Edit tour

Windows Analysis Report
http://moctle.com/

Overview

General Information

Sample URL:	http://moctle.com/
Analysis ID:	1447445
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Phishing site detected (based on logo match)

Detected suspicious crossdomain redirect

HTML body contains password input but no form action

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2276 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1988,i,17011482217267182262,10272810757295584300,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4204 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://moctle.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://moctle.com/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://static.shopymn.com/liquid/buyer/public/js/lib/event.js?t=20240524155330	Avira URL Cloud: Label: phishing
Source: https://static.shopymn.com/theme/faker/pic-4.png	Avira URL Cloud: Label: phishing
Source: https://static.shopymn.com/liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330	Avira URL Cloud: Label: phishing
Source: https://static.shopymn.com/liquid/buyer/public/img/payment/paypal.svg	Avira URL Cloud: Label: phishing
Source: https://static.shopymn.com/liquid/buyer/public/js/lib/index.js?t=20240524155330	Avira URL Cloud: Label: phishing
Source: https://static.shopymn.com/liquid/buyer/public/img/default.png	Avira URL Cloud: Label: phishing
Source: https://moctle.com/	Avira URL Cloud: Label: phishing
Source: https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2F&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=index&ts=1716591392527&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2F&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17	Avira URL Cloud: Label: phishing
Source: https://www.cravob.com/buyer/cart	Avira URL Cloud: Label: phishing
Source: https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fcategories&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591408397&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fcategories&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17	Avira URL Cloud: Label: phishing
Source: https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591463905&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17	Avira URL Cloud: Label: phishing
Source: https://static.shopymn.com/wp-includes/img/shipping-insurance.png	Avira URL Cloud: Label: phishing
Source: https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591447418&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://www.cravob.com/

LLM: Score: 9 brands: Amazon Reasons: The URL 'https://www.cravob.com/' does not match the legitimate domain name for Amazon, which is 'amazon.com'. The website uses the Amazon logo and branding, which is a common social engineering technique used in phishing attacks. The domain name 'cravob.com' is suspicious and not associated with Amazon. The site does not have a login form or captcha, but the use of Amazon's branding on an unrelated domain is a strong indicator of phishing. DOM: 0.0.pages.csv

Phishing site detected (based on logo match)

Source: https://www.cravob.com/	Matcher: Template: amazon matched
Source: https://www.cravob.com/	Matcher: Template: amazon matched
Source: https://www.cravob.com/categories	Matcher: Template: amazon matched
Source: https://www.cravob.com/categories	Matcher: Template: amazon matched
Source: https://www.cravob.com/products?handler=whiskys	Matcher: Template: amazon matched
Source: https://www.cravob.com/products?handler=whiskys	Matcher: Template: amazon matched
Source: https://www.cravob.com/products?handler=asics	Matcher: Template: amazon matched
Source: https://www.cravob.com/products?handler=asics	Matcher: Template: amazon matched
Source: https://www.cravob.com/products?handler=lego	Matcher: Template: amazon matched
Source: https://www.cravob.com/products?handler=lego	Matcher: Template: amazon matched

Source: https://www.cravob.com/	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://www.cravob.com/categories	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://www.cravob.com/products?handler=whiskys	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://www.cravob.com/products?handler=asics	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://www.cravob.com/products?handler=lego	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.cravob.com/	HTTP Parser: Title: Amazon does not match URL
Source: https://www.cravob.com/categories	HTTP Parser: Title: Coleces - Amazon does not match URL
Source: https://www.cravob.com/products?handler=whiskys	HTTP Parser: Title: Whiskys&Vinho-Amazon does not match URL
Source: https://www.cravob.com/products?handler=asics	HTTP Parser: Title: ASICS-Amazon does not match URL
Source: https://www.cravob.com/products?handler=lego	HTTP Parser: Title: Promoo LEGO-Amazon does not match URL

Source: https://www.cravob.com/	HTTP Parser: <input type="password" .../> found
Source: https://www.cravob.com/categories	HTTP Parser: <input type="password" .../> found
Source: https://www.cravob.com/products?handler=whiskys	HTTP Parser: <input type="password" .../> found
Source: https://www.cravob.com/products?handler=asics	HTTP Parser: <input type="password" .../> found
Source: https://www.cravob.com/products?handler=lego	HTTP Parser: <input type="password" .../> found

Source: https://www.cravob.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.cravob.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.cravob.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.cravob.com/categories	HTTP Parser: No <meta name="author".. found
Source: https://www.cravob.com/categories	HTTP Parser: No <meta name="author".. found
Source: https://www.cravob.com/products?handler=whiskys	HTTP Parser: No <meta name="author".. found
Source: https://www.cravob.com/products?handler=whiskys	HTTP Parser: No <meta name="author".. found
Source: https://www.cravob.com/products?handler=asics	HTTP Parser: No <meta name="author".. found
Source: https://www.cravob.com/products?handler=asics	HTTP Parser: No <meta name="author".. found
Source: https://www.cravob.com/products?handler=lego	HTTP Parser: No <meta name="author".. found
Source: https://www.cravob.com/products?handler=lego	HTTP Parser: No <meta name="author".. found

Source: https://www.cravob.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cravob.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cravob.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cravob.com/categories	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cravob.com/categories	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cravob.com/products?handler=whiskys	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cravob.com/products?handler=whiskys	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cravob.com/products?handler=asics	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cravob.com/products?handler=asics	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cravob.com/products?handler=lego	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cravob.com/products?handler=lego	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49795 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.5:49717 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 48MB

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: moctle.com to https://www.cravob.com/

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49795 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: moctle.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.cravob.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/plug/Swiper.js HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/img/pro-shipping-protection.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/img/shipping-insurance.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/4f4833f5cd52885ef5e46ba206cdc229.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/lib/event.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/lib/index.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/default.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/e9965ee36481434b14cbe1bea3260a80.png HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/5d20048868877141ba3fb9ce2a33ade5.png HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/d334d7f24d8af21f9aa9024236873f7eb5450d87.png HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/75bb66d9a11a9ab16f2c075001ef48e9978f6a9b.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/cc9848adf3ffcc99024436d9b23c022632da987e.png HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/css/font/Blinker-Light.ttf HTTP/1.1Host: fonts.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cravob.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/css/font/Blinker-SemiBold.ttf HTTP/1.1Host: fonts.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cravob.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/c/font_871426_xa0zaxz404.woff2?t=1699608289611 HTTP/1.1Host: at.alicdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cravob.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/default.png HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/8e02e850002eb3ce0a0be48daf2693336403eb86.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/75bb66d9a11a9ab16f2c075001ef48e9978f6a9b.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/4f4833f5cd52885ef5e46ba206cdc229.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/dd0bf6a7277d7e58ec2c01e3627a45275be16a24.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/cc9848adf3ffcc99024436d9b23c022632da987e.png HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/7393e7b9c4c1cf5cc9c8284ee1b106479bbea8cc.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/917164566707525?v=2.9.156&r=stable&domain=www.cravob.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2F&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=index&ts=1716591392527&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2F&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1Host: www.cravob.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01Content-Type: application/jsonX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/d334d7f24d8af21f9aa9024236873f7eb5450d87.png HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/5d20048868877141ba3fb9ce2a33ade5.png HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/7393e7b9c4c1cf5cc9c8284ee1b106479bbea8cc.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/e9965ee36481434b14cbe1bea3260a80.png HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/8e02e850002eb3ce0a0be48daf2693336403eb86.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/35ba491724c524231c180060c6634fbcb3366865.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/3474c0a0e52dc1984476bef3a986c4b06b9ce11e.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/751867630178087?v=2.9.156&r=stable&domain=www.cravob.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C217%2C152%2C110%2C133%2C126%2C114 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/35ba491724c524231c180060c6634fbcb3366865.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/3474c0a0e52dc1984476bef3a986c4b06b9ce11e.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/user/user-capi HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
Source: global traffic	HTTP traffic detected: GET /buyer/user/select-coupon HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
Source: global traffic	HTTP traffic detected: GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2F&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=index&ts=1716591392527&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2F&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
Source: global traffic	HTTP traffic detected: GET /buyer/cart HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
Source: global traffic	HTTP traffic detected: GET /signals/config/758694462259787?v=2.9.156&r=stable&domain=www.cravob.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C217%2C152%2C110%2C133%2C126%2C114 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/express/free-express HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
Source: global traffic	HTTP traffic detected: GET /signals/config/270010499437007?v=2.9.156&r=stable&domain=www.cravob.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C217%2C152%2C110%2C133%2C126%2C114 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400300&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400300&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400303&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400303&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400304&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400304&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400306&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400306&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400303&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400304&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400300&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400300&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400303&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400304&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400306&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400306&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /categories HTTP/1.1Host: www.cravob.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/plug/Swiper.js HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ee8-1e6ff"If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66504476-188b7"If-Modified-Since: Fri, 24 May 2024 07:40:38 GMT
Source: global traffic	HTTP traffic detected: GET /wp-includes/img/pro-shipping-protection.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/img/shipping-insurance.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "CAE408692E9DF180175752E8BC159AD1"If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/default.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "66387ef8-1a84"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/lib/event.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66504480-1714"If-Modified-Since: Fri, 24 May 2024 07:40:48 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/lib/index.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"6650447c-eac61"If-Modified-Since: Fri, 24 May 2024 07:40:44 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-1516"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-e1e"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-2f86"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "CAE408692E9DF180175752E8BC159AD1"If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/d993a1725f58924f23cadb81743e03e2.jpg?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-20a8"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ee8-2905"If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/default.png HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "66387ef8-1a84"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/d3a5e4fb2365a048a7c7c731cb9f7f72.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/d2df150284cdfe15bf44c5a379f89f09.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/d1000179a6d6aeab89d03ab4e2125ff2.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/a30aeca4280b3df9337a23d751cfbb46.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/577b4dd48a7d2380c647e2e55515d3f5.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-1516"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-2f86"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-e1e"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fcategories&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591408397&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fcategories&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1Host: www.cravob.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01Content-Type: application/jsonX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cravob.com/categoriesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
Source: global traffic	HTTP traffic detected: GET /uploader/7031c12368f9d1fee63f7904e93284d2.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/9007085244817a5cfa454f8854cb9a50.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/75df6de93d8baaa5ce1c4b4bbafbb7f5.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/9b07c55298c5eecabc44b3b38b837976.jpg?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/577b4dd48a7d2380c647e2e55515d3f5.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/d993a1725f58924f23cadb81743e03e2.jpg?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/d1000179a6d6aeab89d03ab4e2125ff2.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/d3a5e4fb2365a048a7c7c731cb9f7f72.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/30a95dee1357c4c153be7b33d4c6c34e.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ee8-2905"If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/d2df150284cdfe15bf44c5a379f89f09.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/a30aeca4280b3df9337a23d751cfbb46.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-20a8"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/2ce71f6504e8177d94cc448329a848fe.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/user/user-capi HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
Source: global traffic	HTTP traffic detected: GET /buyer/user/select-coupon HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
Source: global traffic	HTTP traffic detected: GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fcategories&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591408397&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fcategories&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
Source: global traffic	HTTP traffic detected: GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412187&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412187&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source;navigation-source, triggerReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/7031c12368f9d1fee63f7904e93284d2.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/9007085244817a5cfa454f8854cb9a50.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/75df6de93d8baaa5ce1c4b4bbafbb7f5.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/2ce71f6504e8177d94cc448329a848fe.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412200&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/30a95dee1357c4c153be7b33d4c6c34e.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412200&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412205&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/cart HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412205&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412187&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412208&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412187&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412200&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412208&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412205&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412200&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/express/free-express HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
Source: global traffic	HTTP traffic detected: GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412208&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412205&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412208&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /products?handler=whiskys HTTP/1.1Host: www.cravob.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
Source: global traffic	HTTP traffic detected: GET /wp-includes/img/pro-shipping-protection.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "CAE408692E9DF180175752E8BC159AD1"If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/plug/Swiper.js HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ee8-1e6ff"If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66504476-188b7"If-Modified-Since: Fri, 24 May 2024 07:40:38 GMT
Source: global traffic	HTTP traffic detected: GET /wp-includes/img/shipping-insurance.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "CAE408692E9DF180175752E8BC159AD1"If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/9f39b843564a229065a9a9a6224cc6dd.jpg HTTP/1.1Host: cdn.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/035ebc6dc320fc94a1d54b8584520801.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/dbaf20a93b83347c91f7674df9783ada.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/lib/event.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66504480-1714"If-Modified-Since: Fri, 24 May 2024 07:40:48 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/5cca73d2b424042491646a2499b29f93.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/376b6d593a22201f92af324e34509a8bfb1306f0.webp HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/f3e535712b0f9decfe1f620107cfee74.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/a433e880ee81352d122e20a49064772e.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/lib/index.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"6650447c-eac61"If-Modified-Since: Fri, 24 May 2024 07:40:44 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/default.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "66387ef8-1a84"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/129e8ce2f2da19c63117ea13fc1df76c11cd364b.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/376b6d593a22201f92af324e34509a8bfb1306f0.webp HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/default.png HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "66387ef8-1a84"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/a433e880ee81352d122e20a49064772e.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/035ebc6dc320fc94a1d54b8584520801.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/1410d7ced7e16916884730c28d7310a5c2412305.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/dbaf20a93b83347c91f7674df9783ada.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/f3e535712b0f9decfe1f620107cfee74.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/5cca73d2b424042491646a2499b29f93.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/9f39b843564a229065a9a9a6224cc6dd.jpg HTTP/1.1Host: cdn.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591424791&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1Host: www.cravob.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01Content-Type: application/jsonX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cravob.com/products?handler=whiskysAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /buyer/user/user-capi HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /uploader/2bab95b957e11a3d1c75b9df75049153b2a3b998.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/0abbbe77281ef379f1a927125224b50c.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-1516"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/1410d7ced7e16916884730c28d7310a5c2412305.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-e1e"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/129e8ce2f2da19c63117ea13fc1df76c11cd364b.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/user/select-coupon HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-2f86"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591424791&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-20a8"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ee8-2905"If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/9d6698b796cb382a3cbf76e13f9ae4a0aa1a7746.webp HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/055002e1d0286662d2639006df99f438.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-1516"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-e1e"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-2f86"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/2bab95b957e11a3d1c75b9df75049153b2a3b998.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/28a9c5ac9bd24213c80ef0b7a6e549b5.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/fc2bcafe3c4c673896b61de343177ec8.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/0abbbe77281ef379f1a927125224b50c.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/cart HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ee8-2905"If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-20a8"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428462&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428462&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/055002e1d0286662d2639006df99f438.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428464&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/28a9c5ac9bd24213c80ef0b7a6e549b5.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428464&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428465&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428465&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428462&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/express/free-express HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428466&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/fc2bcafe3c4c673896b61de343177ec8.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428462&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428464&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428465&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428466&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428465&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428464&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428466&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428466&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /products?handler=asics HTTP/1.1Host: www.cravob.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/plug/Swiper.js HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ee8-1e6ff"If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66504476-188b7"If-Modified-Since: Fri, 24 May 2024 07:40:38 GMT
Source: global traffic	HTTP traffic detected: GET /wp-includes/img/pro-shipping-protection.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/img/shipping-insurance.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/d95cf4e2f5344172719039a44aa47bfcf3fadb64.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "CAE408692E9DF180175752E8BC159AD1"If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/42fe369e4f6000c81180a4420f0bd212c0832e7f.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/2a863ed538129c821c4d3cf3ebde582b3adad70a.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/default.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "66387ef8-1a84"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/59421ea514b195d00d8d4faae4128f7a0cc7ea40.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/7f26ad400585781530a3e75f7b0356e48ac6ac55.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/d95cf4e2f5344172719039a44aa47bfcf3fadb64.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/lib/event.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66504480-1714"If-Modified-Since: Fri, 24 May 2024 07:40:48 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/c09b8a2b191088075ea5307b7fbbda245c3c811d.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/2d1d59f9ff7fa74ef8db576722eb77f20bd40ba0.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/default.png HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "66387ef8-1a84"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "CAE408692E9DF180175752E8BC159AD1"If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/48ac98525a67096a6efeb2f1d638268475124fdf.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/42fe369e4f6000c81180a4420f0bd212c0832e7f.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/59421ea514b195d00d8d4faae4128f7a0cc7ea40.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/2a863ed538129c821c4d3cf3ebde582b3adad70a.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/7f26ad400585781530a3e75f7b0356e48ac6ac55.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/lib/index.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"6650447c-eac61"If-Modified-Since: Fri, 24 May 2024 07:40:44 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/c09b8a2b191088075ea5307b7fbbda245c3c811d.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/eb7e365a40aa434f35f25fe86a7cae4068969509.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/c45a50fb64006f61f8cc79f72832f2fa6b14335b.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/2d1d59f9ff7fa74ef8db576722eb77f20bd40ba0.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591447418&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1Host: www.cravob.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01Content-Type: application/jsonX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cravob.com/products?handler=asicsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /uploader/48ac98525a67096a6efeb2f1d638268475124fdf.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/user/user-capi HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-1516"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/456a5aa4d010296d9e4e2a5ae84678acf1e7f8a6.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/7b95f33ca58a398ea9d3a76edd90ff18b746a398.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/622fada3a90cdea20584e58943f97e18bc42b336.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/eb7e365a40aa434f35f25fe86a7cae4068969509.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/19bbf7767618883b3fc56e493991a5bca17afdc6.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591447418&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /uploader/c45a50fb64006f61f8cc79f72832f2fa6b14335b.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/user/select-coupon HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /uploader/e11eff5309c535edce9d8cc35f9d4811c576d79d.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-1516"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/3c12228191e810dc3648fb860aea6101fc6a54ad.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-e1e"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-2f86"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/7b95f33ca58a398ea9d3a76edd90ff18b746a398.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/622fada3a90cdea20584e58943f97e18bc42b336.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/2a5cbac9076abe2e5d22faf36a87f5248a3168ee.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/19bbf7767618883b3fc56e493991a5bca17afdc6.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/456a5aa4d010296d9e4e2a5ae84678acf1e7f8a6.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/cart HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-2f86"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/d366d0c225e24136fa296c2234a0370b45369592.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/f4b9a830a3be50c7333eaf1836144b26d8b2ee68.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-e1e"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/e11eff5309c535edce9d8cc35f9d4811c576d79d.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/26147a601f2cfd6a9748078bd341aff2565eb7c2.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-20a8"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ee8-2905"If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/1a7f38ab8f1d89cd6c3628bf38e1b67fcbf9c171.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/8903fb7b820c454c2185671cc5f2599ffe15cbdb.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/e84e22097951cec3381ed92b3c1d03ca67cc1716.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/3c12228191e810dc3648fb860aea6101fc6a54ad.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/2a5cbac9076abe2e5d22faf36a87f5248a3168ee.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/express/free-express HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /uploader/d5a40373b44ea8111500c4289464d55d9c0516d3.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/d366d0c225e24136fa296c2234a0370b45369592.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/26147a601f2cfd6a9748078bd341aff2565eb7c2.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/969b7ca635d13f2e9a2380510ac5f5a238ef64ef.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/48e1ea064ee564bf1e9113d74ef81304f299ac8e.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ee8-2905"If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/f4b9a830a3be50c7333eaf1836144b26d8b2ee68.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-20a8"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451974&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451974&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/9adc39b5052122d6f03b60858a956876cea2f3e2.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/c77099a56e06f49a357d51fc42f38086ac36cac1.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451977&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/1a7f38ab8f1d89cd6c3628bf38e1b67fcbf9c171.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/8903fb7b820c454c2185671cc5f2599ffe15cbdb.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/e84e22097951cec3381ed92b3c1d03ca67cc1716.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/d5a40373b44ea8111500c4289464d55d9c0516d3.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451977&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451974&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451980&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451980&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451974&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/969b7ca635d13f2e9a2380510ac5f5a238ef64ef.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/48e1ea064ee564bf1e9113d74ef81304f299ac8e.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451982&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451982&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source;navigation-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451977&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/9adc39b5052122d6f03b60858a956876cea2f3e2.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451977&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451980&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451980&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451982&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/c77099a56e06f49a357d51fc42f38086ac36cac1.jpg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451982&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /products?handler=lego HTTP/1.1Host: www.cravob.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /wp-includes/img/pro-shipping-protection.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "CAE408692E9DF180175752E8BC159AD1"If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/plug/Swiper.js HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ee8-1e6ff"If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66504476-188b7"If-Modified-Since: Fri, 24 May 2024 07:40:38 GMT
Source: global traffic	HTTP traffic detected: GET /wp-includes/img/shipping-insurance.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "CAE408692E9DF180175752E8BC159AD1"If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/742c6cba7453f3353fdda67f621a72a5.png HTTP/1.1Host: cdn.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/lib/event.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66504480-1714"If-Modified-Since: Fri, 24 May 2024 07:40:48 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/cc9848adf3ffcc99024436d9b23c022632da987e.png HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=392441-392441If-Range: "4EC9AF0735BF453A0F4ED6D93EEB0CE7"
Source: global traffic	HTTP traffic detected: GET /a650298a61e168fecaaa1d14adf1ee63.png HTTP/1.1Host: img.staticdj.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/75bb66d9a11a9ab16f2c075001ef48e9978f6a9b.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "DA7F025E7ABBCC869729C6B497B32A66"If-Modified-Since: Wed, 09 Aug 2023 07:26:50 GMT
Source: global traffic	HTTP traffic detected: GET /94f923b3025c1d1141c24cba82c39f5f.png HTTP/1.1Host: img.staticdj.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/8e02e850002eb3ce0a0be48daf2693336403eb86.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "5521FF8608C8B926CD70B0204FADB2F5"If-Modified-Since: Wed, 09 Aug 2023 07:26:16 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/js/lib/index.js?t=20240524155330 HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"6650447c-eac61"If-Modified-Since: Fri, 24 May 2024 07:40:44 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/default.png HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "66387ef8-1a84"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/cc9848adf3ffcc99024436d9b23c022632da987e.png HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=392441-415867If-Range: "4EC9AF0735BF453A0F4ED6D93EEB0CE7"
Source: global traffic	HTTP traffic detected: GET /uploader/dd0bf6a7277d7e58ec2c01e3627a45275be16a24.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=326812-326812If-Range: "11E06A8B4521847F5923C5113E685D99"
Source: global traffic	HTTP traffic detected: GET /uploader/7393e7b9c4c1cf5cc9c8284ee1b106479bbea8cc.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "408C2DE2404A48F5A406E06AE3A287F6"If-Modified-Since: Wed, 09 Aug 2023 07:24:34 GMT
Source: global traffic	HTTP traffic detected: GET /a650298a61e168fecaaa1d14adf1ee63.png HTTP/1.1Host: img.staticdj.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94f923b3025c1d1141c24cba82c39f5f.png HTTP/1.1Host: img.staticdj.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/default.png HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "66387ef8-1a84"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/8e02e850002eb3ce0a0be48daf2693336403eb86.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "5521FF8608C8B926CD70B0204FADB2F5"If-Modified-Since: Wed, 09 Aug 2023 07:26:16 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/dd0bf6a7277d7e58ec2c01e3627a45275be16a24.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=326812-331015If-Range: "11E06A8B4521847F5923C5113E685D99"
Source: global traffic	HTTP traffic detected: GET /uploader/75bb66d9a11a9ab16f2c075001ef48e9978f6a9b.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "DA7F025E7ABBCC869729C6B497B32A66"If-Modified-Since: Wed, 09 Aug 2023 07:26:50 GMT
Source: global traffic	HTTP traffic detected: GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591463905&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1Host: www.cravob.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01Content-Type: application/jsonX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cravob.com/products?handler=legoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /buyer/user/user-capi HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /uploader/7393e7b9c4c1cf5cc9c8284ee1b106479bbea8cc.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "408C2DE2404A48F5A406E06AE3A287F6"If-Modified-Since: Wed, 09 Aug 2023 07:24:34 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/35ba491724c524231c180060c6634fbcb3366865.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "2BF63D8311FF49E15CCA56A593F1E064"If-Modified-Since: Wed, 09 Aug 2023 07:22:31 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/3474c0a0e52dc1984476bef3a986c4b06b9ce11e.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6F383755A7DD9EA0DF138871D81DAD2A"If-Modified-Since: Wed, 09 Aug 2023 07:22:25 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/bae3b8c20de926b7be25fbf7285b22e3d630f6fa.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/0e49afad7eb17f349716ea63c83297492e32d294.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/30453ddd6ce60322fd6ce23b29a6e5e27db4b75b.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/dd0bf6a7277d7e58ec2c01e3627a45275be16a24.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/user/select-coupon HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591463905&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /uploader/35ba491724c524231c180060c6634fbcb3366865.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "2BF63D8311FF49E15CCA56A593F1E064"If-Modified-Since: Wed, 09 Aug 2023 07:22:31 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/3474c0a0e52dc1984476bef3a986c4b06b9ce11e.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6F383755A7DD9EA0DF138871D81DAD2A"If-Modified-Since: Wed, 09 Aug 2023 07:22:25 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/b8ad5401dfbf111b38bcfd098e58a9a0044e7e9d.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/a70350d2dda8813e43ac84a691f0a381847dfb75.png HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/d1efd62da517b9a9cbcc66739a2f58236cb27f19.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/30453ddd6ce60322fd6ce23b29a6e5e27db4b75b.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/0e49afad7eb17f349716ea63c83297492e32d294.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/bae3b8c20de926b7be25fbf7285b22e3d630f6fa.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/cart HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-1516"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/1abfc652cc0f3e8037cae0f5dec3c53ff766f022.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-e1e"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/d0c5abae35b7b6102f6bd1205ec204e28371aba7.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/a55bc9c6ad3e71405e43f15c29ddf78dca8e80df.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/742c6cba7453f3353fdda67f621a72a5.png HTTP/1.1Host: cdn.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/feae09372641271a3f25a17a07c8bfbfe7b23d33.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/d1efd62da517b9a9cbcc66739a2f58236cb27f19.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /buyer/express/free-express HTTP/1.1Host: www.cravob.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
Source: global traffic	HTTP traffic detected: GET /uploader/fe4f80c9b0b21a593c4baba7f41c5d30de03b1ee.gif HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/b8ad5401dfbf111b38bcfd098e58a9a0044e7e9d.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-1516"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-e1e"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-2f86"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-20a8"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/a70350d2dda8813e43ac84a691f0a381847dfb75.png HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/27ef8ca73175ab7a2b29bd8f11ae4dc3b3878bd6.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/c1fb5ccd272927fa746cf0753d8ae24bd27c6ff1.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/a55bc9c6ad3e71405e43f15c29ddf78dca8e80df.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/21884b5858ddddbeb9479fd4140706472aec9106.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/ddaee3b072f5adc45405925d5ba15ceeed727c59.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1Host: static.shopymn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ee8-2905"If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-20a8"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/1abfc652cc0f3e8037cae0f5dec3c53ff766f022.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ef8-2f86"If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/d0c5abae35b7b6102f6bd1205ec204e28371aba7.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/feae09372641271a3f25a17a07c8bfbfe7b23d33.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469760&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469760&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/27ef8ca73175ab7a2b29bd8f11ae4dc3b3878bd6.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1Host: static.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"66387ee8-2905"If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
Source: global traffic	HTTP traffic detected: GET /uploader/fe4f80c9b0b21a593c4baba7f41c5d30de03b1ee.gif HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469761&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469761&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469762&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469762&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/21884b5858ddddbeb9479fd4140706472aec9106.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469760&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469763&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469763&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469760&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/c1fb5ccd272927fa746cf0753d8ae24bd27c6ff1.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploader/ddaee3b072f5adc45405925d5ba15ceeed727c59.jpeg HTTP/1.1Host: img.shopymn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469761&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469761&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469762&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469762&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469763&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469763&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: moctle.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_243.1.dr

String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage||function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules||(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]||(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)||(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.*\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL||!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func

Source: global traffic	DNS traffic detected: DNS query: moctle.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.cravob.com
Source: global traffic	DNS traffic detected: DNS query: static.shopymn.com
Source: global traffic	DNS traffic detected: DNS query: img.shopymn.com
Source: global traffic	DNS traffic detected: DNS query: fonts.shopymn.com
Source: global traffic	DNS traffic detected: DNS query: at.alicdn.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: cdn.shopymn.com
Source: global traffic	DNS traffic detected: DNS query: img.staticdj.com

Source: unknown

HTTP traffic detected: POST /buyer/user/user-capi HTTP/1.1Host: www.cravob.comConnection: keep-aliveContent-Length: 459sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/jsonX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.cravob.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cravob.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 24 May 2024 22:56:30 GMTContent-Type: text/htmlContent-Length: 131Connection: closeServer: cloudflareCF-RAY: 8890e120bab5f7f4-BNA
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 24 May 2024 22:56:30 GMTContent-Type: text/htmlContent-Length: 131Connection: closeServer: cloudflareCF-RAY: 8890e120ae48f7ec-BNA
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 24 May 2024 22:56:48 GMTContent-Type: text/htmlContent-Length: 131Connection: closeServer: cloudflareCF-RAY: 8890e18c3843f7e0-BNA
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 24 May 2024 22:56:48 GMTContent-Type: text/htmlContent-Length: 131Connection: closeServer: cloudflareCF-RAY: 8890e18c9febf7d0-BNA
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 24 May 2024 22:57:03 GMTContent-Type: text/htmlContent-Length: 131Connection: closeServer: cloudflareCF-RAY: 8890e1edda11f7dc-BNA
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 24 May 2024 22:57:04 GMTContent-Type: text/htmlContent-Length: 131Connection: closeServer: cloudflareCF-RAY: 8890e1f288faf7d0-BNA
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 24 May 2024 22:57:25 GMTContent-Type: text/htmlContent-Length: 131Connection: closeServer: cloudflareCF-RAY: 8890e278fcaa6a7a-BNA
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 24 May 2024 22:57:25 GMTContent-Type: text/htmlContent-Length: 131Connection: closeServer: cloudflareCF-RAY: 8890e278f9d3f7f0-BNA
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 24 May 2024 22:57:42 GMTContent-Type: text/htmlContent-Length: 131Connection: closeServer: cloudflareCF-RAY: 8890e2e0facdf7ec-BNA
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 24 May 2024 22:57:43 GMTContent-Type: text/htmlContent-Length: 131Connection: closeServer: cloudflareCF-RAY: 8890e2e52829f7cc-BNA

Source: chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: http://schema.org/InStock
Source: chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: http://schema.org/Offer
Source: chromecache_218.1.dr	String found in binary or memory: http://schema.org/Organization
Source: chromecache_218.1.dr	String found in binary or memory: http://schema.org/Product
Source: chromecache_308.1.dr	String found in binary or memory: http://scripts.sil.org/OFLBlinkerExtraLight
Source: chromecache_308.1.dr	String found in binary or memory: http://supertype.deSIL
Source: chromecache_339.1.dr	String found in binary or memory: http://www.idangero.us/swiper/
Source: chromecache_199.1.dr	String found in binary or memory: https://cdn.shopymn.com/uploader/9f39b843564a229065a9a9a6224cc6dd.jpg
Source: chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_308.1.dr	String found in binary or memory: https://github.com/supertype-de/Blinker)Blinker
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/035ebc6dc320fc94a1d54b8584520801.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/055002e1d0286662d2639006df99f438.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/06bd989ddede48d875958638abfec989d3390f45.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/0abbbe77281ef379f1a927125224b50c.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/129e8ce2f2da19c63117ea13fc1df76c11cd364b.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/1410d7ced7e16916884730c28d7310a5c2412305.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/19bbf7767618883b3fc56e493991a5bca17afdc6.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/1a7f38ab8f1d89cd6c3628bf38e1b67fcbf9c171.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/1c59ae4dfb93682b105ff65afddea5e86de6ef80.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/2359695c34e28d33db7fdbe50270188c4d0e5ab9.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/254238499a13a0623b4c904e901016facfc3067c.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/25d3c4e1e52ed29adfe3a5cc6278b1d5aa76d7c5.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/26147a601f2cfd6a9748078bd341aff2565eb7c2.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/2871347867004e99f0940d12a03f22c5a67b6211.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/28a9c5ac9bd24213c80ef0b7a6e549b5.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/2a2c767af0637f3f6843c5bbb22f4a921958cc46.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/2a5cbac9076abe2e5d22faf36a87f5248a3168ee.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/2a863ed538129c821c4d3cf3ebde582b3adad70a.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/2bab95b957e11a3d1c75b9df75049153b2a3b998.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/2d1d59f9ff7fa74ef8db576722eb77f20bd40ba0.jpg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/3191cfaf10e20fc76e3dde09de38304e1a619ab1.jpeg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/3474c0a0e52dc1984476bef3a986c4b06b9ce11e.jpeg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/35ba491724c524231c180060c6634fbcb3366865.jpeg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/376b6d593a22201f92af324e34509a8bfb1306f0.webp
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/3b7b7ef26cb731ccbb1d7c224bf0e6425848bddd.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/3c12228191e810dc3648fb860aea6101fc6a54ad.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/42fe369e4f6000c81180a4420f0bd212c0832e7f.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/456a5aa4d010296d9e4e2a5ae84678acf1e7f8a6.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/48ac98525a67096a6efeb2f1d638268475124fdf.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/48e1ea064ee564bf1e9113d74ef81304f299ac8e.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/492d090c59f1f6a89ade363fb93c6847ecd8e28a.jpg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/4f4833f5cd52885ef5e46ba206cdc229.jpg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/502241ec86ea1f47be952458c0f823cff3d33483.jpeg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/544a12ae13e17d13af81319b76ee8bfd5b66b470.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/54795524bf01ccbe4ba016e7c592c585cc9b0d9c.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/5662eeede001c38bdb9182e2b436a0e4d58e17c9.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/59421ea514b195d00d8d4faae4128f7a0cc7ea40.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/5949bf7aec89afbd859a35125cf1f92064b33637.jpg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/5cb73e316877e3732e88c5dc5d967103de1463b6.jpeg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/5cca73d2b424042491646a2499b29f93.jpg
Source: chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/5d20048868877141ba3fb9ce2a33ade5.png
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/5e9214e393b8e16ca12e90f99a87c71c.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/622fada3a90cdea20584e58943f97e18bc42b336.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/659f4c8e0cbec6166c9d9414e8b139cbe7e24ce9.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/6611584d8d7b673e887d53a5eccf447a4f896335.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/66b2f68fe3bb6aa69b7ceaa8ae22354cdae50d40.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/6ef90ba75c215c6036483915e168c08eeacf14f5.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/7337c69e103e5b224e677ba69be0e01ac568c788.jpg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/7393e7b9c4c1cf5cc9c8284ee1b106479bbea8cc.jpeg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/74e639b4f46d0fe0aab2451349c42f01b994e396.jpg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/75bb66d9a11a9ab16f2c075001ef48e9978f6a9b.jpeg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/7b2c213b116330eb954cc3d5d4fea7d3626aaa0f.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/7b95f33ca58a398ea9d3a76edd90ff18b746a398.jpg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/7cc86bb24f41d6c802816a261434b7f91bd94bf5.jpeg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/7ed74f67f65796ca3d3f56ebc612845245c16f95.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/7f26ad400585781530a3e75f7b0356e48ac6ac55.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/8489626f8cfdfa330b58c0c76512332c67c2ee43.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/8903fb7b820c454c2185671cc5f2599ffe15cbdb.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/89557b743d4c86744472d7204813d2ba.png
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/8c019e7410d36673e8607301061007bf16013102.png
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/8e02e850002eb3ce0a0be48daf2693336403eb86.jpeg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/8f150fa5a435347afd60f905b785c02db104b1b4.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/9182e3fc4d3e2998448f2a1b678991c87faf77a6.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/94e85ca7240ada1a84c89b0c076e18429dc6edf1.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/969b7ca635d13f2e9a2380510ac5f5a238ef64ef.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/9adc39b5052122d6f03b60858a956876cea2f3e2.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/9d6698b796cb382a3cbf76e13f9ae4a0aa1a7746.webp
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/9e464d61a0cf846d6fea5b13fac3e35d.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/a3b0ccd2de95c695c7b99e48f1b7e409815a18aa.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/a4136656a09cf271e47cefb5ebee8374.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/a433e880ee81352d122e20a49064772e.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/a7354c7987067f943189b7a4f1f3e020.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/b68b002458aa94dc291fd80eb91e8c56.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/b9b2641d45669985e7397bc4ac28c4ca120e6297.jpg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/b9e34396183812ff1062ebb5171caaae33ae06c0.jpeg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/bbc127c5e7c30090c4f9b80c3d901ead3629582e.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/c09b8a2b191088075ea5307b7fbbda245c3c811d.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/c45a50fb64006f61f8cc79f72832f2fa6b14335b.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/c678efadf5bc578d9af7b62f749393c1980a6da5.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/c77099a56e06f49a357d51fc42f38086ac36cac1.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/c8c33a36aea445024e9e9a457a333d0e4d2e5d68.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/c9d6d1e61e51fc55c64b1df9f915a404df16ebf0.jpg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/cc9848adf3ffcc99024436d9b23c022632da987e.png
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/d334d7f24d8af21f9aa9024236873f7eb5450d87.png
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/d366d0c225e24136fa296c2234a0370b45369592.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/d5a40373b44ea8111500c4289464d55d9c0516d3.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/d95cf4e2f5344172719039a44aa47bfcf3fadb64.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/db1c92207029cff560d2872195b14364a73b35bd.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/dbaf20a93b83347c91f7674df9783ada.jpg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/dd0bf6a7277d7e58ec2c01e3627a45275be16a24.jpeg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/e11eff5309c535edce9d8cc35f9d4811c576d79d.jpg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/e37cf773ba0c5796ac1fe571920a22e081ae6eec.jpeg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/e84e22097951cec3381ed92b3c1d03ca67cc1716.jpg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/e9965ee36481434b14cbe1bea3260a80.png
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/eb7e365a40aa434f35f25fe86a7cae4068969509.jpg
Source: chromecache_380.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/f02f53a26a1b92ae92c7fa112c16ccd5fee51a21.webp
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/f0836c50d234faf76d572c9f7da17ea7.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/f3264cdd56c992a54ac861a69bc4e57f6ac6fa73.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/f3e535712b0f9decfe1f620107cfee74.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/f4b9a830a3be50c7333eaf1836144b26d8b2ee68.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/fab5fcb5ad2e7d835cb736ac9f0688288746c466.jpg
Source: chromecache_199.1.dr	String found in binary or memory: https://img.shopymn.com/uploader/fc2bcafe3c4c673896b61de343177ec8.jpg
Source: chromecache_218.1.dr	String found in binary or memory: https://static.shopymn.com
Source: chromecache_289.1.dr	String found in binary or memory: https://static.shopymn.com/liquid/buyer/public
Source: chromecache_218.1.dr	String found in binary or memory: https://static.shopymn.com/liquid/buyer/public/
Source: chromecache_218.1.dr	String found in binary or memory: https://static.shopymn.com/liquid/buyer/public/img/default.png
Source: chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: https://static.shopymn.com/liquid/buyer/public/img/payment/AmericanExpress.svg
Source: chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: https://static.shopymn.com/liquid/buyer/public/img/payment/maestro.svg
Source: chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: https://static.shopymn.com/liquid/buyer/public/img/payment/mastercard.svg
Source: chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: https://static.shopymn.com/liquid/buyer/public/img/payment/paypal.svg
Source: chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: https://static.shopymn.com/liquid/buyer/public/img/payment/visa1.svg
Source: chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: https://static.shopymn.com/liquid/buyer/public/js/lib/event.js?t=20240524155330
Source: chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: https://static.shopymn.com/liquid/buyer/public/js/lib/index.js?t=20240524155330
Source: chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: https://static.shopymn.com/liquid/buyer/public/js/plug/Swiper.js
Source: chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: https://static.shopymn.com/liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330
Source: chromecache_289.1.dr	String found in binary or memory: https://static.shopymn.com/theme/faker/pic-4.png
Source: chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: https://static.shopymn.com/wp-includes/img/pro-shipping-protection.png
Source: chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	String found in binary or memory: https://static.shopymn.com/wp-includes/img/shipping-insurance.png
Source: chromecache_380.1.dr	String found in binary or memory: https://www.cravob.com/
Source: chromecache_218.1.dr	String found in binary or memory: https://www.cravob.com/products?handler=asics
Source: chromecache_199.1.dr	String found in binary or memory: https://www.cravob.com/products?handler=whiskys

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906

Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.5:49717 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.win@21/336@40/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1988,i,17011482217267182262,10272810757295584300,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://moctle.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1988,i,17011482217267182262,10272810757295584300,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://moctle.com/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
http://www.idangero.us/swiper/	0%	URL Reputation	safe
https://img.shopymn.com/uploader/e84e22097951cec3381ed92b3c1d03ca67cc1716.jpg	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451980&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/fc2bcafe3c4c673896b61de343177ec8.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/2871347867004e99f0940d12a03f22c5a67b6211.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/5d20048868877141ba3fb9ce2a33ade5.png	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/5e9214e393b8e16ca12e90f99a87c71c.jpg	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451982&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/a70350d2dda8813e43ac84a691f0a381847dfb75.png	0%	Avira URL Cloud	safe
https://static.shopymn.com/liquid/buyer/public/js/lib/event.js?t=20240524155330	100%	Avira URL Cloud	phishing
https://img.shopymn.com/uploader/54795524bf01ccbe4ba016e7c592c585cc9b0d9c.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/25d3c4e1e52ed29adfe3a5cc6278b1d5aa76d7c5.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/42fe369e4f6000c81180a4420f0bd212c0832e7f.jpg	0%	Avira URL Cloud	safe
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400303&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/0abbbe77281ef379f1a927125224b50c.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/48ac98525a67096a6efeb2f1d638268475124fdf.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/35ba491724c524231c180060c6634fbcb3366865.jpeg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/a30aeca4280b3df9337a23d751cfbb46.png?x-oss-process=image/interlace,1/format,webp	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/1410d7ced7e16916884730c28d7310a5c2412305.jpg	0%	Avira URL Cloud	safe
https://img.staticdj.com/a650298a61e168fecaaa1d14adf1ee63.png	0%	Avira URL Cloud	safe
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469762&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/9d6698b796cb382a3cbf76e13f9ae4a0aa1a7746.webp	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/d1efd62da517b9a9cbcc66739a2f58236cb27f19.jpeg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/75df6de93d8baaa5ce1c4b4bbafbb7f5.png?x-oss-process=image/interlace,1/format,webp	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/8903fb7b820c454c2185671cc5f2599ffe15cbdb.jpg	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469760&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET	0%	Avira URL Cloud	safe
http://schema.org/Offer	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/d3a5e4fb2365a048a7c7c731cb9f7f72.png?x-oss-process=image/interlace,1/format,webp	0%	Avira URL Cloud	safe
https://static.shopymn.com/theme/faker/pic-4.png	100%	Avira URL Cloud	phishing
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451980&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/8e02e850002eb3ce0a0be48daf2693336403eb86.jpeg	0%	Avira URL Cloud	safe
https://fonts.shopymn.com/liquid/buyer/public/css/font/Blinker-Light.ttf	0%	Avira URL Cloud	safe
https://static.shopymn.com/liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330	100%	Avira URL Cloud	phishing
https://img.shopymn.com/uploader/21884b5858ddddbeb9479fd4140706472aec9106.jpeg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/59421ea514b195d00d8d4faae4128f7a0cc7ea40.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/5cb73e316877e3732e88c5dc5d967103de1463b6.jpeg	0%	Avira URL Cloud	safe
https://img.shopymn.com	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/129e8ce2f2da19c63117ea13fc1df76c11cd364b.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/9007085244817a5cfa454f8854cb9a50.png?x-oss-process=image/interlace,1/format,webp	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/7f26ad400585781530a3e75f7b0356e48ac6ac55.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/28a9c5ac9bd24213c80ef0b7a6e549b5.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/d2df150284cdfe15bf44c5a379f89f09.png?x-oss-process=image/interlace,1/format,webp	0%	Avira URL Cloud	safe
https://static.shopymn.com/liquid/buyer/public/img/payment/paypal.svg	100%	Avira URL Cloud	phishing
https://img.shopymn.com/uploader/659f4c8e0cbec6166c9d9414e8b139cbe7e24ce9.jpg	0%	Avira URL Cloud	safe
https://static.shopymn.com/liquid/buyer/public/js/lib/index.js?t=20240524155330	100%	Avira URL Cloud	phishing
https://www.facebook.com/tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400303&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451974&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428466&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/4f4833f5cd52885ef5e46ba206cdc229.jpg	0%	Avira URL Cloud	safe
https://static.shopymn.com/liquid/buyer/public/img/default.png	100%	Avira URL Cloud	phishing
https://img.shopymn.com/uploader/48e1ea064ee564bf1e9113d74ef81304f299ac8e.jpg	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428462&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412200&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/d0c5abae35b7b6102f6bd1205ec204e28371aba7.jpeg	0%	Avira URL Cloud	safe
https://moctle.com/	100%	Avira URL Cloud	phishing
https://img.shopymn.com/uploader/376b6d593a22201f92af324e34509a8bfb1306f0.webp	0%	Avira URL Cloud	safe
http://schema.org/InStock	0%	Avira URL Cloud	safe
https://fonts.shopymn.com/liquid/buyer/public/css/font/Blinker-SemiBold.ttf	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/d993a1725f58924f23cadb81743e03e2.jpg?x-oss-process=image/interlace,1/format,webp	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/0e49afad7eb17f349716ea63c83297492e32d294.jpeg	0%	Avira URL Cloud	safe
https://cdn.shopymn.com/uploader/742c6cba7453f3353fdda67f621a72a5.png	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/75bb66d9a11a9ab16f2c075001ef48e9978f6a9b.jpeg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/2359695c34e28d33db7fdbe50270188c4d0e5ab9.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/7b95f33ca58a398ea9d3a76edd90ff18b746a398.jpg	0%	Avira URL Cloud	safe
http://supertype.deSIL	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/d95cf4e2f5344172719039a44aa47bfcf3fadb64.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/bae3b8c20de926b7be25fbf7285b22e3d630f6fa.jpeg	0%	Avira URL Cloud	safe
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428465&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/7337c69e103e5b224e677ba69be0e01ac568c788.jpg	0%	Avira URL Cloud	safe
https://connect.facebook.net/signals/config/758694462259787?v=2.9.156&r=stable&domain=www.cravob.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C217%2C152%2C110%2C133%2C126%2C114	0%	Avira URL Cloud	safe
https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2F&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=index&ts=1716591392527&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2F&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17	100%	Avira URL Cloud	phishing
https://www.facebook.com/tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400306&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET	0%	Avira URL Cloud	safe
https://www.cravob.com/buyer/cart	100%	Avira URL Cloud	phishing
https://img.shopymn.com/uploader/1a7f38ab8f1d89cd6c3628bf38e1b67fcbf9c171.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/d1000179a6d6aeab89d03ab4e2125ff2.png?x-oss-process=image/interlace,1/format,webp	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/f3e535712b0f9decfe1f620107cfee74.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/969b7ca635d13f2e9a2380510ac5f5a238ef64ef.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/622fada3a90cdea20584e58943f97e18bc42b336.jpg	0%	Avira URL Cloud	safe
https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fcategories&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591408397&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fcategories&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17	100%	Avira URL Cloud	phishing
http://scripts.sil.org/OFLBlinkerExtraLight	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/eb7e365a40aa434f35f25fe86a7cae4068969509.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/7b2c213b116330eb954cc3d5d4fea7d3626aaa0f.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/2ce71f6504e8177d94cc448329a848fe.png?x-oss-process=image/interlace,1/format,webp	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/26147a601f2cfd6a9748078bd341aff2565eb7c2.jpg	0%	Avira URL Cloud	safe
https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591463905&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17	100%	Avira URL Cloud	phishing
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428464&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/1c59ae4dfb93682b105ff65afddea5e86de6ef80.jpg	0%	Avira URL Cloud	safe
https://static.shopymn.com/wp-includes/img/shipping-insurance.png	100%	Avira URL Cloud	phishing
https://img.shopymn.com/uploader/5662eeede001c38bdb9182e2b436a0e4d58e17c9.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/6611584d8d7b673e887d53a5eccf447a4f896335.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/94e85ca7240ada1a84c89b0c076e18429dc6edf1.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/bbc127c5e7c30090c4f9b80c3d901ead3629582e.jpg	0%	Avira URL Cloud	safe
https://at.alicdn.com/t/c/font_871426_xa0zaxz404.woff2?t=1699608289611	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/9e464d61a0cf846d6fea5b13fac3e35d.jpg	0%	Avira URL Cloud	safe
https://img.shopymn.com/uploader/1abfc652cc0f3e8037cae0f5dec3c53ff766f022.jpeg	0%	Avira URL Cloud	safe
https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591447418&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17	100%	Avira URL Cloud	phishing
https://img.shopymn.com/uploader/7031c12368f9d1fee63f7904e93284d2.png?x-oss-process=image/interlace,1/format,webp	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
at.alicdn.com.danuoyi.alicdn.com	163.181.92.239	true	false	unknown
www.cravob.com	47.254.123.175	true	true	unknown
img.shopymn.com	103.160.204.248	true	false	unknown
static.shopymn.com	103.160.204.248	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
scontent.xx.fbcdn.net	157.240.252.13	true	false	unknown
img.staticdj.com	104.19.234.103	true	false	unknown
moctle.com	47.254.123.175	true	false	unknown
fonts.shopymn.com	103.160.204.8	true	false	unknown
cdn.shopymn.com	103.160.204.8	true	false	unknown
www.google.com	142.250.181.228	true	false	unknown
windowsupdatebg.s.llnwi.net	178.79.238.128	true	false	unknown
at.alicdn.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.facebook.com/tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451982&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/5d20048868877141ba3fb9ce2a33ade5.png	false	Avira URL Cloud: safe	unknown
https://static.shopymn.com/liquid/buyer/public/js/lib/event.js?t=20240524155330	true	Avira URL Cloud: phishing	unknown
https://img.shopymn.com/uploader/fc2bcafe3c4c673896b61de343177ec8.jpg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/e84e22097951cec3381ed92b3c1d03ca67cc1716.jpg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/a70350d2dda8813e43ac84a691f0a381847dfb75.png	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451980&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/0abbbe77281ef379f1a927125224b50c.jpg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/42fe369e4f6000c81180a4420f0bd212c0832e7f.jpg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/35ba491724c524231c180060c6634fbcb3366865.jpeg	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400303&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/48ac98525a67096a6efeb2f1d638268475124fdf.jpg	false	Avira URL Cloud: safe	unknown
https://img.staticdj.com/a650298a61e168fecaaa1d14adf1ee63.png	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/1410d7ced7e16916884730c28d7310a5c2412305.jpg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/a30aeca4280b3df9337a23d751cfbb46.png?x-oss-process=image/interlace,1/format,webp	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469762&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469760&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/9d6698b796cb382a3cbf76e13f9ae4a0aa1a7746.webp	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/75df6de93d8baaa5ce1c4b4bbafbb7f5.png?x-oss-process=image/interlace,1/format,webp	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/8903fb7b820c454c2185671cc5f2599ffe15cbdb.jpg	false	Avira URL Cloud: safe	unknown
https://fonts.shopymn.com/liquid/buyer/public/css/font/Blinker-Light.ttf	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/d1efd62da517b9a9cbcc66739a2f58236cb27f19.jpeg	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451980&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/d3a5e4fb2365a048a7c7c731cb9f7f72.png?x-oss-process=image/interlace,1/format,webp	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/8e02e850002eb3ce0a0be48daf2693336403eb86.jpeg	false	Avira URL Cloud: safe	unknown
https://static.shopymn.com/liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330	false	Avira URL Cloud: phishing	unknown
https://img.shopymn.com/uploader/21884b5858ddddbeb9479fd4140706472aec9106.jpeg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/59421ea514b195d00d8d4faae4128f7a0cc7ea40.jpg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/129e8ce2f2da19c63117ea13fc1df76c11cd364b.jpg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/9007085244817a5cfa454f8854cb9a50.png?x-oss-process=image/interlace,1/format,webp	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/7f26ad400585781530a3e75f7b0356e48ac6ac55.jpg	false	Avira URL Cloud: safe	unknown
https://www.cravob.com/products?handler=asics	true		unknown
https://img.shopymn.com/uploader/28a9c5ac9bd24213c80ef0b7a6e549b5.jpg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/d2df150284cdfe15bf44c5a379f89f09.png?x-oss-process=image/interlace,1/format,webp	false	Avira URL Cloud: safe	unknown
https://static.shopymn.com/liquid/buyer/public/img/payment/paypal.svg	false	Avira URL Cloud: phishing	unknown
https://static.shopymn.com/liquid/buyer/public/js/lib/index.js?t=20240524155330	false	Avira URL Cloud: phishing	unknown
https://www.facebook.com/tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400303&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428466&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451974&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/4f4833f5cd52885ef5e46ba206cdc229.jpg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/48e1ea064ee564bf1e9113d74ef81304f299ac8e.jpg	false	Avira URL Cloud: safe	unknown
https://static.shopymn.com/liquid/buyer/public/img/default.png	false	Avira URL Cloud: phishing	unknown
https://www.facebook.com/tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412200&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428462&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET	false	Avira URL Cloud: safe	unknown
https://moctle.com/	false	Avira URL Cloud: phishing	unknown
https://img.shopymn.com/uploader/d0c5abae35b7b6102f6bd1205ec204e28371aba7.jpeg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/376b6d593a22201f92af324e34509a8bfb1306f0.webp	false	Avira URL Cloud: safe	unknown
https://fonts.shopymn.com/liquid/buyer/public/css/font/Blinker-SemiBold.ttf	false	Avira URL Cloud: safe	unknown
https://www.cravob.com/products?handler=lego	true		unknown
https://img.shopymn.com/uploader/0e49afad7eb17f349716ea63c83297492e32d294.jpeg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/d993a1725f58924f23cadb81743e03e2.jpg?x-oss-process=image/interlace,1/format,webp	false	Avira URL Cloud: safe	unknown
https://cdn.shopymn.com/uploader/742c6cba7453f3353fdda67f621a72a5.png	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/75bb66d9a11a9ab16f2c075001ef48e9978f6a9b.jpeg	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428465&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/7b95f33ca58a398ea9d3a76edd90ff18b746a398.jpg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/bae3b8c20de926b7be25fbf7285b22e3d630f6fa.jpeg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/d95cf4e2f5344172719039a44aa47bfcf3fadb64.jpg	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/signals/config/758694462259787?v=2.9.156&r=stable&domain=www.cravob.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C217%2C152%2C110%2C133%2C126%2C114	false	Avira URL Cloud: safe	unknown
https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2F&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=index&ts=1716591392527&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2F&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17	false	Avira URL Cloud: phishing	unknown
https://www.facebook.com/tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400306&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET	false	Avira URL Cloud: safe	unknown
https://www.cravob.com/buyer/cart	false	Avira URL Cloud: phishing	unknown
https://img.shopymn.com/uploader/f3e535712b0f9decfe1f620107cfee74.jpg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/1a7f38ab8f1d89cd6c3628bf38e1b67fcbf9c171.jpg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/d1000179a6d6aeab89d03ab4e2125ff2.png?x-oss-process=image/interlace,1/format,webp	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/969b7ca635d13f2e9a2380510ac5f5a238ef64ef.jpg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/622fada3a90cdea20584e58943f97e18bc42b336.jpg	false	Avira URL Cloud: safe	unknown
https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fcategories&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591408397&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fcategories&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17	false	Avira URL Cloud: phishing	unknown
https://img.shopymn.com/uploader/eb7e365a40aa434f35f25fe86a7cae4068969509.jpg	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/2ce71f6504e8177d94cc448329a848fe.png?x-oss-process=image/interlace,1/format,webp	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428464&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/26147a601f2cfd6a9748078bd341aff2565eb7c2.jpg	false	Avira URL Cloud: safe	unknown
https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591463905&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17	false	Avira URL Cloud: phishing	unknown
https://static.shopymn.com/wp-includes/img/shipping-insurance.png	false	Avira URL Cloud: phishing	unknown
https://www.cravob.com/	true		unknown
https://at.alicdn.com/t/c/font_871426_xa0zaxz404.woff2?t=1699608289611	false	Avira URL Cloud: safe	unknown
https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591447418&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17	false	Avira URL Cloud: phishing	unknown
https://img.shopymn.com/uploader/7031c12368f9d1fee63f7904e93284d2.png?x-oss-process=image/interlace,1/format,webp	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/1abfc652cc0f3e8037cae0f5dec3c53ff766f022.jpeg	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://img.shopymn.com/uploader/5e9214e393b8e16ca12e90f99a87c71c.jpg	chromecache_199.1.dr	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/2871347867004e99f0940d12a03f22c5a67b6211.jpg	chromecache_218.1.dr	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/54795524bf01ccbe4ba016e7c592c585cc9b0d9c.jpg	chromecache_199.1.dr	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/25d3c4e1e52ed29adfe3a5cc6278b1d5aa76d7c5.jpg	chromecache_199.1.dr	false	Avira URL Cloud: safe	unknown
https://static.shopymn.com/theme/faker/pic-4.png	chromecache_289.1.dr	false	Avira URL Cloud: phishing	unknown
http://schema.org/Offer	chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/5cb73e316877e3732e88c5dc5d967103de1463b6.jpeg	chromecache_380.1.dr	false	Avira URL Cloud: safe	unknown
http://www.idangero.us/swiper/	chromecache_339.1.dr	false	URL Reputation: safe	unknown
https://img.shopymn.com	chromecache_218.1.dr	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/659f4c8e0cbec6166c9d9414e8b139cbe7e24ce9.jpg	chromecache_218.1.dr	false	Avira URL Cloud: safe	unknown
http://schema.org/InStock	chromecache_199.1.dr, chromecache_380.1.dr, chromecache_218.1.dr	false	Avira URL Cloud: safe	unknown
http://supertype.deSIL	chromecache_308.1.dr	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/2359695c34e28d33db7fdbe50270188c4d0e5ab9.jpg	chromecache_199.1.dr	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/7337c69e103e5b224e677ba69be0e01ac568c788.jpg	chromecache_218.1.dr	false	Avira URL Cloud: safe	unknown
http://scripts.sil.org/OFLBlinkerExtraLight	chromecache_308.1.dr	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/7b2c213b116330eb954cc3d5d4fea7d3626aaa0f.jpg	chromecache_218.1.dr	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/6611584d8d7b673e887d53a5eccf447a4f896335.jpg	chromecache_199.1.dr	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/1c59ae4dfb93682b105ff65afddea5e86de6ef80.jpg	chromecache_218.1.dr	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/5662eeede001c38bdb9182e2b436a0e4d58e17c9.jpg	chromecache_218.1.dr	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/94e85ca7240ada1a84c89b0c076e18429dc6edf1.jpg	chromecache_199.1.dr	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/bbc127c5e7c30090c4f9b80c3d901ead3629582e.jpg	chromecache_199.1.dr	false	Avira URL Cloud: safe	unknown
https://img.shopymn.com/uploader/9e464d61a0cf846d6fea5b13fac3e35d.jpg	chromecache_199.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
47.254.123.175	www.cravob.com	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	true
104.19.234.103	img.staticdj.com	United States	13335	CLOUDFLARENETUS	false
163.181.92.239	at.alicdn.com.danuoyi.alicdn.com	United States	24429	TAOBAOZhejiangTaobaoNetworkCoLtdCN	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
103.160.204.8	fonts.shopymn.com	unknown	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
157.240.252.35	unknown	United States	32934	FACEBOOKUS	false
103.160.204.248	img.shopymn.com	unknown	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1447445
Start date and time:	2024-05-25 00:55:37 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://moctle.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@21/336@40/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.cravob.com/categories Browse: https://www.cravob.com/products?handler=whiskys Browse: https://www.cravob.com/products?handler=asics Browse: https://www.cravob.com/products?handler=lego

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 142.250.186.142, 142.251.168.84, 34.104.35.123, 216.58.212.138, 142.250.184.234, 142.250.185.202, 142.250.74.202, 142.250.185.106, 142.250.186.74, 142.250.184.202, 216.58.206.42, 172.217.18.10, 216.58.212.170, 142.250.181.234, 142.250.185.138, 142.250.185.74, 142.250.185.234, 142.250.186.42, 142.250.185.170, 20.12.23.50, 199.232.214.172, 192.229.221.95, 20.3.187.198, 52.165.164.15, 142.250.181.227, 178.79.238.128, 142.250.186.78
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://moctle.com/

Input	Output
URL: https://www.cravob.com/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to UI interactions, specifically handling click events for navigation items and back buttons. It does not contain any malicious behavior or code that would indicate phishing or other security risks." }
$('.nav-item-down-menu li').click(function () { $(this).addClass('active') $(this).parent().siblings('ul').find('li').removeClass('active') }) $('.back').click(function (event) { $(this).parents(".nav-item").removeClass('active') $(this).parent(".nav-item-down-menu").removeClass('nav-item-down-menu--show') event.stopPropagation() event.preventDefault() })
URL: https://www.cravob.com/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script primarily integrates Facebook Pixel for tracking user interactions and sets cookies to manage user sessions. While it collects user data such as IP address and user agent, this is typical for tracking purposes and not inherently malicious. No evidence of phishing or harmful behavior was found." }
! function (f, b, e, v, n, t, s) { if (f.fbq) return; n = f.fbq = function () { n.callMethod ? n.callMethod.apply(n, arguments) : n.queue.push(arguments) }; if (!f._fbq) f._fbq = n; n.push = n; n.loaded = !0; n.version = '2.0'; n.queue = []; t = b.createElement(e); t.async = !0; t.src = v; s = b.getElementsByTagName(e)[0]; s.parentNode.insertBefore(t, s) }(window, document, 'script', 'https://connect.facebook.net/en_US/fbevents.js'); var id = new Date().getTime().toString() + (Math.random().toFixed(2) * 400 + 100).toString(); function setCookie(name, value, expiresDate) { var Days = 365; var exp = new Date(); exp.setTime(exp.getTime() + Days * 24 * 60 * 60 * 1000); document.cookie = name + '=' + encodeURIComponent(value) + ';expires=' + (expiresDate \|\| exp).toGMTString() + ';domain=' + location.host.split(".").map(function (s, i, arr) { return (i == 0 && arr.length > 2) ? "" : s; }).join(".") + ';path=/'; return true; } function getCookie(name) { var reg = new RegExp('(^\| )' + name + '=([^;]*)(;\|$)'), arr = document.cookie.match(reg); return arr ? decodeURIComponent(arr[2]) : ""; }; var clientId = getCookie('client_id'); if (!clientId) { setCookie('client_id', id); } facebook_pixel_user_data = { country: 'us', client_ip_address: '8.46.123.175', client_user_agent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36', }; fbq('dataProcessingOptions', []); fbq('init', '917164566707525', facebook_pixel_user_data); fbq('init', '751867630178087', facebook_pixel_user_data); fbq('init', '758694462259787', facebook_pixel_user_data); fbq('init', '270010499437007', facebook_pixel_user_data); var event_id_PageView = { "eventID": Math.random().toString(36).substr(2) + "PageView" + new Date().getTime() };fbq('track', 'PageView', {}, event_id_PageView);$(function(){ typeof conversionsApi == "function" && conversionsApi('PageView', {}, {}, event_id_PageView); });
URL: https://www.cravob.com/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code primarily handles search functionality, form submission, and UI updates. It does not contain any obvious malicious activities such as data exfiltration, credential stealing, or unauthorized access. The risk score is low, but as with any code, it should be reviewed in the context of the entire application to ensure there are no indirect vulnerabilities." }
$(document).on('click', '.search-box .icon-sousuo', function (e) { var search_keyword = $(this).parent().find('input').val(); var type = $(this).data("type") var val = parseInt($(this).data("type")) == 2 ? ($(this).parent().siblings('.search-select').find('option:selected').val()) : ''; window.location = `/search?keyword=${search_keyword}&sort=&type=${type}&val=${val}` $(this).siblings('form').action = `/search?keyword=${search_keyword}&sort=&type=${type}&val=${val}` }); $('.search-form input').bind('keydown', function (event) { if (event.keyCode == "13") { $(this).parent('form').siblings('.search-box .icon-sousuo').click() return false; } }); $('.search-select select').change(function () { var val = $('.search-select').find('option:selected').data('tag') $('.search-select').find('label').text(val) })
URL: https://www.cravob.com/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be an implementation of the MD5 hashing algorithm. It does not exhibit any malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code is focused on cryptographic operations, which are generally safe and commonly used in various applications." }
(function(factory){if(typeof exports==="object"){module.exports=factory()}else if(typeof define==="function"&&define.amd){define(factory)}else{var glob;try{glob=window}catch(e){glob=self}glob.SparkMD5=factory()}})(function(undefined){"use strict";var add32=function(a,b){return a+b&4294967295},hex_chr=["0","1","2","3","4","5","6","7","8","9","a","b","c","d","e","f"];function cmn(q,a,b,x,s,t){a=add32(add32(a,q),add32(x,t));return add32(a<<s\|a>>>32-s,b)}function md5cycle(x,k){var a=x[0],b=x[1],c=x[2],d=x[3];a+=(b&c\|~b&d)+k[0]-680876936\|0;a=(a<<7\|a>>>25)+b\|0;d+=(a&b\|~a&c)+k[1]-389564586\|0;d=(d<<12\|d>>>20)+a\|0;c+=(d&a\|~d&b)+k[2]+606105819\|0;c=(c<<17\|c>>>15)+d\|0;b+=(c&d\|~c&a)+k[3]-1044525330\|0;b=(b<<22\|b>>>10)+c\|0;a+=(b&c\|~b&d)+k[4]-176418897\|0;a=(a<<7\|a>>>25)+b\|0;d+=(a&b\|~a&c)+k[5]+1200080426\|0;d=(d<<12\|d>>>20)+a\|0;c+=(d&a\|~d&b)+k[6]-1473231341\|0;c=(c<<17\|c>>>15)+d\|0;b+=(c&d\|~c&a)+k[7]-45705983\|0;b=(b<<22\|b>>>10)+c\|0;a+=(b&c\|~b&d)+k[8]+1770035416\|0;a=(a<<7\|a>>>25)+b\|0;d+=(a&b\|~a&c)+k[9]-1958414417\|0;d=(d<<12\|d>>>20)+a\|0;c+=(d&a\|~d&b)+k[10]-42063\|0;c=(c<<17\|c>>>15)+d\|0;b+=(c&d\|~c&a)+k[11]-1990404162\|0;b=(b<<22\|b>>>10)+c\|0;a+=(b&c\|~b&d)+k[12]+1804603682\|0;a=(a<<7\|a>>>25)+b\|0;d+=(a&b\|~a&c)+k[13]-40341101\|0;d=(d<<12\|d>>>20)+a\|0;c+=(d&a\|~d&b)+k[14]-1502002290\|0;c=(c<<17\|c>>>15)+d\|0;b+=(c&d\|~c&a)+k[15]+1236535329\|0;b=(b<<22\|b>>>10)+c\|0;a+=(b&d\|c&~d)+k[1]-165796510\|0;a=(a<<5\|a>>>27)+b\|0;d+=(a&c\|b&~c)+k[6]-1069501632\|0;d=(d<<9\|d>>>23)+a\|0;c+=(d&b\|a&~b)+k[11]+643717713\|0;c=(c<<14\|c>>>18)+d\|0;b+=(c&a\|d&~a)+k[0]-373897302\|0;b=(b<<20\|b>>>12)+c\|0;a+=(b&d\|c&~d)+k[5]-701558691\|0;a=(a<<5\|a>>>27)+b\|0;d+=(a&c\|b&~c)+k[10]+38016083\|0;d=(d<<9\|d>>>23)+a\|0;c+=(d&b\|a&~b)+k[15]-660478335\|0;c=(c<<14\|c>>>18)+d\|0;b+=(c&a\|d&~a)+k[4]-405537848\|0;b=(b<<20\|b>>>12)+c\|0;a+=(b&d\|c&~d)+k[9]+568446438\|0;a=(a<<5\|a>>>27)+b\|0;d+=(a&c\|b&~c)+k[14]-1019803690\|0;d=(d<<9\|d>>>23)+a\|0;c+=(d&b\|a&~b)+k[3]-187363961\|0;c=(c<<14\|c>>>18)+d\|0;b+=(c&a\|d&~a)+k[8]+1163531501\|0;b=(b<<20\|b>>>12)+c\|0;a+=(b&d\|c&~d)+k[13]-1444681467\|0;a=(a<<5\|a>>>27)+b\|0;d+=(a&c\|b&~c)+k[2]-51403784\|0;d=(d<<9\|d>>>23)+a\|0;c+=(d&b\|a&~b)+k[7]+1735328473\|0;c=(c<<14\|c>>>18)+d\|0;b+=(c&a\|d&~a)+k[12]-1926607734\|0;b=(b<<20\|b>>>12)+c\|0;a+=(b^c^d)+k[5]-378558\|0;a=(a<<4\|a>>>28)+b\|0;d+=(a^b^c)+k[8]-2022574463\|0;d=(d<<11\|d>>>21)+a\|0;c+=(d^a^b)+k[11]+1839030562\|0;c=(c<<16\|c>>>16)+d\|0;b+=(c^d^a)+k[14]-35309556\|0;b=(b<<23\|b>>>9)+c\|0;a+=(b^c^d)+k[1]-1530992060\|0;a=(a<<4\|a>>>28)+b\|0;d+=(a^b^c)+k[4]+1272893353\|0;d=(d<<11\|d>>>21)+a\|0;c+=(d^a^b)+k[7]-155497632\|0;c=(c<<16\|c>>>16)+d\|0;b+=(c^d^a)+k[10]-1094730640\|0;b=(b<<23\|b>>>9)+c\|0;a+=(b^c^d)+k[13]+681279174\|0;a=(a<<4\|a>>>28)+b\|0;d+=(a^b^c)+k[0]-358537222\|0;d=(d<<11\|d>>>21)+a\|0;c+=(d^a^b)+k[3]-722521979\|0;c=(c<<16\|c>>>16)+d\|0;b+=(c^d^a)+k[6]+76029189\|0;b=(b<<23\|b>>>9)+c\|0;a+=(b^c^d)+k[9]-640364487\|0;a=(a<<4\|a>>>28)+b\|0;d+=(a^b^c)+k[12]-421815835\|0;d=(d<<11\|d>>>21)+a\|0;c+=(d^a^b)+k[15]+530742520\|0;c=(c<<16\|c>>>16)+d\|0;b+=(c^d^a)+k[2]-995338651\|0;b=(b<<23\|b>>>9)+c\|0;a+=(c^(b\|~d))+k[0]-198630844\|0;a=(a<<
URL: https://www.cravob.com/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The provided code appears to be part of a fingerprinting library, which is used to uniquely identify users based on their device and browser characteristics. While fingerprinting itself is not inherently malicious, it can be used for tracking purposes. However, since tracking is considered no risk in this context, the code does not exhibit any overtly malicious behavior such as phishing or data exfiltration." }
!function(e,t,a){"use strict";"undefined"!=typeof window&&"function"==typeof define&&define.amd?define(a):"undefined"!=typeof module&&module.exports?module.exports=a():t.exports?t.exports=a():t.Fingerprint2=a()}(0,this,function(){"use strict";var d=function(e,t){e=[e[0]>>>16,65535&e[0],e[1]>>>16,65535&e[1]],t=[t[0]>>>16,65535&t[0],t[1]>>>16,65535&t[1]];var a=[0,0,0,0];return a[3]+=e[3]+t[3],a[2]+=a[3]>>>16,a[3]&=65535,a[2]+=e[2]+t[2],a[1]+=a[2]>>>16,a[2]&=65535,a[1]+=e[1]+t[1],a[0]+=a[1]>>>16,a[1]&=65535,a[0]+=e[0]+t[0],a[0]&=65535,[a[0]<<16\|a[1],a[2]<<16\|a[3]]},g=function(e,t){e=[e[0]>>>16,65535&e[0],e[1]>>>16,65535&e[1]],t=[t[0]>>>16,65535&t[0],t[1]>>>16,65535&t[1]];var a=[0,0,0,0];return a[3]+=e[3]t[3],a[2]+=a[3]>>>16,a[3]&=65535,a[2]+=e[2]t[3],a[1]+=a[2]>>>16,a[2]&=65535,a[2]+=e[3]t[2],a[1]+=a[2]>>>16,a[2]&=65535,a[1]+=e[1]t[3],a[0]+=a[1]>>>16,a[1]&=65535,a[1]+=e[2]t[2],a[0]+=a[1]>>>16,a[1]&=65535,a[1]+=e[3]t[1],a[0]+=a[1]>>>16,a[1]&=65535,a[0]+=e[0]t[3]+e[1]t[2]+e[2]t[1]+e[3]t[0],a[0]&=65535,[a[0]<<16\|a[1],a[2]<<16\|a[3]]},f=function(e,t){return 32===(t%=64)?[e[1],e[0]]:t<32?[e[0]<<t\|e[1]>>>32-t,e[1]<<t\|e[0]>>>32-t]:(t-=32,[e[1]<<t\|e[0]>>>32-t,e[0]<<t\|e[1]>>>32-t])},h=function(e,t){return 0===(t%=64)?e:t<32?[e[0]<<t\|e[1]>>>32-t,e[1]<<t]:[e[1]<<t-32,0]},m=function(e,t){return[e[0]^t[0],e[1]^t[1]]},T=function(e){return e=m(e,[0,e[0]>>>1]),e=g(e,[4283543511,3981806797]),e=m(e,[0,e[0]>>>1]),e=g(e,[3301882366,444984403]),e=m(e,[0,e[0]>>>1])},l=function(e,t){t=t\|\|0;for(var a=(e=e\|\|"").length%16,n=e.length-a,r=[0,t],i=[0,t],o=[0,0],l=[0,0],s=[2277735313,289559509],c=[1291169091,658871167],u=0;u<n;u+=16)o=[255&e.charCodeAt(u+4)\|(255&e.charCodeAt(u+5))<<8\|(255&e.charCodeAt(u+6))<<16\|(255&e.charCodeAt(u+7))<<24,255&e.charCodeAt(u)\|(255&e.charCodeAt(u+1))<<8\|(255&e.charCodeAt(u+2))<<16\|(255&e.charCodeAt(u+3))<<24],l=[255&e.charCodeAt(u+12)\|(255&e.charCodeAt(u+13))<<8\|(255&e.charCodeAt(u+14))<<16\|(255&e.charCodeAt(u+15))<<24,255&e.charCodeAt(u+8)\|(255&e.charCodeAt(u+9))<<8\|(255&e.charCodeAt(u+10))<<16\|(255&e.charCodeAt(u+11))<<24],o=g(o,s),o=f(o,31),o=g(o,c),r=m(r,o),r=f(r,27),r=d(r,i),r=d(g(r,[0,5]),[0,1390208809]),l=g(l,c),l=f(l,33),l=g(l,s),i=m(i,l),i=f(i,31),i=d(i,r),i=d(g(i,[0,5]),[0,944331445]);switch(o=[0,0],l=[0,0],a){case 15:l=m(l,h([0,e.charCodeAt(u+14)],48));case 14:l=m(l,h([0,e.charCodeAt(u+13)],40));case 13:l=m(l,h([0,e.charCodeAt(u+12)],32));case 12:l=m(l,h([0,e.charCodeAt(u+11)],24));case 11:l=m(l,h([0,e.charCodeAt(u+10)],16));case 10:l=m(l,h([0,e.charCodeAt(u+9)],8));case 9:l=m(l,[0,e.charCodeAt(u+8)]),l=g(l,c),l=f(l,33),l=g(l,s),i=m(i,l);case 8:o=m(o,h([0,e.charCodeAt(u+7)],56));case 7:o=m(o,h([0,e.charCodeAt(u+6)],48));case 6:o=m(o,h([0,e.charCodeAt(u+5)],40));case 5:o=m(o,h([0,e.charCodeAt(u+4)],32));case 4:o=m(o,h([0,e.charCodeAt(u+3)],24));case 3:o=m(o,h([0,e.charCodeAt(u+2)],16));case 2:o=m(o,h([0,e.charCodeAt(u+1)],8));case 1:o=m(o,[0,e.charCodeAt(u)]),o=g(o,s),o=f(o,31),o=g(o,c),r=m(r,o)}return r=m(r,[0,e.length]),i=m(i,
URL: https://www.cravob.com/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is primarily concerned with setting the viewport and adjusting the font size based on the device's pixel ratio and screen width. It does not contain any malicious elements such as data exfiltration, credential stealing, or unauthorized access to sensitive information. The code is typical for responsive design and does not pose any security risks." }
!function(t){function e(){var e=l.getBoundingClientRect().width;640<e/i&&(e=640*i),t.rem=e/16,40<=t.rem&&(t.rem=40),l.style.fontSize=t.rem+"px"}var i,a,n,r,o=t.document,l=o.documentElement,d=o.querySelector('meta[name="viewport"]'),m=o.querySelector('meta[name="flexible"]');d?(r=d.getAttribute("content").match(/initial\-scale=(["']?)([\d\.]+)\1?/))&&(a=parseFloat(r[2]),i=parseInt(1/a)):m&&(r=m.getAttribute("content").match(/initial\-dpr=(["']?)([\d\.]+)\1?/))&&(i=parseFloat(r[2]),a=parseFloat((1/i).toFixed(2)));if(!i&&!a){var c=(t.navigator.appVersion.match(/android/gi),t.navigator.appVersion.match(/iphone/gi)),s=t.devicePixelRatio;a=1/(i=c?3<=s?3:2<=s?2:1:s)}if(l.setAttribute("data-dpr",i),!d)if((d=o.createElement("meta")).setAttribute("name","viewport"),d.setAttribute("content","initial-scale="+a+", maximum-scale="+a+", minimum-scale="+a+", user-scalable=no"),l.firstElementChild)l.firstElementChild.appendChild(d);else{var u=o.createElement("div");u.appendChild(d),o.write(u.innerHTML)}t.dpr=i,t.addEventListener("resize",function(){clearTimeout(n),n=setTimeout(e,300)},!1),o.readyState,o.addEventListener("DOMContentLoaded",function(){},!1),e()}(window);
URL: https://www.cravob.com/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to initializing a Swiper instance, which is a common library for creating carousels or sliders on web pages. It does not contain any elements that are typically associated with malicious behavior such as phishing, data exfiltration, or unauthorized access. The code primarily deals with UI/UX functionality and does not pose any security risks." }
$(function () { var delay_time = parseInt("3000"); var banner_open = parseInt("0"); var banner_key = parseInt("0"); var is_grid = parseInt("0") new Swiper('.index_GNWD1', { speed: 600, parallax: true, watchOverflow: true, loop: true, autoplay: banner_open ? false : { delay: delay_time, disableOnInteraction: false }, initialSlide: banner_open ? banner_key : 0, spaceBetween: 0, slidesPerView: 1, breakpoints: { 768: { slidesPerView: is_grid ? 1.2 : 1, spaceBetween: is_grid ? 8 : 0, loop: is_grid ? false : true, autoplay: is_grid ? false : { delay: delay_time }, } }, pagination: { el: '.index_GNWD1 .swiper-pagination', }, navigation: { nextEl: '.index_GNWD1 .swiper-button-next', prevEl: '.index_GNWD1 .swiper-button-prev', }, }); })
URL: https://www.cravob.com/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be a minified version of the jQuery library, specifically version 1.10.2. It includes typical jQuery functions and patterns, such as DOM manipulation, event handling, and utility functions. There are no obvious signs of malicious activity, such as obfuscated code, suspicious network requests, or attempts to steal user data. However, as with any third-party library, it is important to ensure that it is sourced from a trusted location to avoid potential risks." }
(function(e,t){var n,r,i=typeof t,o=e.location,a=e.document,s=a.documentElement,l=e.jQuery,u=e.$,c={},p=[],f="1.10.2",d=p.concat,h=p.push,g=p.slice,m=p.indexOf,y=c.toString,v=c.hasOwnProperty,b=f.trim,x=function(e,t){return new x.fn.init(e,t,r)},w=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,T=/\S+/g,C=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:\s(<[\w\W]+>)[^>]\|#([\w-]))$/,k=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,E=/^[\],:{}\s]$/,S=/(?:^\|:\|,)(?:\s\[)+/g,A=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,j=/"[^"\\\r\n]"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,D=/^-ms-/,L=/-([\da-z])/gi,H=function(e,t){return t.toUpperCase()},q=function(e){(a.addEventListener\|\|"load"===e.type\|\|"complete"===a.readyState)&&(_(),x.ready())},_=function(){a.addEventListener?(a.removeEventListener("DOMContentLoaded",q,!1),e.removeEventListener("load",q,!1)):(a.detachEvent("onreadystatechange",q),e.detachEvent("onload",q))};x.fn=x.prototype={jquery:f,constructor:x,init:function(e,n,r){var i,o;if(!e)return this;if("string"==typeof e){if(i="<"===e.charAt(0)&&">"===e.charAt(e.length-1)&&e.length>=3?[null,e,null]:N.exec(e),!i\|\|!i[1]&&n)return!n\|\|n.jquery?(n\|\|r).find(e):this.constructor(n).find(e);if(i[1]){if(n=n instanceof x?n[0]:n,x.merge(this,x.parseHTML(i[1],n&&n.nodeType?n.ownerDocument\|\|n:a,!0)),k.test(i[1])&&x.isPlainObject(n))for(i in n)x.isFunction(this[i])?this[i](n[i]):this.attr(i,n[i]);return this}if(o=a.getElementById(i[2]),o&&o.parentNode){if(o.id!==i[2])return r.find(e);this.length=1,this[0]=o}return this.context=a,this.selector=e,this}return e.nodeType?(this.context=this[0]=e,this.length=1,this):x.isFunction(e)?r.ready(e):(e.selector!==t&&(this.selector=e.selector,this.context=e.context),x.makeArray(e,this))},selector:"",length:0,toArray:function(){return g.call(this)},get:function(e){return null==e?this.toArray():0>e?this[this.length+e]:this[e]},pushStack:function(e){var t=x.merge(this.constructor(),e);return t.prevObject=this,t.context=this.context,t},each:function(e,t){return x.each(this,e,t)},ready:function(e){return x.ready.promise().done(e),this},slice:function(){return this.pushStack(g.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(e){var t=this.length,n=+e+(0>e?t:0);return this.pushStack(n>=0&&t>n?[this[n]]:[])},map:function(e){return this.pushStack(x.map(this,function(t,n){return e.call(t,n,t)}))},end:function(){return this.prevObject\|\|this.constructor(null)},push:h,sort:[].sort,splice:[].splice},x.fn.init.prototype=x.fn,x.extend=x.fn.extend=function(){var e,n,r,i,o,a,s=arguments[0]\|\|{},l=1,u=arguments.length,c=!1;for("boolean"==typeof s&&(c=s,s=arguments[1]\|\|{},l=2),"object"==typeof s\|\|x.isFunction(s)\|\|(s={}),u===l&&(s=this,--l);u>l;l++)if(null!=(o=arguments[l]))for(i in o)e=s[i],r=o[i],s!==r&&(c&&r&&(x.isPlainObject(r)\|\|(n=x.isArray(r)))?(n?(n=!1,a=e&&x.isArray(e)?e:[]):a=e&&x.isPlainObject(e)?e:{},s[i]=x.extend(c,a,r)):r!==t&&(s[i]=r));return s},x.extend({expando:"jQuery"+(f+Math.random()).re
URL: https://www.cravob.com/ Model: gpt-4o	```json { "phishing_score": 9, "brands": "Amazon", "phishing": true, "suspicious_domain": true, "has_loginform": false, "has_captcha": false, "setechniques": true, "reasons": "The URL 'https://www.cravob.com/' does not match the legitimate domain name for Amazon, which is 'amazon.com'. The website uses the Amazon logo and branding, which is a common social engineering technique used in phishing attacks. The domain name 'cravob.com' is suspicious and not associated with Amazon. The site does not have a login form or captcha, but the use of Amazon's branding on an unrelated domain is a strong indicator of phishing." }

URL: https://www.cravob.com/products?handler=whiskys Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code changes the URL based on a selected sort option. This behavior is typical for e-commerce sites to sort products and does not exhibit any malicious characteristics. There is no evidence of phishing or harmful actions. The risk score is low due to the benign nature of the code." }
$('.sort-select').change(function () { var searchUrl = "/products?handler=whiskys"; var sort = $(this).find('option:selected').val(); $('.product-sort').find('label').text($(this).find('option:selected').text()); window.location = searchUrl + '&sort=' + sort + '&page=' + '' + '&page_size=24' + '&tags='; })
URL: https://www.cravob.com/products?handler=asics Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code changes the URL based on user selection from a dropdown menu. This behavior is typical for sorting functionality on e-commerce sites. There is no indication of malicious activity such as data exfiltration, unauthorized access, or phishing attempts. The risk score is low due to the benign nature of the code." }
$('.sort-select').change(function () { var searchUrl = "/products?handler=asics"; var sort = $(this).find('option:selected').val(); $('.product-sort').find('label').text($(this).find('option:selected').text()); window.location = searchUrl + '&sort=' + sort + '&page=' + '' + '&page_size=24' + '&tags='; })
URL: https://www.cravob.com/products?handler=lego Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code modifies the URL based on user selection from a dropdown menu and redirects the user to a new page. This behavior is typical for sorting functionality on e-commerce sites. There is no indication of malicious activity such as data exfiltration, unauthorized access, or harmful actions. The risk score is low due to the benign nature of the code." }
$('.sort-select').change(function () { var searchUrl = "/products?handler=lego"; var sort = $(this).find('option:selected').val(); $('.product-sort').find('label').text($(this).find('option:selected').text()); window.location = searchUrl + '&sort=' + sort + '&page=' + '' + '&page_size=24' + '&tags='; })

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 24 21:56:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.981530809836681
Encrypted:	false
SSDEEP:	48:8LdIsTtdNH4idAKZdA19ehwiZUklqeh0y+3:8esDory
MD5:	9CAC997930E6907452759A6EFF3E152D
SHA1:	048037B354B24B886D8CCCD40DF1E694F01759E5
SHA-256:	2295510E0938D0B34888C623075C04F1BC4924DBD464BDE00F183232F82DBD35
SHA-512:	0A8910169510581FEEB93C27E1FE63540FEF3C4CF39BAED595C6D67B272A2D6B60E4782B6F9A8F0384379CB502C26D9FF19FEEC3FE621EF2B171E9845764539E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Ly..-...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 24 21:56:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9976816333401555
Encrypted:	false
SSDEEP:	48:8ldIsTtdNH4idAKZdA1weh/iZUkAQkqehby+2:8wsDi9QKy
MD5:	F7D7CC38CDF555C7E3999D58A8CD092E
SHA1:	5B200EF09C79F6A0F57E8DA72966555E88AC8B33
SHA-256:	F9224739C8A1DA277474B548133786176E2C090096BBFAF0C5552C660CF23F8E
SHA-512:	2AD02EADA8743838068E30BB6E5548E68FA5142EB3C7F120FA648963BD59F2F21F9E58A792FC0B733B23BF66B43870A40937776EFF0BA1290217920208C75ADB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....`...-...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.008771852760389
Encrypted:	false
SSDEEP:	48:8xOdIsTtdsH4idAKZdA14tseh7sFiZUkmgqeh7sBy+BX:8xDsDZn/y
MD5:	82B3891B69EA21EB37023CE2561D6AFC
SHA1:	837969C4992FBCB85D7A6530F98FEA61BEAA98C2
SHA-256:	49A5F55CCE5B619E2FF56F345367313BD563ACE248ED2EDC188170F2F5987B51
SHA-512:	3D1D11ED820AC3719880C0ADCF5AC4E291B32CE74AE5E6486F11AC810A36618DEDAE92C670323E960C6AD464CD7F39E3B476ADC74DD1CA4F1EF6785E29B45C2D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 24 21:56:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9958633349425963
Encrypted:	false
SSDEEP:	48:8MdIsTtdNH4idAKZdA1vehDiZUkwqehny+R:8BsDppy
MD5:	69E02113E012C927B86D65EB8925CB95
SHA1:	5F35B9C28D0310DFB07B7B98E775DA7A1B627DA3
SHA-256:	3E1914C03532D851B824040DFBFADEEC19B0E517340D76D0966EA64099EF8CCA
SHA-512:	A450B7D880937C32ECBB5A80530BF5F4014F55996FE13E95CC15D279AFBFA60FCAFA45DE22755DE90D2596CC5F4BC479C0CADD6893632AC0AB1EF78380E77C62
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....UR..-...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 24 21:56:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.985825490891272
Encrypted:	false
SSDEEP:	48:81dIsTtdNH4idAKZdA1hehBiZUk1W1qehVy+C:8AsDZ91y
MD5:	FAABF38BAB12DB26FE1EDCB034764AC5
SHA1:	DC78121A6B8EBC6481FF91A91981C64943843763
SHA-256:	5A8BDC366617F8E739067453583F397B0F8D5270894FCCE652D1B61FC5F3164B
SHA-512:	C55579F3FA30B612BF6D3BC45DBF585361545FE3C16295C878A4D2E0AF633C77119A5F08D8511DC25B83E44F93660EB5EFA2484C38703F5BCBB400E89C755A15
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....J..-...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 24 21:56:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.995914280271517
Encrypted:	false
SSDEEP:	48:8fdIsTtdNH4idAKZdA1duT+ehOuTbbiZUk5OjqehOuTb/y+yT+:8ysDlT/TbxWOvTb/y7T
MD5:	8B1F3A19DAF35CE3807DFFBC183AB1D6
SHA1:	DA0908912DE8A9152A903A52553AB1D42198AB0D
SHA-256:	430B033F488D2F643B7C6D6B0FCFE6A68F1C29802A3A70511D49AA73B2A68D2C
SHA-512:	79EAD1DD825CA7583D685EBDAFFCC679F6D8E9E1AF3E0A3FBF8E28218829E3B88A37DA3C2FEFDF8C2283FD9AB4223BCD37E5D87C6D28F6B171CE4E4323351BDF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....:0..-...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 980x800, components 3
Category:	dropped
Size (bytes):	188709
Entropy (8bit):	7.984996254778926
Encrypted:	false
SSDEEP:	3072:SlPeNMRrx1o19zLKq/KtUzRjKKD1GrC5pFQhz4sP7+874XaIO9TQtIMPv9vjR8E+:6PgIrxeB29Szo0GryazqnqZ9TDMd6J79
MD5:	5521FF8608C8B926CD70B0204FADB2F5
SHA1:	8BC27CB373F307EE648C5599895BFFD8BD4B69FC
SHA-256:	153BE77B6A153527243E72E78B12028AB5340ACF7613F5F39D63A17E38D57EB9
SHA-512:	A84A5FBC9AAB5035EB90172A3EC661F0840439B9C600BBC501CD415DA639D1F11ED3FABF6406C127C9D95ED95E9887E652219F2718F13FEB5D6CC4620C049BF4
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f........w.......w................0210....................0100................................ ...........ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...... .......................................................................................X.....c:.8.yG..O7.....b....Y.-...Z.=..........................................................y[...._#.rG=L#..}.\.1.l.c......:..

