Edit tour

Windows Analysis Report
https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D

Overview

General Information

Sample URL:	https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQ
Analysis ID:	1339143
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Creates files inside the system directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3244 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2280,i,2289093056514221060,14702172471539406701,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6348 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.60.72.63:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.60.72.63:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49757 version: TLS 1.2

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.72.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D HTTP/1.1Host: links.iterable.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://links.iterable.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/iterable-s3/vendor.c89cf2fccf178016b036.css.gz HTTP/1.1Host: assets.iterable.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://links.iterable.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fc0790a3b72f4bedbc9632416ae307cf/20-04-26-Email_Header_Logo_HH.png HTTP/1.1Host: static.iterable.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://links.iterable.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://links.iterable.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fc0790a3b72f4bedbc9632416ae307cf/20-04-26-Email_Header_Logo_HH.png HTTP/1.1Host: static.iterable.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: links.iterable.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=709d43d303eba13784b0da51d4baab6ef98fcd57-1699454288139-ea09094b981d897761484f63
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZmRdgaHwKFpNNot&MD=GVw+lVUx HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZmRdgaHwKFpNNot&MD=GVw+lVUx HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 08 Nov 2023 14:38:11 GMTContent-Type: text/html; charset=utf-8Content-Length: 1376Connection: closeVary: OriginRequest-Time: 0Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-originX-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffContent-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-5TZcd0aZJjtY3PwyDAQidg=='X-Permitted-Cross-Domain-Policies: master-onlyServer: iterable-links d881

Source: chromecache_53.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_53.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_50.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b0931
Source: chromecache_50.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b0932
Source: chromecache_50.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b0934
Source: chromecache_50.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b0935
Source: chromecache_50.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b093b
Source: chromecache_47.2.dr	String found in binary or memory: https://assets.iterable.com/static/iterable-s3/vendor.c89cf2fccf178016b036.css.gz
Source: chromecache_51.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inconsolata/v32/QldgNThLqRwH-OJ1UHjlKENVzkWGVkL3GZQmAwLYxYWI2qfdm7Lpp4U8
Source: chromecache_47.2.dr	String found in binary or memory: https://links.iterable.com/favicon.ico
Source: chromecache_50.2.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=adq8zms&ht=tk&f=139.171.175.176.5474&a=609587&app=typekit&e=css
Source: chromecache_47.2.dr	String found in binary or memory: https://use.typekit.net/adq8zms.css
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/437c3d/00000000000000003b9b0932/27/a?subset_id=2&fvd=n3&v=3
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/437c3d/00000000000000003b9b0932/27/d?subset_id=2&fvd=n3&v=3
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/437c3d/00000000000000003b9b0932/27/l?subset_id=2&fvd=n3&v=3
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/4838bd/00000000000000003b9b0934/27/a?subset_id=2&fvd=n4&v=3
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/4838bd/00000000000000003b9b0934/27/d?subset_id=2&fvd=n4&v=3
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/4838bd/00000000000000003b9b0934/27/l?subset_id=2&fvd=n4&v=3
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/6aec08/00000000000000003b9b0935/27/a?subset_id=2&fvd=i4&v=3
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/6aec08/00000000000000003b9b0935/27/d?subset_id=2&fvd=i4&v=3
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/6aec08/00000000000000003b9b0935/27/l?subset_id=2&fvd=i4&v=3
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/71f83c/00000000000000003b9b093b/27/a?subset_id=2&fvd=n7&v=3
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/71f83c/00000000000000003b9b093b/27/d?subset_id=2&fvd=n7&v=3
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/71f83c/00000000000000003b9b093b/27/l?subset_id=2&fvd=n7&v=3
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/ed0e78/00000000000000003b9b0931/27/a?subset_id=2&fvd=n1&v=3
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/ed0e78/00000000000000003b9b0931/27/d?subset_id=2&fvd=n1&v=3
Source: chromecache_50.2.dr	String found in binary or memory: https://use.typekit.net/af/ed0e78/00000000000000003b9b0931/27/l?subset_id=2&fvd=n1&v=3

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk

Source: unknown	HTTPS traffic detected: 23.60.72.63:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.60.72.63:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49757 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_3244_1074407630

Jump to behavior

Source: classification engine

Classification label: clean0.win@16/10@20/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2280,i,2289093056514221060,14702172471539406701,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2280,i,2289093056514221060,14702172471539406701,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	3 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
assets.iterable.com	18.172.170.94	true	false	high
accounts.google.com	142.251.211.237	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
links.iterable.com	44.205.71.235	true	false	high
www.google.com	142.250.217.100	true	false	high
static.iterable.com	13.224.14.129	true	false	high
clients.l.google.com	142.250.69.206	true	false	high
use.typekit.net	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
p.typekit.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://assets.iterable.com/static/iterable-s3/vendor.c89cf2fccf178016b036.css.gz	false	high
https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D	false	high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0	false	high
https://links.iterable.com/favicon.ico	false	high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false	high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css	false	high
https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D	false	high
https://static.iterable.com/fc0790a3b72f4bedbc9632416ae307cf/20-04-26-Email_Header_Logo_HH.png	false	high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://use.typekit.net/af/6aec08/00000000000000003b9b0935/27/d?subset_id=2&fvd=i4&v=3	chromecache_50.2.dr	false	high
https://use.typekit.net/af/ed0e78/00000000000000003b9b0931/27/l?subset_id=2&fvd=n1&v=3	chromecache_50.2.dr	false	high
http://fontawesome.io	chromecache_53.2.dr	false	high
https://use.typekit.net/af/4838bd/00000000000000003b9b0934/27/d?subset_id=2&fvd=n4&v=3	chromecache_50.2.dr	false	high
https://use.typekit.net/af/437c3d/00000000000000003b9b0932/27/a?subset_id=2&fvd=n3&v=3	chromecache_50.2.dr	false	high
https://use.typekit.net/af/71f83c/00000000000000003b9b093b/27/a?subset_id=2&fvd=n7&v=3	chromecache_50.2.dr	false	high
https://use.typekit.net/af/ed0e78/00000000000000003b9b0931/27/a?subset_id=2&fvd=n1&v=3	chromecache_50.2.dr	false	high
http://fontawesome.io/license	chromecache_53.2.dr	false	high
https://use.typekit.net/adq8zms.css	chromecache_47.2.dr	false	high
https://use.typekit.net/af/71f83c/00000000000000003b9b093b/27/l?subset_id=2&fvd=n7&v=3	chromecache_50.2.dr	false	high
http://typekit.com/eulas/00000000000000003b9b0935	chromecache_50.2.dr	false	high
http://typekit.com/eulas/00000000000000003b9b0934	chromecache_50.2.dr	false	high
https://use.typekit.net/af/6aec08/00000000000000003b9b0935/27/a?subset_id=2&fvd=i4&v=3	chromecache_50.2.dr	false	high
http://typekit.com/eulas/00000000000000003b9b0931	chromecache_50.2.dr	false	high
http://typekit.com/eulas/00000000000000003b9b0932	chromecache_50.2.dr	false	high
https://use.typekit.net/af/4838bd/00000000000000003b9b0934/27/a?subset_id=2&fvd=n4&v=3	chromecache_50.2.dr	false	high
https://use.typekit.net/af/71f83c/00000000000000003b9b093b/27/d?subset_id=2&fvd=n7&v=3	chromecache_50.2.dr	false	high
https://use.typekit.net/af/6aec08/00000000000000003b9b0935/27/l?subset_id=2&fvd=i4&v=3	chromecache_50.2.dr	false	high
https://use.typekit.net/af/4838bd/00000000000000003b9b0934/27/l?subset_id=2&fvd=n4&v=3	chromecache_50.2.dr	false	high
https://use.typekit.net/af/437c3d/00000000000000003b9b0932/27/l?subset_id=2&fvd=n3&v=3	chromecache_50.2.dr	false	high
https://use.typekit.net/af/437c3d/00000000000000003b9b0932/27/d?subset_id=2&fvd=n3&v=3	chromecache_50.2.dr	false	high
https://p.typekit.net/p.css?s=1&k=adq8zms&ht=tk&f=139.171.175.176.5474&a=609587&app=typekit&e=css	chromecache_50.2.dr	false	high
https://use.typekit.net/af/ed0e78/00000000000000003b9b0931/27/d?subset_id=2&fvd=n1&v=3	chromecache_50.2.dr	false	high
http://typekit.com/eulas/00000000000000003b9b093b	chromecache_50.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.251.211.237	accounts.google.com	United States	15169	GOOGLEUS	false
13.224.14.58	unknown	United States	16509	AMAZON-02US	false
13.224.14.129	static.iterable.com	United States	16509	AMAZON-02US	false
142.250.217.100	www.google.com	United States	15169	GOOGLEUS	false
44.205.71.235	links.iterable.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.172.170.94	assets.iterable.com	United States	3	MIT-GATEWAYSUS	false
142.250.69.206	clients.l.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1339143
Start date and time:	2023-11-08 15:37:00 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 3m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/10@20/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.69.195, 34.104.35.123, 23.216.147.30, 23.216.147.29, 142.251.33.74, 23.216.147.33, 23.216.147.23, 142.251.211.227, 69.164.40.8, 192.229.211.108, 142.251.215.227
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, a1874.dscg1.akamai.net, fe3cr.delivery.mp.microsoft.com, p.typekit.net-stls-v3.edgesuite.net, ocsp.digicert.com, edgedl.me.gvt1.com, use-stls.adobe.com.edgesuite.net, update.googleapis.com, a1988.dscg1.akamai.net
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 560 x 86, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13292
Entropy (8bit):	7.968322104196462
Encrypted:	false
SSDEEP:	384:R8dhcUUs1M3k9aT/28GY5W1/NOIl6SzDVuLXkSMKH7PvdabcqM:mQrTvGH1AIlFFYT7Pvdes
MD5:	25A8807C6C328E265416DD55E22E0B5D
SHA1:	CF4DEE5739F6A100BD01AB3CFE6733318BB24CD0
SHA-256:	19FE594E627D4C043589A1132D592E9A900ED801B4D8C800B616E6F4D7F071C1
SHA-512:	572EF6E37BB57B53894BCE3E15BBD40F6CD0BB9311AFC9B7BE986B4825BB895E11C5A159EBB982EC9D5443F9706D2B0224D67416E984A20D875BDEAEA6994507
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...V............sRGB........DeXIfMM........i.......................................0...........V......b..3VIDATx..}.xU....s.s.........E..qk..&.....j[m....\|....._.O.l..XE.$h.T+K..`..-.........{...$......{...I.=3...o.w..b.CG_..}..l....Q.G(9....n....J..Q..;.r..WC..D-...=......B.b..R.(J/...Y..].K..5W.-........D@" .........=.aS....(.......r".x...K!....T-...+JGg.y74....+.N..)-....#.B.vm.x&<....H.$.....D ...)0L..\|~.R...J.P.5.j{.y.7IY.n._:.An....M..?.O(/M....Y.E =.3..../Ws.F......[" ...H.$....!......r...(.%......XI..N.,^.Y...bXX.?G.Y..).A%.uZM.F.:rF/......Uf.ae....h^.4..2c.%.....D@" .H......?#...aL..#.&.).D....Zu.z^>.:....]...V.,.p..!.:W.g...S....2...`......ef...bi..t..H.$.....D n.D\..>....SX20.. .%.gP...2l.bb.z..On..i...G.Q^..U!O...Q7.....#/........6..#.\|K.$.....D@"....0.dZ.[o...2".b....EW~...[l.I0E.K...S.m5..3......1X}.s...J.vS.=.N.j-............H.$.....D....SH...yn7....`.&..Y.".tR.l..\..../.O.w..M.G.j*....u.

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1376
Entropy (8bit):	4.557035601194895
Encrypted:	false
SSDEEP:	12:2X00LUJ4evXD3eOLUJ7EAP8Nilo0Ua4c9qBF2LUJsr22ju8EFHObEdSAdd2LUJmX:2X0rAEhgqBFkr2xpz8AzuW6crZSLb
MD5:	935067DADDE0C6E1E4D9E623DABA7304
SHA1:	4EEBD512E6A57106C0E7FB63DA67C298AF2487B8
SHA-256:	4DE1067BB896959F6C72041011E41BD25C1592F200D176FD95C7805748D915BC
SHA-512:	E18F809857CBA94DFE21D6E3BC7600D43013AD6769FEAF0A864755D72814ED5C751D5299BCBA9C366D02BC08192805BDE336F54DA2ABD46AD0F9C2720643C248
Malicious:	false
Reputation:	low
URL:	https://links.iterable.com/favicon.ico
Preview:	.... <!doctype html>. <html>. <head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">. <title ng-non-bindable>Action not found</title>. <meta name="description" content="Action not found" ng-non-bindable>. <meta name="viewport" content="width=device-width, maximum-scale=1, user-scalable=no">. <link rel="stylesheet" href="//cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css"/>. <link href='//fonts.googleapis.com/css?family=Inconsolata' rel='stylesheet' type='text/css'>. <link rel="stylesheet" href="https://use.typekit.net/adq8zms.css">.. . . . . <link rel="stylesheet" ng-non-bindable media="screen" href="https://assets.iterable.com/static/iterable-s3/vendor.c89cf2fccf178016b036.css.gz"/>. .. . </head>.. <body>.

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:U8n:U8n
MD5:	83D24D4B43CC7EEF2B61E66C95F3D158
SHA1:	F0CAFC285EE23BB6C28C5166F305493C4331C84D
SHA-256:	1C0FF118A4290C99F39C90ABB38703A866E47251B23CCA20266C69C812CCAFEB
SHA-512:	E6E84563D3A55767F8E5F36C4E217A0768120D6E15CE4D01AA63D36AF7EC8D20B600CE96DCC56DE91EC7E55E83A8267BADDD68B61447069B82ABDB2E92C6ACB6
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.css?s=1&k=adq8zms&ht=tk&f=139.171.175.176.5474&a=609587&app=typekit&e=css
Preview:	/**/.

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 19372, version 1.0
Category:	downloaded
Size (bytes):	19372
Entropy (8bit):	7.987066830343277
Encrypted:	false
SSDEEP:	384:pMptaasjCGuDsBcrh00IpB9t+sy6VO98JO4NLDo+64BrCf9/yp6T5X9oT:ipMa0RMsBcr3Otn+9R2Lk+6Srg/yIT5q
MD5:	05A806C9EAD12F80E9B74AE62FF7BF0E
SHA1:	3C1B9341B012B82F0DFBDFA3649AD692FB2848A9
SHA-256:	6B2B4DE8C5528C92AAF3C7AAAD67BDD0714DF23BBCC85C5238E02581DD21DEDA
SHA-512:	AF832B20C5C1726AF4D0BD4E9DD5AEC2EFD23F7DEE7D0E9950668CD7C01FF217A560A37F10410CEE6CFF183DDFBD7593FED7FC0DB610F839974BA71A5C380574
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/4838bd/00000000000000003b9b0934/27/l?subset_id=2&fvd=n4&v=3
Preview:	wOF2OTTO..K.......m...KM.........................F...P?DYNA.J.b?GDYN.Y..$.`..v.6.$..P....". ..l....Z<..&.......0.m{..~..?.....?..#d..............<)..JQK...0A.T.$wy...z......O.....v^..E.?.U..YE.ZR3..Jqo9RL..Y{-.....O.p.w.C....s.n....D.....L..y..7..]....._...vPw&N...W,S...........S..j#. F.,.,...Kf~.9{JI.-.?....dL..)2/2)xg....k.2Qt.J.E...8..1...c.....a$....f.,=..qjpZ5......7+..r..6.]&y.^.... .TZj.W.j.E...."5...".E.p...[...6.g.t.GDOHR.W..".....B.E%...TTf.k..N.v.R_...........K..,...U..xMJ].$e....+..R.Mz.R...R...2W..T...r.......KR.pK.'.....].52.D.....e..K.=Y.\|hl.M.......4\|E.m.}.D.}..2....s.!\|.!...R}..v[b...!i.&..xUP"..2....r8!....3.x..1.9..b..........?...Tfc.....5.q-.8..\..g..L...s...8..ql..c{..(.;.O......~.'..Q<.\|80......x....ZC...W...B$.0.S..L...+..8h5........t..RRj2WqY..9..H.P.*f.TdUT.JN....V.r/.c1...}.G.....slz...r.u9..)II.3.b.]G\.\}.a.a........Z7.0.'...C....8.C......Y#kb.l-;...L.....\|._.7.M.5..?.......ZQ'.E...].[...b../....8".....'....)o...

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (336)
Category:	downloaded
Size (bytes):	3120
Entropy (8bit):	5.1955766662612435
Encrypted:	false
SSDEEP:	24:35Y2AIQVza1VgGRPKKAtZHpIBUJoMxMHMqKa8XMx+HT87MxtHB+/qJ4MxlcHylT7:35Y2zQVW7PFg7JoM2b8XMhM8Mb9MFA
MD5:	5DDB4C098EA1856A7D2B902F03F94B90
SHA1:	B61635A28231CE1F67070939C7136486F549A527
SHA-256:	86F633ED78CC89DE6F94257CB7A6D56A6FD16DABDC47C427F018474F2A7E1AAB
SHA-512:	1E3C08126819F92B937596A986905DBEE5581A5F83D593756A434D346906F4DB35E07B6C5BD912AFAAA6B9CE9A79BFA43C378AD7ADB55492B97BEBC6ECED4C2D
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/adq8zms.css
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . proxima-nova:. * - http://typekit.com/eulas/00000000000000003b9b093b. * - http://typekit.com/eulas/00000000000000003b9b0931. * - http://typekit.com/eulas/00000000000000003b9b0934. * - http://typekit.com/eulas/00000000000000003b9b0935. * - http://typekit.com/eulas/00000000000000003b9b0932. . . 2009-2023 Adobe Systems Incorporated. All Rights Reserved.. /./{"last_published":"2018-07-09 22:34:19 UTC"}*/..@import url("https://p.typekit.net/p.css?s=1&k=adq8zms&ht=tk&f=139.171.175.176.5474&a=609587&app=typekit&e=css");..@font-face {.font-family:"proxima-nova";.src:url("https://use.typekit.net/af/71f83c/00000000000000003b9b093b/27/l?subset_id=2&fvd=n7&v=3") format("woff2"),url("https://use.typekit.net/af/71f83c/00000000000000003

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1318
Entropy (8bit):	5.533247357421588
Encrypted:	false
SSDEEP:	24:81/4OY7MVAZzh4OY7MvRVc+o/r4OY7Mbkwy96DGSSf7:cwOEM42OEMvRVc+ocOEMbkN0oD
MD5:	5D7FD7B7400C951803B7847FFFEC2982
SHA1:	8C31EBB39F32CDAE57A1151B66BCF742A7143A68
SHA-256:	573591C00B0AF42CD43B84D39EDACE78876C20245D8AFF820CC656B2555E2F03
SHA-512:	C71CF63935C121892D6D0548B7D0BE0358337EE61E8C1981DDFC6F1BD8E61FAA12DEA039C7189DA29DE7E75DA441A877E8F4C173382906E93FD0226D3F90A4D1
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Inconsolata
Preview:	/* vietnamese /.@font-face {. font-family: 'Inconsolata';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/inconsolata/v32/QldgNThLqRwH-OJ1UHjlKENVzkWGVkL3GZQmAwLYxYWI2qfdm7Lpp4U8WRL2l2eY.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Inconsolata';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/inconsolata/v32/QldgNThLqRwH-OJ1UHjlKENVzkWGVkL3GZQmAwLYxYWI2qfdm7Lpp4U8WRP2l2eY.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Inconsolata';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://font

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 947723
Category:	downloaded
Size (bytes):	151744
Entropy (8bit):	7.997600942560014
Encrypted:	true
SSDEEP:	3072:VlImPWflA956v4wE6T4lbKmnCwVaDPdVAJoivV3EMdm5smOx+b87z:VutBPE66bKfwVaDPHDqV34xOx+o7z
MD5:	73A35FFE82B65FCAC30A99654DEF2514
SHA1:	AD60200A00A2F0509BB8D897AA5A8196FCD80602
SHA-256:	B55E7B5A2606FF76994C3B140767B633F050AD4B385131A7FC336E6668F3A84B
SHA-512:	8141983CBA024A7814F6A79311B72AFC95032F4C2F3F5EC44BAA0A548BFAF3F987CB3B214911FFBDF3481265B537F76698B2A82B362BC19E66E8D9F33EE101F9
Malicious:	false
Reputation:	low
URL:	https://assets.iterable.com/static/iterable-s3/vendor.c89cf2fccf178016b036.css.gz
Preview:	.............. ..v....q(4#U..b}.<..h$.....X.El<Y.`...zX.Z..=-..... @.#...[...m..H$..D".H$^.....W..+...cZWe.K...K...Wqn'./vuR?L..y0.fu:.h.C..7._.......u~...V..H...:?..............K......L...y...h....<i.lr9ey=i.......,...........1i.~...}...?~Oj...y...m~..F"....'....].i......7.]U..f....J/uS.o&Y.O.eK....h...f....9.X.......L.E..'..S....A......C...I?.....,.J.@['.....6..+..h.,'.<n&.ooI'.I..p.@S.........y...P../.M..m[..L..#..'...p.-..E[...uW=...1..~.6..dW..7/.I../~..s....A3.b...j.'...~..]....d(...>bh.4.........v....p:..E.....d...+2.U.<...s0.v5.,.}......U..G_.$O..!X..1.....GP<B.m..... ..TQ.V..L...t..}..Q@.......:&.mq.w$..#.H._..._GU.......YR....#..2.%..="50H..Et<o.t...S.)....R....._.\|..T.~0..]..1.Yu....EW.rid.n...Ya.6..e..e......s.N...M.?^.......6...}B.Cb....yB..4...Z.X^Q..-.H......@...8.3b........'.f..X.....H..!Sn..gO.WhV.Zdq..j..1kj.....-C3&..d.t...]....-%....L^.9...^\3..8?..a.....\|q..S.....6.'\|.Z+.S.Z....*..}.....z5..wMh'...g.....S...h....

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 560 x 86, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13292
Entropy (8bit):	7.968322104196462
Encrypted:	false
SSDEEP:	384:R8dhcUUs1M3k9aT/28GY5W1/NOIl6SzDVuLXkSMKH7PvdabcqM:mQrTvGH1AIlFFYT7Pvdes
MD5:	25A8807C6C328E265416DD55E22E0B5D
SHA1:	CF4DEE5739F6A100BD01AB3CFE6733318BB24CD0
SHA-256:	19FE594E627D4C043589A1132D592E9A900ED801B4D8C800B616E6F4D7F071C1
SHA-512:	572EF6E37BB57B53894BCE3E15BBD40F6CD0BB9311AFC9B7BE986B4825BB895E11C5A159EBB982EC9D5443F9706D2B0224D67416E984A20D875BDEAEA6994507
Malicious:	false
Reputation:	low
URL:	https://static.iterable.com/fc0790a3b72f4bedbc9632416ae307cf/20-04-26-Email_Header_Logo_HH.png
Preview:	.PNG........IHDR...0...V............sRGB........DeXIfMM........i.......................................0...........V......b..3VIDATx..}.xU....s.s.........E..qk..&.....j[m....\|....._.O.l..XE.$h.T+K..`..-.........{...$......{...I.=3...o.w..b.CG_..}..l....Q.G(9....n....J..Q..;.r..WC..D-...=......B.b..R.(J/...Y..].K..5W.-........D@" .........=.aS....(.......r".x...K!....T-...+JGg.y74....+.N..)-....#.B.vm.x&<....H.$.....D ...)0L..\|~.R...J.P.5.j{.y.7IY.n._:.An....M..?.O(/M....Y.E =.3..../Ws.F......[" ...H.$....!......r...(.%......XI..N.,^.Y...bXX.?G.Y..).A%.uZM.F.:rF/......Uf.ae....h^.4..2c.%.....D@" .H......?#...aL..#.&.).D....Zu.z^>.:....]...V.,.p..!.:W.g...S....2...`......ef...bi..t..H.$.....D n.D\..>....SX20.. .%.gP...2l.bb.z..On..i...G.Q^..U!O...Q7.....#/........6..#.\|K.$.....D@"....0.dZ.[o...2".b....EW~...[l.I0E.K...S.m5..3......1X}.s...J.vS.=.N.j-............H.$.....D....SH...yn7....`.&..Y.".tR.l..\..../.O.w..M.G.j*....u.

