5f Data Ascii: 6dYb!<#`NqzTk+'z=,7W:bx6o;4UJkJs"FJSJMrx$ 1}5QFz)(fcH?l}aezy"df<RX_",F/4EnDsE;!M4'9R%__
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: 1c c2 4a 26 f2 6d 2e 50 a3 67 b4 5e 1e 18 40 60 81 e7 b5 30 31 1e 61 91 3e 14 e2 64 7a 78 5f 61 0e 89 fe 66 e1 f6 c3 57 19 48 3e 91 ad 71 e5 c6 94 f3 29 d3 c1 b9 d2 cd e8 0f 00 17 0e 58 f8 cd ff fe 78 43 7e e2 e5 83 f0 3d 50 e9 9f b5 2e a4 ad 75 39 2f 2d 0e 01 d8 66 a4 0e b8 09 77 e3 a2 a1 07 4e e9 17 a8 6a c5 da ca ec de 1a 9e 20 3e 8f 70 18 47 78 9c 44 2a ec 19 7f 31 10 a0 85 02 04 9e b0 a7 8c 51 9e 0c 03 0d 14 03 65 22 29 9f 73 5a 97 1a c6 44 c3 c3 d7 13 0a b4 a8 0d 68 3c 44 36 14 fc 51 77 0a 51 ec b7 3f 34 59 33 59 78 87 98 45 0b 15 6f 85 12 18 9a a7 0a 91 46 c8 b4 9f 3f 54 38 9a ab 02 87 c2 7d 8f 42 82 03 21 b1 02 ed 2b eb eb 54 2f c9 dc e6 47 07 c8 62 ae 52 76 8a 76 72 c8 28 c9 33 c9 e2 31 c6 d6 ff 5b c0 5f 60 a0 b0 cb 25 40 eb 74 3f 86 14 e2 bf 5d Data Ascii: J&m.Pg^@`01a>dzx_afWH>q)XxC~=P.u9/-fwNj >pGxD*1Qe")sZDh<D6QwQ?4Y3YxEoF?T8}B!+T/GbRvvr(31[_`%@t?]
2024-04-26 14:40:53 UTC	400	IN	Data Raw: 3e 55 cc 5a 3f 78 08 cc 0a 60 d5 fd ed 7b 33 ae a4 50 85 70 39 a2 e2 a6 41 3f 93 44 b6 01 40 f8 37 87 81 5b 3c e1 9f c8 2f f7 97 54 4a 36 00 38 1a f5 a0 04 8b 04 fe 4f d5 ac 9d cf c1 5f 0d 08 c0 8f 14 37 50 ce f4 25 e9 52 aa e9 90 ba 0b d5 55 1d 66 fe 80 c3 41 90 44 12 d0 3e 11 8a 94 69 ad 82 73 a0 2e 71 e9 44 ab ba bb 72 ab ad b7 a8 2e e7 a2 ac 0c 0b f2 76 5d 96 7e 82 9e 80 01 46 1a 49 60 3b 0e 76 a9 0f ec 71 16 d9 20 95 b2 2e aa ea e4 a3 55 4d 0d 4b cb ab 04 fe 2b f5 ff 7f e9 2f f5 5e b8 e9 c6 49 c2 5e 85 44 01 71 a0 f9 ee 6c e1 4e 63 ef 90 bd 20 a3 72 6a 01 06 40 1c 5b c8 59 f7 7d 20 d6 f2 60 80 e7 1b 5e ef 5f 19 96 9b 25 c9 20 19 4c 92 24 84 ad 45 51 1d 7d 42 85 17 61 58 1e 1e 35 9f 9a 9e 7d 9b c3 c5 bb 0b d1 10 79 ac 60 32 a6 64 ab a8 74 cb ef 77 c6 Data Ascii: >UZ?x`{3Pp9A?D@7[</TJ68O_7P%RUfAD>is.qDr.v]~FI`;vq .UMK+/^I^DqlNc rj@[Y} `^_% L$EQ}BaX5}y`2dtw
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: d3 ff 37 10 70 77 98 63 d1 22 42 18 f2 75 df 18 93 e7 5d 13 ab 5a 5b e1 26 c6 c4 31 15 c2 c4 74 39 c2 13 df 77 7e 6a 64 77 0d 77 64 8c 61 ca 71 18 63 1e 42 28 f3 ab 88 40 5d 96 46 1b b4 3e 2b f4 4a ad f8 01 fd 63 6c a6 bd fa 48 17 26 7d 08 36 6e 7e c7 31 36 ff 4b df ef 5c 39 9d 3a 31 00 89 3c ce f8 df 5f b3 3f b1 38 8b 9d f6 bd dd b6 16 37 44 41 40 82 04 09 90 40 96 7b 89 7e fc e8 14 a2 ed fd fa a7 f4 bc ef f5 73 be a4 09 4d 10 11 69 44 44 82 84 30 b8 0f c2 b6 35 bf 9a ed 96 24 96 76 0c 36 ef 5f d6 cb d8 73 34 d3 bd f5 a0 28 2a 21 21 48 b8 4b 7a 7c fc ed 4b f4 0c 04 30 ea 16 31 d2 d7 43 08 ce 10 a2 43 88 09 a1 65 08 89 21 64 84 90 15 42 76 08 2b 42 28 0e e1 c9 92 48 01 22 3d 10 59 41 54 11 44 41 20 aa 0d a2 28 10 a5 80 28 0d 44 53 41 b4 00 44 ab 41 54 04 Data Ascii: 7pwc"Bu]Z[&1t9w~jdwwdaqcB(@]F>+JclH&}6n~16K\9:1<_?87DA@@{~sMiDD05$v6_s4(*!!HKz\|K01CCe!dBv+B(H"=YATDA ((DSADAT
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: 0d 5e 5c 5e 2a 5e 7a 7e c3 a5 76 87 6d 12 9f 69 17 8e cc 78 2f 79 3f de dc 67 ed d3 e5 fb 64 5d 81 f7 5c fa 9e f8 5e ab 4f dd f7 7b d7 c8 de 70 9a 71 7b 63 c7 92 fa 53 37 4c 35 7a 1e 18 d8 6e 78 a3 cb 39 1d 7d bf ec 08 0c 2a 7c c2 ce 0f 01 36 64 12 5f c3 4a 46 5c 69 e4 b9 12 f8 73 f8 fb fa 0f f9 6f f8 6f 5d e8 70 d5 09 6d f1 3f f2 bf 0a a0 0f e0 09 4d 0f 2d ac a6 42 87 42 17 42 1f 86 3e 09 af 0e 6f 89 f0 8e 0c 89 5c 8a 7c c2 b0 c8 b7 91 9f 22 7f be b0 51 d0 28 c2 28 ea 46 bf 28 ff ec 93 22 34 92 aa 82 e1 45 4d 45 d7 4a cf c0 65 3c 45 43 a0 af 15 3b 50 ea c1 7d 9e e2 73 db 2c d5 e6 4b ef ea 93 de 96 fe d5 0c a5 52 05 e2 a4 54 21 a1 9e 0e ab f4 70 b8 55 bf 72 63 5d 65 62 25 b6 f1 2f c8 7a 96 21 8f 86 fc 7d a9 da d9 f8 57 83 5f 0e 43 83 7e 03 e7 fa c2 fa 4f Data Ascii: ^\^^z~vmix/y?gd]\^O{pq{cS7L5znx9}\|6d_JF\isoo]pm?M-BBB>o\\|"Q((F("4EMEJe<EC;P}s,KRT!pUrc]eb%/z!}W_C~O
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: 53 a6 cd 98 e5 89 c1 78 ab 3f f3 39 15 35 bd 04 c0 82 c5 2c 55 c0 60 d0 b0 70 08 88 c8 b2 e4 c8 cd aa 12 e2 7c 9a 6b fe 26 26 21 25 23 8f a7 6e 33 2b 1b 3b 07 a7 19 1e c1 a4 ea 3d 9a cf d2 de 47 d1 0f 61 ce f9 45 6e 52 0b 05 59 cc 13 a0 6c eb f5 20 4c b9 5a 21 67 ec 6b ec a3 21 63 b7 65 26 2c 64 b5 3e 14 f0 c7 e2 26 53 ec ef e0 4d 04 9f 66 8f ac a5 03 f4 7c 92 f0 de ba 5e 9f f0 f2 58 17 1c be eb c3 c4 73 26 8a 12 fc 88 9f f8 17 46 bf 53 ff 03 fe 07 9d 99 00 8b 79 3b 8f 8f fc 22 1e 87 76 b8 04 0f ad 68 a3 f6 fc a2 17 6b 2d ed 7c d0 be ad 0d 5b 1f 16 3c 67 82 d5 e4 1f 89 9f f0 0b ff 4e fe 8f fc 3f 41 07 13 2c 13 79 73 8e 54 b5 5a ad 56 bb b4 eb 46 a9 69 68 77 1d e9 19 18 99 46 32 1b d8 d8 39 38 cd 4c b3 67 20 9f 78 bd 09 be 07 1f 3f 3e f5 6d 05 8f 9b 98 c7 Data Ascii: Sx?95,U`p\|k&&!%#n3+;=GaEnRYl LZ!gk!ce&,d>&SMf\|^Xs&FSy;"vhk-\|[<gN?A,ysTZVFihwF298Lg x?>m
2024-04-26 14:40:53 UTC	331	IN	Data Raw: 61 98 00 73 32 d8 ab 9a d1 43 92 67 0a 46 b7 e9 de e4 03 46 45 f9 40 b2 82 a0 88 0f 63 54 15 68 25 dd 42 00 2d 04 40 cd 00 9d 55 40 2a 5a e2 8c fd 62 91 57 bb 53 48 68 8a 95 67 97 1c e8 b8 52 56 4a e4 ed 38 a2 ed be 9e 88 d7 35 24 0a 5a 52 0c c5 05 be ff 86 aa 05 2b c9 d0 9c 14 37 30 82 51 88 83 a4 db b2 bb a3 68 4e 8e ea c7 c8 11 29 34 0d 2f 82 d3 ac 6f 9c c4 1b f0 4f e2 60 bc 50 63 5f 24 22 34 f4 fb 85 aa 9a 44 04 21 a9 18 bc 61 bc f1 dd fb 1e c0 50 34 05 4a 9f e7 8a 1d 3f 55 6f 05 ec 2c 52 54 25 15 02 48 09 a8 f3 50 83 bb 52 e8 7a e6 76 95 07 97 d3 84 53 1b de 3b e4 43 47 1a 91 28 69 a4 8d 4a 3d 99 11 71 7b b7 5a a2 f5 fe 5d 05 70 40 dd 23 a6 8b e4 f1 40 82 60 ee 67 2a c4 27 e7 d8 b4 a1 e6 0c 87 44 f4 a8 b5 9d 56 39 7d 0c 76 45 7d 87 2b cd e2 25 b3 7a Data Ascii: as2CgFFE@cTh%B-@U@ZbWSHhgRVJ85$ZR+70QhN)4/oO`Pc_$"4D!aP4J?Uo,RT%HPRzvS;CG(iJ=q{Z]p@#@`g'DV9}vE}+%z
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: d8 ed e9 51 b5 36 8e 94 25 46 4e 2e 81 98 8e 2b 72 4e 35 f9 dd 51 fb c1 0d 89 7b 2e c1 1b dc 08 87 38 63 59 0e 52 d0 ac 82 1c 23 70 63 17 da c0 34 bd 73 91 4b 9c a1 21 97 d2 e6 08 14 3e 6d 40 67 46 e2 e6 03 c8 93 16 ea d8 7f 99 c5 f1 03 b5 2f eb 60 38 52 e7 2b 36 29 55 90 67 f1 b1 fb 18 53 a3 81 0c 2e 66 b9 ef d1 2d 42 f6 85 33 dc 18 7a 25 30 db 5b cc 76 96 b4 79 7e 82 69 47 8a 59 21 09 7f cc e2 f2 fe 0a c6 f6 ff 0e aa 17 32 04 1c fa 09 af 07 20 18 41 31 9c 20 29 9a 61 39 5e 10 25 59 51 35 dd 30 2d db 71 25 18 80 10 8c a0 18 4e 90 14 cd b0 1c 2f 88 92 ac a8 9a 6e 98 96 cd ee 70 ee 55 af 68 00 80 10 8c a0 18 8b cd e1 f2 f8 02 a1 48 2c 91 ca e4 0a a5 4a ad d1 ea f4 06 a3 c9 6c b1 da ec 0e a7 cb 8d c8 ab 5e f3 ba 37 bc 05 02 43 a0 30 38 92 2f 10 8a c4 12 a9 Data Ascii: Q6%FN.+rN5Q{.8cYR#pc4sK!>m@gF/`8R+6)UgS.f-B3z%0[vy~iGY!2 A1 )a9^%YQ50-q%N/npUhH,Jl^7C08/
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: 9a d0 3e b6 8d 0d 1d 2b e5 3a ea 30 27 68 bf d1 7c ef 4e 47 9a 4c 87 a9 be fa 6d d5 c9 69 60 9f f4 3d 91 ad c1 b9 c6 72 63 92 d3 80 80 84 b4 97 24 56 14 f0 70 01 83 c1 94 a4 87 68 b3 f4 90 06 9b 55 92 24 49 92 24 49 91 ce ad 77 51 d0 0b 1f bf 80 a0 90 b0 88 a8 98 39 71 09 80 a4 94 b4 8c 79 0b 16 2d c5 72 1b 10 30 08 28 18 38 84 41 a2 19 cc aa 80 23 6a d1 6c b1 da ec 0e a7 0b 12 36 da 94 1c 69 b8 78 5a b5 95 00 b4 87 bd df 30 5a 14 7d 6c c2 57 02 94 5a 20 98 16 c3 13 65 11 0d 21 0a 31 3a 9a e4 7d a8 e1 43 9c 0f 9b e8 39 37 e7 3b cb b6 bf 68 84 9b 5d 16 c8 24 8e 71 1c c7 95 68 cf 14 71 1c c7 71 29 9f e0 c8 e2 37 28 32 b7 dd 0b df 47 f8 81 c9 c4 ab 99 f8 c5 51 3c d1 9f a9 65 dc 4c 9c 6b 33 5f ee 07 af 11 2b e2 c2 a3 a8 1b 6b 75 f3 be 65 29 3e bd 36 57 cb d8 Data Ascii: >+:0'h\|NGLmi`=rc$VphU$I$IwQ9qy-r0(8A#jl6ixZ0Z}lWZ e!1:}C97;h]$qhqq)7(2GQ<eLk3_+kue)>6W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49782	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:53 UTC	1587	OUT	GET /static/images/home/clients/Omie.png HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _ga=GA1.2.1930088754.1714142446; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false
2024-04-26 14:40:53 UTC	369	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:53 GMT Content-Type: image/png Content-Length: 606 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:53 UTC	606	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6d 00 00 00 20 04 03 00 00 00 ea 10 eb d7 00 00 00 18 50 4c 54 45 2d e7 f6 02 e2 f4 ff ff ff 65 ed f8 d4 fa fd ec fd fe ba f7 fc 91 f2 fa 05 f7 2a 89 00 00 02 01 49 44 41 54 38 cb 9d 95 4b 73 e2 30 0c 80 ed d2 c2 d5 9a b6 9b 2b 23 92 70 25 78 ba e7 0d bb 33 5c 29 cc 6c af 25 3d ec b5 a1 af bf bf 7a 25 01 a6 64 18 7c 88 b0 ad 4f 96 2c c9 38 3c 67 14 10 d6 07 0b 63 77 16 e7 01 aa cb b8 b0 b8 88 0b 0f 78 11 77 84 9d cb fd c1 cb 38 fc 9e a3 3b 5e 7e 69 e0 19 7f 96 31 fe a4 b5 ec 5f 1c 7c 9a 62 a6 22 7d 9b c5 f7 86 5b cd f1 17 40 d8 f1 46 39 44 9e 00 8c 30 9d b1 1c 8a 7e ee c5 ec 93 b7 25 e6 72 bf cb 79 2a a9 2d 61 38 05 19 f3 5a e5 4e 30 c9 5f ee 75 e9 41 b8 1a 16 a5 4c af 85 03 db 0c 2a e0 87 d4 8b 70 Data Ascii: PNGIHDRm PLTE-eIDAT8Ks0+#p%x3\)l%=z%d\|O,8<gcwxw8;^~i1_\|b"}[@F9D0~%ry-a8ZN0_uAL*p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49783	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:53 UTC	1589	OUT	GET /static/images/home/clients/Natura.png HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _ga=GA1.2.1930088754.1714142446; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false
2024-04-26 14:40:53 UTC	370	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:53 GMT Content-Type: image/png Content-Length: 3012 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:53 UTC	885	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 80 08 03 00 00 00 79 8d d6 ad 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 b4 50 4c 54 45 47 70 4c ff 63 03 ff bc 00 ff b5 02 ff db c3 ff db c1 ff 68 04 ff bf 00 ff 6c 0d ff 6a 08 ff 9d 05 ff a4 04 ff c5 97 ff ad 01 ff d3 b0 ff c2 92 ff 6e 11 ff 75 21 ff 7a 05 ff 75 21 ff 7c 2d ff 60 01 ff 9c 65 ff b9 20 ff ba 67 ff 96 3b ff 6a 0a ff 8b 4a ff 9f 46 ff 94 5d ff 75 1c ff 79 29 ff be 13 ff 6e 10 ff 93 58 ff 8a 45 ff 64 08 ff 9a 6a ff 68 0b ff 86 02 ff 84 28 ff bb 11 ff c4 47 ff 94 04 ff c0 21 ff 74 1d ff 7a 24 ff bf 26 ff bb 0a ff 63 07 ff c0 2f ff c1 3a ff 84 29 ff 9d 19 ff 9d 0c ff cb 7d ff 9a 24 ff 92 58 ff ae 82 ff 9a 1f 91 6d d1 78 00 Data Ascii: PNGIHDRygAMAasRGBPLTEGpLchljnu!zu!\|-`e g;jJF]uy)nXEdjh(G!tz$&c/:)}$Xmx
2024-04-26 14:40:53 UTC	1255	IN	Data Raw: ca ab 25 35 73 d6 66 4e 28 88 e8 45 9d b9 5a ad 9f 9f 9f d7 ab ad 70 b7 ac 71 56 57 00 87 87 9a b0 ee be f6 42 45 13 f6 8b 77 04 e2 e5 99 ca 2f ed 0e 24 59 98 a8 6d 99 a4 b7 fb 48 11 d6 58 96 e0 51 8e 67 58 7c 50 75 ed b9 24 bf 7e 6d d1 1d 86 24 cb ab ea 5a 5e 64 18 ed b6 27 d6 f5 00 e5 98 4f 18 71 19 15 08 04 02 e4 1e 43 a2 87 e7 32 10 06 47 59 a0 68 d7 94 4e 78 fb 42 2d 49 db 2c 23 a2 7e 99 82 c8 4a bf 83 bf 2f e8 f4 14 19 b5 cb 72 74 5e 9a 6f ea 2a 99 6c 0c 56 da 9a 1a 53 45 7e df 05 24 8b 25 e1 b4 6e 3d 4b f7 00 a4 6e ad 3a 58 17 0e 41 31 d6 da 57 9a 7e ad 80 82 c8 5d 40 18 e9 6c 7a 4b 48 16 9a b6 a8 31 78 f1 ab 8a 31 5b c2 d6 0f b2 b6 80 f1 fb 5d bb 4b 2c 61 a6 d4 a7 bd da 54 03 0b b5 9b 53 30 4d 51 2b 82 ff 7f 6b ba 8a f6 e0 1a 25 d9 de 67 1d 95 04 Data Ascii: %5sfN(EZpqVWBEw/$YmHXQgX\|Pu$~m$Z^d'OqC2GYhNxB-I,#~J/rt^o*lVSE~$%n=Kn:XA1W~]@lzKH1x1[]K,aTS0MQ+k%g
2024-04-26 14:40:53 UTC	872	IN	Data Raw: e3 8f 8f 0f da 80 14 0f 39 ee ad 1f 48 f6 a4 0f cd 3a df 4b db 04 c5 24 5d 9a 1f 49 40 93 37 9e 34 56 bc 12 c3 67 73 bf 5c 88 03 97 ef 70 8e 54 06 e1 15 a2 57 62 5d 02 22 ba f0 ea 54 40 f4 38 08 63 2b 2c e9 96 09 ce 9a 71 c8 3d f7 3b 24 62 7f d8 e9 98 71 e1 17 28 20 9f 79 c7 ca 3f c9 44 f5 81 58 dc 24 ba f3 0e ae 9f b5 fe 17 48 9f fc cd 17 2d d9 8e 79 68 87 61 2c e8 40 f7 1b d6 35 82 fd 24 b9 74 a6 0d 2b b0 66 98 66 6d db 84 83 e7 0f de af f6 41 d9 fe 55 20 82 0c 3d 94 ab 2a c6 60 08 87 b3 10 a4 cb a0 43 af 5e f0 16 62 b0 f3 ca 31 5c 1d 86 a4 1b 50 bd 07 a0 aa 5f 76 28 85 3f 70 ff 19 c8 27 d1 9c fb c8 1d ec 83 7c e2 df ca 3f 6f 24 43 d2 31 93 6b 41 c0 56 3a c3 ca 21 11 f4 0a 93 2a 6d 71 02 6a 98 e5 5d 4c fc 01 7e e1 5c 03 02 8a ca c1 fe ba 04 1d 32 ac fc Data Ascii: 9H:K$]I@74Vgs\pTWb]"T@8c+,q=;$bq( y?DX$H-yha,@5$t+ffmAU =`C^b1\P_v(?p'\|?o$C1kAV:!mqj]L~\2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49781	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:53 UTC	1587	OUT	GET /static/images/home/clients/Avon.png HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _ga=GA1.2.1930088754.1714142446; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false
2024-04-26 14:40:54 UTC	369	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:54 GMT Content-Type: image/png Content-Length: 870 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:54 UTC	870	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b2 00 00 00 24 08 03 00 00 00 1a 6b 90 04 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 33 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 41 2e 2a 00 00 00 10 74 52 4e 53 00 47 14 b8 5b e2 07 c7 f3 21 a8 35 97 7c 8a 6f 24 aa b3 d7 00 00 02 b5 49 44 41 54 58 c3 ed 98 d9 92 e3 20 0c 45 cd be d9 98 ff ff da 89 59 0c 92 48 57 77 99 9a 27 eb 2d 04 3b 87 1b e9 22 d8 b6 37 de 78 e3 d7 a1 5d 60 c1 f1 ff fe bb de 18 07 38 3e 03 26 62 0e bd 7f 46 bd 1e 87 82 57 e9 0a 6b 4e 42 cd c8 6c 1d 3f 43 6b 88 e5 e7 47 77 30 72 64 8e 00 c6 42 a6 3b 00 Data Ascii: PNGIHDR$kgAMAasRGB3PLTEGpLA.*tRNSG[!5\|o$IDATX EYHWw'-;"7x]`8>&bFWkNBl?CkGw0rdB;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49784	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:53 UTC	1589	OUT	GET /static/images/home/clients/Unimed.png HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _ga=GA1.2.1930088754.1714142446; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false
2024-04-26 14:40:53 UTC	369	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:53 GMT Content-Type: image/png Content-Length: 823 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:53 UTC	823	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 9b 00 00 00 23 04 03 00 00 00 71 d6 65 a7 00 00 00 21 50 4c 54 45 00 90 4e 02 96 58 ff ff ff 1e a0 66 66 bd 95 dd f0 e7 ef f8 f4 c4 e5 d6 42 ad 7c 8b cd ae ab da c4 e0 fa 47 a7 00 00 02 d1 49 44 41 54 48 c7 ed 96 cd 4f 13 41 18 c6 df 49 9b d0 f6 34 6f 36 c6 8f 93 19 bb db 96 d3 e2 e2 86 63 53 16 ad 37 69 05 12 6e b6 b8 d1 1b 16 a5 ca a9 0a 26 7a 43 2e 52 4e b0 7e 45 fe 4a 9f 99 6d 77 4b a1 84 20 31 1e 98 64 d3 d9 d9 99 df 3c f3 ce 33 6f 87 d4 55 96 bb 74 d9 91 a5 d6 95 e2 ca 8d 6b dc 3f c0 d9 4b 4b cb 93 41 f8 da 48 70 a5 20 08 be 07 c1 c2 79 b8 26 5b 85 c9 b8 57 cc 37 13 5c 93 44 b6 4d 22 97 e0 9c df fd 7e a4 a6 0f fa 5f 53 9c e0 73 70 eb cc 53 09 ae c7 d2 b7 67 58 d6 12 9c 4b e4 ab 36 51 36 19 d0 Data Ascii: PNGIHDR#qe!PLTENXffB\|GIDATHOAI4o6cS7in&zC.RN~EJmwK 1d<3oUtk?KKAHp y&[W7\DM"~_SspSgXK6Q6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49787	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:54 UTC	1593	OUT	GET /static/images/home/clients/Votorantim.png HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _ga=GA1.2.1930088754.1714142446; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false
2024-04-26 14:40:54 UTC	370	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:54 GMT Content-Type: image/png Content-Length: 4185 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:54 UTC	885	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 58 00 00 00 80 08 03 00 00 00 79 a8 81 84 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 01 26 50 4c 54 45 47 70 4c d5 e1 e2 5a 5a 5a 94 94 94 fb fc 1b fe fd 3b ae af b1 e2 e8 e9 fa ff c4 ff fc ba 5c 5c 5c 5e 5e 5e fe fe 3a b9 c0 c3 7a 7a 7a 60 60 60 b6 c6 cc 76 76 76 74 74 74 a8 aa ab 84 85 86 6e 6e 6e 68 68 68 72 72 72 8a 8a 8a 64 64 64 6e 6e 6e 64 64 64 5d 5d 5d 6b 6b 6b 68 68 68 6c 6c 6c 7e 7e 7e 93 94 96 7a 7a 7a 8a 96 9d 66 66 66 78 78 78 5e 5e 5e 60 60 60 29 64 9c 6c 6c 6c 5b 5b 5b 7a 7a 7a 5b 9b c3 92 d3 e0 90 97 9b 9f db e9 3b 8d b9 28 7b b2 73 a7 c4 30 a0 c4 80 d4 e3 7f d9 e3 23 84 b4 56 a0 c3 40 bd d8 43 a8 c9 64 d0 df 61 c4 d8 47 9b be 47 7c Data Ascii: PNGIHDRXygAMAasRGB&PLTEGpLZZZ;\\\^^^:zzz```vvvtttnnnhhhrrrdddnnnddd]]]kkkhhhlll~~~zzzfffxxx^^^```)dlll[[[zzz[;({s0#V@CdaGG\|
2024-04-26 14:40:54 UTC	1255	IN	Data Raw: 3c 1a bf 7d 43 f7 f8 ce 57 02 3b 4e 52 f6 7a 33 40 4b b0 7f 7e 9e 5a f6 f6 56 f7 b0 bf 56 bf 5e 1d 1c 6c e1 d9 e0 cd e5 d5 cc b2 5f 60 d8 cc 7b 15 b8 a9 65 ff 7f 5b 02 d6 84 96 1f 74 0a d8 d6 d7 cb ab ab 8b 34 65 77 55 4b b0 0f b0 a9 65 3f ee cc 7e 91 71 52 65 96 45 3b 1e 6e 61 fc cc ff 82 a9 ca c3 8a 4f 2a fc 23 e3 ef 1c dd 5d ce 2c bb 9f 1a 36 b1 ec 19 3d 7e cd 19 96 65 fd 41 48 97 12 86 7e b7 5d 30 97 71 fe a0 86 01 cb 41 fc ad 4e 23 87 fe a3 cd 9d d9 2c 2c 0d 38 73 0a 6a 29 83 2a 97 dc 7a b1 7c aa 2c d8 3b fa f6 fd fb cc b2 bb 98 e0 d6 fe e9 68 66 d9 cf f3 09 9b 15 52 90 b8 e0 13 61 e5 9a cb 78 21 54 8c 68 c0 c8 8e 0d 5b 93 32 e2 fe c3 15 63 f9 46 2f f4 36 96 44 b5 d4 ee fa 6b 31 58 9a ca f2 c1 66 0e 76 0f df 7e 03 58 65 59 aa 5f 23 d5 12 bc 3f 3d 3d Data Ascii: <}CW;NRz3@K~ZVV^l_`{e[t4ewUKe?~qReE;naO#],6=~eAH~]0qAN#,,8sj)z\|,;hfRax!Th[2cF/6Dk1Xfv~XeY_#?==
2024-04-26 14:40:54 UTC	1255	IN	Data Raw: 3c f8 6a bf 3e 40 52 d4 fb 7d 9b 82 03 d7 aa c0 d2 58 16 5d b3 8f 05 8c aa db ad 0a 25 91 0c 7f ff 69 d7 99 5a f6 0e 2d 41 f0 ee e2 62 ce b2 07 c6 43 b0 34 d7 09 cc c9 cb f1 a3 57 26 cf 54 b1 b5 5d 32 65 35 93 38 b6 ea 30 b3 84 de 89 6c 83 7b 9d 10 6c ab 4a 67 d8 21 cd 90 17 a8 ec d6 71 d3 76 03 a3 69 61 ff 2a 4d 0f 66 29 18 8e 05 52 25 1a 33 4b 1f 60 6a a3 03 b0 de 06 9d c9 ac 13 0a d1 23 9e 41 48 ab 35 29 01 2c f8 77 4b 4e 26 30 cc 95 b8 03 18 12 4f 31 8c c1 4a ab c1 58 a6 02 62 15 ca ef 7c 48 1e 76 55 57 a0 c0 f2 04 ac a4 8b 67 28 9f d2 6a 61 3a 64 06 77 ed f7 db ba 56 6a d9 23 bc d6 da 7a 7b 75 31 b3 ec fe ce 23 60 53 79 39 db 5c 78 9e c1 62 03 02 c0 f2 3a 42 c2 a5 a4 a2 40 2e 58 e9 16 a8 c1 d1 04 20 ce 6d fa c0 bd 55 c3 44 c7 1e 65 0d b3 4b 4b e3 05 Data Ascii: <j>@R}X]%iZ-AbC4W&T]2e580l{lJg!qvia*Mf)R%3K`j#AH5),wKN&0O1JXb\|HvUWg(ja:dwVj#z{u1#`Sy9\xb:B@.X mUDeKK
2024-04-26 14:40:54 UTC	400	IN	Data Raw: a4 d4 b1 94 c3 51 c2 f8 a4 db 5b af bc ae 85 8d 2b 13 56 2f 8e fe fc fb d3 92 85 cd 2d fb ee d4 b6 ca 42 81 41 0f 23 ce 2f 63 2a 50 e9 f5 0d 47 07 49 5a 26 2c 59 f6 92 8b 4e fa 21 d7 85 0a 1d 90 a8 85 cb 36 c9 37 21 c2 94 8b 8e 4c 1e 2a ce 28 7d 4b d3 96 42 bd 1e 20 41 ad a3 57 46 6f a9 e9 59 b6 97 a0 2d d1 40 65 1b ab be b5 16 63 51 a4 a4 07 a3 61 94 94 3b d6 19 52 26 4e 6b 5c 3a 5f cf 63 7f 84 63 8f de ff 4b 55 c2 32 b7 2c 94 fd 6b a3 61 b3 02 81 fb 4a f4 bb 85 9b 91 27 0d b4 da 52 93 04 bc 78 4d f2 92 76 4d 58 6b d1 e0 ba 82 8e 41 6c eb 73 eb 00 7d 9a 64 98 ef 4f d8 0d 56 c2 84 59 2f ba 6b d0 30 e3 d4 f8 11 67 13 5c 6a e2 3a ef a1 a5 13 c3 98 34 1b 6a d5 35 61 f5 18 c7 e0 d4 38 cf f6 37 3a 96 16 36 83 99 49 c8 cd 8e ad 50 58 dc c9 f5 0e c2 2e 73 cb 5e Data Ascii: Q[+V/-BA#/cPGIZ&,YN!67!L(}KB AWFoY-@ecQa;R&Nk\:_ccKU2,kaJ'RxMvMXkAls}dOVY/k0g\j:4j5a87:6IPX.s^
2024-04-26 14:40:54 UTC	390	IN	Data Raw: 1c bb cc 84 2d 31 ac ee f4 0a dc 42 03 5d 1f 7b c1 7c e1 14 fb 47 d9 23 3a d8 0e 8f 7b cc 83 9c 1a 8d f2 c7 ee 24 6b dc 84 4d 3f f0 c6 1d 7d 3d 71 d7 25 ae 5f 87 5d 6b 7a be 37 5d 8d d0 ce 62 ee fb cd 6c d7 da aa 4f e7 be d7 cc 4f 41 d7 70 68 3e 92 8e f3 31 b1 83 e7 e8 24 f8 d1 45 bc e9 f0 33 d9 a0 90 e6 9a 4f 27 34 da 75 7b 6e 3d 9f 82 b7 0e 78 bc 2e 66 bd f3 bd 1c ed 67 dc 8b 59 59 f6 e4 3b 1a 91 da fa 96 4f 7e 68 de 62 d2 37 f7 ac 6e f9 c4 c8 a6 8d ab 8d fb 67 5f fd 9f 6f bd 5f e3 3e ee 0b 39 7a ff f6 cd d5 c7 c2 b2 25 86 15 fe 6f 94 2d 2c 7b 6a 8b 22 55 c1 96 fd 94 59 f6 c5 b1 e8 51 a1 65 b9 7d 48 ca 7e f8 78 22 86 ad d8 b2 ff 71 2e 2b 86 ad 3e ca b2 65 4f 1c 51 e3 47 58 76 9b 61 f7 77 8b b6 ae c6 b2 59 94 dd 12 61 f5 ab b3 87 7b eb 3c bc 8d 7c c4 de Data Ascii: -1B]{\|G#:{$kM?}=q%_]kz7]blOOAph>1$E3O'4u{n=x.fgYY;O~hb7ng_o_>9z%o-,{j"UYQe}H~x"q.+>eOQGXvawYa{<\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49786	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:54 UTC	1586	OUT	GET /static/images/home/clients/FGV.png HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _ga=GA1.2.1930088754.1714142446; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false
2024-04-26 14:40:54 UTC	370	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:54 GMT Content-Type: image/png Content-Length: 1358 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:54 UTC	885	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 48 00 00 00 80 08 03 00 00 00 5e 06 00 6c 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 33 50 4c 54 45 47 70 4c 02 3a 78 01 3a 78 01 3a 78 01 39 77 01 39 78 00 41 80 01 3a 78 02 4b 88 01 39 77 06 92 d3 06 91 d3 06 91 d3 07 91 d3 06 91 d3 02 3a 78 07 91 d3 34 50 4f 78 00 00 00 0f 74 52 4e 53 00 85 ed a7 6c c2 31 d6 15 4a bf e1 7a 53 a5 13 2d 66 7f 00 00 04 9e 49 44 41 54 78 da ed 9c db 76 db 20 10 45 b9 5f 62 3b e9 ff 7f 6d 9d 26 4d 23 04 62 06 06 9a 87 b3 d7 ca 93 65 01 5b c0 0c 20 47 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 4e ca da da f8 8e b7 da 85 b4 b9 78 eb 49 58 e6 6d ef 2f 14 5e bf b7 36 Data Ascii: PNGIHDRH^lgAMAasRGB3PLTEGpL:x:x:x9w9xA:xK9w:x4POxtRNSl1JzS-fIDATxv E_b;m&M#be[ G) NxIXm/^6
2024-04-26 14:40:54 UTC	473	IN	Data Raw: 16 13 49 dd 53 33 cd 22 ff ae 74 c8 1e 67 82 0d 57 e4 39 e8 47 f9 50 23 75 44 fb 11 74 6e 49 ad 10 a9 cc 44 fa 73 6a 9d e5 6e e1 2d 31 99 ae 4e 1e 18 1e 79 22 7d ab e5 34 91 c7 1e 6d 8a b7 35 82 a8 48 15 67 d2 c9 cf f1 9d d4 22 91 ba b5 d1 ed be 5e 24 bb 9c cc 8f e6 8e af 19 78 59 8f b3 49 d0 9a 00 67 e8 e7 7d f6 4a 64 11 6e 56 85 1a 9e 49 bd 42 a4 4e 75 28 67 2f 04 91 17 e3 2d 2a 71 56 bc f1 b7 68 63 d7 71 45 ea d5 fd 62 e8 60 d1 ed 17 e9 ba 79 d8 b5 c8 f6 0b b6 4b de 99 16 7e e3 4f 50 e4 49 44 e6 89 6c 6e 72 59 b5 84 f9 24 68 91 c8 73 cd 74 62 89 0c 0b fb c4 cc ee 64 da 2d f2 2c 22 7e 7f fb 3e d8 de e4 13 77 85 1a de 11 6d dc 2d b2 36 58 8c 75 e1 19 d9 83 d3 b1 3f 8b bb 6d a1 66 73 3a c9 5e a6 11 2b d6 12 59 0d 37 66 e1 cf 73 76 25 41 6c 91 d4 8a b5 f2 Data Ascii: IS3"tgW9GP#uDtnIDsjn-1Ny"}4m5Hg"^$xYIg}JdnVIBNu(g/-*qVhcqEb`yK~OPIDlnrY$hstbd-,"~>wm-6Xu?mfs:^+Y7fsv%Al

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49788	172.217.193.156	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:54 UTC	856	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-24371500-1&cid=1930088754.1714142446&jid=1950879201&gjid=1889180982&_gid=1893265479.1714142446&_u=aGDAgEAjAAAAAGAAI~&z=1341193366 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://runrun.it X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:55 UTC	587	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://runrun.it Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 26 Apr 2024 14:40:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:55 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49796	192.178.50.68	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:58 UTC	809	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-24371500-1&cid=1930088754.1714142446&jid=619370535&_u=IEBAAEAAAAAAACAAI~&z=221968100 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:58 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 14:40:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49799	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:58 UTC	1371	OUT	GET /static/images/home/index/header-particles.svg HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1
2024-04-26 14:40:58 UTC	397	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:58 GMT Content-Type: image/svg+xml Content-Length: 2010 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:58 UTC	858	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 39 39 22 20 68 65 69 67 68 74 3d 22 34 32 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 39 20 34 32 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 39 30 20 34 31 33 2e 35 56 33 39 31 22 20 73 74 72 6f 6b 65 3d 22 23 42 38 45 30 42 30 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 38 32 20 34 30 36 2e 35 4c 33 39 30 20 34 31 34 2e 35 4c 33 39 38 20 34 30 36 2e 35 22 20 73 74 72 6f 6b 65 3d 22 23 42 38 45 30 42 30 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d Data Ascii: <svg width="399" height="425" viewBox="0 0 399 425" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M390 413.5V391" stroke="#B8E0B0" stroke-width="2" stroke-linecap="round"/><path d="M382 406.5L390 414.5L398 406.5" stroke="#B8E0B0" stroke-width=
2024-04-26 14:40:58 UTC	1152	IN	Data Raw: 32 30 38 2e 34 30 39 43 31 38 39 2e 35 32 34 20 32 30 39 2e 35 30 31 20 31 39 34 2e 33 30 39 20 32 30 36 2e 35 34 20 31 39 35 2e 34 30 39 20 32 30 31 2e 37 37 37 43 31 39 36 2e 35 20 31 39 37 2e 30 34 39 20 31 39 33 2e 35 30 35 20 31 39 32 2e 32 35 36 20 31 38 38 2e 37 37 37 20 31 39 31 2e 31 36 34 5a 4d 31 38 38 2e 33 39 32 20 31 39 32 2e 38 33 33 43 31 39 32 2e 32 31 36 20 31 39 33 2e 37 31 36 20 31 39 34 2e 36 32 33 20 31 39 37 2e 35 36 37 20 31 39 33 2e 37 34 20 32 30 31 2e 33 39 32 43 31 39 32 2e 38 34 39 20 32 30 35 2e 32 35 31 20 31 38 39 2e 30 30 36 20 32 30 37 2e 36 32 33 20 31 38 35 2e 31 38 31 20 32 30 36 2e 37 34 43 31 38 31 2e 33 32 32 20 32 30 35 2e 38 34 39 20 31 37 38 2e 39 34 32 20 32 30 32 2e 30 34 31 20 31 37 39 2e 38 33 33 20 31 39 38 Data Ascii: 208.409C189.524 209.501 194.309 206.54 195.409 201.777C196.5 197.049 193.505 192.256 188.777 191.164ZM188.392 192.833C192.216 193.716 194.623 197.567 193.74 201.392C192.849 205.251 189.006 207.623 185.181 206.74C181.322 205.849 178.942 202.041 179.833 198

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49797	130.211.5.208	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:58 UTC	535	OUT	GET /libs/mixpanel-2-latest.min.js HTTP/1.1 Host: cdn.mxpnl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:58 UTC	879	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:40:58 GMT Cache-Control: public,max-age=600 Expires: Fri, 26 Apr 2024 14:50:58 GMT Last-Modified: Tue, 06 Feb 2024 00:09:36 GMT ETag: W/"eb0675a8749ea5d76345796217db928f" Vary: Accept-Encoding x-goog-generation: 1707178176338436 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 18490 Content-Type: text/javascript x-goog-hash: crc32c=fWmQwA== x-goog-hash: md5=6wZ1qHSepddjRXliF9uSjw== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: ABPtcPrsvpnaoOrdKSm916a8NUDzYB1L-9uTmw-u3NdxZNSVEtTuqSHny1cbUpfX2oLyA_v96w3PdwCu4w Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-26 14:40:58 UTC	376	IN	Data Raw: 61 37 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 76 61 72 20 6c 3d 76 6f 69 64 20 30 2c 6d 3d 21 30 2c 71 3d 6e 75 6c 6c 2c 44 3d 21 31 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 41 61 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 69 66 28 21 61 2e 41 63 29 6c 61 3d 61 2e 41 63 3d 6d 2c 6d 61 3d 44 2c 63 2e 61 28 46 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6e 63 28 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 72 79 7b 77 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c 65 66 74 22 29 7d 63 61 74 63 68 28 64 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 31 29 3b 72 65 74 75 72 6e 7d 61 28 29 7d 69 66 28 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 22 63 6f 6d 70 Data Ascii: a78(function() {var l=void 0,m=!0,q=null,D=!1;(function(){function Aa(){function a(){if(!a.Ac)la=a.Ac=m,ma=D,c.a(F,function(a){a.nc()})}function b(){try{w.documentElement.doScroll("left")}catch(d){setTimeout(b,1);return}a()}if(w.addEventListener)"comp
2024-04-26 14:40:58 UTC	1255	IN	Data Raw: 6e 67 65 22 2c 61 29 3b 76 61 72 20 64 3d 44 3b 74 72 79 7b 64 3d 6f 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3d 3d 3d 71 7d 63 61 74 63 68 28 66 29 7b 7d 77 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 26 26 64 26 26 62 28 29 7d 63 2e 52 62 28 6f 2c 22 6c 6f 61 64 22 2c 61 2c 6d 29 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 29 7b 79 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 64 29 72 65 74 75 72 6e 20 79 5b 64 5d 7c 7c 28 79 5b 64 5d 3d 46 5b 64 5d 3d 53 28 61 2c 0a 62 2c 64 29 2c 79 5b 64 5d 2e 6a 61 28 29 29 2c 79 5b 64 5d 3b 64 3d 79 3b 69 66 28 46 2e 6d 69 78 70 61 6e 65 6c 29 64 3d 46 2e 6d 69 78 70 61 6e 65 6c 3b 65 6c 73 65 20 69 66 28 61 29 64 3d 53 28 61 2c 62 2c 22 6d 69 78 70 61 6e 65 6c Data Ascii: nge",a);var d=D;try{d=o.frameElement===q}catch(f){}w.documentElement.doScroll&&d&&b()}c.Rb(o,"load",a,m)}function Ba(){y.init=function(a,b,d){if(d)return y[d]\|\|(y[d]=F[d]=S(a,b,d),y[d].ja()),y[d];d=y;if(F.mixpanel)d=F.mixpanel;else if(a)d=S(a,b,"mixpanel
2024-04-26 14:40:58 UTC	1056	IN	Data Raw: 73 2e 6c 6f 61 64 28 29 3b 74 68 69 73 2e 68 63 28 61 29 3b 74 68 69 73 2e 73 64 28 61 29 3b 74 68 69 73 2e 73 61 76 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 62 29 7b 74 68 69 73 2e 49 3d 62 2e 49 3b 74 68 69 73 2e 61 61 3d 6e 65 77 20 47 28 61 2c 7b 49 3a 63 2e 62 69 6e 64 28 74 68 69 73 2e 68 2c 74 68 69 73 29 2c 69 3a 62 2e 69 7d 29 3b 74 68 69 73 2e 41 3d 62 2e 41 3b 74 68 69 73 2e 57 63 3d 62 2e 58 63 3b 74 68 69 73 2e 6b 61 3d 62 2e 6b 61 3b 74 68 69 73 2e 66 64 3d 62 2e 67 64 3b 74 68 69 73 2e 43 3d 74 68 69 73 2e 41 2e 62 61 74 63 68 5f 73 69 7a 65 3b 74 68 69 73 2e 6f 61 3d 74 68 69 73 2e 41 2e 62 61 74 63 68 5f 66 6c 75 73 68 5f 69 6e 74 65 72 76 61 6c Data Ascii: s.load();this.hc(a);this.sd(a);this.save()}function j(){}function v(){}function C(a,b){this.I=b.I;this.aa=new G(a,{I:c.bind(this.h,this),i:b.i});this.A=b.A;this.Wc=b.Xc;this.ka=b.ka;this.fd=b.gd;this.C=this.A.batch_size;this.oa=this.A.batch_flush_interval
2024-04-26 14:40:58 UTC	1255	IN	Data Raw: 31 30 30 30 0d 0a 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 73 75 62 73 74 72 69 6e 67 28 32 2c 31 30 29 3b 72 65 74 75 72 6e 20 61 3f 62 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 29 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 55 28 61 2c 62 29 7b 69 66 28 66 61 21 3d 3d 71 26 26 21 62 29 72 65 74 75 72 6e 20 66 61 3b 76 61 72 20 64 3d 6d 3b 74 72 79 7b 76 61 72 20 61 3d 61 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2c 63 3d 22 5f 5f 6d 70 6c 73 73 5f 22 2b 65 61 28 38 29 3b 61 2e 73 65 74 49 74 65 6d 28 63 2c 22 78 79 7a 22 29 3b 22 78 79 7a 22 21 3d 3d 61 2e 67 65 74 49 74 65 6d 28 63 29 26 26 28 64 3d 44 29 3b 61 2e 72 65 6d 6f 76 65 49 74 65 6d 28 63 29 7d 63 61 74 63 68 28 68 29 7b 64 3d 44 7d 72 65 74 75 72 6e 20 66 61 3d 64 7d 66 75 6e 63 Data Ascii: 1000toString(36).substring(2,10);return a?b.substring(0,a):b}function U(a,b){if(fa!==q&&!b)return fa;var d=m;try{var a=a\|\|window.localStorage,c="__mplss_"+ea(8);a.setItem(c,"xyz");"xyz"!==a.getItem(c)&&(d=D);a.removeItem(c)}catch(h){d=D}return fa=d}func
2024-04-26 14:40:58 UTC	1255	IN	Data Raw: 7b 7d 3b 72 65 74 75 72 6e 28 62 2e 4e 62 7c 7c 4d 61 29 2b 61 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 29 7b 69 66 28 61 26 26 61 2e 44 62 29 72 65 74 75 72 6e 20 44 3b 76 61 72 20 61 3d 61 26 26 61 2e 77 69 6e 64 6f 77 7c 7c 6f 2c 62 3d 61 2e 6e 61 76 69 67 61 74 6f 72 7c 7c 7b 7d 2c 64 3d 44 3b 63 2e 61 28 5b 62 2e 64 6f 4e 6f 74 54 72 61 63 6b 2c 62 2e 6d 73 44 6f 4e 6f 74 54 72 61 63 6b 2c 61 2e 64 6f 4e 6f 74 54 72 61 63 6b 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 2e 6a 28 5b 6d 2c 31 2c 22 31 22 2c 22 79 65 73 22 5d 2c 0a 61 29 26 26 28 64 3d 6d 29 7d 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 2c 62 2c 64 29 7b 21 63 2e 56 61 28 62 29 7c 7c 21 62 2e 6c 65 6e 67 74 68 3f 73 2e 65 72 72 6f 72 28 22 67 64 70 72 2e 22 Data Ascii: {};return(b.Nb\|\|Ma)+a}function Ka(a){if(a&&a.Db)return D;var a=a&&a.window\|\|o,b=a.navigator\|\|{},d=D;c.a([b.doNotTrack,b.msDoNotTrack,a.doNotTrack],function(a){c.j([m,1,"1","yes"],a)&&(d=m)});return d}function sa(a,b,d){!c.Va(b)\|\|!b.length?s.error("gdpr."
2024-04-26 14:40:58 UTC	1255	IN	Data Raw: 72 45 61 63 68 2c 77 61 3d 42 2e 69 6e 64 65 78 4f 66 2c 78 61 3d 42 2e 6d 61 70 2c 42 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 6b 61 3d 7b 7d 2c 63 3d 7b 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 22 22 29 7d 7d 2c 73 3d 7b 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 4a 26 26 21 63 2e 67 28 7a 29 26 26 7a 29 74 72 79 7b 7a 2e 6c 6f 67 2e 61 70 70 6c 79 28 7a 2c 61 72 67 75 6d 65 6e 74 73 29 7d 63 61 74 63 68 28 61 29 7b 63 2e 61 28 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 7a 2e 6c 6f 67 28 61 29 7d 29 7d 7d 2c 77 61 72 6e 3a 66 75 6e 63 74 69 6f 6e Data Ascii: rEach,wa=B.indexOf,xa=B.map,B=Array.isArray,ka={},c={trim:function(a){return a.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")}},s={log:function(){if(J&&!c.g(z)&&z)try{z.log.apply(z,arguments)}catch(a){c.a(arguments,function(a){z.log(a)})}},warn:function
2024-04-26 14:40:58 UTC	339	IN	Data Raw: 6c 28 64 2c 61 5b 63 5d 2c 63 2c 61 29 3d 3d 3d 6b 61 29 62 72 65 61 6b 7d 3b 63 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 2e 61 28 4b 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 62 29 62 5b 64 5d 21 3d 3d 6c 26 26 28 61 5b 64 5d 3d 62 5b 64 5d 29 7d 29 3b 72 65 74 75 72 6e 20 61 7d 3b 63 2e 69 73 41 72 72 61 79 3d 42 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 51 2e 63 61 6c 6c 28 61 29 7d 3b 63 2e 55 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 72 65 74 75 72 6e 2f 5e 5c 73 2a 5c 62 66 75 6e 63 74 69 6f 6e 5c 62 2f 2e 74 65 73 74 28 61 29 7d 63 61 74 63 68 28 62 29 Data Ascii: l(d,a[c],c,a)===ka)break};c.extend=function(a){c.a(K.call(arguments,1),function(b){for(var d in b)b[d]!==l&&(a[d]=b[d])});return a};c.isArray=B\|\|function(a){return"[object Array]"===Q.call(a)};c.Ua=function(a){try{return/^\s*\bfunction\b/.test(a)}catch(b)
2024-04-26 14:40:58 UTC	1255	IN	Data Raw: 35 30 30 30 0d 0a 74 75 72 6e 21 61 3f 5b 5d 3a 61 2e 4e 3f 61 2e 4e 28 29 3a 63 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 63 2e 49 63 28 61 29 3f 4b 2e 63 61 6c 6c 28 61 29 3a 63 2e 75 64 28 61 29 7d 3b 63 2e 6d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 78 61 26 26 61 2e 6d 61 70 3d 3d 3d 78 61 29 72 65 74 75 72 6e 20 61 2e 6d 61 70 28 62 2c 64 29 3b 76 61 72 20 66 3d 5b 5d 3b 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 70 75 73 68 28 62 2e 63 61 6c 6c 28 64 2c 61 29 29 7d 29 3b 72 65 74 75 72 6e 20 66 7d 3b 63 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 69 66 28 61 3d 3d 3d 71 29 72 65 74 75 72 6e 20 62 3b 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 62 5b 62 2e 6c Data Ascii: 5000turn!a?[]:a.N?a.N():c.isArray(a)\|\|c.Ic(a)?K.call(a):c.ud(a)};c.map=function(a,b,d){if(xa&&a.map===xa)return a.map(b,d);var f=[];c.a(a,function(a){f.push(b.call(d,a))});return f};c.keys=function(a){var b=[];if(a===q)return b;c.a(a,function(a,c){b[b.l
2024-04-26 14:40:58 UTC	1255	IN	Data Raw: 4d 6f 6e 74 68 28 29 2b 31 29 2b 22 2d 22 2b 62 28 61 2e 67 65 74 55 54 43 44 61 74 65 28 29 29 2b 22 54 22 2b 62 28 61 2e 67 65 74 55 54 43 48 6f 75 72 73 28 29 29 2b 22 3a 22 2b 62 28 61 2e 67 65 74 55 54 43 4d 69 6e 75 74 65 73 28 29 29 2b 22 3a 22 2b 62 28 61 2e 67 65 74 55 54 43 53 65 63 6f 6e 64 73 28 29 29 7d 3b 63 2e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 7d 3b 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 66 29 7b 63 2e 56 61 28 61 29 26 26 30 3c 61 2e 6c 65 6e 67 74 68 26 26 28 62 5b 66 5d 3d 61 29 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 63 2e 74 72 75 6e 63 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 0a 62 29 7b 76 61 72 20 64 3b 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 64 3d 61 2e 73 6c 69 63 Data Ascii: Month()+1)+"-"+b(a.getUTCDate())+"T"+b(a.getUTCHours())+":"+b(a.getUTCMinutes())+":"+b(a.getUTCSeconds())};c.ea=function(a){var b={};c.a(a,function(a,f){c.Va(a)&&0<a.length&&(b[f]=a)});return b};c.truncate=function(a,b){var d;"string"===typeof a?d=a.slic
2024-04-26 14:40:58 UTC	1255	IN	Data Raw: 27 2c 22 5c 5c 22 3a 22 5c 5c 5c 5c 22 7d 3b 62 2e 6c 61 73 74 49 6e 64 65 78 3d 30 3b 72 65 74 75 72 6e 20 62 2e 74 65 73 74 28 61 29 3f 27 22 27 2b 61 2e 72 65 70 6c 61 63 65 28 62 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 64 5b 61 5d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 62 3f 62 3a 22 5c 5c 75 22 2b 28 22 30 30 30 30 22 2b 61 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 34 29 7d 29 2b 27 22 27 3a 27 22 27 2b 61 2b 27 22 27 7d 72 65 74 75 72 6e 20 62 28 22 22 2c 7b 22 22 3a 61 7d 29 7d 7d 28 29 3b 63 2e 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 22 74 22 3a 72 Data Ascii: ',"\\":"\\\\"};b.lastIndex=0;return b.test(a)?'"'+a.replace(b,function(a){var b=d[a];return"string"===typeof b?b:"\\u"+("0000"+a.charCodeAt(0).toString(16)).slice(-4)})+'"':'"'+a+'"'}return b("",{"":a})}}();c.R=function(){function a(){switch(i){case "t":r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49790	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:58 UTC	1361	OUT	GET /static/images/home/clients/Omie.png HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1
2024-04-26 14:40:58 UTC	369	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:58 GMT Content-Type: image/png Content-Length: 606 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:58 UTC	606	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6d 00 00 00 20 04 03 00 00 00 ea 10 eb d7 00 00 00 18 50 4c 54 45 2d e7 f6 02 e2 f4 ff ff ff 65 ed f8 d4 fa fd ec fd fe ba f7 fc 91 f2 fa 05 f7 2a 89 00 00 02 01 49 44 41 54 38 cb 9d 95 4b 73 e2 30 0c 80 ed d2 c2 d5 9a b6 9b 2b 23 92 70 25 78 ba e7 0d bb 33 5c 29 cc 6c af 25 3d ec b5 a1 af bf bf 7a 25 01 a6 64 18 7c 88 b0 ad 4f 96 2c c9 38 3c 67 14 10 d6 07 0b 63 77 16 e7 01 aa cb b8 b0 b8 88 0b 0f 78 11 77 84 9d cb fd c1 cb 38 fc 9e a3 3b 5e 7e 69 e0 19 7f 96 31 fe a4 b5 ec 5f 1c 7c 9a 62 a6 22 7d 9b c5 f7 86 5b cd f1 17 40 d8 f1 46 39 44 9e 00 8c 30 9d b1 1c 8a 7e ee c5 ec 93 b7 25 e6 72 bf cb 79 2a a9 2d 61 38 05 19 f3 5a e5 4e 30 c9 5f ee 75 e9 41 b8 1a 16 a5 4c af 85 03 db 0c 2a e0 87 d4 8b 70 Data Ascii: PNGIHDRm PLTE-eIDAT8Ks0+#p%x3\)l%=z%d\|O,8<gcwxw8;^~i1_\|b"}[@F9D0~%ry-a8ZN0_uAL*p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49792	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:58 UTC	1363	OUT	GET /static/images/home/clients/Natura.png HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1
2024-04-26 14:40:58 UTC	370	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:58 GMT Content-Type: image/png Content-Length: 3012 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:58 UTC	885	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 80 08 03 00 00 00 79 8d d6 ad 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 b4 50 4c 54 45 47 70 4c ff 63 03 ff bc 00 ff b5 02 ff db c3 ff db c1 ff 68 04 ff bf 00 ff 6c 0d ff 6a 08 ff 9d 05 ff a4 04 ff c5 97 ff ad 01 ff d3 b0 ff c2 92 ff 6e 11 ff 75 21 ff 7a 05 ff 75 21 ff 7c 2d ff 60 01 ff 9c 65 ff b9 20 ff ba 67 ff 96 3b ff 6a 0a ff 8b 4a ff 9f 46 ff 94 5d ff 75 1c ff 79 29 ff be 13 ff 6e 10 ff 93 58 ff 8a 45 ff 64 08 ff 9a 6a ff 68 0b ff 86 02 ff 84 28 ff bb 11 ff c4 47 ff 94 04 ff c0 21 ff 74 1d ff 7a 24 ff bf 26 ff bb 0a ff 63 07 ff c0 2f ff c1 3a ff 84 29 ff 9d 19 ff 9d 0c ff cb 7d ff 9a 24 ff 92 58 ff ae 82 ff 9a 1f 91 6d d1 78 00 Data Ascii: PNGIHDRygAMAasRGBPLTEGpLchljnu!zu!\|-`e g;jJF]uy)nXEdjh(G!tz$&c/:)}$Xmx
2024-04-26 14:40:58 UTC	1255	IN	Data Raw: ca ab 25 35 73 d6 66 4e 28 88 e8 45 9d b9 5a ad 9f 9f 9f d7 ab ad 70 b7 ac 71 56 57 00 87 87 9a b0 ee be f6 42 45 13 f6 8b 77 04 e2 e5 99 ca 2f ed 0e 24 59 98 a8 6d 99 a4 b7 fb 48 11 d6 58 96 e0 51 8e 67 58 7c 50 75 ed b9 24 bf 7e 6d d1 1d 86 24 cb ab ea 5a 5e 64 18 ed b6 27 d6 f5 00 e5 98 4f 18 71 19 15 08 04 02 e4 1e 43 a2 87 e7 32 10 06 47 59 a0 68 d7 94 4e 78 fb 42 2d 49 db 2c 23 a2 7e 99 82 c8 4a bf 83 bf 2f e8 f4 14 19 b5 cb 72 74 5e 9a 6f ea 2a 99 6c 0c 56 da 9a 1a 53 45 7e df 05 24 8b 25 e1 b4 6e 3d 4b f7 00 a4 6e ad 3a 58 17 0e 41 31 d6 da 57 9a 7e ad 80 82 c8 5d 40 18 e9 6c 7a 4b 48 16 9a b6 a8 31 78 f1 ab 8a 31 5b c2 d6 0f b2 b6 80 f1 fb 5d bb 4b 2c 61 a6 d4 a7 bd da 54 03 0b b5 9b 53 30 4d 51 2b 82 ff 7f 6b ba 8a f6 e0 1a 25 d9 de 67 1d 95 04 Data Ascii: %5sfN(EZpqVWBEw/$YmHXQgX\|Pu$~m$Z^d'OqC2GYhNxB-I,#~J/rt^o*lVSE~$%n=Kn:XA1W~]@lzKH1x1[]K,aTS0MQ+k%g
2024-04-26 14:40:58 UTC	872	IN	Data Raw: e3 8f 8f 0f da 80 14 0f 39 ee ad 1f 48 f6 a4 0f cd 3a df 4b db 04 c5 24 5d 9a 1f 49 40 93 37 9e 34 56 bc 12 c3 67 73 bf 5c 88 03 97 ef 70 8e 54 06 e1 15 a2 57 62 5d 02 22 ba f0 ea 54 40 f4 38 08 63 2b 2c e9 96 09 ce 9a 71 c8 3d f7 3b 24 62 7f d8 e9 98 71 e1 17 28 20 9f 79 c7 ca 3f c9 44 f5 81 58 dc 24 ba f3 0e ae 9f b5 fe 17 48 9f fc cd 17 2d d9 8e 79 68 87 61 2c e8 40 f7 1b d6 35 82 fd 24 b9 74 a6 0d 2b b0 66 98 66 6d db 84 83 e7 0f de af f6 41 d9 fe 55 20 82 0c 3d 94 ab 2a c6 60 08 87 b3 10 a4 cb a0 43 af 5e f0 16 62 b0 f3 ca 31 5c 1d 86 a4 1b 50 bd 07 a0 aa 5f 76 28 85 3f 70 ff 19 c8 27 d1 9c fb c8 1d ec 83 7c e2 df ca 3f 6f 24 43 d2 31 93 6b 41 c0 56 3a c3 ca 21 11 f4 0a 93 2a 6d 71 02 6a 98 e5 5d 4c fc 01 7e e1 5c 03 02 8a ca c1 fe ba 04 1d 32 ac fc Data Ascii: 9H:K$]I@74Vgs\pTWb]"T@8c+,q=;$bq( y?DX$H-yha,@5$t+ffmAU =`C^b1\P_v(?p'\|?o$C1kAV:!mqj]L~\2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49791	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:58 UTC	1363	OUT	GET /static/images/home/clients/Unimed.png HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1
2024-04-26 14:40:58 UTC	369	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:58 GMT Content-Type: image/png Content-Length: 823 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:58 UTC	823	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 9b 00 00 00 23 04 03 00 00 00 71 d6 65 a7 00 00 00 21 50 4c 54 45 00 90 4e 02 96 58 ff ff ff 1e a0 66 66 bd 95 dd f0 e7 ef f8 f4 c4 e5 d6 42 ad 7c 8b cd ae ab da c4 e0 fa 47 a7 00 00 02 d1 49 44 41 54 48 c7 ed 96 cd 4f 13 41 18 c6 df 49 9b d0 f6 34 6f 36 c6 8f 93 19 bb db 96 d3 e2 e2 86 63 53 16 ad 37 69 05 12 6e b6 b8 d1 1b 16 a5 ca a9 0a 26 7a 43 2e 52 4e b0 7e 45 fe 4a 9f 99 6d 77 4b a1 84 20 31 1e 98 64 d3 d9 d9 99 df 3c f3 ce 33 6f 87 d4 55 96 bb 74 d9 91 a5 d6 95 e2 ca 8d 6b dc 3f c0 d9 4b 4b cb 93 41 f8 da 48 70 a5 20 08 be 07 c1 c2 79 b8 26 5b 85 c9 b8 57 cc 37 13 5c 93 44 b6 4d 22 97 e0 9c df fd 7e a4 a6 0f fa 5f 53 9c e0 73 70 eb cc 53 09 ae c7 d2 b7 67 58 d6 12 9c 4b e4 ab 36 51 36 19 d0 Data Ascii: PNGIHDR#qe!PLTENXffB\|GIDATHOAI4o6cS7in&zC.RN~EJmwK 1d<3oUtk?KKAHp y&[W7\DM"~_SspSgXK6Q6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49794	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:58 UTC	1361	OUT	GET /static/images/home/clients/Avon.png HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1
2024-04-26 14:40:58 UTC	369	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:58 GMT Content-Type: image/png Content-Length: 870 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:58 UTC	870	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b2 00 00 00 24 08 03 00 00 00 1a 6b 90 04 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 33 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 41 2e 2a 00 00 00 10 74 52 4e 53 00 47 14 b8 5b e2 07 c7 f3 21 a8 35 97 7c 8a 6f 24 aa b3 d7 00 00 02 b5 49 44 41 54 58 c3 ed 98 d9 92 e3 20 0c 45 cd be d9 98 ff ff da 89 59 0c 92 48 57 77 99 9a 27 eb 2d 04 3b 87 1b e9 22 d8 b6 37 de 78 e3 d7 a1 5d 60 c1 f1 ff fe bb de 18 07 38 3e 03 26 62 0e bd 7f 46 bd 1e 87 82 57 e9 0a 6b 4e 42 cd c8 6c 1d 3f 43 6b 88 e5 e7 47 77 30 72 64 8e 00 c6 42 a6 3b 00 Data Ascii: PNGIHDR$kgAMAasRGB3PLTEGpLA.*tRNSG[!5\|o$IDATX EYHWw'-;"7x]`8>&bFWkNBl?CkGw0rdB;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49793	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:58 UTC	1360	OUT	GET /static/images/home/clients/FGV.png HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1
2024-04-26 14:40:58 UTC	370	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:58 GMT Content-Type: image/png Content-Length: 1358 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:58 UTC	885	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 48 00 00 00 80 08 03 00 00 00 5e 06 00 6c 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 33 50 4c 54 45 47 70 4c 02 3a 78 01 3a 78 01 3a 78 01 39 77 01 39 78 00 41 80 01 3a 78 02 4b 88 01 39 77 06 92 d3 06 91 d3 06 91 d3 07 91 d3 06 91 d3 02 3a 78 07 91 d3 34 50 4f 78 00 00 00 0f 74 52 4e 53 00 85 ed a7 6c c2 31 d6 15 4a bf e1 7a 53 a5 13 2d 66 7f 00 00 04 9e 49 44 41 54 78 da ed 9c db 76 db 20 10 45 b9 5f 62 3b e9 ff 7f 6d 9d 26 4d 23 04 62 06 06 9a 87 b3 d7 ca 93 65 01 5b c0 0c 20 47 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 4e ca da da f8 8e b7 da 85 b4 b9 78 eb 49 58 e6 6d ef 2f 14 5e bf b7 36 Data Ascii: PNGIHDRH^lgAMAasRGB3PLTEGpL:x:x:x9w9xA:xK9w:x4POxtRNSl1JzS-fIDATxv E_b;m&M#be[ G) NxIXm/^6
2024-04-26 14:40:58 UTC	473	IN	Data Raw: 16 13 49 dd 53 33 cd 22 ff ae 74 c8 1e 67 82 0d 57 e4 39 e8 47 f9 50 23 75 44 fb 11 74 6e 49 ad 10 a9 cc 44 fa 73 6a 9d e5 6e e1 2d 31 99 ae 4e 1e 18 1e 79 22 7d ab e5 34 91 c7 1e 6d 8a b7 35 82 a8 48 15 67 d2 c9 cf f1 9d d4 22 91 ba b5 d1 ed be 5e 24 bb 9c cc 8f e6 8e af 19 78 59 8f b3 49 d0 9a 00 67 e8 e7 7d f6 4a 64 11 6e 56 85 1a 9e 49 bd 42 a4 4e 75 28 67 2f 04 91 17 e3 2d 2a 71 56 bc f1 b7 68 63 d7 71 45 ea d5 fd 62 e8 60 d1 ed 17 e9 ba 79 d8 b5 c8 f6 0b b6 4b de 99 16 7e e3 4f 50 e4 49 44 e6 89 6c 6e 72 59 b5 84 f9 24 68 91 c8 73 cd 74 62 89 0c 0b fb c4 cc ee 64 da 2d f2 2c 22 7e 7f fb 3e d8 de e4 13 77 85 1a de 11 6d dc 2d b2 36 58 8c 75 e1 19 d9 83 d3 b1 3f 8b bb 6d a1 66 73 3a c9 5e a6 11 2b d6 12 59 0d 37 66 e1 cf 73 76 25 41 6c 91 d4 8a b5 f2 Data Ascii: IS3"tgW9GP#uDtnIDsjn-1Ny"}4m5Hg"^$xYIg}JdnVIBNu(g/-*qVhcqEb`yK~OPIDlnrY$hstbd-,"~>wm-6Xu?mfs:^+Y7fsv%Al

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49800	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:58 UTC	1677	OUT	GET /static/images/home/index/repeat-particles.svg HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1
2024-04-26 14:40:59 UTC	397	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:59 GMT Content-Type: image/svg+xml Content-Length: 1153 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:59 UTC	858	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 32 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 32 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 30 38 33 38 20 31 2e 31 33 32 37 34 43 33 2e 34 30 38 34 38 20 32 2e 38 36 33 33 20 2d 30 2e 35 38 35 32 32 39 20 39 2e 37 32 32 36 35 20 31 2e 31 33 32 37 31 20 31 36 2e 33 34 39 33 43 32 2e 38 36 33 32 37 20 32 33 2e 30 32 34 36 20 39 2e 36 37 33 38 39 20 32 37 2e 30 33 30 39 20 31 36 2e 33 34 39 32 20 32 35 2e 33 30 30 34 43 32 32 2e 39 37 35 38 20 32 33 2e 35 38 32 34 20 32 37 2e 30 33 30 39 20 31 36 2e 37 35 39 32 20 32 35 2e 33 Data Ascii: <svg width="26" height="26" viewBox="0 0 26 26" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M10.0838 1.13274C3.40848 2.8633 -0.585229 9.72265 1.13271 16.3493C2.86327 23.0246 9.67389 27.0309 16.3492 25.3004C22.9758 23.5824 27.0309 16.7592 25.3
2024-04-26 14:40:59 UTC	295	IN	Data Raw: 2e 31 36 36 34 20 38 2e 30 38 36 30 35 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 31 37 33 5f 31 30 38 34 32 29 22 2f 3e 0a 3c 64 65 66 73 3e 0a 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 31 37 33 5f 31 30 38 34 32 22 20 78 31 3d 22 2d 31 2e 31 37 30 32 33 22 20 79 31 3d 22 37 2e 31 33 37 34 33 22 20 78 32 3d 22 32 32 2e 39 32 31 34 22 20 79 32 3d 22 30 2e 38 39 31 31 37 33 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 0a 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 35 30 42 38 34 30 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 30 38 Data Ascii: .1664 8.08605Z" fill="url(#paint0_linear_173_10842)"/><defs><linearGradient id="paint0_linear_173_10842" x1="-1.17023" y1="7.13743" x2="22.9214" y2="0.891173" gradientUnits="userSpaceOnUse"><stop stop-color="#50B840"/><stop offset="1" stop-color="#108

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49804	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:58 UTC	1627	OUT	GET /packs/media/apple_app_store-QGBLJ5LR.svg HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/packs/css/home_app-J7HUCVVO.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1
2024-04-26 14:40:59 UTC	397	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:59 GMT Content-Type: image/svg+xml Content-Length: 5774 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:59 UTC	858	IN	Data Raw: 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 31 32 37 20 33 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 37 20 33 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 6d 61 73 6b 20 69 64 3d 22 61 22 20 68 65 69 67 68 74 3d 22 33 36 2e 39 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 77 69 64 74 68 3d 22 31 32 36 22 20 78 3d 22 30 22 20 79 3d 22 30 22 3e 3c 70 61 74 68 20 64 3d 22 6d 2e 31 20 33 36 2e 39 76 2d 33 36 2e 39 68 31 32 35 2e 39 76 33 36 2e 39 7a 22 20 66 Data Ascii: <svg enable-background="new 0 0 127 38" viewBox="0 0 127 38" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><mask id="a" height="36.9" maskUnits="userSpaceOnUse" width="126" x="0" y="0"><path d="m.1 36.9v-36.9h125.9v36.9z" f
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 31 2e 36 2d 33 2e 33 20 31 2e 37 2d 33 2e 33 2e 31 2e 31 2d 33 2d 31 2e 31 2d 33 2e 31 2d 34 2e 37 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 32 35 2e 31 20 39 2e 35 63 2e 38 2d 31 20 31 2e 34 2d 32 2e 34 20 31 2e 32 2d 33 2e 38 2d 31 2e 32 2e 31 2d 32 2e 37 2e 38 2d 33 2e 35 20 31 2e 38 2d 2e 38 2e 39 2d 31 2e 34 20 32 2e 33 2d 31 2e 33 20 33 2e 36 20 31 2e 34 2e 31 20 32 2e 38 2d 2e 36 20 33 2e 36 2d 31 2e 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 34 36 2e 34 20 32 33 2e 39 2d 31 2e 31 2d 33 2e 32 63 2d 2e 31 2d 2e 33 2d 2e 33 2d 31 2e 31 2d 2e 36 2d 32 2e 33 2d 2e 31 2e 35 2d 2e 33 20 31 2e 33 2d 2e 36 20 32 2e 33 6c 2d 31 20 33 2e 32 7a 6d 33 2e 37 20 35 2e 31 68 2d 32 2e 31 6c 2d 31 2e 32 2d 33 2e 36 68 2d 34 6c 2d 31 2e 31 20 33 2e 36 68 2d 32 2e 31 6c Data Ascii: 1.6-3.3 1.7-3.3.1.1-3-1.1-3.1-4.7"/><path d="m25.1 9.5c.8-1 1.4-2.4 1.2-3.8-1.2.1-2.7.8-3.5 1.8-.8.9-1.4 2.3-1.3 3.6 1.4.1 2.8-.6 3.6-1.6"/><path d="m46.4 23.9-1.1-3.2c-.1-.3-.3-1.1-.6-2.3-.1.5-.3 1.3-.6 2.3l-1 3.2zm3.7 5.1h-2.1l-1.2-3.6h-4l-1.1 3.6h-2.1l
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 2e 39 2e 36 20 31 2e 32 2e 33 2e 33 2e 39 2e 36 20 31 2e 38 2e 39 20 31 2e 31 2e 34 20 31 2e 39 2e 39 20 32 2e 34 20 31 2e 35 2e 34 2e 36 2e 37 20 31 2e 33 2e 37 20 32 2e 32 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 38 38 2e 38 20 32 31 2e 37 68 2d 32 2e 32 76 34 2e 33 63 30 20 31 2e 31 2e 34 20 31 2e 36 20 31 2e 32 20 31 2e 36 2e 34 20 30 20 2e 37 20 30 20 2e 39 2d 2e 31 6c 2e 31 20 31 2e 35 63 2d 2e 34 2e 31 2d 2e 39 2e 32 2d 31 2e 35 2e 32 2d 2e 38 20 30 2d 31 2e 34 2d 2e 32 2d 31 2e 38 2d 2e 37 73 2d 2e 37 2d 31 2e 33 2d 2e 37 2d 32 2e 34 76 2d 34 2e 35 68 2d 31 2e 33 76 2d 31 2e 35 68 31 2e 33 76 2d 31 2e 36 6c 32 2d 2e 36 76 32 2e 32 68 32 2e 32 76 31 2e 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 39 36 2e 36 20 32 34 2e 36 63 30 2d 2e 38 2d 2e 32 2d 31 Data Ascii: .9.6 1.2.3.3.9.6 1.8.9 1.1.4 1.9.9 2.4 1.5.4.6.7 1.3.7 2.2"/><path d="m88.8 21.7h-2.2v4.3c0 1.1.4 1.6 1.2 1.6.4 0 .7 0 .9-.1l.1 1.5c-.4.1-.9.2-1.5.2-.8 0-1.4-.2-1.8-.7s-.7-1.3-.7-2.4v-4.5h-1.3v-1.5h1.3v-1.6l2-.6v2.2h2.2v1.6"/><path d="m96.6 24.6c0-.8-.2-1
2024-04-26 14:40:59 UTC	400	IN	Data Raw: 34 2d 2e 31 2d 2e 37 2d 2e 33 2d 31 73 2d 2e 35 2d 2e 35 2d 2e 39 2d 2e 35 2d 2e 37 2e 32 2d 2e 39 2e 35 2d 2e 33 2e 36 2d 2e 33 20 31 20 2e 31 2e 37 2e 33 20 31 20 2e 35 2e 35 2e 39 2e 35 2e 37 2d 2e 32 2e 39 2d 2e 35 63 2e 33 2d 2e 33 2e 33 2d 2e 36 2e 33 2d 31 7a 6d 31 2e 31 20 30 63 30 20 2e 37 2d 2e 32 20 31 2e 32 2d 2e 36 20 31 2e 36 73 2d 2e 39 2e 37 2d 31 2e 36 2e 37 63 2d 2e 36 20 30 2d 31 2e 32 2d 2e 32 2d 31 2e 35 2d 2e 36 2d 2e 34 2d 2e 34 2d 2e 36 2d 31 2d 2e 36 2d 31 2e 36 20 30 2d 2e 37 2e 32 2d 31 2e 32 2e 36 2d 31 2e 37 2e 34 2d 2e 34 2e 39 2d 2e 36 20 31 2e 36 2d 2e 36 2e 36 20 30 20 31 2e 32 2e 32 20 31 2e 36 2e 36 2e 33 2e 34 2e 35 2e 39 2e 35 20 31 2e 36 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 35 38 2e 36 20 38 2d 31 2e 34 20 34 2e Data Ascii: 4-.1-.7-.3-1s-.5-.5-.9-.5-.7.2-.9.5-.3.6-.3 1 .1.7.3 1 .5.5.9.5.7-.2.9-.5c.3-.3.3-.6.3-1zm1.1 0c0 .7-.2 1.2-.6 1.6s-.9.7-1.6.7c-.6 0-1.2-.2-1.5-.6-.4-.4-.6-1-.6-1.6 0-.7.2-1.2.6-1.7.4-.4.9-.6 1.6-.6.6 0 1.2.2 1.6.6.3.4.5.9.5 1.6z"/><path d="m58.6 8-1.4 4.