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	74656
Entropy (8bit):	7.870241511214251
Encrypted:	false
SSDEEP:	1536:q+RMAGW/BHe1frmdiWN0cStTbGmja792T6bifa:jMW5ujmhoTbGmohx
MD5:	F0DC0639B62B0C88A89A6800168376C8
SHA1:	B94CE37BDF5A5D22E0588049B9C28927D774F19E
SHA-256:	B2324A3917DE9B5E8EB70DA9FA5545A93D433EFDDF2FEBB7416C4F01D983EE6E
SHA-512:	228F75149CD0743829F3131E162BAA142B6957F4507416A60E18DA94F5FA65EA7A5521E154BEB005A256C62B9A6B3A2C3B61017884BB2404216578E2595D13A9
Malicious:	false
Reputation:	low
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(.....@..m-X.KV7z....)..=....@\v...(......AaP.k...){O/....Te.}-`....(......(......(......(......(......(......(......(......(......(......(......(......(......i`.?>.~.......{D2......

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	63140
Entropy (8bit):	7.9359465448196955
Encrypted:	false
SSDEEP:	1536:vWwRLGjOTCWDthA+TeQ8bgvPuA9WmB8JJwnKVe8tIBBh7kVObyc:v/qy15ewR8bgXuxeuynKVeG8hkgz
MD5:	E180934640BC82AC3DAB5E6DC5F11882
SHA1:	E03E193224A2EB9866DE46FB0B43D309F69FCDB3
SHA-256:	C0A8F50347DA2FF7BFD4B2839529D11A7CC8884B3E57C39AE4F294605AAE7B36
SHA-512:	79CAA1D1218EF38AE93843293A73E533DA0534CC245EBEFBFB15E1A2430C6E223B40DFE4670B63933C7AC35A1481C83A79E85B9F2BC8B3F7DA35AA5DC72575C9
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................,.....................................................................................................................................

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	72885
Entropy (8bit):	7.951173726269516
Encrypted:	false
SSDEEP:	1536:drEikIQ+bV48wCLZkvy4gFUKc9QgLvtOKrEAph8HYyfP:ZHbK+264gFU4AMKIA+YyX
MD5:	C1B74E46A3E15C510AF3371600E08AB2
SHA1:	433FD56A0475CE06B06147E7E1C308F84203F913
SHA-256:	1C059BEBC2B6AF2605F99D294471C7BBBD4DFA0B195B76497577D04C9F4255A1
SHA-512:	CC70F886291712888470A3A9E17A2B1C7EE143775BA63E0EF4C95863A836489D1FD4DCD784BA0B4D803DA944761D740902F205C1554A2E811D47C87B9E37B208
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/f4b9a830a3be50c7333eaf1836144b26d8b2ee68.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...............................................................................................,....................................................................................................................................

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 780x800, components 3
Category:	dropped
Size (bytes):	151629
Entropy (8bit):	7.98449818695167
Encrypted:	false
SSDEEP:	3072:TtFOUcxG3UfdVS8TaN+ynMQXSWDs7sJ78+XM49+bVA2c:TtE1l4oaNIkS9E78SMk0Vc
MD5:	EBACFD846CFED80CDD0FD3AB340A24ED
SHA1:	169892E31C5879EF1BB781E0097B45E3F7EED300
SHA-256:	63FCD24BE307963422F5D92A2202107AACE3C98CBBE879DCE419323220C749C3
SHA-512:	37F5112BD28AAD4E653ED7672F01C9E1B8657EC3AA37F8767442F531B37A3AFFBDA6F467D66A6471449E6E64A70371C6F67B46EFC54C52645065037BDE08ECC7
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(...........<.......f...i.......p........w.......w......imagery4............0210................................ ...........ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...... ........................................................................................X......../=...fs...XsggY;[9.>...6P.....................................................~..5......y?rN..-A..~.5..x..._...l}..;...`.'...i@......

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64932), with no line terminators
Category:	downloaded
Size (bytes):	961633
Entropy (8bit):	5.737318230809999
Encrypted:	false
SSDEEP:	12288:379vE4GIeCZVj2Qj6s6wvk5rRNc+VH5B7JVTYIh2m/rNI4dQeJYSPUYYaZfbYqoC:8/rNI7eJjPUZaZfbQB9Ql/kZfZoP5aAN
MD5:	0B1BB798279A57416A043993B6168414
SHA1:	485A7C508497A3B656E145F0148923239EA4699D
SHA-256:	5B3878DEB332B8E7BE1EAFF46F261593543D542165D064021140C9C525EFD6A0
SHA-512:	8EC386D1EB7BAE9B28349F2DFE7AA547A4D9CFC6D93D16A89B00F45786E3EA3B1C5988DD31B82453BF9E04670FB62FD562A8BD12B870AA98E675E411444318C3
Malicious:	false
Reputation:	low
URL:	https://static.shopymn.com/liquid/buyer/public/js/lib/index.js?t=20240524155330
Preview:	"use strict";function _defineProperty(e,t,i){return t in e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}$(function(){var e,t;window.NP_ENV.language={en:{btn_add_to_cart:"ADD TO CART",btn_sold_out:"SOLD OUT",btn_unavailable:"Unavailable",btn_buy:"BUY",btn_complete_order:"Complete order",add_selected_to_cart:"ADD SELECTED TO CART",sale_discount:"limited offer",max_inventory:"Maximum quantity available reached.",cart_express:"Calculate Shipping",cart_express_hide:"Hide shipping calculator",menu:"Menu",refresh_recommend:"Don't like these?",save:"Save",reviews:"reviews",order_show:"Show order summary",order_hide:"Hide order summary",valid_email:"Enter a valid email",erro_email:"Wrong email format",subscribe:"Thanks for subscribing",max_255:"maximum is 255 characters",max_40:"maximum is 40 characters",free:"Free",free_shipping:"free shipping",calculated:"Calculated at next step",phone_place:"Phone (Optional)",other_address:"Apartment, suite, etc.",n

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.254165647130566
Encrypted:	false
SSDEEP:	3:dngJviukoESWljGkhbAYn:WVeSW/9
MD5:	6EAD198554C0D08245EF09F90978F247
SHA1:	C53AA12A7A507D43673FDCD5AD4D0DE2E2C68225
SHA-256:	84AE4688965BB1862D333E50E86D9A1BAA9AB463803E9E09D45196339F2F24D3
SHA-512:	B6D709FF4D3EC35609D9ED461395FD3652C2B834399BB533BE5C173302A8EF6D36D822C419373F285E07B5EA85302D6765B771B68433D72FA36DF9F889F27F5B
Malicious:	false
Reputation:	low
URL:	https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fcategories&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591408397&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fcategories&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17
Preview:	data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 655x468, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	28204
Entropy (8bit):	7.991975769005588
Encrypted:	true
SSDEEP:	384:bZioazoB6tQS28QIq6USP9dgB9djt4hcVztLrEv70+hvAyzto3V8wgi4gq:1KyH/SMB9NscVppF8w3
MD5:	1012B69E4ED00700B116A9A830F7E38E
SHA1:	B63FA5E91313F05AF47C8E9887D4195270347A1E
SHA-256:	791EF952F0AE4D08027B30657828C0568C16B10EAE1A7DD2A25EB5D42B0D4E46
SHA-512:	56A5B1BB229E5FFE3C719999CB03E11EEBC71D0B85D62628C7E1D8FCB4E31DF33CD0703AD2B3B236E3FFD9A8762E2DD1E0B0F9F40E7D9723016724BC03BE1AF5
Malicious:	false
Reputation:	low
URL:	"https://img.shopymn.com/uploader/d1000179a6d6aeab89d03ab4e2125ff2.png?x-oss-process=image/interlace,1/format,webp"
Preview:	RIFF$n..WEBPVP8 .n...{.......>m4.G.#&.'W.....gn.7;l.Jx.....}V...y..?..j.]..?7.....v.....;...oV.......S.../..h.6..>.>.?....s...1......o.w.../..T.^~...r.G.2..9.G.~.................'........Z.....@...._...1.g..a..O...t?.........V...6.+R..^...jC....<.Hv]{......c`.!.u.l.V.;......e..yZ...6.+R..^...jC....<.Hv]{......b..}../..ZZ...6.+R..^...jC..j9..q~...L..Q3..z..]{......c`.!.J}'..f..DL..X:.&-aw.uSt.....{......e..yZ..5..`.3":?.E.........\3..z?....b...C....jC....<.Hv]{.......V{r2...'H...T..s....G....da........._.Vx....)..?..`.!.u.l.V<.\|v.Z_.....O...S........hdE.e...1&.k........;S.;...~._.00$..z.>....6.+R.pi.z...0U.....{..g+].......i.aE..W.qSoKW,../&.4..}i.U. ]......M?.R.D...W.. .\|."....#..'....~.(0..^...jC=u.n.m+H....z'......r......jo.,E.&..>]0.?.^2....k...\...=}\!...at.[X..b>..{I.A.........{_Bk?.....\u....\.z.......{........}.e{R.%.E.?<... .uE.....a.p.^3.;...5CZ.HO..>.~..[.%.7....y.Kuf.?.$.{..\..8..JJ..E.....p....G..o..."........`..W;>8.E

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (38243)
Category:	downloaded
Size (bytes):	790959
Entropy (8bit):	5.238265744196168
Encrypted:	false
SSDEEP:	24576:Evzo+BwUtykxDpWNYQhrKtd7y1D8LMZ0//R6lR2AytJCKBtkTMvoLgAjAz0vtggE:Evzo+BwUtykxDpWNYQhrKtd7y1D8LMZy
MD5:	9F74CD7F00F10132615B538EB58C3F46
SHA1:	BA58097A03E36CAB77577D6204F54DB85FFC259B
SHA-256:	A127F8572506CFC673F24B2541B0AD61D4FF4253AA760C8A56CCBFCC52815D67
SHA-512:	D5F456E8189C8184DDB684166F421DB6A164738199ADDF4D706FE618925CA4AB549268C4111E915574264D3A8523294FD57780BE6DD08154AEEFFA263B1002D7
Malicious:	false
Reputation:	low
URL:	https://www.cravob.com/products?handler=whiskys
Preview:	. . <!DOCTYPE html>.<html lang="en" class="general">.<head>. <meta charset="UTF-8">. <meta name="keywords" content="Amazon">.. <title>Whiskys&Vinho-Amazon</title>. <meta name="description" content="">.. . <link rel="icon" href="data:image/gif;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVQImWNgYGBgAAAABQABh6FO1AAAAABJRU5ErkJggg==" type="image/x-icon">. . <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0">.<meta name="applicable-device" content="mobile">.<meta name="apple-mobile-web-app-capable" content="yes" />.<meta name="apple-mobile-web-app-status-bar-style" cosntent="black-translucent" />.<meta name="format-detection" content="telephone=no" />.<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />.<meta name="renderer" content="webkit" />.<meta name="aplus-terminal" content="1" />.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x1000, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	46084
Entropy (8bit):	7.983802592087675
Encrypted:	false
SSDEEP:	768:5IvjRwqxIOmX0xn53kakHIlPuISlcQ3YeZWn+BZCFvYMLcG6rlMUdQJa/jU:5IrRwqXkC53MolEj3dZWNvYCclDdQb
MD5:	1DC32F133A076DFA8649F1487C888BCE
SHA1:	8F9BE111035A60F3B27A12B7D9C63CD7ECF5385E
SHA-256:	EB2490A8C9FBA8CC5D8B1DA1B0D4E2A979DE76EAC53E22D44C3C942F34092129
SHA-512:	0F9CD665E0215BD73E74640D6FA8FF34B02413E836CC0D01515A4CB76F1E14DDF3434BCCD66E8EEBB0242A2A6EB52C4B58E42AA362E6DDDDAF694C27D8275DF9
Malicious:	false
Reputation:	low
URL:	"https://img.shopymn.com/uploader/30a95dee1357c4c153be7b33d4c6c34e.png?x-oss-process=image/interlace,1/format,webp"
Preview:	RIFF....WEBPVP8 ........x...>m4.I$".$!1i0...in..Y.c....._.R.....g..=..x..W..........kg...........C.#..8o.g..R...,...B..t..?..-.~..Z....>..=.9P.As..n..d......0....?....W..p.r..\|.b_.<..M.o._......w.+.../`........../.c.<_..2.o.....W.O.x....'.?........I.......................A.AA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PP.3.1c?.......6.:...j...6.:...j...6.:...&...7x.p...5..[..1..HB.wq3..'.j.g../..l....yAA.PPG......yAA.PPG......yAA.PP0I......jy...Y......K..y.,x.U.Q8.o.h.S'+..j...6.:...j...6.:...j...6.......N.n(..-G~.h.?S.x0xff...a...I..S_Y.......z>.L...}.w<.....2..6.:...j..

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1200x772, components 3
Category:	dropped
Size (bytes):	359412
Entropy (8bit):	7.96860847917344
Encrypted:	false
SSDEEP:	6144:o+N8BwGq3uARyGDbJklv+hSRdP7HTO3/gQ8KhwI4t7dW+ZEF0kw1FNP9bYBx2+:juwTjcGD12v+hKP7C3/qKhWti0kwh9R+
MD5:	56A28C0F4D3B9F422DA6E7A955BB8097
SHA1:	314830C977B1903BE415CC4FCD875C4B1C88AE40
SHA-256:	0CF2F206BD2F459096DE691633EE6BB88361EE84DF735528BA4AB03644B8E39B
SHA-512:	330B0553AFD423A56FEB8A7A2FD52E2B595B4BFD6AF3F878644CBA0322DE6F218172C796BE10A3946A148C49F5D2D8DB55D078A275E0088335A124570CEEBC0C
Malicious:	false
Reputation:	low
Preview:	.....@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C............................................................................".........................................V..........................!..1A."Qa2q..#B...Rb...$3r.C.....4S...%Tcs.&D.5..6...EFUd..................................E........................!1.AQa."q.......2..#...BR3.$Cbr.....S..4D..............?..D..d.\'.84<=.~c..5.Q..ab7...

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 560 x 560, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6788
Entropy (8bit):	5.038317297060852
Encrypted:	false
SSDEEP:	192:QpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOj:v
MD5:	4CEBE560ED4EE509DBB64D1972403039
SHA1:	EFDD1FB85E49734B2DF45C3FD045152803839867
SHA-256:	1648D9892C801E1F6253943DD752D2851B1724A366A4AD01AC4B5C7E4820285E
SHA-512:	259024884A42A00B1900C3D95867E47FAFB7A85F350291E299AAD5CEE425C35229C439BE3C41B030857003B18C08870B7D29764F4BD618C328B91A241D994EEE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......Qo....sRGB........>IDATx...... ..1`.q...-Nr'..>.g..G..........PVQ.. @...._....... @.@N...U&0..... `....... @ '`..........0`....... ..0`r..L.......0~..........0...&@.......?@..........\e.. @....... @.....r..L.2... @....... @....9..&W..... @....... @........L`.... @....... @.@N...U&0..... `....... @ '`..........0`....... ..0`r..L.......0~..........0...&@.......?@..........\e.. @....... @.....r..L.2... @....... @....9..&W..... @....... @........L`.... @....... @.@N...U&0..... `....... @ '`..........0`....... ..0`r..L.......0~..........0...&@.......?@..........\e.. @....... @.....r..L.2... @....... @....9..&W..... @....... @........L`.... @....... @.@N...U&0..... `....... @ '`..........0`....... ..0`r..L.......0~..........0...&@.......?@..........\e.. @....... @.....r..L.2... @....... @....9..&W..... @....... @........L`.... @....... @.@N...U&0..... `....... @ '`..*........0`....... ..0`r..L.......0~..........0...&@.......?@..........\e.. @....... @.....r

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 786, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1089898
Entropy (8bit):	7.995254850395399
Encrypted:	true
SSDEEP:	24576:H+FQ4tqm/vFOR7dnH5OCxEV3valKtJc2BTjMLBZBFcnLJ:eBZA5nZeOKtJXTjMLvBFo
MD5:	4613FD07C2164988EF0C8084FF5AD630
SHA1:	C3B0368B039717A9C1FF1C85F3900C238404E113
SHA-256:	682B6FFD9913CD97130FE8EDA54CAFCF954E2CAF9252549F518B2851F349CAAE
SHA-512:	97BEB77C60EB014A15BBCE30035E080D593C45997FE37FCFCBDBE080D076F2E1FF9EF91A57369FA4A84285A8CFBADF46601A24DA5757B35C41B89AAAA6E4F9A4
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/a70350d2dda8813e43ac84a691f0a381847dfb75.png
Preview:	.PNG........IHDR....................iCCPicc....c``\...[.$....WR........~...A...A..21...1 ...'.v...D_....@..LI-Nf``......\PT...........```.)...b``....!...;...V..............NBbC....d..Ld.$...A.R.....O2'.N....&`/.(m..Qs....$7......U...g..._{..K...KR+J@.....@a..6...E..._...' .f20loe`....SY........<...M...Ft....pHYs...........~... .IDATx..Y.dWz....k.W.......pf@..z(S.......aK.0m?8.(G..'..+M.L.v(..(.,RA. C..Y8.`...@..]...]...Y.U........EdeU..w..?...>...p8.....u......_.o...q...p\|..{..{..L}.....f.9`....N.....e........X..._.v....R.h....?..U...p8.....#9....Gn...j1...B-.'b{....f.....-..2....%.Oj........B}.......p8......An".....6.wP...`.X..z......L.l..+(.o+...?.`.`........o........^VO}./.N.;.....p8...........D..:.=...S....u.W....".okE...,X...."...(1F...9........1.#.w......z.Q.].z..........p8.....p\|t>.f.G.v..j.=[G..k.}l*.=?%.[....J..[."....1"e%.1F..%.....+e.t....qF#Ni.c..1..F.1.7..6....d.O..x..TQ...X.........?..>.....i..N.;.....p8..........t....Gr..O....hw.C

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1000x727, components 3
Category:	downloaded
Size (bytes):	237429
Entropy (8bit):	7.982137813852492
Encrypted:	false
SSDEEP:	6144:yeoN41HKD44zdtzee3mxCU0j+qTjYAob7LhaVAuh:y4MLtuJiTvcsf
MD5:	5FE0C2A3A41EB01442554B277163AB10
SHA1:	B9C59367254976E134491C99B9703CDF743A5F86
SHA-256:	0232C208BE9C47F9F38675D7EC141F34A973899CA3395D408E24A9AE462977E6
SHA-512:	57BF299AB50A3B40E4B2F79A331C30372242CCD536363A27C2A3902467D12A6062081B99101336F5D432E72ECA6EE61F1AF01E0D454E3ABDEC02D8E71AE541BB
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/d0c5abae35b7b6102f6bd1205ec204e28371aba7.jpeg
Preview:	....."Exif..II*...........................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$.........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......................7....................................................................,........................................................................<.P...O..AU.....:h7>.1..b...%..%v.5X...B...\|j..............................................................................X'...A.$3..Y.\|.E..Z...^........:......BH`.(.SW.W.\|.:4............................................

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	59732
Entropy (8bit):	7.939009752403565
Encrypted:	false
SSDEEP:	1536:yp5KM4EAaT7w+PsLPzN4fnaoqRrxmoK2jSCKejM55:ypgORT0+EDmnWRXSCKr
MD5:	82275CDA9258A0BCE6E339F5824614B2
SHA1:	4399FD903886507E12E6DF1C858A7B61B091F69B
SHA-256:	14ACAB9A446D4F78092E485EA1961E9F256235EBA3D7D3E5A3626208A8353362
SHA-512:	596D6E40442F8159696CF357E2CF541CC8451072F7084686D2CDFC6A6AF69AD6A5D2D448627F08FCBCB1EE108BBF38D17283662FAAE886B0F5F04CAAEA298F92
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/3c12228191e810dc3648fb860aea6101fc6a54ad.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}....................................................................................................................................................................................................................................

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	20541
Entropy (8bit):	5.300929575826717
Encrypted:	false
SSDEEP:	384:sCJSwM+mEAWlmUABmXAwmAAYmuABmSABmqABmpAwm3ABmwABmygABm6ABmwbcsIK:so/MPtWU9Yw5pxbY/Y3YO5QYZYqYHYkX
MD5:	DFCC280BAE7E368C9D826A2A1718F65D
SHA1:	EAD29DCF86EB9457E780240B45D3959011B6D62F
SHA-256:	0FCA7A756F4DD450D30B2D599A6D98C2B07CB252FC4F4197F9401D4F0DD11BA9
SHA-512:	034C8359446E8561285194F0751F2CF68BF29E486C4590029F07674A06FD91D938B838FD94E29D737FEAEEE5E262EE20F41AF2DD95AC12E26EEFD3C32500E14B
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/758694462259787?v=2.9.156&r=stable&domain=www.cravob.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C217%2C152%2C110%2C133%2C126%2C114
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 600x314, components 3
Category:	downloaded
Size (bytes):	30022
Entropy (8bit):	7.928385234427563
Encrypted:	false
SSDEEP:	768:GmYmL24qloKg0KkXwaWJhMaWD7AUF4cPQmGFODxXVQ:XH/aW7yAImgXVQ
MD5:	E8879606AB5E311C76F9C443F9EC72DF
SHA1:	9D65FADC09FE2BFB93D3A8BE89E7AA3AC2197E2D
SHA-256:	15241B4884F56CC77F24E1688DA95878D21FD3492D053FF437A38F2F1F0919CA
SHA-512:	EF06B67D784DF552C4F0901FCEAB3DB5CAAD49F2D6B330716FBEC78BB387CCAF516C8CEE7421E2EFDE9D6BB916BAC5714E581AE7FC569388383723A3B52D1763
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/376b6d593a22201f92af324e34509a8bfb1306f0.webp
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......8c......8c................0210....................0100....................X...........:...........ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}......:.X...........................................................................................................................................................................g.1..v.^..8..(.<.Y.........,bX..T....<.kBx..

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	4.319548827786958
Encrypted:	false
SSDEEP:	3:YGKAAuWsioeKsn:YGKAL6BKs
MD5:	57902C4863B1D20A15B21932CDC2EDF2
SHA1:	C78D733B5B14E939353C99FFB46D6F88CF5CD13A
SHA-256:	1D186F6A016AFBE343AFC52A41FFCB93A8ADBC4CDA566B541578AAD5862B5A1F
SHA-512:	83036A3AA7E5F796CD0F02AD4BD3A65E538C00DA92DE360E6AB9BF1B8CA4C1400A5702C45171233706F1CE057AF964BE29DD2B2482DDEE5C14C6CE5AF563AE2E
Malicious:	false
Reputation:	low
Preview:	{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:57:46"}

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	10501
Entropy (8bit):	4.389831986838369
Encrypted:	false
SSDEEP:	192:U5n5LZAWbQaODhRk9p8iUrjZ6vRnPvCtEcrzMV:U5n5yWbQaRr8iUHkNWEcru
MD5:	3A8B0094025FCC75887BA44FA896A347
SHA1:	106909876829BE53FB6D3339EDF54138E9731D9F
SHA-256:	43D0A062DF3ECCF50CF81F80EE88B7D37D7CCD3953A06E3B000E888CA11D2194
SHA-512:	9E2CC722EA3A00E802E2C02DBDFDD27E9434178EDE44A673A12AF79B69FB81E16792027B38EF09F5C07E9560667FCC58EBEA5C5B79BEDA50B71B9164FE39BE0E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="80px" height="41px" viewBox="0 0 80 41" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>American express1</title>. <defs>. <polygon id="path-1" points="3 0.0558640385 3 21.3390995 54.9776351 21.3390995 54.9776351 0.0558640385"></polygon>. <polygon id="path-3" points="42.0925898 6.16238135 42.0925898 0.0385269231 0.331331538 0.0385269231 0.331331538 6.16238135"></polygon>. </defs>. <g id="..-......" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="amer1" transform="translate(-1.000000, -0.500000)">. <rect id=".." fill="#0070D6" x="0" y="0" width="82" height="42"></rect>. <g id=".." transform="translate(13.000000, 9.298077)">. <g id="..-12" transform="translate(0.000000, 0.701923)">. <g id="Clipped">. <mask id="mask-2" fill="

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	69252
Entropy (8bit):	7.948820488178213
Encrypted:	false
SSDEEP:	1536:y5YLyl1Y8Ebn5C/XpearoxlkqKN1JA7n8S147:y+mlOn2gGc2ZN4F12
MD5:	7531EFBDEEB7AB71F8ED241D24CC3664
SHA1:	81289189FC6D6C4D57028AB419C85A5011810B20
SHA-256:	30923059B7B2C9A9299CB062F69BC41B4E9ABCA036A3A57B8D0F3BFD603C7A00
SHA-512:	222C3AA957F7A5DE62BB727EA70B330A6B4587700934BABDCE2F0006255F6BD0116D78E10269A44AFC935FE2F0F5802D0AE4FD4ABE11B2DA0D6FED53DD67E234
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/2a5cbac9076abe2e5d22faf36a87f5248a3168ee.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}....................................................................................................................................................................................................................................

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1520, components 3
Category:	downloaded
Size (bytes):	332858
Entropy (8bit):	7.978678906342737
Encrypted:	false
SSDEEP:	6144:sjQoD2dM63kGkCbpsNthLFduxgPpdvCuu13sf1vIsyVtttFtbz+glU7hvpci2Glc:sjPMkG5psftFcMdaXVsNvIsOrF14vpc/
MD5:	95E1999836C8005DD0D1451FF2160925
SHA1:	66A69F09D6D94B663925DC78977B2D02A8D31FA3
SHA-256:	83C4F4F940D3D59E58C7CAE299EFC978F9AABA83609085EF9C7C038F4EEB0D9F
SHA-512:	B4A2A1BBE2DC3F7C2A8C23277EDE39DEB0A11389D8EE566C55F472EDDB62844B6E8A9F32663676FC4DEAB78D201787D99ABD64290E984FFEB9C1136ECD36F715
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/c1fb5ccd272927fa746cf0753d8ae24bd27c6ff1.jpeg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}...........!..........7....................................................................,..............................Y.5.t.. 5.. `...z.@.........................................Q.kf..&....f...v...L\..a.Z.+9y.M.%...........................................{[H.i5.v..t.k.O...2.\|..n5%......L..kP.................................$F.k..k...k..........f\;)g...S...:K7"Er..$_.`.K..{..T..............................._5.p.u..u.5.x...........I...W/..T..O...X..T.eM.#%.D...&^.,...;/V.............................B..k..k...k..D.^.+3................u....Y...?.....X...s."..G.#)6M....uW...Y.>.:.@.......................k..k...&..f...6*.......g.l...v>"...6.m.zK.[./\|.t....&"ZbY.e.....S8.),cG.pF..UcFF1..K...v-..X.. ........d....................D..k..kl..k..F..2..v%.F...o.k..4....:F.)..9n^....y.~.2;.....[.l.....u....Mn+

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 466x500, components 3
Category:	dropped
Size (bytes):	197919
Entropy (8bit):	7.903146223854539
Encrypted:	false
SSDEEP:	3072:Q7dWJeN1StNBlMMOYYEe3jojmcg+FvX22ZvvUXin6xOWydEENMcqgH20:Q0JeN1uDljEF+FOHOnWxESc9HL
MD5:	CD8967502776BB67C468974DEE5200D8
SHA1:	A8E84DA834228F88B555E8BB7E76C49B964244D2
SHA-256:	15185585CFE263E1F74FD1A24DC3CCF672FBC3C0F07CC544AAC4C11D1EF72679
SHA-512:	8FE42D32E78582F3AFCF454AA9F44994E499E339A83E56008D3C70855153D9B1782B1B8E7E5C126EA2F515DCB70F16AD6AB4154D62AA480426F05825FE0B8227
Malicious:	false
Reputation:	low
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(....?.o.,O.?.E.......[x...z^..H.+-3L....M&..?.......u.[.+x'......3..W..z.=.~...K&.."....^M..j.m.w..\|.k$..~:.]O..\|T..i..v.+.U..mcP..O.Y.:....4.]#..0G.8..X`...3.L......YVU.GS[...^.]6...G.>~V.w{u.1...'.>\|U.p.......8.....>^P....\.....W[(...$.o.V....m.u ....."....)q.\|P...D..8.&x.....G'.$Q.V`Ym.y.[......Qz(..g..~.......^..?..#+.G.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	20541
Entropy (8bit):	5.289528232546625
Encrypted:	false
SSDEEP:	384:sCJSwM+mEAWlmUABmXAwmAAYmuABmSABmqABmpAwm3ABmwABmygABm6ABmw7maiC:so/MPtWU9Yw5pxbY/Y3YO5QYZYqYHYMp
MD5:	E32CBBBBA71249BCA1266F5CE24823A7
SHA1:	EC646D6D5733C7820DF843005FC92A6950D5DB0E
SHA-256:	83EADD10D07F45E954FC677AE0379A6BAAB8D620D04FC8B544F3B5D76EFB23A0
SHA-512:	6FDFC2479AC4EA04178F87E7A2B7473AF23A2F79ED55B6B6EDBD405184AD424A2E76885F005FB2EA950223770E346C0D09D8B6168E9C0819986EE3CA71FD6933
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/270010499437007?v=2.9.156&r=stable&domain=www.cravob.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C217%2C152%2C110%2C133%2C126%2C114
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	53066
Entropy (8bit):	7.915974975705774
Encrypted:	false
SSDEEP:	1536:9iQyp8ayXFfkVSYrtLO5aLoAy6dbzOk5wHxm1pdgrjq:9nzTFkrrtqIJd/Ou6YrE2
MD5:	A152CAB58C6A09C097B580E900C01102
SHA1:	45E80A7460FA9B7FB2EAD6B8F8FEC0DA1D37520E
SHA-256:	BAB6CCACE363204D9CC2C6D3808A2AA6C79D4C2A677EDF3CC4DC380A646C0EEE
SHA-512:	C66E48584DF904A161C9774080A3B2221C9DF99F56958016D1A836A9A27A2CE746EF954C2B1EF608BADF56F5F0FA4571A0F9EF580CB17C0E054FCC39BEE51FD4
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/59421ea514b195d00d8d4faae4128f7a0cc7ea40.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}....................................................................................................................................................................................................................................

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	52027
Entropy (8bit):	7.922233238929734
Encrypted:	false
SSDEEP:	768:hWVOrpFOoZXaqArmIKKshqwGEgfJRcoCgiexzUkeV04BLDvqqb5k8jBnL3S1y:hWV60qArOswB/2bkPLTV5kWBnLOy
MD5:	F36814FEA8ED6CBF7ED14BD52CF8E771
SHA1:	B891A4E15968DCAE107DF2687B8B61CFC1D61608
SHA-256:	43D0A8A17459D5230828EB63ED17F6C804B00D797B09C054CA969A7BFF8E2C9D
SHA-512:	492B2C88174DCA4D3286EE6457ECE4C337E0F577600F319396BF67D1051CD48344D6C61E9AD01750EFF33FAE44F7F5821D5148A0B9983F899293D771D2F91146
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/e11eff5309c535edce9d8cc35f9d4811c576d79d.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................X.....................................................................................................................................

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	86419
Entropy (8bit):	7.9580158488323525
Encrypted:	false
SSDEEP:	1536:47lwdhMiQLK1p6aST7tFT64eVVHjbFltBtfCWH5qc82zsVX5Me0JD182:5qK1p6ljBeVVDzTtfFItXVyf
MD5:	6899D9A1FFB0BD43EA36F5E6D44DE5D0
SHA1:	761C62FD5B3DE2D6C91EEB43A3A0F116289F07B7
SHA-256:	564F22FB3E8B1179145D73E4C5671BB2290C8BA6F998A9A8132E2CA91AB5EBD3
SHA-512:	0211C5258A72565802E3841CE43BCD6599ACA094E5D469FD4126446FCC112D463930FBC29A8458D8D0D5951F19786727D94511CA8F4DA7B7375AFB87AA2FE0DC
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/19bbf7767618883b3fc56e493991a5bca17afdc6.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................,.....................................................................................................................................

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 1300x1300, components 3
Category:	dropped
Size (bytes):	221916
Entropy (8bit):	7.952299649475171
Encrypted:	false
SSDEEP:	6144:RzwvT0cBVpZyx/MFGmi4fEuAIY2eq/wKGDIhtNK1PN:+vgczpZyZmiiOPHqdcqvKv
MD5:	55D0DFD5C2C7FB8D7CC18DC1398F966E
SHA1:	19CF77F3CCCE7D1137BAD9C2D69F25BCDD98974D
SHA-256:	3F2DDCE76EB9673A841EA20A33042F0E8744F6AA02D3BB6B48E64C74177DB9E9
SHA-512:	76D1726430BA915BA2CE2208993ABFE5DD035A359E8BA49C91F42334883BABA392D35474F2321BF2C1392045F437EA7D21B8BB6FE29BD7784E64CBB1D0CC64FB
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(...........<.......f...i.......p........w.......w......imagery4............0210............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...............................................................................................,..................................................................................................................................................

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (37627)
Category:	downloaded
Size (bytes):	787040
Entropy (8bit):	5.246974097805589
Encrypted:	false
SSDEEP:	24576:Nvzo+BwUtykxDpWNYQhrKtd7y1D8LMZ0//R6lR2AytJCKBtkTMvoLgAjAz0vtgga:Nvzo+BwUtykxDpWNYQhrKtd7y1D8LMZQ
MD5:	4E9C5B0B011182F66652454BF46C678C
SHA1:	E7C1C769472E7010A398A756BDEC586B433A3826
SHA-256:	9D3348B50CF7B1991F5BB9A199D39E99300C17FA04F2B4284CF28B083EA5DC0F
SHA-512:	A300DF6DD2F75D89F239A07B194D558B57677E8CB1FB16C11AB676AE3C366D03565BDD52365F1A598F41C2B418EAA5694DAF8488B43DDCA2264C412BA7420411
Malicious:	false
Reputation:	low
URL:	https://www.cravob.com/products?handler=asics
Preview:	. . <!DOCTYPE html>.<html lang="en" class="general">.<head>. <meta charset="UTF-8">. <meta name="keywords" content="Amazon">.. <title>ASICS-Amazon</title>. <meta name="description" content="Loucura na libera ccedil atilde o de tamanhos Apenas 500 pares de t ecirc nis dispon iacute veis Voc ecirc pode devolver o item dentro de 30 dias se n atilde o estiver satisfeito com ele Compre com confian ccedil a">.. . <link rel="icon" href="data:image/gif;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVQImWNgYGBgAAAABQABh6FO1AAAAABJRU5ErkJggg==" type="image/x-icon">. . <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0">.<meta name="applicable-device" content="mobile">.<meta name="apple-mobile-web-app-capable" content="yes" />.<meta name="apple-mobile-web-app-status-bar-style" cosntent="black-translucent" />.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5398
Entropy (8bit):	4.016381936182486
Encrypted:	false
SSDEEP:	96:hsABW0QjYL9YRXyEqStGuOsZBcips1QwdZPJH8j28CBSSOP52dTI3qzjVJATI3G:hsAgVjY5STqSUuOsEic7dZhy0o58iujs
MD5:	979EC0C7105A76D6A4D330CEA22C5F2A
SHA1:	02FDDFCFC3A798D93F0BFF42FA33754857B13417
SHA-256:	A9D361C2B4EC9C3C58741ADB19FAF93E10CC68AC6717E612661EB229651A8C75
SHA-512:	436E272A7B7FEE959DF571513BA8496CECE98FDBAB4E52321D4125C015ED736522962F3F6A42491C7E65DAB91B1EBE3077E538AD484643C91993CED25CFCA846
Malicious:	false
Reputation:	low
Preview:	<svg width="105" height="24" viewBox="0 0 105 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M78.3441 2.5H72.1656C71.75 2.5 71.3898 2.80443 71.3067 3.21956L68.8132 19.0222C68.7578 19.3266 69.0071 19.6034 69.3119 19.6034H72.4704C72.7751 19.6034 73.0245 19.382 73.0522 19.1052L73.7726 14.6218C73.828 14.2067 74.1881 13.9023 74.6314 13.9023H76.5709C80.6437 13.9023 82.971 11.9373 83.5805 8.03508C83.8576 6.34688 83.5805 4.99079 82.8047 4.04982C81.9735 3.02583 80.422 2.5 78.3441 2.5ZM79.0644 8.25648C78.7319 10.4705 77.0419 10.4705 75.4072 10.4705H74.4652L75.1302 6.34688C75.1579 6.0978 75.3795 5.90408 75.6289 5.90408H76.0445C77.1527 5.90408 78.2055 5.90407 78.7596 6.54061C79.0921 6.92806 79.1752 7.48157 79.0644 8.25648Z" fill="#009CDE"/>.<path d="M34.3747 2.5H28.1962C27.7807 2.5 27.4205 2.80443 27.3374 3.21956L24.8438 19.0222C24.7884 19.3267 25.0378 19.6034 25.3425 19.6034H28.2794C28.695 19.6034 29.0551 19.299 29.1383 18.8838L29.8032 14.6218C29.8586 14.2067 30.2188 13.9023 30.6621

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 536, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	780254
Entropy (8bit):	7.987172213928215
Encrypted:	false
SSDEEP:	12288:rlxe5Rx6NwfUjZODLrjd3woF/ARJ7PyzRXtQUhF36gj5q5RnyS+or2y77j:mU2fUjZODPxgQARJ7+ttnFjindWaj
MD5:	F8E8B767920704A4B4B9EE4AD8138450
SHA1:	CA5306728335B6D5774BE424FC12317212D7941F
SHA-256:	60B001DDED63234152114B73B5275E6A1A812040C9D71D67426A49999B019412
SHA-512:	FBED8645A67958B1043B6B07832E7BAA40B2010F7EFC295AF504F4B74832665D92C167D282EC12EC80250B08FC94E2BA85A24958E2FC937D97595318186DC148
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/5d20048868877141ba3fb9ce2a33ade5.png
Preview:	.PNG........IHDR.............w..H....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..uxTY.......+....&..pwww.....i7...ww.vy....K.=.>..s.{...1..#..A&EB.....J.1G.T...e...9........{......=.F=.s2_.n....c.....I..8........o.X..M.w.h.._+..]=./6.(.{..[^..\|.j<...u...xF..Qo.f..c..7..E..........5....0......S.zx.h{t.t.<.s.zt..3.o.{......p......^.B..p..[...q....<\|.....Q?<.....\-...^+....^(..x#.?...?....~../6F...w...q.B...[......p..".L...Z.c....=.6.Ll.:.6F..SE..J.....?.../6...4./.u....r..........T.16F...Ll.f....ob<Y..m....g..[...X.V...bc.."...I..8...:x.w..#..<,..x.->.c.#6.(y.......a.eXdW..b..(a.]...fb.....c..Wc.].....U,..U..X..DF.,B.xdW...Ld..`.Y.yL..95..T...mS..S...`s...T..B..Ev..SP.Bpgct.9-.."..6...Q.1:.fb.4....e...c.L.x{+.....E.....Ul.3....Gpgz1rY.."..G...1X;bc....^......._.Ev.........u.Hn.....K+..Et.4..HdW.H..FV...b.&...u....]E".3.}...g-.1......S..c&.M.lN.......S%.....UlLAY..........Y...X.w&..u...L,.....^.\.......p.....ek}.........^.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 450, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	602955
Entropy (8bit):	7.995297591802718
Encrypted:	true
SSDEEP:	12288:7Tj30onheH1q5zEzgS/q1SXkfONmHT4MoDY+XLLy4vfBpc4/GoMPCo:7HkRMCzbglO6cMALXLm4vc4//yz
MD5:	8670DEB28F6AC1AE7645432184B9A051
SHA1:	BBA265F9A3E47065ED13A391836FC3A60FA334A7
SHA-256:	7E822C3BF7FC308E88B68E0F30148180943989D7134DF041B287264FF61EEE2F
SHA-512:	F58D74E8074771BFA4CA755D351E208133762E5C11EABAA1876224BF5A40AF9B10D5D4E59C76C62C395F9BC906CF29550294FD75CA11BFE203148B37190EC5C6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...........:.....sRGB.........gAMA......a...2.IDATx.\zY.%.u^.........3.H\`J"..`X..C..,...z4`?...X.2.E.._...!...!...=.9..fo....5.X.....(.....'...D....WRD.k...h....\|s/.?`\1.g.i5g.7.......l..qvr.^......VYW.u.h..\|].GO.O_<.s.V.G.......?.................l..M&..?.....O...K..v..........'.S)4Wr8.x..s.b..........n.^?...?...p...?..)......x<...j..po...h.^Y.........\|v.[.+.:....xU5...4...:.r.,.$I...q...}p...w.y{:.GZ...\|....g.F:1..5M.......>.Y.k......<.e'..^....5M...;.Xa.\|...8S...:O....+m.^/.MU..1.[.u{...M.,..\0..$.<m].Y.}#.:V&...M....)...1Hh..JtBz......4&p....0....t%4.svy..j.{.;.Y..O.n..)M..(.....Y'%..ha...Y..8.:..p.PU.s.~....<.2.(...RJ.....h.n.uY...s..\....K..&....9.7k=.'......$.G.. ..j.L....h......{.}.z]..0h.......q/..1..m.@k..T..H......T.1.E......+4!!.um...;RZ.....8AX=}....k..]...X..H.T...\|v\|...>.:\.b.2.F.OY.c.+.7m+b.z^...%CU.U6.;..yz....w...;_p...h\(Y.....yQ.....u.....?...\|.(....(...u.*M....._....=.Yf...w.._..

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 655x468, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	27232
Entropy (8bit):	7.991209520808278
Encrypted:	true
SSDEEP:	768:l3byzSQnoFJZcA1a43iqABSyDNTz/X0WX7ghnxl75:lryzLYJaA1a43iFgwNPs+8nR
MD5:	B538F42C71870EB58A10D6C4DD82A0DB
SHA1:	90DD7E286FC541BF945CE3EC4AB5475C0ECE14EB
SHA-256:	43E8FD93A6A2C898C7BDC96836F13636968209E778A0A33EDBFE3DE6A2EEDEDC
SHA-512:	6FEC5241ABCC413B3E4686E1098614CA8993FBC6DC9E2813E6B3E8F637B350A5BF6B0C3085D30756FFF2E07A870B5D7ACCAF6506D669CAF94C0C48C3B8CF922F
Malicious:	false
Reputation:	low
Preview:	RIFFXj..WEBPVP8 Lj...r.......>m4.H$#"!&u...gn.kZ...V.A........}...x.bR......$....._.......=..Z.....oV..=v.........W.O....=R.K.5...G......S...q>..\^...>..F.i.....>..G.e.....1..'....o..e..._..s........._.~_......Z........`..~.?.y6........w.......s..j.{...W........6.&...y.q6.7....y..m\M....j.m^ow.W.j.{...W........6.&...y.q6.7....y..l;.e...Q......4.8.W........6.&__.E.MY.Ss...xF..1....W.j.{...W....c...[.....r.B....o..j...y....p...y.q6.7..f.&.k....Vx.am..........V...CI..".....BwV......y.q6.7...........gl....>....\|H...0..j.$U....".-...Y..*xV..9....W.j.{.......45....i).....r.D..&.<...70.sZH.....0.. ..K..orD.PyV...A./..aK..(.8.m^ow.W.g...'..zT.X......=..-.....}.`.k...)c.....'.....[Cs.....R1.`hn.T..>..rC....;...y..m\L....z.[.N.....+.\..b/..^.......:.q.......pM>..U..RC.?.#...]SvG.&..v0#.s..+..`.F.2....ki.._.`..W.j.{..=..k$v.......T.b.EJ.R...w.MiY_m....V....uD+B.P/5......r....y....P..r<.^..h6.B....Pg.>.l..../+.HHW...;...3.....j.....(I.....%...!.d

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 334x500, components 3
Category:	downloaded
Size (bytes):	186640
Entropy (8bit):	7.911571827123798
Encrypted:	false
SSDEEP:	3072:5EkdnzNxUIy8JXxIK5JX3SMutGe8sNA7p+f94HkdLxeHUeWPXCthk5TAArkghEr7:ykdnzUwJXxIK5JSMeGqNAt5kFxKWPmhv
MD5:	8DE30F78232F3F10F2B1B9259DA33D75
SHA1:	C4FDB4EFD1DD8B403E92EA840EF1134A8984C7E6
SHA-256:	A758EFCCBB1AF7174B69BE20D1D404278A5F892CC7A6A87E79A8BDBB8A91E6A8
SHA-512:	386672B6E28FAFDD4017430208BC986AEC60D6F521B54A1EB6E6B55D9247AEA78761651DF0B5D90F5F6A3BC255EB3DA9D6525B6621ED8E0D8DC1ED4BBB94BA2C
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/0abbbe77281ef379f1a927125224b50c.jpg
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................N...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..o.c....5\|+.7..f}....5..5M#.)...m...s..l.7Z}.!..n..]F......$a.Z.Jji..w..7._....<$..o.M.5z..S./."..m.o.........u...J...Mo..3.k{..dd.(....%...f..b.H...).P.,]....}#....n.W(......6.k[j.}..mY...........\|....5.".-.....v&.{V.... .......a3.R6X.o,.ws.K$N......v.I..{.t....E..$.....C.(...1.4.\|3.?.,..:TWV.....E.XfA....9._.8O.K.ZI..G

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	48258
Entropy (8bit):	7.996042957538623
Encrypted:	true
SSDEEP:	768:jm9ZoZxgD1mGRhxvR6n//Wwd+5ekbomIRqpLJAPJX28xGssshxoFqQ0cbYNeF:i9ZoNGRhx5gWwd+5eSIKGxxQLQTYF
MD5:	F62E88A18B0CA920CBF1C3AF3FAD3359
SHA1:	12DCE0B0FBB33F8BF5CFC5110182B7D61D586DB7
SHA-256:	263810D5964CA3F8739DC09D2394075865527DCE4939F7B2F4DCFDE7F8028B53
SHA-512:	0160C01279B9EE8B50FD71A21554908960CA8DEE2887096A8C7B14B4A2D7E696470EB868C1F6DC62AF14023AA554903209ED65C4FD4F4A9ECDBB35E106C31A97
Malicious:	false
Reputation:	low
Preview:	RIFFz...WEBPVP8 n....%.......>m..F$"..+s. ...cn.J........z..=......w..........u.=fn....N.o....@T.\|..o.?.?........~.=.'.'........z.....?....z.....?'.....i...'......t......._..........=.=..'.?.?......w............W.#.'.....\|(?-.S...........4>b...S...;./.....?.............?...?..R.t..!..o._..D3...L3 }.].0...+....F1.$L........oG9.9..........=..>....y..JfZi...+..Si..h.b...r...Ta.~t....C.....i..]..\|...G...ejDy..H.S.W.....t.S....U.%..XG.fq.(Q.?.mi../.).Y........o.~m...-..[+K,ry..\.id..6..s.N.Q.E..Z..D...$..x...!$H.....'V..b.cwS....w.y6.s..$......y.....o....J.o0...U..RI..F...a..i.p5.>...7N.,.7.]$z.3.kX.....q..wh....a.oP....h6.'....:..B.4L..\|.Ho......3".....#_a....f..;.rD.. ..........Y...Og..-;E.wdr.i.p.^j^OS.......@6z.C%...bn...?{+$......4_X.wJ...jqwi3O..z.M.K.&.bGC/.....m8....^P..TA..6..t.X.f....\..=l..F@..#.#gA...@+w.OR..9.....>}...J.n.O..e..Z.[.1m..h....w...5....vD4..Y.js.5.\....t6X\..V.-VaZ...$+.(.P...rS&...y..2.r..P.I.T.@V.......R.......V..@J.J....

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 859x800, components 3
Category:	dropped
Size (bytes):	133267
Entropy (8bit):	7.983564833891381
Encrypted:	false
SSDEEP:	3072:/FxLRv0C1pe4a91WYI1pVEI7/W5PT6WdaTDi0OL4OWOP9qR54RRDgYnU4e:/FxKC18F9A1nEI7/Qrmw4IPK4zDg5z
MD5:	CF55CCFE4604AE9D70B872EB8184AC31
SHA1:	ABBC40939985B7DC456D0CAFCDB0560BD7A80815
SHA-256:	0306F250A54887C33BD64FEACCBFC7BD61ED1719D1CB63D8BAE8AF1A9F93F8C8
SHA-512:	94FE22335E95EDC1ADDE5B248669FEC98F484FABE16B7F896ABD0BDB573616574E72AFCBADF7422B0D20CAD365D1A32E681F3CB5083D524A17F2A5E35D30FB35
Malicious:	false
Reputation:	low
Preview:	....."Exif..MM..........................@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.............................................%...#... , #&'))..-0-(0%()(...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... .[.."..........6...................................................................H.............................................~T.N.qx#....`.!.=.\|.>..\|.I...>..b@.d=.....SBR.@...t.."}3<..x......................................$q$S...q...y

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	59732
Entropy (8bit):	7.939009752403565
Encrypted:	false
SSDEEP:	1536:yp5KM4EAaT7w+PsLPzN4fnaoqRrxmoK2jSCKejM55:ypgORT0+EDmnWRXSCKr
MD5:	82275CDA9258A0BCE6E339F5824614B2
SHA1:	4399FD903886507E12E6DF1C858A7B61B091F69B
SHA-256:	14ACAB9A446D4F78092E485EA1961E9F256235EBA3D7D3E5A3626208A8353362
SHA-512:	596D6E40442F8159696CF357E2CF541CC8451072F7084686D2CDFC6A6AF69AD6A5D2D448627F08FCBCB1EE108BBF38D17283662FAAE886B0F5F04CAAEA298F92
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}....................................................................................................................................................................................................................................

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	8360
Entropy (8bit):	4.257310579604133
Encrypted:	false
SSDEEP:	192:bT/QeuatUmaT5xonfFxmg5Vw2aam/YlBVtBKUgj8pIOM3:matIT5xonx82aa2YlB3BqOM3
MD5:	C4350BD99DDC853D49568CBE8A7BA0B7
SHA1:	0B61FACCDA241058B5C7A6BAC122600CCAC59328
SHA-256:	3DACDEE596E1BB252D671F8F0AFB51C46981E37240C9D4B2377BB66129D4BEEC
SHA-512:	8B3D85CE3EC7DD187C4B8C71BBD75F0E2F65A170EBD120ACB22A61E2E6942BD235FEEFE9DC08107C9C96921FD968972DEC92A88CF8A52A865DBBEDFA44782B60
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="80px" height="40px" viewBox="0 0 80 40" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>maestro</title>. <g id="..-......" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="mastercard" transform="translate(0.000000, -0.666667)" fill-rule="nonzero">. <path d="M34.1475682,32.7657087 L34.1475682,31.2020164 C34.1660041,30.935979 34.0690739,30.6748721 33.8815062,30.485309 C33.6939385,30.2957459 33.433872,30.1960582 33.1676543,30.2116779 C32.8168228,30.1886781 32.4812793,30.3584471 32.2919866,30.6547241 C32.1194061,30.3672808 31.8034053,30.1972804 31.468442,30.2116779 C31.1767919,30.1969341 30.8991438,30.3377414 30.7387189,30.5817518 L30.7387189,30.2742256 L30.1966389,30.2742256 L30.1966389,32.7657087 L30.7439313,32.7657087 L30.7439313,31.3948718 C30.7203608,31.2223679 30.7750168,31.0483464 30.8929843,30.9202963 C31.0109517,30.7

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	86272
Entropy (8bit):	7.953073491575213
Encrypted:	false
SSDEEP:	1536:PaoBUIx/CcZ/gjQe4mF2CsD7XfY8gbQGUie6A9LX+XH5y29AR:Plh+j/0CkwzcwA9LX+42GR
MD5:	D83098E0AE02ABC6076A3F796F119422
SHA1:	0EB9CA53A1A45A5A603A99B11DE6A6989788FB33
SHA-256:	98F8FCEDAD42577CB0196C64FFE57AAD7AFCA40EE19641EF6A7540A1EF462B40
SHA-512:	B6D03918BB44ABFF447A43A24A461870AFF3D9F0149D045A5076CCA1F02B0BDDEFF17F455D016C290E847EA0F3A8EF7ACD6A91819B1FA2B8B0047D123C6F4E04
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................,.....................................................................................................................................

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	70652
Entropy (8bit):	7.955858041066723
Encrypted:	false
SSDEEP:	1536:jowlJw9f2w3e9DYkR6Ci4g4Cmky30GJ4g:s8Mf2d9Dzpi4rfks0s
MD5:	506FA6AD832D1A95A5AC1887B0A916B7
SHA1:	1315B3FB1265D1E450B3D6F1B44A324B91B9495B
SHA-256:	DD19E69B433F64FF92BC0275C41B458B4EA3B82FA012C6A2BE1C59F913641AF4
SHA-512:	113994026D701B393A96763D44183463D886BDBF528E186F77A2842360CBA6BA2AF6FBF068954BC1E8CCCFF1006E8F783AA3A0BB75EE9C2152AEFA4274160CFF
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}................................................................................................................................................................).%...{.7.....................................~..GLB&..m9..7.xt.....

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 436x500, components 3
Category:	dropped
Size (bytes):	197029
Entropy (8bit):	7.910216232539198
Encrypted:	false
SSDEEP:	6144:mSnAM23v4vjsj7vy4Ssy37CCLGBrLNdpQf2B:uNcQj7JSsWm9Lgf2B
MD5:	BFB87079D8D7733BA944813C8C760B01
SHA1:	C0F69C6E36B69BE501EE85FB9FFAB81FD5F7598A
SHA-256:	683896D3500B57C3DD7FB12B05B2B0E5ACD182AA1266266B2823C0EF6438BBE2
SHA-512:	06504E65697BC67215BD1A171D9B52716EC7F0342AC6A9D56DC8AFD3A45C270495BAA9BAB6DD4C12B741EA1059BEBC447A2EF51476560864C77ED34C74C79370
Malicious:	false
Reputation:	low
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......)]w_z...pO.i.....# z..(((.$.....m-.^.dz..P.]...a@....P.@....P.@.A.sE.............$....rI....}.C..s.....9.........?.G<{.....=....B..CG<

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	59104
Entropy (8bit):	7.929559522936332
Encrypted:	false
SSDEEP:	1536:GFIOgaiNteF76610hSccgYLey+1e8hr0mqPhqc:jOgBeF+61a1yete8hWPh5
MD5:	3EDD2A498E16B3025FFBD9602894B03F
SHA1:	E98EF6594293A4C62F7528B300C04650BB8CDDB4
SHA-256:	DE13D7BA13D33BF699896064325C0C4F015F10A366EB79F6E85F34C3C133B1D1
SHA-512:	C6BFE424843A95E0D96B0D16878E4C445CEBC5EFA23F5A753BE0AE8E24B8D9998172EA9DDE28E61FE7657F19AC1F1A5B230404CC6262DAC919CED6713DCC5793
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..........................................................................................................................................................!5....l#a.................................4!.f.J+..U.A.................

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 1000x513, components 3
Category:	downloaded
Size (bytes):	75754
Entropy (8bit):	7.935223430077266
Encrypted:	false
SSDEEP:	768:53wffdczua80Q4LjDW+229xKsQwpHRBtvYYedmJgB0yo+N2q4h4LsOQVzMIzPSTu:5VRFvy+d9QwpxnYYuiJ9VFD+kG8KXA
MD5:	DA7F025E7ABBCC869729C6B497B32A66
SHA1:	3E459D3B889AFA0607270B5C6DE0A637772235F0
SHA-256:	839E162774BE5184BFA5D0746D358A03EB5D0E4AF7165DBBB790D63BA9773DBD
SHA-512:	7A463C4197ECA4AAE0AF194DA4B3AF12A832912902541989C5847603176FBAF8475576B7DE3F287D5C32C3B72F71EDC98762BEC9F182E950B1478636806A53F0
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/75bb66d9a11a9ab16f2c075001ef48e9978f6a9b.jpeg
Preview:	......Exif..II...........................V...........^...(...........<.......f...i.......p.......................imagery4............0210............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................X....................................................................................................................... a~.vU..%P.........&.r.....

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	64330
Entropy (8bit):	7.828108491950989
Encrypted:	false
SSDEEP:	1536:qfeJUzPOiwfaPfI4mW98Urs4GtPvJuBTMPn/xLjsQaU6klAK0Y47:2e4nAwfIi9FNUwVoFjsQaU6V717
MD5:	661C541D97FD9F40F1BBE5F641152907
SHA1:	15428D6F03F5B53F9644B9BFB2FDAB86CA017279
SHA-256:	D68683AA8AEB5C51698AD73B57AC13BA6A545C510702A72C0B6BD334944E49EE
SHA-512:	85F8E5C68E4466D5BD674F181FAF684D2A230D33D0E555A5EA6AB9F93D1F67F031358E24DB74875EB7AF529D51265B57094165CBD6C025EAA05C6CD2B7AA2029
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/a433e880ee81352d122e20a49064772e.jpg
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......y......T.@.&..S......(......(......(......(......(......(......(......(......(......(......(......(......(......(....~>~........<O.A.^.?.&.f.N....Z..U..<."h:.B}w.3...'...F...6.h

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	4.319548827786958
Encrypted:	false
SSDEEP:	3:YGKAAuWsioeK0Y:YGKAL6BKh
MD5:	C157927AD7CE78C171B1F88D3929980C
SHA1:	EEABB9DB54E11CEB80ACB8E6014EAA08DA188FE8
SHA-256:	5737B4EF4F837BED997804E866E788CA88F95FE369F87474E487DE24871A5224
SHA-512:	996955F31BCE79DED1F7FA7D179A5420A2A2786388D95E496C00FB8A96229A9D4D63DD395FEE3F75FF82BD417B58CCB8504784C705D255B4F72C58400B14FEF8
Malicious:	false
Reputation:	low
Preview:	{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:57:47"}

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	45662
Entropy (8bit):	7.911668978961762
Encrypted:	false
SSDEEP:	768:27+ofWr+KpvWyMJVJaLEQQDFMNbMjzHP4dQ7++LRcqHmArPWQEP0:AbOLpehsLEQWiNA3sulfrPWQk0
MD5:	820C68E472BAFA0CAE86734D8C011EA5
SHA1:	053957A708CDDD8589860E312F8EBE8D66E931BC
SHA-256:	48AB70C7A6777D60E8AC8892E3FCE5DE08A884F132BEAF7035FAA538167B873E
SHA-512:	F7D472A3473669DBF760AA3B3AF5DC2D43DFAEC7CAF3AA17E12D964109C9119FFBC17C32B087D8CF970DAB285ECCC76962C6A572BD3974642E2CEC0C542CC600
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/e84e22097951cec3381ed92b3c1d03ca67cc1716.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......I.......I.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..........................................................................................,.........................................................................................................................................

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 375x500, components 3
Category:	downloaded
Size (bytes):	159767
Entropy (8bit):	7.919646170918093
Encrypted:	false
SSDEEP:	3072:I+wPK9QiMsZIxS2mpS31vm0LUbp0QjgeK6rC6Zia3h8mY74xx:IHKdMs+xxMSlvjLUbp0eZKHy13hvjxx
MD5:	8E9BD53DB10823CAF97B856C4E6FD791
SHA1:	C8A7F9CA760E849CBBA9C1064B3EAB1666D6907C
SHA-256:	D7C1299FDFA01C9D42D8E5DD8FB8F382F7282BFF094E3BFD5B815567D2F768A9
SHA-512:	DBE7145253F21A9F42C74CF8C8C2D1C835FF3FE8332D03A47897DD1D65B4634439D7F145231A19CFD220EF3086E5D43FDF4B42C3C159D03034456B8CEAD1DF7A
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/5cca73d2b424042491646a2499b29f93.jpg
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................w...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...........S.z...e\|h.......=C.....nO.Ej.....,Z..$'.dH.Z9.VTwO...<\..U....Uw..~..3.....O.<E.%...a..a<....I.\|l..J./....6....\|+.....)N.........%...].....c.b9..2s.K.y.9#=(.Gd..{..'.t..........N...9.6...Dm...i^G\|.......5...u.mt.m+7..k.:..c.h........!YAQ..r;`.^........F........L.....~..G#.....].{..]\|....Z5...q4O........1.........[.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, hostcomputer=imagery4], baseline, precision 8, 747x747, components 3
Category:	downloaded
Size (bytes):	56897
Entropy (8bit):	7.897070511481481
Encrypted:	false
SSDEEP:	1536:gF0I07q2+yi/a2XbAz7HYWBGu0y5h2JZn6Xb/09gWySp5T:c0I07NF2XbmfGry5kJR6XjiHFT
MD5:	E0357D837C72590FBEF5A005CE33770C
SHA1:	DE732D15B2C97D9603ABB5AB081CD787523AC0D1
SHA-256:	B1B4E4623133DF720EE88A50033D8A499B621DE586D5811B171569F3D74FCB17
SHA-512:	87E6B1940F4B4840060BB8FFFEB9A4B4B80565E211DAAF17A4984E2DA9DCAEEB661F1A8F91770E22A7D6CA2997ABD0200F99A30A6A4BAC5015F96A3DAF0F29A7
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/48e1ea064ee564bf1e9113d74ef81304f299ac8e.jpg
Preview:	.....,Exif..II.......<...............imagery4.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".........................................U.........................!1..AQ."a.2Bq.#R...3b....$Cr....Sc..4Ts....%5DFt.&6Ed........................................................!1AQq.a............?..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	77561
Entropy (8bit):	7.988224521863831
Encrypted:	false
SSDEEP:	1536:y3PZ3rRp9hwLMAMRl2f89hcGgjLCY0uqj5ZIQbPz+Zy/CMHkA/50JEd:yxbR7GLVMRlyGgnr0uq9AZtuzCA
MD5:	DFCB8AD6DAFC9B04042455299D656450
SHA1:	E7E8FB4EDE4C0ADC5743AE47844C7A4C0D6C86A4
SHA-256:	2CD67894F2970467AA671D05A93CB2176050CFC8D3D80CB92FF0230A74BFBEBB
SHA-512:	DF24779DCE94ADA18A8413A563ECAC3C96CBFBE7037E8817F92C3DA292585A26B0DAA14F145AF53B199A2C3551CF885DF31B788B6126B746F0CCE3DCF40A2CFE
Malicious:	false
Reputation:	low
URL:	"https://img.shopymn.com/uploader/9b07c55298c5eecabc44b3b38b837976.jpg?x-oss-process=image/interlace,1/format,webp"
Preview:	RIFF.R..WEBPVP8X.... .........ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	43030
Entropy (8bit):	7.892764109138992
Encrypted:	false
SSDEEP:	768:QDhTnwHxw9xbfPe4Fr/0KzV/SP03fXXKq3rYlqEUjXc8tCq580fKAI7MfCV3:+hwHIT24Fr/0l03fHKq75LJtX5Syg3
MD5:	957B45A167BE2D53141BF5E647203093
SHA1:	5372420B35198FFDDD4E0598B1D55CD9D11F7647
SHA-256:	C3279FEE603F78DB6A08B8CF45DB29962996E6A562CD19FF88F3A25F9006558C
SHA-512:	BDFD8954AC41CB7DB9D3BE3E951070E9C1A5E73227F95D5B695DCF104A65B87550037A2752C64C08DDD5BB8A76C23E7111DBAE8205BEE196FA23242C95026742
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}....................................................................................................................................................................................................................................

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 743x800, components 3
Category:	dropped
Size (bytes):	60660
Entropy (8bit):	7.886369126302777
Encrypted:	false
SSDEEP:	1536:SguGXz5FhNov2vvjwrVrsb/C+MHiP4d5kFei:SgukFFvov4vsrds/GCUcZ
MD5:	408C2DE2404A48F5A406E06AE3A287F6
SHA1:	280CE2A591A293C1F829EF775A8E5CCFC6DC00CE
SHA-256:	DCA454F82199E3FA0C0154C01261FBFCEF9FD36E932F680F66E9A9410FDFC113
SHA-512:	1E9AEA6A1F7BCA8312971C97D45A25B82CB84028FC789C6183A8705C7F8F729322B132F42E71B345BD513A44AFBA06011D4E8B5387579AC2D5AAA01827B3E880
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(...........<.......f...i.......p.......................imagery4............0210................................ ...........ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...... .......................................................................................,........................................................................................j..........f\|<<+................................C.i.O.g.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5398
Entropy (8bit):	4.016381936182486
Encrypted:	false
SSDEEP:	96:hsABW0QjYL9YRXyEqStGuOsZBcips1QwdZPJH8j28CBSSOP52dTI3qzjVJATI3G:hsAgVjY5STqSUuOsEic7dZhy0o58iujs
MD5:	979EC0C7105A76D6A4D330CEA22C5F2A
SHA1:	02FDDFCFC3A798D93F0BFF42FA33754857B13417
SHA-256:	A9D361C2B4EC9C3C58741ADB19FAF93E10CC68AC6717E612661EB229651A8C75
SHA-512:	436E272A7B7FEE959DF571513BA8496CECE98FDBAB4E52321D4125C015ED736522962F3F6A42491C7E65DAB91B1EBE3077E538AD484643C91993CED25CFCA846
Malicious:	false
Reputation:	low
URL:	https://static.shopymn.com/liquid/buyer/public/img/payment/paypal.svg
Preview:	<svg width="105" height="24" viewBox="0 0 105 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M78.3441 2.5H72.1656C71.75 2.5 71.3898 2.80443 71.3067 3.21956L68.8132 19.0222C68.7578 19.3266 69.0071 19.6034 69.3119 19.6034H72.4704C72.7751 19.6034 73.0245 19.382 73.0522 19.1052L73.7726 14.6218C73.828 14.2067 74.1881 13.9023 74.6314 13.9023H76.5709C80.6437 13.9023 82.971 11.9373 83.5805 8.03508C83.8576 6.34688 83.5805 4.99079 82.8047 4.04982C81.9735 3.02583 80.422 2.5 78.3441 2.5ZM79.0644 8.25648C78.7319 10.4705 77.0419 10.4705 75.4072 10.4705H74.4652L75.1302 6.34688C75.1579 6.0978 75.3795 5.90408 75.6289 5.90408H76.0445C77.1527 5.90408 78.2055 5.90407 78.7596 6.54061C79.0921 6.92806 79.1752 7.48157 79.0644 8.25648Z" fill="#009CDE"/>.<path d="M34.3747 2.5H28.1962C27.7807 2.5 27.4205 2.80443 27.3374 3.21956L24.8438 19.0222C24.7884 19.3267 25.0378 19.6034 25.3425 19.6034H28.2794C28.695 19.6034 29.0551 19.299 29.1383 18.8838L29.8032 14.6218C29.8586 14.2067 30.2188 13.9023 30.6621

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 255x500, components 3
Category:	dropped
Size (bytes):	92185
Entropy (8bit):	7.869750988796015
Encrypted:	false
SSDEEP:	1536:ulNu1hQW2LlFGFCcgY/5v5PYBwouPDSK+MBaMddVOgpRBubum1dsIcSF9iC8Rz:yKhQWs3gCKh2BwjPDj1LOgHBn6dsLe9o
MD5:	50DA196D1F219204C652502AE7835561
SHA1:	5D63481BFB0240A62D49A9D3D0E5E6716A0201F9
SHA-256:	CB8B1C8B7CE2DCE8E504FC8DEAA71D7CCC1602C4AFDB99D493DF4B8621F320DA
SHA-512:	EA7F6E40263F3434788B6515009A6D5705B07D9168A24D89A77B5F3EE54CBF9228EFB5CF7D95203C37B8263CA4D39E3D64154D36817C4D6AB6EADC32AEF89EC8
Malicious:	false
Reputation:	low
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......n.....PO<{....PP....G.W...k..A.z.....n..J..v.:..Z.ai..W... ..C........4..'.+.....\......S.....?..A.h.%-..a@....P.@....P.@....P.@....P.@....P.@./...._.\|.....f.../..:...,4..YBZ.g.u9`...s......&@.....Z...G

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223733
Entropy (8bit):	5.454805985390715
Encrypted:	false
SSDEEP:	3072:H88WClBUIncVuP0bteuvQ+AMPpgArl0xYu5GKndQ:H8lWBU7O0bvQQGArHu5GKnG
MD5:	7C75053C3DC6FBEF27DB57E11E5C63C4
SHA1:	CAFC7264C0B8224F621BFABAF588905552008D49
SHA-256:	E9C370EA9070B144ED45FF5F35C9206112DD1091326FF898F414EF8C12EC85C0
SHA-512:	92F72DC113DC761AAFB2F630C77773C19029C9C0CB995238281AC5109AAA043940B1E681EB9EEACD8E436141BD97928985B679B1515166227097E4772E1FE1B7
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.254165647130566
Encrypted:	false
SSDEEP:	3:dngJviukoESWljGkhbAYn:WVeSW/9
MD5:	6EAD198554C0D08245EF09F90978F247
SHA1:	C53AA12A7A507D43673FDCD5AD4D0DE2E2C68225
SHA-256:	84AE4688965BB1862D333E50E86D9A1BAA9AB463803E9E09D45196339F2F24D3
SHA-512:	B6D709FF4D3EC35609D9ED461395FD3652C2B834399BB533BE5C173302A8EF6D36D822C419373F285E07B5EA85302D6765B771B68433D72FA36DF9F889F27F5B
Malicious:	false
Reputation:	low
URL:	https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591424791&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17
Preview:	data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	93748
Entropy (8bit):	7.962730858354728
Encrypted:	false
SSDEEP:	1536:XZqtlwbWTV3ERAenx3IPCNf7B/E6UNF4xubmJUo9gqxB0JVGx9Hp17My7x7J6aa9:MugyR5f7m6LemJU4gq0Cp17x7XandyCR
MD5:	BB0378B9B926C36659C410108092B471
SHA1:	6C30CF9649FE85CA2BD259AD3B2EA0F5CC59B42D
SHA-256:	B6EAD4E41F54D1656D2A04CA1FC5427C19D4ACCFF4C4A40FB9424B941A1E6538
SHA-512:	89476EE5833F742783E332696566F5C13EBB6662B5F91366F488149CD4634B54B65BAF427E80FAF2C062052FE6E6421EC031E23A3E0179EACAD261B30D77F3CC
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/c45a50fb64006f61f8cc79f72832f2fa6b14335b.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...............................................................................................,....................................................................................................................................

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1112 x 617, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1913256
Entropy (8bit):	7.994383680690609
Encrypted:	true
SSDEEP:	49152:LzV0Cen5Sfno3eaQg0iHf9NmPn/wW2giHpye+RQIC1X:LzV0Cen5in9a0af9knYWXeVX
MD5:	A0F6F2EC53343926E340922358F88F9A
SHA1:	EFE1F9362E7F4AE53B68FC5569825E8C6EDFC6A8
SHA-256:	424A44CA3C5FDFD99E6885D3CBFAAD7BF18E57BA5E6DA8E2311065214682C486
SHA-512:	57BB7B819817916C80ADFC17197D5DC9B11D2810E2AA9CE03C7E1377FF7954EBF5C74721DC23921E3FC2DA392E1126FE629041BE138BD274B3A7BCEF3DF5F084
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/e9965ee36481434b14cbe1bea3260a80.png
Preview:	.PNG........IHDR...X...i.............sRGB.........gAMA......a.....IDATx^L.....u....9wu.sN.A.$.. .lP....$Gi....^..$._...LEK")."D.9...<..=.sw.k.yE.5htu.....s...Y.....am..\G.64.v........M..=...$.6..f....}...v.?....S......^.._afj.U......V........x..X..f.......p..M.3.<..Gp..=d.i.=X.O.Y...K....2..r`8.D..,'rl[.c..~s.....y.....:..?.............V....`.c..`ca.o..9~.?s?..A.^...W..@......C..-,.8....9.7_o.j.#."U..<+....?...?.E.....8u..>....s....;...9..g.......<......".r..J....r..3i\|../.^.....[...`k_.s..VW..u....l.....K.w......b..B..D......1y.6...V.y...qu).....gw..(#.h!...T.cu.v.....&...>.......g....S.c..6.x.`.7.c.S.a...".o..h..C..au.0....N#...j`ea..V.-......a.....K..=8..'P.....H.M.v+,....u.q.]..}...T.*...}x,6....Y..;....z......Os....}..F..d.7/_.x....".r>.{..vW..v.@)...e.............?G..C..C~#......@.-[....~..v....[?...8.TX...M..F{...hS....cT....Q..W..^.&~...8}.$,.2.N..6+u.}z..Z...l..v...@[lT3p9......^G..J.l...2mp...r...}.....y..~p..33...O.c....0

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	83359
Entropy (8bit):	7.957264661600617
Encrypted:	false
SSDEEP:	1536:jOzTzXAnY80mBqfXu58p+w60ZJmy47ou4o/B+KwiDMZCd5QQkWpe:6zTzXAv0Xu58pzYsuJ/3kWpe
MD5:	7F05F9E98664B4BB2877167881A4E0B8
SHA1:	0DD20EC83BAC6B60FDA54B4632B241C0A5574794
SHA-256:	6BD381E85BCE91C21F62B143B8B8BEF9F545FCD6F4E321ACC11F394B2CDF6BFE
SHA-512:	F39114E61AB5BEAB8C2683AD66C9DCB86BE19C886323F3FA8115B8CB0704ABB6AD4DE34A9D4274B85687B952DFA70E3207DFB1D05B89FF431847BCF4232E0AF4
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................,.....................................................................................................................................

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	439934
Entropy (8bit):	7.989464319040119
Encrypted:	false
SSDEEP:	12288:t3WUAkbbXWFKhOF1nA+fBpgqsM5K+v3YT0wc7gRdKK:BWzNFKhw1nNlsMYACcMRdb
MD5:	2EF0D33F2BBA1F90DCD8DA58962AEA48
SHA1:	052D18E25A84BA1591C997B944D5E6719DB03EB7
SHA-256:	AE4A34711D619C861F924B2D5B186A10C5D0FCED7F24EF8C44677F8FC1B38D98
SHA-512:	D8B1A569F31CE7D8676AE29A4C41A0FD66C74B86AA551F5903C7F436485C10AD9B8F01F0957BD4EF05332273681DFE7D92644B4BD53347373044B1DC02C52199
Malicious:	false
Reputation:	low
URL:	https://img.staticdj.com/94f923b3025c1d1141c24cba82c39f5f.png
Preview:	RIFFv...WEBPVP8Lj.../.Cp..@l.H....G..... .......O..U.\|m.............-..}nP...^S....k.Q.../.s QMbb.'K..).d @/..K.....A....:....{.2.R..G.n.E...........:...%.d.lg.....B..$.&.+x.4[..J..R..U.......O.P...{.Z[T_T.U.E....]...W\|.d...(0.7.Qg.Q.I..g.&..]TP..3jb..9.Q.~.11.M.Hr5:...Dr#I.$..Q..;..k...TG....Ird[A..A.4~.SW.zz.....Wq...a...#I6...<.lQ......w.6."-..Vw.....e..,...QJ.@J.f..,..".q..\|E".yK..a(!.@.]i.u. .p.6.e(....3.".c..1..e.1E"6A`....0..._.....c.\..4..c.c..1..f(!.A..l6....@Y...0.bb... HRL..b(......T.......s!.9`.M..1".."L.y"b..x]<....X..\....U....c*...&.R.Y"...3..}O.0e1.(!rG.Y.ad.R@.5".(.X...Q#...=.O..._1r.7LA..e..)#fQ...a....@.9.....\.4V.. ..W......y{.....5.L)..8%...r.,....r.y.....6'.N....0..'\...A.A..^..."...?07..fg2....8.x7.^p...e.......aX.-h.....].8<Kv`.).f......N\,"..W......!...$2.(=@.V.,..,6..(.)..FS....Xe0v....Npq}.xC..[.`. .p.. .1....<.@....8.7.,..[0..I..[.9).6....V......Z...V...a.."....7.px....f......A.......c...u.2.q.x..S.:.V..I.q.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	25678
Entropy (8bit):	7.963925203923146
Encrypted:	false
SSDEEP:	384:jqwg1mtrASpH3ZS3yeCFcJ7qT/VIkrEOPdgmqqWd0A8eboSuxdbhH6vwOVNZ8X/b:pWmtrASp0CEMFgmvM0Ayd98CRGS
MD5:	88EE7DA569352C1FACF0700A786A9CFD
SHA1:	C30927BD739DD58DBFE40CAD47A2027316E534E7
SHA-256:	FC2715F418ED218A8AD6E92B6A9127ED28C060AA97490BD467186B39575D0FE6
SHA-512:	BF63B4C0EBCEE01BAA286A9D32821F3B8A0EE4B5CF4855C9EAE65E397E2AEAD41C63AD1E9881DB89420941F46D00266F0BBFCF7B5EA3688D10B402D1EC499464
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/1410d7ced7e16916884730c28d7310a5c2412305.jpg
Preview:	RIFFFd..WEBPVP8X....8.........ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$.........ALPH.......m.8..k.\.oDL.U..#G....%b]..m..I.......22......ff..3.W%UeWW2D....I.A..mLG.1..l.v.&k].....Yw....;.@.1...`............ ......kG.Q..g...$....E.O...P.._.S.[...b........R.....P... .....DH./...}......ntP.f+'y@........\.m.(z....Yw.>...G?..b........txa...}.....D....g.(.n?...Q............7u.c..s.!.......o.9^.;.{./#......@.S....{.<.".......l.@. .L..w\..2.kb]...2...>.1......;..@....A.\|. .>....G.p..U......1.G;$\|.H).A".(..DB.uH...#.h."D6.#.R.2..wH......A.b.1@.:..P!..Z.....Q.W+.&.*<Hz...:.X..C3_F;.u`D...l.#.x......U.t

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1000x582, components 3
Category:	dropped
Size (bytes):	122557
Entropy (8bit):	7.961201116386034
Encrypted:	false
SSDEEP:	3072:FGUy1l+i9U7vKn37wpPLqzRjq+YM2crWuqoQXdb:FxiuvKn7q+92cC1XB
MD5:	2BF63D8311FF49E15CCA56A593F1E064
SHA1:	F82CD46FCE7BE7510939DF7677CD72D18FF74C83
SHA-256:	9EC9A4DEEF1C4A91BF52ABDD8CA78386835790068348F3CEDA42AF69EC42F2BE
SHA-512:	991BA5406FA3F85BB8A43872A32159C4E0787FDD47ED1B525905D1E3394D86AAE7A038B4B80C160EAED41AF09C81902B50C5159CB552DBD721F95C797C2DAC2D
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.................................0210....................0100................................F...........ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}......F.......................................................................................X..................................................................................................................................2.V

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 1300x1300, components 3
Category:	downloaded
Size (bytes):	367680
Entropy (8bit):	7.971156528337177
Encrypted:	false
SSDEEP:	6144:wpmDR3erO6SGAygjrTp5DRJuEquk97cRcovFi7q8ZnckW42C4yXplqNNaNB:4YO66fAyybzS9YRcol8ZVMCZZ/
MD5:	460BDFDA7EF21014C819C3571EA71E4A
SHA1:	6BB652CDB26526303B4ACB0798DF98F6B764AE87
SHA-256:	2D80DD85E2D0F4A10BF58065D4231787A0B6947A328D2471D1A345DE0A2886B1
SHA-512:	E6AE0F9EA0EE536238964627BF11F68E772EF4E02EE1F911FD27CB2B26CF6D9DC11E832594BE5991ABB8A02C5681C3E149C9367CED2634ED938ECEA04D366FE6
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/1abfc652cc0f3e8037cae0f5dec3c53ff766f022.jpeg
Preview:	......Exif..II*...........................V...........^...(...........<.......f...i.......p........w.......w......imagery4............0210............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...............................................................................................X..................................................................................................................................................

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 539x800, components 3
Category:	dropped
Size (bytes):	103948
Entropy (8bit):	7.981505206482837
Encrypted:	false
SSDEEP:	3072:fdyBHbgmmgjPdmMPWNkaiSXEJQisIVUccINk:IB7gYPWFzkSrn
MD5:	09DAD94E65244978B89C9F3BFF6A6089
SHA1:	A072C2823714DDE618FA54DBF7FEECE506E54E6C
SHA-256:	8FD13C681373368514C4A6DBC71F35346DE18E5046ED5F3F3C08EB06142C4B1B
SHA-512:	5A5AEA6196ABDDD8357F2E015ADCBA59119FC3F2B8223D64F5E067A4115C3FA436823030A2371F3295070A3D71AE367274BCF3EA9F51A191AD16C427613B83B3
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(...........<.......f...i.......p.......................imagery4............0210................................ ...........ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...... ..........................................................................................dr........Vm.YmM..X...8d...\|.4.\|..%..W.....H......d.W.I%yV,.<G6..........n..Ns.......:>y....#..[.Vh4....A...2YNZ....a..(h.F.`..6$I,1....

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 335x327, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	9304
Entropy (8bit):	7.977000071756202
Encrypted:	false
SSDEEP:	192:WZl8M5OqMyIfoiAc8z5FJcUGRBh08nJj2xo9xNLe9SzS0SV:W2UIfo55P5Mh04l2xINLe9Sy
MD5:	171C2626ECB9B9B9E7AB937E246E3832
SHA1:	53B5F7F8985E69A2F56BB730ECBF7BD5652B8A3F
SHA-256:	86D92EB2CB94763A6D2D8A4614E30754E6B46802F174E7DEB032551996CC3A09
SHA-512:	32C431ADB21398385ECFFEF82EC77C30AEE375DE1CADE34053C69AF0860006174915E27370EE677730A7747066A74D14F7DA073EC09B11785E6809F77198558D
Malicious:	false
Reputation:	low
URL:	"https://img.shopymn.com/uploader/d993a1725f58924f23cadb81743e03e2.jpg?x-oss-process=image/interlace,1/format,webp"
Preview:	RIFFP$..WEBPVP8 D$.......O.G.>m4.H$".!#. ...cn.s....w....a.w....{[.<../............_....\|_.^........f.M......g..Z...R/...=:.........-.o.......%..........A............_.~)...........~&~..k.?.G.?T.{.#.k..............o.......i..............7..._.G.?.?...,..}!...g.W......{g...9.....{.....~X....]....{.I2....6I...Z.k....~....]...$..L....\|=../v.....f..Ol..F....dm.b4_...^B..3.K?W..]e~c.}Q.c....@...&....Q..~.@....YT.?U&..W......NRS5.>.,W\m]..X.\|..`;..I..{J).....Wn.....[Q.T?..'P......\2.UZ.5\_....m.c.h.\|.."W.*.6.#R..%Y...o._.1_.....@.z5P..r.\|.lRlD..E2.W,{.x.....@e...Fm.;..d...t....h...^-..."I6....4\|.(b..."...x.....u.Wdl1....p......K.7Vf(....iep....u.O5:d.N......?..-.iK..R.=....f4..m\|}...a....[.:...R.7.]..GeC...7.!....[..c...ukT9....zY3..k.}%...M]....p2.Q.]....=....Q$d8s$..O...>..V.e.......W..cc.....1/]...]&{..wQ...>.....c.L....x..,..u.?...9U...drE..k....c.&.i;.2i.q.u......i.....c.6...,....s.-....a.....K.w.K5%...J...=.....fX...y..47...R..r.6...c.:8.....\1<.V...{

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.605992845027363
Encrypted:	false
SSDEEP:	3:HWwCn15T0Hv2KtIDthtk2IDthGDthGDthiQn:jC1DrtxIGGj
MD5:	22AFD55DE687E18CBCBB68FBE4800FDB
SHA1:	2CFB0AA1E67E14857B3B74F8F40D056677A21538
SHA-256:	DC45B851E6016FBE57832906E95986D264EB44A1B55C113676CFA001D8420FA8
SHA-512:	42C18AFD8FB87C2C94B675DA3D3874698E226119D8A8EC51A9F03AFA36CB6B3B31D9153EBA935ED918673B6A043A61D8CCDC4990D79B83FDD0C5CC6948906F43
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmmUdjoO4vOvhIFDV9k6z8SOgm8uRL3Jlvx0BIFDQbtu_8SBQ2RYZVOEgUNlJCS-hIFDZFhlU4SBQ2RYZVOEgUNkWGVThIFDTWGVBw=?alt=proto
Preview:	CgkKBw1fZOs/GgAKPwoHDQbtu/8aAAoHDZFhlU4aAAoHDZSQkvoaAAoHDZFhlU4aAAoHDZFhlU4aAAoHDZFhlU4aAAoHDTWGVBwaAA==

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 1300x1300, components 3
Category:	downloaded
Size (bytes):	251943
Entropy (8bit):	7.962003826376875
Encrypted:	false
SSDEEP:	6144:k7sUTWQYVhid7FTTT2pRlNNY37dKPp+eB9MbWJ7qWS4w4b:k73EhITTT2pReLdK9LMbWRvS4wS
MD5:	DA6640F8D0D1A025E06561D88FF046F4
SHA1:	B0A423543086E86947B58AD29ED44BD13E636DB5
SHA-256:	972A43A7D24899170252DCB46F32DFCD60A80B010C30C91A16E4DC0A72FBEF1D
SHA-512:	F5ED4C7DFF51F831C7FC9D47BB86529949B94D84B9E59BB9A5E754EDD31B1D408B04043F541459DBAC91DAD39E03863C660817E461BC4F30C54892E4BC071B5D
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/feae09372641271a3f25a17a07c8bfbfe7b23d33.jpeg
Preview:	......Exif..II*...........................V...........^...(...........<.......f...i.......p.......................imagery4............0210............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................X...................................................................................................................................................

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	71
Entropy (8bit):	4.313993156850263
Encrypted:	false
SSDEEP:	3:YGKAAuWsizTcDK2Y:YGKAL6zTcDK/
MD5:	8B6AFC537B86AAC9B92139B05A3CA896
SHA1:	259770CEE0A997370CB800554E1E48DBE3D90AA1
SHA-256:	CADF1E6C2E8D9C175C5C52B593C18CE750D952EB48DE686486E0EF650B5816EF
SHA-512:	074AA6C24167F8F6AD0708C5B11B8CBF0DC4E15F7BA3EB07E595857ADEF5BAE5A3C8B18F39E332506B178BFCE4D32A18F71056D278F7B02130CB88CA746BF294
Malicious:	false
Reputation:	low
Preview:	{"code":0,"msg":"success","data":{"val":0},"now":"2024-05-25 06:57:49"}

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	59104
Entropy (8bit):	7.929559522936332
Encrypted:	false
SSDEEP:	1536:GFIOgaiNteF76610hSccgYLey+1e8hr0mqPhqc:jOgBeF+61a1yete8hWPh5
MD5:	3EDD2A498E16B3025FFBD9602894B03F
SHA1:	E98EF6594293A4C62F7528B300C04650BB8CDDB4
SHA-256:	DE13D7BA13D33BF699896064325C0C4F015F10A366EB79F6E85F34C3C133B1D1
SHA-512:	C6BFE424843A95E0D96B0D16878E4C445CEBC5EFA23F5A753BE0AE8E24B8D9998172EA9DDE28E61FE7657F19AC1F1A5B230404CC6262DAC919CED6713DCC5793
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/d95cf4e2f5344172719039a44aa47bfcf3fadb64.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..........................................................................................................................................................!5....l#a.................................4!.f.J+..U.A.................

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 1300x1300, components 3
Category:	downloaded
Size (bytes):	221916
Entropy (8bit):	7.952299649475171
Encrypted:	false
SSDEEP:	6144:RzwvT0cBVpZyx/MFGmi4fEuAIY2eq/wKGDIhtNK1PN:+vgczpZyZmiiOPHqdcqvKv
MD5:	55D0DFD5C2C7FB8D7CC18DC1398F966E
SHA1:	19CF77F3CCCE7D1137BAD9C2D69F25BCDD98974D
SHA-256:	3F2DDCE76EB9673A841EA20A33042F0E8744F6AA02D3BB6B48E64C74177DB9E9
SHA-512:	76D1726430BA915BA2CE2208993ABFE5DD035A359E8BA49C91F42334883BABA392D35474F2321BF2C1392045F437EA7D21B8BB6FE29BD7784E64CBB1D0CC64FB
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/0e49afad7eb17f349716ea63c83297492e32d294.jpeg
Preview:	......Exif..II*...........................V...........^...(...........<.......f...i.......p........w.......w......imagery4............0210............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...............................................................................................,..................................................................................................................................................

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 452x500, components 3
Category:	dropped
Size (bytes):	143686
Entropy (8bit):	7.920714868627204
Encrypted:	false
SSDEEP:	3072:3WxfYf9+MXTYDiA1x227k931X4sCdFoLNH8rDbb7cNQ3tU:GARDYLY954s2oLuzcN7
MD5:	3F68CFB08A614580660A9EC2F9883B07
SHA1:	A190024A77DA83EF14F94AEC60E5E0C5A1ACFDF4
SHA-256:	8BA1CF9135DE0DA45F90A19486C9860A39FC39DEB74B89FBFC1E09035E1FF4E0
SHA-512:	8512315CBEE31AB9C6A407146B61B135F4D13EDCD31DECBD6C373BD6D98FA49B99DFA5B34D5BD5907443EE3E4A0A06586D2F7F5C864FC9A3FC8108EC1CB4C854
Malicious:	false
Reputation:	low
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(.....?.@.....R.......[...f....Sq.l.<.5.?..7.V.7cp.Qo].}..........\.~m%e....{..-,..G#.....?^........V..q~....&.....TY..s.... ...