Total Packets: 244
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 8, 2023 15:37:54.182517052 CET	49675	443	192.168.2.4	173.222.162.32
Nov 8, 2023 15:38:03.791872025 CET	49675	443	192.168.2.4	173.222.162.32
Nov 8, 2023 15:38:05.705344915 CET	49731	443	192.168.2.4	142.251.211.237
Nov 8, 2023 15:38:05.705436945 CET	443	49731	142.251.211.237	192.168.2.4
Nov 8, 2023 15:38:05.705503941 CET	49731	443	192.168.2.4	142.251.211.237
Nov 8, 2023 15:38:05.705905914 CET	49732	443	192.168.2.4	142.250.69.206
Nov 8, 2023 15:38:05.705951929 CET	443	49732	142.250.69.206	192.168.2.4
Nov 8, 2023 15:38:05.706003904 CET	49732	443	192.168.2.4	142.250.69.206
Nov 8, 2023 15:38:05.707032919 CET	49731	443	192.168.2.4	142.251.211.237
Nov 8, 2023 15:38:05.707065105 CET	443	49731	142.251.211.237	192.168.2.4
Nov 8, 2023 15:38:05.707263947 CET	49732	443	192.168.2.4	142.250.69.206
Nov 8, 2023 15:38:05.707278967 CET	443	49732	142.250.69.206	192.168.2.4
Nov 8, 2023 15:38:06.038650990 CET	443	49732	142.250.69.206	192.168.2.4
Nov 8, 2023 15:38:06.039009094 CET	49732	443	192.168.2.4	142.250.69.206
Nov 8, 2023 15:38:06.039025068 CET	443	49732	142.250.69.206	192.168.2.4
Nov 8, 2023 15:38:06.039455891 CET	443	49732	142.250.69.206	192.168.2.4
Nov 8, 2023 15:38:06.039580107 CET	49732	443	192.168.2.4	142.250.69.206
Nov 8, 2023 15:38:06.040488005 CET	443	49732	142.250.69.206	192.168.2.4
Nov 8, 2023 15:38:06.040560961 CET	49732	443	192.168.2.4	142.250.69.206
Nov 8, 2023 15:38:06.042243004 CET	49732	443	192.168.2.4	142.250.69.206
Nov 8, 2023 15:38:06.042341948 CET	443	49732	142.250.69.206	192.168.2.4
Nov 8, 2023 15:38:06.042886019 CET	49732	443	192.168.2.4	142.250.69.206
Nov 8, 2023 15:38:06.042892933 CET	443	49732	142.250.69.206	192.168.2.4
Nov 8, 2023 15:38:06.075290918 CET	443	49731	142.251.211.237	192.168.2.4
Nov 8, 2023 15:38:06.075619936 CET	49731	443	192.168.2.4	142.251.211.237
Nov 8, 2023 15:38:06.075634003 CET	443	49731	142.251.211.237	192.168.2.4
Nov 8, 2023 15:38:06.077910900 CET	443	49731	142.251.211.237	192.168.2.4
Nov 8, 2023 15:38:06.078000069 CET	49731	443	192.168.2.4	142.251.211.237
Nov 8, 2023 15:38:06.079180002 CET	49731	443	192.168.2.4	142.251.211.237
Nov 8, 2023 15:38:06.079266071 CET	443	49731	142.251.211.237	192.168.2.4
Nov 8, 2023 15:38:06.079643965 CET	49731	443	192.168.2.4	142.251.211.237
Nov 8, 2023 15:38:06.079651117 CET	443	49731	142.251.211.237	192.168.2.4
Nov 8, 2023 15:38:06.087805033 CET	49732	443	192.168.2.4	142.250.69.206
Nov 8, 2023 15:38:06.119151115 CET	49731	443	192.168.2.4	142.251.211.237
Nov 8, 2023 15:38:06.370549917 CET	443	49732	142.250.69.206	192.168.2.4
Nov 8, 2023 15:38:06.370691061 CET	443	49732	142.250.69.206	192.168.2.4
Nov 8, 2023 15:38:06.370773077 CET	49732	443	192.168.2.4	142.250.69.206
Nov 8, 2023 15:38:06.371925116 CET	49732	443	192.168.2.4	142.250.69.206
Nov 8, 2023 15:38:06.371949911 CET	443	49732	142.250.69.206	192.168.2.4
Nov 8, 2023 15:38:06.386550903 CET	443	49731	142.251.211.237	192.168.2.4
Nov 8, 2023 15:38:06.386703968 CET	443	49731	142.251.211.237	192.168.2.4
Nov 8, 2023 15:38:06.386756897 CET	49731	443	192.168.2.4	142.251.211.237
Nov 8, 2023 15:38:06.387614965 CET	49731	443	192.168.2.4	142.251.211.237
Nov 8, 2023 15:38:06.387625933 CET	443	49731	142.251.211.237	192.168.2.4
Nov 8, 2023 15:38:07.299515009 CET	49735	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:07.299563885 CET	443	49735	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:07.299628019 CET	49735	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:07.299988985 CET	49735	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:07.299999952 CET	443	49735	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:07.326283932 CET	49736	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:07.326339006 CET	443	49736	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:07.326500893 CET	49736	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:07.326862097 CET	49736	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:07.326874971 CET	443	49736	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.014238119 CET	443	49735	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.014518023 CET	49735	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:08.014533043 CET	443	49735	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.015588045 CET	443	49735	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.015665054 CET	49735	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:08.016906023 CET	49735	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:08.017014027 CET	443	49735	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.017083883 CET	49735	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:08.017091990 CET	443	49735	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.030308962 CET	443	49736	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.030548096 CET	49736	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:08.030564070 CET	443	49736	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.033938885 CET	443	49736	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.034023046 CET	49736	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:08.034390926 CET	49736	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:08.034555912 CET	443	49736	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.057688951 CET	49735	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:08.074431896 CET	49736	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:08.074461937 CET	443	49736	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.121884108 CET	49736	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:08.261781931 CET	443	49735	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.261810064 CET	443	49735	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.261895895 CET	443	49735	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.261925936 CET	49735	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:08.261975050 CET	49735	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:08.264508963 CET	49735	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:08.264524937 CET	443	49735	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:08.454657078 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:08.454703093 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:08.454770088 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:08.455161095 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:08.455171108 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:08.551578045 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:08.551604986 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:08.551670074 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:08.552150011 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:08.552161932 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:08.770054102 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:08.770425081 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:08.770446062 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:08.771492958 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:08.771557093 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:08.772964001 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:08.773026943 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:08.773190022 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:08.773195982 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:08.824369907 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:08.868850946 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:08.873475075 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:08.873497009 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:08.874561071 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:08.874646902 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:08.875746012 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:08.875799894 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:08.876051903 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:08.876060009 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:08.916594982 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.121457100 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.121510983 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.121542931 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.121553898 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:09.121566057 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.121604919 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:09.121609926 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.121958971 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.121984959 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.122009039 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:09.122013092 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.122050047 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:09.122385979 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.122437954 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.122476101 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:09.122479916 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.123284101 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.123316050 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.123336077 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:09.123339891 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.123379946 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:09.123383999 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.126487017 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.126548052 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:09.126554012 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.126660109 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.126694918 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.126697063 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:09.126703978 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.126741886 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:09.126745939 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.126784086 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.126811981 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.126821041 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:09.126825094 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.126857996 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:09.126862049 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.126921892 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.126960993 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:09.128798962 CET	49739	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:09.128813028 CET	443	49739	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:09.231408119 CET	49743	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:38:09.231503010 CET	443	49743	142.250.217.100	192.168.2.4
Nov 8, 2023 15:38:09.231590033 CET	49743	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:38:09.232325077 CET	49743	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:38:09.232361078 CET	443	49743	142.250.217.100	192.168.2.4
Nov 8, 2023 15:38:09.356595993 CET	49746	443	192.168.2.4	13.224.14.129
Nov 8, 2023 15:38:09.356635094 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:09.356698036 CET	49746	443	192.168.2.4	13.224.14.129
Nov 8, 2023 15:38:09.357089043 CET	49746	443	192.168.2.4	13.224.14.129
Nov 8, 2023 15:38:09.357101917 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:09.552962065 CET	443	49743	142.250.217.100	192.168.2.4
Nov 8, 2023 15:38:09.553580046 CET	49743	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:38:09.553607941 CET	443	49743	142.250.217.100	192.168.2.4
Nov 8, 2023 15:38:09.554701090 CET	443	49743	142.250.217.100	192.168.2.4
Nov 8, 2023 15:38:09.554745913 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.554764986 CET	49743	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:38:09.556632996 CET	49743	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:38:09.556727886 CET	443	49743	142.250.217.100	192.168.2.4
Nov 8, 2023 15:38:09.576186895 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.576200008 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.576214075 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.576411963 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.576437950 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.576502085 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.603451967 CET	49743	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:38:09.603471041 CET	443	49743	142.250.217.100	192.168.2.4
Nov 8, 2023 15:38:09.626944065 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.627118111 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.627124071 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.627186060 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.652039051 CET	49743	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:38:09.674046040 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:09.674386978 CET	49746	443	192.168.2.4	13.224.14.129
Nov 8, 2023 15:38:09.674412012 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:09.675535917 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:09.675614119 CET	49746	443	192.168.2.4	13.224.14.129
Nov 8, 2023 15:38:09.676857948 CET	49746	443	192.168.2.4	13.224.14.129
Nov 8, 2023 15:38:09.676949024 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:09.677258015 CET	49746	443	192.168.2.4	13.224.14.129
Nov 8, 2023 15:38:09.677268982 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:09.713100910 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.713191986 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.713237047 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.713315964 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.713376045 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.713376045 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.721559048 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.721693993 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.729154110 CET	49746	443	192.168.2.4	13.224.14.129
Nov 8, 2023 15:38:09.759419918 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.759459972 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.759633064 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.759654045 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.785142899 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.785172939 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.785366058 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.785384893 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.810828924 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.810853958 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.810983896 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.811005116 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.811062098 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.866687059 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.866899967 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.866925955 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.867003918 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.873210907 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.873298883 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.886240959 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.886352062 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.886379004 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.886451960 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.901140928 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.901201010 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.901261091 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.901276112 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.901297092 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.910753965 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.910845041 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.910857916 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.920244932 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.920350075 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.920361996 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.920439005 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:09.920488119 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.921260118 CET	49742	443	192.168.2.4	18.172.170.94
Nov 8, 2023 15:38:09.921273947 CET	443	49742	18.172.170.94	192.168.2.4
Nov 8, 2023 15:38:10.344547987 CET	49747	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:10.344630003 CET	443	49747	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:10.344716072 CET	49747	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:10.347594023 CET	49747	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:10.347621918 CET	443	49747	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:10.360774040 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:10.360802889 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:10.360811949 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:10.360837936 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:10.360852957 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:10.360872984 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:10.360918999 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:10.360956907 CET	49746	443	192.168.2.4	13.224.14.129
Nov 8, 2023 15:38:10.363019943 CET	49746	443	192.168.2.4	13.224.14.129
Nov 8, 2023 15:38:10.363020897 CET	49746	443	192.168.2.4	13.224.14.129
Nov 8, 2023 15:38:10.470412970 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:10.470439911 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:10.470496893 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:10.471064091 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:10.471072912 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:10.661956072 CET	443	49747	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:10.662094116 CET	49747	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:10.666179895 CET	49746	443	192.168.2.4	13.224.14.129
Nov 8, 2023 15:38:10.666209936 CET	443	49746	13.224.14.129	192.168.2.4
Nov 8, 2023 15:38:10.707088947 CET	49750	443	192.168.2.4	13.224.14.58
Nov 8, 2023 15:38:10.707123995 CET	443	49750	13.224.14.58	192.168.2.4
Nov 8, 2023 15:38:10.707184076 CET	49750	443	192.168.2.4	13.224.14.58
Nov 8, 2023 15:38:10.709599972 CET	49750	443	192.168.2.4	13.224.14.58
Nov 8, 2023 15:38:10.709610939 CET	443	49750	13.224.14.58	192.168.2.4
Nov 8, 2023 15:38:10.721515894 CET	49747	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:10.721524954 CET	443	49747	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:10.721872091 CET	443	49747	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:10.770986080 CET	49747	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:10.782738924 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:10.783207893 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:10.783226013 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:10.784248114 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:10.784301043 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:10.786084890 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:10.786154985 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:10.786206961 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:10.786215067 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:10.840404034 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:10.975244045 CET	49747	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:11.017270088 CET	443	49747	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:11.020484924 CET	443	49750	13.224.14.58	192.168.2.4
Nov 8, 2023 15:38:11.025473118 CET	49750	443	192.168.2.4	13.224.14.58
Nov 8, 2023 15:38:11.025504112 CET	443	49750	13.224.14.58	192.168.2.4
Nov 8, 2023 15:38:11.026726961 CET	443	49750	13.224.14.58	192.168.2.4
Nov 8, 2023 15:38:11.026829958 CET	49750	443	192.168.2.4	13.224.14.58
Nov 8, 2023 15:38:11.027684927 CET	49750	443	192.168.2.4	13.224.14.58
Nov 8, 2023 15:38:11.027760029 CET	443	49750	13.224.14.58	192.168.2.4
Nov 8, 2023 15:38:11.027954102 CET	49750	443	192.168.2.4	13.224.14.58
Nov 8, 2023 15:38:11.027966976 CET	443	49750	13.224.14.58	192.168.2.4
Nov 8, 2023 15:38:11.073376894 CET	49750	443	192.168.2.4	13.224.14.58
Nov 8, 2023 15:38:11.128067970 CET	443	49747	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:11.128144026 CET	443	49747	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:11.128213882 CET	49747	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:11.142195940 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.142256021 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.142286062 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.142307997 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.142323971 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.142365932 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.142391920 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.142399073 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.142438889 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.142833948 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.143625021 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.143662930 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.143670082 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.144694090 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.144723892 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.144757986 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.144768000 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.144808054 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.144895077 CET	49747	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:11.144905090 CET	443	49747	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:11.144926071 CET	49747	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:11.144931078 CET	443	49747	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:11.145478964 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.146353960 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.146383047 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.146410942 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.146419048 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.146466017 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.147176027 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.147985935 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.148040056 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.148046017 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.148821115 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.148875952 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.148884058 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.149679899 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.149729967 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.149736881 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.150464058 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.150517941 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.150525093 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.151273012 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.151321888 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.151329994 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.152167082 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.152215958 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.152221918 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.152961016 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.153037071 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.153043985 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.154680967 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.154748917 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.154758930 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.155466080 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.155523062 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.155530930 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.155847073 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.155904055 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.155910969 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.156651020 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.156697989 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.156704903 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.157501936 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.157562017 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.157571077 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.160011053 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.160077095 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.160085917 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.215305090 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.223963976 CET	49751	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:11.223997116 CET	443	49751	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:11.224117041 CET	49751	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:11.224967003 CET	49751	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:11.224978924 CET	443	49751	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:11.295053005 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.295073986 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.295316935 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.295335054 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.295388937 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.296338081 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.296408892 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.297080994 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.297147989 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.298831940 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.298898935 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.298903942 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.298921108 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.298949003 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.298988104 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.299423933 CET	49749	443	192.168.2.4	104.17.25.14
Nov 8, 2023 15:38:11.299434900 CET	443	49749	104.17.25.14	192.168.2.4
Nov 8, 2023 15:38:11.321571112 CET	49736	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:11.349898100 CET	443	49750	13.224.14.58	192.168.2.4
Nov 8, 2023 15:38:11.349926949 CET	443	49750	13.224.14.58	192.168.2.4
Nov 8, 2023 15:38:11.349961042 CET	443	49750	13.224.14.58	192.168.2.4
Nov 8, 2023 15:38:11.349986076 CET	443	49750	13.224.14.58	192.168.2.4
Nov 8, 2023 15:38:11.350004911 CET	443	49750	13.224.14.58	192.168.2.4
Nov 8, 2023 15:38:11.350011110 CET	443	49750	13.224.14.58	192.168.2.4
Nov 8, 2023 15:38:11.350080013 CET	49750	443	192.168.2.4	13.224.14.58
Nov 8, 2023 15:38:11.350142002 CET	49750	443	192.168.2.4	13.224.14.58
Nov 8, 2023 15:38:11.351635933 CET	49750	443	192.168.2.4	13.224.14.58
Nov 8, 2023 15:38:11.351644039 CET	443	49750	13.224.14.58	192.168.2.4
Nov 8, 2023 15:38:11.369263887 CET	443	49736	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:11.534795046 CET	443	49751	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:11.534955025 CET	49751	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:11.536906004 CET	49751	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:11.536911964 CET	443	49751	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:11.537147999 CET	443	49751	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:11.538937092 CET	49751	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:11.554837942 CET	443	49736	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:11.554929972 CET	443	49736	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:11.555020094 CET	49736	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:11.555816889 CET	49736	443	192.168.2.4	44.205.71.235
Nov 8, 2023 15:38:11.555835009 CET	443	49736	44.205.71.235	192.168.2.4
Nov 8, 2023 15:38:11.585253000 CET	443	49751	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:11.840375900 CET	443	49751	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:11.840478897 CET	443	49751	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:11.840554953 CET	49751	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:11.842062950 CET	49751	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:11.842080116 CET	443	49751	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:11.842096090 CET	49751	443	192.168.2.4	23.60.72.63
Nov 8, 2023 15:38:11.842102051 CET	443	49751	23.60.72.63	192.168.2.4
Nov 8, 2023 15:38:17.535810947 CET	49752	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:17.535897017 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:17.535979033 CET	49752	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:17.538408041 CET	49752	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:17.538470984 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:18.177541018 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:18.177824020 CET	49752	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:18.407707930 CET	49752	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:18.407742023 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:18.408025980 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:18.462773085 CET	49752	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:19.401103973 CET	49752	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:19.409671068 CET	49723	80	192.168.2.4	72.21.81.240
Nov 8, 2023 15:38:19.441288948 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:19.546329975 CET	443	49743	142.250.217.100	192.168.2.4
Nov 8, 2023 15:38:19.546494961 CET	443	49743	142.250.217.100	192.168.2.4
Nov 8, 2023 15:38:19.546662092 CET	49743	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:38:19.580085039 CET	80	49723	72.21.81.240	192.168.2.4
Nov 8, 2023 15:38:19.580398083 CET	49723	80	192.168.2.4	72.21.81.240
Nov 8, 2023 15:38:19.819957972 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:19.819987059 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:19.819996119 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:19.820005894 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:19.820020914 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:19.820031881 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:19.820130110 CET	49752	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:19.820158005 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:19.820172071 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:19.820290089 CET	49752	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:19.820290089 CET	49752	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:19.820300102 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:19.820353031 CET	49752	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:19.866154909 CET	49752	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:19.866156101 CET	49752	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:19.866202116 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:19.866218090 CET	443	49752	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:19.974407911 CET	49743	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:38:19.974440098 CET	443	49743	142.250.217.100	192.168.2.4
Nov 8, 2023 15:38:56.440285921 CET	49757	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:56.440340042 CET	443	49757	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:56.440396070 CET	49757	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:56.441135883 CET	49757	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:56.441150904 CET	443	49757	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:57.093763113 CET	443	49757	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:57.093875885 CET	49757	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:57.097944021 CET	49757	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:57.097970009 CET	443	49757	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:57.098303080 CET	443	49757	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:57.118374109 CET	49757	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:57.165273905 CET	443	49757	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:57.719702959 CET	443	49757	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:57.719729900 CET	443	49757	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:57.719772100 CET	443	49757	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:57.719890118 CET	49757	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:57.719933033 CET	443	49757	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:57.719954967 CET	443	49757	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:57.719968081 CET	49757	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:57.720014095 CET	49757	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:57.727889061 CET	49757	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:57.727956057 CET	443	49757	13.85.23.86	192.168.2.4
Nov 8, 2023 15:38:57.728005886 CET	49757	443	192.168.2.4	13.85.23.86
Nov 8, 2023 15:38:57.728019953 CET	443	49757	13.85.23.86	192.168.2.4
Nov 8, 2023 15:39:02.385576010 CET	49724	80	192.168.2.4	72.21.81.240
Nov 8, 2023 15:39:02.556126118 CET	80	49724	72.21.81.240	192.168.2.4
Nov 8, 2023 15:39:02.556230068 CET	49724	80	192.168.2.4	72.21.81.240
Nov 8, 2023 15:39:09.124279976 CET	49759	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:39:09.124316931 CET	443	49759	142.250.217.100	192.168.2.4
Nov 8, 2023 15:39:09.124402046 CET	49759	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:39:09.124737024 CET	49759	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:39:09.124742031 CET	443	49759	142.250.217.100	192.168.2.4
Nov 8, 2023 15:39:09.443768024 CET	443	49759	142.250.217.100	192.168.2.4
Nov 8, 2023 15:39:09.444215059 CET	49759	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:39:09.444242954 CET	443	49759	142.250.217.100	192.168.2.4
Nov 8, 2023 15:39:09.445060015 CET	443	49759	142.250.217.100	192.168.2.4
Nov 8, 2023 15:39:09.445432901 CET	49759	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:39:09.445516109 CET	443	49759	142.250.217.100	192.168.2.4
Nov 8, 2023 15:39:09.494149923 CET	49759	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:39:19.485882998 CET	443	49759	142.250.217.100	192.168.2.4
Nov 8, 2023 15:39:19.486054897 CET	443	49759	142.250.217.100	192.168.2.4
Nov 8, 2023 15:39:19.486133099 CET	49759	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:39:20.096656084 CET	49759	443	192.168.2.4	142.250.217.100
Nov 8, 2023 15:39:20.096709013 CET	443	49759	142.250.217.100	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 8, 2023 15:38:05.438028097 CET	53	54467	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:05.505435944 CET	54359	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:05.506081104 CET	56469	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:05.507668018 CET	51566	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:05.508369923 CET	52883	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:05.659013987 CET	53	54359	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:05.660697937 CET	53	56469	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:05.661273003 CET	53	51566	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:05.663301945 CET	53	52883	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:06.573318958 CET	53	53890	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:07.142406940 CET	50797	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:07.144557953 CET	49313	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:07.297270060 CET	53	50797	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:07.298835993 CET	53	49313	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:08.300473928 CET	64069	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:08.300698996 CET	58919	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:08.333842039 CET	51167	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:08.334220886 CET	52661	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:08.334765911 CET	49199	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:08.335052967 CET	57321	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:08.453356981 CET	53	58919	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:08.453880072 CET	53	64069	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:08.485908031 CET	53	51037	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:08.487715960 CET	53	57321	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:08.550309896 CET	53	49199	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:09.075584888 CET	64190	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:09.076145887 CET	51489	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:09.117783070 CET	56143	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:09.118391037 CET	64374	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:09.144217968 CET	50127	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:09.144620895 CET	54593	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:09.229438066 CET	53	64190	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:09.230230093 CET	53	51489	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:09.295360088 CET	53	60646	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:09.298880100 CET	53	54593	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:09.354579926 CET	53	50127	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:10.493843079 CET	64802	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:10.494486094 CET	57721	53	192.168.2.4	1.1.1.1
Nov 8, 2023 15:38:10.647437096 CET	53	64802	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:10.648148060 CET	53	57721	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:13.794044018 CET	138	138	192.168.2.4	192.168.2.255
Nov 8, 2023 15:38:23.539138079 CET	53	55447	1.1.1.1	192.168.2.4
Nov 8, 2023 15:38:42.477035999 CET	53	55222	1.1.1.1	192.168.2.4
Nov 8, 2023 15:39:04.858951092 CET	53	51381	1.1.1.1	192.168.2.4
Nov 8, 2023 15:39:05.360876083 CET	53	63445	1.1.1.1	192.168.2.4
Nov 8, 2023 15:39:32.515799999 CET	53	55684	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 8, 2023 15:38:05.505435944 CET	192.168.2.4	1.1.1.1	0xe749	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:05.506081104 CET	192.168.2.4	1.1.1.1	0x1257	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Nov 8, 2023 15:38:05.507668018 CET	192.168.2.4	1.1.1.1	0x6222	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:05.508369923 CET	192.168.2.4	1.1.1.1	0xe46e	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Nov 8, 2023 15:38:07.142406940 CET	192.168.2.4	1.1.1.1	0x24b0	Standard query (0)	links.iterable.com	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:07.144557953 CET	192.168.2.4	1.1.1.1	0xd02f	Standard query (0)	links.iterable.com	65	IN (0x0001)	false
Nov 8, 2023 15:38:08.300473928 CET	192.168.2.4	1.1.1.1	0x48da	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:08.300698996 CET	192.168.2.4	1.1.1.1	0xb0ad	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Nov 8, 2023 15:38:08.333842039 CET	192.168.2.4	1.1.1.1	0x705e	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:08.334220886 CET	192.168.2.4	1.1.1.1	0x7d89	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Nov 8, 2023 15:38:08.334765911 CET	192.168.2.4	1.1.1.1	0xe1ca	Standard query (0)	assets.iterable.com	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:08.335052967 CET	192.168.2.4	1.1.1.1	0xe910	Standard query (0)	assets.iterable.com	65	IN (0x0001)	false
Nov 8, 2023 15:38:09.075584888 CET	192.168.2.4	1.1.1.1	0x8798	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:09.076145887 CET	192.168.2.4	1.1.1.1	0xd77b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 8, 2023 15:38:09.117783070 CET	192.168.2.4	1.1.1.1	0xd5ee	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:09.118391037 CET	192.168.2.4	1.1.1.1	0x2335	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
Nov 8, 2023 15:38:09.144217968 CET	192.168.2.4	1.1.1.1	0x4326	Standard query (0)	static.iterable.com	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:09.144620895 CET	192.168.2.4	1.1.1.1	0x6398	Standard query (0)	static.iterable.com	65	IN (0x0001)	false
Nov 8, 2023 15:38:10.493843079 CET	192.168.2.4	1.1.1.1	0x502a	Standard query (0)	static.iterable.com	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:10.494486094 CET	192.168.2.4	1.1.1.1	0x7a14	Standard query (0)	static.iterable.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 8, 2023 15:38:05.659013987 CET	1.1.1.1	192.168.2.4	0xe749	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2023 15:38:05.659013987 CET	1.1.1.1	192.168.2.4	0xe749	No error (0)	clients.l.google.com		142.250.69.206	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:05.660697937 CET	1.1.1.1	192.168.2.4	0x1257	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2023 15:38:05.661273003 CET	1.1.1.1	192.168.2.4	0x6222	No error (0)	accounts.google.com		142.251.211.237	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:07.297270060 CET	1.1.1.1	192.168.2.4	0x24b0	No error (0)	links.iterable.com		44.205.71.235	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:07.297270060 CET	1.1.1.1	192.168.2.4	0x24b0	No error (0)	links.iterable.com		52.205.94.58	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:07.297270060 CET	1.1.1.1	192.168.2.4	0x24b0	No error (0)	links.iterable.com		34.226.235.82	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:08.453356981 CET	1.1.1.1	192.168.2.4	0xb0ad	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Nov 8, 2023 15:38:08.453880072 CET	1.1.1.1	192.168.2.4	0x48da	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:08.453880072 CET	1.1.1.1	192.168.2.4	0x48da	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:08.487236977 CET	1.1.1.1	192.168.2.4	0x705e	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2023 15:38:08.488315105 CET	1.1.1.1	192.168.2.4	0x7d89	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2023 15:38:08.550309896 CET	1.1.1.1	192.168.2.4	0xe1ca	No error (0)	assets.iterable.com		18.172.170.94	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:08.550309896 CET	1.1.1.1	192.168.2.4	0xe1ca	No error (0)	assets.iterable.com		18.172.170.97	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:08.550309896 CET	1.1.1.1	192.168.2.4	0xe1ca	No error (0)	assets.iterable.com		18.172.170.70	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:08.550309896 CET	1.1.1.1	192.168.2.4	0xe1ca	No error (0)	assets.iterable.com		18.172.170.60	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:09.229438066 CET	1.1.1.1	192.168.2.4	0x8798	No error (0)	www.google.com		142.250.217.100	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:09.230230093 CET	1.1.1.1	192.168.2.4	0xd77b	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 8, 2023 15:38:09.274600029 CET	1.1.1.1	192.168.2.4	0xd5ee	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2023 15:38:09.278692961 CET	1.1.1.1	192.168.2.4	0x2335	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2023 15:38:09.354579926 CET	1.1.1.1	192.168.2.4	0x4326	No error (0)	static.iterable.com		13.224.14.129	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:09.354579926 CET	1.1.1.1	192.168.2.4	0x4326	No error (0)	static.iterable.com		13.224.14.12	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:09.354579926 CET	1.1.1.1	192.168.2.4	0x4326	No error (0)	static.iterable.com		13.224.14.58	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:09.354579926 CET	1.1.1.1	192.168.2.4	0x4326	No error (0)	static.iterable.com		13.224.14.79	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:10.647437096 CET	1.1.1.1	192.168.2.4	0x502a	No error (0)	static.iterable.com		13.224.14.58	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:10.647437096 CET	1.1.1.1	192.168.2.4	0x502a	No error (0)	static.iterable.com		13.224.14.79	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:10.647437096 CET	1.1.1.1	192.168.2.4	0x502a	No error (0)	static.iterable.com		13.224.14.12	A (IP address)	IN (0x0001)	false
Nov 8, 2023 15:38:10.647437096 CET	1.1.1.1	192.168.2.4	0x502a	No error (0)	static.iterable.com		13.224.14.129	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