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 2d 2e 34 2e 32 2d 2e 39 2e 33 2d 31 2e 34 6c 2e 35 2d 32 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 36 33 2e 37 20 31 32 2e 34 68 2d 31 76 2d 32 2e 35 63 30 2d 2e 38 2d 2e 33 2d 31 2e 32 2d 2e 39 2d 31 2e 32 2d 2e 33 20 30 2d 2e 35 2e 31 2d 2e 37 2e 33 73 2d 2e 33 2e 35 2d 2e 33 2e 37 76 32 2e 36 68 2d 31 76 2d 33 63 30 2d 2e 34 20 30 2d 2e 38 20 30 2d 31 2e 32 68 2e 39 76 2e 37 63 2e 31 2d 2e 32 2e 33 2d 2e 34 2e 35 2d 2e 35 2e 33 2d 2e 32 2e 36 2d 2e 32 2e 39 2d 2e 32 2e 34 20 30 20 2e 38 2e 31 20 31 20 2e 34 2e 33 2e 33 2e 35 2e 38 2e 35 20 31 2e 34 76 32 2e 35 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 36 35 2e 34 20 31 32 2e 34 68 31 76 2d 36 2e 34 68 2d 31 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 37 31 2e 31 20 31 30 2e 32 63 30 2d 2e 34 2d 2e 31 2d 2e Data Ascii: -.4.2-.9.3-1.4l.5-2z"/><path d="m63.7 12.4h-1v-2.5c0-.8-.3-1.2-.9-1.2-.3 0-.5.1-.7.3s-.3.5-.3.7v2.6h-1v-3c0-.4 0-.8 0-1.2h.9v.7c.1-.2.3-.4.5-.5.3-.2.6-.2.9-.2.4 0 .8.1 1 .4.3.3.5.8.5 1.4v2.5"/><path d="m65.4 12.4h1v-6.4h-1z"/><path d="m71.1 10.2c0-.4-.1-.
2024-04-26 14:40:59 UTC	751	IN	Data Raw: 2e 32 2d 31 2e 32 2e 36 2d 31 2e 37 2e 34 2d 2e 34 2e 39 2d 2e 36 20 31 2e 36 2d 2e 36 2e 36 20 30 20 31 2e 32 2e 32 20 31 2e 36 2e 36 2e 33 2e 34 2e 35 2e 39 2e 35 20 31 2e 36 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 39 36 20 31 32 2e 34 68 2d 31 76 2d 32 2e 35 63 30 2d 2e 38 2d 2e 33 2d 31 2e 32 2d 2e 39 2d 31 2e 32 2d 2e 33 20 30 2d 2e 35 2e 31 2d 2e 37 2e 33 73 2d 2e 33 2e 35 2d 2e 33 2e 37 76 32 2e 36 68 2d 31 76 2d 33 63 30 2d 2e 34 20 30 2d 2e 38 20 30 2d 31 2e 32 68 2e 39 76 2e 37 63 2e 31 2d 2e 32 2e 33 2d 2e 34 2e 35 2d 2e 35 2e 33 2d 2e 32 2e 36 2d 2e 32 2e 39 2d 2e 32 2e 34 20 30 20 2e 38 2e 31 20 31 20 2e 34 2e 35 2e 32 2e 36 2e 36 2e 36 20 31 2e 33 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 31 30 32 2e 36 20 38 2e 38 68 2d 31 2e 31 76 32 2e Data Ascii: .2-1.2.6-1.7.4-.4.9-.6 1.6-.6.6 0 1.2.2 1.6.6.3.4.5.9.5 1.6z"/><path d="m96 12.4h-1v-2.5c0-.8-.3-1.2-.9-1.2-.3 0-.5.1-.7.3s-.3.5-.3.7v2.6h-1v-3c0-.4 0-.8 0-1.2h.9v.7c.1-.2.3-.4.5-.5.3-.2.6-.2.9-.2.4 0 .8.1 1 .4.5.2.6.6.6 1.3z"/><path d="m102.6 8.8h-1.1v2.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49807	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	1623	OUT	GET /static/images/home/form/forms.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1 Range: bytes=0-
2024-04-26 14:40:59 UTC	423	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:59 GMT Content-Type: video/mp4 Content-Length: 279742 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 0-279741/279742 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:59 UTC	832	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 04 13 cf 6d 64 61 74 00 00 02 af 06 05 ff ff ab dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 33 20 72 33 30 36 30 20 35 64 62 36 61 61 36 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 31 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 33 20 64 65 62 6c 6f 63 6b 3d 31 3a 30 3a 30 20 61 6e 61 6c 79 73 65 3d 30 78 33 3a 30 78 31 31 33 20 6d 65 3d 68 65 78 20 73 75 62 6d 65 3d Data Ascii: ftypisomisomiso2avc1mp41freemdatEH, #x264 - core 163 r3060 5db6aa6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 03 00 00 03 00 00 03 00 00 03 00 00 03 00 00 03 00 00 03 00 16 11 00 00 00 13 41 9a 24 6c 42 ff fe 8c b0 00 00 03 00 00 03 00 00 1d 50 00 00 00 10 41 9e 42 78 84 7f 00 00 03 00 00 03 00 00 09 79 00 00 00 10 01 9e 61 74 47 ff 00 00 03 00 00 03 00 00 0e e8 00 00 00 10 01 9e 63 6a 47 ff 00 00 03 00 00 03 00 00 0e e9 00 00 00 19 41 9a 68 49 a8 41 68 99 4c 08 5f ff fe 8c b0 00 00 03 00 00 03 00 00 1d 51 00 00 00 12 41 9e 86 45 11 2c 23 ff 00 00 03 00 00 03 00 00 09 79 00 00 00 10 01 9e a5 74 47 ff 00 00 03 00 00 03 00 00 0e e9 00 00 00 10 01 9e a7 6a 47 ff 00 00 03 00 00 03 00 00 0e e8 00 00 00 19 41 9a ac 49 a8 41 6c 99 4c 08 57 ff fe 38 40 00 00 03 00 00 03 00 00 71 c0 00 00 00 12 41 9e ca 45 15 2c 23 ff 00 00 03 00 00 03 00 00 09 79 00 00 00 10 01 9e e9 74 Data Ascii: A$lBPABxyatGcjGAhIAhL_QAE,#ytGjGAIAlLW8@qAE,#yt
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 0b 4a 83 8e 81 72 64 1b 31 c3 14 58 6f fd ec dc d2 1b e5 7c 11 0e 7b ab 13 f2 b1 b2 b5 49 14 26 f1 d2 b3 e6 cf 72 b2 9b 5c 43 5e 19 87 4b 36 0d 83 e6 81 11 42 02 ad 16 ec 93 ea 65 f0 50 74 44 81 8b 9b 23 97 85 5d 14 6b 56 a7 31 63 79 25 4a dc 2b e5 10 4f 5f 5a 35 66 51 af ea e1 02 ed 58 7e 04 2b 13 be af bb 70 29 14 70 86 fe 82 f8 55 44 ad a2 7e 82 ea 5c 5f 8a 2f 90 85 5e 42 86 f5 6b a5 e4 a3 8c a8 02 39 95 d8 04 08 aa d9 d4 3b 98 ee b0 b8 d0 47 09 d9 0a fc f2 b5 9e fa e8 f8 1c 06 de 42 4b 3f 80 8d 34 9d d4 9d 34 55 e6 29 ac 57 33 54 c1 b7 0c d9 66 fe 37 f6 db 98 29 83 20 02 51 97 e8 10 6f 7f 38 43 35 ba 80 c7 04 54 5a 1e 58 78 2c e7 60 5a b0 4e 79 df 98 13 8b 9a 16 38 f3 1f c3 e8 4a 72 fe b7 d0 5e 16 22 56 05 f1 97 e7 00 00 0b 6d 41 88 dc c0 bf fe db 5b Data Ascii: Jrd1Xo\|{I&r\C^K6BePtD#]kV1cy%J+O_Z5fQX~+p)pUD~\_/^Bk9;GBK?44U)W3Tf7) Qo8C5TZXx,`ZNy8Jr^"VmA[
2024-04-26 14:40:59 UTC	400	IN	Data Raw: f6 4f 5a 38 e0 58 1c f8 5b 75 1e f5 8a 6f 6d b7 a4 5a be a2 f9 8f c0 da cf 8b ad a4 78 d6 be 6f 0c 44 37 3a 87 ce c2 8b 7f c0 9d 66 4a 10 01 d9 4f e7 37 49 0b 20 b9 d1 a0 bc 01 e5 7d ee ae 61 f5 bf 58 8f 19 a5 77 f9 00 c3 0e 9f f2 66 b6 0c f6 87 32 e0 8a 29 9e 9b 58 43 98 a4 ca 28 62 48 92 4f 41 6d 92 39 a6 1d 56 22 cc 98 59 4f 69 20 53 23 e5 af e1 47 e0 0e 77 4d bd 62 7a 48 a6 0f 82 b3 c3 89 c5 9c 63 d2 57 b3 d3 b9 9c 58 6c d5 6c 07 62 4a 05 c9 dd 88 af a2 00 f2 fc 39 3b 0c da 5c 58 6e 76 ab 4d db bd fc d1 22 1e 16 5a 53 15 51 3d fc 6d 12 04 43 9b f2 6f d0 a2 cd d6 7c 33 42 cb 92 a8 b7 ee 9d b9 ca 5b 19 13 0a e4 d7 fd 9f 36 a5 47 1e 90 fd 93 c7 b7 e0 2b 8b c4 49 0d f0 11 64 96 b5 30 ed 45 dc cb a5 98 af 7a 9e 8c 40 13 2a 0d 50 27 bb 69 0e 22 78 3a 00 4b Data Ascii: OZ8X[uomZxoD7:fJO7I }aXwf2)XC(bHOAm9V"YOi S#GwMbzHcWXllbJ9;\XnvM"ZSQ=mCo\|3B[6G+Id0Ez@*P'i"x:K
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 47 fe 06 c8 dd 77 22 7c f3 a5 05 31 ab 8f 21 1d b6 5c d1 f7 db c1 b5 d6 51 f1 68 2a 76 7a 35 6c 5f cf c6 ce 2c d7 16 b5 fc db 88 00 93 8b be 94 a2 d8 87 36 29 6d 85 af d9 fb fe ed a1 dd 62 c8 90 53 21 fe fe 62 6c ea a4 1f ae bf 77 8a e8 5f ae 03 e9 d5 2d 4e b0 d2 ce 5c f4 e2 81 c4 18 f3 8e 27 4e f3 93 8d f3 ab ab 05 c8 bc 3d 4e 8c 03 16 08 6d 9d bc 5d 73 04 0b 8c 27 01 58 2d 58 87 c1 9f 3a 6b 34 43 ca bd ac 73 3a 5b 8a 86 cb 60 b8 c1 16 47 a5 bd 58 3e ad 02 78 f5 89 06 0a bb 2d 0e 93 95 15 04 b0 2f 5a d4 48 83 c4 96 ed 91 f5 da d5 d2 e3 a5 0f 39 6e 38 ff 68 26 6e a9 2e 9f 09 67 55 eb 9c 2a 03 13 6e 7b b0 e1 a9 c3 69 6e d2 5f 4c 02 41 3c 2d f7 78 a2 49 2b 67 c1 bb 7c a9 64 f9 70 fb 1c a1 9f e3 98 30 5a 81 31 95 12 34 45 c2 de 0a 9a c7 91 98 b3 76 97 22 be Data Ascii: Gw"\|1!\Qhvz5l_,6)mbS!blw_-N\'N=Nm]s'X-X:k4Cs:[`GX>x-/ZH9n8h&n.gUn{in_LA<-xI+g\|dp0Z14Ev"
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: d6 4a 13 6f 17 88 d0 00 06 87 42 01 d9 02 3a c8 48 95 e6 e2 64 e6 99 15 95 bf fb a2 20 02 35 59 fb 5d 8b 9b 29 4a cc 28 66 dc 00 73 6b 04 cb 5b 08 f2 ab a2 76 11 02 a6 9c 89 21 a7 ad 4c 60 8e 46 cb dd e8 7f 60 4b 8b a7 32 66 00 1d 00 c0 2e be f8 c0 f6 f1 9e 9c 03 d1 5b e2 f9 7b dc 02 ab a4 80 4a 6f 52 eb 4b 3d 51 40 9c cf ae 83 48 6f 3b 8e f5 08 3c cf 2a 2c dc a9 a5 61 cb c8 de 31 f6 e6 40 0f 43 f9 15 49 56 e4 52 54 9b ca bb c7 39 35 13 8e 13 8a 5f 41 61 12 32 0c 54 8b 5b bc be da ea 24 2d f9 dd c2 d6 95 ce d3 a9 a2 90 6d 72 fc 43 11 03 9d 32 e8 c3 71 70 e5 40 9c 5b 22 7b 4f 7a c8 0c 4a 08 d3 e4 4e 6a 73 1f 40 5a 45 fa e4 a5 75 39 b4 3c 63 8b b4 00 1d 86 d0 ae 1e 01 0f 4b 72 cf c4 f4 dd e1 bf c0 dc 6a 0f 48 bc b8 66 e5 d5 e8 73 02 67 7b ee 82 c8 42 f7 9d Data Ascii: JoB:Hd 5Y])J(fsk[v!L`F`K2f.[{JoRK=Q@Ho;<*,a1@CIVRT95_Aa2T[$-mrC2qp@["{OzJNjs@ZEu9<cKrjHfsg{B
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 4d 1e e7 38 99 6c 7a 84 4f 9a 0b 81 df 84 3d 58 a5 e5 4e d2 e2 86 32 77 c8 62 ce f5 a4 87 8d 52 8b 18 44 60 85 65 97 03 8e f8 ca 03 e4 a2 f4 86 2c 1b 66 79 77 b4 a9 3d 29 33 82 1f cd de bc 67 0f af 08 81 a1 a5 ee b4 da e2 9a 1f 9a 5a 40 1c fb 08 bb 6e 7e 80 e0 d1 9f 0d 61 02 27 b8 ec 06 f3 53 0b 20 f6 4c 83 4e ec d2 73 53 b5 c3 09 e3 0e df 92 f3 7c ea 4e 99 aa ac 75 6b e9 bd 88 6e 57 9b 09 d2 cc e7 5a 8b 64 dc 00 39 44 26 d1 5d eb f6 ab 6c b1 5e f4 30 91 d5 27 33 ff 0d 6e 61 74 26 e0 a6 82 4f 7c 6e 23 78 3b c2 d5 8f 30 bd 3d 78 e0 57 23 4b 97 b5 b1 5f 0e 08 a4 dc 2d d3 b6 0a cc 63 d7 ef ce ff 19 82 35 d8 29 92 3b 00 e1 26 c1 9c a5 ed 39 b6 17 09 fe 8e b0 b6 ce 55 40 62 fd 59 4a e0 88 b9 a3 a4 bd fe 42 6d 2f ae 94 37 de 56 be 33 18 42 aa c3 e4 20 0c a0 af Data Ascii: M8lzO=XN2wbRD`e,fyw=)3gZ@n~a'S LNsS\|NuknWZd9D&]l^0'3nat&O\|n#x;0=xW#K_-c5);&9U@bYJBm/7V3B
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: bb 4f e6 c1 59 f1 8f 2d 76 fc ac a5 71 90 cc 50 5c 5c 25 ba e1 b6 78 21 28 88 98 fa 48 03 d5 a4 e0 11 a2 0d 81 35 3c de 8f 04 33 e3 f3 06 7f 5e 0b 99 58 57 5d b4 db de 05 61 39 72 b1 41 31 21 3b 91 c0 f4 37 78 5f d4 dd fc c0 bb 50 a5 44 00 dd 12 e9 85 3a 1d 04 b3 f8 9d 5e f9 3a 55 aa aa e3 7a bb e7 1b 2f 0a 3b cd cd aa 07 51 22 55 31 70 ed 99 7c a0 00 00 0e fa 41 88 ed 40 bf fe db 5b f3 2c a8 70 1a 9b 6f e6 d0 4b f5 c3 ab 2f 77 0a 94 0d 19 43 3b 4f 25 ea 66 00 00 03 00 00 03 00 00 03 00 01 18 76 f1 92 35 d4 e6 35 e9 00 00 03 00 06 54 01 53 02 19 93 0a 28 9e 52 ef 54 2f f0 78 03 ba 37 17 5f 2a 6b f5 09 d5 2b 01 64 3b 09 06 96 ef d2 b9 ea f9 53 54 48 cc 85 d1 47 e3 57 f6 82 ec 5c 60 bb cf dd 43 e6 ca 19 a2 57 cf 1b 7d 14 14 57 28 f5 0a be d4 01 d0 58 80 a2 Data Ascii: OY-vqP\\%x!(H5<3^XW]a9rA1!;7x_PD:^:Uz/;Q"U1p\|A@[,poK/wC;O%fv55TS(RT/x7_*k+d;STHGW\`CW}W(X
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 94 99 6a 82 14 d4 69 67 79 a7 e5 d1 c5 4a 7f b0 20 f5 72 c3 c6 65 dd 62 67 f9 fe 0f 12 23 b1 ab 1e fb 0d 17 64 8a 9a 6a c0 0d 0d a7 62 8d 92 62 83 c6 43 73 6c 58 55 a1 a6 cf 5a ed 85 21 ca ab a0 4e 91 f4 99 ce 61 59 c3 e3 38 5d 16 5d 18 4e c8 cd 2c 67 de cd ce 7d 63 b5 e7 e5 cf 00 cb fa 1e d4 2f 33 a5 97 15 bd 41 8e 19 2e 69 7d 0f 93 8b cf a7 aa b2 0b 4c f7 09 90 1b 73 d4 a2 ef 01 be c3 5c 67 f9 0c d7 6b b3 4e 35 07 ce e8 14 28 d0 f2 67 21 10 4a 04 7e 21 d8 43 a5 ac cd 2f 68 6a 69 57 b6 50 27 ff 8d 7b a3 3e c1 9a ee df ec 2e 77 57 c6 8d 30 c6 a2 2b f1 d0 19 a2 ad 42 2f 2f db af d7 f8 32 c8 68 9b f5 a0 3a bc f1 f5 09 3c f8 ac 45 7a 1e 4f 47 75 d3 55 58 e4 e4 6f d0 2c 42 3c 77 77 58 25 87 c5 85 a9 ac c9 31 0a 3b 1c 63 77 02 10 2e 40 86 d9 e3 7f 60 23 95 fe Data Ascii: jigyJ rebg#djbbCslXUZ!NaY8]]N,g}c/3A.i}Ls\gkN5(g!J~!C/hjiWP'{>.wW0+B//2h:<EzOGuUXo,B<wwX%1;cw.@`#
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: e6 94 db 18 5d b0 16 0b e8 3f 19 61 4b 3e 6f 65 f4 46 a0 49 90 36 14 39 0f d0 93 e6 d2 d7 91 06 87 b1 7e 0d fd 02 b1 cc aa 82 c3 b1 1b e8 26 a3 b6 1b b8 ab d9 8a a2 44 1f 72 6d 46 51 57 29 ac eb 92 35 ca 3c 17 ad 4f 6c 51 08 ef 27 68 38 91 1b 42 8f e9 b8 ac 62 c8 a1 47 3f 3f da 40 87 d1 7a da 2a 5d cd 85 be fa a0 a3 70 95 44 31 cb b1 b6 b2 9f f9 53 a4 ad 43 d9 01 36 f1 b7 57 37 26 e6 e3 99 3c db 97 43 3d 5b 29 73 69 10 9d 80 b1 76 18 bf 4c a4 13 7e fa dc f2 e1 80 68 24 1b 7f 13 ba e7 6d 83 f5 de 11 90 43 14 8c ed 6d f4 a0 88 3e 99 da 04 27 78 8c 21 8b ef 86 a8 b7 fa b5 fc 41 42 7f 85 a4 93 fa 38 02 f4 ac fa d7 31 10 75 01 f8 01 66 97 ed 13 ca ad 44 0d f9 25 18 3c c8 f0 71 d0 84 68 7e 6d 73 88 41 cb 2e 0f 39 74 fa 7e 0d 19 71 45 24 77 19 8e db 17 5c 6a 55 Data Ascii: ]?aK>oeFI69~&DrmFQW)5<OlQ'h8BbG??@z*]pD1SC6W7&<C=[)sivL~h$mCm>'x!AB81ufD%<qh~msA.9t~qE$w\jU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49806	172.217.165.194	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	1388	OUT	GET /td/rul/983229078?random=1714142454208&cv=11&fst=1714142454208&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v870230210z86436058za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link&label=-kjjCLrl1wQQlsXr1AM&hn=www.googleadservices.com&frm=0&tiba=Runrun.it%20%7C%20Process%20and%20Projects%20Manager&npa=0&pscdl=noapi&auid=922323486.1714142446&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:40:59 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 14:40:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 26-Apr-2024 14:55:59 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 14:40:59 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 14:40:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49808	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	1367	OUT	GET /static/images/home/clients/Votorantim.png HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1
2024-04-26 14:40:59 UTC	370	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:59 GMT Content-Type: image/png Content-Length: 4185 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:59 UTC	885	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 58 00 00 00 80 08 03 00 00 00 79 a8 81 84 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 01 26 50 4c 54 45 47 70 4c d5 e1 e2 5a 5a 5a 94 94 94 fb fc 1b fe fd 3b ae af b1 e2 e8 e9 fa ff c4 ff fc ba 5c 5c 5c 5e 5e 5e fe fe 3a b9 c0 c3 7a 7a 7a 60 60 60 b6 c6 cc 76 76 76 74 74 74 a8 aa ab 84 85 86 6e 6e 6e 68 68 68 72 72 72 8a 8a 8a 64 64 64 6e 6e 6e 64 64 64 5d 5d 5d 6b 6b 6b 68 68 68 6c 6c 6c 7e 7e 7e 93 94 96 7a 7a 7a 8a 96 9d 66 66 66 78 78 78 5e 5e 5e 60 60 60 29 64 9c 6c 6c 6c 5b 5b 5b 7a 7a 7a 5b 9b c3 92 d3 e0 90 97 9b 9f db e9 3b 8d b9 28 7b b2 73 a7 c4 30 a0 c4 80 d4 e3 7f d9 e3 23 84 b4 56 a0 c3 40 bd d8 43 a8 c9 64 d0 df 61 c4 d8 47 9b be 47 7c Data Ascii: PNGIHDRXygAMAasRGB&PLTEGpLZZZ;\\\^^^:zzz```vvvtttnnnhhhrrrdddnnnddd]]]kkkhhhlll~~~zzzfffxxx^^^```)dlll[[[zzz[;({s0#V@CdaGG\|
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 3c 1a bf 7d 43 f7 f8 ce 57 02 3b 4e 52 f6 7a 33 40 4b b0 7f 7e 9e 5a f6 f6 56 f7 b0 bf 56 bf 5e 1d 1c 6c e1 d9 e0 cd e5 d5 cc b2 5f 60 d8 cc 7b 15 b8 a9 65 ff 7f 5b 02 d6 84 96 1f 74 0a d8 d6 d7 cb ab ab 8b 34 65 77 55 4b b0 0f b0 a9 65 3f ee cc 7e 91 71 52 65 96 45 3b 1e 6e 61 fc cc ff 82 a9 ca c3 8a 4f 2a fc 23 e3 ef 1c dd 5d ce 2c bb 9f 1a 36 b1 ec 19 3d 7e cd 19 96 65 fd 41 48 97 12 86 7e b7 5d 30 97 71 fe a0 86 01 cb 41 fc ad 4e 23 87 fe a3 cd 9d d9 2c 2c 0d 38 73 0a 6a 29 83 2a 97 dc 7a b1 7c aa 2c d8 3b fa f6 fd fb cc b2 bb 98 e0 d6 fe e9 68 66 d9 cf f3 09 9b 15 52 90 b8 e0 13 61 e5 9a cb 78 21 54 8c 68 c0 c8 8e 0d 5b 93 32 e2 fe c3 15 63 f9 46 2f f4 36 96 44 b5 d4 ee fa 6b 31 58 9a ca f2 c1 66 0e 76 0f df 7e 03 58 65 59 aa 5f 23 d5 12 bc 3f 3d 3d Data Ascii: <}CW;NRz3@K~ZVV^l_`{e[t4ewUKe?~qReE;naO#],6=~eAH~]0qAN#,,8sj)z\|,;hfRax!Th[2cF/6Dk1Xfv~XeY_#?==
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 3c f8 6a bf 3e 40 52 d4 fb 7d 9b 82 03 d7 aa c0 d2 58 16 5d b3 8f 05 8c aa db ad 0a 25 91 0c 7f ff 69 d7 99 5a f6 0e 2d 41 f0 ee e2 62 ce b2 07 c6 43 b0 34 d7 09 cc c9 cb f1 a3 57 26 cf 54 b1 b5 5d 32 65 35 93 38 b6 ea 30 b3 84 de 89 6c 83 7b 9d 10 6c ab 4a 67 d8 21 cd 90 17 a8 ec d6 71 d3 76 03 a3 69 61 ff 2a 4d 0f 66 29 18 8e 05 52 25 1a 33 4b 1f 60 6a a3 03 b0 de 06 9d c9 ac 13 0a d1 23 9e 41 48 ab 35 29 01 2c f8 77 4b 4e 26 30 cc 95 b8 03 18 12 4f 31 8c c1 4a ab c1 58 a6 02 62 15 ca ef 7c 48 1e 76 55 57 a0 c0 f2 04 ac a4 8b 67 28 9f d2 6a 61 3a 64 06 77 ed f7 db ba 56 6a d9 23 bc d6 da 7a 7b 75 31 b3 ec fe ce 23 60 53 79 39 db 5c 78 9e c1 62 03 02 c0 f2 3a 42 c2 a5 a4 a2 40 2e 58 e9 16 a8 c1 d1 04 20 ce 6d fa c0 bd 55 c3 44 c7 1e 65 0d b3 4b 4b e3 05 Data Ascii: <j>@R}X]%iZ-AbC4W&T]2e580l{lJg!qvia*Mf)R%3K`j#AH5),wKN&0O1JXb\|HvUWg(ja:dwVj#z{u1#`Sy9\xb:B@.X mUDeKK
2024-04-26 14:40:59 UTC	400	IN	Data Raw: a4 d4 b1 94 c3 51 c2 f8 a4 db 5b af bc ae 85 8d 2b 13 56 2f 8e fe fc fb d3 92 85 cd 2d fb ee d4 b6 ca 42 81 41 0f 23 ce 2f 63 2a 50 e9 f5 0d 47 07 49 5a 26 2c 59 f6 92 8b 4e fa 21 d7 85 0a 1d 90 a8 85 cb 36 c9 37 21 c2 94 8b 8e 4c 1e 2a ce 28 7d 4b d3 96 42 bd 1e 20 41 ad a3 57 46 6f a9 e9 59 b6 97 a0 2d d1 40 65 1b ab be b5 16 63 51 a4 a4 07 a3 61 94 94 3b d6 19 52 26 4e 6b 5c 3a 5f cf 63 7f 84 63 8f de ff 4b 55 c2 32 b7 2c 94 fd 6b a3 61 b3 02 81 fb 4a f4 bb 85 9b 91 27 0d b4 da 52 93 04 bc 78 4d f2 92 76 4d 58 6b d1 e0 ba 82 8e 41 6c eb 73 eb 00 7d 9a 64 98 ef 4f d8 0d 56 c2 84 59 2f ba 6b d0 30 e3 d4 f8 11 67 13 5c 6a e2 3a ef a1 a5 13 c3 98 34 1b 6a d5 35 61 f5 18 c7 e0 d4 38 cf f6 37 3a 96 16 36 83 99 49 c8 cd 8e ad 50 58 dc c9 f5 0e c2 2e 73 cb 5e Data Ascii: Q[+V/-BA#/cPGIZ&,YN!67!L(}KB AWFoY-@ecQa;R&Nk\:_ccKU2,kaJ'RxMvMXkAls}dOVY/k0g\j:4j5a87:6IPX.s^
2024-04-26 14:40:59 UTC	390	IN	Data Raw: 1c bb cc 84 2d 31 ac ee f4 0a dc 42 03 5d 1f 7b c1 7c e1 14 fb 47 d9 23 3a d8 0e 8f 7b cc 83 9c 1a 8d f2 c7 ee 24 6b dc 84 4d 3f f0 c6 1d 7d 3d 71 d7 25 ae 5f 87 5d 6b 7a be 37 5d 8d d0 ce 62 ee fb cd 6c d7 da aa 4f e7 be d7 cc 4f 41 d7 70 68 3e 92 8e f3 31 b1 83 e7 e8 24 f8 d1 45 bc e9 f0 33 d9 a0 90 e6 9a 4f 27 34 da 75 7b 6e 3d 9f 82 b7 0e 78 bc 2e 66 bd f3 bd 1c ed 67 dc 8b 59 59 f6 e4 3b 1a 91 da fa 96 4f 7e 68 de 62 d2 37 f7 ac 6e f9 c4 c8 a6 8d ab 8d fb 67 5f fd 9f 6f bd 5f e3 3e ee 0b 39 7a ff f6 cd d5 c7 c2 b2 25 86 15 fe 6f 94 2d 2c 7b 6a 8b 22 55 c1 96 fd 94 59 f6 c5 b1 e8 51 a1 65 b9 7d 48 ca 7e f8 78 22 86 ad d8 b2 ff 71 2e 2b 86 ad 3e ca b2 65 4f 1c 51 e3 47 58 76 9b 61 f7 77 8b b6 ae c6 b2 59 94 dd 12 61 f5 ab b3 87 7b eb 3c bc 8d 7c c4 de Data Ascii: -1B]{\|G#:{$kM?}=q%_]kz7]blOOAph>1$E3O'4u{n=x.fgYY;O~hb7ng_o_>9z%o-,{j"UYQe}H~x"q.+>eOQGXvawYa{<\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49810	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	658	OUT	GET /d78b26f41a2e42509e001fd2bf0e6daa/ HTTP/1.1 Host: srmcorp.digitoids.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://srmcorp.digitoids.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA==" Sec-WebSocket-Key: H3fzClPNhHdpwF/1AZND2w== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-26 14:41:02 UTC	741	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 26 Apr 2024 14:41:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 9350460d-4933-4f6f-b018-4e1005beb200 x-ms-ests-server: 2.1.17846.6 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://0824a98d-d78b26f4.digitoids.com/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-04-26 14:41:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49812	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	883	OUT	GET /?hro=GO&sso_reload=true HTTP/1.1 Host: srmcorp.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://srmcorp.digitoids.com/?hro=GO Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-04-26 14:41:03 UTC	783	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:41:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 61081 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 59afa931-8fe3-47af-bc28-86ed36fd4400 x-ms-ests-server: 2.1.17910.10 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://0824a98d-d78b26f4.digitoids.com/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-04-26 14:41:03 UTC	15601	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 5b 57 ea ca b6 30 fa 3e 7f 05 d2 e6 56 b2 8d c8 4d 45 18 99 2e c4 1b 43 51 87 e0 7d db 6c 21 29 20 0a 09 26 41 c4 21 bc 7d bf e4 3c 9c b6 1f ce db f9 07 eb 8f 9d de 7b 55 e5 02 38 c6 98 6b ad fd 9d fd b5 3d 67 5b 6b 98 54 ea d2 ab 57 bf 57 af e2 cb d2 de 59 b5 79 7b be 9f e8 fa fd de 1f bf 7d c1 3f 09 a3 a7 7b 9e 96 4c 26 4c cb d5 92 3d df 4d 26 7a ba dd d1 92 cc 4e fe f1 5b e2 4b 97 e9 26 fc 4d 7c f1 2d bf c7 f0 29 d1 b0 3a 76 c2 b2 13 be 93 18 3b 43 37 a1 1b 86 33 b4 7d ac b4 1e d4 fa d2 67 be 9e 30 1c db 67 b6 af 25 7d f6 e6 af e3 80 e5 84 d1 d5 5d 8f f9 da d0 6f af 15 93 00 8c 3f 58 63 2f 43 eb 55 4b 56 79 f5 b5 e6 78 c0 92 eb 0b ba a9 ed 6b cc ec b0 78 ab 9b b5 cb ca 5a d5 e9 0f 74 df 6a f5 16 37 1c 59 a6 df d5 4c Data Ascii: [W0>VME.CQ}l!) &A!}<{U8k=g[kTWWYy{}?{L&L=M&zN[K&M\|-):v;C73}g0g%}]o?Xc/CUKVyxkxZtj7YL
2024-04-26 14:41:03 UTC	14460	IN	Data Raw: 3e 3b da ff 5d 24 75 4a f3 53 1d 88 b3 3d d1 01 f9 78 f3 f4 32 cf 8e 0c 3b c0 fd d9 78 fc ce 47 14 c6 c0 16 6b 0f c3 ec d7 cf 9b b7 a0 a0 5d ca 0f f0 95 50 8c 62 37 3e ee 17 9a bc 52 a8 62 5e a3 ce 46 74 20 a0 3d da ff a2 2e 92 16 f9 c0 a0 01 c5 0c 14 fe 02 2b 26 9e 22 c2 3e 62 87 8e b1 77 d4 9b 3b 20 14 4a b1 5a 62 77 b5 a5 7d 77 ec 4b 9b df aa c8 6d 12 9e 63 eb d8 0d df 19 0c 98 79 ea e0 8f c9 f0 1c 59 fe 49 18 56 32 bc 30 f4 d8 1e 03 a3 c6 c0 cb 9a 1b 60 f7 01 b7 da ce d0 0b 13 22 30 fb 07 94 5a ac e2 29 08 2a ca 10 07 87 7f 29 3b 51 47 da f7 f0 5c 5f 29 6e 6f 04 11 75 cc cc b0 b5 5c d9 9e bf 68 08 33 15 d9 bd bd 96 7b 08 dd 4d cc 61 e5 49 31 a3 34 9e 2c e8 a0 95 26 ae 35 e0 b1 69 67 87 4f a2 e4 44 2e b6 52 76 a2 6f c2 cf 72 c0 75 42 7f 05 65 22 03 5b Data Ascii: >;]$uJS=x2;xGk]Pb7>Rb^Ft =.+&">bw; JZbw}wKmcyYIV20`"0Z)*);QG\_)nou\h3{MaI14,&5igOD.RvoruBe"[
2024-04-26 14:41:03 UTC	16384	IN	Data Raw: b0 36 67 8e 59 19 b9 13 bf 4d d9 e1 b6 e9 ef 1b c0 61 9b c9 5c f9 cc 50 b4 3f af cb 1e 55 c1 ec ab 98 f8 04 10 c1 ff 37 a5 ba 28 5e e3 5f 8d 30 0e 14 9c 02 89 4d df 8b fa ef e0 14 77 b9 be c8 a5 50 49 2e b3 f1 3f 82 47 c0 25 8b f0 88 bd be 6a 21 fe 7c b7 7a dd a6 23 4f ee f0 99 9c e7 d5 80 12 40 c7 f8 1b bd 8e 60 7a 98 e3 85 7e e7 7a 03 d2 49 8d e5 27 39 cd ec 58 66 e0 d3 00 21 f1 55 c4 72 98 d7 ff 20 08 7e 27 c0 bc 77 40 ee f0 aa 28 4c 2b 08 e3 28 41 e3 34 01 c3 98 24 ec 55 1c 19 39 66 87 9d 43 b5 de 2b 2b d3 d5 d5 69 64 13 1d 38 59 a5 53 96 61 37 bb 9f e0 e4 a6 ed 5b c6 17 59 58 09 04 29 de 64 94 51 87 61 94 e9 d3 be 34 97 f6 85 73 6f ae 93 56 9d 7e e4 ba 43 a0 14 bf 3e 2a 4b ba 8c cb a0 d3 c4 64 b7 9c dc e5 0d 45 3f c4 8a 2e b2 1f 6a c5 6c 97 99 ce a5 Data Ascii: 6gYMa\P?U7(^_0MwPI.?G%j!\|z#O@`z~zI'9Xf!Ur ~'w@(L+(A4$U9fC++id8YSa7[YX)dQa4soV~C>*KdE?.jl
2024-04-26 14:41:04 UTC	14636	IN	Data Raw: 9b 62 a5 07 f3 d6 f3 92 9e 86 0d f2 34 b4 da 65 44 d1 e0 02 ad ab 3f 91 0a a4 ab 5f 7c 8f 91 33 32 4e d2 d5 9b 57 2c 8c 18 76 3f 11 78 79 93 74 77 e3 99 6f d2 ed 1a fa 59 56 10 23 23 04 9e ee 30 c1 1c 87 16 dd 52 d2 c7 93 c4 36 f8 fc 29 f0 75 be ac 5c 1f 99 94 f8 ce a7 40 ad f3 20 be 4b c6 94 69 69 e4 c9 fb a5 c0 d2 6c 21 90 d7 9f b2 57 1d 18 95 91 34 30 ba c8 c7 68 9b 9f fc 67 0f 9d 93 ce 2b f4 02 bf 29 c5 7b d1 ac 23 43 01 40 fc 89 a1 47 50 58 fe b0 12 65 23 c2 4d ac 2d 27 69 50 ab ab 7d f9 2e e5 b7 48 a0 9f c7 1b 72 35 f1 b3 e5 7c c5 e9 a0 9f ae e9 fe 0d a4 56 75 c2 09 80 95 ea 22 8c 56 93 30 5a d5 38 20 f1 52 cc 6b aa 88 30 02 20 03 cb 6e a4 3f 46 34 53 46 46 41 27 7d 23 f6 80 bd 73 a9 63 a9 68 c9 bc 32 5b 83 46 f8 29 45 ff ad 58 da 94 79 d6 4c 62 8d Data Ascii: b4eD?_\|32NW,v?xytwoYV##0R6)u\@ Kiil!W40hg+){#C@GPXe#M-'iP}.Hr5\|Vu"V0Z8 Rk0 n?F4SFFA'}#sch2[F)EXyLb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49811	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	766	OUT	GET /favicon.ico HTTP/1.1 Host: srmcorp.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://srmcorp.digitoids.com/?hro=GO Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-04-26 14:41:02 UTC	742	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 26 Apr 2024 14:41:02 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 808cf6c8-48f3-4b66-9232-bfc2c8147600 x-ms-ests-server: 2.1.17910.11 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://0824a98d-d78b26f4.digitoids.com/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-04-26 14:41:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49801	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	1623	OUT	GET /packs/media/google_play-RJNRMPPD.svg HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/packs/css/home_app-J7HUCVVO.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1
2024-04-26 14:40:59 UTC	397	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:59 GMT Content-Type: image/svg+xml Content-Length: 5224 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:59 UTC	858	IN	Data Raw: 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 31 32 36 20 33 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 36 20 33 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 61 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 32 2e 31 30 31 38 20 30 20 30 20 2d 32 33 2e 31 31 39 35 20 36 38 38 31 2e 33 33 38 39 20 38 39 37 33 2e 39 33 36 35 29 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 Data Ascii: <svg enable-background="new 0 0 126 38" viewBox="0 0 126 38" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a" gradientTransform="matrix(12.1018 0 0 -23.1195 6881.3389 8973.9365)" gradientUnits="userSpace
2024-04-26 14:40:59 UTC	222	IN	Data Raw: 66 66 73 65 74 3d 22 2e 37 37 35 34 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 66 66 61 35 30 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 66 66 39 63 30 30 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 63 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 35 2e 35 34 36 32 20 30 20 30 20 2d 31 31 2e 39 31 39 31 20 39 30 31 33 2e 37 37 33 34 20 34 34 36 35 2e 30 31 35 31 29 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 31 3d 22 2d 35 37 Data Ascii: ffset=".7754" stop-color="#ffa500"/><stop offset="1" stop-color="#ff9c00"/></linearGradient><linearGradient id="c" gradientTransform="matrix(15.5462 0 0 -11.9191 9013.7734 4465.0151)" gradientUnits="userSpaceOnUse" x1="-57
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 38 2e 33 32 30 31 22 20 78 32 3d 22 2d 35 37 39 2e 36 38 32 39 22 20 79 31 3d 22 33 37 32 2e 38 38 32 33 22 20 79 32 3d 22 33 37 31 2e 31 31 36 35 22 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 66 66 33 61 34 34 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 63 33 31 31 36 32 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 64 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 35 2e 35 34 36 32 20 30 20 30 20 2d 31 31 2e 38 36 33 37 20 39 30 31 33 2e 37 37 33 34 20 34 34 33 30 2e 38 32 35 32 29 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 Data Ascii: 8.3201" x2="-579.6829" y1="372.8823" y2="371.1165"><stop offset="0" stop-color="#ff3a44"/><stop offset="1" stop-color="#c31162"/></linearGradient><linearGradient id="d" gradientTransform="matrix(15.5462 0 0 -11.8637 9013.7734 4430.8252)" gradientUnits="us
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 2e 36 20 31 2e 35 2e 36 63 2e 37 20 30 20 31 2e 31 2d 2e 32 20 31 2e 36 2d 2e 36 2e 33 2d 2e 33 2e 35 2d 2e 36 2e 35 2d 31 2e 31 68 2d 32 76 2d 2e 38 68 32 2e 36 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 31 30 2e 32 2e 38 68 2d 32 2e 35 76 31 2e 37 68 32 2e 34 76 2e 37 68 2d 32 2e 34 76 31 2e 37 68 32 2e 35 76 2e 38 68 2d 33 2e 32 76 2d 35 2e 36 68 33 2e 32 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 31 33 2e 33 20 35 2e 37 68 2d 2e 37 76 2d 34 2e 39 68 2d 31 2e 36 76 2d 2e 37 68 33 2e 39 76 2e 37 68 2d 31 2e 36 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 31 37 2e 36 20 35 2e 37 76 2d 35 2e 36 68 2e 37 76 35 2e 36 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 32 31 2e 35 20 35 2e 37 68 2d 2e 37 76 2d 34 2e 39 68 2d 31 2e 36 76 2d 2e 37 68 33 2e 38 76 2e 37 68 2d Data Ascii: .6 1.5.6c.7 0 1.1-.2 1.6-.6.3-.3.5-.6.5-1.1h-2v-.8h2.6z"/><path d="m10.2.8h-2.5v1.7h2.4v.7h-2.4v1.7h2.5v.8h-3.2v-5.6h3.2z"/><path d="m13.3 5.7h-.7v-4.9h-1.6v-.7h3.9v.7h-1.6z"/><path d="m17.6 5.7v-5.6h.7v5.6z"/><path d="m21.5 5.7h-.7v-4.9h-1.6v-.7h3.8v.7h-
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 2e 33 2d 32 2e 32 7a 6d 2d 35 2e 34 20 31 2e 33 63 30 2d 31 2e 35 20 31 2e 32 2d 32 2e 33 20 32 2d 32 2e 33 2e 37 20 30 20 31 2e 33 2e 34 20 31 2e 35 2e 38 7a 6d 2d 34 2e 34 20 33 2e 37 68 31 2e 38 76 2d 31 31 2e 35 68 2d 31 2e 38 7a 6d 2d 32 2e 38 2d 36 2e 37 63 2d 2e 35 2d 2e 35 2d 31 2e 32 2d 2e 39 2d 32 2e 31 2d 2e 39 2d 32 20 30 2d 33 2e 38 20 31 2e 38 2d 33 2e 38 20 34 73 31 2e 38 20 33 2e 39 20 33 2e 38 20 33 2e 39 63 2e 39 20 30 20 31 2e 37 2d 2e 35 20 32 2d 2e 39 68 2e 31 76 2e 36 63 30 20 31 2e 35 2d 2e 38 20 32 2e 33 2d 32 2e 31 20 32 2e 33 2d 31 20 30 2d 31 2e 38 2d 2e 37 2d 32 2d 31 2e 34 6c 2d 31 2e 35 2e 36 63 2e 35 20 31 20 31 2e 36 20 32 2e 33 20 33 2e 35 20 32 2e 33 20 32 20 30 20 33 2e 37 2d 31 2e 32 20 33 2e 37 2d 34 2e 31 76 2d 37 68 Data Ascii: .3-2.2zm-5.4 1.3c0-1.5 1.2-2.3 2-2.3.7 0 1.3.4 1.5.8zm-4.4 3.7h1.8v-11.5h-1.8zm-2.8-6.7c-.5-.5-1.2-.9-2.1-.9-2 0-3.8 1.8-3.8 4s1.8 3.9 3.8 3.9c.9 0 1.7-.5 2-.9h.1v.6c0 1.5-.8 2.3-2.1 2.3-1 0-1.8-.7-2-1.4l-1.5.6c.5 1 1.6 2.3 3.5 2.3 2 0 3.7-1.2 3.7-4.1v-7h
2024-04-26 14:40:59 UTC	331	IN	Data Raw: 34 2d 31 2e 34 2e 33 2d 31 2e 38 20 30 6c 2d 2e 31 2e 31 2e 31 2e 31 63 2e 35 2e 34 20 31 2e 31 2e 35 20 31 2e 39 20 30 7a 22 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 2e 34 20 37 2e 37 63 2d 2e 33 2d 2e 33 2d 2e 34 2d 2e 38 2d 2e 34 2d 31 2e 33 76 2e 31 63 30 20 2e 35 2e 32 20 31 20 2e 34 20 31 2e 32 7a 22 20 6f 70 61 63 69 74 79 3d 22 2e 31 32 22 2f 3e 3c 2f 67 3e 3c 70 61 74 68 20 64 3d 22 6d 32 39 2e 38 20 31 39 2e 37 2d 34 2e 37 20 32 2e 36 2e 31 2e 31 20 34 2e 36 2d 32 2e 37 63 2e 37 2d 2e 33 2e 39 2d 2e 37 2e 39 2d 31 2e 32 20 30 20 2e 35 2d 2e 34 2e 38 2d 2e 39 20 31 2e 32 7a 22 20 6f 70 61 63 69 74 79 3d 22 2e 31 32 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 31 31 2e 36 20 37 20 31 38 2e 32 20 31 30 2e 33 63 2e 36 2e Data Ascii: 4-1.4.3-1.8 0l-.1.1.1.1c.5.4 1.1.5 1.9 0z" opacity=".2"/><path d="m.4 7.7c-.3-.3-.4-.8-.4-1.3v.1c0 .5.2 1 .4 1.2z" opacity=".12"/></g><path d="m29.8 19.7-4.7 2.6.1.1 4.6-2.7c.7-.3.9-.7.9-1.2 0 .5-.4.8-.9 1.2z" opacity=".12"/><path d="m11.6 7 18.2 10.3c.6.
2024-04-26 14:40:59 UTC	48	IN	Data Raw: 20 32 2e 33 2d 31 2e 33 7a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 6f 70 61 63 69 74 79 3d 22 2e 32 35 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: 2.3-1.3z" fill="#fff" opacity=".25"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49814	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	1680	OUT	GET /static/images/home/index/dashboard-particles.svg HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1
2024-04-26 14:40:59 UTC	397	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:59 GMT Content-Type: image/svg+xml Content-Length: 3210 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:59 UTC	858	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 32 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 32 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 35 2e 33 38 35 39 37 20 32 2e 32 35 34 32 33 4c 32 33 2e 39 38 36 32 20 34 2e 36 31 39 35 4c 32 33 2e 33 32 35 39 20 39 2e 38 31 32 30 36 43 32 33 2e 39 36 39 39 20 31 30 2e 30 31 32 31 20 32 34 2e 35 39 39 31 20 31 30 2e 33 32 38 34 20 32 35 2e 30 39 32 33 20 31 30 2e 37 38 34 38 4c 32 35 2e 38 33 36 34 20 34 2e 39 33 33 35 32 43 32 35 2e 39 36 39 34 20 33 2e 38 38 37 32 36 20 32 35 2e 32 33 30 32 20 32 2e 38 38 37 35 39 20 32 34 2e 32 32 32 Data Ascii: <svg width="26" height="23" viewBox="0 0 26 23" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M5.38597 2.25423L23.9862 4.6195L23.3259 9.81206C23.9699 10.0121 24.5991 10.3284 25.0923 10.7848L25.8364 4.93352C25.9694 3.88726 25.2302 2.88759 24.222
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 35 37 43 32 30 2e 38 31 34 33 20 31 30 2e 36 37 34 20 31 39 2e 32 38 30 36 20 31 31 2e 38 39 36 35 20 31 39 2e 30 36 33 38 20 31 33 2e 36 30 31 36 43 31 38 2e 38 34 32 31 20 31 35 2e 33 34 35 33 20 32 30 2e 30 32 35 39 20 31 36 2e 38 37 34 31 20 32 31 2e 37 36 39 36 20 31 37 2e 30 39 35 38 43 32 33 2e 34 37 34 36 20 31 37 2e 33 31 32 36 20 32 35 2e 30 34 32 31 20 31 36 2e 31 33 33 37 20 32 35 2e 32 36 33 39 20 31 34 2e 33 39 43 32 35 2e 34 38 30 37 20 31 32 2e 36 38 35 20 32 34 2e 32 36 33 31 20 31 31 2e 31 31 32 35 20 32 32 2e 35 35 38 20 31 30 2e 38 39 35 37 5a 4d 32 32 2e 30 30 36 32 20 31 35 2e 32 33 35 38 43 32 31 2e 33 30 38 36 20 31 35 2e 31 34 37 31 20 32 30 2e 38 33 35 31 20 31 34 2e 35 33 35 36 20 32 30 2e 39 32 33 38 20 31 33 2e 38 33 38 31 43 Data Ascii: 57C20.8143 10.674 19.2806 11.8965 19.0638 13.6016C18.8421 15.3453 20.0259 16.8741 21.7696 17.0958C23.4746 17.3126 25.0421 16.1337 25.2639 14.39C25.4807 12.685 24.2631 11.1125 22.558 10.8957ZM22.0062 15.2358C21.3086 15.1471 20.8351 14.5356 20.9238 13.8381C
2024-04-26 14:40:59 UTC	1097	IN	Data Raw: 2e 31 36 32 20 31 34 2e 32 34 31 35 20 31 31 2e 33 34 35 38 20 31 35 2e 37 37 30 33 20 31 33 2e 30 38 39 35 20 31 35 2e 39 39 32 43 31 34 2e 37 39 34 35 20 31 36 2e 32 30 38 38 20 31 36 2e 33 36 32 20 31 35 2e 30 33 20 31 36 2e 35 38 33 38 20 31 33 2e 32 38 36 32 43 31 36 2e 38 30 30 36 20 31 31 2e 35 38 31 32 20 31 35 2e 35 38 33 20 31 30 2e 30 30 38 38 20 31 33 2e 38 37 37 39 20 39 2e 37 39 31 39 34 43 31 32 2e 31 33 34 32 20 39 2e 35 37 30 31 39 20 31 30 2e 36 30 30 35 20 31 30 2e 37 39 32 37 20 31 30 2e 33 38 33 37 20 31 32 2e 34 39 37 38 5a 4d 31 34 2e 37 32 33 38 20 31 33 2e 30 34 39 37 43 31 34 2e 36 33 35 31 20 31 33 2e 37 34 37 32 20 31 33 2e 39 38 34 38 20 31 34 2e 32 31 35 38 20 31 33 2e 33 32 36 31 20 31 34 2e 31 33 32 43 31 32 2e 36 32 38 35 Data Ascii: .162 14.2415 11.3458 15.7703 13.0895 15.992C14.7945 16.2088 16.362 15.03 16.5838 13.2862C16.8006 11.5812 15.583 10.0088 13.8779 9.79194C12.1342 9.57019 10.6005 10.7927 10.3837 12.4978ZM14.7238 13.0497C14.6351 13.7472 13.9848 14.2158 13.3261 14.132C12.6285

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49815	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	2822	OUT	GET /static/images/home/kanban/batch_actions.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D Range: bytes=0-
2024-04-26 14:40:59 UTC	423	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:59 GMT Content-Type: video/mp4 Content-Length: 337863 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 0-337862/337863 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:59 UTC	832	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 05 0a 14 6d 64 61 74 00 00 02 af 06 05 ff ff ab dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 33 20 72 33 30 36 30 20 35 64 62 36 61 61 36 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 31 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 33 20 64 65 62 6c 6f 63 6b 3d 31 3a 30 3a 30 20 61 6e 61 6c 79 73 65 3d 30 78 33 3a 30 78 31 31 33 20 6d 65 3d 68 65 78 20 73 75 62 6d 65 3d Data Ascii: ftypisomisomiso2avc1mp41freemdatEH, #x264 - core 163 r3060 5db6aa6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 03 00 00 03 00 00 03 00 00 03 00 00 03 00 00 03 00 00 03 00 16 11 00 00 00 13 41 9a 24 6c 42 ff fe 8c b0 00 00 03 00 00 03 00 00 1d 50 00 00 00 10 41 9e 42 78 84 7f 00 00 03 00 00 03 00 00 09 79 00 00 00 10 01 9e 61 74 47 ff 00 00 03 00 00 03 00 00 0e e8 00 00 00 10 01 9e 63 6a 47 ff 00 00 03 00 00 03 00 00 0e e9 00 00 00 19 41 9a 68 49 a8 41 68 99 4c 08 5f ff fe 8c b0 00 00 03 00 00 03 00 00 1d 51 00 00 00 12 41 9e 86 45 11 2c 23 ff 00 00 03 00 00 03 00 00 09 79 00 00 00 10 01 9e a5 74 47 ff 00 00 03 00 00 03 00 00 0e e9 00 00 00 10 01 9e a7 6a 47 ff 00 00 03 00 00 03 00 00 0e e8 00 00 00 19 41 9a ac 49 a8 41 6c 99 4c 08 5f ff fe 8c b0 00 00 03 00 00 03 00 00 1d 50 00 00 00 12 41 9e ca 45 15 2c 23 ff 00 00 03 00 00 03 00 00 09 79 00 00 00 10 01 9e e9 74 Data Ascii: A$lBPABxyatGcjGAhIAhL_QAE,#ytGjGAIAlL_PAE,#yt
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 95 53 ec 8b 87 03 51 62 24 2d 66 be f7 cb fc ae f8 49 42 6b d1 b1 77 69 c6 40 62 5b 4d df a0 84 4a ad 7f 80 82 e7 c0 c1 10 ff bb 31 79 12 3b f9 ef 82 22 19 23 47 48 7c 6b 70 15 61 b0 6a c0 f6 f8 bc 84 96 b0 41 72 09 3d 62 38 b2 da 87 e3 d4 50 ec 2a 46 a0 ec 04 b1 a9 02 db 94 87 2f 00 a9 48 d7 af 44 3a f6 06 a1 c5 53 ef a0 ec d6 41 cc 18 82 d2 79 86 7c a9 9f de 9d bd de f1 f9 40 0a 23 8a f3 4d d5 70 5e 6c b9 ca 9e 05 0e 78 8e fb 7f b6 40 5f 9a ee 2f a2 ea e4 a9 3f 3b c2 22 2b ff 71 71 27 ca b7 13 84 d8 be 8a 8f 7f a6 6d c3 c4 fc 9a c4 29 e2 da 7e 4b 98 c9 e0 e5 c5 7a c9 e9 73 30 8a d1 e3 b4 9c 90 38 f5 22 38 6c 67 75 eb 51 95 ba 51 94 61 f4 a8 27 4f 46 71 15 a4 75 88 88 d1 83 04 ac 83 02 02 27 6e 2f bf 75 e2 b0 e0 92 a9 75 79 86 ac 58 ef a9 78 cb ce 63 60 Data Ascii: SQb$-fIBkwi@b[MJ1y;"#GH\|kpajAr=b8P*F/HD:SAy\|@#Mp^lx@_/?;"+qq'm)~Kzs08"8lguQQa'OFqu'n/uuyXxc`
2024-04-26 14:40:59 UTC	400	IN	Data Raw: f3 0f ba df 3d 44 3d b6 1a 21 27 c8 d7 bf c3 c6 76 a0 7c 96 a1 74 a9 ab 5f 7b 14 ff 9f 0d 00 0f 14 53 3d 92 6f 8f 91 84 76 49 da bc 49 3f 37 f5 0f 75 c3 e8 fc 2c d1 37 6f 89 6a a9 e3 ef 57 ee 2c 5e eb ed 84 50 59 64 49 31 42 95 b8 3b 21 2b eb 25 45 dd e6 3e 2f 90 08 26 ec ce 83 04 e9 7c 67 62 6c d5 58 60 a7 3c 06 6f f7 ab 5d ae 07 b1 68 73 9d 19 b7 c4 9f 73 42 00 89 c1 86 b4 90 01 87 bf 55 24 75 15 dc 7a 75 10 4a 5e 02 a5 ab 14 9e a6 52 02 a2 91 9b ff ee bd 0e 20 a9 a3 d9 c7 58 ad 1f 85 85 4d dc 6e 87 dc 13 95 97 aa 8a 7c af a9 bb c3 2b 67 6a 1a 1d b6 69 14 8a da c9 a5 e7 9a 34 c8 9f 45 7b 57 b2 4d 99 78 41 57 84 f5 0a ac b0 5b aa 9a 47 c6 0e 65 79 04 29 1d d8 b8 02 32 36 3d d6 c5 ac 42 f6 a5 db e4 4d 5d 12 56 80 a0 7e d7 3d 3f ed 27 1f 43 b0 21 01 8a 58 Data Ascii: =D=!'v\|t_{S=ovII?7u,7ojW,^PYdI1B;!+%E>/&\|gblX`<o]hssBU$uzuJ^R XMn\|+gji4E{WMxAW[Gey)26=BM]V~=?'C!X
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: be 26 4e fc 59 80 45 5b a4 eb 00 c4 40 54 e8 b5 60 34 d7 9d 81 53 8f dd b6 8c b5 b5 da a6 0f 5e 72 e3 b1 33 4d ba 45 2d 0a ae 9c 8b 89 44 9a 9d ad c2 4b 3e de 0c a4 f2 ae 77 e2 3a c9 af c1 84 4b 6e 2b 56 47 cb 9b 96 96 36 3b 67 d8 ba 74 d2 d0 d4 36 5c 0f a5 05 7f d1 90 33 65 14 7c e5 53 88 a9 be c5 fc 40 75 7b 3f d5 20 09 3b e3 a3 76 bd cf ec 27 ed 8d 1f 5b 90 17 2a bb 7e ec 3c 32 51 75 98 9e fd 39 99 1f d6 d9 bf 23 e7 fc 2d ee a6 ce b8 4b 12 b3 91 70 87 54 af ca 9a eb da e7 99 df 3a ba d1 d2 99 83 94 ab 59 da 50 55 87 b5 ce 85 32 87 ec 58 ea ff 9b 93 b4 3d 43 00 11 ed e7 a8 b0 95 db e4 5b 89 ab a3 e1 3f fc f6 9c 6f 7b 13 25 7c 5b 8e 8f 94 f7 6e f9 33 5b 94 f1 f6 94 f5 ff 0f c9 8a 6e 30 bc f5 b7 d2 5b 5e cd b9 4b 0e d6 75 c8 2b f1 b8 dd f7 03 4a 7e 79 65 Data Ascii: &NYE[@T`4S^r3ME-DK>w:Kn+VG6;gt6\3e\|S@u{? ;v'[*~<2Qu9#-KpT:YPU2X=C[?o{%\|[n3[n0[^Ku+J~ye
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 57 3f c1 9e 2c b1 a9 09 4e c9 82 bd 6e 6c b4 1c 7a f3 66 b4 0d 6b c6 9b 17 63 a8 91 01 a5 3a c1 04 89 2e 59 ee 00 71 91 90 4b 36 fa 0a f9 27 3d c5 11 16 38 ca 3b 4e 5b df 70 aa b2 57 62 db fb 6f e3 45 72 b3 0f 67 bd 67 58 97 05 6e 45 9f 1d 17 e1 96 42 73 1a de e5 e1 a8 94 ba 8a 28 1f 84 86 2e f8 f2 03 1f 36 a8 cf 8e e0 cf f1 c9 97 b6 ec 4e 42 26 90 96 b3 29 98 85 dc 85 c8 3c 62 52 93 54 c7 77 bd 96 07 31 a5 2f 97 58 6d ed 39 ba 21 ab 6d f7 a5 15 a9 30 43 6c e3 eb 5f 01 1e b9 e3 b7 0f c8 a4 c9 65 43 cb d6 c5 3c 4e ed c3 21 cd 11 e3 97 3c 06 15 a3 13 62 fc 7d 08 87 19 41 a4 a5 a9 77 1d f9 27 bd 5c c2 76 ec c5 84 39 90 2d 06 c7 a4 1b 7d 2d 99 8e 5f 3c 2e 16 fa 54 87 29 31 f3 d5 28 31 90 df 4e 57 99 9d b4 55 fd a7 16 12 b6 59 4d 3b 98 51 c3 da 58 33 d0 79 9d Data Ascii: W?,Nnlzfkc:.YqK6'=8;N[pWboErggXnEBs(.6NB&)<bRTw1/Xm9!m0Cl_eC<N!<b}Aw'\v9-}-_<.T)1(1NWUYM;QX3y
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: cc 1b f8 b0 13 44 f9 cd 14 c4 3b 63 12 58 fe 50 ee f8 2c 74 92 51 87 13 8f 4f 62 a1 2b f2 37 57 1e 41 77 69 06 4b 23 57 9a e8 91 60 76 e7 44 21 fb 1b 9e 08 b8 5d 14 67 98 4d 45 5f 4e aa 69 bc 04 c9 b0 3f 2f 3d 66 34 b1 e1 a9 ff db 00 8b 85 db 93 0b c8 70 7e 53 ff fa d5 6e 00 47 6d 27 96 11 8b de 72 f9 1f 63 1f e2 ec 12 ce aa 01 29 1c 44 f3 4b 8c c4 ac 92 22 c4 43 ac 0d 4d 57 f6 ae 06 20 da b4 1d 6a 6d 21 3a f0 e5 08 2d e2 8b 3f 3a 91 73 67 de 31 61 37 71 14 f0 c6 d5 ba 2b c3 df 74 38 ed 9c 65 df 5e da b3 4a 3b 9d 8c 4e ea 85 74 01 d5 5b 9b 0a 3b 4e c4 e3 d4 52 7a 28 ff 09 69 2d 8d e0 b9 42 fb 46 7a df 48 58 08 39 44 f5 24 4b dd f1 1c 9b 37 59 bb 5f 08 ad cb 09 38 15 2e 1f a8 83 e9 6c 24 d8 d6 e4 52 af e3 4d 3a 85 7e e6 13 a0 5f f6 f5 8d ba 6c ad 29 f6 16 Data Ascii: D;cXP,tQOb+7WAwiK#W`vD!]gME_Ni?/=f4p~SnGm'rc)DK"CMW jm!:-?:sg1a7q+t8e^J;Nt[;NRz(i-BFzHX9D$K7Y_8.l$RM:~_l)
2024-04-26 14:40:59 UTC	331	IN	Data Raw: 05 ee c8 44 70 2b 3e 03 12 f2 3e 4a 26 27 1d 6a b7 21 a4 29 8a 86 a5 d6 a7 9d 02 01 28 6a 0e 85 e4 76 9b 48 95 8a 4a f5 fa a8 2a 8f 6f 11 6f 6c 8c 2a d3 c5 85 d1 f4 52 d1 d7 52 86 af 96 38 37 44 d9 19 6a af d4 62 b1 2d 27 29 58 e9 01 c5 38 de 22 a6 01 b8 23 ef 88 03 fa e1 cd 19 db 1c fa a7 cd 9f a3 6c 26 0e cc 04 84 b4 dc 09 b1 89 ff 74 37 e6 7d 79 49 f3 22 3c 48 a1 2a cc 4e b4 22 54 1c d4 58 c4 77 55 48 3b cb 84 dc f5 8f 43 16 7a f8 3f 51 97 2e 62 60 43 1c 3f e8 26 d2 30 ad 3f 1d 52 c2 b8 27 cd 06 7d 6f 5b dd aa 44 f0 fa 69 f0 3c 3a e8 5c e6 9a dd b8 03 26 37 be 2f 6d 39 d2 05 26 a8 d4 fb a9 6a 95 08 85 b0 99 d7 40 26 70 d0 62 15 00 cd e0 3c 8d 11 ee ef d6 cc 9d 87 d2 de d5 81 33 26 46 aa fa dc 7c ef ea 69 fd c9 05 3f 49 b9 6c c8 e2 6a e8 e8 7e af 4d d0 Data Ascii: Dp+>>J&'j!)(jvHJoolRR87Djb-')X8"#l&t7}yI"<H*N"TXwUH;Cz?Q.b`C?&0?R'}o[Di<:\&7/m9&j@&pb<3&F\|i?Ilj~M
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 07 d4 4c d6 b9 ae 86 9a a1 73 80 24 91 80 de a8 b9 2a 43 6c 64 00 09 0f ba 7b 03 9e 60 bb 9f a8 24 32 15 ae 74 0c c3 44 5f da 35 72 8e 50 dd e1 3d 9c 06 a2 26 14 d3 cf 9b b3 e1 c2 d9 7b 9a 02 78 86 30 95 8e 81 a9 a8 18 3d 6d 58 09 02 2c 50 19 09 76 da c4 67 fe aa e5 e7 c5 9d ba c5 2d 8c 1e 3d 1c 6e 01 bd d3 b4 f4 a7 56 38 8b fc 0c 8b 3d b1 1e f7 26 d1 55 b5 12 55 4f 1b ad 57 51 40 7c 84 aa 8e 4c 31 dd cb 0f 9b 45 90 1b 45 59 4b 81 43 77 de f7 77 86 b6 4b c4 aa b5 b2 df e8 e0 bd 0e 78 3e 55 58 bd 6f 1c 90 cf 6d ad c9 88 83 77 fb 4c 67 76 88 09 1e 6e 49 9e 28 35 ff 06 33 75 89 65 ed fb 86 d0 9c 18 bd 4d 9c af e9 4a da 7e d6 d6 5a d4 f5 a9 30 00 db 33 10 74 57 c0 fe 83 d9 62 41 cd 89 ab 3e 54 e9 f3 8e 85 a4 08 e1 a7 46 16 8e 1d 5d 5c 9d ae 8f b9 97 5f fe bf Data Ascii: Ls$*Cld{`$2tD_5rP=&{x0=mX,Pvg-=nV8=&UUOWQ@\|L1EEYKCwwKx>UXomwLgvnI(53ueMJ~Z03tWbA>TF]\_
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 5b 55 9f c9 12 e0 a8 21 aa fe 11 a8 a5 7e dc 42 93 43 67 37 95 48 18 d9 c7 79 17 98 46 12 22 8c c3 43 67 6c d0 24 85 82 9c bb 90 55 d3 cd e8 5b 4a d0 57 d2 b8 38 8a 57 43 fd 2e fe 07 fb 4a 04 1d 7b 5f cb 29 11 da 3f df 77 bc 29 b5 bc f6 d1 f8 bb fc 9d 47 1d 0c 35 87 0a d0 9b b1 88 e0 0a d6 b9 b3 04 6d b5 8b 46 25 28 69 90 c2 7a 06 b8 df c5 a4 0e 75 5a 13 95 b0 40 aa c5 a3 59 a8 19 84 86 6f 00 1f 38 7b 2a 0c 96 7e ee 8b ad 83 5d 0a 1d 94 00 11 b0 7b 2e e7 22 9f ac 93 4b 5c a0 8b b8 70 7b 68 e7 4b 1f c8 88 b2 6b 4a 8f 33 fd 62 02 85 65 a5 50 be 9e a0 eb da 79 59 66 3f 22 8f dd c6 31 09 7a 08 9f 63 7a 52 55 86 b4 56 5f 5c 19 bd 65 f5 3b aa df c1 6d f3 6c 0f f5 54 36 0b c0 ff eb 9a 3c 69 d8 34 c4 d8 b8 9f 80 0c 50 35 93 90 b7 ea d3 96 24 f0 81 43 4a 84 2f 35 Data Ascii: [U!~BCg7HyF"Cgl$U[JW8WC.J{_)?w)G5mF%(izuZ@Yo8{*~]{."K\p{hKkJ3bePyYf?"1zczRUV_\e;mlT6<i4P5$CJ/5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49816	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	2823	OUT	GET /static/images/home/automation/automation.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D Range: bytes=0-
2024-04-26 14:40:59 UTC	423	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:59 GMT Content-Type: video/mp4 Content-Length: 237807 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 0-237806/237807 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:59 UTC	832	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 03 82 64 6d 64 61 74 00 00 02 af 06 05 ff ff ab dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 33 20 72 33 30 36 30 20 35 64 62 36 61 61 36 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 31 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 33 20 64 65 62 6c 6f 63 6b 3d 31 3a 30 3a 30 20 61 6e 61 6c 79 73 65 3d 30 78 33 3a 30 78 31 31 33 20 6d 65 3d 68 65 78 20 73 75 62 6d 65 3d Data Ascii: ftypisomisomiso2avc1mp41freedmdatEH, #x264 - core 163 r3060 5db6aa6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: d7 99 fc 61 da 03 4f ac 4d 27 c1 af e9 a7 66 72 14 57 86 e0 69 ea e5 3e 46 b9 92 58 b6 c4 f5 a3 fd 87 a4 2b 40 38 cd 92 19 ce b7 2a cc 23 4e f3 db 37 47 dd 5e 08 1a 79 87 b8 f2 69 69 15 c6 53 74 41 b4 5f 8d ef 3c c9 65 48 12 13 23 5c 63 97 60 14 2a 72 98 10 f9 ec a2 93 c5 91 49 3c 04 5f 3a 5d a4 2d dd ca 08 a0 ee 39 4e b2 28 82 bb 61 ee b2 11 76 f5 e8 e2 15 e7 9b 1f df e8 19 74 49 2c cd 6e 1b c0 02 5b f0 36 18 6d c3 c9 fc 0f 30 1f f5 49 de a3 5e be 2c 3a 2c de cf b8 1c 8e 73 87 93 4c 9b 1a c8 a7 b3 c3 7a 7d 54 e6 ec 64 5f 40 4e f5 5d 01 f5 c5 36 54 cb 8c 80 4e da 34 3a 40 86 45 9c fa 88 e0 cf 23 c8 9e 45 4a f1 71 38 bd f3 f8 47 57 14 50 24 a9 17 05 23 fd 8c 02 6e f5 44 71 b4 9a 08 a3 9d 74 0f f8 a0 04 1c 93 9e 12 48 f1 a8 b6 91 f7 14 e3 5f 62 17 e4 c7 21 Data Ascii: aOM'frWi>FX+@8#N7G^yiiStA_<eH#\c`rI<_:]-9N(avtI,n[6m0I^,:,sLz}Td_@N]6TN4:@E#EJq8GWP$#nDqtH_b!