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	57525
Entropy (8bit):	5.324565541768777
Encrypted:	false
SSDEEP:	1536:RJeUwT7ltMHM9eEqJ1UTZ02LKVlEyXHtogcVP5OnWdhEX1eMNqQ:RIT74s9eZYj8ltp
MD5:	7FA55C1BF9AF074679BAE3A7651E982B
SHA1:	15B914AE1B4411F42328FBC26274EDCB251C06F1
SHA-256:	23FCFE51B4304F5B1E03BBAF88E5904ADFD7021E08ED2A2BE1CDF8EF79855410
SHA-512:	E9BEC53B52D54356195138106601CAC2E6FD88CDDEE99119A529105CA2FC3DF5D3403C11BAEF933153E67C87D3999630F27A7A06F780EA08C7F641A61EB31253
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/917164566707525?v=2.9.156&r=stable&domain=www.cravob.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	43030
Entropy (8bit):	7.892764109138992
Encrypted:	false
SSDEEP:	768:QDhTnwHxw9xbfPe4Fr/0KzV/SP03fXXKq3rYlqEUjXc8tCq580fKAI7MfCV3:+hwHIT24Fr/0l03fHKq75LJtX5Syg3
MD5:	957B45A167BE2D53141BF5E647203093
SHA1:	5372420B35198FFDDD4E0598B1D55CD9D11F7647
SHA-256:	C3279FEE603F78DB6A08B8CF45DB29962996E6A562CD19FF88F3A25F9006558C
SHA-512:	BDFD8954AC41CB7DB9D3BE3E951070E9C1A5E73227F95D5B695DCF104A65B87550037A2752C64C08DDD5BB8A76C23E7111DBAE8205BEE196FA23242C95026742
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/eb7e365a40aa434f35f25fe86a7cae4068969509.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}....................................................................................................................................................................................................................................

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	81599
Entropy (8bit):	7.95510638079043
Encrypted:	false
SSDEEP:	1536:FE8PVq9GKBLovd1o7gDReyV10X3pEq//P1T9+NZGcmnoFyW:DteG+0V1AmRL0pv/n9cN5mnogW
MD5:	CD00B0EABDC2864825FE568250E2CDBD
SHA1:	6419077FEA7C333DBC364AE57E9AF033817EABAC
SHA-256:	C5225FC40ECB030E725F572350BA20BE36AC76AAB332E0C0441B98E09BEAB9B4
SHA-512:	CA54300039F819761D76C29DCFC2A27A4C2BB2C618139517CA05995BE114B088E0BF63FECBE5FF7F20CEAF7E2C2427B848947E80719CA095041FC6D999203D5F
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/26147a601f2cfd6a9748078bd341aff2565eb7c2.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................,.....................................................................................................................................

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, hostcomputer=imagery4], baseline, precision 8, 748x748, components 3
Category:	dropped
Size (bytes):	68003
Entropy (8bit):	7.8918324410188525
Encrypted:	false
SSDEEP:	1536:glxiRM3A4hUohygIPLwKWr8dXJ095yrjP9YH98ONLJBaE4VOHbG:ZMiohygIjwKWYd50LyQ8ON9oE4VOHbG
MD5:	63A9BDC5A0FAFE06120BB78D18B3761A
SHA1:	172B99DCDB286F53999DBCB139AD369A03188DF4
SHA-256:	8D8DEEDFBF3D613ACDBBB0845134E585AA1FD7534B08F36F5396E1531D15848B
SHA-512:	790932C2C74DF6E935DE753E43500BE062E82D9B8B65D258491326B3D79D2E9FBAD3A1B90DC2824A03F1425D48DC909500AE160CF9577830105D7D00652D442F
Malicious:	false
Reputation:	low
Preview:	.....,Exif..II.......<...............imagery4.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".........................................R..........................!1A.."Q.2aq....#B.3Rb.....$Cr..%4S..5s....Dc...'6ETd..................................7........................!1..Q"2Aaq.....#B......R.3S..............?.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2048 x 1536, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5714636
Entropy (8bit):	7.944746582364977
Encrypted:	false
SSDEEP:	98304:5XzmbD3ZLGGudtkT9QQ6Wx4jxz6prDbToPJys+gpnL4qT6FS1WSZln:5CbDhdubkBQEExz6pT0PJysZpn05Kln
MD5:	C2A8B8A7EFF97C3F23872E3A057D70AC
SHA1:	F8D47C29515DA9DD084FA51F935E44015C4FF3EC
SHA-256:	2CCB223179BD67B0B33A5329F084CB942E219CA7C72846B75A1D3BB93D06066D
SHA-512:	C203848CFAC90B97156987B32CF3A50E43364D618D674043E7782A676A3B6386D806A840C8F91BF388BADB2BD705EB0D133F18FA5D11FD96067C263EB274A124
Malicious:	false
Reputation:	low
URL:	https://cdn.shopymn.com/uploader/742c6cba7453f3353fdda67f621a72a5.png
Preview:	.PNG........IHDR..............m....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^\|.e.-...zf..#f.,...t...................{g..y.>.T.YY..{....vs....Vk.m...fkgB{.mu.vu.Fg.l.muw.zG.-4..bS...:.......b.M....b.....%t(M.V[W?..m...n.]=..7`....8.........Jk.-..+.d.....h......d..v[..l...vZSz...v[.m_..h...m....m.....[.>..om.....ki.....ih.}..7......N...NK..6.8..j....k.....qcC...........nu..R.@m...m...vjo.ac..5.y.NM.c.....jm.Qej.....U....z;.h...f.R?.L..z.s.:...f.....6.V...T.Z....4.N..}..y..^}..5hM.[tN-.W..j4...du~.O:.z..\3Pv.5=ml.S..]...;....#.5.....~.>..N...._...j.R.Z....Xo..y..._.5......t..Z...~.l.=...4.N..Q]..49v.t.tOUq.t.u....@z.V....R...-....k...j+l..V.........[Wz.......jjl....f....U..u.[Z...&.Z.O..4....V}.....*o8.s.....m..v.m.V..Py%.J.Zy.5..........pK.uX......[.].vY.c....t?.j-.+.lI.9o4.......4.....h.....R{.T}.V.n.j.-[o.......m..6\q.Ts.X}.....B......\{.Y...6W..._...K6W%T^...P[m.Z...z...;.....Q]B.cV.....u..k.y...[..nA

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, hostcomputer=imagery4], baseline, precision 8, 752x752, components 3
Category:	downloaded
Size (bytes):	46629
Entropy (8bit):	7.843535103053387
Encrypted:	false
SSDEEP:	768:gIXEPTWuRer0dM0n/XnV/gH0GLT9U2NNHA3zYQvy5v+0AGmaFtHLiaKL/:gHbWu4wfQUfKM0dtHIb
MD5:	381211CBE6B0A35F1767C0EAB2A67D71
SHA1:	6721F1F571DE815309F50E8BBE9247E5764AE649
SHA-256:	9319351666DDFF5A36F2DA62414E460C19BF1227FC7D594110DFD7DE722D9C71
SHA-512:	05464DF2D26F33886A04370E622C83DF546B37FCCC7577F7B88C3C1BD9B14146E70F1A2109A475CA66D67DA0AD784FEDD925392293691A05ADD4D020B5C54614
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/969b7ca635d13f2e9a2380510ac5f5a238ef64ef.jpg
Preview:	.....,Exif..II.......<...............imagery4.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".........................................L.........................!.1A.."Qaq.2.#BR...3....$Cbr...S.4...%..56Dcs.U..................................;........................!1A..Q.."aq.2R..#B...CSb..$...3r.............?.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 859x800, components 3
Category:	downloaded
Size (bytes):	133267
Entropy (8bit):	7.983564833891381
Encrypted:	false
SSDEEP:	3072:/FxLRv0C1pe4a91WYI1pVEI7/W5PT6WdaTDi0OL4OWOP9qR54RRDgYnU4e:/FxKC18F9A1nEI7/Qrmw4IPK4zDg5z
MD5:	CF55CCFE4604AE9D70B872EB8184AC31
SHA1:	ABBC40939985B7DC456D0CAFCDB0560BD7A80815
SHA-256:	0306F250A54887C33BD64FEACCBFC7BD61ED1719D1CB63D8BAE8AF1A9F93F8C8
SHA-512:	94FE22335E95EDC1ADDE5B248669FEC98F484FABE16B7F896ABD0BDB573616574E72AFCBADF7422B0D20CAD365D1A32E681F3CB5083D524A17F2A5E35D30FB35
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/21884b5858ddddbeb9479fd4140706472aec9106.jpeg
Preview:	....."Exif..MM..........................@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.............................................%...#... , #&'))..-0-(0%()(...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... .[.."..........6...................................................................H.............................................~T.N.qx#....`.!.=.\|.>..\|.I...>..b@.d=.....SBR.@...t.."}3<..x......................................$q$S...q...y

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1300x1300, components 3
Category:	dropped
Size (bytes):	331016
Entropy (8bit):	7.967519694048534
Encrypted:	false
SSDEEP:	6144:Ts7eR0vL+Q4oDscUYB4xt6ZOknn3GlOSfy5zCv8sSUrmuFVcIQBmV:TKeR9QFexQpGrhSUjVzQsV
MD5:	11E06A8B4521847F5923C5113E685D99
SHA1:	426954C76556932549DD7C3E7F258AE0F94FF213
SHA-256:	1ACFBE56AC69E3C8BCCD73CF27161C745C7686EAF7F4F896524FA45B3B54C5CB
SHA-512:	9DBFBF69E5DB9EB16D76840DA57C268EFEDAC04EC1C3C7199B090457943DC9D343A444DF735216FA9D0BE3FAE3F332DD1481082A684E88F55EDD6B32BD9D313C
Malicious:	false
Reputation:	low
Preview:	....."Exif..II*...........................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$.........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......................6...................................................................X.......................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	53886
Entropy (8bit):	7.922996589608828
Encrypted:	false
SSDEEP:	1536:KwgU3WfzCTrbnELu3rkRhbInXvJQaIFKh:WHzCTrbELu3rkfUXvJQaeO
MD5:	FF7E618F7FEE77128AF4DBB45622E951
SHA1:	EE9927A6D41D177C9EF005809835565523C4D698
SHA-256:	297C830A1E286A98A4B34B38C2A309140DC7682F643BBB4E30690FC688941C8B
SHA-512:	7F3A3F5F0807CD263006462EC78FCAE0CB368DD982377752EF0148FADBF3F48E33E2856E291D2A9A8E61E73501321466715733E146DEE415B5D8EEE83D3C959F
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/2a863ed538129c821c4d3cf3ebde582b3adad70a.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}....................................................................................................................................................................................................................................

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 655x468, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	28204
Entropy (8bit):	7.991975769005588
Encrypted:	true
SSDEEP:	384:bZioazoB6tQS28QIq6USP9dgB9djt4hcVztLrEv70+hvAyzto3V8wgi4gq:1KyH/SMB9NscVppF8w3
MD5:	1012B69E4ED00700B116A9A830F7E38E
SHA1:	B63FA5E91313F05AF47C8E9887D4195270347A1E
SHA-256:	791EF952F0AE4D08027B30657828C0568C16B10EAE1A7DD2A25EB5D42B0D4E46
SHA-512:	56A5B1BB229E5FFE3C719999CB03E11EEBC71D0B85D62628C7E1D8FCB4E31DF33CD0703AD2B3B236E3FFD9A8762E2DD1E0B0F9F40E7D9723016724BC03BE1AF5
Malicious:	false
Reputation:	low
Preview:	RIFF$n..WEBPVP8 .n...{.......>m4.G.#&.'W.....gn.7;l.Jx.....}V...y..?..j.]..?7.....v.....;...oV.......S.../..h.6..>.>.?....s...1......o.w.../..T.^~...r.G.2..9.G.~.................'........Z.....@...._...1.g..a..O...t?.........V...6.+R..^...jC....<.Hv]{......c`.!.u.l.V.;......e..yZ...6.+R..^...jC....<.Hv]{......b..}../..ZZ...6.+R..^...jC..j9..q~...L..Q3..z..]{......c`.!.J}'..f..DL..X:.&-aw.uSt.....{......e..yZ..5..`.3":?.E.........\3..z?....b...C....jC....<.Hv]{.......V{r2...'H...T..s....G....da........._.Vx....)..?..`.!.u.l.V<.\|v.Z_.....O...S........hdE.e...1&.k........;S.;...~._.00$..z.>....6.+R.pi.z...0U.....{..g+].......i.aE..W.qSoKW,../&.4..}i.U. ]......M?.R.D...W.. .\|."....#..'....~.(0..^...jC=u.n.m+H....z'......r......jo.,E.&..>]0.?.^2....k...\...=}\!...at.[X..b>..{I.A.........{_Bk?.....\u....\.z.......{........}.e{R.%.E.?<... .uE.....a.p.^3.;...5CZ.HO..>.~..[.%.7....y.Kuf.?.$.{..\..8..JJ..E.....p....G..o..."........`..W;>8.E

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 536, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	780254
Entropy (8bit):	7.987172213928215
Encrypted:	false
SSDEEP:	12288:rlxe5Rx6NwfUjZODLrjd3woF/ARJ7PyzRXtQUhF36gj5q5RnyS+or2y77j:mU2fUjZODPxgQARJ7+ttnFjindWaj
MD5:	F8E8B767920704A4B4B9EE4AD8138450
SHA1:	CA5306728335B6D5774BE424FC12317212D7941F
SHA-256:	60B001DDED63234152114B73B5275E6A1A812040C9D71D67426A49999B019412
SHA-512:	FBED8645A67958B1043B6B07832E7BAA40B2010F7EFC295AF504F4B74832665D92C167D282EC12EC80250B08FC94E2BA85A24958E2FC937D97595318186DC148
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............w..H....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..uxTY.......+....&..pwww.....i7...ww.vy....K.=.>..s.{...1..#..A&EB.....J.1G.T...e...9........{......=.F=.s2_.n....c.....I..8........o.X..M.w.h.._+..]=./6.(.{..[^..\|.j<...u...xF..Qo.f..c..7..E..........5....0......S.zx.h{t.t.<.s.zt..3.o.{......p......^.B..p..[...q....<\|.....Q?<.....\-...^+....^(..x#.?...?....~../6F...w...q.B...[......p..".L...Z.c....=.6.Ll.:.6F..SE..J.....?.../6...4./.u....r..........T.16F...Ll.f....ob<Y..m....g..[...X.V...bc.."...I..8...:x.w..#..<,..x.->.c.#6.(y.......a.eXdW..b..(a.]...fb.....c..Wc.].....U,..U..X..DF.,B.xdW...Ld..`.Y.yL..95..T...mS..S...`s...T..B..Ev..SP.Bpgct.9-.."..6...Q.1:.fb.4....e...c.L.x{+.....E.....Ul.3....Gpgz1rY.."..G...1X;bc....^......._.Ev.........u.Hn.....K+..Et.4..HdW.H..FV...b.&...u....]E".3.}...g-.1......S..c&.M.lN.......S%.....UlLAY..........Y...X.w&..u...L,.....^.\.......p.....ek}.........^.

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, hostcomputer=imagery4], baseline, precision 8, 752x752, components 3
Category:	dropped
Size (bytes):	46629
Entropy (8bit):	7.843535103053387
Encrypted:	false
SSDEEP:	768:gIXEPTWuRer0dM0n/XnV/gH0GLT9U2NNHA3zYQvy5v+0AGmaFtHLiaKL/:gHbWu4wfQUfKM0dtHIb
MD5:	381211CBE6B0A35F1767C0EAB2A67D71
SHA1:	6721F1F571DE815309F50E8BBE9247E5764AE649
SHA-256:	9319351666DDFF5A36F2DA62414E460C19BF1227FC7D594110DFD7DE722D9C71
SHA-512:	05464DF2D26F33886A04370E622C83DF546B37FCCC7577F7B88C3C1BD9B14146E70F1A2109A475CA66D67DA0AD784FEDD925392293691A05ADD4D020B5C54614
Malicious:	false
Reputation:	low
Preview:	.....,Exif..II.......<...............imagery4.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".........................................L.........................!.1A.."Qaq.2.#BR...3....$Cbr...S.4...%..56Dcs.U..................................;........................!1A..Q.."aq.2R..#B...CSb..$...3r.............?.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 720x720, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	28450
Entropy (8bit):	7.985078200955061
Encrypted:	false
SSDEEP:	384:UmKF30PhRH/8FG7lNWOQN+AmQDMfmH79sRMf3NVP1hhDNBP2Ktn5hPujclUlv:SZ0Pj/8U7lNRoMeHKaff4e5hP6cl
MD5:	7EDD99568897EEAAC51BAAFDFC0AD2EB
SHA1:	8139228A17D239CD8D55F61C9EEF09BA115BC5FA
SHA-256:	BEBA9DB1C16DB6723021220AD01D2336D29EE57C7C9EC1A2AD99B28D60E4F2D1
SHA-512:	BE409D0AE72B40C33442A327155D715F6CB46CC9761BDF3653B7FF31CD326AC2FE3FF1E9AADA86B65F2F49B5E60B0B39DD7E85FDC174C8F1963F2DFCF9C50FCC
Malicious:	false
Reputation:	low
Preview:	RIFF.o..WEBPVP8 .o...........>m4.H.".("qZ....iKx.>.{{...~....=..........\.GC....[.ya...?.<)....;\..SnN..Y.#./..>@/.>V.e..PO.oQ..(..W.?.{..>.6<...wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww:LF3.......................M~O..W.?w..=.&.q;"....^..N.m..E..W............."..g.-..(...(?^.z.j. ../A.."U..yh....mk..P.:(.zJ.....$.].....]..W... ._k'.>"W.\V'.E..\|....Z..\...`I...D>...{..=M.I.2.W.......tE.dZ...._.$..L.w.q.?pHu......%...l...o.\9..7.":.....0....8....X......fb.8`......4.g6.z.U..p.i.E..W.....x.2...M..m.I:...#..P.[ .ji....D1.Y......R...J...KP..>.ET....t.......g.;..mp..p....).58.n.+WG...9.............@q..k\|..E..C..[z.w.YV.*.z.y..=X...}i<0..@D.......kAVn\|..3q.=...gRh.i....NC.............A.pL.6`.jg0d..G..d.%..V6.(.J............n.S3Z.+.....9....{.......R.7{^...v'1.j....>D........s...UQ...`..G,....I......-.~E.mr..,.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 375x500, components 3
Category:	dropped
Size (bytes):	159767
Entropy (8bit):	7.919646170918093
Encrypted:	false
SSDEEP:	3072:I+wPK9QiMsZIxS2mpS31vm0LUbp0QjgeK6rC6Zia3h8mY74xx:IHKdMs+xxMSlvjLUbp0eZKHy13hvjxx
MD5:	8E9BD53DB10823CAF97B856C4E6FD791
SHA1:	C8A7F9CA760E849CBBA9C1064B3EAB1666D6907C
SHA-256:	D7C1299FDFA01C9D42D8E5DD8FB8F382F7282BFF094E3BFD5B815567D2F768A9
SHA-512:	DBE7145253F21A9F42C74CF8C8C2D1C835FF3FE8332D03A47897DD1D65B4634439D7F145231A19CFD220EF3086E5D43FDF4B42C3C159D03034456B8CEAD1DF7A
Malicious:	false
Reputation:	low
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................w...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...........S.z...e\|h.......=C.....nO.Ej.....,Z..$'.dH.Z9.VTwO...<\..U....Uw..~..3.....O.<E.%...a..a<....I.\|l..J./....6....\|+.....)N.........%...].....c.b9..2s.K.y.9#=(.Gd..{..'.t..........N...9.6...Dm...i^G\|.......5...u.mt.m+7..k.:..c.h........!YAQ..r;`.^........F........L.....~..G#.....].{..]\|....Z5...q4O........1.........[.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.254165647130566
Encrypted:	false
SSDEEP:	3:dngJviukoESWljGkhbAYn:WVeSW/9
MD5:	6EAD198554C0D08245EF09F90978F247
SHA1:	C53AA12A7A507D43673FDCD5AD4D0DE2E2C68225
SHA-256:	84AE4688965BB1862D333E50E86D9A1BAA9AB463803E9E09D45196339F2F24D3
SHA-512:	B6D709FF4D3EC35609D9ED461395FD3652C2B834399BB533BE5C173302A8EF6D36D822C419373F285E07B5EA85302D6765B771B68433D72FA36DF9F889F27F5B
Malicious:	false
Reputation:	low
URL:	https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591463905&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17
Preview:	data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1000x774, components 3
Category:	downloaded
Size (bytes):	110027
Entropy (8bit):	7.962333481458137
Encrypted:	false
SSDEEP:	1536:9nzolTTBrOWcwSEuKt+ZqETXWOmxGkC5Tz0+nmsDkkozRXTZK7C7OEKZq5sc:9nirO9wjMTmOmQHnhDkkkF7Mq5sc
MD5:	6F383755A7DD9EA0DF138871D81DAD2A
SHA1:	A700D4EDAEE197165A34B2A75E23E3A1AA15D2D0
SHA-256:	C6F7B7D734A303D907D2107DF0C2E205D7BD2058FC75DAE6742E4790249868F9
SHA-512:	B24CBA8A504A3E59C154506CC370C13AE5E35BC77CFC2A2A07F3E97BC043080AA676FB926289085E2993445780ACF9D2B75638818F3B95CF2DF8D27D7CCA86C3
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/3474c0a0e52dc1984476bef3a986c4b06b9ce11e.jpeg
Preview:	....."Exif..II*...........................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$.........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......................7....................................................................,......................................4./..3...]...s.$t....l.e.....................................B.g2s.0s'2r.0sG.s58&Kl.S..m<...>...x....!...7..........................................k.9.s.0s'0s.>F7(..._.!..Lk.............Y............................(T................P4...4.L4..3Cp..

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	69252
Entropy (8bit):	7.948820488178213
Encrypted:	false
SSDEEP:	1536:y5YLyl1Y8Ebn5C/XpearoxlkqKN1JA7n8S147:y+mlOn2gGc2ZN4F12
MD5:	7531EFBDEEB7AB71F8ED241D24CC3664
SHA1:	81289189FC6D6C4D57028AB419C85A5011810B20
SHA-256:	30923059B7B2C9A9299CB062F69BC41B4E9ABCA036A3A57B8D0F3BFD603C7A00
SHA-512:	222C3AA957F7A5DE62BB727EA70B330A6B4587700934BABDCE2F0006255F6BD0116D78E10269A44AFC935FE2F0F5802D0AE4FD4ABE11B2DA0D6FED53DD67E234
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}....................................................................................................................................................................................................................................

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	83359
Entropy (8bit):	7.957264661600617
Encrypted:	false
SSDEEP:	1536:jOzTzXAnY80mBqfXu58p+w60ZJmy47ou4o/B+KwiDMZCd5QQkWpe:6zTzXAv0Xu58pzYsuJ/3kWpe
MD5:	7F05F9E98664B4BB2877167881A4E0B8
SHA1:	0DD20EC83BAC6B60FDA54B4632B241C0A5574794
SHA-256:	6BD381E85BCE91C21F62B143B8B8BEF9F545FCD6F4E321ACC11F394B2CDF6BFE
SHA-512:	F39114E61AB5BEAB8C2683AD66C9DCB86BE19C886323F3FA8115B8CB0704ABB6AD4DE34A9D4274B85687B952DFA70E3207DFB1D05B89FF431847BCF4232E0AF4
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/456a5aa4d010296d9e4e2a5ae84678acf1e7f8a6.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................,.....................................................................................................................................

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.254165647130566
Encrypted:	false
SSDEEP:	3:dngJviukoESWljGkhbAYn:WVeSW/9
MD5:	6EAD198554C0D08245EF09F90978F247
SHA1:	C53AA12A7A507D43673FDCD5AD4D0DE2E2C68225
SHA-256:	84AE4688965BB1862D333E50E86D9A1BAA9AB463803E9E09D45196339F2F24D3
SHA-512:	B6D709FF4D3EC35609D9ED461395FD3652C2B834399BB533BE5C173302A8EF6D36D822C419373F285E07B5EA85302D6765B771B68433D72FA36DF9F889F27F5B
Malicious:	false
Reputation:	low
URL:	https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591447418&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17
Preview:	data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	52027
Entropy (8bit):	7.922233238929734
Encrypted:	false
SSDEEP:	768:hWVOrpFOoZXaqArmIKKshqwGEgfJRcoCgiexzUkeV04BLDvqqb5k8jBnL3S1y:hWV60qArOswB/2bkPLTV5kWBnLOy
MD5:	F36814FEA8ED6CBF7ED14BD52CF8E771
SHA1:	B891A4E15968DCAE107DF2687B8B61CFC1D61608
SHA-256:	43D0A8A17459D5230828EB63ED17F6C804B00D797B09C054CA969A7BFF8E2C9D
SHA-512:	492B2C88174DCA4D3286EE6457ECE4C337E0F577600F319396BF67D1051CD48344D6C61E9AD01750EFF33FAE44F7F5821D5148A0B9983F899293D771D2F91146
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................X.....................................................................................................................................

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1000x774, components 3
Category:	dropped
Size (bytes):	110027
Entropy (8bit):	7.962333481458137
Encrypted:	false
SSDEEP:	1536:9nzolTTBrOWcwSEuKt+ZqETXWOmxGkC5Tz0+nmsDkkozRXTZK7C7OEKZq5sc:9nirO9wjMTmOmQHnhDkkkF7Mq5sc
MD5:	6F383755A7DD9EA0DF138871D81DAD2A
SHA1:	A700D4EDAEE197165A34B2A75E23E3A1AA15D2D0
SHA-256:	C6F7B7D734A303D907D2107DF0C2E205D7BD2058FC75DAE6742E4790249868F9
SHA-512:	B24CBA8A504A3E59C154506CC370C13AE5E35BC77CFC2A2A07F3E97BC043080AA676FB926289085E2993445780ACF9D2B75638818F3B95CF2DF8D27D7CCA86C3
Malicious:	false
Reputation:	low
Preview:	....."Exif..II*...........................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$.........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......................7....................................................................,......................................4./..3...]...s.$t....l.e.....................................B.g2s.0s'2r.0sG.s58&Kl.S..m<...>...x....!...7..........................................k.9.s.0s'0s.>F7(..._.!..Lk.............Y............................(T................P4...4.L4..3Cp..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, hostcomputer=imagery4], baseline, precision 8, 758x758, components 3
Category:	dropped
Size (bytes):	50048
Entropy (8bit):	7.872799350933082
Encrypted:	false
SSDEEP:	768:gFQgK3Ho/Oc7GeI16H8CKAyB0y0KoGzcyrtEwOUWyHWOn3Gw4/rjCIFeQx6hjY:gF9uHo/OLgm0HkJO5UWyHWO2R/XC8rxz
MD5:	B81A424D3A0FA539E4E5FCB85E1C48B8
SHA1:	76995A92AED4A49CF008AE60C91AAD78B0DC14F4
SHA-256:	808DFDFAAA0316DE1FBAC4F8FDDA7170EA2414D71AE8122BFD888E62401D3A17
SHA-512:	361F81DC02117F2384C5356B16E653818416681339C98DE6DA1DCD944320377537BF5B9F02E6D02C5C76D9E81C0D8B649A0476EF6EA1FB32F59429A317B87332
Malicious:	false
Reputation:	low
Preview:	.....,Exif..II.......<...............imagery4.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".........................................S.........................!.1A.."Qaq2...#B...Rbr...3C.$.....%Ss.....c.&4Tt...6DEd...............................,........................!1AQ...2"aB..RqC..............?..J" ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." "".

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 980x800, components 3
Category:	downloaded
Size (bytes):	188709
Entropy (8bit):	7.984996254778926
Encrypted:	false
SSDEEP:	3072:SlPeNMRrx1o19zLKq/KtUzRjKKD1GrC5pFQhz4sP7+874XaIO9TQtIMPv9vjR8E+:6PgIrxeB29Szo0GryazqnqZ9TDMd6J79
MD5:	5521FF8608C8B926CD70B0204FADB2F5
SHA1:	8BC27CB373F307EE648C5599895BFFD8BD4B69FC
SHA-256:	153BE77B6A153527243E72E78B12028AB5340ACF7613F5F39D63A17E38D57EB9
SHA-512:	A84A5FBC9AAB5035EB90172A3EC661F0840439B9C600BBC501CD415DA639D1F11ED3FABF6406C127C9D95ED95E9887E652219F2718F13FEB5D6CC4620C049BF4
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/8e02e850002eb3ce0a0be48daf2693336403eb86.jpeg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f........w.......w................0210....................0100................................ ...........ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...... .......................................................................................X.....c:.8.yG..O7.....b....Y.-...Z.=..........................................................y[...._#.rG=L#..}.\.1.l.c......:..

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.254165647130566
Encrypted:	false
SSDEEP:	3:dngJviukoESWljGkhbAYn:WVeSW/9
MD5:	6EAD198554C0D08245EF09F90978F247
SHA1:	C53AA12A7A507D43673FDCD5AD4D0DE2E2C68225
SHA-256:	84AE4688965BB1862D333E50E86D9A1BAA9AB463803E9E09D45196339F2F24D3
SHA-512:	B6D709FF4D3EC35609D9ED461395FD3652C2B834399BB533BE5C173302A8EF6D36D822C419373F285E07B5EA85302D6765B771B68433D72FA36DF9F889F27F5B
Malicious:	false
Reputation:	low
Preview:	data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	53886
Entropy (8bit):	7.922996589608828
Encrypted:	false
SSDEEP:	1536:KwgU3WfzCTrbnELu3rkRhbInXvJQaIFKh:WHzCTrbELu3rkfUXvJQaeO
MD5:	FF7E618F7FEE77128AF4DBB45622E951
SHA1:	EE9927A6D41D177C9EF005809835565523C4D698
SHA-256:	297C830A1E286A98A4B34B38C2A309140DC7682F643BBB4E30690FC688941C8B
SHA-512:	7F3A3F5F0807CD263006462EC78FCAE0CB368DD982377752EF0148FADBF3F48E33E2856E291D2A9A8E61E73501321466715733E146DEE415B5D8EEE83D3C959F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}....................................................................................................................................................................................................................................

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 610, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	415868
Entropy (8bit):	7.991742552429063
Encrypted:	true
SSDEEP:	6144:IZXyKeR7ywn5g932gkAr7rH2Mpps0OFye0T69s+9KiZN+vmHv1DLqc:QXARK9mgHLH3vOd9EPvmHdDuc
MD5:	4EC9AF0735BF453A0F4ED6D93EEB0CE7
SHA1:	DCFEF80F1DB2C8C970B8E2951DB6832FA39EE897
SHA-256:	8DBB4084867E26396946247AA776227153CC05C654EF1F62BE3777A4576E003A
SHA-512:	308886CC5FC3926618101C5FB8EE9A2677A481F270CAC2E995DE5D7DBABCC788D4F7827113C53BCC5BF3F7AF833E9DFAC1631E4B20446D5EB38C34A7969423A2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......b.....T.......iCCPicc....c``\...[.$....WR........~...A...A..21...1 ...'.v...D_....@..LI-Nf``......\PT...........```.)...b``....!...;...V..............NBbC....d..Ld.$...A.R.....O2'.N....&`/.(m..Qs....$7......U...g..._{..K...KR+J@.....@a..6...E..._...' .f20loe`....SY........<...M...Ft....pHYs...#...#.x.?v.. .IDATx..w.\Wy...[...l...7K...Un.Slcl .K5I(!q ...@./.....`..;..-.%[......;;3w.m...-....]iW...g>.23...{..y.sH..s..(P...Y.?...u~.....l.$./\..[&!....0t.... ....X(R.. .......B.)%.D.<.y8....4.\W.;.GWw.4U5.z..s.b...X..D....%.G..=!.....k..w...[l...q.J0+.y._.g.........I.....}...HT7.RB...(P..i.8..@.....'..t...B!.M.].=... .z.c5m-'...MM%..y>2....!..$..s#d...o...?......'..{t..\.l.[.e..U.....(.B.P...p<.H.RJ.....V[S}.k^..d..QJ.83.Q....u....{O.A..(.C.s.2gg.~F.L.#c..]"..b..r.!..k........>..C.v.M......=J.@w....._..7(..(..uO...R.J...1...7..#.cx....y.?...}..._Z.2..:.r....G)..C.>mc!...R0...#.._.umt.........4M&..p.F......U9o.w.~d.^m.n.X...gA.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 1300x1300, components 3
Category:	dropped
Size (bytes):	320912
Entropy (8bit):	7.962977666629721
Encrypted:	false
SSDEEP:	6144:3YtOZtlBfkYPngQfeX/eJE7OwJJpn8DXSBqMm+HTEi6wA2PU0g54:39tlBjgseX1/n8DCBq+H16wA2Pg54
MD5:	150E1221B42CED4CAA07EF8C72E53C8F
SHA1:	647927C446B7B0A66455E62D2A02325CD4FBBA7C
SHA-256:	9A0FCBDA14BFC51E65936DAE3A47D7A3766EC60CE197488B1A09A74963124F92
SHA-512:	C5D2F2F7ABD57024D7DDC1F91F836650ADB9E513D96DF5B4E2994DE9651447A198B944E569692A3EC0478C09D1ED0177309D743D1A38AF7E0D5FC38A9A6E3676
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(...........<.......f...i.......p........w.......w......imagery4............0210............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..................................................................................................................................................................................................................................................

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, height=3464, bps=0, orientation=upper-left, width=3464], baseline, precision 8, 1000x785, components 3
Category:	downloaded
Size (bytes):	203822
Entropy (8bit):	7.957341566442863
Encrypted:	false
SSDEEP:	6144:4kM6BS2FrJba98UskpNk8Y7Idy/Kn1DLbJ1m5mjfo:26rrJuhskprBAS1Djjg
MD5:	FAE37E5AF3DA89FCE1D0119088253FB5
SHA1:	D25A5A5B7CB8CAC9F08CAD82207BEA2F5CF0C8A8
SHA-256:	279C2F260AC73B3393612492F4A04CEC137DE922147ACBC1F52DD30699C10533
SHA-512:	9AC12BE24C65FB4E8BC7381150417C92F8ACB65FB7791F880E889E0A49A37B5C75963AAEA2C76A39222D03F74E185E899027D8CBEFBBF540C0D5E97E1FF3EFEF
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/bae3b8c20de926b7be25fbf7285b22e3d630f6fa.jpeg
Preview:	......JFIF.....,.,...."VExif..MM............................................................................................(...........<...........i.....................-....'..-....'.imagery4............0221............................................................................2.(.....................:..........!........H.......H..........JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......~...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......~-x...........m4.....u/.....

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 335x327, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	9304
Entropy (8bit):	7.977000071756202
Encrypted:	false
SSDEEP:	192:WZl8M5OqMyIfoiAc8z5FJcUGRBh08nJj2xo9xNLe9SzS0SV:W2UIfo55P5Mh04l2xINLe9Sy
MD5:	171C2626ECB9B9B9E7AB937E246E3832
SHA1:	53B5F7F8985E69A2F56BB730ECBF7BD5652B8A3F
SHA-256:	86D92EB2CB94763A6D2D8A4614E30754E6B46802F174E7DEB032551996CC3A09
SHA-512:	32C431ADB21398385ECFFEF82EC77C30AEE375DE1CADE34053C69AF0860006174915E27370EE677730A7747066A74D14F7DA073EC09B11785E6809F77198558D
Malicious:	false
Reputation:	low
Preview:	RIFFP$..WEBPVP8 D$.......O.G.>m4.H$".!#. ...cn.s....w....a.w....{[.<../............_....\|_.^........f.M......g..Z...R/...=:.........-.o.......%..........A............_.~)...........~&~..k.?.G.?T.{.#.k..............o.......i..............7..._.G.?.?...,..}!...g.W......{g...9.....{.....~X....]....{.I2....6I...Z.k....~....]...$..L....\|=../v.....f..Ol..F....dm.b4_...^B..3.K?W..]e~c.}Q.c....@...&....Q..~.@....YT.?U&..W......NRS5.>.,W\m]..X.\|..`;..I..{J).....Wn.....[Q.T?..'P......\2.UZ.5\_....m.c.h.\|.."W.*.6.#R..%Y...o._.1_.....@.z5P..r.\|.lRlD..E2.W,{.x.....@e...Fm.;..d...t....h...^-..."I6....4\|.(b..."...x.....u.Wdl1....p......K.7Vf(....iep....u.O5:d.N......?..-.iK..R.=....f4..m\|}...a....[.:...R.7.]..GeC...7.!....[..c...ukT9....zY3..k.}%...M]....p2.Q.]....=....Q$d8s$..O...>..V.e.......W..cc.....1/]...]&{..wQ...>.....c.L....x..,..u.?...9U...drE..k....c.&.i;.2i.q.u......i.....c.6...,....s.-....a.....K.w.K5%...J...=.....fX...y..47...R..r.6...c.:8.....\1<.V...{

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65440), with no line terminators
Category:	downloaded
Size (bytes):	100535
Entropy (8bit):	5.410360353819812
Encrypted:	false
SSDEEP:	1536:37lLq6RAEl4LJYJcuuoN/UVQ/CBa4KgkO41YUzujc3lD1OljrZWQ:MEl4UX/T/Oh/kO4iPc3lD4ljNWQ
MD5:	EEBD0A557EE3947FF12C8903AC570397
SHA1:	7240A1C457C004C8358B039C5F73253CBEA8C9C5
SHA-256:	45E17D4CDAF9BEC6DE2816372871D3D00042407A1CA06E20EB0C11A8EDBED8C2
SHA-512:	8154FC195EFCB59BF9E8C6BF805924B0E22AE8C1439BA4347E3C44320795822D25A52CA0EDA11C2924AF364FFEF618EF59C7E42DB05C3741F2047C4F645E19A0
Malicious:	false
Reputation:	low
URL:	https://static.shopymn.com/liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330
Preview:	"use strict";window.NP_ENV={PAYPAL_ENV:"production",PAYPAL_CLIENT:{},API_HOST:"",STATIC_HOST:"https://static.shopymn.com",STATIC_PATH:"https://static.shopymn.com/liquid/buyer/public",CART_DEFAULT_IMAGES:"https://static.shopymn.com/theme/faker/pic-4.png"},$(function(){window.NP_ENV.config={host:location.host,href:location.href,cartType:"1",cartToken:"",copyCouponCode:"",coupon_code:"",location:"",show_buycart:!1,currencyList:null,currencyEntity:{currency_code:$(".J-currency-code").val(),symbol:$(".J-currency-code").data("symbol"),rate_value:$(".J-currency-code").data("rate-value"),currency_text:"",current_currency_code:$(".J-currency-code").data("currency")},headcode:$(".J-currency-code").val(),headsymbol:$(".J-currency-code").data("symbol"),headRateValue:$(".J-currency-code").data("rate-value"),headCurrencyText:"",navigator:navigator.userAgent.toLowerCase(),isMobile:/Android\|webOS\|iPhone\|iPod\|BlackBerry/i.test(navigator.userAgent),scrollPosition:0,holidayStyle:"default",EmailReg:"^\\w+

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8360
Entropy (8bit):	4.257310579604133
Encrypted:	false
SSDEEP:	192:bT/QeuatUmaT5xonfFxmg5Vw2aam/YlBVtBKUgj8pIOM3:matIT5xonx82aa2YlB3BqOM3
MD5:	C4350BD99DDC853D49568CBE8A7BA0B7
SHA1:	0B61FACCDA241058B5C7A6BAC122600CCAC59328
SHA-256:	3DACDEE596E1BB252D671F8F0AFB51C46981E37240C9D4B2377BB66129D4BEEC
SHA-512:	8B3D85CE3EC7DD187C4B8C71BBD75F0E2F65A170EBD120ACB22A61E2E6942BD235FEEFE9DC08107C9C96921FD968972DEC92A88CF8A52A865DBBEDFA44782B60
Malicious:	false
Reputation:	low
URL:	https://static.shopymn.com/liquid/buyer/public/img/payment/maestro.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="80px" height="40px" viewBox="0 0 80 40" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>maestro</title>. <g id="..-......" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="mastercard" transform="translate(0.000000, -0.666667)" fill-rule="nonzero">. <path d="M34.1475682,32.7657087 L34.1475682,31.2020164 C34.1660041,30.935979 34.0690739,30.6748721 33.8815062,30.485309 C33.6939385,30.2957459 33.433872,30.1960582 33.1676543,30.2116779 C32.8168228,30.1886781 32.4812793,30.3584471 32.2919866,30.6547241 C32.1194061,30.3672808 31.8034053,30.1972804 31.468442,30.2116779 C31.1767919,30.1969341 30.8991438,30.3377414 30.7387189,30.5817518 L30.7387189,30.2742256 L30.1966389,30.2742256 L30.1966389,32.7657087 L30.7439313,32.7657087 L30.7439313,31.3948718 C30.7203608,31.2223679 30.7750168,31.0483464 30.8929843,30.9202963 C31.0109517,30.7

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	70881
Entropy (8bit):	7.949670017456015
Encrypted:	false
SSDEEP:	1536:LzyNUNgj1lKRcSGVRgDkczowy+mpzxbWTgUmSvL2xJjMrI3y9a5dzEmLQ51GbZGw:LeGghIcVGfzoY6zxiTgUm4L2zjoxa5d9
MD5:	E80C6B906C6D2EDEC0B0531B88A90E90
SHA1:	79B04B5264168A4470AC85A173C65E8EA24BABE8
SHA-256:	229CE6539404EC2EDD7ADABC8B19F6DE6ED30E23934337B64D102CAE179C4FA5
SHA-512:	9C66B1C878418FA0E481DC8D7EB7218C41C2B0CB7D39796735194EA5B53D77F779277BA11024084906DB2C99480682C93266BDC456FB676A85C980DF22205800
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................,.....................................................................................................................................

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 743x800, components 3
Category:	downloaded
Size (bytes):	60660
Entropy (8bit):	7.886369126302777
Encrypted:	false
SSDEEP:	1536:SguGXz5FhNov2vvjwrVrsb/C+MHiP4d5kFei:SgukFFvov4vsrds/GCUcZ
MD5:	408C2DE2404A48F5A406E06AE3A287F6
SHA1:	280CE2A591A293C1F829EF775A8E5CCFC6DC00CE
SHA-256:	DCA454F82199E3FA0C0154C01261FBFCEF9FD36E932F680F66E9A9410FDFC113
SHA-512:	1E9AEA6A1F7BCA8312971C97D45A25B82CB84028FC789C6183A8705C7F8F729322B132F42E71B345BD513A44AFBA06011D4E8B5387579AC2D5AAA01827B3E880
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/7393e7b9c4c1cf5cc9c8284ee1b106479bbea8cc.jpeg
Preview:	......Exif..II...........................V...........^...(...........<.......f...i.......p.......................imagery4............0210................................ ...........ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...... .......................................................................................,........................................................................................j..........f\|<<+................................C.i.O.g.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 600x314, components 3
Category:	dropped
Size (bytes):	30022
Entropy (8bit):	7.928385234427563
Encrypted:	false
SSDEEP:	768:GmYmL24qloKg0KkXwaWJhMaWD7AUF4cPQmGFODxXVQ:XH/aW7yAImgXVQ
MD5:	E8879606AB5E311C76F9C443F9EC72DF
SHA1:	9D65FADC09FE2BFB93D3A8BE89E7AA3AC2197E2D
SHA-256:	15241B4884F56CC77F24E1688DA95878D21FD3492D053FF437A38F2F1F0919CA
SHA-512:	EF06B67D784DF552C4F0901FCEAB3DB5CAAD49F2D6B330716FBEC78BB387CCAF516C8CEE7421E2EFDE9D6BB916BAC5714E581AE7FC569388383723A3B52D1763
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......8c......8c................0210....................0100....................X...........:...........ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}......:.X...........................................................................................................................................................................g.1..v.^..8..(.<.Y.........,bX..T....<.kBx..

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GPOS", 16 names, Microsoft, language 0x409, Copyright 2019 the Blinker project authors (https://github.com/supertype-de/Blinker)Blinker Semi
Category:	downloaded
Size (bytes):	80044
Entropy (8bit):	5.561598809265187
Encrypted:	false
SSDEEP:	1536:FFLgNzbwwzx11NXTsrxr9LQ84xMDfLsmRZLQilTlUozcccg:zLgFkwpNX4xYMDj75BlUozcccg
MD5:	F726BF1DB9FF0B206C26A63471EE5569
SHA1:	9927626F5E11CE7D4E4AF21A908C0871E8286EE6
SHA-256:	53B4107CE8CD899D077A5EF65916BCA1720F9882A5D77ECE138A9A9B131AC6E1
SHA-512:	74512C41C08F637C71E1F85C43766D4AADF1068CA2B2DA123960F7BF5CADFD73AA9D24A34559C4AE9DD176C42A593D757BEE5A36D0FE46DA1A13DA6375666A16
Malicious:	false
Reputation:	low
URL:	https://fonts.shopymn.com/liquid/buyer/public/css/font/Blinker-SemiBold.ttf
Preview:	............GPOS.W.B...0..l.GSUB.w....3.....OS/2..Z........`cmap............cvt ...M.......lfpgm.6..........gasp.......(....glyf.-D&.......nhead.#.....0...6hhea.'.U.......$hmtxZ.7D...h..."loca............maxp.......\|... nameX...........post..Q........prepZ..;...........2...L.s.....(@%........g.....W...._....O............+!!.!..3..L.....f.sZ.A..........[.s......@........h..."M....#.N........+3#.3.#'!.....3'&&.~.\|.~-......,.,...s.....&T$.. U.......[...&...........s......s.5+.......[...&........ps......s.5+.......[...&........Us......s.5+.......[...&........os......s.5+.........s.....5@2.......g.......g...._..."M...._....#.N............+3#.!.!.3.#.3.#'#.....3'&&.~.....3.5..,.w...,.,...sl.g.q..v%P....N............&.........6.s......s.5+.......[...&........es......s.5+.......[...&...........s......s.5+.....4.[.s...#.9@6.............L....K.......h......e..."M...#.N..%'.....+3#.3.#.....3267...#"&5467'!.....3'&&.~.\|..=G......'.68.-+......,.,...s.........G..1.(9.\|..&T$.. U.......[.H.&........

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.512726625540948
Encrypted:	false
SSDEEP:	3:HWwCn15T0Hv2KtIDthGDthGDthGDthGDthiQn:jC1DrGGGGj
MD5:	3CB29F355CEB6127F9538B93A7D53AC8
SHA1:	7854BA374D087C1E296B77EA50B0BAF687F76436
SHA-256:	7E9D6856E131A67D6993D357BB10EE97B85429BA32F6B6452598822F6B92B70C
SHA-512:	427717740D2E68C112BD79962F27ACADB533E8AE0CB911A315872E50281E6ABA241E2A4FD0E30B33C146C1386AB22381EE62A24BC3525278E79D39695F3FA0BF
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmmUdjoO4vOvhIFDV9k6z8SOgm8uRL3Jlvx0BIFDQbtu_8SBQ2RYZVOEgUNkWGVThIFDZFhlU4SBQ2RYZVOEgUNkWGVThIFDTWGVBw=?alt=proto
Preview:	CgkKBw1fZOs/GgAKPwoHDQbtu/8aAAoHDZFhlU4aAAoHDZFhlU4aAAoHDZFhlU4aAAoHDZFhlU4aAAoHDZFhlU4aAAoHDTWGVBwaAA==

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	63140
Entropy (8bit):	7.9359465448196955
Encrypted:	false
SSDEEP:	1536:vWwRLGjOTCWDthA+TeQ8bgvPuA9WmB8JJwnKVe8tIBBh7kVObyc:v/qy15ewR8bgXuxeuynKVeG8hkgz
MD5:	E180934640BC82AC3DAB5E6DC5F11882
SHA1:	E03E193224A2EB9866DE46FB0B43D309F69FCDB3
SHA-256:	C0A8F50347DA2FF7BFD4B2839529D11A7CC8884B3E57C39AE4F294605AAE7B36
SHA-512:	79CAA1D1218EF38AE93843293A73E533DA0534CC245EBEFBFB15E1A2430C6E223B40DFE4670B63933C7AC35A1481C83A79E85B9F2BC8B3F7DA35AA5DC72575C9
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/42fe369e4f6000c81180a4420f0bd212c0832e7f.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................,.....................................................................................................................................

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 1000
Category:	dropped
Size (bytes):	471104
Entropy (8bit):	7.851897229898751
Encrypted:	false
SSDEEP:	12288:AarG2Qt0iv6EH7kzXNH3Em2kSXAJz1yJ6A1Xo/KfXCSguglTshsQLDd:AarG0C1kN3Em/yJ6A1Y0jwlkJd
MD5:	A9F22836FA16D2B5DE903EFB5EA30388
SHA1:	EBBDC51BCB96BBAFF2D742BB2D17DB396EF415A8
SHA-256:	BE676C00211232BF1629C9F7B7EF6B6E8117AE89BB7A126610A45F125325F3D8
SHA-512:	7AB1392E19950985D71D5B322D599FFF4FACC6F9226A6656D68D65EC08AC124D364FB88EA92131F8DBE066A91F2B12F47D0FCB82567D053A12133711FBD4A137
Malicious:	false
Reputation:	low
Preview:	GIF89a.......W....0.`V.c..t.......q...Qz.................. .....z.....Sy.....#xxy.AU...UUUcdd@AB222....Z..k.....\|..4U.e.....I.....jS....x.f....=dw.6Vi....r.N(O../...-HQ..<Wl.@Y......4H6..[.....B..a{.................$>.0G.If.Z.~KK.Iu...-....%............u...w.....p.......mF'.Yz...={..Qk*h........Ri...1....g.0.:..Et..c}....c...................@a..................etzf12.-2.t....jknBQV...GIKnWa!$'....."I`x..Gk....h........y{D...6d@.....[EEncK't.'...hg....$9.........".....!k.......ZFW....Ql......y...iv.Iv...ytg......o....4. guj=#/SQG.Iq.R}.=9Uca....t.6><4V.....3v.......v....,..EQHT.....Ql...,ItEk..[..c..k..@d....Im. N.c..Im......(............@m.@d6...k.......6...k........c..Ic...D...k.8......@m....Id........................ -$.........(...........;..2...$JO.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 560 x 560, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6788
Entropy (8bit):	5.038317297060852
Encrypted:	false
SSDEEP:	192:QpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOpOj:v
MD5:	4CEBE560ED4EE509DBB64D1972403039
SHA1:	EFDD1FB85E49734B2DF45C3FD045152803839867
SHA-256:	1648D9892C801E1F6253943DD752D2851B1724A366A4AD01AC4B5C7E4820285E
SHA-512:	259024884A42A00B1900C3D95867E47FAFB7A85F350291E299AAD5CEE425C35229C439BE3C41B030857003B18C08870B7D29764F4BD618C328B91A241D994EEE
Malicious:	false
Reputation:	low
URL:	https://static.shopymn.com/liquid/buyer/public/img/default.png
Preview:	.PNG........IHDR...0...0.......Qo....sRGB........>IDATx...... ..1`.q...-Nr'..>.g..G..........PVQ.. @...._....... @.@N...U&0..... `....... @ '`..........0`....... ..0`r..L.......0~..........0...&@.......?@..........\e.. @....... @.....r..L.2... @....... @....9..&W..... @....... @........L`.... @....... @.@N...U&0..... `....... @ '`..........0`....... ..0`r..L.......0~..........0...&@.......?@..........\e.. @....... @.....r..L.2... @....... @....9..&W..... @....... @........L`.... @....... @.@N...U&0..... `....... @ '`..........0`....... ..0`r..L.......0~..........0...&@.......?@..........\e.. @....... @.....r..L.2... @....... @....9..&W..... @....... @........L`.... @....... @.@N...U&0..... `....... @ '`..........0`....... ..0`r..L.......0~..........0...&@.......?@..........\e.. @....... @.....r..L.2... @....... @....9..&W..... @....... @........L`.... @....... @.@N...U&0..... `....... @ '`..*........0`....... ..0`r..L.......0~..........0...&@.......?@..........\e.. @....... @.....r

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	72885
Entropy (8bit):	7.951173726269516
Encrypted:	false
SSDEEP:	1536:drEikIQ+bV48wCLZkvy4gFUKc9QgLvtOKrEAph8HYyfP:ZHbK+264gFU4AMKIA+YyX
MD5:	C1B74E46A3E15C510AF3371600E08AB2
SHA1:	433FD56A0475CE06B06147E7E1C308F84203F913
SHA-256:	1C059BEBC2B6AF2605F99D294471C7BBBD4DFA0B195B76497577D04C9F4255A1
SHA-512:	CC70F886291712888470A3A9E17A2B1C7EE143775BA63E0EF4C95863A836489D1FD4DCD784BA0B4D803DA944761D740902F205C1554A2E811D47C87B9E37B208
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...............................................................................................,....................................................................................................................................

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	42925
Entropy (8bit):	7.890476782327515
Encrypted:	false
SSDEEP:	768:NP1ILvRWotykxMLx5aRzEG3NegYUjY2aGysFFOYITyzLztVaKFBGGv0XGZrw:NdIL5ryV5aRcgYSYuHFVLzbZARGG
MD5:	961E819A375171A345EF1B884DF22D68
SHA1:	3D7F11B5BF9DC2004BC542A2A9465A3A3EE686D9
SHA-256:	091C7B80AE2C4BBDCCAFD3D3082D633DAF4EF5D504CF23A4C4814B98641C8CFE
SHA-512:	77C64977E5CB45C8F0F0050A7925C25C670DD646D22C41A1013CA8D2CFA3B83DF27199AC1BD7FB46A989082112D03A47973B90DFD31B86524E3104F37AF50DD4
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}....................................................................................................................................................................................................................................

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	24606
Entropy (8bit):	7.966522573403605
Encrypted:	false
SSDEEP:	384:+MQgTqZXvr1frODw01oc5d8koeYbfDj9/EmpPHeL0vSzpYaUEPH6+:DQxZT1TODWc3ohbLBDp/WVtYadf5
MD5:	7DC2CA626C17D61ECC9CDE084CEBE168
SHA1:	95219BB369E7E23D5D21D605D97C8B2438208A0A
SHA-256:	2C1A427730E64F385BE7CE33549C59DAA1C8DE0ED0A310E6C10EC8EB06A5E678
SHA-512:	0EF58DB89CCE4D4BB21DA48B7684075B4B957489A1B9C48B1C26FAF6D110003653364E1368FA8EDFA67EB571366D578F597D84AF8D5096BA9E529B61075D1825
Malicious:	false
Reputation:	low
Preview:	RIFF.`..WEBPVP8X....8.........ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$.........ALPH.......m.8..c._.F...N..m.\|...Q...h.V..Z............z....]^.....vw[...`..E .G.o..$,...r.x....c.jI....ol..5.I+V...jR..R,f...77.3...-$.oaG..1..U.P.~........o./.}.u.M\.......X..r....&......72.AI6.W.<.g..w....Z....f...}..rD...;.^e...;..m0.fn.{....Y9.)7.....mIX...Y....[....O..Hy.o.AF.l9....e.s....?."..R....(....k..[r(r.m2M....va.1..B.\|..H...p;.../.".v.%........DE.D.U..\|.C........TY..(....9U........F.mL(NT}U...9..E..Z.C..p.DG=b..j..7.Q.+W...`$...........4...^._XT.....;.J[{.8...*u.......+.....c..H9.]

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	74656
Entropy (8bit):	7.870241511214251
Encrypted:	false
SSDEEP:	1536:q+RMAGW/BHe1frmdiWN0cStTbGmja792T6bifa:jMW5ujmhoTbGmohx
MD5:	F0DC0639B62B0C88A89A6800168376C8
SHA1:	B94CE37BDF5A5D22E0588049B9C28927D774F19E
SHA-256:	B2324A3917DE9B5E8EB70DA9FA5545A93D433EFDDF2FEBB7416C4F01D983EE6E
SHA-512:	228F75149CD0743829F3131E162BAA142B6957F4507416A60E18DA94F5FA65EA7A5521E154BEB005A256C62B9A6B3A2C3B61017884BB2404216578E2595D13A9
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/28a9c5ac9bd24213c80ef0b7a6e549b5.jpg
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(.....@..m-X.KV7z....)..=....@\v...(......AaP.k...){O/....Te.}-`....(......(......(......(......(......(......(......(......(......(......(......(......(......i`.?>.~.......{D2......

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 1000x785, components 3
Category:	downloaded
Size (bytes):	179764
Entropy (8bit):	7.979720616699722
Encrypted:	false
SSDEEP:	3072:mHf0B1+u/604f3wdMmtleG12LJK6cFpjs4O28Xxf7HM2uWDEkImxIhKvVmC:IfO1V/LO3wp1YMFBTox146pvQC
MD5:	3252950140BCA038F61E0FE12629D175
SHA1:	26C4A380191B2CF7FCB0FB0E02AC34C8BE0C15F4
SHA-256:	CEEED2A7F02F7ABE03E61717972950166A59B20A8AD8EF23D3C5CEB86ED504C5
SHA-512:	6DDF0A1325783766A7ECEFF1E08EBB4CA6A85996D3213E02C32C6E1D3F22838D018AF7EAF93194BE8A79C79C4CB5AD4BFB78CF55B5A48B75F64A81AACAB886CF
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/b8ad5401dfbf111b38bcfd098e58a9a0044e7e9d.jpeg
Preview:	......Exif..II...........................V...........^...(...........<.......f...i.......p........w.......w......imagery4............0210............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................X....................................................................+.t....Y..1.BX...............................................................

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, height=3528, bps=0, orientation=upper-left, width=3528], baseline, precision 8, 1000x781, components 3
Category:	dropped
Size (bytes):	216450
Entropy (8bit):	7.9574271523820705
Encrypted:	false
SSDEEP:	6144:jGYfPB8aF10rlFlG0RKpY8D85Qs88ryeKv7q:q4Yrl/G0RKpY8DJ7cyeO2
MD5:	E05E49254256FD202FB5D8259C2FC3CE
SHA1:	804D0E4582D1FEBA4CE01941961717EF36EC1409
SHA-256:	4685D626910A1351F4C2009654FEB6B866FADF2830B6497DDFFD5F2E21B0C445
SHA-512:	DCECDAD1601A7F1BD8EC44B63D297C784AACE0EBE350E8C528EC45E797043081B77A04FF01DB746096C1332ED1682C16703BC06B56E36918B2CF32A8CFF87F8E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,....#tExif..MM............................................................................................(...........<...........i.....................-....'..-....'.imagery4............0221............................................................................2.(.....................:.........."1.......H.......H..........JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......}...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....i~4.89[{.........h......r.pX

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 1300x1300, components 3
Category:	downloaded
Size (bytes):	320912
Entropy (8bit):	7.962977666629721
Encrypted:	false
SSDEEP:	6144:3YtOZtlBfkYPngQfeX/eJE7OwJJpn8DXSBqMm+HTEi6wA2PU0g54:39tlBjgseX1/n8DCBq+H16wA2Pg54
MD5:	150E1221B42CED4CAA07EF8C72E53C8F
SHA1:	647927C446B7B0A66455E62D2A02325CD4FBBA7C
SHA-256:	9A0FCBDA14BFC51E65936DAE3A47D7A3766EC60CE197488B1A09A74963124F92
SHA-512:	C5D2F2F7ABD57024D7DDC1F91F836650ADB9E513D96DF5B4E2994DE9651447A198B944E569692A3EC0478C09D1ED0177309D743D1A38AF7E0D5FC38A9A6E3676
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/ddaee3b072f5adc45405925d5ba15ceeed727c59.jpeg
Preview:	......Exif..II*...........................V...........^...(...........<.......f...i.......p........w.......w......imagery4............0210............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..................................................................................................................................................................................................................................................

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	77679
Entropy (8bit):	7.964023883976415
Encrypted:	false
SSDEEP:	1536:Mmx+Z09Ihf8TwaSXwY9MUqtzyAGg7oXPHUc2Sm8B2LcimwUdt:k7BVaSX7iUqtRGg7KP2SLimwC
MD5:	7AEEBA66166EBF0055697DAB7093193E
SHA1:	01524F51FFBE1C7F51392003774CC5E8EE7FB304
SHA-256:	EDCD5C0E9EC996C7D8B4350BD12EE8BB54F17B8EDE184F7987CB39A8BAC84785
SHA-512:	D9D959DF5EF35E1DB3ADC8B48216C7424D4DD32F1020D973705F15B84B8DF3E3DCCAA9E278A0ACE79E9CEE55A24A6714396DA46690CB1AFE603096FFD1071DC6
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/c09b8a2b191088075ea5307b7fbbda245c3c811d.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}............................................................................................,............................"RA0.H..................................4..}+.....v.................................B..M....i}..t.!l.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12166
Entropy (8bit):	4.158557448852265
Encrypted:	false
SSDEEP:	192:2o3jzzqaIlmz+lcuZ+Xhw0Q9wbQDuggwVVhmsiztPu92o0W+LfbQxRtvDPrKunt:1TzenE8cs+X7h0VVhmztPs2a+LfbQxTb
MD5:	9AD047015966E1288B080A07FD2D7EBC
SHA1:	8D54FC72275FD33446B79D2DB4D2CDFF23B06363
SHA-256:	0D18C859B3B60B5E1F77185D440A61AF49502A178EDAACA66DD076D98AF11890
SHA-512:	59BDC7EA9BDAE352FBF3FA282A43486A6A1498417856CF22F6B0FE7EB60455C9BE536D3EC0E41D70E7DED975165BE604950F1A786081F52F6452C5FA854075EB
Malicious:	false
Reputation:	low
URL:	https://static.shopymn.com/liquid/buyer/public/img/payment/mastercard.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="81px" height="41px" viewBox="0 0 81 41" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>mastercard</title>. <g id="..-......" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="mastercard" transform="translate(0.500000, -0.125000)">. <rect id=".." x="22" y="6" width="34.9705125" height="28.6839197"></rect>. <g id="..-10" transform="translate(23.485256, 8.204029)" fill-rule="nonzero">. <path d="M5.61210517,23.7259303 L5.61210517,22.1487579 C5.63070006,21.8804271 5.53293424,21.6170693 5.34374958,21.425872 C5.15456493,21.2346747 4.8922564,21.1341276 4.62374379,21.1498821 C4.26988785,21.1266839 3.93145172,21.2979165 3.74052724,21.5967476 C3.56645891,21.3068263 3.24773402,21.1353604 2.9098831,21.1498821 C2.61571873,21.1350112 2.33567709,21.2770323 2.17386931,21.5231462 L2.17386931,21.212969 L1.6

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GPOS", 16 names, Microsoft, language 0x409, Copyright 2019 the Blinker project authors (https://github.com/supertype-de/Blinker)Blinker Extr
Category:	downloaded
Size (bytes):	74388
Entropy (8bit):	5.598799262957782
Encrypted:	false
SSDEEP:	1536:yxEonXB2gKSFUBKL8Hs6nDq8wOdddddddddMMDfLORZLGbwHfcccg:yKoXBZKzM6RwDMDjE5HHfcccg
MD5:	D450405CFF51AF32F634D0F310C61C28
SHA1:	08C90B81D9A96530AC78B6C440623CB8E7A32A0D
SHA-256:	F2CE05EA0FA02D3F216ECDF769CDCD94ABE235659E2244DA8C5DF05C307F63C7
SHA-512:	3BF64C5F6F3C8D4809C6A49ECC5C141368D36E5D15FE8970D7FF4E7F1792B4A022B43804DB4814A89577ECC01345C92833EB47AD4D84B2CEE391BC045852CDD4
Malicious:	false
Reputation:	low
URL:	https://fonts.shopymn.com/liquid/buyer/public/css/font/Blinker-Light.ttf
Preview:	............GPOS!.\....\..W.GSUB.w..........OS/2..Z........`cmap.......,....cvt ...........lfpgm.6..........gasp.......T....glyf...D........head.&.....L...6hhea.*.d.......$hmtxZ.I........$loca............maxp........... nameZX.....(....post..+........prepZ..;...........2...L.s.....(@%........g.....W...._....O............+!!.!..3..L......sF............G.s......@........h..."M....#.N........+3#.3.#'!.....!'&&QD.C.E@.....N..N...s......<?..'K........G...&...........s......s.5+.......G...&........ls......s.5+.......G...&........]s......s.5+.......G...&...........s......s.5+.........s.....5@2.......g.......g...._..."M...._....#.N............+3#.!.!.3.#.3.#'!.....3'&&QD.....R..W..?.....M.L...s;.9.=.../H....K...........&.........a.s......s.5+.......G...&........~s......s.5+.......G...&.........s......s.5+.....4.G.s...#.9@6.............L....K.......h......e..."M...#.N..%'.....+3#.3.#.....3267...#"&5467'!.....!'&&QD.C..BM!.... ..15??=.....N..N...s...8$........),?.....<?..'K........G.@.&....

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	25678
Entropy (8bit):	7.963925203923146
Encrypted:	false
SSDEEP:	384:jqwg1mtrASpH3ZS3yeCFcJ7qT/VIkrEOPdgmqqWd0A8eboSuxdbhH6vwOVNZ8X/b:pWmtrASp0CEMFgmvM0Ayd98CRGS
MD5:	88EE7DA569352C1FACF0700A786A9CFD
SHA1:	C30927BD739DD58DBFE40CAD47A2027316E534E7
SHA-256:	FC2715F418ED218A8AD6E92B6A9127ED28C060AA97490BD467186B39575D0FE6
SHA-512:	BF63B4C0EBCEE01BAA286A9D32821F3B8A0EE4B5CF4855C9EAE65E397E2AEAD41C63AD1E9881DB89420941F46D00266F0BBFCF7B5EA3688D10B402D1EC499464
Malicious:	false
Reputation:	low
Preview:	RIFFFd..WEBPVP8X....8.........ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$.........ALPH.......m.8..k.\.oDL.U..#G....%b]..m..I.......22......ff..3.W%UeWW2D....I.A..mLG.1..l.v.&k].....Yw....;.@.1...`............ ......kG.Q..g...$....E.O...P.._.S.[...b........R.....P... .....DH./...}......ntP.f+'y@........\.m.(z....Yw.>...G?..b........txa...}.....D....g.(.n?...Q............7u.c..s.!.......o.9^.;.{./#......@.S....{.<.".......l.@. .L..w\..2.kb]...2...>.1......;..@....A.\|. .>....G.p..U......1.G;$\|.H).A".(..DB.uH...#.h."D6.#.R.2..wH......A.b.1@.:..P!..Z.....Q.W+.&.*<Hz...:.X..C3_F;.u`D...l.#.x......U.t

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, hostcomputer=imagery4], baseline, precision 8, 747x747, components 3
Category:	dropped
Size (bytes):	56897
Entropy (8bit):	7.897070511481481
Encrypted:	false
SSDEEP:	1536:gF0I07q2+yi/a2XbAz7HYWBGu0y5h2JZn6Xb/09gWySp5T:c0I07NF2XbmfGry5kJR6XjiHFT
MD5:	E0357D837C72590FBEF5A005CE33770C
SHA1:	DE732D15B2C97D9603ABB5AB081CD787523AC0D1
SHA-256:	B1B4E4623133DF720EE88A50033D8A499B621DE586D5811B171569F3D74FCB17
SHA-512:	87E6B1940F4B4840060BB8FFFEB9A4B4B80565E211DAAF17A4984E2DA9DCAEEB661F1A8F91770E22A7D6CA2997ABD0200F99A30A6A4BAC5015F96A3DAF0F29A7
Malicious:	false
Reputation:	low
Preview:	.....,Exif..II.......<...............imagery4.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".........................................U.........................!1..AQ."a.2Bq.#R...3b....$Cr....Sc..4Ts....%5DFt.&6Ed........................................................!1AQq.a............?..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	60478
Entropy (8bit):	7.930932909871778
Encrypted:	false
SSDEEP:	1536:Pa4Xqfj5D7EgKyKb5cgtJUZOIHVWlUZelJIjInLniw9kO:y4aftdWWgtJGHKvlOjILnlkO
MD5:	B8FC9C63DBEBA462E6EBA1B32D1EA6EA
SHA1:	5F68B56A6B153BA5FF516ADB6B48EE8D0A19E815
SHA-256:	BF1CA61B17D20FC5DEBAFCA0AF2F80697DB8E5B7F8634762E7E5CDAF7E0BFE40
SHA-512:	6CFAC2668892961E63EE3D91ED98FDD16F762CB0ECEADF3F07E4540B325287DBEAE7E3EB89BC48E771CAFDE90839F103D0DCDE1313B9479544ACF33EFCA8A866
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/d5a40373b44ea8111500c4289464d55d9c0516d3.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..........................................................................................,.........................................................................................................................................

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, height=3528, bps=0, orientation=upper-left, width=3528], baseline, precision 8, 1000x781, components 3
Category:	downloaded
Size (bytes):	216450
Entropy (8bit):	7.9574271523820705
Encrypted:	false
SSDEEP:	6144:jGYfPB8aF10rlFlG0RKpY8D85Qs88ryeKv7q:q4Yrl/G0RKpY8DJ7cyeO2
MD5:	E05E49254256FD202FB5D8259C2FC3CE
SHA1:	804D0E4582D1FEBA4CE01941961717EF36EC1409
SHA-256:	4685D626910A1351F4C2009654FEB6B866FADF2830B6497DDFFD5F2E21B0C445
SHA-512:	DCECDAD1601A7F1BD8EC44B63D297C784AACE0EBE350E8C528EC45E797043081B77A04FF01DB746096C1332ED1682C16703BC06B56E36918B2CF32A8CFF87F8E
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/a55bc9c6ad3e71405e43f15c29ddf78dca8e80df.jpeg
Preview:	......JFIF.....,.,....#tExif..MM............................................................................................(...........<...........i.....................-....'..-....'.imagery4............0221............................................................................2.(.....................:.........."1.......H.......H..........JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......}...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....i~4.89[{.........h......r.pX

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	64330
Entropy (8bit):	7.828108491950989
Encrypted:	false
SSDEEP:	1536:qfeJUzPOiwfaPfI4mW98Urs4GtPvJuBTMPn/xLjsQaU6klAK0Y47:2e4nAwfIi9FNUwVoFjsQaU6V717
MD5:	661C541D97FD9F40F1BBE5F641152907
SHA1:	15428D6F03F5B53F9644B9BFB2FDAB86CA017279
SHA-256:	D68683AA8AEB5C51698AD73B57AC13BA6A545C510702A72C0B6BD334944E49EE
SHA-512:	85F8E5C68E4466D5BD674F181FAF684D2A230D33D0E555A5EA6AB9F93D1F67F031358E24DB74875EB7AF529D51265B57094165CBD6C025EAA05C6CD2B7AA2029
Malicious:	false
Reputation:	low
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......y......T.@.&..S......(......(......(......(......(......(......(......(......(......(......(......(......(......(....~>~........<O.A.^.?.&.f.N....Z..U..<."h:.B}w.3...'...F...6.h

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	70652
Entropy (8bit):	7.955858041066723
Encrypted:	false
SSDEEP:	1536:jowlJw9f2w3e9DYkR6Ci4g4Cmky30GJ4g:s8Mf2d9Dzpi4rfks0s
MD5:	506FA6AD832D1A95A5AC1887B0A916B7
SHA1:	1315B3FB1265D1E450B3D6F1B44A324B91B9495B
SHA-256:	DD19E69B433F64FF92BC0275C41B458B4EA3B82FA012C6A2BE1C59F913641AF4
SHA-512:	113994026D701B393A96763D44183463D886BDBF528E186F77A2842360CBA6BA2AF6FBF068954BC1E8CCCFF1006E8F783AA3A0BB75EE9C2152AEFA4274160CFF
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/7f26ad400585781530a3e75f7b0356e48ac6ac55.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}................................................................................................................................................................).%...{.7.....................................~..GLB&..m9..7.xt.....

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 583 x 360, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19379
Entropy (8bit):	7.814346681232095
Encrypted:	false
SSDEEP:	384:y4nHSeTWqX/V3UBC7NrnFF/ViJPzbwyXEGH0+VNbDoAJ94z4ra5mb:y47N/V3UEncJ7bOGp/tHrrb
MD5:	CAE408692E9DF180175752E8BC159AD1
SHA1:	80017BBA0AB59B9225C758FC92B4CD2036A39006
SHA-256:	322B2E6062E00ACCCA1FEFCD71B973ABC9C7C23312302755E3A8EA6E5BBD4475
SHA-512:	292BF487BD34E7F245A9FF224AFE7A4A947107ED08C1147BC8C0FDF678295274292762C9473B737BCCE068395AB716ADAFB91A73B2595EEC6210C63BF3FD6B7E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...G...h.....]Q_.....pHYs..........+......iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5, 2022/05/09-07:22:29 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.4 (Windows)" xmp:CreateDate="2023-10-31T17:56:08+08:00" xmp:ModifyDate="2023-10-31T17:57:16+08:00" xmp:MetadataDate="2023-10-31T17:57:16+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:e2247c1b-fa3d-0d47-bbfb-ebbf53ebc35c" xmpMM:DocumentID="xmp.did:e2247c1b-fa3d-0d47-bbfb-ebbf53ebc35c" xmpMM:OriginalDocumentID="xmp.did:e2247c1b-fa3d-0d47-b

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1300x1300, components 3
Category:	downloaded
Size (bytes):	331016
Entropy (8bit):	7.967519694048534
Encrypted:	false
SSDEEP:	6144:Ts7eR0vL+Q4oDscUYB4xt6ZOknn3GlOSfy5zCv8sSUrmuFVcIQBmV:TKeR9QFexQpGrhSUjVzQsV
MD5:	11E06A8B4521847F5923C5113E685D99
SHA1:	426954C76556932549DD7C3E7F258AE0F94FF213
SHA-256:	1ACFBE56AC69E3C8BCCD73CF27161C745C7686EAF7F4F896524FA45B3B54C5CB
SHA-512:	9DBFBF69E5DB9EB16D76840DA57C268EFEDAC04EC1C3C7199B090457943DC9D343A444DF735216FA9D0BE3FAE3F332DD1481082A684E88F55EDD6B32BD9D313C
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/dd0bf6a7277d7e58ec2c01e3627a45275be16a24.jpeg
Preview:	....."Exif..II*...........................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$.........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......................6...................................................................X.......................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 466x500, components 3
Category:	downloaded
Size (bytes):	197919
Entropy (8bit):	7.903146223854539
Encrypted:	false
SSDEEP:	3072:Q7dWJeN1StNBlMMOYYEe3jojmcg+FvX22ZvvUXin6xOWydEENMcqgH20:Q0JeN1uDljEF+FOHOnWxESc9HL
MD5:	CD8967502776BB67C468974DEE5200D8
SHA1:	A8E84DA834228F88B555E8BB7E76C49B964244D2
SHA-256:	15185585CFE263E1F74FD1A24DC3CCF672FBC3C0F07CC544AAC4C11D1EF72679
SHA-512:	8FE42D32E78582F3AFCF454AA9F44994E499E339A83E56008D3C70855153D9B1782B1B8E7E5C126EA2F515DCB70F16AD6AB4154D62AA480426F05825FE0B8227
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/055002e1d0286662d2639006df99f438.jpg
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(....?.o.,O.?.E.......[x...z^..H.+-3L....M&..?.......u.[.+x'......3..W..z.=.~...K&.."....^M..j.m.w..\|.k$..~:.]O..\|T..i..v.+.U..mcP..O.Y.:....4.]#..0G.8..X`...3.L......YVU.GS[...^.]6...G.>~V.w{u.1...'.>\|U.p.......8.....>^P....\.....W[(...$.o.V....m.u ....."....)q.\|P...D..8.&x.....G'.$Q.V`Ym.y.[......Qz(..g..~.......^..?..#+.G.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 898 x 800, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1032083
Entropy (8bit):	7.984719575170715
Encrypted:	false
SSDEEP:	24576:l8/BLe6/b/F13SbQutWN/2BqZleM5c5HxbPKQTS+yDHbtVUuf:l8ZLeMb913PusNHZleZ5HVPQ1DHJVUe
MD5:	5250B20144ED26EADFDE22ECF97519C6
SHA1:	3F935279726A05B6A02222C06487B45FD9CA8D76
SHA-256:	E0515817BB0AEF960A0D0B2450E8E1AF72DC8A6FD51CD26B780F67FA34E260CB
SHA-512:	DA9EBB80FB85704773AB8D20771BC9ACCBAFFC1CB5C6EF065935476E2F2F89FA908080F3C2042C2AE872A783F03F1AC3447444CB940F0639118A8FE0F69B91AB
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/d334d7f24d8af21f9aa9024236873f7eb5450d87.png
Preview:	.PNG........IHDR....... .......K.....iCCPicc....c``\...[.$....WR........~...A...A..21...1 ...'.v...D_....@..LI-Nf``......\PT...........```.)...b``....!...;...V..............NBbC....d..Ld.$...A.R.....O2'.N....&`/.(m..Qs....$7......U...g..._{..K...KR+J@.....@a..6...E..._...' .f20loe`....SY........<...M...Ft....pHYs...........~... .IDATx...d.U5...D..U%........7._...0....,.dx4^.;...pUVe...v._.8.....a.-.u....8q...s.5.\:.J.U.T.R.J...)..T.R.J.U..o...-U.T.R.J...T...J.U.T.R.>.0.T.R.J.U..gP...U.T.R.J......R.J.U.T.R.A..Z.T.R.J.U.3..CK.U.T.R.J}.U`h.R.J.U.T....-U.T.R.J....+..T.R.J....Y...Wk...Z.c.R1Fc.~Y.T.W^../U.T.R..:..g....-.H`Z.T.WX...U.T...D........c<....~..n..........................7..K...9Z..+..CK.U..oQ.r".SR.].....nw...{{..n...7.........-.i..w].s>..x.....9..4.......?.....~.m<y!GK.zUU`h.R.J.........{.!..~...6..f.......{........-...~....x...{.G.Yc...X.?....j.SJ....n..}UU....?..........*.h.R....-U.T.R..~a...)....x...\|.pyssssss...ww......8.C..p...,...

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	63722
Entropy (8bit):	7.938214585054737
Encrypted:	false
SSDEEP:	1536:M4jCHWqYxZoOoDsfZoPMgaslsiaxJw6oW:M43qYxZoHMZoYsfa3z
MD5:	60BF34084533870CF7D0689034B58325
SHA1:	22CAD656C5528C4B833F334E584A2C633B71726A
SHA-256:	4E526FA3124DEB113D59FAF4735C5338C7322CFF3698A95DEF8CB47AECDDBE68
SHA-512:	E0187478D68C7D367035B188474CFE2393EBF589EC0272605C70E436DE13176F034935A13D2D2E630F8B0CD9D4D7D3CFD03718DFC3D23D4FCD09803144668AFC
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/48ac98525a67096a6efeb2f1d638268475124fdf.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........................................................................................,........................................................................................................................................

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.254165647130566
Encrypted:	false
SSDEEP:	3:dngJviukoESWljGkhbAYn:WVeSW/9
MD5:	6EAD198554C0D08245EF09F90978F247
SHA1:	C53AA12A7A507D43673FDCD5AD4D0DE2E2C68225
SHA-256:	84AE4688965BB1862D333E50E86D9A1BAA9AB463803E9E09D45196339F2F24D3
SHA-512:	B6D709FF4D3EC35609D9ED461395FD3652C2B834399BB533BE5C173302A8EF6D36D822C419373F285E07B5EA85302D6765B771B68433D72FA36DF9F889F27F5B
Malicious:	false
Reputation:	low
Preview:	data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 720x720, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	28450
Entropy (8bit):	7.985078200955061
Encrypted:	false
SSDEEP:	384:UmKF30PhRH/8FG7lNWOQN+AmQDMfmH79sRMf3NVP1hhDNBP2Ktn5hPujclUlv:SZ0Pj/8U7lNRoMeHKaff4e5hP6cl
MD5:	7EDD99568897EEAAC51BAAFDFC0AD2EB
SHA1:	8139228A17D239CD8D55F61C9EEF09BA115BC5FA
SHA-256:	BEBA9DB1C16DB6723021220AD01D2336D29EE57C7C9EC1A2AD99B28D60E4F2D1
SHA-512:	BE409D0AE72B40C33442A327155D715F6CB46CC9761BDF3653B7FF31CD326AC2FE3FF1E9AADA86B65F2F49B5E60B0B39DD7E85FDC174C8F1963F2DFCF9C50FCC
Malicious:	false
Reputation:	low
URL:	"https://img.shopymn.com/uploader/a30aeca4280b3df9337a23d751cfbb46.png?x-oss-process=image/interlace,1/format,webp"
Preview:	RIFF.o..WEBPVP8 .o...........>m4.H.".("qZ....iKx.>.{{...~....=..........\.GC....[.ya...?.<)....;\..SnN..Y.#./..>@/.>V.e..PO.oQ..(..W.?.{..>.6<...wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww:LF3.......................M~O..W.?w..=.&.q;"....^..N.m..E..W............."..g.-..(...(?^.z.j. ../A.."U..yh....mk..P.:(.zJ.....$.].....]..W... ._k'.>"W.\V'.E..\|....Z..\...`I...D>...{..=M.I.2.W.......tE.dZ...._.$..L.w.q.?pHu......%...l...o.\9..7.":.....0....8....X......fb.8`......4.g6.z.U..p.i.E..W.....x.2...M..m.I:...#..P.[ .ji....D1.Y......R...J...KP..>.ET....t.......g.;..mp..p....).58.n.+WG...9.............@q..k\|..E..C..[z.w.YV.*.z.y..=X...}i<0..@D.......kAVn\|..3q.=...gRh.i....NC.............A.pL.6`.jg0d..G..d.%..V6.(.J............n.S3Z.+.....9....{.......R.7{^...v'1.j....>D........s...UQ...`..G,....I......-.~E.mr..,.

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 780x800, components 3
Category:	downloaded
Size (bytes):	151629
Entropy (8bit):	7.98449818695167
Encrypted:	false
SSDEEP:	3072:TtFOUcxG3UfdVS8TaN+ynMQXSWDs7sJ78+XM49+bVA2c:TtE1l4oaNIkS9E78SMk0Vc
MD5:	EBACFD846CFED80CDD0FD3AB340A24ED
SHA1:	169892E31C5879EF1BB781E0097B45E3F7EED300
SHA-256:	63FCD24BE307963422F5D92A2202107AACE3C98CBBE879DCE419323220C749C3
SHA-512:	37F5112BD28AAD4E653ED7672F01C9E1B8657EC3AA37F8767442F531B37A3AFFBDA6F467D66A6471449E6E64A70371C6F67B46EFC54C52645065037BDE08ECC7
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/d1efd62da517b9a9cbcc66739a2f58236cb27f19.jpeg
Preview:	......Exif..II...........................V...........^...(...........<.......f...i.......p........w.......w......imagery4............0210................................ ...........ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...... ........................................................................................X......../=...fs...XsggY;[9.>...6P.....................................................~..5......y?rN..-A..~.5..x..._...l}..;...`.'...i@......

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	84178
Entropy (8bit):	7.9565178746362974
Encrypted:	false
SSDEEP:	1536:DnZIzD1fuhYmsUlLtd5d23CqAlJSyahTJgV6/Q0Umpxl8CmSgu4:Dn2PFuhbsQDd23CqAlMhTOV6/rUYaEr4
MD5:	D859EF183B0920CF6F169AD4FEA25481
SHA1:	25A7D4FAD3E5EE99F87A2643EB77859C3F0EDC38
SHA-256:	E9ACB59553AD4B0780AC36F1B701395DA892AD74F4CA12056CAED2423C4D9FDE
SHA-512:	EC9134D998FD3A2A0762FBEBA8D55A5486660B4FECF51E8C44446878942F80875C2D0D15F3AF309E537DD88AF336078781D1C9A8F5D5DD6A59ABDCB5CD4C9F89
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................,.....................................................................................................................................

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	26936
Entropy (8bit):	7.968816080560387
Encrypted:	false
SSDEEP:	768:6kJFZENx2/U6xXrHQMSt1v6p6OF6cYS7Lpgfs0:6KIk/UGwMI1ipD9Ycpan
MD5:	59987FD93CFADCCE44F3620C9F10C233
SHA1:	A56C55057EB9F84F7B043BCE4496F9BB928FAEC0
SHA-256:	C8E6B9E461F67BEAB26AD8E4E3025FC73B80803EAEF980BEAD9EE50F749B581C
SHA-512:	2C559E3432D267B65B7306CFD4B3A7ECF97700BE5355765677A25A2782286E0F8E55012225F43D4BFCD01ECEBC77901F5FB005464DA026B5CFBD43A049CD3FE0
Malicious:	false
Reputation:	low
Preview:	RIFF0i..WEBPVP8X....8.........ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$.........ALPHO......m.9....G......Y......9...(..6....m...m$e..oz..........`..A..~.V......!f..H.........?$.......3.m[[...Y..+..].m..v!3..EDV+:.......m.I........a..i..m.3k...m..f22...EVm...9.#..1..$.mK.$Z..b...y.<.Z{/Q.R.J'"&.r$I.$.w...\w.J.q...{D......}`...>....s.~W....-/...?.....G.....M0...3...S.....R..@dm.........._.O..)O\|.....'.>S.`.....G.q....5.\|v...hZ.gb2..o..o:.R.._...............Tz;.. ....r.;m.D2o.5.F..t..r"e.s..]..\2_t..G...r*.......<.'.>..x...3$.T@%..92.(.:.<.Li..gJ.B.....P..0..;+J..f..Q&.....I...o.c...

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 655x468, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	16642
Entropy (8bit):	7.984845499356277
Encrypted:	false
SSDEEP:	384:AZFsfQUbKJUZFMuRM7sjQ0QAcxgLFdRr6b:APa1ZK7sjQUFRdRub
MD5:	EC1D25C543D5F4B5A76FB899968BCD23
SHA1:	4C43AC4466E3DB7425B77AB91A21B9EDFEB6C421
SHA-256:	7E630D12B83F70B5F4960FDAFD49A6CED7B9526340E39685DEE05BDA0CBD335D
SHA-512:	F2E2B528D51E1339B85C7734C2589E203539D3EB0753E9B379BEA67CA451817A5ED622C8A59A58671D1B8BFD933498BB822FCCE47F7072F5E693E4A87D145422
Malicious:	false
Reputation:	low
URL:	"https://img.shopymn.com/uploader/9007085244817a5cfa454f8854cb9a50.png?x-oss-process=image/interlace,1/format,webp"
Preview:	RIFF.@..WEBPVP8 .@..P@.......>m4.H."..#.:r0..gn....8...~....Je.-...........[........_.l..\|...n.<......y....S..n_.;..G.^0.............{...Oi.~..7....Tz......o..<..u......._.....N...k.y......^t...:v..;_.....N...k.y......^t...:v..;_.....N...k.y......^t. 0.U......^t...:v../..r..Oj.....o..N...k.y.......V....C.....'$e1.....b\...;_......Q..M.\|.3>Z..?WT...E9.CU........z..p.l..d@......WN...k.y....d..q..e3.YtO.q^........%....B..#.d.n.3S...S......FNW.........N...V2..X..../..kV!.u{&&..x0./\|........w.....4.....A..c.....`?.....9.$...@kS0..y.a.<.j.yXA.]m..x........mF..?..IJ.xN7o.\|L.{R.9.r]....EM,] .....e..`...y.......X.>B64T.q-uT....uu];_..VG...q.~B...HYm...>...Q....L........O.d......x^.WE`...;..w..^..S..+N....a..v...P'8.)+......S.L.1..<....M.. .8.E>..%.."x0.'..MW.....;.L&J..lk.EA.1..._u7.....k......E..@p...k.q..)+...(r........9.2......'Q9.=..yMF..K.O.M....7..Y.G.....F....[d.Z.#.WN.u.RS....dtW{.).;..k2iP......@.}..(X@...DM.q@*.O#.f.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	70881
Entropy (8bit):	7.949670017456015
Encrypted:	false
SSDEEP:	1536:LzyNUNgj1lKRcSGVRgDkczowy+mpzxbWTgUmSvL2xJjMrI3y9a5dzEmLQ51GbZGw:LeGghIcVGfzoY6zxiTgUm4L2zjoxa5d9
MD5:	E80C6B906C6D2EDEC0B0531B88A90E90
SHA1:	79B04B5264168A4470AC85A173C65E8EA24BABE8
SHA-256:	229CE6539404EC2EDD7ADABC8B19F6DE6ED30E23934337B64D102CAE179C4FA5
SHA-512:	9C66B1C878418FA0E481DC8D7EB7218C41C2B0CB7D39796735194EA5B53D77F779277BA11024084906DB2C99480682C93266BDC456FB676A85C980DF22205800
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/2d1d59f9ff7fa74ef8db576722eb77f20bd40ba0.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................,.....................................................................................................................................