clients2.google.com

accounts.google.com

links.iterable.com

https:

cdnjs.cloudflare.com

assets.iterable.com

static.iterable.com

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.4	49732	142.250.69.206	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:06 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.4	49731	142.251.211.237	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:06 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-11-08 14:38:06 UTC	1	OUT	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.4	49746	13.224.14.129	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:09 UTC	71	OUT	GET /fc0790a3b72f4bedbc9632416ae307cf/20-04-26-Email_Header_Logo_HH.png HTTP/1.1 Host: static.iterable.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://links.iterable.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	13.224.14.129	443	192.168.2.4	49746	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:10 UTC	190	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 13292 Connection: close Date: Wed, 08 Nov 2023 14:38:11 GMT Last-Modified: Sun, 26 Apr 2020 11:36:00 GMT ETag: "25a8807c6c328e265416dd55e22e0b5d" x-amz-server-side-encryption: AES256 x-amz-version-id: oU59xn3GZQoJ_S1KM3OnTVsInzR8pcHa Accept-Ranges: bytes Server: AmazonS3 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Security-Policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin X-Cache: Miss from cloudfront Via: 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C2 X-Amz-Cf-Id: LgrfjZCUu1ycBRxzXYoqeCSqO_XZ5YCsF7KDYjosP17FrKpaosb3xQ==
2023-11-08 14:38:10 UTC	191	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 30 00 00 00 56 08 06 00 00 00 d1 c3 ac 01 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 30 a0 03 00 04 00 00 00 01 00 00 00 56 00 00 00 00 c8 91 85 62 00 00 33 56 49 44 41 54 78 01 ed 7d 09 78 55 c5 d9 ff 99 73 97 73 03 04 10 01 95 ec 01 02 82 45 14 11 71 6b d0 ca 26 b8 e3 82 8a 8a d4 02 6a 5b 6d b5 b6 d6 c7 7c d6 b6 b6 2e fd ea 5f db 4f 11 6c b5 ae 58 45 a8 24 68 c5 54 2b 4b 95 aa 60 90 84 2d 0b c8 12 10 09 81 e4 de dc 7b e6 ff 9b 24 87 dc dc ed cc dc 7b ee ca 9c e7 49 ce 3d 33 ef bc f3 ce 6f b6 77 de d9 88 62 c1 43 47 5f d6 d7 7d Data Ascii: PNGIHDR0VsRGBDeXIfMM*i0Vb3VIDATx}xUssEqk&j[m\|._OlXE$hT+K`-{${I=3owbCG_}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.4	49749	104.17.25.14	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:10 UTC	204	OUT	GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://links.iterable.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.4	49747	23.60.72.63	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:10 UTC	205	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-11-08 14:38:11 UTC	205	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/250E) X-CID: 11 Cache-Control: public, max-age=159692 Date: Wed, 08 Nov 2023 14:38:11 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.4	49750	13.224.14.58	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:11 UTC	205	OUT	GET /fc0790a3b72f4bedbc9632416ae307cf/20-04-26-Email_Header_Logo_HH.png HTTP/1.1 Host: static.iterable.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	104.17.25.14	443	192.168.2.4	49749	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:11 UTC	206	IN	HTTP/1.1 200 OK Date: Wed, 08 Nov 2023 14:38:11 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 77160 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "5eb03e5f-12d68" Last-Modified: Mon, 04 May 2020 16:10:07 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 33791 Expires: Mon, 28 Oct 2024 14:38:11 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MBd7AXJW4b9OoTpDBqKBTkTMGqjQUarQxG%2FwOsrhMXeThsY5Yj5%2BM3MdKC7SSKM6kU4SlRRsievxpRlpKfqUfCU3xmukF8U3l3uLdDizGxnCr5MRmfxcRS5i8HqoMq9kxCZpEudN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 822e8ee70f3c0943-SEA alt-svc: h3=":443"; ma=86400
2023-11-08 14:38:11 UTC	207	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a c4 cd 90 44 8a 9e Data Ascii: wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3nD
2023-11-08 14:38:11 UTC	207	IN	Data Raw: c9 27 8a 0f 36 a3 3a b0 bb c3 f3 73 eb 6d a3 62 8c 31 d8 a8 6d 30 22 c7 82 1a b0 bf 2a 56 8c a8 8d 1e a3 63 a3 24 2c 30 41 54 50 54 b4 31 12 03 fb f4 ac 3c 0b ed 3b ed f3 d2 60 10 e6 b6 27 f1 48 0e 3f f1 73 ce a9 3a 91 0f 4e 44 9f a8 fc a9 10 49 11 a4 24 8c 04 54 14 8b 5b 81 82 62 34 8a 11 cd fc 7f ea ec ef 2c af ce bc d7 ef bd a3 62 6c 36 91 ba 0b 49 4c e9 69 7d db 8c 26 e0 34 e3 94 6d 2c 27 cb 16 cb f3 23 bd d7 a5 b3 7f 52 77 01 a2 62 75 c0 b6 2c 4b 96 0b c6 06 9b e2 76 8b 03 db 08 6d 5f 2d c0 c0 e6 5c 48 8b 9d fb 8e 48 48 fe aa f3 93 ea 07 c6 c2 3f 98 96 d3 6d f3 0b 39 50 88 ad d8 29 39 e7 4a a8 86 24 c6 bd 88 9c e7 b1 f4 38 f8 e8 c7 da ce ce 7e b9 3b c4 72 15 8d 6e bf 3d 24 11 1a b5 1f 94 4e 64 64 6e 1b 21 27 ae a6 f0 e3 3b b3 f4 ac 38 99 bc 27 d9 4e Data Ascii: '6:smb1m0"*Vc$,0ATPT1<;`'H?s:NDI$T[b4,bl6ILi}&4m,'#Rwbu,Kvm_-\HHH?m9P)9J$8~;rn=$Nddn!';8'N
2023-11-08 14:38:11 UTC	208	IN	Data Raw: 14 28 65 6c 1c 2b 32 75 2d ee d0 61 d6 98 64 a2 8e 35 3b a2 4e 24 d4 f6 22 a2 48 aa 8f 10 ab 53 46 ba 6f eb 32 69 a8 22 8a d9 5c b3 68 04 37 49 8c f6 a0 3c 53 43 4f 02 ad 19 b8 96 c8 90 48 a0 1e e2 45 77 21 01 2e 1f d7 e9 fd 21 42 53 12 43 aa 67 1e c4 9d 89 63 e3 0e b9 e4 73 2a d5 a7 73 89 28 35 6d 94 3d 71 c6 ca 8a 65 a2 fb f1 59 91 0b 24 eb 5c 3e 10 66 4e 38 80 71 97 8c 78 ea 23 76 0a a5 36 75 6d ef 09 e0 19 9d b0 60 db 4e 4d 2d 4a 00 5c f4 10 46 b7 c7 72 e9 44 02 80 1e b5 5a d3 30 93 07 23 27 ea a5 88 6e ec 11 d2 47 6a 4c 82 da 86 58 14 1b ca 8c a2 41 aa 9d f1 67 59 73 99 2a b2 59 ca dc 07 c7 5e d9 b5 98 3b 22 d8 1d 24 68 62 7f 3d b9 16 19 cf 9b 13 98 30 de 76 48 3c 97 56 76 7f 81 63 9b 5f 00 5c 59 8a 03 ec a3 e8 77 3b 64 42 16 02 83 8b 03 4e 83 84 33 Data Ascii: (el+2u-ad5;N$"HSFo2i"\h7I<SCOHEw!.!BSCgcss(5m=qeY$\>fN8qx#v6um`NM-J\FrDZ0#'nGjLXAgYsY^;"$hb=0vH<Vvc_\Yw;dBN3
2023-11-08 14:38:11 UTC	210	IN	Data Raw: fb bb 04 43 3e c0 1e 1e 83 a7 e1 17 78 50 55 ba 7a 1e ad 7d 59 11 3d 02 0f f5 cc 95 16 bc 7d f5 d0 b6 c7 10 9a 19 0a e7 0d 1c 36 2d 60 2f 22 48 0b 0a 6f 85 26 92 44 97 49 30 ff 45 32 58 61 89 95 2d 1f a9 7b 0e 35 c0 81 99 3c 0d 2c 7d 94 d1 13 60 60 36 fa c7 ed 18 90 6a 69 a2 e9 d8 69 6d 3c 55 75 6a 59 a9 5a fa 6a 0e 42 5c 40 8c 67 cb 33 45 6a 66 70 96 f8 98 9f 3a ba da ed ea 10 57 db c7 ae 9f ba d9 df b3 8e 9c 94 ce 70 a5 c4 b3 33 61 6f af fb 11 81 31 88 64 61 8b f8 20 9c 03 b7 dd ab a5 fd 88 99 4a 82 d7 b2 3f 20 6a ce 71 37 ae be 4d c3 e6 ce 66 66 99 59 b5 66 cb 1c d4 73 02 1e b0 1b 24 9b 9c 09 84 95 48 fd 91 14 e6 ac 6c a5 96 f5 b9 bf c0 88 97 28 25 2e 9b 72 06 e3 d2 77 3f 03 f2 be 6d 3d 7e 0b 82 79 b2 63 59 91 62 67 29 3c cb 57 84 20 2f 56 78 16 da 6b Data Ascii: C>xPUz}Y=}6-`/"Ho&DI0E2Xa-{5<,}``6jiim<UujYZjB\@g3Ejfp:Wp3ao1da J? jq7MffYfs$Hl(%.rw?m=~ycYbg)<W /Vxk
2023-11-08 14:38:11 UTC	211	IN	Data Raw: 53 92 a4 51 ba 98 74 9e ee 03 36 2c a0 51 e3 6a 5c 08 f0 e3 3c 08 2f 5d 4e ae 73 fb cd 1d a5 3b cd 27 0c 18 48 58 5d 8e 45 98 32 1e 39 90 87 64 a6 6b 59 fd 0d d9 6a 90 8e c2 52 36 d1 d4 ed f7 03 51 12 21 98 ca 00 ea ee f7 20 56 86 bb 99 0a 25 22 08 15 5e d0 60 97 4e 33 4f f2 8c a2 0f fa 86 83 ac 5b f1 1d 76 3a e0 ca 84 3a d9 e8 5e da 9c 72 d7 bf e7 11 40 ea d2 ec 0a 8d 46 c5 5f ae d7 11 e5 01 08 4e 63 cc 42 d2 17 f1 fd c3 38 70 a3 5c 69 af a2 b5 d7 37 cf ee 8b 67 e5 ad 03 2a ee 8f d1 cd fd 2c 83 43 ab 9d 1a c2 0e e1 5b 87 36 b4 54 92 3f ba ba b5 16 85 25 f2 7a fb c5 40 01 06 18 6a 41 70 42 4e 35 f0 9e 22 34 54 9e a5 e0 f4 22 96 7d 30 75 4a f4 87 8f 9e 96 c8 9c 7e 33 f6 1e d9 0e d1 7b 7d 02 75 57 f6 8c e0 ee 4d 93 1e 6a fa 39 c8 2d 82 5d 13 f5 ab 9d 11 99 Data Ascii: SQt6,Qj\</]Ns;'HX]E29dkYjR6Q! V%"^`N3O[v::^r@F_NcB8p\i7g*,C[6T?%z@jApBN5"4T"}0uJ~3{}uWMj9-]
2023-11-08 14:38:11 UTC	212	IN	Data Raw: 62 72 c7 92 84 81 d7 9d ea ce 5d 11 e5 78 e2 1d 39 3d 52 19 76 26 2a 51 35 e8 80 04 30 7a 7f 1e f3 cb f8 79 3c 88 e0 01 ea 83 60 4d 7c f6 d4 99 9a 64 4f 86 d9 a5 69 5a ae e3 19 c5 24 ae ee 19 bb 2b 23 1e 4b 48 c8 46 0a 8d c3 e9 c4 ea ed be 83 00 a7 8e 09 ee c8 18 f8 89 1f a7 8f 29 2d 09 be 06 3a 4d 24 cb 79 63 a0 ae 45 c0 25 41 69 95 92 05 32 5d 96 98 08 cc 6c e5 b6 a8 90 89 1c 9a 19 cd 38 86 49 1a bc 79 b2 d2 05 5a 17 47 4a b3 83 1a a2 06 ae 5c d5 1e 32 1a d6 99 58 62 18 bf 4c be f6 f0 9f 49 c2 41 2d fd 47 72 52 00 21 cd 30 a0 13 a0 db 4c 2b c0 51 68 aa 53 f3 59 d4 d2 13 d7 f2 53 bf 35 fd 5f 1e d8 28 a5 06 0e 70 6f 46 9a a7 54 89 87 11 af 23 6b 1c 4e db be ea 6c 7c 72 87 6e 06 b3 64 d7 48 a0 07 1e 96 dc 79 13 db 8a e6 f9 ee e4 c8 26 db 86 17 78 e3 70 b0 Data Ascii: br]x9=Rv&*Q50zy<`M\|dOiZ$+#KHF)-:M$ycE%Ai2]l8IyZGJ\2XbLIA-GrR!0L+QhSYS5_(poFT#kNl\|rndHy&xp
2023-11-08 14:38:11 UTC	214	IN	Data Raw: 00 af 61 99 39 50 89 ab 26 e0 f8 d1 c5 36 4f 6f be d6 03 17 6c a9 3c 9d d4 f3 e2 02 19 f2 19 ef 64 73 3d 23 01 33 c5 73 16 8f b5 50 2d d0 62 44 a0 d4 fc 22 8d 0f ec 5b 3a b0 77 c9 ba 5e 6a f9 89 d3 81 bb d0 51 65 6a 60 8c 8b 97 54 71 92 05 3d a2 fa b1 94 48 26 a3 6f 8f 1b a1 1b 6b c4 89 4c 44 de 57 a1 4f fb 86 c2 f9 94 eb ca 2a 4a 33 73 5b 19 ce 36 9d 6a 31 f0 40 d9 d8 6e 72 3c ae ce be db 87 86 23 89 cd d2 40 09 88 30 bf 9b 63 06 09 a2 9d 1f 05 99 3f ef b5 9d 3c 32 8a 44 d5 d3 a6 09 bf e8 7d af b0 54 73 cd d9 53 ce fd d0 22 e2 0b 52 cd 0a ae 95 a4 2e 7d df 6f 5a de cd 18 e3 87 f9 46 6f 2a 98 95 a7 dd 97 87 b6 ff b7 96 b5 3a dd f4 d6 1b c1 93 bc c1 37 c9 ed f7 48 c2 f2 e4 8d 9a 0e a5 78 a1 b4 5d c5 db c7 61 19 36 1e 76 35 ed 12 52 fd a0 cc be 65 31 87 ed Data Ascii: a9P&6Ool<ds=#3sP-bD"[:w^jQej`Tq=H&okLDWOJ3s[6j1@nr<#@0c?<2D}TsS"R.}oZFo:7Hx]a6v5Re1
2023-11-08 14:38:11 UTC	215	IN	Data Raw: 31 80 2d 82 59 99 97 50 c7 4e c2 bf 00 8a 5c 26 b9 79 4c 38 af d3 b9 cd f7 89 26 30 cb 63 92 c1 76 08 14 f0 c6 89 5c 8e c0 8a a1 f2 4a b5 41 ca cd 3b a4 f2 51 3b 1c 95 5d 85 89 fd 49 b4 4d 38 09 d9 73 af 02 aa d8 14 4d 66 f4 3f d4 b0 07 1c a1 49 12 18 9a b2 72 1b bb 72 21 d2 4b 86 39 d1 8f 38 70 d9 7d 51 bf ec bd 8d 8b e7 67 fb 2d 84 2a 0f 73 6d b5 7e c5 58 06 d7 50 1a 30 64 f8 4d 5e 08 b5 f0 3f 44 c5 18 64 49 82 6d 3c 86 a8 70 3b a1 7f 06 79 8e 06 2c 22 db a6 a6 36 ad e4 76 ca 70 07 54 5c 5e ca 6e f4 db f7 be 7f 05 33 6d a4 3e 38 a4 65 43 ae f1 dc 4e 7d 10 ad cd ea ed 63 c3 a0 e6 d9 ad 24 73 37 db bc 13 fa 9c 23 d5 b5 3c 53 46 2d 41 ba a7 a0 14 e4 86 f9 7a ac d2 e2 89 b1 13 cf 0a 80 42 81 09 2a 7b b8 06 36 63 67 1d 89 87 b1 54 7a ad 47 07 58 1f 32 2b 93 Data Ascii: 1-YPN\&yL8&0cv\JA;Q;]IM8sMf?Irr!K98p}Qg-sm~XP0dM^?DdIm<p;y,"6vpT\^n3m>8eCN}c$s7#<SF-AzB{6cgTzGX2+
2023-11-08 14:38:11 UTC	216	IN	Data Raw: 87 51 bc 9c 30 bf e5 fe d4 a5 ed 55 bf c9 75 29 4d b6 dd 5b c6 5a 60 22 9f 37 0d b9 e2 1a 0e 3f 2f 5b 43 e4 7b cc 6c f1 82 29 f2 24 18 4d 72 89 f5 c0 9a 7c 5e ba 04 91 09 61 99 bb e2 b7 10 03 fe a7 3a 88 a0 cd 22 e9 d6 8a 9d db 61 09 c2 6c 02 f2 3e 1b de 68 00 c7 e1 79 a2 7f 80 14 61 d1 ce 7b 9e 32 3e af fe 43 50 ae 89 90 b0 4c c5 0f 10 20 9a 6a 3f d1 6e 08 74 67 e5 9e d8 d3 5d 03 a6 16 e1 53 88 b8 f8 f8 7b e1 b5 55 d3 87 05 91 28 27 b3 b5 62 e7 a3 27 66 8f e6 67 30 d3 83 dd ea 18 95 c4 4c 50 41 a5 4d 74 64 15 07 cc 29 e3 b3 32 c3 ba e3 59 21 d6 76 00 8e 26 60 6f 85 af fe 32 12 50 5b 0b 1b 9d 61 de 94 84 bb 35 fb c0 0c 53 87 7c 23 2b 80 b2 01 37 4a 05 a4 8a 0a 23 1b c8 b8 cc 5f ab d5 64 55 a9 a4 36 23 56 19 44 ae 86 c0 9b 42 22 4b 83 f7 d6 7c a2 1a b8 c0 Data Ascii: Q0Uu)M[Z`"7?/[C{l)$Mr\|^a:"al>hya{2>CPL j?ntg]S{U('b'fg0LPAMtd)2Y!v&`o2P[a5S\|#+7J#_dU6#VDB"K\|
2023-11-08 14:38:11 UTC	218	IN	Data Raw: ea f8 c8 84 36 e6 90 4e ce 81 84 aa 9e 41 7d 6a c0 8e 42 61 f3 c1 1c 33 ed c5 a5 29 ea 15 c3 cf cb b4 3a 71 ba 49 ab 00 ed af 9e c1 1d 67 5a be 08 32 cf 76 1a 6c 66 2c df 10 d0 a3 a2 ce 7f 59 bf f3 87 d1 ae ec dd 62 d4 a9 ea 1c f9 9e 19 d9 58 6f c3 49 12 c4 97 cb 9c dd 58 a8 81 a2 0e 5f 27 01 c4 12 f2 c3 35 f5 c7 15 5d 1a 4a 84 b8 fc 32 50 d2 08 39 32 b0 a8 43 cd 89 fa d4 ff 0c fd 40 f1 99 a6 43 a5 a0 86 f9 9b 18 36 14 45 9f 65 d1 00 42 40 8b 0b 06 e8 ac df 41 91 39 94 df 87 c3 02 e7 e6 c7 b4 e8 79 06 5d 00 f5 05 48 f1 09 07 89 03 2d 1c e0 20 db 62 b6 a8 39 0d d1 f0 4f 1e f5 19 30 0c 75 77 a7 ac 49 e2 c8 f1 a6 02 37 4a a6 78 95 c5 ab 32 af f3 5c ca 19 56 66 3d 6e 56 91 56 80 ab a4 d0 22 23 39 93 ac d6 76 38 78 0a fb b6 6d 15 0f 14 70 41 68 f6 d3 13 e8 79 Data Ascii: 6NA}jBa3):qIgZ2vlf,YbXoIX_'5]J2P92C@C6EeB@A9y]H- b9O0uwI7Jx2\Vf=nVV"#9v8xmpAhy
2023-11-08 14:38:11 UTC	219	IN	Data Raw: a6 e8 ce dd c0 8c 8b f8 27 e4 72 c2 fc 19 a5 4b 0a 80 9b 7a 8e 6f 20 6c d6 a2 3c ba 9e d5 4e 6c b2 8c 9d 10 66 a8 a7 4d 7f 2a cc 7e d0 55 ca 8f 87 57 f3 da 5f 9f 04 3f 07 96 76 1e 3b 28 41 80 19 85 a8 cd ba da 52 c3 5e ff 20 33 b7 3d 36 d2 36 3d 32 e6 6e eb 7e 7d 63 af bd 15 07 90 4f 37 93 58 0c 86 95 e0 64 ba ac 01 4a 19 d6 7c 8f de 4c 50 9c de 9d 7e 0f cd 85 a9 fa f1 38 9a 2b 51 44 ec f4 e0 5c af d4 e6 d2 ad 0b c3 ad 53 c3 17 5c a7 3d f7 55 d9 76 cc 0d 4d e4 85 9a 1e 63 22 61 fb ab 4b 3b cf 41 ae 1c 16 3d d4 a8 c4 9a a9 94 b9 d6 6b 81 01 4a 84 4e 80 70 9b e8 4d 25 41 52 60 d1 d9 88 3b d8 f9 28 13 fb bd 87 35 c3 10 57 9a bd db 3d b5 08 8b 86 59 20 9d 67 2d e4 5e 08 76 34 81 d0 58 7f ae d9 89 fa 85 4a d8 40 ee d7 3d f8 63 c7 33 c5 ea fc ec 7d ca 2a 29 12 Data Ascii: 'rKzo l<NlfM~UW_?v;(AR^ 3=66=2n~}cO7XdJ\|LP~8+QD\S\=UvMc"aK;A=kJNpM%AR`;(5W=Y g-^v4XJ@=c3})
2023-11-08 14:38:11 UTC	220	IN	Data Raw: e7 f6 42 45 18 37 35 5e 5e 87 a4 03 61 34 07 da 04 c5 77 55 a9 ed 4b cb 27 67 3f 67 65 93 7f c8 df 13 32 31 33 ce e6 e7 b8 cc c7 b8 9b 6f 60 d4 d7 6c 4b 7a 50 36 5e 97 20 88 24 f7 24 39 4e 8a 90 14 8b 57 76 67 32 f9 48 02 cf 8f 93 af e6 43 52 ef df 9c 61 37 46 0e a1 2f e3 b9 f1 33 f1 5c 38 ad fb ad 46 84 5c b9 2f 7a 0c 50 cc ef 2f 3f fd bd ec 1e e8 07 ee a7 e9 f5 7b 78 d6 e3 d3 bc f7 5d af 0f b3 be bb 00 f9 89 eb 17 2f b4 17 5e 39 fa 40 37 63 a3 7f de a5 0e 1a 47 1b 3c 48 17 6f 7e 97 46 8a f2 21 cc 36 94 3a 86 6a 99 2a 9a af 4e 62 da 6c 4e 79 ba 89 d7 c3 43 c4 63 47 a1 dc 64 32 5b 64 37 86 57 34 5d d3 0a d1 35 c0 34 69 cd 32 a9 a6 c1 2a 1a 80 dd 68 d1 ef fb 70 b9 1c 2a 82 1d 1e 39 db ce d6 f9 6d 59 6d d8 b7 8a 1e b7 6b 68 22 12 c9 8b c5 8a a3 57 de 0b 21 Data Ascii: BE75^^a4wUK'g?ge213o`lKzP6^ $$9NWvg2HCRa7F/3\8F\/zP/?{x]/^9@7cG<Ho~F!6:jNblNyCcGd2[d7W4]54i2hp*9mYmkh"W!
2023-11-08 14:38:11 UTC	222	IN	Data Raw: 83 47 88 1c 47 87 62 65 56 a6 77 a2 69 24 43 be 4f 31 f4 f8 10 20 90 d0 db 63 e7 5a dc 5a ec 3c 47 63 3c 7a ac fe 40 b1 3a 03 ab 4a 2d c0 d5 c4 df 5f 60 e8 a9 03 38 80 a1 99 7e 0e 80 da 86 88 0c e4 4d 16 8a 09 a7 a9 03 e8 29 0d 75 45 8d b4 b3 91 02 73 59 31 f2 8d 8c 42 b5 a3 37 16 d7 34 77 df 30 eb 47 97 d3 35 89 c1 7a 8d c2 05 41 30 1f ef 7c d0 a0 96 9f 5b a7 e4 40 9c c4 56 f7 cf dc 9f ec fd 9f 51 cd 16 71 5e 40 57 01 9c 72 2d 8e fd d2 55 8c 9e 4f ed b7 03 d9 fe c5 24 39 27 e7 c8 49 42 6a 66 60 35 0d 9b 22 14 d1 a6 0e 59 78 c8 f8 5a ef f4 20 81 55 ee 4f 2f 26 38 33 df dc 2c c8 38 ce 0e 6b ac 32 e2 fa 1e 26 a7 be 20 27 99 3f 9a 65 45 76 87 24 ce 19 d5 4c 60 8f 42 10 89 25 b6 3d b3 54 87 bd 66 74 46 35 e5 af be 38 91 2e c5 cf 1b bf 3c 31 3d 3e 8e 30 cb 47 Data Ascii: GGbeVwi$CO1 cZZ<Gc<z@:J-_`8~M)uEsY1B74w0G5zA0\|[@VQq^@Wr-UO$9'IBjf`5"YxZ UO/&83,8k2& '?eEv$L`B%=TftF58.<1=>0G
2023-11-08 14:38:11 UTC	223	IN	Data Raw: 0c 4b f4 f5 75 76 dc 5c a6 cf 58 e7 b5 2b 98 9f f2 0c 76 08 6a 13 85 e0 b6 02 5e 34 3d de cf 30 33 4f 93 83 28 e0 e9 fa be da 30 2d 49 87 8d 66 4b d1 f5 52 a0 11 c8 c7 6f b0 9b 82 4f a8 bc cd 69 e3 32 13 06 c2 29 d8 86 07 14 b3 47 f2 c7 9e 0a 58 3c d1 12 c7 98 65 c7 6c e7 ea 1a 6d a3 c5 53 cd 5c a0 e7 f6 87 50 cc dc 21 21 fa 6f 78 ee 24 c3 2b 0c 17 89 08 83 04 3e 64 6c ed c5 e0 2b 8c e7 9d 62 8a 9b 10 e1 4e 49 4d 03 16 c3 64 54 22 2b 18 0e 82 c6 8c b9 b0 18 6f 30 ed c5 60 c4 18 38 39 c1 fe d7 cf fc 5c 7c 35 20 de a3 f4 bb d8 a6 28 c7 fa 93 a0 8b 92 d8 79 0b f1 6a a5 71 94 19 6d 28 b2 ec f7 80 e6 d3 3c 5c 47 91 09 15 de 32 d7 07 e9 f1 64 54 9e 18 f3 50 9c 97 30 af f4 e8 24 88 a7 b6 6e cf e5 1f 40 a1 0a 02 c4 92 21 01 d7 58 0c bf e3 ba 95 9f 96 96 1c 8d d3 Data Ascii: Kuv\X+vj^4=03O(0-IfKRoOi2)GX<elmS\P!!ox$+>dl+bNIMdT"+o0`89\\|5 (yjqm(<\G2dTP0$n@!X