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 69 0d 6c a2 f3 ac 46 f8 14 11 73 1b 20 7b 56 ea e6 eb ea 10 e7 75 72 3c fc 42 20 ea bf f7 69 c1 dc e1 52 86 5e c3 34 5d 07 27 81 15 26 6f 2e 58 42 5d ae 3b dd f1 33 71 e3 35 c4 2b 57 4a 14 c1 d6 9b 1b a0 4b 41 d5 ab 5c 79 0d 5f 12 5f ba 8f ff ab 8e b1 5e 74 5c 02 dc e2 4e f2 b7 33 d7 38 a9 90 a5 2a 25 2a 4f 0f f2 b8 b9 94 dd bf 87 87 0e 03 81 e3 cb ad 28 25 54 02 57 53 68 a3 a8 45 85 0f 0a fd 34 3e 91 6f 07 bb 9e 37 0d 74 bd ff be 52 02 c8 07 0c 62 49 88 2e 9a dc b6 72 80 00 ce 30 48 cc 21 54 74 23 79 37 38 7c 60 c1 cf 00 d2 e5 27 e4 15 d6 24 66 32 23 03 50 7b f2 75 d1 54 50 52 c4 dc 39 3e bd 88 98 d5 20 ad e1 74 97 11 85 1e f3 c1 e1 6f 68 86 12 b4 b4 43 f0 0d e2 3b 70 a2 53 86 0f 64 83 83 f1 15 f9 db dd a9 bf f7 5e 1f dc 6c 44 5c 24 53 d8 f1 18 8b 41 5c Data Ascii: ilFs {Vur<B iR^4]'&o.XB];3q5+WJKA\y__^t\N38%O(%TWShE4>o7tRbI.r0H!Tt#y78\|`'$f2#P{uTPR9> tohC;pSd^lD\$SA\
2024-04-26 14:40:59 UTC	400	IN	Data Raw: 24 f9 7f 4b 2b 60 11 27 8c 51 66 72 19 be 46 c0 aa 76 eb a4 98 24 77 c3 af 34 d9 ff bf cc 8a ef 4c 6c 94 e6 5b ed a8 1d 2a 5e b4 ff 38 fc 68 cc f2 36 7d 65 cb 1d 95 e1 8d 40 8d 9b 06 4e b7 d3 79 6c 1b ef 81 39 1e 52 cd 2a ec 99 96 47 6d b2 a8 d2 3b ef 12 3e b7 1a 7d f4 d7 df 33 79 bb 8f 04 ef 33 ea 08 42 1c 96 1b 91 06 e1 b2 e3 0c e0 9f 28 28 e2 8a 6a 26 2f bd ff 1c 88 dc 16 b6 3c 58 76 4a 38 b4 56 ad 45 f5 8f 5d 21 c0 89 48 32 da d9 ee 12 d2 f7 41 b1 25 ae 89 21 88 60 4d 84 65 5a 81 1a e8 02 44 88 aa 4e f3 f5 fd f6 79 78 74 e7 c6 31 7c f6 8b b6 b5 18 78 ab 6c 0b c2 d6 60 e8 36 47 9c a3 bd 1e ea 88 ae 67 9d d7 78 9e 78 6e 37 42 92 00 24 d9 99 03 3b 27 b9 d3 5d 37 f9 6c 62 8f 19 c2 68 f4 1e b8 81 ce c2 58 e5 a0 77 33 2c d5 13 1a e2 9f 4b 1b c3 a2 41 2e d8 Data Ascii: $K+`'QfrFv$w4Ll[^8h6}e@Nyl9RGm;>}3y3B((j&/<XvJ8VE]!H2A%!`MeZDNyxt1\|xl`6Ggxxn7B$;']7lbhXw3,KA.
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 97 29 a8 36 ce 48 9c 4c 30 b1 c4 e3 30 3b cb 3d 52 87 a4 2d c2 a1 31 67 87 16 2f 47 66 21 39 87 e4 9b 50 76 f0 68 6b a9 66 e0 9b f6 84 a8 9c 1b 58 b8 c5 15 c7 52 c6 51 ef 70 7e af 06 64 70 e2 6f 4b 6e 28 a2 60 a1 01 70 ef 1a 9e a0 7c c4 85 95 76 5e 29 04 71 10 42 0b 39 bf 54 ce d2 dd 5d ea e9 c5 e1 5f 04 f0 d0 8f 92 da 6d 31 0d c4 9d 38 7a dd 5d ba ff 06 74 79 12 8f 26 5c fc 41 3a 92 5b f5 1d a3 ed 8b ba a4 d9 7a 6c 20 67 9b ea a8 49 c5 58 5f 6b bb e5 1b df 5e 9e 53 c3 9d 25 26 a1 7d 27 c2 e1 f7 8a 19 a2 eb d4 79 86 a2 f0 3b 2e c2 a3 e1 9e 6f 04 34 72 78 17 ad 42 68 c3 97 45 91 24 c7 8d f5 71 5e df 37 1a a8 bd 96 8f 23 88 c8 36 83 13 6d be 92 c7 54 1c df de 0a e6 72 ab 87 9f 52 f6 76 8e 40 d2 d3 5a 2a ce 1c 52 b9 6e b1 e9 5f af 25 32 d0 27 a7 c8 57 19 e4 Data Ascii: )6HL00;=R-1g/Gf!9PvhkfXRQp~dpoKn(`p\|v^)qB9T]_m18z]ty&\A:[zl gIX_k^S%&}'y;.o4rxBhE$q^7#6mTrRv@Z*Rn_%2'W
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 0e 21 6e 32 77 f0 fe 9f 63 5c b2 f8 4b 20 20 6c e0 54 94 c7 1b ca c1 71 97 bf d6 8a 15 13 57 24 c8 a4 74 28 e2 07 6b 2d 39 89 ac 7f 56 88 68 63 ac 2c 67 b1 57 0e 3b c3 57 9e 92 22 8f 2c c3 34 04 27 60 0a b4 83 62 ea 28 ac 6d 0e 0c 5b f9 3e c1 d3 b3 39 4a 96 12 c7 cf 29 92 28 3b 05 15 8b d9 86 a5 80 03 42 4c 59 7d 3b d7 af 30 93 0f ce f1 dc a2 19 ab 58 c3 4f e5 35 10 80 9b a9 7a 51 81 c4 f2 fb 41 06 49 52 51 9f ad ed c9 7c 1c 6d bd 76 10 bc 5f bf 0b 65 4c d2 9e f6 bb ea 8d 00 99 34 5c 39 a2 60 7f ed 15 21 b5 02 4d 8c 9a e3 f5 6f d4 5b 17 97 ed db 73 40 e3 5b 3f cb 4c f5 cb ee 1e 99 e0 8a ad 73 0d 03 cb d2 dd 12 26 76 d0 40 9f 09 92 71 25 b3 56 ae f8 33 ec d9 d4 08 7e df 59 a0 bc b3 d8 09 d6 6a fe 21 89 9e 5a 5e cc a9 d2 9d 7b 5f 45 c4 63 a5 a9 75 9c e8 73 Data Ascii: !n2wc\K lTqW$t(k-9Vhc,gW;W",4'`b(m[>9J)(;BLY};0XO5zQAIRQ\|mv_eL4\9`!Mo[s@[?Ls&v@q%V3~Yj!Z^{_Ecus
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 3b 57 a8 77 8f f7 03 34 13 30 5b 96 17 42 e4 fe 97 8d d7 2e b5 19 fc fe 40 c7 c0 b0 cf 04 2a 5c ef cb a3 56 b0 49 3c e6 d3 e2 5b 17 81 3e 68 2b 9f ec 7f cd 0b f6 63 50 38 d4 48 3a 58 9a 40 e2 ee 57 ce 6d 5f a5 81 b8 ce a2 ff 4e 80 25 0e 75 80 81 ae 26 10 7c ab 2b 7b f0 15 1e 22 6e bb 29 1f 8e fc 63 c0 67 33 b5 f9 c9 cf 12 e4 4a 29 46 30 1a 9c 13 0f 85 05 76 82 c5 7c a9 c9 fe ee b7 cb 4d 18 ba 3c d3 54 fe a4 b4 f6 f2 4a ba bc c5 49 11 7a b8 ca ce bd a3 08 27 30 5c 2c c4 12 2d 74 1a 52 dc 23 bf 1b 83 6d e5 d5 59 ab de 75 88 57 20 46 b8 88 28 5f b0 67 82 25 9f 73 fa 4d 1c 04 49 0c 01 f6 df 3a 3f 0c b8 8f e8 9d c9 e3 7d 64 57 78 1c f8 ab 18 bd 88 0a b0 c6 d3 58 8e e2 b5 dd 77 90 9e ae 40 86 b7 76 a3 37 2e 6a 09 33 32 16 c2 a0 ac 7d 6a f6 e2 e7 1c c4 4f eb a4 Data Ascii: ;Ww40[B.@*\VI<[>h+cP8H:X@Wm_N%u&\|+{"n)cg3J)F0v\|M<TJIz'0\,-tR#mYuW F(_g%sMI:?}dWxXw@v7.j32}jO
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 79 27 f9 3a 78 04 38 fc 0b 85 0d f6 87 7c d0 50 cd e1 85 9c 46 c3 97 f8 bc b5 e6 aa 33 a3 f5 fd b7 f3 c3 63 dd 33 a0 bd fd 2b 74 9e ec 14 f9 0a db 30 47 29 b1 06 2f 3d 36 9d 4d be 83 85 20 e5 f0 f3 51 b9 75 a7 4f 9f 02 7c cf 59 f5 16 fe 7d 47 f2 17 e3 ea 61 a7 d1 57 59 d7 ba e1 13 54 e3 a2 a3 48 03 e2 49 b3 e1 23 b3 32 52 1d 65 9b 39 3e d9 cd 78 61 f7 b2 aa e9 57 8e 06 f3 68 da 9e 8a de 6a 5b d2 f6 28 3b fd a0 61 77 ef 28 2e 8b f0 0f 7d 7b f1 59 00 bb 35 0c f1 a4 3c f5 ac df a2 2f d9 86 c6 a2 ab 83 6f e6 cb b0 20 7b 7b 31 3b 10 51 8f 17 c4 18 73 40 40 fa 93 0d f3 30 8d fd 4e dd 3e 6a 8d 11 0b 42 3a ac 1b 63 00 d2 16 8d e2 fc b7 20 51 01 f9 51 1e 7c c2 c5 67 fb 8c 49 10 76 fd 2f 3b 35 c9 19 cb 44 3c e6 c4 7c d5 0c d1 0f 71 c1 f3 20 54 08 75 43 98 32 e0 ca Data Ascii: y':x8\|PF3c3+t0G)/=6M QuO\|Y}GaWYTHI#2Re9>xaWhj[(;aw(.}{Y5</o {{1;Qs@@0N>jB:c QQ\|gIv/;5D<\|q TuC2
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 5e c6 03 c3 40 53 6c d2 fd 0f 52 ac 91 17 e8 92 fc 3a 6b eb f7 19 eb 66 9f 7e 99 10 8f 45 51 3b cf 0c 7e b9 92 ad 9f 98 92 05 e3 f3 29 26 85 f1 e4 87 72 f5 0c 52 1b ed d7 d3 ee de 23 49 f2 48 7d 85 3f 0d 90 08 59 7a f5 4d 58 43 08 97 4f 2a 3d 1e 64 2e b2 4f 98 f8 96 17 7b ba 8b 84 7e 5b c6 91 57 5f f7 8c 9c 31 0c c7 a4 f9 44 63 b8 13 9e 83 98 61 32 d9 db 38 9b 37 88 c9 ed 81 c4 a7 03 a1 ca ae 0c e5 12 48 3a 23 f4 ed ed 63 24 dc db 5d 81 0c 32 ad b8 d3 07 2d 6f b9 c0 e3 1f 10 42 bb 88 0f 67 44 cc f0 c8 7e 6c 99 87 cf 42 0f e3 fd 4a 59 ff fa d9 f0 91 f3 f2 27 70 a4 eb ce 86 6a d5 0b 8e da 20 4a 11 dd 11 fa 5d dc 3a 17 53 4d bb 0f 8b 66 45 6f 41 ad 5c 23 3e cc f2 8b 03 46 43 00 0c 03 4a 4b d8 2f 24 53 e8 53 bb 68 7f e6 4c ad bb 63 2a 1c 13 7d f9 57 e6 cc 4f Data Ascii: ^@SlR:kf~EQ;~)&rR#IH}?YzMXCO=d.O{~[W_1Dca287H:#c$]2-oBgD~lBJY'pj J]:SMfEoA\#>FCJK/$SShLc}WO
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 1f 3d 6d 4b b2 bc ca 9e b7 0e 9d 83 d6 97 38 69 82 1a b0 f2 1d 9f 34 e9 62 9c 04 99 56 eb e0 2a 48 93 d7 dd 3b a1 dc 9b 79 90 c4 c0 50 39 e0 f7 9e 5b 4d 10 70 77 4f e2 1e e9 eb 74 c5 97 97 7c 9b 94 6a 96 71 d5 5d 08 64 b2 3b 9c 9d 1b f1 c0 ca f6 21 f9 e0 9d 59 f0 2b ff 0c ab d2 c6 d8 88 5d 73 d1 c9 43 73 67 77 a4 5e ed c9 6a 0e 29 16 c0 84 07 86 00 14 69 1d 33 ed c9 0b c7 1c a7 08 f7 69 8f 08 d5 21 af 61 70 91 7c 6b c8 3b 4b f1 e3 e2 38 12 78 80 c1 df 85 d8 88 a5 be cd cd 4a 40 d6 c9 70 83 f3 2d 57 17 1e 4c d9 99 7a 06 34 d5 1f df 84 9e b9 bf fa 61 b6 15 26 4e c3 d7 be 31 69 52 d1 ed ed 6e b6 9f 7d 21 fc 1b 3e ed 4f d0 98 19 02 cb b2 2f f0 b0 c5 34 e5 00 12 96 f3 0f 0a 46 43 3e dd a3 0d f9 2b 88 4f ac da 5f 00 6b 34 88 6f 99 ab aa 82 f0 71 ae 8e 8f 85 62 Data Ascii: =mK8i4bV*H;yP9[MpwOt\|jq]d;!Y+]sCsgw^j)i3i!ap\|k;K8xJ@p-WLz4a&N1iRn}!>O/4FC>+O_k4oqb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49817	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	2828	OUT	GET /static/images/home/communication/notification.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D Range: bytes=0-
2024-04-26 14:40:59 UTC	423	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:40:59 GMT Content-Type: video/mp4 Content-Length: 341743 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 0-341742/341743 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:40:59 UTC	832	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 05 21 6c 6d 64 61 74 00 00 02 af 06 05 ff ff ab dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 33 20 72 33 30 36 30 20 35 64 62 36 61 61 36 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 31 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 33 20 64 65 62 6c 6f 63 6b 3d 31 3a 30 3a 30 20 61 6e 61 6c 79 73 65 3d 30 78 33 3a 30 78 31 31 33 20 6d 65 3d 68 65 78 20 73 75 62 6d 65 3d Data Ascii: ftypisomisomiso2avc1mp41free!lmdatEH, #x264 - core 163 r3060 5db6aa6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: a6 ab 64 01 12 09 3f 88 b1 49 25 3b 27 32 e3 7a cc f5 74 33 dc 42 a4 a2 dd d7 bc a8 07 76 e2 ef a5 26 c9 15 8d 64 0d 2e 1e 42 c0 6a 32 fc 6d 04 1f 8c 3d 74 79 9c 88 e6 d1 6a db c0 ba 27 52 cf cc 2f 89 e5 6a c2 78 ba 47 d8 f8 37 39 de 7d 3f e4 c2 9e c0 b1 ba 56 5d d9 2c 01 11 44 ca 77 c7 80 06 3c 38 b7 2a c3 90 a0 78 b2 5e 87 7e 48 33 e6 51 cd 35 ac ee 79 bb db 11 54 ba 24 48 f6 47 c2 e8 74 fc 72 23 8a 8c 5f aa ad c6 e2 dd 57 8d db 87 c2 2a 97 c2 46 1f c1 35 37 91 ab 82 20 93 f1 89 a5 8a 22 99 ab a8 8c 06 7d 10 c3 78 39 63 2e 57 61 fc 66 0d cf c6 c3 77 6e 5f e8 61 29 a4 2f fb 1d 8d 52 83 c9 cf 80 42 a2 2e a9 f8 80 da 0b 88 3d 7e b4 9e 87 10 80 4c e3 41 c3 80 be ec 69 71 49 14 04 89 da 58 4d 9f a9 b4 ad c4 ef b9 0e e5 d8 31 ed da 61 c1 71 e4 9c 66 37 77 09 Data Ascii: d?I%;'2zt3Bv&d.Bj2m=tyj'R/jxG79}?V],Dw<8x^~H3Q5yT$HGtr#_WF57 "}x9c.Wafwn_a)/RB.=~LAiqIXM1aqf7w
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: da 88 98 09 7b f0 97 30 e6 3c f2 79 c5 8e 8f 38 cc 84 4f 3f 49 46 60 13 75 63 5b 32 21 ad fa e5 71 4d e5 5d 12 1e d6 db 5f 14 04 ba ce 96 47 94 e9 a1 9d d0 ff 2d 17 79 9f 88 a7 a8 24 18 be ac 35 64 5a 96 2c fe 84 10 25 e6 7a 81 28 56 e8 06 22 8a bf ab 86 d6 a0 e3 6b 8e b2 65 05 0e 18 ec d5 e9 b4 68 50 a4 6a 5a ea b1 c9 df f1 95 8e b8 16 94 99 c3 84 5e a9 89 f3 17 44 e1 62 5c 43 51 c4 a4 89 e7 3a 95 e9 a3 f8 95 33 36 ff 1a 87 de 80 65 39 51 71 44 d4 8c 17 49 54 a5 0f f4 c0 8e 50 24 72 95 63 3d fb f6 19 9d d1 c1 ca 8a 2c 28 b9 9b 1f a4 1e 20 f7 f2 cf e1 2b 35 88 71 01 31 d5 1b c4 80 17 32 f2 f1 49 91 20 f7 70 14 43 ad 6f 24 06 02 4c 0c 4b 40 16 cc 39 ff ef 6e 67 f9 c4 7a aa c5 85 ff a0 72 a3 36 ae 9c 54 0c a0 d6 f4 76 62 b2 d4 d7 62 f7 ee a3 c0 8a db 49 c9 Data Ascii: {0<y8O?IF`uc[2!qM]_G-y$5dZ,%z(V"kehPjZ^Db\CQ:36e9QqDITP$rc=,( +5q12I pCo$LK@9ngzr6TvbbI
2024-04-26 14:40:59 UTC	400	IN	Data Raw: 52 be 57 54 b3 02 8d 08 65 5f 8c 7e 93 2d c1 55 d3 65 ad f2 62 2a da 88 44 cd 26 9e 16 d8 49 10 61 c4 6e a4 7c e6 db 01 fe 2f 40 9b 2a 0d 0b 1b 18 7c b0 6c 9c 9b 3d 5c aa a3 f1 a4 92 b3 c4 04 09 98 ff d1 e5 bf ec b9 af 7a cf c4 6b 7f e6 ec aa bb 95 02 79 46 4b 59 2e 05 ed c5 d8 0b bb 53 21 83 5c db 51 1d c0 f5 28 e2 8c ce e3 91 38 40 d1 9f d2 d8 8a b8 a0 08 99 23 53 9f bd c2 39 92 72 c7 09 23 91 d9 00 83 fb f7 ad a0 92 5e 4e 84 fd 21 ba 8e 0f d8 e8 ed 11 9d 7f e8 c0 a7 d8 f4 90 d4 e6 b8 a6 c6 fa 48 35 84 70 b6 85 87 4d c6 b7 ea ba 32 a3 45 4c f1 f0 70 ce f5 f5 c0 37 4b 0e f4 ba 78 10 c9 9d 46 d3 67 44 cb 65 24 9f a7 de d7 04 6e 22 08 d0 32 57 0f 9b c5 06 01 b7 d3 c7 07 c0 1d 1d d1 b7 59 fc 14 52 04 fb 8a 21 b7 ca 11 ce 91 0f 4d d2 7d 6a 30 12 49 c3 4d 4f Data Ascii: RWTe_~-UebD&Ian\|/@\|l=\zkyFKY.S!\Q(8@#S9r#^N!H5pM2ELp7KxFgDe$n"2WYR!M}j0IMO
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: bf b1 a8 cb 9d ee 31 49 c7 03 49 e3 d5 6e 2c 15 a7 7c 3f f9 e1 17 43 ca 6b 40 71 49 e8 43 04 b9 5b b8 7c 05 89 b6 0d 2b 06 1e e2 f1 cc b0 22 27 a1 95 ae 06 1b e9 ed a0 43 67 2e 78 5a 9a 26 da 98 b8 ff be e9 57 25 82 99 76 fe 2a 4d 7f 14 c1 8c b9 b3 aa b8 0b 54 b6 96 c6 24 68 40 9f 73 23 7b 3d b9 50 8b 7a b4 29 30 60 52 21 a3 dc fd 5b 02 6f 31 45 38 cc e9 52 9d 3e 0d a8 ee 29 81 55 24 18 f4 84 e2 87 85 16 d8 6f 17 77 ce 11 5b 62 ef c7 8e 8a b4 ab 5e 2f 85 ba 79 14 71 92 a2 31 ee 00 12 97 78 a6 e5 04 30 9b 66 5d ad a2 18 02 46 f2 1c f0 f9 62 fc 6a 45 75 03 ff f1 e8 35 46 42 94 d1 32 ef 96 43 bd f1 6e 96 a2 86 a0 00 00 03 00 40 dc 92 e5 07 af af e5 59 ec 10 64 e1 89 14 74 27 e9 41 ec 79 75 f2 2b 87 9c 7c e5 d7 9f 1f 8a ee db a2 a7 61 b8 fe cf a6 89 82 00 00 Data Ascii: 1IIn,\|?Ck@qIC[\|+"'Cg.xZ&W%v*MT$h@s#{=Pz)0`R![o1E8R>)U$ow[b^/yq1x0f]FbjEu5FB2Cn@Ydt'Ayu+\|a
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 0d a2 da 9c 0d 20 2b 64 bb 08 ca a3 56 55 08 58 c7 e9 2d 62 8e 8a 0d 9f 53 35 1d 23 00 22 71 fc 63 83 78 b6 9b 69 09 1f bc 3f 55 88 f8 ca f1 40 55 4b bb 55 a3 1e 9d 7e 6c 2c ef 8e 02 84 17 8b 06 32 54 79 4d 45 78 02 60 e4 4b c9 b6 d1 c8 8c fc cd 82 5b c5 70 8f 34 19 96 01 3f 09 e9 f4 79 a9 29 c6 9c b2 9b 20 2b ad 5e da 31 bc 64 a1 a3 fe 6a 4e a0 02 1c 8f 6b 37 4b 7c 40 32 27 f6 b3 85 7c 08 8e b3 5a ed 8e 45 67 ad fb c3 d7 74 58 44 32 f3 b5 e2 dc fb a9 a9 2f 5e 61 7a ec 9a 81 f9 cf 77 7f ca 80 e2 1f 96 f1 75 c6 e7 3c 98 ae b3 c7 b1 88 b6 b4 23 cb cc 64 91 da 4f e5 1d ca c3 ab 88 7c 0d 2c ff aa 9a 68 6d 36 e0 43 8f 90 17 f4 d9 b2 7f f6 28 72 3a 26 59 69 ac b7 3c 82 dd 5e 03 50 07 9f 92 b6 f5 48 6c 21 28 aa 09 00 4d 4a 43 3e f5 78 59 af 83 42 8e 28 2e d1 0e Data Ascii: +dVUX-bS5#"qcxi?U@UKU~l,2TyMEx`K[p4?y) +^1djNk7K\|@2'\|ZEgtXD2/^azwu<#dO\|,hm6C(r:&Yi<^PHl!(MJC>xYB(.
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: 36 e1 10 36 dc 59 9c 25 38 59 ee b0 34 09 ce 44 b7 67 9b a1 d5 a8 35 32 b1 64 e2 eb f1 bd 7f aa a2 3f df bb f5 f9 e9 e2 98 91 a8 e9 e0 3e 8a 67 bc 7b 14 0b 20 a1 e4 51 68 34 63 1a f9 62 be 40 5b fa 31 4e 0e 67 ed 19 8b 6e 01 47 55 39 3b 86 71 2b 4f 5a e1 80 78 b5 d4 85 ca 69 6b f0 fd 6d 15 cf 54 4f 5a f5 ed b2 fe db 69 29 b4 04 84 bf c8 56 51 3f e8 45 97 60 4b 86 a5 64 0d 8b 4f 54 51 96 61 af 49 0d 46 ef 2e ef 70 78 14 20 3d 3d ff 74 de 22 91 cc 97 e0 0d 42 4d fb 68 ad 68 d8 fa 62 2d 21 dc 5b 48 58 65 8e cb 48 47 14 3f 83 64 80 24 df 7f bd de aa 18 a8 e7 7e 98 a6 e2 51 44 e5 db de 0a 7c 75 2d 3c 1e 28 c3 0f 70 0f 93 9d 9c 14 25 1f 76 12 73 59 5a 57 cf d2 c9 bf 11 fe 8c 26 a5 12 d4 81 5d bb d9 82 bd ae fb d3 98 32 1d d2 7a 90 f2 69 5b 9c db 92 d9 87 af 54 Data Ascii: 66Y%8Y4Dg52d?>g{ Qh4cb@[1NgnGU9;q+OZxikmTOZi)VQ?E`KdOTQaIF.px ==t"BMhhb-![HXeHG?d$~QD\|u-<(p%vsYZW&]2zi[T
2024-04-26 14:40:59 UTC	331	IN	Data Raw: 9b 22 cc 4f 44 97 7a 4e fa e7 a1 88 49 0f 4a 49 69 38 51 ae 69 de da fc a1 88 d6 ee 41 7c 3d 8f a7 9f 82 2f a5 47 69 a6 66 5b d2 c3 36 61 24 c0 62 52 dd 7d e8 56 2f 36 75 e1 fe 88 8b 51 2b 39 50 00 02 5d f8 6b 0c a8 58 0d 0e 1d 5f e5 42 c6 e9 fa 7e 9e 72 83 77 fc 03 2c b0 31 eb de e8 52 97 30 32 26 f0 55 42 48 f3 af b1 4f 40 91 0c 36 13 e5 fa 29 4b 32 c4 2f bf 07 87 a6 d2 9d 4f a6 ff 60 d5 8d 6b 75 fc e4 ea dd 80 b0 03 eb 0e 4e 7e 04 30 a1 cd b7 2c 14 4e e2 a6 e5 db 04 fd 38 8f b7 d2 e1 b0 ee 4b 65 65 2b 96 81 de 0a e8 d8 d2 90 66 f1 c9 a2 04 29 ef f8 82 54 03 81 ca 92 98 07 3a 1d fb b8 46 e6 e8 ac c1 fc c2 7c 86 bb fb 2e 44 6d 19 cb 0d 0f d7 be b1 c9 b3 9f b6 90 80 94 fa ea d8 76 da 80 48 10 20 78 e2 7c 3b cb 2e 7c b6 3c 8f 8f b4 dc f2 ac 4e cb 5e d5 a0 Data Ascii: "ODzNIJIi8QiA\|=/Gif[6a$bR}V/6uQ+9P]kX_B~rw,1R02&UBHO@6)K2/O`kuN~0,N8Kee+f)T:F\|.DmvH x\|;.\|<N^
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: c3 9c 4b 5f 5a 79 59 be 3e be 70 98 85 6d 0d 1d 82 2e 4b ff 6b e2 63 39 84 65 28 4b 57 69 6e 32 3d a2 49 b3 26 18 00 49 9b 09 d9 82 2c 45 b7 8a 7d ed 4b 03 ce e5 e6 e2 59 5b 8a e1 58 a5 37 70 f2 97 90 5a 48 64 e8 6e f2 c9 bb 52 eb e9 6f a2 00 c9 33 75 8a 6e 9a 53 d5 1b 84 4e bd 12 4a 9a 06 c3 55 cf 55 11 75 76 b3 92 f7 68 0e 3b 7a bf 7b 63 e4 cc ee 33 16 f1 01 93 5f 3c 20 fa 29 69 cd 9c 91 f5 c0 98 3a 37 4e 5e e9 70 b4 eb 00 88 5f 4e 61 33 66 e0 ee e7 94 fc 05 65 f8 25 47 9a b4 d7 23 d3 d0 22 65 23 32 e2 7a f7 17 1a 85 bd a8 1f f2 46 32 85 54 44 e4 49 56 2f 4a f2 08 01 37 8b 27 1b a0 96 6b e5 fd 14 5d f4 ea df 81 7e 9b 65 16 d6 ab b3 18 6b cc 62 fc 79 47 fc da 47 af df f7 fc e1 fa bb 6e 69 83 59 b4 c8 68 5b 81 a6 6d 64 d8 5f cd 44 0e fa ac 03 e0 42 a3 98 Data Ascii: K_ZyY>pm.Kkc9e(KWin2=I&I,E}KY[X7pZHdnRo3unSNJUUuvh;z{c3_< )i:7N^p_Na3fe%G#"e#2zF2TDIV/J7'k]~ekbyGGniYh[md_DB
2024-04-26 14:40:59 UTC	1255	IN	Data Raw: c0 3d 31 4e 72 f9 3f f6 68 61 11 89 06 3b 5b e5 bc 50 53 4e 78 b2 26 e1 cb a7 a9 19 f4 d4 4e f2 b2 c3 f8 f0 3c a5 0d a1 36 88 e7 56 b3 63 33 0c f3 2c 95 5c d1 f7 78 3e 8c 84 81 20 8d 5c cc 74 cf 57 7d cb 2d f1 7d ca 21 da a2 3f 71 86 0e 93 dc 06 d0 fd 1b f8 98 e9 f8 00 4d 0b 56 b8 31 fd d9 bb b8 cc f0 06 97 5f c3 2e 44 a9 66 7d a5 9d 50 d8 63 1d 65 45 97 4a a1 9d 61 f5 5c c1 52 55 e2 ce 2c 3c b0 55 9e d4 f7 70 7b df 78 0b 9f 76 ce 8a d6 c6 6f d4 7c 93 a5 b3 11 80 26 27 12 f6 91 76 d7 71 5c 36 c9 99 7f f5 04 20 e0 d7 41 b0 9d 86 c6 3b 3d 08 77 70 d1 70 5a b2 00 fb a1 a7 ef b6 f2 84 7f 6c 31 9d 78 dc 93 1c 39 6c 36 b4 c2 3c a8 aa 07 ba 7c 74 75 78 ea 08 60 61 b7 2e d1 d4 53 15 9c 82 fa 2a 79 7a 78 82 b0 8b 57 10 75 f6 3c 7e 81 98 cf b4 a9 15 f7 e3 0a 5c fe Data Ascii: =1Nr?ha;[PSNx&N<6Vc3,\x> \tW}-}!?qMV1_.Df}PceEJa\RU,<Up{xvo\|&'vq\6 A;=wppZl1x9l6<\|tux`a.S*yzxWu<~\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49818	74.125.26.157	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	618	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-24371500-1&cid=1930088754.1714142446&jid=1950879201&gjid=1889180982&_gid=1893265479.1714142446&_u=aGDAgEAjAAAAAGAAI~&z=1341193366 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:00 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 26 Apr 2024 14:40:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:00 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49819	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	2560	OUT	GET /static/images/home/index/repeat-particles.svg HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
2024-04-26 14:41:00 UTC	397	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:00 GMT Content-Type: image/svg+xml Content-Length: 1153 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:00 UTC	858	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 32 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 32 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 30 38 33 38 20 31 2e 31 33 32 37 34 43 33 2e 34 30 38 34 38 20 32 2e 38 36 33 33 20 2d 30 2e 35 38 35 32 32 39 20 39 2e 37 32 32 36 35 20 31 2e 31 33 32 37 31 20 31 36 2e 33 34 39 33 43 32 2e 38 36 33 32 37 20 32 33 2e 30 32 34 36 20 39 2e 36 37 33 38 39 20 32 37 2e 30 33 30 39 20 31 36 2e 33 34 39 32 20 32 35 2e 33 30 30 34 43 32 32 2e 39 37 35 38 20 32 33 2e 35 38 32 34 20 32 37 2e 30 33 30 39 20 31 36 2e 37 35 39 32 20 32 35 2e 33 Data Ascii: <svg width="26" height="26" viewBox="0 0 26 26" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M10.0838 1.13274C3.40848 2.8633 -0.585229 9.72265 1.13271 16.3493C2.86327 23.0246 9.67389 27.0309 16.3492 25.3004C22.9758 23.5824 27.0309 16.7592 25.3
2024-04-26 14:41:00 UTC	295	IN	Data Raw: 2e 31 36 36 34 20 38 2e 30 38 36 30 35 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 31 37 33 5f 31 30 38 34 32 29 22 2f 3e 0a 3c 64 65 66 73 3e 0a 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 31 37 33 5f 31 30 38 34 32 22 20 78 31 3d 22 2d 31 2e 31 37 30 32 33 22 20 79 31 3d 22 37 2e 31 33 37 34 33 22 20 78 32 3d 22 32 32 2e 39 32 31 34 22 20 79 32 3d 22 30 2e 38 39 31 31 37 33 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 0a 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 35 30 42 38 34 30 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 30 38 Data Ascii: .1664 8.08605Z" fill="url(#paint0_linear_173_10842)"/><defs><linearGradient id="paint0_linear_173_10842" x1="-1.17023" y1="7.13743" x2="22.9214" y2="0.891173" gradientUnits="userSpaceOnUse"><stop stop-color="#50B840"/><stop offset="1" stop-color="#108

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49823	172.217.165.194	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	1402	OUT	GET /td/rul/380335026?random=1714142458810&cv=11&fst=1714142458810&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v879103583z86436058za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link&hn=www.googleadservices.com&frm=0&tiba=Runrun.it%20%7C%20Process%20and%20Projects%20Manager&npa=0&pscdl=noapi&auid=922323486.1714142446&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 14:41:00 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 14:41:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUl5ZatZjIwjG2toGJqR4aS-S3SFyuIkbcqQwpUiCDuKZdvXvo7IeeMxh7Qg; expires=Sun, 26-Apr-2026 14:41:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 14:41:00 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 14:41:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49822	142.250.217.228	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:40:59 UTC	580	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-24371500-1&cid=1930088754.1714142446&jid=619370535&_u=IEBAAEAAAAAAACAAI~&z=221968100 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:00 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 14:41:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49825	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:00 UTC	2825	OUT	GET /static/images/home/flexibility/flexibility.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D Range: bytes=0-
2024-04-26 14:41:00 UTC	423	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:00 GMT Content-Type: video/mp4 Content-Length: 512388 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 0-512387/512388 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:00 UTC	832	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 07 b9 88 6d 64 61 74 00 00 02 af 06 05 ff ff ab dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 33 20 72 33 30 36 30 20 35 64 62 36 61 61 36 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 31 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 33 20 64 65 62 6c 6f 63 6b 3d 31 3a 30 3a 30 20 61 6e 61 6c 79 73 65 3d 30 78 33 3a 30 78 31 31 33 20 6d 65 3d 68 65 78 20 73 75 62 6d 65 3d Data Ascii: ftypisomisomiso2avc1mp41freemdatEH, #x264 - core 163 r3060 5db6aa6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: 03 00 00 03 00 00 03 00 00 03 00 00 03 00 00 03 00 04 20 07 6d 60 56 74 32 04 f7 80 01 79 00 00 0c cb 41 9a 21 6c 42 bf fe 38 40 00 01 0d 43 78 03 37 00 bf 85 d4 93 8b 2c 39 95 11 76 6e 80 4a 33 47 94 ce 60 fb ce 34 cb a0 c0 ab 27 f2 cb 07 0d d8 14 8a 75 13 65 03 f6 eb 01 56 4c af fd b2 86 c8 6e ba c1 8c c7 2a 8e ce 43 54 c9 de 8a be f3 04 49 00 46 97 db e2 2f 20 22 e6 28 1a db 49 d1 ce 74 7b 85 d7 f6 28 58 19 62 03 ba 0c 8e 80 cc 5b f3 10 70 81 fe 70 c4 d4 cf ae 70 58 cb 9a fb 3d 28 50 60 84 5e 8b 7b 7e 84 c8 8f b4 db b1 2b 03 e8 d4 c9 0d 34 28 43 82 98 40 05 5e c2 e7 2e 10 c6 d6 56 78 9d f8 b1 88 6c 00 4f cc f6 e5 e9 9d 37 53 b7 11 76 79 93 91 91 7c 1b 08 fb b9 b7 19 ec 21 c3 9a fd d8 de 13 6b 6b df f6 f1 f4 38 ec 0d 2f a1 fb 3b 36 d2 e4 fa 0f 2e ff cb Data Ascii: m`Vt2yA!lB8@Cx7,9vnJ3G`4'ueVLn*CTIF/ "(It{(Xb[pppX=(P`^{~+4(C@^.VxlO7Svy\|!kk8/;6.
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: c4 6f f9 dd 5e a6 d9 23 23 f6 34 91 d6 81 ef fb e2 8f 31 b1 67 f9 f4 a2 52 70 d4 82 71 80 ce a1 80 b5 f3 06 d7 8f 93 08 cb 70 47 4f bc 37 9d eb a2 cb 8c 5f ed 17 53 f8 b1 27 d0 9f f8 20 e9 87 a2 19 4e 23 18 1a c3 c0 59 3a fd 95 e0 08 39 52 ea 09 b5 b7 01 4c 17 bb 56 70 91 ce a2 98 c1 a2 3f ad e2 8c f5 e0 d5 ea 5f 77 0e 62 e0 6c 6b 06 16 e9 19 a4 3d 16 5a 73 dc f9 6a 46 d8 b4 3c 37 47 e8 9f 23 0f ad 41 3b 22 e5 0f a0 b7 e4 48 58 51 98 15 84 16 94 b6 b1 20 db 18 d0 90 7d b6 ca b5 28 e7 55 ff 75 a3 22 19 d0 72 18 4a 1e 6b 63 5a 47 23 d3 36 9e e7 1b 95 57 ee 63 59 9f 56 e6 71 30 20 c5 19 4f b5 3f 28 b9 b3 8a ec a1 73 76 ba 25 4e 58 c6 66 d0 a1 c6 b8 92 5a 69 af d5 d5 77 14 52 9d 0b 07 f2 ba 5c c4 e3 df 39 08 77 ee 1b 88 3a 56 79 24 85 d3 61 c1 b6 80 63 67 34 Data Ascii: o^##41gRpqpGO7_S' N#Y:9RLVp?_wblk=ZsjF<7G#A;"HXQ }(Uu"rJkcZG#6WcYVq0 O?(sv%NXfZiwR\9w:Vy$acg4
2024-04-26 14:41:00 UTC	400	IN	Data Raw: e3 38 2f ca 80 27 d9 fa b9 ba bf cc 3d 19 ef 08 91 15 a8 64 dd 29 d3 65 30 95 96 62 9f 83 df f0 40 c4 44 c9 45 01 78 eb b7 b1 77 76 4b 82 ba b9 b6 13 a4 36 da 41 c6 11 9f 38 39 79 7a 97 4d cd 1f 34 a3 e9 95 32 80 61 12 61 92 e5 73 c5 4d c2 e3 92 18 1b 21 98 d9 bb 85 9b 06 59 ff 19 1f 29 a8 56 fc 48 c4 31 43 0b 15 48 1c 6f 0e 08 83 6a bb 50 8f da 97 4f 30 ed 8c 01 9f 16 4b 1f 28 5b 1e 7a a6 3a 36 a8 c0 62 0d 31 6a 4c 32 e6 67 39 25 7d 28 37 84 40 3e 00 7b d0 21 4c 16 7c 61 45 c0 9f f5 2a a9 9e 0e ca ae 7f de 75 82 27 3a 56 c4 c7 5d 1f ec c4 33 a7 e5 8f 2e 76 46 db 10 94 68 d4 dc 2d 98 3e 21 46 f8 c8 de 9e d2 da 06 cc 80 a9 c4 c8 d7 61 d4 51 fb e6 a8 6c 30 0c eb ee 42 39 f7 98 6e e9 65 0a c7 06 44 ac 79 06 f0 30 e0 d4 52 5d 09 27 f3 9b eb 63 27 83 18 d3 33 Data Ascii: 8/'=d)e0b@DExwvK6A89yzM42aasM!Y)VH1CHojPO0K([z:6b1jL2g9%}(7@>{!L\|aE*u':V]3.vFh->!FaQl0B9neDy0R]'c'3
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: b9 48 ee ca ca be b8 98 7a 37 d5 11 e1 0b a4 52 d5 06 04 96 7d 8f 8c 2b 27 95 a3 1f eb 17 ac dd 93 c2 e6 44 aa d2 07 66 8f f1 1f b6 70 f7 7e 4b 27 2a e5 95 15 ac b6 3e 20 73 27 8a 3b 29 a0 03 90 f9 4a ac 5c 52 96 a6 81 cd 48 cb 2a e4 1c 15 c7 76 1e 6f 44 f4 74 56 6c 06 e8 9b 3c fe 86 87 cf f7 87 ed 64 9b a5 95 33 4e 7c cc 32 96 2f 4b ef 0a 28 4c 76 6c 96 d3 bb a7 7b 3c 7c 0e 6a 7e db 38 21 f8 1f b9 fb b8 fd c1 a4 e5 07 fa 9d 54 a8 6b 82 f0 0b e9 5f 25 a6 b0 b7 c5 f9 5c b6 e3 47 65 32 9d 6e 6c f9 fc e2 c2 88 34 41 bd c7 0b a4 01 c6 9c fe d5 d7 bd ef 6b 65 be 08 1f c8 18 47 ae 98 8b b8 22 ac 0e bf 7b c1 fb d4 72 fd 5c 8a df 83 70 15 09 c8 1e f3 ab e6 fc 67 76 bd c2 74 6c c3 83 6b fe ef 2f 75 ec d0 ff a2 01 82 c9 02 83 3c 83 bc d1 77 26 ca 66 26 15 b1 eb 51 Data Ascii: Hz7R}+'Dfp~K'> s';)J\RHvoDtVl<d3N\|2/K(Lvl{<\|j~8!Tk_%\Ge2nl4AkeG"{r\pgvtlk/u<w&f&Q
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: 9c 57 73 f8 87 09 36 d5 21 40 d4 d7 64 1e 78 dc 8f 18 e9 94 23 80 17 66 28 13 79 bc ed 77 26 dd 45 95 d2 19 ea 4e bb c7 14 be 46 05 56 b1 4f 4f aa 5d 6d 99 20 85 ae c5 7d ac bc fc 5c 34 b9 00 21 ed 6d 7b 47 c7 68 15 ff ff 23 4d 4b 82 ac 6f 3c b9 ec 7a 9d 5e 9f ed 8f 91 97 e1 06 dc 1a b0 ce fd d2 e0 ac 3f c2 34 6a 7f 1d 95 2a ca f4 43 37 6d da c5 e1 2f a7 db 9d 73 89 ed 61 27 91 5e 33 16 3a 0b cb 36 d5 29 0a 70 14 d3 2f 29 e4 d7 1e bf 3b 41 5f f3 2c 6d f5 45 79 e3 33 28 2d 7e b3 1b 00 75 40 b4 99 be 6d 8b 2d 73 e1 b6 b4 f7 ad 4e dc 7a 7c cb 62 3f 34 8a c3 b0 73 6c 46 d7 fa e0 59 88 b1 a8 9d 99 2d 11 24 54 e9 8d 8f 14 bb a0 a9 2a b5 88 be 16 97 0b 41 7e 71 d7 e2 5a c1 05 28 c6 e7 eb 17 7b 9f c9 eb a7 49 f3 2f 9e ed 54 5b 8b d5 10 21 f7 31 be 9e 75 51 89 56 Data Ascii: Ws6!@dx#f(yw&ENFVOO]m }\4!m{Gh#MKo<z^?4jC7m/sa'^3:6)p/);A_,mEy3(-~u@m-sNz\|b?4slFY-$TA~qZ({I/T[!1uQV
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: ab ee 02 15 4a 11 63 c6 58 4e a5 72 2c d7 a9 db 61 90 77 f8 3a 23 d8 3d 25 9d e0 27 73 52 d9 c8 a0 cf cb 75 60 94 5c 14 ed 6f 82 32 2e 1e 2a 98 5b 7d 0c 3b 12 85 72 8a 3e 85 75 f4 4e dc 41 ff 50 03 47 e7 9d f8 5a 5e 31 3e 0f fe 72 ea 8b 7f 7d 85 43 d8 d9 d4 30 eb 9d e7 c1 42 8d d4 6a a7 55 b5 d5 ee 39 aa a4 76 78 c2 84 b5 56 c9 f3 d7 33 db e5 84 fa 26 b4 a4 dd 49 61 4d 8f 21 80 af e5 7f ff c2 af 4c de 2f be 60 85 2f 23 0e 8b 0f a0 21 10 13 d9 0b 1c 42 69 ce f2 b6 6e b8 be c2 cd 71 9e 83 a0 8a 4c d6 16 8d cd e0 42 75 c1 34 43 2a 9d d2 4e 51 5b c6 aa 3d 4d 90 42 81 14 9f 29 ae 64 58 c7 77 73 bd 9a 63 ae 61 b2 a1 7b d1 23 5b 5f ae 21 ac c1 f0 1b 41 d0 4f e3 ad 6f 56 26 20 cf e6 ca 19 07 34 2a b6 28 56 b9 47 38 2a 74 77 42 f5 3f 6c 40 1f cd 19 7b ca 62 63 45 Data Ascii: JcXNr,aw:#=%'sRu`\o2.[};r>uNAPGZ^1>r}C0BjU9vxV3&IaM!L/`/#!BinqLBu4CNQ[=MB)dXwsca{#[_!AOoV& 4(VG8twB?l@{bcE
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: 4d c6 1c 0a 7c b2 13 31 46 14 03 72 bf 98 7b 6f cd 99 95 91 ee 36 3d 01 4e 1c 2f 12 ed 36 7c 78 de 2d a1 d4 61 fe 08 87 4c 74 cd 5c 20 04 6c 13 6d 00 37 97 ff 06 5c 10 00 74 7e 09 c8 06 b6 39 4e 44 40 0c 05 85 f5 8a 00 57 ca cd 7b 64 5b 58 70 eb 64 ae 9a a8 23 b7 c0 e0 31 d6 16 cc b8 d0 9c 2c 3f b7 9b a8 da f8 98 37 e1 18 53 ff 7d 50 64 54 c5 99 62 5f a1 2b 2f 62 1c ac 8f e4 3c 09 30 8c 18 9b 9e 0f ec cf 2c 42 dc 10 d4 c3 39 d3 c3 4d 37 9e da e5 89 ad b3 61 71 7c 8a cd 44 f0 56 5a af 8f e8 79 fb 80 57 fa 0f 11 7e 9a ef 6c ba 1c e9 94 02 11 34 f4 71 8f 38 e3 c7 13 1b 8e 59 be 45 8f 5f a6 36 a3 db d9 5e 7e 6a 0d fa d1 e3 ab f4 59 47 fd 8f 79 da 6c 54 6c 01 25 a4 28 8a 5e 3a 1a 2b 73 59 b8 47 c5 86 32 9b c7 dc 18 d4 30 d0 c1 76 eb 65 c9 49 af ef c0 2b ac c8 Data Ascii: M\|1Fr{o6=N/6\|x-aLt\ lm7\t~9ND@W{d[Xpd#1,?7S}PdTb_+/b<0,B9M7aq\|DVZyW~l4q8YE_6^~jYGylTl%(^:+sYG20veI+
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: c9 43 e1 fc b2 16 8e 04 39 17 67 92 e6 78 0a 6c 31 73 d8 84 0f 06 d2 1c 8e 0c fc da 5a 92 c1 77 55 a0 70 fc f6 d8 24 c8 28 c0 74 dd 05 73 3f 97 d9 f9 e2 8f dc b2 a1 36 9c 12 3d f1 88 f5 e8 18 bb b1 78 d0 b3 66 17 40 66 d2 14 b6 b4 d7 a3 9b d7 4a 52 23 5b 82 fb 2b 8d e9 b6 a5 e5 38 0f a4 c4 90 34 cc 69 01 3a 33 94 98 3e bb f7 61 89 42 a2 18 5d 0d 7c 72 58 c2 5a 58 d7 22 f4 a7 b3 fd 15 cc 1e 14 8e d0 ff d4 69 e1 d0 ca 2f d3 01 da f8 99 90 1d f9 71 3a 49 47 b1 55 37 21 14 92 c9 03 8d ce 32 bf 45 bd 0f 17 30 d2 f0 73 34 33 a4 36 3b c7 49 79 77 5d cf d9 98 63 14 9c 20 df 08 af 3c 60 8d 13 16 5d 9f 26 9d ae 5d 98 a6 ba 40 46 49 a2 a9 73 d4 e9 7a 04 f9 40 09 7b 05 79 0a d1 ad da 7b a8 2c 4d 8d bb 51 9c 06 d7 21 51 95 c0 96 5f f1 98 7e 79 ed 03 40 7d 87 1f e6 9e Data Ascii: C9gxl1sZwUp$(ts?6=xf@fJR#[+84i:3>aB]\|rXZX"i/q:IGU7!2E0s436;Iyw]c <`]&]@FIsz@{y{,MQ!Q_~y@}
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: 26 3e b0 88 ac a1 a5 ae fe 4b 5c d5 46 a6 b1 35 64 33 bf 7b 9a b4 f4 c4 17 f9 7d 97 d4 87 17 d0 7d 63 57 1c f8 37 a4 a8 f5 1b ab ff 83 30 10 d3 ab 46 12 56 f3 0b 2e eb fb 57 ae 5f 70 39 ef 4e c8 76 c8 cc 3f 61 46 63 c8 bc 6f f4 f3 9c eb 29 46 7f c6 a4 7d b4 1e 04 3a 47 86 99 d9 bf 78 86 49 8e 37 29 4d 9b 1a b5 69 45 9e a4 db 36 b4 a6 7a fe fc f3 f4 4f 00 ab 7c 33 f4 7e 7c 09 f0 e7 66 82 e1 5d ff 42 a6 7d 2c 79 e4 e4 45 73 77 77 7c df 3f 21 ed df 63 e4 00 68 02 99 96 8f 28 2e 49 6f a8 0b c1 34 a1 e6 1c 62 0f dd 59 1f 3e 92 af 0e d5 ce 2d 4c 48 07 cc e0 8a 9c fe 38 3a 46 77 4f 6b 9f ae c5 b2 a8 91 5b 74 d0 48 41 1f 5b c3 77 39 22 28 f7 54 e0 ee 50 e7 3d f2 09 ca ae 91 a3 fb 0e 0c e2 6c 1f d8 6e bd 58 0a e9 36 1f 4c 0c 8f 99 3e c1 85 5e 78 e1 92 cf da 1d e4 Data Ascii: &>K\F5d3{}}cW70FV.W_p9Nv?aFco)F}:GxI7)MiE6zO\|3~\|f]B},yEsww\|?!ch(.Io4bY>-LH8:FwOk[tHA[w9"(TP=lnX6L>^x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49828	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:00 UTC	2555	OUT	GET /packs/media/apple_app_store-QGBLJ5LR.svg HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
2024-04-26 14:41:00 UTC	397	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:00 GMT Content-Type: image/svg+xml Content-Length: 5774 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:00 UTC	858	IN	Data Raw: 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 31 32 37 20 33 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 37 20 33 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 6d 61 73 6b 20 69 64 3d 22 61 22 20 68 65 69 67 68 74 3d 22 33 36 2e 39 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 77 69 64 74 68 3d 22 31 32 36 22 20 78 3d 22 30 22 20 79 3d 22 30 22 3e 3c 70 61 74 68 20 64 3d 22 6d 2e 31 20 33 36 2e 39 76 2d 33 36 2e 39 68 31 32 35 2e 39 76 33 36 2e 39 7a 22 20 66 Data Ascii: <svg enable-background="new 0 0 127 38" viewBox="0 0 127 38" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><mask id="a" height="36.9" maskUnits="userSpaceOnUse" width="126" x="0" y="0"><path d="m.1 36.9v-36.9h125.9v36.9z" f
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: 31 2e 36 2d 33 2e 33 20 31 2e 37 2d 33 2e 33 2e 31 2e 31 2d 33 2d 31 2e 31 2d 33 2e 31 2d 34 2e 37 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 32 35 2e 31 20 39 2e 35 63 2e 38 2d 31 20 31 2e 34 2d 32 2e 34 20 31 2e 32 2d 33 2e 38 2d 31 2e 32 2e 31 2d 32 2e 37 2e 38 2d 33 2e 35 20 31 2e 38 2d 2e 38 2e 39 2d 31 2e 34 20 32 2e 33 2d 31 2e 33 20 33 2e 36 20 31 2e 34 2e 31 20 32 2e 38 2d 2e 36 20 33 2e 36 2d 31 2e 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 34 36 2e 34 20 32 33 2e 39 2d 31 2e 31 2d 33 2e 32 63 2d 2e 31 2d 2e 33 2d 2e 33 2d 31 2e 31 2d 2e 36 2d 32 2e 33 2d 2e 31 2e 35 2d 2e 33 20 31 2e 33 2d 2e 36 20 32 2e 33 6c 2d 31 20 33 2e 32 7a 6d 33 2e 37 20 35 2e 31 68 2d 32 2e 31 6c 2d 31 2e 32 2d 33 2e 36 68 2d 34 6c 2d 31 2e 31 20 33 2e 36 68 2d 32 2e 31 6c Data Ascii: 1.6-3.3 1.7-3.3.1.1-3-1.1-3.1-4.7"/><path d="m25.1 9.5c.8-1 1.4-2.4 1.2-3.8-1.2.1-2.7.8-3.5 1.8-.8.9-1.4 2.3-1.3 3.6 1.4.1 2.8-.6 3.6-1.6"/><path d="m46.4 23.9-1.1-3.2c-.1-.3-.3-1.1-.6-2.3-.1.5-.3 1.3-.6 2.3l-1 3.2zm3.7 5.1h-2.1l-1.2-3.6h-4l-1.1 3.6h-2.1l
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: 2e 39 2e 36 20 31 2e 32 2e 33 2e 33 2e 39 2e 36 20 31 2e 38 2e 39 20 31 2e 31 2e 34 20 31 2e 39 2e 39 20 32 2e 34 20 31 2e 35 2e 34 2e 36 2e 37 20 31 2e 33 2e 37 20 32 2e 32 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 38 38 2e 38 20 32 31 2e 37 68 2d 32 2e 32 76 34 2e 33 63 30 20 31 2e 31 2e 34 20 31 2e 36 20 31 2e 32 20 31 2e 36 2e 34 20 30 20 2e 37 20 30 20 2e 39 2d 2e 31 6c 2e 31 20 31 2e 35 63 2d 2e 34 2e 31 2d 2e 39 2e 32 2d 31 2e 35 2e 32 2d 2e 38 20 30 2d 31 2e 34 2d 2e 32 2d 31 2e 38 2d 2e 37 73 2d 2e 37 2d 31 2e 33 2d 2e 37 2d 32 2e 34 76 2d 34 2e 35 68 2d 31 2e 33 76 2d 31 2e 35 68 31 2e 33 76 2d 31 2e 36 6c 32 2d 2e 36 76 32 2e 32 68 32 2e 32 76 31 2e 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 39 36 2e 36 20 32 34 2e 36 63 30 2d 2e 38 2d 2e 32 2d 31 Data Ascii: .9.6 1.2.3.3.9.6 1.8.9 1.1.4 1.9.9 2.4 1.5.4.6.7 1.3.7 2.2"/><path d="m88.8 21.7h-2.2v4.3c0 1.1.4 1.6 1.2 1.6.4 0 .7 0 .9-.1l.1 1.5c-.4.1-.9.2-1.5.2-.8 0-1.4-.2-1.8-.7s-.7-1.3-.7-2.4v-4.5h-1.3v-1.5h1.3v-1.6l2-.6v2.2h2.2v1.6"/><path d="m96.6 24.6c0-.8-.2-1
2024-04-26 14:41:00 UTC	400	IN	Data Raw: 34 2d 2e 31 2d 2e 37 2d 2e 33 2d 31 73 2d 2e 35 2d 2e 35 2d 2e 39 2d 2e 35 2d 2e 37 2e 32 2d 2e 39 2e 35 2d 2e 33 2e 36 2d 2e 33 20 31 20 2e 31 2e 37 2e 33 20 31 20 2e 35 2e 35 2e 39 2e 35 2e 37 2d 2e 32 2e 39 2d 2e 35 63 2e 33 2d 2e 33 2e 33 2d 2e 36 2e 33 2d 31 7a 6d 31 2e 31 20 30 63 30 20 2e 37 2d 2e 32 20 31 2e 32 2d 2e 36 20 31 2e 36 73 2d 2e 39 2e 37 2d 31 2e 36 2e 37 63 2d 2e 36 20 30 2d 31 2e 32 2d 2e 32 2d 31 2e 35 2d 2e 36 2d 2e 34 2d 2e 34 2d 2e 36 2d 31 2d 2e 36 2d 31 2e 36 20 30 2d 2e 37 2e 32 2d 31 2e 32 2e 36 2d 31 2e 37 2e 34 2d 2e 34 2e 39 2d 2e 36 20 31 2e 36 2d 2e 36 2e 36 20 30 20 31 2e 32 2e 32 20 31 2e 36 2e 36 2e 33 2e 34 2e 35 2e 39 2e 35 20 31 2e 36 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 35 38 2e 36 20 38 2d 31 2e 34 20 34 2e Data Ascii: 4-.1-.7-.3-1s-.5-.5-.9-.5-.7.2-.9.5-.3.6-.3 1 .1.7.3 1 .5.5.9.5.7-.2.9-.5c.3-.3.3-.6.3-1zm1.1 0c0 .7-.2 1.2-.6 1.6s-.9.7-1.6.7c-.6 0-1.2-.2-1.5-.6-.4-.4-.6-1-.6-1.6 0-.7.2-1.2.6-1.7.4-.4.9-.6 1.6-.6.6 0 1.2.2 1.6.6.3.4.5.9.5 1.6z"/><path d="m58.6 8-1.4 4.