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.254165647130566
Encrypted:	false
SSDEEP:	3:dngJviukoESWljGkhbAYn:WVeSW/9
MD5:	6EAD198554C0D08245EF09F90978F247
SHA1:	C53AA12A7A507D43673FDCD5AD4D0DE2E2C68225
SHA-256:	84AE4688965BB1862D333E50E86D9A1BAA9AB463803E9E09D45196339F2F24D3
SHA-512:	B6D709FF4D3EC35609D9ED461395FD3652C2B834399BB533BE5C173302A8EF6D36D822C419373F285E07B5EA85302D6765B771B68433D72FA36DF9F889F27F5B
Malicious:	false
Reputation:	low
URL:	https://www.cravob.com/sl.png?ul=https%3A%2F%2Fwww.cravob.com%2F&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=index&ts=1716591392527&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2F&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17
Preview:	data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 655x468, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	27232
Entropy (8bit):	7.991209520808278
Encrypted:	true
SSDEEP:	768:l3byzSQnoFJZcA1a43iqABSyDNTz/X0WX7ghnxl75:lryzLYJaA1a43iFgwNPs+8nR
MD5:	B538F42C71870EB58A10D6C4DD82A0DB
SHA1:	90DD7E286FC541BF945CE3EC4AB5475C0ECE14EB
SHA-256:	43E8FD93A6A2C898C7BDC96836F13636968209E778A0A33EDBFE3DE6A2EEDEDC
SHA-512:	6FEC5241ABCC413B3E4686E1098614CA8993FBC6DC9E2813E6B3E8F637B350A5BF6B0C3085D30756FFF2E07A870B5D7ACCAF6506D669CAF94C0C48C3B8CF922F
Malicious:	false
Reputation:	low
URL:	"https://img.shopymn.com/uploader/2ce71f6504e8177d94cc448329a848fe.png?x-oss-process=image/interlace,1/format,webp"
Preview:	RIFFXj..WEBPVP8 Lj...r.......>m4.H$#"!&u...gn.kZ...V.A........}...x.bR......$....._.......=..Z.....oV..=v.........W.O....=R.K.5...G......S...q>..\^...>..F.i.....>..G.e.....1..'....o..e..._..s........._.~_......Z........`..~.?.y6........w.......s..j.{...W........6.&...y.q6.7....y..m\M....j.m^ow.W.j.{...W........6.&...y.q6.7....y..l;.e...Q......4.8.W........6.&__.E.MY.Ss...xF..1....W.j.{...W....c...[.....r.B....o..j...y....p...y.q6.7..f.&.k....Vx.am..........V...CI..".....BwV......y.q6.7...........gl....>....\|H...0..j.$U....".-...Y..*xV..9....W.j.{.......45....i).....r.D..&.<...70.sZH.....0.. ..K..orD.PyV...A./..aK..(.8.m^ow.W.g...'..zT.X......=..-.....}.`.k...)c.....'.....[Cs.....R1.`hn.T..>..rC....;...y..m\L....z.[.N.....+.\..b/..^.......:.q.......pM>..U..RC.?.#...]SvG.&..v0#.s..+..`.F.2....ki.._.`..W.j.{..=..k$v.......T.b.EJ.R...w.MiY_m....V....uD+B.P/5......r....y....P..r<.^..h6.B....Pg.>.l..../+.HHW...;...3.....j.....(I.....%...!.d

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	20541
Entropy (8bit):	5.292860425346719
Encrypted:	false
SSDEEP:	384:sCJSwM+mEAWlmUABmXAwmAAYmuABmSABmqABmpAwm3ABmwABmygABm6ABmwrhZpu:so/MPtWU9Yw5pxbY/Y3YO5QYZYqYHYk8
MD5:	4146426A533E49401E2E996281AEFA66
SHA1:	578501F738817500BD838EB291F889C4632BFD24
SHA-256:	D4B5AE01C91AD894D9E34F23AC34F97F4BB2D209A597AEF653FAC5572F46D301
SHA-512:	4733A31C43257FC965F772C349C03316DF6C958D72B20200A114F86A8C18FC0CE99BA867E1278F2A91603A3D5E3D86DC1F6DADA7A852CCC126B056E3D5D14B8E
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/751867630178087?v=2.9.156&r=stable&domain=www.cravob.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C217%2C152%2C110%2C133%2C126%2C114
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2048 x 1536, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5714636
Entropy (8bit):	7.944746582364977
Encrypted:	false
SSDEEP:	98304:5XzmbD3ZLGGudtkT9QQ6Wx4jxz6prDbToPJys+gpnL4qT6FS1WSZln:5CbDhdubkBQEExz6pT0PJysZpn05Kln
MD5:	C2A8B8A7EFF97C3F23872E3A057D70AC
SHA1:	F8D47C29515DA9DD084FA51F935E44015C4FF3EC
SHA-256:	2CCB223179BD67B0B33A5329F084CB942E219CA7C72846B75A1D3BB93D06066D
SHA-512:	C203848CFAC90B97156987B32CF3A50E43364D618D674043E7782A676A3B6386D806A840C8F91BF388BADB2BD705EB0D133F18FA5D11FD96067C263EB274A124
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............m....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^\|.e.-...zf..#f.,...t...................{g..y.>.T.YY..{....vs....Vk.m...fkgB{.mu.vu.Fg.l.muw.zG.-4..bS...:.......b.M....b.....%t(M.V[W?..m...n.]=..7`....8.........Jk.-..+.d.....h......d..v[..l...vZSz...v[.m_..h...m....m.....[.>..om.....ki.....ih.}..7......N...NK..6.8..j....k.....qcC...........nu..R.@m...m...vjo.ac..5.y.NM.c.....jm.Qej.....U....z;.h...f.R?.L..z.s.:...f.....6.V...T.Z....4.N..}..y..^}..5hM.[tN-.W..j4...du~.O:.z..\3Pv.5=ml.S..]...;....#.5.....~.>..N...._...j.R.Z....Xo..y..._.5......t..Z...~.l.=...4.N..Q]..49v.t.tOUq.t.u....@z.V....R...-....k...j+l..V.........[Wz.......jjl....f....U..u.[Z...&.Z.O..4....V}.....*o8.s.....m..v.m.V..Py%.J.Zy.5..........pK.uX......[.].vY.c....t?.j-.+.lI.9o4.......4.....h.....R{.T}.V.n.j.-[o.......m..6\q.Ts.X}.....B......\{.Y...6W..._...K6W%T^...P[m.Z...z...;.....Q]B.cV.....u..k.y...[..nA

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	48258
Entropy (8bit):	7.996042957538623
Encrypted:	true
SSDEEP:	768:jm9ZoZxgD1mGRhxvR6n//Wwd+5ekbomIRqpLJAPJX28xGssshxoFqQ0cbYNeF:i9ZoNGRhx5gWwd+5eSIKGxxQLQTYF
MD5:	F62E88A18B0CA920CBF1C3AF3FAD3359
SHA1:	12DCE0B0FBB33F8BF5CFC5110182B7D61D586DB7
SHA-256:	263810D5964CA3F8739DC09D2394075865527DCE4939F7B2F4DCFDE7F8028B53
SHA-512:	0160C01279B9EE8B50FD71A21554908960CA8DEE2887096A8C7B14B4A2D7E696470EB868C1F6DC62AF14023AA554903209ED65C4FD4F4A9ECDBB35E106C31A97
Malicious:	false
Reputation:	low
URL:	"https://img.shopymn.com/uploader/d3a5e4fb2365a048a7c7c731cb9f7f72.png?x-oss-process=image/interlace,1/format,webp"
Preview:	RIFFz...WEBPVP8 n....%.......>m..F$"..+s. ...cn.J........z..=......w..........u.=fn....N.o....@T.\|..o.?.?........~.=.'.'........z.....?....z.....?'.....i...'......t......._..........=.=..'.?.?......w............W.#.'.....\|(?-.S...........4>b...S...;./.....?.............?...?..R.t..!..o._..D3...L3 }.].0...+....F1.$L........oG9.9..........=..>....y..JfZi...+..Si..h.b...r...Ta.~t....C.....i..]..\|...G...ejDy..H.S.W.....t.S....U.%..XG.fq.(Q.?.mi../.).Y........o.~m...-..[+K,ry..\.id..6..s.N.Q.E..Z..D...$..x...!$H.....'V..b.cwS....w.y6.s..$......y.....o....J.o0...U..RI..F...a..i.p5.>...7N.,.7.]$z.3.kX.....q..wh....a.oP....h6.'....:..B.4L..\|.Ho......3".....#_a....f..;.rD.. ..........Y...Og..-;E.wdr.i.p.^j^OS.......@6z.C%...bn...?{+$......4_X.wJ...jqwi3O..z.M.K.&.bGC/.....m8....^P..TA..6..t.X.f....\..=l..F@..#.#gA...@+w.OR..9.....>}...J.n.O..e..Z.[.1m..h....w...5....vD4..Y.js.5.\....t6X\..V.-VaZ...$+.(.P...rS&...y..2.r..P.I.T.@V.......R.......V..@J.J....

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, hostcomputer=imagery4], baseline, precision 8, 748x748, components 3
Category:	downloaded
Size (bytes):	68003
Entropy (8bit):	7.8918324410188525
Encrypted:	false
SSDEEP:	1536:glxiRM3A4hUohygIPLwKWr8dXJ095yrjP9YH98ONLJBaE4VOHbG:ZMiohygIjwKWYd50LyQ8ON9oE4VOHbG
MD5:	63A9BDC5A0FAFE06120BB78D18B3761A
SHA1:	172B99DCDB286F53999DBCB139AD369A03188DF4
SHA-256:	8D8DEEDFBF3D613ACDBBB0845134E585AA1FD7534B08F36F5396E1531D15848B
SHA-512:	790932C2C74DF6E935DE753E43500BE062E82D9B8B65D258491326B3D79D2E9FBAD3A1B90DC2824A03F1425D48DC909500AE160CF9577830105D7D00652D442F
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/9adc39b5052122d6f03b60858a956876cea2f3e2.jpg
Preview:	.....,Exif..II.......<...............imagery4.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".........................................R..........................!1A.."Q.2aq....#B.3Rb.....$Cr..%4S..5s....Dc...'6ETd..................................7........................!1..Q"2Aaq.....#B......R.3S..............?.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 436x500, components 3
Category:	downloaded
Size (bytes):	197029
Entropy (8bit):	7.910216232539198
Encrypted:	false
SSDEEP:	6144:mSnAM23v4vjsj7vy4Ssy37CCLGBrLNdpQf2B:uNcQj7JSsWm9Lgf2B
MD5:	BFB87079D8D7733BA944813C8C760B01
SHA1:	C0F69C6E36B69BE501EE85FB9FFAB81FD5F7598A
SHA-256:	683896D3500B57C3DD7FB12B05B2B0E5ACD182AA1266266B2823C0EF6438BBE2
SHA-512:	06504E65697BC67215BD1A171D9B52716EC7F0342AC6A9D56DC8AFD3A45C270495BAA9BAB6DD4C12B741EA1059BEBC447A2EF51476560864C77ED34C74C79370
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/fc2bcafe3c4c673896b61de343177ec8.jpg
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......)]w_z...pO.i.....# z..(((.$.....m-.^.dz..P.]...a@....P.@....P.@.A.sE.............$....rI....}.C..s.....9.........?.G<{.....=....B..CG<

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x1000, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	55414
Entropy (8bit):	7.989956090063975
Encrypted:	false
SSDEEP:	1536:qIT5V1+i2yeBZ4i9DFl1m5iu5ucEKYuqOzPopYFrggV+rUNN:qINVAi2yeBJ0TEKM4It2N
MD5:	4FE2A603E96515485445E1965852279E
SHA1:	811C96D2FB82DF3686D2F6968F5B3DD240FB11C2
SHA-256:	C3F3B46B745AF196E2A510656688995079B2DCDBA73A09BAA51EEC975DFDF454
SHA-512:	276B55B5BD4B8AEAF2FAE042DB5ED144FDEE43DB7A473B8B13316D275C3BCB22D1DDBAA38C40A83ECC6E7433CC343046EAF25FE777B5648C94784072C284179F
Malicious:	false
Reputation:	low
URL:	"https://img.shopymn.com/uploader/75df6de93d8baaa5ce1c4b4bbafbb7f5.png?x-oss-process=image/interlace,1/format,webp"
Preview:	RIFFn...WEBPVP8 b.......x...>m6.H.#(&#S.i...in...T..............q...l.b.ev..K.^.......6..t.....)..+..Y..c..._.t....s.........\|.?.>..7..m<.....g.V.w....m<..e.O.o`....~.z.r..Ks...;.W.........7........>....?....7.....k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.j.Ai.C....6...........J.0.~.w.L3_...aS...\|.T.5...&.0.~.w.7...@{.........B[...g....L....i.r....w.L3_...aS...\|.T.5...&.0.~.w...`..`L.!.k.. 9.]m..l...v...

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.254165647130566
Encrypted:	false
SSDEEP:	3:dngJviukoESWljGkhbAYn:WVeSW/9
MD5:	6EAD198554C0D08245EF09F90978F247
SHA1:	C53AA12A7A507D43673FDCD5AD4D0DE2E2C68225
SHA-256:	84AE4688965BB1862D333E50E86D9A1BAA9AB463803E9E09D45196339F2F24D3
SHA-512:	B6D709FF4D3EC35609D9ED461395FD3652C2B834399BB533BE5C173302A8EF6D36D822C419373F285E07B5EA85302D6765B771B68433D72FA36DF9F889F27F5B
Malicious:	false
Reputation:	low
Preview:	data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	77679
Entropy (8bit):	7.964023883976415
Encrypted:	false
SSDEEP:	1536:Mmx+Z09Ihf8TwaSXwY9MUqtzyAGg7oXPHUc2Sm8B2LcimwUdt:k7BVaSX7iUqtRGg7KP2SLimwC
MD5:	7AEEBA66166EBF0055697DAB7093193E
SHA1:	01524F51FFBE1C7F51392003774CC5E8EE7FB304
SHA-256:	EDCD5C0E9EC996C7D8B4350BD12EE8BB54F17B8EDE184F7987CB39A8BAC84785
SHA-512:	D9D959DF5EF35E1DB3ADC8B48216C7424D4DD32F1020D973705F15B84B8DF3E3DCCAA9E278A0ACE79E9CEE55A24A6714396DA46690CB1AFE603096FFD1071DC6
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}............................................................................................,............................"RA0.H..................................4..}+.....v.................................B..M....i}..t.!l.

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (37283)
Category:	downloaded
Size (bytes):	794103
Entropy (8bit):	5.260775893015069
Encrypted:	false
SSDEEP:	24576:Uvzo+BwUtykxDpWNYQhrKtd7y1D8LMZ0//R6lR2AytJCKBtkTMvoLgAjAz0vtggZ:Uvzo+BwUtykxDpWNYQhrKtd7y1D8LMZT
MD5:	A72D7FFBA73B4D1297855AD7D51AB358
SHA1:	E2B316B338622D70823760F1266F735B35120E50
SHA-256:	BA044BB5B9CDD3B9C7C43A0114C52FE0D1E8BB66AE44251F9F880ECCB458144F
SHA-512:	E05C40CC3D72945E71F71A99B193F09487B768D45442E0146538A77348DFFAD4E90111580A892158BD3868D1A1284C3F4C92A85C5BF024C31168EE00875736C3
Malicious:	false
Reputation:	low
URL:	https://www.cravob.com/products?handler=lego
Preview:	. . <!DOCTYPE html>.<html lang="en" class="general">.<head>. <meta charset="UTF-8">. <meta name="keywords" content="Amazon">.. <title>Promo..o LEGO-Amazon</title>. <meta name="description" content="Devido ao t eacute rmino do contrato de arrendamento todos os produtos em nosso dep oacute sito devem ser esvaziados em 30 dias portanto agora estamos fazendo o desembara ccedil o aduaneiro final Liquida ccedil atilde o at eacute 80 de desconto agora Boas not iacute cias os produtos acima esgotam em 7 dias e nunca ser">.. . <link rel="icon" href="data:image/gif;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVQImWNgYGBgAAAABQABh6FO1AAAAABJRU5ErkJggg==" type="image/x-icon">. . <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0">.<meta name="applicable-device" content="mobile">.<meta name="apple-mobile-we

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 1300x1300, components 3
Category:	dropped
Size (bytes):	251943
Entropy (8bit):	7.962003826376875
Encrypted:	false
SSDEEP:	6144:k7sUTWQYVhid7FTTT2pRlNNY37dKPp+eB9MbWJ7qWS4w4b:k73EhITTT2pReLdK9LMbWRvS4wS
MD5:	DA6640F8D0D1A025E06561D88FF046F4
SHA1:	B0A423543086E86947B58AD29ED44BD13E636DB5
SHA-256:	972A43A7D24899170252DCB46F32DFCD60A80B010C30C91A16E4DC0A72FBEF1D
SHA-512:	F5ED4C7DFF51F831C7FC9D47BB86529949B94D84B9E59BB9A5E754EDD31B1D408B04043F541459DBAC91DAD39E03863C660817E461BC4F30C54892E4BC071B5D
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(...........<.......f...i.......p.......................imagery4............0210............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................X...................................................................................................................................................

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65269)
Category:	downloaded
Size (bytes):	124671
Entropy (8bit):	5.240027206863605
Encrypted:	false
SSDEEP:	1536:/ArVAiT53aBXr1nuNraK8h78lucfbyYDk5PJVzD5vp0XvH7WcWUwcPqojsE8EtOE:RBXr0rJ27UjmvD5ufH7WcWUwcPqmz1L
MD5:	D4FF815D60C83028C87324F6FCE8E634
SHA1:	C8032FE56B5C847D2FA83D448810728E7F628900
SHA-256:	BD701C6685C39C2D8FA3FA663823006DC49086EA7A058BA316214EA9736C05DD
SHA-512:	BBB6F107E85F5430A14BCB5F89FB138D231CB5018320173EF401D5D72B86D23E2C8945C2D9C6F1DF6586B939033AA001107D30578A46149D3405DF75E3B35BC4
Malicious:	false
Reputation:	low
URL:	https://static.shopymn.com/liquid/buyer/public/js/plug/Swiper.js
Preview:	/*. Swiper 4.4.1. * Most modern mobile touch slider and framework with hardware accelerated transitions. * http://www.idangero.us/swiper/. . Copyright 2014-2018 Vladimir Kharlampidi. . Released under the MIT License. . Released on: September 14, 2018. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):e.Swiper=t()}(this,function(){"use strict";var f="undefined"==typeof document?{body:{},addEventListener:function(){},removeEventListener:function(){},activeElement:{blur:function(){},nodeName:""},querySelector:function(){return null},querySelectorAll:function(){return[]},getElementById:function(){return null},createEvent:function(){return{initEvent:function(){}}},createElement:function(){return{children:[],childNodes:[],style:{},setAttribute:function(){},getElementsByTagName:function(){return[]}}},location:{hash:""}}:document,Y="undefined"==typeof window?{document:f,navigator:{userAgent:""},

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	26936
Entropy (8bit):	7.968816080560387
Encrypted:	false
SSDEEP:	768:6kJFZENx2/U6xXrHQMSt1v6p6OF6cYS7Lpgfs0:6KIk/UGwMI1ipD9Ycpan
MD5:	59987FD93CFADCCE44F3620C9F10C233
SHA1:	A56C55057EB9F84F7B043BCE4496F9BB928FAEC0
SHA-256:	C8E6B9E461F67BEAB26AD8E4E3025FC73B80803EAEF980BEAD9EE50F749B581C
SHA-512:	2C559E3432D267B65B7306CFD4B3A7ECF97700BE5355765677A25A2782286E0F8E55012225F43D4BFCD01ECEBC77901F5FB005464DA026B5CFBD43A049CD3FE0
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/2bab95b957e11a3d1c75b9df75049153b2a3b998.jpg
Preview:	RIFF0i..WEBPVP8X....8.........ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$.........ALPHO......m.9....G......Y......9...(..6....m...m$e..oz..........`..A..~.V......!f..H.........?$.......3.m[[...Y..+..].m..v!3..EDV+:.......m.I........a..i..m.3k...m..f22...EVm...9.#..1..$.mK.$Z..b...y.<.Z{/Q.R.J'"&.r$I.$.w...\w.J.q...{D......}`...>....s.~W....-/...?.....G.....M0...3...S.....R..@dm.........._.O..)O\|.....'.>S.`.....G.q....5.\|v...hZ.gb2..o..o:.R.._...............Tz;.. ....r.;m.D2o.5.F..t..r"e.s..]..\2_t..G...r*.......<.'.>..x...3$.T@%..92.(.:.<.Li..gJ.B.....P..0..;+J..f..Q&.....I...o.c...

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1201
Entropy (8bit):	4.706238143988404
Encrypted:	false
SSDEEP:	24:YdA8VOyu7LU5LIGjTEaECzvpK3tsHAZ6a0CYD67Yb+pSG3pEJfdq+8yWiskcy+Ki:YdcyQLU7jTfrvCtmAZ/YDFgpGP8HisX7
MD5:	5D7F9BD781FD1DCA383D8BFCB5F55578
SHA1:	4FB5201E2B308CEF80D0C6B2816DCDB11F1EE5AF
SHA-256:	2AA2938A2E2D9FF0B8E92CB3E5332A7FCEA0198E5050A97AC40642891EFED71A
SHA-512:	C41D71B35B9DC022C0EC0F7EE608DC928D599D9E866726FEE37B4F11159C9059B1B395746E4BFEE74C3E94664DD310F9F381A8188EE45393C9BC77FF26C905FD
Malicious:	false
Reputation:	low
Preview:	{"code":0,"msg":"success","data":{"express":{"has_insurance":"0","insurance_select":"0","is_match":0,"error_code":0,"selected":0,"list":[]},"cart":{"type":"","token":"7d21889d1948d59a5240ec48808329df","weight":"0.00","product_amount":"0.00","product_amount_ceil":0,"has_invalid":false,"has_removed":false,"has_loweroff":false,"weight_gram":0,"remark":"","count":0,"attr":[],"product_customize_info":[],"is_open_tips":1,"is_open_insurance":1,"list":[]},"coupon":{"ret":0,"is_open":1,"coupon_code":"","is_applicable_match":0,"total_discount":"0.00","goods_discount":"0.00","express_discount":"0.00","coupon_type":0,"is_auto":1,"applicable_type":0,"type":2,"match_list":[],"detail":[],"coupon_list":[],"number_discount_goods":[],"error_code":0,"next":"Comprar mais R$436.00 e economizar R$97.00","rule":[],"matched":"","coupon_gifts_collect":[],"has_auto":1},"total":{"total":"0.00","subtotal":"0.00","shipping":"0.00","discount":[],"amount":"0.00","product_amount":"0.00","express_amount":"0.00","expre

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1000x727, components 3
Category:	dropped
Size (bytes):	237429
Entropy (8bit):	7.982137813852492
Encrypted:	false
SSDEEP:	6144:yeoN41HKD44zdtzee3mxCU0j+qTjYAob7LhaVAuh:y4MLtuJiTvcsf
MD5:	5FE0C2A3A41EB01442554B277163AB10
SHA1:	B9C59367254976E134491C99B9703CDF743A5F86
SHA-256:	0232C208BE9C47F9F38675D7EC141F34A973899CA3395D408E24A9AE462977E6
SHA-512:	57BF299AB50A3B40E4B2F79A331C30372242CCD536363A27C2A3902467D12A6062081B99101336F5D432E72ECA6EE61F1AF01E0D454E3ABDEC02D8E71AE541BB
Malicious:	false
Reputation:	low
Preview:	....."Exif..II*...........................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$.........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......................7....................................................................,........................................................................<.P...O..AU.....:h7>.1..b...%..%v.5X...B...\|j..............................................................................X'...A.$3..Y.\|.E..Z...^........:......BH`.(.SW.W.\|.:4............................................

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (38203)
Category:	downloaded
Size (bytes):	720477
Entropy (8bit):	5.246353508985211
Encrypted:	false
SSDEEP:	12288:ZPhobe2XbT/zZSTiBwUtykxDpWNYQhrKtd7y1D8LMZ0//R6lRlEAytJCKUqtkTM0:evzo+BwUtykxDpWNYQhrKtd7y1D8LMZ9
MD5:	F8DC928EF1B1563F2182B56BC3816A73
SHA1:	7DD76AC283703D23C7061CB4956E16113B850E6C
SHA-256:	3D00CB3D2905564CBDC78B912B43E736D201473B529B4FA3C2943C962778C6F6
SHA-512:	9FE1D733B5B203FFB3BEB9ECD443F04A1E2F241F4AFA5DA62FFE2665FE2F89AEE4762B7AEC5C9AC6F26450838F1DE1A247C467CB35F6DB8F3031D563AC0FC834
Malicious:	false
Reputation:	low
URL:	https://www.cravob.com/categories
Preview:	. . <!DOCTYPE html>.<html lang="en" class="general">.<head>. <meta charset="UTF-8">. <meta name="keywords" content="Amazon">.. <title>Colec..es - Amazon</title>. <meta name="description" content="Colec..es - Amazon">.. . <link rel="icon" href="data:image/gif;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVQImWNgYGBgAAAABQABh6FO1AAAAABJRU5ErkJggg==" type="image/x-icon">. . <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0">.<meta name="applicable-device" content="mobile">.<meta name="apple-mobile-web-app-capable" content="yes" />.<meta name="apple-mobile-web-app-status-bar-style" cosntent="black-translucent" />.<meta name="format-detection" content="telephone=no" />.<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />.<meta name="renderer" content="webkit" />.<meta name="aplus-termi

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 347x500, components 3
Category:	downloaded
Size (bytes):	86977
Entropy (8bit):	7.91238464414936
Encrypted:	false
SSDEEP:	1536:to+XynGWG8qDddtDcZXBCI0IfLzj8VukTfkLv/Sv5mb:OrG8Id7cZXBbTfLzjwTsTax2
MD5:	376B6A24C9B4CA9C6662244AFCF9E012
SHA1:	82F235C7488CC2F52CB2B0AEA7F0A4E9AA5A3EE3
SHA-256:	FCAD87466ED30E2173E3C05FF609B28E5A14CCB2090307C823D24A0CA04A631A
SHA-512:	17C782C3995C20F7AD753F89998C1C0A3D6AB063755DB0314088782DDD56852C174135E4ACF6F21E88206CA35EA4A6B52EB8D6B57560F92E4E4C49114EA39F84
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/f3e535712b0f9decfe1f620107cfee74.jpg
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................[...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(... u8.....(.2=G.@.@....P.@....P.@....^...(......(......(......(......(......(......(....B.8.q...t.B.[..Z}B.../..}s...z.;.I......L.>z...

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	42925
Entropy (8bit):	7.890476782327515
Encrypted:	false
SSDEEP:	768:NP1ILvRWotykxMLx5aRzEG3NegYUjY2aGysFFOYITyzLztVaKFBGGv0XGZrw:NdIL5ryV5aRcgYSYuHFVLzbZARGG
MD5:	961E819A375171A345EF1B884DF22D68
SHA1:	3D7F11B5BF9DC2004BC542A2A9465A3A3EE686D9
SHA-256:	091C7B80AE2C4BBDCCAFD3D3082D633DAF4EF5D504CF23A4C4814B98641C8CFE
SHA-512:	77C64977E5CB45C8F0F0050A7925C25C670DD646D22C41A1013CA8D2CFA3B83DF27199AC1BD7FB46A989082112D03A47973B90DFD31B86524E3104F37AF50DD4
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/1a7f38ab8f1d89cd6c3628bf38e1b67fcbf9c171.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}....................................................................................................................................................................................................................................

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	45662
Entropy (8bit):	7.911668978961762
Encrypted:	false
SSDEEP:	768:27+ofWr+KpvWyMJVJaLEQQDFMNbMjzHP4dQ7++LRcqHmArPWQEP0:AbOLpehsLEQWiNA3sulfrPWQk0
MD5:	820C68E472BAFA0CAE86734D8C011EA5
SHA1:	053957A708CDDD8589860E312F8EBE8D66E931BC
SHA-256:	48AB70C7A6777D60E8AC8892E3FCE5DE08A884F132BEAF7035FAA538167B873E
SHA-512:	F7D472A3473669DBF760AA3B3AF5DC2D43DFAEC7CAF3AA17E12D964109C9119FFBC17C32B087D8CF970DAB285ECCC76962C6A572BD3974642E2CEC0C542CC600
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......I.......I.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..........................................................................................,.........................................................................................................................................

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	84178
Entropy (8bit):	7.9565178746362974
Encrypted:	false
SSDEEP:	1536:DnZIzD1fuhYmsUlLtd5d23CqAlJSyahTJgV6/Q0Umpxl8CmSgu4:Dn2PFuhbsQDd23CqAlMhTOV6/rUYaEr4
MD5:	D859EF183B0920CF6F169AD4FEA25481
SHA1:	25A7D4FAD3E5EE99F87A2643EB77859C3F0EDC38
SHA-256:	E9ACB59553AD4B0780AC36F1B701395DA892AD74F4CA12056CAED2423C4D9FDE
SHA-512:	EC9134D998FD3A2A0762FBEBA8D55A5486660B4FECF51E8C44446878942F80875C2D0D15F3AF309E537DD88AF336078781D1C9A8F5D5DD6A59ABDCB5CD4C9F89
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/7b95f33ca58a398ea9d3a76edd90ff18b746a398.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................,.....................................................................................................................................

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	61444
Entropy (8bit):	7.943391843270911
Encrypted:	false
SSDEEP:	1536:rv4XkQnTnQHBfgG/v16AVffAXwQ8eaR1bMOVum6Qs:D4RT8f9ltVffAXPY20um6Qs
MD5:	0747BAAC18119E1A0DCFF42887DEC064
SHA1:	E6042848F57DF6BCDBB874572CABB0B70C450CFB
SHA-256:	9E288E598E52BA4F4D1AA519AF45C67A4DFCB40EDF14460D3E1E326CEF98C2E1
SHA-512:	400F693F1A1377F69FA7C8009E1CDB2E065A0A44CE0ECAEAC663A20A05B3FFE5635BDBDDE150D30FC576732FC9F0B6DE2EAD693C38AC1DF331FE9FEFB98C58C8
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}.............................................................................................,......................................................................................................................................

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	53066
Entropy (8bit):	7.915974975705774
Encrypted:	false
SSDEEP:	1536:9iQyp8ayXFfkVSYrtLO5aLoAy6dbzOk5wHxm1pdgrjq:9nzTFkrrtqIJd/Ou6YrE2
MD5:	A152CAB58C6A09C097B580E900C01102
SHA1:	45E80A7460FA9B7FB2EAD6B8F8FEC0DA1D37520E
SHA-256:	BAB6CCACE363204D9CC2C6D3808A2AA6C79D4C2A677EDF3CC4DC380A646C0EEE
SHA-512:	C66E48584DF904A161C9774080A3B2221C9DF99F56958016D1A836A9A27A2CE746EF954C2B1EF608BADF56F5F0FA4571A0F9EF580CB17C0E054FCC39BEE51FD4
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}....................................................................................................................................................................................................................................

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	63722
Entropy (8bit):	7.938214585054737
Encrypted:	false
SSDEEP:	1536:M4jCHWqYxZoOoDsfZoPMgaslsiaxJw6oW:M43qYxZoHMZoYsfa3z
MD5:	60BF34084533870CF7D0689034B58325
SHA1:	22CAD656C5528C4B833F334E584A2C633B71726A
SHA-256:	4E526FA3124DEB113D59FAF4735C5338C7322CFF3698A95DEF8CB47AECDDBE68
SHA-512:	E0187478D68C7D367035B188474CFE2393EBF589EC0272605C70E436DE13176F034935A13D2D2E630F8B0CD9D4D7D3CFD03718DFC3D23D4FCD09803144668AFC
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........................................................................................,........................................................................................................................................

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, height=3464, bps=0, orientation=upper-left, width=3464], baseline, precision 8, 1000x785, components 3
Category:	dropped
Size (bytes):	203822
Entropy (8bit):	7.957341566442863
Encrypted:	false
SSDEEP:	6144:4kM6BS2FrJba98UskpNk8Y7Idy/Kn1DLbJ1m5mjfo:26rrJuhskprBAS1Djjg
MD5:	FAE37E5AF3DA89FCE1D0119088253FB5
SHA1:	D25A5A5B7CB8CAC9F08CAD82207BEA2F5CF0C8A8
SHA-256:	279C2F260AC73B3393612492F4A04CEC137DE922147ACBC1F52DD30699C10533
SHA-512:	9AC12BE24C65FB4E8BC7381150417C92F8ACB65FB7791F880E889E0A49A37B5C75963AAEA2C76A39222D03F74E185E899027D8CBEFBBF540C0D5E97E1FF3EFEF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,...."VExif..MM............................................................................................(...........<...........i.....................-....'..-....'.imagery4............0221............................................................................2.(.....................:..........!........H.......H..........JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......~...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......~-x...........m4.....u/.....

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	64887
Entropy (8bit):	7.950919060481694
Encrypted:	false
SSDEEP:	1536:F5dsHiDRP6l20JA2GRxBw6xeJjDZYmGkBabcz6y2U:FkHigvWGEepDZxGkBabcz3v
MD5:	0608A8539B3D9DA1C2CD17E41E564175
SHA1:	13D1EA40FDF65E964D3C361E0A78B0B4CE371C65
SHA-256:	750D513A983F84A783743023B5B28262B1A91CABDBAC073D15CFEA99BE67C7FD
SHA-512:	70ADCF998EE966F336CE9A19B8ED2361FABA64EBE76B90D8F406A98DC099E4E313CD66C11CF9F861F5F2F3C752AA6C6F936552EF8988F72586BFC9BD39D4469C
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/d366d0c225e24136fa296c2234a0370b45369592.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}.............................................................................................,................................................................jZ.v.i/.gY.................................1..}1..nzGI0.m..?.........

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 1300x1300, components 3
Category:	dropped
Size (bytes):	367680
Entropy (8bit):	7.971156528337177
Encrypted:	false
SSDEEP:	6144:wpmDR3erO6SGAygjrTp5DRJuEquk97cRcovFi7q8ZnckW42C4yXplqNNaNB:4YO66fAyybzS9YRcol8ZVMCZZ/
MD5:	460BDFDA7EF21014C819C3571EA71E4A
SHA1:	6BB652CDB26526303B4ACB0798DF98F6B764AE87
SHA-256:	2D80DD85E2D0F4A10BF58065D4231787A0B6947A328D2471D1A345DE0A2886B1
SHA-512:	E6AE0F9EA0EE536238964627BF11F68E772EF4E02EE1F911FD27CB2B26CF6D9DC11E832594BE5991ABB8A02C5681C3E149C9367CED2634ED938ECEA04D366FE6
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(...........<.......f...i.......p........w.......w......imagery4............0210............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...............................................................................................X..................................................................................................................................................

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 539x800, components 3
Category:	downloaded
Size (bytes):	103948
Entropy (8bit):	7.981505206482837
Encrypted:	false
SSDEEP:	3072:fdyBHbgmmgjPdmMPWNkaiSXEJQisIVUccINk:IB7gYPWFzkSrn
MD5:	09DAD94E65244978B89C9F3BFF6A6089
SHA1:	A072C2823714DDE618FA54DBF7FEECE506E54E6C
SHA-256:	8FD13C681373368514C4A6DBC71F35346DE18E5046ED5F3F3C08EB06142C4B1B
SHA-512:	5A5AEA6196ABDDD8357F2E015ADCBA59119FC3F2B8223D64F5E067A4115C3FA436823030A2371F3295070A3D71AE367274BCF3EA9F51A191AD16C427613B83B3
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/30453ddd6ce60322fd6ce23b29a6e5e27db4b75b.jpeg
Preview:	......Exif..II...........................V...........^...(...........<.......f...i.......p.......................imagery4............0210................................ ...........ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...... ..........................................................................................dr........Vm.YmM..X...8d...\|.4.\|..%..W.....H......d.W.I%yV,.<G6..........n..Ns.......:>y....#..[.Vh4....A...2YNZ....a..(h.F.`..6$I,1....

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	81599
Entropy (8bit):	7.95510638079043
Encrypted:	false
SSDEEP:	1536:FE8PVq9GKBLovd1o7gDReyV10X3pEq//P1T9+NZGcmnoFyW:DteG+0V1AmRL0pv/n9cN5mnogW
MD5:	CD00B0EABDC2864825FE568250E2CDBD
SHA1:	6419077FEA7C333DBC364AE57E9AF033817EABAC
SHA-256:	C5225FC40ECB030E725F572350BA20BE36AC76AAB332E0C0441B98E09BEAB9B4
SHA-512:	CA54300039F819761D76C29DCFC2A27A4C2BB2C618139517CA05995BE114B088E0BF63FECBE5FF7F20CEAF7E2C2427B848947E80719CA095041FC6D999203D5F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................,.....................................................................................................................................

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3614
Entropy (8bit):	4.3464084954113025
Encrypted:	false
SSDEEP:	48:c3kE1cTK2NpE1DG2Xcm9yFcJCeivCcZmWUwOTMcWBlfZN0CQnh/vZEKKRy35nVkM:S31cTK2UD73YuTAeFh/vaKKRg5VJLE9W
MD5:	CE1D012126CE25C72E3A731060E8FE2C
SHA1:	9BD62D57E980E45C462219A61131F46CEEDAB143
SHA-256:	A91EC4E3E40185E8C894B5C158532373333331219B55F31B232895BECD8E55EE
SHA-512:	1601F5E8448C74DC5247C29050363A60B63FC8D26B797540CEABBC9C973E65B214777F01E9948DC72664C5E4826EDAF7FEF0A18AD6EC0617EA28D13EB4279E12
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="80px" height="41px" viewBox="0 0 80 41" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>..</title>. <g id="..-......" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="visa1" fill="#142C97" fill-rule="nonzero">. <path d="M59.1385865,14.5942768 C58.1867582,14.5942768 57.2718173,14.593145 56.3568764,14.5948426 C55.3549864,14.5965403 54.9070672,14.8551475 54.5157966,15.6575657 C53.198387,18.3596437 51.8803188,21.0617217 50.5648854,23.7643656 C50.1426557,24.6324259 49.727013,25.5033155 49.2968788,26.3979721 L52.9915538,26.3979721 C53.2444964,25.8066273 53.486241,25.2407471 53.7306205,24.6703398 L58.309936,24.6703398 C58.4594619,25.2520647 58.6070118,25.8247355 58.7545617,26.3979721 L62,26.3979721 C61.042902,22.4486941 60.0950258,18.5367642 59.1385865,14.5942768 L59.1385865,14.5942768 Z M54.7509542,22.2347914 C55.3688192,20

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	75982
Entropy (8bit):	7.997522796119487
Encrypted:	true
SSDEEP:	1536:+8VakKpNJGDRxgtunuELRKqQLVHQr9i3MCudEzvSWSByrEGaj4Rtnui1:+8VTKpNJYgjELRaykMBwrAj4Rj1
MD5:	86E897F7BC45576E7AD28251E1F5FA4C
SHA1:	FA296DB026A305C284D6749D4BFC9F87A1942272
SHA-256:	224A7968E37328BB1AB906D6AD5C8E0D9A2D5614ADC63BCEB0D8974333C96A38
SHA-512:	1B8BFB520861E5EC45B7BEAE29FACC370E18C3B208593FD63BCA5EAB15A674CF3BFE478281C36AA1EFCAA92B56376CEA015D19295784FBF0D3FB266C1812213D
Malicious:	false
Reputation:	low
Preview:	RIFF.(..WEBPVP8 .(...x...X.X.>m..G$"!.)4..@..ckl........o'..4l... ...$O.6.%-.n.k.`...@....kK.......3.......#..;........J.~.vV^}....2?....'....5..........+....}j..........Y...k..;......~H\|.~?.....<..?...=....7......j.3.....?W.z.K..........`..x../.w..O._.........../..._.?....^._...w................/.;......O..h.a.wow........N......r8.!.........7H..;...........;...I8.>...{...h6V..m.~9..4.5iyP....;.....6.&.dR.%..?,..i.uX...u......\|.....\|C.e7I.]8.i.5....=.S.z.\Js....~~.........KY&...C?......Q.._..t5.....".\|.Q.....i..b.....o.._r...4.w......'.~W1W......}.<i>.......\|..1.....o\|{...t.BS.(.7....H[..#....,....k9...5..6..`J....Y.e*t....>D.J.&.F..$l..n...xE.5\|$....p.d.I.3~G...9.Qa.....Q.X_%..[.o.B.......S....4.....g..N....K......8...a.....f...).v......\0Q...O'.f>\~<.l.p6..u...1..l.5...#.^......^....._.'..4..'....r`>J.G.......k@...V...1t~.iT^.)..^.......h....q...1...D_..:p...`.i^...P.AJ.....$...O....g.6W..mm......^.92.....A..N...{.......p.P&..J.\|.Y....=..

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.254165647130566
Encrypted:	false
SSDEEP:	3:dngJviukoESWljGkhbAYn:WVeSW/9
MD5:	6EAD198554C0D08245EF09F90978F247
SHA1:	C53AA12A7A507D43673FDCD5AD4D0DE2E2C68225
SHA-256:	84AE4688965BB1862D333E50E86D9A1BAA9AB463803E9E09D45196339F2F24D3
SHA-512:	B6D709FF4D3EC35609D9ED461395FD3652C2B834399BB533BE5C173302A8EF6D36D822C419373F285E07B5EA85302D6765B771B68433D72FA36DF9F889F27F5B
Malicious:	false
Reputation:	low
Preview:	data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, hostcomputer=imagery4], baseline, precision 8, 758x758, components 3
Category:	downloaded
Size (bytes):	50048
Entropy (8bit):	7.872799350933082
Encrypted:	false
SSDEEP:	768:gFQgK3Ho/Oc7GeI16H8CKAyB0y0KoGzcyrtEwOUWyHWOn3Gw4/rjCIFeQx6hjY:gF9uHo/OLgm0HkJO5UWyHWO2R/XC8rxz
MD5:	B81A424D3A0FA539E4E5FCB85E1C48B8
SHA1:	76995A92AED4A49CF008AE60C91AAD78B0DC14F4
SHA-256:	808DFDFAAA0316DE1FBAC4F8FDDA7170EA2414D71AE8122BFD888E62401D3A17
SHA-512:	361F81DC02117F2384C5356B16E653818416681339C98DE6DA1DCD944320377537BF5B9F02E6D02C5C76D9E81C0D8B649A0476EF6EA1FB32F59429A317B87332
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/c77099a56e06f49a357d51fc42f38086ac36cac1.jpg
Preview:	.....,Exif..II.......<...............imagery4.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".........................................S.........................!.1A.."Qaq2...#B...Rbr...3C.$.....%Ss.....c.&4Tt...6DEd...............................,........................!1AQ...2"aB..RqC..............?..J" ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." ""." "".

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 334x500, components 3
Category:	dropped
Size (bytes):	186640
Entropy (8bit):	7.911571827123798
Encrypted:	false
SSDEEP:	3072:5EkdnzNxUIy8JXxIK5JX3SMutGe8sNA7p+f94HkdLxeHUeWPXCthk5TAArkghEr7:ykdnzUwJXxIK5JSMeGqNAt5kFxKWPmhv
MD5:	8DE30F78232F3F10F2B1B9259DA33D75
SHA1:	C4FDB4EFD1DD8B403E92EA840EF1134A8984C7E6
SHA-256:	A758EFCCBB1AF7174B69BE20D1D404278A5F892CC7A6A87E79A8BDBB8A91E6A8
SHA-512:	386672B6E28FAFDD4017430208BC986AEC60D6F521B54A1EB6E6B55D9247AEA78761651DF0B5D90F5F6A3BC255EB3DA9D6525B6621ED8E0D8DC1ED4BBB94BA2C
Malicious:	false
Reputation:	low
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................N...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..o.c....5\|+.7..f}....5..5M#.)...m...s..l.7Z}.!..n..]F......$a.Z.Jji..w..7._....<$..o.M.5z..S./."..m.o.........u...J...Mo..3.k{..dd.(....%...f..b.H...).P.,]....}#....n.W(......6.k[j.}..mY...........\|....5.".-.....v&.{V.... .......a3.R6X.o,.ws.K$N......v.I..{.t....E..$.....C.(...1.4.\|3.?.,..:TWV.....E.XfA....9._.8O.K.ZI..G

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10501
Entropy (8bit):	4.389831986838369
Encrypted:	false
SSDEEP:	192:U5n5LZAWbQaODhRk9p8iUrjZ6vRnPvCtEcrzMV:U5n5yWbQaRr8iUHkNWEcru
MD5:	3A8B0094025FCC75887BA44FA896A347
SHA1:	106909876829BE53FB6D3339EDF54138E9731D9F
SHA-256:	43D0A062DF3ECCF50CF81F80EE88B7D37D7CCD3953A06E3B000E888CA11D2194
SHA-512:	9E2CC722EA3A00E802E2C02DBDFDD27E9434178EDE44A673A12AF79B69FB81E16792027B38EF09F5C07E9560667FCC58EBEA5C5B79BEDA50B71B9164FE39BE0E
Malicious:	false
Reputation:	low
URL:	https://static.shopymn.com/liquid/buyer/public/img/payment/AmericanExpress.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="80px" height="41px" viewBox="0 0 80 41" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>American express1</title>. <defs>. <polygon id="path-1" points="3 0.0558640385 3 21.3390995 54.9776351 21.3390995 54.9776351 0.0558640385"></polygon>. <polygon id="path-3" points="42.0925898 6.16238135 42.0925898 0.0385269231 0.331331538 0.0385269231 0.331331538 6.16238135"></polygon>. </defs>. <g id="..-......" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="amer1" transform="translate(-1.000000, -0.500000)">. <rect id=".." fill="#0070D6" x="0" y="0" width="82" height="42"></rect>. <g id=".." transform="translate(13.000000, 9.298077)">. <g id="..-12" transform="translate(0.000000, 0.701923)">. <g id="Clipped">. <mask id="mask-2" fill="

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 583 x 360, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19379
Entropy (8bit):	7.814346681232095
Encrypted:	false
SSDEEP:	384:y4nHSeTWqX/V3UBC7NrnFF/ViJPzbwyXEGH0+VNbDoAJ94z4ra5mb:y47N/V3UEncJ7bOGp/tHrrb
MD5:	CAE408692E9DF180175752E8BC159AD1
SHA1:	80017BBA0AB59B9225C758FC92B4CD2036A39006
SHA-256:	322B2E6062E00ACCCA1FEFCD71B973ABC9C7C23312302755E3A8EA6E5BBD4475
SHA-512:	292BF487BD34E7F245A9FF224AFE7A4A947107ED08C1147BC8C0FDF678295274292762C9473B737BCCE068395AB716ADAFB91A73B2595EEC6210C63BF3FD6B7E
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/89557b743d4c86744472d7204813d2ba.png
Preview:	.PNG........IHDR...G...h.....]Q_.....pHYs..........+......iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5, 2022/05/09-07:22:29 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.4 (Windows)" xmp:CreateDate="2023-10-31T17:56:08+08:00" xmp:ModifyDate="2023-10-31T17:57:16+08:00" xmp:MetadataDate="2023-10-31T17:57:16+08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:e2247c1b-fa3d-0d47-bbfb-ebbf53ebc35c" xmpMM:DocumentID="xmp.did:e2247c1b-fa3d-0d47-bbfb-ebbf53ebc35c" xmpMM:OriginalDocumentID="xmp.did:e2247c1b-fa3d-0d47-b

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 655x468, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	6622
Entropy (8bit):	7.9269272607461625
Encrypted:	false
SSDEEP:	96:pgmYzwZweM2lt5YUBnmdY2maoDix0GcmF0vMwOct/0vMwzTT5dE6RygT1XK9:+mYznUtkXmaoDI5cWU6T5dv1XK
MD5:	50BD48BEE1252101DEF7DBD6E5F10938
SHA1:	9CA4F03CF32D0509D228C557782E1CCFA67A6AD9
SHA-256:	B1E9655EF2EA73E097348BE04B72B7E8E32B1486A9E4D6489FD8E918D692D7B1
SHA-512:	EF1756D4E74CFB11EA9CEFC1B1C9BE1484F888A502820799AEFE1D5D7BCDDACE02D3B4C02C5D4C1453C57DC2400007322FE1E2A5AD4811730CB288C202B54493
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....p........>m6.I$#"."Sh....in.........G.5.Y.g]....?]]u...a....3z...d.....6_..Z.......\..u.{C........7^.Cv.c.s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8.d.1.9.8...s.q.9.8........C..:.@.~X...@H.. $.....f.n.J .i.9..k..-..Z.. $.....@H......9(..uw..&V......8...s.q.9.8..]....,..,.6..WaF.../.3...q.9.8...W.E.........G -..4....V..c.s.q.9...O....=......w..../....9>.d..O-..8...s.l.b.......A.....Q....V.J....p.....N....+_...$....3..&....A..f...q.)..u..!....&.....I.Y..9..la.o]...E.lD... ..u...V.K#.....^. .........'...I.ui.q. _..O=._4hr.N#..X(.:.7.....x"..6cg.z.2..9v...Q...#.}2I.{.l.;4......q......{..un......e..L...?wCZ....v........"....GBp..@h.$...Q>Q..^.".N..ZCu.g..r.3.:.....A....F;./...J...:.%...,3R...b...~&..$.]%...h.....Cs.....Q...2.-r.....S..a@...m....N...&.=TJ.S.D.M.PN.-.P.W.u.."......].(N......\.,..f....H...E.}..z..........@'....3..O./z.....g.v.......Z........

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=340, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1600], progressive, precision 8, 1600x340, components 3
Category:	dropped
Size (bytes):	276363
Entropy (8bit):	7.963853398149313
Encrypted:	false
SSDEEP:	6144:ZfV7FWvKfUb/R2loICKSM0Jqwlw7460KZng:Zfh/fUMvM3lM48m
MD5:	27AB1076DC71D687C4ADBAC1179017CE
SHA1:	144BAB150C35C0108FDC683EF43C173C31BB1A6D
SHA-256:	F81FECEB8B24CB8DFE6F32506ADD531EC9569CA27C27B35F01D86CD7E47AB131
SHA-512:	32AA93B2D6F2C3EC190681B79DD4172805F088129A00CBEECF0109675046542518CC116BF2C855EEE5D9D498E549780E58C70499224F7BE889EBB78DA325A6FE
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*...............@...........T...........................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 23.4 (Windows).2023:08:08 15:11:36............0231.......................@...........T...............................n...........v.(.....................~...........8.......H.......H..........Adobe_CM......Adobe.d................................................................................................................................................."...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....zg.....k...T...si.....d...~.A.>._..m..8..8D....qF..x..,G......yH..q.==i.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1520, components 3
Category:	dropped
Size (bytes):	332858
Entropy (8bit):	7.978678906342737
Encrypted:	false
SSDEEP:	6144:sjQoD2dM63kGkCbpsNthLFduxgPpdvCuu13sf1vIsyVtttFtbz+glU7hvpci2Glc:sjPMkG5psftFcMdaXVsNvIsOrF14vpc/
MD5:	95E1999836C8005DD0D1451FF2160925
SHA1:	66A69F09D6D94B663925DC78977B2D02A8D31FA3
SHA-256:	83C4F4F940D3D59E58C7CAE299EFC978F9AABA83609085EF9C7C038F4EEB0D9F
SHA-512:	B4A2A1BBE2DC3F7C2A8C23277EDE39DEB0A11389D8EE566C55F472EDDB62844B6E8A9F32663676FC4DEAB78D201787D99ABD64290E984FFEB9C1136ECD36F715
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}...........!..........7....................................................................,..............................Y.5.t.. 5.. `...z.@.........................................Q.kf..&....f...v...L\..a.Z.+9y.M.%...........................................{[H.i5.v..t.k.O...2.\|..n5%......L..kP.................................$F.k..k...k..........f\;)g...S...:K7"Er..$_.`.K..{..T..............................._5.p.u..u.5.x...........I...W/..T..O...X..T.eM.#%.D...&^.,...;/V.............................B..k..k...k..D.^.+3................u....Y...?.....X...s."..G.#)6M....uW...Y.>.:.@.......................k..k...&..f...6*.......g.l...v>"...6.m.zK.[./\|.t....&"ZbY.e.....S8.),cG.pF..UcFF1..K...v-..X.. ........d....................D..k..kl..k..F..2..v%.F...o.k..4....:F.)..9n^....y.~.2;.....[.l.....u....Mn+

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1000 x 1000
Category:	downloaded
Size (bytes):	471104
Entropy (8bit):	7.851897229898751
Encrypted:	false
SSDEEP:	12288:AarG2Qt0iv6EH7kzXNH3Em2kSXAJz1yJ6A1Xo/KfXCSguglTshsQLDd:AarG0C1kN3Em/yJ6A1Y0jwlkJd
MD5:	A9F22836FA16D2B5DE903EFB5EA30388
SHA1:	EBBDC51BCB96BBAFF2D742BB2D17DB396EF415A8
SHA-256:	BE676C00211232BF1629C9F7B7EF6B6E8117AE89BB7A126610A45F125325F3D8
SHA-512:	7AB1392E19950985D71D5B322D599FFF4FACC6F9226A6656D68D65EC08AC124D364FB88EA92131F8DBE066A91F2B12F47D0FCB82567D053A12133711FBD4A137
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/fe4f80c9b0b21a593c4baba7f41c5d30de03b1ee.gif
Preview:	GIF89a.......W....0.`V.c..t.......q...Qz.................. .....z.....Sy.....#xxy.AU...UUUcdd@AB222....Z..k.....\|..4U.e.....I.....jS....x.f....=dw.6Vi....r.N(O../...-HQ..<Wl.@Y......4H6..[.....B..a{.................$>.0G.If.Z.~KK.Iu...-....%............u...w.....p.......mF'.Yz...={..Qk*h........Ri...1....g.0.:..Et..c}....c...................@a..................etzf12.-2.t....jknBQV...GIKnWa!$'....."I`x..Gk....h........y{D...6d@.....[EEncK't.'...hg....$9.........".....!k.......ZFW....Ql......y...iv.Iv...ytg......o....4. guj=#/SQG.Iq.R}.=9Uca....t.6><4V.....3v.......v....,..EQHT.....Ql...,ItEk..[..c..k..@d....Im. N.c..Im......(............@m.@d6...k.......6...k........c..Ic...D...k.8......@m....Id........................ -$.........(...........;..2...$JO.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	75982
Entropy (8bit):	7.997522796119487
Encrypted:	true
SSDEEP:	1536:+8VakKpNJGDRxgtunuELRKqQLVHQr9i3MCudEzvSWSByrEGaj4Rtnui1:+8VTKpNJYgjELRaykMBwrAj4Rj1
MD5:	86E897F7BC45576E7AD28251E1F5FA4C
SHA1:	FA296DB026A305C284D6749D4BFC9F87A1942272
SHA-256:	224A7968E37328BB1AB906D6AD5C8E0D9A2D5614ADC63BCEB0D8974333C96A38
SHA-512:	1B8BFB520861E5EC45B7BEAE29FACC370E18C3B208593FD63BCA5EAB15A674CF3BFE478281C36AA1EFCAA92B56376CEA015D19295784FBF0D3FB266C1812213D
Malicious:	false
Reputation:	low
URL:	"https://img.shopymn.com/uploader/d2df150284cdfe15bf44c5a379f89f09.png?x-oss-process=image/interlace,1/format,webp"
Preview:	RIFF.(..WEBPVP8 .(...x...X.X.>m..G$"!.)4..@..ckl........o'..4l... ...$O.6.%-.n.k.`...@....kK.......3.......#..;........J.~.vV^}....2?....'....5..........+....}j..........Y...k..;......~H\|.~?.....<..?...=....7......j.3.....?W.z.K..........`..x../.w..O._.........../..._.?....^._...w................/.;......O..h.a.wow........N......r8.!.........7H..;...........;...I8.>...{...h6V..m.~9..4.5iyP....;.....6.&.dR.%..?,..i.uX...u......\|.....\|C.e7I.]8.i.5....=.S.z.\Js....~~.........KY&...C?......Q.._..t5.....".\|.Q.....i..b.....o.._r...4.w......'.~W1W......}.<i>.......\|..1.....o\|{...t.BS.(.7....H[..#....,....k9...5..6..`J....Y.e*t....>D.J.&.F..$l..n...xE.5\|$....p.d.I.3~G...9.Qa.....Q.X_%..[.o.B.......S....4.....g..N....K......8...a.....f...).v......\0Q...O'.f>\~<.l.p6..u...1..l.5...#.^......^....._.'..4..'....r`>J.G.......k@...V...1t~.iT^.)..^.......h....q...1...D_..:p...`.i^...P.AJ.....$...O....g.6W..mm......^.92.....A..N...{.......p.P&..J.\|.Y....=..

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44732, version 1.0
Category:	downloaded
Size (bytes):	44732
Entropy (8bit):	7.995865023961589
Encrypted:	true
SSDEEP:	768:2J42bcxCOijikjwYF5GKUppT/+4DMoZCPMCu+cuQ8/ivjHzMPym/v9zyaGG24hvP:eTZOiGkjwmMKUzTCoAECsTMBWaxh3
MD5:	07ECC14B8254F9B0C6AAB1E7826FADD3
SHA1:	C2239D0178F18EF65A2813755F691EF527F11113
SHA-256:	12EF551E68F7B89F5EB4F8358C763EAF31155CB051F6829A43135F408857DAE6
SHA-512:	C371AC43402AE4D9ABFFF636376A391A4FAEFAEA904C73AF21E3162BF734085376589F2A7FD040534D2FE9DC468255825E9ABF51182614D0D04B0E5E06613F97
Malicious:	false
Reputation:	low
URL:	https://at.alicdn.com/t/c/font_871426_xa0zaxz404.woff2?t=1699608289611
Preview:	wOF2.............._....h.........................T.`..d...P..K.6.$..`..2.. ..g..{[.!qE.....H.v...>.....$.onf .8.......?7...i....M.........D.h.U..n.{k&FQ..............U:....{&...o<......1..~54..C..5.......b.).O<..r.Z.w-3..1..Hb....vg]I...$q.JD.B....)...s.,m........j..7>n..6.2.3.......oS..Kum.../.+. .x...Y`.....<..~...~.TT.#........U...........1.9.C.?...9..C.m.B).!..G.......bUTm#z...(HKZ.@TB.q.6`!b0.#10.T.OA.l.sC...A...$...q .$.^D!.h..b.@...d.....:....*...k;...'...G...{1..R[.G........@hW.HU.5i=28/...u........x.".."....Zi.%\|`...D....mv....?w.f...y...e..:9..I....:...).H.(..KA#.....VUv.wW%..{.v2{h......&.`[!.f'4...O.o.o....&C..!....c....X.........{.J..P...hM.M.3.%..t.).I.gD...M#.....0..{. .@._)...J+...d.U. .....+..}R..<2..6..d......~..}. ..%5.p..4.q..E].5....i].9..../.a.^8d'.;.....!F.........v.Y....#.....>..%.4.f.\|;.UW.]..E.DL..ID.-...p...,\|......W.....1.)lJ.H?...}...{.h. e..$...A...e..<&).C.Z.Y.doJ?.DR...$I....:.zc..j.(w.n._T..?v.BS...

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	292594
Entropy (8bit):	7.993587887289583
Encrypted:	true
SSDEEP:	6144:i4bBGFJj47lrom4sIkWnMZvNpLHGZa5zIPlnc04Jt:bBGr2GZNMZVpLHGZmUPlnE
MD5:	EB0BE80FECC107F540B161762701B945
SHA1:	281411D299C813E4711F547470C4E805F991AFD9
SHA-256:	CDDA8F64F6CCDF22DC1B5214C7A804D47963614629E3E6F0CC12B07721EEBA62
SHA-512:	AE7A68B94C5F95E3A36700DCE3C99EBE6F8A1C2B8BA9E05E54CEE13C5625077D758D3FB9EAE595E76921E7F69EC5EFBF6DBECBC2A6FD0AD66FBB8B97ADF29F6C
Malicious:	false
Reputation:	low
URL:	https://img.staticdj.com/a650298a61e168fecaaa1d14adf1ee63.png
Preview:	RIFF.v..WEBPVP8L.v../.....Hl.H.$X.7.{...p..}.......?.1a.c.....j.[..KMr.;V.....+..h.D.o.X5{r.<[.+..G...&(6.{T!..&.....F.@F.....q_k..g....5..q.I.f-...+..HT'z@.T<.y.Od...xD.x....\|8._..<x.......7...L<5.qbX2;.yS..8.$&C.2..U.T.j%.zx.5..V......0p..].........j..j[....7.C)......j}.p.x...I..(zk......N..c)..h.e0........h.j.z4.u.....H..x.+...$.M.y...r......u]..1w.b..0......YI.....;.f.`.w...$....dC.C.:....&...<p.:.H.H...6....W.J...z.,..q-....+...D.I.\.%.YYI.$....!.ZG.....>....AQ....HH.N..oT..I..H.x.x2.A.*V!..:p.jBT#f.F.....(..k....z.m....=.iE.....!.{H[..Jl..;..{.-V..y.E{._."......kS..U....w.5.@5..zX.jkG...6}J<T..N.h5...Z;......1&q...?......m...." ...05....-..}...."I.m.%8I%($.gP.......c..........q\..:.m........7$....9......O.,..C)........iy.G._..D.".D.....(..&.....,.."...7/...x.$..$i".".jX...X.l.D.../.?<&J.(.@.Rt....@I...M...qr.`%.I$........^D...n$.....C`).D.....IY..d&@....HDD..,/.#EJD.(.af.Q.......Lu..........AD.P.F..DD...OP..x.`.)%@..wn...G8.6E......

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	60478
Entropy (8bit):	7.930932909871778
Encrypted:	false
SSDEEP:	1536:Pa4Xqfj5D7EgKyKb5cgtJUZOIHVWlUZelJIjInLniw9kO:y4aftdWWgtJGHKvlOjILnlkO
MD5:	B8FC9C63DBEBA462E6EBA1B32D1EA6EA
SHA1:	5F68B56A6B153BA5FF516ADB6B48EE8D0A19E815
SHA-256:	BF1CA61B17D20FC5DEBAFCA0AF2F80697DB8E5B7F8634762E7E5CDAF7E0BFE40
SHA-512:	6CFAC2668892961E63EE3D91ED98FDD16F762CB0ECEADF3F07E4540B325287DBEAE7E3EB89BC48E771CAFDE90839F103D0DCDE1313B9479544ACF33EFCA8A866
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..........................................................................................,.........................................................................................................................................

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 900x850, components 3
Category:	downloaded
Size (bytes):	221018
Entropy (8bit):	7.9812662364704945
Encrypted:	false
SSDEEP:	6144:nJVsIpZPSHcb5UYt4FXIVGCS11hhZQrwYhzw9:J+wVt4gGCSDHnyw9
MD5:	399748CD074E2B27FE441F497E805308
SHA1:	3AEB18A0ADE7D7047284B3A16006A316CABA1C8A
SHA-256:	A95D1DB984D9B6BD29BA867AD187D4F6A118AF21DFE0FFEB49C73FBA9625A3E0
SHA-512:	EB8B728B94E6BD85DC923A186E2D9EC552761A15D4EEF3A99313E426D16B1CDF3A7C77940F0B6A18D222119B9D73724D08B68D9179D462F806A19EECFA3A4CE2
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/27ef8ca73175ab7a2b29bd8f11ae4dc3b3878bd6.jpeg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100................................R...........ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}......R........................................................................................X.............................................+eh...j..+h.&.W.Z.,..G..............................................`......Y.....W.."

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 347x500, components 3
Category:	dropped
Size (bytes):	86977
Entropy (8bit):	7.91238464414936
Encrypted:	false
SSDEEP:	1536:to+XynGWG8qDddtDcZXBCI0IfLzj8VukTfkLv/Sv5mb:OrG8Id7cZXBbTfLzjwTsTax2
MD5:	376B6A24C9B4CA9C6662244AFCF9E012
SHA1:	82F235C7488CC2F52CB2B0AEA7F0A4E9AA5A3EE3
SHA-256:	FCAD87466ED30E2173E3C05FF609B28E5A14CCB2090307C823D24A0CA04A631A
SHA-512:	17C782C3995C20F7AD753F89998C1C0A3D6AB063755DB0314088782DDD56852C174135E4ACF6F21E88206CA35EA4A6B52EB8D6B57560F92E4E4C49114EA39F84
Malicious:	false
Reputation:	low
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................[...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(... u8.....(.2=G.@.@....P.@....P.@....^...(......(......(......(......(......(......(....B.8.q...t.B.[..Z}B.../..}s...z.;.I......L.>z...

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	93748
Entropy (8bit):	7.962730858354728
Encrypted:	false
SSDEEP:	1536:XZqtlwbWTV3ERAenx3IPCNf7B/E6UNF4xubmJUo9gqxB0JVGx9Hp17My7x7J6aa9:MugyR5f7m6LemJU4gq0Cp17x7XandyCR
MD5:	BB0378B9B926C36659C410108092B471
SHA1:	6C30CF9649FE85CA2BD259AD3B2EA0F5CC59B42D
SHA-256:	B6EAD4E41F54D1656D2A04CA1FC5427C19D4ACCFF4C4A40FB9424B941A1E6538
SHA-512:	89476EE5833F742783E332696566F5C13EBB6662B5F91366F488149CD4634B54B65BAF427E80FAF2C062052FE6E6421EC031E23A3E0179EACAD261B30D77F3CC
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...............................................................................................,....................................................................................................................................

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	61444
Entropy (8bit):	7.943391843270911
Encrypted:	false
SSDEEP:	1536:rv4XkQnTnQHBfgG/v16AVffAXwQ8eaR1bMOVum6Qs:D4RT8f9ltVffAXPY20um6Qs
MD5:	0747BAAC18119E1A0DCFF42887DEC064
SHA1:	E6042848F57DF6BCDBB874572CABB0B70C450CFB
SHA-256:	9E288E598E52BA4F4D1AA519AF45C67A4DFCB40EDF14460D3E1E326CEF98C2E1
SHA-512:	400F693F1A1377F69FA7C8009E1CDB2E065A0A44CE0ECAEAC663A20A05B3FFE5635BDBDDE150D30FC576732FC9F0B6DE2EAD693C38AC1DF331FE9FEFB98C58C8
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/8903fb7b820c454c2185671cc5f2599ffe15cbdb.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}.............................................................................................,......................................................................................................................................

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x1000, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	46084
Entropy (8bit):	7.983802592087675
Encrypted:	false
SSDEEP:	768:5IvjRwqxIOmX0xn53kakHIlPuISlcQ3YeZWn+BZCFvYMLcG6rlMUdQJa/jU:5IrRwqXkC53MolEj3dZWNvYCclDdQb
MD5:	1DC32F133A076DFA8649F1487C888BCE
SHA1:	8F9BE111035A60F3B27A12B7D9C63CD7ECF5385E
SHA-256:	EB2490A8C9FBA8CC5D8B1DA1B0D4E2A979DE76EAC53E22D44C3C942F34092129
SHA-512:	0F9CD665E0215BD73E74640D6FA8FF34B02413E836CC0D01515A4CB76F1E14DDF3434BCCD66E8EEBB0242A2A6EB52C4B58E42AA362E6DDDDAF694C27D8275DF9
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ........x...>m4.I$".$!1i0...in..Y.c....._.R.....g..=..x..W..........kg...........C.#..8o.g..R...,...B..t..?..-.~..Z....>..=.9P.As..n..d......0....?....W..p.r..\|.b_.<..M.o._......w.+.../`........../.c.<_..2.o.....W.O.x....'.?........I.......................A.AA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PPG......yAA.PP.3.1c?.......6.:...j...6.:...j...6.:...&...7x.p...5..[..1..HB.wq3..'.j.g../..l....yAA.PPG......yAA.PPG......yAA.PP0I......jy...Y......K..y.,x.U.Q8.o.h.S'+..j...6.:...j...6.:...j...6.......N.n(..-G~.h.?S.x0xff...a...I..S_Y.......z>.L...}.w<.....2..6.:...j..

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 1000x785, components 3
Category:	dropped
Size (bytes):	122813
Entropy (8bit):	7.972247530434266
Encrypted:	false
SSDEEP:	3072:mHf0B1+u/604f3wdMmtleG12LJK6cFpjs4O28XxfT:IfO1V/LO3wp1YMFBToxL
MD5:	025FA8289674B45354575FB01C37F583
SHA1:	89A5F6119E7F612E65D7BCDB82D5C445820443B6
SHA-256:	813F7091B9180CC8537449C79CBCE0CE6B1FA86E790F74CEED411B23EA21D204
SHA-512:	499D74E35FD1AF1E5BDDCB33D2FFDEDEDB495CAE67A3BBE5A537746B73F9F5CEAE8E47BE25B25E496F39C0C92019E0EC05ACD6CDF3C7D4D5C57E555675ABAEE4
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(...........<.......f...i.......p........w.......w......imagery4............0210............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................X....................................................................+.t....Y..1.BX...............................................................

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	4.583242995951122
Encrypted:	false
SSDEEP:	3:HWwCnrJT+2KtIDthGDthGDthGDthiQn:jCrzrGGGj
MD5:	025F8F8A792C422306BA7570376CED10
SHA1:	251ECBBC63FE55BB81DF162974A46C6AE8D88BC5
SHA-256:	4908B90677C6861D630C140D2B9F39CA2877727324C98DE86C27CFD120D7AE47
SHA-512:	056E2E55EA9241E6B0744A8BFC00542E71F61B6E5E76FAE0C7EC488BC2FFD5D70BDEE6BD13D8BA503C4920ED0599C72D94784E60FDE7AA922233DA2EE76D473D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmmUdjoO4vOvhIFDV9k6z8SMwlEWhFMhJBBvhIFDQbtu_8SBQ2RYZVOEgUNkWGVThIFDZFhlU4SBQ2RYZVOEgUNNYZUHA==?alt=proto
Preview:	CgkKBw1fZOs/GgAKNgoHDQbtu/8aAAoHDZFhlU4aAAoHDZFhlU4aAAoHDZFhlU4aAAoHDZFhlU4aAAoHDTWGVBwaAA==

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	downloaded
Size (bytes):	86272
Entropy (8bit):	7.953073491575213
Encrypted:	false
SSDEEP:	1536:PaoBUIx/CcZ/gjQe4mF2CsD7XfY8gbQGUie6A9LX+XH5y29AR:Plh+j/0CkwzcwA9LX+42GR
MD5:	D83098E0AE02ABC6076A3F796F119422
SHA1:	0EB9CA53A1A45A5A603A99B11DE6A6989788FB33
SHA-256:	98F8FCEDAD42577CB0196C64FFE57AAD7AFCA40EE19641EF6A7540A1EF462B40
SHA-512:	B6D03918BB44ABFF447A43A24A461870AFF3D9F0149D045A5076CCA1F02B0BDDEFF17F455D016C290E847EA0F3A8EF7ACD6A91819B1FA2B8B0047D123C6F4E04
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/622fada3a90cdea20584e58943f97e18bc42b336.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................,.....................................................................................................................................

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 800, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	403355
Entropy (8bit):	7.998184171877929
Encrypted:	true
SSDEEP:	12288:uFUm8gWymSB8eDZxi5zcM6cmzp4ZdfKSD0uOjT:KU1wmS9De5IMvm9+dSSoL
MD5:	EB48A3B6DF774CC71EA5C96B2700B47D
SHA1:	51367F32C30C897BB46E4B9C2505A0547C350C14
SHA-256:	19FA5A617056B04981997CE7F3A707C770607B5EA051D3425B84341C4C5551F6
SHA-512:	5893B96F76E9127F25FB7B64971BDB6C0AC20844A157850E018879432E811E265592577B99CC103B6BDF1DBCBB57772FC23942BC2E9A7C77E2A6CBB5B2B81BE6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....T..?....sRGB.........gAMA......a...'EIDATx.....0.......].q.}x.........K..;.::.8.. @L..'..A...pC...7.......X..&....X.#...p...?......f...cH}..n..Y.S....\..%].GD.I"........."!D.U'.LI.DJ......D$.BD.......x?.*}.r....D$z.s....VJ).V?..E.X....=...G..,u.,Kc...._^.....oa...u.Yko5#.{{.^.....)B"jT.\|xw..I.?.........HJ..Y...J".s..G..(....Qkm..R....t..J....8.F...G..R.}.....5X.#W;QI).x.........r..<WYk9]Yk.s.Z.5.@..{).d.!8..EQ8.&..r.\.V..".2!.RJJ.`...........u...PU}...R.^...x.<G..,.<......p8.y~:.6..z...f"...4.Y/M.....B.....~1.....\....#..U...S.......].`.......I.%.....`\.w.5. .P.RH!.B..AH....'..`..+n...M...N.;3..3w.U.e[...iXV+.t.;..}.=.X^^....j..k...z.pe.q'.p.....w>...9..n.....EW.p..aV.=..>....g.....Li._#,.M.R.....p.`;.%JNN..8.m..Y+..o#.Nh...87..R......E".< <...\<........tl....,..a/......~k.Y...?.,X0f.k..f..B.J)....}.f.W..........l...Z..o.i.E..n......X..q..3g.\|...bb.`f.2).......w.A...<.g.X.[z3..l..._....5kp......N&..6l..\

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (38286)
Category:	downloaded
Size (bytes):	737582
Entropy (8bit):	5.25531395484242
Encrypted:	false
SSDEEP:	12288:CPhobe2XbT/zZSTiBwUtykxDpWNYQhrKtd7y1D8LMZ0//R6lRlEAytJCKUqtkTMr:tvzo+BwUtykxDpWNYQhrKtd7y1D8LMZ6
MD5:	566F3BCDCB5005B8AD21AB5461A9DC47
SHA1:	77DE27C07D8BDDC33E01570FE1AADC1642380724
SHA-256:	886294453704FF4B5D4262EB6C6B2EA7CBBA65EB25FACFC71043772BDA0F0566
SHA-512:	F1115059F68A76251285B83870B810573DE14A1B97C659C68002F9D96E8A52E3F6433FA4FCF9F307897D45872431211D155649C3CC1126D0CAAC77720C0B6EAB
Malicious:	false
Reputation:	low
URL:	https://www.cravob.com/
Preview:	. . <!DOCTYPE html>.<html lang="en" class="general">.<head>. <meta charset="UTF-8">. <meta name="keywords" content="Amazon">.. <title>Amazon</title>. <meta name="description" content="Amazon">.. . <link rel="icon" href="data:image/gif;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVQImWNgYGBgAAAABQABh6FO1AAAAABJRU5ErkJggg==" type="image/x-icon">. . <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0">.<meta name="applicable-device" content="mobile">.<meta name="apple-mobile-web-app-capable" content="yes" />.<meta name="apple-mobile-web-app-status-bar-style" cosntent="black-translucent" />.<meta name="format-detection" content="telephone=no" />.<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />.<meta name="renderer" content="webkit" />.<meta name="aplus-terminal" content="1" />.<meta na

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 655x468, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	16010
Entropy (8bit):	7.985422107592759
Encrypted:	false
SSDEEP:	384:gXy2gNxFWsOqEV7Lrg7OmMmJDlJ7HwDQrK3Aagu57xGd9mvF1gd:11xFWsOXrg7OmMiDl98QcMu570d9m91o
MD5:	0882DE875B30C553CF593F0ECBC65FD4
SHA1:	EA2B762F6E69ACE2AEADB0D6A52FE26932E690E1
SHA-256:	ACE7740CA41C004C57D6B1EDC3FA9E5F5B98745AF4B501F89C5DB4E8F126B4B0
SHA-512:	C2B7AD968A2061A321119754AFBE77AD153FE43202F2F4A9E7897E3ABB2D85CB42AEFCAA53D46F3A3EB29A007BB7BC0740A3DA77F3934C757BC938EC030B84A9
Malicious:	false
Reputation:	low
URL:	"https://img.shopymn.com/uploader/7031c12368f9d1fee63f7904e93284d2.png?x-oss-process=image/interlace,1/format,webp"
Preview:	RIFF.>..WEBPVP8 v>...?.......>m2.I$"..".:....in.........<.C..P.....".c.1.z.sB.N9.6(....z......sn..k...{....g}...[..o..{..5.;h.u..G........._:..nN........\.6....W7.....8m....n.o..us~p....\.6....W7.....8m....n.o..us~p....\.6....W'.z.;vK..6....W7.....8m...Q.@Y........^.J.=.Ix..j&.y.n.o..us~p.H........UX.3........oa...YG.8K.b..a....8m....n.o....%..8P....3p...Ez.S.''.eV.TaT.....E..f1s..v._o...T.Ag..;...H.n.o..us~p...ZB\....=..5a.lfDU....X....;?....!...?E.........=~ .P...>.y....-..n.o..us~n....9.[...]n..!.Q...j..?k.\|P="......SPG4h...{......G...lf..o<K..(SJ.r..~JU.$...hs-.>.?[... ....B.c......\.\7..,.;..l.~./.G.t.YC.h....>j............Q.W...c....H..@U.......=...p.V....D...F.,:........:..v.C.5x.IV...!-...."...W7.S....1$w...b...8.q...GQ~0..:....b......6.\|..Ig.~....[.-.......6.E..(.N...Xo.....*..........Y.?....1t....L. .uso.J._.^...X......7...7.H..g.9.;@x.#.1._...#.a+......b......,..f.X.......j.........ygJI....9...:`..........9

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1000x582, components 3
Category:	downloaded
Size (bytes):	122557
Entropy (8bit):	7.961201116386034
Encrypted:	false
SSDEEP:	3072:FGUy1l+i9U7vKn37wpPLqzRjq+YM2crWuqoQXdb:FxiuvKn7q+92cC1XB
MD5:	2BF63D8311FF49E15CCA56A593F1E064
SHA1:	F82CD46FCE7BE7510939DF7677CD72D18FF74C83
SHA-256:	9EC9A4DEEF1C4A91BF52ABDD8CA78386835790068348F3CEDA42AF69EC42F2BE
SHA-512:	991BA5406FA3F85BB8A43872A32159C4E0787FDD47ED1B525905D1E3394D86AAE7A038B4B80C160EAED41AF09C81902B50C5159CB552DBD721F95C797C2DAC2D
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/35ba491724c524231c180060c6634fbcb3366865.jpeg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.................................0210....................0100................................F...........ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}......F.......................................................................................X..................................................................................................................................2.V

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 255x500, components 3
Category:	downloaded
Size (bytes):	92185
Entropy (8bit):	7.869750988796015
Encrypted:	false
SSDEEP:	1536:ulNu1hQW2LlFGFCcgY/5v5PYBwouPDSK+MBaMddVOgpRBubum1dsIcSF9iC8Rz:yKhQWs3gCKh2BwjPDj1LOgHBn6dsLe9o
MD5:	50DA196D1F219204C652502AE7835561
SHA1:	5D63481BFB0240A62D49A9D3D0E5E6716A0201F9
SHA-256:	CB8B1C8B7CE2DCE8E504FC8DEAA71D7CCC1602C4AFDB99D493DF4B8621F320DA
SHA-512:	EA7F6E40263F3434788B6515009A6D5705B07D9168A24D89A77B5F3EE54CBF9228EFB5CF7D95203C37B8263CA4D39E3D64154D36817C4D6AB6EADC32AEF89EC8
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/035ebc6dc320fc94a1d54b8584520801.jpg
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......n.....PO<{....PP....G.W...k..A.z.....n..J..v.:..Z.ai..W... ..C........4..'.+.....\......S.....?..A.h.%-..a@....P.@....P.@....P.@....P.@....P.@./...._.\|.....f.../..:...,4..YBZ.g.u9`...s......&@.....Z...G

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 452x500, components 3
Category:	downloaded
Size (bytes):	143686
Entropy (8bit):	7.920714868627204
Encrypted:	false
SSDEEP:	3072:3WxfYf9+MXTYDiA1x227k931X4sCdFoLNH8rDbb7cNQ3tU:GARDYLY954s2oLuzcN7
MD5:	3F68CFB08A614580660A9EC2F9883B07
SHA1:	A190024A77DA83EF14F94AEC60E5E0C5A1ACFDF4
SHA-256:	8BA1CF9135DE0DA45F90A19486C9860A39FC39DEB74B89FBFC1E09035E1FF4E0
SHA-512:	8512315CBEE31AB9C6A407146B61B135F4D13EDCD31DECBD6C373BD6D98FA49B99DFA5B34D5BD5907443EE3E4A0A06586D2F7F5C864FC9A3FC8108EC1CB4C854
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/dbaf20a93b83347c91f7674df9783ada.jpg
Preview:	.....0Exif..MM........1..............www.meitu.com....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(.....?.@.....R.......[...f....Sq.l.<.5.?..7.V.7cp.Qo].}..........\.~m%e....{..-,..G#.....?^........V..q~....&.....TY..s.... ...

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	64887
Entropy (8bit):	7.950919060481694
Encrypted:	false
SSDEEP:	1536:F5dsHiDRP6l20JA2GRxBw6xeJjDZYmGkBabcz6y2U:FkHigvWGEepDZxGkBabcz3v
MD5:	0608A8539B3D9DA1C2CD17E41E564175
SHA1:	13D1EA40FDF65E964D3C361E0A78B0B4CE371C65
SHA-256:	750D513A983F84A783743023B5B28262B1A91CABDBAC073D15CFEA99BE67C7FD
SHA-512:	70ADCF998EE966F336CE9A19B8ED2361FABA64EBE76B90D8F406A98DC099E4E313CD66C11CF9F861F5F2F3C752AA6C6F936552EF8988F72586BFC9BD39D4469C
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}.............................................................................................,................................................................jZ.v.i/.gY.................................1..}1..nzGI0.m..?.........

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.254165647130566
Encrypted:	false
SSDEEP:	3:dngJviukoESWljGkhbAYn:WVeSW/9
MD5:	6EAD198554C0D08245EF09F90978F247
SHA1:	C53AA12A7A507D43673FDCD5AD4D0DE2E2C68225
SHA-256:	84AE4688965BB1862D333E50E86D9A1BAA9AB463803E9E09D45196339F2F24D3
SHA-512:	B6D709FF4D3EC35609D9ED461395FD3652C2B834399BB533BE5C173302A8EF6D36D822C419373F285E07B5EA85302D6765B771B68433D72FA36DF9F889F27F5B
Malicious:	false
Reputation:	low
Preview:	data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=340, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1600], progressive, precision 8, 1600x340, components 3
Category:	downloaded
Size (bytes):	276363
Entropy (8bit):	7.963853398149313
Encrypted:	false
SSDEEP:	6144:ZfV7FWvKfUb/R2loICKSM0Jqwlw7460KZng:Zfh/fUMvM3lM48m
MD5:	27AB1076DC71D687C4ADBAC1179017CE
SHA1:	144BAB150C35C0108FDC683EF43C173C31BB1A6D
SHA-256:	F81FECEB8B24CB8DFE6F32506ADD531EC9569CA27C27B35F01D86CD7E47AB131
SHA-512:	32AA93B2D6F2C3EC190681B79DD4172805F088129A00CBEECF0109675046542518CC116BF2C855EEE5D9D498E549780E58C70499224F7BE889EBB78DA325A6FE
Malicious:	false
Reputation:	low
URL:	https://cdn.shopymn.com/uploader/9f39b843564a229065a9a9a6224cc6dd.jpg
Preview:	......Exif..MM.*...............@...........T...........................................................................(...........1...........2..........i............. ............'.......'.Adobe Photoshop 23.4 (Windows).2023:08:08 15:11:36............0231.......................@...........T...............................n...........v.(.....................~...........8.......H.......H..........Adobe_CM......Adobe.d................................................................................................................................................."...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....zg.....k...T...si.....d...~.A.>._..m..8..8D....qF..x..,G......yH..q.==i.

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1200x772, components 3
Category:	downloaded
Size (bytes):	359412
Entropy (8bit):	7.96860847917344
Encrypted:	false
SSDEEP:	6144:o+N8BwGq3uARyGDbJklv+hSRdP7HTO3/gQ8KhwI4t7dW+ZEF0kw1FNP9bYBx2+:juwTjcGD12v+hKP7C3/qKhWti0kwh9R+
MD5:	56A28C0F4D3B9F422DA6E7A955BB8097
SHA1:	314830C977B1903BE415CC4FCD875C4B1C88AE40
SHA-256:	0CF2F206BD2F459096DE691633EE6BB88361EE84DF735528BA4AB03644B8E39B
SHA-512:	330B0553AFD423A56FEB8A7A2FD52E2B595B4BFD6AF3F878644CBA0322DE6F218172C796BE10A3946A148C49F5D2D8DB55D078A275E0088335A124570CEEBC0C
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/4f4833f5cd52885ef5e46ba206cdc229.jpg
Preview:	.....@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C............................................................................".........................................V..........................!..1A."Qa2q..#B...Rb...$3r.C.....4S...%Tcs.&D.5..6...EFUd..................................E........................!1.AQa."q.......2..#...BR3.$Cbr.....S..4D..............?..D..d.\'.84<=.~c..5.Q..ab7...

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 898 x 800, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1032083
Entropy (8bit):	7.984719575170715
Encrypted:	false
SSDEEP:	24576:l8/BLe6/b/F13SbQutWN/2BqZleM5c5HxbPKQTS+yDHbtVUuf:l8ZLeMb913PusNHZleZ5HVPQ1DHJVUe
MD5:	5250B20144ED26EADFDE22ECF97519C6
SHA1:	3F935279726A05B6A02222C06487B45FD9CA8D76
SHA-256:	E0515817BB0AEF960A0D0B2450E8E1AF72DC8A6FD51CD26B780F67FA34E260CB
SHA-512:	DA9EBB80FB85704773AB8D20771BC9ACCBAFFC1CB5C6EF065935476E2F2F89FA908080F3C2042C2AE872A783F03F1AC3447444CB940F0639118A8FE0F69B91AB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....... .......K.....iCCPicc....c``\...[.$....WR........~...A...A..21...1 ...'.v...D_....@..LI-Nf``......\PT...........```.)...b``....!...;...V..............NBbC....d..Ld.$...A.R.....O2'.N....&`/.(m..Qs....$7......U...g..._{..K...KR+J@.....@a..6...E..._...' .f20loe`....SY........<...M...Ft....pHYs...........~... .IDATx...d.U5...D..U%........7._...0....,.dx4^.;...pUVe...v._.8.....a.-.u....8q...s.5.\:.J.U.T.R.J...)..T.R.J.U..o...-U.T.R.J...T...J.U.T.R.>.0.T.R.J.U..gP...U.T.R.J......R.J.U.T.R.A..Z.T.R.J.U.3..CK.U.T.R.J}.U`h.R.J.U.T....-U.T.R.J....+..T.R.J....Y...Wk...Z.c.R1Fc.~Y.T.W^../U.T.R..:..g....-.H`Z.T.WX...U.T...D........c<....~..n..........................7..K...9Z..+..CK.U..oQ.r".SR.].....nw...{{..n...7.........-.i..w].s>..x.....9..4.......?.....~.m<y!GK.zUU`h.R.J.........{.!..~...6..f.......{........-...~....x...{.G.Yc...X.?....j.SJ....n..}UU....?..........*.h.R....-U.T.R..~a...)....x...\|.pyssssss...ww......8.C..p...,...

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 750x480, components 3
Category:	dropped
Size (bytes):	86419
Entropy (8bit):	7.9580158488323525
Encrypted:	false
SSDEEP:	1536:47lwdhMiQLK1p6aST7tFT64eVVHjbFltBtfCWH5qc82zsVX5Me0JD182:5qK1p6ljBeVVDzTtfFItXVyf
MD5:	6899D9A1FFB0BD43EA36F5E6D44DE5D0
SHA1:	761C62FD5B3DE2D6C91EEB43A3A0F116289F07B7
SHA-256:	564F22FB3E8B1179145D73E4C5671BB2290C8BA6F998A9A8132E2CA91AB5EBD3
SHA-512:	0211C5258A72565802E3841CE43BCD6599ACA094E5D469FD4126446FCC112D463930FBC29A8458D8D0D5951F19786727D94511CA8F4DA7B7375AFB87AA2FE0DC
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................,.....................................................................................................................................

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 900x850, components 3
Category:	dropped
Size (bytes):	221018
Entropy (8bit):	7.9812662364704945
Encrypted:	false
SSDEEP:	6144:nJVsIpZPSHcb5UYt4FXIVGCS11hhZQrwYhzw9:J+wVt4gGCSDHnyw9
MD5:	399748CD074E2B27FE441F497E805308
SHA1:	3AEB18A0ADE7D7047284B3A16006A316CABA1C8A
SHA-256:	A95D1DB984D9B6BD29BA867AD187D4F6A118AF21DFE0FFEB49C73FBA9625A3E0
SHA-512:	EB8B728B94E6BD85DC923A186E2D9EC552761A15D4EEF3A99313E426D16B1CDF3A7C77940F0B6A18D222119B9D73724D08B68D9179D462F806A19EECFA3A4CE2
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100................................R...........ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}......R........................................................................................X.............................................+eh...j..+h.&.W.Z.,..G..............................................`......Y.....W.."

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 655x468, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6622
Entropy (8bit):	7.9269272607461625
Encrypted:	false
SSDEEP:	96:pgmYzwZweM2lt5YUBnmdY2maoDix0GcmF0vMwOct/0vMwzTT5dE6RygT1XK9:+mYznUtkXmaoDI5cWU6T5dv1XK
MD5:	50BD48BEE1252101DEF7DBD6E5F10938
SHA1:	9CA4F03CF32D0509D228C557782E1CCFA67A6AD9
SHA-256:	B1E9655EF2EA73E097348BE04B72B7E8E32B1486A9E4D6489FD8E918D692D7B1
SHA-512:	EF1756D4E74CFB11EA9CEFC1B1C9BE1484F888A502820799AEFE1D5D7BCDDACE02D3B4C02C5D4C1453C57DC2400007322FE1E2A5AD4811730CB288C202B54493
Malicious:	false
Reputation:	low
URL:	"https://img.shopymn.com/uploader/577b4dd48a7d2380c647e2e55515d3f5.png?x-oss-process=image/interlace,1/format,webp"
Preview:	RIFF....WEBPVP8 ....p........>m6.I$#"."Sh....in.........G.5.Y.g]....?]]u...a....3z...d.....6_..Z.......\..u.{C........7^.Cv.c.s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8...s.q.9.8.d.1.9.8...s.q.9.8........C..:.@.~X...@H.. $.....f.n.J .i.9..k..-..Z.. $.....@H......9(..uw..&V......8...s.q.9.8..]....,..,.6..WaF.../.3...q.9.8...W.E.........G -..4....V..c.s.q.9...O....=......w..../....9>.d..O-..8...s.l.b.......A.....Q....V.J....p.....N....+_...$....3..&....A..f...q.)..u..!....&.....I.Y..9..la.o]...E.lD... ..u...V.K#.....^. .........'...I.ui.q. _..O=._4hr.N#..X(.:.7.....x"..6cg.z.2..9v...Q...#.}2I.{.l.;4......q......{..un......e..L...?wCZ....v........"....GBp..@h.$...Q>Q..^.".N..ZCu.g..r.3.:.....A....F;./...J...:.%...,3R...b...~&..$.]%...h.....Cs.....Q...2.-r.....S..a@...m....N...&.=TJ.S.D.M.PN.-.P.W.u.."......].(N......\.,..f....H...E.}..z..........@'....3..O./z.....g.v.......Z........