2023-11-08 14:38:11 UTC	224	IN	Data Raw: 1f 8b fd a9 16 4d ce 87 df 43 bf 8d 31 ce 38 a3 15 61 bd af 1e 59 29 b3 4d bf 22 6b ea 13 ad 61 e6 5f 3d 34 a7 4a 71 4d 85 e5 3f a2 cc 6e 68 36 8e 6b 8a 1d c9 9c 98 10 9d 50 ff 1a 20 10 09 9a 32 a0 3b 89 33 0c b3 67 82 34 01 1e d5 8d 5a d0 a6 d3 a9 a7 47 5a ec 6b 28 6d 8d 0c 70 b6 76 ab eb a6 0c 72 69 5a 11 46 cd 7d 8a b8 8b 69 3a c9 2f eb fb 9a 10 1d 8c 63 7a 50 9f c5 75 56 c5 51 39 45 8d d2 26 27 cc 2f ec 0b 87 91 76 e5 9c f2 ad f9 04 3c 80 32 86 df f4 db 8a de f6 8c 16 85 e9 59 51 29 82 6a 2e 1a cd f8 48 4e ac fb a2 da 17 31 31 99 73 cd d5 ca 97 ad e9 92 e7 d8 8b e0 7b e6 0d 9d a5 27 7c ad 6b 83 aa 6c 54 ab 25 ef 31 f2 ea aa 8b 1d 43 a5 cf dd 67 f6 51 55 4a 5b ee 27 f2 c4 55 fa d8 94 fb cc 9d 97 d6 b6 7b bf 38 31 e9 20 1f 8a 8d 72 a5 6e 9a ef e2 9a d2 Data Ascii: MC18aY)M"ka_=4JqM?nh6kP 2;3g4ZGZk(mpvriZF}i:/czPuVQ9E&'/v<2YQ)j.HN11s{'\|klT%1CgQUJ['U{81 rn
2023-11-08 14:38:11 UTC	226	IN	Data Raw: ad ec c2 cb 1f 78 fc 0b f7 b3 7d c4 36 66 ad 73 d0 17 28 c4 b0 53 c8 cb 1b ee 65 7e 01 34 9e 04 55 d8 e0 e8 29 11 d3 43 31 e5 69 8b 73 25 43 f5 ac 72 a3 1a 48 22 f7 33 d8 e6 0e da d8 83 1e 29 09 94 8b 4c 5b d8 e8 d3 a9 29 cc 6d 6a 0c 14 a5 01 e6 03 55 ed 86 1b 03 db d9 9c 22 fc fe c5 d9 49 89 a7 52 0b f0 b7 c6 36 cd 57 33 ae 96 6e 50 a5 d7 d1 48 8d 87 b5 d5 df 9b 35 51 37 73 5c ea 40 bf 8e 13 53 77 95 af ae 52 68 14 c6 84 f8 65 71 ea dc 8d 47 30 3f de bd 7e fc d8 91 5a 1b 3e d5 0e de d6 02 47 4c ee ee e5 db d1 c5 63 01 5b c3 64 fd 4e 0a 8d 25 43 39 8b 58 a5 3c fa 51 ed ed 5e 69 f9 bb da ef 8b 70 2c 55 20 c8 91 14 17 0b 1f 54 c3 89 f6 7e 91 ed 55 ae 32 17 28 27 77 7c d6 2f 9a ab 42 33 14 00 c2 ea b1 d7 e8 e7 4a 08 2c bb 74 0a ea 1e dc f1 ac 57 67 4c 4e 24 Data Ascii: x}6fs(Se~4U)C1is%CrH"3)L[)mjU"IR6W3nPH5Q7s\@SwRheqG0?~Z>GLc[dN%C9X<Q^ip,U T~U2('w\|/B3J,tWgLN$
2023-11-08 14:38:11 UTC	227	IN	Data Raw: 0b 7b 32 da ac 43 8d 1b fe 1b ab 4f 19 bd a2 e5 a2 b8 d3 fb ff 90 4e d9 98 7f c3 40 2e 8b d4 57 d4 31 05 44 b1 07 7a 1c 5b 10 c1 b0 e2 5b b0 4d 25 56 e6 35 ec 72 21 34 26 55 99 72 ab 0d 73 e2 a0 37 25 79 7f 00 e7 4e d9 4a 28 3f a5 6e 59 6d 89 1e 22 54 13 fa 43 8d 4d 6d 72 fb 2e 04 ee 98 dd b4 7b 62 53 4e 54 8c 1d ec 5d 2a 19 7d e8 92 1b 76 60 aa a4 98 fb a2 95 31 ea 5e 48 9d e5 ee 8b d3 76 93 4e 6f ee 55 db 86 41 53 36 57 99 4f d9 89 65 0b 5b 28 da ce 42 11 03 e5 a2 cd 9d 1e 85 74 6f 31 62 cf ab 15 5a 48 82 e7 bc 7b d1 c0 f5 a4 7e cb 4e 80 7d 56 1d cb 8b d9 b9 00 6f b2 92 15 3c 8b 3e 23 c7 fd a2 6f aa f0 ee be 54 46 44 22 ef 1b 25 37 ef 33 ae ac d7 2e f5 28 3f 15 be 66 b7 92 83 8a e5 e6 5d df d2 f5 60 21 f5 9c c0 b1 fc c0 bf bc 31 25 55 ef f4 71 4c 3a e8 Data Ascii: {2CON@.W1Dz[[M%V5r!4&Urs7%yNJ(?nYm"TCMmr.{bSNT]*}v`1^HvNoUAS6WOe[(Bto1bZH{~N}Vo<>#oTFD"%73.(?f]`!1%UqL:
2023-11-08 14:38:11 UTC	228	IN	Data Raw: 0a b1 5e bc 47 76 cd 8a a2 ca 0f 53 41 34 8a 3a e4 44 c1 04 49 81 06 f9 de 03 af ca af 91 f0 e8 3c b8 0b 96 21 2e 94 31 3f 1e 6e 54 e5 9e e0 19 c8 7a 1d 07 68 d4 93 e5 b0 b5 0c 9f 5a 88 42 e4 18 aa f2 a9 17 96 ce ef 87 af 43 6e 16 d2 ee 97 b5 1f f9 ee 49 9d 9e 00 f8 8f b3 89 7e 03 2b db ef 73 02 6d a6 38 b9 54 7f b0 c5 3d 66 21 63 b7 28 9a 4b 1b 48 f7 8a ea 83 53 ad cb e8 48 37 21 4c f0 53 bf 2e 44 c4 02 34 e7 8b 24 fe d9 7e 5d cb da d9 b4 61 bc 47 e9 02 9a 73 af 69 08 4b 37 90 c0 e0 22 7f 64 cf b8 7d bf ac 89 b5 9a 7c 9f 7b 9d a9 d8 dc b0 51 92 37 de 72 2d 0f ca 1d 79 a7 fb c7 e0 88 cc 82 7a ab 15 52 61 56 ce 5d 08 76 34 74 bc 96 9e a0 8f 8b bf b0 05 32 fa 08 ed e4 04 fa c2 2d e6 c7 e8 ae a8 59 44 8e db 8c 19 ed 53 d8 40 aa 25 5f d1 42 28 46 d6 13 e3 dd Data Ascii: ^GvSA4:DI<!.1?nTzhZBCnI~+sm8T=f!c(KHSH7!LS.D4$~]aGsiK7"d}\|{Q7r-yzRaV]v4t2-YDS@%_B(F
2023-11-08 14:38:11 UTC	230	IN	Data Raw: 8f d1 ef 2f b5 f0 5b cd 04 b7 75 0e 54 4f 62 0e a4 8b 44 3b 13 43 d8 b7 63 02 8d 45 bb 96 bd 45 c6 54 53 71 c3 dd fc 68 33 64 94 db 2d 7b 05 fc 66 58 70 16 c4 c3 f0 36 a7 ad 68 0f 5d a2 b9 db 56 a3 48 61 33 3c ad d5 dc 00 76 99 d4 4a 40 58 a6 e2 e9 be e7 f6 cd 4d c4 7a 64 52 ca 4c 62 05 a3 33 a2 91 2f 98 02 f4 08 98 87 b8 64 7a a8 22 97 f8 f3 3f d4 80 03 1f 67 da 3a 44 5f a5 1d d1 c2 50 a8 be 37 bd ad c2 5f d9 a0 cb 53 63 15 7d be 15 a1 96 c2 ff df a8 f4 ca 95 fc 30 90 24 f9 9d 30 02 a5 a0 73 fb bb e0 9b 4d 47 25 5e fb 96 58 e2 c9 03 35 d3 dd fe 54 6e 3b 9b bd c0 3e 26 02 11 54 a6 04 3c e5 8d 16 99 29 33 08 53 66 56 31 f3 e5 da 93 27 ac fd d4 76 68 92 ca ca 44 e6 f4 a4 fc 0b ee 6e 86 24 34 6e ab b5 b7 27 dc 72 7d 62 12 30 ef e4 44 db 78 6f fc 56 ea 0b c1 Data Ascii: /[uTObD;CcEETSqh3d-{fXp6h]VHa3<vJ@XMzdRLb3/dz"?g:D_P7_Sc}0$0sMG%^X5Tn;>&T<)3SfV1'vhDn$4n'r}b0DxoV
2023-11-08 14:38:11 UTC	231	IN	Data Raw: e4 20 12 4a d6 ca dc 4f 9a af 27 56 21 89 99 22 b7 12 b0 3d 89 24 15 0a 0d d1 97 34 84 c2 f8 4b 53 ba 2b ea 91 c2 ca 26 5a da db 99 83 91 27 a4 e6 86 a5 59 8e 0e e0 d0 5e db 16 b7 05 65 be 05 02 cc e6 7e ff ff f7 7d e2 96 2c 85 c2 78 27 22 73 a3 6f df ae 64 b1 c7 fd b1 1f a3 df bd 7d 7b 2e 08 e7 6b e8 c8 c8 54 4a 59 3b 66 66 ea 96 ef 85 8e d7 6a a7 4b 56 92 b8 1c bc 42 ef 2b d1 f6 6a c5 dc 01 1d 71 4d ae 57 4c af 22 9b 1b 65 f5 2f 9d d7 b6 bb df bb 59 66 99 fd 8c f4 78 77 a2 49 f5 f2 3a 6b eb 91 49 eb e8 71 2e 86 87 c7 b2 08 9c 64 4c 57 69 6d ee fc b8 b3 5d 1e 00 c9 97 f5 c2 c7 fb 5d 0d 66 cf e2 b8 29 82 42 e1 ea 7b 6c b2 d6 bb b7 c1 1d 60 ee 8c b1 ca 6a d6 7e a3 de 86 de e9 af 3b c4 81 3b 7e ad 37 b1 c5 2d 7a 41 c1 ef d8 d7 58 c1 27 ac ce 0e 74 62 9f 8d Data Ascii: JO'V!"=$4KS+&Z'Y^e~},x'"sod}{.kTJY;ffjKVB+jqMWL"e/YfxwI:kIq.dLWim]]f)B{l`j~;;~7-zAX'tb
2023-11-08 14:38:11 UTC	232	IN	Data Raw: 9f 12 5c 1b b4 87 91 47 17 ce f5 9a 36 24 de 05 b0 24 92 b8 75 50 3d 07 6f e7 75 38 37 bf d4 1e bd ec 9d 5b 9e 25 3e 60 3c 15 0e 9e 2e f7 cb 24 c7 4d 74 d3 97 b6 42 29 47 aa 6a 53 ae 51 e3 e6 c6 55 64 fc 60 8e e8 53 b6 22 b8 a7 1f 33 b7 99 1d c9 bd 85 7d 4d d7 b1 b3 54 0b 74 68 3f f4 17 37 9f b1 06 ed 5d 9b e1 d0 f7 84 f2 97 69 a2 45 48 e5 15 89 9f 7a c5 9f fd e5 7c 15 a7 2d 9f c1 19 14 d5 74 64 86 a7 bf db 91 2c fd 3a cb 44 cf 07 9a 1b 92 a9 16 d0 6a 37 6c c1 dd 04 44 00 36 d9 a7 17 2d fc 86 8f 02 b7 d4 c1 2b a7 7d 5a 55 34 9f 5e ae e7 78 4f b5 dd bc 9d 9f 66 c5 fc d8 51 1e 48 f8 1b 14 10 0b 8d c2 ea 55 3b 22 49 7b f7 29 91 dc 31 85 04 8d 5a c0 b0 f8 1a 2e f5 d8 17 c5 07 e1 94 12 40 f3 88 9b 32 f3 84 96 a9 62 03 2b 71 ba 7a f3 56 f0 9b 0b 81 73 5e c6 3e Data Ascii: \G6$$uP=ou87[%>`<.$MtB)GjSQUd`S"3}MTth?7]iEHz\|-td,:Dj7lD6-+}ZU4^xOfQHU;"I{)1Z.@2b+qzVs^>
2023-11-08 14:38:11 UTC	234	IN	Data Raw: 7d 1f 69 53 68 87 52 6d d0 e8 5d 1e f9 d0 15 36 3b f4 a8 9f 96 8d da 3f 27 af ac f2 04 83 42 7d 67 c5 d9 4d ab 6d f4 ee c7 9e eb ec cb 43 6a 2c 76 b4 9c cf d4 b1 af a0 3e 89 fa a7 0f 97 47 f0 c0 16 7f 92 2b 7a 59 6c 3f 47 e8 dc a6 2a 7b 82 b1 12 2e ec 6d 37 e4 41 c7 54 aa 5e 31 44 e5 22 a5 3b 52 8e 55 72 f0 a0 10 84 22 62 68 f8 a6 0e 6c 71 77 24 92 b1 d4 2f 67 79 be 52 bf 6d 5a 70 87 25 14 8b 30 42 ce 15 cf 9d 23 34 ff 62 c1 e8 e8 5c 71 30 6e ed 08 09 ee 4e 5d 4d 89 3c be 71 eb 88 ce 4e 97 d4 f5 7b d4 88 86 cd 68 cc 40 fe fc 31 3f bb db 7e 8b 74 f9 f2 c0 ea c2 36 cd 9c d8 da c1 54 9d b8 6b a7 8e d5 cc 86 0f 1e d2 99 19 0f d2 87 fb 5c 4d 08 00 e5 7c c0 74 20 10 d3 35 4f 3c 34 3e 20 4a 0e e7 7d be de 19 2c ff 51 1d 72 51 2a cd af f6 9b 41 5c 15 27 f5 29 79 Data Ascii: }iShRm]6;?'B}gMmCj,v>G+zYl?G{.m7AT^1D";RUr"bhlqw$/gyRmZp%0B#4b\q0nN]M<qN{h@1?~t6Tk\M\|t 5O<4> J},QrQA\')y
2023-11-08 14:38:11 UTC	235	IN	Data Raw: 25 e9 ed 20 7e 29 09 7e 8e 12 83 58 4c b7 74 cb 9b dd d2 85 96 8e 4a 06 4b dd 2f 2f 28 97 46 5b 0c 98 4b 59 3d 3b ca 1f ca d8 95 62 ff fa 97 83 7e 24 56 64 b8 5d 9a a2 38 da dc 7c d4 f7 1a 02 81 62 4a d3 16 29 3a 76 20 ff fa a3 18 33 52 86 52 97 51 b4 8f 04 7d cb ba e4 7f 4f ed 0c d6 09 6b 06 c5 55 50 c4 c1 8b 7d b3 9f 53 56 95 af fd 0c cc 7f 78 7f 73 00 51 ca 72 6f af b1 9f 33 1e a3 ff 7a e7 90 32 89 46 10 a4 8c d2 fa 27 d6 af a3 d8 dd 6e 4e 3f f0 1e d7 7b 22 5d f5 31 16 42 2b 1f c4 d5 b5 a5 0d e3 b0 3b 2a ab 0a 8a ed d1 65 4f 5d c2 dd d6 2d ce d2 4e 7e b5 bf f8 32 f5 cc 9c f2 a3 75 25 6c c5 28 5a be ad bb a3 9d 62 7f a1 39 4d 99 68 5d 5a 1f 0e 33 27 29 a2 14 39 a0 23 87 3e cc 2a d7 03 3c 63 8c 3b da 1c d4 9a 7d 6c 3e e2 a7 fb 25 fb 29 b7 56 60 10 6c 65 Data Ascii: % ~)~XLtJK//(F[KY=;b~$Vd]8\|bJ):v 3RRQ}OkUP}SVxsQro3z2F'nN?{"]1B+;eO]-N~2u%l(Zb9Mh]Z3')9#><c;}l>%)V`le
2023-11-08 14:38:11 UTC	236	IN	Data Raw: 9d dc 5d af 88 19 7a 60 40 f8 95 44 51 68 97 cc 04 e6 36 66 b2 9d 16 95 1c 7e 68 ab 47 a9 35 c6 75 55 04 37 47 e4 f0 ed eb b8 c4 15 7e f7 0a c1 b8 e3 f5 2e 88 23 33 f1 50 13 0b 8e fa 54 56 ca 21 bc 1f 6e 7f ac af ef da 98 05 50 66 36 a0 d5 89 3e 6c db 36 09 39 40 dd d2 96 f7 a6 99 1e 8f a5 02 e0 35 cf 9a 36 32 f2 f9 74 40 37 0a 9e e1 4c 8e ce 32 09 1d f6 d7 17 20 74 fc f5 ed 27 d4 af c0 62 48 ca e4 ef d4 bc 01 88 77 12 cb e6 57 66 f2 f1 b7 c9 8a 37 3d cc db fc 2e 3d 62 78 0d 25 05 64 3f 0d ba 7f c1 ee 8d 61 b3 ca cb 20 92 39 e0 65 ff 70 90 a7 8b bd 48 8f d2 a9 0c 4b c8 e5 f7 5c f0 90 c5 db 8f fb 9d 84 9e 84 8c 24 a0 b0 98 e3 9b 43 25 96 30 a8 96 1c c1 e6 0d c9 c6 ca 05 e6 83 01 9d dd 6e 74 76 a3 bc 3a 80 b5 4d c8 60 e1 b3 91 42 84 8d db 61 73 70 93 26 0b Data Ascii: ]z`@DQh6f~hG5uU7G~.#3PTV!nPf6>l69@562t@7L2 t'bHwWf7=.=bx%d?a 9epHK\$C%0ntv:M`Basp&
2023-11-08 14:38:11 UTC	238	IN	Data Raw: 95 35 5a 20 1b 1a bc 22 a0 92 0e 70 88 73 73 99 b4 d6 34 31 d8 40 b7 84 cf 01 06 94 d6 10 47 69 c0 3c 4a db c4 3c 7b a6 c9 7a d3 e5 01 9f 0e 0b de a2 4d d6 7d a0 0c 61 9b cf 21 42 65 3a e1 dc 8d 6f b9 60 2d 93 43 5c d8 2e 79 6b ac 1a fe 24 03 f6 ec 82 65 78 c7 b3 80 4e f0 48 95 01 1e d2 e8 90 28 81 cb c8 5f 8c a3 bd 9d 01 21 cb 4b 46 b3 ab d7 08 6f 74 76 57 d5 d8 77 2d e5 c4 73 b4 4c 00 d2 3e 89 cc 5d 39 62 f3 b0 09 88 4a 6e 12 99 29 73 6e 9c 74 5f f2 f2 19 eb 5f 0f 78 45 4b ad 94 44 94 06 20 a5 bc 42 09 99 24 67 59 98 41 bf 56 3e 1f 67 24 95 25 4c d0 30 4c 23 ee e3 7b 1b 26 ce 9d 98 96 46 74 0f 64 eb 5c c0 a5 50 94 13 3d 9c d2 1b 61 34 e2 ca 0d 8f 1f 0f 38 22 9c 3c dc 9d 8a 8b 73 fc 4c 5e 5e 4e df dc f2 45 63 9c c7 76 b9 ac ed 48 2d 5f 3e e9 97 f2 a7 f1 Data Ascii: 5Z "pss41@Gi<J<{zM}a!Be:o`-C\.yk$exNH(_!KFotvWw-sL>]9bJn)snt__xEKD B$gYAV>g$%L0L#{&Ftd\P=a48"<sL^^NEcvH-_>
2023-11-08 14:38:11 UTC	239	IN	Data Raw: f7 45 de 31 75 09 10 7b 84 cc 5e cb da af fc 56 e4 7d f1 e8 e3 32 db 40 e7 4a ca 48 05 95 53 e1 16 1e f6 14 3e 21 7e f5 16 9b 4c e9 5e 64 1b 10 09 98 e6 72 c0 d2 35 2f e7 1d 90 47 79 4e 0f 57 fe 08 2d f5 60 05 a4 b1 1b e2 e4 c9 9a 4c 4a 03 9e 8b 3d a9 d4 28 52 a5 56 32 c3 c8 8f ec 4d 3b be 3a 8b 2d cf ec 41 08 30 3c 19 c8 a4 09 4c c3 07 31 4c 3c 46 28 d2 4a ee ad f4 14 4c 0e 86 ee 43 6c a8 59 f7 f6 c3 4e 8f fc 03 5f 37 ed 00 3a 2a 95 5c 38 cd 8f de 77 08 a0 ea 0b 0d 64 35 27 4c b2 df cf e5 a6 ee f5 48 f7 73 35 4d 20 9e 32 49 44 8e 25 9e b6 57 50 5c 70 79 72 a2 7e 85 83 d2 8d e9 29 71 4e 30 07 c5 45 f7 7c 29 89 28 f5 40 01 fc d6 28 22 3b 91 4a 47 5a 90 21 a3 a3 97 55 a5 db 2c 57 4c 8a 23 45 d7 ac d2 45 b6 ad 84 87 1c 18 99 4f 35 2e 4b fa c1 91 b1 91 a6 f9 Data Ascii: E1u{^V}2@JHS>!~L^dr5/GyNW-`LJ=(RV2M;:-A0<L1L<F(JLClYN_7:*\8wd5'LHs5M 2ID%WP\pyr~)qN0E\|)(@(";JGZ!U,WL#EEO5.K
2023-11-08 14:38:11 UTC	240	IN	Data Raw: db 61 fa 4c 19 d8 11 65 77 c9 8b 9e f5 2d 68 59 7d 3a 1e a8 c1 78 69 20 4f b9 05 20 95 8a 78 7c 2b 5e 8b c3 b1 b2 43 71 01 25 84 7f 03 e6 b8 5d 7b 5b 5b 1b 1e d8 71 22 9a 09 dc 78 40 4c 07 d6 75 70 d5 94 1d d5 c3 6a bb ea 83 0b 0b dc d6 2d 01 dd e8 a3 5b 3d c9 7f 8b c0 f5 93 d8 a6 b2 5c 0c f1 65 89 8b 6a 71 5b fe 25 ef 1c b3 5e 57 a5 87 94 1a 19 27 e2 48 6a d3 79 c2 63 ea f4 25 4a 38 8a 18 49 6d 78 95 c2 e5 3d e8 43 2f fa 5d 2e 26 c1 77 34 cd 44 de c3 2c c6 98 17 ce 13 ca 1c 33 f9 b9 ea 94 22 b6 7a 96 14 9f 83 60 c5 55 a9 90 16 ea c1 0d 7c 4d 3a 1f 33 51 63 21 93 5f c7 a3 e5 f1 57 28 01 18 57 6a 87 90 d3 f9 71 eb d6 53 f2 23 66 28 47 34 47 de 97 49 3e b4 a7 d4 e0 85 e4 6e d5 da 84 45 92 06 0e fc d9 a9 ff f7 8d f2 5e 84 9b 92 80 e6 97 cb 97 8b da 3c 44 24 Data Ascii: aLew-hY}:xi O x\|+^Cq%]{[[q"x@Lupj-[=\ejq[%^W'Hjyc%J8Imx=C/].&w4D,3"z`U\|M:3Qc!_W(WjqS#f(G4GI>nE^<D$
2023-11-08 14:38:11 UTC	242	IN	Data Raw: f9 19 b1 8b 82 af b8 27 b4 12 d0 ed 16 1e e3 9e e1 fa 1d ab 5b 3d 65 1e 1c 89 c4 48 2b 5e d1 97 ba c5 de ea 61 2f f5 47 85 13 36 8c 7a d5 3c f0 36 29 79 d0 b6 87 e5 44 48 e4 77 46 cb cf f3 e3 13 76 e5 fa fa 32 6e 46 bd 29 25 c3 64 f8 f3 ef 03 b9 ee 2e 9d 29 e1 08 14 c6 db 95 50 36 5e c3 b7 72 09 8d e3 04 7b aa 68 f7 c8 3c 8a 4c ca 3f b3 49 68 2e a7 b7 98 8e b4 64 68 74 5b 24 9d e5 1e e3 16 5d 09 ec e2 b2 66 c5 98 b0 39 26 34 2e da 3b 00 e6 73 3b 8f 42 8c af 95 fd f6 0a 12 9a 6b f6 f5 19 dc e6 f5 f5 95 7e cf 3e a8 6a 29 cf b0 79 22 54 cb e3 9d bc 6a bd 4d 55 1b 81 02 e9 64 ce 82 4d bc dd b1 ad b4 5b ff 84 44 f1 67 34 0f 7b 1a 2b e1 dd 9d 1f a9 8c 02 a1 17 3a aa 3c 83 39 71 a9 02 b7 01 fe 41 cf 7f 14 02 05 7f a1 15 77 07 09 4c 7d bb c5 41 3d c2 a3 36 13 1b Data Ascii: '[=eH+^a/G6z<6)yDHwFv2nF)%d.)P6^r{h<L?Ih.dht[$]f9&4.;s;Bk~>j)y"TjMUdM[Dg4{+:<9qAwL}A=6
2023-11-08 14:38:11 UTC	243	IN	Data Raw: bc 41 23 91 8c ac ac 8c f0 0e 23 91 73 75 eb ee e6 9b bb 3b 2e eb e9 dd 1a 06 bb fa 2e 74 8a d7 a9 3a ea 4b 16 49 54 27 17 81 36 98 1a 95 ca 6d 37 98 d2 22 f2 3a ef 1a ec e2 be 73 07 03 c5 62 12 c7 71 d7 79 4c e2 40 5a 2c 59 af 09 62 67 98 8e dd c5 2c c1 fe bf 6e 9f 06 fb 89 98 7b 0e 4f b8 3b 5d 93 c9 aa 21 5f e3 22 3d 63 17 f8 d3 ba 02 86 9a 82 64 69 6a 9b 32 a4 47 ec 42 bf 58 b5 24 80 e3 b5 e0 7c a9 ab 17 7f 69 db 21 b1 a1 82 2a 6e 54 ee 01 25 9b 02 13 fb 3b cf 15 2a ea c5 f6 e4 5e 33 ce 2f 63 ed ae b9 45 c0 9f 13 73 9f 08 34 f6 ba 43 03 77 4c 6a 7d 29 19 b1 f9 e2 3c 28 86 9e 59 70 48 77 e2 dd f3 57 8b 5e 92 fd 48 4c 8c 2d 0b 76 cb db 70 84 f9 c4 91 40 01 77 de c4 d0 9f 70 c5 cc b9 9d 55 fa 4b b8 97 c0 a1 3e 31 eb b7 80 f1 c4 4c cb be a9 66 e2 04 30 70 Data Ascii: A##su;..t:KIT'6m7":sbqyL@Z,Ybg,n{O;]!_"=cdij2GBX$\|i!nT%;^3/cEs4CwLj})<(YpHwW^HL-vp@wpUK>1Lf0p
2023-11-08 14:38:11 UTC	244	IN	Data Raw: c7 fa 41 00 cf 19 93 29 08 98 8f 42 cb eb 44 60 3c 60 92 88 ec 99 c1 d7 18 b3 b1 b2 f0 05 e9 bf fe 37 9e c9 07 91 bb 25 66 22 a5 59 89 16 93 15 8d fb 3e b6 92 d9 d0 a8 47 5d dc 54 7d ea 5f f3 e2 fa 9d c3 ea c8 54 18 c4 2c 61 7f d2 ec df 5e 26 78 d4 a0 ab 91 e7 2c 76 a5 34 98 45 70 57 f0 c2 b6 9f f2 53 84 41 14 fd 4e ef e2 85 ad 08 67 6a de 29 de c9 ec e2 26 aa 8a 64 99 00 0c ba 35 0b b8 34 ad 7f e4 fe 28 da 04 08 e7 e4 24 c1 fd e3 73 44 e2 42 dd a6 78 9d f0 4f 9f 68 11 aa 58 51 9f cc 4c e2 b2 77 98 05 8a 60 ed 1f 71 8e 6e 1d 50 ee 88 73 54 a1 17 73 db d5 27 40 c7 54 7a c0 bd 2c ed 32 1f cc e8 4a b5 2a 6e 6a de 88 fb 34 5f 98 7d 33 b9 b8 17 9d 9c bb d7 99 c7 6a c5 d2 ab 2d ab 25 69 f9 a8 f2 a5 bd e9 0a 80 f2 b7 01 bd c2 50 92 4f f3 a4 46 3f 8f ad 6b 6a 53 Data Ascii: A)BD`<`7%f"Y>G]T}_T,a^&x,v4EpWSANgj)&d54($sDBxOhXQLw`qnPsTs'@Tz,2J*nj4_}3j-%iPOF?kjS