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: 2d 2e 34 2e 32 2d 2e 39 2e 33 2d 31 2e 34 6c 2e 35 2d 32 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 36 33 2e 37 20 31 32 2e 34 68 2d 31 76 2d 32 2e 35 63 30 2d 2e 38 2d 2e 33 2d 31 2e 32 2d 2e 39 2d 31 2e 32 2d 2e 33 20 30 2d 2e 35 2e 31 2d 2e 37 2e 33 73 2d 2e 33 2e 35 2d 2e 33 2e 37 76 32 2e 36 68 2d 31 76 2d 33 63 30 2d 2e 34 20 30 2d 2e 38 20 30 2d 31 2e 32 68 2e 39 76 2e 37 63 2e 31 2d 2e 32 2e 33 2d 2e 34 2e 35 2d 2e 35 2e 33 2d 2e 32 2e 36 2d 2e 32 2e 39 2d 2e 32 2e 34 20 30 20 2e 38 2e 31 20 31 20 2e 34 2e 33 2e 33 2e 35 2e 38 2e 35 20 31 2e 34 76 32 2e 35 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 36 35 2e 34 20 31 32 2e 34 68 31 76 2d 36 2e 34 68 2d 31 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 37 31 2e 31 20 31 30 2e 32 63 30 2d 2e 34 2d 2e 31 2d 2e Data Ascii: -.4.2-.9.3-1.4l.5-2z"/><path d="m63.7 12.4h-1v-2.5c0-.8-.3-1.2-.9-1.2-.3 0-.5.1-.7.3s-.3.5-.3.7v2.6h-1v-3c0-.4 0-.8 0-1.2h.9v.7c.1-.2.3-.4.5-.5.3-.2.6-.2.9-.2.4 0 .8.1 1 .4.3.3.5.8.5 1.4v2.5"/><path d="m65.4 12.4h1v-6.4h-1z"/><path d="m71.1 10.2c0-.4-.1-.
2024-04-26 14:41:00 UTC	751	IN	Data Raw: 2e 32 2d 31 2e 32 2e 36 2d 31 2e 37 2e 34 2d 2e 34 2e 39 2d 2e 36 20 31 2e 36 2d 2e 36 2e 36 20 30 20 31 2e 32 2e 32 20 31 2e 36 2e 36 2e 33 2e 34 2e 35 2e 39 2e 35 20 31 2e 36 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 39 36 20 31 32 2e 34 68 2d 31 76 2d 32 2e 35 63 30 2d 2e 38 2d 2e 33 2d 31 2e 32 2d 2e 39 2d 31 2e 32 2d 2e 33 20 30 2d 2e 35 2e 31 2d 2e 37 2e 33 73 2d 2e 33 2e 35 2d 2e 33 2e 37 76 32 2e 36 68 2d 31 76 2d 33 63 30 2d 2e 34 20 30 2d 2e 38 20 30 2d 31 2e 32 68 2e 39 76 2e 37 63 2e 31 2d 2e 32 2e 33 2d 2e 34 2e 35 2d 2e 35 2e 33 2d 2e 32 2e 36 2d 2e 32 2e 39 2d 2e 32 2e 34 20 30 20 2e 38 2e 31 20 31 20 2e 34 2e 35 2e 32 2e 36 2e 36 2e 36 20 31 2e 33 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 31 30 32 2e 36 20 38 2e 38 68 2d 31 2e 31 76 32 2e Data Ascii: .2-1.2.6-1.7.4-.4.9-.6 1.6-.6.6 0 1.2.2 1.6.6.3.4.5.9.5 1.6z"/><path d="m96 12.4h-1v-2.5c0-.8-.3-1.2-.9-1.2-.3 0-.5.1-.7.3s-.3.5-.3.7v2.6h-1v-3c0-.4 0-.8 0-1.2h.9v.7c.1-.2.3-.4.5-.5.3-.2.6-.2.9-.2.4 0 .8.1 1 .4.5.2.6.6.6 1.3z"/><path d="m102.6 8.8h-1.1v2.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49827	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:00 UTC	2563	OUT	GET /static/images/home/index/dashboard-particles.svg HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
2024-04-26 14:41:00 UTC	397	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:00 GMT Content-Type: image/svg+xml Content-Length: 3210 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:00 UTC	858	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 32 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 32 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 35 2e 33 38 35 39 37 20 32 2e 32 35 34 32 33 4c 32 33 2e 39 38 36 32 20 34 2e 36 31 39 35 4c 32 33 2e 33 32 35 39 20 39 2e 38 31 32 30 36 43 32 33 2e 39 36 39 39 20 31 30 2e 30 31 32 31 20 32 34 2e 35 39 39 31 20 31 30 2e 33 32 38 34 20 32 35 2e 30 39 32 33 20 31 30 2e 37 38 34 38 4c 32 35 2e 38 33 36 34 20 34 2e 39 33 33 35 32 43 32 35 2e 39 36 39 34 20 33 2e 38 38 37 32 36 20 32 35 2e 32 33 30 32 20 32 2e 38 38 37 35 39 20 32 34 2e 32 32 32 Data Ascii: <svg width="26" height="23" viewBox="0 0 26 23" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M5.38597 2.25423L23.9862 4.6195L23.3259 9.81206C23.9699 10.0121 24.5991 10.3284 25.0923 10.7848L25.8364 4.93352C25.9694 3.88726 25.2302 2.88759 24.222
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: 35 37 43 32 30 2e 38 31 34 33 20 31 30 2e 36 37 34 20 31 39 2e 32 38 30 36 20 31 31 2e 38 39 36 35 20 31 39 2e 30 36 33 38 20 31 33 2e 36 30 31 36 43 31 38 2e 38 34 32 31 20 31 35 2e 33 34 35 33 20 32 30 2e 30 32 35 39 20 31 36 2e 38 37 34 31 20 32 31 2e 37 36 39 36 20 31 37 2e 30 39 35 38 43 32 33 2e 34 37 34 36 20 31 37 2e 33 31 32 36 20 32 35 2e 30 34 32 31 20 31 36 2e 31 33 33 37 20 32 35 2e 32 36 33 39 20 31 34 2e 33 39 43 32 35 2e 34 38 30 37 20 31 32 2e 36 38 35 20 32 34 2e 32 36 33 31 20 31 31 2e 31 31 32 35 20 32 32 2e 35 35 38 20 31 30 2e 38 39 35 37 5a 4d 32 32 2e 30 30 36 32 20 31 35 2e 32 33 35 38 43 32 31 2e 33 30 38 36 20 31 35 2e 31 34 37 31 20 32 30 2e 38 33 35 31 20 31 34 2e 35 33 35 36 20 32 30 2e 39 32 33 38 20 31 33 2e 38 33 38 31 43 Data Ascii: 57C20.8143 10.674 19.2806 11.8965 19.0638 13.6016C18.8421 15.3453 20.0259 16.8741 21.7696 17.0958C23.4746 17.3126 25.0421 16.1337 25.2639 14.39C25.4807 12.685 24.2631 11.1125 22.558 10.8957ZM22.0062 15.2358C21.3086 15.1471 20.8351 14.5356 20.9238 13.8381C
2024-04-26 14:41:00 UTC	1097	IN	Data Raw: 2e 31 36 32 20 31 34 2e 32 34 31 35 20 31 31 2e 33 34 35 38 20 31 35 2e 37 37 30 33 20 31 33 2e 30 38 39 35 20 31 35 2e 39 39 32 43 31 34 2e 37 39 34 35 20 31 36 2e 32 30 38 38 20 31 36 2e 33 36 32 20 31 35 2e 30 33 20 31 36 2e 35 38 33 38 20 31 33 2e 32 38 36 32 43 31 36 2e 38 30 30 36 20 31 31 2e 35 38 31 32 20 31 35 2e 35 38 33 20 31 30 2e 30 30 38 38 20 31 33 2e 38 37 37 39 20 39 2e 37 39 31 39 34 43 31 32 2e 31 33 34 32 20 39 2e 35 37 30 31 39 20 31 30 2e 36 30 30 35 20 31 30 2e 37 39 32 37 20 31 30 2e 33 38 33 37 20 31 32 2e 34 39 37 38 5a 4d 31 34 2e 37 32 33 38 20 31 33 2e 30 34 39 37 43 31 34 2e 36 33 35 31 20 31 33 2e 37 34 37 32 20 31 33 2e 39 38 34 38 20 31 34 2e 32 31 35 38 20 31 33 2e 33 32 36 31 20 31 34 2e 31 33 32 43 31 32 2e 36 32 38 35 Data Ascii: .162 14.2415 11.3458 15.7703 13.0895 15.992C14.7945 16.2088 16.362 15.03 16.5838 13.2862C16.8006 11.5812 15.583 10.0088 13.8779 9.79194C12.1342 9.57019 10.6005 10.7927 10.3837 12.4978ZM14.7238 13.0497C14.6351 13.7472 13.9848 14.2158 13.3261 14.132C12.6285

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49826	192.178.50.68	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:00 UTC	810	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-24371500-1&cid=1930088754.1714142446&jid=1950879201&_u=aGDAgEAjAAAAAGAAI~&z=911897362 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:00 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 14:41:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49820	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:00 UTC	2551	OUT	GET /packs/media/google_play-RJNRMPPD.svg HTTP/1.1 Host: runrun.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
2024-04-26 14:41:00 UTC	397	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:00 GMT Content-Type: image/svg+xml Content-Length: 5224 Last-Modified: Thu, 25 Apr 2024 21:25:06 GMT Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:00 UTC	858	IN	Data Raw: 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 31 32 36 20 33 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 36 20 33 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 61 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 32 2e 31 30 31 38 20 30 20 30 20 2d 32 33 2e 31 31 39 35 20 36 38 38 31 2e 33 33 38 39 20 38 39 37 33 2e 39 33 36 35 29 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 Data Ascii: <svg enable-background="new 0 0 126 38" viewBox="0 0 126 38" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a" gradientTransform="matrix(12.1018 0 0 -23.1195 6881.3389 8973.9365)" gradientUnits="userSpace
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: 66 66 73 65 74 3d 22 2e 37 37 35 34 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 66 66 61 35 30 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 66 66 39 63 30 30 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 63 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 35 2e 35 34 36 32 20 30 20 30 20 2d 31 31 2e 39 31 39 31 20 39 30 31 33 2e 37 37 33 34 20 34 34 36 35 2e 30 31 35 31 29 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 31 3d 22 2d 35 37 38 2e 33 32 30 31 22 20 78 32 3d 22 2d 35 37 39 2e 36 38 32 39 22 20 79 31 3d 22 33 37 32 2e 38 38 Data Ascii: ffset=".7754" stop-color="#ffa500"/><stop offset="1" stop-color="#ff9c00"/></linearGradient><linearGradient id="c" gradientTransform="matrix(15.5462 0 0 -11.9191 9013.7734 4465.0151)" gradientUnits="userSpaceOnUse" x1="-578.3201" x2="-579.6829" y1="372.88
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: 74 65 28 33 38 2e 31 36 37 32 39 36 20 36 2e 33 33 35 39 30 38 29 22 3e 3c 70 61 74 68 20 64 3d 22 6d 36 20 33 2e 31 63 30 20 2e 37 2d 2e 32 20 31 2e 34 2d 2e 37 20 31 2e 38 2d 2e 36 2e 36 2d 31 2e 32 2e 38 2d 32 20 2e 38 73 2d 31 2e 35 2d 2e 33 2d 32 2d 2e 38 2d 2e 38 2d 31 2e 32 2d 2e 38 2d 32 20 2e 33 2d 31 2e 35 2e 38 2d 32 20 31 2e 31 2d 2e 39 20 32 2d 2e 39 63 2e 33 20 30 20 2e 37 2e 31 20 31 2e 31 2e 33 2e 33 2e 32 2e 36 2e 34 2e 38 2e 37 6c 2d 2e 35 2e 34 63 2d 2e 33 2d 2e 34 2d 2e 38 2d 2e 36 2d 31 2e 34 2d 2e 36 73 2d 31 2e 32 2e 32 2d 31 2e 35 2e 36 63 2d 2e 35 2e 34 2d 2e 37 20 31 2d 2e 37 20 31 2e 36 73 2e 32 20 31 2e 32 2e 37 20 31 2e 36 2e 39 2e 36 20 31 2e 35 2e 36 63 2e 37 20 30 20 31 2e 31 2d 2e 32 20 31 2e 36 2d 2e 36 2e 33 2d 2e 33 2e Data Ascii: te(38.167296 6.335908)"><path d="m6 3.1c0 .7-.2 1.4-.7 1.8-.6.6-1.2.8-2 .8s-1.5-.3-2-.8-.8-1.2-.8-2 .3-1.5.8-2 1.1-.9 2-.9c.3 0 .7.1 1.1.3.3.2.6.4.8.7l-.5.4c-.3-.4-.8-.6-1.4-.6s-1.2.2-1.5.6c-.5.4-.7 1-.7 1.6s.2 1.2.7 1.6.9.6 1.5.6c.7 0 1.1-.2 1.6-.6.3-.3.
2024-04-26 14:41:00 UTC	400	IN	Data Raw: 32 2e 38 2d 36 2e 32 20 36 2e 31 73 32 2e 39 20 36 2e 31 20 36 2e 32 20 36 2e 31 63 31 2e 39 20 30 20 33 2e 32 2d 2e 36 20 34 2e 33 2d 31 2e 38 20 31 2e 31 2d 31 2e 31 20 31 2e 35 2d 32 2e 37 20 31 2e 35 2d 33 2e 39 20 30 2d 2e 34 20 30 2d 2e 37 2d 2e 31 2d 31 68 2d 35 2e 38 7a 6d 34 32 2e 33 20 31 2e 33 63 2d 2e 34 2d 2e 39 2d 31 2e 33 2d 32 2e 35 2d 33 2e 34 2d 32 2e 35 73 2d 33 2e 37 20 31 2e 36 2d 33 2e 37 20 34 63 30 20 32 2e 32 20 31 2e 37 20 34 20 33 2e 39 20 34 20 31 2e 38 20 30 20 32 2e 39 2d 31 2e 31 20 33 2e 33 2d 31 2e 38 6c 2d 31 2e 33 2d 2e 39 63 2d 2e 35 2e 36 2d 31 20 31 2e 31 2d 32 20 31 2e 31 73 2d 31 2e 35 2d 2e 34 2d 32 2d 31 2e 32 6c 35 2e 33 2d 32 2e 32 7a 6d 2d 35 2e 34 20 31 2e 33 63 30 2d 31 2e 35 20 31 2e 32 2d 32 2e 33 20 32 2d Data Ascii: 2.8-6.2 6.1s2.9 6.1 6.2 6.1c1.9 0 3.2-.6 4.3-1.8 1.1-1.1 1.5-2.7 1.5-3.9 0-.4 0-.7-.1-1h-5.8zm42.3 1.3c-.4-.9-1.3-2.5-3.4-2.5s-3.7 1.6-3.7 4c0 2.2 1.7 4 3.9 4 1.8 0 2.9-1.1 3.3-1.8l-1.3-.9c-.5.6-1 1.1-2 1.1s-1.5-.4-2-1.2l5.3-2.2zm-5.4 1.3c0-1.5 1.2-2.3 2-
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: 2d 32 2e 31 20 32 2e 33 2d 31 20 30 2d 31 2e 38 2d 2e 37 2d 32 2d 31 2e 34 6c 2d 31 2e 35 2e 36 63 2e 35 20 31 20 31 2e 36 20 32 2e 33 20 33 2e 35 20 32 2e 33 20 32 20 30 20 33 2e 37 2d 31 2e 32 20 33 2e 37 2d 34 2e 31 76 2d 37 68 2d 31 2e 37 76 2e 36 7a 6d 2d 32 20 35 2e 34 63 2d 31 2e 32 20 30 2d 32 2e 32 2d 31 2d 32 2e 32 2d 32 2e 34 73 31 2d 32 2e 34 20 32 2e 32 2d 32 2e 34 20 32 2e 31 20 31 20 32 2e 31 20 32 2e 34 2d 2e 39 20 32 2e 34 2d 32 2e 31 20 32 2e 34 7a 6d 32 32 2e 37 2d 31 30 2e 32 68 2d 34 2e 32 76 31 31 2e 36 68 31 2e 38 76 2d 34 2e 33 68 32 2e 34 63 32 20 30 20 33 2e 38 2d 31 2e 34 20 33 2e 38 2d 33 2e 36 73 2d 31 2e 39 2d 33 2e 37 2d 33 2e 38 2d 33 2e 37 7a 6d 2e 31 20 35 2e 35 68 2d 32 2e 35 76 2d 34 68 32 2e 35 63 31 2e 33 20 30 20 32 Data Ascii: -2.1 2.3-1 0-1.8-.7-2-1.4l-1.5.6c.5 1 1.6 2.3 3.5 2.3 2 0 3.7-1.2 3.7-4.1v-7h-1.7v.6zm-2 5.4c-1.2 0-2.2-1-2.2-2.4s1-2.4 2.2-2.4 2.1 1 2.1 2.4-.9 2.4-2.1 2.4zm22.7-10.2h-4.2v11.6h1.8v-4.3h2.4c2 0 3.8-1.4 3.8-3.6s-1.9-3.7-3.8-3.7zm.1 5.5h-2.5v-4h2.5c1.3 0 2
2024-04-26 14:41:00 UTC	201	IN	Data Raw: 33 2e 39 2d 2e 37 2e 39 2d 31 2e 32 20 30 20 2e 35 2d 2e 34 2e 38 2d 2e 39 20 31 2e 32 7a 22 20 6f 70 61 63 69 74 79 3d 22 2e 31 32 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 31 31 2e 36 20 37 20 31 38 2e 32 20 31 30 2e 33 63 2e 36 2e 34 2e 39 2e 37 2e 39 20 31 2e 32 20 30 2d 2e 35 2d 2e 33 2d 2e 39 2d 2e 39 2d 31 2e 33 6c 2d 31 38 2e 32 2d 31 30 2e 32 63 2d 31 2e 33 2d 2e 38 2d 32 2e 33 2d 2e 33 2d 32 2e 33 20 31 2e 32 76 2e 31 63 30 2d 31 2e 34 20 31 2d 32 20 32 2e 33 2d 31 2e 33 7a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 6f 70 61 63 69 74 79 3d 22 2e 32 35 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: 3.9-.7.9-1.2 0 .5-.4.8-.9 1.2z" opacity=".12"/><path d="m11.6 7 18.2 10.3c.6.4.9.7.9 1.2 0-.5-.3-.9-.9-1.3l-18.2-10.2c-1.3-.8-2.3-.3-2.3 1.2v.1c0-1.4 1-2 2.3-1.3z" fill="#fff" opacity=".25"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49829	192.178.50.34	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:00 UTC	1304	OUT	GET /pagead/viewthroughconversion/983229078/?random=1714142454208&cv=11&fst=1714142454208&bg=ffffff&guid=ON&async=1&gtm=45be44o0v870230210z86436058za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link&label=-kjjCLrl1wQQlsXr1AM&hn=www.googleadservices.com&frm=0&tiba=Runrun.it%20%7C%20Process%20and%20Projects%20Manager&npa=0&pscdl=noapi&auid=922323486.1714142446&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 14:41:00 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 14:41:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUm_17qRHR8OKVyagqZoDs4pFFsnWZIEf7-idf3blnbg-Z7mChs6o5mURipb; expires=Sun, 26-Apr-2026 14:41:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 14:41:00 UTC	244	IN	Data Raw: 61 39 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: a9e(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-26 14:41:00 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-26 14:41:00 UTC	1226	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4c 57 74 71 61 6b 4e 4d 63 6d 77 78 64 31 46 52 62 48 4e 59 63 6a 46 42 54 54 6f 78 4e 7a 45 30 4d 54 51 79 4e 44 55 30 4d 6a 41 34 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'LWtqakNMcmwxd1FRbHNYcjFBTToxNzE0MTQyNDU0MjA4',['https://www.goog
2024-04-26 14:41:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49832	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:01 UTC	2864	OUT	GET /static/images/home/form/forms.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D Range: bytes=262144-279741 If-Range: Thu, 25 Apr 2024 21:20:28 GMT
2024-04-26 14:41:02 UTC	427	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:02 GMT Content-Type: video/mp4 Content-Length: 17598 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 262144-279741/279742 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:02 UTC	828	IN	Data Raw: b7 e8 e7 62 5b 48 02 0c 4b bd f3 af 5a 29 37 d2 9c 92 02 7c 53 f2 be 33 88 b8 fb 77 b5 c9 c0 ca 95 bd f5 41 9a 36 18 bb ec e1 4c 12 85 c9 f8 77 7e 46 98 5e 7b 1a 27 ce 62 93 b1 b7 8d a4 7f 5c e3 15 fa 9a cc 91 18 70 bd 7c ea 4d 82 f8 9b c9 aa fc 1f b4 2a 12 a7 d1 44 54 e8 08 f8 4e 96 c2 0a b1 64 f0 6c 0b 9d dd 01 bf ca 2c 9f 54 b7 5f 50 e5 98 3d fc 17 98 a6 a8 93 28 d4 40 48 28 e9 85 d1 f2 17 5e 90 e1 d0 e9 ef 4d 2e 3d e5 6a 92 6c 0a ae 89 dd 47 a5 96 79 f1 00 01 f8 94 66 6b ac f0 37 29 eb 79 ee af 06 39 e4 11 99 25 a8 27 e8 43 36 d6 f4 84 a2 c3 61 3f d8 cb 78 40 0f 25 af 1b 29 38 80 02 1f dd b1 e5 55 60 b3 90 46 c0 a9 ac c8 fc c5 15 e8 91 4b 01 e3 62 ad 19 96 31 64 f4 b7 09 29 5e 00 00 01 07 41 9b e7 49 e1 0f 26 53 02 11 ff fd e1 00 00 2e 6d 7c cf e6 81 Data Ascii: b[HKZ)7\|S3wA6Lw~F^{'b\p\|M*DTNdl,T_P=(@H(^M.=jlGyfk7)y9%'C6a?x@%)8U`FKb1d)^AI&S.m\|
2024-04-26 14:41:02 UTC	1255	IN	Data Raw: 2b ba b9 79 d4 6c 7d 2c 18 f8 23 c9 c7 2d d3 29 cb 15 45 58 71 49 c5 83 a1 31 f0 7f e2 81 6d bd f8 c5 d8 4a 6f 00 37 f3 98 bd 19 35 40 21 77 f9 f8 09 4f ba 5e 6c b3 85 17 ac a7 62 5b 00 00 01 15 41 9a 2b 49 a8 41 68 99 4c 08 ff fc 84 00 01 9d f4 51 5c f2 d6 53 d5 7f ee 8c 22 a7 7b b3 9c 6d d1 16 4d bf fa b3 c2 ef 4b 30 0e fb e9 2a 4d 39 12 05 b6 81 71 6d c5 15 ac 09 44 0d 0e b2 b7 ef fc 5f 3d e0 ca 54 39 7b e3 05 b3 7a d1 71 d2 3b 41 57 56 ee ed cb 60 c0 fa 96 49 79 45 be 0c 61 12 41 b8 25 74 96 f0 48 65 fa 18 c8 65 2b 39 77 bc 9e ea 61 f8 61 1d 67 45 54 cf 8f 32 93 15 78 5c 77 f7 8e fb c4 29 5c 6e 92 90 df d0 6a d4 1f 07 03 86 98 85 3c 30 1f af 47 b8 48 49 2d 78 15 2d 85 45 a2 91 6c 9c 6f 4e 3d 45 30 54 81 8e f8 af 05 b0 cd 6f fd b2 43 cf 1c c4 d4 0d 86 Data Ascii: +yl},#-)EXqI1mJo75@!wO^lb[A+IAhLQ\S"{mMK0*M9qmD_=T9{zq;AWV`IyEaA%tHee+9waagET2x\w)\nj<0GHI-x-EloN=E0ToC
2024-04-26 14:41:02 UTC	375	IN	Data Raw: 94 2c 9e 53 c6 bd 5e e7 7e f3 51 f5 0e 52 4a 17 bb fd ab 8a ae 4e 72 00 c4 7f 67 96 95 0b 50 cc a1 24 12 fd 94 29 1b d0 3f 41 2b a9 9d 51 c7 e8 01 d9 6f 3b 09 6d 06 f1 30 04 6d 94 54 75 00 44 1d ad b7 42 35 ba 5f 5c 01 5b 92 1d d4 ee 71 be 67 f9 65 5b cd 89 b4 b0 31 e3 1f 2f b8 dc 34 6d ce 2e 3c 30 44 a7 41 4e 82 cc c2 51 18 c0 d9 fb 5b 6c 41 5b 56 e8 4f e0 00 00 00 c0 41 9a 8e 49 e1 0a 52 65 30 23 ff fc 84 00 00 b1 fa 32 c0 ff 4c 16 ad d8 1c 99 46 4e d6 96 9c 7c 1a 1d 71 50 05 90 74 df 1d cf ab ab a6 6f 04 cd 94 5c 41 9c 8a d4 7e 2a 15 74 a4 5e e9 6f 41 57 4d b3 3c ed 51 e5 d7 c1 38 3b 48 9b 3d 11 ba b8 f6 c7 10 e1 20 10 6c 21 78 24 4b fd 0e 1b 55 be 89 a8 0f 6d bd 2e cb c6 32 6b 0b f5 42 41 9d b8 e0 ae 17 ab 12 39 3b 00 1c a4 e6 bb 87 f2 8b f6 e1 b1 0b Data Ascii: ,S^~QRJNrgP$)?A+Qo;m0mTuDB5_\[qge[1/4m.<0DANQ[lA[VOAIRe0#2LFN\|qPto\A~*t^oAWM<Q8;H= l!x$KUm.2kBA9;
2024-04-26 14:41:02 UTC	1255	IN	Data Raw: fb 2b 2b bc 0d 62 ab 90 d2 60 75 1a 6c 7b ea bc b4 f9 72 df 3d 49 d7 8c 12 15 42 bb 42 d6 b4 aa 14 16 ce 0b 91 98 18 48 e5 8d 1b e0 ea 1f a6 db 58 0f 8c f7 1b 68 00 f8 d1 4d 91 6e 6a 84 88 03 ae b7 69 10 a2 76 4e 34 66 3d fe 71 77 98 e0 a6 f5 a7 74 87 5c 04 8f 48 3c a8 b5 64 80 55 0c 0c 84 20 e8 c3 80 8f 11 e5 9b 4a d0 b5 b1 e5 f4 77 44 98 73 0c ab 9e 4e 9e 20 8d c1 41 aa 3a 0c 5a 09 e8 d5 90 7d 1a 21 ff 31 09 b7 07 8b 5f 33 c7 b9 29 b1 a8 25 fb 87 65 82 24 c1 00 00 00 96 41 9a d0 49 e1 0f 26 53 02 3f ff fc 84 00 00 a8 fa 32 c3 0e 87 05 ab d2 f7 0a 30 9b 64 6b 31 dc a3 ef 8e 29 5a d6 ea 9e 19 95 73 e4 ef 55 9d 80 90 8e f3 1d 22 14 e5 c4 9c 60 e2 93 48 2b 79 91 37 43 00 00 05 ae 6b 6a a1 d7 0d 6e 7b fa de bc ee f0 45 63 d6 3a 18 56 46 2f e1 3e 6b 0e b7 d6 Data Ascii: ++b`ul{r=IBBHXhMnjivN4f=qwt\H<dU JwDsN A:Z}!1_3)%e$AI&S?20dk1)ZsU"`H+y7Ckjn{Ec:VF/>k
2024-04-26 14:41:02 UTC	1255	IN	Data Raw: 61 1e ed 37 00 00 00 88 41 9b 54 49 e1 0f 26 53 02 3f ff fc 84 00 00 7c bd 14 1b a6 1d 9e 1e e2 18 b9 53 e5 13 e4 22 91 ba 1f ac 4b ec ee 1a aa dc 46 1f 00 c0 1d df 78 87 35 5e a9 07 ca df 1e d5 76 8b f1 dc b5 a9 fe 7a 23 5d d0 bb c6 9b 29 31 c2 fc 0b 74 63 3a 89 b7 0b df 49 84 fd b2 ac d6 2d a4 e4 35 c1 af ff 7e d8 ae 03 2a db c4 f6 23 f6 78 72 3a d4 02 6e e1 7f 97 0d 1b 68 f0 d3 e6 11 e8 e9 5b fa a2 cc 6f da ef 7e 64 14 19 c1 00 00 00 7d 41 9b 75 49 e1 0f 26 53 02 3f ff fc 84 00 00 6c 7f 23 81 47 3b 1f 0c 66 1a 9c 81 60 b6 0b 2f d1 96 56 db b2 f7 02 b0 8d e9 50 2a c0 e4 e1 ef 48 66 67 09 da 44 16 da 72 4d 75 aa b5 e5 fc d3 49 93 87 98 66 87 2d ef 2e 1d 7f d9 4b 6a 0f 6a ae a2 77 6b 78 ca ae e1 53 56 cd dd 90 14 f2 f1 fe 21 e9 82 9a d5 f5 80 cd 08 53 15 Data Ascii: a7ATI&S?\|S"KFx5^vz#])1tc:I-5~#xr:nh[o~d}AuI&S?l#G;f`/VPHfgDrMuIf-.KjjwkxSV!S
2024-04-26 14:41:02 UTC	1255	IN	Data Raw: 10 01 9f 73 6a 47 ff 00 00 03 00 00 03 00 00 0e e9 00 00 00 1d 41 9b 78 49 a8 41 6c 99 4c 08 47 ff fd e1 00 00 1b bf 46 fd c4 00 00 03 00 2e bd 0e 93 00 00 00 16 41 9f 96 45 15 2c 23 ff 00 00 97 42 d3 a1 40 00 00 03 03 7d 3d 79 00 00 00 10 01 9f b5 74 47 ff 00 00 03 00 00 03 00 00 0e e9 00 00 00 10 01 9f b7 6a 47 ff 00 00 03 00 00 03 00 00 0e e8 00 00 00 17 41 9b b9 49 a8 41 6c 99 4c 08 ff fc 84 00 00 03 00 00 03 00 00 06 cc 00 00 30 c7 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e8 00 00 42 ab 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: sjGAxIAlLGF.AE,#B@}=ytGjGAIAlL0moovlmvhdB@
2024-04-26 14:41:02 UTC	331	IN	Data Raw: 00 00 00 00 01 00 00 04 00 00 00 00 02 00 00 01 00 00 00 00 01 00 00 03 00 00 00 00 01 00 00 01 00 00 00 00 02 00 00 02 00 00 00 00 01 00 00 03 00 00 00 00 01 00 00 01 00 00 00 00 04 00 00 02 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 03 00 00 02 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 Data Ascii:
2024-04-26 14:41:02 UTC	1255	IN	Data Raw: 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 Data Ascii:
2024-04-26 14:41:02 UTC	53	IN	Data Raw: 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 Data Ascii:
2024-04-26 14:41:02 UTC	1255	IN	Data Raw: 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 04 00 00 00 00 02 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 03 00 00 00 00 01 00 00 01 00 00 00 00 08 00 00 02 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 04 00 00 00 00 02 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49833	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:01 UTC	2874	OUT	GET /static/images/home/kanban/batch_actions.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D Range: bytes=327680-337862 If-Range: Thu, 25 Apr 2024 21:20:28 GMT
2024-04-26 14:41:01 UTC	427	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:01 GMT Content-Type: video/mp4 Content-Length: 10183 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 327680-337862/337863 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:01 UTC	828	IN	Data Raw: af 8a 7d ad 0f 72 61 92 57 e5 92 db b6 55 f1 72 5f ac 4d 2c 90 9f b0 f0 72 88 a3 0a 07 32 c6 ce 8f 2e 34 14 85 6d d9 bd 21 5f d2 d3 ca 1f a1 04 45 e2 ab e8 a0 63 6b b8 9c 83 2a a3 8f c4 29 ab 32 48 c5 61 10 b7 cb 75 b4 0c 61 db cb ee 9d 64 0c ed 16 12 8d 01 cf 3a bb 24 4e 9e 98 e4 e3 b2 3e b4 c8 0b bd 19 f9 1d 4b 75 c2 af d5 66 a5 e3 29 dd 5b 6c 12 48 70 4a 7b ee a3 b6 75 8f a7 cc da 48 3f 7e 1f a0 b2 a9 f8 83 c7 7b f0 00 01 3e ba 24 71 51 24 84 34 4e 56 4a cd ff 29 54 db af 03 1d d9 bc 11 63 92 11 b0 c5 6e 60 e6 29 b1 77 c1 84 33 0f 85 13 20 f5 dc 50 f1 cc e4 6d 7a b5 59 67 5f f2 eb 4e 25 79 64 fb 92 fe 90 91 3d 39 37 ce 1a 73 13 2d b0 9b 65 67 e7 e8 0c 11 8c 92 34 c9 f4 4f 45 01 83 62 92 44 11 73 a8 e8 37 05 44 48 cd 63 20 dc f8 9c 38 52 62 4b ea 05 3b Data Ascii: }raWUr_M,r2.4m!_Eck*)2Hauad:$N>Kuf)[lHpJ{uH?~{>$qQ$4NVJ)Tcn`)w3 PmzYg_N%yd=97s-eg4OEbDs7DHc 8RbK;
2024-04-26 14:41:01 UTC	1255	IN	Data Raw: 73 cd 02 d1 3c cc d6 39 62 4b b8 c2 16 bc 43 68 ee a8 19 20 db 8b 78 4e c5 00 26 de 0f 3d d9 03 f2 15 25 31 13 d3 d5 98 df 73 5d 16 25 7f 6f 82 e4 35 54 c8 8e 06 2f 8b 04 b7 fa 12 e4 22 cb 9b 11 cf 85 c0 d6 b7 01 3c 66 24 0e 80 c1 48 0e a4 07 cd b7 af 6d ad 00 9a d9 b1 8c ac 45 43 45 b6 e5 c3 c4 06 3b 74 a2 ed bd 8b b9 55 96 b9 36 9a 45 94 00 c1 66 81 bd 52 4a 80 a1 cb 50 ee 6f 09 b8 aa 4a 79 cf 01 c2 c4 41 c3 31 1d 0c 9e c3 9c 27 3f 2d eb 58 20 a2 99 af 48 e9 cd 6e 93 32 26 ab 01 4a e7 ff 00 b2 df 41 04 1f dd c3 6a 5d 00 a2 e9 e1 9d 7f f3 01 d9 a4 87 db e3 2a 0e 37 05 16 67 fc 16 72 b1 81 ea 8c fd 01 9c 4d f0 ad d2 dc 6d 1a 04 80 00 00 01 0f 01 9e 36 74 4d ff d0 a8 ad 78 00 00 03 00 00 03 00 00 03 00 00 03 01 43 cb dd ad 19 60 00 0b 5f 0f ec 51 5f 09 e0 Data Ascii: s<9bKCh xN&=%1s]%o5T/"<f$HmECE;tU6EfRJPoJyA1'?-X Hn2&JAj]*7grMm6tMxC`_Q_
2024-04-26 14:41:01 UTC	1255	IN	Data Raw: 7a d1 63 e1 72 c2 64 7f a9 2c 82 2a 35 72 18 01 ad 59 b6 8c 61 c8 28 1d 1c 45 f7 19 d1 00 00 00 12 01 9e 7a 74 7f c5 1c 4c 83 e4 00 00 03 00 00 03 03 17 00 00 00 17 01 9e 7c 6a 7f 00 00 46 dd 7e 97 0f 4d bf 01 60 17 a0 00 52 c0 02 47 00 00 00 bf 41 9a 61 49 a8 41 6c 99 4c 08 9f 62 af 7e 77 9b 8d 8d 60 00 00 03 00 00 03 00 00 03 00 80 ff bb 6d 4a a0 15 4d 29 b2 2b a6 a0 0e 2d 49 86 6f 36 67 79 55 dd 6a c3 f3 bc be 53 01 5b 3d 90 b2 52 0b 9f ab 11 b0 c7 2f f4 ea b0 6f 84 03 1d 8b e0 a7 79 0b b6 fc 98 55 52 0d 86 e4 3c db 0f da 50 89 8e 85 26 26 06 ba a0 08 86 71 49 18 a9 3c fe cd 95 bc 95 c7 62 a8 38 3c 14 9c 26 8e a1 cf c2 e7 5e 32 86 d0 1f 37 f5 2c e3 4b bc 0a 0a 6b 33 ab d5 07 c6 90 5a bb 66 f0 08 0e cc 08 a4 43 5d ca ef 54 d3 eb fc 4f 95 60 31 9f 19 5a Data Ascii: zcrd,*5rYa(EztL\|jF~M`RGAaIAlLb~w`mJM)+-Io6gyUjS[=R/oyUR<P&&qI<b8<&^27,Kk3ZfC]TO`1Z
2024-04-26 14:41:01 UTC	400	IN	Data Raw: 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 08 00 00 02 00 00 00 00 01 00 00 03 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 Data Ascii:
2024-04-26 14:41:01 UTC	1255	IN	Data Raw: 00 00 02 00 00 02 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 04 00 00 00 00 02 00 00 01 00 00 00 00 01 00 00 04 00 00 00 00 02 00 00 01 00 00 00 00 02 00 00 02 00 00 00 00 01 00 00 03 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 03 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 03 00 00 00 00 01 00 00 01 00 Data Ascii:
2024-04-26 14:41:01 UTC	1255	IN	Data Raw: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 04 00 00 00 00 02 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 Data Ascii:
2024-04-26 14:41:01 UTC	1255	IN	Data Raw: 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 04 00 00 00 00 02 00 00 01 00 00 00 00 02 00 00 02 00 00 00 00 01 00 00 03 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 03 00 00 00 00 01 00 00 01 00 00 00 00 03 00 00 02 00 00 00 00 01 00 00 03 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 03 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 Data Ascii:
2024-04-26 14:41:01 UTC	331	IN	Data Raw: 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 1c 73 74 73 63 00 00 00 00 00 00 00 01 00 00 00 01 00 00 02 58 00 00 00 01 00 00 09 74 73 74 73 7a 00 00 00 00 00 00 00 00 00 00 02 58 00 00 03 26 00 00 00 17 00 00 00 14 00 00 00 14 00 00 00 14 00 00 00 1d 00 00 00 16 00 00 00 14 00 00 00 14 00 00 00 1d 00 00 00 16 00 00 00 14 00 00 00 14 00 00 00 1d 00 00 00 16 00 00 00 14 00 00 00 14 00 00 00 1d 00 00 00 16 00 00 00 14 00 00 00 14 00 00 00 1d 00 00 00 16 00 Data Ascii: stscXtstszX&
2024-04-26 14:41:01 UTC	1255	IN	Data Raw: 00 02 4d 00 00 0d 7c 00 00 02 60 00 00 01 57 00 00 01 88 00 00 09 98 00 00 01 1d 00 00 00 8a 00 00 05 a0 00 00 03 6f 00 00 02 d3 00 00 03 80 00 00 02 70 00 00 01 e5 00 00 00 8e 00 00 0f 78 00 00 02 1e 00 00 00 6f 00 00 00 6d 00 00 03 97 00 00 00 93 00 00 00 5a 00 00 00 56 00 00 03 2a 00 00 04 9e 00 00 08 e1 00 00 02 81 00 00 00 c6 00 00 01 63 00 00 09 81 00 00 04 1f 00 00 02 19 00 00 02 6f 00 00 0b a4 00 00 04 89 00 00 03 dc 00 00 11 d5 00 00 05 bf 00 00 05 6e 00 00 0f d2 00 00 11 eb 00 00 19 0e 00 00 05 60 00 00 17 20 00 00 04 15 00 00 1c a4 00 00 06 71 00 00 03 20 00 00 03 fc 00 00 11 24 00 00 02 88 00 00 01 cb 00 00 01 37 00 00 0f 5f 00 00 01 3e 00 00 00 d6 00 00 00 92 00 00 07 38 00 00 00 9d 00 00 03 b8 00 00 04 fd 00 00 01 05 00 00 00 56 00 00 00 c6 Data Ascii: M\|`WopxomZV*con` q $7_>8V
2024-04-26 14:41:01 UTC	1094	IN	Data Raw: 00 00 00 18 00 00 00 15 00 00 00 d9 00 00 00 42 00 00 00 18 00 00 00 15 00 00 00 86 00 00 00 26 00 00 01 0b 00 00 00 2e 00 00 00 18 00 00 00 21 00 00 02 83 00 00 00 aa 00 00 00 50 00 00 00 94 00 00 03 cb 00 00 00 f1 00 00 00 98 00 00 00 c1 00 00 03 fa 00 00 05 65 00 00 01 43 00 00 01 00 00 00 00 b3 00 00 03 20 00 00 00 b7 00 00 02 06 00 00 02 77 00 00 02 af 00 00 01 e3 00 00 01 9a 00 00 06 5e 00 00 02 3d 00 00 02 07 00 00 02 ab 00 00 01 5e 00 00 02 16 00 00 01 3c 00 00 01 1b 00 00 01 06 00 00 00 b6 00 00 00 88 00 00 00 61 00 00 00 90 00 00 00 a3 00 00 00 52 00 00 00 31 00 00 00 38 00 00 01 2a 00 00 00 3a 00 00 00 38 00 00 01 17 00 00 01 2b 00 00 00 79 00 00 00 2a 00 00 00 63 00 00 01 62 00 00 00 d2 00 00 00 6f 00 00 00 6d 00 00 01 23 00 00 00 91 00 00 00 Data Ascii: B&.!PeC w^=^<aR18:8+ycbom#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49830	192.178.50.34	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:01 UTC	1278	OUT	GET /pagead/viewthroughconversion/380335026/?random=1714142458810&cv=11&fst=1714142458810&bg=ffffff&guid=ON&async=1&gtm=45be44o0v879103583z86436058za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link&hn=www.googleadservices.com&frm=0&tiba=Runrun.it%20%7C%20Process%20and%20Projects%20Manager&npa=0&pscdl=noapi&auid=922323486.1714142446&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 14:41:02 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 14:41:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUl1OX7UQqfwm6oUa_uXPO92NoayHirtPoNKWu9Er7MB6aGEycKcl8FP9x1x; expires=Sun, 26-Apr-2026 14:41:02 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 14:41:02 UTC	244	IN	Data Raw: 61 36 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: a65(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-26 14:41:02 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-26 14:41:02 UTC	1169	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 51 78 4e 44 49 30 4e 54 67 34 4d 54 41 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTQxNDI0NTg4MTA',['https://www.google.com/pagead/1p-user-lis
2024-04-26 14:41:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49837	172.217.193.156	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:02 UTC	863	OUT	POST /g/collect?v=2&tid=G-W8NNJC13JR&cid=1930088754.1714142446&gtm=45je44o0v872970816z86436058za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://runrun.it X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm_17qRHR8OKVyagqZoDs4pFFsnWZIEf7-idf3blnbg-Z7mChs6o5mURipb
2024-04-26 14:41:02 UTC	443	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://runrun.it Date: Fri, 26 Apr 2024 14:41:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49840	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:02 UTC	2875	OUT	GET /static/images/home/automation/automation.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D Range: bytes=229376-237806 If-Range: Thu, 25 Apr 2024 21:20:28 GMT
2024-04-26 14:41:03 UTC	426	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:03 GMT Content-Type: video/mp4 Content-Length: 8431 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 229376-237806/237807 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:03 UTC	829	IN	Data Raw: 00 55 01 9e ea 6a 4f ff 0c 40 4f 96 00 89 83 fb 53 0e 2c 0b 67 1a 81 91 03 d9 0e 41 d3 37 6a da f0 24 71 90 5a d4 a5 6a 47 c4 9b 5c 67 1d 71 c5 ea 89 5c 17 80 7c ae e5 f7 a2 95 5c 69 f4 eb 51 30 0e 5d 76 ef c7 aa 26 dd 68 87 2d b9 2d bd 3a bd 1b 0d b5 54 01 77 00 00 00 4e 41 9a ef 4b a8 42 10 5b 20 8c 0d 40 3c 90 35 00 f0 00 85 7f fe 38 40 02 b5 ed 6d d1 78 35 33 ef 2e 73 19 6d d7 0f 17 20 a6 48 43 2e 22 1f e9 af 8a a0 a1 7c 42 04 53 ef 76 f7 8a c4 af 0c 40 5a fd cc 9c 80 04 c4 d5 92 24 18 a4 26 e2 5f 00 00 00 17 41 9f 0d 45 15 2c 23 ff 00 2e 9b 08 be bb 72 a9 03 d0 20 00 00 37 a1 00 00 00 11 01 9f 2c 74 47 ff 00 16 b1 6d c0 00 00 03 00 06 7c 00 00 00 10 01 9f 2e 6a 47 ff 00 00 03 00 00 03 00 00 0e e8 00 00 00 3f 41 9b 33 4b a8 42 10 5b 21 f0 21 00 c8 40 Data Ascii: UjO@OS,gA7j$qZjG\gq\\|\iQ0]v&h--:TwNAKB[ @<58@mx53.sm HC."\|BSv@Z$&_AE,#.r 7,tGm\|.jG?A3KB[!!@
2024-04-26 14:41:03 UTC	222	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 03 00 00 00 01 b0 00 00 00 00 00 24 65 64 74 73 00 00 00 1c 65 6c 73 74 00 00 00 00 00 00 00 01 00 00 27 10 00 00 02 00 00 01 00 00 00 00 1d 05 6d 64 69 61 00 00 00 20 6d 64 68 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 02 58 00 15 c7 00 00 00 00 00 41 68 64 6c 72 00 00 00 00 00 00 00 00 76 69 64 65 00 00 00 00 00 00 00 00 00 00 00 00 1f 4d 61 69 6e 63 6f 6e 63 65 70 74 20 56 69 64 65 6f 20 4d 65 64 69 61 20 48 61 6e 64 6c 65 72 00 00 00 1c 9c 6d 69 6e 66 00 00 00 14 76 6d 68 64 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 24 64 69 6e 66 00 00 00 1c 64 72 Data Ascii: @$edtselst'mdia mdhd<XAhdlrvideMainconcept Video Media Handlerminfvmhd$dinfdr
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 65 66 00 00 00 00 00 00 00 01 00 00 00 0c 75 72 6c 20 00 00 00 01 00 00 1c 5c 73 74 62 6c 00 00 00 c0 73 74 73 64 00 00 00 00 00 00 00 01 00 00 00 b0 61 76 63 31 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 01 b0 00 48 00 00 00 48 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 ff ff 00 00 00 36 61 76 63 43 01 64 00 1f ff e1 00 19 67 64 00 1f ac d9 40 c0 37 b0 11 00 00 03 00 01 00 00 03 00 78 0f 18 31 96 01 00 06 68 eb e3 cb 22 c0 fd f8 f8 00 00 00 00 10 70 61 73 70 00 00 00 01 00 00 00 01 00 00 00 14 62 74 72 74 00 00 00 00 00 02 ce b0 00 02 ce b0 00 00 00 18 73 74 74 73 00 00 00 00 00 00 00 01 00 00 02 58 00 00 01 00 00 00 00 20 73 74 73 73 00 Data Ascii: efurl \stblstsdavc1HH6avcCdgd@7x1h"paspbtrtsttsX stss
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 Data Ascii:
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 03 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 Data Ascii:
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 03 00 00 00 00 01 00 00 01 00 00 00 00 03 00 00 02 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 05 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 01 00 00 00 00 01 00 00 04 00 00 00 00 02 00 00 01 00 00 00 00 01 00 00 Data Ascii:
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 0a ff 00 00 0d 29 00 00 11 dc 00 00 03 fc 00 00 02 8d 00 00 0f d4 00 00 03 15 00 00 02 28 00 00 01 af 00 00 0c 7b 00 00 02 1b 00 00 01 7e 00 00 01 23 00 00 0a a5 00 00 01 42 00 00 00 c2 00 00 00 ce 00 00 05 5e 00 00 00 b4 00 00 04 8d 00 00 00 ae 00 00 13 66 00 00 02 8c 00 00 01 a5 00 00 01 72 00 00 02 e5 00 00 00 a1 00 00 01 b9 00 00 01 74 00 00 01 83 00 00 01 fa 00 00 01 a5 00 00 01 8f 00 00 00 5b 00 00 01 6f 00 00 00 4c 00 00 01 9c 00 00 00 5c 00 00 00 45 00 00 00 37 00 00 01 6e 00 00 00 55 00 00 00 39 00 00 00 38 00 00 01 88 00 00 00 54 00 00 00 34 00 00 00 28 00 00 0a 02 00 00 01 27 00 00 00 53 00 00 00 fa 00 00 02 42 00 00 00 7f 00 00 00 4b 00 00 01 b2 00 00 00 ec 00 00 01 a1 00 00 04 9b 00 00 00 6e 00 00 00 56 00 00 00 57 00 00 01 6d 00 00 00 55 00 Data Ascii: )({~#B^frt[oL\E7nU98T4('SBKnVWmU
2024-04-26 14:41:03 UTC	537	IN	Data Raw: 00 00 40 00 00 00 31 00 00 00 22 00 00 00 aa 00 00 00 3c 00 00 00 1e 00 00 00 1b 00 00 03 c5 00 00 00 97 00 00 00 79 00 00 00 1b 00 00 00 b7 00 00 00 36 00 00 00 23 00 00 00 20 00 00 00 aa 00 00 00 3e 00 00 00 22 00 00 00 31 00 00 00 e0 00 00 00 53 00 00 00 34 00 00 00 25 00 00 00 1e 00 00 00 33 00 00 00 32 00 00 00 22 00 00 00 1e 00 00 00 21 00 00 00 2f 00 00 00 1f 00 00 00 1e 00 00 00 3f 00 00 00 30 00 00 00 20 00 00 00 20 00 00 01 89 00 00 00 50 00 00 00 30 00 00 00 30 00 00 00 79 00 00 00 3e 00 00 00 23 00 00 00 1d 00 00 00 2b 00 00 00 34 00 00 00 1f 00 00 00 1f 00 00 00 5f 00 00 00 37 00 00 00 23 00 00 00 1f 00 00 00 36 00 00 00 36 00 00 00 22 00 00 00 21 00 00 00 3b 00 00 00 3b 00 00 00 21 00 00 00 21 00 00 00 8f 00 00 00 52 00 00 00 21 00 00 00 24 Data Ascii: @1"<y6# >"1S4%32"!/?0 P00y>#+4_7#66"!;;!!R!$
2024-04-26 14:41:03 UTC	568	IN	Data Raw: 01 d5 00 00 00 fc 00 00 01 59 00 00 06 bd 00 00 02 21 00 00 02 10 00 00 08 71 00 00 02 c9 00 00 08 cf 00 00 0b 55 00 00 0d 68 00 00 0f cd 00 00 03 79 00 00 3b d4 00 00 0f 8c 00 00 02 e0 00 00 01 d0 00 00 01 80 00 00 0d 09 00 00 01 cf 00 00 01 64 00 00 00 f1 00 00 0f 97 00 00 00 c8 00 00 00 ed 00 00 06 3c 00 00 05 7a 00 00 00 5d 00 00 03 5c 00 00 00 65 00 00 00 4f 00 00 00 34 00 00 01 3d 00 00 00 5d 00 00 00 33 00 00 00 36 00 00 01 a6 00 00 00 4d 00 00 00 2f 00 00 00 38 00 00 01 0b 00 00 02 c1 00 00 01 3e 00 00 00 ac 00 00 00 ad 00 00 03 90 00 00 01 c1 00 00 01 19 00 00 00 d3 00 00 03 f1 00 00 02 34 00 00 01 58 00 00 01 64 00 00 03 2e 00 00 03 76 00 00 00 f2 00 00 00 da 00 00 02 e0 00 00 01 94 00 00 01 35 00 00 01 45 00 00 03 33 00 00 01 e7 00 00 01 2a 00 Data Ascii: Y!qUhy;d<z]\eO4=]36M/8>4Xd.v5E3*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49839	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:02 UTC	2880	OUT	GET /static/images/home/communication/notification.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D Range: bytes=327680-341742 If-Range: Thu, 25 Apr 2024 21:20:28 GMT
2024-04-26 14:41:03 UTC	427	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:03 GMT Content-Type: video/mp4 Content-Length: 14063 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 327680-341742/341743 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:03 UTC	828	IN	Data Raw: 67 83 cb 62 a1 7b 4e a7 af b2 65 50 b4 34 1a 2c 80 29 5b 9d 50 2f 2d c7 e9 4a ca 11 91 af 40 62 85 17 e9 ce 46 c7 73 bf 31 69 ad a5 a1 6d aa 85 cf c8 9f c7 6f 7b f2 7b 30 90 b1 90 2d 96 6f e8 62 6d 5f c6 5c 89 2a 94 a2 c2 9b 1a 0b e2 88 51 0c 1a d3 8f f3 28 92 a5 6d 2f 6f 70 b4 7c 55 f9 19 39 76 73 ef bf 38 6c b7 28 14 b9 4a d0 cd 3c af a2 54 83 32 83 38 7e f2 f5 43 3e 4d df e4 7d 8a d9 22 fd e7 e6 d4 19 4e 7d b9 8e 80 d4 9f e5 92 0f 52 95 dd a2 4a 5e 96 b3 af 3c 53 cb df ec 08 40 90 da 80 00 00 0d 93 41 9b 0f 4b a8 42 10 5a 21 8f 02 50 3f 80 96 05 e0 24 03 f0 25 01 04 05 3c 9f cb 0a 7d f9 b4 77 a1 62 9b ed f2 4d 5b fb c1 6d e9 bc 53 0f 4e 9a b6 e2 fc 72 40 7e 59 7d c0 0e 60 2d 73 14 31 e3 cf 30 ec 44 f1 32 21 15 f7 05 57 92 8a e0 7c 4b c9 6b 87 32 bf 90 Data Ascii: gb{NeP4,)[P/-J@bFs1imo{{0-obm_\*Q(m/op\|U9vs8l(J<T28~C>M}"N}RJ^<S@AKBZ!P?$%<}wbM[mSNr@~Y}`-s10D2!W\|Kk2
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 61 71 33 d7 46 ce 2c 12 77 ac 7f a7 c0 b0 21 aa 90 b5 4f 35 04 15 45 d5 76 dc d1 7b 25 92 fb 2b 65 9a ce 44 1b 5e 08 02 46 e7 b0 1c f6 e4 f6 ed 53 84 3c d6 d2 b8 8a d0 45 fa 88 d0 f7 c6 13 88 b5 54 ba 40 dc 08 ec 76 fd 0a e5 57 aa 79 6b 4b ba 13 86 d2 22 33 06 57 f5 a6 58 cb 0f 6b 99 14 d9 9e f9 82 83 bb fe 47 6a 1e e0 bb 91 e6 66 5d 13 c3 4d 10 3e da c9 8e e7 4d 41 28 d3 3e a0 54 45 be 56 c3 5b 49 a6 4d fd b4 bb 96 64 81 66 f6 6f 6c 95 da eb 79 11 14 0d a4 f6 43 b4 d9 09 f0 b2 f1 be 07 0e 88 8c 74 7a 2d 2f ed d4 70 87 46 30 2a c1 79 46 11 aa b2 a6 eb 61 04 92 7a 02 96 1b 8b 96 d5 98 a4 75 f7 dc ba be 6b f4 03 63 14 a4 82 5d bc 27 a0 f5 fe b7 95 9f e3 93 b2 5a 46 bf a2 9c 43 ca 05 0a a4 2e 5a ca bc 8f 67 4e e3 1b 16 48 72 b5 46 15 62 d9 0c 9e b9 d4 dc f1 Data Ascii: aq3F,w!O5Ev{%+eD^FS<ET@vWykK"3WXkGjf]M>MA(>TEV[IMdfolyCtz-/pF0*yFazukc]'ZFC.ZgNHrFb
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: d1 53 9d f5 30 c6 be 46 66 f8 cd 3d 6b d7 4c 33 de f6 27 60 d3 9a 36 b9 c6 f3 98 78 ef 58 9c e7 e1 ed 07 41 1e 8e 59 87 ca 54 93 78 60 67 dc 2f 35 c2 59 af 42 ac 1a 3c 81 a1 06 b1 f2 3f 23 42 79 91 40 17 03 01 99 84 4c cf ba 5e c6 07 b1 c3 23 01 14 96 bc 01 09 38 1b 52 30 66 86 9f 52 02 cf f9 6b 8d 11 5f 98 81 fd 34 8d d0 dd 8a 82 c8 a5 cb 19 92 79 da 75 e5 69 f4 0f c1 23 c7 07 99 5e 7f 1a 25 f7 a2 53 f7 4d 8e ae d4 27 69 3c 63 0f f7 f0 b3 17 41 b8 08 d0 ba 43 54 60 28 df df 22 71 03 47 67 16 dd 76 92 ac 74 51 8a 1a 4d d5 d2 f7 93 05 54 08 1e 4a d1 7b 6c 4d 4f fc 01 c8 cb 84 17 8b 3e 52 7e 77 25 b1 ec d3 4d fc 11 0d bc 92 fb 73 7e 6b 75 ee 22 be 50 51 12 61 e6 b3 f7 9c fd 03 ac 2e 8c 6a 25 2a 40 55 2b 35 55 1c 22 c4 6f 2e db b2 e2 f2 9b 5c 8a e5 b5 a9 7b Data Ascii: S0Ff=kL3'`6xXAYTx`g/5YB<?#By@L^#8R0fRk_4yui#^%SM'i<cACT`("qGgvtQMTJ{lMO>R~w%Ms~ku"PQa.j%*@U+5U"o.\{
2024-04-26 14:41:03 UTC	400	IN	Data Raw: 21 28 4e 61 01 b7 b3 64 03 6a 7b 8e c7 6b 7f b0 e4 c6 46 16 fe 81 7b 58 88 4a a7 ca 97 df cc f8 6d f6 f7 91 bf 8f 31 ce 5f 8e 92 26 2d 44 a1 62 d3 f0 90 a1 ca f4 de 3e 45 71 e1 f7 4c 98 3b be 08 a3 9a f9 71 0e a6 42 9e 92 3f e6 dc cb 1f 7c d9 36 6c c4 60 ec c6 11 1e 9d 75 51 fb e7 ba 69 7b e1 8d ff 00 15 08 10 ef a8 06 d9 41 33 c2 d4 87 66 de 63 39 31 eb 75 e8 ee 93 c2 2c 22 64 d0 cf 1a 0c 83 6c 30 2f cc b0 0b 2e 72 c6 c8 86 d1 8b ca 7e 72 62 49 6b 2a 25 9d 72 15 b3 1b 55 11 8e b3 25 0d c9 10 01 a5 12 c1 fe fc 0a 19 9e c6 57 fb d4 7d 1e 80 10 53 a9 fe 74 b6 00 db 42 d8 b6 a2 27 4b 61 52 75 89 12 2f 7e 89 de e2 1b aa 1a 62 c6 4b 25 3c ee d3 35 08 75 79 24 2b 25 a8 5f 8d 9b d9 cf 4a 21 aa df f7 39 9b 35 6d 5f 0c c2 85 64 b8 8b 55 81 39 aa 5b fd 80 30 7b dc Data Ascii: !(Nadj{kF{XJm1_&-Db>EqL;qB?\|6l`uQi{A3fc91u,"dl0/.r~rbIk*%rU%W}StB'KaRu/~bK%<5uy$+%_J!95m_dU9[0{
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: de 76 c1 1f 97 5c 79 6e d4 07 36 2f 5e 3c 6a 9d 54 bc 08 74 b9 a7 a1 3a 0e fc 0d 81 b3 f7 ee b3 a2 92 6d 44 3a 1d 88 c6 7f 36 8c 49 aa dd ac 37 3b 37 68 f1 52 ff 0a 36 a5 74 a0 ca a6 66 2e 6e 78 e5 a5 2c 6a f1 94 21 5f 4d 4b 4a 76 30 20 68 09 72 ff 5f a4 93 32 36 ce 8b 05 eb 56 72 a7 67 32 91 00 4c bf 96 85 d4 a6 8e 0a d0 27 f8 06 72 de 56 70 00 00 04 be 47 f9 8c fe 41 c7 df 00 2a 00 60 cd 8d bd d7 93 6a 74 5f 6b be ee fd cd 80 1e 07 c3 57 39 ef 7f 79 3b 2a 34 40 26 27 11 57 8b 13 97 7c 54 d8 f7 ce 6d 1f 23 bc a4 ba c3 be cc d0 02 42 02 11 5c d2 17 96 e2 0b ae 4a dc da d1 e3 9f 47 f3 4d dd 88 96 d2 ac cd 30 6e c6 2b 5a 45 a4 eb c9 d4 12 4e f7 dd 5d ab c1 53 07 76 bc f0 ba e8 5b 4c 72 94 b0 cd 1c c4 fc 7a 94 2a 39 2b 0d 1e 18 ae 32 fc 86 06 80 86 8e 9b a6 Data Ascii: v\yn6/^<jTt:mD:6I7;7hR6tf.nx,j!_MKJv0 hr_26Vrg2L'rVpGA`jt_kW9y;4@&'W\|Tm#B\JGM0n+ZEN]Sv[Lrz*9+2
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 55 d8 cb 26 ca 07 34 7d 6c a3 17 3c 7d 2c 09 85 69 b8 b9 d2 94 51 00 00 00 d2 01 9f 50 6a 44 7f 37 b4 ed 47 06 26 d0 b8 e6 12 eb 5d fa 20 05 7c 68 75 26 0f 9d 0e c6 0d f5 e0 48 f2 e7 30 5e 43 98 5d cf f1 43 e6 b0 46 c8 0c 91 6a c0 62 f3 7b d7 bb 40 48 b1 e1 5b 92 a8 39 a5 aa 2c 30 a8 1e dc 3d 11 62 e1 3a dd b3 77 e7 70 6f c0 c0 cb dc 38 b8 7c 64 51 51 26 ff fd 6e 32 36 89 16 c3 9d b9 34 32 60 ba eb d1 68 b8 9a 31 da e4 e1 a8 a7 82 ea 70 a8 fe d0 bf 30 1e 47 ed cd 65 4e 3a a4 65 0e 76 f9 77 61 5b 79 02 2b 75 3f 8b 6c 64 49 37 c7 23 4a e9 48 14 f9 6e be 61 bf 9c 92 bb f8 8d 18 8c 65 6b 1f 07 6e 29 dd 30 cf ca 08 66 38 11 0e 53 90 04 11 4f 52 6c 34 32 ab 82 38 8b 7d 13 53 78 9e 35 96 1b 0a 67 2f eb c1 00 00 08 9e 41 9b 55 49 e1 0e 89 94 c0 97 ff 02 38 0f e7 Data Ascii: U&4}l<},iQPjD7G&] \|hu&H0^C]CFjb{@H[9,0=b:wpo8\|dQQ&n2642`h1p0GeN:evwa[y+u?ldI7#JHnaekn)0f8SORl428}Sx5g/AUI8
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: b2 7e bf d1 97 82 83 8b 7d 37 d1 07 c3 0a 8c 69 fb 04 ec 55 7d 7f a0 37 b8 f4 05 a6 cf 01 58 3f f2 c6 3c 5e e6 3e d8 df 56 fc b7 a6 64 6e 36 12 44 fa 19 c3 2f fc b2 12 f5 46 69 c9 cb 27 16 bb ac fe 54 dc e3 33 e1 40 84 57 bf 8c ee 7d 58 a5 fc 20 a1 dd 47 49 43 fd 22 16 ef 17 d5 8a 2b 2c 9e 34 f5 2e ba bd 75 46 03 c1 b8 a1 a7 28 c4 a8 17 0f 0c 5a 4e 32 cc a0 20 55 62 67 e7 0e 4a 3a a7 2e 0c c1 d9 fc 90 92 14 8b b4 0c fc 68 a6 e2 a7 28 ed 30 4d 63 3d f3 0f 2e 5b d6 71 51 b5 10 42 dc c2 74 11 c0 01 ea 3f 84 46 84 52 8c 28 f3 42 0f 5e e3 ae 53 eb b5 be 30 2d 3d d0 a4 86 3a 68 00 1d 2d da d1 72 1c a9 bf cf c5 8d 81 39 b8 7c a3 1e 87 30 52 4a 87 50 16 09 1d 0b 15 3c 75 b5 16 a7 45 78 48 93 29 a9 73 7b 43 6a 41 a8 9e 34 3e f8 b3 5f d9 51 ef 0c 70 be d3 44 a8 c9 Data Ascii: ~}7iU}7X?<^>Vdn6D/Fi'T3@W}X GIC"+,4.uF(ZN2 UbgJ:.h(0Mc=.[qQBt?FR(B^S0-=:h-r9\|0RJP<uExH)s{CjA4>_QpD
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: c7 89 bd 49 cd ef 59 c0 b6 38 c4 7e 3f a2 5d 99 24 d5 11 e8 48 41 57 9a 9c 01 3e 45 9d dd 21 29 7f 15 3f b5 55 4f 32 9e c4 b3 e6 fb d6 b3 8c 5f 3b 0b d3 2c 8b d0 31 90 60 54 0e 3e 04 38 a9 ee 46 2a 88 30 d4 d7 3a 8d 17 90 c2 1e 26 ef b0 6d f5 c8 51 ee 53 90 fe 25 83 42 94 f2 15 01 d4 3f 0c 76 c0 12 89 9c 03 73 a8 c3 07 a6 73 19 14 e7 c4 56 ad ce 4b 3a a7 53 38 cb 7c 42 21 a6 21 a6 cb 7f 65 dd a6 95 27 ce 83 4f a1 52 89 af f4 a6 41 67 16 10 f4 f9 36 9a 5d be a0 cb 13 cc d5 63 de 5c 14 fb 3b e8 3f 14 6b b9 3d f6 cb 8e 28 3d ab 65 7e 6d 8d 2c a2 bb 9c 71 b3 86 69 3d d4 c4 55 1d 5a 2a ba 8d a6 76 77 ce 5a 65 4f 64 b5 76 b1 43 ff 10 65 7d 09 de d9 86 ff 28 99 c1 be 71 51 e6 0e f7 78 0f a5 07 8a 77 33 21 00 00 00 db 01 9f 92 74 44 7f 3a 30 5b 9c c4 01 06 3f c7 Data Ascii: IY8~?]$HAW>E!)?UO2_;,1`T>8F0:&mQS%B?vssVK:S8\|B!!e'ORAg6]c\;?k=(=e~m,qi=UZvwZeOdvCe}(qQxw3!tD:0[?