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3614
Entropy (8bit):	4.3464084954113025
Encrypted:	false
SSDEEP:	48:c3kE1cTK2NpE1DG2Xcm9yFcJCeivCcZmWUwOTMcWBlfZN0CQnh/vZEKKRy35nVkM:S31cTK2UD73YuTAeFh/vaKKRg5VJLE9W
MD5:	CE1D012126CE25C72E3A731060E8FE2C
SHA1:	9BD62D57E980E45C462219A61131F46CEEDAB143
SHA-256:	A91EC4E3E40185E8C894B5C158532373333331219B55F31B232895BECD8E55EE
SHA-512:	1601F5E8448C74DC5247C29050363A60B63FC8D26B797540CEABBC9C973E65B214777F01E9948DC72664C5E4826EDAF7FEF0A18AD6EC0617EA28D13EB4279E12
Malicious:	false
Reputation:	low
URL:	https://static.shopymn.com/liquid/buyer/public/img/payment/visa1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="80px" height="41px" viewBox="0 0 80 41" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>..</title>. <g id="..-......" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="visa1" fill="#142C97" fill-rule="nonzero">. <path d="M59.1385865,14.5942768 C58.1867582,14.5942768 57.2718173,14.593145 56.3568764,14.5948426 C55.3549864,14.5965403 54.9070672,14.8551475 54.5157966,15.6575657 C53.198387,18.3596437 51.8803188,21.0617217 50.5648854,23.7643656 C50.1426557,24.6324259 49.727013,25.5033155 49.2968788,26.3979721 L52.9915538,26.3979721 C53.2444964,25.8066273 53.486241,25.2407471 53.7306205,24.6703398 L58.309936,24.6703398 C58.4594619,25.2520647 58.6070118,25.8247355 58.7545617,26.3979721 L62,26.3979721 C61.042902,22.4486941 60.0950258,18.5367642 59.1385865,14.5942768 L59.1385865,14.5942768 Z M54.7509542,22.2347914 C55.3688192,20

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 610, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	415868
Entropy (8bit):	7.991742552429063
Encrypted:	true
SSDEEP:	6144:IZXyKeR7ywn5g932gkAr7rH2Mpps0OFye0T69s+9KiZN+vmHv1DLqc:QXARK9mgHLH3vOd9EPvmHdDuc
MD5:	4EC9AF0735BF453A0F4ED6D93EEB0CE7
SHA1:	DCFEF80F1DB2C8C970B8E2951DB6832FA39EE897
SHA-256:	8DBB4084867E26396946247AA776227153CC05C654EF1F62BE3777A4576E003A
SHA-512:	308886CC5FC3926618101C5FB8EE9A2677A481F270CAC2E995DE5D7DBABCC788D4F7827113C53BCC5BF3F7AF833E9DFAC1631E4B20446D5EB38C34A7969423A2
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/cc9848adf3ffcc99024436d9b23c022632da987e.png
Preview:	.PNG........IHDR.......b.....T.......iCCPicc....c``\...[.$....WR........~...A...A..21...1 ...'.v...D_....@..LI-Nf``......\PT...........```.)...b``....!...;...V..............NBbC....d..Ld.$...A.R.....O2'.N....&`/.(m..Qs....$7......U...g..._{..K...KR+J@.....@a..6...E..._...' .f20loe`....SY........<...M...Ft....pHYs...#...#.x.?v.. .IDATx..w.\Wy...[...l...7K...Un.Slcl .K5I(!q ...@./.....`..;..-.%[......;;3w.m...-....]iW...g>.23...{..y.sH..s..(P...Y.?...u~.....l.$./\..[&!....0t.... ....X(R.. .......B.)%.D.<.y8....4.\W.;.GWw.4U5.z..s.b...X..D....%.G..=!.....k..w...[l...q.J0+.y._.g.........I.....}...HT7.RB...(P..i.8..@.....'..t...B!.M.].=... .z.c5m-'...MM%..y>2....!..$..s#d...o...?......'..{t..\.l.[.e..U.....(.B.P...p<.H.RJ.....V[S}.k^..d..QJ.83.Q....u....{O.A..(.C.s.2gg.~F.L.#c..]"..b..r.!..k........>..C.v.M......=J.@w....._..7(..(..uO...R.J...1...7..#.cx....y.?...}..._Z.2..:.r....G)..C.>mc!...R0...#.._.umt.........4M&..p.F......U9o.w.~d.^m.n.X...gA.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 655x468, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	16642
Entropy (8bit):	7.984845499356277
Encrypted:	false
SSDEEP:	384:AZFsfQUbKJUZFMuRM7sjQ0QAcxgLFdRr6b:APa1ZK7sjQUFRdRub
MD5:	EC1D25C543D5F4B5A76FB899968BCD23
SHA1:	4C43AC4466E3DB7425B77AB91A21B9EDFEB6C421
SHA-256:	7E630D12B83F70B5F4960FDAFD49A6CED7B9526340E39685DEE05BDA0CBD335D
SHA-512:	F2E2B528D51E1339B85C7734C2589E203539D3EB0753E9B379BEA67CA451817A5ED622C8A59A58671D1B8BFD933498BB822FCCE47F7072F5E693E4A87D145422
Malicious:	false
Reputation:	low
Preview:	RIFF.@..WEBPVP8 .@..P@.......>m4.H."..#.:r0..gn....8...~....Je.-...........[........_.l..\|...n.<......y....S..n_.;..G.^0.............{...Oi.~..7....Tz......o..<..u......._.....N...k.y......^t...:v..;_.....N...k.y......^t...:v..;_.....N...k.y......^t. 0.U......^t...:v../..r..Oj.....o..N...k.y.......V....C.....'$e1.....b\...;_......Q..M.\|.3>Z..?WT...E9.CU........z..p.l..d@......WN...k.y....d..q..e3.YtO.q^........%....B..#.d.n.3S...S......FNW.........N...V2..X..../..kV!.u{&&..x0./\|........w.....4.....A..c.....`?.....9.$...@kS0..y.a.<.j.yXA.]m..x........mF..?..IJ.xN7o.\|L.{R.9.r]....EM,] .....e..`...y.......X.>B64T.q-uT....uu];_..VG...q.~B...HYm...>...Q....L........O.d......x^.WE`...;..w..^..S..+N....a..v...P'8.)+......S.L.1..<....M.. .8.E>..%.."x0.'..MW.....;.L&J..lk.EA.1..._u7.....k......E..@p...k.q..)+...(r........9.2......'Q9.=..yMF..K.O.M....7..Y.G.....F....[d.Z.#.WN.u.RS....dtW{.).;..k2iP......@.}..(X@...DM.q@*.O#.f.

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	24606
Entropy (8bit):	7.966522573403605
Encrypted:	false
SSDEEP:	384:+MQgTqZXvr1frODw01oc5d8koeYbfDj9/EmpPHeL0vSzpYaUEPH6+:DQxZT1TODWc3ohbLBDp/WVtYadf5
MD5:	7DC2CA626C17D61ECC9CDE084CEBE168
SHA1:	95219BB369E7E23D5D21D605D97C8B2438208A0A
SHA-256:	2C1A427730E64F385BE7CE33549C59DAA1C8DE0ED0A310E6C10EC8EB06A5E678
SHA-512:	0EF58DB89CCE4D4BB21DA48B7684075B4B957489A1B9C48B1C26FAF6D110003653364E1368FA8EDFA67EB571366D578F597D84AF8D5096BA9E529B61075D1825
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/129e8ce2f2da19c63117ea13fc1df76c11cd364b.jpg
Preview:	RIFF.`..WEBPVP8X....8.........ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$.........ALPH.......m.8..c._.F...N..m.\|...Q...h.V..Z............z....]^.....vw[...`..E .G.o..$,...r.x....c.jI....ol..5.I+V...jR..R,f...77.3...-$.oaG..1..U.P.~........o./.}.u.M\.......X..r....&......72.AI6.W.<.g..w....Z....f...}..rD...;.^e...;..m0.fn.{....Y9.)7.....mIX...Y....[....O..Hy.o.AF.l9....e.s....?."..R....(....k..[r(r.m2M....va.1..B.\|..H...p;.../.".v.%........DE.D.U..\|.C........TY..(....9U........F.mL(NT}U...9..E..Z.C..p.DG=b..j..7.Q.+W...`$...........4...^._XT.....;.J[{.8...*u.......+.....c..H9.]

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1112 x 617, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1913256
Entropy (8bit):	7.994383680690609
Encrypted:	true
SSDEEP:	49152:LzV0Cen5Sfno3eaQg0iHf9NmPn/wW2giHpye+RQIC1X:LzV0Cen5in9a0af9knYWXeVX
MD5:	A0F6F2EC53343926E340922358F88F9A
SHA1:	EFE1F9362E7F4AE53B68FC5569825E8C6EDFC6A8
SHA-256:	424A44CA3C5FDFD99E6885D3CBFAAD7BF18E57BA5E6DA8E2311065214682C486
SHA-512:	57BB7B819817916C80ADFC17197D5DC9B11D2810E2AA9CE03C7E1377FF7954EBF5C74721DC23921E3FC2DA392E1126FE629041BE138BD274B3A7BCEF3DF5F084
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...i.............sRGB.........gAMA......a.....IDATx^L.....u....9wu.sN.A.$.. .lP....$Gi....^..$._...LEK")."D.9...<..=.sw.k.yE.5htu.....s...Y.....am..\G.64.v........M..=...$.6..f....}...v.?....S......^.._afj.U......V........x..X..f.......p..M.3.<..Gp..=d.i.=X.O.Y...K....2..r`8.D..,'rl[.c..~s.....y.....:..?.............V....`.c..`ca.o..9~.?s?..A.^...W..@......C..-,.8....9.7_o.j.#."U..<+....?...?.E.....8u..>....s....;...9..g.......<......".r..J....r..3i\|../.^.....[...`k_.s..VW..u....l.....K.w......b..B..D......1y.6...V.y...qu).....gw..(#.h!...T.cu.v.....&...>.......g....S.c..6.x.`.7.c.S.a...".o..h..C..au.0....N#...j`ea..V.-......a.....K..=8..'P.....H.M.v+,....u.q.]..}...T.*...}x,6....Y..;....z......Os....}..F..d.7/_.x....".r>.{..vW..v.@)...e.............?G..C..C~#......@.-[....~..v....[?...8.TX...M..F{...hS....cT....Q..W..^.&~...8}.$,.2.N..6+u.}z..Z...l..v...@[lT3p9......^G..J.l...2mp...r...}.....y..~p..33...O.c....0

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1200x1200, components 3
Category:	downloaded
Size (bytes):	78745
Entropy (8bit):	7.833075783395354
Encrypted:	false
SSDEEP:	1536:14m7BegF+SZq3gU2fcMe6KbqhIPWN/II16g3EUqs8mdfQit4+p7/pqRii8c:14NgoSZq3IUsN316Daff24/pqcS
MD5:	596A17B1168331B4C0DA1C51BA652F84
SHA1:	379A45FFBDA4A6D67738A479D6BF2D21C4D5F19C
SHA-256:	DF424593215E578C60D8AEF06D40F40A02CD7E0DF9C77287FC03063C75A23991
SHA-512:	C78A3A4FEE6D6B9AD33B990541328CFF7A0ED846ED94BD2E6AC1139B9E462A10CFB616F7B0E43C6A1EBA43AFACD4DBF7007A0A966F5584679CE49E0332EBEBBE
Malicious:	false
Reputation:	low
URL:	https://img.shopymn.com/uploader/9d6698b796cb382a3cbf76e13f9ae4a0aa1a7746.webp
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......8c......8c................0210....................0100............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}.............................................................................................,......................................................................................................................................

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	12166
Entropy (8bit):	4.158557448852265
Encrypted:	false
SSDEEP:	192:2o3jzzqaIlmz+lcuZ+Xhw0Q9wbQDuggwVVhmsiztPu92o0W+LfbQxRtvDPrKunt:1TzenE8cs+X7h0VVhmztPs2a+LfbQxTb
MD5:	9AD047015966E1288B080A07FD2D7EBC
SHA1:	8D54FC72275FD33446B79D2DB4D2CDFF23B06363
SHA-256:	0D18C859B3B60B5E1F77185D440A61AF49502A178EDAACA66DD076D98AF11890
SHA-512:	59BDC7EA9BDAE352FBF3FA282A43486A6A1498417856CF22F6B0FE7EB60455C9BE536D3EC0E41D70E7DED975165BE604950F1A786081F52F6452C5FA854075EB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="81px" height="41px" viewBox="0 0 81 41" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>mastercard</title>. <g id="..-......" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="mastercard" transform="translate(0.500000, -0.125000)">. <rect id=".." x="22" y="6" width="34.9705125" height="28.6839197"></rect>. <g id="..-10" transform="translate(23.485256, 8.204029)" fill-rule="nonzero">. <path d="M5.61210517,23.7259303 L5.61210517,22.1487579 C5.63070006,21.8804271 5.53293424,21.6170693 5.34374958,21.425872 C5.15456493,21.2346747 4.8922564,21.1341276 4.62374379,21.1498821 C4.26988785,21.1266839 3.93145172,21.2979165 3.74052724,21.5967476 C3.56645891,21.3068263 3.24773402,21.1353604 2.9098831,21.1498821 C2.61571873,21.1350112 2.33567709,21.2770323 2.17386931,21.5231462 L2.17386931,21.212969 L1.6

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 655x468, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	16010
Entropy (8bit):	7.985422107592759
Encrypted:	false
SSDEEP:	384:gXy2gNxFWsOqEV7Lrg7OmMmJDlJ7HwDQrK3Aagu57xGd9mvF1gd:11xFWsOXrg7OmMiDl98QcMu570d9m91o
MD5:	0882DE875B30C553CF593F0ECBC65FD4
SHA1:	EA2B762F6E69ACE2AEADB0D6A52FE26932E690E1
SHA-256:	ACE7740CA41C004C57D6B1EDC3FA9E5F5B98745AF4B501F89C5DB4E8F126B4B0
SHA-512:	C2B7AD968A2061A321119754AFBE77AD153FE43202F2F4A9E7897E3ABB2D85CB42AEFCAA53D46F3A3EB29A007BB7BC0740A3DA77F3934C757BC938EC030B84A9
Malicious:	false
Reputation:	low
Preview:	RIFF.>..WEBPVP8 v>...?.......>m2.I$"..".:....in.........<.C..P.....".c.1.z.sB.N9.6(....z......sn..k...{....g}...[..o..{..5.;h.u..G........._:..nN........\.6....W7.....8m....n.o..us~p....\.6....W7.....8m....n.o..us~p....\.6....W'.z.;vK..6....W7.....8m...Q.@Y........^.J.=.Ix..j&.y.n.o..us~p.H........UX.3........oa...YG.8K.b..a....8m....n.o....%..8P....3p...Ez.S.''.eV.TaT.....E..f1s..v._o...T.Ag..;...H.n.o..us~p...ZB\....=..5a.lfDU....X....;?....!...?E.........=~ .P...>.y....-..n.o..us~n....9.[...]n..!.Q...j..?k.\|P="......SPG4h...{......G...lf..o<K..(SJ.r..~JU.$...hs-.>.?[... ....B.c......\.\7..,.;..l.~./.G.t.YC.h....>j............Q.W...c....H..@U.......=...p.V....D...F.,:........:..v.C.5x.IV...!-...."...W7.S....1$w...b...8.q...GQ~0..:....b......6.\|..Ig.~....[.-.......6.E..(.N...Xo.....*..........Y.?....1t....L. .uso.J._.^...X......7...7.H..g.9.;@x.#.1._...#.a+......b......,..f.X.......j.........ygJI....9...:`..........9

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1400x1000, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	55414
Entropy (8bit):	7.989956090063975
Encrypted:	false
SSDEEP:	1536:qIT5V1+i2yeBZ4i9DFl1m5iu5ucEKYuqOzPopYFrggV+rUNN:qINVAi2yeBJ0TEKM4It2N
MD5:	4FE2A603E96515485445E1965852279E
SHA1:	811C96D2FB82DF3686D2F6968F5B3DD240FB11C2
SHA-256:	C3F3B46B745AF196E2A510656688995079B2DCDBA73A09BAA51EEC975DFDF454
SHA-512:	276B55B5BD4B8AEAF2FAE042DB5ED144FDEE43DB7A473B8B13316D275C3BCB22D1DDBAA38C40A83ECC6E7433CC343046EAF25FE777B5648C94784072C284179F
Malicious:	false
Reputation:	low
Preview:	RIFFn...WEBPVP8 b.......x...>m6.H.#(&#S.i...in...T..............q...l.b.ev..K.^.......6..t.....)..+..Y..c..._.t....s.........\|.?.>..7..m<.....g.V.w....m<..e.O.o`....~.z.r..Ks...;.W.........7........>....?....7.....k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.0..k..La......f.}......n.j.Ai.C....6...........J.0.~.w.L3_...aS...\|.T.5...&.0.~.w.7...@{.........B[...g....L....i.r....w.L3_...aS...\|.T.5...&.0.~.w...`..`L.!.k.. 9.]m..l...v...

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 786, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1089898
Entropy (8bit):	7.995254850395399
Encrypted:	true
SSDEEP:	24576:H+FQ4tqm/vFOR7dnH5OCxEV3valKtJc2BTjMLBZBFcnLJ:eBZA5nZeOKtJXTjMLvBFo
MD5:	4613FD07C2164988EF0C8084FF5AD630
SHA1:	C3B0368B039717A9C1FF1C85F3900C238404E113
SHA-256:	682B6FFD9913CD97130FE8EDA54CAFCF954E2CAF9252549F518B2851F349CAAE
SHA-512:	97BEB77C60EB014A15BBCE30035E080D593C45997FE37FCFCBDBE080D076F2E1FF9EF91A57369FA4A84285A8CFBADF46601A24DA5757B35C41B89AAAA6E4F9A4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................iCCPicc....c``\...[.$....WR........~...A...A..21...1 ...'.v...D_....@..LI-Nf``......\PT...........```.)...b``....!...;...V..............NBbC....d..Ld.$...A.R.....O2'.N....&`/.(m..Qs....$7......U...g..._{..K...KR+J@.....@a..6...E..._...' .f20loe`....SY........<...M...Ft....pHYs...........~... .IDATx..Y.dWz....k.W.......pf@..z(S.......aK.0m?8.(G..'..+M.L.v(..(.,RA. C..Y8.`...@..]...]...Y.U........EdeU..w..?...>...p8.....u......_.o...q...p\|..{..{..L}.....f.9`....N.....e........X..._.v....R.h....?..U...p8.....#9....Gn...j1...B-.'b{....f.....-..2....%.Oj........B}.......p8......An".....6.wP...`.X..z......L.l..+(.o+...?.`.`........o........^VO}./.N.;.....p8...........D..:.=...S....u.W....".okE...,X...."...(1F...9........1.#.w......z.Q.].z..........p8.....p\|t>.f.G.v..j.=[G..k.}l*.=?%.[....J..[."....1"e%.1F..%.....+e.t....qF#Ni.c..1..F.1.7..6....d.O..x..TQ...X.........?..>.....i..N.;.....p8..........t....Gr..O....hw.C

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, hostcomputer=imagery4], progressive, precision 8, 1000x513, components 3
Category:	dropped
Size (bytes):	75754
Entropy (8bit):	7.935223430077266
Encrypted:	false
SSDEEP:	768:53wffdczua80Q4LjDW+229xKsQwpHRBtvYYedmJgB0yo+N2q4h4LsOQVzMIzPSTu:5VRFvy+d9QwpxnYYuiJ9VFD+kG8KXA
MD5:	DA7F025E7ABBCC869729C6B497B32A66
SHA1:	3E459D3B889AFA0607270B5C6DE0A637772235F0
SHA-256:	839E162774BE5184BFA5D0746D358A03EB5D0E4AF7165DBBB790D63BA9773DBD
SHA-512:	7A463C4197ECA4AAE0AF194DA4B3AF12A832912902541989C5847603176FBAF8475576B7DE3F287D5C32C3B72F71EDC98762BEC9F182E950B1478636806A53F0
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(...........<.......f...i.......p.......................imagery4............0210............................................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc......._cprt...L....wtpt...X....rXYZ...l....gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2ci............curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..text....CC0.XYZ ...............-XYZ ......o...8.....XYZ ......b.........XYZ ......$............C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..............................................................................................X....................................................................................................................... a~.vU..%P.........&.r.....

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5908), with no line terminators
Category:	downloaded
Size (bytes):	5908
Entropy (8bit):	5.084350625134368
Encrypted:	false
SSDEEP:	96:p6yaIpWpdTpMpiP00QT3pLuLsBHd8p8zqrSYqpjplpeZyhp3qmqDEpEpGpppZyhi:/acOXw00lNLTHmucSYS1re83LtY2p8XY
MD5:	A0FAD9BA8040BB1A064B8D7B0835CE25
SHA1:	AC0145A183E52050C437DE07D578A88B0186BB1B
SHA-256:	8621AEBC858F5777AE5A04BB469B60D26EAA097300B522B2D8C83F23FFD6BD36
SHA-512:	82FE7CD444C2389D8C747B8F12435E75E14CDB28CD4071076E1CA05920D6E29D1C7B18A7697C240AD484D00E10F814D853B413D7C8BE5BA7198C94475826816E
Malicious:	false
Reputation:	low
URL:	https://static.shopymn.com/liquid/buyer/public/js/lib/event.js?t=20240524155330
Preview:	"use strict";$(function(){var t=$(".nickp-event-page-location").val();switch($tracking.pageView(),t){case"search":$tracking.search();break;case"collections":$tracking.viewItem()}if("cart"==t&&window.sessionStorage.getItem("Pixel_Helper")){var e=JSON.parse(window.sessionStorage.getItem("Pixel_Helper"));window.sessionStorage.removeItem("Pixel_Helper"),"Object"==$plug.toRawType(e)&&e.sendout&&$tracking.addToCart(e),"Array"==$plug.toRawType(e)&&e.map(function(t,e){$tracking.addToCart(t)})}if("orders"==t){var a=window.location.href;-1<a.indexOf("contact_information")?"function"==typeof stag&&stag("page_load","guest_info",{type:"trace",button_pos:"1",button_name:"guest_info"}):-1<a.indexOf("shipping_method")?"function"==typeof stag&&stag("page_load","shipping",{type:"trace",button_pos:"2",button_name:"shipping"}):-1<a.indexOf("payment_method")?"function"==typeof stag&&stag("page_load","complete",{type:"trace",button_pos:"3",button_name:"complete"}):"function"==typeof stag&&stag("page_load","

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 25, 2024 00:56:24.849495888 CEST	192.168.2.5	1.1.1.1	0xd526	Standard query (0)	moctle.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:24.849683046 CEST	192.168.2.5	1.1.1.1	0x814b	Standard query (0)	moctle.com	65	IN (0x0001)	false
May 25, 2024 00:56:25.917454958 CEST	192.168.2.5	1.1.1.1	0xc542	Standard query (0)	moctle.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:25.919411898 CEST	192.168.2.5	1.1.1.1	0x8ed2	Standard query (0)	moctle.com	65	IN (0x0001)	false
May 25, 2024 00:56:27.387928009 CEST	192.168.2.5	1.1.1.1	0x6eef	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:27.387928963 CEST	192.168.2.5	1.1.1.1	0xc816	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 25, 2024 00:56:27.775013924 CEST	192.168.2.5	1.1.1.1	0x9ff	Standard query (0)	www.cravob.com	65	IN (0x0001)	false
May 25, 2024 00:56:27.775013924 CEST	192.168.2.5	1.1.1.1	0x326b	Standard query (0)	www.cravob.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:29.535051107 CEST	192.168.2.5	1.1.1.1	0x4ecd	Standard query (0)	static.shopymn.com	65	IN (0x0001)	false
May 25, 2024 00:56:29.535051107 CEST	192.168.2.5	1.1.1.1	0xce46	Standard query (0)	static.shopymn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:29.537981033 CEST	192.168.2.5	1.1.1.1	0xb528	Standard query (0)	img.shopymn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:29.538258076 CEST	192.168.2.5	1.1.1.1	0xf245	Standard query (0)	img.shopymn.com	65	IN (0x0001)	false
May 25, 2024 00:56:31.208312988 CEST	192.168.2.5	1.1.1.1	0x48c0	Standard query (0)	img.shopymn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.208457947 CEST	192.168.2.5	1.1.1.1	0xcc0	Standard query (0)	img.shopymn.com	65	IN (0x0001)	false
May 25, 2024 00:56:31.234505892 CEST	192.168.2.5	1.1.1.1	0x2c68	Standard query (0)	fonts.shopymn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.234643936 CEST	192.168.2.5	1.1.1.1	0xc19a	Standard query (0)	fonts.shopymn.com	65	IN (0x0001)	false
May 25, 2024 00:56:31.235315084 CEST	192.168.2.5	1.1.1.1	0xdd37	Standard query (0)	at.alicdn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.235445976 CEST	192.168.2.5	1.1.1.1	0xfb99	Standard query (0)	at.alicdn.com	65	IN (0x0001)	false
May 25, 2024 00:56:31.980660915 CEST	192.168.2.5	1.1.1.1	0x7e5c	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.980715990 CEST	192.168.2.5	1.1.1.1	0xb969	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
May 25, 2024 00:56:31.981332064 CEST	192.168.2.5	1.1.1.1	0x3820	Standard query (0)	static.shopymn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.981590033 CEST	192.168.2.5	1.1.1.1	0x4788	Standard query (0)	static.shopymn.com	65	IN (0x0001)	false
May 25, 2024 00:56:37.634206057 CEST	192.168.2.5	1.1.1.1	0xe502	Standard query (0)	www.cravob.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:37.634501934 CEST	192.168.2.5	1.1.1.1	0x9e27	Standard query (0)	www.cravob.com	65	IN (0x0001)	false
May 25, 2024 00:56:41.324028969 CEST	192.168.2.5	1.1.1.1	0xa72d	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:41.325886011 CEST	192.168.2.5	1.1.1.1	0xe36b	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 25, 2024 00:56:42.474149942 CEST	192.168.2.5	1.1.1.1	0xa3dd	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:42.474324942 CEST	192.168.2.5	1.1.1.1	0x649e	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 25, 2024 00:57:03.928101063 CEST	192.168.2.5	1.1.1.1	0xaeac	Standard query (0)	cdn.shopymn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:03.928499937 CEST	192.168.2.5	1.1.1.1	0x2ec	Standard query (0)	cdn.shopymn.com	65	IN (0x0001)	false
May 25, 2024 00:57:06.359703064 CEST	192.168.2.5	1.1.1.1	0x151f	Standard query (0)	cdn.shopymn.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:06.359859943 CEST	192.168.2.5	1.1.1.1	0xb3e2	Standard query (0)	cdn.shopymn.com	65	IN (0x0001)	false
May 25, 2024 00:57:43.527228117 CEST	192.168.2.5	1.1.1.1	0x7985	Standard query (0)	img.staticdj.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:43.527795076 CEST	192.168.2.5	1.1.1.1	0xd8be	Standard query (0)	img.staticdj.com	65	IN (0x0001)	false
May 25, 2024 00:57:45.266303062 CEST	192.168.2.5	1.1.1.1	0x2476	Standard query (0)	img.staticdj.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:45.266623020 CEST	192.168.2.5	1.1.1.1	0xfc22	Standard query (0)	img.staticdj.com	65	IN (0x0001)	false
May 25, 2024 00:57:50.776725054 CEST	192.168.2.5	1.1.1.1	0x239f	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:50.776927948 CEST	192.168.2.5	1.1.1.1	0x19a2	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 25, 2024 00:57:51.782783985 CEST	192.168.2.5	1.1.1.1	0x2a8e	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:51.782988071 CEST	192.168.2.5	1.1.1.1	0x8b11	Standard query (0)	www.facebook.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 25, 2024 00:56:25.249775887 CEST	1.1.1.1	192.168.2.5	0xd526	No error (0)	moctle.com		47.254.123.175	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:26.294243097 CEST	1.1.1.1	192.168.2.5	0xc542	No error (0)	moctle.com		47.254.123.175	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:27.395178080 CEST	1.1.1.1	192.168.2.5	0x6eef	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:27.402266026 CEST	1.1.1.1	192.168.2.5	0xc816	No error (0)	www.google.com			65	IN (0x0001)	false
May 25, 2024 00:56:28.132699966 CEST	1.1.1.1	192.168.2.5	0x326b	No error (0)	www.cravob.com		47.254.123.175	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:29.565805912 CEST	1.1.1.1	192.168.2.5	0xf245	No error (0)	img.shopymn.com			65	IN (0x0001)	false
May 25, 2024 00:56:29.570581913 CEST	1.1.1.1	192.168.2.5	0x4ecd	No error (0)	static.shopymn.com			65	IN (0x0001)	false
May 25, 2024 00:56:29.570593119 CEST	1.1.1.1	192.168.2.5	0xce46	No error (0)	static.shopymn.com		103.160.204.248	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:29.570593119 CEST	1.1.1.1	192.168.2.5	0xce46	No error (0)	static.shopymn.com		103.160.204.8	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:29.570601940 CEST	1.1.1.1	192.168.2.5	0xb528	No error (0)	img.shopymn.com		103.160.204.248	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:29.570601940 CEST	1.1.1.1	192.168.2.5	0xb528	No error (0)	img.shopymn.com		103.160.204.8	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.217928886 CEST	1.1.1.1	192.168.2.5	0x48c0	No error (0)	img.shopymn.com		103.160.204.248	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.217928886 CEST	1.1.1.1	192.168.2.5	0x48c0	No error (0)	img.shopymn.com		103.160.204.8	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.238177061 CEST	1.1.1.1	192.168.2.5	0xcc0	No error (0)	img.shopymn.com			65	IN (0x0001)	false
May 25, 2024 00:56:31.247713089 CEST	1.1.1.1	192.168.2.5	0x2c68	No error (0)	fonts.shopymn.com		103.160.204.8	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.247713089 CEST	1.1.1.1	192.168.2.5	0x2c68	No error (0)	fonts.shopymn.com		103.160.204.248	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.247729063 CEST	1.1.1.1	192.168.2.5	0xc19a	No error (0)	fonts.shopymn.com			65	IN (0x0001)	false
May 25, 2024 00:56:31.546793938 CEST	1.1.1.1	192.168.2.5	0xfb99	No error (0)	at.alicdn.com	at.alicdn.com.danuoyi.alicdn.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:56:31.607352018 CEST	1.1.1.1	192.168.2.5	0xdd37	No error (0)	at.alicdn.com	at.alicdn.com.danuoyi.alicdn.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:56:31.607352018 CEST	1.1.1.1	192.168.2.5	0xdd37	No error (0)	at.alicdn.com.danuoyi.alicdn.com		163.181.92.239	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.607352018 CEST	1.1.1.1	192.168.2.5	0xdd37	No error (0)	at.alicdn.com.danuoyi.alicdn.com		163.181.92.240	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.993563890 CEST	1.1.1.1	192.168.2.5	0x7e5c	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:56:31.993563890 CEST	1.1.1.1	192.168.2.5	0x7e5c	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.993575096 CEST	1.1.1.1	192.168.2.5	0xb969	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:56:31.994370937 CEST	1.1.1.1	192.168.2.5	0x3820	No error (0)	static.shopymn.com		103.160.204.248	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.994370937 CEST	1.1.1.1	192.168.2.5	0x3820	No error (0)	static.shopymn.com		103.160.204.8	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:31.999713898 CEST	1.1.1.1	192.168.2.5	0x4788	No error (0)	static.shopymn.com			65	IN (0x0001)	false
May 25, 2024 00:56:38.098937988 CEST	1.1.1.1	192.168.2.5	0xe502	No error (0)	www.cravob.com		47.254.123.175	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:40.216017008 CEST	1.1.1.1	192.168.2.5	0x3ff3	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:40.216017008 CEST	1.1.1.1	192.168.2.5	0x3ff3	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:40.879467964 CEST	1.1.1.1	192.168.2.5	0x9fd5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:56:40.879467964 CEST	1.1.1.1	192.168.2.5	0x9fd5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:41.336297989 CEST	1.1.1.1	192.168.2.5	0xa72d	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:56:41.336297989 CEST	1.1.1.1	192.168.2.5	0xa72d	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:41.341109037 CEST	1.1.1.1	192.168.2.5	0xe36b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:56:42.530766010 CEST	1.1.1.1	192.168.2.5	0x649e	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:56:42.530780077 CEST	1.1.1.1	192.168.2.5	0xa3dd	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:56:42.530780077 CEST	1.1.1.1	192.168.2.5	0xa3dd	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
May 25, 2024 00:56:55.066032887 CEST	1.1.1.1	192.168.2.5	0xc916	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:56:55.066032887 CEST	1.1.1.1	192.168.2.5	0xc916	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:03.938695908 CEST	1.1.1.1	192.168.2.5	0xaeac	No error (0)	cdn.shopymn.com		103.160.204.8	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:03.938695908 CEST	1.1.1.1	192.168.2.5	0xaeac	No error (0)	cdn.shopymn.com		103.160.204.248	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:03.949358940 CEST	1.1.1.1	192.168.2.5	0x2ec	No error (0)	cdn.shopymn.com			65	IN (0x0001)	false
May 25, 2024 00:57:06.385833979 CEST	1.1.1.1	192.168.2.5	0x151f	No error (0)	cdn.shopymn.com		103.160.204.8	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:06.385833979 CEST	1.1.1.1	192.168.2.5	0x151f	No error (0)	cdn.shopymn.com		103.160.204.248	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:06.390547037 CEST	1.1.1.1	192.168.2.5	0xb3e2	No error (0)	cdn.shopymn.com			65	IN (0x0001)	false
May 25, 2024 00:57:17.024974108 CEST	1.1.1.1	192.168.2.5	0x7b6d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:57:17.024974108 CEST	1.1.1.1	192.168.2.5	0x7b6d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:37.586153030 CEST	1.1.1.1	192.168.2.5	0xa7b1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:57:37.586153030 CEST	1.1.1.1	192.168.2.5	0xa7b1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:42.112593889 CEST	1.1.1.1	192.168.2.5	0xeba5	No error (0)	windowsupdatebg.s.llnwi.net		178.79.238.128	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:43.538796902 CEST	1.1.1.1	192.168.2.5	0xd8be	No error (0)	img.staticdj.com			65	IN (0x0001)	false
May 25, 2024 00:57:43.538813114 CEST	1.1.1.1	192.168.2.5	0x7985	No error (0)	img.staticdj.com		104.19.234.103	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:43.538813114 CEST	1.1.1.1	192.168.2.5	0x7985	No error (0)	img.staticdj.com		104.19.235.103	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:45.276310921 CEST	1.1.1.1	192.168.2.5	0x2476	No error (0)	img.staticdj.com		104.19.234.103	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:45.276310921 CEST	1.1.1.1	192.168.2.5	0x2476	No error (0)	img.staticdj.com		104.19.235.103	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:45.277940989 CEST	1.1.1.1	192.168.2.5	0xfc22	No error (0)	img.staticdj.com			65	IN (0x0001)	false
May 25, 2024 00:57:50.786619902 CEST	1.1.1.1	192.168.2.5	0x239f	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:57:50.786619902 CEST	1.1.1.1	192.168.2.5	0x239f	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:50.791387081 CEST	1.1.1.1	192.168.2.5	0x19a2	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:57:51.791922092 CEST	1.1.1.1	192.168.2.5	0x2a8e	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 25, 2024 00:57:51.791922092 CEST	1.1.1.1	192.168.2.5	0x2a8e	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
May 25, 2024 00:57:51.791961908 CEST	1.1.1.1	192.168.2.5	0x8b11	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	47.254.123.175	80	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 25, 2024 00:56:25.272562981 CEST	425	OUT	GET / HTTP/1.1 Host: moctle.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 25, 2024 00:56:25.908865929 CEST	357	IN	HTTP/1.1 301 Moved Permanently Server: openresty Date: Fri, 24 May 2024 22:56:25 GMT Content-Type: text/html Content-Length: 166 Connection: keep-alive Location: https://moctle.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>openresty</center></body></html>
May 25, 2024 00:57:10.909830093 CEST	6	OUT	Data Raw: 00 Data Ascii:
May 25, 2024 00:57:55.949845076 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	47.254.123.175	80	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 25, 2024 00:57:10.277266026 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49713	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:27 UTC	653	OUT	GET / HTTP/1.1 Host: moctle.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:27 UTC	559	IN	HTTP/1.1 302 Found Server: openresty Date: Fri, 24 May 2024 22:56:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:27 GMT; Max-Age=86400; path=/; domain=moctle.com; HttpOnly Location: https://www.cravob.com/ Set-Cookie: utuni=e64cd403a9a85b296bfaf65cfe17eeb3f5df396d7b453d3c41bdf73a155d6289a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A3392216780%3B%7D; expires=Sun, 23-Jun-2024 22:56:27 GMT; Max-Age=2592000; path=/; domain=moctle.com; HttpOnly
2024-05-24 22:56:27 UTC	15825	IN	Data Raw: 31 66 65 32 30 0d 0a 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 67 65 6e 65 72 61 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 41 6d 61 7a 6f 6e 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c Data Ascii: 1fe20 <!DOCTYPE html><html lang="en" class="general"><head> <meta charset="UTF-8"> <meta name="keywords" content="Amazon"> <titl
2024-05-24 22:56:27 UTC	16384	IN	Data Raw: 63 2f 63 73 73 2f 66 6f 6e 74 2f 4f 6c 64 53 74 61 6e 64 61 72 64 2d 52 65 67 75 6c 61 72 2e 74 74 66 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 6f 6e 74 73 65 72 72 61 74 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 73 68 6f 70 79 6d 6e 2e 63 6f 6d 2f 6c 69 71 75 69 64 2f 62 75 79 65 72 2f 70 75 62 6c 69 63 2f 63 73 73 2f 66 6f 6e 74 2f 4d 6f 6e 74 73 65 72 72 61 74 2d 52 65 67 75 6c 61 72 2e 74 74 66 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 6f 6e 74 73 65 72 72 61 74 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 73 68 6f 70 79 6d 6e 2e Data Ascii: c/css/font/OldStandard-Regular.ttf)}@font-face{font-family:Montserrat;src:url(https://fonts.shopymn.com/liquid/buyer/public/css/font/Montserrat-Regular.ttf);font-weight:400;font-style:normal}@font-face{font-family:Montserrat;src:url(https://fonts.shopymn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	2.19.104.72	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:28 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-24 22:56:29 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=148403 Date: Fri, 24 May 2024 22:56:28 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:29 UTC	657	OUT	GET / HTTP/1.1 Host: www.cravob.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:29 UTC	551	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:29 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly Set-Cookie: utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; expires=Sun, 23-Jun-2024 22:56:29 GMT; Max-Age=2592000; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:29 UTC	15833	IN	Data Raw: 31 66 65 35 30 0d 0a 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 67 65 6e 65 72 61 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 41 6d 61 7a 6f 6e 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c Data Ascii: 1fe50 <!DOCTYPE html><html lang="en" class="general"><head> <meta charset="UTF-8"> <meta name="keywords" content="Amazon"> <titl
2024-05-24 22:56:29 UTC	16384	IN	Data Raw: 73 2f 66 6f 6e 74 2f 4f 6c 64 53 74 61 6e 64 61 72 64 2d 52 65 67 75 6c 61 72 2e 74 74 66 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 6f 6e 74 73 65 72 72 61 74 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 73 68 6f 70 79 6d 6e 2e 63 6f 6d 2f 6c 69 71 75 69 64 2f 62 75 79 65 72 2f 70 75 62 6c 69 63 2f 63 73 73 2f 66 6f 6e 74 2f 4d 6f 6e 74 73 65 72 72 61 74 2d 52 65 67 75 6c 61 72 2e 74 74 66 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 6f 6e 74 73 65 72 72 61 74 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 73 68 6f 70 79 6d 6e 2e 63 6f 6d 2f Data Ascii: s/font/OldStandard-Regular.ttf)}@font-face{font-family:Montserrat;src:url(https://fonts.shopymn.com/liquid/buyer/public/css/font/Montserrat-Regular.ttf);font-weight:400;font-style:normal}@font-face{font-family:Montserrat;src:url(https://fonts.shopymn.com/
2024-05-24 22:56:29 UTC	16384	IN	Data Raw: 6d 61 74 69 6f 6e 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 6d 79 2d 6f 72 64 65 72 73 2d 63 6f 6e 74 65 6e 74 20 2e 6f 72 64 65 72 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 6f 70 65 72 61 74 69 6f 6e 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 6d 79 2d 6f 72 64 65 72 73 2d 63 6f 6e 74 65 6e 74 20 2e 6f 72 64 65 72 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 73 74 61 74 75 73 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 6d 79 2d 6f 72 64 65 72 73 2d 63 6f 6e 74 65 6e 74 20 2e 6f 72 64 65 72 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 74 6f 74 61 6c 2d 70 72 69 63 65 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e Data Ascii: mation,.account-main .my-orders-content .order-box-content .table-content .operation,.account-main .my-orders-content .order-box-content .table-content .status,.account-main .my-orders-content .order-box-content .table-content .total-price,.account-main .
2024-05-24 22:56:29 UTC	16384	IN	Data Raw: 70 61 73 73 77 6f 72 64 20 2e 73 65 63 75 72 69 74 79 2d 62 6f 78 20 2e 73 65 63 75 72 69 74 79 2d 69 6e 70 75 74 2d 62 6f 78 20 73 65 6c 65 63 74 3a 68 6f 76 65 72 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 61 63 63 6f 75 6e 74 2d 73 65 63 75 72 69 74 79 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 69 74 79 2d 70 61 73 73 77 6f 72 64 20 2e 73 65 63 75 72 69 74 79 2d 62 6f 78 20 2e 73 65 63 75 72 69 74 79 2d 69 6e 70 75 74 2d 62 6f 78 2d 72 6f 77 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 3a 68 6f 76 65 72 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 61 63 63 6f 75 6e 74 2d 73 65 63 75 72 69 74 79 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 69 74 79 2d 70 61 73 73 77 6f 72 64 20 2e 73 65 63 75 72 69 74 79 2d Data Ascii: password .security-box .security-input-box select:hover,.account-main .account-security-content .security-password .security-box .security-input-box-row input:not([type=checkbox]):hover,.account-main .account-security-content .security-password .security-
2024-05-24 22:56:29 UTC	16384	IN	Data Raw: 63 6f 75 70 6f 6e 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 65 6d 2e 64 65 66 61 75 6c 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 63 6f 75 70 6f 6e 5f 64 65 66 61 75 6c 74 2e 70 6e 67 29 7d 2e 6d 79 2d 63 6f 75 70 6f 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 65 6d 2e 64 65 66 61 75 6c 74 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 63 6f 75 70 6f 6e 5f 73 65 6c 65 63 74 65 64 2e 70 6e 67 29 7d 2e 6d 79 2d 63 6f 75 70 6f 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 Data Ascii: coupon-item-content .coupon-item.default{background-image:url(../img/coupon_default.png)}.my-coupon-content .coupon-item-content .coupon-item.default:hover{background-image:url(../img/coupon_selected.png)}.my-coupon-content .coupon-item-content .coupon-it
2024-05-24 22:56:29 UTC	16384	IN	Data Raw: 79 2d 61 63 63 6f 75 6e 74 2d 6d 6f 62 69 6c 65 20 2e 73 69 67 6e 2d 6f 75 74 2d 6d 6f 62 69 6c 65 20 2e 73 69 67 6e 2d 6f 75 74 7b 68 65 69 67 68 74 3a 33 36 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 36 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 2e 74 6f 61 73 74 2d 74 69 70 73 7b 6c 65 66 74 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 76 77 20 2d 20 33 32 70 78 29 7d 7d 0a 2e 62 6c 6f 67 2d 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c Data Ascii: y-account-mobile .sign-out-mobile .sign-out{height:36px;text-align:center;border:1px solid;line-height:36px;border-radius:4px;font-size:18px}.toast-tips{left:50%;transform:translateX(-50%);width:calc(100vw - 32px)}}.blog-section{display:flex;text-align:l
2024-05-24 22:56:29 UTC	16384	IN	Data Raw: 6c 65 28 2e 38 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 2d 31 30 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 58 28 32 30 64 65 67 29 20 73 63 61 6c 65 28 2e 38 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 2d 31 30 30 25 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 63 61 72 74 6c 69 73 74 2d 64 69 73 63 6f 75 6e 74 2d 74 69 70 73 3a 3a 62 65 66 6f 72 65 7b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 38 70 78 20 38 70 78 20 30 20 38 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 2c 38 70 78 29 Data Ascii: le(.8) translate(0,-100%);transform:rotateX(20deg) scale(.8) translate(0,-100%);text-align:left}.cartlist-discount-tips::before{width:0;height:0;border-style:solid;border-width:8px 8px 0 8px;content:"";position:absolute;bottom:0;transform:translate(0,8px)
2024-05-24 22:56:29 UTC	16384	IN	Data Raw: 2d 65 6c 65 6d 65 6e 74 20 2e 6c 69 73 74 2d 63 69 72 63 75 6c 61 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 2e 63 6f 6c 6f 72 50 69 65 63 65 4c 69 73 74 20 2e 63 6f 6c 6f 72 50 69 63 65 2d 6c 69 73 74 20 2e 73 77 61 74 63 68 2d 65 6c 65 6d 65 6e 74 20 2e 6c 69 73 74 2d 72 6f 75 6e 64 65 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 63 6f 6c 6f 72 50 69 65 63 65 4c 69 73 74 20 2e 63 6f 6c 6f 72 50 69 63 65 2d 6c 69 73 74 20 2e 73 77 61 74 63 68 2d 65 6c 65 6d 65 6e 74 20 2e 61 63 74 69 76 65 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 77 69 64 74 68 3a Data Ascii: -element .list-circular{border-radius:50%}.colorPieceList .colorPice-list .swatch-element .list-rounded{border-radius:4px}.colorPieceList .colorPice-list .swatch-element .active{overflow:hidden;cursor:pointer;text-align:center;border:2px solid #000;width:
2024-05-24 22:56:29 UTC	16384	IN	Data Raw: 63 74 2d 6d 6f 64 61 6c 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 6c 65 66 74 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 63 6f 6e 74 65 6e 74 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 6d 6f 64 61 6c 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 6c 65 66 74 20 2e 73 77 69 70 0d 0a 31 66 66 66 30 0d 0a 65 72 2d 73 6c 69 64 65 20 2e 69 6d 67 2d 63 6f 6e 74 65 6e 74 7b 68 65 69 67 68 74 3a 31 30 30 76 77 3b 62 6f 72 64 65 72 3a 30 7d 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 63 6f 6e 74 65 6e 74 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 6d 6f 64 61 6c 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 6c 65 66 74 20 2e 73 77 69 70 65 72 2d Data Ascii: ct-modal .customize-left .swiper-slide{display:block}.customize-product-content .customize-product-modal .customize-left .swip1fff0er-slide .img-content{height:100vw;border:0}.customize-product-content .customize-product-modal .customize-left .swiper-
2024-05-24 22:56:29 UTC	16384	IN	Data Raw: 74 3a 22 5c 65 36 61 39 22 7d 2e 69 63 6f 6e 2d 4c 5f 7a 68 65 6b 6f 75 62 69 61 6f 71 69 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 61 37 22 7d 2e 69 63 6f 6e 2d 4c 5f 6c 69 61 6f 74 69 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 61 31 22 7d 2e 69 63 6f 6e 2d 4c 5f 78 69 6e 79 6f 6e 67 6b 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 61 36 22 7d 2e 69 63 6f 6e 2d 4c 5f 73 68 61 6e 67 64 69 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 61 38 22 7d 2e 69 63 6f 6e 2d 4c 5f 61 6e 71 75 61 6e 73 75 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 38 22 7d 2e 69 63 6f 6e 2d 4c 5f 61 69 78 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 39 22 Data Ascii: t:"\e6a9"}.icon-L_zhekoubiaoqian:before{content:"\e6a7"}.icon-L_liaotian:before{content:"\e6a1"}.icon-L_xinyongka:before{content:"\e6a6"}.icon-L_shangdian:before{content:"\e6a8"}.icon-L_anquansuo:before{content:"\e698"}.icon-L_aixin:before{content:"\e699"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	2.19.104.72	443

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:29 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-24 22:56:30 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=148324 Date: Fri, 24 May 2024 22:56:29 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-24 22:56:30 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49719	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:30 UTC	553	OUT	GET /liquid/buyer/public/js/plug/Swiper.js HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:30 UTC	667	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-1e6ff" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367871 Expires: Sat, 25 May 2024 02:56:30 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e11ff995f7cc-BNA
2024-05-24 22:56:30 UTC	702	IN	Data Raw: 37 64 30 33 0d 0a 2f 2a 2a 0a 20 2a 20 53 77 69 70 65 72 20 34 2e 34 2e 31 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 64 61 6e 67 65 72 6f 2e 75 73 2f 73 77 69 70 65 72 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 31 38 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 53 65 70 74 65 Data Ascii: 7d03/** * Swiper 4.4.1 * Most modern mobile touch slider and framework with hardware accelerated transitions * http://www.idangero.us/swiper/ * * Copyright 2014-2018 Vladimir Kharlampidi * * Released under the MIT License * * Released on: Septe
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 63 72 65 61 74 65 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 69 6e 69 74 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 7d 2c 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 63 68 69 6c 64 72 65 6e 3a 5b 5d 2c 63 68 69 6c 64 4e 6f 64 65 73 3a 5b 5d 2c 73 74 79 6c 65 3a 7b 7d 2c 73 65 74 41 74 74 72 69 62 75 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 5d 7d 7d 7d 2c 6c 6f 63 61 74 69 6f 6e 3a 7b 68 61 73 68 3a 22 22 7d 7d 3a 64 6f 63 75 6d 65 6e 74 2c 59 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 Data Ascii: n(){return null},createEvent:function(){return{initEvent:function(){}}},createElement:function(){return{children:[],childNodes:[],style:{},setAttribute:function(){},getElementsByTagName:function(){return[]}}},location:{hash:""}}:document,Y="undefined"==ty
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 26 26 65 5b 30 5d 2e 6e 6f 64 65 54 79 70 65 29 66 6f 72 28 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 3d 31 29 61 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 6c 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 61 3d 30 3b 61 3c 65 2e 6c 65 6e 67 74 68 3b 61 2b 3d 31 29 2d 31 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 65 5b 61 5d 29 26 26 74 2e 70 75 73 68 28 65 5b 61 5d 29 3b 72 65 74 75 72 6e 20 74 7d 4c 2e 66 6e 3d 6c 2e 70 72 6f 74 6f 74 79 70 65 2c 4c 2e 43 6c 61 73 73 3d 6c 2c 4c 2e 44 6f 6d 37 3d 6c 3b 76 61 72 20 74 3d 7b 61 64 64 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 68 69 73 3b 66 6f 72 28 76 Data Ascii: &&e[0].nodeType)for(i=0;i<e.length;i+=1)a.push(e[i]);return new l(a)}function r(e){for(var t=[],a=0;a<e.length;a+=1)-1===t.indexOf(e[a])&&t.push(e[a]);return t}L.fn=l.prototype,L.Class=l,L.Dom7=l;var t={addClass:function(e){if(void 0===e)return this;for(v
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 45 6c 65 6d 65 6e 74 44 61 74 61 53 74 6f 72 61 67 65 5b 65 5d 3d 74 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 69 66 28 61 3d 74 68 69 73 5b 30 5d 29 7b 69 66 28 61 2e 64 6f 6d 37 45 6c 65 6d 65 6e 74 44 61 74 61 53 74 6f 72 61 67 65 26 26 65 20 69 6e 20 61 2e 64 6f 6d 37 45 6c 65 6d 65 6e 74 44 61 74 61 53 74 6f 72 61 67 65 29 72 65 74 75 72 6e 20 61 2e 64 6f 6d 37 45 6c 65 6d 65 6e 74 44 61 74 61 53 74 6f 72 61 67 65 5b 65 5d 3b 76 61 72 20 73 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 65 29 3b 72 65 74 75 72 6e 20 73 7c 7c 76 6f 69 64 20 30 7d 7d 2c 74 72 61 6e 73 66 6f 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 74 2b 3d 31 29 7b 76 61 72 20 61 3d Data Ascii: ElementDataStorage[e]=t;return this}if(a=this[0]){if(a.dom7ElementDataStorage&&e in a.dom7ElementDataStorage)return a.dom7ElementDataStorage[e];var s=a.getAttribute("data-"+e);return s\|\|void 0}},transform:function(e){for(var t=0;t<this.length;t+=1){var a=
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 65 72 73 5b 76 5d 3d 5b 5d 29 2c 75 2e 64 6f 6d 37 4c 69 73 74 65 6e 65 72 73 5b 76 5d 2e 70 75 73 68 28 7b 6c 69 73 74 65 6e 65 72 3a 6e 2c 70 72 6f 78 79 4c 69 73 74 65 6e 65 72 3a 6c 7d 29 2c 75 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 2c 6c 2c 73 29 7d 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 6f 66 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 5b 5d 2c 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 61 2d 2d 3b 29 74 5b 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 76 61 72 20 69 3d 74 5b 30 5d 2c 73 3d 74 5b 31 5d 2c 72 3d 74 5b 32 5d 2c 6e 3d 74 5b 33 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 5b 31 5d 26 26 28 69 3d 28 65 3d 74 29 5b 30 5d 2c 72 3d 65 5b 31 5d 2c 6e 3d Data Ascii: ers[v]=[]),u.dom7Listeners[v].push({listener:n,proxyListener:l}),u.addEventListener(v,l,s)}}return this},off:function(){for(var e,t=[],a=arguments.length;a--;)t[a]=arguments[a];var i=t[0],s=t[1],r=t[2],n=t[3];"function"==typeof t[1]&&(i=(e=t)[0],r=e[1],n=
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 69 66 28 30 3c 74 68 69 73 2e 6c 65 6e 67 74 68 29 7b 69 66 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 73 74 79 6c 65 73 28 29 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2b 70 61 72 73 65 46 6c 6f 61 74 28 74 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 6d 61 72 67 69 6e 2d 72 69 67 68 74 22 29 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 74 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 6d 61 72 67 69 6e 2d 6c 65 66 74 22 29 29 7d 72 65 74 75 72 6e 20 74 68 69 73 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 6f 75 74 65 72 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 30 3c 74 68 69 73 2e 6c 65 6e 67 74 68 29 7b 69 Data Ascii: tion(e){if(0<this.length){if(e){var t=this.styles();return this[0].offsetWidth+parseFloat(t.getPropertyValue("margin-right"))+parseFloat(t.getPropertyValue("margin-left"))}return this[0].offsetWidth}return null},outerHeight:function(e){if(0<this.length){i
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 29 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 74 2b 3d 31 29 74 68 69 73 5b 74 5d 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 69 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 61 2c 69 3d 74 68 69 73 5b 30 5d 3b 69 66 28 21 69 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 69 2e 6d 61 74 63 68 65 73 29 72 65 74 75 72 6e 20 69 2e 6d 61 74 63 68 65 73 28 65 29 3b 69 66 28 69 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 72 65 74 75 72 6e 20 69 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 28 65 29 3b 69 66 28 69 2e Data Ascii: ):null;for(var t=0;t<this.length;t+=1)this[t].textContent=e;return this},is:function(e){var t,a,i=this[0];if(!i\|\|void 0===e)return!1;if("string"==typeof e){if(i.matches)return i.matches(e);if(i.webkitMatchesSelector)return i.webkitMatchesSelector(e);if(i.
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 63 65 6f 66 20 6c 29 66 6f 72 28 61 3d 30 3b 61 3c 65 2e 6c 65 6e 67 74 68 3b 61 2b 3d 31 29 69 5b 74 5d 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 5b 61 5d 2c 69 5b 74 5d 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 29 3b 65 6c 73 65 20 69 5b 74 5d 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 69 5b 74 5d 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 30 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3f 65 3f 74 68 69 73 5b 30 5d 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 26 26 4c 28 74 68 69 73 5b 30 5d 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 29 2e 69 73 28 65 29 3f 6e 65 77 20 6c 28 5b 74 68 69 73 5b 30 5d 2e 6e 65 78 74 Data Ascii: ceof l)for(a=0;a<e.length;a+=1)i[t].insertBefore(e[a],i[t].childNodes[0]);else i[t].insertBefore(e,i[t].childNodes[0]);return this},next:function(e){return 0<this.length?e?this[0].nextElementSibling&&L(this[0].nextElementSibling).is(e)?new l([this[0].next
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 28 65 29 7c 7c 28 74 3d 74 2e 70 61 72 65 6e 74 73 28 65 29 2e 65 71 28 30 29 29 2c 74 29 7d 2c 66 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 61 3d 30 3b 61 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 61 2b 3d 31 29 66 6f 72 28 76 61 72 20 69 3d 74 68 69 73 5b 61 5d 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 2c 73 3d 30 3b 73 3c 69 2e 6c 65 6e 67 74 68 3b 73 2b 3d 31 29 74 2e 70 75 73 68 28 69 5b 73 5d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 6c 28 74 29 7d 2c 63 68 69 6c 64 72 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 61 3d 30 3b 61 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 61 2b 3d 31 29 66 6f 72 28 76 61 72 20 69 3d 74 68 69 73 5b 61 5d 2e 63 68 69 6c 64 4e 6f Data Ascii: (e)\|\|(t=t.parents(e).eq(0)),t)},find:function(e){for(var t=[],a=0;a<this.length;a+=1)for(var i=this[a].querySelectorAll(e),s=0;s<i.length;s+=1)t.push(i[s]);return new l(t)},children:function(e){for(var t=[],a=0;a<this.length;a+=1)for(var i=this[a].childNo
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 7c 72 2e 4d 73 54 72 61 6e 73 66 6f 72 6d 7c 7c 72 2e 6d 73 54 72 61 6e 73 66 6f 72 6d 7c 7c 72 2e 74 72 61 6e 73 66 6f 72 6d 7c 7c 72 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 74 72 61 6e 73 66 6f 72 6d 22 29 2e 72 65 70 6c 61 63 65 28 22 74 72 61 6e 73 6c 61 74 65 28 22 2c 22 6d 61 74 72 69 78 28 31 2c 20 30 2c 20 30 2c 20 31 2c 22 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 22 2c 22 29 2c 22 78 22 3d 3d 3d 74 26 26 28 69 3d 59 2e 57 65 62 4b 69 74 43 53 53 4d 61 74 72 69 78 3f 73 2e 6d 34 31 3a 31 36 3d 3d 3d 61 2e 6c 65 6e 67 74 68 3f 70 61 72 73 65 46 6c 6f 61 74 28 61 5b 31 32 5d 29 3a 70 61 72 73 65 46 6c 6f 61 74 28 61 5b 34 5d 29 29 2c 22 79 22 3d 3d 3d 74 26 26 28 69 3d 59 2e 57 65 62 4b 69 74 43 53 53 4d 61 74 72 Data Ascii: \|r.MsTransform\|\|r.msTransform\|\|r.transform\|\|r.getPropertyValue("transform").replace("translate(","matrix(1, 0, 0, 1,")).toString().split(","),"x"===t&&(i=Y.WebKitCSSMatrix?s.m41:16===a.length?parseFloat(a[12]):parseFloat(a[4])),"y"===t&&(i=Y.WebKitCSSMatr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49721	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:30 UTC	574	OUT	GET /liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:30 UTC	666	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 24 May 2024 07:40:38 GMT vary: Accept-Encoding etag: W/"66504476-188b7" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54092 Expires: Sat, 25 May 2024 02:56:30 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e120a9ad6a79-BNA
2024-05-24 22:56:30 UTC	703	IN	Data Raw: 37 64 30 34 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 77 69 6e 64 6f 77 2e 4e 50 5f 45 4e 56 3d 7b 50 41 59 50 41 4c 5f 45 4e 56 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 50 41 59 50 41 4c 5f 43 4c 49 45 4e 54 3a 7b 7d 2c 41 50 49 5f 48 4f 53 54 3a 22 22 2c 53 54 41 54 49 43 5f 48 4f 53 54 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 73 68 6f 70 79 6d 6e 2e 63 6f 6d 22 2c 53 54 41 54 49 43 5f 50 41 54 48 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 73 68 6f 70 79 6d 6e 2e 63 6f 6d 2f 6c 69 71 75 69 64 2f 62 75 79 65 72 2f 70 75 62 6c 69 63 22 2c 43 41 52 54 5f 44 45 46 41 55 4c 54 5f 49 4d 41 47 45 53 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 73 68 6f 70 79 6d 6e 2e 63 6f 6d 2f 74 68 65 6d 65 2f 66 61 6b 65 72 2f 70 69 63 2d 34 2e Data Ascii: 7d04"use strict";window.NP_ENV={PAYPAL_ENV:"production",PAYPAL_CLIENT:{},API_HOST:"",STATIC_HOST:"https://static.shopymn.com",STATIC_PATH:"https://static.shopymn.com/liquid/buyer/public",CART_DEFAULT_IMAGES:"https://static.shopymn.com/theme/faker/pic-4.
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 76 61 6c 28 29 2c 68 65 61 64 73 79 6d 62 6f 6c 3a 24 28 22 2e 4a 2d 63 75 72 72 65 6e 63 79 2d 63 6f 64 65 22 29 2e 64 61 74 61 28 22 73 79 6d 62 6f 6c 22 29 2c 68 65 61 64 52 61 74 65 56 61 6c 75 65 3a 24 28 22 2e 4a 2d 63 75 72 72 65 6e 63 79 2d 63 6f 64 65 22 29 2e 64 61 74 61 28 22 72 61 74 65 2d 76 61 6c 75 65 22 29 2c 68 65 61 64 43 75 72 72 65 6e 63 79 54 65 78 74 3a 22 22 2c 6e 61 76 69 67 61 74 6f 72 3a 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 69 73 4d 6f 62 69 6c 65 3a 2f 41 6e 64 72 6f 69 64 7c 77 65 62 4f 53 7c 69 50 68 6f 6e 65 7c 69 50 6f 64 7c 42 6c 61 63 6b 42 65 72 72 79 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 73 63 72 6f 6c 6c 50 Data Ascii: val(),headsymbol:$(".J-currency-code").data("symbol"),headRateValue:$(".J-currency-code").data("rate-value"),headCurrencyText:"",navigator:navigator.userAgent.toLowerCase(),isMobile:/Android\|webOS\|iPhone\|iPod\|BlackBerry/i.test(navigator.userAgent),scrollP
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 63 6f 6e 66 69 67 2e 73 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 2b 22 70 78 22 29 29 7d 2c 6c 6f 63 61 6c 65 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 61 29 7b 76 61 72 20 6f 3d 22 6f 72 64 65 72 73 22 3d 3d 74 68 69 73 2e 70 61 67 65 6c 6f 63 61 74 69 6f 6e 3f 74 68 69 73 2e 68 65 61 64 63 6f 64 65 3a 4e 50 5f 45 4e 56 2e 63 6f 6e 66 69 67 2e 63 75 72 72 65 6e 63 79 45 6e 74 69 74 79 2e 63 75 72 72 65 6e 63 79 5f 63 6f 64 65 2c 69 3d 31 3c 22 42 52 4c 2c 45 55 52 22 2e 73 70 6c 69 74 28 6f 29 2e 6c 65 6e 67 74 68 3f 22 64 65 2d 44 45 22 3a 22 65 6e 2d 55 53 22 2c 72 3d 22 6f 72 64 65 72 73 22 3d 3d 74 68 69 73 2e 70 61 67 65 6c 6f 63 61 74 69 6f 6e 3f 74 68 69 73 2e 68 65 61 64 73 79 6d 62 6f 6c 3a 4e 50 5f 45 4e 56 2e 63 6f 6e 66 Data Ascii: config.scrollPosition+"px"))},localeString:function(e,t,n,a){var o="orders"==this.pagelocation?this.headcode:NP_ENV.config.currencyEntity.currency_code,i=1<"BRL,EUR".split(o).length?"de-DE":"en-US",r="orders"==this.pagelocation?this.headsymbol:NP_ENV.conf
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 28 7b 7d 2c 61 2c 74 29 2c 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 69 73 4f 70 65 6e 26 26 74 68 69 73 2e 5f 69 6e 69 74 28 29 2c 74 68 69 73 7d 76 61 72 20 73 2c 63 2c 6c 2c 64 2c 75 2c 70 2c 61 3d 7b 6c 6f 61 64 69 6e 67 4e 6f 74 69 63 65 3a 22 4c 6f 61 64 69 6e 67 20 69 6d 61 67 65 22 2c 65 72 72 6f 72 4e 6f 74 69 63 65 3a 22 54 68 65 20 69 6d 61 67 65 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 22 2c 70 72 65 76 65 6e 74 43 6c 69 63 6b 73 3a 21 30 2c 6f 6e 53 68 6f 77 3a 76 6f 69 64 20 30 2c 6f 6e 48 69 64 65 3a 76 6f 69 64 20 30 7d 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 24 6c 69 6e 6b 3d 74 68 69 73 2e 24 74 61 72 67 65 74 2e 66 69 6e Data Ascii: ({},a,t),void 0===this.isOpen&&this._init(),this}var s,c,l,d,u,p,a={loadingNotice:"Loading image",errorNotice:"The image could not be loaded",preventClicks:!0,onShow:void 0,onHide:void 0};n.prototype._init=function(){var t=this;this.$link=this.$target.fin
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 6f 61 64 69 6e 67 22 29 2e 61 70 70 65 6e 64 28 74 68 69 73 2e 24 6e 6f 74 69 63 65 2e 74 65 78 74 28 74 68 69 73 2e 6f 70 74 73 2e 6c 6f 61 64 69 6e 67 4e 6f 74 69 63 65 29 29 2c 74 68 69 73 2e 24 7a 6f 6f 6d 3d 6f 28 61 29 2c 61 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 24 6e 6f 74 69 63 65 2e 74 65 78 74 28 6e 2e 6f 70 74 73 2e 65 72 72 6f 72 4e 6f 74 69 63 65 29 2c 6e 2e 24 74 61 72 67 65 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 73 2d 6c 6f 61 64 69 6e 67 22 29 2e 61 64 64 43 6c 61 73 73 28 22 69 73 2d 65 72 72 6f 72 22 29 7d 2c 61 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 30 21 3d 3d 61 2e 77 69 64 74 68 26 26 28 6e 2e 69 73 52 65 61 64 79 3d 21 30 2c 6e 2e 24 6e 6f 74 69 63 65 2e 64 65 74 61 63 68 28 29 Data Ascii: oading").append(this.$notice.text(this.opts.loadingNotice)),this.$zoom=o(a),a.onerror=function(){n.$notice.text(n.opts.errorNotice),n.$target.removeClass("is-loading").addClass("is-error")},a.onload=function(){0!==a.width&&(n.isReady=!0,n.$notice.detach()
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 61 74 61 28 74 68 69 73 2c 22 65 61 73 79 5a 6f 6f 6d 22 2c 6e 65 77 20 6e 28 74 68 69 73 2c 74 29 29 7d 29 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 26 26 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 29 7d 28 6a 51 75 65 72 79 29 3b 76 61 72 20 5f 63 72 65 61 74 65 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 61 3d Data Ascii: ata(this,"easyZoom",new n(this,t))})},"function"==typeof define&&define.amd?define(function(){return n}):"undefined"!=typeof module&&module.exports&&(module.exports=n)}(jQuery);var _createClass=function(){function a(e,t){for(var n=0;n<t.length;n++){var a=
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 69 6d 67 41 6a 61 78 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 2e 61 6a 61 78 28 7b 75 72 6c 3a 65 2c 74 79 70 65 3a 22 50 4f 53 54 22 2c 64 61 74 61 54 79 70 65 3a 22 6a 73 6f 6e 22 2c 74 69 6d 65 6f 75 74 3a 31 32 65 34 2c 63 61 63 68 65 3a 21 31 2c 64 61 74 61 3a 61 2c 70 72 6f 63 65 73 73 44 61 74 61 3a 21 31 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 21 31 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 30 3d 3d 65 2e 63 6f 64 65 3f 74 28 65 29 3a 24 70 6c 75 67 2e 6d 65 73 73 61 67 65 2e 65 72 72 6f 72 28 65 2e 6d 73 67 29 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 Data Ascii: tion(e){})}},{key:"imgAjax",value:function(e,a){return new Promise(function(t,n){r.ajax({url:e,type:"POST",dataType:"json",timeout:12e4,cache:!1,data:a,processData:!1,contentType:!1,success:function(e){0==e.code?t(e):$plug.message.error(e.msg)},error:func
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 22 2c 65 7c 7c 7b 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 43 61 72 74 4c 69 73 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6f 73 74 28 22 2f 62 75 79 65 72 2f 63 61 72 74 22 2c 65 7c 7c 7b 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 53 68 6f 70 70 69 6e 67 4c 69 73 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6f 73 74 28 22 2f 6f 72 64 65 72 2f 63 61 72 74 22 2c 65 7c 7c 7b 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 63 68 65 63 6b 45 6d 61 69 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6f 73 74 28 22 2f 62 75 79 65 72 2f 75 73 65 72 2f 73 75 62 73 63 72 69 62 65 22 2c 65 7c 7c 7b 7d 29 7d 7d 2c Data Ascii: ",e\|\|{})}},{key:"getCartList",value:function(e){return this.post("/buyer/cart",e\|\|{})}},{key:"getShoppingList",value:function(e){return this.post("/order/cart",e\|\|{})}},{key:"checkEmail",value:function(e){return this.post("/buyer/user/subscribe",e\|\|{})}},
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 7b 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 50 72 6f 64 75 63 74 43 6f 75 70 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6f 73 74 28 22 2f 62 75 79 65 72 2f 6f 72 64 65 72 2f 70 72 6f 64 75 63 74 2d 63 6f 75 70 6f 6e 2d 69 6e 66 6f 22 2c 65 7c 7c 7b 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6c 65 61 72 50 72 6f 64 75 63 74 43 6f 75 70 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6f 73 74 28 22 2f 6f 72 64 65 72 2f 63 61 72 74 2f 64 65 6c 2d 63 61 72 74 2d 66 69 6c 65 64 22 2c 65 7c 7c 7b 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 43 61 63 68 65 53 68 6f 70 70 69 6e 67 49 6e 66 6f 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: {})}},{key:"getProductCoupon",value:function(e){return this.post("/buyer/order/product-coupon-info",e\|\|{})}},{key:"clearProductCoupon",value:function(e){return this.post("/order/cart/del-cart-filed",e\|\|{})}},{key:"getCacheShoppingInfo",value:function(e){r
2024-05-24 22:56:30 UTC	1369	IN	Data Raw: 68 69 73 2e 67 65 74 28 22 2f 62 75 79 65 72 2f 75 73 65 72 2f 67 6f 6f 67 6c 65 2d 6d 61 70 2d 64 65 74 61 69 6c 22 2c 65 7c 7c 7b 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 50 68 6f 6e 65 52 75 6c 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6f 73 74 28 22 2f 62 75 79 65 72 2f 65 78 70 72 65 73 73 2f 67 65 74 2d 70 68 6f 6e 65 2d 72 75 6c 65 73 22 2c 65 7c 7c 7b 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 4c 6f 63 61 6c 50 61 79 6d 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6f 73 74 28 22 2f 70 61 79 6d 65 6e 74 2f 61 73 69 61 62 69 6c 6c 2d 6c 6f 63 61 6c 2f 67 65 74 2d 70 61 79 2d 77 61 79 22 2c 65 7c 7c 7b 7d 29 7d 7d 2c 7b 6b 65 Data Ascii: his.get("/buyer/user/google-map-detail",e\|\|{})}},{key:"getPhoneRules",value:function(e){return this.post("/buyer/express/get-phone-rules",e\|\|{})}},{key:"getLocalPayment",value:function(e){return this.post("/payment/asiabill-local/get-pay-way",e\|\|{})}},{ke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49722	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:30 UTC	619	OUT	GET /wp-includes/img/pro-shipping-protection.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:30 UTC	178	IN	HTTP/1.1 403 Forbidden Date: Fri, 24 May 2024 22:56:30 GMT Content-Type: text/html Content-Length: 131 Connection: close Server: cloudflare CF-RAY: 8890e120ae48f7ec-BNA
2024-05-24 22:56:30 UTC	131	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 70 6c 65 61 73 65 20 64 6f 6e 27 74 20 6d 65 73 73 20 61 72 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <meta charset="UTF-8"> <title>please don't mess around</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49720	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:30 UTC	614	OUT	GET /wp-includes/img/shipping-insurance.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:30 UTC	178	IN	HTTP/1.1 403 Forbidden Date: Fri, 24 May 2024 22:56:30 GMT Content-Type: text/html Content-Length: 131 Connection: close Server: cloudflare CF-RAY: 8890e120bab5f7f4-BNA
2024-05-24 22:56:30 UTC	131	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 70 6c 65 61 73 65 20 64 6f 6e 27 74 20 6d 65 73 73 20 61 72 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <meta charset="UTF-8"> <title>please don't mess around</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49718	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:30 UTC	618	OUT	GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:31 UTC	602	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:31 GMT Content-Type: image/png Content-Length: 19379 Connection: close x-oss-request-id: 6650748AF488A53436FC7D32 ETag: "CAE408692E9DF180175752E8BC159AD1" Last-Modified: Tue, 31 Oct 2023 09:59:39 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3292476528251743927 x-oss-storage-class: Standard Content-MD5: yuQIaS6d8YAXV1LovBWa0Q== x-oss-server-time: 38 CF-Cache-Status: HIT Age: 42645 Expires: Sat, 25 May 2024 02:56:31 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e121ca9ff7d0-BNA
2024-05-24 22:56:31 UTC	767	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 47 00 00 01 68 08 06 00 00 00 5d 51 5f 89 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 ee 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 35 36 36 65 62 63 35 2c 20 32 30 32 32 2f 30 35 2f 30 39 2d 30 37 3a 32 32 3a 32 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDRGh]Q_pHYs+iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5, 2022/05/09-07:22:29 "> <rdf:R
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 65 32 32 34 37 63 31 62 2d 66 61 33 64 2d 30 64 34 37 2d 62 62 66 62 2d 65 62 62 66 35 33 65 62 63 33 35 63 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 65 32 32 34 37 63 31 62 2d 66 61 33 64 2d 30 64 34 37 2d 62 62 66 62 2d 65 62 62 66 35 33 65 62 63 33 35 63 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 65 32 32 34 37 63 31 62 2d 66 61 33 64 2d 30 64 34 37 2d 62 62 66 62 2d 65 62 62 66 35 33 65 62 63 33 35 63 22 3e 20 3c 78 6d Data Ascii: :00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:e2247c1b-fa3d-0d47-bbfb-ebbf53ebc35c" xmpMM:DocumentID="xmp.did:e2247c1b-fa3d-0d47-bbfb-ebbf53ebc35c" xmpMM:OriginalDocumentID="xmp.did:e2247c1b-fa3d-0d47-bbfb-ebbf53ebc35c"> <xm
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 b0 32 77 03 96 2c 37 2f df e4 c7 88 8d 89 99 70 eb d6 ad 39 51 91 91 88 8c 88 40 72 72 32 92 93 93 91 92 9c fc 9f c7 69 ec ec e0 e8 e8 08 2f 2f 2f 78 7a 79 a1 72 e5 ca 08 0c 0e fe d6 d7 d7 77 94 4a c5 8c fb 90 2c cb 48 4f 4b 0b c8 ca ce 6e 64 6b 6b 7b c9 d6 d6 36 42 a3 d1 64 98 b3 a7 ec ec 6c Data Ascii: ""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R2w,7/p9Q@rr2i///xzyrwJ,HOKndkk{6Bdl
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: e1 f1 e1 94 29 89 7b 76 ed 32 f6 10 8f a9 51 b3 26 16 2e 5e 3c a3 82 af ef c7 fa 3e 27 27 27 47 33 77 f6 ec ac 55 3f ff 2c bc 1f 00 68 d8 a8 11 be fc ea ab 39 be be be 93 4c 72 00 3d 24 25 25 b5 5a b4 60 c1 e1 df d7 af b7 88 d1 93 72 9e 9e 18 3f 71 22 7a bc fc b2 c9 df 20 db b5 6c 29 c7 c5 c5 99 fa 30 26 a5 52 a9 f0 f7 b5 6b 26 fb 5e c5 c7 c7 f7 9d 37 67 ce da 6d 5b b6 18 3d 4a a4 af a6 cd 9a 61 e2 94 29 29 35 6a d6 74 35 f5 b1 ee dd bd bb a5 73 87 0e dd 8d ad f3 d6 b0 61 18 3f 69 d2 13 7f 0e 47 0f 1f 96 27 bc ff 3e 52 8d 9c 5e f1 24 01 01 01 98 b7 70 a1 ce d1 78 86 a3 a2 59 c6 47 d3 32 22 26 3a 7a fa c8 e1 c3 e5 b1 ef be 6b 31 c1 08 00 76 6c df 8e 6e 9d 3b 6f dd bb 67 8f c9 ce 60 69 69 69 46 07 23 00 48 4d 4d 7d ec cf 92 92 92 5a 0d 1a 30 c0 24 c1 08 00 Data Ascii: ){v2Q&.^<>'''G3wU?,h9Lr=$%%Z`r?q"z l)0&Rk&^7gm[=Ja))5jt5sa?iG'>R^$pxYG2"&:zk1vln;og`iiiF#HMM}Z0$
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: fa f4 b5 96 f2 66 69 ac 9f 7f fa 09 e9 e9 e9 3e e6 ee 43 e9 c7 a5 4b 2d 62 34 eb bb c5 8b 91 94 94 d4 ca 92 16 03 3c 74 e0 00 12 05 cd b1 b9 16 16 16 fe 63 29 bd 2c fc a8 cc cc 4c ac 5c b1 a2 54 de b9 64 a9 be 59 b8 50 3e 75 f2 a4 b9 db 28 96 d4 94 14 8c 7d f7 dd 91 96 36 b7 26 22 3c 7c c5 ae 1d 3b cc dd 06 00 60 fb 36 93 2d 77 57 a6 58 d4 0b a8 34 38 7a f8 b0 bc 7f ef 5e 73 b7 21 4c 66 66 26 b6 6c da 14 63 ee 3e 1e 8a 89 89 c1 9f bb 77 9b bb 0d 00 85 eb 1f 4d 7a ff fd c3 ca 8d 53 cd ad a0 a0 00 fb f7 ed db 2a a2 d6 cc e9 d3 fd ca d2 5c 9d f5 6b d7 c2 d2 de 14 cd c9 98 15 d6 2f 9c 3f af fd 61 c9 12 81 dd 94 9c ab 57 ae e0 9b af bf b6 a8 17 f6 ca 15 2b de b0 94 2b 0d a1 57 af a2 b4 2e 81 50 92 78 22 29 a6 6f 16 2e 34 69 7d 8f 72 e5 50 a3 66 4d 34 6e d2 04 Data Ascii: fi>CK-b4<tc),L\TdYP>u(}6&"<\|;`6-wWX48z^s!Lff&lc>wMzS*\k/?aW++W.Px")o.4i}rPfM4n
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 15 dd 7b f4 90 d4 6a f5 e3 0f 78 fb 6d c4 44 47 4f 9f fd e5 97 33 76 ef dc 59 22 3d 69 ec ec 30 fc 9d 77 30 60 e0 c0 10 e7 22 e6 6a 9d 3b 73 46 9e fd e5 97 30 c5 3c b5 e4 07 0f 0c 7a 5e 4a 4a 4a b0 a8 91 9a d7 07 0f 46 9b b6 6d 8d 7a d3 09 08 08 68 fd 72 ef de f2 fa b5 6b 85 f4 04 00 d1 91 91 ad 02 02 2c 7b 9d bb 45 0b 16 e4 5f 0b 13 3f c5 af 79 8b 16 78 7d f0 60 83 7e 26 3b ff f8 23 3d 45 d0 0e f1 92 24 e1 f3 59 b3 0a 0c b9 f4 db a0 51 23 e9 d5 01 03 e4 5f 7f f9 45 48 2f bf fd f2 0b 3a 76 ea 24 a4 96 48 8e 8e 8e 98 3c 75 2a 7a bd f2 ca 63 97 3f 1b 34 6a 84 97 7b f7 c6 d8 f1 e3 a7 4f 99 38 71 c6 99 d3 a7 85 1f ff de bd 7b 9a 06 0d 0c 9b b4 ff 2c e0 58 a3 9e 44 bd 38 07 bf f9 26 3c 3d 3d 8d be 3d ac 62 c5 8a a3 9a 34 6b 26 a2 25 00 85 0b 42 5a 22 6f 6f 6f Data Ascii: {jxmDGO3vY"=i0w0`"j;sF0<z^JJJFmzhrk,{E_?yx}`~&;#=E$YQ#_EH/:v$H<u*zc?4j{O8q{,XD8&<===b4k&%BZ"ooo
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 23 3a 3a ba 49 62 42 02 2a 55 ae 8c 06 0d 1b 0a bf 2d da ce ae ec de 51 2c cb 32 3e fc e0 83 ad c9 c9 c9 c2 6b bf 39 74 28 8c 5d 6e e0 f4 c9 93 c2 b6 92 d0 d8 d9 21 38 24 c4 51 54 bd da 75 ea 08 0b 47 e6 de 0a 48 ad 56 a3 7b cf 9e 46 dd c4 d0 a0 41 03 61 e1 28 3b 2b 4b 48 9d b2 8a e1 c8 04 d4 6a 35 bc 7d 7c be f3 f6 f1 f9 ae 6e bd 7a e6 6e a7 54 6a d8 b0 a1 51 f7 76 07 85 84 d4 03 70 41 48 33 00 44 4c f2 f6 f4 f2 12 d0 49 c9 72 70 70 b8 1f 50 b5 6a d3 80 aa 42 6e 4c 2b 92 a8 cb 27 96 68 ed ea d5 f2 91 43 87 84 d7 0d 0e 09 c1 e8 b1 63 8d 3e 87 9f 12 b0 57 df 43 21 21 21 06 8f 8c 3c 49 ad da b5 b1 61 9d 98 69 9a b7 6e de 44 52 52 52 ab e2 ce 19 14 a5 69 b3 66 46 df c4 60 e8 da 66 54 7c 9c 73 44 16 47 63 67 87 8a 7e 7e af 1a 53 c3 d5 d5 f5 a2 c8 4b 35 41 41 Data Ascii: #::IbB*U-Q,2>k9t(]n!8$QTuGHV{FAa(;+KHj5}\|nznTjQvpAH3DLIrppPjBnL+'hCc>WC!!!<IainDRRRifF`fT\|sDGcg~~SK5AA
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 17 7f f1 e9 a7 c2 eb da da da 62 ce bc 79 a7 ac ac ac b8 20 8d 40 5c fc 90 f4 c1 70 64 84 0b e7 cf 6b df 7d e7 1d 55 52 52 92 b9 5b 21 32 98 56 ab c5 27 33 66 98 64 22 71 59 a7 d5 6a 31 65 c2 84 91 19 26 58 c4 72 c2 a4 49 08 a8 5a b5 a9 f0 c2 ff 48 4d 4b 7b c7 54 b5 2d 59 59 5d 1f 8e c4 62 38 32 d0 a1 83 07 e5 71 a3 47 97 c9 05 ec e8 d9 91 97 97 a7 1e fb ee bb f9 07 f6 ef 37 77 2b a5 d2 f2 1f 7f 94 4d b1 25 45 cb 56 ad 30 40 d0 2a d8 a5 9d e8 05 4f d3 d2 d2 84 d6 a3 b2 89 e1 c8 00 7f 1d 3f 2e 8f 1e 31 c2 2c 93 ae 9d 9c 9c e0 e0 e8 08 95 4a 05 5b 1b 1b dc b9 73 a7 c4 7b a0 b2 41 ab d5 62 ec e8 d1 66 09 46 b6 b6 b6 70 70 70 80 c6 ce 0e 56 56 56 48 4e 4e 46 aa 19 e6 82 18 23 f4 ea d5 c4 45 0b 16 08 af eb e2 e2 82 4f bf fc b2 9f 25 ae f7 65 0e fc 3e 90 39 30 Data Ascii: by @\pdk}URR[!2V'3fd"qYj1e&XrIZHMK{T-YY]b82qG7w+M%EV0@*O?.1,J[s{AbfFpppVVVHNNF#EO%e>90
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: ae 09 ab 55 c5 df 1f 6a b5 b8 9b 52 6e de b8 21 ac 16 00 e4 e4 e4 d4 74 02 84 2f 0c 47 e6 77 2d 2c 4c e8 dd 50 22 2f c7 c4 c7 c7 f7 15 79 e9 5a d4 ad df 8b 16 2c c8 bf 16 26 6c 70 ec 5f 41 c1 c1 50 49 12 f6 fd f9 a7 0c 14 ae 8e ef e8 e4 04 7b 7b fb 6c 17 57 d7 e5 5e 5e 5e e3 6d 6d 6d 4b 64 47 6b b5 5a 8d fa 0d 1a e0 e8 91 23 42 ea dd be 75 0b 5a ad 56 d8 79 ee d6 cd 9b 33 84 14 fa 47 a3 c6 8d 45 96 a3 32 8c e1 48 87 ac ac 2c 97 a4 a4 24 61 f5 5c 5d 5d 85 d5 02 80 8b 02 47 b5 00 20 23 23 63 68 39 0b f8 34 4b e2 45 0a be dc 21 f2 b5 7c e1 fc f9 b5 c2 8a 41 cc dd 4d 67 cf 9c 91 97 ff f8 a3 80 6e 1e 77 2d 2c 0c a3 47 8e 7c d2 97 34 00 46 02 18 e9 e2 e2 02 9f f2 e5 51 bd 7a 75 54 09 08 40 50 50 10 ea d6 ab d7 dd 14 bf 9f 8d 9b 36 15 16 8e 72 72 72 70 f3 c6 8d Data Ascii: UjRn!t/Gw-,LP"/yZ,&lp_API{{lW^^^mmmKdGkZ#BuZVy3GE2H,$a\]]G ##ch94KE!\|AMgnw-,G\|4FQzuT@PP6rrrp
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: d9 b3 18 3d 72 64 7e 66 66 e6 53 27 67 e7 e6 e6 da 2c 98 3b 57 1e 33 6a 14 44 ee a8 ae 8b 56 ab c5 f8 f7 de f3 11 31 79 9c 2c 43 48 48 88 d0 f9 73 0f 4d 1e 3f 1e fb f7 ee d5 2b 20 85 85 86 c6 f4 ed d5 2b f9 64 09 de 15 79 60 df 3e ac 5d bd 5a af fe 72 72 72 4c dd 8e 59 24 14 63 33 d8 77 c7 8c f9 53 e4 e8 d1 81 fd fb 31 f2 ed b7 e5 d4 94 94 a7 9e 48 77 6c df 2e bf 35 78 b0 3a 5b e0 9d 95 6f 0e 1d ca 8d 66 c9 20 0c 47 4f 51 bf 41 03 93 d4 3d 7c f0 20 ba bf f4 52 f2 a6 df 7f 97 9f 34 71 34 2d 35 35 60 f5 af bf ca 5d 3a 76 cc 59 ba 64 89 49 7a d0 e5 ce 9d 3b f8 f4 e3 8f 93 4b fc c0 64 12 d5 03 03 cb db d9 d9 09 af 9b 9d 9d 8d 77 47 8c c0 e4 09 13 e4 6b 61 61 8f 4d 86 93 65 19 7f 5f be 9c f5 e1 e4 c9 f2 2b 3d 7b fa dc be 65 f0 34 25 83 7d f1 e9 a7 7a cd 8f ca Data Ascii: =rd~ffS'g,;W3jDV1y,CHHsM?+ +dy`>]ZrrrLY$c3wS1Hwl.5x:[of GOQA=\| R4q4-55`]:vYdIz;KdwGkaaMe_+={e4%}z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49723	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:31 UTC	618	OUT	GET /uploader/4f4833f5cd52885ef5e46ba206cdc229.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:31 UTC	573	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:31 GMT Content-Type: image/jpeg Content-Length: 359412 Connection: close Cf-Bgj: h2pri ETag: "F379E5F47DAD66BD7D7CB8E67A3545F0-1" Last-Modified: Tue, 31 Oct 2023 09:36:32 GMT x-oss-hash-crc64ecma: 16025932744812259257 x-oss-object-type: Multipart x-oss-request-id: 665076C38BAF673739EA76DE x-oss-server-time: 5 x-oss-storage-class: Standard CF-Cache-Status: HIT Expires: Sat, 25 May 2024 02:56:31 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e12658f2f7d0-BNA
2024-05-24 22:56:31 UTC	796	IN	Data Raw: ff d8 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 58 59 5a 00 00 01 f4 00 00 00 14 67 58 59 5a 00 00 02 Data Ascii: @ICC_PROFILE0ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCrXYZgXYZ
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 06 12 21 07 13 31 41 14 22 51 61 32 71 81 15 23 42 91 a1 08 52 62 b1 c1 16 24 33 72 d1 43 82 92 e1 f0 17 34 53 a2 b2 f1 25 54 63 73 c2 26 44 83 35 93 18 36 a3 b3 d2 45 46 55 64 95 ff c4 00 1c 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 01 02 03 06 00 07 08 ff c4 00 45 11 00 01 03 02 03 04 08 05 03 03 01 08 01 04 03 01 01 00 02 03 04 11 12 21 31 05 41 51 61 13 22 71 81 91 a1 b1 f0 06 14 32 c1 d1 23 e1 f1 15 42 52 33 16 24 43 62 72 82 92 a2 b2 07 53 c2 d2 34 44 e2 f2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 83 44 ab 1a 64 d0 5c 27 c3 38 34 3c 3d bd 7e 63 ae 0f 35 e9 51 17 07 61 62 37 07 d2 de d8 52 97 3a 58 e0 bf 2d 55 bc 4c 63 11 6a fb f8 e9 bb 7f c4 df a7 d3 f9 7c b1 c9 6d 0a 6c 6d e9 1b a8 d5 15 13 ec 6c 8b 4e 87 13 a5 c4 a5 49 23 70 40 23 Data Ascii: !1A"Qa2q#BRb$3rC4S%Tcs&D56EFUdE!1AQa"q2#BR3$CbrS4D?Dd\'84<=~c5Qab7R:X-ULcj\|mlmlNI#p@#
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 5e 52 95 74 97 6f 62 7f d3 11 95 3d 5a 40 06 c7 b9 3e 98 88 b9 4e 38 80 97 d4 94 93 7f f0 f7 db eb 8f 2f 29 2e bc e0 42 90 10 12 94 a4 f9 7a 93 f5 f5 c5 54 a9 03 40 53 80 a6 ca 17 49 17 ed be d8 c5 c7 39 36 d0 e9 e8 42 53 a7 63 f5 c4 07 df 75 f5 04 34 82 b5 28 d8 0d 8d ce 3c bc b1 52 de 92 ff 00 22 39 2a e6 79 40 49 e9 f2 c5 f3 10 1a a5 46 d2 a5 07 1f 23 ef 16 7b fb 7c b1 be 04 24 52 d9 2b 72 ca 92 b1 e6 57 ee fb 0c 1f 64 0c 88 6b 8e b7 59 ae 34 4d 35 2a bc 66 15 b7 89 50 3d 4f f0 0f d7 00 57 d7 c3 b3 a0 33 4c 72 e1 bc 9e 01 6b 14 4e 99 f8 5a b1 e1 ff 00 0e 95 52 53 55 7a db 37 65 5e 68 91 d6 3f c4 ff 00 ea 28 7e ef a0 ef f2 c3 ca 93 45 43 02 e1 22 e7 a9 b6 24 42 87 bd d4 06 e0 74 da de c3 04 90 21 82 ab 28 13 b7 6c 7c 0b 6c ed a9 f6 84 a6 49 0e 5b 86 e0 Data Ascii: ^Rtob=Z@>N8/).BzT@SI96BScu4(<R"9y@IF#{\|$R+rWdkY4M5fP=OW3LrkNZRSUz7e^h?(~EC"$Bt!(l\|lI[
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 5d a3 ba e9 4a 6d cc 03 75 0d 4b 4e dd 2d 7d 89 c0 d8 df 2b b0 8c 82 70 d8 21 a3 6e 37 f5 9c 84 32 e6 5f 93 9b eb 71 e9 10 dc 6d b9 b2 9a 71 c4 2d fd 5c b4 84 a0 ae f7 00 9b 1b 5a fb f5 c1 9e 52 c8 99 8e 83 c4 6c ba dd 76 96 eb 0d 26 49 5a 64 37 f7 ac ab 42 14 a1 67 13 b7 61 b1 b1 c3 3e 8b 41 14 de 29 50 e3 4c 7b c6 4c 62 81 2a 75 42 49 40 49 7a 43 ef 21 0a 55 86 c9 48 4a 42 10 91 b2 52 90 06 03 28 1f b4 3b 91 e4 29 9c d7 00 3d 13 98 7f bd c1 f2 2c 23 51 b1 53 64 e9 55 87 a1 1f 2c 68 22 63 06 68 59 6b 26 98 38 30 65 65 16 92 c2 6a 9c 75 ad d5 26 ac 22 05 19 d7 e5 c8 75 5d 10 86 9b 0d 82 4f cf f9 62 56 62 9e fa f2 5a e9 d1 81 7b 33 66 f9 cb aa 4c 86 d9 d4 eb 11 4f 9d b4 ac 7e 1f bb 43 63 7b 77 c5 44 9a a5 3a 1a 6a 30 aa 0b 94 db 99 a2 7a e6 d5 8c 74 80 fb Data Ascii: ]JmuKN-}+p!n72_qmq-\ZRlv&IZd7Bga>A)PL{Lb*uBI@IzC!UHJBR(;)=,#QSdU,h"chYk&80eeju&"u]ObVbZ{3fLO~Cc{wD:j0zt
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 42 5c 0d bc 43 81 b0 52 14 ae e5 48 3f 0a bf 42 37 1d c6 03 eb 5a 52 5a 37 f8 ad b6 3b d9 5c 03 98 39 24 f1 dc b5 c5 3f 60 f1 5d 9a 26 47 67 2e e5 6a 73 e8 7d 6c 84 39 21 d4 e9 01 47 e2 36 ef bd f0 1d 93 f2 fc ba 6d 4f ed 76 5c 75 32 90 4b 81 68 b8 d2 70 7b 96 f2 8c 29 82 29 78 97 14 a4 8f 22 45 ce 19 f9 92 2d 0f 24 64 d9 89 79 08 62 a1 21 85 21 b4 db 52 d3 71 df d3 e9 be 32 a6 68 7d db 1e fd 49 48 63 9a 5a 89 9b 13 06 f5 cb 42 0c 6c e3 5c 2f d7 67 29 af 0e de a9 6b 71 5a 8a 95 a8 f4 1e a7 d3 17 f2 aa b1 e6 42 f0 59 69 09 8d 09 83 a5 4e 00 35 2c 8d b7 3d ce 20 e5 7a 55 3e 32 6a d3 73 03 65 c8 ef 46 71 b6 47 33 4a 83 84 79 55 6f f5 c6 be 1c 41 2f d5 57 4d 42 02 59 7d cf 23 ab 36 09 f5 c3 03 5f d0 46 e0 d6 df 0f bf 25 d6 42 c8 2a 2a ff 00 de 9f 84 6f b7 66 Data Ascii: B\CRH?B7ZRZ7;\9$?`]&Gg.js}l9!G6mOv\u2Khp{))x"E-$dyb!!Rq2h}IHcZBl\/g)kqZBYiN5,= zU>2jseFqG3JyUoA/WMBY}#6_F%B**of
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: ba 84 5b 07 6c 6a 53 3b e2 7a 9a c6 b2 dd ba 8c 56 ca d7 50 4b 78 d6 5a bf cb 13 d4 df a6 35 96 c9 38 aa 95 00 b7 e9 8d 4a 6a f8 b0 2d df 1a d4 de d8 f2 f2 ac 5b 7d 76 c4 65 a6 c7 b8 c5 aa da df df 11 1c 6b 6d f1 60 a2 ea b1 d4 6d 7c 42 70 75 c5 ab c8 b8 db 10 56 8e f8 95 27 45 5a b6 ef 88 ee 32 0f 50 3f 2c 58 2d 18 8c e0 d3 8b 2a aa d7 59 b1 f2 9b 62 2b 81 68 ea 2e 3d b1 62 a4 dc e2 33 b8 85 37 55 eb 50 23 11 5c 23 ff 00 7c 4c 78 7c 5d f1 05 e1 b6 d7 18 f2 ba 8a eb 48 55 f6 fa e2 13 b1 cd b6 37 1e 87 12 d4 a5 27 ae 23 2d 78 a9 b2 b0 55 af 20 a6 f7 04 7c b1 5e f2 d4 9f 84 e2 d9 f7 2c 09 ed 8a b7 ca 1c e8 2e 71 55 65 58 b7 1c 5a 82 52 2e a3 b0 b0 df e9 82 3a 5d 35 34 c6 4b b2 00 32 57 d7 f8 47 a0 c7 94 ea 72 23 1f 10 e8 bb 96 f2 a4 fe 1f f9 e0 9a 83 96 a4 Data Ascii: [ljS;zVPKxZ58Jj-[}vekm`m\|BpuV'EZ2P?,X-*Yb+h.=b37UP#\#\|Lx\|]HU7'#-xU \|^,.qUeXZR.:]54K2WGr#
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: a2 d2 10 96 c0 27 a8 1d 71 ad 46 fe d8 d8 6f df 73 88 b3 24 b3 0a 3a e4 49 71 0d 34 92 94 eb 5a 82 41 51 36 02 e7 b9 26 c0 77 c6 ba 2f 2c 9c 21 22 ea 3b 7b e0 67 33 e7 6a 5e 56 6a f5 17 89 90 a4 dd b8 ad 59 4e b9 ef 6f c2 9f 73 61 f3 c0 0e 71 e2 bc 97 e4 bd 4d ca 8c 38 db a9 59 42 e5 38 90 a5 dc 1b 1d 09 17 03 fc c6 fe c0 75 c2 fd 9a 43 8f be 5f aa 38 b9 32 5e 5d ca 4a 8a ca d4 7f 79 5d 54 7d b1 84 93 36 3d 53 1a 6a 19 6a 4e 43 25 71 98 33 bd 6f 3a 15 b2 2d 0a 99 7b 78 76 d4 74 1f f3 ab aa cf b7 4f 6c 50 86 0a 1e 75 09 58 59 41 4f 5d 81 ef f9 61 a1 94 b8 6f 2a b8 89 4f 4a 72 3c 58 b0 d9 52 d4 d9 92 94 29 45 2d 97 39 7b 05 e9 51 4a 49 b6 92 6d b9 b0 dc af 26 b2 d3 35 59 cc b0 e9 5b 69 79 c6 db 5b 96 d4 a4 85 94 82 6d b5 ec 3b 60 0e 99 d2 1b ee dc 9f 47 14 Data Ascii: 'qFos$:Iq4ZAQ6&w/,!";{g3j^VjYNosaqM8YB8uC_82^]Jy]T}6=SjjNC%q3o:-{xvtOlPuXYAO]ao*OJr<XR)E-9{QJIm&5Y[iy[m;`G
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: af a8 e0 68 e4 ba 5f 30 a9 8c e3 5e 72 a0 87 02 e3 c8 5a c2 d4 cd af b0 17 f7 eb 87 bc 8c bd 48 8d 45 97 0b 26 d2 5b 83 1d 4e 68 fb b5 28 85 58 5a fb 93 63 f3 df 0b ac c5 40 19 2a 8c aa a2 99 66 5b f1 ec eb b1 16 b0 95 b8 c8 36 59 41 ee 53 70 7b e3 90 af ae a9 a2 ac 34 a2 6c 4e ca d9 01 99 dc 53 7a 38 61 9e 13 23 82 89 01 3c 54 87 0d 4a cb 39 cd aa c7 60 c4 e8 e1 0a 20 fa 2c f7 fa e1 8f c3 ba 46 63 cb 2c 06 ab 31 63 b8 b9 2b 42 de 9e c3 09 53 6d 83 6b a5 6a ea 77 24 5c 8f ae 04 e6 67 5a 7a 69 d1 62 e5 54 73 24 4d 8c 14 48 06 ed 95 00 42 36 e8 ab 1b fd 30 51 c2 5c e4 cc 7a 6f d9 19 ce 51 7d 48 49 6c b0 97 75 ab 73 b1 20 61 96 cb da f5 52 49 fe f6 00 67 9f 69 e4 97 57 53 45 18 06 22 98 35 ca 6b 30 aa 2a 7a 5d 1d 94 d3 14 ca b9 b3 23 2a ea 49 3d 2e 8b 5f eb Data Ascii: h_0^rZHE&[Nh(XZc@f[6YASp{4lNSz8a#<TJ9` ,Fc,1c+BSmkjw$\gZzibTs$MHB60Q\zoQ}HIlus aRIgiWSE"5k0z]#*I=._
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: ca 94 87 48 42 41 51 09 bf d7 e5 8b 46 9a 6e 53 4b 5b 37 56 9f 86 dd cf f4 f9 e2 c0 d9 42 a8 63 31 54 69 0b bd 1e 6c 98 8a 1f f8 4e 94 df e9 d3 0c 3c a3 c4 ec ce 1e 42 2b 32 a1 ca 63 6b f3 da 08 5f fc 40 8f e5 80 67 29 cd 3a 39 8a 21 a7 d2 90 b5 23 a8 fc f1 4d 50 6d fe 59 5a 46 a5 11 61 7e 80 fc b1 76 12 55 1c 02 eb 0a 4e 69 8b 52 b5 90 d1 27 ff 00 05 f4 af 05 51 da 0e 27 5b 69 51 16 bf 4d c6 38 19 d9 f3 e9 2f b0 7e d0 29 75 48 0b 50 64 83 a3 f8 4f be 1d 59 7b 8a 75 4c 93 49 a3 4f 6f 32 31 5e 62 5a 96 99 90 dc 8e a0 62 01 6d 04 93 b9 07 70 48 e8 47 43 82 41 ca eb 2c 24 2e 98 69 01 69 ba 2c a1 ea 37 df 1b 83 40 93 71 85 7b d5 26 78 83 01 ea 9e 48 98 fd 1b 34 c5 6b 9a ec 36 de b2 65 37 d7 6e ca f6 55 bd 8e 05 29 dc 61 cc d4 f4 a4 4c 4c 6a 9a 13 b2 83 ed 72 Data Ascii: HBAQFnSK[7VBc1TilN<B+2ck_@g):9!#MPmYZFa~vUNiR'Q'[iQM8/~)uHPdOY{uLIOo21^bZbmpHGCA,$.ii,7@q{&xH4k6e7nU)aLLjr
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 7a 61 b6 ee f7 f5 c4 17 db 20 82 92 52 52 6e 92 3b 1c 3e d9 d5 b2 50 4e d9 a3 39 8f 3e 23 bd 0f 23 04 8d 2d 2b 9f f8 5d 9c 13 48 96 28 f5 37 b4 d3 a6 39 a9 97 49 d9 87 8d b7 f6 4a f6 07 d0 d8 fa e1 dc eb 64 82 92 08 50 bd c1 ea 0e 12 9c 4f c8 ff 00 62 4b 35 5a 6b 20 52 e6 39 67 50 91 b4 77 8f e1 ff 00 22 b7 23 d0 dc 7a 60 cb 85 d9 cf ed e8 82 91 54 70 aa a9 11 bf ba 5a 8e f2 59 48 f5 ee b4 8e be a2 c7 b1 c7 6f b6 e9 22 ae a7 1b 56 8f 43 f5 0e 07 8f 76 87 b8 e9 72 97 53 bc c4 fe 85 fd c8 c9 90 b8 8f 73 5b 17 1d 14 9f 51 84 b7 14 72 20 cb f2 85 5a 8e df ff 00 05 98 be 89 1b 46 74 fe 0f 64 9d ca 7d 37 1d 86 1e d2 4a 50 93 6e e3 1a 1a 8b 1e a1 12 5c 4a c3 6d 2a 94 f3 65 32 43 aa d2 84 a7 b9 27 b7 cf b1 b1 18 07 61 6d 77 51 c9 d1 c9 f4 3b c8 a2 65 8c 8e b3 57 Data Ascii: za RRn;>PN9>##-+]H(79IJdPObK5Zk R9gPw"#z`TpZYHo"VCvrSs[Qr ZFtd}7JPn\Jm*e2C'amwQ;eW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49728	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:31 UTC	568	OUT	GET /liquid/buyer/public/js/lib/event.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:31 UTC	665	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:31 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 24 May 2024 07:40:48 GMT vary: Accept-Encoding etag: W/"66504480-1714" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54093 Expires: Sat, 25 May 2024 02:56:31 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1274eaff7d4-BNA
2024-05-24 22:56:31 UTC	704	IN	Data Raw: 31 37 31 34 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 24 28 22 2e 6e 69 63 6b 70 2d 65 76 65 6e 74 2d 70 61 67 65 2d 6c 6f 63 61 74 69 6f 6e 22 29 2e 76 61 6c 28 29 3b 73 77 69 74 63 68 28 24 74 72 61 63 6b 69 6e 67 2e 70 61 67 65 56 69 65 77 28 29 2c 74 29 7b 63 61 73 65 22 73 65 61 72 63 68 22 3a 24 74 72 61 63 6b 69 6e 67 2e 73 65 61 72 63 68 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 22 3a 24 74 72 61 63 6b 69 6e 67 2e 76 69 65 77 49 74 65 6d 28 29 7d 69 66 28 22 63 61 72 74 22 3d 3d 74 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 50 69 78 65 6c 5f 48 65 6c 70 65 72 22 29 29 7b 76 61 72 20 65 3d 4a 53 4f 4e Data Ascii: 1714"use strict";$(function(){var t=$(".nickp-event-page-location").val();switch($tracking.pageView(),t){case"search":$tracking.search();break;case"collections":$tracking.viewItem()}if("cart"==t&&window.sessionStorage.getItem("Pixel_Helper")){var e=JSON
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 70 69 6e 67 5f 6d 65 74 68 6f 64 22 29 3f 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 74 61 67 26 26 73 74 61 67 28 22 70 61 67 65 5f 6c 6f 61 64 22 2c 22 73 68 69 70 70 69 6e 67 22 2c 7b 74 79 70 65 3a 22 74 72 61 63 65 22 2c 62 75 74 74 6f 6e 5f 70 6f 73 3a 22 32 22 2c 62 75 74 74 6f 6e 5f 6e 61 6d 65 3a 22 73 68 69 70 70 69 6e 67 22 7d 29 3a 2d 31 3c 61 2e 69 6e 64 65 78 4f 66 28 22 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 22 29 3f 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 74 61 67 26 26 73 74 61 67 28 22 70 61 67 65 5f 6c 6f 61 64 22 2c 22 63 6f 6d 70 6c 65 74 65 22 2c 7b 74 79 70 65 3a 22 74 72 61 63 65 22 2c 62 75 74 74 6f 6e 5f 70 6f 73 3a 22 33 22 2c 62 75 74 74 6f 6e 5f 6e 61 6d 65 3a 22 63 6f 6d 70 6c 65 74 65 Data Ascii: ping_method")?"function"==typeof stag&&stag("page_load","shipping",{type:"trace",button_pos:"2",button_name:"shipping"}):-1<a.indexOf("payment_method")?"function"==typeof stag&&stag("page_load","complete",{type:"trace",button_pos:"3",button_name:"complete
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 28 22 2e 4a 2d 53 68 61 72 65 53 6f 75 72 63 65 22 29 2e 6c 65 6e 67 74 68 26 26 24 28 22 2e 4a 2d 53 68 61 72 65 53 6f 75 72 63 65 22 29 2e 76 61 6c 28 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 68 61 72 65 74 61 67 26 26 73 68 61 72 65 74 61 67 28 22 76 69 73 69 74 22 2c 24 28 22 2e 4a 2d 53 68 61 72 65 53 6f 75 72 63 65 22 29 2e 76 61 6c 28 29 29 2c 22 72 65 63 6f 6d 6d 65 6e 64 22 3d 3d 24 70 6c 75 67 2e 71 75 65 72 79 28 29 2e 6f 72 69 67 69 6e 29 28 6e 3d 7b 65 76 65 6e 74 5f 6e 61 6d 65 3a 22 67 6f 6f 64 73 5f 63 6c 69 63 6b 22 2c 70 61 72 61 6d 73 3a 7b 69 64 73 3a 5b 5d 7d 7d 29 2e 70 61 72 61 6d 73 2e 69 64 73 2e 70 75 73 68 28 24 28 22 2e 70 72 6f 64 75 63 74 2d 69 64 22 29 2e 76 61 6c 28 29 29 2c 24 68 74 74 70 2e 70 Data Ascii: (".J-ShareSource").length&&$(".J-ShareSource").val()&&"function"==typeof sharetag&&sharetag("visit",$(".J-ShareSource").val()),"recommend"==$plug.query().origin)(n={event_name:"goods_click",params:{ids:[]}}).params.ids.push($(".product-id").val()),$http.p
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 61 64 64 5f 74 6f 5f 63 61 72 74 22 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 73 68 61 72 65 5f 73 6f 75 72 63 65 22 29 29 7d 29 2c 24 28 22 2e 4a 2d 42 75 79 50 61 79 43 61 72 74 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 73 68 61 72 65 5f 73 6f 75 72 63 65 22 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 68 61 72 65 74 61 67 26 26 73 68 61 72 65 74 61 67 28 22 61 64 64 5f 74 6f 5f 63 61 72 74 22 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 73 68 61 72 65 5f 73 6f 75 72 63 65 22 29 29 7d 29 2c 24 28 64 6f 63 75 6d 65 6e Data Ascii: add_to_cart",window.sessionStorage.getItem("share_source"))}),$(".J-BuyPayCart").click(function(){window.sessionStorage.getItem("share_source")&&"function"==typeof sharetag&&sharetag("add_to_cart",window.sessionStorage.getItem("share_source"))}),$(documen
2024-05-24 22:56:31 UTC	1105	IN	Data Raw: 64 64 5f 74 6f 5f 63 61 72 74 22 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 73 68 61 72 65 5f 73 6f 75 72 63 65 22 29 29 7d 29 2c 24 28 22 2e 4a 2d 42 75 79 50 61 79 43 61 72 74 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 73 68 61 72 65 5f 73 6f 75 72 63 65 22 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 68 61 72 65 74 61 67 26 26 73 68 61 72 65 74 61 67 28 22 61 64 64 5f 74 6f 5f 63 61 72 74 22 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 73 68 61 72 65 5f 73 6f 75 72 63 65 22 29 29 7d 29 2c 24 28 22 2e 4a 2d 47 6f 70 61 Data Ascii: dd_to_cart",window.sessionStorage.getItem("share_source"))}),$(".J-BuyPayCart").click(function(){window.sessionStorage.getItem("share_source")&&"function"==typeof sharetag&&sharetag("add_to_cart",window.sessionStorage.getItem("share_source"))}),$(".J-Gopa
2024-05-24 22:56:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49725	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:31 UTC	568	OUT	GET /liquid/buyer/public/js/lib/index.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	666	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:31 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 24 May 2024 07:40:44 GMT vary: Accept-Encoding etag: W/"6650447c-eac61" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54093 Expires: Sat, 25 May 2024 02:56:31 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1275a17f7d8-BNA
2024-05-24 22:56:32 UTC	703	IN	Data Raw: 37 64 30 34 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 69 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 69 2c 65 7d 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3b 77 69 6e 64 6f 77 2e 4e 50 5f 45 4e 56 2e 6c 61 6e 67 75 61 67 65 3d 7b 65 6e 3a 7b 62 74 6e 5f 61 64 64 5f 74 6f 5f 63 61 72 74 3a 22 41 44 44 20 54 4f 20 43 41 52 54 22 2c 62 74 6e 5f 73 6f 6c 64 5f 6f 75 74 3a 22 53 4f 4c 44 20 4f 55 54 22 Data Ascii: 7d04"use strict";function _defineProperty(e,t,i){return t in e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}$(function(){var e,t;window.NP_ENV.language={en:{btn_add_to_cart:"ADD TO CART",btn_sold_out:"SOLD OUT"
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 20 61 20 76 61 6c 69 64 20 65 6d 61 69 6c 22 2c 65 72 72 6f 5f 65 6d 61 69 6c 3a 22 57 72 6f 6e 67 20 65 6d 61 69 6c 20 66 6f 72 6d 61 74 22 2c 73 75 62 73 63 72 69 62 65 3a 22 54 68 61 6e 6b 73 20 66 6f 72 20 73 75 62 73 63 72 69 62 69 6e 67 22 2c 6d 61 78 5f 32 35 35 3a 22 6d 61 78 69 6d 75 6d 20 69 73 20 32 35 35 20 63 68 61 72 61 63 74 65 72 73 22 2c 6d 61 78 5f 34 30 3a 22 6d 61 78 69 6d 75 6d 20 69 73 20 34 30 20 63 68 61 72 61 63 74 65 72 73 22 2c 66 72 65 65 3a 22 46 72 65 65 22 2c 66 72 65 65 5f 73 68 69 70 70 69 6e 67 3a 22 66 72 65 65 20 73 68 69 70 70 69 6e 67 22 2c 63 61 6c 63 75 6c 61 74 65 64 3a 22 43 61 6c 63 75 6c 61 74 65 64 20 61 74 20 6e 65 78 74 20 73 74 65 70 22 2c 70 68 6f 6e 65 5f 70 6c 61 63 65 3a 22 50 68 6f 6e 65 20 28 4f 70 74 Data Ascii: a valid email",erro_email:"Wrong email format",subscribe:"Thanks for subscribing",max_255:"maximum is 255 characters",max_40:"maximum is 40 characters",free:"Free",free_shipping:"free shipping",calculated:"Calculated at next step",phone_place:"Phone (Opt
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 20 63 61 72 64 20 6f 72 20 64 69 73 63 6f 75 6e 74 2e 20 57 61 73 20 69 74 20 65 6e 74 65 72 65 64 20 63 6f 72 72 65 63 74 6c 79 3f 22 2c 74 69 70 73 5f 63 6f 75 70 6f 6e 5f 65 72 72 6f 72 5f 32 3a 22 63 6f 75 70 6f 6e 20 63 6f 64 65 20 69 73 6e e2 80 99 74 20 76 61 6c 69 64 20 66 6f 72 20 74 68 65 20 69 74 65 6d 73 20 69 6e 20 79 6f 75 72 20 63 61 72 74 22 2c 74 69 70 73 5f 63 6f 75 70 6f 6e 5f 65 72 72 6f 72 5f 34 3a 22 55 73 61 67 65 20 6c 69 6d 69 74 20 65 78 63 65 65 64 65 64 22 2c 74 69 70 73 5f 63 6f 75 70 6f 6e 5f 65 72 72 6f 72 5f 35 3a 22 4e 6f 20 65 2d 6d 61 69 6c 20 61 76 61 69 6c 61 62 6c 65 22 2c 74 69 70 73 5f 63 6f 75 70 6f 6e 5f 65 72 72 6f 72 5f 36 3a 22 4f 6e 65 2d 74 69 6d 65 20 75 73 61 67 65 20 65 78 63 65 65 64 65 64 22 2c 74 69 70 Data Ascii: card or discount. Was it entered correctly?",tips_coupon_error_2:"coupon code isnt valid for the items in your cart",tips_coupon_error_4:"Usage limit exceeded",tips_coupon_error_5:"No e-mail available",tips_coupon_error_6:"One-time usage exceeded",tip
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 72 61 63 74 65 72 73 2e 22 2c 22 56 61 6c 75 65 20 41 64 64 65 64 20 54 61 78 20 4e 4f 2e 20 6d 75 73 74 20 68 61 76 65 20 31 33 2d 31 34 20 63 68 61 72 61 63 74 65 72 73 2e 22 2c 22 49 6d 70 75 65 73 74 6f 20 61 6c 20 76 61 6c 6f 72 20 61 67 72 65 67 61 64 6f 20 4e 4f 2e 20 64 65 62 65 20 74 65 6e 65 72 20 39 20 63 61 72 61 63 74 65 72 65 73 2e 22 2c 22 56 61 6c 75 65 20 41 64 64 65 64 20 54 61 78 20 4e 4f 2e 20 6d 75 73 74 20 68 61 76 65 20 36 2d 31 30 20 64 69 67 69 74 73 2e 22 2c 22 56 61 6c 75 65 20 41 64 64 65 64 20 54 61 78 20 4e 4f 2e 20 6d 75 73 74 20 68 61 76 65 20 38 2d 39 20 64 69 67 69 74 73 2e 22 2c 22 56 61 6c 75 65 20 41 64 64 65 64 20 54 61 78 20 4e 4f 2e 20 6d 75 73 74 20 68 61 76 65 20 31 30 2d 31 38 20 63 68 61 72 61 63 74 65 72 73 2e Data Ascii: racters.","Value Added Tax NO. must have 13-14 characters.","Impuesto al valor agregado NO. debe tener 9 caracteres.","Value Added Tax NO. must have 6-10 digits.","Value Added Tax NO. must have 8-9 digits.","Value Added Tax NO. must have 10-18 characters.
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 63 65 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 74 61 6b 65 20 6f 75 74 20 66 72 65 69 67 68 74 20 69 6e 73 75 72 61 6e 63 65 2c 20 77 65 20 77 69 6c 6c 20 6e 6f 74 20 70 61 79 20 66 6f 72 20 74 68 65 20 6c 6f 73 73 20 6f 72 20 64 61 6d 61 67 65 22 2c 69 6e 73 75 72 61 6e 63 65 5f 61 6c 65 72 74 5f 6f 6b 3a 22 6f 6b 22 2c 73 63 72 6f 6c 6c 5f 6d 6f 72 65 3a 22 53 63 72 6f 6c 6c 20 66 6f 72 20 6d 6f 72 65 20 69 74 65 6d 73 22 2c 73 74 61 74 65 3a 22 50 72 6f 76 69 6e 63 65 2f 53 74 61 74 65 22 2c 71 74 79 3a 22 51 74 79 22 2c 61 74 3a 22 61 74 22 2c 72 65 6d 6f 76 65 3a 22 52 65 6d 6f 76 65 22 2c 64 69 64 5f 6e 6f 74 5f 62 75 79 3a 22 44 69 64 6e 27 74 20 62 75 79 22 2c 65 78 70 61 6e 64 5f 61 6c 6c 5f 73 65 74 74 69 6e 67 73 3a 22 45 78 70 61 6e 64 Data Ascii: ce. If you do not take out freight insurance, we will not pay for the loss or damage",insurance_alert_ok:"ok",scroll_more:"Scroll for more items",state:"Province/State",qty:"Qty",at:"at",remove:"Remove",did_not_buy:"Didn't buy",expand_all_settings:"Expand
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 6f 72 79 5f 6c 69 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 22 59 6f 75 20 63 61 6e 20 6f 6e 6c 79 20 61 64 64 20 22 2b 65 2b 22 20 22 2b 74 2b 22 20 2d 20 20 22 2b 69 2e 72 65 70 6c 61 63 65 28 2f c2 b7 2f 67 2c 22 20 2f 20 22 29 2b 22 20 74 6f 20 74 68 65 20 63 61 72 74 2e 22 7d 2c 73 65 6c 6c 61 62 6c 65 5f 69 6e 76 65 6e 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2b 22 20 70 69 65 63 65 73 20 61 76 61 69 6c 61 62 6c 65 22 7d 2c 73 65 6c 65 63 74 5f 73 6b 75 5f 61 74 74 72 69 62 75 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 50 6c 65 61 73 65 20 53 65 6c 65 63 74 20 22 2b 65 7d 2c 6c 6f 67 5f 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 27 3c 64 Data Ascii: ory_limit:function(e,t,i){return"You can only add "+e+" "+t+" - "+i.replace(//g," / ")+" to the cart."},sellable_inventory:function(e){return e+" pieces available"},select_sku_attribute:function(e){return"Please Select "+e},log_in:function(e){return'<d
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 74 20 62 65 20 65 6d 70 74 79 22 2c 63 72 65 61 74 65 5f 61 63 63 6f 75 6e 74 5f 74 69 70 73 31 3a 22 57 65 20 68 61 76 65 20 73 65 6e 74 20 61 6e 20 65 6d 61 69 6c 20 74 6f 22 2c 63 72 65 61 74 65 5f 61 63 63 6f 75 6e 74 5f 74 69 70 73 32 3a 22 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 74 68 65 20 6c 69 6e 6b 20 6f 72 20 62 75 74 74 6f 6e 20 69 6e 20 74 68 65 20 65 6d 61 69 6c 20 77 69 74 68 69 6e 20 37 32 20 68 6f 75 72 73 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 74 68 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 2e 22 2c 69 6e 63 6f 72 72 65 63 74 5f 66 6f 72 6d 61 74 3a 22 46 6f 72 6d 61 74 20 69 6e 63 6f 72 72 65 63 74 22 2c 69 6e 63 6f 6e 73 69 73 74 65 6e 74 5f 65 6d 61 69 6c 3a 22 45 6d 61 69 6c 20 65 6e 74 72 69 65 73 20 69 6e 63 6f 6e 73 69 73 74 65 6e Data Ascii: t be empty",create_account_tips1:"We have sent an email to",create_account_tips2:"Please click the link or button in the email within 72 hours to complete the verification.",incorrect_format:"Format incorrect",inconsistent_email:"Email entries inconsisten
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 6e 6f 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 22 2c 64 69 79 5f 66 6c 69 65 5f 65 78 63 65 65 64 32 3a 22 22 2c 64 69 79 5f 69 6e 70 75 74 5f 74 65 78 74 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 74 65 78 74 20 63 6f 6e 74 65 6e 74 73 22 2c 64 69 79 5f 75 70 6c 6f 61 64 5f 66 69 6c 65 3a 22 50 6c 65 61 73 65 20 75 70 6c 6f 61 64 20 64 6f 63 75 6d 65 6e 74 22 2c 6f 72 64 65 72 5f 73 74 61 74 75 73 3a 5b 22 41 6c 6c 22 2c 22 55 6e 70 61 69 64 22 2c 22 55 6e 73 68 69 70 70 65 64 22 2c 22 49 6e 20 74 72 61 6e 73 69 74 22 2c 22 43 6f 6d 70 6c 65 74 65 64 22 2c 22 43 61 6e 63 65 6c 65 64 22 5d 2c 74 5f 63 61 72 64 5f 6e 75 6d 62 65 72 3a 22 43 61 72 64 20 6e 75 6d 62 65 72 22 2c 74 5f 63 6c 69 63 6b 69 6e 67 5f 63 6f 6d 70 6c 65 74 65 5f 6f 72 64 Data Ascii: not be greater than",diy_flie_exceed2:"",diy_input_text:"Please enter text contents",diy_upload_file:"Please upload document",order_status:["All","Unpaid","Unshipped","In transit","Completed","Canceled"],t_card_number:"Card number",t_clicking_complete_ord
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 20 69 74 65 6d 22 2c 74 5f 67 69 66 74 5f 74 6f 73 65 6c 65 63 74 3a 22 47 6f 20 74 6f 20 70 69 63 6b 22 2c 74 5f 67 69 66 74 5f 76 69 65 77 3a 22 56 69 65 77 20 67 69 76 65 61 77 61 79 22 2c 74 5f 67 69 66 74 5f 63 68 6f 6f 73 65 3a 22 50 69 63 6b 20 61 20 67 69 76 65 61 77 61 79 22 2c 74 5f 67 69 66 74 5f 73 65 6c 65 63 74 65 64 3a 22 22 2c 74 5f 67 69 66 74 5f 75 6e 69 74 3a 22 70 69 65 63 65 73 20 68 61 76 65 20 62 65 65 6e 20 73 65 6c 65 63 74 65 64 22 2c 74 5f 67 69 66 74 5f 61 6c 73 6f 63 68 6f 6f 73 65 3a 22 22 2c 74 5f 67 69 66 74 5f 75 6e 69 74 5f 32 3a 22 70 69 65 63 65 73 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 73 65 6c 65 63 74 65 64 22 2c 74 5f 67 69 66 74 5f 67 69 66 74 73 3a 22 47 69 76 65 61 77 61 79 22 2c 70 75 72 63 68 61 73 65 5f 6c 69 Data Ascii: item",t_gift_toselect:"Go to pick",t_gift_view:"View giveaway",t_gift_choose:"Pick a giveaway",t_gift_selected:"",t_gift_unit:"pieces have been selected",t_gift_alsochoose:"",t_gift_unit_2:"pieces can also be selected",t_gift_gifts:"Giveaway",purchase_li
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 75 73 74 6f 6d 20 73 65 72 76 69 63 65 20 66 65 65 22 2c 74 5f 64 69 79 5f 76 31 5f 74 65 78 74 5f 70 6c 61 63 65 68 6f 6c 64 65 72 3a 22 69 6e 70 75 74 20 74 68 65 20 6c 65 74 74 65 72 73 20 77 68 61 74 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 70 72 69 6e 74 22 2c 74 5f 64 69 79 5f 76 31 5f 74 65 78 74 5f 68 65 72 65 3a 22 79 6f 75 72 20 74 65 78 74 20 68 65 72 65 22 2c 74 5f 64 69 79 5f 76 31 5f 69 6d 61 67 65 5f 68 65 72 65 3a 22 79 6f 75 72 20 69 6d 61 67 65 20 68 65 72 65 22 2c 74 5f 64 69 79 5f 76 32 5f 76 69 65 77 3a 22 56 69 65 77 22 2c 74 5f 64 69 79 5f 76 32 5f 74 65 78 74 5f 63 6f 6c 6f 72 3a 22 74 65 78 74 20 63 6f 6c 6f 72 22 2c 74 5f 64 69 79 5f 76 32 5f 74 65 78 74 5f 63 6f 6c 6f 72 5f 6f 70 74 69 6f 6e 3a 22 54 65 78 74 20 63 6f 6c 6f 72 20 Data Ascii: ustom service fee",t_diy_v1_text_placeholder:"input the letters what you want to print",t_diy_v1_text_here:"your text here",t_diy_v1_image_here:"your image here",t_diy_v2_view:"View",t_diy_v2_text_color:"text color",t_diy_v2_text_color_option:"Text color