2023-11-08 14:38:11 UTC	246	IN	Data Raw: d6 6c b9 e8 87 d2 1f e8 b1 8e 95 9b 94 78 5b 30 94 44 a3 d6 8c 31 c2 c0 53 54 4b 89 61 66 d4 3b a2 0c f8 d9 33 60 17 4c 98 b0 7d e4 8d 7b d8 a7 4a 11 26 35 b3 80 b1 c4 d9 ea 4a 84 5e b7 fc f5 b4 47 bd 8f 86 a1 86 eb 26 f5 f6 9e 78 ad ee b2 25 6e 86 71 23 23 e9 47 b3 a1 37 96 a4 ff 70 28 2f 38 f9 84 9d d7 ca b6 4a 1b 47 79 d1 1b be f6 38 d1 3f 96 a4 ff b0 c8 2b 3e 49 08 b4 a5 ae f8 8f 10 e5 85 8b 57 e2 bb 54 dc 6d 0a 41 6a 98 f7 2f 62 88 07 a6 88 b3 59 46 4e 47 ff 75 17 63 fe 04 f7 b5 8e 5c ae c1 8b 88 cf 3a eb 69 25 ba 96 e1 66 55 2c 70 17 e6 82 49 ec 8d 70 20 ff 96 5e 79 b6 eb 95 1f 08 f7 42 c0 63 78 c2 32 8a d0 ec 1b f7 ca 16 0d 56 62 e0 a7 36 4e 01 bf 64 0b d6 d9 8d d3 99 54 80 e4 e6 9d 6c 14 c6 57 86 7b 74 c4 88 54 7b f0 96 e8 53 11 1e 2f a5 51 95 59 Data Ascii: lx[0D1STKaf;3`L}{J&5J^G&x%nq##G7p(/8JGy8?+>IWTmAj/bYFNGuc\:i%fU,pIp ^yBcx2Vb6NdTlW{tT{S/QY
2023-11-08 14:38:11 UTC	247	IN	Data Raw: be 23 59 b9 02 18 23 7d c4 83 90 89 07 2d 94 73 a3 15 3c 49 9a ca b9 8d 60 ce 7b 36 c2 81 70 d8 53 a4 fb 9a 75 41 eb 9c 6d 6d 16 8b 47 83 70 3c 10 ed 99 dc fa 73 f8 4f 69 63 30 02 ca b6 82 75 bf 18 f8 05 9d 94 9c 66 1e c2 35 6f 23 0f ac 92 9c 92 1f da d5 2e ef 6f 5d 85 6c ae 3c 28 7f 49 eb d5 96 2b d0 20 5b 14 44 2d 96 b1 d3 12 64 a1 f1 04 bf 71 1d ea 9d bb e1 29 19 cb 3c 55 50 71 79 6f 51 5e 34 39 4b 1c 9b 12 23 09 2a c1 bf f1 25 5e fe e6 f6 8f 22 56 1f 76 84 1c 2a 2d c2 e6 ea 73 d9 79 31 22 4e a4 21 c3 34 c6 08 f0 5c 55 24 d1 9f ca 8b 5b ad cc c0 4d 7d 81 df 91 4f be 7f 72 02 3d 99 f5 4b 2d 91 07 0a 89 bf 38 32 49 e5 ad fe de 2b 91 08 ca 28 b1 1d 59 64 6d 68 af a6 c5 90 88 9c 05 4c 61 a0 bc 24 55 99 54 97 ae 0a f6 94 43 f7 28 06 0f 04 be da e5 8a 1d 8e Data Ascii: #Y#}-s<I`{6pSuAmmGp<sOic0uf5o#.o]l<(I+ [D-dq)<UPqyoQ^49K#%^"Vv-sy1"N!4\U$[M}Or=K-82I+(YdmhLa$UTC(
2023-11-08 14:38:11 UTC	248	IN	Data Raw: 14 eb fc 47 14 dc e1 7e 0c 86 89 c9 95 6f 20 50 0a e7 38 10 b0 79 0f 75 71 82 eb a2 b5 d9 c2 08 cc fa d6 f0 90 a0 b5 fa 99 a7 8d 8d 9f 99 d5 8c 3d c6 b6 9f 13 9b 54 dc c2 b7 6e 32 70 ad 12 b9 bf 61 41 1d 2f e1 46 5b 0d 5d 2b 70 5e b6 b5 46 b5 17 9b c4 28 ca f3 fd c2 3f c9 ac 33 67 67 01 f3 b3 f5 d9 0e 04 ec 51 29 b4 01 c3 c4 c4 8a b5 0e 44 4c 6d 34 f7 98 47 3b bf 3f 38 31 d7 5b d1 ab d4 54 d8 3e 20 3d b1 51 38 1a e3 13 aa 29 ca 92 de 35 c1 a8 63 6b 2b 67 64 52 be f6 00 86 88 1d c3 12 41 7c 86 76 e4 ec fd 61 ea ae 6b 42 63 7a ff ed e5 5b 95 e9 c9 43 38 94 5e 27 b3 d5 a4 86 d4 cf 4f 07 80 53 30 b7 83 2a 20 29 9b 35 72 8f eb 7c 9f 80 c8 a4 8a 93 5e cc 3f f8 7a 7d b7 5b f0 a2 c0 81 53 57 07 55 f7 bd 1e f6 1b b1 04 ec 54 7d 1a 81 8d 3f 4c d7 c0 f6 f9 0e 55 cd Data Ascii: G~o P8yuq=Tn2paA/F[]+p^F(?3ggQ)DLm4G;?81[T> =Q8)5ck+gdRA\|vakBcz[C8^'OS0* )5r\|^?z}[SWUT}?LU
2023-11-08 14:38:11 UTC	250	IN	Data Raw: 38 eb be df 96 53 cd 71 cf 46 3b e2 20 4a 78 0e 89 a4 dc ca f0 5d f0 5d e6 e6 fe 59 20 ee 1d d6 4d 47 2d 57 4d a8 c6 d5 5f c9 09 4b 0f e3 a6 c7 e9 56 a4 67 47 67 17 c7 e4 e3 d3 3e 84 95 dd 57 26 fa c2 19 19 69 bd 26 0d fb 0c c9 99 db a3 ce ba 35 cb 58 98 6e bc 13 d6 17 46 3e 67 6c 61 d1 e2 a7 b2 8f 30 c3 e6 11 c2 78 29 7b 93 e5 1b e2 38 dc dc 7d 3e 3b 7c ce c4 39 09 69 b8 20 37 3f c4 c9 6b 4e c1 bc 1b ce c1 57 b6 bd a6 e6 ff 16 e2 b3 fc 20 f9 d5 41 f2 f2 50 f9 45 6a f6 87 70 e5 a6 59 d2 72 d2 8a d2 13 f2 1d 92 4a 16 e1 12 70 18 37 c3 7e 56 a1 bb da c0 b7 38 e0 b4 cb 6f 9f 3f 97 a3 da ef bb cb d7 fe eb 20 87 ab da e7 ad fc 33 23 4a 46 09 3b 53 6c 36 10 51 41 80 69 12 dd 7f ab 04 a4 f1 05 43 df 0f ec 66 7f 54 30 59 f2 77 1e 02 c2 49 fb f7 b4 2b 7e d4 1e b4 Data Ascii: 8SqF; Jx]]Y MG-WM_KVgGg>W&i&5XnF>gla0x){8}>;\|9i 7?kNW APEjpYrJp7~V8o? 3#JF;Sl6QAiCfT0YwI+~
2023-11-08 14:38:11 UTC	251	IN	Data Raw: 32 f6 f9 5b d0 f4 46 83 87 d7 c9 4b e0 11 c1 6f 61 00 9d e6 0c ad 4b 7e b6 db b7 52 a9 36 09 dc 59 c3 63 6a fc d3 3c 84 97 4c 5d e8 17 83 25 a1 d2 11 d2 54 53 cb b6 52 e7 4f 8d 9e 57 c3 b6 62 63 bb c2 a3 c7 65 d0 50 84 7d 8e 53 0c 02 16 bd ae bc 10 5c 16 f5 dc 0a 1e de e1 fb 54 84 1f dd f6 d1 75 e1 a4 20 68 c1 8c b9 d0 ab 6b a6 bb 2e 78 08 06 fb 7f 7b 07 c8 e8 08 df 13 7a 5a 09 4a 0e 54 6f 8c 3b c7 38 e6 cd 48 cb 10 af 89 0e 80 cb 50 1f 5e 45 73 54 0a 12 27 4b 9c 40 c1 e4 06 ee cf 04 f7 0c 0a 84 74 f6 81 42 f3 25 46 6a e4 64 43 d3 7f 83 d7 d7 aa 06 16 0d 6f b1 1d a3 ae 86 40 58 56 2b ae 17 e3 ea b0 7a 2e 05 93 07 54 ad 14 04 f3 22 21 22 a6 c6 1b 8d d4 c3 42 c3 9e b2 e0 02 ba cc 46 f3 8b 2e 7e 8b 5f 87 1c 99 61 63 a8 61 0b 1b 3b a1 d8 00 0d 10 f4 3b 25 23 Data Ascii: 2[FKoaK~R6Ycj<L]%TSROWbceP}S\Tu hk.x{zZJTo;8HP^EsT'K@tB%FjdCo@XV+z.T"!"BF.~_aca;;%#
2023-11-08 14:38:11 UTC	252	IN	Data Raw: 48 34 f6 76 2e 09 bb ca 3e 5d c6 28 0a 6b 8c 39 2e a0 20 55 94 41 3a 2c 41 2d 15 ac bf c6 77 e6 85 79 ca b0 90 d2 89 cb f1 56 e0 6a 56 55 0c 9c 5e be 98 81 7d b0 7c 77 7f 54 48 c1 d3 98 2c 1f 03 41 71 c8 30 3b 2c f3 5a 44 2a ae dc 23 7b 9f bc ad 6c cc 48 37 e0 d5 62 1e 52 58 ef 30 43 81 c7 64 cd 75 42 d1 a2 f5 35 d2 64 a8 3d cd 56 b0 5c 54 3d 9b 51 33 00 13 8b 37 6f 0b ed 71 13 41 cc 90 41 fb 8c eb 4f fc fc 06 6c ee dc bf a2 9f e7 21 fb ad 7b 5f 75 44 0c 47 5f 93 ad ce 72 6b f6 af df 98 54 94 5e 98 90 a2 7d 57 d0 6f 29 18 2e 38 1a 98 98 ac a5 7c 67 57 0f 50 95 43 65 ee 4a 9f bd f6 9c 78 ee 36 4e b2 d3 fe ff 07 df 1f 28 c3 7e 76 07 fc 5f 99 3b a2 ce 9e 0e aa fe e0 53 3f 08 8b 99 8b 57 23 18 4d fc cb bf df d7 5e 8a db 7f 53 e9 c8 16 a1 cf 6d 47 ff 0d 1b ce Data Ascii: H4v.>](k9. UA:,A-wyVjVU^}\|wTH,Aq0;,ZD*#{lH7bRX0CduB5d=V\T=Q37oqAAOl!{_uDG_rkT^}Wo).8\|gWPCeJx6N(~v_;S?W#M^SmG
2023-11-08 14:38:11 UTC	254	IN	Data Raw: 64 2d 78 2b b5 d5 e1 4a 07 5f 86 75 15 5f 32 0c ce a2 47 af 01 07 ca 72 03 65 3d 1d 9d 3f c0 dc fb db 28 b6 fd fd 03 81 8a 13 77 87 94 1b 2f 2f 94 28 c7 02 5f 60 bd 35 fa 77 ce 2f 9e 2f 2b 3a 58 7d b7 5a fc 58 d6 c2 2e 72 75 c8 90 51 96 80 97 81 57 26 ed 03 dc 65 55 73 3f 7f 81 7a f0 7f 4e 83 d2 7c 6a 6a 04 1a 5f c8 4d 77 33 31 87 e4 c7 11 1f 0f 23 71 16 4a 5b 75 ff 57 46 f0 78 f9 d4 8e b0 7d 08 07 da 79 7d 4d 85 72 bd 2e 29 72 e8 be 31 2b 89 1b b5 17 29 09 f3 a5 51 6e b5 22 7c 44 1f c2 55 17 29 5e 38 73 36 dc fe ed 0c fd 63 ab c4 23 fb 92 0f a8 41 ec 3b 7d 97 2f 0b df 0a a3 c2 09 cf 1b b9 d2 3f ef 1b d6 4b 7f e4 f0 80 ce b8 c4 bb ec 47 9f 9f fa 4d 67 dd 69 bd a0 0f 39 5e 23 30 f3 cf 3b d8 8e 97 12 4a 62 18 8b 8f ea 98 99 d8 da f6 23 b2 3c 9f e8 eb 4d eb Data Ascii: d-x+J_u_2Gre=?(w//(_`5w//+:X}ZX.ruQW&eUs?zN\|jj_Mw31#qJ[uWFx}y}Mr.)r1+)Qn"\|DU)^8s6c#A;}/?KGMgi9^#0;Jb#<M
2023-11-08 14:38:11 UTC	255	IN	Data Raw: 98 91 15 d6 03 14 97 d4 8b a2 f4 96 d9 60 a2 d6 a9 8e 77 47 ae 55 17 ca 03 2c f0 b7 9f fe 30 33 09 8f a0 ab ec ab f4 da e7 cc b5 31 0b c1 d0 51 99 26 c8 1e a2 9c 67 3b 21 8f d0 5d 76 9a 58 e6 eb 7e 30 9c 61 f6 b9 0b b9 9b c1 d5 09 8f f8 5c bd 4d 81 b8 fc a1 86 46 34 43 26 68 e2 99 20 8d 56 d4 d3 be d3 97 7c 8e ac ae e6 80 99 77 39 ea a3 7d c1 9c 39 8d 2f b5 ed 48 86 14 59 bc b4 a5 9a 31 ea e6 95 cb 9a b5 57 05 85 28 d4 75 32 69 67 16 6f d4 7d 39 a8 7e 21 56 37 1b d6 3b 9d 3a 48 a9 09 f3 78 c7 97 d7 13 7e 08 e3 b2 bf a7 8a 0f 76 05 57 dc d8 b2 fb 6a a1 cb 0d fb 77 8f 24 19 e2 c4 6b ca aa 65 9a be 88 31 5a 5e 9d 57 24 53 d7 2b c4 bc d1 9a 2c a9 2d ab 33 ad d6 07 21 ec 63 6d ee 99 68 16 fc ba 39 95 8e 9b a1 25 06 20 51 2a 3b 25 81 5f 96 0f ee 00 a8 38 88 46 Data Ascii: `wGU,031Q&g;!]vX~0a\MF4C&h V\|w9}9/HY1W(u2igo}9~!V7;:Hx~vWjw$ke1Z^W$S+,-3!cmh9% Q*;%_8F
2023-11-08 14:38:11 UTC	256	IN	Data Raw: 32 b1 d2 b1 81 75 78 e4 76 87 3e eb 0f a7 aa 19 8b 46 a1 ac 6e e3 44 21 ea 24 01 53 ab 78 38 90 a0 3b ad 8a c4 cf 3b c5 28 ba 93 00 a5 7e 1b 0d aa 57 6f 75 ba 5c 18 cb 1d 07 48 74 da 2a 47 c4 9e 0e 76 ca 3a aa d3 5b e3 be 4c d7 72 98 de 2d a0 ab a9 79 fc 47 d0 6d 0a 6b 83 2d 36 4b 17 bf 3d 82 39 01 d8 44 3e b9 47 6b f6 be e2 0e 9b 61 44 18 ee 6c 39 e0 3c 6a dd 1b 55 98 14 72 af 9d 00 37 0b 8c ac e0 f4 6a b4 b9 2a ed 06 4e 6c a5 bb c0 14 8f 93 17 29 38 c1 11 6a 90 32 94 d0 62 e2 e9 53 cb c0 1e 2d 61 8a 9b 73 f3 ef e8 34 64 20 2c 19 a6 01 60 04 82 38 06 01 1b 1e 6a 30 5f 46 43 2a b8 12 36 a5 14 a7 89 2a bf 5b 24 5f 5c 20 71 27 3b 18 43 32 6c 44 d6 49 d2 f9 13 3d 23 e2 17 f1 3a de 56 70 2d 28 5f 9b e9 48 61 cc b9 24 a4 24 3d 77 bf 23 16 6d 06 43 2a 41 e1 31 Data Ascii: 2uxv>FnD!$Sx8;;(~Wou\HtGv:[Lr-yGmk-6K=9D>GkaDl9<jUr7jNl)8j2bS-as4d ,`8j0_FC6[$_\ q';C2lDI=#:Vp-(_Ha$$=w#mC*A1
2023-11-08 14:38:11 UTC	258	IN	Data Raw: db 5c f5 94 23 a7 2e 57 98 aa f2 59 60 e9 1d 1e 57 47 81 c1 3e 72 38 f4 8e a6 13 ee 65 31 1b 8a ba cf fa ee 6a ae c9 42 f3 cd e3 fd f3 0d ff d5 55 95 98 bf 71 38 a5 60 7b 1f 6c 5f 64 3c 43 c9 68 1d 6a ac 68 b0 bb 7c d1 76 fb 6f 1d e3 d0 4c 39 a6 a1 c0 df fb 17 67 8a 06 ad f1 e4 87 84 a8 62 c8 25 bc 26 b7 b2 68 c8 20 de 78 c0 d6 4c a0 ad 29 7b 0b 17 28 66 6f f6 9b 7f ec 50 9b 48 19 96 eb 9e c7 7e 6c 17 96 93 1d f1 d8 38 a2 20 2d 73 ea b4 33 bb 28 21 cd df dd 43 6b 19 62 ab 85 c3 65 72 91 0a 41 c7 45 d2 48 d5 f3 d0 8a 6d c7 71 b5 d8 a0 cc ae 90 78 82 19 b6 c0 2b 39 26 56 9e 1c cb 48 4c 61 c4 02 ca 0e b2 f5 e7 e0 6a 4b 23 23 30 63 95 65 a3 c5 5b 61 62 68 cd 40 f6 2f 39 da f3 e4 f1 dc 4a 79 1c 31 9e 4d 4b fc bb 3a e4 35 62 9c 6f 4e be 4b c2 54 92 bf 68 1e 77 Data Ascii: \#.WY`WG>r8e1jBUq8`{l_d<Chjh\|voL9gb%&h xL){(foPH~l8 -s3(!CkberAEHmqx+9&VHLajK##0ce[abh@/9Jy1MK:5boNKThw
2023-11-08 14:38:11 UTC	259	IN	Data Raw: a9 ea 58 4e e6 ba 2d e1 04 be 4b ba 03 3b 14 78 4c 40 40 1d c1 b6 89 94 61 1d 8b f0 2c 04 e2 89 c8 11 a8 aa cc 75 5d 1d cf ba a9 9d 55 2c 59 f6 3b 49 ed 61 d8 cb af ac 25 16 79 cb c2 5c 09 88 1c c0 23 b9 32 22 a0 64 b9 c1 11 89 61 45 de b5 3e 50 95 7e af 3f 6e c5 a0 76 5d 77 5a c4 ef cc 59 d7 ac 02 ce ef 8e b1 b0 f0 80 b7 61 29 88 e6 de 33 9d 33 74 32 d0 f1 e3 ef 0f f7 ad 54 fe fd db b7 4d 4e ef f8 36 3d ed 9c 3f 43 dd b9 d3 de 90 81 07 64 ff 7d 31 f0 19 79 22 39 f5 67 56 e0 15 0e ca cb 9a 21 5a 31 03 b1 71 7a 26 df 57 ba b1 77 95 8d 2d 66 a3 52 9c 08 84 43 7c 4b 0f c2 3e 1d 0e c1 fe a8 27 df 63 77 00 41 3f 60 36 24 2c d8 7c 43 c3 6b d9 9d ed e4 30 e9 2d 3e 5c f7 23 a8 cb bd c8 f7 c2 d5 ef 9f f4 35 4b 1c ef b0 4c 69 d2 54 6f 6d f1 cc 5c 5b da a9 4e 4a 58 Data Ascii: XN-K;xL@@a,u]U,Y;Ia%y\#2"daE>P~?nv]wZYa)33t2TMN6=?Cd}1y"9gV!Z1qz&Ww-fRC\|K>'cwA?`6$,\|Ck0->\#5KLiTom\[NJX
2023-11-08 14:38:11 UTC	260	IN	Data Raw: ef 19 a4 8a 57 06 bb 7c 0e a6 38 9d 8b 9a 61 c1 25 09 e3 46 8e 82 e5 a8 eb d6 ee 7e bd 5c d7 da d8 ea 5c e3 20 ca 04 b0 05 81 07 3d 0f f6 e9 a1 77 c0 8e 16 e5 b8 99 e4 22 aa e4 69 aa 34 e0 c8 7d 42 95 a9 57 33 99 df ac ee e3 ee 5b 6f 34 59 66 b9 cc 22 8b 1d fe d2 d2 33 31 03 44 7f 6f da 94 bd c0 72 c1 5d 43 83 aa 84 70 cf bc 41 79 6c b0 a2 6b c9 37 53 20 4c ae cd 6a c1 aa 0d f5 40 d9 3e fd f9 73 fa 25 ff f1 ea 30 db 29 75 11 b5 41 ba 20 dd 39 fd 88 2d 5e 7b 1a 23 78 f8 2f a1 de a6 4c 5b 16 60 e2 30 2f ad 96 28 89 dc 3f c2 a8 59 cd 29 86 d8 9b 61 0a 8c 77 49 7b e2 ad 64 cd 64 43 08 31 af 95 b6 d9 dd f8 ed da 90 da 47 f0 8c 64 85 12 6a 89 bc 3c 96 e3 80 f1 1a f2 a4 52 af eb 30 f0 2a 65 59 43 b1 4e 73 49 28 7e 2e e4 b8 11 44 3c 81 9f 6f 75 0f 77 cf aa 2f db Data Ascii: W\|8a%F~\\ =w"i4}BW3[o4Yf"31Dor]CpAylk7S Lj@>s%0)uA 9-^{#x/L[`0/(?Y)awI{ddC1Gdj<R0*eYCNsI(~.D<ouw/
2023-11-08 14:38:11 UTC	265	IN	Data Raw: 7e 56 6c 59 79 d2 3f 41 3a a7 4f 30 4f 2e 3f 49 76 c2 7b 05 b1 d7 7e 0c 6c 96 7a 5d 25 f2 be e0 78 81 f9 d5 a4 ae 31 9f 47 32 f5 b2 0d cd af 1e f7 34 60 0b 31 77 f9 a1 b3 b9 0f 5e f8 0e b1 22 42 f6 7e d9 ce 3c d7 8e 6b d5 68 fa 3a a5 fb bf 26 f5 39 44 83 c9 97 1f fc d9 40 09 f1 ba 81 49 b8 c8 e2 34 3c ec 6c 9c 43 22 ed 60 bf c8 36 e7 fc a5 c1 de 37 16 d0 8b 95 ec bd 80 7b ef 95 85 ed a7 3d 56 9f 2b af 95 0d 60 97 e1 54 03 f8 7f 0f 55 10 30 eb 94 8e a0 b1 73 2a 4f ca 8f 1b 12 ed bc b0 74 6a 8d e1 d4 79 e8 32 96 cf a0 8a c2 7c 2a 05 28 54 77 d8 6c a9 64 b6 c5 62 e2 6e 51 2f c8 cb 37 5a 5b 9b 69 7d 0f 9a 68 c3 ad 6d 5e 89 9b 57 a3 4c b6 6d a7 3f e4 01 2c 2f 6f 6b 6b 02 58 c5 46 74 06 bb 15 02 87 b6 13 bb b1 2b 9d 2d cf e4 7b 56 9a aa ba 58 37 8c 4e 46 64 0c Data Ascii: ~VlYy?A:O0O.?Iv{~lz]%x1G24`1w^"B~<kh:&9D@I4<lC"`67{=V+`TU0sOtjy2\|(TwldbnQ/7Z[i}hm^WLm?,/okkXFt+-{VX7NFd
2023-11-08 14:38:11 UTC	269	IN	Data Raw: cf ed 4a 81 15 18 98 61 30 c8 c8 64 54 a5 78 cd 8a 5a ad d0 a1 0b 8d 98 e4 71 1c 30 2e 8e 57 32 76 e1 cd f7 c2 31 68 64 8d 2d 43 5a f1 a4 bf 56 d5 41 40 b5 47 84 c3 b1 7c 67 3b ee e5 3d 19 45 d6 18 34 ca 27 4b 3c fc 40 ad ba 7c 08 8b 98 34 5e 80 71 09 7c e5 5c e5 7f fb 86 56 15 1f e2 ed 1b 9f 31 70 a0 0f 25 5b c6 23 53 d4 ef e0 23 ec 46 e9 8b fa e2 f7 cf d8 23 b2 a8 2d a6 43 a4 49 f1 da cc ed cc a5 be 2b 5c 16 29 2c ed 57 79 79 f2 3a 23 ec df 73 ed f7 51 a5 bc a8 98 e5 50 5e 3c f1 f2 df 45 fe 2f eb 50 98 9e ac 94 4e 79 87 84 ba f3 88 ff df 9e 92 3f 29 81 e8 65 c0 fd 53 fd 92 7f 62 3a 09 6a 1e 77 a5 6e 61 a6 8d d2 ee 5c b8 54 c7 f7 5d 6e 3e 2c b2 e6 4a 7a a3 bb 8d 46 20 22 e7 a9 bc a2 c6 b9 30 2d bc c9 e1 68 8b 00 87 96 fa cb 71 f3 b4 b3 28 42 3f d6 e9 e6 Data Ascii: Ja0dTxZq0.W2v1hd-CZVA@G\|g;=E4'K<@\|4^q\|\V1p%[#S#F#-CI+\),Wyy:#sQP^<E/PNy?)eSb:jwna\T]n>,JzF "0-hq(B?
2023-11-08 14:38:11 UTC	270	IN	Data Raw: 29 16 fc 03 1c 86 12 43 c2 c5 05 d7 a5 95 b4 29 a7 8c 0b f3 d7 99 e8 84 50 a6 5b 22 71 2c 36 99 17 c6 0a 16 ba a8 dd 3c 73 1e 5a 8d 6d 4e 76 2e 0d 83 b2 81 2e 27 a0 eb ba 0d 1f d4 9c 96 11 b9 df d5 fc 7d 39 89 b5 50 cc 82 bc 24 0d fc b9 c8 68 3f fa f7 ea cb 83 1b 32 3d f7 f3 82 2b 0b 2e c5 23 47 3d 77 4f 93 99 1c 47 3e 84 23 cc 61 c8 00 e6 ea 9b 00 63 64 24 a0 5c 1e c7 d9 80 87 ee 9d f8 b5 ef dd bb fa 8a e1 67 e3 b5 79 b4 5a ba 67 8b eb 76 8c 62 9f bc f7 d4 b7 61 7a 02 38 16 a9 7b c8 9b 7d 0e 42 68 d2 41 b7 7b 6d 44 03 fe 86 ae 85 85 2e 83 1c f4 27 2a 4b b8 db 4f 1b 69 6b 3b a2 9d 44 20 96 23 99 13 81 80 9d 1c ae 2f 00 68 90 86 90 ba 3b 93 40 1a ff e0 c2 b1 0d 21 f4 db 2b ff da ab 0e cc 2d b2 16 63 9c 6b 6e 2e fa cb ef 76 19 96 24 3f 3a 8b ef 89 a6 81 ef Data Ascii: )C)P["q,6<sZmNv..'}9P$h?2=+.#G=wOG>#acd$\gyZgvbaz8{}BhA{mD.'*KOik;D #/h;@!+-ckn.v$?:
2023-11-08 14:38:11 UTC	274	IN	Data Raw: 1f 7b 2b 0c ee 49 19 f4 66 44 24 02 35 77 bf 08 18 94 a0 a2 5b 45 06 8b 47 13 a6 65 93 86 4c df 65 be 75 72 80 48 f2 e0 ba 0f c9 e7 02 31 8c 9d 11 b4 1b 95 1f bc 54 ff 7e ce a7 1d 74 57 79 77 b3 24 76 73 6a 18 12 ac 66 32 28 fd 64 e8 db ef 46 d7 67 5d 6b 53 7a 21 7e a0 27 5d 1e 3a 34 05 60 04 89 6c 79 69 31 9f 59 ca b8 80 c0 37 79 f3 08 ad 54 e1 a3 c4 29 12 49 4a d1 f2 9b 75 8b cd 20 96 b2 a5 be 5e c4 c2 03 d5 b3 12 83 c4 b7 98 27 5e 44 a1 1f e7 76 d2 d4 d0 d1 f7 83 d3 49 77 4e 7b 2b 24 3e c7 7c 0c f2 d4 d8 bf f3 7a ec 46 64 f9 17 de 19 9c de 61 0c ed 1e ba 91 cc e6 a2 04 4f bc df 62 44 4c 1f d1 7b cc ac f7 b5 6f c0 be 9d 3c 35 7c ff ca 90 96 80 2d 44 49 9f a0 df 9a 6b f9 ad d7 79 eb b5 42 6f 57 c5 2b f7 6f 95 cb c9 5e e8 c4 27 5e 4e 3f f1 c1 e8 20 16 3d Data Ascii: {+IfD$5w[EGeLeurH1T~tWyw$vsjf2(dFg]kSz!~']:4`lyi1Y7yT)IJu ^'^DvIwN{+$>\|zFdaObDL{o<5\|-DIkyBoW+o^'^N? =
2023-11-08 14:38:11 UTC	278	IN	Data Raw: af 7c f4 6b 9b c3 bf ab cf 24 06 61 ff 3d b9 b1 fe c8 e3 67 f5 31 d9 69 0f 7a e7 dd c0 83 66 d2 86 4d ac 8b 6d b3 a5 06 20 01 eb 0c f0 d1 1f 7a 60 d2 fb ac 30 1a 58 10 ff 2a b4 cb 2b 47 e3 7f a8 6e 1a d1 d1 20 3f 4a 0f 1d 0c eb 3e 03 c8 06 00 5b 53 74 81 64 b0 3e 29 17 8d 12 03 60 7a 64 4d 1f 91 b8 b4 2b c8 39 82 c1 ae 2c 5a 27 2c 20 c4 af 3e 19 10 63 75 7d 6e c0 aa 6d c4 90 d8 4e e9 90 3d 99 7a 38 01 24 11 52 02 d5 a3 cc 33 f2 63 0c b1 a8 17 31 01 4d 45 10 ac c4 4b a4 59 bd 24 b7 b6 8d 8b a3 d3 f0 86 d8 04 a1 d4 0d 35 ea 0a e4 5d 1c 59 3c 7a 88 28 b0 8d b3 bb a9 3a 1e cf 4f 62 ea 4e a8 bd 41 9b 45 8c 03 35 d8 a5 2c bb 8e 2f 9e 01 d0 0e 07 00 2d a4 b1 de 44 0c d9 ca b0 e6 01 b2 01 13 ad 73 55 84 32 0a 62 cc 43 3d 87 87 95 28 b0 46 c9 73 55 01 d7 3b cb 8f Data Ascii: \|k$a=g1izfMm z`0X*+Gn ?J>[Std>)`zdM+9,Z', >cu}nmN=z8$R3c1MEKY$5]Y<z(:ObNAE5,/-DsU2bC=(FsU;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.4	49736	44.205.71.235	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:11 UTC	282	OUT	GET /favicon.ico HTTP/1.1 Host: links.iterable.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=709d43d303eba13784b0da51d4baab6ef98fcd57-1699454288139-ea09094b981d897761484f63