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 03 00 00 00 01 b0 00 00 00 00 00 24 65 64 74 73 00 00 00 1c 65 6c 73 74 00 00 00 00 00 00 00 01 00 00 3e f8 00 00 04 00 00 01 00 00 00 00 13 fd 6d 64 69 61 00 00 00 20 6d 64 68 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 32 00 00 03 26 00 15 c7 00 00 00 00 00 41 68 64 6c 72 00 00 00 00 00 00 00 00 76 69 64 65 00 00 00 00 00 00 00 00 00 00 00 00 1f 4d 61 69 6e 63 6f 6e 63 65 70 74 20 56 69 64 65 6f 20 4d 65 64 69 61 20 48 61 6e 64 6c 65 72 00 00 00 13 94 6d 69 6e 66 00 00 00 14 76 6d 68 64 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 24 64 69 6e 66 00 00 00 1c 64 72 65 66 00 00 00 00 00 00 00 01 00 00 00 0c 75 72 6c 20 Data Ascii: @$edtselst>mdia mdhd2&AhdlrvideMainconcept Video Media Handlerminfvmhd$dinfdrefurl
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 0a 00 00 00 00 01 00 00 04 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 08 00 00 00 00 02 00 00 02 00 00 00 00 01 00 00 04 00 00 00 00 01 00 00 0a 00 00 00 00 01 00 00 04 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 08 00 00 00 00 02 00 00 02 00 00 00 00 01 00 00 04 00 00 00 00 01 00 00 06 00 00 00 00 01 00 00 02 00 00 00 00 03 00 00 04 00 00 00 00 01 00 00 06 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 04 00 00 00 00 01 00 00 0a 00 00 00 00 01 00 00 04 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 0a 00 00 00 00 01 00 00 04 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 02 00 00 00 00 01 00 00 04 00 00 00 00 01 00 00 08 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49838	172.217.165.206	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:02 UTC	1257	OUT	POST /g/collect?v=2&tid=G-W8NNJC13JR&gtm=45je44o0v872970816z86436058za200&_p=1714142444041&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=1930088754.1714142446&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714142453&sct=1&seg=0&dl=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link&dt=Runrun.it%20%7C%20Process%20and%20Projects%20Manager&en=page_view&_fv=2&_ss=1&tfd=12253 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://runrun.it X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:03 UTC	443	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://runrun.it Date: Fri, 26 Apr 2024 14:41:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49841	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:02 UTC	2877	OUT	GET /static/images/home/flexibility/flexibility.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D Range: bytes=491520-512387 If-Range: Thu, 25 Apr 2024 21:20:28 GMT
2024-04-26 14:41:03 UTC	427	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:03 GMT Content-Type: video/mp4 Content-Length: 20868 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 491520-512387/512388 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:03 UTC	828	IN	Data Raw: ce 3d 35 0a 2e 5b 6e 79 8b 11 e8 8e 3b 6b d5 62 f7 c4 19 02 28 6e 56 9a e0 68 f3 30 45 af 60 5f d9 30 a5 b8 74 cc 4a a2 8d 25 43 07 a9 ab 50 86 45 de c5 3f bd ee b4 78 c5 73 cf b7 0f 8e 0d 32 e4 1a f5 cc 7d a2 4e 5e fb 0e bf 3f b9 7c 66 df 82 da 1d c7 e8 27 02 55 9e de e8 34 f8 6d d9 aa 5c 40 b1 9a 4e f5 01 b0 92 96 60 e6 01 d9 90 85 91 90 d2 0a 02 22 c3 a7 4a 41 35 59 55 bd fe 1e e0 27 7f 0f 2f 47 ce 87 08 78 f3 61 84 5f bc 62 6c 26 07 75 76 1d 9c 32 1e 87 e9 34 71 1f ce 2a a9 81 01 6f 7a 93 51 c6 fc 3c 78 19 11 63 02 37 54 22 b9 32 2f 37 84 38 89 bd 92 67 27 cf 59 3e e6 51 d8 38 e3 8d 5d 78 3e 02 81 89 f6 db 07 0a 07 17 ec 57 c9 96 76 24 66 25 2d 38 1b b8 af 5d 64 9f 27 c6 2b 8b 88 af 3a a5 06 a8 34 94 fb b4 43 47 85 b8 49 32 09 17 82 81 7a 35 dc 9f e6 Data Ascii: =5.[ny;kb(nVh0E`_0tJ%CPE?xs2}N^?\|f'U4m\@N`"JA5YU'/Gxa_bl&uv24q*ozQ<xc7T"2/78g'Y>Q8]x>Wv$f%-8]d'+:4CGI2z5
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 6b 80 f3 60 c1 9f b4 3e cc 65 46 68 9d b0 d2 0d 90 36 4e 26 56 a6 7c 21 c5 7f 44 b7 e2 bf d1 34 44 82 28 fe e1 d0 b4 80 5e 5e dd 54 32 00 00 07 9c 48 d7 bf 84 f5 74 d2 ed f1 da f2 6b 1a 5a 45 cc fb c0 31 7e e5 cc 18 18 29 ce bb 8f 75 70 2d d5 d0 93 59 c3 a3 21 2b 7e 63 a9 28 98 a1 40 f3 9e 6b ad ef b1 60 27 52 61 de 66 4a 2d 5d 05 87 95 03 81 a0 2e ea e2 fa c8 1d 07 fe f4 f0 01 b5 50 1a 92 e9 33 51 af 34 0a 36 fe 2a 0c 12 87 81 34 90 75 0e e4 51 c6 a7 d8 fd 45 37 be 75 d2 fb d9 ec f3 83 58 88 28 16 33 1e bb b8 22 9b 90 ee a2 c7 57 0a f2 ac 54 aa 1e 15 7d d0 56 ab 16 51 f7 f0 33 e6 9e 4d ff 4b f3 26 e4 a7 d1 2c eb fa ef c6 d8 43 8c 45 40 2a e6 c6 1b 0e e0 e1 ce 5a 9b 69 e7 aa 35 83 94 ca 93 e2 5a 10 de cd e3 51 77 f8 4a fa a4 73 cb 40 86 68 58 b3 68 13 23 Data Ascii: k`>eFh6N&V\|!D4D(^^T2HtkZE1~)up-Y!+~c(@k`'RafJ-].P3Q464uQE7uX(3"WT}VQ3MK&,CE@Zi5ZQwJs@hXh#
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: aa 95 aa 40 1e 97 9b e0 be 3a 8b e8 2d f1 fe 6b 96 59 37 66 ad 67 70 55 c3 a3 80 83 c9 93 7a ec a7 2a 69 39 a2 ac a4 58 8f 6a 7d 8a f9 c2 67 24 33 ec 12 3d 82 37 7d d1 48 00 00 0a fb 41 9b ae 49 e1 0e 89 94 c0 85 7f fe 38 40 20 be 08 83 94 a6 76 be c4 15 a2 8b 0b cb 85 10 32 1d 45 79 e3 d3 8f 7b 2d c2 25 2c 43 e2 31 a3 22 7f 80 3a 4c fe 1f bf 17 6c 90 cc ae 82 64 00 4a 06 86 f1 79 22 13 24 d1 c0 e6 b7 78 92 b4 67 8a 34 83 08 98 cc 0c c7 bb 41 0d 54 e1 17 1a a2 9e 77 d5 de 67 a6 4b df 48 3d 1b 2a a5 d2 26 4d ba 68 df ce a5 91 00 e3 25 18 32 9c ec 7f 72 d6 f6 ca 17 38 0c 70 ae b2 4a 16 c4 bd dd 11 be 26 c7 16 0d 43 51 a1 68 9e c0 75 00 64 e9 a2 c3 69 79 78 b7 c0 01 ec f0 9c 2f e3 ec 68 5a 47 fd fb 0d 09 cf e7 47 40 f2 77 18 d1 b7 97 73 5a 2f c3 9f 66 78 56 Data Ascii: @:-kY7fgpUzi9Xj}g$3=7}HAI8@ v2Ey{-%,C1":LldJy"$xg4ATwgKH=&Mh%2r8pJ&CQhudiyx/hZGG@wsZ/fxV
2024-04-26 14:41:03 UTC	400	IN	Data Raw: 63 48 f1 e8 52 45 42 96 cc c2 e3 36 d3 1a d7 14 43 1e 73 78 7a 96 a0 3d da ab e9 e1 87 e6 2e 5c b5 1b d3 db 87 8c 0f 96 e6 dc 8f c3 6a c9 36 33 a0 d5 99 43 71 f2 2c e0 7c 97 eb 3c ad 9c 98 1b 70 38 72 da 9f 2b bf 8f 4e 38 fa 75 2c a9 cb 1b 33 ff b6 d1 5e df 7e 8d 77 c1 68 22 71 e4 f4 24 ff 30 92 04 2b 46 fa 7b a9 aa bb 1c 40 5f 29 7d 09 f1 97 fa 88 f3 0e 77 7f 7d bc 79 d0 7c 83 41 d6 9c 1c 82 9a 56 46 11 b7 e2 38 97 d0 87 87 b8 ff 6f e8 ff c7 0e 22 00 a7 0c 37 b7 bb 49 47 fb e0 8c 15 90 6a 5c 41 af d3 ba 3d df c0 4e 0f d8 9f 35 5c a3 b2 9d b1 05 1e b4 4e af 59 20 c6 4c 4b 08 d6 02 8d 1b 93 00 ba 50 c0 5e 55 48 30 2e c2 fe b0 31 7a 54 6c ec 32 d1 65 7b 57 fc 9e e8 70 4d 7f ae 77 b4 65 bd a1 8d 3b 0a 23 e0 3f 10 00 c4 06 df 7b f9 e7 ce b9 5a 3b 33 6c 56 b8 Data Ascii: cHREB6Csxz=.\j63Cq,\|<p8r+N8u,3^~wh"q$0+F{@_)}w}y\|AVF8o"7IGj\A=N5\NY LKP^UH0.1zTl2e{WpMwe;#?{Z;3lV
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: cd db 16 e8 33 37 a5 99 e3 33 07 2b bd 0b 1c 25 6a 28 2d 12 4d 4f 0f 11 60 e2 35 5d 6f 4f d1 a1 83 dc 9f 80 03 c6 cf d3 37 e2 d0 93 68 34 b7 d3 ad bf 33 60 81 e2 50 74 d4 09 66 20 75 cb 27 31 3d 2e e6 38 d6 33 70 c4 bd 6d 00 2c 77 7d bd 02 26 1f bb 22 d5 14 a7 49 6d 4a bd cf 61 99 5a 69 4c d9 17 72 03 18 95 e8 b7 5b 84 47 c4 2e e2 a4 25 60 91 f5 8c 8c a1 c0 72 7f 14 3a a1 0e 42 92 9f a1 ba 1f 1a 98 40 76 9f 6f 4b fd db 8d 04 55 bd 01 23 6c be 33 9a 1d 6e df 5c 23 21 1c f8 95 b2 b7 97 1c 49 94 95 e4 d6 50 5c 07 38 0c 97 0c dd c8 e7 79 dd 8c ca 64 0f 62 d2 08 05 cc a2 51 63 97 d5 29 76 94 83 2f f2 81 cb 61 fa 84 d7 3b 24 16 2d e5 9b ec 52 d8 f7 1e 07 90 b9 b8 be 07 24 19 d2 d1 8f 6b 6d af 8c 1a f5 ac d3 da 39 62 bd 06 09 65 65 b9 fb 37 aa f1 16 26 91 5f e5 Data Ascii: 373+%j(-MO`5]oO7h43`Ptf u'1=.83pm,w}&"ImJaZiLr[G.%`r:B@voKU#l3n\#!IP\8ydbQc)v/a;$-R$km9bee7&_
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 73 a2 cc cb c5 7a 07 88 0e a9 24 18 77 3b 26 10 5b 68 a8 2d 73 32 09 c8 45 70 c7 23 b1 e9 f4 e6 51 d6 54 63 12 40 07 8c 62 ce c7 7c 6f 69 15 fc 83 7f af f1 af 93 e3 b8 46 03 6d ff 81 8f be 2e 54 a1 89 30 d4 0b aa 21 60 ad c8 a3 50 cb ad be de 01 06 ab 23 3e 9c 22 5c bf d4 b9 15 50 92 24 18 21 3c cc 4d 49 2c 41 17 8c 2d 20 94 bd f8 b9 0c 3d f5 4b 7d 12 59 2a 92 06 84 57 25 b8 ee c0 c5 c7 24 af b2 4e d4 de 98 0f 2a 7f 59 3d f2 6d 46 ea 2a 3b 4a 20 54 f6 34 ce fc 5f 98 9c 59 f6 53 9d 29 c9 2b 5f 2b c1 02 67 cd 5d da 70 74 b7 17 26 6a 8b 52 24 07 2e f7 6d 52 ec 7f b5 4c 8a 59 51 b3 fe 58 58 13 b2 ed 77 8f d2 9c 22 45 c9 9a 8b b8 83 90 8f 8e 3a 22 45 14 7b 73 9b d8 1b 80 9e 3a 07 f2 04 e8 37 fa ee c2 61 fd f8 3d 91 5c d5 d3 c0 23 e7 0f a4 46 f5 88 1f 4f 8c cf Data Ascii: sz$w;&[h-s2Ep#QTc@b\|oiFm.T0!`P#>"\P$!<MI,A- =K}YW%$NY=mF*;J T4_YS)+_+g]pt&jR$.mRLYQXXw"E:"E{s:7a=\#FO
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: f0 d1 f5 5c 16 84 ab 87 0c 93 34 82 19 fd 6a 46 f0 91 9d f2 f2 ca cc f2 a5 f6 2a 3f 6e c2 c2 e2 19 e6 e1 89 7f 00 22 27 a5 4a 1f 28 f2 25 da 0b a2 3f e1 7c 27 7b 84 73 db 92 fb 54 3c 8b d0 98 1a 94 8d 2e f0 02 12 7a d0 6a 85 4e ab 97 43 30 2d 92 1b dc b3 6c 4e af b8 12 89 ec 15 cc b5 95 f5 5a 2f 8f 7e 68 29 b0 0e 73 a5 5e 4f c3 da 5e 0c a4 ec e7 4b e1 8e f7 a0 5b 36 2c dc 00 d4 f8 43 6d 4e 9d 74 08 8d 93 3f 02 45 de 4a 2e 8c 1e 9e b0 28 f3 b9 24 0e de ee ff 5e 06 cd bf ea df 8f 05 4c c6 31 b8 31 d9 18 04 d5 43 ee a5 fa 46 53 75 4f e2 58 97 83 48 4f 8a 20 0e da e6 95 d0 f7 36 73 43 d7 33 08 27 f0 c0 eb ac 3a 07 3e 6a 13 1c 0e 41 fb 74 24 97 9c f1 dd 63 b8 98 4d 93 3e 21 c4 7b f5 07 5c a1 45 d8 b6 93 cd a2 85 df e2 ef ac 5f f3 d9 07 f2 b2 cd 36 d9 a7 9c e0 Data Ascii: \4jF*?n"'J(%?\|'{sT<.zjNC0-lNZ/~h)s^O^K[6,CmNt?EJ.($^L11CFSuOXHO 6sC3':>jAt$cM>!{\E_6
2024-04-26 14:41:03 UTC	331	IN	Data Raw: cf d7 80 09 db d6 5b b7 7a 80 7c 21 3c 74 87 f5 cf 32 36 f9 7c 14 3f 6c 78 73 9f 37 69 e3 70 c6 b3 61 a1 7b b6 a9 a0 e6 c1 35 ea ae bb 12 8b 6f 8d 61 73 28 9f c9 3e 49 3b e8 e9 6a 04 c5 a0 ed d9 d4 63 df 1a af 7b 00 00 03 03 f5 fe 9c ab ab ee 12 80 f8 7d e5 d5 b9 8e 78 32 f0 20 2b 9e 7c 1a ea d1 48 1b 11 ff 99 d6 3f ff d9 9d 7b f1 52 7d 33 fd 49 36 50 91 d0 13 93 d2 d1 26 8d 34 4d 69 6c a5 19 8a 5a b5 a1 98 58 d2 37 63 a3 91 d8 87 5e be 15 b1 72 71 07 0d 8b 7e 21 f8 d7 24 65 a5 f1 2e 38 67 38 0a 69 2e 68 85 c4 fe a1 85 e6 60 cc c4 47 17 75 e8 c8 a5 9e 58 b9 6a a7 d5 07 8c 00 a2 23 3c 27 ac b4 d2 2f ab 6e 54 5f 1f f7 89 b4 6d 58 98 32 cb d7 85 60 85 d2 53 0d 55 e3 cb 66 3e 8d 24 e7 5d be ce f7 82 c5 03 c7 c6 4a e8 da a4 b7 f6 44 b6 53 e1 77 4e ca 51 27 96 Data Ascii: [z\|!<t26\|?lxs7ipa{5oas(>I;jc{}x2 +\|H?{R}3I6P&4MilZX7c^rq~!$e.8g8i.h`GuXj#<'/nT_mX2`SUf>$]JDSwNQ'
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 37 6e 3a 77 8a 20 ac 23 8c b1 19 7a 9b 24 10 f7 68 1e 6f 44 d9 d0 0b 0d a5 13 85 33 b7 94 47 18 5a 9f 47 04 79 86 46 b1 ef 21 cd 13 b7 77 dc 82 a3 b3 52 e7 07 e5 bf 3f e9 22 a6 c7 d6 98 c2 67 5a 9c c8 91 80 cf 72 e6 ce 02 c8 94 f9 45 bc 12 d1 5c 11 e1 47 74 bc 9e 85 8d d4 ca da 4e 4a 2f c1 c1 b2 fc 22 73 74 dd fb 46 c5 93 3a 4f 3b 71 2f ea 41 fe 25 f3 37 cc ec 20 ac f2 97 64 8c da ab 88 46 25 76 68 83 b1 45 1c b5 03 0f d6 05 b0 43 50 32 d3 85 68 6c e9 47 e9 a1 04 09 4b 48 15 58 a5 f7 85 81 e7 f7 0d d4 51 c1 ef 9c c7 54 54 45 50 f2 05 ef 74 8e 10 78 ed 10 89 b2 17 49 3c bf f0 c8 b3 b7 a1 e5 0c 20 1a 63 a6 21 fb 59 3d 82 66 3f 83 0a 3b 15 1b 91 f4 a0 0f 1b 0e a0 b6 17 2e 3e 8a 5c 7a e8 75 31 0e 9c 3a ed 80 09 f8 0a db 86 7b cb 48 3a c1 02 c4 b9 78 2c e2 c3 Data Ascii: 7n:w #z$hoD3GZGyF!wR?"gZrE\GtNJ/"stF:O;q/A%7 dF%vhECP2hlGKHXQTTEPtxI< c!Y=f?;.>\zu1:{H:x,
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 89 89 7a 12 32 fd 17 6c 3f 34 5c 93 43 c1 38 6d ca 17 e6 f6 49 ad 92 28 cd c5 02 fa 39 2f 1e a8 0a e9 1f cd 23 57 ed 1e 6d 32 fe 62 e5 45 88 dc 93 e1 52 2d 85 18 7e 13 18 59 11 fb 8b ea a7 07 60 45 2e c3 67 ec 72 75 3f ae 26 87 f7 0b 48 59 f9 e7 9a 18 4a 69 b6 a9 a8 da 17 fc 72 26 28 83 62 df 87 cd 20 51 08 8a 5f c0 ea c6 7c 03 9f 43 81 90 c5 54 d8 4d 5c ec 9f 82 2c 4b 4b 04 64 0b 5a 4c 69 0f 9f e2 f4 38 5a 4d 2e 39 c4 bc b3 f4 14 e3 cd b8 85 bd fc cf a8 a0 62 6e 64 3a 3f 8f 72 5b c4 39 65 02 1e 5f 2c 0f ed 40 3c 00 e2 97 f0 52 85 9a e3 53 1f 22 ba 1d 02 72 4d 52 ba 5d 46 a3 9c 27 6d b5 17 77 b6 c7 81 8d 04 9e 3a 2c ca 39 e3 b4 2e 30 bb f2 26 81 8e e8 70 a9 49 20 b8 d4 e4 ef 68 d2 dc 99 81 50 41 45 31 b6 9d 10 04 1f 9f 0f 71 51 e7 26 11 bb bd b8 7b b5 4f Data Ascii: z2l?4\C8mI(9/#Wm2bER-~Y`E.gru?&HYJir&(b Q_\|CTM\,KKdZLi8ZM.9bnd:?r[9e_,@<RS"rMR]F'mw:,9.0&pI hPAE1qQ&{O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49843	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:02 UTC	2873	OUT	GET /static/images/home/kanban/batch_actions.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D Range: bytes=32768-327679 If-Range: Thu, 25 Apr 2024 21:20:28 GMT
2024-04-26 14:41:03 UTC	427	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:03 GMT Content-Type: video/mp4 Content-Length: 294912 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 32768-327679/337863 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:03 UTC	828	IN	Data Raw: 65 fc d8 75 8b c8 22 23 c2 bc a2 f9 6a fa 3a b5 80 23 99 49 7e 4b a8 c2 e0 e0 fe b9 38 36 9b 6b 15 0a 41 c6 de 7e a6 da 48 f2 75 85 a8 c8 bf 9f 7f 44 15 95 95 ec 22 8f f8 9c a6 34 2f 4d 1b 36 6c 92 e0 03 63 3a b1 52 9a 7d 2e 71 87 8d bf 02 af f6 9f ea e2 2e fa a9 d8 e8 65 64 d0 e6 94 5d 46 85 a6 9a 07 37 e8 6e ac 79 1e 42 ca 21 c6 96 ff d4 80 09 b8 7e 73 32 b8 7d 8c d1 81 56 47 bc 85 51 36 f3 87 e8 da 27 81 9d c2 fc 36 0c 7f 70 12 93 74 08 6e a1 0e 26 0f 8b c5 a2 0d 11 57 20 d3 64 79 ac 95 43 4d ba 31 08 f0 e0 ad cb 4f e3 24 89 5c 1d 7c 07 c0 2f 55 e2 c1 cf 98 bd a6 b3 4a 27 28 25 b3 ef e5 71 de a9 24 06 b3 35 cf aa 6d b3 7d dd 7c 9d 97 54 98 e6 9d 08 82 c7 f7 af 06 61 da fb 7e 93 45 00 58 46 34 5a 3f 9b 3c 3e 48 7c b0 73 67 ef f3 0a 66 23 8f c4 0d 6b 99 Data Ascii: eu"#j:#I~K86kA~HuD"4/M6lc:R}.q.ed]F7nyB!~s2}VGQ6'6ptn&W dyCM1O$\\|/UJ'(%q$5m}\|Ta~EXF4Z?<>H\|sgf#k
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: fc 7a 52 1a f0 7d c4 89 87 dc cc ec 02 e8 5c 5e 20 6e a9 84 9b 42 c3 80 ee 6e 37 91 81 ca 8f 81 29 c7 1e 2c bd 73 58 8e 3a 75 8d ae ed e2 d2 a0 2e 4f 05 b5 6c 6b d0 af 4c 03 1d ad ae b9 a7 98 99 35 cc 6a 98 9c 87 58 74 57 e9 f1 2f 34 82 a1 e7 f5 23 dc a8 0a 8c a0 b7 67 d6 ce 98 5f 59 7c d1 34 e1 e1 ef a9 fa 42 60 c7 da e2 66 da 81 27 40 c3 81 1f 38 10 41 a6 6e 58 c0 ef 94 8d e8 42 97 fc 37 c2 e8 38 fc 2d ee 78 22 c2 e6 3f a6 2a 03 dc ef f4 32 4e 3b 19 2a 49 a2 01 6e cb 3e bd 0f 53 a2 d6 67 67 0e ad 87 aa 41 4d 9b 00 bb fe 1d da 82 31 d9 b8 3d f4 ae 22 95 7d 60 c6 e2 4d e9 3f fd 72 c6 9c 36 97 e1 5d 1f 65 86 61 84 48 66 00 b0 db 8b 66 33 8d ed ec 14 8a 39 52 8a bf a8 29 19 7a df 6a 87 59 9f 78 e1 93 b0 d5 e5 33 d9 f2 e7 ec ab f3 d8 f4 de 4c 2d 9c 7d 32 28 Data Ascii: zR}\^ nBn7),sX:u.OlkL5jXtW/4#g_Y\|4B`f'@8AnXB78-x"?2N;In>SggAM1="}`M?r6]eaHff39R)zjYx3L-}2(
2024-04-26 14:41:03 UTC	375	IN	Data Raw: 0e 0e b7 67 9c aa e7 2f 79 71 d2 8f ab 11 23 64 ad 34 1b cc 52 df b3 bd 3c 21 84 47 65 d1 ef 5c 2b 5d 3e bf 64 13 62 c8 3e 8f 83 8f 32 62 bb f2 cc ef db ce 66 c0 2b 31 95 cf be 67 10 5e 6e 17 b8 29 68 13 14 9b 91 b4 58 9b 5d 8f c2 83 13 1d 1c 39 d2 78 33 d9 1b 7e b1 50 22 99 71 74 83 dd 95 8d 4f 90 c2 5a 4d 54 f0 09 73 4e 76 a5 d9 9b 34 2d 36 0d 0e c6 28 7a 4d b9 8f 23 a0 e4 0e 8a 62 1b 78 8c 24 b8 de 5c 50 03 f6 82 f7 db d6 57 27 6e 47 26 44 cc 0f 43 92 83 82 f5 f9 c9 b0 ff 7b 08 eb 03 81 58 cc a4 96 99 07 d0 fb 7c 2a d8 f2 1c f9 2f fd 9e 57 5f 59 50 6c c3 f2 d1 2c 8c 86 df 07 71 13 e1 e8 94 d5 65 99 95 d0 2f e5 61 ac 0a e7 bb dd 49 21 f8 a5 9f c0 cd bd 24 e7 68 b3 48 a5 b8 ed b0 3f af e3 41 33 db 79 f7 30 cb 97 f1 2b 68 c4 67 71 92 b4 8a ad f8 6d 20 fc Data Ascii: g/yq#d4R<!Ge\+]>db>2bf+1g^n)hX]9x3~P"qtOZMTsNv4-6(zM#bx$\PW'nG&DC{X\|*/W_YPl,qe/aI!$hH?A3y0+hgqm
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 06 52 78 dd 35 83 2c fb f2 f4 79 e0 3f 5d 43 6e e5 aa 54 20 1a 5b 4d ae 89 f8 5c af 9e c9 c3 15 28 d6 1a 4f 3b ac 35 db fb e1 c3 c1 a7 1c eb 73 d9 a1 fb 11 4e 6c a6 1d 25 ad 30 fa 5c f9 9a d1 41 b4 3e ef 58 6e 9e 87 a8 b4 03 5a 87 cf 1e 94 8b 14 e0 15 0d bb 9d 0a fe 19 5a f2 d5 98 1f 75 ee 4c b3 f7 ba de 89 91 cc 97 e3 97 94 31 40 9d f9 13 18 06 00 84 ca 5d 7e 4a 68 11 a0 d3 dd 4a a2 3e 6d 52 a8 5a 05 82 ce c7 6e 27 e2 4e 92 3f d3 bd fe d1 64 e0 a4 30 c0 aa 15 d9 9e 53 c6 af 01 dd 83 2a 41 39 c7 0f 72 9b 9d 9c 8e a1 b9 9f 98 1a a5 96 5b 66 d8 54 0f a0 77 e3 c3 90 ac 2c f5 8b 75 7b a9 b6 52 55 37 8a 7f 1b c2 32 be af b2 dd d9 5d 43 88 f9 88 50 bd 11 ea 23 b8 1b 79 b4 c4 45 06 c6 22 27 e3 ae 5c 85 bb 14 11 57 af d2 fe 8d 85 fd bc 81 01 50 41 43 24 80 be 53 Data Ascii: Rx5,y?]CnT [M\(O;5sNl%0\A>XnZZuL1@]~JhJ>mRZn'N?d0S*A9r[fTw,u{RU72]CP#yE"'\WPAC$S
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 05 d9 5c f3 e2 87 43 9c 59 21 62 2c b7 17 23 88 8d 2c 54 42 69 9b fb 34 a1 56 1d e6 f7 3e 8c f0 0c 07 13 e2 e4 18 8a 86 1d f8 8b d3 dd 7c 72 8a a1 29 06 4d 4e 02 50 45 13 58 bf 3c 17 34 6d a3 1a 7f 4d 57 95 23 cf 75 f2 77 dd c3 ed 77 38 1a 1d 43 52 e4 9f 32 8a 1f f9 24 76 6e 2f 25 16 cd e5 0b 2b dc 2f 4b 6b 90 aa 58 02 79 3c 83 55 47 d8 90 d7 ac 9d a9 19 6c 42 69 99 ee 89 e1 1d 95 df 19 10 d2 35 ed 1c 89 ec 28 ef ef 19 db 7b e2 90 e3 e8 20 94 51 48 91 0d 64 16 d6 53 36 5f bc b1 5b 6b 0a 5f 13 df 08 00 5f c2 7a 70 6b 6d f4 bb a6 ad d9 5b bc 75 f6 d5 18 fb aa b8 f5 d8 2a 75 62 a9 62 0e aa bc e1 03 97 c4 7e 2d 23 a0 06 27 e4 90 c7 f7 42 a6 64 a5 7b 73 fa 93 26 b8 a5 32 3b 9c 72 e8 9c 3e f4 15 43 cd 55 f6 c5 60 fb ad 8c 1f 83 d3 92 37 d7 62 03 36 26 3f 02 a1 Data Ascii: \CY!b,#,TBi4V>\|r)MNPEX<4mMW#uww8CR2$vn/%+/KkXy<UGlBi5({ QHdS6_[k__zpkm[u*ubb~-#'Bd{s&2;r>CU`7b6&?
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 0b 6a 1e 58 44 49 9b 77 a7 c3 be f0 a7 43 6a 11 0e 04 fa 21 05 62 1a c2 16 e1 ed 00 1e 00 e8 81 95 d8 75 26 83 36 5c 96 1f ed d2 5d 6c c9 0f ae 82 6e 3a f1 76 7c e8 0f 4a a4 5e f1 df 51 49 65 2b 15 71 88 d0 9a 28 a7 6e e2 40 66 bb 90 73 0e 4f 85 dc f4 46 73 39 00 4b 11 42 da 62 39 24 2c 92 7b a5 c1 f3 38 b1 ff 5e 1a d1 86 1d ae 72 f2 bd 77 74 79 ea ae eb b7 6f 34 6e 53 95 47 a4 da 53 63 53 0a cc 49 2d a6 04 58 d0 7d 48 b5 4a 9a 24 f5 81 87 ac a8 b3 7a 27 ec ff e2 e9 91 3a fe 0f 19 6f 21 11 6d e1 1e 23 c3 a6 f1 fe c0 9a 90 28 78 b1 2c a9 51 90 7a 2c d2 0b 5a 78 b8 46 a4 8e 4b d3 85 c0 70 1e 16 16 98 9c f0 8a 49 66 19 a8 d2 b3 77 94 5f 4c 04 c5 76 34 f1 f1 51 d5 93 ea ee 77 24 b2 8d 2e 88 d0 ab 2c 91 a3 0f 0e 80 bc 47 40 89 9a 25 a6 17 f0 52 c3 fd 00 46 57 Data Ascii: jXDIwCj!bu&6\]ln:v\|J^QIe+q(n@fsOFs9KBb9$,{8^rwtyo4nSGScSI-X}HJ$z':o!m#(x,Qz,ZxFKpIfw_Lv4Qw$.,G@%RFW
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: a0 4d 4e f6 e8 b1 94 a6 90 ae c2 d3 cf 6e 22 d6 f6 ba d1 84 17 8e 78 35 55 f2 93 6c 9a ac 8e df 85 af e2 76 b1 31 d5 27 a0 ff 96 22 6d 59 0e 19 06 07 ae 8d 93 f5 89 32 db f5 e6 09 d4 83 b9 63 5e 96 8c 58 b2 eb 4d 10 2b 0f 9f a2 0e 72 0d 94 ee f6 51 f6 3c c0 e5 26 2c b5 57 93 9b 74 98 42 5b 0d 2b ea 5f c5 46 44 e3 da c3 08 16 9e 0e 2a 01 c9 ae 28 7d d8 0b 6a 9f a9 19 1d 95 87 f3 3c f2 e6 3c e0 e3 05 78 5b ac 30 4f 0a c9 cd b7 9b b3 40 0d f1 04 2c 43 c8 8a 51 f6 2e 62 16 fd de f1 25 9d 0e ed 3e 75 6f bd f2 29 06 dd 7e 02 9e 2d b6 4f 1a 02 4d 9d ea 4e 95 1d e4 a5 5d 8e 77 d0 26 3c 56 d5 94 85 17 76 a2 75 49 ca c9 4c 50 89 c8 43 dd ca 1e 04 05 81 5a cd 1e a9 55 5f 06 8a ac 9c d8 03 05 1d dc 28 87 40 16 8d a2 5e ac dd 57 fc d0 ec db 73 ac 99 a5 e1 3f 60 98 c3 Data Ascii: MNn"x5Ulv1'"mY2c^XM+rQ<&,WtB[+_FD*(}j<<x[0O@,CQ.b%>uo)~-OMN]w&<VvuILPCZU_(@^Ws?`
2024-04-26 14:41:03 UTC	384	IN	Data Raw: 35 10 bb 03 38 cd 5b 42 29 74 7c cd 06 4f 6a 1b bd d9 89 28 86 13 b7 0f ac 80 2f 3c 36 fb 12 19 62 b2 62 1b d3 60 50 f9 81 10 a2 b6 af b5 85 ff fe e8 36 b8 4f 3e 69 7b 7e 15 25 20 8e 1d e8 fd 97 f9 2a 0e 82 be 7b 36 45 dc 94 d3 a3 a3 c2 f8 58 af a0 54 06 3d 33 f0 b8 2e 57 d2 f9 d8 72 1a 02 91 d9 75 44 da 9e df 0b 86 42 13 5f f3 1a 2c 32 4b 48 24 d7 3c 30 8d 4c 61 45 c5 63 d6 27 64 df 06 34 82 02 ad ed 35 bb 53 7e b3 8b 32 61 da df 49 06 33 ff 54 73 7b a3 ac 0d a7 81 29 01 65 af df 76 2b 98 91 89 ea d9 a6 4c 12 f3 6d 87 e4 7b 04 39 f4 52 84 db 30 47 27 ad 6e a8 b4 8a 21 1e 5d 73 13 83 a6 a1 8f 85 e1 42 31 f1 ce 0d 71 5f a1 52 15 aa b2 8a a5 e7 5e da 94 80 10 4c f0 41 d2 c8 8e 03 d0 a0 c2 a0 e7 fa 92 76 02 ce ea 65 c2 f8 07 6e 1d 9b 4c 13 68 a9 79 a0 56 04 Data Ascii: 58[B)t\|Oj(/<6bb`P6O>i{~% *{6EXT=3.WruDB_,2KH$<0LaEc'd45S~2aI3Ts{)ev+Lm{9R0G'n!]sB1q_R^LAvenLhyV
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 1a 09 e9 b6 43 92 b2 60 03 ea 0a fd 97 ce a2 ee 2f e6 97 b9 41 35 1d 3a 29 b8 36 47 35 a1 bf fd e0 16 c2 e9 44 ff c9 98 ee 25 78 36 af c0 d3 e0 cd 70 ea 8f 21 d9 4d 78 53 02 ed e8 8b f1 b7 48 89 dc e0 87 ba 07 52 53 91 26 18 50 6b 37 41 9e 40 e7 03 5b 12 28 93 50 21 f1 6e 7c 3c f5 48 2c 26 33 fc 6f 90 63 7e 29 d1 aa e2 46 61 74 f5 0f e9 ee c4 ba a9 39 01 29 9c e9 45 aa ce d7 d5 22 77 55 12 62 18 a9 b1 3d f5 ed d8 95 20 c4 d7 cb b0 ff f7 44 55 b0 88 8a 4e 95 e0 94 83 70 b5 e8 1b 2f 85 04 4f c4 48 1f c4 dc 45 ee f9 e4 3f 4d 99 eb e2 ec ed df dd 6f 42 6e 97 8f bf 66 1c af 2a ce f7 65 0d aa 50 3f c2 e4 f8 43 84 61 91 73 da d2 b2 1e 62 c3 37 aa c5 fe 2a a5 cc dd 1d 58 b2 a7 43 b3 8b ba 00 5e 53 65 a8 5f fc d4 fd b7 ec f4 06 f2 80 c5 0f 8e eb 0f 28 d3 de 1c 07 Data Ascii: C`/A5:)6G5D%x6p!MxSHRS&Pk7A@[(P!n\|<H,&3oc~)Fat9)E"wUb= DUNp/OHE?MoBnfeP?Casb7XC^Se_(
2024-04-26 14:41:03 UTC	153	IN	Data Raw: 27 d0 5f 69 bc dc 90 19 bc 4d f4 78 1c 0b a1 a2 77 63 c9 e0 90 e8 ec 3f 8b 13 44 1e b8 fc b7 ca 41 37 0e d1 1d f3 57 9e 1c df a1 e0 a2 56 98 47 86 1a 73 f5 14 d5 30 5f 38 61 0f 04 ed 67 7f ab 0f f3 96 e7 e3 0f f5 d1 c6 21 89 eb 49 cd 59 dc 65 52 e8 af b6 1e e5 d9 86 e1 73 12 06 49 8e 3c 2f 23 d2 ca db 31 bf ac a1 ff 96 8b 62 1c d1 b2 a4 ba f2 db 3a ac 4f bf 8d e3 ea 19 a3 1f 76 df c4 ba 47 48 ef ff e1 b3 e7 0c 6a 4d 94 9f 4f f4 d0 1f 24 c5 1d 4e 49 a5 e0 Data Ascii: '_iMxwc?DA7WVGs0_8ag!IYeRsI</#1b:OvGHjMO$NI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49845	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:02 UTC	432	OUT	OPTIONS /api/report?catId=GW+estsfd+ams2 HTTP/1.1 Host: 0824a98d-d78b26f4.digitoids.com Connection: keep-alive Origin: https://srmcorp.digitoids.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:05 UTC	336	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:41:05 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding access-control-allow-headers: content-type access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-04-26 14:41:05 UTC	12	IN	Data Raw: 37 0d 0a 4f 50 54 49 4f 4e 53 0d 0a Data Ascii: 7OPTIONS
2024-04-26 14:41:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49846	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:02 UTC	700	OUT	GET /d78b26f41a2e42509e001fd2bf0e6daa/ HTTP/1.1 Host: srmcorp.digitoids.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://srmcorp.digitoids.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1 Sec-WebSocket-Key: Ro2RA2iuYLqq0FZMDx1GIA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49847	142.250.217.228	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:02 UTC	581	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-24371500-1&cid=1930088754.1714142446&jid=1950879201&_u=aGDAgEAjAAAAAGAAI~&z=911897362 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:03 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 14:41:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49850	192.178.50.68	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:03 UTC	1410	OUT	GET /pagead/1p-user-list/983229078/?random=1714142454208&cv=11&fst=1714140000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v870230210z86436058za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link&label=-kjjCLrl1wQQlsXr1AM&hn=www.googleadservices.com&frm=0&tiba=Runrun.it%20%7C%20Process%20and%20Projects%20Manager&npa=0&pscdl=noapi&auid=922323486.1714142446&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqgJbM5-fvT9UQ3q2WY4AOp-WioHycxQXBS_q6P3M7wVm0Wt1w&random=1032738256&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:03 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 14:41:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49849	142.250.189.132	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:03 UTC	932	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll&co=aHR0cHM6Ly9ydW5ydW4uaXQ6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=nwp8pap3pi3r HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:04 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 14:41:04 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-QIJyKf1tUTjHlefHJjFZ-Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 14:41:04 UTC	364	IN	Data Raw: 35 37 33 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 5735<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 51 49 4a 79 4b 66 31 74 55 54 6a 48 6c 65 66 48 4a 6a 46 5a 2d 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="QIJyKf1tUTjHlefHJjFZ-Q" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 4a 73 44 6b 74 59 58 30 6d 31 50 55 37 47 66 51 4a 35 58 70 56 6f 68 72 59 63 46 45 6e 76 79 2d 69 36 66 4f 78 59 5a 61 31 31 5a 33 31 77 77 53 67 79 43 49 47 56 67 67 78 50 56 6d 4b 75 7a 30 63 37 2d 6b 59 75 39 50 7a 35 57 4d 76 55 39 73 34 5a 66 58 68 34 67 54 61 77 39 6e 4a 6a 64 45 5a 38 56 32 69 50 44 6d 68 73 6e 45 6b 41 6f 75 48 32 79 42 4d 54 43 35 6d 56 47 69 30 6b 43 52 47 59 62 57 64 4a 38 68 6e 4b 73 47 55 76 5a 45 67 6d 32 41 37 50 63 4a 37 59 42 5a 38 34 36 44 31 76 65 50 61 31 6c 39 46 65 31 32 32 66 32 78 53 37 63 4f 63 78 57 31 62 55 7a 4b 62 53 51 71 38 50 30 52 45 70 63 6d 63 42 33 41 65 5a 50 77 79 76 37 51 77 61 5f 46 61 2d 75 6d 50 6d 65 78 6c 37 6f 72 77 4e 42 67 68 76 56 43 37 4d 57 6e 4e 32 6f 6a 38 70 57 61 4d 4a 67 6a 5f 7a 74 Data Ascii: JsDktYX0m1PU7GfQJ5XpVohrYcFEnvy-i6fOxYZa11Z31wwSgyCIGVggxPVmKuz0c7-kYu9Pz5WMvU9s4ZfXh4gTaw9nJjdEZ8V2iPDmhsnEkAouH2yBMTC5mVGi0kCRGYbWdJ8hnKsGUvZEgm2A7PcJ7YBZ846D1vePa1l9Fe122f2xS7cOcxW1bUzKbSQq8P0REpcmcB3AeZPwyv7Qwa_Fa-umPmexl7orwNBghvVC7MWnN2oj8pWaMJgj_zt
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 51 49 4a 79 4b 66 31 74 55 54 6a 48 6c 65 66 48 4a 6a 46 5a 2d 51 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 73 61 31 52 59 63 54 51 35 57 55 63 31 58 32 56 71 4d 58 63 33 62 54 52 55 4f 55 35 33 58 7a 46 4d 65 44 46 50 59 32 51 78 5a 33 52 6c 56 31 46 77 63 32 5a 57 58 31 52 72 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 64 48 64 4a 4f 45 34 30 55 6d 4a 48 53 32 6b 33 52 32 34 30 62 45 49 31 53 7a 6c 7a 52 Data Ascii: t/javascript" nonce="QIJyKf1tUTjHlefHJjFZ-Q"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9sa1RYcTQ5WUc1X2VqMXc3bTRUOU53XzFMeDFPY2QxZ3RlV1Fwc2ZWX1RrLmpz\x22,\x22\x22,\x22dHdJOE40UmJHS2k3R240bEI1SzlzR
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 30 46 30 4e 6d 59 31 54 6d 4d 33 61 45 6c 56 4f 55 70 6c 62 46 67 77 4e 48 4a 51 4b 31 42 6d 57 47 64 4f 57 57 63 33 53 32 56 4e 62 31 5a 30 57 6e 5a 52 4e 32 4e 4d 63 58 70 43 62 48 5a 7a 4c 30 35 4b 61 6b 74 61 51 6b 49 30 5a 45 5a 74 51 6a 41 32 57 6e 70 43 4f 57 51 77 52 55 77 32 64 45 35 4d 62 44 4e 76 5a 43 39 44 59 53 74 78 57 47 46 5a 61 55 68 4a 63 6b 38 7a 54 33 55 78 56 46 42 72 5a 7a 52 6c 55 44 59 77 59 6b 35 70 5a 6b 39 58 59 33 42 52 64 6a 52 58 51 6e 41 72 63 47 70 48 51 54 5a 6c 4b 79 74 68 62 7a 5a 6c 4b 31 70 46 55 6b 31 75 56 45 70 6a 54 54 52 55 53 31 64 44 57 55 77 35 52 7a 64 49 4e 55 4e 59 64 6c 46 36 55 6d 56 4d 52 55 78 4e 63 58 4a 4a 52 6b 56 47 64 6d 4a 55 61 44 5a 47 4e 6b 35 6a 61 58 4d 33 56 69 38 33 4d 6e 45 30 4e 6c 6c 78 Data Ascii: 0F0NmY1TmM3aElVOUplbFgwNHJQK1BmWGdOWWc3S2VNb1Z0WnZRN2NMcXpCbHZzL05KaktaQkI0ZEZtQjA2WnpCOWQwRUw2dE5MbDNvZC9DYStxWGFZaUhJck8zT3UxVFBrZzRlUDYwYk5pZk9XY3BRdjRXQnArcGpHQTZlKythbzZlK1pFUk1uVEpjTTRUS1dDWUw5RzdINUNYdlF6UmVMRUxNcXJJRkVGdmJUaDZGNk5jaXM3Vi83MnE0Nllx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49848	142.250.189.132	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:03 UTC	931	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll&co=aHR0cHM6Ly9ydW5ydW4uaXQ6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=6jc322lewbb HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:03 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 14:41:03 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-6Kr686ffwYfb7Yr0_luz-w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 14:41:03 UTC	364	IN	Data Raw: 32 61 64 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2ad6<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 4b 72 36 38 36 66 66 77 59 66 62 37 59 72 30 5f 6c 75 7a 2d 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="6Kr686ffwYfb7Yr0_luz-w" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 65 37 32 74 47 70 51 4e 78 69 78 54 51 4a 4b 63 54 6b 4b 69 69 49 73 42 57 41 6a 4f 39 6c 4d 41 41 52 71 75 4f 32 34 6f 67 48 6b 31 54 39 41 49 33 6c 69 2d 58 66 4c 64 4e 76 75 42 4f 4f 48 46 35 6b 4b 62 6c 52 7a 4a 5f 53 69 34 38 72 68 66 4d 6d 4a 32 58 39 4a 78 72 49 79 7a 37 65 72 50 70 6b 7a 6d 4a 56 35 39 7a 49 32 6c 67 32 38 4c 53 49 75 78 48 61 5a 63 35 4f 4f 68 4a 78 33 4b 71 55 56 46 5f 56 68 4e 66 4a 42 51 49 50 54 47 6f 4f 75 71 4d 74 78 57 5a 75 4d 41 37 31 6f 32 73 51 4e 72 61 6c 76 71 58 71 53 41 6e 67 57 70 35 42 62 50 4a 45 4a 46 61 2d 65 76 78 4b 67 47 52 51 61 36 43 34 32 70 75 51 4c 38 30 58 70 70 5a 48 58 35 34 30 47 71 34 68 46 56 37 7a 4c 4a 72 43 77 71 39 35 54 78 31 44 4e 4d 64 30 7a 37 61 44 70 36 65 59 7a 53 66 52 39 73 4a 51 79 Data Ascii: e72tGpQNxixTQJKcTkKiiIsBWAjO9lMAARquO24ogHk1T9AI3li-XfLdNvuBOOHF5kKblRzJ_Si48rhfMmJ2X9JxrIyz7erPpkzmJV59zI2lg28LSIuxHaZc5OOhJx3KqUVF_VhNfJBQIPTGoOuqMtxWZuMA71o2sQNralvqXqSAngWp5BbPJEJFa-evxKgGRQa6C42puQL80XppZHX540Gq4hFV7zLJrCwq95Tx1DNMd0z7aDp6eYzSfR9sJQy
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 74 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 36 4b 72 36 38 36 66 66 77 59 66 62 37 59 72 30 5f 6c 75 7a 2d 77 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 73 61 31 52 59 63 54 51 35 57 55 63 31 58 32 56 71 4d 58 63 33 62 54 52 55 4f 55 35 33 58 7a 46 4d 65 44 46 50 59 32 51 78 5a 33 52 6c 56 31 46 77 63 32 5a 57 58 31 52 72 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 64 48 64 4a 57 6b 78 57 Data Ascii: t"><script type="text/javascript" nonce="6Kr686ffwYfb7Yr0_luz-w"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9sa1RYcTQ5WUc1X2VqMXc3bTRUOU53XzFMeDFPY2QxZ3RlV1Fwc2ZWX1RrLmpz\x22,\x22\x22,\x22dHdJWkxW
2024-04-26 14:41:03 UTC	570	IN	Data Raw: 4f 46 46 30 59 32 6c 4e 59 6e 4a 33 55 58 42 7a 57 6b 6c 43 54 6d 74 6e 52 30 56 59 57 46 6c 6e 4c 30 70 5a 63 47 52 6e 52 58 70 59 51 6a 42 76 64 6c 4e 6d 51 55 30 77 52 56 42 78 51 33 68 56 52 7a 52 49 4d 6a 56 76 52 55 6c 69 61 33 46 46 4f 45 78 69 4d 7a 4e 52 54 32 63 34 56 6e 4e 6a 5a 54 6c 70 4c 31 4a 77 53 54 6c 33 61 44 56 74 56 57 4d 79 4f 44 64 72 64 79 39 68 5a 44 5a 6e 56 56 42 6d 4f 45 4e 52 4f 57 35 71 55 54 4e 46 63 31 4e 6d 53 33 4a 43 57 6e 56 32 64 55 78 51 4d 6a 6c 75 52 30 70 35 55 55 74 35 57 54 4e 70 4e 54 68 78 4d 56 45 79 59 79 74 30 64 58 4e 35 51 58 52 78 4e 30 35 76 55 57 6c 4f 51 55 39 71 56 6c 70 55 55 47 6b 34 4e 32 68 34 4f 45 46 71 62 57 30 32 55 58 4a 54 5a 31 4a 42 4d 43 39 6e 56 33 45 7a 5a 31 55 30 61 33 56 6d 51 30 70 Data Ascii: OFF0Y2lNYnJ3UXBzWklCTmtnR0VYWFlnL0pZcGRnRXpYQjBvdlNmQU0wRVBxQ3hVRzRIMjVvRUlia3FFOExiMzNRT2c4VnNjZTlpL1JwSTl3aDVtVWMyODdrdy9hZDZnVVBmOENROW5qUTNFc1NmS3JCWnV2dUxQMjluR0p5UUt5WTNpNThxMVEyYyt0dXN5QXRxN05vUWlOQU9qVlpUUGk4N2h4OEFqbW02UXJTZ1JBMC9nV3EzZ1U0a3VmQ0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49851	192.178.50.68	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:03 UTC	1384	OUT	GET /pagead/1p-user-list/380335026/?random=1714142458810&cv=11&fst=1714140000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v879103583z86436058za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link&hn=www.googleadservices.com&frm=0&tiba=Runrun.it%20%7C%20Process%20and%20Projects%20Manager&npa=0&pscdl=noapi&auid=922323486.1714142446&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqGDi3QA6hLn7L9cq8fghWstEGNLA4uI3Tf0WxscKvusQmM-Hq&random=1744958236&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:03 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 14:41:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49854	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:03 UTC	2863	OUT	GET /static/images/home/form/forms.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D Range: bytes=33792-262143 If-Range: Thu, 25 Apr 2024 21:20:28 GMT
2024-04-26 14:41:03 UTC	427	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:03 GMT Content-Type: video/mp4 Content-Length: 228352 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 33792-262143/279742 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:03 UTC	828	IN	Data Raw: 00 75 a7 b9 7e 10 8f 15 36 79 0d 00 78 5d ac 05 82 f1 a7 06 55 03 69 5b a7 c2 eb 9e c6 8d 64 6c bc a4 4b b8 f6 d7 f0 90 1c 16 30 34 f9 63 1a d0 c9 6d 2b 62 11 45 20 cb b2 9d e5 ca 44 f4 81 dd b2 85 1b 68 2b 7c c7 26 e9 dc e1 9a 22 6f 12 10 a5 4d cc 4f 47 e4 f7 b7 9b 07 91 3a 25 76 27 08 76 26 e5 81 9b 28 d1 b9 79 a8 12 c3 b8 54 ad 0a de b5 96 01 f0 8e 5a dc 59 7b c2 76 82 3c 74 38 f9 83 fe d3 7d 44 21 ea 02 69 24 2a da 20 ad 86 89 df ce d9 28 10 51 35 2b b7 d5 5f c0 55 a3 d4 9c 4d 93 ae cb da 5d 50 85 76 17 78 2a 6d 1f 8c 26 fa e4 ec c0 e1 a5 6d a3 73 7b a2 18 08 ed 48 ec e2 0c 6f 27 11 ca f9 7a 81 34 af 1b 2a 7e 9a 49 65 01 ee c6 ea fe 05 2c c2 ae c0 0c 24 5c e2 b2 f4 46 0c 2e 03 a9 5e 62 02 79 22 a0 9d 05 22 d0 01 68 65 b8 78 ac 45 38 c2 37 81 b2 23 0b Data Ascii: u~6yx]Ui[dlK04cm+bE Dh+\|&"oMOG:%v'v&(yTZY{v<t8}D!i$* (Q5+_UM]Pvxm&ms{Ho'z4~Ie,$\F.^by""hexE87#
2024-04-26 14:41:03 UTC	222	IN	Data Raw: 01 6f 2e 7c 5d 46 e9 a9 ee 78 57 7d 00 0e ea b1 81 b9 2e c2 24 30 f6 60 28 01 69 c7 31 b1 ef 50 c7 3a b3 11 e2 d0 cc 42 0e 2a 1c 7e da cf 15 06 84 4c d5 68 6f 7b d8 56 05 d7 c1 fb 4f 1b a9 28 ab 26 a8 a6 4d 00 2f 34 2d 7c 91 db d6 1e 52 e7 2f fb 84 e2 41 a2 75 e1 1f b1 11 b5 f1 2f 00 00 05 07 41 9b 23 4b e1 08 43 a2 1b 02 10 f4 08 41 10 08 ff fc 84 01 7f 17 f2 72 f3 e9 7e b6 2f 02 ab 1b 6d 58 f9 d5 b7 2b d1 a0 82 95 f3 1f da 33 30 8d 26 94 6b ac 3b 24 67 56 d6 13 68 74 83 23 9a 60 b5 18 d3 f8 2e 25 a8 9e 86 bc 8f a8 ee 23 71 3a 4f 0a 77 f9 be 0f 94 64 34 ba be f1 4f 36 37 38 89 36 64 d6 fb ce b2 5d 4f 58 90 af 07 1b b6 a6 aa b1 f2 ff d1 94 9f 9a dd df 67 60 Data Ascii: o.\|]FxW}.$0`(i1P:B*~Lho{VO(&M/4-\|R/Au/A#KCAr~/mX+30&k;$gVht#`.%#q:Owd4O6786d]OXg`
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: fd 37 3d 8d f4 74 26 46 a5 9a 84 3d f4 05 00 1d c0 54 ae 72 ed 32 72 b4 2f 2b f7 dc ea cf a3 46 80 91 3f 73 2c a2 c6 5b f4 54 fc ab 18 ac d3 40 fc f7 27 82 16 6e e4 ac 1b 9b 13 f1 e3 a1 7d 9e 52 00 99 a0 c0 97 dd 5e fe bb d7 17 1a f8 25 88 e7 fc 07 26 ac 35 22 cf d6 e2 12 25 d1 7c ed 1a a6 e1 8a 54 cb fe a1 0c 39 02 57 a4 b4 67 b6 e0 fc e7 df 7f ab 63 e9 97 33 32 fa 93 75 8e fd 67 3a fd 49 a1 23 92 5d db 6e 3e 08 6a 1e 65 48 4a ef 9a 11 2c 49 78 e2 32 1b a2 3c 26 ec e2 c1 6f 5f 37 49 37 91 91 74 ec d9 e1 79 05 61 e4 45 eb d4 db a6 e0 d1 c4 e0 eb 46 5e b3 e6 2e ef 27 21 5c e8 50 a2 a8 5e d3 22 40 33 f0 12 0e 2a cc d0 66 41 66 0f ce c5 d2 60 1e 29 d2 13 11 88 cf 3f 0b 7b 93 fd 1e 10 25 44 1f a2 02 80 59 45 41 ae 21 96 c1 a7 4f 7c 73 a8 c5 e4 d0 d4 f9 82 d0 Data Ascii: 7=t&F=Tr2r/+F?s,[T@'n}R^%&5"%\|T9Wgc32ug:I#]n>jeHJ,Ix2<&o_7I7tyaEF^.'!\P^"@3*fAf`)?{%DYEA!O\|s
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 0f da 3c ae b5 51 e5 24 fb a1 b8 72 c1 17 71 3c b0 89 fc f8 d8 ba ec 29 fe d2 db 19 eb 6d 89 70 55 bc dd 69 03 de 27 f5 04 c2 62 0e 89 e9 16 b9 1a bc 0d 49 14 59 70 a4 13 2f 4f c8 60 de f2 75 92 43 78 4a 3b 01 5f 0c 58 c2 dc 5f 88 fa a3 8e 57 d2 c1 20 eb 05 9b d5 b0 ea 0c 06 63 a4 d0 13 26 00 be b9 c9 b7 3f d0 9c 6c 54 82 da 83 3d f0 f0 2b b7 5e 97 a3 82 a3 7f 9e 48 fb 47 31 43 61 db 27 ff 0e 2c cb 3d 8e 65 a0 17 18 68 c8 c5 22 84 84 17 74 81 56 a5 b7 2d b2 19 10 a5 62 14 8e 8f cd 20 53 6e fa 19 7f 20 a3 45 21 86 59 79 ef eb 64 85 94 09 26 b1 fa 1c 7c 88 39 eb 33 91 08 73 0b d9 ff f5 0c cc d9 29 79 77 ba 50 33 e0 b6 c8 53 d0 16 46 28 c9 9d 0f 09 3a 10 f1 a2 0a e3 ef 7d ec 04 84 a2 36 c2 a7 a7 94 c9 7c 48 71 0e 16 7b 4a 6a 78 02 69 1d de 69 ba 67 f1 ce 89 Data Ascii: <Q$rq<)mpUi'bIYp/O`uCxJ;_X_W c&?lT=+^HG1Ca',=eh"tV-b Sn E!Yyd&\|93s)ywP3SF(:}6\|Hq{Jjxiig
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 0d c5 ea b8 25 16 bf fd 7d 81 cf 22 b0 e3 2b b5 e0 4f 23 15 36 af 4f e5 70 a9 ac 8c d9 fe b2 31 ba 01 82 da 9a 74 93 5d ed 05 2e 82 96 19 62 c6 2d 39 e7 eb 1a 92 30 d6 2c d1 82 fc 93 a8 ab 7c 49 29 ba 8f 81 5d df a9 02 07 b8 22 50 5b 7c 79 4e 7c 8c 12 8e a3 a0 c5 0c e7 4a 9d 36 be d7 ac 64 15 b0 6f 1b 9b 2a 51 1a 3c 06 d9 93 bd 83 cb 3d b8 8a 19 c1 50 24 ba a8 f5 51 ed 74 e8 09 bb 96 e8 be e0 30 18 d7 70 7f 82 e7 5e 5c 7b 8c e6 51 0b 65 1c 01 7e 91 22 a9 ff bc 2c 27 ce d2 af e1 73 15 c8 d4 92 ae b9 ab 94 17 de b9 9f d3 95 16 c5 46 dd 19 aa 0b 9a bb 0d dd d3 8c 1f c4 3c e4 a4 c3 ec 38 68 67 20 06 8d 58 b1 43 99 f4 79 b1 ea af b3 4a 7b 4d b7 de d9 65 2e 0b 45 24 f6 8f 0b 85 d6 4c 9e 40 84 95 11 01 4f ff 9e 3c d8 d3 b5 dd 98 db c9 cf c3 0e 7f fb 64 f4 b9 be Data Ascii: %}"+O#6Op1t].b-90,\|I)]"P[\|yN\|J6do*Q<=P$Qt0p^\{Qe~",'sF<8hg XCyJ{Me.E$L@O<d
2024-04-26 14:41:03 UTC	1255	IN	Data Raw: 89 f2 2b 1f 36 c5 2d 0d 93 d3 5a e4 7b 32 e7 44 9d 23 b9 ce 79 19 ad 94 f0 c2 39 9b 52 11 3a 8e 4b f7 43 0f 83 1f 5d 58 ce 53 93 bf 56 0e 08 6a a6 d0 64 9c d0 b8 cb 99 a9 af 7e 6d df f6 bd 7d 19 6e db 55 37 d5 ae 2c fb 27 22 44 40 7e 63 f9 17 57 56 32 35 7c e6 82 57 63 da 86 c7 e0 ed d2 43 16 82 a6 44 29 79 c3 b0 1e 1f 3b dd 7c d9 97 49 28 37 97 da 45 8a 7b d1 f1 7b b8 51 9c e5 6c 7e 6c 31 f6 76 d9 6c d1 53 31 ab d0 ab aa 2b f3 e6 86 c6 e8 24 06 41 bb d2 61 23 6f 84 3e 25 76 e1 43 6c 06 cf 78 3c 0c 2a a3 f1 da d7 f6 70 ac 1a 43 bf 01 fc 27 c7 37 c7 38 c0 4c da 66 99 a4 88 5a 55 dd 95 46 a4 98 9c d1 c8 c0 04 08 00 3f 7c a1 1b 8b 20 c3 cf d3 39 f2 b0 0d 85 ff 46 cc 62 2b 44 c4 46 54 63 6a cf d2 a5 5c df 21 8b 0d 13 49 22 d4 d0 15 ec 44 7e 82 aa 6c 1a 43 25 Data Ascii: +6-Z{2D#y9R:KC]XSVjd~m}nU7,'"D@~cWV25\|WcCD)y;\|I(7E{{Ql~l1vlS1+$Aa#o>%vClx<*pC'78LfZUF?\| 9Fb+DFTcj\!I"D~lC%
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 57 8b 0a 73 77 89 0f 79 d6 a3 ad 2d 3e ca 5b c0 04 0c bf c2 7c 4b 23 aa c7 01 f3 45 0b f2 fe 57 0c 22 82 c1 0f 24 1e f9 71 68 eb ac 6b f3 47 91 90 e5 f6 17 88 0d f7 89 2f 31 77 5d 40 df 58 46 8b 30 9f 93 4d 5b 23 22 f7 85 26 6e 78 13 3b a8 c8 70 2d 68 5d 2d b4 a4 e3 33 a5 21 e8 26 7a ce b6 6a f0 51 a7 12 ae 9a 96 bf 4b ca 59 8f 99 73 b3 6e d2 ca 60 a6 a5 c9 b7 f1 97 43 d5 f2 c4 a1 10 ce b3 2a e0 78 d8 1c 3d 11 f9 66 71 2e da 3e 57 d4 3b 61 3e cb 0a 16 08 e5 e7 c1 a0 de ba e0 7a 16 dd 92 f8 fe 00 00 1d 92 74 59 5f 24 44 59 3c 00 a4 10 0b 2d 85 bd a9 a2 80 65 8f c1 2c b6 5b e5 9d d9 dc 7f e6 b8 7e b5 80 3a 2d c8 2e c9 1b 6a bf cb 9a 8c d7 63 9b f2 2e ee 8a d9 94 c6 6b 3a 80 f4 1b c1 cc d6 48 dd a7 d3 4a 59 10 9c 01 9d f0 d3 d5 89 49 33 5e f3 3a 48 b7 88 20 Data Ascii: Wswy->[\|K#EW"$qhkG/1w]@XF0M[#"&nx;p-h]-3!&zjQKYsn`C*x=fq.>W;a>ztY_$DY<-e,[~:-.jc.k:HJYI3^:H
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 16 2c 96 7c dd 79 bd 59 55 50 52 25 9d 2e d2 3e 3f 6f 24 ac 6d 62 86 a2 79 9c c6 0c a6 74 a6 60 bb e8 b4 a2 1d 89 55 33 90 9b 28 31 a8 e1 65 9d 3e 6a 49 ab 00 00 08 ae 41 9b 87 4b e1 08 43 c8 6c 08 43 d0 21 04 40 23 ff fc 84 00 70 dd ad f1 70 1c 4e c6 d5 43 1c 8c 5b 88 07 08 05 fd de 5c 13 62 6f 07 94 60 85 96 f9 52 85 d2 5f 88 0f 76 b5 2a 9c cb ca 00 3a a9 e9 a7 52 cf fb 10 80 21 e9 07 e8 37 0b ad fe 76 76 65 d2 4a bc ed d5 a7 1f 19 ed c4 e7 0d 14 2c 30 3f be 9e d5 5b 5d 45 36 90 ee 41 a7 6b f0 27 c9 2a a6 ff 5f 74 ef 72 66 4d 0a 51 20 bc e4 47 01 fe 74 14 64 7e b4 e0 30 35 3b 3b fa 55 0f f2 c7 cb 9c 41 6d 72 f3 a8 06 20 55 b1 30 13 ff b1 d4 6b 7e b5 a1 c1 89 49 20 09 18 97 d4 2d 79 ef 0f 93 7c 2f 79 43 a2 f5 69 e3 8e 97 86 51 6f d7 72 6d 37 dd 33 66 07 Data Ascii: ,\|yYUPR%.>?o$mbyt`U3(1e>jIAKClC!@#ppNC[\bo`R_v:R!7vveJ,0?[]E6Ak'_trfMQ Gtd~05;;UAmr U0k~I -y\|/yCiQorm73f
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 07 1f f7 f2 92 32 54 d9 77 81 70 53 90 7e 52 5d ec 6f 08 8e 93 bb 46 71 26 27 1e b7 b0 dd e0 aa 75 9f a9 a8 fc d8 01 d9 12 26 22 e2 c8 2d d0 8e 32 46 55 cb dd 21 41 bb 88 6d b2 1e 2c 23 ed 7b 6f d0 ce a8 96 d4 b6 78 a3 1b 22 bf c3 0b c6 0d fc 45 b6 46 aa 95 1a 32 0d ba 9d d9 6b 86 0e 27 b7 82 e0 c0 0e 66 a1 51 d2 c8 ed 74 72 2c a7 50 39 04 90 64 55 cc 82 a5 20 0b 8f 85 fd 9a 67 f1 53 ba db 6e 53 22 8b ca 0f a3 5e 24 a2 e3 a2 bd e1 43 b8 30 63 85 09 8b 0d 47 a0 72 f7 ac 31 26 bb 0f d9 b6 7c d3 08 9f e1 9c 7f e5 6d b1 c3 f0 11 88 1e 9d 34 90 d9 97 00 2b c6 7c 70 8f 1b 9f 0a fc ff ce cd 50 5a f0 d0 01 73 03 23 8e 57 63 84 af 47 56 ff 9e d5 75 a5 9a a6 c8 f0 59 53 5c 0b 03 54 db 93 f3 a7 72 9c 01 e8 14 2e c6 9f 53 18 e7 b2 7d 57 fe 0a f6 3d b0 54 08 dd fd d9 Data Ascii: 2TwpS~R]oFq&'u&"-2FU!Am,#{ox"EF2k'fQtr,P9dU gSnS"^$C0cGr1&\|m4+\|pPZs#WcGVuYS\Tr.S}W=T
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 47 cb f9 8c a6 df 3f a4 66 51 cc 67 02 6b b9 09 56 63 e6 fa 13 5f 68 d4 f6 05 d8 33 b0 05 8b 00 17 de 02 5f 44 63 3a 85 1f 4b 8a af 99 a5 a7 ec d2 c3 a1 df cd 32 78 13 9b 36 0d 6a 01 1f a1 c8 20 aa 1d 31 07 97 33 aa 33 ee 9f bf 70 66 c5 ea 27 38 d5 69 e1 c4 e0 9f d0 6a ef 58 c8 b0 c8 f5 5d 23 6f b1 14 d2 1a 92 73 e0 2a 15 7c d2 1d f8 57 68 22 d6 f3 ef 0a a6 f2 1b 03 01 f7 a5 95 58 0c 48 c4 07 05 7b 2d bd c4 bf af 88 6c b6 2c d2 cf d8 88 b3 f2 8b d1 76 b3 86 15 bc 99 b0 ee 70 f0 c3 93 b8 34 f1 80 d1 93 c7 5e b3 50 f9 f8 0f cb 76 82 84 00 a4 23 9c b7 82 50 97 2e 81 51 d8 d7 9b 95 59 e3 39 19 f6 7f 96 49 1a 32 0c c5 9b cd ac c4 9b 9c 86 98 16 11 3e 6a 96 52 59 bf a4 a7 ab f5 84 d1 e9 ec 08 09 c9 45 e9 5c 7c e7 91 50 1d ae 89 88 b1 fd fc 0e e9 66 1e 59 10 b4 Data Ascii: G?fQgkVc_h3_Dc:K2x6j 133pf'8ijX]#os*\|Wh"XH{-l,vp4^Pv#P.QY9I2>jRYE\\|PfY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49855	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:03 UTC	2874	OUT	GET /static/images/home/automation/automation.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D Range: bytes=34816-229375 If-Range: Thu, 25 Apr 2024 21:20:28 GMT
2024-04-26 14:41:04 UTC	427	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:03 GMT Content-Type: video/mp4 Content-Length: 194560 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 34816-229375/237807 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:04 UTC	828	IN	Data Raw: 16 64 34 48 2a 0b b8 92 7d f9 b8 2a 44 9e ea 3d c8 cb 88 c6 1f d0 3b 8b f2 f2 9b 4e 4f ef 44 81 fc ab a1 5f 16 37 d1 41 b6 cc 97 9c f4 ba 7e 17 c1 f9 7f a7 7f 6e 1b ef c3 ed 18 d8 09 36 83 9b 14 7e 27 12 9f 43 f1 53 38 b6 0f fc 7d 69 fc 8c 7d 21 78 c6 2c 26 ec fb 59 fb e9 e2 de e9 a1 e7 ed d1 f9 3f 1e c2 68 fc 26 9c 15 99 8a 45 a3 57 5c fe 62 49 35 91 ba 8b 83 7c 4d af 5d 31 1c 1e 6a ca e7 99 4c c8 88 9b bc 84 45 f0 5d 1b 85 d3 46 9d 85 04 67 bc ec 29 88 46 cd 9f 02 b8 57 df 8d bd ee 8d f9 57 2a 05 c0 f2 e3 f7 ea 39 e8 c1 e2 78 b2 93 3b 96 fe 24 7d e9 b1 2c a7 81 c5 b0 b8 d9 7a b9 28 de e2 16 f0 01 36 e5 52 36 d2 df 06 5e 16 db 62 68 59 3d 5e d4 5a 71 41 a9 16 8f b7 76 38 62 0a 4e fd d2 03 55 63 ad 83 f5 cf 01 2e 15 37 47 3a 1d 99 60 ef b5 93 bb c7 fb 36 Data Ascii: d4H}D=;NOD_7A~n6~'CS8}i}!x,&Y?h&EW\bI5\|M]1jLE]Fg)FWW*9x;$},z(6R6^bhY=^ZqAv8bNUc.7G:`6
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 97 cb ae 77 33 57 11 84 4b 1e 58 d1 da e4 60 de 79 0c 1a 94 f3 57 5b ad f3 a9 dd a5 e0 1d 44 4c cd bd 16 5a f0 46 82 a7 80 7a 5f e5 47 67 9c ae 51 8e 93 05 45 8b 7f 17 15 d9 aa 95 ba d4 73 93 5e 35 1b da 1d f4 92 76 e2 b6 20 8e 3f 5a 7d 22 7f af cc b9 c5 f4 75 77 ea 5b db 49 93 b0 aa 57 84 b8 97 43 1f c7 ab 44 ce 06 4a 3e 34 51 25 43 9a 03 9e aa 71 78 fe 70 cf 7e b8 0f 2b 8f 7e 32 2c 2b a3 a2 66 52 3b 32 40 be bb 73 fe 62 6f 0d 22 df f6 23 16 ec ef 07 40 db bd 1b 78 a4 ff 31 ef fd 1a 49 ba bd 54 35 60 65 be b2 a0 e2 89 fd 77 e9 22 fe 1d b4 29 1f 2b b3 57 87 46 df 45 73 15 a8 98 88 a0 93 06 67 5d b2 ec 9c 7d 50 76 aa c7 dc c1 3c 70 74 30 42 e3 cc 6b e3 9d 92 f4 ad 6d 85 cc af 67 08 cc e8 82 91 cf cb fb 2b 5f 10 67 14 2b 97 64 3f 61 f0 5f 66 00 c5 34 99 ed Data Ascii: w3WKX`yW[DLZFz_GgQEs^5v ?Z}"uw[IWCDJ>4Q%Cqxp~+~2,+fR;2@sbo"#@x1IT5`ew")+WFEsg]}Pv<pt0Bkmg+_g+d?a_f4
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 88 28 a5 6e 56 47 2c f8 23 69 1a e9 70 8e 03 c0 0e 64 c2 ff 94 a7 85 84 fa 23 ce 48 c0 50 9f a4 2f 3f 82 b1 55 0b fe 16 1a 60 4a a2 c3 c3 ed 0f 2b 6b ac b7 22 d0 72 6c bf d8 15 12 fa 82 1f d9 40 54 2f 8b d8 5b c2 c2 cf 4d 7c d0 4a 4e d5 66 be 57 af a5 b0 12 06 3a 99 1f 4d 64 59 23 db 69 73 f4 99 9f 1a 70 32 04 12 c2 4a b0 85 81 ab 1c b4 6c 35 40 10 82 d9 e4 cf fe 05 68 13 b4 ac 01 e9 6e 46 a8 c0 08 5d dc c2 d9 94 3a c1 33 e0 e9 7e f0 ba b2 83 03 79 85 84 0f 6c 25 ce 93 0a 19 0d dc 0f e6 09 0b 64 af ab 4c 7f ab 01 d1 63 f1 5a 55 9a 08 78 59 8a b8 46 26 34 84 3a b5 8b da bd a1 15 6f 64 b2 c3 6b c8 19 3e a9 17 90 70 45 47 3e 1f 78 3b 30 d3 71 a5 51 1d 09 df 9d 09 43 66 c8 6d 5c 4b a2 5f a3 41 3d 2c d9 03 a3 13 00 5c 11 ac 26 b2 44 3b ea d0 3e 81 0e 51 a4 b7 Data Ascii: (nVG,#ipd#HP/?U`J+k"rl@T/[M\|JNfW:MdY#isp2Jl5@hnF]:3~yl%dLcZUxYF&4:odk>pEG>x;0qQCfm\K_A=,\&D;>Q
2024-04-26 14:41:04 UTC	400	IN	Data Raw: 7d 59 07 79 90 98 4e 5f c0 42 8d fe 48 15 99 85 84 75 71 05 bf 94 1c 4e bd 37 55 be f9 9c da b7 95 e6 46 10 8e 7d 38 ee ce 3a 5c 14 53 a8 84 e9 47 98 73 d3 0f d7 fe d0 82 5b f4 79 1c e5 10 d0 5a 36 15 32 2e ea cb 2f ba ec 20 08 b2 a3 0d 44 fa a4 10 59 fa 10 39 16 a3 ed f4 29 33 d8 33 37 74 14 35 90 b6 97 88 22 be 6e 1e 35 b8 20 db 4a 62 25 4c 64 45 bf dd fd d0 1a 10 f6 31 a3 7d 6c fa e8 25 9a 39 2c d5 71 4d e1 12 90 96 16 d2 d1 6d ee 1e 74 29 dd 29 3f 72 6b 73 80 d6 7e d5 de bc 41 fc be fd d8 51 9d 71 d9 dc 4a 24 6d 31 1c 37 aa 19 e2 5b 38 a4 27 30 92 c7 00 ff 99 8c b4 a2 58 4f 31 01 5b da a1 28 28 d8 6e 6a b2 98 53 c5 3d 38 a2 91 13 3f 61 65 a1 30 38 21 65 c4 35 2c 12 ca d3 cd 00 2f 26 7d db 46 08 b1 a2 9d 3b b4 6d 6f 79 0f d9 96 7b 1a 9f e0 d8 8f 1d 11 Data Ascii: }YyN_BHuqN7UF}8:\SGs[yZ62./ DY9)337t5"n5 Jb%LdE1}l%9,qMmt))?rks~AQqJ$m17[8'0XO1[((njS=8?ae08!e5,/&}F;moy{
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 7a dd 3b 0d 82 37 f7 f5 73 92 13 e9 72 4b fa d4 00 bd 33 bb a0 96 7d 30 1d 0c e5 b7 3a d0 52 fe 38 cf a5 23 b2 b1 46 b9 69 13 53 c5 58 7c 14 3a 6f 56 e3 0d 39 50 16 06 26 22 0a 71 a9 e1 4f d4 6a 15 0c 69 a4 51 ff 51 73 1c 84 b6 77 e7 59 1b 7e 83 59 51 18 ec 92 e8 dc 5b d3 b3 d6 e0 6a 61 25 65 12 b6 c2 e7 16 0c 76 bc 49 73 2c 47 08 96 8f cb 2f 98 e2 86 e2 58 fe 4f ae 4d 6f 66 ec 3f 53 89 49 9a 61 b6 2e 06 34 30 90 83 ef 69 39 8f c2 46 07 1d 8a 92 82 03 c2 27 48 ce 9b 6d e2 59 f8 bc 50 d3 8f 07 4d 5c 35 ea 50 11 8f ad a9 b5 5e 64 e8 2b 9e 4a fc 89 9f 2a c1 e5 c1 23 e4 0f 00 6d 2b 0b 8b e9 c1 1d 2a 72 3b bb f8 f9 cd 99 3c ff 1e 52 20 47 3d 24 ae 72 45 c4 a7 04 48 2c 46 03 02 f9 d2 b9 99 33 d4 63 5c 6d e1 68 56 76 9d 6b 5c d8 01 a9 7d f7 00 a6 e6 2e c5 e9 9b Data Ascii: z;7srK3}0:R8#FiSX\|:oV9P&"qOjiQQswY~YQ[ja%evIs,G/XOMof?SIa.40i9F'HmYPM\5P^d+J#m+r;<R G=$rEH,F3c\mhVvk\}.