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49724	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:31 UTC	611	OUT	GET /liquid/buyer/public/img/default.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:31 UTC	644	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:31 GMT Content-Type: image/png Content-Length: 6788 Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT etag: "66387ef8-1a84" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 220999 Expires: Sat, 25 May 2024 02:56:31 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1275ab3f7cc-BNA
2024-05-24 22:56:31 UTC	725	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 30 00 00 02 30 08 06 00 00 00 98 f1 51 6f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 1a 3e 49 44 41 54 78 01 ed d6 c1 0d 00 20 0c 03 31 60 ff 71 fb 07 89 2d 4e 72 27 88 9c 3e b2 67 e6 2e 47 80 00 01 02 04 08 10 08 09 9c 50 56 51 09 10 20 40 80 00 01 02 5f c0 80 f1 08 04 08 10 20 40 80 40 4e c0 80 c9 55 26 30 01 02 04 08 10 20 60 c0 f8 01 02 04 08 10 20 40 20 27 60 c0 e4 2a 13 98 00 01 02 04 08 10 30 60 fc 00 01 02 04 08 10 20 90 13 30 60 72 95 09 4c 80 00 01 02 04 08 18 30 7e 80 00 01 02 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 01 03 c6 0f 10 20 40 Data Ascii: PNGIHDR00QosRGB>IDATx 1`q-Nr'>g.GPVQ @_ @@NU&0 ` @ '`*0` 0`rL0~0&@?@\e @ @rL2 @ @
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 10 30 60 fc 00 01 02 04 08 10 20 90 13 30 60 72 95 09 4c 80 00 01 02 04 08 18 30 7e 80 00 01 02 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 01 03 c6 0f 10 20 40 80 00 01 02 39 01 03 26 57 99 c0 04 08 10 20 40 80 80 01 e3 07 08 10 20 40 80 00 81 9c 80 01 93 ab 4c 60 02 04 08 10 20 40 c0 80 f1 03 04 08 10 20 40 80 40 4e c0 80 c9 55 26 30 01 02 04 08 10 20 60 c0 f8 01 02 04 08 10 20 40 20 27 60 c0 e4 2a 13 98 00 01 02 04 08 10 30 60 fc 00 01 02 04 08 10 20 90 13 30 60 72 95 09 4c 80 00 01 02 04 08 18 30 7e 80 00 01 02 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c Data Ascii: 0` 0`rL0~0&@?@\e @ @rL2 @ @9&W @ @L` @ @@NU&0 ` @ '`*0` 0`rL0~0&@?@\
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 01 03 c6 0f 10 20 40 80 00 01 02 39 01 03 26 57 99 c0 04 08 10 20 40 80 80 01 e3 07 08 10 20 40 80 00 81 9c 80 01 93 ab 4c 60 02 04 08 10 20 40 c0 80 f1 03 04 08 10 20 40 80 40 4e c0 80 c9 55 26 30 01 02 04 08 10 20 60 c0 f8 01 02 04 08 10 20 40 20 27 60 c0 e4 2a 13 98 00 01 02 04 08 10 30 60 fc 00 01 02 04 08 10 20 90 13 30 60 72 95 09 4c 80 00 01 02 04 08 18 30 7e 80 00 01 02 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 Data Ascii: 0&@?@\e @ @rL2 @ @9&W @ @L` @ @@NU&0 ` @ '`*0` 0`rL0~0&@?@\e @ @rL2 @
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 01 03 c6 0f 10 20 40 80 00 01 02 39 01 03 26 57 99 c0 04 08 10 20 40 80 80 01 e3 07 08 10 20 40 80 00 81 9c 80 01 93 ab 4c 60 02 04 08 10 20 40 c0 80 f1 03 04 08 10 20 40 80 40 4e c0 80 c9 55 26 30 01 02 04 08 10 20 60 c0 f8 01 02 04 08 10 20 40 20 27 60 c0 e4 2a 13 98 00 01 02 04 08 10 30 60 fc 00 01 02 04 08 10 20 90 13 30 60 72 95 09 4c 80 00 01 02 04 08 18 30 7e 80 00 01 02 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 01 03 c6 0f 10 20 40 80 00 01 02 39 01 03 26 57 99 c0 04 08 10 20 40 80 80 01 e3 07 08 10 20 40 Data Ascii: e @ @rL2 @ @9&W @ @L` @ @@NU&0 ` @ '`*0` 0`rL0~0&@?@\e @ @rL2 @ @9&W @ @
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 01 03 c6 0f 10 20 40 80 00 01 02 39 01 03 26 57 99 c0 04 08 10 20 40 80 80 01 e3 07 08 10 20 40 80 00 81 9c 80 01 93 ab 4c 60 02 04 08 10 20 40 c0 80 f1 03 04 08 10 20 40 80 40 4e c0 80 c9 55 26 30 01 02 04 08 10 20 60 c0 f8 01 02 04 08 10 20 40 20 27 60 c0 e4 2a 13 98 00 01 02 04 08 10 30 60 fc 00 01 02 04 08 10 20 90 13 30 60 72 95 09 4c 80 00 01 02 04 08 18 30 7e 80 00 01 02 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 01 03 c6 0f 10 20 40 80 00 01 02 39 01 03 26 57 99 c0 04 08 10 20 40 80 80 01 e3 07 08 10 20 40 80 00 81 9c 80 01 93 ab 4c 60 02 04 08 10 20 40 c0 80 f1 03 04 08 10 20 40 80 40 4e c0 80 c9 55 Data Ascii: @9&W @ @L` @ @@NU&0 ` @ '`*0` 0`rL0~0&@?@\e @ @rL2 @ @9&W @ @L` @ @@NU
2024-05-24 22:56:31 UTC	587	IN	Data Raw: 80 00 81 9c 80 01 93 ab 4c 60 02 04 08 10 20 40 c0 80 f1 03 04 08 10 20 40 80 40 4e c0 80 c9 55 26 30 01 02 04 08 10 20 60 c0 f8 01 02 04 08 10 20 40 20 27 60 c0 e4 2a 13 98 00 01 02 04 08 10 30 60 fc 00 01 02 04 08 10 20 90 13 30 60 72 95 09 4c 80 00 01 02 04 08 18 30 7e 80 00 01 02 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 01 03 c6 0f 10 20 40 80 00 01 02 39 01 03 26 57 99 c0 04 08 10 20 40 80 80 01 e3 07 08 10 20 40 80 00 81 9c 80 01 93 ab 4c 60 02 04 08 10 20 40 c0 80 f1 03 04 08 10 20 40 80 40 4e c0 80 c9 55 26 30 01 02 04 08 10 20 60 c0 f8 01 02 04 08 10 20 40 20 27 60 c0 e4 2a 13 98 00 01 02 04 08 10 Data Ascii: L` @ @@NU&0 ` @ '`0` 0`rL0~0&@?@\e @ @rL2 @ @9&W @ @L` @ @@NU&0 ` @ '`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49731	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:31 UTC	618	OUT	GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:31 UTC	657	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:31 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-1516" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183438 Expires: Sat, 25 May 2024 02:56:31 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1277ad6f7cc-BNA
2024-05-24 22:56:31 UTC	712	IN	Data Raw: 31 35 31 36 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 35 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 35 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 37 38 2e 33 34 34 31 20 32 2e 35 48 37 32 2e 31 36 35 36 43 37 31 2e 37 35 20 32 2e 35 20 37 31 2e 33 38 39 38 20 32 2e 38 30 34 34 33 20 37 31 2e 33 30 36 37 20 33 2e 32 31 39 35 36 4c 36 38 2e 38 31 33 32 20 31 39 2e 30 32 32 32 43 36 38 2e 37 35 37 38 20 31 39 2e 33 32 36 36 20 36 39 2e 30 30 37 31 20 31 39 2e 36 30 33 34 20 36 39 2e 33 31 31 39 20 31 39 2e 36 30 33 34 48 37 32 2e 34 37 30 34 43 37 32 2e 37 37 35 31 Data Ascii: 1516<svg width="105" height="24" viewBox="0 0 105 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M78.3441 2.5H72.1656C71.75 2.5 71.3898 2.80443 71.3067 3.21956L68.8132 19.0222C68.7578 19.3266 69.0071 19.6034 69.3119 19.6034H72.4704C72.7751
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 37 35 32 20 37 2e 34 38 31 35 37 20 37 39 2e 30 36 34 34 20 38 2e 32 35 36 34 38 5a 22 20 66 69 6c 6c 3d 22 23 30 30 39 43 44 45 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 34 2e 33 37 34 37 20 32 2e 35 48 32 38 2e 31 39 36 32 43 32 37 2e 37 38 30 37 20 32 2e 35 20 32 37 2e 34 32 30 35 20 32 2e 38 30 34 34 33 20 32 37 2e 33 33 37 34 20 33 2e 32 31 39 35 36 4c 32 34 2e 38 34 33 38 20 31 39 2e 30 32 32 32 43 32 34 2e 37 38 38 34 20 31 39 2e 33 32 36 37 20 32 35 2e 30 33 37 38 20 31 39 2e 36 30 33 34 20 32 35 2e 33 34 32 35 20 31 39 2e 36 30 33 34 48 32 38 2e 32 37 39 34 43 32 38 2e 36 39 35 20 31 39 2e 36 30 33 34 20 32 39 2e 30 35 35 31 20 31 39 2e 32 39 39 20 32 39 2e 31 33 38 33 20 31 38 2e 38 38 33 38 4c 32 39 2e 38 30 33 32 20 31 34 2e 36 32 31 38 43 Data Ascii: 752 7.48157 79.0644 8.25648Z" fill="#009CDE"/><path d="M34.3747 2.5H28.1962C27.7807 2.5 27.4205 2.80443 27.3374 3.21956L24.8438 19.0222C24.7884 19.3267 25.0378 19.6034 25.3425 19.6034H28.2794C28.695 19.6034 29.0551 19.299 29.1383 18.8838L29.8032 14.6218C
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 43 34 33 2e 31 38 35 32 20 31 32 2e 32 31 34 31 20 34 34 2e 35 34 32 38 20 31 31 2e 30 32 34 20 34 36 2e 32 30 35 32 20 31 31 2e 30 32 34 43 34 37 2e 30 33 36 34 20 31 31 2e 30 32 34 20 34 37 2e 37 32 39 20 31 31 2e 33 30 30 38 20 34 38 2e 31 37 32 33 20 31 31 2e 38 32 36 36 43 34 38 2e 36 34 33 33 20 31 32 2e 33 38 30 31 20 34 38 2e 38 33 37 33 20 31 33 2e 30 39 39 37 20 34 38 2e 36 39 38 37 20 31 33 2e 39 32 39 39 5a 22 20 66 69 6c 6c 3d 22 23 30 30 33 30 38 37 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 39 36 2e 37 36 38 36 20 38 2e 31 37 33 34 38 48 39 33 2e 38 30 34 31 43 39 33 2e 35 35 34 37 20 38 2e 31 37 33 34 38 20 39 33 2e 33 33 33 31 20 38 2e 33 36 37 32 31 20 39 33 2e 33 30 35 33 20 38 2e 36 31 36 32 39 4c 39 33 2e 31 36 36 38 20 39 2e 34 34 36 Data Ascii: C43.1852 12.2141 44.5428 11.024 46.2052 11.024C47.0364 11.024 47.729 11.3008 48.1723 11.8266C48.6433 12.3801 48.8373 13.0997 48.6987 13.9299Z" fill="#003087"/><path d="M96.7686 8.17348H93.8041C93.5547 8.17348 93.3331 8.36721 93.3053 8.61629L93.1668 9.446
2024-05-24 22:56:31 UTC	1369	IN	Data Raw: 43 36 39 2e 32 30 31 32 20 38 2e 36 34 33 38 32 20 36 38 2e 39 35 31 38 20 38 2e 31 37 33 33 34 20 36 38 2e 35 33 36 32 20 38 2e 31 37 33 33 34 5a 22 20 66 69 6c 6c 3d 22 23 30 30 33 30 38 37 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 30 30 2e 32 36 20 32 2e 39 31 34 39 37 4c 39 37 2e 37 33 38 33 20 31 38 2e 39 39 34 34 43 39 37 2e 36 38 32 39 20 31 39 2e 32 39 38 38 20 39 37 2e 39 33 32 33 20 31 39 2e 35 37 35 36 20 39 38 2e 32 33 37 31 20 31 39 2e 35 37 35 36 48 31 30 30 2e 37 38 36 43 31 30 31 2e 32 30 32 20 31 39 2e 35 37 35 36 20 31 30 31 2e 35 36 32 20 31 39 2e 32 37 31 31 20 31 30 31 2e 36 34 35 20 31 38 2e 38 35 36 4c 31 30 34 2e 31 33 38 20 33 2e 30 35 33 33 35 43 31 30 34 2e 31 39 34 20 32 2e 37 34 38 39 32 20 31 30 33 2e 39 34 34 20 32 2e 34 Data Ascii: C69.2012 8.64382 68.9518 8.17334 68.5362 8.17334Z" fill="#003087"/><path d="M100.26 2.91497L97.7383 18.9944C97.6829 19.2988 97.9323 19.5756 98.2371 19.5756H100.786C101.202 19.5756 101.562 19.2711 101.645 18.856L104.138 3.05335C104.194 2.74892 103.944 2.4
2024-05-24 22:56:31 UTC	587	IN	Data Raw: 32 32 38 33 32 20 35 2e 31 35 34 36 34 43 36 2e 32 36 38 30 36 20 34 2e 38 38 36 36 20 36 2e 34 32 37 30 33 20 34 2e 36 38 30 34 31 20 36 2e 36 34 35 36 32 20 34 2e 35 35 36 37 43 36 2e 37 34 34 39 38 20 34 2e 35 31 35 34 36 20 36 2e 38 36 34 32 20 34 2e 34 37 34 32 33 20 36 2e 39 36 33 35 36 20 34 2e 34 37 34 32 33 48 31 31 2e 37 33 32 37 43 31 32 2e 32 38 39 31 20 34 2e 34 37 34 32 33 20 31 32 2e 38 32 35 36 20 34 2e 35 31 35 34 36 20 31 33 2e 33 30 32 35 20 34 2e 35 39 37 39 34 43 31 33 2e 34 34 31 36 20 34 2e 36 31 38 35 36 20 31 33 2e 35 38 30 37 20 34 2e 36 33 39 31 38 20 31 33 2e 36 39 39 39 20 34 2e 36 38 30 34 31 43 31 33 2e 38 33 39 20 34 2e 37 30 31 30 33 20 31 33 2e 39 35 38 33 20 34 2e 37 34 32 32 37 20 31 34 2e 30 37 37 35 20 34 2e 37 38 33 Data Ascii: 22832 5.15464C6.26806 4.8866 6.42703 4.68041 6.64562 4.5567C6.74498 4.51546 6.8642 4.47423 6.96356 4.47423H11.7327C12.2891 4.47423 12.8256 4.51546 13.3025 4.59794C13.4416 4.61856 13.5807 4.63918 13.6999 4.68041C13.839 4.70103 13.9583 4.74227 14.0775 4.783
2024-05-24 22:56:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49732	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:31 UTC	617	OUT	GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	656	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:31 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-e1e" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183438 Expires: Sat, 25 May 2024 02:56:31 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1278dbdf7e0-BNA
2024-05-24 22:56:32 UTC	713	IN	Data Raw: 65 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 34 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 34 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e5 bd a2 e7 8a b6 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 e8 ae be e7 bd ae 2d e9 85 8d e7 bd ae e6 94 af e4 bb 98 e6 b8 a0 e9 81 93 22 20 73 74 Data Ascii: e1e<?xml version="1.0" encoding="UTF-8"?><svg width="80px" height="41px" viewBox="0 0 80 41" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title></title> <g id="-" st
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 34 34 39 36 34 2c 32 35 2e 38 30 36 36 32 37 33 20 35 33 2e 34 38 36 32 34 31 2c 32 35 2e 32 34 30 37 34 37 31 20 35 33 2e 37 33 30 36 32 30 35 2c 32 34 2e 36 37 30 33 33 39 38 20 4c 35 38 2e 33 30 39 39 33 36 2c 32 34 2e 36 37 30 33 33 39 38 20 43 35 38 2e 34 35 39 34 36 31 39 2c 32 35 2e 32 35 32 30 36 34 37 20 35 38 2e 36 30 37 30 31 31 38 2c 32 35 2e 38 32 34 37 33 35 35 20 35 38 2e 37 35 34 35 36 31 37 2c 32 36 2e 33 39 37 39 37 32 31 20 4c 36 32 2c 32 36 2e 33 39 37 39 37 32 31 20 43 36 31 2e 30 34 32 39 30 32 2c 32 32 2e 34 34 38 36 39 34 31 20 36 30 2e 30 39 35 30 32 35 38 2c 31 38 2e 35 33 36 37 36 34 32 20 35 39 2e 31 33 38 35 38 36 35 2c 31 34 2e 35 39 34 32 37 36 38 20 4c 35 39 2e 31 33 38 35 38 36 35 2c 31 34 2e 35 39 34 32 37 36 38 20 5a 20 Data Ascii: 44964,25.8066273 53.486241,25.2407471 53.7306205,24.6703398 L58.309936,24.6703398 C58.4594619,25.2520647 58.6070118,25.8247355 58.7545617,26.3979721 L62,26.3979721 C61.042902,22.4486941 60.0950258,18.5367642 59.1385865,14.5942768 L59.1385865,14.5942768 Z
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 37 2e 34 30 39 36 38 39 36 2c 31 39 2e 37 39 33 30 31 38 33 20 34 36 2e 38 38 36 30 31 39 34 2c 31 39 2e 35 35 38 37 34 33 39 20 34 36 2e 33 36 36 33 30 31 33 2c 31 39 2e 33 31 37 36 37 38 39 20 43 34 35 2e 38 33 33 34 30 39 32 2c 31 39 2e 30 37 30 39 35 35 31 20 34 35 2e 32 37 31 35 33 34 2c 31 38 2e 38 36 31 30 31 33 36 20 34 34 2e 38 32 30 33 32 31 32 2c 31 38 2e 35 30 32 38 31 31 34 20 43 34 34 2e 32 35 39 37 36 33 35 2c 31 38 2e 30 35 37 34 36 33 37 20 34 34 2e 33 31 38 33 38 38 32 2c 31 37 2e 35 32 31 35 37 35 31 20 34 34 2e 39 35 39 33 30 38 2c 31 37 2e 31 36 32 38 30 37 20 43 34 35 2e 33 37 30 33 33 39 37 2c 31 36 2e 39 33 32 34 39 33 38 20 34 35 2e 38 33 31 34 33 33 2c 31 36 2e 38 35 38 33 36 33 35 20 34 36 2e 33 31 34 39 32 32 33 2c 31 36 2e 38 Data Ascii: 7.4096896,19.7930183 46.8860194,19.5587439 46.3663013,19.3176789 C45.8334092,19.0709551 45.271534,18.8610136 44.8203212,18.5028114 C44.2597635,18.0574637 44.3183882,17.5215751 44.959308,17.162807 C45.3703397,16.9324938 45.831433,16.8583635 46.3149223,16.8
2024-05-24 22:56:32 UTC	170	IN	Data Raw: 31 36 38 20 4c 33 36 2e 38 32 37 35 39 37 37 2c 32 36 2e 34 31 33 38 31 36 38 20 43 33 37 2e 38 30 33 31 33 39 35 2c 32 32 2e 34 38 30 39 34 39 33 20 33 38 2e 37 37 36 30 34 36 34 2c 31 38 2e 35 35 38 38 33 33 35 20 33 39 2e 37 35 36 31 39 39 31 2c 31 34 2e 36 30 36 37 32 36 31 20 4c 33 36 2e 32 32 32 39 30 36 38 2c 31 34 2e 36 30 36 37 32 36 31 20 5a 22 20 69 64 3d 22 e5 bd a2 e7 8a b6 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0d 0a Data Ascii: 168 L36.8275977,26.4138168 C37.8031395,22.4809493 38.7760464,18.5588335 39.7561991,14.6067261 L36.2229068,14.6067261 Z" id=""></path> </g> </g></svg>
2024-05-24 22:56:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49727	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:31 UTC	618	OUT	GET /uploader/e9965ee36481434b14cbe1bea3260a80.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	559	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:31 GMT Content-Type: image/png Content-Length: 1913256 Connection: close x-oss-request-id: 665076C39EAA1A33371B8654 ETag: "869A21755C2540755FEA361E7E445837-2" Last-Modified: Tue, 31 Oct 2023 09:39:45 GMT x-oss-object-type: Multipart x-oss-hash-crc64ecma: 15260248135148437500 x-oss-storage-class: Standard x-oss-server-time: 32 CF-Cache-Status: HIT Expires: Sat, 25 May 2024 02:56:31 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1279ddbf7e0-BNA
2024-05-24 22:56:32 UTC	810	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 58 00 00 02 69 08 06 00 00 00 99 f5 86 97 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 ff ba 49 44 41 54 78 5e 4c fd 07 9c a4 d7 75 1d 88 9f ca 39 77 75 ce 93 73 4e 98 41 0e 24 08 10 20 c1 6c 2a 50 a2 b2 b5 b2 24 47 69 bd f6 ae bc 5e af e4 24 ef 5f 92 ff 92 4c 45 4b 22 29 92 22 44 10 39 a7 c1 e4 3c d3 d3 3d 9d 73 77 e5 9c 6b cf 79 45 e8 b7 35 68 74 75 d5 17 de bb ef de 73 cf bd ef be f7 59 be f1 95 ed ff ca 61 6d f4 a0 5c 47 1d 36 34 1c 76 8c 8c f7 a1 bf cb 8b b9 b9 4d b8 e2 3d e8 da f7 24 a6 36 ea a8 b5 81 66 be 8c 07 9e 7d 0e a3 db 76 e1 3f fd 9b 7f 89 53 a7 8e e0 d0 e8 08 5e fe ce 5f 61 66 6a 12 55 8f 0f 07 0f 1e c7 56 db 06 be f7 c6 05 f4 9d 78 14 Data Ascii: PNGIHDRXisRGBgAMAaIDATx^Lu9wusNA$ l*P$Gi^$_LEK")"D9<=swkyE5htusYam\G64vM=$6f}v?S^_afjUVx
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 65 83 c7 1f c0 fe d3 0f c0 c9 fb be fa 9d 3f 47 c8 e5 43 c3 ee 43 7e 23 c1 a6 d9 d1 b2 02 a1 40 18 2d 5b 0b 1e 97 15 7e 9f 03 76 9f 07 bf fd 5b 3f 87 be e1 38 0a 54 58 9b af 0f 4d ea 85 85 c7 a2 46 7b b1 ca aa 1c 68 53 1e ba 97 8d 63 54 a7 ad d9 9c e0 51 0e da 57 08 17 5e f9 26 7e f8 e6 07 38 7d f8 24 2c b5 32 da 4e 07 bc 36 2b 75 90 7d 7a e8 19 5a 8c cb d8 85 6c d3 de 76 01 16 07 40 5b 6c 54 33 70 39 dc fc 2e 81 b7 ce 5e 47 81 d7 ab 4a 00 6c a8 cf eb 32 6d 70 b1 fd 85 72 0e e7 cf 7d 80 90 c7 83 a7 9f 79 1a 1f 7e 70 0e b3 33 33 f8 c7 bf fe 4f e0 63 1f 96 a7 a6 30 b6 f7 01 d4 5a 4d 54 33 59 bc fa c2 77 e0 6b cc e2 f0 81 5d f8 d6 37 df 43 34 18 46 2c 10 c0 27 9f 39 82 3f fa fe fb b8 ba 90 c7 97 3e f3 2c ec 0e 0b 8a 85 2a ed c5 89 6a b5 86 56 ab 8e 26 fb 69 Data Ascii: e?GCC~#@-[~v[?8TXMF{hScTQW^&~8}$,2N6+u}zZlv@[lT3p9.^GJl2mpr}y~p33Oc0ZMT3Ywk]7C4F,'9?>,*jV&i
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 40 8f 3f 8a 72 62 06 d5 e4 2c 39 44 0a a9 0c 4f b2 87 31 79 77 19 2f 7c 78 13 ae 08 fd 2b ff d5 a9 a3 56 2a 8c cd ae f7 fc 84 97 95 5d 36 f4 5e ba e7 a1 a6 d7 2d d4 ad 26 ef d5 a0 6f b1 13 ce 28 77 61 19 81 b6 c1 7f fa ce 49 dd b2 f0 ef 32 fd 53 80 36 2d cb 32 3e 92 ed e6 05 f8 17 f9 07 6d 88 4a c5 cf 75 ed 86 f1 bb fa be 58 a5 4d c9 c6 50 86 cb e2 84 c3 4a 7b b1 f3 1c aa aa 45 8a 4c dd 10 0a 06 03 41 94 39 76 46 49 39 b6 0e 8e 79 95 fc ab d5 68 a3 4d 2c d4 cb 42 dd f6 50 c7 64 c3 a4 98 6c 9b 44 6a 33 36 d4 6a 10 7b 69 9f 4d da 43 96 e7 d5 6b 55 f8 42 3e 64 33 45 10 b6 4d 9b d4 36 3b c7 a1 d1 24 76 52 2f 84 73 56 ca bc c6 fb 55 38 9e 0e a3 db ec 13 c7 22 ec f6 a1 25 7c e2 df 36 36 d3 4a 6c 2a 50 47 f5 72 58 89 2b c2 31 7e 26 6c a8 b6 7e 84 1f 6c 4f 9d 6d Data Ascii: @?rb,9DO1yw/\|x+V]6^-&o(waI2S6-2>mJuXMPJ{ELA9vFI9yhM,BPdlDj36j{iMCkUB>d3EM6;$vR/sVU8"%\|66JlPGrX+1~&l~lOm
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 18 7f ff c7 ff 11 7b 0f 1e c1 d3 5f ff 35 dc 5e 58 c4 c0 d8 38 3e 78 e1 45 dc 78 ff 2d b8 fc 56 f4 92 b0 eb 5e 60 c0 1b a0 91 6c 32 10 3b 3d 1a 40 81 01 de df 5c 9f 63 70 5d c4 27 b6 0f e2 a1 dd 03 f8 ff bf 35 81 1a c1 fa d7 1e dd 8e 89 14 49 54 22 4b 43 b1 a3 7f cb 38 7e eb cf 7f 80 9f ff 89 af e3 c0 c9 fb f1 da 5f fd 11 3c d5 39 6c 19 8a 32 a0 ea 45 d6 3e 80 ef 7d f8 11 2c 24 5b bd 1c d0 2e f6 63 7e 6d 0d 0b 0c 50 a7 16 12 ec 1f 81 ce 67 a1 d1 53 c9 4a 35 ec 1e 09 e2 81 83 7b 70 e1 f6 12 2e 5d 9b c0 e8 f6 51 fc ce 6f ff 27 7c fd 9f fc af 18 1f 88 e3 f8 f1 a3 f8 f6 77 5f c6 96 e1 5e 06 dc 07 09 d0 1e 6c dd 3a 8a 12 9d cf dc dc 0c 01 2c 84 26 9d 54 9d 46 18 27 39 3a 72 e2 21 2a 32 49 66 2a 89 b9 c5 39 78 22 51 b4 18 78 7c f4 ce bb c8 24 b3 34 32 e0 13 0f Data Ascii: {_5^X8>xEx-V^`l2;=@\cp]'5IT"KC8~_<9l2E>},$[.c~mPgSJ5{p.]Qo'\|w_^l:,&TF'9:r!2If9x"Qx\|$42
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: ce 4d f2 46 d8 32 f7 b2 31 f0 70 7b 03 46 77 2d 6c 43 8b 41 af 85 9f 29 30 2c 37 0a 48 a4 ca 24 71 65 33 2e e9 8d 04 b1 b5 41 fd 4f 51 d6 49 da 4a ce e8 b5 85 38 20 59 54 8a 25 5e db 4e 3f 43 cc a3 fc 53 c9 0c 65 cf 00 89 38 c0 86 62 7d e1 92 91 ed 70 dc 89 5d c3 7e 8c f7 7a 10 f3 35 30 c8 e0 23 1a 54 20 a8 04 86 05 4b f4 c7 1b 99 36 03 85 3a 83 47 2b fc 2e 8e 0f d5 57 f7 f1 85 9d e8 0a 39 10 a3 7f 57 9a c1 46 7e 52 24 1b ab 11 b3 7b 06 23 48 51 17 ca 85 1a ed 89 fd e6 d8 38 da 94 0d 75 c8 c2 71 b4 db 2b 08 74 6f 43 60 e4 18 0a e9 0d 06 f7 6d e4 37 37 29 08 62 47 79 83 32 62 df 0d a9 e5 75 d9 df 62 83 41 af b8 34 f1 29 47 75 d9 c8 96 b1 9c b7 60 3d dd c2 85 e9 2c f9 49 0b 41 ea e9 f1 6d dd f8 d2 17 7f 0c ce f0 00 12 77 cf e1 e2 a5 b3 98 5d a3 6d d2 d7 de Data Ascii: MF21p{Fw-lCA)0,7H$qe3.AOQIJ8 YT%^N?CSe8b}p]~z50#T K6:G+.W9WF~R${#HQ8uq+toC`m77)bGy2bubA4)Gu`=,IAmw]m
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 54 a6 1c 75 ab dd 76 61 95 7e 37 57 21 36 5b bd f4 7f e4 84 8c d7 ac a1 d8 db b6 74 d5 f6 b5 6c ae 36 da 6e 7a b1 92 a9 93 20 a7 f1 3f be f3 01 7e 78 6e 1e 75 57 17 5e bf 31 8f 64 26 8f 83 74 c4 9a 46 d0 2c 51 9b 83 f4 c1 87 ef 21 12 f6 63 ff a1 fd b8 3b 79 1d ab 33 d3 d8 c6 c0 3b 1c ed 62 23 da 38 77 6d 86 e4 c3 85 be ee 18 36 d7 d6 e9 e9 aa ec 18 07 9a 02 ba 73 67 da 18 f2 23 0f 3f 04 af a6 f2 8b 65 f4 f4 c7 e0 ca 97 70 fb ed 8f 10 a7 53 f0 f0 58 52 69 b8 08 3c 22 36 ca f4 79 29 94 26 15 df 47 01 58 69 dc 65 12 cb 06 1d 6e 8d 81 61 95 ca 53 2a 36 90 4a a4 50 53 f4 c1 eb fa 9d 5e 7e 56 c0 0e 12 9b 23 07 b7 63 79 35 8d 95 b5 34 07 9b 6c 28 e0 27 a0 0e 74 0c 9c 0a 2c 2b 11 68 09 08 44 28 1b 34 50 2f 89 8d bf 9a a3 52 13 b4 a9 10 15 0e 98 12 3f 9a 79 6c cb Data Ascii: Tuva~7W!6[tl6nz ?~xnuW^1d&tF,Q!c;y3;b#8wm6sg#?epSXRi<"6y)&GXienaS*6JPS^~V#cy54l('t,+hD(4P/R?yl
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: e4 41 c1 83 f4 48 3f 22 90 0c 41 38 22 0d 93 00 b2 a9 04 86 72 7d fe fb cf e3 dc b9 09 bc f9 d6 3b f8 de 4b 3f c4 4b af bf 8d e7 5f 7a 0d ef 7d 70 1e e7 cf 5d c0 a5 ab 97 71 f9 f2 45 dc ba 79 13 f7 a6 ee 31 a8 5d c0 dc da 1a 66 f9 7e df f8 28 86 06 a2 68 54 f2 e8 27 a1 8d c9 57 91 e8 76 87 48 8a 19 ec 0d 74 87 d0 13 f5 a0 8f 24 b7 27 e2 c1 e8 60 17 46 fb 23 e8 8b 78 31 d4 13 c6 48 4f 88 3f 61 0c 75 07 31 dc 17 46 7f 3c 80 a1 de 10 86 ba 42 e8 8b fa 31 d6 1f 47 5f cc 47 79 86 30 40 52 d7 47 82 3c dc db a9 34 9a 9c 5b 36 89 49 a5 bb 9a b4 b7 8a 02 40 ea 80 82 a3 2a c7 52 a0 a5 99 5b 2f 7d 8d 88 92 c6 57 f6 df e2 f8 e9 6f 2b f5 49 a4 d1 47 ac d5 6f f9 57 43 bc 48 66 44 54 65 f3 46 d7 84 83 24 61 0a 80 2c 34 06 cd ce 2a 70 b4 11 1b 35 1b db 34 15 3f 4a 8c 58 Data Ascii: AH?"A8"r};K?K_z}p]qEy1]f~(hT'WvHt$'`F#x1HO?au1F<B1G_Gy0@RG<4[6I@R[/}Wo+IGoWCHfDTeF$a,4p54?JX
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 6a 2b 51 a0 71 a4 5d 2b a1 2a ee 17 0a c6 c9 91 19 f8 13 67 2c 3c 2f 9d cd 1a bd 77 aa d2 9d fd b4 f0 38 f1 f9 3c e3 9a 20 c7 c4 c9 73 f3 8c 97 dd 6c af 5b ba c6 b1 50 b1 81 2a 7f 6b b4 dd a0 5f 49 2a c5 1a c4 16 5e 47 3a 55 a7 ad b8 e9 af eb d4 71 0f 71 4d 3c 69 31 99 33 55 31 eb e4 9d d2 99 de 88 cf c8 77 24 1e 26 77 76 33 8e 2a 52 27 19 2f d1 ae 0d 36 50 fe a6 72 8e 84 4f b2 56 65 aa 99 2c e5 3d 54 15 d6 a2 8d e9 78 c9 5d 95 84 b2 0d 61 4d 53 b6 47 39 98 18 80 6f c4 43 65 ff 4a 8a 49 1f f5 b7 04 25 bf af 03 c5 31 84 05 b2 13 61 b8 fa a1 b8 52 71 86 f8 82 12 b5 eb 9b 1b 58 4e 33 1e a8 b5 90 22 9e d6 f9 fd 30 63 53 ba 5e 8c 93 f7 b8 e9 23 16 d6 d3 8c ed 3c 08 29 8e a4 1e 6e 92 2b fb d9 a6 20 e5 20 fb 26 0a 10 77 a8 9b e5 a2 49 18 0b 6f 85 87 2e a7 df d8 Data Ascii: j+Qq]+g,</w8< sl[Pk_I^G:UqqM<i13U1w$&wv3R'/6PrOVe,=Tx]aMSG9oCeJI%1aRqXN3"0cS^#<)n+ &wIo.
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 7d 8f 3d 0a 8b 9f 36 fa 67 7f 84 d0 c1 01 44 77 ed 45 8d 40 6e a3 3c ab 4a 22 d5 0b 1c e7 04 75 b9 28 55 30 b3 67 22 87 1c 2a e3 2c 6c 56 11 22 95 65 f2 6f e2 a6 08 5f ad 9a 23 81 fa 11 d9 b5 ca 21 8a 38 92 b8 10 53 df 39 77 0d 13 4b 9b 74 76 a2 0a b4 a7 96 2a bd 5c 18 18 ea 81 66 0a d6 89 b5 73 cb 4b bc 0e 6d 87 fe c3 62 d5 52 07 3a 4b 1e d3 4b 1d 33 b3 67 c4 e8 98 df 8d de b0 9b d8 14 c7 ae 2d c3 18 19 ec c2 40 57 10 a3 03 bd 18 ea 8b 61 a8 3b 86 c1 ee 38 86 7b ba 31 36 30 80 61 06 d0 43 3d 3d c4 91 38 83 ea 18 e2 43 83 0c fc ba f1 ca 1b ef 62 72 7a 99 f7 a1 dc 9b 15 04 3c d4 d5 b1 d1 ce cf f6 9d 48 65 33 48 a6 32 58 59 59 41 b9 94 27 0e 93 c8 53 07 7b fa fb 71 f2 f8 69 4c df 9b 46 94 81 f1 91 23 87 50 48 ac 19 dc 17 b6 29 1c 13 e9 b5 50 26 46 7f 39 1e Data Ascii: }=6gDwE@n<J"u(U0g",lV"eo_#!8S9wKtv\fsKmbR:KK3g-@Wa;8{160aC==8Cbrz<He3H2XYYA'S{qiLF#PH)P&F9
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: bd 82 8d 3e 94 5d a3 bc dc e4 95 4e 64 b2 79 ea 7f 12 85 6a 0b 33 b3 2b a8 68 a9 31 f9 4e b5 d6 46 ba 58 41 83 7a 61 b8 a1 db 8e 60 38 c6 36 35 91 4d 14 c9 83 9b e6 dc 02 f1 50 32 2b 52 ff f2 c5 12 fb d6 b1 07 1b 75 50 09 27 97 3f c4 f7 1a 31 a5 3f ed c6 fe 1d 4a 92 79 54 8d 40 5e 42 e5 94 9d 28 c1 6c 7c 20 31 4d cb 4d 54 71 55 25 b7 f1 52 6f e5 2f a3 a1 10 ed 1d 26 f9 9f 27 2e 28 21 11 ed 8d f1 7e 36 64 c8 f7 94 44 2c 71 6c 95 bc 73 70 4c 3c ec 6b bb c1 60 9c 98 b0 65 78 c4 4c 0a 99 4a 33 da af 74 d1 cb 40 dc e5 0e d0 16 bb a8 37 0e 6c 72 38 d3 f4 21 d9 ba 1d 05 c6 21 15 25 9a 2d 2e b4 29 07 e9 6c 99 ed e6 d0 c1 4a bc 51 e5 9f 93 be ad 41 5c f7 72 1c 85 47 aa d2 d0 4a 0d 2d 09 54 25 be 6c b9 49 19 54 aa 0d ca b3 c8 f1 66 f0 ef f6 99 44 97 92 8c 8a df 94 Data Ascii: >]Ndyj3+h1NFXAza`865MP2+RuP'?1?JyT@^B(l\| 1MMTqU%Ro/&'.(!~6dD,qlspL<k`exLJ3t@7lr8!!%-.)lJQA\rGJ-T%lITfD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49730	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:31 UTC	618	OUT	GET /uploader/5d20048868877141ba3fb9ce2a33ade5.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	559	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:32 GMT Content-Type: image/png Content-Length: 780254 Connection: close x-oss-request-id: 66511B20D31A2338325A56F7 ETag: "94FBFA0D40FB6AD6C10F7B875AF042CC-1" Last-Modified: Tue, 31 Oct 2023 10:03:33 GMT x-oss-object-type: Multipart x-oss-hash-crc64ecma: 5954505726984985619 x-oss-storage-class: Standard x-oss-server-time: 204 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:56:32 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1279eabf7c8-BNA
2024-05-24 22:56:32 UTC	810	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 18 08 06 00 00 00 77 eb 2e 48 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec fd 75 78 54 59 a3 ef fb 16 10 88 bb 2b 1a 88 12 82 26 b8 c6 70 77 77 77 f7 c6 dd 1d ba 69 37 ba 1b 1a 77 77 f7 76 79 df b5 d6 bb d6 da 4b f6 3d fb 3e fb 9c 73 9f 7b ee ef ce 31 d2 05 23 c5 8f 90 41 26 45 42 e6 1f 9f a7 92 4a 8d 31 47 cd aa 54 ba be cc 9e 65 fb e9 e1 39 14 c6 0f f7 cf 14 ca d3 7b a7 f3 c5 c6 a8 9e dc 3d f5 46 3d be 73 32 5f 8f 6e 9f c8 17 1b 63 a6 87 b7 8e e7 8b ad 49 c5 c6 38 d3 83 9b c7 0a e5 fe 8d a3 6f 99 58 83 e5 4d b9 77 fd 68 be ee 5f 2b de ee 5d 3d 92 2f Data Ascii: PNGIHDRw.HsRGBgAMAapHYsodIDATx^uxTY+&pwwwi7wwvyK=>s{1#A&EBJ1GTe9{=F=s2_ncI8oXMwh_+]=/
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 1e ca ed ac e0 9e 1b d6 5f 86 45 76 15 8b ec 2a 16 b9 8b 12 16 d1 75 b0 48 6e a6 d7 8d ed 82 15 dc 8d 4b 2b b8 e7 8b 45 74 1d 34 b2 ab 48 64 57 b1 48 ab 83 46 56 05 1b a3 62 91 26 0f 12 19 75 b0 08 a9 e2 91 5d 45 22 b8 33 91 7d a6 83 dd 67 2d e4 31 d5 c2 e6 d4 c0 1e 53 15 1b 63 26 b6 4d 1d 6c 4e 15 1b a3 83 cd a9 a2 bf 53 25 08 0b e1 2a 16 d9 55 6c 4c 41 59 c1 dd 0a ee 96 92 8d 85 f4 82 b2 82 bb f3 59 c1 bd 90 58 04 77 26 16 d1 75 b0 08 ee 4c 2c a2 eb e0 11 dc 99 5e 8c 5c 16 f3 b0 c8 ae e2 11 b6 f8 70 0c d6 8e d8 98 a2 e4 65 6b 7d 16 84 95 eb de 0c 1e ca ed 5e 15 dc df be dc fd 64 67 76 70 7f 15 16 d9 55 2c b2 ab 58 e4 2e 4a 58 44 d7 c1 22 b9 a9 5e 33 b6 0b 56 70 37 2e ad e0 9e 2f 16 d1 75 d0 c8 ae 22 91 5d c5 22 ad 0e 1a 59 15 6c 8c 8a 8d c9 83 44 44 33 Data Ascii: _EvuHnK+Et4HdWHFVb&u]E"3}g-1Sc&MlNS%UlLAYYXw&uL,^\pek}^dgvpU,X.JXD"^3Vp7./u"]"YlDD3
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 9f d9 58 84 d7 c1 22 7b 1e 2f 39 87 bb 50 1c 82 bb e3 3f 10 38 62 a1 dc 2c 45 21 b8 ab 58 6c 77 bc ee 75 99 1d e2 ed 58 64 57 d1 c8 ae 22 91 5d 45 23 6d 51 42 22 6b 89 c2 f6 89 06 16 61 9d e9 8f 9f f2 f7 fb 8f 37 f3 c5 c6 e8 60 6b 32 13 8b e0 3a 58 84 d7 c1 d6 94 07 89 90 2a 16 21 de 25 2c 84 3b cb bb 70 84 bb c5 52 18 ec 35 46 0d 9c 8e 3f 73 36 c7 d7 43 47 6c 8c 4a bd 2f 0c 0b e9 05 55 90 e0 fe 2a 6c 4d 2a 76 9f 54 f6 d7 b0 d7 c5 e6 d4 c1 1e 13 1d 6c 4e 95 e3 fe 78 eb c1 bd b0 58 24 57 b1 31 2a 36 46 c5 22 ba 0e 16 c1 0b c3 31 78 b3 db a8 1c 6f ef 88 45 6e 15 1b a3 62 63 cc c4 22 b7 8a 45 72 33 b1 6d aa 58 44 56 39 06 76 47 6c 8c 99 d8 36 f2 04 6b 87 9f e9 52 e7 62 d8 18 15 1b a3 83 47 58 f3 b0 c8 ae 62 63 2c ce 94 37 b0 3b b2 47 ec 37 45 8d eb 8c fd 76 Data Ascii: X"{/9P?8b,E!XlwuXdW"]E#mQB"ka7`k2:X!%,;pR5F?s6CGlJ/UlMvTlNxX$W16F"1xoEnbc"Er3mXDV9vGl6kRbGXbc,7;G7Ev
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 28 5e bf 46 15 a4 56 8b 44 f3 b4 24 f4 6c df 02 1d 32 ea a3 41 6a 2c 9a d6 4d 90 47 b2 0f ea d1 46 06 f6 3d 9b 96 c9 79 be fc 60 13 fa 77 cd 96 b7 6f d5 20 45 aa 1a e5 87 30 9f d2 88 09 72 93 aa 44 f8 a0 5e 72 45 f9 b3 ec a6 a9 58 b3 78 2a 4e 1d fc 04 9f ec 5a 8d 69 63 fb 61 c2 f0 1e 58 b7 74 3a be fa 70 a3 5c e3 9e cd 4b 70 f4 db 0f e4 fe 14 a7 b8 11 ff 50 20 ee 8b 19 a7 94 79 95 97 c5 76 7b d0 56 af 7b 13 d4 78 fe 3a 68 64 57 59 c1 fd b5 59 c1 bd f0 58 64 57 d1 c8 ae 22 91 5d c5 22 6d 91 c2 22 b8 33 b1 35 15 23 34 c2 6a b9 51 28 2c 82 ab 58 64 57 b1 31 3a f8 7d 2a 41 1c 02 74 49 c3 22 ba 0e 16 d2 0b ca 1e 9d 58 08 b2 58 4a 02 f1 3b e8 78 9d 1a 38 1d 7f 56 d4 a8 6b 7d 1d 2c a4 17 94 15 dc 5f 8d ad 59 c5 c6 e4 e7 ad 07 f7 57 61 91 5d c5 22 b9 99 d4 e0 fd Data Ascii: (^FVD$l2Aj,MGF=y`wo E0rD^rEXxNZicaXt:p\KpP yv{V{x:hdWYYXdW"]"m"35#4jQ(,XdW1:}AtI"XXJ;x8Vk},_YWa]"
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 95 f2 b2 e7 8d fd f2 4d 53 63 2b c3 22 ad 8a 8d 51 d9 4f 0b 63 0f e8 ba 97 6c cd 3a 1c 5f ef 1d b1 31 2a f1 38 14 0a d9 67 66 62 fb 5c c5 c6 a8 1c 6f 6f 63 11 5c 8f 88 ee 85 c1 e6 7c 8e 45 78 15 8b f0 3a 1c 43 76 71 c3 22 b9 8a 8d 51 b1 31 2a 16 d9 55 0f 6f 15 16 0f e5 66 61 91 5e c5 23 ba 8e 17 23 72 49 c2 22 f8 cb 38 8e 95 51 fe ba 71 99 0f 1e 59 cd c3 b6 69 26 b6 4d cb 73 ec 83 68 55 6c 9f 9a 8b 87 f4 82 12 51 5d 9c 32 46 1c f9 2d 4e b7 22 4e 13 23 ce 77 be 73 fd 62 f9 c1 a6 c7 bf fb 18 27 f6 7f 82 af f6 6e c5 e8 81 dd b1 78 d6 04 54 0e f7 45 54 80 1b 92 2a 85 21 a1 42 08 aa 46 05 a0 52 98 0f 62 82 3c 64 04 17 3f 8b f4 77 95 91 dc 1e cb cb 07 7b 3e bb 4d 85 10 2f c4 46 fa cb 50 5e 39 d4 1d d5 c2 bd 50 35 c2 b8 2e dc 53 c6 f6 84 98 00 54 0c f5 46 98 4f Data Ascii: MSc+"QOcl:_18gfb\ooc\\|Ex:Cvq"Q1Uofa^##rI"8QqYi&MshUlQ]2F-N"N#wsb'nxTET*!BFRb<d?w{>M/FP^9P5.STFO
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 66 62 db 7c 97 b0 fb 6c 51 90 28 aa a2 af 19 26 62 db 34 13 8b 58 66 62 91 54 c5 42 bb 9d 15 dc ad e0 ce 9e 33 2a 16 da ed ac e0 5e 78 6c 9f 98 89 6d 53 07 9b d3 54 e4 77 42 e5 f8 7c b7 82 3b 89 d0 45 09 8b e0 ce c4 22 bb 8a 47 74 1d 3c 94 9b 85 45 76 15 8f e8 3a 9e 07 64 cb 8b 0a 1b dc 8b 3b 16 91 2d 05 c7 f6 a9 b9 5e 8c e8 3a c4 39 da 45 70 17 1f 82 2a 8e 74 7f 7a fb 3c 3e db bd 1e fd bb 66 cb f3 b0 8b f8 dd 20 b5 9a 3c 52 bd 7a 95 08 a4 c4 46 c9 a3 cf c5 51 ee c9 95 23 9e 9d 3a 46 44 75 35 ac 8b af 45 50 17 a7 8f 11 b7 11 a7 9a 11 31 5d 0d f3 e2 28 f9 08 6f 17 44 fa 94 95 97 e1 5e b9 e7 68 17 b1 5d 6c 23 26 c8 13 61 be 6e f0 77 2b 05 4f 17 5b 1e de 6e 2e 08 f6 c9 3d c5 4c 4c b0 8f 71 e9 8d c8 00 77 e3 f6 e5 10 e4 59 1a 01 e2 1f 04 0c 22 ba 57 89 f2 97 Data Ascii: fb\|lQ(&b4XfbTB3^xlmSTwB\|;E"Gt<Ev:d;-^:9Eptz<>f <RzFQ#:FDu5EP1](oD^h]l#&anw+O[n.=LLqwY"W
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 83 af db f3 e8 2e 2e fd 3d 4a 23 36 2a d4 58 57 00 82 3d dd 8d f5 ba 48 fe 6e 65 fe 92 bb 5d b1 3e 71 a4 7c 8d 6a 31 f2 3c ef e2 c8 fa f8 0a a1 88 2b 1f 22 e3 7f e5 08 7f 34 4d 4b c6 a4 51 fd f1 d9 fb 9b f0 ed 67 bb b0 74 de 44 f4 ef 9e 83 0e 59 0d b0 77 fb 2a e3 77 5d fc 3d 3a 23 4f 25 23 be be 75 f9 b0 f1 f7 c3 0a ee 8e 81 dc 6c 2c 92 9b 89 45 74 1d 2c a2 eb 60 21 bd a0 ac e0 6e 05 f7 42 23 91 d5 52 70 2c a2 eb 60 73 aa 68 24 35 11 db a6 8a 8d 29 4e 58 34 d0 c1 e6 2c 49 d8 73 42 c5 c6 68 21 51 d6 4c 34 32 99 88 85 50 15 0b ed 76 56 70 37 01 f9 9d 75 2a b6 26 0d ec 39 53 50 56 70 7f b5 3f 7f bd 9f 2f 16 d9 55 6c 4e 53 b1 e7 54 11 66 05 77 12 b9 8b 12 16 b9 55 2c b2 ab d8 18 33 f1 88 ae e3 f8 1b c5 22 ba 0e 1e d9 55 79 23 72 49 e3 18 d8 1d 59 c1 dd b8 df Data Ascii: ..=J#6XW=Hne]>q\|j1<+"4MKQgtDYww]=:#O%#ul,Et,`!nB#Rp,`sh$5)NX4,IsBh!QL42PvVp7u*&9SPVp?/UlNSTfwU,3"Uy#rIY
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 35 e1 be e5 90 5c 39 02 35 aa 46 a1 6a 54 00 a2 02 dc 8c fb 5b 1a 69 d5 2b c9 0f 8e 3d 77 e4 2b 3c b8 66 fc ed ba 75 5a 9e e7 5e ec d3 9f 1f 5c c4 4f f7 2f c8 73 df 5b c1 fd cd 62 91 5c 95 df 6d ad e0 fe 6a 2c 92 9b 89 45 76 15 8b ec 2a 16 d1 75 b0 48 6c 26 16 b9 8b 12 1a d9 55 e4 3e e9 60 11 cf 52 7c b0 88 ae 83 cd a9 62 11 56 c5 c6 e8 60 73 3a 13 5b 93 8a 8d 31 13 db a6 0e 36 a7 99 68 a4 54 91 88 a5 62 91 ca 4c 6c 9b 3a 58 08 2d 28 2b 98 9a 80 3d a7 9c 89 ad 49 03 7b 5e 14 94 f5 fc 79 35 f6 3b af 62 63 74 b0 39 55 6c 8c 8a 45 ee a2 cc 0a ee af c0 c2 f7 db c2 42 b9 7a dd eb 50 43 3a c3 6e a7 06 6f 16 d9 55 3c b2 ab f2 06 74 5d 2c 82 3b 13 8b c8 96 82 e3 11 b4 e4 60 11 bb 38 61 f7 a9 78 e1 a1 dd 4e 04 77 11 87 45 2c 16 91 fd f2 a9 6f f0 f9 fb eb 30 67 f2 Data Ascii: 5\95FjT[i+=w+<fuZ^\O/s[b\mj,Ev*uHl&U>`R\|bV`s:[16hTbLl:X-(+=I{^y5;bct9UlEBzPC:noU<t],;`8axNwE,o0g
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 2a 48 30 65 6b 32 13 db 66 b1 e2 18 c0 9d 8d ad 49 03 7b 5e 14 94 15 dc 8b bf dc 90 7d f3 a5 fe f8 e9 46 be d8 18 3d 2f 46 f5 fc 58 c1 fd 15 58 f8 7e 5b 58 28 57 af 7b 1d 6a 48 67 d8 ed d4 e0 cd 22 bb 8a 47 76 55 de 80 ae 8b 45 70 67 62 11 f9 5d c2 22 bb 8a 8d d1 c1 23 68 c9 c1 22 76 71 c2 ee 53 f1 f2 62 64 57 89 a3 b2 6f 5e 38 28 4f 27 b3 78 f6 18 a4 54 0d 45 a8 8f 0d 95 23 3c 65 70 0f f7 2d 83 60 4f 71 84 bb 8b 3c 7f b9 88 cd 82 38 ea 5b 84 68 71 7a 15 c9 ad b4 24 8e 70 17 82 3d ca 21 c8 53 1c c5 ee 06 1f f7 72 7f 9d 0e 26 f7 68 75 7b 70 b7 c7 75 11 da 45 70 17 5c 4b db e4 6d 83 7c bd 10 1d 16 0c 4f b7 32 f0 70 2d 2d 63 bb f8 da cf 53 8c 73 87 bf 38 72 fd af 73 c1 47 04 7a cb b8 1f ec 65 fc cc bd b4 0c ee 22 b6 fb 94 cd fd d0 56 11 d7 c5 69 63 44 74 17 Data Ascii: *H0ek2fI{^}F=/FXX~[X(W{jHg"GvUEpgb]"#h"vqSbdWo^8(O'xTE#<ep-`Oq<8[hqz$p=!Sr&hu{puEp\Km\|O2p--cSs8rsGze"VicDt
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: be 08 ed af ef e9 3d 11 e6 f3 73 ba 50 9e dc 2d 1c 35 7e bf 09 6a 28 67 d8 18 15 1b a3 62 11 dc 4c 2c 72 e7 f5 62 04 d6 c1 22 b0 9e a3 85 c4 e6 7c ee de f5 a3 f9 62 63 de 25 ec 3e ab 78 38 2d 3a 58 a4 56 b1 31 2a 36 46 75 ef ea 91 7c b1 31 2a b6 cd 92 e4 ce c5 03 b8 76 fa 6b 5c 3d bb 0f d7 cf 7d 87 ab 67 be c1 9d cb 87 8c bf 4d 17 f1 fb 0f d7 f0 ef 7f 7b 8c 55 8b a6 a1 66 42 34 c2 02 ca 21 26 c4 53 1e ed ed 27 8e ec f6 2a 2d 4f a7 22 22 b6 38 92 3d cc db 55 1e 31 2e 4e bf 22 ce 7d ee 56 ca 26 cf a3 1e e8 5b ce b8 ad 8b 3c 4d 8b 38 72 5c 84 70 11 db 5d 0d e2 03 51 45 6c 97 e7 62 37 94 75 29 2d 95 29 53 0a a5 8d 9f f9 fa fb c0 c3 cb 1d 2e c6 75 36 e3 f6 a5 0c e2 e7 ee ae 6e f0 f2 74 87 af 8f 17 3c bd 5c e1 e9 51 0e 7e de 6e 08 f1 f7 94 1f 92 2a e3 be 88 ea Data Ascii: =sP-5~j(gbL,rb"\|bc%>x8-:XV16Fu\|1vk\=}gM{UfB4!&S'-O""8=U1.N"}V&[<M8r\p]QElb7u)-)S.u6nt<\Q~n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49729	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:31 UTC	626	OUT	GET /uploader/d334d7f24d8af21f9aa9024236873f7eb5450d87.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	677	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:31 GMT Content-Type: image/png Content-Length: 1032083 Connection: close x-oss-request-id: 665076C3B6DE1D3630F4CCDD ETag: "5250B20144ED26EADFDE22ECF97519C6" Last-Modified: Wed, 09 Aug 2023 07:20:48 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 5206260739107121028 x-oss-storage-class: Standard Content-Disposition: inline; filename="221213764dff62429a2c0a8868ec4e4cbc319738_221" Content-MD5: UlCyAUTtJurf3iLs+XUZxg== x-oss-server-time: 9 CF-Cache-Status: HIT Expires: Sat, 25 May 2024 02:56:31 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e127ab24f7cc-BNA
2024-05-24 22:56:32 UTC	692	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 82 00 00 03 20 08 02 00 00 00 f9 bf 4b d3 00 00 01 0b 69 43 43 50 69 63 63 00 00 18 95 63 60 60 5c 91 93 9c 5b cc 24 c0 c0 90 9b 57 52 14 e4 ee a4 10 11 19 a5 c0 7e 87 81 91 41 92 81 99 41 93 c1 32 31 b9 b8 c0 31 20 c0 87 01 27 f8 76 8d 81 11 44 5f d6 05 99 c5 40 1a e0 4c 49 2d 4e 66 60 60 f8 c0 c0 c0 10 9f 5c 50 54 c2 c0 c0 08 b2 8b a7 bc a4 00 c4 8e 60 60 60 10 29 8a 88 8c 62 60 60 cc 01 b1 d3 21 ec 06 10 3b 09 c2 9e 02 56 13 12 e4 cc c0 c0 c8 c3 c0 c0 e0 90 8e c4 4e 42 62 43 ed 02 01 d6 64 a3 e4 4c 64 87 24 97 16 95 41 99 52 0c 0c 0c a7 19 4f 32 27 b3 4e e2 c8 e6 fe 26 60 2f 1a 28 6d a2 f8 51 73 82 91 84 f5 24 37 d6 c0 f2 d8 b7 d9 05 55 ac 9d 1b 67 d5 ac c9 dc 5f 7b f9 f0 4b 83 ff ff 4b 52 2b 4a Data Ascii: PNGIHDR KiCCPiccc``\[$WR~AA211 'vD_@LI-Nf``\PT```)b``!;VNBbCdLd$ARO2'N&`/(mQs$7Ug_{KKR+J
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 9b 9b 9b bb bb bb db db db e7 cf 9f e3 87 9b 9b 1b ef fd 0f 7f f8 c3 f7 df 7f ff 8d 37 de c0 4b a4 94 0a 39 5a aa d4 2b ac 02 43 4b 95 2a 55 aa d4 6f 51 fd 72 22 f3 53 52 92 5d d7 1d 0e 87 dd 6e 77 7f 7f 7f 7b 7b bb dd 6e af af af 37 9b cd cd cd cd f3 e7 cf b7 db 2d fe 69 bf df 77 5d 97 73 3e 1c 0e 78 89 94 92 d6 da 39 07 c6 34 84 f0 fa eb af ff e0 07 3f f8 f0 c3 0f df 7e fb 6d 3c 79 21 47 4b 95 7a 55 55 60 68 a9 52 a5 4a 95 fa 0d d5 cb 10 93 f5 e9 7b e5 21 84 fd 7e bf db ed 36 9b cd 66 b3 b9 bb bb bb bb bb 7b f6 ec d9 ed ed ed ed ed 2d b8 cc fd 7e df f7 fd f1 78 1c c7 b1 ef 7b 00 47 c0 59 63 8c b5 16 58 13 3f 83 e6 c4 ff 6a ad 53 4a c4 9a de fb dd 6e d7 f7 7d 55 55 df fe f6 b7 3f fe f8 e3 7f fc c7 7f bc ba ba 2a e4 68 a9 52 af a4 0a 0c 2d 55 aa 54 a9 52 Data Ascii: 7K9Z+CKUoQr"SR]nw{{n7-iw]s>x94?~m<y!GKzUU`hRJ{!~6f{-~x{GYcX?jSJn}UU?hR-UTR
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 79 53 fc 13 8e 99 47 22 9f 41 fa e2 f1 bf ce 39 fa dc 09 fe c8 bc 4a a0 4f 88 4c bc 8b a7 05 fb cb d7 25 32 c6 db c1 31 c4 18 ac 35 5a 1b 6b 5d ce 19 48 1d 0f c0 31 1c 0e 87 69 9a fe e0 0f fe e0 fb df ff fe cf 7e f6 b3 92 f1 54 aa d4 59 15 18 5a aa 54 a9 52 ff b3 92 b0 f2 7f 63 fa e9 fb 9e 31 ec 0c c5 bc bd bd 45 80 d1 dd dd 1d f4 9a 9b cd 66 1c c7 e3 f1 48 61 25 d8 3b 1a 77 60 2d c7 31 78 0f d3 4f 62 74 91 e4 f9 68 c1 21 75 07 94 06 d6 13 74 23 68 3f 30 8e d6 da 71 1c e9 2e 1a c7 91 0d 6b f2 82 44 9f 3c 0f 64 55 49 1c 4a 08 4e cc 07 2c 8b f6 3a 40 1b ff 55 9e 6a 3c 83 f7 1e c7 2f cf 30 30 22 d3 9a 08 67 f1 30 22 d1 b3 27 97 dd 79 1e 3c e4 04 20 47 a5 d2 14 7f cb 37 28 e1 ac d6 5a 29 5e 09 1a dd f9 b3 8d 07 d0 ff 30 0c 87 c3 e1 ea ea ea 3b df f9 ce 47 1f Data Ascii: ySG"A9JOL%215Zk]H1i~TYZTRc1EfHa%;w`-1xObth!ut#h?0q.kD<dUIJN,:@Uj</00"g0"'y< G7(Z)^0;G
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 9e 94 12 50 1a 9b e6 24 ba e4 4b cb 40 1f d9 ec 06 4c 24 73 29 33 db f1 00 7a 7a d8 61 e7 c3 08 16 89 0b 29 3a 94 1e 1d a9 01 05 08 43 57 77 18 86 aa aa d8 b6 26 ea e5 09 94 63 2d d9 08 e6 04 4b 09 7d 08 73 25 eb 29 b3 8a 08 58 99 7f 44 72 57 c2 bb b3 a7 25 ff 77 36 2a 53 9e 28 99 1b 7a 06 c8 08 8b 65 2c bc 44 ba 38 63 9f 04 b5 21 c6 c4 63 23 11 8b 27 c4 d9 63 53 5e 36 ca a5 7e 94 ae 29 e6 a7 e2 6c 48 c0 ca 8f 58 f6 f1 39 c5 5e e2 4b c9 8c 12 dd 12 0a cb 77 1a 42 00 c7 cc b4 2c 68 85 f1 af 70 b6 c5 18 bf f4 a5 2f fd f8 c7 3f 7e fc f8 f1 d7 be f6 35 fc 6d b1 31 95 fa 5c 56 81 a1 a5 4a 95 fa 5f d5 2f ef 95 7f ca ae 62 ce 19 bd 72 04 61 ca 19 3f 98 57 0e dc 09 d5 e6 76 bb 8d 31 02 0a 90 c4 02 56 23 be 84 f5 5b 7a 96 01 59 08 ce c8 5f 92 e9 24 06 25 a7 45 87 Data Ascii: P$K@L$s)3zza):CWw&c-K}s%)XDrW%w6*S(ze,D8c!c#'cS^6~)lHX9^KwB,hp/?~5m1\VJ_/bra?Wv1V#[zY_$%E
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 28 81 c3 24 b0 9b 26 cc 3a cf e8 36 93 fc e3 a9 90 b8 59 ba bc 79 a2 c8 ef ce a7 11 a7 e8 13 57 a0 14 30 48 b6 12 87 44 e0 2b 9b e9 b2 bd 4e a2 3a c6 68 8c 8e 31 c9 18 51 5c 57 a4 7e 67 9b 7c a4 04 16 0a 81 a6 69 ce 04 ac 12 ce e2 6d e2 38 a5 3b 9e 57 14 91 3d 9e 19 4f 4b ec 48 1e 54 62 4a 19 db 44 aa 9e db 12 62 6e 39 e9 54 66 11 48 2d 87 7c da 33 a5 f2 59 7e 3e bf 05 10 9c 1c 0e 87 61 18 be f8 c5 2f 7e ef 7b df 7b fc f8 f1 b7 bf fd 6d 3c 5b 21 47 4b fd ce 55 81 a1 a5 4a fd d6 d5 ff cb f4 43 6c f7 69 96 99 18 23 d2 8b 90 b8 8e d1 3e cf 9f 3f bf b9 b9 01 ca dc 6e b7 f8 01 be 72 ad 35 dc e5 00 40 58 7a 67 a0 69 9d c3 fa a7 64 f4 0c 04 70 34 ac 70 25 26 d8 9a c9 21 95 b3 ca 19 d0 e7 d4 5d 05 c9 44 12 0e 4f 8b c6 37 63 c3 cf 2c 2f 33 98 53 50 45 f2 f9 45 c7 Data Ascii: ($&:6YyW0HD+N:h1Q\W~g\|im8;W=OKHTbJDbn9TfH-\|3Y~>a/~{{m<[!GKUJCli#>?nr5@Xzgidp4p%&!]DO7c,/3SPEE
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: c1 4b 1c 4c 0d ae 8c fc 24 1a 96 d1 95 44 33 d2 25 46 f8 22 53 fd f9 a9 49 9b 39 2f 27 4e 84 c7 f5 86 37 4b e4 77 66 cc a7 5e f3 2c 2b 80 7d 7c 3a b4 24 10 7c 39 40 80 ac ea 99 c1 48 d2 cc a4 6f e5 66 80 0a 01 4a 81 e9 e2 67 12 93 64 5e f1 00 8e c8 92 92 50 22 4e 19 9b 20 bd f3 38 b7 d2 73 c6 4f 04 8f a4 b0 e1 ac 17 2f b7 25 92 73 95 16 7b de 85 70 e5 6f b7 5b a5 d4 1f ff f1 1f ff e4 27 3f 79 ff fd f7 ff f0 0f ff 10 0f 28 19 4f a5 7e 0b ab c0 d0 52 a5 4e f5 0a 4d 3f bb dd 6e b3 d9 40 8b 09 7c 89 ff bd be be 86 1f e8 70 38 1c 8f 87 e3 b1 93 04 0f 96 a8 aa aa ec 5c 58 e7 e8 4d 26 9b 22 03 62 42 08 4a 69 a5 92 52 59 29 23 db b2 9f 1c 72 1d b5 36 84 a7 b2 21 48 23 8e b5 d6 39 3b 8e 53 ce b9 aa 90 2f f3 89 14 fa 18 a3 52 98 51 9e 73 4e de 57 de fb c5 62 61 cc Data Ascii: KL$D3%F"SI9/'N7Kwf^,+}\|:$\|9@HofJgd^P"N 8sO/%s{po['?y(O~RNM?n@\|p8\XM&"bBJiRY)#r6!H#9;S/RQsNWba
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 44 12 1a 4a 9d 80 04 49 8c 5b c2 95 80 a4 4f c9 ea b1 83 cf 2e 3c bf 56 84 d7 d2 62 2f e5 ad 7c 83 b2 d7 4f 5f 91 44 c3 67 d2 4c 4e e6 64 4c 18 c6 41 41 c7 22 05 0f b2 4d 7f 96 be 24 41 39 1f 2f 3b f8 9f e4 bf b3 54 2f 9c 49 02 24 c9 2d 69 60 be cd 61 18 ba ae 7b f3 cd 37 ff e1 1f fe e1 e3 8f 3f 2e 19 4f a5 7e 4b aa c0 d0 52 bf ed f5 cb 89 cc 4f 6f fa c1 c8 72 34 c7 c1 5c c2 f7 83 1f f0 fb c3 e1 70 3c 1e d1 11 1e c7 c9 39 78 47 34 5a 75 cc 88 81 ad c4 18 a3 35 38 cb 08 f6 88 0b fc 0c b3 1c 50 a5 52 5a 36 25 e5 fc 43 12 33 73 62 65 56 2a 79 6f a7 29 71 9d 03 f2 18 c7 91 ec 14 cc 2b c0 0f f0 d6 c4 98 b4 b6 ce 99 aa f2 5c 23 e5 aa 19 63 ec fb 0e c0 08 6f 21 84 90 52 1c 86 53 62 ce 30 4c c8 f5 bc b8 58 0f c3 38 33 37 d3 7a 7d b1 df ef 81 1a 41 08 e5 9c 0f 87 Data Ascii: DJI[O.<Vb/\|O_DgLNdLAA"M$A9/;T/I$-i`a{7?.O~KROor4\p<9xG4Zu58PRZ6%C3sbeV*yo)q+\#co!RSb0LX837z}A
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: f3 72 ae b4 b6 4a 25 e7 d0 d6 54 d6 3a ad 55 d3 d4 80 59 84 e3 74 b7 00 19 58 6b 42 88 f3 1a 9f 43 08 31 a6 10 26 ad 11 00 74 0a e6 54 4a 8f 63 d0 1a 8f 49 29 bd 88 dc d7 3a 3b 67 ab aa 6e 9a 26 c6 08 15 41 4a 39 c6 34 87 61 29 6b 9d 52 7a a6 03 c3 72 b9 08 21 18 63 8d 51 10 b0 82 7c e5 05 46 a7 5a ce 3a a5 e8 bd 1f c7 5e f4 bb dd 62 d1 22 16 c0 18 33 8e a7 91 e8 e3 38 e2 c3 92 03 9c 08 0a f9 25 05 aa a3 45 fd cc c3 fe 32 93 f7 32 2d c7 1e 31 e9 cf 5f 08 74 78 ce c9 9b 4a cd a8 74 e7 e0 82 a7 d3 dc 39 a7 35 86 69 7d c2 b4 c4 f7 85 6b 1b d7 b9 9c a4 4a 70 06 a2 9d df 20 ec 3a 64 c8 91 4c 00 3d 13 2a 48 84 2d 75 0b f2 ad 49 75 2c 55 d4 52 f1 29 1d 4e d2 44 4f e1 04 e1 26 6f 41 b8 e0 81 e6 79 1e 80 c2 e7 6b d5 72 c3 20 b4 bc c1 39 a3 d4 e9 5b 03 4f e1 e5 e5 Data Ascii: rJ%T:UYtXkBC1&tTJcI):;gn&AJ94a)kRzr!cQ\|FZ:^b"38%E22-1_txJt95i}kJp :dL=*H-uIu,UR)NDO&oAykr 9[O
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: ab c0 d0 df c7 7a 55 a6 9f c3 e1 80 7c 22 b0 98 f7 f7 f7 d7 d7 d7 68 94 df df df dd de 3e bf b9 b9 db ed f6 7d 7f ec ba 6e 9a 22 24 8c 92 d2 83 92 d2 7b 70 93 66 de d0 6b ad f5 38 4e de 57 1c b2 87 db 31 77 f6 a2 f1 8d 1c 22 27 f9 33 de d6 41 bb c0 b4 31 af 8e 16 12 c0 aa 3a 41 b7 b6 6d f1 87 d0 77 42 22 96 52 ba bf bf af eb fa e1 c3 87 30 c8 43 94 b6 5e af a1 d6 c2 1a 76 71 71 81 3f 9c a6 69 18 86 e5 72 39 8e 93 f7 2f 46 f3 75 5d 07 d6 90 90 02 04 e7 dc e9 36 88 fc a4 9b 01 c7 df 75 9d d6 06 2e 7b 63 74 d3 d4 4d d3 70 a1 45 cb 18 59 ee 20 14 39 08 d1 7b ff ec d9 f3 71 9c 66 cd ab 85 8d dd 7b bf 5e af a7 69 72 ce 0f 43 8f 24 a9 ba ae 57 ab 15 88 c0 b6 6d 41 87 e0 44 8d e3 08 52 19 d7 c6 34 4d 39 c7 9c f3 6a b5 62 06 e4 6c 97 d1 c6 b8 aa aa 30 f1 08 09 9d Data Ascii: zU\|"h>}n"${pfk8NW1w"'3A1:AmwB"R0C^vqq?ir9/Fu]6u.{ctMpEY 9{qf{^irC$WmADR4M9jbl0
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 84 90 a6 69 c4 51 2d 16 0d 3c 28 94 1e f6 fd c8 dc 16 a4 d0 3b a7 73 56 88 3a 82 bf 04 52 ad cb cb 4b 2c cf 58 62 cf d2 13 25 97 43 3e 86 83 dd 57 ab 15 ba e1 5d 77 ac 2a b8 aa 03 7c e8 cb e5 12 ed 7e 2c b1 e0 0b 11 0f 84 39 43 78 39 f2 b5 72 58 28 de 20 70 27 5e 88 26 f7 71 1c 91 40 84 0f 8b 5d 6c ae e2 33 f1 93 ba 6e 00 1c f7 1e 4b ef 29 82 40 29 1d c2 c4 7e 25 f5 7f 78 f5 be ef 8d 01 fa af b5 ce d6 9a be ef 9d 73 75 dd 84 90 72 0e ce 39 6b cd 38 4e 58 14 87 61 80 d5 1d 3f 53 ce 88 30 7c 0e 16 07 03 a8 54 4e 29 42 ef 4b 5b 95 73 06 17 d5 3c e6 29 c5 18 ac 35 33 f0 3d 35 46 e5 90 1b 99 8e 29 b5 86 e0 7d 8d 71 c8 f6 9a c9 63 3d 0c a3 52 86 9c 3a 60 fd 62 b1 58 af 97 39 e7 10 90 b0 33 2a a5 ad 75 33 69 07 7f b4 c5 e4 4f 24 bc e2 9f 00 16 19 75 3e 73 90 81 Data Ascii: iQ-<(;sV:RK,Xb%C>W]w\|~,9Cx9rX( p'^&q@]l3nK)@)~%xsur9k8NXa?S0\|TN)BK[s<)53=5F)}qc=R:`bX93u3iO$u>s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49726	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:31 UTC	627	OUT	GET /uploader/75bb66d9a11a9ab16f2c075001ef48e9978f6a9b.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	704	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:31 GMT Content-Type: image/jpeg Content-Length: 75754 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221d1f4e30e49d095b9095e9dca995b966881575_221" Content-MD5: 2n8CXnq7zIaXKca0l7MqZg== ETag: "DA7F025E7ABBCC869729C6B497B32A66" Last-Modified: Wed, 09 Aug 2023 07:26:50 GMT x-oss-hash-crc64ecma: 1784269405410895423 x-oss-object-type: Normal x-oss-request-id: 665074458BAF67343020E0CC x-oss-server-time: 77 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42714 Expires: Sat, 25 May 2024 02:56:31 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e127abb66a7a-BNA
2024-05-24 22:56:32 UTC	665	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 e0 93 04 00 e8 03 00 00 e0 93 04 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 e8 03 00 00 03 a0 04 00 01 00 00 00 01 02 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipimagery40210ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 02 01 03 e8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 02 03 08 01 09 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}X
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 00 08 c6 8b 61 d6 65 6f 42 40 18 94 b4 62 70 a2 d1 39 e9 81 16 88 23 e2 d5 b3 45 6f cf 00 6f 9c f4 de 54 69 7d 6d 29 35 dc d9 46 39 27 a5 72 11 c2 8f 17 de 74 56 91 18 7a 3a b3 ba 6a e2 ac ea 73 21 d5 68 d1 96 99 6c b4 ae ca d1 7c f6 54 57 29 35 39 ac 39 9e b4 81 f2 23 cc 51 3b 65 36 52 ab 6a 41 d9 ae 96 af a2 52 69 46 36 9d 6d 22 6c b8 be cd 2d 90 b3 56 32 51 f6 51 91 6e 37 ce 32 6d 4b 4c 15 51 66 a4 d2 b6 33 e1 88 6f f2 f2 8b d2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 63 1d f8 d6 66 75 c7 b2 62 bf 4b e2 d6 dd 15 be 3d 5d 17 7d 46 04 5f 02 b3 d9 7a 4b 5e b5 43 48 69 4b 6a 3d 55 34 89 a6 ff 00 9c 3e 6f dd 58 bb 7e 4f de 75 e4 ca bd 22 aa c2 8d 27 2f 97 8d 74 6b 7d 33 df f8 e9 b0 6b 6b 5c c7 65 a9 55 c7 7d 57 cf d1 69 e9 e5 d6 3d 58 6e 0f Data Ascii: aeoB@bp9#EooTi}m)5F9'rtVz:js!hl\|TW)599#Q;e6RjARiF6m"l-V2QQn72mKLQf3ocfubK=]}F_zK^CHiKj=U4>oX~Ou"'/tk}3kk\eU}Wi=Xn
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 54 4f 99 df 13 e7 76 c4 79 fd 91 9e 7f a1 0b e3 f7 c7 f3 74 f1 c7 4f 99 df 87 07 5c 57 67 44 57 64 f5 5a 9f 26 3e 5b 3d bf f7 1f 11 ba 3e cb e2 b2 b5 a8 00 00 00 00 00 00 00 0a 65 2d aa e3 6a 75 53 31 7c 84 4a 96 c9 9c 03 92 95 32 a9 6a cc 91 94 b5 ad 17 ca da ba 66 56 d8 b4 be a6 b4 5a f5 c2 2e b7 e4 5c 61 dc 4c a7 12 f9 e1 dd 1d 75 6e 34 ab 14 ea 4c 1b 2d 4f ae 78 24 84 d7 db 7e 57 6e f5 f9 ae ea 77 d3 70 74 fa 18 71 3a 11 af b2 bf a7 af 51 c1 3c 8e 00 e0 62 15 ca 5b 48 65 b6 c2 36 0e b8 cd 5e b9 13 4e fd 28 00 00 00 00 00 00 00 00 70 88 89 e0 eb ac 7c ff 00 b5 11 e6 7a 71 5c 1d 71 1e 2f a1 1d 8e dc 79 37 eb 8b f5 56 dc 96 ea ce 70 f6 d3 8d 6d d1 79 ea dd 8a db 1f 4a f1 9b 75 5e bd 1a d3 3b a7 93 d5 9f aa 7e 49 62 eb e6 48 00 00 00 00 00 00 10 29 11 a5 Data Ascii: TOvytO\WgDWdZ&>[=>e-juS1\|J2jfVZ.\aLun4L-Ox$~Wnwptq:Q<b[He6^N(p\|zq\q/y7VpmyJu^;~IbH)
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 3e db 07 6c e4 6f 4a 44 d6 8b 35 88 98 e9 37 ae 3d 3b f7 3b de 55 98 89 9b da 92 5a e3 da 72 39 18 75 bc 2c 3b 2b 1d a4 3c 5e 57 1d e5 b5 c3 26 1c e2 b8 19 6f dd a6 51 32 f1 de 94 d9 d6 9a cc d3 20 f4 52 d6 5b c5 86 28 00 00 00 00 00 00 06 2a fa d3 1f 46 e7 6e 49 fd 79 f9 44 7d 00 00 02 07 c8 b7 d8 af 09 9c 6b 31 56 c5 cd 83 35 8e 69 92 9e 26 3e 1a 64 b3 eb 9b c0 d2 f9 96 ac cc c5 62 b6 cc 24 ef 5e a3 b6 2b d8 8e b5 fb 2c aa e1 ac 61 b1 36 c7 e9 f6 18 b4 d3 3a f9 f0 4f ca de 31 3d 11 12 22 63 e0 47 21 68 f8 75 1c 0e ab db a4 ea a5 71 cc 42 38 ab 53 5f 35 db bb 6f 74 79 f4 b6 38 09 ad 15 22 54 b1 56 b3 44 5c 5a 99 7c e3 69 a6 01 13 7c ae 35 b7 a9 b9 fa 36 49 33 33 25 39 ca 6b 5c eb 50 98 ba 5f 22 b3 97 39 d4 f2 de 52 53 7a 73 54 f1 ea ef b4 50 ed d9 77 61 Data Ascii: >loJD57=;;UZr9u,;+<^W&oQ2 R[(*FnIyD}k1V5i&>db$^+,a6:O1="cG!huqB8S_5oty8"TVD\Z\|i\|56I33%9k\P_"9RSzsTPwa
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 00 3e 15 e4 ea e4 54 23 4e fa aa 4d 35 72 70 a7 0d 8b 64 b1 ca aa fc 69 e9 fc af 99 47 db 12 e1 0a 92 f0 f1 7d 84 a7 65 b3 e4 72 39 00 7d 02 f6 e6 8f 0e f2 7d 2e a9 cf bf ec 5b e1 ca 27 99 d9 6c ed 53 4b cd b1 bc 4f 0d e6 fc b7 29 e6 b3 6d 82 63 e4 50 7d ad b0 89 2b 57 b8 cc b5 32 66 32 ef 4c b3 90 00 eb 23 88 9c b5 c2 3b 0d 56 b5 3e 56 b2 e1 7c ee 68 b4 4d 69 94 be 75 e9 60 3b c0 22 8f cd 5a 6d 48 9c fb cf 42 c6 97 54 77 11 e9 81 96 56 73 7a 8d 22 6d 48 98 4e c3 66 52 fd b1 3d 05 5e 2d 6e be 32 f7 cf b2 97 ee d2 fc 91 ca 1d 87 08 8e 15 8c 68 bc 25 6d 11 64 0d a9 21 7c aa 16 57 6f 5c c3 62 e7 6d a1 9d f9 23 c6 9a b6 b5 f3 d5 27 b2 29 36 1a 5f b2 72 ca d6 a4 80 30 cd 62 9a 2a 71 73 b5 4d 7d 4f 33 92 cf be 6b 2c 73 b2 c6 76 55 5e 8d 2c 99 6d 21 9f 75 22 9d Data Ascii: >T#NM5rpdiG}er9}}.['lSKO)mcP}+W2f2L#;V>V\|hMiu`;"ZmHBTwVsz"mHNfR=^-n2h%md!\|Wo\bm#')6_r0b*qsM}O3k,svU^,m!u"
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: ef 0f 7b 41 b0 97 db cc db 31 7d b7 8b ae 2d 85 5b 44 67 a5 26 97 bf 75 73 ea 2d 33 d7 33 13 77 ce c5 2a 8a 77 fe 5a ee b9 cf 06 cf 1f 5a 6c b7 a6 d4 ab 6a 66 ee b3 32 d5 00 00 00 c5 2a 45 a4 ce 00 00 00 00 00 00 00 00 04 16 aa 27 e4 be c4 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 04 c7 14 0a a8 49 d6 34 d6 86 5f 31 d7 d2 26 0f 4f 34 cd 6f 69 9a e5 a3 2a f5 fa 00 04 02 d4 65 a7 6b 1a d6 9a 41 cc 63 c2 77 2d 36 54 45 86 f4 d3 d7 53 75 cf 91 44 95 b0 da f4 b6 d7 a4 50 26 de 68 bc 5f 26 bb a9 1b 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 84 16 5d 1d 56 58 75 e4 fb 17 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 a0 a3 a6 90 56 33 bc 19 97 2b 0a 33 d1 95 8e f0 95 b5 f1 1b 4b a7 9b ed aa 48 00 00 3e 1d 06 9a ce fa 0e 74 9d b6 75 04 6e 5c b4 df c7 Data Ascii: {A1}-[Dg&us-33wwZZljf2E'I4_1&O4oi*ekAcw-6TESuDP&h_&]VXuV3+3KH>tun\
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 56 f9 bb ed d1 16 7e 9e 1b 7f af e0 cb 6b 8f d9 00 00 10 26 be ad eb 89 8a 86 51 3b 35 b2 22 d9 68 9f 3e 83 a4 82 e7 bd 57 2d f6 2f 5e 19 16 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 14 1e ac fc c1 ee f9 fe bd f9 ef 42 7f 1d 3e c3 aa 27 cb df 97 fe a9 a8 de b4 d7 db 7e 73 a8 fe 87 e7 b3 6a 96 d6 6e bf 27 f4 f0 ff 00 21 fa 1d 9b ca cb d1 7f 75 f9 fe d2 fa df 94 fb 36 1e 38 ad f4 15 6f e8 2f 91 fa 8d 4f 3d 11 5e b7 99 83 8c f7 69 13 5c 1e c6 f6 f3 b9 e7 b7 c3 63 7b fe 3e c2 f5 bc bf b2 04 56 16 f1 cd 35 ad e5 be fa e5 e9 9c 94 4e d8 e6 4d 39 56 6f 13 19 54 d2 e9 d5 c5 9b a6 60 00 08 d5 2b 41 c5 ec 73 16 15 2c c6 40 00 00 75 18 a6 78 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 d7 7d 59 f9 57 e8 7c 7d ad c1 85 9b Data Ascii: V~k&Q;5"h>W-/^B>'~sjn'!u68o/O=^i\c{>V5NM9VoT`+As,@ux}YW\|}
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 16 ad 38 fd 69 fa 37 e4 fd f7 80 00 15 8e 3e 9f 2c fc 87 d4 49 56 b8 56 df aa 69 db cd 7c 1d 5b a7 d3 f3 37 6f d5 7c e2 40 00 06 98 e7 ec c3 89 90 9a cc a2 20 cc 4c aa 97 1d b1 cf b5 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 0f a9 f8 7d 98 00 00 30 f3 53 39 3b 23 b2 be 06 7a f4 67 7a af 37 44 26 3a ef df 6b c8 b7 7a 3c 40 00 00 f2 f7 3f 65 7d 36 84 6c a2 b1 33 96 59 aa d8 1d 1c 7d b3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 2d 01 2f 90 fb 12 b4 12 00 00 0e 15 98 f4 c1 2d 04 9a 9d 67 11 37 c9 6c 8b e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 8i7>,IVVi\|[7o\|@ L@}0S9;#zgz7D&:kz<@?e}6l3Y}-/-g7l
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: a1 fd 8f 24 e9 d5 8b 8d 96 cc cf 8a d1 1c 4d ea 9b ab ba d9 f7 02 85 d3 d6 47 a1 6c e5 6f f8 96 ab a5 e9 0e 3c 28 b6 d7 4a e2 df 44 69 85 1c 1d 8c 62 4e 0b 0e 89 37 4b 67 fb fb 2d 56 4f d4 77 50 e2 51 be f6 3a c5 03 13 d9 bb d4 b6 6c 24 d5 ac 36 48 ee d3 a2 f6 66 17 5f b1 07 a3 aa eb 88 32 46 39 8c 0a 35 96 71 0f 3f 48 ab 60 b4 cc 69 b0 76 98 a1 1f d4 34 ab 46 86 ba 02 77 1f d2 4c 5a fe 72 e0 76 dc 60 31 b6 b8 ac 88 a2 4a a4 7f 4d fc a4 e3 8e 44 d9 d4 d6 e7 e9 9e 67 2a ef 2d 3a 6c 97 9b e1 7b cf ba ac 5e 41 df 4d 7d 3b 66 57 1d c1 0c a6 3c 06 16 07 47 81 14 cb 24 e3 df fc c1 b0 10 b1 3b 8d 9f 50 bc c5 16 e3 56 d8 59 5c 9c 75 36 70 ed b0 6a 21 f6 73 74 cf 69 56 53 24 9f 8a ba cd ea 1b ce 12 d6 0f 23 6a 00 2a df f3 d6 da e3 bf a4 06 ba fb 1b e1 2d aa ea db Data Ascii: $MGlo<(JDibN7Kg-VOwPQ:l$6Hf_2F95q?H`iv4FwLZrv`1JMDg-:l{^AM};fW<G$;PVY\u6pj!stiVS$#j-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49733	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:31 UTC	626	OUT	GET /uploader/cc9848adf3ffcc99024436d9b23c022632da987e.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	676	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:31 GMT Content-Type: image/png Content-Length: 415868 Connection: close x-oss-request-id: 665076C391795F303908A586 ETag: "4EC9AF0735BF453A0F4ED6D93EEB0CE7" Last-Modified: Wed, 09 Aug 2023 07:26:24 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2204139187792885320 x-oss-storage-class: Standard Content-Disposition: inline; filename="221ce9078c31255d863db04605624e334f585678_221" Content-MD5: TsmvBzW/RToPTtbZPusM5w== x-oss-server-time: 6 CF-Cache-Status: HIT Expires: Sat, 25 May 2024 02:56:31 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e127aa99f7d8-BNA