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	13.224.14.58	443	192.168.2.4	49750	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:11 UTC	283	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 13292 Connection: close Date: Wed, 08 Nov 2023 14:38:11 GMT Last-Modified: Sun, 26 Apr 2020 11:36:00 GMT ETag: "25a8807c6c328e265416dd55e22e0b5d" x-amz-server-side-encryption: AES256 x-amz-version-id: oU59xn3GZQoJ_S1KM3OnTVsInzR8pcHa Accept-Ranges: bytes Server: AmazonS3 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Security-Policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin X-Cache: Hit from cloudfront Via: 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA19-C2 X-Amz-Cf-Id: UnXsAebTUVXT9v0VhvODykUTavE_Q7UORXQjlAjiAusA4Z3ONq_fog== Age: 1
2023-11-08 14:38:11 UTC	284	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 30 00 00 00 56 08 06 00 00 00 d1 c3 ac 01 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 30 a0 03 00 04 00 00 00 01 00 00 00 56 00 00 00 00 c8 91 85 62 00 00 33 56 49 44 41 54 78 01 ed 7d 09 78 55 c5 d9 ff 99 73 97 73 03 04 10 01 95 ec 01 02 82 45 14 11 71 6b d0 ca 26 b8 e3 82 8a 8a d4 02 6a 5b 6d b5 b6 d6 c7 7c d6 b6 b6 2e fd ea 5f db 4f 11 6c b5 ae 58 45 a8 24 68 c5 54 2b 4b 95 aa 60 90 84 2d 0b c8 12 10 09 81 e4 de dc 7b e6 ff 9b 24 87 dc dc ed cc dc 7b ee ca 9c e7 49 ce 3d 33 ef bc f3 ce 6f b6 77 de d9 88 62 c1 43 47 5f d6 d7 7d Data Ascii: PNGIHDR0VsRGBDeXIfMM*i0Vb3VIDATx}xUssEqk&j[m\|._OlXE$hT+K`-{${I=3owbCG_}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.4	49751	23.60.72.63	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:11 UTC	297	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-11-08 14:38:11 UTC	299	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0MNkrYwAAAADiUL7L3dxqSIABzBrl++yWQ082QUEzMTUwODEwMDIxAGNlZmMyNTgzLWE5YjItNDRhNy05NzU1LWI3NmQxN2UwNWY3Zg== Cache-Control: public, max-age=159656 Date: Wed, 08 Nov 2023 14:38:11 GMT Content-Length: 55 Connection: close X-CID: 2
2023-11-08 14:38:11 UTC	300	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	44.205.71.235	443	192.168.2.4	49736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:11 UTC	297	IN	HTTP/1.1 404 Not Found Date: Wed, 08 Nov 2023 14:38:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1376 Connection: close Vary: Origin Request-Time: 0 Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-5TZcd0aZJjtY3PwyDAQidg==' X-Permitted-Cross-Domain-Policies: master-only Server: iterable-links d881
2023-11-08 14:38:11 UTC	298	IN	Data Raw: 0a 0a 0a 0a 20 20 20 20 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 20 6e 67 2d 6e 6f 6e 2d 62 69 6e 64 61 62 6c 65 3e 41 63 74 69 6f 6e 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e Data Ascii: <!doctype html> <html> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> <title ng-non-bindable>Action not found</title> <meta name="description