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 03 1a 74 d1 be b7 66 83 13 4e 47 b1 b1 0b fa 66 28 78 1e f0 1d c1 1e 7d 5d 13 9f cd 3e 0d c3 76 06 65 4f 77 3b f5 a9 51 b5 64 91 30 cd ba 1f 58 62 9b c2 1e 0d ff f8 2f 74 3b 41 ad f6 c5 8e 2f 55 5f c4 48 a9 d4 81 94 86 42 e9 af e0 fb dc d3 94 51 d7 18 31 e0 a5 86 51 bd 51 69 6a 68 8a f3 d3 58 68 a3 f3 7d ce fa 6f 0b cf 3b fe d4 7a 3a 95 8e f4 e4 a6 be 6c 67 b1 1e be 1d 03 e8 c2 e2 d6 b3 d4 27 a5 3d 5d 9b 62 5c 1f 65 59 09 ee bc 1c 73 9f d0 73 3a 74 c0 0c 6c 87 2c cf 06 58 5d 69 34 89 17 70 81 97 ef 9d 03 00 00 11 d8 41 9b 0b 49 e1 0e 89 94 c0 8c ff c8 2e 97 c9 d3 28 a4 d4 d9 ff 79 39 b4 b7 05 10 36 d5 41 5b 9b 5d f8 c1 ea 34 6c 0b 6f 52 cb 76 19 cd cb 17 a9 b2 0a d3 1a 79 c3 40 f2 17 5a 45 08 39 c1 b8 db 3c 09 4d 94 21 b2 c7 f3 50 5d c8 2a bb f3 64 b8 05 Data Ascii: tfNGf(x}]>veOw;Qd0Xb/t;A/U_HBQ1QQijhXh}o;z:lg'=]b\eYss:tl,X]i4pAI.(y96A[]4loRvy@ZE9<M!P]*d
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 6c 23 26 6d a3 5d b5 81 42 c0 c7 a7 e7 cb de 4c 84 a9 62 f1 32 e0 59 2c ec e3 ca 4e 19 c9 9f dc 34 09 fc cc f9 37 b0 25 6e 07 90 f6 0d c2 ec 43 46 04 74 48 89 36 d7 76 9b 53 f2 10 2c ed 0f 7c de 67 b3 63 d9 76 ef 0a e7 28 47 66 ba 89 c1 48 dc 98 86 9b b3 9d d6 f7 c2 17 73 52 30 03 47 92 17 7c 19 2c ab 12 79 a9 2f 8d ee f3 44 76 ec 89 55 4f a9 57 e9 17 fb 77 e0 b3 b0 c1 22 95 c1 9e b6 d1 5f 21 d9 f7 de 77 a0 70 51 5f 7e 76 3e 26 aa a6 4c d4 5c 21 55 d4 43 aa f8 a6 67 c5 60 cc 56 be 0f a1 5b c7 60 a9 bd 90 d6 66 39 77 b5 18 d2 4a 16 e5 88 93 96 8b ac b3 90 9b a1 ad a1 59 f7 53 70 c9 0f 0d a3 3e 78 23 75 36 eb e0 55 db 83 5d d5 3c 45 97 35 a0 4b 3d 5b b4 a4 97 42 99 d0 5a a6 66 a0 eb f7 07 bb eb db b9 37 e9 69 48 4c 98 63 62 b1 c2 fa 79 8c 42 63 8b c2 80 bf Data Ascii: l#&m]BLb2Y,N47%nCFtH6vS,\|gcv(GfHsR0G\|,y/DvUOWw"_!wpQ_~v>&L\!UCg`V[`f9wJYSp>x#u6U]<E5K=[BZf7iHLcbyBc
2024-04-26 14:41:04 UTC	331	IN	Data Raw: 39 38 03 aa 2d 44 d1 e3 f1 0d 3f 1a fa a9 3f f0 9e 59 bf 01 66 7b 9e 77 72 a4 b8 bb a8 a6 08 02 dd f7 89 57 05 b6 dc 38 e4 0e 05 b1 a1 83 df ec 56 fb 6a b5 c0 48 37 c5 62 7f f5 87 86 9d 11 ff 39 82 73 85 1e bb 1d af c9 d5 f3 ff 06 5e 3f f4 ab 13 d2 da 2f b9 3b fb 08 0f ba 3e 23 4f 0c ca 7b 75 80 c8 01 4d 3c 05 42 2d bd d7 95 3e 63 0e 7d ee 12 c1 fa bc 04 0e f9 84 7b 88 f6 f4 50 7e 51 5c c1 13 e2 0d 8a 6f f7 07 09 c3 9f f0 46 47 18 a5 1c 48 8e c3 c8 58 b7 40 3e 29 cb 70 82 7b b1 56 04 7d 11 91 87 e7 e9 5b 7c 05 dd a9 b4 62 01 81 e3 4a 7c 99 6f 7b fd 6f 8e 53 1b d8 71 7d 25 5c 59 61 2e a5 df 11 76 aa 36 f8 53 47 2b 6b 6c 10 97 03 c3 a4 a3 ff 5b a5 8b f1 d5 d2 aa 7e fa ad 71 f0 14 94 02 b5 d4 84 55 e9 d6 68 d2 64 18 19 f7 f2 41 be a5 d6 7d 19 bf 5d a0 5d 62 Data Ascii: 98-D??Yf{wrW8VjH7b9s^?/;>#O{uM<B->c}{P~Q\oFGHX@>)p{V}[\|bJ\|o{oSq}%\Ya.v6SG+kl[~qUhdA}]]b
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 4d 78 63 6f dc e1 00 73 17 c2 13 c8 92 bc d2 cd f2 4f 89 1c 80 e8 e1 2c 73 1a c4 d1 5f 55 27 d0 2b 0a 68 14 3e 5d e3 12 b3 c7 9b e1 9c aa 50 9d 9a a3 2f 6b 25 c4 87 fc 04 ad ef ba 86 b6 90 02 05 a8 a4 81 3f 12 af 23 f2 b0 53 0b 4d aa b8 15 cb 7b 74 4a 72 1e e9 e0 e4 3a f7 35 01 0b 42 75 8c 45 76 87 b6 a0 9e 50 bf 27 1f 6a b7 d8 f3 72 48 3a 2e ae 45 50 37 cb e6 60 23 e7 b5 63 71 40 79 d6 a8 62 bb 87 42 df 07 fc 0a 3f 5c 96 96 48 a6 50 7a 66 08 30 d6 1a 9c 9a 57 8c 7a 4b 8c 65 d2 3f bf 03 16 cb 9d 2f 5e ee 7a b6 7f c4 d6 17 48 10 87 1e df 17 24 44 2e 9f 37 17 de 86 40 ac f9 cf 8c f7 87 68 7f c2 86 04 ce a8 c6 b2 0d 6a 79 c8 0c d5 5d 87 11 fe 21 72 44 07 8a 94 03 bf 35 b2 27 57 e8 da b9 e4 b1 d1 3b 62 14 46 3a dd 27 44 05 f0 c7 e1 c9 fb 2e 78 7c f3 40 e3 90 Data Ascii: MxcosO,s_U'+h>]P/k%?#SM{tJr:5BuEvP'jrH:.EP7`#cq@ybB?\HPzf0WzKe?/^zH$D.7@hjy]!rD5'W;bF:'D.x\|@
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: c0 7f 5b 44 ca d5 ee 61 46 eb a8 03 0d 11 b3 b8 13 be 28 bc d4 92 c1 6c fd e4 09 f4 1f e2 d1 aa 3a 49 72 b9 e7 fa c1 c3 bb b5 cc a0 ae 6f b5 0f db 4b 71 e1 99 5b 22 f0 13 11 45 9c b6 e5 7a 97 ca 63 c5 39 07 ca a2 48 10 32 ab 10 01 b1 ee 0a 87 dc c8 e0 95 a8 cf f6 e7 7b c4 a3 f9 7b 89 75 2c 06 a1 ea b4 a6 39 f2 26 2c 0b b6 f0 9f ee 2c b3 bc 4b f5 96 d8 3a 61 23 fa b7 d5 f5 12 ba 27 79 a9 73 c5 b5 f8 0e 0c df 12 e5 35 ea 04 b7 8f bc aa 80 04 ae f8 19 67 cd 11 04 22 f8 b8 3e a5 cd 0d 13 99 7f 7f b4 74 f9 19 11 31 f9 79 a1 d2 63 3a 04 9b 3d d3 9c 9b 72 05 08 3c 33 3a 1b 8a 65 68 33 19 69 1c 56 73 f9 39 9f 10 45 70 a6 0a 8e 3b 20 59 02 e0 0b 84 14 f7 0d 50 9c 16 5f 25 73 2e 4d 71 2e 27 0f a7 ef e8 cb 3a 2a a3 a3 e9 b7 f4 af e4 f8 7b 6a 47 48 eb f3 4d 2b c4 5d Data Ascii: [DaF(l:IroKq["Ezc9H2{{u,9&,,K:a#'ys5g">t1yc:=r<3:eh3iVs9Ep; YP_%s.Mq.':*{jGHM+]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49856	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:03 UTC	2880	OUT	GET /static/images/home/communication/notification.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D Range: bytes=153600-327679 If-Range: Thu, 25 Apr 2024 21:20:28 GMT
2024-04-26 14:41:04 UTC	428	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:04 GMT Content-Type: video/mp4 Content-Length: 174080 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 153600-327679/341743 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:04 UTC	827	IN	Data Raw: b6 f4 31 cc 4d b1 9d f1 e0 27 d0 46 f5 0b a9 f0 93 18 d4 c6 a1 59 e0 1a dc a5 cc d8 68 64 11 71 18 74 f9 61 f4 67 61 9f d9 05 1d 9d 50 c8 ca d8 f0 1b 2e e9 d0 fd fb ac 94 e7 d1 03 ff b2 19 40 b9 11 33 b0 98 b3 f7 e8 35 7b e7 e2 50 2c 95 3e f7 aa 57 82 30 39 bd de 1c 4b 29 74 a6 79 5e 91 78 ef a9 6b 9e 9a 55 c4 c4 88 09 18 d2 18 58 57 e0 2d b0 52 e8 15 c1 2e e5 c4 43 ef 37 ef 73 75 95 45 72 cb 08 68 99 35 d6 3b ed 84 a5 ff 39 f7 88 e3 1f e5 ff 78 7c a7 d1 c3 52 a1 c9 0e 4a a8 39 2f 3e d9 0f 11 fe fc 89 e2 5d 7d 44 b9 48 51 67 db 6d dc bb 75 ef b5 50 b1 54 9f ad c8 f5 76 69 0c 53 27 8f 5a c5 05 54 05 5b 70 b3 0b bc 8b 9e 4a 3f 3d ab 9d a8 ee e0 4f a2 5d e6 1c 73 2c dc f1 30 1c b8 7f ed 81 46 00 93 71 59 ce a5 cd a6 56 fc 27 36 d8 59 00 08 2e 3d d7 43 eb 74 Data Ascii: 1M'FYhdqtagaP.@35{P,>W09K)ty^xkUXW-R.C7suErh5;9x\|RJ9/>]}DHQgmuPTviS'ZT[pJ?=O]s,0FqYV'6Y.=Ct
2024-04-26 14:41:04 UTC	222	IN	Data Raw: 23 4d ff d4 8e ff 1f 5d 85 5b 76 bf 55 7c 66 44 ec c5 0b 33 76 fb ea 63 9f 42 c6 42 74 e6 9b 8e bf 49 2d 25 a6 0d fc 8e 8e 14 b4 70 71 a8 f5 61 be ea f3 bb 42 fe c4 6e 88 ea 61 9e f9 0a d7 05 f3 a0 38 e8 95 08 88 ae aa 6e 66 b7 a6 a3 e7 31 17 5b d3 64 a0 90 b1 c0 37 87 36 1f a6 34 1c f9 cd 37 11 de 87 7c 99 0d ae 3a 9b 3f 70 ef b9 23 bc 78 16 2f 2f 07 f8 0e 11 eb 73 0d 27 73 25 77 9f dc 0a 1b e5 38 f0 7c ce 6e 7a c5 5c 2c 48 50 13 a2 f5 1c 3d b5 f3 47 08 b5 02 83 a5 0d e2 a1 ba 38 9f 8b 9d ce 9a ae 09 f6 5b 92 c5 46 4a b6 25 da 4d c4 cd ec 00 ad a4 a8 1c bd 71 15 85 76 64 ed 27 07 6d de 06 25 90 3b 0b a4 68 74 74 4e 7e 85 c6 26 7e f2 46 4c 4e b5 7d 72 40 a1 Data Ascii: #M][vU\|fD3vcBBtI-%pqaBna8nf1[d7647\|:?p#x//s's%w8\|nz\,HP=G8[FJ%Mqvd'm%;httN~&~FLN}r@
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: b1 10 67 95 36 90 c8 d3 ad fe 4f fe e8 1e 27 6d 8b 15 d7 a9 47 d6 f0 13 8d 15 8f 85 eb db d6 de 3f 97 37 21 4d 2f 77 ec af 47 e1 13 74 eb 5f bd 22 46 cf 6f 11 8c bd ed 7e 9e 6c 98 80 34 9c 5a a4 14 be b3 7c 06 69 7d 5a d4 c5 3d 3c 69 7d 67 37 c5 86 26 41 84 46 4d fe e8 cc 23 b6 1b 92 18 c1 ae d3 f8 59 4f bc 94 1c 56 7a 4c f9 1a bf c2 b6 54 98 e1 47 c3 68 be a7 7e f2 56 11 65 5e cf 25 a8 64 b7 06 53 36 6a 48 f6 37 82 eb 08 0f 30 24 b1 be f7 7c e4 15 43 5c 25 bd 42 86 a8 11 d7 9f 7b 8a b2 ee b1 eb 46 88 ff 84 cd b6 3c 49 07 bb 7a a1 b4 b6 ef e5 37 58 7c 56 99 49 e8 6e a9 3f 38 07 5b 5e 3b 1a 01 54 1a 33 0c b7 5c 1e e7 fc 08 d1 18 70 e8 54 00 00 03 00 74 63 d5 0f 5a 91 17 95 b8 88 89 c8 c2 c9 0f 4a e6 d9 35 e3 6a b9 b1 59 7e 17 d9 36 3c dc e9 5b 72 28 18 3b Data Ascii: g6O'mG?7!M/wGt_"Fo~l4Z\|i}Z=<i}g7&AFM#YOVzLTGh~Ve^%dS6jH70$\|C\%B{F<Iz7X\|VIn?8[^;T3\pTtcZJ5jY~6<[r(;
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 33 a4 81 50 00 00 03 00 00 03 00 00 03 00 00 03 00 02 42 fa b6 e2 58 00 1e 2a 90 1c d6 9a 2a d9 75 0a b0 40 5c 45 58 b8 27 6f f9 d1 eb 03 37 9e c7 54 9d 13 9d 03 4a f2 ea 83 0a ac 33 f4 6b 64 a1 7b 72 f8 35 95 ad db fc 62 32 b7 85 45 fe 5c b3 6a 3a 3c c8 95 2c 0e 86 0d da 9e e0 a8 3e 61 1e f5 5b e8 91 ef e4 af ee 5f 66 3e 58 12 3c 9a 96 8a 0c aa 4a 9f 6f 29 5d d4 c4 aa 5c 49 76 69 89 30 64 9e 53 89 9e 3f 2a 68 5d 28 1a 11 ac a6 c4 9b af e3 64 cf fa 19 59 19 78 98 11 8d 14 9f f1 15 d4 7b 3e 65 a9 64 03 fe 4c a1 25 e6 12 e5 3b 3c 68 cc b2 14 cf 15 5d e4 96 f0 8e b1 f0 19 cf 58 e0 38 28 53 52 10 67 a3 9c f6 5e ce b0 49 e1 fa 21 ad b9 dd b2 af aa 5d 52 7a 84 88 28 2f 32 b6 a3 0e 40 39 16 e3 ee f8 ea 44 bc 2e 0c 2a 75 bf aa 46 ff 61 65 68 ea db 84 f1 8a a9 3d Data Ascii: 3PBX*u@\EX'o7TJ3kd{r5b2E\j:<,>a[_f>X<Jo)]\Ivi0dS?h](dYx{>edL%;<h]X8(SRg^I!]Rz(/2@9D.*uFaeh=
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 5e 5e 99 93 e6 0d 3f 92 df c3 0d e6 a9 5a 9c 01 03 d8 63 20 53 48 d1 e8 34 6c 12 34 44 25 0f 55 51 cf b1 57 5a 17 96 f0 2f cd da ad 8f 0c 7d f2 5a 7e 6d 84 21 d1 72 c8 70 0b dd 86 b2 0c f7 04 0c b5 a3 5d 56 a7 4a db f6 89 68 11 f4 bf 49 b8 44 a5 36 18 38 43 eb fa 42 25 f3 eb ca 0f 55 6f 4e ad 06 53 2c 3f 88 0e 6e 01 4d 03 89 04 58 e7 fb 25 2c a3 9e be 3c 57 b0 57 3e 4d 0b c6 8b 02 e5 10 c9 53 ae 40 1a 3d d8 12 e2 17 c2 83 a4 db 04 82 b2 cd 81 77 4b 5d ca 98 67 6e cf 6a f1 fc 28 d8 86 21 44 9d 08 a0 0b 07 7f 43 91 9f 6a 88 76 7a cb 39 ac 72 a3 6a d4 07 77 9e a4 51 04 19 d9 bd 80 be 05 9a da 43 73 19 a3 f3 b6 85 a1 2a 2a 61 4d 48 56 e9 83 bc 05 65 b1 d8 f8 b0 5a 8d f2 80 37 16 87 ba 14 22 35 b5 f3 bd d3 e5 a0 ad 4c 3f 2b a1 23 8f 2e 77 43 81 4f 31 e3 bc 1d Data Ascii: ^^?Zc SH4l4D%UQWZ/}Z~m!rp]VJhID68CB%UoNS,?nMX%,<WW>MS@=wK]gnj(!DCjvz9rjwQCs**aMHVeZ7"5L?+#.wCO1
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 15 e0 e4 64 82 5e 02 99 42 c6 d9 28 cf 99 bf fc c2 c0 53 92 f2 87 d9 0c bb 22 c6 d4 6d 51 5c 40 44 2f e8 ea 03 c1 d5 31 cb be d5 bf 2f e5 b9 f7 c8 61 cd b5 99 38 17 bb 35 09 e7 b3 5f 9f f8 96 16 bb 23 04 6c 26 e3 6e b5 56 61 ca 08 67 6e d3 54 2a c4 12 01 a6 3c 85 66 15 e7 54 04 7d 4b 8c ea cf 7f 51 a3 37 2f 3a 3e 98 3e 44 9a 24 51 ca e3 c4 ab 77 2d b4 15 d3 97 74 d3 1a 13 50 f2 eb f4 13 d1 92 66 79 37 f2 2f f2 ee ee c2 5c 98 a3 c5 88 db 5d a7 48 17 da a8 6b 63 9b fd 64 c9 fd f5 16 7e 39 56 80 5e 51 ce 53 b8 75 e9 e9 9f 37 a6 9e d6 a2 75 bd ce 78 cc 09 f6 78 d0 48 e9 91 0f 00 3c 77 34 3b 80 dc 50 74 fd 72 62 0c 02 a1 27 52 65 55 e2 98 f7 88 1e ce 1b 1f 2e cf 74 ed 34 9a 72 7c 05 e8 5a 2b 36 c7 40 ec fd c5 1d 12 f3 29 cd dd 09 5b 6a f6 d6 84 49 55 1f ef 0d Data Ascii: d^B(S"mQ\@D/1/a85_#l&nVagnT*<fT}KQ7/:>>D$Qw-tPfy7/\]Hkcd~9V^QSu7uxxH<w4;Ptrb'ReU.t4r\|Z+6@)[jIU
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 9d 99 1c 03 af e9 6e fe b5 d8 b2 0b d6 47 55 6b fd 73 8e 07 8f 59 48 77 ea d5 1b 41 88 bf 97 86 ee ff a7 27 d4 de 61 01 3b f4 82 06 0d 4b fe 0c a0 b7 de cf de db be 12 8c b0 38 94 2a 23 c8 f3 0a a4 ce c4 26 ad 0b 63 e5 32 c4 49 f4 a6 6f f5 87 5f d6 79 45 07 d7 a5 9b 2f 1e bf 8b 1c a0 6d fd a7 16 0c e6 2a 67 85 5c 08 79 d1 01 dc 82 09 3d 59 b1 a9 92 b6 8b b2 ad ac 95 97 2d 16 ee 89 a1 7d 31 2b 34 ac e7 69 7b 10 e8 2c 97 a0 cf 82 e5 1f 49 0c 00 4c 10 48 ea 5b 5b 87 66 92 fd c2 c9 08 2c 28 b2 9a 20 a8 29 3d fb bd 5b 9a 38 6f 7e 8e ff b4 c5 d0 05 fe 71 05 d0 c6 e4 f0 57 63 78 53 ac d8 55 4e 6e 95 a1 48 ea e9 1f c9 b8 ea 07 ad a0 b2 be 6a 08 7c 61 df 65 10 06 cb 06 54 fb 26 e7 c6 d3 f7 e0 e5 f5 bb 37 7c 85 cb 6d a8 60 39 5e f0 79 e2 e4 c4 f8 f5 b5 4c d8 05 d8 Data Ascii: nGUksYHwA'a;K8#&c2Io_yE/mg\y=Y-}1+4i{,ILH[[f,( )=[8o~qWcxSUNnHj\|aeT&7\|m`9^yL
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: ff a2 30 66 e0 1e 66 a0 b3 77 3a e9 05 ba 33 65 4f 03 88 14 43 19 c8 a6 00 25 a6 f0 4d 84 05 ba ce 00 a3 4c cd 96 0e d7 6b 10 db 19 ca d5 08 c7 e8 79 ba d5 db c6 04 fb f3 31 cb c0 aa 6a a3 59 af 63 da 3c 77 f5 d7 0c a1 af 66 28 78 af 58 5e e0 6f d3 b6 04 df 84 a2 db 54 b7 8a 88 00 d8 5a 70 5e 0d 2f 45 91 4f 1b 4e 76 0d d5 d4 01 ad 51 b4 06 86 55 f3 f9 af 18 70 fd 74 7d d2 3e b2 11 51 26 de d4 1a 87 01 50 b9 13 eb 84 0f ae 96 25 8c 64 e8 07 1c aa 5c a8 26 3a 5a 42 64 50 47 07 a6 23 a4 4f bd 02 e4 8b 21 63 f6 b8 f8 2f 5e aa 8e 47 5b c7 b7 07 82 5b 82 d2 46 92 1f cb 65 ea 1d 2f 9a c2 5b 1e 61 d5 49 a6 2f 93 a8 6a 49 d8 dd 2e aa fb 23 ba ec 19 68 51 92 3e d0 82 82 e6 9d 2f f7 15 5b 62 44 57 fc bf d9 20 12 74 0c 6b ab 83 d0 af 14 87 eb 2f 3e 00 00 03 00 81 e3 Data Ascii: 0ffw:3eOC%MLky1jYc<wf(xX^oTZp^/EONvQUpt}>Q&P%d\&:ZBdPG#O!c/^G[[Fe/[aI/jI.#hQ>/[bDW tk/>
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 6b 58 c6 82 26 d4 85 cc 7d e4 46 65 9c 5a 88 a7 87 4b ea 5a 32 62 0a 38 16 fb e6 4c 41 f4 44 b8 39 31 e6 e3 a4 39 cd 1d 79 ce 1d f9 8a 12 e1 57 1e 21 20 4a a8 cc 12 1c 68 16 1e 06 10 28 5e 56 68 8f dd 10 f2 1a 13 a7 82 84 5f ea 55 f5 fc 00 c5 f2 35 cb 82 c6 c1 e9 27 e4 99 c6 98 6b e1 b5 6e e7 1b d5 85 6f 05 11 0c e6 bc 22 63 c6 df 16 de 58 14 79 b7 2c a4 1e 0c c9 d0 1c 9a cd b9 6f fd d2 2e fa 2b d6 70 a9 55 fc 00 ca ad 75 77 c7 05 dd 7f 35 40 00 59 b5 a6 67 6f dc 00 00 37 9b 82 bb 39 f6 dc 0b 9c 06 09 3e df 50 aa a7 ed 73 97 81 c6 d2 ed 87 f7 fb 80 00 a7 fd 8d a5 3b b8 ac b1 00 2e 65 58 3c 85 31 a6 6f 8b fd 2d 41 58 f8 01 b4 6a e6 26 cb 4b 1d 12 63 9a d9 8d 3a 55 1f 2a da 44 ba e2 48 d4 20 0f 0a e5 80 ad 28 75 a7 83 4e a0 18 ce 46 fd 25 d0 de a9 3f 8b d6 Data Ascii: kX&}FeZKZ2b8LAD919yW! Jh(^Vh_U5'kno"cXy,o.+pUuw5@Ygo79>Ps;.eX<1o-AXj&Kc:U*DH (uNF%?
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 55 58 de 61 a9 11 12 d8 1a 4a cd 70 3f 0a 9b a0 de 74 2c 8d ba dc 2d de d9 c6 e8 05 c3 dc 73 51 b7 9d 43 f4 c5 5a 65 ca de 73 45 81 ba e0 61 2f a5 1d 07 f3 40 fd 38 e8 42 18 55 9d 2e 61 10 fd 99 68 4c 8b f2 9a 27 6a aa 08 6f 16 bf 65 2c 7e 8d b9 1c 78 32 46 4f 29 47 42 9f fd a3 2d 16 31 9c 34 c3 f9 1a fd b1 c9 aa d9 bc 71 e5 3a 27 7c bc 08 50 06 8e 01 66 ff 62 08 4b 6f e8 ba 2d 24 d3 10 4e 07 c4 30 02 bb f9 37 30 44 62 a4 a7 f0 84 92 0f 31 7d c1 bd bf dc c2 0d db e8 e8 33 7b 99 22 11 4f 5b be 6f 12 8b 13 49 cc 68 fb c0 66 13 53 f3 c2 52 12 2a c8 a1 1a d1 d2 b8 ba 3d 7e c3 ed 36 ec 27 bc 78 8f 00 85 33 25 d3 7d 76 13 3f 61 29 0b 6a e1 96 fc 20 65 3d c9 73 cd bf 94 4c 27 d3 9b 3c f5 2b fc bc 76 f8 a5 ad c1 0b 6b 5d 36 94 d6 c3 f8 72 ba 3d 03 5e 6c 47 cb 19 Data Ascii: UXaJp?t,-sQCZesEa/@8BU.ahL'joe,~x2FO)GB-14q:'\|PfbKo-$N070Db1}3{"O[oIhfSR*=~6'x3%}v?a)j e=sL'<+vk]6r=^lG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49853	35.190.30.45	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:03 UTC	2877	OUT	GET /static/images/home/flexibility/flexibility.mp4 HTTP/1.1 Host: runrun.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://runrun.it/en-US?utm_source=plg&utm_medium=sharing_page_footer&utm_campaign=footer_link Accept-Language: en-US,en;q=0.9 Cookie: first_utm_campaign=footer_link; utm_campaign=footer_link; first_utm_medium=sharing_page_footer; utm_medium=sharing_page_footer; first_utm_source=plg; utm_source=plg; first_visit_at=2024-04-26+14%3A40%3A42+%2B0000; landing_url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link; secure_aplicatic1_session=Ymcvazh4eDBqaXYzNlFHNTNuUklyWWgyVS9jMkhuUmQ3ZFBNUWkyRTJJenEvWFlVbEtTaDFoL2FEdVd6SHJMcUdJeDNGSE1oaW1mS253QjlvVWl1SnZHV3lnaVA5WjZEMnJYV0ZSVXY5UEpFYmNQenNKOThPazJ2Qm9TOFFGdlpqUkxYMDRQK3ZaSUhMbVBHa21kV0NDd2w3RlJvclZFY0I2SWZOZ2FheHdYQ01pcmVJd01WTGFKa0JHbVNwdWU2SzE3MVJWQlM2emRWQTV1aWZMZWJHbytGenFkNXNXWW5pZzNJR2g0MDl4ST0tLXdXaDJlT08yUWFIK2Y2QjBsVUdLQ0E9PQ%3D%3D--673b8914c3b14d6bb23785d5ef78fb0e058cbde6; _gid=GA1.2.1893265479.1714142446; _gat=1; _gcl_au=1.1.922323486.1714142446; runrunit_lgpd_accept=false; _ga_W8NNJC13JR=GS1.1.1714142453.1.0.1714142453.60.0.0; _ga=GA1.1.1930088754.1714142446; _dc_gtm_UA-24371500-1=1; mp_03f01ae6a660fb28aa129431941e4e00_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A18f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22%24device_id%22%3A%20%2218f1ada323f42d9-0d62b40e8ec46c-26031e51-140000-18f1ada323f42d9%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22initial_utm_source%22%3A%20%22plg%22%2C%22initial_utm_medium%22%3A%20%22sharing_page_footer%22%2C%22initial_utm_campaign%22%3A%20%22footer_link%22%2C%22initial_utm_content%22%3A%20null%2C%22initial_utm_term%22%3A%20null%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%2C%22utm_source%20%5Blast%20touch%5D%22%3A%20%22plg%22%2C%22utm_medium%20%5Blast%20touch%5D%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%20%5Blast%20touch%5D%22%3A%20%22footer_link%22%2C%22utm_source%22%3A%20%22plg%22%2C%22utm_medium%22%3A%20%22sharing_page_footer%22%2C%22utm_campaign%22%3A%20%22footer_link%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D Range: bytes=155648-491519 If-Range: Thu, 25 Apr 2024 21:20:28 GMT
2024-04-26 14:41:04 UTC	428	IN	HTTP/1.1 206 Partial Content Server: nginx/1.15.12 Date: Fri, 26 Apr 2024 14:41:04 GMT Content-Type: video/mp4 Content-Length: 335872 Last-Modified: Thu, 25 Apr 2024 21:20:28 GMT Cache-Control: public, max-age=31536000 Content-Range: bytes 155648-491519/512388 Strict-Transport-Security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:04 UTC	827	IN	Data Raw: cb 17 99 79 df bc 79 cd 8a 08 0a d3 54 a5 c0 ee db a1 ce 97 b6 b3 62 d0 ed 67 ab 2e ac 2e 42 55 87 5c 22 5c d4 5f d7 bd a4 91 e0 99 74 88 10 c5 4f b1 73 36 d1 3f 5f 8a 10 38 34 ea 72 89 ca 1e fd 76 76 93 89 3d cb db 7a b8 7a 34 21 59 c6 4b 84 95 de 9f ae 28 2e fc b6 24 b7 22 58 48 d7 33 f8 f2 8c 66 c6 17 f1 2a e3 fe 0e be 1e e7 a8 27 29 15 34 ac fa ea 8f f9 ba e5 4d 05 79 21 ee 8f 12 ad 0e 8b 27 76 b6 0b 4d 24 48 e1 8f 1e 3c 99 b6 34 aa 2a a0 88 1b d8 2d 95 d5 0a dd bb 53 f0 ae 58 d2 d8 01 89 32 43 11 54 41 2d 72 86 e3 f6 82 d5 c2 11 f9 47 d9 73 2c c6 72 94 15 dd f1 9c 78 f6 7d 6c f5 e6 50 77 61 90 11 fb 06 f4 c5 6b 6b 94 d8 f2 35 24 0e 05 37 b6 5b 1e 16 51 0a 00 b0 c1 d8 4d 57 58 9a 89 a9 de da 77 ee dd 4b 16 b4 b7 e0 09 7c 59 0d b5 c1 6e 49 9d 02 60 55 Data Ascii: yyTbg..BU\"\_tOs6?_84rvv=zz4!YK(.$"XH3f')4My!'vM$H<4-SX2CTA-rGs,rx}lPwakk5$7[QMWXwK\|YnI`U
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 38 98 79 0f 69 5f 30 dd 9d f1 59 fc 26 9d 27 ae 52 dd 8b 3f 1a 45 95 ea 97 9a 92 fd 0e a0 99 94 4f 64 c0 b8 91 d1 4f 7f 9f b0 0a e7 42 02 1b 57 b0 9a e1 46 6b ca b8 c8 54 d0 58 d4 26 3d b1 66 fc 34 68 e1 56 5f 5e fc 14 ab 48 e7 83 2c 1e fc 77 4f 43 4a 0e 6d 68 73 55 d2 ae 0b 34 e4 56 88 02 8b 6f 52 15 fe 4d eb 37 50 24 f3 93 9e bc e3 3a e7 8e 19 f6 c6 40 a6 68 69 2b ac 07 4f 9d c4 25 b0 0f be 37 b4 7f 6c fb 7c 9a 8b 67 f7 ee eb 64 93 3d 12 c4 ae 74 2a 53 6e b1 ae bd 59 97 89 b4 c0 26 44 fb 6c 05 59 6d 9f a8 39 a5 03 59 bf 77 05 86 43 b5 1c 7c 91 8a 4c 8e ac 87 f2 60 50 4c c9 ac 15 52 88 d0 db 8e 25 a2 11 b9 d1 5b 3b 2f e8 34 2d c7 5c ca d6 cf 56 81 b0 1d e8 61 0d d4 24 70 c9 2a af a4 f3 eb 39 e7 0b 54 04 b7 80 dd f9 f3 34 ed 1d 64 e4 89 ac 1c 61 70 2e 0d Data Ascii: 8yi_0Y&'R?EOdOBWFkTX&=f4hV_^H,wOCJmhsU4VoRM7P$:@hi+O%7l\|gd=tSnY&DlYm9YwC\|L`PLR%[;/4-\Va$p9T4dap.
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 33 47 ed 46 6b 05 9a e2 02 80 12 c5 73 38 c5 8c 54 d8 14 0d 5b ee 69 e8 d0 20 97 76 df 4e be ae 52 18 dd 4d c0 e5 e8 51 10 2d 84 7a 85 8f 3e b1 de f1 57 b4 42 76 ee 83 38 53 02 58 71 5c 34 3a fd b4 c6 a7 66 dd fa ec e4 0c f6 40 5a b5 75 e2 f2 f6 a4 22 fa 77 92 29 c5 1f d3 5e 2f ce da 27 2b 23 5b 15 7c 7a f9 3b 00 05 7b c2 48 4b 15 d8 5a f3 52 cb d2 1e 4d db fb 9c d6 21 d6 5f 8c 51 4d 35 a6 83 34 65 e2 93 c9 7f 23 f8 f2 37 87 34 82 c8 67 a6 0f b2 df f0 97 a2 4a ec d8 5c e2 f4 95 00 4a c9 d7 02 e4 2d 6d 23 bf 40 b0 5d 6d 04 5a ae 66 d2 74 36 b5 ae a2 b7 d1 4c 8f 7f fe c1 15 1e dd 74 74 bb 22 7f ce aa 02 e4 be 64 97 28 01 c1 18 60 1f ec 94 9c c9 4a 50 80 7a 36 eb 91 a3 c9 17 ff 46 0f 2b df 6a 15 3d e0 56 78 dc b3 c6 89 24 9a e6 74 f2 c5 1a 7e 3b dc 07 25 9d Data Ascii: 3GFks8T[i vNRMQ-z>WBv8SXq\4:f@Zu"w)^/'+#[\|z;{HKZRM!_QM54e#74gJ\J-m#@]mZft6Ltt"d(`JPz6F+j=Vx$t~;%
2024-04-26 14:41:04 UTC	400	IN	Data Raw: 7f 1c f1 b3 97 da 51 72 06 de 69 94 af 3a 4a 38 d2 ce d9 bf b1 72 31 47 9d 90 12 fd 62 f2 62 be 35 49 ab f1 16 65 3a 83 73 52 bf 2b 0c d8 f1 99 f9 3f fb 7b 1e 1e 23 71 da 31 27 cf 92 0e 52 41 97 94 cb 33 b6 9d 61 9e e7 21 59 63 2d c4 c2 12 4d ec 2d 59 7b df 8e 18 c3 b9 44 9b ab 90 48 db fb eb 92 72 60 ba 73 41 15 f0 b2 bf 7e ec 34 20 f9 b2 ce 10 ff 43 0f 64 48 79 80 42 33 55 5e 43 42 ad 1d a5 54 e8 36 04 cc 9c 94 58 71 7e a2 24 a3 7b 9d 2a f6 42 e4 2f e3 af c2 85 93 fb 75 b4 af c7 41 91 7a 0f 32 98 a3 f9 23 4c c7 73 31 d7 a6 94 48 19 6a d6 eb 93 d0 08 9e b2 52 6a 34 5a 0c 44 fc 9b 5a ae d5 cd 3d 8a 98 b5 f3 62 51 3f 93 57 c6 93 3a 13 e4 4e 2f d2 5c 85 a7 ee 42 8f ef 50 d5 72 c4 eb fc a6 ff 00 cc eb 90 8b 63 b2 b8 91 d2 46 65 ca 08 2d 73 8b 8d b3 eb 51 2f Data Ascii: Qri:J8r1Gbb5Ie:sR+?{#q1'RA3a!Yc-M-Y{DHr`sA~4 CdHyB3U^CBT6Xq~${*B/uAz2#Ls1HjRj4ZDZ=bQ?W:N/\BPrcFe-sQ/
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: aa f3 c6 74 4c 07 c2 87 7d d3 3f 29 94 6e 77 4a 8a 47 2b 00 eb 80 f5 65 5f df e5 e5 77 79 29 8b ab 45 71 84 e4 cf 7b 48 e5 d1 82 55 73 5a 39 0b d4 f3 92 c2 b1 53 3a bb 91 1a 36 db cb 70 0e 82 04 2c 76 01 28 33 13 eb d7 13 fa e4 7b 0f 48 7f 79 d8 51 40 90 b6 be b1 f4 87 b1 a7 ed 3f f6 d3 9d 7c 0e 3a 2b ac 2e d6 ee 67 94 59 9a 71 89 3b f8 49 70 fd 27 2c 06 10 7f 14 54 7d 0f a7 48 b6 79 ff f9 b5 da a9 9f c4 c2 d9 56 bb 21 3a 24 6e 62 85 aa 32 44 69 44 c4 27 cb 50 1a 7f 0f 7e d9 24 7b 1b 86 6e fa 9a a8 e9 d8 a6 e3 57 8c 75 cd c3 09 a6 e5 53 3f 11 50 6a b7 27 0a 6f 90 8f 2d e6 78 11 82 55 6d bf 2e 74 b9 ea 46 ec 7a 6d e8 7b f4 d3 98 94 cb b0 80 0c 7e a8 38 9b 3b f8 20 70 33 91 48 09 e4 96 12 d8 ae 81 0a 2a 6b 29 54 fd 3a 1f 4d 5f 87 ba 19 9e c9 a5 77 f4 28 9f Data Ascii: tL}?)nwJG+e_wy)Eq{HUsZ9S:6p,v(3{HyQ@?\|:+.gYq;Ip',T}HyV!:$nb2DiD'P~${nWuS?Pj'o-xUm.tFzm{~8; p3H*k)T:M_w(
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 87 4d 9a f4 69 56 c0 e8 1d 50 24 bf f6 10 55 23 57 ed 75 b5 0c 3c 6f d9 a1 aa 2c 63 fd 45 da 55 95 9f ac a2 c6 69 78 ff ce f0 d9 5b ed bd 58 a1 94 8e 42 7a b6 4f c7 6e 8a 95 c5 10 fb c1 ac 82 74 54 4d 45 6a c5 5f 44 73 fe 1a ae b2 b4 c0 d7 a6 53 7e 6c 4c 5e a5 2e 0b eb db 97 2f 0f 7a c5 53 9d 1b bd d0 3b 5e 16 f3 03 50 e1 98 be a8 4a 26 a8 1d 11 a9 7c 99 4e 93 38 41 9c 7c ab aa 10 78 01 12 99 f9 63 9f e7 96 4f 48 0a 6c f8 fb c5 98 ef 1b 46 77 ea 02 b8 e2 85 6d 54 e2 0f eb f1 3f bf 7e 4f f6 51 2b 11 cc 3b b9 5b 53 6c 58 17 1d 53 f6 7b 57 a5 d1 2f b3 5c cf 87 16 25 ec 68 eb ed 10 2e 96 e1 61 2c 79 78 3e 98 67 99 8f e9 34 1d d5 fb 89 e2 7b c6 aa 47 c7 2c 8e 1e 6f d3 cc 6f e0 c0 0d c3 73 ac 80 fc 27 e8 1e 5d 52 92 3b 0d 37 d1 9d 53 e6 38 67 2e 6e e0 fa 74 40 Data Ascii: MiVP$U#Wu<o,cEUix[XBzOntTMEj_DsS~lL^./zS;^PJ&\|N8A\|xcOHlFwmT?~OQ+;[SlXS{W/\%h.a,yx>g4{G,oos']R;7S8g.nt@
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: 44 08 db b4 65 59 64 c5 7b 54 94 da 21 9b d4 b7 0f 5c 4e fd 29 9a da 85 ee 78 63 75 e5 2a 11 af b4 b3 f7 6a 54 66 5a 41 10 9a 65 cf b2 30 b2 3e 98 ae de 06 00 69 13 35 1f 59 2b 25 00 54 ae e4 8d 04 d2 b1 dd 35 c8 ae 3d df 8d ef 02 32 68 c9 5b a6 6f 1f 89 24 e5 d5 5c cf 64 bf 0f 97 3f f1 7d 59 c0 73 31 da 21 1d 94 13 03 d3 b2 47 65 21 0a e4 99 d8 06 e7 1c cb 42 d1 aa 53 1c 87 fb 80 ef 70 c6 00 7a 30 c2 7c 72 f5 02 9b f5 d8 12 ad 44 ff a1 61 67 46 f7 9f 7d f2 d2 f8 f9 3b 22 03 f7 e7 e0 fd 24 c2 e8 65 d7 ff 8a 2d b7 b0 e4 5e b1 b0 70 53 d7 67 28 0b ea 64 09 01 68 98 bc ca a8 a6 63 a0 b9 f6 48 0c 2d c3 fd 0e 1a 51 43 72 2d 13 d5 03 89 63 a7 55 0e e0 c6 97 d8 4d e2 69 4b 7c 5b e5 95 a7 c5 98 27 1b ac b8 3a 70 5b 46 00 9a 19 56 22 3a 7e c0 2d 2b d6 69 95 12 ab Data Ascii: DeYd{T!\N)xcu*jTfZAe0>i5Y+%T5=2h[o$\d?}Ys1!Ge!BSpz0\|rDagF};"$e-^pSg(dhcH-QCr-cUMiK\|[':p[FV":~-+i
2024-04-26 14:41:04 UTC	331	IN	Data Raw: 46 eb ed 7f b5 5b bd bc f3 1d 41 b5 c0 38 fe 6f b2 b5 17 ed 68 8a 62 fa 2a f2 5d 80 21 49 0d 80 2b be 77 31 cd 69 83 0a 9f 77 7d c6 41 46 15 96 56 70 8b fa 0b d3 86 39 af c0 34 33 ff 41 2b 8d 72 a0 5a c6 b6 9d a3 04 e6 67 91 69 cb e3 69 71 64 55 41 a4 bb 86 8a 9a c0 0e e7 af d0 e8 d3 7b ae a3 02 d2 03 32 d5 fa 43 60 1b 23 e0 a8 1e 29 43 79 0a 24 6c 93 b1 89 4f c8 10 5d a7 7a 8c 04 a1 43 1f 06 05 c3 92 ea 72 5e 81 d6 97 b2 4f 84 28 0a 84 f0 cd 28 36 ea d8 21 1e 8d b5 6e a6 92 8e 02 fa 1f 2f f3 51 77 4e 6d 4d 39 35 74 df c7 1e 68 98 2f 08 94 6a 28 e5 e7 0a e3 9e 74 56 e9 f3 e3 4f 2e 81 bd c6 9c 9c 7b 52 69 ef c2 3d 07 c3 d5 60 39 af eb 8c 47 a2 1f 50 2f ee 07 64 28 15 fc b6 eb d0 96 4e ac 2d 51 92 1e 02 9d ed 26 07 e2 2f b2 94 25 d0 e8 f0 aa 87 d2 f1 84 66 Data Ascii: F[A8ohb*]!I+w1iw}AFVp943A+rZgiiqdUA{2C`#)Cy$lO]zCr^O((6!n/QwNmM95th/j(tVO.{Ri=`9GP/d(N-Q&/%f
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: a2 d3 94 b3 10 d6 97 d9 7c f1 e8 83 e0 a0 e5 b8 44 a4 d0 65 85 c5 2a 2f 77 1b 44 be 67 9d e4 9b 6d ba 3c de e5 90 20 0f d1 21 cb 29 8e 1b 34 7b 5d bf ab 14 ed e0 36 7d 53 90 f1 42 57 8c 93 38 70 0d 48 a7 11 1e 0d c6 30 d9 17 00 4c b4 dd 83 3a ca 93 3a 7f 1e b3 81 0d 94 30 0d 6a 11 de 59 c9 4d 7a 29 4f ed 47 10 69 be bd 90 4a c6 72 f8 86 2c ee 1f fe e7 d9 7e 1c 89 05 77 04 c8 ac ee e6 82 73 2c df a0 97 17 f6 8d 5c 4a dd 77 1c 49 6f 66 9c 2e e0 12 4f 13 88 24 e7 22 6b d2 3d 01 42 c2 54 bb 97 be 09 d6 a1 55 da 6d f1 dc 88 45 5e ec 4f de 8a e1 7b 89 b9 8d ed 0f d8 9e 13 e7 1e 0a 3d d1 1d fd 00 1e bf c7 37 9e 90 dd b4 43 6e 7e 02 ca 3d e0 a4 06 3e 66 2b a4 66 27 ca 45 31 67 d1 d5 9f 4f c3 8c 4e 90 36 ba a0 4f 93 0d 10 5e c9 f2 7a c7 da 04 99 99 39 71 66 e8 93 Data Ascii: \|De*/wDgm< !)4{]6}SBW8pH0L::0jYMz)OGiJr,~ws,\JwIof.O$"k=BTUmE^O{=7Cn~=>f+f'E1gON6O^z9qf
2024-04-26 14:41:04 UTC	1255	IN	Data Raw: f0 4c 40 e9 c0 1d 62 68 39 9e f8 b0 32 8f 30 39 d0 f4 d9 ce 90 78 6e f9 a9 8f e9 8f ef a0 32 98 9c 9c e0 4e 9f e9 89 cc 5a b7 0b a6 be 0b 59 d4 69 3a 1e 3a 89 4d ec 17 cf cb 5f a2 f3 86 2a ad 67 3b 20 db 2a 21 ee 02 e0 72 b1 34 fd 7d da da 94 75 fe c6 8a 5d 22 28 95 4d 92 2b 4b a7 99 5e be c6 39 bd 5d 8e 1c a2 9e fe 65 47 f5 be 8c b7 05 99 5e ee 48 b3 b2 db 74 d2 b2 0b 73 05 cb 50 37 c5 cc 6a e6 e3 d2 13 ac 77 66 2b ca b8 04 e4 de f6 1b c8 36 49 05 cb 6e 9a 76 a7 36 b1 4e 7f 56 a5 bb 75 d4 42 2a f6 8e bd 12 12 fd 3d 94 a5 40 81 92 21 c5 f7 af dd 2e e5 0c fd 5c 02 4e 2f 30 7d 2c e5 f0 ca f1 da 7b 1b f3 64 c4 aa d7 eb 02 2f 18 90 03 98 22 b8 33 2d ba 68 3b 42 7a 29 08 32 c9 aa eb c8 b8 4a 4f f3 ff 6a 2a 83 3d 23 b9 d1 a1 d4 c5 15 2a 27 d4 a1 82 48 4c 18 e4 Data Ascii: L@bh9209xn2NZYi::M_g; !r4}u]"(M+K^9]eG^HtsP7jwf+6Inv6NVuB=@!.\N/0},{d/"3-h;Bz)2JOj=#*'HL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49858	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:04 UTC	663	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: d712e364-d78b26f4.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://srmcorp.digitoids.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://srmcorp.digitoids.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:07 UTC	729	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:41:07 GMT Content-Type: text/css Content-Length: 20314 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2805970 cache-control: public, max-age=31536000 etag: 0x8DC070858CA028D last-modified: Wed, 27 Dec 2023 18:19:21 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fc06530d-401e-00a3-0862-7ee146000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-04-26 14:41:07 UTC	15650	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-04-26 14:41:07 UTC	4664	IN	Data Raw: a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b 17 af 8a ce 37 c9 36 db ed 73 c6 5e f7 a6 5d 71 27 8b f1 12 a2 08 34 b3 5d 51 23 fb f8 b7 98 8b 21 ef ed 1b 07 ec 4b 8b e1 7e 9a ad 02 8f 30 cd da 14 7f 83 b9 d0 6e c2 6f 39 ba e4 dc Data Ascii: bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44pRd,+B"&}Ynedep_e~,1G3<@.+76s^]q'4]Q#!K~0no9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49859	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:04 UTC	640	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_4aBF4cdky--I3Cpch7JoPw2.js HTTP/1.1 Host: d712e364-d78b26f4.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://srmcorp.digitoids.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://srmcorp.digitoids.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:08 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:41:08 GMT Content-Type: application/x-javascript Content-Length: 121256 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 1796120 cache-control: public, max-age=31536000 etag: 0x8DC55179E1E3E92 last-modified: Fri, 05 Apr 2024 02:25:10 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8cce3d7d-b01e-0058-7291-876104000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-04-26 14:41:08 UTC	15638	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd fb 7b e3 38 8e 00 f8 fb fd 15 8e 66 2e 63 77 14 97 e5 57 6c a5 d5 59 e7 55 95 ed 24 ce c4 49 77 ef a6 32 f9 64 89 76 d4 91 25 af 24 e7 31 8e f7 6f 3f 00 24 25 4a 96 53 55 b3 7b 77 df 7d d7 bb 53 b1 48 f0 05 82 20 00 82 e0 a7 9f b6 fe 8f ca 4f 95 dd ef ff af 32 ba 19 5c df 54 86 a7 95 9b 2f 67 d7 c7 95 2b f8 fa 8f ca e5 f0 e6 ec e8 e4 fb eb c1 46 f1 7f 37 8f 5e 5c 99 78 3e ab c0 df b1 1d 33 b7 12 06 95 30 aa 78 81 13 46 f3 30 b2 13 16 57 66 f0 6f e4 d9 7e 65 12 85 b3 4a f2 c8 2a f3 28 fc 93 39 49 5c f1 bd 38 81 42 63 e6 87 2f 95 2a 54 17 b9 95 2b 3b 4a de 2a 67 57 b5 3a d4 cf a0 36 6f ea 05 50 da 09 e7 6f f0 fb 31 a9 04 61 e2 39 ac 62 07 2e d5 e6 c3 47 10 b3 ca 22 70 59 54 79 79 f4 9c c7 ca 85 e7 44 61 1c 4e 92 4a c4 1c Data Ascii: {8f.cwWlYU$Iw2dv%$1o?$%JSU{w}SH O2\T/g+F7^\x>30xF0Wfo~eJ(9I\8Bc/T+;J*gW:6oPo1a9b.G"pYTyyDaNJ
2024-04-26 14:41:08 UTC	16379	IN	Data Raw: 60 63 f8 35 e0 cf c3 93 ab 79 4a f1 f1 fb bb a4 ad 7a f9 cd 96 ea 8f d6 08 eb 4e b1 01 c6 79 4a 87 b5 59 a7 f8 1a 31 7f 9a 82 64 33 ed 2f ff fd 97 0b 86 32 13 ca 52 0f e7 23 f8 e6 f1 bc 98 6b 2d 45 20 29 fe 8a 2f e4 cc f9 43 a1 fc 20 03 21 31 c6 93 d0 1f 30 3f 0d 10 90 3d 3c 20 aa 94 6f 8c e6 c1 44 62 a1 69 0a 39 c1 99 11 76 e1 32 4c 30 8c 1d e9 5a 14 e4 89 7e 5e fd 7e 6c 1a 78 db fc 11 63 61 e0 b3 b7 3c 62 98 b4 29 c8 c0 1e 18 15 23 0b ed 41 52 e3 05 ec b9 03 df b3 63 0a 8a 35 1b a3 e7 3b 7f ee 40 3e 70 5b 9a 2c 6a b9 f1 12 3f 7b 71 38 7d 34 94 1e 7d 2d 2d f7 5b d3 ec 6c c8 f8 9d f9 b0 2c 18 af 92 02 a6 88 cb 3f 3c ce 55 e2 b1 98 c7 59 b8 88 6d 0a 3c 42 c1 bf e8 97 a1 63 cc 30 19 fa 82 62 ab 9c b9 73 6b 09 f9 18 c2 04 1f 8c a6 50 13 74 3d e2 86 33 78 e2 Data Ascii: `c5yJzNyJY1d3/2R#k-E )/C !10?=< oDbi9v2L0Z~^~lxca<b)#ARc5;@>p[,j?{q8}4}--[l,?<UYm<Bc0bskPt=3x
2024-04-26 14:41:09 UTC	13527	IN	Data Raw: 78 0c 6d e7 b9 12 ce 13 c4 fb 4a 55 28 44 a8 4d 26 5d 9d a3 e7 f3 b5 b5 35 f4 7d 2e 91 1c 54 0d 41 b6 1f 4e 14 d0 8f 6a a8 ea 71 05 99 21 36 77 54 46 4d 52 1b c9 e9 87 ec 15 14 4a 48 b2 4b 79 79 1d 30 62 f2 19 05 67 f0 4f 7e 05 68 0e 05 29 92 5e 61 75 54 f2 0f 2c b8 03 a4 27 25 4f c4 f2 9e 50 d8 09 c4 c3 33 94 5d 69 f7 3b 80 f0 40 12 2a 3c c4 ec f8 b5 c7 ad 02 82 03 7f b5 d7 f5 62 62 57 74 49 90 db 86 02 51 14 74 26 f5 23 76 17 e6 65 28 10 20 47 26 73 4d b6 f5 45 4d 27 03 35 0b 1a 94 db 0b 0a 7b 63 b9 98 17 d4 dc 05 96 b9 90 26 db 8c 4a 10 eb 9e d5 04 01 ff b4 f1 04 7b 10 76 b6 dd a5 8d 08 cc 9d b7 5d ac 4f 70 8d 27 52 c1 24 24 c8 93 23 b3 73 9b 75 00 71 3b 1d df cb fd ad 6b 2c ce de 22 f0 42 cf f3 b7 88 60 d7 95 91 1a 9b a2 74 5c f8 78 96 9e 68 99 66 1d Data Ascii: xmJU(DM&]5}.TANjq!6wTFMRJHKyy0bgO~h)^auT,'%OP3]i;@*<bbWtIQt&#ve( G&sMEM'5{c&J{v]Op'R$$#suq;k,"B`t\xhf
2024-04-26 14:41:09 UTC	2857	IN	Data Raw: df b2 34 59 09 7e cb fc 06 72 db 51 55 89 63 0b 4f d2 9b 86 21 c3 c5 62 24 bd 55 e5 8b b8 a2 c6 54 dd e2 3e f9 48 70 1c 1a fb 61 c9 46 30 36 26 da d1 78 b8 dc d1 4d 46 de 39 52 0a a1 d9 1f 4d 07 e2 6d 2c 46 03 44 80 51 c0 f6 63 1f b9 0b 88 36 55 5e 2b 94 29 a2 1e 25 8a 0f 19 8b 4a 3c d8 77 c0 9a 38 32 92 be cc 18 cc c2 3c 4f 59 27 83 f3 a4 72 07 54 79 1f 45 77 e9 59 76 8e 3a 79 03 ab f8 a8 33 82 e2 d1 d9 e0 6c c4 e1 6c ce 43 fa 79 1b 8d a6 62 a6 1e 98 5c e9 e7 55 e0 28 8d b1 00 2d 63 e4 a7 4d 25 80 92 96 0b a1 93 a4 09 bc 64 53 39 f4 70 02 3f 6f c8 9d 47 e8 a0 0b 07 07 96 d4 ad 91 21 e8 2b cc 3a ee 57 f1 60 80 4c fb 84 6f dd 18 7e d0 28 69 8c 57 7d b9 45 f9 d9 f8 1c ae f0 b4 a4 78 de 11 76 04 dc e2 09 9d d7 6d 27 2f f5 9b 73 bf 02 7e 70 bf 49 a9 17 8a e2 Data Ascii: 4Y~rQUcO!b$UT>HpaF06&xMF9RMm,FDQc6U^+)%J<w82<OY'rTyEwYv:y3llCyb\U(-cM%dS9p?oG!+:W`Lo~(iW}Exvm'/s~pI
2024-04-26 14:41:09 UTC	16384	IN	Data Raw: e0 07 a3 83 ed 16 d9 35 52 b0 79 5a 78 ba 59 27 74 b3 e2 7e c5 1c 91 e4 bf 83 28 94 86 98 a3 be 72 8d 73 d3 0f 73 fe b5 47 47 8c 7e 0e 7b 6c e3 f9 63 8f 81 d6 71 b0 cf 0a a5 8e f4 94 eb 70 b9 cc ab 66 e1 19 c4 97 77 2f 63 59 c6 40 96 1d 11 31 10 f7 4d de bf 09 5a e5 18 94 21 e9 b0 c7 88 10 f2 36 5c 39 18 35 38 af 18 70 53 cd 42 79 f2 81 39 aa 19 ea f9 c9 a9 a8 a9 49 d0 56 1a cc c8 62 73 ab 3a c2 54 b0 b4 d6 26 63 73 76 fc ed 51 6b 27 e6 6c 88 27 c9 03 f7 ef 3c ff 2e f8 9d 3f a4 1c e4 2e 7c f8 dd 06 e2 22 38 0d 1f a4 fd db d9 39 86 1a cf fa 61 6b e6 67 ea f0 cd 51 86 25 09 4d 1e a2 5e ab 7c 0c a5 36 29 b9 94 82 29 ba b1 9f 74 85 b4 bd f7 da b6 9a a8 e4 34 c6 c1 29 22 ae 11 ca 8d af 7a c8 96 b8 ea b1 78 b9 10 b2 fc 1c 61 fa cf 11 de 17 2e 0f 5b c5 3f 28 e8 Data Ascii: 5RyZxY't~(rssGG~{lcqpfw/cY@1MZ!6\958pSBy9IVbs:T&csvQk'l'<.?.\|"89akgQ%M^\|6))t4)"zxa.[?(
2024-04-26 14:41:09 UTC	16384	IN	Data Raw: 37 18 24 e6 cf 14 ba 51 1b ef 5d c3 1a 65 90 14 40 cd 2a 32 6f a4 54 88 c0 49 10 06 eb 03 46 9c 4e 5e 96 92 86 37 3e 0d cf dc c1 da 5a 28 89 fc 60 1a 28 48 88 cd ce e8 5e 06 98 c5 5c 19 5d 03 12 69 44 6f 7f 9f f7 71 28 41 c6 e1 c3 95 38 6c b9 ce d5 75 aa 00 2b 68 a1 6c 60 d1 a0 52 e6 e5 17 c9 1a 92 16 89 ab c6 e8 71 1b 86 d9 b1 22 fe 30 10 14 7b d4 5f 13 a1 9c ab 9f e1 17 e2 25 68 4f 4c 4c b4 0f 9d c7 ba cf de 75 70 f1 7c f2 f0 b0 e1 d1 a7 d6 2e d6 36 06 ba 87 d9 cb 60 c2 66 0f dc 88 82 c2 9b 89 50 0b 20 61 80 73 4c 1d 12 a9 d7 ae c1 07 ce 9d 75 2f 7b be 41 67 d0 cb 60 3c c8 e9 9d 02 c9 3d f3 61 46 12 23 3d 38 83 8e f3 34 a7 1f c3 88 ff f8 53 87 7e 90 54 3d f2 0a be 41 bf dc b5 0d 3f a7 ff 32 d5 86 29 da 3c c7 3f d7 f8 27 0b 26 f4 a5 8b 41 f6 f0 90 0f dc Data Ascii: 7$Q]e@*2oTIFN^7>Z(`(H^\]iDoq(A8lu+hl`Rq"0{_%hOLLup\|.6`fP asLu/{Ag`<=aF#=84S~T=A?2)<?'&A
2024-04-26 14:41:09 UTC	16384	IN	Data Raw: ce 12 cf 86 aa 17 bb 02 e2 1c ea b1 0b dc 06 13 14 4c 58 6e c0 c2 d8 dd cf 3a 19 cd c8 f2 c3 4c 58 51 1c 41 49 71 ec 54 32 57 c4 4e e6 da 96 e3 70 0f 96 c1 7e 3a 4b 6c 88 05 37 85 2a 11 72 01 0e 6e 09 c6 60 09 f8 01 a9 2c d0 93 6f b7 cd b2 da 8d d1 8c e2 18 f6 a8 0b 13 26 12 5e cc 5c 47 f0 58 72 e9 5a 59 10 90 90 dc 0f 3d 79 89 05 1a 8d 58 9a f9 58 13 cb 87 60 72 38 8b 3d 8f b4 e7 00 82 7d 3f 53 67 34 a3 d4 07 f9 64 d2 8b 2c b0 71 37 b4 6c 2f b2 19 66 13 2c 56 58 96 b3 17 4e ee f8 89 e3 08 c8 bc 8c cc 42 db 8a 21 c9 1d 26 6c cf 8e 20 df 23 2f 8c c3 bd 74 63 34 a3 58 f8 61 64 5b 81 eb 44 9e 65 d1 c0 ac d4 f2 a1 b8 10 53 0f 6e b9 f7 b6 d6 19 2c 42 9b 59 51 e4 89 98 7b d0 cf 25 38 9f e0 69 ca 60 0f 30 8f 8b db ed 8b ae 76 63 34 23 2e 7d 99 5a 0c 8a 11 63 a1 Data Ascii: LXn:LXQAIqT2WNp~:Kl7*rn`,o&^\GXrZY=yXX`r8=}?Sg4d,q7l/f,VXNB!&l #/tc4Xad[DeSn,BYQ{%8i`0vc4#.}Zc
2024-04-26 14:41:09 UTC	16384	IN	Data Raw: 4c df 33 e2 64 d4 cb 17 c6 e4 2f a4 55 fe 6e c1 2c b7 5b 54 90 c3 ae 5c 08 5a ce d7 cf 83 76 08 8e 66 a6 fd ca ca 69 46 45 e3 db 72 02 b7 d9 3d b7 d1 47 f7 c7 cf ae ad a3 7e be fe 0b 95 9b 79 cd 32 ea 2c f1 c5 f7 5f 84 2c df 2e 8a 8b 93 b2 78 fa ab e4 97 8b 15 af d0 fa e7 cf b7 a3 53 36 6f 6a 46 7f fd 42 fc ff 8b 50 b7 69 fc 76 74 6d c0 fe d2 14 fd 55 e1 67 b3 6c 75 e9 c9 c6 b6 aa ef 7f 44 8c 38 b9 90 52 a4 97 e7 17 7b 17 e7 2d cc 29 4d 37 5f a1 3c ff c3 e3 dd 1e 25 e4 7f bc 56 3b 1c b2 f9 03 d8 b0 bf 41 e4 cf 57 61 a6 bc ca a7 b2 bc 89 b4 5b 50 85 af cc 4d fe db b9 2f f7 a8 64 96 34 f5 d5 ba 56 ab dc 3e 89 44 79 d1 1a 65 1e d3 01 a0 de 5f 7a d6 e7 38 d2 4d f2 e2 fc 7b da e6 84 dc 75 82 cb 1a f9 51 41 b6 24 38 1d bc a2 f4 7e eb 2f 9b 69 f6 d6 be d2 60 be Data Ascii: L3d/Un,[T\ZvfiFEr=G~y2,_,.xS6ojFBPivtmUgluD8R{-)M7_<%V;AWa[PM/d4V>Dye_z8M{uQA$8~/i`
2024-04-26 14:41:09 UTC	7319	IN	Data Raw: 06 fb 97 44 9b fb 51 b0 3f 23 5a 4a d9 d7 fe 0d d1 7c ce a3 f6 3f 42 fd 2a e3 da 7f 07 e8 af 72 ad fd 53 a8 7f 4d 57 e2 a1 3b 9f a3 e9 6a 3f d6 42 26 3c e5 4f b2 bb a7 08 fb 65 2f ea 0f 30 8e 31 1f 72 8f 0d 36 ee f7 07 b0 01 c6 bd 2c d6 dc b8 7f 97 cf 78 26 0f 1e c7 09 d4 b3 f3 1b cc 0e 41 e1 19 d6 c1 02 99 02 ce 00 4c 18 99 d6 9e 62 a6 ab af 1c ba fd 1d 5d 43 89 80 66 59 20 83 f7 fc 2b 6c d4 c8 7b f8 d3 17 f9 8f db 5b 32 e0 c8 7a 05 9b f5 f5 e2 ef e4 e6 ae 80 cc 8d b9 07 05 87 8a 02 85 70 d1 e0 b7 fd f4 73 94 f9 97 3d fe 73 80 37 f8 fa 5f 7d 37 25 9d 8f 83 03 98 06 2e 5c ee c7 54 48 41 76 8b 2c c8 4b be f0 0a b0 c0 df 24 f1 f3 79 e2 7f c4 18 da f8 ac f7 cb e0 f0 dd ec f4 97 17 52 74 d3 9c 6e 8f be 2c 40 f4 0d fa 4f bd 25 71 3f 3e 0d 18 61 3d b4 f9 32 dd Data Ascii: DQ?#ZJ\|?B*rSMW;j?B&<Oe/01r6,x&ALb]CfY +l{[2zps=s7_}7%.\THAv,K$yRtn,@O%q?>a=2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49857	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:04 UTC	659	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js HTTP/1.1 Host: d712e364-d78b26f4.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://srmcorp.digitoids.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://srmcorp.digitoids.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:07 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:41:07 GMT Content-Type: application/x-javascript Content-Length: 15776 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2023432 cache-control: public, max-age=31536000 etag: 0x8DC535BDA2DB838 last-modified: Tue, 02 Apr 2024 21:28:34 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9cf79f9a-401e-00f7-2280-852e7d000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-04-26 14:41:07 UTC	15639	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 68 86 4f 3d 10 3e f8 89 11 34 06 01 70 06 4f 24 00 01 e0 50 0a 49 46 34 81 22 d8 4b a0 1b af bb 31 1c 2e 35 8e bd f9 f0 0e be da 37 1f 7c f2 d1 17 df fd 53 36 e2 f9 77 38 3f aa aa ab ba 1b 00 39 d2 d3 ee b3 42 c1 41 77 55 65 65 65 65 65 65 66 65 65 ff e1 66 ed 4f 63 2f f0 5f 8a bd 47 f5 bb 10 bc f4 f7 1e bd 9b 97 de 8f fe cf 7b a1 88 d7 a1 5f c0 df 25 f1 71 15 84 71 f4 fa 83 1b 16 e2 06 be 6a 3c ca 77 f5 c7 4f 8e 37 ab fb ce 22 70 67 62 56 ff 43 e5 d3 6b d9 54 60 d3 a9 bb 58 bc 8c 15 04 27 76 92 df c1 1e 3c 70 b3 c6 1f ca 49 c1 27 ec c6 6b 3c 6a 40 41 69 d9 10 4e 50 9a 36 3c f8 bb 6a 14 8b 4e f0 b2 bc f7 e9 e5 8f c9 30 9c c0 f1 00 f9 97 d5 3d c2 d2 6f 78 2f 2b 00 1f fe 39 d8 73 42 f8 e7 Data Ascii: }Ms#GuhO=>4pO$PIF4"K1.57\|S6w8?9BAwUeeeeeefeefOc/_G{_%qqj<wO7"pgbVCkT`X'v<pI'k<j@AiNP6<jN0=ox/+9sB
2024-04-26 14:41:07 UTC	137	IN	Data Raw: ca 3e b2 2b a3 83 8b 34 3c 10 46 7e fc 84 4e 30 23 1e 2b 07 60 c6 88 fd 67 b5 d5 d6 01 65 7b c3 db cf 3b 7b 4f 61 6d dd 36 45 00 78 99 5d 5d 1f 7a 0f 82 51 64 da cf b9 f7 6e 44 41 58 da 92 af ec a3 26 bf a5 a5 85 7b 72 df 77 7f 67 97 56 43 9e 4d 69 cb 63 db ca 0e 74 8d e1 26 e3 dc 2f 57 77 8e d3 68 98 ea b4 fa 9c 4e bf bd 18 75 b9 51 f5 d3 a7 9f f7 1c ce 0c 5a 9a 4c 1a 7f 28 bf fe 7f 60 2d 23 9e fd d6 00 00 Data Ascii: >+4<F~N0#+`ge{;{Oam6Ex]]zQdnDAX&{rwgVCMict&/WwhNuQZL(`-#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49862	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:06 UTC	368	OUT	POST /api/report?catId=GW+estsfd+ams2 HTTP/1.1 Host: 0824a98d-d78b26f4.digitoids.com Connection: keep-alive Content-Length: 439 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:06 UTC	439	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 34 38 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 73 72 6d 63 6f 72 70 2e 64 69 67 69 74 6f 69 64 73 2e 63 6f 6d 2f 3f 68 72 6f 3d 47 4f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 37 32 2e 31 34 2e 31 39 30 2e 39 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 Data Ascii: [{"age":1,"body":{"elapsed_time":3485,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://srmcorp.digitoids.com/?hro=GO","sampling_fraction":1.0,"server_ip":"72.14.190.91","status_code":404,"type":"http.error"},"type":"network-e
2024-04-26 14:41:09 UTC	367	IN	HTTP/1.1 429 Too Many Requests Server: nginx Date: Fri, 26 Apr 2024 14:41:09 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close request-context: appId=cid-v1:20c536d6-d891-4743-bdc8-f66a2e341114 access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-04-26 14:41:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49863	142.250.217.228	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:07 UTC	1181	OUT	GET /pagead/1p-user-list/983229078/?random=1714142454208&cv=11&fst=1714140000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v870230210z86436058za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link&label=-kjjCLrl1wQQlsXr1AM&hn=www.googleadservices.com&frm=0&tiba=Runrun.it%20%7C%20Process%20and%20Projects%20Manager&npa=0&pscdl=noapi&auid=922323486.1714142446&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqgJbM5-fvT9UQ3q2WY4AOp-WioHycxQXBS_q6P3M7wVm0Wt1w&random=1032738256&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:08 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 14:41:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49864	142.250.217.228	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:07 UTC	1155	OUT	GET /pagead/1p-user-list/380335026/?random=1714142458810&cv=11&fst=1714140000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v879103583z86436058za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frunrun.it%2Fen-US%3Futm_source%3Dplg%26utm_medium%3Dsharing_page_footer%26utm_campaign%3Dfooter_link&hn=www.googleadservices.com&frm=0&tiba=Runrun.it%20%7C%20Process%20and%20Projects%20Manager&npa=0&pscdl=noapi&auid=922323486.1714142446&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqGDi3QA6hLn7L9cq8fghWstEGNLA4uI3Tf0WxscKvusQmM-Hq&random=1744958236&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:08 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 14:41:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49865	142.250.189.132	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:11 UTC	826	OUT	GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll&co=aHR0cHM6Ly9ydW5ydW4uaXQ6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=6jc322lewbb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:11 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18268 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 24 Apr 2024 18:09:12 GMT Expires: Thu, 24 Apr 2025 18:09:12 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 160319 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 14:41:11 UTC	443	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 21 28 4e 3d 28 52 3d 65 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 52 29 7c 7c 21 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4e 3b 74 72 79 7b 4e 3d 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 70 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p}
2024-04-26 14:41:11 UTC	1255	IN	Data Raw: 72 65 61 74 65 53 63 72 69 70 74 28 50 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 50 29 7b 72 65 74 75 72 6e 22 22 2b 50 7d 7d 28 65 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 52 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 72 65 74 75 72 6e 20 52 5b 4e 5d 3c 3c 32 34 7c 52 5b 28 4e 7c 30 29 2b 31 5d 3c 3c 31 36 7c 52 5b 28 4e 7c 30 29 2b 32 5d 3c 3c 38 7c 52 5b 28 4e 7c 30 29 2b 33 5d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 34 33 38 Data Ascii: reateScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438
2024-04-26 14:41:11 UTC	1255	IN	Data Raw: 2e 67 5b 77 5d 2c 52 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 66 6f 72 28 4e 3d 5b 5d 3b 52 2d 2d 3b 29 4e 2e 70 75 73 68 28 32 35 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 4e 3d 4e 2e 58 5b 52 5d 2c 4e 29 29 74 68 72 6f 77 5b 4d 2c 33 30 2c 52 5d 3b 69 66 28 4e 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 4e 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 28 4e 2e 63 72 65 61 74 65 28 33 2a 52 2a 52 2b 32 31 2a 52 2b 2d 33 34 29 2c 4e 29 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 50 52 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 2c 6b 2c 50 29 7b 72 65 74 75 72 6e 20 50 3d Data Ascii: .g[w],R);return N},c=function(R,N){for(N=[];R--;)N.push(255Math.random()\|0);return N},Z=function(R,N){if(void 0===(N=N.X[R],N))throw[M,30,R];if(N.value)return N.create();return(N.create(3RR+21R+-34),N).prototype},PR=function(R,N,p,e,w,T,k,P){return P=
2024-04-26 14:41:11 UTC	1255	IN	Data Raw: 54 2e 67 69 3d 66 2c 32 5d 5d 2c 66 29 3c 3c 33 29 2d 34 3b 74 72 79 7b 54 2e 63 4f 3d 74 41 28 52 65 28 54 2c 28 66 7c 30 29 2b 34 29 2c 52 65 28 54 2c 66 29 2c 79 29 7d 63 61 74 63 68 28 61 29 7b 74 68 72 6f 77 20 61 3b 7d 7d 54 2e 70 75 73 68 28 54 2e 63 4f 5b 50 26 37 5d 5e 6b 29 7d 2c 77 3d 5a 28 35 39 2c 4e 29 29 3a 52 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 54 2e 70 75 73 68 28 6b 29 7d 2c 65 26 26 52 28 65 26 32 35 35 29 2c 4e 3d 70 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 4e 3b 65 2b 2b 29 52 28 70 5b 65 5d 29 7d 2c 45 2c 56 30 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 28 70 3d 74 79 70 65 6f 66 20 52 2c 70 29 29 69 66 28 52 29 7b 69 66 28 52 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 Data Ascii: T.gi=f,2]],f)<<3)-4;try{T.cO=tA(Re(T,(f\|0)+4),Re(T,f),y)}catch(a){throw a;}}T.push(T.cO[P&7]^k)},w=Z(59,N)):R=function(k){T.push(k)},e&&R(e&255),N=p.length,e=0;e<N;e++)R(p[e])},E,V0=function(R,N,p){if("object"==(p=typeof R,p))if(R){if(R instanceof Array)r
2024-04-26 14:41:11 UTC	1255	IN	Data Raw: 37 37 2c 28 4b 28 33 33 36 2c 52 2c 28 4b 28 34 38 35 2c 28 4b 28 28 64 28 35 35 2c 52 2c 28 4b 28 28 64 28 28 64 28 35 30 33 2c 52 2c 28 4b 28 31 32 37 2c 28 64 28 32 39 38 2c 52 2c 63 28 28 4b 28 34 31 38 2c 52 2c 28 4b 28 33 37 2c 52 2c 28 64 28 28 64 28 33 30 31 2c 52 2c 28 64 28 31 36 37 2c 28 4b 28 28 64 28 35 39 2c 52 2c 5b 30 2c 28 4b 28 31 37 31 2c 52 2c 28 4b 28 32 35 2c 28 4b 28 31 31 37 2c 28 4b 28 31 35 33 2c 52 2c 28 64 28 31 36 33 2c 52 2c 28 64 28 33 33 31 2c 28 64 28 34 33 38 2c 52 2c 28 52 2e 61 79 3d 28 4e 3d 28 28 52 2e 57 4f 3d 32 35 2c 52 29 2e 53 3d 28 52 2e 50 3d 5b 5d 2c 28 52 2e 54 3d 28 52 2e 6a 3d 66 61 6c 73 65 2c 52 29 2c 52 29 2e 4c 43 3d 30 2c 52 2e 5a 3d 28 28 28 28 52 2e 73 3d 30 2c 52 2e 59 3d 76 6f 69 64 20 30 2c 52 2e Data Ascii: 77,(K(336,R,(K(485,(K((d(55,R,(K((d((d(503,R,(K(127,(d(298,R,c((K(418,R,(K(37,R,(d((d(301,R,(d(167,(K((d(59,R,[0,(K(171,R,(K(25,(K(117,(K(153,R,(d(163,R,(d(331,(d(438,R,(R.ay=(N=((R.WO=25,R).S=(R.P=[],(R.T=(R.j=false,R),R).LC=0,R.Z=((((R.s=0,R.Y=void 0,R.