2024-05-24 22:56:32 UTC	693	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 02 62 08 06 00 00 00 54 ff e8 ee 00 00 01 0b 69 43 43 50 69 63 63 00 00 18 95 63 60 60 5c 91 93 9c 5b cc 24 c0 c0 90 9b 57 52 14 e4 ee a4 10 11 19 a5 c0 7e 87 81 91 41 92 81 99 41 93 c1 32 31 b9 b8 c0 31 20 c0 87 01 27 f8 76 8d 81 11 44 5f d6 05 99 c5 40 1a e0 4c 49 2d 4e 66 60 60 f8 c0 c0 c0 10 9f 5c 50 54 c2 c0 c0 08 b2 8b a7 bc a4 00 c4 8e 60 60 60 10 29 8a 88 8c 62 60 60 cc 01 b1 d3 21 ec 06 10 3b 09 c2 9e 02 56 13 12 e4 cc c0 c0 c8 c3 c0 c0 e0 90 8e c4 4e 42 62 43 ed 02 01 d6 64 a3 e4 4c 64 87 24 97 16 95 41 99 52 0c 0c 0c a7 19 4f 32 27 b3 4e e2 c8 e6 fe 26 60 2f 1a 28 6d a2 f8 51 73 82 91 84 f5 24 37 d6 c0 f2 d8 b7 d9 05 55 ac 9d 1b 67 d5 ac c9 dc 5f 7b f9 f0 4b 83 ff ff 4b 52 2b 4a Data Ascii: PNGIHDRbTiCCPiccc``\[$WR~AA211 'vD_@LI-Nf``\PT```)b``!;VNBbCdLd$ARO2'N&`/(mQs$7Ug_{KKR+J
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 08 21 88 a6 2a 24 1c 0e 73 23 64 f2 cd 0f 6f 2e 7f ea 3f be f9 a9 2a a7 f8 0a 27 12 1d 7b 74 c5 da a7 5c c3 6c cd 5b b9 65 8a aa 55 80 d0 0a 09 94 28 aa 42 f4 50 0c d9 a2 87 70 3c 01 48 09 52 4a f0 d4 f3 07 7f 56 5b 53 7d e1 6b 5e b5 e9 64 d6 ca 51 4a a9 38 33 1d 51 be ec 8f cc c9 75 03 05 0a f4 87 7b 4f e0 41 0f 14 28 d0 82 43 86 73 eb 32 67 67 82 7e 46 cb 4c ce 23 63 93 a0 5d 22 f0 9c bf b8 62 9d 9d 72 09 21 88 a1 6b d4 05 e5 ed 07 0e 85 0e 3e b6 e5 b5 43 bb 76 bf 4d 8e 8f af 11 94 c5 3d 4a cd ac 40 77 e9 f2 a5 ff f2 17 5f f8 cc 37 28 e7 0a 28 f5 cf 75 4f ba 10 12 52 0a 4a 08 a1 8c 31 a9 eb 1a 37 0c 03 23 a3 63 78 f6 e9 1d b5 79 db ad 3f f8 9d ef 7d a1 d6 ce 5f 5a 1a 32 a1 e9 3a d2 89 72 f4 b5 ad 84 47 29 84 e7 43 08 3e 6d 63 21 a5 94 94 52 30 c6 c0 18 Data Ascii: !$s#do.?'{t\l[eU(BPp<HRJV[S}k^dQJ83Qu{OA(Cs2gg~FL#c]"br!k>CvM=J@w_7((uORJ17#cxy?}_Z2:rG)C>mc!R0
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 35 88 40 81 02 40 0f 14 28 d0 79 a2 33 e4 53 95 01 08 cc 95 84 90 44 53 15 ca 18 e3 0a 63 93 19 45 85 80 ed 38 54 bc c0 39 c8 2f ad 4a 16 4a 05 06 70 1e d0 fe 9c 92 f2 59 bb ac eb b8 b4 ae 6e b1 ff d3 ca da fb 3b 1e 7e e8 86 75 0d 8b e9 29 5b 90 6c 7e 14 9a e7 a2 1c 1c 71 10 f8 94 42 00 c8 29 0a da 4a e3 d8 31 96 22 d9 50 54 33 74 5d 0a b9 30 09 48 d3 55 39 30 30 88 ad db 9f ff 50 38 64 c8 b1 d1 11 77 ef ee dd ca a6 6b af 25 ba ae d3 58 2c 46 2b 2a 2a 30 3e 3e 8e 58 2c 86 68 24 82 68 b2 14 25 99 14 56 c7 c2 08 09 0e 38 36 d2 5c 62 dc 73 41 54 8a 98 14 d0 a4 80 14 12 a9 e1 61 f8 9d a7 e0 39 0e b8 ef c3 e7 1c 7c ea 35 ed 41 17 42 80 10 a0 50 b0 d1 d4 54 5f 2c 2b 2f 0d e0 3c 50 a0 40 01 a0 07 0a 14 28 80 f4 60 1d e0 f7 e0 9c 0b 12 32 4d 39 3c 3a ca d3 d9 2c Data Ascii: 5@@(y3SDScE8T9/JJpYn;~u)[l~qB)J1"PT3t]0HU900P8dwk%X,F+**0>>X,h$h%V86\bsATa9\|5ABPT_,+/<P@(`2M9<:,
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 14 95 9e 87 90 ce 30 6e 3b 32 03 2a d3 99 b4 50 a5 a0 42 82 72 21 58 b1 30 f9 9b 90 b2 af ba bc 74 3f 53 95 de 96 86 ba 5d 2d 6d 2d f7 ff fa a1 cd 97 a5 f6 ec 6b 6b bc f6 ea cd 75 2d 4d 7d e9 89 74 65 4f df 60 19 17 a2 ae a3 b3 b7 3e 16 8b 35 0e 0e 8f 36 2b 8a b6 d8 76 dd 45 94 d0 52 45 55 cd a7 76 ee ef eb 1f 18 be f5 e6 9b ae df 91 cb 17 28 a5 54 cc 49 1b 96 67 ed eb f3 00 2a 03 2a 0d 6c 16 00 7a a0 40 81 ce d6 64 96 cc df 5b 0b 30 60 6e ec 21 a4 84 c2 18 29 14 8b f2 89 67 76 b6 78 44 79 fb ad 6f ba e3 af e3 89 84 f0 7c 5f a5 8c 11 29 25 04 e7 f0 3d 97 f8 be 67 b7 b5 34 16 7c ce 41 28 91 b3 6e 54 72 f6 6b 38 68 27 01 90 cf 4e 31 e7 5f 39 85 10 84 52 4a 4b 4a a2 dc ca 5a 7c f3 af b6 b6 6c 7d 66 ef c7 5b 97 2f 7b cb b2 5b 6e c3 b3 8f 3f 4e 76 00 58 a4 32 Data Ascii: 0n;2PBr!X0t?S]-m-kku-M}teO`>56+vEREUv(TIg*lz@d[0`n!)gvxDyo\|_)%=g4\|A(nTrk8h'N1_9RJKJZ\|l}f[/{[n?NvX2
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 0b f9 02 53 55 95 85 c3 61 68 9a 06 c6 18 cc 70 08 c9 78 1c f5 8b 16 e1 b1 27 9f c4 d0 d8 28 7c cf 83 94 12 39 a8 e8 e3 1c 35 94 21 aa 28 00 21 a0 53 b0 e8 79 9e 62 17 8a bc ba a6 aa aa 77 3c f3 c0 ff fd b7 ef 7f fa 2f ee 7c cb 3f 46 a2 61 66 db ae 98 b3 84 92 a7 6b 1f 29 b9 a6 6b 58 bd bc f5 27 77 ff e4 81 4f 2c ae 5b 5c 19 8d 46 25 e7 9c 58 39 0b 85 7c 01 86 61 40 d3 34 14 8b 45 30 c6 66 ce 2e e7 42 10 2b 93 cd e9 0a dd be 61 cd ca 1f ae 5d bd 6c c7 92 b6 e6 e3 b5 8b 6b 64 a2 24 06 32 b5 98 61 db 8e 32 91 ce 48 80 08 29 05 89 27 13 ee 2f 7f 7e 7f b3 31 34 f0 d6 2a ca b8 75 aa 5b 3e a3 2a 4c 26 cb 68 9f ed 22 69 98 38 91 2b 50 3b 9d c5 5a 29 51 5a 51 01 46 29 e2 f1 38 52 a9 d4 54 24 c4 a4 19 29 a5 28 14 0a f0 7d 9f 26 12 09 12 8b 25 d6 9c ec ea 4d d4 2d Data Ascii: SUahpx'(\|95!(!Sybw</\|?Fafk)kX'wO,[\F%X9\|a@4E0f.B+a]lkd$2a2H)'/~14u[>L&h"i8+P;Z)QZQF)8RT$)(}&%M-
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 22 5e 02 d7 f3 88 62 18 22 95 9a 40 aa a7 4f e9 3a de 11 b7 72 b9 b2 68 38 9c 5d 71 d1 86 81 f2 b2 24 9c a2 03 42 cf 8c ad 19 a3 c2 ca e5 89 95 cb 2f cd e5 f3 18 1f 1b a3 d1 68 14 9a a6 21 16 8b cd ec 49 a7 94 42 08 01 55 55 98 cc 48 24 13 25 a7 b2 59 8b 3a 8e 23 14 45 e1 2f ae f9 10 f8 9e 8f 53 9d dd 51 c3 d0 49 82 0b 12 07 45 ab 46 48 c6 29 42 9a 3a b8 10 f0 b8 0f 8d 00 d9 89 09 14 32 19 18 89 04 72 56 16 bd bd bd 48 24 12 33 a1 f6 bf 1d ea 3e 31 91 42 77 4f 1f 2e 59 b7 44 99 dd be 7f 36 21 3d 80 ce 05 03 ea 01 7f 07 80 1e 28 d0 bc 9c 70 06 73 d8 df 79 50 04 e6 78 61 49 29 11 0a 99 b2 b7 67 80 ec d9 7f a4 ad ba b2 ac 6f c3 86 35 79 df e7 44 08 21 67 b7 36 5e f0 53 52 42 22 9e 28 a9 e0 42 80 fb 3e c2 0a 03 a1 04 92 3b 00 c8 64 a6 66 02 e8 9a 0a 21 25 dc Data Ascii: "^b"@O:rh8]q$B/h!IBUUH$%Y:#E/SQIEFH)B:2rVH$3>1BwO.YD6!=(psyPxaI)go5yD!g6^SRB"(B>;df!%
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 0f 3b 45 f7 60 d6 e5 49 29 e8 91 7c af 87 fa 2a e6 0d 8f bc ef fb ff f8 85 ed d7 dc fc ba 6d 35 4d 0d c4 73 dd b9 4b 3e 29 27 6b bb fd c4 c9 66 21 25 e1 9c 73 4d d7 19 80 99 05 08 ce 39 28 a5 d3 2f c9 85 80 a6 28 c7 c3 e1 10 7f a9 8b a9 84 10 21 7d 1f 75 cb 97 9e 0c ab ca d8 a2 70 28 36 ec 79 ae a5 ea d2 f6 39 1c d7 c5 09 5b 42 13 1c a6 94 28 08 89 5c 3e 8f 02 28 f2 f9 3c 08 21 c8 e7 f3 e8 ea ea c2 ea d5 ab 67 e0 7c 6a a1 44 54 94 97 b3 dd fb 8f fe fd 75 57 0f bd 36 11 2f 91 9e e7 63 76 6c 77 66 bc e8 38 9b 47 b0 05 90 1e 28 00 f4 40 81 e6 e9 c4 93 04 96 0b a6 f3 73 6f 5d 4a a9 c8 17 0a c8 17 0b 4d d5 e1 c5 e2 81 07 ee c7 40 ff 80 6f 98 7a d5 78 6a a2 82 31 d6 0d 48 3a 37 cf d9 df dc 97 10 82 2a 9a 22 1b 16 d7 c8 96 c6 ba ff ee ee eb 7b 53 6b 63 43 d5 f8 Data Ascii: ;E`I)\|m5MsK>)'kf!%sM9(/(!}up(6y9[B(\>(<!g\|jDTuW6/cvlwf8G(@so]JM@ozxj1H:7"{SkcC
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: ff b0 38 d2 de f3 f1 7d fb bf 75 69 5b 4b 63 97 14 bc 33 51 12 39 55 5e 56 3a 58 5b 53 55 a4 84 f0 58 2c 0a 53 d7 a1 aa 2a 1c d7 83 eb 38 2f 6e 42 4e 82 36 16 e8 bc 02 73 10 42 58 28 64 f2 7c 2e ef 3f b5 eb 60 f5 9e 83 ed 7f 73 b2 b7 ff fd 8c 51 53 72 5f 1e 3e 7a 5c 9c 38 71 82 35 36 34 e0 d6 5b 6e 41 be 50 40 36 93 c1 d0 f0 30 ee b9 e7 1e 5c 71 c5 15 b0 8b 36 5c cf fd 6d cf b9 74 1d 47 d8 8e c3 86 86 87 15 2b 9d ed be ea d2 8b be 70 fb ad 37 7d 73 e9 b2 16 af 50 28 42 42 42 53 55 9c 38 de 85 af fd c7 dd ff d4 db 37 f0 77 8b 6b 17 41 55 15 3f 93 49 93 de de 5e 52 56 56 46 e3 f1 f8 0c 30 4e a4 26 90 3b 7a 0c 17 7b 79 2c 8f 46 90 21 80 e2 39 30 c2 11 38 84 60 0f 18 3a 1c 0e a4 32 20 c5 02 16 33 8a b4 20 2c 04 c9 db 84 bb 7c df a3 9b 6f bc e4 92 0d bf 84 94 Data Ascii: 8}ui[Kc3Q9U^V:X[SUX,S*8/nBN6sBX(d\|.?`sQSr_>z\8q564[nAP@60\q6\mtG+p7}sP(BBBSU87wkAU?I^RVVF0N&;z{y,F!908`:2 3 ,\|o
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 2b c2 3a 74 46 50 a5 a9 30 14 86 02 55 e0 02 50 09 81 16 0e 23 19 8d e2 48 5f 3f 06 4b 2b 88 42 95 6a b8 2e e6 22 95 bb 94 92 30 85 c9 8e 8e ce c5 92 90 52 02 48 45 51 08 63 0c d3 90 2e a5 c4 f4 df a5 94 12 90 04 52 74 97 97 25 c6 38 17 04 38 3d 40 27 93 f9 03 24 e1 2e bb fa c6 4d 96 e7 ba 20 94 e2 0d 77 7f e3 e3 6f b0 1d 70 5d 43 3c 12 86 09 89 27 b7 6c fd f4 a9 de e1 1f 96 57 94 09 4a 19 14 45 41 2a 95 9a 8c 36 72 1c 8c 8c 8c 60 d1 a2 45 e0 7c c6 49 4e 39 e7 bc a2 a2 b2 e9 e1 c7 b7 7d e0 e2 57 ac fb 22 08 99 e5 08 84 60 3f 7a 80 c3 01 83 07 80 1e 28 80 a2 60 fe 1b 4c f1 cf 01 cb 0a 21 48 38 14 e2 fb f6 1f 52 f6 1c 38 fc e6 b5 17 ac c5 33 4f 6f 27 b7 dc 74 c3 f7 17 2d aa 24 13 e9 cc e4 64 90 cc 7e b9 a4 94 30 0d 83 1c 6e 3f a1 7d f4 b3 9f fb 67 84 f8 ed Data Ascii: +:tFP0UP#H_?K+Bj."0RHEQc.Rt%88=@'$.M wop]C<'lWJEA*6r`E\|IN9}W"`?z(`L!H8R83Oo't-$d~0n?}g
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: f1 c0 a3 bf 7e 6b 4d cd 22 d2 d3 d3 83 a5 6d cd f7 5d 70 c1 aa 6c ae 50 60 94 51 fe 72 cb f7 42 a5 94 90 60 1a b4 44 8b b6 c2 72 7d bf f9 86 d5 24 b9 ac 56 f4 1e eb 23 eb 9a d7 12 95 32 30 85 4e ad b4 0b 40 4e 9d 61 4c 29 14 aa 00 6c 72 ce ee 73 0e ca 28 4c c3 80 65 e5 f0 ec ce 9d d8 78 f1 25 a0 84 a2 ad b5 05 7b f6 ec 41 e7 a9 53 68 6f 6f c7 f5 d7 5f 0f 21 04 8e 1e 3d 0a c3 30 50 51 51 81 96 96 16 74 76 76 82 52 0a d3 34 51 59 59 89 ca ca 4a d8 b6 0d 45 51 50 28 14 d4 70 28 e4 f3 b2 8a 5b bf 77 cf 23 fe 5b 6f b9 e1 ad 4b 96 b4 22 6b e5 c0 18 93 41 0f 0b 34 59 85 0b b7 1e 85 10 84 29 0a 8d 4d 9e a5 8d 42 d1 a6 42 08 49 08 a1 91 48 98 4f a4 26 f8 d6 a7 76 36 ec 3b dc f1 b1 81 91 d1 77 51 46 15 48 21 0e 1c d8 8f ce 53 9d ac 6d c9 12 5c f6 ca 57 a2 50 28 60 Data Ascii: ~kM"m]plP`QrB`Dr}$V#20N@NaL)lrs(Lex%{AShoo_!=0PQQtvvR4QYYJEQP(p([w#[oK"kA4Y)MBBIHO&v6;wQFH!Sm\WP(`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49734	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:31 UTC	384	OUT	GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	602	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:32 GMT Content-Type: image/png Content-Length: 19379 Connection: close x-oss-request-id: 6650748AF488A53436FC7D32 ETag: "CAE408692E9DF180175752E8BC159AD1" Last-Modified: Tue, 31 Oct 2023 09:59:39 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3292476528251743927 x-oss-storage-class: Standard Content-MD5: yuQIaS6d8YAXV1LovBWa0Q== x-oss-server-time: 38 CF-Cache-Status: HIT Age: 42645 Expires: Sat, 25 May 2024 02:56:31 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e127ee5af7e0-BNA
2024-05-24 22:56:32 UTC	767	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 47 00 00 01 68 08 06 00 00 00 5d 51 5f 89 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 ee 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 35 36 36 65 62 63 35 2c 20 32 30 32 32 2f 30 35 2f 30 39 2d 30 37 3a 32 32 3a 32 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDRGh]Q_pHYs+iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5, 2022/05/09-07:22:29 "> <rdf:R
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 65 32 32 34 37 63 31 62 2d 66 61 33 64 2d 30 64 34 37 2d 62 62 66 62 2d 65 62 62 66 35 33 65 62 63 33 35 63 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 65 32 32 34 37 63 31 62 2d 66 61 33 64 2d 30 64 34 37 2d 62 62 66 62 2d 65 62 62 66 35 33 65 62 63 33 35 63 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 65 32 32 34 37 63 31 62 2d 66 61 33 64 2d 30 64 34 37 2d 62 62 66 62 2d 65 62 62 66 35 33 65 62 63 33 35 63 22 3e 20 3c 78 6d Data Ascii: :00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:e2247c1b-fa3d-0d47-bbfb-ebbf53ebc35c" xmpMM:DocumentID="xmp.did:e2247c1b-fa3d-0d47-bbfb-ebbf53ebc35c" xmpMM:OriginalDocumentID="xmp.did:e2247c1b-fa3d-0d47-bbfb-ebbf53ebc35c"> <xm
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 60 38 22 22 22 22 52 b0 32 77 03 96 2c 37 2f df e4 c7 88 8d 89 99 70 eb d6 ad 39 51 91 91 88 8c 88 40 72 72 32 92 93 93 91 92 9c fc 9f c7 69 ec ec e0 e8 e8 08 2f 2f 2f 78 7a 79 a1 72 e5 ca 08 0c 0e fe d6 d7 d7 77 94 4a c5 8c fb 90 2c cb 48 4f 4b 0b c8 ca ce 6e 64 6b 6b 7b c9 d6 d6 36 42 a3 d1 64 98 b3 a7 ec ec 6c Data Ascii: ""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R`8""""R2w,7/p9Q@rr2i///xzyrwJ,HOKndkk{6Bdl
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: e1 f1 e1 94 29 89 7b 76 ed 32 f6 10 8f a9 51 b3 26 16 2e 5e 3c a3 82 af ef c7 fa 3e 27 27 27 47 33 77 f6 ec ac 55 3f ff 2c bc 1f 00 68 d8 a8 11 be fc ea ab 39 be be be 93 4c 72 00 3d 24 25 25 b5 5a b4 60 c1 e1 df d7 af b7 88 d1 93 72 9e 9e 18 3f 71 22 7a bc fc b2 c9 df 20 db b5 6c 29 c7 c5 c5 99 fa 30 26 a5 52 a9 f0 f7 b5 6b 26 fb 5e c5 c7 c7 f7 9d 37 67 ce da 6d 5b b6 18 3d 4a a4 af a6 cd 9a 61 e2 94 29 29 35 6a d6 74 35 f5 b1 ee dd bd bb a5 73 87 0e dd 8d ad f3 d6 b0 61 18 3f 69 d2 13 7f 0e 47 0f 1f 96 27 bc ff 3e 52 8d 9c 5e f1 24 01 01 01 98 b7 70 a1 ce d1 78 86 a3 a2 59 c6 47 d3 32 22 26 3a 7a fa c8 e1 c3 e5 b1 ef be 6b 31 c1 08 00 76 6c df 8e 6e 9d 3b 6f dd bb 67 8f c9 ce 60 69 69 69 46 07 23 00 48 4d 4d 7d ec cf 92 92 92 5a 0d 1a 30 c0 24 c1 08 00 Data Ascii: ){v2Q&.^<>'''G3wU?,h9Lr=$%%Z`r?q"z l)0&Rk&^7gm[=Ja))5jt5sa?iG'>R^$pxYG2"&:zk1vln;og`iiiF#HMM}Z0$
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: fa f4 b5 96 f2 66 69 ac 9f 7f fa 09 e9 e9 e9 3e e6 ee 43 e9 c7 a5 4b 2d 62 34 eb bb c5 8b 91 94 94 d4 ca 92 16 03 3c 74 e0 00 12 05 cd b1 b9 16 16 16 fe 63 29 bd 2c fc a8 cc cc 4c ac 5c b1 a2 54 de b9 64 a9 be 59 b8 50 3e 75 f2 a4 b9 db 28 96 d4 94 14 8c 7d f7 dd 91 96 36 b7 26 22 3c 7c c5 ae 1d 3b cc dd 06 00 60 fb 36 93 2d 77 57 a6 58 d4 0b a8 34 38 7a f8 b0 bc 7f ef 5e 73 b7 21 4c 66 66 26 b6 6c da 14 63 ee 3e 1e 8a 89 89 c1 9f bb 77 9b bb 0d 00 85 eb 1f 4d 7a ff fd c3 ca 8d 53 cd ad a0 a0 00 fb f7 ed db 2a a2 d6 cc e9 d3 fd ca d2 5c 9d f5 6b d7 c2 d2 de 14 cd c9 98 15 d6 2f 9c 3f af fd 61 c9 12 81 dd 94 9c ab 57 ae e0 9b af bf b6 a8 17 f6 ca 15 2b de b0 94 2b 0d a1 57 af a2 b4 2e 81 50 92 78 22 29 a6 6f 16 2e 34 69 7d 8f 72 e5 50 a3 66 4d 34 6e d2 04 Data Ascii: fi>CK-b4<tc),L\TdYP>u(}6&"<\|;`6-wWX48z^s!Lff&lc>wMzS*\k/?aW++W.Px")o.4i}rPfM4n
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 15 dd 7b f4 90 d4 6a f5 e3 0f 78 fb 6d c4 44 47 4f 9f fd e5 97 33 76 ef dc 59 22 3d 69 ec ec 30 fc 9d 77 30 60 e0 c0 10 e7 22 e6 6a 9d 3b 73 46 9e fd e5 97 30 c5 3c b5 e4 07 0f 0c 7a 5e 4a 4a 4a b0 a8 91 9a d7 07 0f 46 9b b6 6d 8d 7a d3 09 08 08 68 fd 72 ef de f2 fa b5 6b 85 f4 04 00 d1 91 91 ad 02 02 2c 7b 9d bb 45 0b 16 e4 5f 0b 13 3f c5 af 79 8b 16 78 7d f0 60 83 7e 26 3b ff f8 23 3d 45 d0 0e f1 92 24 e1 f3 59 b3 0a 0c b9 f4 db a0 51 23 e9 d5 01 03 e4 5f 7f f9 45 48 2f bf fd f2 0b 3a 76 ea 24 a4 96 48 8e 8e 8e 98 3c 75 2a 7a bd f2 ca 63 97 3f 1b 34 6a 84 97 7b f7 c6 d8 f1 e3 a7 4f 99 38 71 c6 99 d3 a7 85 1f ff de bd 7b 9a 06 0d 0c 9b b4 ff 2c e0 58 a3 9e 44 bd 38 07 bf f9 26 3c 3d 3d 8d be 3d ac 62 c5 8a a3 9a 34 6b 26 a2 25 00 85 0b 42 5a 22 6f 6f 6f Data Ascii: {jxmDGO3vY"=i0w0`"j;sF0<z^JJJFmzhrk,{E_?yx}`~&;#=E$YQ#_EH/:v$H<u*zc?4j{O8q{,XD8&<===b4k&%BZ"ooo
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 23 3a 3a ba 49 62 42 02 2a 55 ae 8c 06 0d 1b 0a bf 2d da ce ae ec de 51 2c cb 32 3e fc e0 83 ad c9 c9 c9 c2 6b bf 39 74 28 8c 5d 6e e0 f4 c9 93 c2 b6 92 d0 d8 d9 21 38 24 c4 51 54 bd da 75 ea 08 0b 47 e6 de 0a 48 ad 56 a3 7b cf 9e 46 dd c4 d0 a0 41 03 61 e1 28 3b 2b 4b 48 9d b2 8a e1 c8 04 d4 6a 35 bc 7d 7c be f3 f6 f1 f9 ae 6e bd 7a e6 6e a7 54 6a d8 b0 a1 51 f7 76 07 85 84 d4 03 70 41 48 33 00 44 4c f2 f6 f4 f2 12 d0 49 c9 72 70 70 b8 1f 50 b5 6a d3 80 aa 42 6e 4c 2b 92 a8 cb 27 96 68 ed ea d5 f2 91 43 87 84 d7 0d 0e 09 c1 e8 b1 63 8d 3e 87 9f 12 b0 57 df 43 21 21 21 06 8f 8c 3c 49 ad da b5 b1 61 9d 98 69 9a b7 6e de 44 52 52 52 ab e2 ce 19 14 a5 69 b3 66 46 df c4 60 e8 da 66 54 7c 9c 73 44 16 47 63 67 87 8a 7e 7e af 1a 53 c3 d5 d5 f5 a2 c8 4b 35 41 41 Data Ascii: #::IbB*U-Q,2>k9t(]n!8$QTuGHV{FAa(;+KHj5}\|nznTjQvpAH3DLIrppPjBnL+'hCc>WC!!!<IainDRRRifF`fT\|sDGcg~~SK5AA
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 17 7f f1 e9 a7 c2 eb da da da 62 ce bc 79 a7 ac ac ac b8 20 8d 40 5c fc 90 f4 c1 70 64 84 0b e7 cf 6b df 7d e7 1d 55 52 52 92 b9 5b 21 32 98 56 ab c5 27 33 66 98 64 22 71 59 a7 d5 6a 31 65 c2 84 91 19 26 58 c4 72 c2 a4 49 08 a8 5a b5 a9 f0 c2 ff 48 4d 4b 7b c7 54 b5 2d 59 59 5d 1f 8e c4 62 38 32 d0 a1 83 07 e5 71 a3 47 97 c9 05 ec e8 d9 91 97 97 a7 1e fb ee bb f9 07 f6 ef 37 77 2b a5 d2 f2 1f 7f 94 4d b1 25 45 cb 56 ad 30 40 d0 2a d8 a5 9d e8 05 4f d3 d2 d2 84 d6 a3 b2 89 e1 c8 00 7f 1d 3f 2e 8f 1e 31 c2 2c 93 ae 9d 9c 9c e0 e0 e8 08 95 4a 05 5b 1b 1b dc b9 73 a7 c4 7b a0 b2 41 ab d5 62 ec e8 d1 66 09 46 b6 b6 b6 70 70 70 80 c6 ce 0e 56 56 56 48 4e 4e 46 aa 19 e6 82 18 23 f4 ea d5 c4 45 0b 16 08 af eb e2 e2 82 4f bf fc b2 9f 25 ae f7 65 0e fc 3e 90 39 30 Data Ascii: by @\pdk}URR[!2V'3fd"qYj1e&XrIZHMK{T-YY]b82qG7w+M%EV0@*O?.1,J[s{AbfFpppVVVHNNF#EO%e>90
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: ae 09 ab 55 c5 df 1f 6a b5 b8 9b 52 6e de b8 21 ac 16 00 e4 e4 e4 d4 74 02 84 2f 0c 47 e6 77 2d 2c 4c e8 dd 50 22 2f c7 c4 c7 c7 f7 15 79 e9 5a d4 ad df 8b 16 2c c8 bf 16 26 6c 70 ec 5f 41 c1 c1 50 49 12 f6 fd f9 a7 0c 14 ae 8e ef e8 e4 04 7b 7b fb 6c 17 57 d7 e5 5e 5e 5e e3 6d 6d 6d 4b 64 47 6b b5 5a 8d fa 0d 1a e0 e8 91 23 42 ea dd be 75 0b 5a ad 56 d8 79 ee d6 cd 9b 33 84 14 fa 47 a3 c6 8d 45 96 a3 32 8c e1 48 87 ac ac 2c 97 a4 a4 24 61 f5 5c 5d 5d 85 d5 02 80 8b 02 47 b5 00 20 23 23 63 68 39 0b f8 34 4b e2 45 0a be dc 21 f2 b5 7c e1 fc f9 b5 c2 8a 41 cc dd 4d 67 cf 9c 91 97 ff f8 a3 80 6e 1e 77 2d 2c 0c a3 47 8e 7c d2 97 34 00 46 02 18 e9 e2 e2 02 9f f2 e5 51 bd 7a 75 54 09 08 40 50 50 10 ea d6 ab d7 dd 14 bf 9f 8d 9b 36 15 16 8e 72 72 72 70 f3 c6 8d Data Ascii: UjRn!t/Gw-,LP"/yZ,&lp_API{{lW^^^mmmKdGkZ#BuZVy3GE2H,$a\]]G ##ch94KE!\|AMgnw-,G\|4FQzuT@PP6rrrp
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: d9 b3 18 3d 72 64 7e 66 66 e6 53 27 67 e7 e6 e6 da 2c 98 3b 57 1e 33 6a 14 44 ee a8 ae 8b 56 ab c5 f8 f7 de f3 11 31 79 9c 2c 43 48 48 88 d0 f9 73 0f 4d 1e 3f 1e fb f7 ee d5 2b 20 85 85 86 c6 f4 ed d5 2b f9 64 09 de 15 79 60 df 3e ac 5d bd 5a af fe 72 72 72 4c dd 8e 59 24 14 63 33 d8 77 c7 8c f9 53 e4 e8 d1 81 fd fb 31 f2 ed b7 e5 d4 94 94 a7 9e 48 77 6c df 2e bf 35 78 b0 3a 5b e0 9d 95 6f 0e 1d ca 8d 66 c9 20 0c 47 4f 51 bf 41 03 93 d4 3d 7c f0 20 ba bf f4 52 f2 a6 df 7f 97 9f 34 71 34 2d 35 35 60 f5 af bf ca 5d 3a 76 cc 59 ba 64 89 49 7a d0 e5 ce 9d 3b f8 f4 e3 8f 93 4b fc c0 64 12 d5 03 03 cb db d9 d9 09 af 9b 9d 9d 8d 77 47 8c c0 e4 09 13 e4 6b 61 61 8f 4d 86 93 65 19 7f 5f be 9c f5 e1 e4 c9 f2 2b 3d 7b fa dc be 65 f0 34 25 83 7d f1 e9 a7 7a cd 8f ca Data Ascii: =rd~ffS'g,;W3jDV1y,CHHsM?+ +dy`>]ZrrrLY$c3wS1Hwl.5x:[of GOQA=\| R4q4-55`]:vYdIz;KdwGkaaMe_+={e4%}z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49736	103.160.204.8	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:31 UTC	588	OUT	GET /liquid/buyer/public/css/font/Blinker-Light.ttf HTTP/1.1 Host: fonts.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.cravob.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	702	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:32 GMT Content-Type: application/octet-stream Content-Length: 74388 Connection: close last-modified: Fri, 24 May 2024 07:40:39 GMT etag: "66504477-12294" access-control-allow-origin: https://www.cravob.com access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:56:32 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1280c456a7a-BNA
2024-05-24 22:56:32 UTC	667	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 50 4f 53 21 a8 5c 0b 00 00 c5 5c 00 00 57 a2 47 53 55 42 c9 77 d1 04 00 01 1d 00 00 00 05 94 4f 53 2f 32 a7 cc 5a 9c 00 00 a2 cc 00 00 00 60 63 6d 61 70 85 1d ca ce 00 00 a3 2c 00 00 04 b6 63 76 74 20 13 ee 09 9f 00 00 b6 bc 00 00 00 6c 66 70 67 6d 9e 36 13 ce 00 00 a7 e4 00 00 0e 15 67 61 73 70 00 00 00 10 00 00 c5 54 00 00 00 08 67 6c 79 66 a0 c3 d5 44 00 00 01 0c 00 00 96 8a 68 65 61 64 14 26 9d ed 00 00 9b 4c 00 00 00 36 68 68 65 61 07 2a 04 64 00 00 a2 a8 00 00 00 24 68 6d 74 78 5a 17 49 e9 00 00 9b 84 00 00 07 24 6c 6f 63 61 83 ae a8 f6 00 00 97 b8 00 00 03 94 6d 61 78 70 03 13 0f 04 00 00 97 98 00 00 00 20 6e 61 6d 65 5a 58 83 ab 00 00 b7 28 00 00 03 92 70 6f 73 74 cd e7 88 2b 00 00 ba bc 00 00 0a 97 70 72 65 Data Ascii: GPOS!\\WGSUBwOS/2Z`cmap,cvt lfpgm6gaspTglyfDhead&L6hhea*d$hmtxZI$locamaxp nameZX(post+pre
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 07 33 27 26 26 51 44 f2 01 b8 fe a2 52 e7 d1 57 a8 d2 3f fe e1 8f 0e 16 09 4d f5 4c 0c 18 02 73 3b da 39 e8 3d a5 01 92 2f 48 1a c9 c9 1f 4b ff ff 00 0d 00 00 02 c0 03 16 02 26 00 08 00 00 01 07 00 87 01 61 00 73 00 08 b1 02 01 b0 73 b0 35 2b ff ff 00 0d 00 00 02 47 03 16 02 26 00 03 00 00 01 06 00 8d 7e 73 00 08 b1 02 01 b0 73 b0 35 2b ff ff 00 0d 00 00 02 47 02 dc 02 26 00 03 00 00 01 06 00 8f 7f 73 00 08 b1 02 01 b0 73 b0 35 2b 00 02 00 0d ff 34 02 47 02 73 00 1a 00 23 00 39 40 36 18 01 00 04 0e 01 02 00 0f 01 03 02 03 4c 04 01 00 01 4b 00 05 00 04 00 05 04 68 00 02 00 03 02 03 65 00 01 01 22 4d 00 00 00 23 00 4e 15 16 25 27 11 10 06 08 1c 2b 33 23 13 33 13 23 06 06 15 14 16 33 32 36 37 15 06 06 23 22 26 35 34 36 37 27 21 13 06 06 07 07 21 27 26 26 51 Data Ascii: 3'&&QDRW?MLs;9=/HK&ass5+G&~ss5+G&ss5+4Gs#9@6LKhe"M#N%'+3#3#3267#"&5467'!!'&&Q
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 23 02 4e 10 10 00 00 10 1f 10 1f 1e 1c 15 13 12 11 00 0f 00 0f 27 21 11 0a 08 19 2b 13 35 33 11 33 32 16 17 16 16 15 14 06 23 23 11 37 15 23 15 33 32 36 35 34 26 27 26 26 23 23 15 17 46 ab 61 71 22 21 1f 92 a2 ab f1 b1 6b 85 6d 17 18 1a 5a 4f 6b 01 29 30 01 1a 1f 23 23 77 5d a3 97 01 29 30 30 ec 74 89 4d 5f 1c 1d 19 df 00 00 01 00 4f 00 00 01 ea 02 73 00 0b 00 2f 40 2c 00 03 00 04 05 03 04 67 00 02 02 01 5f 00 01 01 22 4d 06 01 05 05 00 5f 00 00 00 23 00 4e 00 00 00 0b 00 0b 11 11 11 11 11 07 08 1b 2b 25 15 21 11 21 15 21 15 21 15 21 15 01 ea fe 65 01 92 fe ae 01 2d fe d3 3d 3d 02 73 3b da 39 e8 00 ff ff 00 4f 00 00 01 ea 03 16 02 26 00 1a 00 00 01 07 00 87 00 b0 00 73 00 08 b1 01 01 b0 73 b0 35 2b ff ff 00 4f 00 00 01 ea 03 16 02 26 00 1a 00 00 01 06 00 Data Ascii: #N'!+5332##7#32654&'&&##Faq"!kmZOk)0##w])00tM_Os/@,g_"M_#N+%!!!!!e-==s;9O&ss5+O&
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 38 03 16 02 26 00 2b 00 00 01 06 00 8a 76 73 00 08 b1 01 01 b0 73 b0 35 2b 00 01 00 4f 00 00 00 8f 02 73 00 03 00 19 40 16 02 01 01 01 22 4d 00 00 00 23 00 4e 00 00 00 03 00 03 11 03 08 17 2b 13 11 23 11 8f 40 02 73 fd 8d 02 73 00 ff ff 00 32 00 00 00 e7 03 16 02 26 00 2e 00 00 01 06 00 87 00 73 00 08 b1 01 01 b0 73 b0 35 2b ff ff ff e4 00 00 00 fb 03 16 02 26 00 2e 00 00 01 06 00 88 b2 73 00 08 b1 01 01 b0 73 b0 35 2b ff ff ff d5 00 00 01 0b 03 16 02 26 00 2e 00 00 01 06 00 8a a3 73 00 08 b1 01 01 b0 73 b0 35 2b ff ff ff f8 00 00 00 e7 02 e4 02 26 00 2e 00 00 01 06 00 8b c6 73 00 08 b1 01 02 b0 73 b0 35 2b ff ff 00 4f 00 00 00 8f 02 e4 02 26 00 2e 00 00 01 06 00 8c 16 73 00 08 b1 01 01 b0 73 b0 35 2b ff ff ff f8 00 00 00 ad 03 16 02 26 00 2e 00 00 01 06 Data Ascii: 8&+vss5+Os@"M#N+#@ss2&.ss5+&.ss5+&.ss5+&.ss5+O&.ss5+&.
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 11 14 06 23 22 26 27 35 16 16 33 32 36 37 01 11 23 11 33 01 11 02 47 4d 48 18 21 12 11 1a 0d 37 32 01 fe 83 3d 44 01 77 02 73 fd 93 52 57 03 03 36 03 02 35 3b 02 09 fd f3 02 73 fd fa 02 06 00 00 02 00 33 ff f9 02 5a 02 7d 00 0b 00 1d 00 1f 40 1c 00 03 03 01 61 00 01 01 28 4d 00 02 02 00 61 00 00 00 29 00 4e 27 24 24 22 04 08 1a 2b 01 14 06 23 22 26 35 34 36 33 32 16 01 16 16 33 32 36 35 34 26 27 26 26 23 22 06 15 14 16 02 5a 81 92 9f 75 81 93 9e 75 fe 3b 16 50 4c 76 5c 10 11 15 4f 4d 77 5c 10 01 3b aa 98 8c b6 aa 98 8c fe 86 23 1f 76 90 49 5e 1d 24 1f 76 91 49 5e ff ff 00 33 ff f9 02 5a 03 20 02 26 00 4a 00 00 01 07 00 8d 00 9b 00 7d 00 08 b1 02 01 b0 7d b0 35 2b ff ff 00 33 ff f9 02 5a 03 20 02 26 00 4a 00 00 01 07 00 87 00 d8 00 7d 00 08 b1 02 01 b0 7d Data Ascii: #"&'53267#3GMH!72=DwsRW65;s3Z}@a(Ma)N'$$"+#"&5463232654&'&&#"Zuu;PLv\OMw\;#vI^$vI^3Z &J}}5+3Z &J}}
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 34 26 23 23 11 33 32 36 8f 40 40 90 82 71 76 7a af 52 60 90 90 5d 55 6d 6d 02 73 67 5e 6a 6d 6a d7 4c 42 fe d4 4c 00 00 02 00 33 ff 80 02 5a 02 7d 00 11 00 23 00 5c b5 0c 01 00 03 01 4c 4b b0 15 50 58 40 1b 00 04 04 01 61 00 01 01 28 4d 00 03 03 00 61 05 01 00 00 29 4d 00 02 02 27 02 4e 1b 40 1b 00 02 00 02 86 00 04 04 01 61 00 01 01 28 4d 00 03 03 00 61 05 01 00 00 29 00 4e 59 40 11 01 00 1f 1d 16 14 0e 0d 07 05 00 11 01 11 06 08 16 2b 05 22 26 35 34 36 33 32 16 15 14 06 07 17 23 27 06 06 27 16 16 33 32 36 35 34 26 27 26 26 23 22 06 15 14 16 01 47 9f 75 81 93 9e 75 43 47 70 4d 61 11 26 c6 16 50 4c 76 5c 10 11 15 4f 4d 77 5c 10 07 8c b6 aa 98 8c b6 7d 90 1e 90 7f 03 03 7e 23 1f 76 90 49 5e 1d 24 1f 76 91 49 5e 00 00 02 00 4f 00 00 02 21 02 73 00 0d 00 16 Data Ascii: 4&##326@@qvzR`]Ummsg^jmjLBL3Z}#\LKPX@a(Ma)M'N@a(Ma)NY@+"&54632#''32654&'&&#"GuuCGpMa&PLv\OMw\}~#vI^$vI^O!s
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 2a 0a 1c 01 02 05 08 4d 58 fe 61 01 a0 72 6b 00 00 01 00 12 00 00 02 08 02 73 00 07 00 21 40 1e 02 01 00 00 03 5f 04 01 03 03 22 4d 00 01 01 23 01 4e 00 00 00 07 00 07 11 11 11 05 08 19 2b 01 15 23 11 23 11 23 35 02 08 db 40 db 02 73 3b fd c8 02 38 3b 00 01 00 1a 00 00 02 10 02 73 00 0f 00 2f 40 2c 08 07 02 03 02 01 00 01 03 00 67 06 01 04 04 05 5f 00 05 05 22 4d 00 01 01 23 01 4e 00 00 00 0f 00 0f 11 11 11 11 11 11 11 09 08 1d 2b 01 15 23 11 23 11 23 35 33 35 23 35 21 15 23 15 01 de a9 40 a9 a9 db 01 f6 db 01 53 2f fe dc 01 24 2f e5 3b 3b e5 00 ff ff 00 12 00 00 02 08 03 16 02 26 00 65 00 00 01 06 00 89 40 73 00 08 b1 01 01 b0 73 b0 35 2b ff ff 00 12 ff 1f 02 08 02 73 02 26 00 65 00 00 00 07 01 22 00 b5 00 00 ff ff 00 12 ff 1f 02 08 02 73 02 26 00 65 00 Data Ascii: *MXarks!@_"M#N+###5@s;8;s/@,g_"M#N+###535#5!#@S/$/;;&e@ss5+s&e"s&e
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 7e f1 f1 01 82 fe b8 ff ff 00 0b 00 00 02 2c 03 16 02 26 00 7d 00 00 01 07 00 87 00 b0 00 73 00 08 b1 01 01 b0 73 b0 35 2b ff ff 00 0b 00 00 02 2c 03 16 02 26 00 7d 00 00 01 06 00 8a 53 73 00 08 b1 01 01 b0 73 b0 35 2b ff ff 00 0b 00 00 02 2c 02 e4 02 26 00 7d 00 00 01 06 00 8b 76 73 00 08 b1 01 02 b0 73 b0 35 2b ff ff 00 0b 00 00 02 2c 03 16 02 26 00 7d 00 00 01 06 00 8d 74 73 00 08 b1 01 01 b0 73 b0 35 2b 00 01 00 19 00 00 01 e4 02 73 00 09 00 2d 40 2a 08 01 01 03 01 03 02 4b 00 01 01 02 5f 00 02 02 22 4d 04 01 03 03 00 5f 00 00 00 23 00 4e 00 00 00 09 00 09 11 12 11 05 08 19 2b 25 15 21 35 01 21 35 21 15 01 01 e4 fe 35 01 70 fe ad 01 9b fe 92 3d 3d 3d 01 fb 3b 3b fe 05 ff ff 00 19 00 00 01 e4 03 16 02 26 00 82 00 00 01 07 00 87 00 95 00 73 00 08 b1 01 Data Ascii: ~,&}ss5+,&}Sss5+,&}vss5+,&}tss5+s-@*K_"M_#N+%!5!5!5p===;;&s
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 00 2a 00 85 40 18 11 01 02 03 10 01 01 02 09 01 05 01 28 27 02 06 05 04 4c 1a 01 06 01 4b 4b b0 21 50 58 40 20 00 01 08 01 05 06 01 05 69 00 02 02 03 61 00 03 03 2b 4d 00 06 06 00 61 04 07 02 00 00 29 00 4e 1b 40 24 00 01 08 01 05 06 01 05 69 00 02 02 03 61 00 03 03 2b 4d 00 04 04 23 4d 00 06 06 00 61 07 01 00 00 29 00 4e 59 40 19 1f 1e 01 00 25 23 1e 2a 1f 2a 19 18 15 13 0e 0c 07 05 00 1d 01 1d 09 08 16 2b 17 22 26 35 34 36 33 32 16 17 35 34 26 23 22 06 07 35 36 36 33 32 16 15 11 23 27 23 06 06 27 22 06 15 14 16 33 32 36 37 35 26 26 b7 4c 47 56 67 25 46 21 3c 44 2e 45 24 2a 4d 33 58 53 38 03 02 1f 64 03 4c 3d 32 38 2d 5b 1c 21 41 07 48 4e 4e 42 06 06 34 42 37 08 09 37 0a 08 53 59 fe b4 31 19 1f f3 28 31 34 2e 1b 14 80 06 06 00 ff ff 00 24 ff f9 01 ab 02 Data Ascii: @('LKK!PX@ ia+Ma)N@$ia+M#Ma)NY@%#+"&5463254&#"56632#'#'"32675&&LGVg%F!<D.E$M3XS8dL=28-[!AHNNB4B77SY1(14.$
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 13 07 02 01 02 06 01 00 01 05 4c 4b b0 09 50 58 40 25 00 08 00 02 01 08 02 69 00 01 00 00 01 00 65 00 05 05 04 61 00 04 04 2b 4d 00 06 06 03 61 07 01 03 03 23 03 4e 1b 40 25 00 08 00 02 01 08 02 69 00 01 00 00 01 00 65 00 05 05 04 61 00 04 04 2b 4d 00 06 06 03 61 07 01 03 03 29 03 4e 59 40 0c 11 15 24 33 34 12 34 25 22 09 08 1f 2b 05 14 06 23 22 26 27 35 16 16 33 32 36 35 34 26 23 22 22 07 37 26 26 35 34 36 33 32 16 17 15 26 26 23 22 06 15 14 16 33 32 36 37 15 06 06 07 07 36 16 01 77 34 39 23 3a 0f 0f 37 1e 22 1b 20 25 07 0f 1b 10 5d 4b 6d 82 1d 2e 25 31 27 18 65 4c 3c 51 2b 59 1d 16 4f 2c 0a 3a 3b 75 29 25 07 05 29 05 07 10 16 12 10 02 4e 04 72 88 8a 76 03 05 38 06 02 58 70 72 54 13 0e 35 0d 14 03 2d 03 21 ff ff 00 31 ff f9 01 a6 02 ad 02 26 00 9f 00 00 Data Ascii: LKPX@%iea+Ma#N@%iea+Ma)NY@$344%"+#"&'532654&#""7&&54632&&#"32676w49#:7" %]Km.%1'eL<Q+YO,:;u)%)Nrv8XprT5-!1&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49735	103.160.204.8	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:31 UTC	591	OUT	GET /liquid/buyer/public/css/font/Blinker-SemiBold.ttf HTTP/1.1 Host: fonts.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.cravob.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	702	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:32 GMT Content-Type: application/octet-stream Content-Length: 80044 Connection: close last-modified: Fri, 24 May 2024 07:40:39 GMT etag: "66504477-138ac" access-control-allow-origin: https://www.cravob.com access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:56:32 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1285ca86a79-BNA
2024-05-24 22:56:32 UTC	667	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 50 4f 53 f2 57 96 42 00 00 c6 30 00 00 6c e8 47 53 55 42 c9 77 d1 04 00 01 33 18 00 00 05 94 4f 53 2f 32 a8 f8 5a c4 00 00 a3 b0 00 00 00 60 63 6d 61 70 85 1d ca ce 00 00 a4 10 00 00 04 b6 63 76 74 20 14 9c 0a 4d 00 00 b7 a0 00 00 00 6c 66 70 67 6d 9e 36 13 ce 00 00 a8 c8 00 00 0e 15 67 61 73 70 00 00 00 10 00 00 c6 28 00 00 00 08 67 6c 79 66 c6 2d 44 26 00 00 01 0c 00 00 97 6e 68 65 61 64 14 23 9e 15 00 00 9c 30 00 00 00 36 68 68 65 61 07 27 04 55 00 00 a3 8c 00 00 00 24 68 6d 74 78 5a d4 37 44 00 00 9c 68 00 00 07 22 6c 6f 63 61 98 aa be 0e 00 00 98 9c 00 00 03 94 6d 61 78 70 03 13 0f 0a 00 00 98 7c 00 00 00 20 6e 61 6d 65 58 14 81 a3 00 00 b8 0c 00 00 03 82 70 6f 73 74 cd e7 88 51 00 00 bb 90 00 00 0a 97 70 72 65 Data Ascii: GPOSWB0lGSUBw3OS/2Z`cmapcvt Mlfpgm6gasp(glyf-D&nhead#06hhea'U$hmtxZ7Dh"locamaxp\| nameXpostQpre
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 26 81 7e e6 01 d4 fe d0 33 d8 b5 35 ae fd 2c f0 77 0a 15 0a 2c ac 2c 08 17 02 73 6c 94 67 9b 71 80 01 76 25 50 1f 7f 7f 1a 4e 00 ff ff 00 03 00 00 02 c6 03 15 02 26 00 08 00 00 01 07 00 87 01 36 00 73 00 08 b1 02 01 b0 73 b0 35 2b ff ff 00 03 00 00 02 5b 03 15 02 26 00 03 00 00 01 06 00 8d 65 73 00 08 b1 02 01 b0 73 b0 35 2b ff ff 00 03 00 00 02 5b 02 ef 02 26 00 03 00 00 01 07 00 8f 00 81 00 73 00 08 b1 02 01 b0 73 b0 35 2b 00 02 00 03 ff 34 02 5b 02 73 00 1a 00 23 00 39 40 36 18 01 00 04 0e 01 02 00 0f 01 03 02 03 4c 04 01 00 01 4b 00 05 00 04 00 05 04 68 00 02 00 03 02 03 65 00 01 01 22 4d 00 00 00 23 00 4e 15 16 25 27 11 10 06 08 1c 2b 33 23 13 33 13 23 06 06 15 14 16 33 32 36 37 15 06 06 23 22 26 35 34 36 37 27 21 13 06 06 07 07 33 27 26 26 81 7e f0 Data Ascii: &~35,w,,slgqv%PN&6ss5+[&ess5+[&ss5+4[s#9@6LKhe"M#N%'+3#3#3267#"&5467'!3'&&~
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 25 15 23 15 33 32 36 35 34 26 27 26 26 23 23 15 14 46 c9 60 71 22 22 1f 92 a2 c9 01 06 8e 51 6c 4c 10 11 13 44 40 51 01 18 52 01 09 20 23 23 77 5c a3 97 01 18 52 52 a7 58 71 3c 4c 17 19 15 9d 00 02 00 14 00 00 02 57 02 73 00 0f 00 1f 00 3c 40 39 09 07 02 00 04 08 02 03 05 00 03 67 00 06 06 01 5f 00 01 01 22 4d 00 05 05 02 5f 00 02 02 23 02 4e 10 10 00 00 10 1f 10 1f 1e 1c 15 13 12 11 00 0f 00 0f 27 21 11 0a 08 19 2b 13 35 33 11 33 32 16 17 16 16 15 14 06 23 23 11 25 15 23 15 33 32 36 35 34 26 27 26 26 23 23 15 14 46 c9 60 71 22 22 1f 92 a2 c9 01 06 8e 51 6c 4c 10 11 13 44 40 51 01 18 52 01 09 20 23 23 77 5c a3 97 01 18 52 52 a7 58 71 3c 4c 17 19 15 9d 00 01 00 3c 00 00 01 e4 02 73 00 0b 00 2f 40 2c 00 03 00 04 05 03 04 67 00 02 02 01 5f 00 01 01 22 4d 06 Data Ascii: %#32654&'&&##F`q""QlLD@QR ##w\RRXq<LWs<@9g_"M_#N'!+5332##%#32654&'&&##F`q""QlLD@QR ##w\RRXq<L<s/@,g_"M
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 00 0a 00 09 00 0a 09 67 05 01 03 03 22 4d 08 01 00 00 23 00 4e 14 14 14 17 14 17 16 15 13 12 11 11 11 11 11 11 11 11 10 0d 08 1f 2b 33 23 11 23 35 33 35 33 15 21 35 33 15 33 15 23 11 23 11 21 35 15 21 35 cd 78 3d 3d 78 01 12 78 3c 3c 78 fe ee 01 12 01 ca 4d 5c 5c 5c 5c 4d fe 36 01 08 c2 55 55 00 ff ff 00 3c 00 00 02 3e 03 15 02 26 00 2b 00 00 01 06 00 8a 63 73 00 08 b1 01 01 b0 73 b0 35 2b 00 01 00 3c 00 00 00 b4 02 73 00 03 00 19 40 16 02 01 01 01 22 4d 00 00 00 23 00 4e 00 00 00 03 00 03 11 03 08 17 2b 13 11 23 11 b4 78 02 73 fd 8d 02 73 00 ff ff 00 26 00 00 01 0f 03 15 02 26 00 2e 00 00 01 06 00 87 f4 73 00 08 b1 01 01 b0 73 b0 35 2b ff ff ff ea 00 00 01 05 03 15 02 26 00 2e 00 00 01 06 00 88 b8 73 00 08 b1 01 01 b0 73 b0 35 2b ff ff ff d0 00 00 01 22 Data Ascii: g"M#N+3##5353!533##!5!5x==xx<<xM\\\\M6UU<>&+css5+<s@"M#N+#xss&&.ss5+&.ss5+"
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 03 0f 02 26 00 44 00 00 01 07 00 91 00 82 00 73 00 08 b1 01 01 b0 73 b0 35 2b 00 01 00 3c ff 5a 02 4b 02 73 00 15 00 37 40 34 14 0f 0e 03 02 03 08 01 01 02 07 01 00 01 03 4c 05 04 02 03 03 22 4d 00 02 02 23 4d 00 01 01 00 62 00 00 00 2d 00 4e 00 00 00 15 00 15 11 14 34 23 06 08 1a 2b 01 11 14 06 23 22 26 27 35 16 16 33 32 36 37 01 11 23 11 33 01 11 02 4b 58 49 0a 25 1b 09 12 09 2b 27 02 fe d5 71 75 01 2a 02 73 fd 9b 53 61 03 03 62 02 01 1f 24 01 a7 fe 57 02 73 fe 51 01 af 00 00 02 00 24 ff f7 02 63 02 7d 00 0b 00 1d 00 1f 40 1c 00 03 03 01 61 00 01 01 28 4d 00 02 02 00 61 00 00 00 29 00 4e 27 24 24 22 04 08 1a 2b 01 14 06 23 22 26 35 34 36 33 32 16 01 16 16 33 32 36 35 34 26 27 26 26 23 22 06 15 14 16 02 63 87 98 a2 7e 88 98 a1 7e fe 53 10 3e 40 63 42 0b Data Ascii: &Dss5+<ZKs7@4L"M#Mb-N4#+#"&'53267#3KXI%+'qu*sSab$WsQ$c}@a(Ma)N'$$"+#"&5463232654&'&&#"c~~S>@cB
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 00 61 05 01 00 00 29 4d 00 02 02 27 02 4e 1b 40 1b 00 02 00 02 86 00 04 04 01 61 00 01 01 28 4d 00 03 03 00 61 05 01 00 00 29 00 4e 59 40 11 01 00 1f 1d 16 14 0e 0d 07 05 00 11 01 0f 06 08 16 2b 05 22 26 35 34 36 33 32 16 15 14 06 07 17 23 27 06 06 27 16 16 33 32 36 35 34 26 27 26 26 23 22 06 15 14 16 01 44 a2 7e 88 98 a1 7e 3e 41 75 8b 5c 13 13 96 10 3e 40 63 42 0b 0d 10 3e 3f 64 42 0c 09 8f b5 aa 98 8f b3 75 8f 21 96 79 01 01 a6 1d 18 59 7a 3b 4c 18 1e 19 5a 7c 3b 4c 00 00 02 00 3c 00 00 02 2e 02 73 00 0d 00 16 00 33 40 30 0a 01 03 05 01 4c 00 05 06 01 03 00 05 03 67 00 04 04 01 5f 00 01 01 22 4d 02 01 00 00 23 00 4e 00 00 15 13 12 10 00 0d 00 0d 16 21 11 07 08 19 2b 37 15 23 11 33 32 16 15 14 06 07 17 23 27 37 34 26 23 23 15 33 32 36 b4 78 dd 8b 77 45 Data Ascii: a)M'N@a(Ma)NY@+"&54632#''32654&'&&#"D~~>Au\>@cB>?dBu!yYz;LZ\|;L<.s3@0Lg_"M#N!+7#32#'74&##326xwE
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 02 73 6c fd f9 02 07 6c 00 01 00 15 00 00 02 08 02 73 00 0f 00 2f 40 2c 08 07 02 03 02 01 00 01 03 00 67 06 01 04 04 05 5f 00 05 05 22 4d 00 01 01 23 01 4e 00 00 00 0f 00 0f 11 11 11 11 11 11 11 09 08 1d 2b 01 15 23 11 23 11 23 35 33 35 23 35 21 15 23 15 01 db 91 78 91 91 bd 01 f3 be 01 57 51 fe fa 01 06 51 b0 6c 6c b0 00 ff ff 00 0e 00 00 02 01 03 15 02 26 00 65 00 00 01 06 00 89 2c 73 00 08 b1 01 01 b0 73 b0 35 2b ff ff 00 0e ff 23 02 01 02 73 02 26 00 65 00 00 00 07 01 22 00 9f 00 00 ff ff 00 0e ff 23 02 01 02 73 02 26 00 65 00 00 00 07 01 22 00 9f 00 00 00 01 00 37 ff f7 02 3e 02 73 00 11 00 1b 40 18 02 01 00 00 22 4d 00 03 03 01 61 00 01 01 29 01 4e 23 13 23 11 04 08 1a 2b 01 11 33 11 14 06 23 22 26 35 11 33 11 14 16 33 32 36 01 c6 78 80 84 87 7c 78 Data Ascii: slls/@,g_"M#N+###535#5!#xWQQll&e,ss5+#s&e"#s&e"7>s@"Ma)N##+3#"&53326x\|x
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 00 01 06 00 8b 68 73 00 08 b1 01 02 b0 73 b0 35 2b ff ff 00 03 00 00 02 45 03 15 02 26 00 7d 00 00 01 06 00 8d 5e 73 00 08 b1 01 01 b0 73 b0 35 2b 00 01 00 15 00 00 01 e5 02 73 00 09 00 2d 40 2a 08 01 01 03 01 03 02 4b 00 01 01 02 5f 00 02 02 22 4d 04 01 03 03 00 5f 00 00 00 23 00 4e 00 00 00 09 00 09 11 12 11 05 08 19 2b 25 15 21 35 01 21 35 21 15 01 01 e5 fe 30 01 36 fe e7 01 a0 fe cc 71 71 71 01 96 6c 6c fe 6a ff ff 00 15 00 00 01 e5 03 15 02 26 00 82 00 00 01 07 00 87 00 81 00 73 00 08 b1 01 01 b0 73 b0 35 2b ff ff 00 15 00 00 01 e5 03 15 02 26 00 82 00 00 01 06 00 89 29 73 00 08 b1 01 01 b0 73 b0 35 2b ff ff 00 15 00 00 01 e5 02 f8 02 26 00 82 00 00 01 07 00 8c 00 92 00 73 00 08 b1 01 01 b0 73 b0 35 2b 00 01 00 1a 00 00 01 ea 02 73 00 11 00 3b 40 38 Data Ascii: hss5+E&}^ss5+s-@*K_"M_#N+%!5!5!06qqqllj&ss5+&)ss5+&ss5+s;@8
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 00 03 03 2b 4d 00 06 06 00 61 04 07 02 00 00 29 00 4e 1b 40 24 00 01 08 01 05 06 01 05 69 00 02 02 03 61 00 03 03 2b 4d 00 04 04 23 4d 00 06 06 00 61 07 01 00 00 29 00 4e 59 40 19 1f 1e 01 00 25 23 1e 2a 1f 2a 19 18 15 13 0e 0c 07 05 00 1d 01 1d 09 08 16 2b 17 22 26 35 34 36 33 32 16 17 35 34 26 23 22 06 07 35 36 36 33 32 16 15 11 23 27 23 06 06 37 22 06 15 14 16 33 32 36 37 35 26 26 ab 4c 47 55 68 1d 3c 16 30 34 2f 49 21 26 59 3d 5b 5a 6b 05 02 20 53 10 36 28 21 28 1d 41 18 18 2f 09 4b 50 52 44 06 05 2a 27 24 06 07 61 09 09 53 53 fe ae 2c 18 1d de 19 23 22 1d 11 0d 55 04 04 ff ff 00 18 ff f7 01 b8 02 ac 02 26 00 92 00 00 00 06 01 1c 74 00 ff ff 00 18 ff f7 01 b8 02 ac 02 26 00 92 00 00 00 06 01 1d 38 00 ff ff 00 18 ff f7 01 b8 02 ac 02 26 00 92 00 00 00 Data Ascii: +Ma)N@$ia+M#Ma)NY@%#*+"&5463254&#"56632#'#7"32675&&LGUh<04/I!&Y=[Zk S6(!(A/KPRD'$aSS,#"U&t&8&
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 00 00 01 00 23 ff 3d 01 9b 01 f8 00 31 00 76 40 19 1d 01 04 03 2a 1e 02 05 04 2b 14 02 06 05 13 07 02 01 02 06 01 00 01 05 4c 4b b0 0d 50 58 40 21 00 06 05 02 01 06 72 00 05 00 02 01 05 02 69 00 01 00 00 01 00 66 00 04 04 03 61 00 03 03 2b 04 4e 1b 40 22 00 06 05 02 05 06 02 80 00 05 00 02 01 05 02 69 00 01 00 00 01 00 66 00 04 04 03 61 00 03 03 2b 04 4e 59 40 0a 17 24 33 37 34 25 22 07 08 1d 2b 05 14 06 23 22 26 27 35 16 16 33 32 36 35 34 26 23 22 22 07 37 26 26 35 34 36 33 32 16 17 15 26 26 23 22 06 15 14 16 33 32 36 37 15 06 06 07 07 36 16 01 76 36 3c 1f 3f 0b 0a 36 15 17 12 17 1a 12 13 0c 0f 59 4a 6f 88 21 35 1e 27 3a 13 52 31 27 3e 29 57 1f 12 48 29 07 30 35 70 2b 28 07 04 3c 03 08 0b 10 0c 0b 01 4e 07 73 86 8d 73 03 04 67 03 03 3a 5e 5b 3a 0f 0b 61 Data Ascii: #=1v@*+LKPX@!rifa+N@"ifa+NY@$374%"+#"&'532654&#""7&&54632&&#"32676v6<?6YJo!5':R1'>)WH)05p+(<Nssg:^[:a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49737	163.181.92.239	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:32 UTC	586	OUT	GET /t/c/font_871426_xa0zaxz404.woff2?t=1699608289611 HTTP/1.1 Host: at.alicdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.cravob.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	871	IN	HTTP/1.1 200 OK Server: Tengine Content-Type: font/woff2 Content-Length: 44732 Connection: close Date: Thu, 16 May 2024 14:02:16 GMT x-oss-request-id: 664611E814A30E3532925498 Vary: Origin Accept-Ranges: bytes ETag: "07ECC14B8254F9B0C6AAB1E7826FADD3" Last-Modified: Fri, 10 Nov 2023 09:24:49 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2761910849886444616 x-oss-storage-class: Standard Cache-Control: max-age=63072000 Content-MD5: B+zBS4JU+bDGqrHngm+t0w== x-oss-server-time: 4 Ali-Swift-Global-Savetime: 1715868136 Via: cache20.l2de2[0,7,200-0,H], cache26.l2de2[9,0], ens-cache2.de5[0,0,200-0,H], ens-cache12.de5[1,0] Age: 723256 X-Cache: HIT TCP_HIT dirn:12:696095636 X-Swift-SaveTime: Fri, 24 May 2024 11:12:23 GMT X-Swift-CacheTime: 30422993 Access-Control-Allow-Origin: * Timing-Allow-Origin: * EagleId: a3b55ca017165913925067029e
2024-05-24 22:56:32 UTC	15513	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 ae bc 00 0b 00 00 00 01 5f 18 00 00 ae 68 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 60 00 a9 64 0a 84 d8 50 83 e4 4b 01 36 02 24 03 8a 60 0b 85 32 00 04 20 05 84 67 07 a2 7b 5b 9e 21 71 45 f5 9a c1 e1 ba 13 48 aa 76 cf f6 8e 3e 1b 11 bb 1d 14 24 d2 6f 6e 66 20 d8 38 00 03 ed a6 ca fe ff ff 3f 37 a9 8c a1 69 d0 94 02 a0 ba 4d dd fc fe 1b 09 9e 11 a6 88 44 d4 68 1d 55 c3 eb b2 6e a8 7b 6b 26 46 51 b6 19 f9 81 a7 f1 08 91 fd c5 97 d6 07 8b f9 55 3a 9e af 07 0e 7b 26 07 17 17 6f 3c 0a 06 dc b1 95 d6 cd 8a 31 dd c2 95 7e 35 34 e8 ed 43 e4 89 ec 93 35 de b8 f3 dc a3 85 8d 8e c5 8e 62 0a 29 0e 4f 3c b8 12 72 f2 5a d3 77 2d 33 c9 1f 31 a1 89 48 62 82 d8 c7 ea 98 76 67 5d 49 12 13 94 24 71 89 4a Data Ascii: wOF2_hT`dPK6$`2 g{[!qEHv>$onf 8?7iMDhUn{k&FQU:{&o<1~54C5b)O<rZw-31Hbvg]I$qJ
2024-05-24 22:56:32 UTC	16325	IN	Data Raw: 54 f2 fb cd ad 05 20 8f 16 1a 15 1c d8 e3 21 1c 7e 20 e0 7f 27 dd 3f 99 e7 ac 17 84 2b 4b a6 49 e8 1f 34 82 9a 65 61 a0 84 62 d9 1f cf 59 3f 25 25 8b 27 1d ec 1b 6f 63 e3 f4 ea d9 8c 0a 0d 59 ee 37 02 00 21 b7 57 84 90 0b 52 b2 71 c7 48 36 9b 4b db 32 7f a2 c6 50 a1 ae 71 e6 f7 fb 62 88 b7 d4 bf 9b 28 90 46 88 0e 33 24 ab 92 43 c4 75 5e 1e 0a 85 39 ef ed ab 0a c3 81 d9 d1 c4 d3 3f 7f 21 e3 c6 eb cb a0 d0 44 bd 24 90 94 1d d3 94 1b ec f4 68 0a a1 31 97 12 77 4c 3e 48 9f c2 58 98 44 61 22 d1 00 a1 47 15 21 12 8c 85 2a 3a 30 96 48 c0 20 47 a4 c1 34 1a 4f 49 c3 e9 3f 80 e3 b0 e0 05 26 b3 83 1a e9 b9 8e e1 5c 41 63 76 cc 2b 9d e8 08 4d 14 30 61 47 82 d1 89 09 40 28 38 61 47 47 04 c9 f8 75 7c dc d1 af 4b a2 56 8b 24 08 f2 c0 46 30 8d 9b ed c6 fd b4 49 67 38 64 Data Ascii: T !~ '?+KI4eabY?%%'ocY7!WRqH6K2Pqb(F3$Cu^9?!D$h1wL>HXDa"G!*:0H G4OI?&\Acv+M0aG@(8aGGu\|KV$F0Ig8d
2024-05-24 22:56:33 UTC	12894	IN	Data Raw: d7 f3 e0 ac 27 b3 82 bf ff ba ea eb 33 c6 b8 fd 25 f2 8d 7f ae 44 92 bb 10 10 43 0b 91 ab 24 49 2e 9f c4 b4 d6 d5 d7 14 6c cc 57 62 dc 1c 16 ec cc 90 bc 47 18 e2 07 fc bc 90 f0 33 42 e0 3c d2 71 21 90 1d 72 36 0d 1e b5 f7 68 e3 59 65 aa b7 f7 54 3f eb e0 89 e4 11 47 3c b3 c7 8f bf 74 8b ad 2e d3 18 ba bb 70 2d f4 f3 02 c8 4b e1 71 3f f1 4a e3 f9 7d bc 20 bf db a0 f1 b6 ac ef 5d 8c bb 04 6c d3 ef 35 93 6c 0c 33 9d 1e c5 b0 bd 42 10 35 17 ed 76 fc 8a d4 2c 60 bd 0d 8f cf 35 7e 30 e1 8f e3 0b 77 54 e3 41 7c f8 92 3c d3 bb 02 46 fc 7e 01 1e 9c db a0 51 08 0e d6 e0 85 f2 13 f8 82 21 23 be eb 8e c2 b6 c2 2f e3 0b 46 0b 18 b1 af 0b f0 7d cb 30 59 bf 3c 1d fa 08 3f 31 33 de 84 3a ec 27 b0 53 60 64 42 3c fe 2f 11 4e f8 8b 4f c0 93 89 e1 ec c6 dc bf e5 c2 fc 04 fc Data Ascii: '3%DC$I.lWbG3B<q!r6hYeT?G<t.p-Kq?J} ]l5l3B5v,`5~0wTA\|<F~Q!#/F}0Y<?13:'S`dB</NO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49740	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:32 UTC	622	OUT	GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	657	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-2f86" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367873 Expires: Sat, 25 May 2024 02:56:32 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e12c0938f7c4-BNA
2024-05-24 22:56:32 UTC	712	IN	Data Raw: 32 66 38 36 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 31 70 78 22 20 68 65 69 67 68 74 3d 22 34 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 31 20 34 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 6d 61 73 74 65 72 63 61 72 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 e8 ae be e7 bd ae 2d e9 85 8d e7 bd ae e6 94 af e4 bb 98 e6 b8 a0 e9 81 Data Ascii: 2f86<?xml version="1.0" encoding="UTF-8"?><svg width="81px" height="41px" viewBox="0 0 81 41" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>mastercard</title> <g id="-
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 32 20 43 35 2e 31 35 34 35 36 34 39 33 2c 32 31 2e 32 33 34 36 37 34 37 20 34 2e 38 39 32 32 35 36 34 2c 32 31 2e 31 33 34 31 32 37 36 20 34 2e 36 32 33 37 34 33 37 39 2c 32 31 2e 31 34 39 38 38 32 31 20 43 34 2e 32 36 39 38 38 37 38 35 2c 32 31 2e 31 32 36 36 38 33 39 20 33 2e 39 33 31 34 35 31 37 32 2c 32 31 2e 32 39 37 39 31 36 35 20 33 2e 37 34 30 35 32 37 32 34 2c 32 31 2e 35 39 36 37 34 37 36 20 43 33 2e 35 36 36 34 35 38 39 31 2c 32 31 2e 33 30 36 38 32 36 33 20 33 2e 32 34 37 37 33 34 30 32 2c 32 31 2e 31 33 35 33 36 30 34 20 32 2e 39 30 39 38 38 33 31 2c 32 31 2e 31 34 39 38 38 32 31 20 43 32 2e 36 31 35 37 31 38 37 33 2c 32 31 2e 31 33 35 30 31 31 32 20 32 2e 33 33 35 36 37 37 30 39 2c 32 31 2e 32 37 37 30 33 32 33 20 32 2e 31 37 33 38 36 39 33 Data Ascii: 2 C5.15456493,21.2346747 4.8922564,21.1341276 4.62374379,21.1498821 C4.26988785,21.1266839 3.93145172,21.2979165 3.74052724,21.5967476 C3.56645891,21.3068263 3.24773402,21.1353604 2.9098831,21.1498821 C2.61571873,21.1350112 2.33567709,21.2770323 2.1738693
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 38 35 38 34 38 35 35 20 4c 31 32 2e 38 39 30 37 35 35 39 2c 32 31 2e 37 31 32 34 30 36 39 20 4c 31 33 2e 37 38 34 34 38 36 39 2c 32 31 2e 37 31 32 34 30 36 39 20 4c 31 33 2e 37 37 39 32 32 39 37 2c 32 31 2e 32 31 32 39 36 39 20 5a 20 4d 31 38 2e 34 34 32 34 30 32 38 2c 32 31 2e 31 34 39 38 38 32 31 20 43 31 38 2e 31 37 30 38 34 34 35 2c 32 31 2e 31 34 31 38 39 35 36 20 31 37 2e 39 31 36 36 37 34 31 2c 32 31 2e 32 38 33 31 30 31 34 20 31 37 2e 37 37 39 39 39 30 33 2c 32 31 2e 35 31 37 38 38 39 20 4c 31 37 2e 37 37 39 39 39 30 33 2c 32 31 2e 32 31 32 39 36 39 20 4c 31 37 2e 32 33 38 34 39 34 35 2c 32 31 2e 32 31 32 39 36 39 20 4c 31 37 2e 32 33 38 34 39 34 35 2c 32 33 2e 37 32 35 39 33 30 33 20 4c 31 37 2e 37 38 35 32 34 37 36 2c 32 33 2e 37 32 35 39 33 30 Data Ascii: 8584855 L12.8907559,21.7124069 L13.7844869,21.7124069 L13.7792297,21.212969 Z M18.4424028,21.1498821 C18.1708445,21.1418956 17.9166741,21.2831014 17.7799903,21.517889 L17.7799903,21.212969 L17.2384945,21.212969 L17.2384945,23.7259303 L17.7852476,23.725930
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 2e 39 31 30 35 30 39 37 2c 32 31 2e 37 31 36 32 33 37 32 20 31 31 2e 31 35 30 36 30 39 2c 32 31 2e 38 35 34 33 35 32 34 20 4c 31 31 2e 33 39 32 34 34 32 31 2c 32 31 2e 34 31 32 37 34 34 31 20 5a 20 4d 32 36 2e 30 33 36 34 38 37 39 2c 32 31 2e 31 34 39 38 38 32 31 20 43 32 35 2e 37 36 34 39 32 39 37 2c 32 31 2e 31 34 31 38 39 35 36 20 32 35 2e 35 31 30 37 35 39 33 2c 32 31 2e 32 38 33 31 30 31 34 20 32 35 2e 33 37 34 30 37 35 35 2c 32 31 2e 35 31 37 38 38 39 20 4c 32 35 2e 33 37 34 30 37 35 35 2c 32 31 2e 32 31 32 39 36 39 20 4c 32 34 2e 38 33 32 35 37 39 37 2c 32 31 2e 32 31 32 39 36 39 20 4c 32 34 2e 38 33 32 35 37 39 37 2c 32 33 2e 37 32 35 39 33 30 33 20 4c 32 35 2e 33 37 39 33 33 32 38 2c 32 33 2e 37 32 35 39 33 30 33 20 4c 32 35 2e 33 37 39 33 33 32 Data Ascii: .9105097,21.7162372 11.150609,21.8543524 L11.3924421,21.4127441 Z M26.0364879,21.1498821 C25.7649297,21.1418956 25.5107593,21.2831014 25.3740755,21.517889 L25.3740755,21.212969 L24.8325797,21.212969 L24.8325797,23.7259303 L25.3793328,23.7259303 L25.379332
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 32 37 35 35 31 37 20 32 33 2e 30 38 33 37 35 32 31 2c 32 31 2e 31 33 38 35 36 36 31 20 32 32 2e 37 37 36 39 39 38 33 2c 32 31 2e 31 34 39 38 38 32 31 20 43 32 32 2e 30 35 31 31 32 34 37 2c 32 31 2e 31 34 39 38 38 32 31 20 32 31 2e 34 36 32 36 38 37 39 2c 32 31 2e 37 33 38 33 31 38 39 20 32 31 2e 34 36 32 36 38 37 39 2c 32 32 2e 34 36 34 31 39 32 34 20 43 32 31 2e 34 36 32 36 38 37 39 2c 32 33 2e 31 39 30 30 36 36 20 32 32 2e 30 35 31 31 32 34 37 2c 32 33 2e 37 37 38 35 30 32 38 20 32 32 2e 37 37 36 39 39 38 33 2c 32 33 2e 37 37 38 35 30 32 38 20 43 32 33 2e 30 38 33 37 35 32 31 2c 32 33 2e 37 38 39 38 31 38 38 20 32 33 2e 33 37 37 32 31 38 34 2c 32 33 2e 36 35 32 38 36 37 38 20 32 33 2e 35 36 35 35 38 34 35 2c 32 33 2e 34 31 30 34 39 35 39 20 4c 32 33 2e Data Ascii: 275517 23.0837521,21.1385661 22.7769983,21.1498821 C22.0511247,21.1498821 21.4626879,21.7383189 21.4626879,22.4641924 C21.4626879,23.190066 22.0511247,23.7785028 22.7769983,23.7785028 C23.0837521,23.7898188 23.3772184,23.6528678 23.5655845,23.4104959 L23.
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 31 36 2e 31 31 32 36 32 34 32 2c 32 32 2e 30 38 33 34 30 38 31 20 31 36 2e 31 31 36 30 37 33 34 2c 32 32 2e 32 34 38 36 34 35 35 20 4c 31 34 2e 38 30 31 37 36 33 31 2c 32 32 2e 32 34 38 36 34 35 35 20 43 31 34 2e 38 32 31 35 36 34 31 2c 32 31 2e 38 39 37 36 37 38 32 20 31 35 2e 31 31 38 31 31 31 39 2c 32 31 2e 36 32 36 38 31 35 37 20 31 35 2e 34 36 39 34 33 32 38 2c 32 31 2e 36 33 38 38 30 35 35 20 4c 31 35 2e 34 37 39 39 34 37 32 2c 32 31 2e 36 33 38 38 30 35 35 20 5a 20 4d 32 39 2e 31 37 37 36 38 39 37 2c 32 32 2e 34 36 39 34 34 39 37 20 4c 32 39 2e 31 37 37 36 38 39 37 2c 32 30 2e 32 30 33 35 37 38 36 20 4c 32 38 2e 36 35 31 39 36 35 35 2c 32 30 2e 32 30 33 35 37 38 36 20 4c 32 38 2e 36 35 31 39 36 35 35 2c 32 31 2e 35 31 37 38 38 39 20 43 32 38 2e 34 Data Ascii: 16.1126242,22.0834081 16.1160734,22.2486455 L14.8017631,22.2486455 C14.8215641,21.8976782 15.1181119,21.6268157 15.4694328,21.6388055 L15.4799472,21.6388055 Z M29.1776897,22.4694497 L29.1776897,20.2035786 L28.6519655,20.2035786 L28.6519655,21.517889 C28.4
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 39 38 2c 32 33 2e 33 35 39 30 36 34 31 20 33 30 2e 30 39 37 37 30 36 39 2c 32 33 2e 33 36 30 35 35 32 31 20 4c 33 30 2e 30 38 39 38 32 31 2c 32 33 2e 33 36 30 35 35 32 31 20 5a 20 4d 33 30 2e 30 38 39 38 32 31 2c 32 33 2e 38 30 34 37 38 39 20 43 33 30 2e 31 31 36 30 35 37 32 2c 32 33 2e 38 30 34 39 34 38 33 20 33 30 2e 31 34 32 30 33 32 31 2c 32 33 2e 37 39 39 35 37 34 32 20 33 30 2e 31 36 36 30 35 31 2c 32 33 2e 37 38 39 30 31 37 32 20 43 33 30 2e 31 38 38 36 36 36 37 2c 32 33 2e 37 37 38 39 32 30 31 20 33 30 2e 32 30 39 31 37 37 33 2c 32 33 2e 37 36 34 36 35 31 38 20 33 30 2e 32 32 36 35 30 39 33 2c 32 33 2e 37 34 36 39 35 39 33 20 43 33 30 2e 32 39 34 36 36 38 36 2c 32 33 2e 36 37 32 35 39 33 38 20 33 30 2e 32 39 34 36 36 38 36 2c 32 33 2e 35 35 38 34 Data Ascii: 98,23.3590641 30.0977069,23.3605521 L30.089821,23.3605521 Z M30.089821,23.804789 C30.1160572,23.8049483 30.1420321,23.7995742 30.166051,23.7890172 C30.1886667,23.7789201 30.2091773,23.7646518 30.2265093,23.7469593 C30.2946686,23.6725938 30.2946686,23.5584
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 32 33 2e 35 39 39 37 35 36 36 20 43 33 30 2e 31 34 30 38 38 35 34 2c 32 33 2e 35 39 32 33 31 36 33 20 33 30 2e 31 34 30 38 38 35 34 2c 32 33 2e 35 38 33 35 33 39 32 20 33 30 2e 31 33 37 31 33 36 32 2c 32 33 2e 35 37 36 30 39 39 20 43 33 30 2e 31 34 30 38 38 35 34 2c 32 33 2e 35 36 38 36 35 38 37 20 33 30 2e 31 34 30 38 38 35 34 2c 32 33 2e 35 35 39 38 38 31 36 20 33 30 2e 31 33 37 31 33 36 32 2c 32 33 2e 35 35 32 34 34 31 34 20 43 33 30 2e 31 32 36 38 34 35 35 2c 32 33 2e 35 34 39 33 37 33 33 20 33 30 2e 31 31 35 38 38 33 34 2c 32 33 2e 35 34 39 33 37 33 33 20 33 30 2e 31 30 35 35 39 32 38 2c 32 33 2e 35 35 32 34 34 31 34 20 4c 33 30 2e 30 34 37 37 36 33 31 2c 32 33 2e 35 33 36 36 36 39 37 20 5a 20 4d 32 37 2e 31 35 36 32 38 30 33 2c 32 32 2e 34 36 39 34 Data Ascii: 23.5997566 C30.1408854,23.5923163 30.1408854,23.5835392 30.1371362,23.576099 C30.1408854,23.5686587 30.1408854,23.5598816 30.1371362,23.5524414 C30.1268455,23.5493733 30.1158834,23.5493733 30.1055928,23.5524414 L30.0477631,23.5366697 Z M27.1562803,22.4694
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 33 34 31 36 20 36 2e 36 35 35 36 36 37 35 39 2c 32 32 2e 34 36 39 34 34 39 37 20 4c 36 2e 36 36 30 39 32 34 38 33 2c 32 32 2e 34 36 39 34 34 39 37 20 5a 22 20 69 64 3d 22 e5 bd a2 e7 8a b6 22 20 66 69 6c 6c 3d 22 23 32 33 31 46 32 30 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 5f 47 72 6f 75 70 5f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 e7 9f a9 e5 bd a2 22 20 66 69 6c 6c 3d 22 23 46 46 35 46 30 30 22 20 78 3d 22 31 31 2e 32 31 31 30 36 37 32 22 20 79 3d 22 32 2e 30 36 33 34 36 37 32 34 22 20 77 69 64 74 68 3d 22 38 2e 32 38 30 31 35 35 31 37 22 20 68 65 69 67 68 74 3d 22 31 34 2e 38 38 30 36 32 31 37 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 20 20 Data Ascii: 3416 6.65566759,22.4694497 L6.66092483,22.4694497 Z" id="" fill="#231F20"></path> <g id="_Group_"> <rect id="" fill="#FF5F00" x="11.2110672" y="2.06346724" width="8.28015517" height="14.8806217"></rect>
2024-05-24 22:56:32 UTC	510	IN	Data Raw: 33 35 34 31 2c 31 35 2e 30 36 31 39 39 36 36 20 4c 32 39 2e 37 30 33 34 31 33 38 2c 31 35 2e 30 36 31 39 39 36 36 20 4c 32 39 2e 37 30 33 34 31 33 38 2c 31 35 2e 33 36 36 39 31 36 36 20 4c 32 39 2e 37 35 38 36 31 34 38 2c 31 35 2e 33 36 36 39 31 36 36 20 5a 20 4d 33 30 2e 33 36 35 38 32 36 32 2c 31 35 2e 33 36 36 39 31 36 36 20 4c 33 30 2e 33 36 35 38 32 36 32 2c 31 34 2e 39 39 38 39 30 39 37 20 4c 33 30 2e 32 37 31 31 39 35 39 2c 31 34 2e 39 39 38 39 30 39 37 20 4c 33 30 2e 31 36 30 37 39 33 38 2c 31 35 2e 32 36 31 37 37 31 37 20 4c 33 30 2e 30 35 30 33 39 31 37 2c 31 34 2e 39 39 38 39 30 39 37 20 4c 32 39 2e 39 36 36 32 37 35 39 2c 31 34 2e 39 39 38 39 30 39 37 20 4c 32 39 2e 39 36 36 32 37 35 39 2c 31 35 2e 33 36 36 39 31 36 36 20 4c 33 30 2e 30 33 34 Data Ascii: 3541,15.0619966 L29.7034138,15.0619966 L29.7034138,15.3669166 L29.7586148,15.3669166 Z M30.3658262,15.3669166 L30.3658262,14.9989097 L30.2711959,14.9989097 L30.1607938,15.2617717 L30.0503917,14.9989097 L29.9662759,14.9989097 L29.9662759,15.3669166 L30.034