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	142.250.69.206	443	192.168.2.4	49732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:06 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-qwmErms9cHf4unjNXzBtoA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 08 Nov 2023 14:38:06 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6155 X-Daystart: 23886 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-11-08 14:38:06 UTC	2	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 31 35 35 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 32 33 38 38 36 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6155" elapsed_seconds="23886"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-11-08 14:38:06 UTC	2	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-11-08 14:38:06 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.4	49752	13.85.23.86	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:19 UTC	300	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZmRdgaHwKFpNNot&MD=GVw+lVUx HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-11-08 14:38:19 UTC	300	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: e59b809f-49d9-4d27-803b-1290502ce40f MS-RequestId: 2ead29c9-327e-4c6a-ab4c-644f11be945a MS-CV: m9gIfZqkNUSUP004.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 08 Nov 2023 14:38:18 GMT Connection: close Content-Length: 24490
2023-11-08 14:38:19 UTC	301	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2023-11-08 14:38:19 UTC	316	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.4	49757	13.85.23.86	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:57 UTC	324	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZmRdgaHwKFpNNot&MD=GVw+lVUx HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-11-08 14:38:57 UTC	325	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 8dffaee6-66b5-4f7c-bd43-b7e8bd7aad1d MS-RequestId: 060c929c-d704-4a5e-b7cb-3196232f81b7 MS-CV: crZ94TKy9kqPm5vr.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 08 Nov 2023 14:38:57 GMT Connection: close Content-Length: 25457
2023-11-08 14:38:57 UTC	325	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2023-11-08 14:38:57 UTC	341	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	142.251.211.237	443	192.168.2.4	49731	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:06 UTC	2	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 08 Nov 2023 14:38:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-PwBHBWqgoytbdlELMpQFnQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-11-08 14:38:06 UTC	4	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-11-08 14:38:06 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.4	49735	44.205.71.235	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:08 UTC	4	OUT	GET /e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D HTTP/1.1 Host: links.iterable.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	44.205.71.235	443	192.168.2.4	49735	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:08 UTC	5	IN	HTTP/1.1 200 OK Date: Wed, 08 Nov 2023 14:38:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2549 Connection: close Vary: Origin Set-Cookie: XSRF-TOKEN=709d43d303eba13784b0da51d4baab6ef98fcd57-1699454288139-ea09094b981d897761484f63; SameSite=Lax; Path=/ Request-Time: 7 Cache-Control: must-revalidate,no-cache,no-store Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: base-uri 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub46dd5cf52153d917fc1d5e91ff3a600d&dd-evp-origin=content-security-policy&ddsource=csp-report; frame-ancestors 'self' https://links.iterable.com; object-src 'none'; worker-src 'self' blob:; script-src 'report-sample' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https: 'nonce-mXoQEoHX3aSoeXQAvoVFOw==' X-Permitted-Cross-Domain-Policies: master-only Server: iterable-links 08b0
2023-11-08 14:38:08 UTC	6	IN	Data Raw: 0a 20 20 20 20 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 20 6e 67 2d 6e 6f 6e 2d 62 69 6e 64 61 62 6c 65 3e 55 6e 73 75 62 73 63 72 69 62 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e Data Ascii: <!doctype html> <html> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> <title ng-non-bindable>Unsubscribe</title> <meta name="description" conten