2024-04-26 14:41:11 UTC	1255	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 64 28 28 66 3d 28 61 3d 56 28 28 79 3d 56 28 50 29 2c 50 29 29 2c 56 29 28 50 29 2c 66 29 2c 50 2c 5a 28 79 2c 50 29 7c 7c 5a 28 61 2c 50 29 29 7d 29 2c 39 34 31 29 29 2c 34 34 29 2c 52 2c 72 29 2c 31 37 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 21 58 28 66 2c 74 72 75 65 2c 66 61 6c 73 65 2c 50 29 26 26 28 66 3d 54 32 28 50 29 2c 61 3d 66 2e 73 52 2c 79 3d 66 2e 6e 43 2c 50 2e 54 3d 3d 50 7c 7c 61 3d 3d 50 2e 5a 55 26 26 79 3d 3d 50 29 26 26 28 64 28 66 2e 7a 73 2c 50 2c 61 2e 61 70 70 6c 79 28 79 2c 66 2e 67 29 29 2c 50 2e 41 3d 50 2e 4e 28 29 29 7d 29 2c 30 29 29 2c 35 30 38 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 2c 74 2c 47 2c 53 2c 43 2c 62 2c 42 2c Data Ascii: ,function(P,f,y,a){d((f=(a=V((y=V(P),P)),V)(P),f),P,Z(y,P)\|\|Z(a,P))}),941)),44),R,r),17),R,function(P,f,y,a){!X(f,true,false,P)&&(f=T2(P),a=f.sR,y=f.nC,P.T==P\|\|a==P.ZU&&y==P)&&(d(f.zs,P,a.apply(y,f.g)),P.A=P.N())}),0)),508),R,function(P,f,y,a,t,G,S,C,b,B,
2024-04-26 14:41:11 UTC	1255	IN	Data Raw: 50 29 2c 50 29 29 2c 56 29 28 50 29 2c 5a 28 66 2c 50 29 29 2c 74 29 2c 50 29 2c 5a 28 53 2c 50 29 29 2c 79 3d 5a 28 79 2c 50 29 2c 53 29 29 29 7b 66 6f 72 28 61 20 69 6e 20 47 3d 5b 5d 2c 53 29 47 2e 70 75 73 68 28 61 29 3b 53 3d 47 7d 69 66 28 50 2e 54 3d 3d 50 29 66 6f 72 28 66 3d 30 3c 66 3f 66 3a 31 2c 50 3d 53 2e 6c 65 6e 67 74 68 2c 61 3d 30 3b 61 3c 50 3b 61 2b 3d 66 29 74 28 53 2e 73 6c 69 63 65 28 61 2c 28 61 7c 30 29 2b 28 66 7c 30 29 29 2c 79 29 7d 7d 29 2c 52 29 2e 48 4f 3d 30 2c 52 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 28 61 3d 56 28 28 79 3d 28 66 3d 56 28 50 29 2c 56 28 50 29 29 2c 50 29 29 2c 50 2e 54 3d 3d 50 29 26 26 28 79 3d 5a 28 79 2c 50 29 2c 61 3d 5a 28 61 2c 50 29 2c 5a 28 66 2c 50 29 5b 79 5d 3d 61 2c 32 34 Data Ascii: P),P)),V)(P),Z(f,P)),t),P),Z(S,P)),y=Z(y,P),S))){for(a in G=[],S)G.push(a);S=G}if(P.T==P)for(f=0<f?f:1,P=S.length,a=0;a<P;a+=f)t(S.slice(a,(a\|0)+(f\|0)),y)}}),R).HO=0,R),function(P,f,y,a){(a=V((y=(f=V(P),V(P)),P)),P.T==P)&&(y=Z(y,P),a=Z(a,P),Z(f,P)[y]=a,24
2024-04-26 14:41:11 UTC	1255	IN	Data Raw: 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 28 52 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 70 28 4e 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 5d 7d 2c 72 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 29 7b 72 65 74 75 72 6e 20 5a 28 28 64 28 34 33 38 2c 52 2c 28 46 79 28 4e 2c 28 28 65 3d 5a 28 34 33 38 2c 52 29 2c 52 2e 50 29 26 26 65 3c 52 2e 73 3f 28 64 28 34 33 38 2c 52 2c 52 2e 73 29 2c 5a 65 28 52 2c 70 29 29 3a 64 28 34 33 38 2c 52 2c 70 29 2c 52 29 29 2c 65 29 29 2c 32 36 31 29 2c 52 29 7d 2c 4e 5f 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 72 65 74 75 72 6e 28 70 3d 6c 5b 4e 2e 57 5d 28 4e 2e 4f 52 29 2c 70 5b 4e 2e 57 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: rn[function(){return N},(R(function(p){p(N)}),function(){})]},r=this\|\|self,Ie=function(R,N,p,e){return Z((d(438,R,(Fy(N,((e=Z(438,R),R.P)&&e<R.s?(d(438,R,R.s),Ze(R,p)):d(438,R,p),R)),e)),261),R)},N_=function(R,N,p){return(p=l[N.W](N.OR),p[N.W]=function(){
2024-04-26 14:41:11 UTC	1255	IN	Data Raw: 5b 4e 5d 7c 30 29 2d 28 52 5b 28 28 4e 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 65 7c 30 29 5e 28 31 3d 3d 4e 3f 65 3c 3c 70 3a 65 3e 3e 3e 70 29 7d 63 61 74 63 68 28 77 29 7b 74 68 72 6f 77 20 77 3b 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 29 7b 69 66 28 21 70 2e 72 69 26 26 28 54 3d 76 6f 69 64 20 30 2c 4e 26 26 4e 5b 30 5d 3d 3d 3d 4d 26 26 28 54 3d 4e 5b 32 5d 2c 52 3d 4e 5b 31 5d 2c 4e 3d 76 6f 69 64 20 30 29 2c 65 3d 5a 28 31 37 32 2c 70 29 2c 30 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 77 3d 5a 28 33 33 31 2c 70 29 3e 3e 33 2c 65 2e 70 75 73 68 28 52 2c 77 3e 3e 38 26 32 35 35 2c 77 26 32 35 35 29 2c 76 6f 69 64 20 30 21 3d 54 26 26 65 2e 70 75 73 68 28 54 26 32 35 35 29 29 2c 52 3d 22 22 2c 4e 26 26 28 4e 2e 6d 65 Data Ascii: [N]\|0)-(R[((N\|0)+1)%3]\|0)-(e\|0)^(1==N?e<<p:e>>>p)}catch(w){throw w;}},n=function(R,N,p,e,w,T){if(!p.ri&&(T=void 0,N&&N[0]===M&&(T=N[2],R=N[1],N=void 0),e=Z(172,p),0==e.length&&(w=Z(331,p)>>3,e.push(R,w>>8&255,w&255),void 0!=T&&e.push(T&255)),R="",N&&(N.me
2024-04-26 14:41:11 UTC	1255	IN	Data Raw: 65 2e 41 3d 54 3b 69 66 28 21 6b 7c 7c 54 2d 65 2e 43 3c 65 2e 42 4f 2d 28 70 3f 32 35 35 3a 4e 3f 35 3a 32 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 20 65 2e 5a 3d 28 64 28 34 33 38 2c 28 70 3d 5a 28 28 65 2e 74 54 3d 52 2c 4e 29 3f 33 33 31 3a 34 33 38 2c 65 29 2c 65 29 2c 65 2e 73 29 2c 65 2e 56 2e 70 75 73 68 28 5b 69 47 2c 70 2c 4e 3f 52 2b 31 3a 52 2c 65 2e 44 2c 65 2e 6a 2c 65 2e 76 2c 65 2e 69 5d 29 2c 44 65 29 2c 74 72 75 65 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 4e 2e 42 3d 28 28 4e 2e 42 3f 4e 2e 42 2b 22 7e 22 3a 22 45 3a 22 29 2b 52 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 52 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 30 2c 32 30 34 38 29 7d 2c 44 65 3d 72 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 Data Ascii: e.A=T;if(!k\|\|T-e.C<e.BO-(p?255:N?5:2))return false;return e.Z=(d(438,(p=Z((e.tT=R,N)?331:438,e),e),e.s),e.V.push([iG,p,N?R+1:R,e.D,e.j,e.v,e.i]),De),true},H=function(R,N){N.B=((N.B?N.B+"~":"E:")+R.message+":"+R.stack).slice(0,2048)},De=r.requestIdleCallba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49867	142.250.189.132	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:11 UTC	838	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll&co=aHR0cHM6Ly9ydW5ydW4uaXQ6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=6jc322lewbb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:11 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Fri, 26 Apr 2024 14:41:11 GMT Date: Fri, 26 Apr 2024 14:41:11 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 14:41:11 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');
2024-04-26 14:41:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49868	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:11 UTC	801	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: l1ve.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://srmcorp.digitoids.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="
2024-04-26 14:41:14 UTC	514	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:41:14 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1160 Connection: close cache-control: max-age=315360000 vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C514_BL2 x-ms-request-id: a7ce9921-4e24-4400-98f4-2f782c01d730 ppserver: PPV: 30 H: BL02EPF0001D79E V: 0 content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-04-26 14:41:14 UTC	1160	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 56 6d 6f db 36 10 fe de 5f 61 0b 85 41 ce 9c 62 39 8e 93 c8 61 8a a1 db 50 17 4b 1a 24 1d f6 41 d5 00 9a a4 6c 6e 32 29 90 b4 d3 c2 d1 7f df e9 cd 76 32 14 29 0c 2b f2 bd 3c 7c 9e d3 dd 45 57 8e 5b 55 f8 9e ff 56 48 1a 78 f9 d5 9f fc c3 b6 ac b1 06 d7 6f 7a fd 6c a3 b9 57 46 23 4d 3c de 65 c6 a2 2d b3 3d d9 53 ba e7 b1 4e 64 4a 3d 5c 4a e4 57 ca 91 43 30 84 b6 f7 3d 8f 14 de a9 0c c9 44 a5 d8 4a bf b1 ba 57 dd 87 f2 6b 61 ac 77 b3 0a d0 d1 ca 44 77 ad 2d de 95 44 89 58 91 dc 30 21 45 dc 8f ca 59 9b aa ab 54 ce f2 1c b9 0e 81 c0 67 7f ef 31 fc 68 d2 68 7f 74 70 94 35 6f ba db 03 f9 70 4d 41 54 c8 a9 84 6b 41 83 80 78 34 c2 25 4a 5e 68 ee 84 c8 5a 56 5b 01 4f 97 09 4f 89 a4 23 a2 a8 0f 73 a9 97 7e 35 93 57 6a 36 1c 4a 0c 72 Data Ascii: Vmo6_aAb9aPK$Aln2)v2)+<\|EW[UVHxozlWF#M<e-=SNdJ=\JWC0=DJWkawDw-DX0!EYTg1hhtp5opMATkAx4%J^hZV[OO#s~5Wj6Jr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49871	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:12 UTC	746	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js HTTP/1.1 Host: d712e364-d78b26f4.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://srmcorp.digitoids.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="
2024-04-26 14:41:15 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:41:15 GMT Content-Type: application/x-javascript Content-Length: 54361 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2023440 cache-control: public, max-age=31536000 etag: 0x8DC4F6D50F3D2E7 last-modified: Thu, 28 Mar 2024 21:23:30 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bbd00743-701e-00d0-7180-856e40000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-04-26 14:41:15 UTC	13689	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 7b db 46 92 30 fa 7d 7f 05 85 67 46 06 4c 90 22 a9 8b 65 52 10 c7 76 92 79 bd 4f 12 fb d8 ce bc 67 8f cc c9 03 81 a0 84 98 02 b8 b8 d8 d6 88 dc df 7e aa aa ef 40 83 92 af c9 66 3c bb b1 88 46 a3 2f d5 dd d5 75 af bd fb 3b ff d1 b9 df e9 dd fd 7f 9d 97 af 1e bd 78 d5 79 f6 43 e7 d5 ff 79 fa e2 bb ce 73 78 fa af ce cf cf 5e 3d 7d f2 fd dd db c1 4e f1 bf 57 97 49 d1 59 24 cb b8 03 7f cf c3 22 9e 77 b2 b4 93 e5 9d 24 8d b2 7c 95 e5 61 19 17 9d 2b f8 37 4f c2 65 67 91 67 57 9d f2 32 ee ac f2 ec b7 38 2a 8b ce 32 29 4a f8 e8 3c 5e 66 ef 3a 2e 34 97 cf 3b cf c3 bc bc ee 3c 7d ee f5 a1 fd 18 5a 4b 2e 92 14 be 8e b2 d5 35 fc be 2c 3b 69 56 26 51 dc 09 d3 39 b5 b6 84 87 b4 88 3b 55 3a 8f f3 ce bb cb 24 ba ec fc 94 44 79 56 64 Data Ascii: k{F0}gFL"eRvyOg~@f<F/u;xyCysx^=}NWIY$"w$\|a+7OeggW28*2)J<^f:.4;<}ZK.5,;iV&Q9;U:$DyVd
2024-04-26 14:41:15 UTC	16384	IN	Data Raw: bf d4 06 c1 6e ab 2f c0 47 5d 91 e4 83 67 ee 15 79 12 c5 33 d3 7d 94 14 bf 8b c3 89 cd c1 00 21 06 ff 45 c5 bc e2 ab de 85 79 53 e6 10 eb 51 ba 6e 90 ec 18 33 bb 6d 69 dd 89 47 28 67 08 2b d7 ec 36 e1 42 0d d1 92 8c e4 e6 92 3c 62 9c c6 16 4d 35 d3 3f 57 7a 2a 65 8c cc 95 50 59 7b 12 e2 72 9b fe 19 6d 56 34 cd f3 85 7f a1 6b 9e 2f 50 f3 7c bc 5d f3 cc 65 f1 24 b1 55 82 5a ae 1b c5 9d 82 76 4a 5a 2e 65 e0 d0 54 7f 99 9f e9 fd 65 d8 df c3 bb 6b ba ff c4 76 9d d9 ef 69 76 98 68 6a 88 e4 4f a6 86 a8 2b 06 bf 90 ba ee 4f 66 b9 99 7c 1d 75 5d f2 47 54 d7 25 75 75 1d ce 27 22 6d d5 08 63 ee 46 fd 97 44 1f 00 15 f5 04 b6 27 2e 1d e6 e2 51 a5 7f 8f 53 76 1c fc 4b 42 94 07 9e bf 0a 2e 11 ab c4 bf bc f8 f1 55 f6 3c 04 8a 77 0e 25 2b f8 f1 2a fb 81 95 33 3d d8 00 a3 Data Ascii: n/G]gy3}!EySQn3miG(g+6B<bM5?WzePY{rmV4k/P\|]e$UZvJZ.eTekvivhjO+Of\|u]GT%uu'"mcFD'.QSvKB.U<w%+3=
2024-04-26 14:41:16 UTC	16384	IN	Data Raw: dc cb b2 12 f7 f2 ad 9f 85 ef 3d 0e 77 e9 af 8d 77 99 ca 77 a9 8e 77 99 ba f1 2e d3 6a bc cb 74 75 bc cb 22 fc 00 c4 82 8e 71 55 84 69 25 c8 65 6a 82 5c 16 61 aa 83 5c 16 3a c8 65 11 16 76 90 cb 2c 2c 98 40 65 46 3e 6a 8c c1 87 29 1c 82 31 5a 66 5b 5b 9b d9 e0 e3 70 6b eb 1a d8 79 b2 1b f7 32 29 dd a7 21 91 4e a1 56 60 cc b7 64 94 a6 e2 7c 5c c6 d3 19 62 4f 4d 3d b2 75 7d ed 0b f8 ff 56 1e 65 c1 6b 29 5b 0b ac 4a 54 48 20 37 1e 75 2d 68 62 0d 01 79 c5 99 17 6f cb 63 b2 2f 9b 20 a1 66 28 0d 1d 19 39 f0 19 50 75 4b 89 c0 9f 23 e0 ab 18 89 89 56 4a 86 a5 f0 22 ed d6 8f 8a e0 9a 2d bc 2b 49 e4 78 83 46 0e 42 f4 b0 79 23 c5 e1 26 78 61 55 62 62 0d c7 bd e2 12 72 fe 79 fa 94 23 54 35 04 06 d4 9e c2 24 e4 5d ed bb c2 c2 cb 86 a8 9f aa 02 a5 62 b9 5f 15 56 f8 4f Data Ascii: =wwww.jtu"qUi%ej\a\:ev,,@eF>j)1Zf[[pky2)!NV`d\|\bOM=u}Vek)[JTH 7u-hbyoc/ f(9PuK#VJ"-+IxFBy#&xaUbbry#T5$]b_VO
2024-04-26 14:41:16 UTC	7904	IN	Data Raw: 71 6e 29 ef 01 e0 9c 2e 12 99 00 2b 5d c1 3c 18 5b 6b 16 5f 64 f3 f3 29 e2 60 90 0d c6 d2 18 07 6d 76 b1 5b 15 c1 4a e5 ae 47 b3 31 73 50 49 6d 46 eb 07 59 66 e3 9c 0b b5 2c d2 96 eb d4 dc e3 3d eb 63 48 49 ea 5f 4d 1e c2 35 3a 57 e9 3d 6b 55 65 36 96 f5 16 5a f7 ea 8a 38 b6 15 82 80 4e f3 de dd 43 82 35 b6 70 f9 b0 a1 a4 c4 07 26 e1 8b 99 89 7b 75 e0 39 e5 df a0 85 57 ef 80 c5 6a 34 c2 a1 d6 eb 7b 5a 76 30 f7 06 c6 5f ce 10 c8 87 20 1f 4a 12 e0 aa 7a 57 b0 d1 f6 10 d1 66 58 9b c7 85 4b d1 7c b8 0e e4 6c 63 42 a1 21 47 16 96 c0 91 67 e4 43 60 9f 3c c8 87 67 b4 5b 16 8b 3d bc 6a 52 dc 30 7e 2f 03 66 76 e5 4c 70 ab 36 f4 7d d8 12 39 f6 30 a7 1e 36 29 c4 a6 6b 14 62 fb bf 8a 59 45 b3 aa 5b ca d5 ce c4 33 f1 4e bc 10 3f 89 f7 e2 b5 78 25 be 17 2f c5 0f e2 1b Data Ascii: qn).+]<[k_d)`mv[JG1sPImFYf,=cHI_M5:W=kUe6Z8NC5p&{u9Wj4{Zv0_ JzWfXK\|lcB!GgC`<g[=jR0~/fvLp6}906)kbYE[3N?x%/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49872	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:12 UTC	709	OUT	GET /d78b26f41a2e42509e001fd2bf0e6daa/ HTTP/1.1 Host: srmcorp.digitoids.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://srmcorp.digitoids.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: +0jwXNYpDgOaPHdoZOaD1A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-26 14:41:14 UTC	742	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 26 Apr 2024 14:41:14 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 93f44b88-bea8-4706-93d3-2adb64147300 x-ms-ests-server: 2.1.17910.10 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://0824a98d-d78b26f4.digitoids.com/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-04-26 14:41:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49873	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:12 UTC	839	OUT	GET /Prefetch/Prefetch.aspx HTTP/1.1 Host: d16adfa6-d78b26f4.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://srmcorp.digitoids.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="
2024-04-26 14:41:15 UTC	430	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 26 Apr 2024 14:41:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache x-ua-compatible: IE=Edge x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 2B70773FA0EA426D935AB0CCECF0674A Ref B: DFW311000105025 Ref C: 2024-04-26T14:41:14Z access-control-allow-origin: * access-control-allow-headers: *
2024-04-26 14:41:15 UTC	1252	IN	Data Raw: 34 64 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 Data Ascii: 4dd<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404
2024-04-26 14:41:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49876	13.32.87.81	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:13 UTC	526	OUT	GET /widget/5in4fij5 HTTP/1.1 Host: widget.intercom.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://runrun.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:13 UTC	727	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 2705 Connection: close Date: Fri, 26 Apr 2024 14:41:14 GMT Last-Modified: Fri, 26 Apr 2024 10:38:24 GMT ETag: "639100358138073092e32069f4cc78a8" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300, s-maxage=300, public Content-Encoding: gzip x-amz-version-id: vs97S4BedNsv7Q9x_pC_kgUJuuP1DPYm Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 ae1829b60febaec799bcb0313d9bcacc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Kpb8IaH80gT2ODiRvTRXKetS2_cmQyMvMouw55HMM8dDs39jYdzAKA== Cross-Origin-Resource-Policy: cross-origin Vary: Origin
2024-04-26 14:41:13 UTC	2705	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 59 0b 73 d3 3a 16 fe 2b 8e 77 27 b5 07 c5 49 4a 4b 8b 8b cb 96 52 2e 9d a5 c0 10 e6 ee dd 69 b3 19 c5 56 12 81 63 f9 ca 4a d3 dc 24 ff 7d 3f f9 15 3b 49 cb 65 06 06 5a fb e8 bc 74 74 1e 9f 4c 63 34 8b 7c c5 45 64 d9 cb 7b 2a 0d e6 2d 4f 5e 74 8f ba 6e 49 67 f6 92 39 ec 21 16 52 25 de 32 11 33 e9 b3 c1 94 c6 ae 39 e1 41 c0 a2 56 46 6a 81 64 12 1a f3 c1 90 26 0c 8b 4a c5 89 db 6e 83 d2 e2 74 ea f0 48 31 e9 0b 3c 08 93 c4 b3 61 c8 fd 41 4c d5 64 c3 f9 2d 29 99 fc 20 72 f0 ab 6d 92 64 c2 98 4a 06 b1 14 0f 8b 2d fe 82 b9 95 f1 a4 02 55 76 08 b3 48 c9 c5 5e e1 f9 7c 5e 5a 6b 49 a6 77 c7 a3 71 a6 23 95 82 fa 80 3d 38 13 35 0d 4d c2 a3 44 d1 30 1c 4c 45 c0 76 f6 17 6f f6 86 7f a5 d5 20 89 36 5c a3 e7 9d e3 80 bd 78 e9 53 ff c5 11 Data Ascii: Ys:+w'IJKR.iVcJ$}?;IeZttLc4\|Ed{*-O^tnIg9!R%239AVFjd&JntH1<aALd-) rmdJ-UvH^\|^ZkIwq#=85MD0LEvo 6\xS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49878	13.226.52.58	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:15 UTC	506	OUT	GET /frame-modern.e1eb984e.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:15 UTC	793	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 145072 Connection: close Date: Fri, 26 Apr 2024 14:41:16 GMT Last-Modified: Fri, 26 Apr 2024 10:35:28 GMT ETag: "d8bf3af29257e33695b238d38ec1fba0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: lMQ15q7R7OjAt4ub0sGpdmBCVPa4AVTO Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 4c3d8e28c41258b22a9e9534d51ead58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: fhYt1X5NXX-jMR1IGP3-PBIAtYvmqwKxdBTZfOR7arm0SzmarKxnpg== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-26 14:41:15 UTC	15591	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 07 7b db 48 b6 20 fa 57 28 5e 3f 5d 60 ba 04 31 29 90 1a b6 56 c9 96 6c 25 2b d8 b2 bd 5e 1a 24 8b 22 2c 10 a0 01 90 34 2d f1 bf ef 39 a7 aa 80 42 a0 e4 ee 99 7b 77 df fb de 37 d3 32 88 50 f1 d4 c9 c1 30 cc f6 9f 8f 53 3b 28 71 16 b1 80 79 cc 61 7e fb 71 ab 5e ab 57 5a 06 dd 53 2f 78 ed c7 b2 b5 3e b0 1d 97 f7 ad d1 b8 5e 6e d5 6b db 9b 75 06 37 3d 3f 72 06 4e cf 8e 1c df 13 8f 9a cd 7a a3 8a 8f fc 31 0f ec c8 0f e4 17 db b5 46 03 6f 87 93 ee c8 89 c4 cd 46 a3 ba b1 b9 d8 19 4c bc 1e 36 50 72 0c 6e 52 8f 51 db 87 cb 9d 80 47 93 c0 2b 05 46 64 2e e2 97 f0 c9 a3 33 30 56 02 cb 37 3c c6 4d f5 89 c7 67 a5 a3 20 f0 03 a3 7c 60 7b 30 b2 d2 c0 f1 fa a5 91 df 9f b8 bc f4 9f e5 3f f8 1f e5 ff 2c 9b 3b d1 30 f0 67 a5 c8 ea f9 7d Data Ascii: {H W(^?]`1)Vl%+^$",4-9B{w72P0S;(qya~q^WZS/x>^nku7=?rNz1FoFL6PrnRQG+Fd.30V7<Mg \|`{0?,;0g}
2024-04-26 14:41:15 UTC	127	IN	Data Raw: b7 64 0e d9 f3 b9 34 3d 5d 57 a4 e9 e9 e6 50 66 8c bd 99 c8 8c b5 b7 d7 d2 4e 15 44 b2 32 f2 64 28 ad 52 53 57 5a a5 64 7a d9 39 fb f9 e1 f7 ea 17 27 b5 35 36 b7 2a 48 3e ed e4 e0 f5 88 28 d6 b6 aa 82 3e d6 2a b5 ad 86 10 0f 44 d1 62 94 0e 64 79 62 94 0e 64 d1 e2 61 c2 f1 4f db 71 79 62 dd a9 f0 ff c3 d9 5b 47 ff 25 e9 24 07 bf 93 4e f2 fe bf 37 9d e4 e0 bf 35 9d a4 1e e5 f1 ff Data Ascii: d4=]WPfND2d(RSWZdz9'56H>(>DbdybdaOqyb[G%$N75
2024-04-26 14:41:15 UTC	16384	IN	Data Raw: a7 c7 fd 7f 41 7a dc 79 96 65 b0 ad fd cd 3e f0 68 c0 8e ce 53 ba c0 6e 5e 8f 64 5b c7 db 6f 18 c9 be ca 79 2d 88 13 34 64 2d 83 d9 a0 6d db 9a 9c fd 90 1d d1 a7 61 c4 c7 14 08 4a 61 00 32 1b 5c 08 5b 95 8a 23 ce 95 49 00 79 ac f1 2b 35 88 e7 6a de db d6 fd a7 bb 65 6f e7 ec 2d b6 f5 ba ef 6b 63 4c 59 5b 72 ef 3e bc fb 5c fc ee d1 6f 1b e9 42 eb 44 18 e9 a4 9d e0 68 83 7e 15 94 f2 c4 ec 2b 6a 1a e1 12 2b 9d 28 9b 19 b5 ff c4 3c ef 68 9a 92 35 0a 7d 38 4f d0 d4 ca 24 5d 73 4f 28 2b 3e c4 ab df ea 6b 5b 41 f0 8f 09 70 44 c1 82 8a 69 4c 2c b5 d9 20 cc a3 a5 87 4a c6 8d e1 e0 b9 d6 b0 4e 69 8c 41 28 a0 40 ac 99 e1 53 a6 79 fc f3 f8 65 02 ff 7c 85 a6 52 1a b6 bd 34 8c 18 98 32 27 e6 0a 27 6d ac 2f d4 4f d6 64 82 a4 0c b0 ae 58 8d fe d3 53 3f 59 8c 74 68 d8 92 Data Ascii: Azye>hSn^d[oy-4d-maJa2\[#Iy+5jeo-kcLY[r>\oBDh~+j+(<h5}8O$]sO(+>k[ApDiL, JNiA(@Sye\|R42''m/OdXS?Yth
2024-04-26 14:41:15 UTC	16384	IN	Data Raw: 87 bf cd eb df 8b d7 1c 89 ca 7a bf 1e 09 b8 d4 ac 58 d2 19 d6 9f cf 26 45 b7 09 a1 59 d3 11 d1 3f 67 b0 80 db 51 12 47 95 a7 9e b8 95 f5 c8 b6 ac f4 55 e3 b5 53 46 af 87 2d 3b 92 2f 82 18 c8 e0 9f 05 43 66 57 87 46 37 ec ee 35 c1 44 75 6b 45 9b 75 fc ae 54 b1 44 d6 ce ee 7a e8 c3 d6 6b 7c 65 6e 19 cb 1b 98 0d a5 b6 8e d5 05 dd ca b2 e6 43 cb ce b2 72 0b 60 b2 45 bd 51 bc 01 b5 24 0c 6b e5 5a 66 6e b9 01 42 91 ff e8 b4 e0 9e b4 72 73 b3 e9 73 5b 76 14 ea 6a 55 b7 da 17 b5 ee 54 b5 97 32 56 34 2d 03 d0 b2 57 70 a8 a3 62 56 76 55 4f 6b 84 b4 7c 45 b2 de 0b c7 1a 6d f7 f7 2b cb 6b 77 b7 da 60 c5 df 20 9c 78 b0 00 f1 83 e5 44 e3 fa b5 78 c0 ec 6e ef 82 04 8c b2 e2 d5 a9 10 52 1c cb 4e fa 27 c3 b1 5c 73 70 bc 29 fb 13 ce 90 10 77 68 ee 9a 7d 6e 52 57 09 77 ec Data Ascii: zX&EY?gQGUSF-;/CfWF75DukEuTDzk\|enCr`EQ$kZfnBrss[vjUT2V4-WpbVvUOk\|Em+kw` xDxnRN'\sp)wh}nRWw
2024-04-26 14:41:15 UTC	2048	IN	Data Raw: 45 c0 02 3f 86 68 1e 7a f6 50 35 e9 c4 50 79 a1 aa da 5c 17 41 01 c7 49 48 e1 9a 91 7d 46 c7 28 82 c2 c9 04 ce 20 58 5c 9a 42 d1 34 f1 39 9c 83 1f 25 12 fc 20 e8 24 f0 5a fd a1 16 19 cd 11 f3 93 ce ec 6e 33 02 86 53 88 36 b2 f0 2c 23 3e 7a 5f 3a 39 5f db e0 7f db b4 83 bc cf a3 86 04 28 21 ce 10 aa b8 65 64 92 0f 28 11 ed c5 a2 1c ce 65 88 c0 ce cb 67 2e 16 d4 0f fb f3 f4 10 e4 d9 05 d4 25 5f 79 23 ef 83 21 e2 f7 0b e7 47 a6 9d 02 3f 6c 39 47 7c 06 06 7e 4a 67 e0 23 a4 7d 3f 4a bd 96 b3 87 74 92 75 62 3a 27 9f 70 f1 24 4d 43 6b a7 fc 69 ed 94 3f ff a9 f4 ff 9f 37 d3 ff cf 6e a0 ff ff bc 17 fd 5f 3a ce e8 dc ec 38 a3 23 f4 ff 3e e8 ff fd db e8 ff 7f f3 d3 f8 d1 e3 3d 59 6f c8 88 b2 18 32 fe 20 60 5b 9c 08 f1 2f b0 09 63 68 9c c6 6e ac 15 61 fd 18 ee 1b e2 Data Ascii: E?hzP5Py\AIH}F( X\B49% $Zn3S6,#>z_:9_(!ed(eg.%_y#!G?l9G\|~Jg#}?Jtub:'p$MCki?7n_:8#>=Yo2 `[/chna
2024-04-26 14:41:15 UTC	16384	IN	Data Raw: 3a d0 00 3a 08 23 b8 13 8c 0e 24 17 c6 3f b8 06 db 96 1f 8e 3c c9 1f b5 3d d0 f8 19 73 dd 5c 06 51 e5 3b 81 70 1e 29 73 17 f0 18 ca 49 78 63 0d 16 70 22 cf 49 0e 89 a8 b2 fd a3 90 f8 68 a8 77 04 0d a4 e0 81 22 5e 50 49 76 e1 1a 48 05 92 3e 83 c1 03 d5 5f 69 27 2c db 09 cb 76 82 cc 6a a8 d2 a8 39 70 74 b5 7e 6d 5b cc 0f 8d 31 b7 e3 3b cf ed 96 e3 3e 4e a1 c7 42 87 61 12 e4 1e 84 71 5e 6c f4 24 21 5b e3 50 dd d5 e3 1e 8e 63 62 e9 35 4a 67 f2 47 de 85 fc 0e 1a 4d 41 e5 1b e8 e9 ca 87 95 6c 54 9e 72 3b d0 c9 f7 3b a5 48 19 a7 a9 ef 47 af 78 56 73 f6 6e a3 5c dc 08 c5 11 32 3a 0b bc c3 90 ef 24 91 b1 b7 56 aa 11 42 55 99 06 73 c0 30 03 cf 0e a1 92 27 f2 b4 72 42 a6 f5 22 62 50 e1 13 1f e7 0b 47 ab 91 f5 30 7f 47 3e d4 83 d2 b7 20 df bd 10 0e 46 70 a8 c4 03 3e Data Ascii: ::#$?<=s\Q;p)sIxcp"Ihw"^PIvH>_i',vj9pt~m[1;>NBaq^l$![Pcb5JgGMAlTr;;HGxVsn\2:$VBUs0'rB"bPG0G> Fp>
2024-04-26 14:41:15 UTC	1024	IN	Data Raw: 9a 3b 8f b3 58 85 be cf b3 11 cb f5 99 c1 3d 9f ce e2 7f 03 ea 55 b6 2a 8d ff be 99 c0 6b 36 4f a7 ad 83 49 ef d4 48 7a 08 18 90 70 58 23 9f 0d 24 3d 98 7c f9 6a 0d 9b 67 0e e4 c3 26 8a c5 7d ec 7b da d4 87 4a 35 56 1a 3a 54 e2 66 e2 98 75 aa 90 4d 20 d6 67 e8 b2 81 06 f1 ae 2c 6e e1 cc 3a 09 12 75 7b 22 7e 21 fa 87 68 72 88 2b 59 7c 12 f8 1d 0f d1 10 35 cb c7 68 50 3e f0 9f 03 04 d1 fa 43 59 e1 21 4d 4b c0 34 0c 14 08 bb c4 14 c7 09 c6 44 d5 02 15 74 3c 04 86 f4 58 57 1d 82 46 82 39 42 10 b3 fb 51 c2 d2 26 7a ae 90 24 28 46 46 7a 6f 97 c0 24 8e 68 8b f6 88 1c d3 61 0c 13 05 57 21 4e 16 44 ba be 82 1d 8a 62 71 0a 88 29 c5 cd b9 72 ab e8 10 84 86 83 10 80 8d 58 62 05 7f 0d a8 85 10 88 82 87 87 a8 be 80 f3 ca 7d 10 f8 71 5e 1f c2 e6 c4 25 a4 30 ed 75 58 f7 Data Ascii: ;X=U*k6OIHzpX#$=\|jg&}{J5V:TfuM g,n:u{"~!hr+Y\|5hP>CY!MK4Dt<XWF9BQ&z$(FFzo$haW!NDbq)rXb}q^%0uX
2024-04-26 14:41:15 UTC	16384	IN	Data Raw: 09 2f a2 cf a4 bd b5 40 16 1a c3 41 e1 d2 86 e9 41 36 ac 6f 30 db fc 7c d8 04 b6 d1 d0 ea d4 53 d1 e8 32 46 4e 33 1a b6 73 4e ed 11 7e d3 be 13 16 42 32 6d 1b 8a d5 9d 29 f8 bd 95 e7 71 d9 84 f2 bf ac 0d 18 7f 13 51 f0 65 2a a6 6f 3f 8b e9 d7 cd e2 30 3d bd 62 12 ed fc 85 4c 6c d1 41 b1 cf ce 84 44 5b 44 60 34 61 14 84 a3 d9 8b c4 9a 91 a8 2a 78 d8 12 35 97 b0 9c 8b 8e e4 5d 85 c4 91 89 10 4a 3a f4 40 47 2b 3e 1b 15 04 6a 6c 8c 28 f7 d0 de 47 7c 46 4a 7d 0f b2 5e 10 83 dc 1c 68 41 02 e8 4e de 1b 6c 18 e1 71 c1 87 ac 17 69 d6 2e ca 18 8d 29 2c 9d 47 f1 5f e6 68 be 9d 25 7e 0e 33 ae 65 75 ef 2e 1c 44 c2 07 5d 61 c5 46 5b d9 09 ec 52 75 0a 8b 2e 8e f2 96 7b 43 87 a0 90 c1 de 84 f8 97 17 d3 0e 02 21 37 32 78 06 a0 a0 74 50 09 57 c8 b1 78 e3 21 08 27 8d e4 53 Data Ascii: /@AA6o0\|S2FN3sN~B2m)qQeo?0=bLlAD[D`4ax5]J:@G+>jl(G\|FJ}^hANlqi.),G_h%~3eu.D]aF[Ru.{C!72xtPWx!'S
2024-04-26 14:41:15 UTC	1024	IN	Data Raw: 41 79 3b 06 61 29 ec ad b6 4e d9 2b 9d 95 7a b2 24 b2 c6 65 6d 16 ca 48 99 fa 80 e3 4a 66 7d 1e 5d 38 31 b3 93 c3 8c 0a a0 ec 64 95 45 50 66 7e 53 04 e8 10 6f 44 e8 0a d6 00 d0 0c c6 65 a2 16 86 b8 cc 68 af 2c f6 b7 b9 58 32 c8 e4 a0 e1 e0 81 8a e7 82 52 01 09 62 38 fe 7c 4a 52 43 d2 17 f0 a9 0c c5 46 32 c8 5c c4 d3 53 11 da 16 93 4a 51 db 28 43 b6 fe 30 a3 5c 92 17 a3 d0 3f 0d 59 00 7c 8c 51 a8 00 63 19 30 45 89 d6 b2 69 58 02 66 2f d1 1b 5e a3 bd 1a f2 54 1e 7b a2 b0 4c 61 a5 b1 5a 8b 48 76 05 13 c5 51 81 65 c3 21 24 69 af 3e bc 54 3a 2f fe b9 eb b9 91 6a 55 7c d6 a2 e0 71 58 3b 2e a2 6e 28 df 57 70 77 57 b5 46 89 0f 6f 8d 81 d2 55 97 38 27 e4 38 e4 43 39 5d d3 be 55 ec 6f 48 31 f5 f1 be 09 91 0a 7f 00 8f 1a 81 08 48 f1 f4 47 12 0c 3d 82 a7 0f db cb 32 Data Ascii: Ay;a)N+z$emHJf}]81dEPf~SoDeh,X2Rb8\|JRCF2\SJQ(C0\?Y\|Qc0EiXf/^T{LaZHvQe!$i>T:/jU\|qX;.n(WpwWFoU8'8C9]UoH1HG=2
2024-04-26 14:41:15 UTC	16384	IN	Data Raw: 76 4d 39 91 35 48 5d 67 97 fe fb df ff 96 48 d4 43 4e 1f e8 64 3a 63 85 66 04 54 2a 1f af cd 9c 58 a5 87 d1 c3 52 a3 f2 df b5 f2 cc dd 03 ab 44 d6 40 f1 6d 11 a7 a9 9e 9e 99 d2 b3 4b 0f e6 f8 57 a5 87 c1 c3 d2 83 5a 89 67 aa ac ad 2c 14 46 95 ce 4c 68 96 48 b2 49 71 65 23 9e 09 03 33 5f 2c 2f 2c d5 8a da 1d 2e 0a 3c 18 46 df 91 54 12 af 12 d0 b0 47 e6 95 6b b5 a4 a4 35 eb 76 cc bc 92 df 93 54 72 75 b5 30 ab e4 b3 b7 e2 6c 6d 2e 88 63 f7 cb 6e ca a4 74 09 66 62 99 2b 8b 57 17 e6 17 6b da 16 46 fb c9 2d 37 1c e0 72 91 2d 0b fc 96 d2 2e 20 82 2b ec 93 d6 c3 1b af 7d d8 1d 7a 17 15 bc 65 c3 68 e0 28 25 d8 8b f3 8b 45 16 23 eb 29 70 56 97 16 17 84 81 e2 fc c2 f2 82 a5 cf 93 31 17 d0 1a c9 9c d7 11 4c 5a e5 10 6f b0 e5 6f 98 1e 52 81 17 74 2e d2 61 5c da 87 3d Data Ascii: vM95H]gHCNd:cfT*XRD@mKWZg,FLhHIqe#3_,/,.<FTGk5vTru0lm.cntfb+WkF-7r-. +}zeh(%E#)pV1LZooRt.a\=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49879	13.226.52.58	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:15 UTC	507	OUT	GET /vendor-modern.07772018.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:15 UTC	793	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 150799 Connection: close Date: Fri, 26 Apr 2024 14:41:16 GMT Last-Modified: Fri, 26 Apr 2024 10:35:29 GMT ETag: "b27b573e6b04daed0b4144a6e206ba93" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: 2pQTAyPTcBEeeFQKIQ9vlX9mhAkPn2s2 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 221c16f6368b9673111421e368023144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: CDGLfWF9M7U1n707N3qlhwSQjrhNpGbW6aK79n1Fb-lll2cIjcqy0g== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-04-26 14:41:15 UTC	15591	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 7b db 38 96 28 fc fd fd 15 36 27 ed 21 23 5a 96 e4 9d 32 a3 c9 e2 54 f9 76 12 67 62 a7 aa fa 2a 2a 3d 94 08 49 2c 53 a4 42 52 5e ca d2 7f 7f cf 39 58 08 2e 72 92 ea 9e e7 ce 87 ee ea 58 c4 0e 1c 9c 15 38 00 f6 9e 6f 6f bd 8d 93 ad 30 18 b3 28 65 5b 41 34 89 93 b9 97 05 71 b4 b5 08 99 07 51 29 63 5b b7 2c f2 e3 64 77 1e fb 2c 89 9a ad e3 e3 e3 4e ab 7d d2 fc 23 6d be bb 78 7d fe e1 ea bc 99 dd 67 5b cf f7 fe 3f 73 1a c6 23 2f bc 9e 05 69 f3 8e 8d 16 de f8 e6 f5 6c 19 dd 04 51 c6 92 71 3c 1f fe 91 ba df ce b2 5a f5 07 56 73 b1 4c 67 66 bf 7f d0 ee b4 07 f6 e3 f1 c1 c1 e1 89 63 32 3b b3 23 cb 7d f1 68 2c b1 6f 59 12 8c 33 a3 7b 39 fa 83 8d b3 a6 cf 26 41 c4 3e 26 f1 82 25 d9 83 99 d9 c6 70 c8 d2 f7 b1 bf 0c 99 61 3f de Data Ascii: i{8(6'!#Z2Tvgb**=I,SBR^9X.rX8oo0(e[A4qQ)c[,dw,N}#mx}g[?s#/ilQq<ZVsLgfc2;#}h,oY3{9&A>&%pa?
2024-04-26 14:41:15 UTC	126	IN	Data Raw: 8d 10 c1 03 2c df 01 90 e9 77 01 64 5c 03 90 f4 7f 13 40 10 63 aa f0 40 18 7c 13 41 e8 60 40 f7 5b 68 62 82 9e eb d6 82 66 8d de 98 e5 68 03 ef 55 40 15 dd a8 00 ce b0 97 22 a9 06 7e 06 48 31 9e 58 01 61 9e 94 43 a9 c4 1c ca c9 1c ae c5 4c c4 c6 aa 39 39 b8 8d 1a be 2e f2 ea d3 60 d8 1c e0 22 a9 38 19 86 2d 26 c9 a2 45 ce 8d 33 f2 ff 08 41 c7 35 c8 39 d6 11 b3 20 1e 2a 38 5a Data Ascii: ,wd\@c@\|A`@[hbfhU@"~H1XaCL99.`"8-&E3A59 *8Z
2024-04-26 14:41:15 UTC	16384	IN	Data Raw: 95 08 55 9c 7d 42 08 68 d8 ba 11 87 d7 5c 62 d6 79 b3 fe 45 f5 d2 ef 16 2f 2a 33 a4 b0 d8 a5 bb b8 76 41 f3 37 c4 3d 9f db 43 73 0c 9a f1 ad 78 83 bc 94 71 bf d9 2a 65 9c 5b e5 db 6d cb 1a c8 0b 30 74 73 43 e4 4a bc e7 bb fd 2a 8e 43 e6 c1 e8 24 a4 c8 07 c7 b2 b2 19 de f4 fc 72 4b c4 6e 11 64 b7 ee bc 74 2b 8a 33 88 8d 6f 03 9f f9 5b 59 bc 95 cd 98 48 05 c3 70 bc 0c f9 ab ee 5d a5 1e 17 2b e6 27 63 e5 69 c4 48 6a 3c 05 cb 4b 28 ce 39 b2 51 51 7c 44 b0 58 15 de ea 2f 6b f2 b8 d1 11 90 d1 41 b2 17 7d c6 02 b0 88 9a ed 8e 65 df 3a ed 35 aa d0 b1 52 b1 96 52 bc 31 f1 f1 72 8e f7 92 81 41 6d 89 bb de 6f 50 f1 6f 4a d0 bf 9e b1 f1 cd 7b 96 cd 62 1f ef 85 51 47 fc 5e 2f b3 78 32 41 95 fb 06 cd ab ef ce 3f 76 b7 53 30 19 b7 43 30 19 eb 10 81 df 77 5f ad 6c b5 aa Data Ascii: U}Bh\byE/3vA7=Csxqe[m0tsCJ*C$rKndt+3o[YHp]+'ciHj<K(9QQ\|DX/kA}e:5RR1rAmoPoJ{bQG^/x2A?vS0C0w_l
2024-04-26 14:41:15 UTC	1024	IN	Data Raw: fc c5 7b 41 98 f6 f1 1d bc c4 16 44 c5 00 b7 ae a9 1f 3e 3e 84 d7 fc 7e 04 4d 6e bf 09 02 cf b0 b4 20 a3 72 b1 0b 2c d2 a3 4d 2b 5e 62 14 3b 80 e0 f3 e3 b9 a2 6d a2 ce a7 d1 94 02 f2 ae 64 4b bb c9 b0 5e 97 29 12 4a 5d 84 79 9e ed c2 fb dd e0 d3 1a a2 78 ef 9b 0d 8f ab 7a 30 ee da 70 94 38 8c 33 2a c8 97 36 46 e9 9b f5 ca e5 ee a6 00 c3 4c 0e ee bc 8a 39 23 4f 19 61 c5 1c e4 41 7b 38 0a 2d 74 e8 6c 50 ab 5a aa 08 16 0d 50 51 a7 38 aa d4 fe 41 fb 0a 90 bc 25 93 c2 d6 8f f1 1b 4e 2f ff 67 f3 0d 82 1d 52 21 b4 c5 a2 60 6e 30 60 52 c5 78 33 a1 4e 56 e8 32 ec 07 be aa 97 6b 58 18 4b d8 0c 49 1e 49 54 89 7d 3c d8 45 bd 6f 96 a2 7b 89 ac 00 39 8e 01 86 82 a0 68 09 f6 5c c7 f6 d8 5c 43 80 dc 1e 1d 9d b3 e6 b2 82 68 86 d9 6c c2 79 f1 01 db f0 e7 46 06 87 00 be 81 Data Ascii: {AD>>~Mn r,M+^b;mdK^)J]yxz0p83*6FL9#OaA{8-tlPZPQ8A%N/gR!`n0`Rx3NV2kXKIIT}<Eo{9h\\ChlyF
2024-04-26 14:41:15 UTC	16384	IN	Data Raw: 0f b4 f9 04 df a2 24 e7 3e ce a3 25 47 dd 52 3d 99 ba 60 d3 8b 1f 54 0d 90 53 ac 15 ad 4a f1 a0 5e 9f be 42 a1 a7 ca 6d ae 1a 14 a2 50 1c 50 bb 40 b5 1d 1a 1f fb 56 bf 7b 96 38 d0 5a 99 fa e6 79 6d 21 7d 4f 5f 76 50 dd da 51 91 af 68 92 a5 4f cc 52 b6 8d d2 bb 87 9c 64 0c 7b ac 7d 5f e7 46 ba 2b f4 39 6f 8c fa de 8c 4a fa 15 b2 68 35 ea e6 d5 35 18 37 46 76 2d db 7d c5 a4 b8 01 56 37 a4 2e b1 aa d4 17 bd b6 48 70 31 03 13 31 b3 fc 45 60 39 97 97 17 2d 81 af 5a 61 8c 59 54 ce 2b 7d 19 0f 9d 6a d6 21 f5 d8 3a 02 f7 1a 40 a5 b9 0b d1 02 a3 ca 27 4d 31 76 d5 9c 4d 65 13 72 8e 75 98 70 a9 b6 0a cb d0 97 e5 44 52 82 2f 9d 9b 8d 73 a2 b7 34 28 9d 2a 2e a9 76 d4 24 b3 37 72 3e 0b 83 d0 4f 68 21 d0 c0 48 b5 4d f1 05 8a 2f 4f e7 a6 77 c3 de 60 bc ee 02 68 60 10 04 Data Ascii: $>%GR=`TSJ^BmPP@V{8Zym!}O_vPQhORd{}_F+9oJh557Fv-}V7.Hp11E`9-ZaYT+}j!:@'M1vMerupDR/s4(*.v$7r>Oh!HM/Ow`h`
2024-04-26 14:41:15 UTC	1024	IN	Data Raw: 79 19 f4 ae 91 a3 8b e8 5f 71 8d d8 27 a2 7f e1 77 41 f7 e1 5f d1 08 63 1f fb d7 aa 02 82 f2 71 bf f0 cf dd 68 a1 78 18 8f 64 24 b9 13 8e d2 2f e7 b0 ad 2d db 70 6d 82 fd 11 5f 25 ed 4d f8 5b 5c f2 92 26 74 16 8d 48 7f 51 62 da f3 e9 e0 ec 18 f3 09 b7 0c 73 e8 63 75 9f bb 07 39 c1 36 77 0d 91 3b e9 4b f8 4c b8 70 90 dc 08 86 68 f1 2f e6 4e cc 31 eb 41 98 09 98 41 98 08 99 92 bc df c6 36 d2 61 47 ec 1e 22 2b 8d e1 9a f8 26 70 04 6f b2 fc 4e 36 53 13 77 2e 24 ec 97 94 1c 9d 3c 39 02 8a 96 44 75 8d 59 00 f2 20 bb 98 c6 65 02 38 a8 93 cb a1 4c 2e 31 43 22 e5 c9 a5 48 f7 24 47 d7 48 9b 86 4d 49 f9 8f ef c7 9f c4 e6 d1 d9 55 cc 1f a9 e0 2c d7 06 07 85 53 12 1b 04 71 b7 15 d4 68 44 30 dd 48 d6 a5 77 d9 2d 39 1e 24 c7 e4 20 8e fc 1f e2 89 7b 25 62 34 25 93 17 54 Data Ascii: y_q'wA_cqhxd$/-pm_%M[\&tHQbscu96w;KLph/N1AA6aG"+&poN6Sw.$<9DuY e8L.1C"H$GHMIU,SqhD0Hw-9$ {%b4%T
2024-04-26 14:41:15 UTC	16384	IN	Data Raw: 57 9a 02 d5 11 68 8b 4a c0 bc 5c 8d 51 cd 1b a3 42 e4 f0 e2 7e a5 bb a3 ff 52 a7 24 31 9a bb 07 88 83 c8 96 ea a4 46 4b 20 10 52 6d 2c 85 04 02 ce cc a1 a6 43 95 61 55 f2 1d cb 43 a2 e4 16 0b 77 05 66 48 4e e3 88 b2 73 b4 bd ea e4 fe 8e 2d da 88 31 ea 08 71 04 b0 97 f7 6a 3e f0 b0 df cb 75 3d 7e fe 64 c1 0a 04 56 f7 ad 73 76 91 5a 0e bd 5f ff 36 33 a7 64 c0 99 d5 92 20 7e 22 d3 45 d0 75 35 fb 84 ac 14 93 37 24 6c b6 b9 4e c8 6a d8 55 b2 04 60 ab 21 09 6f 53 1d d6 71 de ae 34 01 8c e4 b8 fc 03 0b 56 b5 8f 5f 73 70 01 46 e0 05 e2 0c 0d 14 ed 4a 99 17 40 99 ce 2b 0f 30 61 20 2f 90 a7 7d 50 5f cc 75 65 6d 2a 4e ac 4d ef 4a 64 d7 de 0e 4a d3 11 08 2c 30 b4 08 06 15 f5 f0 11 3e 2e fc 29 3a a8 af 8b e7 01 85 ff 79 03 6f e5 92 ef ad fd c6 ed 3e f9 fe e0 b7 e0 f8 Data Ascii: WhJ\QB~R$1FK Rm,CaUCwfHNs-1qj>u=~dVsvZ_63d ~"Eu57$lNjU`!oSq4V_spFJ@+0a /}P_uem*NMJdJ,0>.):yo>
2024-04-26 14:41:15 UTC	16384	IN	Data Raw: c1 ed 13 91 7c 58 dc 3e b9 4a fc 4f 8d 0e b8 e2 b9 ee c0 86 5a e0 c2 39 b7 a9 70 26 0c 2d 2f f4 66 3f a3 b5 69 34 09 7c fc d0 9b 5d 8a 6c 6c b5 dd 23 36 da 33 0e 98 12 e9 62 7b 37 5b 04 05 df e3 8d 49 fa 9e ec 41 ee d9 48 f8 2c cd 03 cd 13 dc ac 76 3a db 3e ca 34 f8 a5 57 04 9b 90 29 81 8a 80 fd d8 fd 41 b9 1c 0d f1 79 9c 6d 9a 58 72 0b 92 e4 68 e8 44 c6 d7 85 fc 75 f5 e6 7b 7d dd 26 28 c5 e7 ca 98 c2 c2 93 d5 ae 55 0f 9a 1b df 66 88 bb 44 ca 16 e4 7c 46 d2 d3 86 99 79 fa ce e0 8b a3 b7 d5 ea fe d1 db fa e4 e8 6d c3 a3 42 b3 7a f4 b6 75 42 85 36 15 0e 50 38 98 0c cb 77 4e 0b 8f 94 f1 16 91 fe 0f ca 9c c1 90 73 60 74 aa 45 e7 be d9 20 fc 2f cf 3d ed 85 ce 26 98 06 28 64 28 a9 e8 f0 44 4c bb 50 bd a1 84 44 bd 8a 04 a0 01 1d 63 8c 1a d1 6a 45 f4 c9 da fb 69 Data Ascii: \|X>JOZ9p&-/f?i4\|]ll#63b{7[IAH,v:>4W)AymXrhDu{}&(UfD\|FymBzuB6P8wNs`tE /=&(d(DLPDcjEi
2024-04-26 14:41:15 UTC	16384	IN	Data Raw: 4e 4f 5a aa 75 de c6 97 e5 0c c8 e3 ac 94 aa 62 e6 4f 4a 8c 5c b2 fe 1f e1 fe bf fe f5 af df 0e 7e 13 99 6c d3 22 62 ed 92 95 15 fe c5 93 52 14 a8 e7 31 b0 19 e8 a9 16 1a 5e 57 22 d1 4e 18 6d 75 7b dd 4d 91 2f 28 87 c2 c6 64 ac 8a 6d 89 74 41 b1 63 a0 ee 9d fa ee 8b 64 41 41 96 38 1e 22 52 a1 ca 3e 10 b3 45 6d 33 19 50 70 c1 de 5d 51 2e 2e 78 06 b8 90 2a d8 7d 28 c6 0b 0a 12 5b e2 87 ea 65 af 2b 86 8b cb a9 e5 75 7a da eb 89 e3 45 c3 cf 8b f3 a4 18 1d e2 bd c5 65 37 c4 68 d1 0c a8 f5 55 05 37 c5 f4 86 82 87 e3 b4 54 5d de e8 8a d3 05 a5 27 b0 85 54 95 f7 c4 64 41 a1 71 f2 f3 42 15 da 12 67 0b 0a 1d 8d f3 e1 37 d5 5e 4f 5c dc 06 d2 10 83 46 75 05 c7 1f 8f 6c e8 39 a2 da 99 36 42 b4 7a 9f 03 7c 19 35 9b 80 cb e0 82 02 f9 5c 48 b8 f0 e4 7e e7 7f fe 4f dd 4a Data Ascii: NOZubOJ\~l"bR1^W"Nmu{M/(dmtAcdAA8"R>Em3Pp]Q..x*}([e+uzEe7hU7T]'TdAqBg7^O\Ful96Bz\|5\H~OJ
2024-04-26 14:41:15 UTC	14808	IN	Data Raw: ab 71 0f 57 44 2f 4e cb 00 9c de be b1 3d 51 e6 1b ed fd 41 98 77 3e db 49 44 a5 39 68 7f 5a bc f5 4f 56 e3 66 28 e1 3e 7c 72 61 43 54 8d 2e 77 5b ef 89 3c 31 31 ca 2e bd d9 53 1e 72 8d 52 b5 79 74 54 bb bf db a4 a3 c8 e9 73 71 bf a4 83 4f 69 6d bd a1 c3 32 82 3f 5f 94 32 ba 84 21 38 b2 8a 24 70 01 f5 cf 54 77 10 ea b1 9a c8 46 f3 03 55 64 9a 3d e7 63 47 ea 89 52 a7 fe e2 3e 45 aa 2f ce 91 5a 85 5f 10 58 61 6a a5 31 8d d0 90 d6 10 b7 e1 ec 36 a6 30 c0 6f c3 16 f5 78 7e fd 67 da aa a8 fe a7 ab bd fc 5d 67 51 a2 c5 88 e0 56 f3 ab cf 30 77 9a 93 c4 0b 68 de 22 52 1d a0 da 5a e4 48 65 66 89 63 01 03 ab 24 f0 c4 a4 8e 39 64 72 3d bc ec 66 0f 37 4b 46 e2 ba 77 68 c2 50 a0 e7 bc d1 6c 88 da 35 4a 44 fc 67 4a 3a 89 76 d8 00 cb 2d da da a9 2b ce 56 b6 59 33 74 2c Data Ascii: qWD/N=QAw>ID9hZOVf(>\|raCT.w[<11.SrRytTsqOim2?_2!8$pTwFUd=cGR>E/Z_Xaj160ox~g]gQV0wh"RZHefc$9dr=f7KFwhPl5JDgJ:v-+VY3t,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49880	44.217.183.210	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:16 UTC	595	OUT	POST /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 525 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://runrun.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:16 UTC	525	OUT	Data Raw: 61 70 70 5f 69 64 3d 35 69 6e 34 66 69 6a 35 26 76 3d 33 26 67 3d 35 61 35 31 39 32 36 66 30 37 35 35 62 37 63 62 63 39 34 33 30 63 64 36 62 38 34 61 33 33 62 32 31 66 65 61 35 64 37 66 26 73 3d 39 33 36 36 61 62 34 61 2d 33 61 63 31 2d 34 64 65 65 2d 62 35 37 39 2d 37 34 39 37 62 33 39 32 36 38 34 33 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 33 30 32 32 36 30 35 62 38 36 33 38 36 36 65 35 26 69 6e 74 65 72 6e 61 6c 3d 25 37 42 25 37 44 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 66 61 6c 73 65 26 70 61 67 65 5f 74 69 74 6c 65 3d 52 75 6e 72 75 6e 2e 69 74 25 32 30 25 37 43 25 32 30 50 Data Ascii: app_id=5in4fij5&v=3&g=5a51926f0755b7cbc9430cd6b84a33b21fea5d7f&s=9366ab4a-3ac1-4dee-b579-7497b3926843&r=&platform=web&installation_type=js-snippet&Idempotency-Key=3022605b863866e5&internal=%7B%7D&is_intersection_booted=false&page_title=Runrun.it%20%7C%20P
2024-04-26 14:41:17 UTC	960	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:41:17 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: max-age=0, private, must-revalidate Access-Control-Allow-Origin: https://runrun.it Vary: Accept,Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Access-Control-Expose-Headers: x-request-id X-Intercom-Version: e0b7970b45028d3d3d0682c3815eb21055a885b5 X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 0006kb9eqmgfar9h53ug Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS ETag: W/"46f1247c3b937191c83ba8f5d956785c" X-Runtime: 0.257288 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-07f0efd8322b9d369
2024-04-26 14:41:17 UTC	4407	IN	Data Raw: 31 31 32 66 0d 0a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 52 75 6e 72 75 6e 2e 69 74 22 2c 22 61 75 64 69 6f 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 6f 77 5f 70 6f 77 65 72 65 64 5f 62 79 22 3a 66 61 6c 73 65 2c 22 74 65 61 6d 5f 69 6e 74 72 6f 22 3a 22 57 68 61 74 20 69 73 20 79 6f 75 72 20 71 75 65 73 74 69 6f 6e 3f 22 2c 22 74 65 61 6d 5f 67 72 65 65 74 69 6e 67 22 3a 22 48 69 20 74 68 65 72 65 20 f0 9f 91 8b 22 2c 22 6d 65 73 73 65 6e 67 65 72 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 6e 75 6c 6c 2c 22 65 78 70 65 63 74 65 64 5f 72 65 73 70 6f 6e 73 65 5f 64 65 6c 61 79 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 5f 6b 65 79 22 3a 22 61 5f 66 65 77 5f 68 6f 75 72 73 22 2c 22 6c 61 75 6e 63 68 65 72 5f 65 78 70 65 63 74 65 64 5f 72 65 73 70 Data Ascii: 112f{"app":{"name":"Runrun.it","audio_enabled":true,"show_powered_by":false,"team_intro":"What is your question?","team_greeting":"Hi there ","messenger_background":null,"expected_response_delay_translation_key":"a_few_hours","launcher_expected_resp
2024-04-26 14:41:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49881	142.250.189.132	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:17 UTC	930	OUT	POST /recaptcha/api2/reload?k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 8011 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll&co=aHR0cHM6Ly9ydW5ydW4uaXQ6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=6jc322lewbb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:17 UTC	8011	OUT	Data Raw: 0a 18 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 12 8e 0f 30 33 41 46 63 57 65 41 36 4d 5a 44 55 68 70 6f 77 68 7a 6f 6d 59 38 38 48 37 7a 57 49 38 5f 50 4a 54 4d 68 54 59 6c 6f 6e 4a 77 66 74 67 57 75 67 70 30 34 32 6b 36 52 39 69 39 65 69 2d 41 78 41 47 6a 51 41 35 75 54 45 38 69 6b 61 53 71 45 6a 4d 6c 75 41 57 62 47 58 59 67 55 5a 32 51 30 55 67 4d 43 54 43 76 30 62 54 77 6d 72 54 71 6e 52 46 71 78 36 78 49 63 68 65 32 50 64 36 71 46 78 79 5f 50 73 45 4e 63 47 50 37 62 76 5f 5f 33 30 59 4a 33 64 7a 4a 45 41 47 42 64 4b 36 78 33 77 6a 2d 4a 37 7a 5f 42 59 70 50 52 34 79 5f 35 6b 31 41 36 35 61 54 71 56 70 73 51 37 6a 68 50 73 2d 44 51 71 4e 63 39 52 36 48 7a 77 33 74 52 6e 37 41 2d 39 61 6c 4b 58 6a 4f 76 43 53 48 6c 72 32 Data Ascii: V6_85qpc2Xf2sbe3xTnRte7m03AFcWeA6MZDUhpowhzomY88H7zWI8_PJTMhTYlonJwftgWugp042k6R9i9ei-AxAGjQA5uTE8ikaSqEjMluAWbGXYgUZ2Q0UgMCTCv0bTwmrTqnRFqx6xIche2Pd6qFxy_PsENcGP7bv__30YJ3dzJEAGBdK6x3wj-J7z_BYpPR4y_5k1A65aTqVpsQ7jhPs-DQqNc9R6Hzw3tRn7A-9alKXjOvCSHlr2
2024-04-26 14:41:17 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 26 Apr 2024 14:41:17 GMT Expires: Fri, 26 Apr 2024 14:41:17 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AEdsM9MxPq1cO9xz0E6aTBGE-h0CNOg2a-_kncL40Ag7yTQEzL0AE6n4GrHV-zUCLQFCVlxZ8DY9RTaPI8FgTtE;Path=/recaptcha;Expires=Wed, 23-Oct-2024 14:41:17 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 14:41:17 UTC	559	IN	Data Raw: 61 37 36 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 44 30 6d 4c 6b 5a 72 75 67 50 6b 32 5a 31 70 72 56 76 65 51 68 79 46 65 39 39 61 7a 66 57 71 36 4d 4b 57 33 37 51 46 36 4a 72 4c 6a 43 54 56 49 37 5f 63 75 59 32 79 4a 43 6d 52 4a 56 6b 79 59 54 59 68 57 45 66 6f 62 65 63 30 62 6e 37 50 48 6a 56 70 57 5a 73 46 72 67 37 46 69 56 64 59 5a 58 6a 69 42 30 41 53 72 39 48 6e 38 6f 6b 6c 6e 37 68 49 6f 56 7a 66 46 6e 62 4b 6a 72 6b 42 4a 6c 6d 62 2d 65 69 61 55 7a 76 67 33 62 6b 50 59 68 55 47 2d 4b 4f 76 69 48 64 4a 55 64 53 32 35 5f 77 51 4d 46 77 4c 73 35 41 70 54 48 7a 43 4d 4c 31 4b 38 53 4a 77 6e 48 49 44 51 6f 70 42 62 4a 51 67 34 4d 48 30 46 7a 45 64 4e 44 71 77 70 33 55 44 6c 6a 6a 4e 4b 68 73 4e 6d 52 4d 43 32 68 7a Data Ascii: a76)]}'["rresp","03AFcWeA5D0mLkZrugPk2Z1prVveQhyFe99azfWq6MKW37QF6JrLjCTVI7_cuY2yJCmRJVkyYTYhWEfobec0bn7PHjVpWZsFrg7FiVdYZXjiB0ASr9Hn8okln7hIoVzfFnbKjrkBJlmb-eiaUzvg3bkPYhUG-KOviHdJUdS25_wQMFwLs5ApTHzCML1K8SJwnHIDQopBbJQg4MH0FzEdNDqwp3UDljjNKhsNmRMC2hz
2024-04-26 14:41:17 UTC	1255	IN	Data Raw: 36 4a 76 79 37 41 59 50 64 45 48 65 6b 64 35 6f 49 75 59 51 77 7a 52 71 51 73 45 52 6f 67 67 48 56 38 65 69 33 54 44 4b 56 4e 66 4c 47 61 51 2d 46 4d 6f 43 45 41 49 6a 65 44 48 37 6e 4e 4f 6d 39 49 67 4d 77 46 75 71 66 31 70 32 62 57 6a 37 4e 48 48 4b 42 79 69 58 52 36 30 34 68 31 51 73 61 70 35 58 64 36 4a 54 44 59 61 51 47 46 67 6a 47 74 39 47 76 39 34 42 6d 64 64 54 41 42 74 6b 37 71 63 34 62 68 35 75 58 55 61 4a 42 72 39 6a 77 66 53 58 76 33 71 79 52 61 65 41 46 48 36 39 4f 70 47 44 34 46 4a 45 33 6f 43 66 78 46 72 75 5f 48 5a 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 73 61 31 52 59 63 54 51 Data Ascii: 6Jvy7AYPdEHekd5oIuYQwzRqQsERoggHV8ei3TDKVNfLGaQ-FMoCEAIjeDH7nNOm9IgMwFuqf1p2bWj7NHHKByiXR604h1Qsap5Xd6JTDYaQGFgjGt9Gv94BmddTABtk7qc4bh5uXUaJBr9jwfSXv3qyRaeAFH69OpGD4FJE3oCfxFru_HZ",null,120,null,null,null,["bgdata","Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9sa1RYcTQ
2024-04-26 14:41:17 UTC	871	IN	Data Raw: 54 52 6b 54 57 68 6c 62 30 4a 6f 55 46 6b 76 53 55 31 70 53 55 4a 6f 52 47 52 68 62 45 52 70 62 48 70 68 61 6e 59 7a 5a 44 41 72 4f 47 77 79 4b 30 4e 4d 61 6a 42 4d 4b 33 4e 6e 54 54 46 68 53 6a 6c 61 54 30 55 34 56 48 51 79 63 54 68 68 55 32 4d 33 4e 53 74 32 52 6e 56 69 54 53 74 35 5a 7a 52 70 4d 45 4e 75 4d 6b 5a 57 65 54 64 76 51 7a 5a 59 5a 6a 42 45 55 55 4a 56 64 55 74 42 65 6c 42 4c 51 6c 59 31 4d 32 35 59 53 6d 6f 31 56 46 46 33 5a 32 64 46 54 31 56 61 4e 57 34 72 57 56 56 6d 61 55 70 59 65 6e 46 30 56 45 31 36 54 43 39 56 52 6a 67 78 61 47 35 6e 57 6b 4e 61 55 31 49 72 64 30 49 33 55 32 6c 4e 65 6a 67 7a 64 57 5a 32 53 56 4a 58 53 7a 64 50 64 47 78 30 4e 6c 41 79 4f 47 5a 30 51 6c 4e 50 65 58 68 61 55 6d 4a 59 54 57 45 34 52 30 6c 32 54 30 52 79 Data Ascii: TRkTWhlb0JoUFkvSU1pSUJoRGRhbERpbHphanYzZDArOGwyK0NMajBMK3NnTTFhSjlaT0U4VHQycThhU2M3NSt2RnViTSt5ZzRpMENuMkZWeTdvQzZYZjBEUUJVdUtBelBLQlY1M25YSmo1VFF3Z2dFT1VaNW4rWVVmaUpYenF0VE16TC9VRjgxaG5nWkNaU1Ird0I3U2lNejgzdWZ2SVJXSzdPdGx0NlAyOGZ0QlNPeXhaUmJYTWE4R0l2T0Ry
2024-04-26 14:41:17 UTC	1255	IN	Data Raw: 31 36 37 61 0d 0a 6c 44 59 30 31 6b 62 44 4e 7a 4d 48 52 78 53 44 4a 74 54 30 64 46 54 44 51 31 4d 6e 46 48 56 54 4e 34 54 6a 64 48 63 53 73 32 61 6b 52 56 61 6b 39 43 56 47 6b 7a 55 46 6c 77 65 45 6c 74 57 46 4e 53 64 33 46 6b 63 32 56 79 64 7a 42 36 65 57 46 6b 62 32 39 4e 56 32 5a 72 53 7a 6c 6c 52 30 74 53 56 32 6b 72 62 6b 35 48 54 58 4a 42 55 57 64 73 61 48 6c 70 64 30 34 77 4f 45 4d 76 65 46 45 7a 52 6e 70 4b 63 47 6c 36 4d 55 35 35 55 47 56 31 5a 6c 6c 35 59 6a 67 7a 4e 6a 41 7a 63 47 52 57 56 6d 6c 5a 5a 6b 35 49 4f 58 70 35 57 6d 38 31 4d 7a 6c 61 54 48 41 79 4d 57 5a 61 4e 69 38 33 53 30 46 33 5a 58 42 4a 55 6a 56 30 57 57 30 76 54 45 38 33 51 6d 70 42 62 44 4a 44 61 57 78 6a 54 56 42 61 51 79 74 70 53 55 4d 79 4e 79 38 31 64 47 4a 32 57 6d 46 Data Ascii: 167alDY01kbDNzMHRxSDJtT0dFTDQ1MnFHVTN4TjdHcSs2akRVak9CVGkzUFlweEltWFNSd3Fkc2VydzB6eWFkb29NV2ZrSzllR0tSV2krbk5HTXJBUWdsaHlpd04wOEMveFEzRnpKcGl6MU55UGV1Zll5YjgzNjAzcGRWVmlZZk5IOXp5Wm81MzlaTHAyMWZaNi83S0F3ZXBJUjV0WW0vTE83QmpBbDJDaWxjTVBaQytpSUMyNy81dGJ2WmF
2024-04-26 14:41:17 UTC	1255	IN	Data Raw: 51 4d 32 31 4a 5a 6d 73 32 55 31 70 58 4e 57 5a 56 5a 33 70 30 61 32 49 79 4d 69 39 74 4e 45 5a 33 56 7a 56 4a 65 6b 46 69 4b 31 6c 6b 57 48 56 36 4d 6e 64 44 53 6d 4a 55 52 6a 52 6d 61 57 52 55 59 31 4e 4e 65 46 5a 7a 63 48 6c 71 4b 30 4d 7a 62 79 39 72 61 44 46 6c 4d 30 64 52 57 6a 56 4a 52 57 39 4c 5a 47 31 6a 54 7a 4a 50 4f 46 4a 75 53 32 74 4a 4e 56 6c 47 62 55 6f 31 53 6a 4a 7a 5a 55 68 35 57 55 4a 30 4e 48 6c 69 55 55 63 34 54 47 64 59 4d 6b 46 49 59 54 68 69 52 32 56 42 4e 6d 46 32 4d 6d 56 6d 63 6a 56 4a 57 6d 4a 68 54 54 4d 35 61 31 64 53 4d 6b 6f 72 65 55 31 7a 65 45 74 51 62 6d 64 35 56 57 52 32 61 30 4e 4d 52 31 5a 6b 52 32 64 46 4d 33 70 68 51 7a 4a 36 4e 45 67 7a 63 31 4e 4a 52 57 56 55 4f 58 46 43 62 6b 31 51 51 79 74 6c 4c 31 41 32 4e 32 Data Ascii: QM21JZms2U1pXNWZVZ3p0a2IyMi9tNEZ3VzVJekFiK1lkWHV6MndDSmJURjRmaWRUY1NNeFZzcHlqK0Mzby9raDFlM0dRWjVJRW9LZG1jTzJPOFJuS2tJNVlGbUo1SjJzZUh5WUJ0NHliUUc4TGdYMkFIYThiR2VBNmF2MmVmcjVJWmJhTTM5a1dSMkoreU1zeEtQbmd5VWR2a0NMR1ZkR2dFM3phQzJ6NEgzc1NJRWVUOXFCbk1QQytlL1A2N2
2024-04-26 14:41:17 UTC	1255	IN	Data Raw: 74 6c 56 44 46 53 57 55 5a 75 4d 44 46 6f 54 32 64 5a 64 6e 4a 73 63 6d 64 61 4d 47 4e 57 65 58 64 32 55 45 5a 4b 55 6e 4a 70 65 45 4d 7a 4e 33 4a 77 61 33 46 52 64 58 4a 44 59 57 35 48 4d 44 46 35 64 6c 52 72 57 57 4e 6c 61 6c 51 77 4e 47 78 34 54 32 59 35 54 6b 39 51 63 48 6c 57 4c 7a 4e 4f 59 57 4a 4d 54 79 39 4c 55 6e 70 6a 4e 57 64 4d 54 57 6c 34 53 46 64 52 56 33 46 32 54 57 30 79 4e 6a 6c 58 55 6c 4d 7a 64 33 56 77 54 6b 78 4f 4d 45 46 36 55 6e 64 4a 5a 6e 70 68 62 31 46 6e 52 56 42 50 61 48 52 76 54 47 4a 76 56 46 63 76 5a 6e 42 30 57 46 41 7a 63 6c 4a 6c 64 57 39 32 53 45 68 43 51 30 4e 58 54 58 56 50 52 6d 64 4f 65 69 74 32 4f 44 4a 61 63 55 63 35 62 6a 4e 31 55 46 68 69 51 69 74 69 5a 6b 52 49 56 48 68 50 65 6d 4e 42 4d 56 6c 71 62 58 4e 57 63 Data Ascii: tlVDFSWUZuMDFoT2dZdnJscmdaMGNWeXd2UEZKUnJpeEMzN3Jwa3FRdXJDYW5HMDF5dlRrWWNlalQwNGx4T2Y5Tk9QcHlWLzNOYWJMTy9LUnpjNWdMTWl4SFdRV3F2TW0yNjlXUlMzd3VwTkxOMEF6UndJZnphb1FnRVBPaHRvTGJvVFcvZnB0WFAzclJldW92SEhCQ0NXTXVPRmdOeit2ODJacUc5bjN1UFhiQitiZkRIVHhPemNBMVlqbXNWc
2024-04-26 14:41:17 UTC	1255	IN	Data Raw: 6c 52 33 62 6a 46 59 63 45 6c 61 54 48 70 30 53 44 4e 7a 64 6e 42 69 52 54 5a 6b 54 6e 4a 45 53 32 4e 49 4e 46 46 6a 4b 33 55 77 55 57 35 4e 52 7a 56 4e 57 57 51 76 4e 6c 5a 70 5a 31 55 79 64 7a 42 7a 4d 6b 4a 79 5a 45 74 6d 61 33 6f 30 63 32 6c 46 57 48 70 75 59 6b 51 35 56 57 68 76 4e 46 42 61 54 46 4e 78 53 45 6f 30 4f 45 35 4e 63 6b 68 5a 59 6c 64 7a 52 6c 5a 72 55 30 52 4f 51 33 4a 49 54 47 4e 5a 51 6b 39 7a 56 57 4e 6c 62 43 73 78 5a 56 70 6d 59 30 4e 45 5a 32 6f 33 53 58 4e 5a 5a 45 56 56 56 47 4a 50 56 6e 64 44 59 57 6f 33 52 45 67 72 56 7a 4e 4d 52 33 68 74 4e 57 6c 31 63 6c 67 7a 56 44 52 44 5a 48 68 53 63 44 64 4b 64 6b 68 49 4e 44 6c 35 65 57 5a 79 5a 45 46 6e 56 6b 70 6c 64 33 49 30 56 31 55 35 62 46 4e 5a 4d 48 4e 53 4b 31 5a 73 65 47 70 6c Data Ascii: lR3bjFYcElaTHp0SDNzdnBiRTZkTnJES2NINFFjK3UwUW5NRzVNWWQvNlZpZ1UydzBzMkJyZEtma3o0c2lFWHpuYkQ5VWhvNFBaTFNxSEo0OE5NckhZYldzRlZrU0ROQ3JITGNZQk9zVWNlbCsxZVpmY0NEZ2o3SXNZZEVVVGJPVndDYWo3REgrVzNMR3htNWl1clgzVDRDZHhScDdKdkhINDl5eWZyZEFnVkpld3I0V1U5bFNZMHNSK1ZseGpl
2024-04-26 14:41:17 UTC	742	IN	Data Raw: 4d 6d 52 61 4e 30 74 31 52 31 68 74 65 6b 38 31 64 48 6c 6e 54 6e 63 78 55 6b 74 6c 62 47 74 6c 55 6c 46 53 4e 58 4e 42 5a 48 42 76 5a 6d 64 5a 55 54 52 55 4e 55 64 32 65 44 56 57 53 6c 6c 30 52 57 52 6c 4e 31 46 4e 54 6e 6c 4a 61 6c 64 54 4e 57 39 4d 57 6d 46 53 4d 6d 64 35 51 69 39 74 62 31 42 46 63 46 4a 4d 55 58 42 6c 55 55 68 79 55 6e 6c 43 4e 6b 64 4f 55 6d 68 6c 54 47 4e 78 65 6c 5a 72 53 46 46 4d 63 6e 70 31 4e 44 4e 58 5a 55 5a 34 4f 54 55 32 65 58 6f 30 4d 6b 35 4b 56 31 4a 73 65 43 74 78 57 46 64 4c 54 45 59 77 59 6b 30 33 54 53 74 45 4b 33 4d 33 4f 44 45 35 54 44 52 4d 4c 31 46 4a 55 32 68 6b 53 55 52 76 55 58 68 45 63 45 70 31 4d 58 56 56 56 6b 68 74 4d 55 78 6f 62 6d 70 75 62 6a 55 7a 65 6b 74 5a 4e 57 39 4e 59 7a 46 6a 51 56 52 33 56 48 70 Data Ascii: MmRaN0t1R1htek81dHlnTncxUktlbGtlUlFSNXNBZHBvZmdZUTRUNUd2eDVWSll0RWRlN1FNTnlJaldTNW9MWmFSMmd5Qi9tb1BFcFJMUXBlUUhyUnlCNkdOUmhlTGNxelZrSFFMcnp1NDNXZUZ4OTU2eXo0Mk5KV1JseCtxWFdLTEYwYk03TStEK3M3ODE5TDRML1FJU2hkSURvUXhEcEp1MXVVVkhtMUxobmpubjUzektZNW9NYzFjQVR3VHp
2024-04-26 14:41:17 UTC	1255	IN	Data Raw: 64 64 39 0d 0a 55 58 5a 7a 64 30 68 59 64 6b 35 51 55 53 74 79 62 31 68 43 56 6b 39 59 62 56 6c 77 52 33 4a 47 59 6b 78 6f 4d 31 52 73 61 45 56 52 64 58 5a 47 4e 56 68 6d 59 57 52 30 56 32 68 33 53 6b 68 61 64 30 59 78 4e 6a 4a 50 62 55 35 48 51 54 4a 59 53 31 4a 75 56 45 39 69 63 47 5a 69 4d 45 56 70 59 57 78 4a 4d 56 6c 36 61 53 74 59 57 44 6c 54 4d 47 5a 4c 52 45 35 48 4f 56 64 48 64 6b 6c 4f 63 46 45 7a 55 6b 4e 34 4e 54 68 72 64 6d 64 70 51 33 4e 50 4d 46 52 6f 61 32 68 4d 62 6c 68 55 57 46 70 36 4d 47 52 6e 4d 6e 64 6f 57 56 55 76 63 32 68 56 55 56 68 4c 62 58 4a 4d 56 6d 31 34 62 55 68 53 51 6a 46 44 61 48 68 31 55 32 70 77 4c 32 5a 77 52 6a 64 56 65 6b 46 46 54 6d 51 35 56 6c 59 7a 61 57 63 32 62 45 5a 4f 57 45 38 30 54 6d 46 70 4e 47 70 4e 56 6a Data Ascii: dd9UXZzd0hYdk5QUStyb1hCVk9YbVlwR3JGYkxoM1RsaEVRdXZGNVhmYWR0V2h3Skhad0YxNjJPbU5HQTJYS1JuVE9icGZiMEVpYWxJMVl6aStYWDlTMGZLRE5HOVdHdklOcFEzUkN4NThrdmdpQ3NPMFRoa2hMblhUWFp6MGRnMndoWVUvc2hVUVhLbXJMVm14bUhSQjFDaHh1U2pwL2ZwRjdVekFFTmQ5VlYzaWc2bEZOWE80TmFpNGpNVj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49883	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:17 UTC	790	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: d712e364-d78b26f4.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://srmcorp.digitoids.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="
2024-04-26 14:41:20 UTC	739	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:41:20 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2805990 cache-control: public, max-age=31536000 etag: 0x8DB5C3F466DE917 last-modified: Wed, 24 May 2023 10:11:43 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2722b384-301e-00f8-7062-7ea762000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-04-26 14:41:20 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-04-26 14:41:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49884	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:17 UTC	791	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: d712e364-d78b26f4.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://srmcorp.digitoids.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="
2024-04-26 14:41:20 UTC	739	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:41:20 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2805984 cache-control: public, max-age=31536000 etag: 0x8DB5C3F495F4B8C last-modified: Wed, 24 May 2023 10:11:48 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e824c8ca-501e-00c2-2e62-7e8866000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-04-26 14:41:20 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-04-26 14:41:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49885	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:17 UTC	752	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js HTTP/1.1 Host: d712e364-d78b26f4.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://srmcorp.digitoids.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="
2024-04-26 14:41:22 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:41:21 GMT Content-Type: application/x-javascript Content-Length: 35837 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2023445 cache-control: public, max-age=31536000 etag: 0x8DC4F6D5254E400 last-modified: Thu, 28 Mar 2024 21:23:33 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9f0c51ec-a01e-00e9-0e80-853c42000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-04-26 14:41:22 UTC	13689	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 7f db 38 92 28 fa ff f9 14 b6 a6 c7 11 db b4 2c ea 2d db 8c c7 f1 a3 93 99 a4 93 cd a3 67 67 6c 75 86 a2 20 89 6d 8a 94 49 ca 8f c4 de cf 7e ab 0a 6f 52 76 92 d9 b3 e7 dc df bd 99 69 9a 28 14 0a 85 02 50 28 14 0a d4 ee cf 9b ff 6b e3 e7 8d 9d ef ff b7 f1 e1 e3 d1 fb 8f 1b 6f cf 36 3e be 7c f5 fe 64 e3 1d a4 fe b1 f1 eb db 8f af 8e 4f bf 9f 0e 56 8a ff 7d 9c 47 f9 c6 34 8a d9 06 fc 1d 07 39 9b 6c a4 c9 46 9a 6d 44 49 98 66 cb 34 0b 0a 96 6f 2c e0 99 45 41 bc 31 cd d2 c5 46 31 67 1b cb 2c fd 83 85 45 be 11 47 79 01 85 c6 2c 4e 6f 36 ea 40 2e 9b 6c bc 0b b2 e2 6e e3 d5 3b a7 01 f4 19 50 8b 66 51 02 a5 c3 74 79 07 ef f3 62 23 49 8b 28 64 1b 41 32 21 6a 31 24 92 9c 6d ac 92 09 cb 36 6e e6 51 38 df 78 13 85 59 9a a7 d3 62 Data Ascii: {8(,-gglu mI~oRvi(P(ko6>\|dOV}G49lFmDIf4o,EA1F1g,EGy,No6@.ln;PfQtyb#I(dA2!j1$m6nQ8xYb
2024-04-26 14:41:22 UTC	16384	IN	Data Raw: e0 3a 7d 4a 23 d5 e9 29 4f db df 1c 7c ab 62 d7 29 14 24 55 c9 a9 4c 4a ec 80 b0 95 9f 8a 51 b6 f2 53 51 b2 fc 89 c2 b7 c6 a7 9d 3c ba 13 9c 5a 10 8f 20 72 17 1f d0 54 d2 9f bb e6 5f 34 4c f1 8b 10 f2 10 89 9c a0 6f 4f 75 28 39 05 47 a4 cc 00 50 23 a7 fa 3e 09 9d 2b bd 2d fb 67 a8 58 d9 3f 83 c4 75 a8 31 bf 6f f3 56 07 cb 53 c7 a5 3a 3d e5 69 79 50 46 07 53 a9 be 7e 32 24 f7 78 3a 5f 88 29 46 cb 42 5a fa a8 5e 6a 7e 86 2d 20 80 c1 3a c7 30 3e 4a 37 a4 88 c5 54 87 bb 37 b9 e0 d5 69 1d 05 54 be 35 22 e9 e9 4b 9f a9 09 a0 8e 59 b0 59 60 f1 65 00 e8 e4 e8 2d b9 f9 d5 f5 f9 29 e1 98 a0 b1 00 a9 ae e9 f1 74 e9 9b 92 6f 2b fe 73 c2 2b 43 69 1b 6c 9c b4 d2 e1 c0 db 25 4b 1e fb aa 63 68 e6 5b 39 34 88 c0 94 93 e7 3e 14 e5 9d 2e 4b 5f b5 4c cd 2f c7 51 47 cb fd 0a Data Ascii: :}J#)O\|b)$ULJQSQ<Z rT_4LoOu(9GP#>+-gX?u1oVS:=iyPFS~2$x:_)FBZ^j~- :0>J7T7iT5"KYY`e-)to+s+Cil%Kch[94>.K_L/QG
2024-04-26 14:41:22 UTC	5764	IN	Data Raw: d4 76 8b 9d 29 46 07 7a a6 65 79 ee 48 f9 39 d0 69 13 db dd 39 3e 16 61 58 6c 4e 25 4b 70 52 01 a0 fe 3f c4 98 e1 c1 c5 4b 63 37 4a 7b 03 66 64 f0 bc 7c 4f 88 65 84 2a 68 59 0b 9e cf 12 3f a4 1d 1f 58 89 21 6c 6b a1 d3 46 71 39 5a 7d 30 d6 a8 4a 5a 82 6e 21 20 cb e5 19 f7 a9 f0 8e fd 1e 97 2e 4a bc b3 76 2e bc b3 1e 6d fb de d5 bb 93 93 6d cf 6b b5 db 7b 2b 15 b6 25 a6 dc 21 b4 79 74 b4 d8 b6 95 14 55 69 9b 1b 9a 45 95 27 f5 d0 0d 1d 0c 81 20 b4 2c e4 a4 68 89 34 2b 7c 5e 5e aa 3a 84 de d1 25 3f ba f2 33 3d 8c cb 7f 22 6a 7f a2 0b 37 84 11 cc 08 ff 44 2a 6e 90 f2 6b 12 c6 e8 02 bc f1 e5 e4 07 0b 68 f3 3d 90 da 05 d2 61 a0 b1 97 fb 7c c8 1f df ed 6d bb db 08 dd 19 66 24 b2 4c 34 99 7f 45 62 0c 5f 9f c1 08 49 73 dd 8d c9 e9 56 1a f6 45 26 a1 04 6e a1 b7 b1 Data Ascii: v)FzeyH9i9>aXlN%KpR?Kc7J{fd\|OehY?X!lkFq9Z}0JZn! .Jv.mmk{+%!ytUiE' ,h4+\|^^:%?3="j7Dnkh=a\|mf$L4Eb_IsVE&n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49882	35.174.127.31	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:17 UTC	677	OUT	GET /pubsub/5-7wzm0UlJTIMK3fQI2yJ3xfnZNJcSPUxyAL4_qpP5Ulz9jfLvHB6UqySBVpyzdTREJvFi1dnsBfz-A2OfoeW2w21QBUS0CJj4KV7I?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1 Host: nexus-websocket-a.intercom.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://runrun.it Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: hSPeACm/SpfnZKtd7GYmKg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49886	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:18 UTC	709	OUT	GET /d78b26f41a2e42509e001fd2bf0e6daa/ HTTP/1.1 Host: srmcorp.digitoids.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://srmcorp.digitoids.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: taVNSufGarli4Yw3nrxEeg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-26 14:41:20 UTC	742	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 26 Apr 2024 14:41:20 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 80d61d8e-0356-44db-ae09-30c7b2277400 x-ms-ests-server: 2.1.17910.10 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://0824a98d-d78b26f4.digitoids.com/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-04-26 14:41:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49887	142.250.189.132	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:18 UTC	1041	OUT	POST /recaptcha/api2/reload?k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 8428 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll&co=aHR0cHM6Ly9ydW5ydW4uaXQ6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=6jc322lewbb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9MxPq1cO9xz0E6aTBGE-h0CNOg2a-_kncL40Ag7yTQEzL0AE6n4GrHV-zUCLQFCVlxZ8DY9RTaPI8FgTtE
2024-04-26 14:41:18 UTC	8428	OUT	Data Raw: 0a 18 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 12 8e 0f 30 33 41 46 63 57 65 41 36 4d 5a 44 55 68 70 6f 77 68 7a 6f 6d 59 38 38 48 37 7a 57 49 38 5f 50 4a 54 4d 68 54 59 6c 6f 6e 4a 77 66 74 67 57 75 67 70 30 34 32 6b 36 52 39 69 39 65 69 2d 41 78 41 47 6a 51 41 35 75 54 45 38 69 6b 61 53 71 45 6a 4d 6c 75 41 57 62 47 58 59 67 55 5a 32 51 30 55 67 4d 43 54 43 76 30 62 54 77 6d 72 54 71 6e 52 46 71 78 36 78 49 63 68 65 32 50 64 36 71 46 78 79 5f 50 73 45 4e 63 47 50 37 62 76 5f 5f 33 30 59 4a 33 64 7a 4a 45 41 47 42 64 4b 36 78 33 77 6a 2d 4a 37 7a 5f 42 59 70 50 52 34 79 5f 35 6b 31 41 36 35 61 54 71 56 70 73 51 37 6a 68 50 73 2d 44 51 71 4e 63 39 52 36 48 7a 77 33 74 52 6e 37 41 2d 39 61 6c 4b 58 6a 4f 76 43 53 48 6c 72 32 Data Ascii: V6_85qpc2Xf2sbe3xTnRte7m03AFcWeA6MZDUhpowhzomY88H7zWI8_PJTMhTYlonJwftgWugp042k6R9i9ei-AxAGjQA5uTE8ikaSqEjMluAWbGXYgUZ2Q0UgMCTCv0bTwmrTqnRFqx6xIche2Pd6qFxy_PsENcGP7bv__30YJ3dzJEAGBdK6x3wj-J7z_BYpPR4y_5k1A65aTqVpsQ7jhPs-DQqNc9R6Hzw3tRn7A-9alKXjOvCSHlr2
2024-04-26 14:41:18 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 26 Apr 2024 14:41:18 GMT Expires: Fri, 26 Apr 2024 14:41:18 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AEdsM9ODZjP6xKmMSUKwqw73HKViP961VsvjR3uofDDCHH6Bgfu__PbgnNxh6TNxjt_K_Nf4H_LpndGmm1AXVG8;Path=/recaptcha;Expires=Wed, 23-Oct-2024 14:41:18 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 14:41:18 UTC	559	IN	Data Raw: 61 37 33 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 6c 34 31 71 46 48 52 47 48 76 34 43 6a 45 2d 72 54 38 48 67 32 6f 58 2d 34 76 4e 75 31 65 45 4b 69 61 6b 51 2d 5f 76 69 6a 48 5f 71 2d 62 38 4b 77 54 4c 56 7a 72 4d 42 71 68 48 50 65 39 4c 76 69 4f 39 51 49 6c 73 37 4a 47 38 54 33 71 32 37 32 31 69 54 32 6d 7a 58 55 36 7a 69 50 36 59 65 79 7a 67 61 39 31 70 58 68 6c 5f 61 4f 65 32 2d 61 2d 79 51 78 78 44 4d 4a 53 5f 42 58 45 6e 32 51 47 41 74 78 35 37 66 6a 47 76 39 45 57 77 35 31 55 4b 34 79 46 50 2d 33 4b 4d 51 79 74 58 6f 46 65 75 50 4a 55 57 59 52 4f 6a 37 4f 6e 6a 31 53 55 52 59 37 4e 68 58 36 61 6b 4f 4a 43 39 4d 49 71 73 46 59 4d 73 5a 67 74 33 55 68 46 4f 46 48 75 4a 51 77 6e 43 75 33 64 59 48 45 73 50 57 4c 76 Data Ascii: a73)]}'["rresp","03AFcWeA5l41qFHRGHv4CjE-rT8Hg2oX-4vNu1eEKiakQ-_vijH_q-b8KwTLVzrMBqhHPe9LviO9QIls7JG8T3q2721iT2mzXU6ziP6Yeyzga91pXhl_aOe2-a-yQxxDMJS_BXEn2QGAtx57fjGv9EWw51UK4yFP-3KMQytXoFeuPJUWYROj7Onj1SURY7NhX6akOJC9MIqsFYMsZgt3UhFOFHuJQwnCu3dYHEsPWLv
2024-04-26 14:41:18 UTC	1255	IN	Data Raw: 33 4c 78 54 56 36 44 43 6a 33 4c 69 6a 4c 43 36 64 63 36 31 54 62 44 49 70 79 39 78 55 4e 47 54 4d 31 79 72 7a 56 43 4a 47 4f 36 4c 38 73 77 4c 4c 69 4a 30 71 62 6d 74 79 74 6f 46 35 36 31 35 39 55 46 49 39 53 2d 43 5f 72 51 32 56 58 6c 65 38 39 74 6b 65 61 37 77 6f 71 31 6a 71 64 76 59 4e 79 65 32 50 67 34 44 35 46 66 37 63 5f 75 57 79 38 6d 62 6c 75 7a 58 69 38 66 4c 4e 6c 6d 44 43 69 4e 4b 77 4c 65 62 39 4f 56 68 73 43 48 48 54 5a 50 30 34 63 6e 6f 4d 47 34 4a 59 42 58 4b 6f 5a 6f 42 41 4a 42 58 45 68 6b 33 4c 48 4a 50 43 45 30 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 73 61 31 52 59 63 54 51 Data Ascii: 3LxTV6DCj3LijLC6dc61TbDIpy9xUNGTM1yrzVCJGO6L8swLLiJ0qbmtytoF56159UFI9S-C_rQ2VXle89tkea7woq1jqdvYNye2Pg4D5Ff7c_uWy8mbluzXi8fLNlmDCiNKwLeb9OVhsCHHTZP04cnoMG4JYBXKoZoBAJBXEhk3LHJPCE0",null,120,null,null,null,["bgdata","Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9sa1RYcTQ
2024-04-26 14:41:18 UTC	868	IN	Data Raw: 45 70 33 55 32 31 77 5a 48 5a 59 55 6a 5a 74 56 44 6c 6a 59 30 74 6c 52 32 5a 76 4d 45 6c 71 62 55 52 6b 4d 55 4e 5a 5a 58 68 47 52 57 4d 7a 61 32 30 31 61 32 6c 57 64 6a 4e 4f 65 55 31 55 62 79 73 32 52 6d 74 57 53 45 56 36 56 57 4a 6c 56 55 30 77 62 55 78 70 4e 43 74 71 52 6b 38 31 4f 45 56 4b 4e 6d 4d 7a 59 7a 67 78 4b 32 70 45 56 56 4d 32 4f 44 4e 68 64 47 6c 6f 55 33 67 30 52 6d 52 44 4f 56 4d 78 53 47 5a 79 65 47 6c 51 65 6b 35 52 62 44 41 34 57 56 4e 76 62 46 52 74 4d 48 45 7a 5a 6b 51 76 56 69 74 55 5a 32 4a 79 56 56 70 54 65 45 5a 58 56 44 64 56 62 58 6c 6f 52 57 46 30 4d 57 39 59 54 6e 56 50 54 6b 74 4f 5a 7a 56 54 54 31 64 75 54 46 4a 4b 55 32 52 4f 53 6d 52 44 51 7a 64 72 54 48 64 59 54 6e 6c 30 63 6b 64 4b 53 46 56 7a 55 55 5a 49 65 56 4a 68 Data Ascii: Ep3U21wZHZYUjZtVDljY0tlR2ZvMElqbURkMUNZZXhGRWMza201a2lWdjNOeU1Ubys2RmtWSEV6VWJlVU0wbUxpNCtqRk81OEVKNmMzYzgxK2pEVVM2ODNhdGloU3g0RmRDOVMxSGZyeGlQek5RbDA4WVNvbFRtMHEzZkQvVitUZ2JyVVpTeEZXVDdVbXloRWF0MW9YTnVPTktOZzVTT1duTFJKU2ROSmRDQzdrTHdYTnl0ckdKSFVzUUZIeVJh
2024-04-26 14:41:18 UTC	1255	IN	Data Raw: 31 36 36 64 0d 0a 49 4e 7a 4e 34 61 7a 46 79 54 48 70 68 54 30 46 6b 54 7a 63 79 55 79 39 46 61 31 4d 76 4e 30 77 78 5a 6e 52 49 4f 48 67 33 51 7a 56 4c 65 44 63 76 4d 58 5a 6c 51 57 6c 58 4f 45 73 33 57 6b 51 72 62 57 4a 61 5a 55 70 75 4c 31 68 52 64 47 78 70 4e 47 70 4a 59 6b 31 4d 59 32 74 76 4d 48 46 4f 4f 46 56 49 64 56 46 51 51 57 64 74 53 6a 4a 48 63 30 64 46 56 57 5a 32 57 55 64 4d 52 6c 4d 31 4d 33 4e 57 4d 6b 46 71 4f 56 49 76 62 33 42 55 5a 33 59 76 57 6a 56 4a 52 31 64 4d 4b 30 5a 71 57 53 39 68 5a 6b 64 4f 52 7a 4e 6e 52 54 4e 74 61 6d 39 57 52 6b 74 75 59 6a 52 6c 4e 58 52 36 56 6c 5a 36 62 31 46 54 61 31 56 52 59 6a 6c 55 54 6b 5a 43 59 57 4a 79 4d 6c 42 52 61 32 73 32 64 6e 64 6a 51 7a 42 4d 62 33 4a 52 61 33 6f 32 63 69 39 75 63 58 4a 79 Data Ascii: 166dINzN4azFyTHphT0FkTzcyUy9Fa1MvN0wxZnRIOHg3QzVLeDcvMXZlQWlXOEs3WkQrbWJaZUpuL1hRdGxpNGpJYk1MY2tvMHFOOFVIdVFQQWdtSjJHc0dFVWZ2WUdMRlM1M3NWMkFqOVIvb3BUZ3YvWjVJR1dMK0ZqWS9hZkdORzNnRTNtam9WRktuYjRlNXR6VlZ6b1FTa1VRYjlUTkZCYWJyMlBRa2s2dndjQzBMb3JRa3o2ci9ucXJy
2024-04-26 14:41:18 UTC	1255	IN	Data Raw: 62 6b 6c 49 63 45 52 36 4e 79 38 35 65 47 46 4f 5a 47 68 44 4e 56 55 31 4e 30 74 6b 63 46 42 57 61 55 4e 51 63 31 70 4c 53 32 49 78 4f 48 46 35 63 46 64 30 5a 44 4e 51 4e 54 46 43 5a 6d 52 4c 4e 44 42 31 52 6d 4a 33 4d 6b 5a 30 64 48 4e 5a 57 56 42 34 61 6b 64 45 5a 30 55 77 5a 44 4a 51 55 6b 46 35 51 31 4d 34 63 30 6f 32 4f 55 51 33 63 6b 63 7a 4d 6b 6c 68 52 6e 42 32 56 31 56 71 56 44 68 49 62 33 4a 75 56 6c 68 34 65 47 77 35 4e 6e 42 54 57 54 56 61 63 7a 6c 50 59 6a 52 30 63 58 41 34 51 33 68 50 4e 54 64 52 64 32 67 31 56 6d 78 6c 63 48 56 61 65 56 68 33 55 31 46 47 62 54 6b 30 4e 55 6c 74 55 6a 56 4d 52 6d 39 32 63 48 46 35 65 48 68 55 62 58 5a 77 63 45 4e 5a 52 55 4e 43 5a 32 35 7a 5a 48 56 70 53 57 5a 57 56 48 6c 52 57 48 42 30 4d 47 52 46 56 32 39 Data Ascii: bklIcER6Ny85eGFOZGhDNVU1N0tkcFBWaUNQc1pLS2IxOHF5cFd0ZDNQNTFCZmRLNDB1RmJ3MkZ0dHNZWVB4akdEZ0UwZDJQUkF5Q1M4c0o2OUQ3ckczMklhRnB2V1VqVDhIb3JuVlh4eGw5NnBTWTVaczlPYjR0cXA4Q3hPNTdRd2g1VmxlcHVaeVh3U1FGbTk0NUltUjVMRm92cHF5eHhUbXZwcENZRUNCZ25zZHVpSWZWVHlRWHB0MGRFV29
2024-04-26 14:41:18 UTC	1255	IN	Data Raw: 49 64 30 4a 33 64 30 30 72 62 45 68 61 52 46 52 4a 64 57 6c 44 57 55 6c 58 65 6e 67 79 51 6a 56 53 5a 45 64 36 4e 55 39 43 57 46 4a 50 61 58 68 4a 55 44 67 7a 53 45 35 52 57 46 4a 36 52 33 68 56 53 31 6f 72 52 55 64 75 61 48 64 6e 57 6d 35 51 63 31 4e 58 53 57 68 30 53 44 68 52 53 47 34 34 51 6b 6c 5a 64 44 64 57 62 57 4e 70 52 43 74 6d 61 6e 56 5a 65 69 74 6f 54 6b 68 6b 5a 45 64 47 4e 6e 5a 54 52 7a 6c 44 61 45 5a 44 63 44 4e 35 4d 6e 4e 33 57 46 4a 54 5a 48 64 79 5a 6b 4e 53 55 33 70 61 55 6e 67 78 61 57 46 52 53 56 52 72 55 45 78 72 57 47 46 72 4c 31 56 76 5a 54 52 6c 59 7a 46 6d 52 55 35 34 4d 6b 31 4b 53 56 68 51 54 6d 45 77 57 55 46 72 64 55 52 51 61 6b 46 43 62 30 74 78 61 57 74 32 52 55 4a 68 55 6d 46 61 51 57 4a 46 55 55 70 49 53 44 68 49 63 32 Data Ascii: Id0J3d00rbEhaRFRJdWlDWUlXengyQjVSZEd6NU9CWFJPaXhJUDgzSE5RWFJ6R3hVS1orRUduaHdnWm5Qc1NXSWh0SDhRSG44QklZdDdWbWNpRCtmanVZeitoTkhkZEdGNnZTRzlDaEZDcDN5MnN3WFJTZHdyZkNSU3paUngxaWFRSVRrUExrWGFrL1VvZTRlYzFmRU54Mk1KSVhQTmEwWUFrdURQakFCb0txaWt2RUJhUmFaQWJFUUpISDhIc2
2024-04-26 14:41:18 UTC	1255	IN	Data Raw: 68 6e 59 56 6c 69 54 55 4e 5a 55 32 64 6f 52 32 64 69 61 47 78 50 61 56 6c 4d 51 6c 64 45 54 33 68 76 62 57 5a 6a 4d 54 56 4f 62 6d 46 42 65 6e 68 74 4b 31 6c 33 4c 32 55 78 59 58 42 30 5a 58 46 6d 53 48 64 53 5a 48 4a 6a 63 56 55 79 64 32 78 54 52 57 78 4d 61 54 6c 59 54 55 39 4a 51 33 6f 30 4d 6d 4a 36 51 30 68 34 57 56 45 79 65 44 55 7a 65 45 74 4f 59 69 39 31 55 31 46 5a 4d 55 46 71 5a 6c 70 78 52 53 39 53 64 45 64 4b 4c 32 6c 45 56 6b 31 77 61 55 5a 43 51 30 6c 75 64 45 55 35 53 43 38 30 51 33 70 75 57 6a 56 43 55 31 46 6a 65 6b 4e 4b 62 48 6c 57 59 55 78 4c 62 46 6c 44 5a 55 6c 56 61 30 78 49 54 6c 46 6f 62 44 56 44 52 30 5a 4a 65 58 64 5a 55 6b 74 44 4e 57 78 34 55 32 5a 48 61 7a 5a 73 61 54 64 35 4e 6e 52 6e 64 48 70 4a 62 31 6c 59 53 56 46 45 51 Data Ascii: hnYVliTUNZU2doR2diaGxPaVlMQldET3hvbWZjMTVObmFBenhtK1l3L2UxYXB0ZXFmSHdSZHJjcVUyd2xTRWxMaTlYTU9JQ3o0MmJ6Q0h4WVEyeDUzeEtOYi91U1FZMUFqZlpxRS9SdEdKL2lEVk1waUZCQ0ludEU5SC80Q3puWjVCU1FjekNKbHlWYUxLbFlDZUlVa0xITlFobDVDR0ZJeXdZUktDNWx4U2ZHazZsaTd5NnRndHpJb1lYSVFEQ
2024-04-26 14:41:18 UTC	729	IN	Data Raw: 57 56 6f 4e 32 64 68 4c 31 70 72 64 45 46 57 62 56 42 4f 63 30 74 56 5a 32 45 30 4c 7a 46 6b 62 56 4e 78 63 31 6c 70 59 56 4a 74 61 55 4a 4a 4e 48 56 33 4c 30 4a 75 56 47 70 4c 53 6c 4e 53 56 43 38 79 62 55 63 79 59 31 56 6e 65 6b 4e 6a 59 57 70 4e 54 56 64 55 51 33 4a 7a 57 58 56 4b 62 6a 68 47 65 56 70 7a 51 6b 77 34 53 54 4a 4f 59 58 5a 55 56 46 6c 75 52 58 70 58 51 32 51 78 4e 6e 56 4f 4e 48 64 4a 4e 30 73 34 54 57 77 34 56 55 68 6e 53 46 70 4e 54 44 6b 30 4c 31 56 77 4d 6a 5a 57 4d 31 6c 71 61 54 41 79 4c 32 39 34 62 58 70 6c 62 45 6c 77 4e 57 35 46 57 6d 35 53 4f 47 31 4e 52 47 70 68 62 57 4e 48 52 54 5a 69 61 54 4a 34 59 58 52 30 53 58 67 77 4c 33 67 72 4f 55 74 75 4e 48 70 52 4e 33 42 31 62 6d 30 7a 4c 32 4a 52 61 57 4e 33 62 55 35 35 52 44 63 72 Data Ascii: WVoN2dhL1prdEFWbVBOc0tVZ2E0LzFkbVNxc1lpYVJtaUJJNHV3L0JuVGpLSlNSVC8ybUcyY1VnekNjYWpNTVdUQ3JzWXVKbjhGeVpzQkw4STJOYXZUVFluRXpXQ2QxNnVONHdJN0s4TWw4VUhnSFpNTDk0L1VwMjZWM1lqaTAyL294bXplbElwNW5FWm5SOG1NRGphbWNHRTZiaTJ4YXR0SXgwL3grOUtuNHpRN3B1bm0zL2JRaWN3bU55RDcr
2024-04-26 14:41:18 UTC	1255	IN	Data Raw: 65 39 31 0d 0a 65 58 6c 6b 5a 7a 45 72 63 43 74 58 64 7a 4e 57 5a 56 70 4b 52 58 64 4b 64 45 5a 58 5a 33 56 31 52 33 70 6f 57 46 49 33 61 33 6c 30 54 48 70 74 55 6c 4e 6a 51 58 42 32 64 46 4a 61 5a 31 64 6a 51 6d 46 6f 4f 55 70 49 4d 56 4a 58 53 56 56 4b 59 54 4a 45 4e 32 46 6e 4c 33 68 74 52 57 39 4e 56 58 68 32 54 47 55 76 65 56 59 32 59 54 64 6a 4f 46 4a 4c 64 33 42 54 59 55 6c 6f 5a 31 6c 4c 4b 30 59 31 53 58 4a 48 53 6a 4e 74 61 30 6f 77 53 54 68 4a 65 57 31 30 51 6a 52 34 4d 6a 51 35 62 48 52 76 52 57 46 4f 53 47 4e 4e 4c 32 63 78 61 30 46 72 53 57 35 44 56 57 4e 43 53 54 4e 51 4e 55 5a 71 61 6c 46 52 63 48 6b 7a 64 31 56 73 54 30 74 4a 54 55 74 47 53 48 4a 53 51 7a 64 35 56 58 68 50 5a 31 68 61 4e 6c 46 33 5a 31 42 74 4d 32 64 46 54 58 4e 4a 56 32 Data Ascii: e91eXlkZzErcCtXdzNWZVpKRXdKdEZXZ3V1R3poWFI3a3l0THptUlNjQXB2dFJaZ1djQmFoOUpIMVJXSVVKYTJEN2FnL3htRW9NVXh2TGUveVY2YTdjOFJLd3BTYUloZ1lLK0Y1SXJHSjNta0owSThJeW10QjR4MjQ5bHRvRWFOSGNNL2cxa0FrSW5DVWNCSTNQNUZqalFRcHkzd1VsT0tJTUtGSHJSQzd5VXhPZ1haNlF3Z1BtM2dFTXNJV2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49889	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:18 UTC	777	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: d712e364-d78b26f4.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://srmcorp.digitoids.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="
2024-04-26 14:41:21 UTC	674	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:41:21 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2805975 cache-control: public, max-age=31536000 etag: 0x8D8731240E548EB last-modified: Sun, 18 Oct 2020 03:02:30 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 3de816bd-c01e-006b-0862-7e3d13000000 x-ms-version: 2009-09-19
2024-04-26 14:41:21 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-04-26 14:41:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49890	72.14.190.91	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:18 UTC	791	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: d712e364-d78b26f4.digitoids.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://srmcorp.digitoids.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="
2024-04-26 14:41:21 UTC	739	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:41:21 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2800468 cache-control: public, max-age=31536000 etag: 0x8DB5C3F4BB4F03C last-modified: Wed, 24 May 2023 10:11:52 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 541107b5-a01e-0051-166f-7e1217000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-04-26 14:41:21 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2024-04-26 14:41:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49891	142.250.217.228	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:18 UTC	610	OUT	GET /recaptcha/api2/reload?k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9ODZjP6xKmMSUKwqw73HKViP961VsvjR3uofDDCHH6Bgfu__PbgnNxh6TNxjt_K_Nf4H_LpndGmm1AXVG8
2024-04-26 14:41:19 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 14:41:19 GMT Expires: Fri, 26 Apr 2024 14:41:19 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 14:41:19 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-26 14:41:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49892	3.216.18.136	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:18 UTC	361	OUT	GET /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:41:19 UTC	4209	IN	HTTP/1.1 406 Not Acceptable Date: Fri, 26 Apr 2024 14:41:19 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 144 Connection: close Status: 406 Not Acceptable Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Request-Id: 002rpuilmlidl2kihib0 X-Runtime: 0.017340 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com .sharepoint.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io api-visitor-analytics.intercom.com nexus-websocket-a.intercom.io via.intercom.io wss://nexus-websocket-a.intercom.io nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io uploads.intercomcdn.com uploads.intercomcdn.eu uploads.au.intercomcdn.com static.intercomassets.com app.getsentry.com sentry.io api.stripe.com meet.intercom.com meet.eu.intercom.com meet.au.intercom.com preview.intercom.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com static.intercomassets.eu app.eu.intercom.com api-iam.eu.intercom.io static.au.intercomassets.com api-iam.au.intercom.io api.au.intercom.io .intercom-chat.com wss://.nexus.intercom-chat.com .messenger.intercom-chat.com graph.facebook.com .twilio.com wss://.twilio.com frontend-telemetry.intercom.io frontend-telemetry.eu.intercom.io frontend-telemetry.au.intercom.io user-presence.intercom.com; font-src data: https:; frame-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com *.sharepoint.com; img-src data: blob: https:; media-src data: blob: https:; object-src 'none'; script-src 'self' js.intercomcdn.com static.intercomassets.com store.intercomassets.com billing-admin.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com store.intercom.io widget.intercom.io api.tiles.mapbox.com connect.facebook.net js.stripe.com platform.twitter.com switchet.s3.amazonaws.com www.google-analytics.com munchkin.marketo.net app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com dp3rct5vic41c.cloudfront.net static.intercomassets.eu static.au.intercomassets.com static.zuora.com p.trellocdn.com www.recaptcha.net; style-src 'self' 'unsafe-inline' static.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com static.intercomcdn.com marketing.intercomassets.com api.tiles.mapbox.com fonts.googleapis.com maxcdn.bootstrapcdn.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com fonts.intercomcdn.com static.intercomassets.eu static.au.intercomassets.com; report-uri https://app.getsentry.com/api/66205/csp-report/?sentry_key=0d13edc0ffce4b02bd7bc48d0b497300 Server: nginx
2024-04-26 14:41:19 UTC	144	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 6d 65 64 69 61 5f 74 79 70 65 5f 6e 6f 74 5f 61 63 63 65 70 74 61 62 6c 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 41 63 63 65 70 74 20 68 65 61 64 65 72 20 73 68 6f 75 6c 64 20 73 65 6e 64 20 61 20 6d 65 64 69 61 20 74 79 70 65 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 5d 2c 22 74 79 70 65 22 3a 22 65 72 72 6f 72 2e 6c 69 73 74 22 7d Data Ascii: {"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49893	142.250.217.228	443	3788	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:19 UTC	610	OUT	GET /recaptcha/api2/reload?k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9ODZjP6xKmMSUKwqw73HKViP961VsvjR3uofDDCHH6Bgfu__PbgnNxh6TNxjt_K_Nf4H_LpndGmm1AXVG8
2024-04-26 14:41:19 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 14:41:19 GMT Expires: Fri, 26 Apr 2024 14:41:19 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 14:41:19 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-26 14:41:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49895	72.14.190.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:21 UTC	550	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: d712e364-d78b26f4.digitoids.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="
2024-04-26 14:41:24 UTC	739	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 14:41:23 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2805993 cache-control: public, max-age=31536000 etag: 0x8DB5C3F466DE917 last-modified: Wed, 24 May 2023 10:11:43 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2722b384-301e-00f8-7062-7ea762000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-04-26 14:41:24 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-04-26 14:41:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49894	72.14.190.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:21 UTC	551	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: d712e364-d78b26f4.digitoids.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49896	72.14.190.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:21 UTC	537	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: d712e364-d78b26f4.digitoids.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49897	72.14.190.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:41:21 UTC	551	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: d712e364-d78b26f4.digitoids.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wuKEUb="ZDc4YjI2ZjQtMWEyZS00MjUwLTllMDAtMWZkMmJmMGU2ZGFhOmFkMDVlZDk0LThjMzItNDg2My05NTU2LTUxNTliN2U1MDcxOA=="

Target ID:	0
Start time:	16:39:50
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:39:55
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=2084,i,16595852118450099133,9907286040694937866,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:39:57
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://runrun.it/share/form/0GZMCgHSxRh4PBOM"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Yara match	File source: 1.6.pages.csv, type: HTML
Source: Yara match	File source: 9.19.pages.csv, type: HTML
Source: Yara match	File source: 9.14.pages.csv, type: HTML

Source: https://srmcorp.digitoids.com/?hro=GO&sso_reload=true	HTTP Parser: Iframe src: https://d16adfa6-d78b26f4.digitoids.com/Prefetch/Prefetch.aspx
Source: https://srmcorp.digitoids.com/?hro=GO&sso_reload=true	HTTP Parser: Iframe src: https://d16adfa6-d78b26f4.digitoids.com/Prefetch/Prefetch.aspx

Source: https://srmcorp.digitoids.com/?hro=GO	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll&co=aHR0cHM6Ly9ydW5ydW4uaXQ6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=nwp8pap3pi3r	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll&co=aHR0cHM6Ly9ydW5ydW4uaXQ6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=nwp8pap3pi3r	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll&co=aHR0cHM6Ly9ydW5ydW4uaXQ6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=6jc322lewbb	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc8v6MUAAAAABsEQfQ7JBJ2lw3nO-qX2l_Rj1Ll&co=aHR0cHM6Ly9ydW5ydW4uaXQ6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=6jc322lewbb	HTTP Parser: No favicon
Source: https://d16adfa6-d78b26f4.digitoids.com/Prefetch/Prefetch.aspx	HTTP Parser: No favicon

Source: https://srmcorp.digitoids.com/?hro=GO&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://srmcorp.digitoids.com/?hro=GO&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://srmcorp.digitoids.com/?hro=GO&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://srmcorp.digitoids.com/?hro=GO&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_190.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/runrun-it" target="_blank" title="LinkedIn"> equals www.linkedin.com (Linkedin)
Source: chromecache_190.2.dr	String found in binary or memory: <a href="https://www.youtube.com/runrunittv" target="_blank" title="Youtube Channel"> equals www.youtube.com (Youtube)
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: ","title":"Time well invested"}},"trial":"Trial","trial_expired":{"subtitle":"Choose your plan.","title":"Your 14-day trial has expired"},"true":"true","trusted_partner":{"authentic":"This is a trusted Runrun.it partner.","can_be_fraud":"The seal you just clicked can be placed on an untrusted website. If you have any questions, please get in touch by help@runrun.it","double_check":"Please, verify the partner's name you're trying to find or get in touch by help@runrun.it","failed":"Verification failed!","not_found":"Partner NOT found","page_description":"Partnership and teamwork evolve impact results. Meet who is part of our group of productivity.","page_title":"Become a Partner \| Runrun.it","promo_sub_title":"We are looking for structured companies that can add value by reselling, deploying and training customers on the Runrun.it platform.","promo_title":"Become a Runrun.it Partner","typeform_signup_url":"https://runrunit.typeform.com/to/l263rr","verified":"Partner verified!","visit_page":"Visit page"},"turn":"Turn it","tutorial":"Tutorial","tutorials":{"admin_config":{"modal_title":"How to change user settings on Runrun.it","youtube_embed":"dQebzRTJyOo"},"admin_users":{"modal_title":"How to manage users on Runrun.it","youtube_embed":"rlENE1QjBiE"},"bulletin":{"modal_title":"Bulletin","youtube_embed":"yLmOHFQ3ZVc"},"client":{"clients":{"modal_title":"Admin Clients","youtube_embed":"fiKvI1EeuDU"}},"docs":{"modal_title":"How to create Docs on Runrun.it","youtube_embed":"sdzP1BTgEvI"},"enterprise_account":{"modal_title":"How to configure the company account","youtube_embed":"2S4ocG5iD_U"},"mobile_app":{"modal_title":"How to use app Runrun.it mobile","youtube_embed":"H4fN2tiK2zY"},"more_videos":"More training videos","my_timesheet":{"modal_title":"Timesheet page","youtube_embed":"YqBCDRmHzN0"},"new_task":{"modal_title":"Create task","youtube_embed":"tpBCAxUR-Ls"},"off_day":{"title":{"modal_title":"How to add holidays on Runrun.it","youtube_embed":"AM0SAMSKqqM"}},"project_templates":{"modal_title":"Project Templates Page","youtube_embed":"epzH5fVOiVU"},"projects":{"modal_title":"Projects Page","youtube_embed":"hp3k0pc4jKI"},"reports":{"available_hours":{"modal_title":"Available Hours Report","youtube_embed":"EZKjd02gtkw"},"cost_per_client":{"modal_title":"Understand the costs report","youtube_embed":"ZjuaXScV8Vo"},"effort_per_task_type":{"modal_title":"Effort per Task Type Report","youtube_embed":"9r_vF2OGbvQ"},"gantt":{"modal_title":"Understand The Gantt Chart","youtube_embed":"cGMTIjD_qhk"},"hours_per_project":{"modal_title":"Hours Per Project Report","youtube_embed":"MRbq_02PHqU"},"people_allocation":{"modal_title":"Understand the efforts per client report","youtube_embed":"jjdRt7h6REQ"},"spreadsheets":{"modal_title":"Spreadsheets","youtube_embed":"euzx_3iadNg"}},"share_page":{"modal_title":"How to create a SharePage on Runrun.it","youtube_embed":"f-HVbdqzJ0I"},"task_list":{"modal_title":"Tasks Page Tutorial","youtube_embed":"k-3tgrInU2I"},"task_st
Source: chromecache_193.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Qj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_193.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Xg:d,Vg:e,Wg:f,Ih:g,Jh:h,ye:m,Ab:b},p=D.YT,q=function(){IC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(LC(w,"iframe_api")\|\|LC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!CC&&JC(x[A],n.ye))return tc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_124.2.dr, chromecache_143.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Jz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!p.length)return!0;var q=Fz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;M(121);if("https://www.facebook.com/tr/"===r)return M(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!vI(q, equals www.facebook.com (Facebook)
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: n: https://www.youtube.com/playlist?list=PLjMT8o2ihuuAwb1a6EvZQyHcJyXUR18uf.","body_line_3":" equals www.youtube.com (Youtube)
Source: chromecache_206.2.dr, chromecache_124.2.dr, chromecache_143.2.dr, chromecache_202.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: rio","youtube_embed":"ByovmkENqsU"},"youtube_more":"https://www.youtube.com/playlist?list=PLjMT8o2ihuuDzA9BDGE1HHXULntnuZvAO","zapier":{"modal_title":"Integra equals www.youtube.com (Youtube)
Source: chromecache_190.2.dr, chromecache_139.2.dr	String found in binary or memory: sticas de usuario","youtube_embed":"E1zm44AYA78"},"youtube_more":"https://www.youtube.com/playlist?list=PLjMT8o2ihuuB5qZJduldOKdTvDp6r38rH","zapier":{"modal_title":"Integraci equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: runrun.it
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: o556303.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: runrunit.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: srmcorp.digitoids.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.mxpnl.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: b8b29fee-d78b26f4.digitoids.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: 0824a98d-d78b26f4.digitoids.com
Source: global traffic	DNS traffic detected: DNS query: d712e364-d78b26f4.digitoids.com
Source: global traffic	DNS traffic detected: DNS query: l1ve.digitoids.com
Source: global traffic	DNS traffic detected: DNS query: d16adfa6-d78b26f4.digitoids.com
Source: global traffic	DNS traffic detected: DNS query: widget.intercom.io
Source: global traffic	DNS traffic detected: DNS query: js.intercomcdn.com
Source: global traffic	DNS traffic detected: DNS query: api-iam.intercom.io
Source: global traffic	DNS traffic detected: DNS query: nexus-websocket-a.intercom.io

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://runrun.it/share/form/0GZMCgHSxRh4PBOM

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Windows Analysis Report
https://runrun.it/share/form/0GZMCgHSxRh4PBOM