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.4	49739	104.17.25.14	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:08 UTC	8	OUT	GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://links.iterable.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.4	49742	18.172.170.94	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:08 UTC	9	OUT	GET /static/iterable-s3/vendor.c89cf2fccf178016b036.css.gz HTTP/1.1 Host: assets.iterable.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://links.iterable.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	104.17.25.14	443	192.168.2.4	49739	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:09 UTC	9	IN	HTTP/1.1 200 OK Date: Wed, 08 Nov 2023 14:38:09 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e5f-7918" Last-Modified: Mon, 04 May 2020 16:10:07 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 584047 Expires: Mon, 28 Oct 2024 14:38:09 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BQUoCClEm2Mmpq%2FzQqtVmsR1hsf5qSkLSngZB%2BhLpVb7r7JVmpsdZ3UQNyotA%2FK%2BsqUVePJiRU7izSYHApLMeGLnbsGDR4b5uG2xca9tkUvpPut555wWxwudWfilXrBBMCyzrZUU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 822e8eda6eeec36b-SEA alt-svc: h3=":443"; ma=86400
2023-11-08 14:38:09 UTC	10	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2023-11-08 14:38:09 UTC	11	IN	Data Raw: 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 Data Ascii: nts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inli
2023-11-08 14:38:09 UTC	12	IN	Data Raw: 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e Data Ascii: kit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.
2023-11-08 14:38:09 UTC	13	IN	Data Raw: 78 2c 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 Data Ascii: x,.fa-stack-2x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa
2023-11-08 14:38:09 UTC	15	IN	Data Raw: 6e 74 65 6e 74 3a 22 5c 66 30 32 33 22 7d 2e 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: ntent:"\f023"}.fa-flag:before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{cont
2023-11-08 14:38:09 UTC	16	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 38 22 7d 2e 66 61 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: ontent:"\f048"}.fa-fast-backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content
2023-11-08 14:38:09 UTC	17	IN	Data Raw: 79 65 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b Data Ascii: ye-slash:before{content:"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{
2023-11-08 14:38:09 UTC	19	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: :before{content:"\f095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{conten
2023-11-08 14:38:09 UTC	20	IN	Data Raw: 36 22 7d 2e 66 61 2d 73 61 76 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 Data Ascii: 6"}.fa-save:before,.fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{c
2023-11-08 14:38:09 UTC	21	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 39 22 7d 2e 66 61 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: e{content:"\f0e9"}.fa-paste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content
2023-11-08 14:38:09 UTC	23	IN	Data Raw: 3a 22 5c 66 31 30 65 22 7d 2e 66 61 2d 73 70 69 6e 6e 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 30 22 7d 2e 66 61 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 31 22 7d 2e 66 61 2d 6d 61 69 6c 2d 72 65 70 6c 79 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 70 6c 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 32 22 7d 2e 66 61 2d 67 69 74 68 75 62 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 33 22 7d 2e 66 61 2d 66 6f 6c 64 65 72 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 34 22 7d 2e 66 61 2d 66 6f 6c 64 65 72 2d 6f 70 65 6e 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 35 22 7d 2e 66 61 2d 73 6d 69 Data Ascii: :"\f10e"}.fa-spinner:before{content:"\f110"}.fa-circle:before{content:"\f111"}.fa-mail-reply:before,.fa-reply:before{content:"\f112"}.fa-github-alt:before{content:"\f113"}.fa-folder-o:before{content:"\f114"}.fa-folder-open-o:before{content:"\f115"}.fa-smi
2023-11-08 14:38:09 UTC	24	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 31 33 35 22 7d 2e 66 61 2d 6d 61 78 63 64 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 36 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 63 69 72 63 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 37 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 63 69 72 63 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 38 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 63 69 72 63 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 39 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 63 69 72 63 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 61 22 7d 2e 66 61 2d 68 74 6d 6c 35 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: tent:"\f135"}.fa-maxcdn:before{content:"\f136"}.fa-chevron-circle-left:before{content:"\f137"}.fa-chevron-circle-right:before{content:"\f138"}.fa-chevron-circle-up:before{content:"\f139"}.fa-chevron-circle-down:before{content:"\f13a"}.fa-html5:before{cont
2023-11-08 14:38:09 UTC	25	IN	Data Raw: 61 2d 79 65 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6a 70 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 37 22 7d 2e 66 61 2d 72 75 62 6c 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 6f 75 62 6c 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 38 22 7d 2e 66 61 2d 77 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6b 72 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 39 22 7d 2e 66 61 2d 62 69 74 63 6f 69 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 74 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 61 22 7d 2e 66 61 2d 66 69 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 62 22 7d 2e 66 61 2d 66 69 6c 65 2d 74 65 78 74 3a 62 65 66 Data Ascii: a-yen:before,.fa-jpy:before{content:"\f157"}.fa-ruble:before,.fa-rouble:before,.fa-rub:before{content:"\f158"}.fa-won:before,.fa-krw:before{content:"\f159"}.fa-bitcoin:before,.fa-btc:before{content:"\f15a"}.fa-file:before{content:"\f15b"}.fa-file-text:bef
2023-11-08 14:38:09 UTC	27	IN	Data Raw: 31 37 61 22 7d 2e 66 61 2d 61 6e 64 72 6f 69 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 62 22 7d 2e 66 61 2d 6c 69 6e 75 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 63 22 7d 2e 66 61 2d 64 72 69 62 62 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 64 22 7d 2e 66 61 2d 73 6b 79 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 65 22 7d 2e 66 61 2d 66 6f 75 72 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 38 30 22 7d 2e 66 61 2d 74 72 65 6c 6c 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 38 31 22 7d 2e 66 61 2d 66 65 6d 61 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 38 32 22 7d 2e 66 61 2d 6d 61 6c Data Ascii: 17a"}.fa-android:before{content:"\f17b"}.fa-linux:before{content:"\f17c"}.fa-dribbble:before{content:"\f17d"}.fa-skype:before{content:"\f17e"}.fa-foursquare:before{content:"\f180"}.fa-trello:before{content:"\f181"}.fa-female:before{content:"\f182"}.fa-mal
2023-11-08 14:38:09 UTC	28	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 65 22 7d 2e 66 61 2d 67 6f 6f 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 30 22 7d 2e 66 61 2d 72 65 64 64 69 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 31 22 7d 2e 66 61 2d 72 65 64 64 69 74 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 32 22 7d 2e 66 61 2d 73 74 75 6d 62 6c 65 75 70 6f 6e 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 33 22 7d 2e 66 61 2d 73 74 75 6d 62 6c 65 75 70 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 34 22 7d 2e 66 61 2d 64 65 6c 69 63 69 6f 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 35 22 7d 2e 66 61 2d 64 69 67 Data Ascii: {content:"\f19e"}.fa-google:before{content:"\f1a0"}.fa-reddit:before{content:"\f1a1"}.fa-reddit-square:before{content:"\f1a2"}.fa-stumbleupon-circle:before{content:"\f1a3"}.fa-stumbleupon:before{content:"\f1a4"}.fa-delicious:before{content:"\f1a5"}.fa-dig
2023-11-08 14:38:09 UTC	29	IN	Data Raw: 72 65 2c 2e 66 61 2d 66 69 6c 65 2d 69 6d 61 67 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 35 22 7d 2e 66 61 2d 66 69 6c 65 2d 7a 69 70 2d 6f 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 69 6c 65 2d 61 72 63 68 69 76 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 36 22 7d 2e 66 61 2d 66 69 6c 65 2d 73 6f 75 6e 64 2d 6f 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 69 6c 65 2d 61 75 64 69 6f 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 37 22 7d 2e 66 61 2d 66 69 6c 65 2d 6d 6f 76 69 65 2d 6f 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 69 6c 65 2d 76 69 64 65 6f 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 38 22 7d 2e 66 61 2d 66 69 6c 65 2d 63 6f 64 65 2d 6f 3a 62 65 66 6f Data Ascii: re,.fa-file-image-o:before{content:"\f1c5"}.fa-file-zip-o:before,.fa-file-archive-o:before{content:"\f1c6"}.fa-file-sound-o:before,.fa-file-audio-o:before{content:"\f1c7"}.fa-file-movie-o:before,.fa-file-video-o:before{content:"\f1c8"}.fa-file-code-o:befo
2023-11-08 14:38:09 UTC	31	IN	Data Raw: 65 2c 2e 66 61 2d 66 75 74 62 6f 6c 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 33 22 7d 2e 66 61 2d 74 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 34 22 7d 2e 66 61 2d 62 69 6e 6f 63 75 6c 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 35 22 7d 2e 66 61 2d 70 6c 75 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 36 22 7d 2e 66 61 2d 73 6c 69 64 65 73 68 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 37 22 7d 2e 66 61 2d 74 77 69 74 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 38 22 7d 2e 66 61 2d 79 65 6c 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 39 22 7d 2e 66 61 2d 6e 65 77 73 70 61 70 65 Data Ascii: e,.fa-futbol-o:before{content:"\f1e3"}.fa-tty:before{content:"\f1e4"}.fa-binoculars:before{content:"\f1e5"}.fa-plug:before{content:"\f1e6"}.fa-slideshare:before{content:"\f1e7"}.fa-twitch:before{content:"\f1e8"}.fa-yelp:before{content:"\f1e9"}.fa-newspape
2023-11-08 14:38:09 UTC	32	IN	Data Raw: 3a 22 5c 66 32 30 61 22 7d 2e 66 61 2d 73 68 65 6b 65 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 68 65 71 65 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 69 6c 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 62 22 7d 2e 66 61 2d 6d 65 61 6e 70 61 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 63 22 7d 2e 66 61 2d 62 75 79 73 65 6c 6c 61 64 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 64 22 7d 2e 66 61 2d 63 6f 6e 6e 65 63 74 64 65 76 65 6c 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 65 22 7d 2e 66 61 2d 64 61 73 68 63 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 30 22 7d 2e 66 61 2d 66 6f 72 75 6d 62 65 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: :"\f20a"}.fa-shekel:before,.fa-sheqel:before,.fa-ils:before{content:"\f20b"}.fa-meanpath:before{content:"\f20c"}.fa-buysellads:before{content:"\f20d"}.fa-connectdevelop:before{content:"\f20e"}.fa-dashcube:before{content:"\f210"}.fa-forumbee:before{content
2023-11-08 14:38:09 UTC	33	IN	Data Raw: 6e 74 3a 22 5c 66 32 33 32 22 7d 2e 66 61 2d 73 65 72 76 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 33 22 7d 2e 66 61 2d 75 73 65 72 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 34 22 7d 2e 66 61 2d 75 73 65 72 2d 74 69 6d 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 35 22 7d 2e 66 61 2d 68 6f 74 65 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 36 22 7d 2e 66 61 2d 76 69 61 63 6f 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 37 22 7d 2e 66 61 2d 74 72 61 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 38 22 7d 2e 66 61 2d 73 75 62 77 61 79 3a 62 65 66 6f 72 65 7b 63 Data Ascii: nt:"\f232"}.fa-server:before{content:"\f233"}.fa-user-plus:before{content:"\f234"}.fa-user-times:before{content:"\f235"}.fa-hotel:before,.fa-bed:before{content:"\f236"}.fa-viacoin:before{content:"\f237"}.fa-train:before{content:"\f238"}.fa-subway:before{c
2023-11-08 14:38:09 UTC	35	IN	Data Raw: 32 22 7d 2e 66 61 2d 68 6f 75 72 67 6c 61 73 73 2d 33 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 68 6f 75 72 67 6c 61 73 73 2d 65 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 33 22 7d 2e 66 61 2d 68 6f 75 72 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 34 22 7d 2e 66 61 2d 68 61 6e 64 2d 67 72 61 62 2d 6f 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 68 61 6e 64 2d 72 6f 63 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 35 22 7d 2e 66 61 2d 68 61 6e 64 2d 73 74 6f 70 2d 6f 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 68 61 6e 64 2d 70 61 70 65 72 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 36 22 7d 2e 66 61 2d 68 61 6e 64 2d 73 63 69 73 73 6f 72 73 2d 6f 3a 62 65 66 6f 72 65 Data Ascii: 2"}.fa-hourglass-3:before,.fa-hourglass-end:before{content:"\f253"}.fa-hourglass:before{content:"\f254"}.fa-hand-grab-o:before,.fa-hand-rock-o:before{content:"\f255"}.fa-hand-stop-o:before,.fa-hand-paper-o:before{content:"\f256"}.fa-hand-scissors-o:before
2023-11-08 14:38:09 UTC	36	IN	Data Raw: 22 7d 2e 66 61 2d 6d 61 70 2d 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 36 22 7d 2e 66 61 2d 6d 61 70 2d 73 69 67 6e 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 37 22 7d 2e 66 61 2d 6d 61 70 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 38 22 7d 2e 66 61 2d 6d 61 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 39 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 61 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 69 6e 67 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 62 22 7d 2e 66 61 2d 68 6f 75 7a 7a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 63 22 7d 2e 66 61 2d 76 69 Data Ascii: "}.fa-map-pin:before{content:"\f276"}.fa-map-signs:before{content:"\f277"}.fa-map-o:before{content:"\f278"}.fa-map:before{content:"\f279"}.fa-commenting:before{content:"\f27a"}.fa-commenting-o:before{content:"\f27b"}.fa-houzz:before{content:"\f27c"}.fa-vi
2023-11-08 14:38:09 UTC	37	IN	Data Raw: 6e 74 65 6e 74 3a 22 5c 66 32 39 63 22 7d 2e 66 61 2d 62 6c 69 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 64 22 7d 2e 66 61 2d 61 75 64 69 6f 2d 64 65 73 63 72 69 70 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 65 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 63 6f 6e 74 72 6f 6c 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 30 22 7d 2e 66 61 2d 62 72 61 69 6c 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 31 22 7d 2e 66 61 2d 61 73 73 69 73 74 69 76 65 2d 6c 69 73 74 65 6e 69 6e 67 2d 73 79 73 74 65 6d 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 32 22 7d 2e 66 61 2d 61 73 6c 2d 69 6e 74 65 72 70 72 65 74 69 6e 67 3a 62 65 66 6f Data Ascii: ntent:"\f29c"}.fa-blind:before{content:"\f29d"}.fa-audio-description:before{content:"\f29e"}.fa-volume-control-phone:before{content:"\f2a0"}.fa-braille:before{content:"\f2a1"}.fa-assistive-listening-systems:before{content:"\f2a2"}.fa-asl-interpreting:befo
2023-11-08 14:38:09 UTC	39	IN	Data Raw: 61 72 64 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 63 22 7d 2e 66 61 2d 75 73 65 72 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 64 22 7d 2e 66 61 2d 75 73 65 72 2d 63 69 72 63 6c 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 30 22 7d 2e 66 61 2d 69 64 2d 62 61 64 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 31 22 7d 2e 66 61 2d 64 72 69 76 65 72 73 2d 6c 69 63 65 6e 73 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 69 64 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 32 22 7d 2e 66 61 2d 64 72 69 76 65 72 73 2d 6c 69 Data Ascii: ard-o:before{content:"\f2bc"}.fa-user-circle:before{content:"\f2bd"}.fa-user-circle-o:before{content:"\f2be"}.fa-user-o:before{content:"\f2c0"}.fa-id-badge:before{content:"\f2c1"}.fa-drivers-license:before,.fa-id-card:before{content:"\f2c2"}.fa-drivers-li
2023-11-08 14:38:09 UTC	40	IN	Data Raw: 66 61 2d 65 65 72 63 61 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 64 61 22 7d 2e 66 61 2d 6d 69 63 72 6f 63 68 69 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 64 62 22 7d 2e 66 61 2d 73 6e 6f 77 66 6c 61 6b 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 64 63 22 7d 2e 66 61 2d 73 75 70 65 72 70 6f 77 65 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 64 64 22 7d 2e 66 61 2d 77 70 65 78 70 6c 6f 72 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 64 65 22 7d 2e 66 61 2d 6d 65 65 74 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 65 30 22 7d 2e 73 72 2d 6f 6e 6c 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 Data Ascii: fa-eercast:before{content:"\f2da"}.fa-microchip:before{content:"\f2db"}.fa-snowflake-o:before{content:"\f2dc"}.fa-superpowers:before{content:"\f2dd"}.fa-wpexplorer:before{content:"\f2de"}.fa-meetup:before{content:"\f2e0"}.sr-only{position:absolute;width:1
2023-11-08 14:38:09 UTC	41	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	18.172.170.94	443	192.168.2.4	49742	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-11-08 14:38:09 UTC	41	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 151744 Connection: close Date: Wed, 08 Nov 2023 14:38:10 GMT Last-Modified: Wed, 08 Nov 2023 14:36:31 GMT ETag: "73a35ffe82b65fcac30a99654def2514" x-amz-server-side-encryption: AES256 Cache-Control: 31536000 Content-Encoding: gzip Expires: Sat, 20 Nov 2286 18:46:39 GMT Accept-Ranges: bytes Server: AmazonS3 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Security-Policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin X-Cache: Miss from cloudfront Via: 1.1 06a6a5c4cebb71ab27b2d7f062023104.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA73-P3 X-Amz-Cf-Id: OjebVx-r5pfOFoswVX7NbwN_Ds84VDL2HDYr1tXulPwctkxynQzTew==
2023-11-08 14:38:09 UTC	41	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ec bd fd 93 e4 b6 91 20 fa f3 76 c4 fe 0f e5 71 28 34 23 55 d5 90 ac 62 7d cc 3c cd ed 68 24 dd fa 9e ed db 58 f9 45 6c 3c 59 e7 60 91 ac 2e 7a 58 c5 5a 92 d5 3d 2d bf be bf fd 01 20 40 e2 23 13 00 ab 5b e3 bb 0b ab 6d a9 9b 48 24 12 89 44 22 91 48 24 5e 7f f5 9b 9b c9 57 93 7f 2b 93 e2 f4 63 5a 57 65 b9 4b ea c9 7f 4b ee 12 f2 57 71 6e 27 bf 2f 76 75 52 3f 4c ee c2 79 30 0f 66 75 3a 0f 68 85 43 db 9e 9b 37 af 5f df 16 ed e1 b2 9b a7 d5 f1 75 7e ff 90 bc 56 11 11 48 0a fc a1 3a 3f d4 c5 ed a1 9d fc df c9 c3 e4 c7 f4 90 df e7 93 ff 4b a0 b8 bf bf 9f 7f 4c 1e 1a f6 79 9e e5 ef 68 95 7f cf cb 3c 69 f2 6c 72 39 65 79 3d 69 0f f9 e4 0f bf fb d3 a4 2c d2 fc d4 e4 fe 14 bc de 95 d5 ee f5 31 69 da bc 7e fd fb df 7d f8 fe 8f 3f 7e 4f Data Ascii: vq(4#Ub}<h$XEl<Y`.zXZ=- @#[mH$D"H$^W+cZWeKKWqn'/vuR?Ly0fu:hC7_u~VH:?KLyh<ilr9ey=i,1i~}?~O
2023-11-08 14:38:09 UTC	57	IN	Data Raw: d0 82 e7 1e 68 23 96 d3 0f ec 7c 0b ce 4f a3 b7 80 bb 67 54 25 27 fb 57 86 f3 59 e9 7d e9 de f8 30 0a 24 13 04 ae 34 d8 1a 68 5d e8 1d 73 f9 18 c2 f5 7c b8 74 00 31 8a 66 f3 64 77 2d bb a7 e4 2a f0 81 b5 df 3b 84 3e aa 5d 21 0f 98 85 10 5b b0 59 00 3e 98 0c 0f ab af 80 28 4f df 8d ef 91 e6 d6 72 76 30 0c 45 0f 01 b7 e5 e3 d3 08 a0 be 29 27 01 2b a8 fd 48 0a 60 20 2a dc 1e b8 0c 46 6a a2 c7 cc 6a f4 26 72 f2 6c 09 ea 84 9d 96 c8 55 1a 5c 4b d2 00 b4 b6 ba a4 87 19 cd 68 40 75 ce 31 39 15 e7 0b d5 3b d5 49 d8 9c 76 08 e3 14 7c 30 7a 2f 0d b1 08 3b e7 b8 f2 c4 2e 8b d5 c3 0a 19 51 68 21 fd 07 2c 1c 13 bd 6a 7f 5f 96 3f 79 4b 87 5c 84 27 b3 df 79 d2 07 e9 d3 1c f8 64 d6 98 9b 35 e6 cf 1d d8 cc 9a 13 57 0c 35 c2 a5 c6 b4 00 7e 26 45 59 9e 56 2c d8 ed 24 79 b9 Data Ascii: h#\|OgT%'WY}0$4h]s\|t1fdw-;>]![Y>(Orv0E)'+H` Fjj&rlU\Kh@u19;Iv\|0z/;.Qh!,j_?yK\'yd5W5~&EYV,$y
2023-11-08 14:38:09 UTC	58	IN	Data Raw: 1c 8f af a3 4b 99 00 2a 75 5e ba 4f 4f d0 09 b4 00 0d e6 08 25 68 91 09 48 15 aa 2d cc 47 b4 30 4a c2 04 53 7d 25 ec 79 a4 c0 a1 19 05 5e 50 39 f2 42 7f fd 68 19 5a 58 4b 9a 2d 38 f4 99 6d ba 83 ea d2 68 61 ee d7 82 c3 ff 38 4e 3b 81 5e c8 01 85 5d 6f f2 d4 a4 9e 42 b6 8d 17 4b 70 4a 2f 17 fb 45 a2 21 55 dd b8 ec d3 28 91 4e b7 8b 20 82 d6 f8 f5 2a 4c c3 ad de da 18 9d 89 a2 4e d2 68 2b 6d a3 38 6a d5 59 df f5 c4 cf 57 3f 86 bb 57 11 a5 7a e3 65 d2 fc 8e 6b d4 04 b1 26 7a 60 0c c7 9c d5 60 82 00 9e d4 c8 e8 e7 fe e8 47 09 95 e0 a5 a7 50 3d c7 c8 bb 0e 69 3a ac f0 19 0d 2b 1b 71 44 83 0d 27 72 40 a3 a3 77 9d 9e a0 f3 1a 3e 9d d1 d0 cf bd d0 db 75 e3 38 15 04 a9 46 09 83 5d 35 96 c5 a9 0b 48 c2 32 6a 60 fe 4f 11 cc 11 28 a8 a6 c3 af aa 58 d1 2f 73 e3 8b 47 Data Ascii: Ku^OO%hH-G0JS}%y^P9BhZXK-8mha8N;^]oBKpJ/E!U(N LNh+m8jYW?Wzek&z``GP=i:+qD'r@w>u8F]5H2j`O(X/sG
2023-11-08 14:38:09 UTC	72	IN	Data Raw: 0f 6e 87 ed d9 7a 1a 89 c4 c8 57 9c b8 67 84 65 5c 0e 2e e0 b1 53 73 92 a6 65 15 43 d5 86 85 c2 6d 85 3c ad 40 1e c1 7e dd 8e 41 a8 e6 07 2c 15 b9 fd c4 21 07 a3 36 4c 4f 2f a6 15 d0 3c 9d e3 b1 a0 d8 0c a2 2c 16 0b 62 5d 2a 16 24 b1 5e 2c 08 7e 62 4a 46 0c 70 d1 8f 01 2e 29 0a 28 1e fc 12 ca 35 92 51 30 9d cc bd 06 4c 48 3c 13 2a 79 75 5e 4a 91 bf 14 1a c2 08 c1 7b 11 41 f5 20 27 3e ea 27 1a b5 37 15 94 00 26 48 a1 86 39 db 53 ab 62 57 8d e8 f0 d0 63 2b 57 03 f5 1d 7f 18 fd fe c9 0e 67 5d 70 fe 8f 0f 71 2e af d2 2e 2e 22 9e b0 5e b0 9e fd 67 98 8e 6b f1 0d 45 f2 ed 3d ee d0 73 d3 1e 07 ee 3f 18 46 f1 08 f6 11 4e 58 6f 68 bd 2a e8 b6 6d 94 1f cc d7 bc 37 74 13 0e 0a 30 74 b3 b5 d0 82 e0 f0 f4 a0 a6 97 c5 9d 85 bd 8b a6 0d 08 17 57 55 2a 70 97 8f ba e4 9a Data Ascii: nzWge\.SseCm<@~A,!6LO/<,b]$^,~bJFp.)(5Q0LH<yu^J{A '>'7&H9SbWc+Wg]pq..."^gkE=s?FNXohm7t0tWUp
2023-11-08 14:38:09 UTC	84	IN	Data Raw: cc 35 d6 50 81 5d 10 19 2a 63 6b eb 5f 92 29 58 9e b7 36 11 cf 77 4b 53 9b fa b1 f8 a3 c0 f8 f4 7c 64 40 2c 1c d8 13 ec 0a 47 1e 0c b3 91 5d 25 29 b7 74 96 eb d8 30 21 6f f6 ae 17 86 f6 c8 53 2f 2a 17 ab 11 3d cb ac 71 e3 b8 33 0d 19 2d b1 61 be 9a c2 6b 53 26 18 70 74 37 c3 79 96 8c c3 91 a9 c3 d4 5b 2b c7 81 25 d8 d5 c7 05 9b ba 56 fb 33 ec 89 9f ff a2 bb 5c ae 86 82 86 a2 4d f8 2d 85 94 95 37 26 98 fd 99 95 c0 37 f8 76 27 67 54 52 77 a8 44 21 ac 23 ca 6d 17 de 4c 0b 99 5d 8e bd 00 22 9d 31 34 41 cd 81 59 52 a8 90 bb 58 cc d1 c7 8b fc 96 24 0a 87 14 60 10 85 5f d0 fc 44 4f a2 0c 55 fc c6 32 10 93 ab 26 01 6e 76 09 18 93 93 5f 04 dd 4a 89 14 a1 29 f4 6b c0 77 46 e1 3d be 62 fc 35 82 65 bf 0f 71 87 ef 93 aa a9 46 07 dc 29 91 00 8d c9 3e 26 33 26 3d 92 a6 Data Ascii: 5P]ck_)X6wKS\|d@,G]%)t0!oS/=q3-akS&pt7y[+%V3\M-7&7v'gTRwD!#mL]"14AYRX$`_DOU2&nv_J)kwF=b5eqF)>&3&=
2023-11-08 14:38:09 UTC	91	IN	Data Raw: 12 54 d6 ac 72 03 69 aa 82 20 a8 42 68 7f 71 76 1a 18 68 43 59 f3 87 b0 14 f5 19 fc ef b1 23 ac 91 87 be 7e 95 96 59 71 83 e1 29 48 3f 4a 10 23 8c 9d cc 8b 44 9b 13 2e 72 da 2a 92 8c 23 7e 93 c4 8f d1 8b 79 8f a3 71 7e 9e 69 fe 75 8d a8 79 45 7b f2 d8 20 c6 d5 e1 75 89 60 73 8d 76 ed fd 08 7b cc 71 99 24 24 1c 97 e5 f8 58 61 44 2c 09 c6 4a 99 31 4c 19 c7 ff 83 61 5a 66 8c 1e 56 44 14 7f f4 94 19 e3 83 15 50 c2 1f 1f e5 5c 23 80 12 f2 c8 10 22 37 53 be 30 f4 3e 03 8b 81 7e 92 58 18 da 90 8d 98 ab 36 59 d3 b4 59 31 2b 69 75 91 2e c8 aa 29 a3 a7 c6 c6 58 1c 69 a9 6d 02 72 91 d9 9c 14 d9 31 44 53 25 b2 93 ae 5a b3 2b 49 95 21 5d 84 9f b4 7a 88 50 65 d5 93 21 7b ba 36 1e eb a9 1c 23 c2 98 59 4f 3e ad fd 37 2d 36 32 ed 4b de c2 56 10 b3 97 76 74 22 81 28 85 5c Data Ascii: Tri BhqvhCY#~Yq)H?J#D.r*#~yq~iuyE{ u`sv{q$$XaD,J1LaZfVDP\#"7S0>~X6YY1+iu.)Ximr1DS%Z+I!]zPe!{6#YO>7-62KVvt"(\
2023-11-08 14:38:09 UTC	107	IN	Data Raw: 72 d3 55 75 2b b6 50 b1 51 e1 30 d4 d4 c0 ce a6 a2 52 be 35 b7 46 ec 71 7a f1 ff 8b f7 8d e2 06 0d c7 cc e1 6a 59 f9 bc 02 b7 79 b7 cc 54 4a 17 58 d0 2e 77 cb c5 a1 4d a9 59 7a d6 53 91 59 e0 10 97 db 49 b2 5b c2 aa da da f0 5c 83 0d 05 76 61 1f 17 b5 51 bd db ae 4a 33 48 ec c0 9d dd b9 69 fc 06 5d 51 34 6b 76 7b 34 c5 5e 17 df 16 3b f6 3a 6d b9 7b fd 23 72 83 eb 27 54 04 c2 30 e1 0b 2f 8a 34 4b 0c 98 95 da a3 1e 8d c2 98 ca c8 bd 5c 26 af ba e7 ee 68 8a 9f d5 2b 83 b7 5c 8e 3c 5d 62 03 33 52 03 99 2b 4b d0 dc f7 9d 22 61 1e b1 9d 9a c6 a9 9d a0 4d aa 99 a1 df 19 2c 28 f4 1f 2b e3 05 23 79 ff fe ac f9 35 9d c7 d6 57 f3 0e 7e 06 41 d0 2a 40 ac 5b 1f d5 95 51 d7 e0 52 b7 0a f4 56 5c 96 f6 d8 cd e5 d9 b3 5f 55 cb 36 b7 0b 58 79 d7 39 ef 67 6e 5f 29 57 0b 81 Data Ascii: rUu+PQ0R5FqzjYyTJX.wMYzSYI[\vaQJ3Hi]Q4kv{4^;:m{#r'T0/4K\&h+\<]b3R+K"aM,(+#y5W~A*@[QRV\_U6Xy9gn_)W
2023-11-08 14:38:09 UTC	123	IN	Data Raw: 2c 8b 54 8e 99 d1 12 e9 7b ca 8f 53 74 7f 02 19 32 8a b8 4f c8 b6 37 f6 cd 46 f8 c0 dd 30 45 9b cf a5 9f 05 79 06 28 2a 57 e4 58 b4 20 4d 55 62 ea 66 c7 59 2d 94 c7 cc 89 f3 18 ab 28 a5 3e 28 85 2a c6 2a 0e 99 cc f3 18 24 5c 20 4f 4e e4 66 3b de d8 42 09 f0 65 0c 9c 24 c5 d3 39 05 b5 27 4e 41 2d 04 2e 93 fa 3c 90 89 4f e5 d4 38 ce 8b 81 74 22 81 b1 dc 69 2a 62 d8 c3 59 ee c3 06 8a 5d 2e 41 c6 ce bd 48 2a 0a 83 1b 53 45 3a 01 da 77 b2 44 c4 b1 c4 c4 71 98 76 44 ba 2e f3 45 9c e4 dc 25 a2 fe 8e b3 7a 21 1f 73 ac ec 07 27 4f e0 05 19 06 7b 60 3e 1c c5 b2 50 72 4c 35 82 25 5d 09 0c 6e 4c 95 dc 51 02 46 ef 47 b0 63 f2 48 c6 6e 26 3d 10 16 5c 06 a7 51 e2 e5 ae 6b fa 24 1c 67 b5 50 1e ef 9d d4 8f 45 04 74 89 18 de 7c 88 40 78 20 3c 02 81 dc 34 52 58 28 81 c0 e0 Data Ascii: ,T{St2O7F0Ey(WX MUbfY-(>($\ ONf;Be$9'NA-.<O8t"ibY].AH*SE:wDqvD.E%z!s'O{`>PrL5%]nLQFGcHn&=\Qk$gPEt\|@x <4RX(
2023-11-08 14:38:09 UTC	138	IN	Data Raw: ae f6 95 f6 d1 30 3e d4 0b 46 cb 8a fc dc 78 0c 7c cf af a8 ad 1b d8 33 95 b7 eb a2 29 96 32 9a ab 9c 5e 03 b6 ed d5 65 e5 1f 66 18 ec ca 65 12 e0 fe 5d ae 0a f4 c0 96 df 8f 6d b3 01 c8 ae 38 53 f3 24 cb b2 38 13 7d 9b 17 e8 ae 4b b1 86 21 a9 91 be b1 98 6a 7d a9 f0 bd 16 9e db c4 d2 36 79 31 7b 1b 78 d5 24 47 fc 21 5f 0b f4 1d 56 7a 25 5d 67 55 06 15 74 6f 2d 95 a1 c9 d0 f6 06 4a 9b 81 71 24 c7 88 cb 89 a4 6c 70 6a 8f e6 b0 bb 2e d9 a0 59 45 c3 c8 81 d7 1a e9 2d 1b bd b9 1c 19 a4 fd 75 8c da 0c fe b0 36 43 40 30 7d 62 12 9c 66 25 8d cf 46 fb 59 a5 31 5b 56 4b 0f 00 55 ea 6f 90 f2 90 d9 92 21 ba 13 ce af 21 7c 3d 5d f2 bc 64 b3 f6 e5 00 1b 5e ae ba 24 bd ed 1d 4d 27 15 77 e5 34 48 05 aa ed b8 d7 a4 57 5f 83 6c a3 c5 3c c4 64 e6 4c 6a 14 4d 70 8b 3d 10 d7 Data Ascii: 0>Fx\|3)2^efe]m8S$8}K!j}6y1{x$G!_Vz%]gUto-Jq$lpj.YE-u6C@0}bf%FY1[VKUo!!\|=]d^$M'w4HW_l<dLjMp=
2023-11-08 14:38:09 UTC	151	IN	Data Raw: 29 51 4c 94 29 d4 c2 b8 18 9a b3 0f 36 32 f0 ff ed b7 8f e0 59 15 9e ac 66 f3 1f 5c 96 88 e6 3f 58 bd 91 51 fd 47 64 94 28 5a d7 85 86 f4 c9 d0 b3 06 df 7f 4b 1c f3 4b 1c b3 de bf ea 90 74 31 9f 22 00 50 2f 54 f4 28 f3 9a f4 4a d3 d2 e8 63 1c 3d 20 5c 18 15 1f d5 1d 39 52 5c 81 0d 45 35 7b e6 4d b1 99 15 ad a7 92 4f fe f7 f0 2e d9 71 5a 62 75 84 43 cf ed 39 3e 56 5d 67 45 35 5c 5b a1 ef 93 e7 64 bd 40 7f e8 7b bd 85 bf 1a e8 41 1b aa 08 d5 5d b3 6e f7 ea 6b 87 9b 48 2d 56 84 5b 25 58 0c c5 14 eb 85 38 14 3e ae 06 b2 5a 82 69 23 a8 fb 9c 05 0a 63 30 41 24 36 a2 79 ca 1a c7 46 f4 ff 7f e0 bf 43 29 3b b1 93 59 71 43 80 6d ca b6 37 35 59 24 bb 74 42 0b 95 24 86 61 4d 09 b7 79 8f 0d d9 cd 9d 97 1f 44 71 3d 18 68 17 93 08 5e 38 06 41 50 b5 6c 34 60 77 2e 69 f8 Data Ascii: )QL)62Yf\?XQGd(ZKKt1"P/T(Jc= \9R\E5{MO.qZbuC9>V]gE5\[d@{A]nkH-V[%X8>Zi#c0A$6yFC);YqCm75Y$tB$aMyDq=h^8APl4`w.i
2023-11-08 14:38:09 UTC	154	IN	Data Raw: 95 23 55 16 61 bf cb 5d 67 be 74 f0 05 f2 1b 5d 77 15 f2 0f ee 8a e5 8f aa 0d d9 d4 3a 7a 16 f5 8e cd c9 61 93 f3 c0 dc 1c 1d c8 7d c9 46 46 41 28 a8 75 0a 0c 5a c5 1a 61 11 f8 74 86 08 dc ec 59 a2 3a 81 c0 34 43 c5 69 65 31 1d a0 4d a3 e2 b9 20 a1 57 23 70 38 13 83 d8 51 16 3e 7b 97 38 26 cc cc 25 36 d2 52 c7 70 18 fb cc 9d 58 b2 db 77 74 b3 0a eb 4e ad 01 96 d9 c5 51 bc 60 ed 3f eb ca 40 8d fa a0 26 84 6b 4a 2d 30 80 80 4d 09 c3 fa c3 6a 85 91 8a 88 fe 1c 55 0d 44 01 7d 0c af 9d 74 c3 2a b8 f7 0c a6 54 76 1f 7f 52 ad a9 3e 16 35 a7 82 99 c8 d7 36 a7 2a 6e 4d 45 15 04 82 39 15 38 b7 3f 83 41 55 74 54 4a 06 55 8c 53 4f 38 c7 d1 30 2c 3e e0 7d a3 c1 be 23 02 c3 38 c5 53 e4 31 16 da 2b 24 66 21 a5 68 9a 71 55 b1 a3 50 49 e3 dc cf 48 6e 8c 40 7b 1a d6 09 cc Data Ascii: #Ua]gt]w:za}FFA(uZatY:4Cie1M W#p8Q>{8&%6RpXwtNQ`?@&kJ-0MjUD}tTvR>56nME98?AUtTJUSO80,>}#8S1+$f!hqUPIHn@{
2023-11-08 14:38:09 UTC	165	IN	Data Raw: 47 42 c7 00 b2 32 05 83 bf 67 35 01 81 47 7d fd 90 55 02 db 7e 67 e8 4e 62 57 e7 90 29 e2 2d c6 e1 c8 fc 1a 44 ac 8a b3 92 d9 00 65 5d 97 14 49 b0 89 a1 a8 64 36 17 fb cd 07 d7 8a a2 17 8b 8c f8 8c 2e d6 9c 69 fd aa 1d a2 d5 80 e3 6d 65 10 2a 65 94 66 45 c5 78 9b a6 88 08 ac 8e 24 19 13 71 48 18 28 2b e5 ca 7d 41 b7 7e cb 6a 3a 79 ef e1 51 86 3d 45 66 22 9a d4 ee 99 f1 2e 89 64 6a 91 24 a0 49 d3 24 82 32 36 3e 5a 56 48 a8 58 0a 9c 1b 62 58 32 c6 f5 53 40 3c 46 70 41 62 66 a0 ed 5d ee 47 f1 5f 62 8f 72 93 51 0f 29 fd d6 f3 33 c9 50 c7 1c b3 b1 d2 0a 8a 5a f7 9d d8 04 99 8b 43 41 2e 87 86 e2 6e a8 33 63 5e 07 bf 26 81 13 f0 b7 68 d0 73 30 06 6d a1 96 19 2f f2 f8 42 2c cd e3 6a 57 60 dc 5d 1c 66 ca ef cd d0 9a a4 52 55 39 2e 48 f6 76 19 2f 5a 78 53 72 0e 73 Data Ascii: GB2g5G}U~gNbW)-De]Id6.ime*efEx$qH(+}A~j:yQ=Ef".dj$I$26>ZVHXbX2S@<FpAbf]G_brQ)3PZCA.n3c^&hs0m/B,jW`]fRU9.Hv/ZxSrs
2023-11-08 14:38:09 UTC	177	IN	Data Raw: f1 a7 e6 5d 79 18 97 05 73 b1 0d 41 8b c9 2a 77 67 6b 36 ab 71 e4 eb 40 93 60 58 91 27 df 6d d1 96 11 dc b5 e5 a3 ea 59 c3 f9 9a b9 87 a0 70 79 54 56 e6 2c 52 40 5a 4d 17 5a a8 fa 80 97 a0 73 06 fb ea 51 ed ef 5e 21 ae f9 65 48 fc 17 7f bd dd e2 05 f1 f8 35 6a ee 8d 36 65 52 c0 9d d7 81 82 eb 14 2c 3c 2e bb 11 05 e5 95 5e 13 d2 49 10 8c 1d e4 4a ee 6b aa b2 27 d9 ee 43 83 a5 13 42 4b 71 69 53 06 31 01 06 51 22 a0 0f 1b c4 fe 42 af d4 0c 34 08 bb a6 79 47 a2 47 3e b1 39 d2 75 74 78 83 80 e2 af d4 b0 0e f1 f9 e7 ce 60 41 3c 35 21 6a a7 71 7b 0c 8e ad 37 68 63 49 7d 05 f3 7b 5b d5 31 32 1a 90 41 f5 87 14 bc 26 f1 e0 c1 1f 9b e7 1c 46 ad ae 20 60 15 ce b5 32 f7 69 de 46 29 d5 8d 20 9f d9 88 e4 52 43 02 88 3b 76 2c 09 ed d4 53 9e 0f 65 d2 81 3a 01 72 1a 43 7d Data Ascii: ]ysA*wgk6q@`X'mYpyTV,R@ZMZsQ^!eH5j6eR,<.^IJk'CBKqiS1Q"B4yGG>9utx`A<5!jq{7hcI}{[12A&F `2iF) RC;v,Se:rC}
2023-11-08 14:38:09 UTC	182	IN	Data Raw: 1d c7 60 91 b3 44 63 d9 97 51 74 cd 62 e8 46 cd d7 02 9e ec f0 82 a0 8b a1 2b eb ad fa c6 c4 f3 47 f5 7a 28 eb 3a 40 85 fa e7 37 b7 0f 45 93 6d 17 90 4b 49 65 32 ff 64 4e 91 1f 81 15 31 fa 0b 9f b9 59 7e 2a fd 9c 82 75 13 dc 96 75 49 24 b5 a0 43 27 7a d9 e9 ca 7a 1b 27 d0 74 94 52 dc 71 75 2c 1e a9 41 f1 59 ba f3 3c 8a dc 05 c7 bc b3 5c fc 9c 15 0f 19 0c bc 15 3e 4f c0 c3 43 b9 15 63 29 05 f1 18 ea ba d4 d5 73 30 09 d5 f3 58 f7 51 50 b9 8d d9 5c f3 8d 98 c1 16 bd e3 4b 0d ef ea c7 e3 0e 5b af 22 79 a3 ca 0e 77 68 fb a0 0d d1 56 10 24 09 e9 22 45 6c c8 21 43 73 f4 54 99 86 e4 56 fb 48 9d 72 06 b2 67 1f b6 a8 98 21 33 d5 97 22 d5 0f 3a 05 42 db 39 85 f8 7d 8b 85 36 40 11 43 cd f3 ea d3 b3 1c f1 44 a1 19 d8 6e 12 2a 78 58 4a 4d e5 7f 63 99 9e f5 ee 34 97 95 Data Ascii: `DcQtbF+Gz(:@7EmKIe2dN1Y~uuI$C'zz'tRqu,AY<\>OCc)s0XQP\K["ywhV$"El!CsTVHrg!3":B9}6@CDnxXJMc4

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	0
Start time:	15:38:01
Start date:	08/11/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:38:03
Start date:	08/11/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2280,i,2289093056514221060,14702172471539406701,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:38:06
Start date:	08/11/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 3244, Parent PID: 5500

General

File Activities

File Opened

File Created

Windows Analysis Report
https://links.iterable.com/e/encryptedUnsubscribe?_r=e789c0836a63461487f9681a8afafb41&_s=42c2a8a2776b480a91474ed5f9a6cc66&_t=ZWrkDa-Ha9ldEQl7mSE-vihptMP7XKg3w1UFS22tbxi6VuxRjOB0XEG8lLfcq9mL4bMzYsmoQUQXlEAeczC_T8aeeUN-yq0DKng5k3JGJrA%3D