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49738	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:32 UTC	619	OUT	GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	657	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-20a8" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 191717 Expires: Sat, 25 May 2024 02:56:32 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e12c0d8cf7c8-BNA
2024-05-24 22:56:32 UTC	712	IN	Data Raw: 32 30 61 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 34 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 34 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 6d 61 65 73 74 72 6f 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 e8 ae be e7 bd ae 2d e9 85 8d e7 bd ae e6 94 af e4 bb 98 e6 b8 a0 e9 81 93 22 20 Data Ascii: 20a8<?xml version="1.0" encoding="UTF-8"?><svg width="80px" height="40px" viewBox="0 0 80 40" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>maestro</title> <g id="-"
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 31 39 37 32 38 30 34 20 33 31 2e 34 36 38 34 34 32 2c 33 30 2e 32 31 31 36 37 37 39 20 43 33 31 2e 31 37 36 37 39 31 39 2c 33 30 2e 31 39 36 39 33 34 31 20 33 30 2e 38 39 39 31 34 33 38 2c 33 30 2e 33 33 37 37 34 31 34 20 33 30 2e 37 33 38 37 31 38 39 2c 33 30 2e 35 38 31 37 35 31 38 20 4c 33 30 2e 37 33 38 37 31 38 39 2c 33 30 2e 32 37 34 32 32 35 36 20 4c 33 30 2e 31 39 36 36 33 38 39 2c 33 30 2e 32 37 34 32 32 35 36 20 4c 33 30 2e 31 39 36 36 33 38 39 2c 33 32 2e 37 36 35 37 30 38 37 20 4c 33 30 2e 37 34 33 39 33 31 33 2c 33 32 2e 37 36 35 37 30 38 37 20 4c 33 30 2e 37 34 33 39 33 31 33 2c 33 31 2e 33 39 34 38 37 31 38 20 43 33 30 2e 37 32 30 33 36 30 38 2c 33 31 2e 32 32 32 33 36 37 39 20 33 30 2e 37 37 35 30 31 36 38 2c 33 31 2e 30 34 38 33 34 36 34 Data Ascii: 1972804 31.468442,30.2116779 C31.1767919,30.1969341 30.8991438,30.3377414 30.7387189,30.5817518 L30.7387189,30.2742256 L30.1966389,30.2742256 L30.1966389,32.7657087 L30.7439313,32.7657087 L30.7439313,31.3948718 C30.7203608,31.2223679 30.7750168,31.0483464
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 35 37 36 35 33 39 35 20 4c 34 36 2e 32 31 31 34 35 34 33 2c 33 30 2e 32 37 34 32 32 35 36 20 4c 34 35 2e 36 37 34 35 38 36 36 2c 33 30 2e 32 37 34 32 32 35 36 20 4c 34 35 2e 36 37 34 35 38 36 36 2c 33 32 2e 37 36 35 37 30 38 37 20 4c 34 36 2e 32 31 36 36 36 36 36 2c 33 32 2e 37 36 35 37 30 38 37 20 4c 34 36 2e 32 31 36 36 36 36 36 2c 33 31 2e 33 36 38 38 31 30 33 20 43 34 36 2e 32 31 36 36 36 36 36 2c 33 30 2e 39 35 37 30 33 37 39 20 34 36 2e 33 39 33 38 38 35 31 2c 33 30 2e 37 32 37 36 39 36 34 20 34 36 2e 37 33 37 38 39 37 34 2c 33 30 2e 37 32 37 36 39 36 34 20 43 34 36 2e 38 35 33 38 34 31 31 2c 33 30 2e 37 32 36 31 31 30 35 20 34 36 2e 39 36 38 39 36 32 39 2c 33 30 2e 37 34 37 33 36 33 37 20 34 37 2e 30 37 36 36 39 37 34 2c 33 30 2e 37 39 30 32 34 34 Data Ascii: 5765395 L46.2114543,30.2742256 L45.6745866,30.2742256 L45.6745866,32.7657087 L46.2166666,32.7657087 L46.2166666,31.3688103 C46.2166666,30.9570379 46.3938851,30.7276964 46.7378974,30.7276964 C46.8538411,30.7261105 46.9689629,30.7473637 47.0766974,30.790244
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 20 34 39 2e 35 30 32 31 32 30 34 2c 33 31 2e 31 34 37 33 35 31 32 20 34 39 2e 35 30 32 31 32 30 34 2c 33 31 2e 34 35 35 35 34 36 38 20 43 34 39 2e 35 30 32 31 32 30 34 2c 33 31 2e 37 38 32 35 31 35 37 20 34 39 2e 34 33 32 35 30 32 37 2c 33 32 2e 30 32 35 37 38 36 38 20 34 39 2e 32 39 33 32 36 37 31 2c 33 32 2e 31 38 35 33 36 30 31 20 43 34 39 2e 31 35 34 30 33 31 36 2c 33 32 2e 33 34 34 39 33 33 34 20 34 38 2e 39 37 39 35 39 36 2c 33 32 2e 34 32 34 37 32 30 31 20 34 38 2e 37 36 39 39 36 30 34 2c 33 32 2e 34 32 34 37 32 30 31 20 5a 20 4d 34 32 2e 37 31 35 33 33 33 36 2c 33 30 2e 34 30 39 30 36 34 37 20 43 34 32 2e 34 30 38 34 39 31 35 2c 33 30 2e 32 32 36 36 32 38 20 34 32 2e 30 35 35 37 30 33 2c 33 30 2e 31 33 36 31 36 39 34 20 34 31 2e 36 39 38 39 33 33 Data Ascii: 49.5021204,31.1473512 49.5021204,31.4555468 C49.5021204,31.7825157 49.4325027,32.0257868 49.2932671,32.1853601 C49.1540316,32.3449334 48.979596,32.4247201 48.7699604,32.4247201 Z M42.7153336,30.4090647 C42.4084915,30.226628 42.055703,30.1361694 41.698933
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 32 37 30 33 31 33 20 43 35 30 2e 32 39 39 38 38 33 38 2c 33 32 2e 32 34 36 30 36 35 35 20 35 30 2e 34 35 33 32 34 35 32 2c 33 32 2e 31 30 36 38 31 36 39 20 35 30 2e 36 33 34 33 39 37 35 2c 33 32 2e 31 31 33 36 31 36 33 20 5a 20 4d 33 38 2e 38 39 35 39 38 30 35 2c 33 30 2e 32 31 31 37 30 34 35 20 43 33 38 2e 31 37 36 33 31 31 2c 33 30 2e 32 32 31 37 37 39 39 20 33 37 2e 36 30 31 30 37 31 33 2c 33 30 2e 38 31 33 33 35 35 20 33 37 2e 36 31 31 31 34 36 36 2c 33 31 2e 35 33 33 30 32 34 35 20 43 33 37 2e 36 32 31 32 32 32 2c 33 32 2e 32 35 32 36 39 34 20 33 38 2e 32 31 32 37 39 37 31 2c 33 32 2e 38 32 37 39 33 33 37 20 33 38 2e 39 33 32 34 36 36 36 2c 33 32 2e 38 31 37 38 35 38 33 20 43 33 39 2e 33 30 37 34 32 34 33 2c 33 32 2e 38 33 37 31 30 34 35 20 33 39 2e Data Ascii: 270313 C50.2998838,32.2460655 50.4532452,32.1068169 50.6343975,32.1136163 Z M38.8959805,30.2117045 C38.176311,30.2217799 37.6010713,30.813355 37.6111466,31.5330245 C37.621222,32.252694 38.2127971,32.8279337 38.9324666,32.8178583 C39.3074243,32.8371045 39.
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 37 35 33 20 33 35 2e 35 35 38 31 33 33 38 2c 33 30 2e 37 39 36 32 36 36 35 20 33 35 2e 39 36 37 35 34 37 32 2c 33 30 2e 38 31 31 36 33 33 35 20 43 33 36 2e 33 37 36 39 36 30 36 2c 33 30 2e 38 32 37 30 30 30 34 20 33 36 2e 36 39 38 39 39 38 36 2c 33 31 2e 31 36 36 38 30 36 31 20 33 36 2e 36 39 32 33 37 37 33 2c 33 31 2e 35 37 36 34 35 34 32 20 43 33 36 2e 36 38 35 37 35 36 2c 33 31 2e 39 38 36 31 30 32 34 20 33 36 2e 33 35 32 39 30 34 33 2c 33 32 2e 33 31 35 33 32 32 38 20 33 35 2e 39 34 33 32 30 38 32 2c 33 32 2e 33 31 37 34 35 30 33 20 43 33 35 2e 37 33 33 36 39 36 37 2c 33 32 2e 33 32 31 35 36 33 34 20 33 35 2e 35 33 32 30 36 38 31 2c 33 32 2e 32 33 37 35 39 39 35 20 33 35 2e 33 38 37 34 30 31 32 2c 33 32 2e 30 38 35 39 39 36 36 20 43 33 35 2e 32 34 32 Data Ascii: 753 35.5581338,30.7962665 35.9675472,30.8116335 C36.3769606,30.8270004 36.6989986,31.1668061 36.6923773,31.5764542 C36.685756,31.9861024 36.3529043,32.3153228 35.9432082,32.3174503 C35.7336967,32.3215634 35.5320681,32.2375995 35.3874012,32.0859966 C35.242
2024-05-24 22:56:32 UTC	811	IN	Data Raw: 37 35 34 35 38 2c 2d 30 2e 35 38 37 32 30 32 32 37 36 20 32 35 2e 31 31 38 35 36 38 32 2c 30 2e 39 38 32 35 34 37 36 35 36 20 43 32 38 2e 33 34 39 35 39 30 36 2c 32 2e 35 35 32 32 39 37 35 39 20 33 30 2e 34 30 30 37 38 34 36 2c 35 2e 38 32 39 30 38 35 31 37 20 33 30 2e 34 30 30 37 38 34 36 2c 39 2e 34 32 31 32 34 36 31 35 20 4c 33 30 2e 34 30 30 37 38 34 36 2c 39 2e 34 32 33 38 35 32 33 31 20 5a 22 20 69 64 3d 22 e8 b7 af e5 be 84 22 20 66 69 6c 6c 3d 22 23 30 32 41 31 44 46 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 39 2e 35 31 39 39 30 34 36 2c 31 35 2e 32 36 35 39 38 30 35 20 4c 32 39 2e 35 31 39 39 30 34 36 2c 31 34 2e 39 33 38 34 37 33 38 20 4c 32 39 2e 36 35 32 36 30 31 33 2c 31 34 Data Ascii: 75458,-0.587202276 25.1185682,0.982547656 C28.3495906,2.55229759 30.4007846,5.82908517 30.4007846,9.42124615 L30.4007846,9.42385231 Z" id="" fill="#02A1DF"></path> <path d="M29.5199046,15.2659805 L29.5199046,14.9384738 L29.6526013,14
2024-05-24 22:56:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49739	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:32 UTC	627	OUT	GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	657	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-2905" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 200894 Expires: Sat, 25 May 2024 02:56:32 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e12bffc5f7f8-BNA
2024-05-24 22:56:32 UTC	712	IN	Data Raw: 32 39 30 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 34 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 34 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 6d 65 72 69 63 61 6e 20 65 78 70 72 65 73 73 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 Data Ascii: 2905<?xml version="1.0" encoding="UTF-8"?><svg width="80px" height="41px" viewBox="0 0 80 41" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>American express1</title> <defs> <polygon
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: a2 22 20 66 69 6c 6c 3d 22 23 30 30 37 30 44 36 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 38 32 22 20 68 65 69 67 68 74 3d 22 34 32 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 e7 bc 96 e7 bb 84 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 33 2e 30 30 30 30 30 30 2c 20 39 2e 32 39 38 30 37 37 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 e7 bc 96 e7 bb 84 2d 31 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 2e 30 30 30 30 30 30 2c 20 30 2e 37 30 31 39 32 33 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 43 6c 69 70 70 65 64 22 3e 0a 20 20 20 20 20 20 20 20 20 Data Ascii: " fill="#0070D6" x="0" y="0" width="82" height="42"></rect> <g id="" transform="translate(13.000000, 9.298077)"> <g id="-12" transform="translate(0.000000, 0.701923)"> <g id="Clipped">
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 33 2c 39 2e 31 33 35 36 36 35 39 37 20 4c 32 37 2e 38 30 38 33 34 30 37 2c 39 2e 31 33 35 36 36 35 39 37 20 4c 32 37 2e 38 30 38 33 34 30 37 2c 37 2e 38 31 34 38 36 37 32 38 20 4c 32 38 2e 38 32 33 30 33 31 35 2c 39 2e 31 33 35 36 36 35 39 37 20 4c 33 34 2e 34 32 31 33 30 39 34 2c 39 2e 31 33 35 36 36 35 39 37 20 4c 33 34 2e 34 32 31 33 30 39 34 2c 38 2e 38 34 35 31 34 36 39 34 20 4c 33 34 2e 34 32 31 33 30 39 34 2c 38 2e 34 37 35 32 36 36 36 32 20 43 33 34 2e 35 36 35 38 36 30 34 2c 38 2e 35 36 38 37 39 39 35 37 20 33 34 2e 37 31 36 30 38 2c 38 2e 36 35 30 35 32 32 38 32 20 33 34 2e 38 36 38 36 36 31 35 2c 38 2e 37 32 31 38 35 33 35 20 43 33 35 2e 30 32 31 37 31 35 35 2c 38 2e 37 39 32 37 31 31 38 20 33 35 2e 31 37 38 30 37 36 31 2c 38 2e 38 35 33 31 37 Data Ascii: 3,9.13566597 L27.8083407,9.13566597 L27.8083407,7.81486728 L28.8230315,9.13566597 L34.4213094,9.13566597 L34.4213094,8.84514694 L34.4213094,8.47526662 C34.5658604,8.56879957 34.71608,8.65052282 34.8686615,8.7218535 C35.0217155,8.7927118 35.1780761,8.85317
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 e7 bc 96 e7 bb 84 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 32 2e 39 32 30 36 38 33 2c 20 31 33 2e 36 39 39 32 31 31 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 43 6c 69 70 70 65 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 2d 34 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 70 61 74 68 2d Data Ascii: </g> <g id="" transform="translate(12.920683, 13.699211)"> <g id="Clipped"> <mask id="mask-4" fill="white"> <use xlink:href="#path-
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 2c 32 2e 34 37 39 36 31 35 33 20 43 33 32 2e 36 30 31 31 34 37 34 2c 32 2e 34 37 39 36 31 35 33 20 33 32 2e 33 35 36 34 35 2c 32 2e 32 35 31 39 32 33 39 37 20 33 32 2e 33 35 36 34 35 2c 31 2e 38 39 33 33 38 30 39 38 20 43 33 32 2e 33 35 36 34 35 2c 31 2e 35 32 35 38 36 32 36 20 33 32 2e 36 30 31 31 34 37 34 2c 31 2e 32 38 31 31 36 35 32 38 20 33 32 2e 39 35 31 31 38 37 33 2c 31 2e 32 38 31 31 36 35 32 38 20 4c 33 35 2e 36 31 30 32 36 33 32 2c 31 2e 32 38 31 31 36 35 32 38 20 4c 33 36 2e 31 35 33 30 33 37 37 2c 30 2e 30 33 38 37 38 33 31 30 38 38 20 4c 33 32 2e 39 39 34 36 34 37 31 2c 30 2e 30 33 38 37 38 33 31 30 38 38 20 43 33 31 2e 36 37 33 38 34 38 35 2c 30 2e 30 33 38 37 38 33 31 30 38 38 20 33 30 2e 38 38 36 33 37 36 36 2c 30 2e 38 34 33 37 33 33 33 Data Ascii: ,2.4796153 C32.6011474,2.4796153 32.35645,2.25192397 32.35645,1.89338098 C32.35645,1.5258626 32.6011474,1.28116528 32.9511873,1.28116528 L35.6102632,1.28116528 L36.1530377,0.0387831088 L32.9946471,0.0387831088 C31.6738485,0.0387831088 30.8863766,0.8437333
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 37 31 39 34 32 20 5a 20 4d 31 36 2e 34 39 36 39 34 35 37 2c 32 2e 30 39 34 31 34 36 31 36 20 43 31 36 2e 34 39 36 39 34 35 37 2c 32 2e 35 30 36 30 36 39 30 37 20 31 36 2e 32 33 34 37 37 2c 32 2e 38 34 36 36 36 31 32 38 20 31 35 2e 37 31 38 34 34 39 32 2c 32 2e 38 34 36 36 36 31 32 38 20 4c 31 33 2e 39 36 30 32 31 38 35 2c 32 2e 38 34 36 36 36 31 32 38 20 4c 31 33 2e 39 36 30 32 31 38 35 2c 31 2e 33 34 32 35 37 35 38 20 4c 31 35 2e 37 31 38 34 34 39 32 2c 31 2e 33 34 32 35 37 35 38 20 43 31 36 2e 32 33 34 37 37 2c 31 2e 33 34 32 35 37 35 38 20 31 36 2e 34 39 36 39 34 35 37 2c 31 2e 36 37 34 36 36 35 30 33 20 31 36 2e 34 39 36 39 34 35 37 2c 32 2e 30 39 34 31 34 36 31 36 20 5a 20 4d 31 32 2e 34 39 30 36 31 37 34 2c 30 2e 30 33 38 37 38 33 31 30 38 38 20 4c Data Ascii: 71942 Z M16.4969457,2.09414616 C16.4969457,2.50606907 16.23477,2.84666128 15.7184492,2.84666128 L13.9602185,2.84666128 L13.9602185,1.3425758 L15.7184492,1.3425758 C16.23477,1.3425758 16.4969457,1.67466503 16.4969457,2.09414616 Z M12.4906174,0.0387831088 L
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 37 38 34 33 20 4c 35 30 2e 39 31 39 32 34 37 32 2c 37 2e 36 35 37 32 37 38 34 33 20 4c 35 30 2e 39 31 39 32 34 37 32 2c 31 2e 35 33 33 37 30 34 32 36 20 4c 34 39 2e 34 38 34 36 30 32 38 2c 31 2e 35 33 33 37 30 34 32 36 20 4c 34 39 2e 34 38 34 36 30 32 38 2c 35 2e 30 37 36 36 31 39 31 38 20 4c 34 39 2e 35 30 32 30 38 31 32 2c 35 2e 35 33 31 35 32 39 34 36 20 4c 34 39 2e 32 33 30 39 33 30 31 2c 35 2e 30 37 36 36 31 39 31 38 20 4c 34 36 2e 39 33 38 34 32 37 39 2c 31 2e 35 33 33 37 30 34 32 36 20 4c 34 35 2e 31 33 37 32 31 2c 31 2e 35 33 33 37 30 34 32 36 20 4c 34 35 2e 31 33 37 32 31 2c 37 2e 36 35 37 32 37 38 34 33 20 4c 34 36 2e 35 37 31 33 38 31 39 2c 37 2e 36 35 37 32 37 38 34 33 20 4c 34 36 2e 35 37 31 33 38 31 39 2c 33 2e 39 39 32 30 31 34 38 33 20 5a Data Ascii: 7843 L50.9192472,7.65727843 L50.9192472,1.53370426 L49.4846028,1.53370426 L49.4846028,5.07661918 L49.5020812,5.53152946 L49.2309301,5.07661918 L46.9384279,1.53370426 L45.13721,1.53370426 L45.13721,7.65727843 L46.5713819,7.65727843 L46.5713819,3.99201483 Z
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 2e 32 39 38 31 32 32 36 38 20 32 38 2e 34 32 30 33 32 30 31 2c 34 2e 32 39 38 31 32 32 36 38 20 4c 32 36 2e 36 39 37 30 34 36 33 2c 34 2e 32 39 38 31 32 32 36 38 20 4c 32 36 2e 36 39 37 30 34 36 33 2c 32 2e 37 38 35 30 36 31 38 31 20 4c 32 38 2e 34 32 30 33 32 30 31 2c 32 2e 37 38 35 30 36 31 38 31 20 5a 20 4d 32 36 2e 36 39 37 30 34 36 33 2c 35 2e 34 35 33 31 31 32 39 34 20 4c 32 37 2e 33 38 38 31 35 30 39 2c 35 2e 34 35 33 31 31 32 39 34 20 4c 32 39 2e 32 31 36 37 36 37 34 2c 37 2e 36 35 37 32 37 38 34 33 20 4c 33 31 2e 30 34 34 39 31 31 35 2c 37 2e 36 35 37 32 37 38 34 33 20 4c 32 39 2e 30 30 36 35 35 34 35 2c 35 2e 34 30 30 32 30 35 34 31 20 43 33 30 2e 30 34 37 36 39 39 31 2c 35 2e 32 30 37 39 34 33 32 33 20 33 30 2e 36 36 38 38 39 30 32 2c 34 2e 34 Data Ascii: .29812268 28.4203201,4.29812268 L26.6970463,4.29812268 L26.6970463,2.78506181 L28.4203201,2.78506181 Z M26.6970463,5.45311294 L27.3881509,5.45311294 L29.2167674,7.65727843 L31.0449115,7.65727843 L29.0065545,5.40020541 C30.0476991,5.20794323 30.6688902,4.4
2024-05-24 22:56:32 UTC	214	IN	Data Raw: 39 32 30 39 31 34 39 2c 37 2e 36 35 37 32 37 38 34 33 20 4c 35 2e 31 30 38 34 31 32 32 39 2c 36 2e 33 34 34 39 38 32 37 33 20 4c 38 2e 30 32 31 31 36 30 37 36 2c 36 2e 33 34 34 39 38 32 37 33 20 4c 38 2e 35 34 35 39 38 34 35 36 2c 37 2e 36 35 37 32 37 38 34 33 20 5a 22 20 69 64 3d 22 e5 bd a2 e7 8a b6 22 20 66 69 6c 6c 3d 22 23 30 30 36 46 43 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0d 0a Data Ascii: 9209149,7.65727843 L5.10841229,6.34498273 L8.02116076,6.34498273 L8.54598456,7.65727843 Z" id="" fill="#006FCF" fill-rule="nonzero"></path> </g> </g> </g> </g></svg>
2024-05-24 22:56:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49742	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:32 UTC	377	OUT	GET /liquid/buyer/public/img/default.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:32 UTC	644	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:32 GMT Content-Type: image/png Content-Length: 6788 Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT etag: "66387ef8-1a84" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 221000 Expires: Sat, 25 May 2024 02:56:32 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e12c3d84f7e0-BNA
2024-05-24 22:56:32 UTC	725	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 30 00 00 02 30 08 06 00 00 00 98 f1 51 6f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 1a 3e 49 44 41 54 78 01 ed d6 c1 0d 00 20 0c 03 31 60 ff 71 fb 07 89 2d 4e 72 27 88 9c 3e b2 67 e6 2e 47 80 00 01 02 04 08 10 08 09 9c 50 56 51 09 10 20 40 80 00 01 02 5f c0 80 f1 08 04 08 10 20 40 80 40 4e c0 80 c9 55 26 30 01 02 04 08 10 20 60 c0 f8 01 02 04 08 10 20 40 20 27 60 c0 e4 2a 13 98 00 01 02 04 08 10 30 60 fc 00 01 02 04 08 10 20 90 13 30 60 72 95 09 4c 80 00 01 02 04 08 18 30 7e 80 00 01 02 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 01 03 c6 0f 10 20 40 Data Ascii: PNGIHDR00QosRGB>IDATx 1`q-Nr'>g.GPVQ @_ @@NU&0 ` @ '`*0` 0`rL0~0&@?@\e @ @rL2 @ @
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 10 30 60 fc 00 01 02 04 08 10 20 90 13 30 60 72 95 09 4c 80 00 01 02 04 08 18 30 7e 80 00 01 02 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 01 03 c6 0f 10 20 40 80 00 01 02 39 01 03 26 57 99 c0 04 08 10 20 40 80 80 01 e3 07 08 10 20 40 80 00 81 9c 80 01 93 ab 4c 60 02 04 08 10 20 40 c0 80 f1 03 04 08 10 20 40 80 40 4e c0 80 c9 55 26 30 01 02 04 08 10 20 60 c0 f8 01 02 04 08 10 20 40 20 27 60 c0 e4 2a 13 98 00 01 02 04 08 10 30 60 fc 00 01 02 04 08 10 20 90 13 30 60 72 95 09 4c 80 00 01 02 04 08 18 30 7e 80 00 01 02 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c Data Ascii: 0` 0`rL0~0&@?@\e @ @rL2 @ @9&W @ @L` @ @@NU&0 ` @ '`*0` 0`rL0~0&@?@\
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 01 03 c6 0f 10 20 40 80 00 01 02 39 01 03 26 57 99 c0 04 08 10 20 40 80 80 01 e3 07 08 10 20 40 80 00 81 9c 80 01 93 ab 4c 60 02 04 08 10 20 40 c0 80 f1 03 04 08 10 20 40 80 40 4e c0 80 c9 55 26 30 01 02 04 08 10 20 60 c0 f8 01 02 04 08 10 20 40 20 27 60 c0 e4 2a 13 98 00 01 02 04 08 10 30 60 fc 00 01 02 04 08 10 20 90 13 30 60 72 95 09 4c 80 00 01 02 04 08 18 30 7e 80 00 01 02 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 Data Ascii: 0&@?@\e @ @rL2 @ @9&W @ @L` @ @@NU&0 ` @ '`*0` 0`rL0~0&@?@\e @ @rL2 @
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 01 03 c6 0f 10 20 40 80 00 01 02 39 01 03 26 57 99 c0 04 08 10 20 40 80 80 01 e3 07 08 10 20 40 80 00 81 9c 80 01 93 ab 4c 60 02 04 08 10 20 40 c0 80 f1 03 04 08 10 20 40 80 40 4e c0 80 c9 55 26 30 01 02 04 08 10 20 60 c0 f8 01 02 04 08 10 20 40 20 27 60 c0 e4 2a 13 98 00 01 02 04 08 10 30 60 fc 00 01 02 04 08 10 20 90 13 30 60 72 95 09 4c 80 00 01 02 04 08 18 30 7e 80 00 01 02 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 01 03 c6 0f 10 20 40 80 00 01 02 39 01 03 26 57 99 c0 04 08 10 20 40 80 80 01 e3 07 08 10 20 40 Data Ascii: e @ @rL2 @ @9&W @ @L` @ @@NU&0 ` @ '`*0` 0`rL0~0&@?@\e @ @rL2 @ @9&W @ @
2024-05-24 22:56:32 UTC	1369	IN	Data Raw: 01 03 c6 0f 10 20 40 80 00 01 02 39 01 03 26 57 99 c0 04 08 10 20 40 80 80 01 e3 07 08 10 20 40 80 00 81 9c 80 01 93 ab 4c 60 02 04 08 10 20 40 c0 80 f1 03 04 08 10 20 40 80 40 4e c0 80 c9 55 26 30 01 02 04 08 10 20 60 c0 f8 01 02 04 08 10 20 40 20 27 60 c0 e4 2a 13 98 00 01 02 04 08 10 30 60 fc 00 01 02 04 08 10 20 90 13 30 60 72 95 09 4c 80 00 01 02 04 08 18 30 7e 80 00 01 02 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 01 03 c6 0f 10 20 40 80 00 01 02 39 01 03 26 57 99 c0 04 08 10 20 40 80 80 01 e3 07 08 10 20 40 80 00 81 9c 80 01 93 ab 4c 60 02 04 08 10 20 40 c0 80 f1 03 04 08 10 20 40 80 40 4e c0 80 c9 55 Data Ascii: @9&W @ @L` @ @@NU&0 ` @ '`*0` 0`rL0~0&@?@\e @ @rL2 @ @9&W @ @L` @ @@NU
2024-05-24 22:56:32 UTC	587	IN	Data Raw: 80 00 81 9c 80 01 93 ab 4c 60 02 04 08 10 20 40 c0 80 f1 03 04 08 10 20 40 80 40 4e c0 80 c9 55 26 30 01 02 04 08 10 20 60 c0 f8 01 02 04 08 10 20 40 20 27 60 c0 e4 2a 13 98 00 01 02 04 08 10 30 60 fc 00 01 02 04 08 10 20 90 13 30 60 72 95 09 4c 80 00 01 02 04 08 18 30 7e 80 00 01 02 04 08 10 c8 09 18 30 b9 ca 04 26 40 80 00 01 02 04 0c 18 3f 40 80 00 01 02 04 08 e4 04 0c 98 5c 65 02 13 20 40 80 00 01 02 06 8c 1f 20 40 80 00 01 02 04 72 02 06 4c ae 32 81 09 10 20 40 80 00 01 03 c6 0f 10 20 40 80 00 01 02 39 01 03 26 57 99 c0 04 08 10 20 40 80 80 01 e3 07 08 10 20 40 80 00 81 9c 80 01 93 ab 4c 60 02 04 08 10 20 40 c0 80 f1 03 04 08 10 20 40 80 40 4e c0 80 c9 55 26 30 01 02 04 08 10 20 60 c0 f8 01 02 04 08 10 20 40 20 27 60 c0 e4 2a 13 98 00 01 02 04 08 10 Data Ascii: L` @ @@NU&0 ` @ '`0` 0`rL0~0&@?@\e @ @rL2 @ @9&W @ @L` @ @@NU&0 ` @ '`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49744	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:32 UTC	384	OUT	GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:33 UTC	657	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-1516" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183439 Expires: Sat, 25 May 2024 02:56:32 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e12c69bcf7c4-BNA
2024-05-24 22:56:33 UTC	712	IN	Data Raw: 31 35 31 36 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 35 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 35 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 37 38 2e 33 34 34 31 20 32 2e 35 48 37 32 2e 31 36 35 36 43 37 31 2e 37 35 20 32 2e 35 20 37 31 2e 33 38 39 38 20 32 2e 38 30 34 34 33 20 37 31 2e 33 30 36 37 20 33 2e 32 31 39 35 36 4c 36 38 2e 38 31 33 32 20 31 39 2e 30 32 32 32 43 36 38 2e 37 35 37 38 20 31 39 2e 33 32 36 36 20 36 39 2e 30 30 37 31 20 31 39 2e 36 30 33 34 20 36 39 2e 33 31 31 39 20 31 39 2e 36 30 33 34 48 37 32 2e 34 37 30 34 43 37 32 2e 37 37 35 31 Data Ascii: 1516<svg width="105" height="24" viewBox="0 0 105 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M78.3441 2.5H72.1656C71.75 2.5 71.3898 2.80443 71.3067 3.21956L68.8132 19.0222C68.7578 19.3266 69.0071 19.6034 69.3119 19.6034H72.4704C72.7751
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 37 35 32 20 37 2e 34 38 31 35 37 20 37 39 2e 30 36 34 34 20 38 2e 32 35 36 34 38 5a 22 20 66 69 6c 6c 3d 22 23 30 30 39 43 44 45 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 34 2e 33 37 34 37 20 32 2e 35 48 32 38 2e 31 39 36 32 43 32 37 2e 37 38 30 37 20 32 2e 35 20 32 37 2e 34 32 30 35 20 32 2e 38 30 34 34 33 20 32 37 2e 33 33 37 34 20 33 2e 32 31 39 35 36 4c 32 34 2e 38 34 33 38 20 31 39 2e 30 32 32 32 43 32 34 2e 37 38 38 34 20 31 39 2e 33 32 36 37 20 32 35 2e 30 33 37 38 20 31 39 2e 36 30 33 34 20 32 35 2e 33 34 32 35 20 31 39 2e 36 30 33 34 48 32 38 2e 32 37 39 34 43 32 38 2e 36 39 35 20 31 39 2e 36 30 33 34 20 32 39 2e 30 35 35 31 20 31 39 2e 32 39 39 20 32 39 2e 31 33 38 33 20 31 38 2e 38 38 33 38 4c 32 39 2e 38 30 33 32 20 31 34 2e 36 32 31 38 43 Data Ascii: 752 7.48157 79.0644 8.25648Z" fill="#009CDE"/><path d="M34.3747 2.5H28.1962C27.7807 2.5 27.4205 2.80443 27.3374 3.21956L24.8438 19.0222C24.7884 19.3267 25.0378 19.6034 25.3425 19.6034H28.2794C28.695 19.6034 29.0551 19.299 29.1383 18.8838L29.8032 14.6218C
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 43 34 33 2e 31 38 35 32 20 31 32 2e 32 31 34 31 20 34 34 2e 35 34 32 38 20 31 31 2e 30 32 34 20 34 36 2e 32 30 35 32 20 31 31 2e 30 32 34 43 34 37 2e 30 33 36 34 20 31 31 2e 30 32 34 20 34 37 2e 37 32 39 20 31 31 2e 33 30 30 38 20 34 38 2e 31 37 32 33 20 31 31 2e 38 32 36 36 43 34 38 2e 36 34 33 33 20 31 32 2e 33 38 30 31 20 34 38 2e 38 33 37 33 20 31 33 2e 30 39 39 37 20 34 38 2e 36 39 38 37 20 31 33 2e 39 32 39 39 5a 22 20 66 69 6c 6c 3d 22 23 30 30 33 30 38 37 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 39 36 2e 37 36 38 36 20 38 2e 31 37 33 34 38 48 39 33 2e 38 30 34 31 43 39 33 2e 35 35 34 37 20 38 2e 31 37 33 34 38 20 39 33 2e 33 33 33 31 20 38 2e 33 36 37 32 31 20 39 33 2e 33 30 35 33 20 38 2e 36 31 36 32 39 4c 39 33 2e 31 36 36 38 20 39 2e 34 34 36 Data Ascii: C43.1852 12.2141 44.5428 11.024 46.2052 11.024C47.0364 11.024 47.729 11.3008 48.1723 11.8266C48.6433 12.3801 48.8373 13.0997 48.6987 13.9299Z" fill="#003087"/><path d="M96.7686 8.17348H93.8041C93.5547 8.17348 93.3331 8.36721 93.3053 8.61629L93.1668 9.446
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 43 36 39 2e 32 30 31 32 20 38 2e 36 34 33 38 32 20 36 38 2e 39 35 31 38 20 38 2e 31 37 33 33 34 20 36 38 2e 35 33 36 32 20 38 2e 31 37 33 33 34 5a 22 20 66 69 6c 6c 3d 22 23 30 30 33 30 38 37 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 30 30 2e 32 36 20 32 2e 39 31 34 39 37 4c 39 37 2e 37 33 38 33 20 31 38 2e 39 39 34 34 43 39 37 2e 36 38 32 39 20 31 39 2e 32 39 38 38 20 39 37 2e 39 33 32 33 20 31 39 2e 35 37 35 36 20 39 38 2e 32 33 37 31 20 31 39 2e 35 37 35 36 48 31 30 30 2e 37 38 36 43 31 30 31 2e 32 30 32 20 31 39 2e 35 37 35 36 20 31 30 31 2e 35 36 32 20 31 39 2e 32 37 31 31 20 31 30 31 2e 36 34 35 20 31 38 2e 38 35 36 4c 31 30 34 2e 31 33 38 20 33 2e 30 35 33 33 35 43 31 30 34 2e 31 39 34 20 32 2e 37 34 38 39 32 20 31 30 33 2e 39 34 34 20 32 2e 34 Data Ascii: C69.2012 8.64382 68.9518 8.17334 68.5362 8.17334Z" fill="#003087"/><path d="M100.26 2.91497L97.7383 18.9944C97.6829 19.2988 97.9323 19.5756 98.2371 19.5756H100.786C101.202 19.5756 101.562 19.2711 101.645 18.856L104.138 3.05335C104.194 2.74892 103.944 2.4
2024-05-24 22:56:33 UTC	587	IN	Data Raw: 32 32 38 33 32 20 35 2e 31 35 34 36 34 43 36 2e 32 36 38 30 36 20 34 2e 38 38 36 36 20 36 2e 34 32 37 30 33 20 34 2e 36 38 30 34 31 20 36 2e 36 34 35 36 32 20 34 2e 35 35 36 37 43 36 2e 37 34 34 39 38 20 34 2e 35 31 35 34 36 20 36 2e 38 36 34 32 20 34 2e 34 37 34 32 33 20 36 2e 39 36 33 35 36 20 34 2e 34 37 34 32 33 48 31 31 2e 37 33 32 37 43 31 32 2e 32 38 39 31 20 34 2e 34 37 34 32 33 20 31 32 2e 38 32 35 36 20 34 2e 35 31 35 34 36 20 31 33 2e 33 30 32 35 20 34 2e 35 39 37 39 34 43 31 33 2e 34 34 31 36 20 34 2e 36 31 38 35 36 20 31 33 2e 35 38 30 37 20 34 2e 36 33 39 31 38 20 31 33 2e 36 39 39 39 20 34 2e 36 38 30 34 31 43 31 33 2e 38 33 39 20 34 2e 37 30 31 30 33 20 31 33 2e 39 35 38 33 20 34 2e 37 34 32 32 37 20 31 34 2e 30 37 37 35 20 34 2e 37 38 33 Data Ascii: 22832 5.15464C6.26806 4.8866 6.42703 4.68041 6.64562 4.5567C6.74498 4.51546 6.8642 4.47423 6.96356 4.47423H11.7327C12.2891 4.47423 12.8256 4.51546 13.3025 4.59794C13.4416 4.61856 13.5807 4.63918 13.6999 4.68041C13.839 4.70103 13.9583 4.74227 14.0775 4.783
2024-05-24 22:56:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49743	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:32 UTC	383	OUT	GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:33 UTC	656	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-e1e" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183439 Expires: Sat, 25 May 2024 02:56:32 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e12c6fa8f7ec-BNA
2024-05-24 22:56:33 UTC	713	IN	Data Raw: 65 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 34 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 34 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e5 bd a2 e7 8a b6 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 e8 ae be e7 bd ae 2d e9 85 8d e7 bd ae e6 94 af e4 bb 98 e6 b8 a0 e9 81 93 22 20 73 74 Data Ascii: e1e<?xml version="1.0" encoding="UTF-8"?><svg width="80px" height="41px" viewBox="0 0 80 41" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title></title> <g id="-" st
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 34 34 39 36 34 2c 32 35 2e 38 30 36 36 32 37 33 20 35 33 2e 34 38 36 32 34 31 2c 32 35 2e 32 34 30 37 34 37 31 20 35 33 2e 37 33 30 36 32 30 35 2c 32 34 2e 36 37 30 33 33 39 38 20 4c 35 38 2e 33 30 39 39 33 36 2c 32 34 2e 36 37 30 33 33 39 38 20 43 35 38 2e 34 35 39 34 36 31 39 2c 32 35 2e 32 35 32 30 36 34 37 20 35 38 2e 36 30 37 30 31 31 38 2c 32 35 2e 38 32 34 37 33 35 35 20 35 38 2e 37 35 34 35 36 31 37 2c 32 36 2e 33 39 37 39 37 32 31 20 4c 36 32 2c 32 36 2e 33 39 37 39 37 32 31 20 43 36 31 2e 30 34 32 39 30 32 2c 32 32 2e 34 34 38 36 39 34 31 20 36 30 2e 30 39 35 30 32 35 38 2c 31 38 2e 35 33 36 37 36 34 32 20 35 39 2e 31 33 38 35 38 36 35 2c 31 34 2e 35 39 34 32 37 36 38 20 4c 35 39 2e 31 33 38 35 38 36 35 2c 31 34 2e 35 39 34 32 37 36 38 20 5a 20 Data Ascii: 44964,25.8066273 53.486241,25.2407471 53.7306205,24.6703398 L58.309936,24.6703398 C58.4594619,25.2520647 58.6070118,25.8247355 58.7545617,26.3979721 L62,26.3979721 C61.042902,22.4486941 60.0950258,18.5367642 59.1385865,14.5942768 L59.1385865,14.5942768 Z
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 37 2e 34 30 39 36 38 39 36 2c 31 39 2e 37 39 33 30 31 38 33 20 34 36 2e 38 38 36 30 31 39 34 2c 31 39 2e 35 35 38 37 34 33 39 20 34 36 2e 33 36 36 33 30 31 33 2c 31 39 2e 33 31 37 36 37 38 39 20 43 34 35 2e 38 33 33 34 30 39 32 2c 31 39 2e 30 37 30 39 35 35 31 20 34 35 2e 32 37 31 35 33 34 2c 31 38 2e 38 36 31 30 31 33 36 20 34 34 2e 38 32 30 33 32 31 32 2c 31 38 2e 35 30 32 38 31 31 34 20 43 34 34 2e 32 35 39 37 36 33 35 2c 31 38 2e 30 35 37 34 36 33 37 20 34 34 2e 33 31 38 33 38 38 32 2c 31 37 2e 35 32 31 35 37 35 31 20 34 34 2e 39 35 39 33 30 38 2c 31 37 2e 31 36 32 38 30 37 20 43 34 35 2e 33 37 30 33 33 39 37 2c 31 36 2e 39 33 32 34 39 33 38 20 34 35 2e 38 33 31 34 33 33 2c 31 36 2e 38 35 38 33 36 33 35 20 34 36 2e 33 31 34 39 32 32 33 2c 31 36 2e 38 Data Ascii: 7.4096896,19.7930183 46.8860194,19.5587439 46.3663013,19.3176789 C45.8334092,19.0709551 45.271534,18.8610136 44.8203212,18.5028114 C44.2597635,18.0574637 44.3183882,17.5215751 44.959308,17.162807 C45.3703397,16.9324938 45.831433,16.8583635 46.3149223,16.8
2024-05-24 22:56:33 UTC	170	IN	Data Raw: 31 36 38 20 4c 33 36 2e 38 32 37 35 39 37 37 2c 32 36 2e 34 31 33 38 31 36 38 20 43 33 37 2e 38 30 33 31 33 39 35 2c 32 32 2e 34 38 30 39 34 39 33 20 33 38 2e 37 37 36 30 34 36 34 2c 31 38 2e 35 35 38 38 33 33 35 20 33 39 2e 37 35 36 31 39 39 31 2c 31 34 2e 36 30 36 37 32 36 31 20 4c 33 36 2e 32 32 32 39 30 36 38 2c 31 34 2e 36 30 36 37 32 36 31 20 5a 22 20 69 64 3d 22 e5 bd a2 e7 8a b6 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0d 0a Data Ascii: 168 L36.8275977,26.4138168 C37.8031395,22.4809493 38.7760464,18.5588335 39.7561991,14.6067261 L36.2229068,14.6067261 Z" id=""></path> </g> </g></svg>
2024-05-24 22:56:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49745	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:33 UTC	627	OUT	GET /uploader/8e02e850002eb3ce0a0be48daf2693336403eb86.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:33 UTC	704	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:33 GMT Content-Type: image/jpeg Content-Length: 188709 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221cfd17a9d7dddde6172b2f0a611a29e3228316_221" Content-MD5: VSH/hgjIuSbNcLAgT62y9Q== ETag: "5521FF8608C8B926CD70B0204FADB2F5" Last-Modified: Wed, 09 Aug 2023 07:26:16 GMT x-oss-hash-crc64ecma: 8998513415771323797 x-oss-object-type: Normal x-oss-request-id: 665074451F5247373259390A x-oss-server-time: 1 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42716 Expires: Sat, 25 May 2024 02:56:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1308b08f7f0-BNA
2024-05-24 22:56:33 UTC	665	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 00 77 01 00 e8 03 00 00 00 77 01 00 e8 03 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 d4 03 00 00 03 a0 04 00 01 00 00 00 20 03 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifww02100100 ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 03 20 03 d4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 01 02 07 08 09 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 18 63 3a df 38 e6 79 47 97 b3 4f 37 e8 ac 95 c6 c9 d3 c5 62 af 0d 82 b8 59 ea 2d 15 16 9c 5a 13 3d b6 a6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]} Xc:8yGO7bY-Z=
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 83 73 34 70 3e 56 06 82 22 e9 74 2c a5 4d 09 f2 37 72 5e 6a c5 b9 1c ba ca 1b 0e b1 73 3d 2d a7 1a e2 3d 62 32 56 fd ca 46 9b 70 ec eb 32 11 92 8b 83 73 a9 11 ac 8b 30 6c 60 00 00 01 9b 69 d7 7e 53 d7 ce 5d ad 73 55 64 f6 6d 8b 36 7c b0 65 58 b9 74 b3 2a d0 db 49 66 1f 80 00 00 00 00 00 1e 0a eb e7 a9 dc 40 fe 73 fb a2 be 5f d5 e1 a1 94 1b 29 ef 91 3e 9f 3f 7e 9e 05 7a fc e5 7b 7c e9 2f a3 f8 39 5e bf 3f 71 6c 2e 39 92 f1 6e a4 e2 4e b2 dc 0b e5 38 17 53 a9 39 82 c2 fb 29 5a 1b 72 12 d1 0c 6f a8 8d d8 aa 33 cc 81 19 35 11 b4 ec 70 e8 d3 48 e1 be 9c 31 b9 26 2f 98 96 ec 59 17 98 1a b3 73 0d 00 0c 0a 1b 0e c5 49 b1 95 a5 cd 46 da 9d a9 96 f5 28 73 aa 72 95 e3 5f bd 6e b9 d3 9e be 18 79 de b5 c7 ea 43 f2 f5 e8 58 3d 1f 1d 53 0c e6 53 3c b9 20 00 28 d3 8e 9c Data Ascii: s4p>V"t,M7r^js=-=b2VFp2s0l`i~S]sUdm6\|eXt*If@s_)>?~z{\|/9^?ql.9nN8S9)Zro35pH1&/YsIF(sr_nyCX=SS< (
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: dc 6f 0d b3 72 b5 67 73 ba a4 8e 92 e8 52 1b 4b 7d 2b 17 ae 60 23 64 5b b5 4a 90 53 0e 45 ac b5 0d 9c eb 3b 98 bc d5 1a 89 d6 68 6b 59 8a 69 8d 18 9d c6 bd 61 2b 94 6e 51 4a 77 29 5c a7 52 96 ce 94 d7 41 86 99 7b 45 23 d2 61 b6 20 2b 21 a2 a2 1b 14 c8 d2 35 91 c4 76 d6 cd 73 b0 e2 a2 4b d9 f3 65 3d ff 00 29 d7 af e7 2f ec f9 ca 77 f3 e2 29 ef 97 e8 c4 cd a3 c7 ba 3c 3d 49 79 3e 84 37 83 ea d2 7c fe a8 3f 2f a7 15 78 6b 8e 5e cb 07 8b f7 0c fb 7c c8 3f 67 e3 0c d0 96 3d b7 b3 ca b5 57 f8 1f d1 3a 9f c8 fc a4 d7 d9 f0 a3 e8 e5 62 f7 73 46 5d 7b bb cb 9e 5d f4 f7 ab 23 b1 e5 5f e7 bf d1 28 7f b6 f1 cc fd 2f c1 a6 6b 8b c4 5f af a7 7e 75 75 e4 b6 6f d2 08 eb 08 c8 22 ae 55 ce 4f 2f 41 9e 6d b8 9e 26 e2 e4 85 e8 c8 ac 4e 4e 4d c3 57 3b 6d 6d 17 2b a9 63 9d 79 Data Ascii: orgsRK}+`#d[JSE;hkYia+nQJw)\RA{E#a +!5vsKe=)/w)<=Iy>7\|?/xk^\|?g=W:bsF]{]#_(/k_~uuo"UO/Am&NNMW;mm+cy
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: a9 c6 5a 0f 4e 79 fd 25 33 dc 93 e9 25 cf e8 36 f4 7e 71 e6 fe 49 63 01 4d e5 21 d5 37 dc f2 91 bc 6a b5 08 81 f1 b6 30 68 10 77 93 a9 0f d2 92 c3 ac 29 67 70 74 02 e4 c7 31 d5 3d e8 88 8e d9 39 d1 03 16 ff 00 12 e4 95 6a d2 8d 8a e9 d1 49 72 b4 f9 5b 38 96 f2 62 04 7a 63 06 03 5a 31 ac 79 49 a9 97 d0 57 10 c4 4b 14 31 a6 44 6d eb 7a 48 62 df 17 6d ae b2 c2 6c 8f 1b 4c a4 46 d4 43 df 2a a4 a2 c4 c7 92 de 49 8d 2c 90 e2 65 f0 65 22 34 4b b1 aa a2 fb 13 d9 79 07 9c ce cc 08 08 d9 90 d6 ad 32 1b ae 56 bd 60 0b 7f cd fb 5e 98 fa 3f 13 48 eb 49 f8 9f 63 87 7d 1f ad 05 ed fc 61 ba 16 03 da 1e 5c f3 27 9b 37 36 93 dc 63 09 e9 43 56 6a d7 0d dd 2c f7 59 d1 d4 9c 1a 0d 6d 13 45 49 78 2d 68 dd a6 34 60 64 28 dc 93 86 f0 8d a9 73 89 19 a7 c2 b2 46 92 22 a4 77 43 1e Data Ascii: ZNy%3%6~qIcM!7j0hw)gpt1=9jIr[8bzcZ1yIWK1DmzHbmlLFC*I,ee"4Ky2V`^?HIc}a\'76cCVj,YmEIx-h4`d(sF"wC
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 6a fa c8 9d 62 22 53 2d 84 98 80 ce b9 b7 16 4a 82 73 a9 08 8a d1 e5 b7 10 4a a5 47 df c3 86 fa a2 e6 47 94 dc ab 3c 5e 9b c9 4f ad e1 ec 73 56 ef 2f 7d 38 f4 e5 67 38 6b c3 af 71 ae bc 5c 9b 2b b4 d7 65 b9 01 73 5b a8 a5 26 26 a1 29 ec 72 f5 35 9d 50 55 ba 72 ed a3 2b de af 9b 50 db e9 5e 2f 52 7e 1f bc b4 7d 4a 67 9f de ce bd de 84 7e 2f ce 8f d5 61 96 9f 7f e6 6d fe 8f 8d d2 f9 42 7e 7e ad da ca 25 01 2c 62 ca 54 3a 30 47 09 d6 ef 92 8c cc 3a 39 be a9 37 0b b1 c4 91 d9 dc ab 77 aa 9f ac 00 00 b1 d6 8e 92 48 91 e7 9a c9 93 e8 a7 95 e6 ff 00 97 19 d5 db ba 42 91 bc d1 f8 c0 94 ee a2 7b 8d c4 9b 1a 37 c6 86 b8 0c 89 08 6e a6 63 6b 2a 90 cb 9e 75 b5 ed cc 0b a9 61 56 a8 dc a1 31 bd 52 22 69 d0 6f 32 d8 4e b9 2b 6d cd 45 12 be b9 97 d5 f1 f2 bd aa d5 6f 41 Data Ascii: jb"S-JsJGG<^OsV/}8g8kq\+es[&&)r5PUr+P^/R~}Jg~/amB~~%,bT:0G:97wHB{7nck*uaV1R"io2N+mEoA
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: d8 76 ab 18 fe b9 cb 75 e5 5c dc 78 55 72 3c d3 d1 ca ad 04 77 ff 00 27 6f 41 f8 bd 59 b8 c0 28 34 c2 3b 9e 3d fa be 08 2d c9 61 b2 a1 a4 11 e6 a3 a1 33 2c c0 a0 ff 00 cf d5 5d 32 eb 16 bf b1 f3 3a 1f 3e 97 5e 77 47 f2 f7 a4 4e d3 57 61 b8 4b d7 e6 b1 d4 74 8e 5d 2f 9c bb 4e c6 ca b5 e8 fe 6f 92 a7 ce 03 49 a7 5a b9 22 cb ae 48 b9 b8 de df f2 7d c4 eb 61 be e4 04 fd 1e 51 e5 fd c5 97 cf f5 dc b6 73 3e 55 bb d7 f8 37 5e 8f 13 a9 d5 4c 54 e6 a1 66 43 dc 70 1e d1 cd fd 7c 74 53 70 00 00 00 02 ec 7d 2d e6 f0 97 cb 64 ba 75 5c ba 6d 4e 56 ae 99 3d a4 b5 c1 3c a4 25 8a 60 da 49 28 1d 61 c1 21 69 dd 57 f9 e8 38 cd 72 d7 2a 7f a9 0a c7 c4 8a a4 1b 21 ba fb 50 9e 8e 74 8f b3 e1 80 f4 63 df cf fe cb bf 67 ce e8 3e af 8c d6 91 ac 88 9c 68 41 69 3c 79 c3 a3 8b 1d 3b Data Ascii: vu\xUr<w'oAY(4;=-a3,]2:>^wGNWaKt]/NoIZ"H}aQs>U7^LTfCp\|tSp}-du\mNV=<%`I(a!iW8r*!Ptcg>hAi<y;
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: b6 b9 75 f4 f8 f2 dd ab ef 0e 9e 90 88 9d f4 cd 73 dd cf b5 f8 7b e8 53 19 e7 2a 9a 18 91 31 59 53 9d eb f9 b5 4f 4f 0b 67 9f bd bc b1 f9 7e bf 38 f9 9f b3 a0 7a 3e 4d 27 db f9 f8 ba f9 e9 6f 54 cb 3e 52 de 2f d0 4c 7d 1f ca 46 5e b0 93 74 83 a1 e0 e5 b9 2c 3b 37 33 a0 6e 5f 56 a4 a8 08 e6 da af 14 65 c3 0d 71 a0 9e 6a 24 e6 ec f2 57 63 72 09 8d 16 d3 35 33 56 02 da 74 2e 26 39 4c f8 b1 22 50 39 77 b7 fc 1f 7d 4b eb f9 58 7b 7c b8 c0 02 c3 d2 ca 56 c6 e6 c3 73 d0 b5 30 84 2f 0f a7 69 eb f3 3d 0b 3d 27 15 e3 8f 7f 91 5f cd 7f 41 98 f0 fe 89 c5 79 ad 7e 9f c9 4f 74 f9 26 b5 35 4e a2 b8 5f 1c d3 bc 79 97 dd c2 f0 cb 89 b8 81 7b 29 04 53 7a f7 5f 37 3b e5 df 88 b7 a0 9f 52 a5 f3 9b e6 11 50 63 1a 9a 6b 53 7d 4a fd 1e 1c 97 b6 b2 ca b8 e6 7a f6 e7 87 cc fa 55 Data Ascii: us{S*1YSOOg~8z>M'oT>R/L}F^t,;73n_Veqj$Wcr53Vt.&9L"P9w}KX{\|Vs0/i=='_Ay~Ot&5N_y{)Sz_7;RPckS}JzU
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: d3 1d c6 bc 1b 0d 8e 51 df 87 95 7d dc 3d 1d b9 cc c9 c1 e9 71 3c f2 44 8a 5c 27 16 1d 54 fa 6b 8f 04 7c eb a7 46 60 c6 b6 37 84 97 d5 e3 c9 3a 53 23 5d cb 8f da f8 b6 2b f5 eb f8 7f eb ee fc be 9e d1 f6 bf 0f 74 f4 fc 1e 53 b1 c1 1b e9 b6 f6 f9 de 23 e1 fd 23 c8 f5 33 f5 fc 4e 33 df e5 fa 77 0a b1 c5 4f 4c 9a d8 e7 b4 e3 f9 3c f2 b4 3d a9 ce e4 0e 25 b9 6b a8 73 53 c5 8e 00 af 4e 5f 2f 33 f1 ed 48 9b d5 a5 4e db 9a 9a 0f 47 a3 81 de e3 d2 6f 63 ab 79 7e c5 3f 87 d1 ae 7a be 7b cf a1 f1 ee fe 9f 9b df fc bd ee 3c 3d 8f a6 b6 23 32 b0 6c 9c 9e 57 d7 9e d2 e0 f4 f1 47 22 6e 1f 23 72 67 2e 87 37 53 d6 e4 2e 6a 06 e2 e3 aa 95 c7 a4 19 e9 f8 9e 8c eb 58 64 dd 4f 08 eb 1e 82 9a b5 f2 eb 13 73 11 ee f1 b0 f3 f5 f3 47 9b bf 39 ef c2 46 3a 23 1d ac 9e 3f d4 77 9f Data Ascii: Q}=q<D\'Tk\|F`7:S#]+tS##3N3wOL<=%ksSN_/3HNGocy~?z{<=#2lWG"n#rg.7S.jXdOsG9F:#?w
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 3b e4 7c 4a 6b 5c 26 38 ac 95 fa 9c 38 f4 58 2d 44 cd 72 94 e5 ea 71 cb dc db b7 82 f5 3e 46 5f 67 e7 3d f5 79 53 e5 df ac f8 7d 5c f3 e9 f9 af 1c 2b d1 1f 33 dd 5c 8b f3 af 83 f4 d3 d7 df 5f 67 e3 fa 64 f5 ea fc be 8f 1e f1 7e 93 4f 5f c4 ee 5d 7e 23 1b cf 11 5e 7a 84 bb c5 ba 2a e9 f0 cd 9c 66 76 12 47 1e 92 d5 d3 9d c9 8a 0c f5 e6 ef 57 2e 67 17 d8 f9 6b af 07 d0 e1 7e 0f da da 3b 70 ee ff 00 4b f1 f2 dd bc 2d 33 12 39 0c bc 9a 7a 42 9c ac aa 63 d7 36 f3 bc 54 b9 ea eb 86 0a 8d 9d 64 30 d8 8f b9 a2 69 dc 3d 0d 37 61 39 2c cc 66 ac 1a b9 4d d6 a3 d9 05 3e 9e b9 df e6 d4 5c f8 c1 d0 06 c3 d3 ab 65 55 ab 97 88 9b 01 15 d4 65 e9 4e dc b9 2f d3 f3 cb 7c ff 00 4f a6 39 74 8f 1b 08 9a 8a b6 53 5f 3f 3d 1c 2c 5d 39 fa 4b f3 ff 00 62 4a 3a 68 40 2a b0 73 9e fc Data Ascii: ;\|Jk\&88X-Drq>F_g=yS}\+3\_gd~O_]~#^zfvGW.gk~;pK-39zBc6Td0i=7a9,fM>\eUeN/\|O9tS_?=,]9KbJ:h@s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49748	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:33 UTC	393	OUT	GET /uploader/75bb66d9a11a9ab16f2c075001ef48e9978f6a9b.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:33 UTC	704	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:33 GMT Content-Type: image/jpeg Content-Length: 75754 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221d1f4e30e49d095b9095e9dca995b966881575_221" Content-MD5: 2n8CXnq7zIaXKca0l7MqZg== ETag: "DA7F025E7ABBCC869729C6B497B32A66" Last-Modified: Wed, 09 Aug 2023 07:26:50 GMT x-oss-hash-crc64ecma: 1784269405410895423 x-oss-object-type: Normal x-oss-request-id: 665074458BAF67343020E0CC x-oss-server-time: 77 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42716 Expires: Sat, 25 May 2024 02:56:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e13089056a79-BNA
2024-05-24 22:56:33 UTC	665	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 e0 93 04 00 e8 03 00 00 e0 93 04 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 e8 03 00 00 03 a0 04 00 01 00 00 00 01 02 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipimagery40210ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 02 01 03 e8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 02 03 08 01 09 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}X
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 00 08 c6 8b 61 d6 65 6f 42 40 18 94 b4 62 70 a2 d1 39 e9 81 16 88 23 e2 d5 b3 45 6f cf 00 6f 9c f4 de 54 69 7d 6d 29 35 dc d9 46 39 27 a5 72 11 c2 8f 17 de 74 56 91 18 7a 3a b3 ba 6a e2 ac ea 73 21 d5 68 d1 96 99 6c b4 ae ca d1 7c f6 54 57 29 35 39 ac 39 9e b4 81 f2 23 cc 51 3b 65 36 52 ab 6a 41 d9 ae 96 af a2 52 69 46 36 9d 6d 22 6c b8 be cd 2d 90 b3 56 32 51 f6 51 91 6e 37 ce 32 6d 4b 4c 15 51 66 a4 d2 b6 33 e1 88 6f f2 f2 8b d2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 63 1d f8 d6 66 75 c7 b2 62 bf 4b e2 d6 dd 15 be 3d 5d 17 7d 46 04 5f 02 b3 d9 7a 4b 5e b5 43 48 69 4b 6a 3d 55 34 89 a6 ff 00 9c 3e 6f dd 58 bb 7e 4f de 75 e4 ca bd 22 aa c2 8d 27 2f 97 8d 74 6b 7d 33 df f8 e9 b0 6b 6b 5c c7 65 a9 55 c7 7d 57 cf d1 69 e9 e5 d6 3d 58 6e 0f Data Ascii: aeoB@bp9#EooTi}m)5F9'rtVz:js!hl\|TW)599#Q;e6RjARiF6m"l-V2QQn72mKLQf3ocfubK=]}F_zK^CHiKj=U4>oX~Ou"'/tk}3kk\eU}Wi=Xn
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 54 4f 99 df 13 e7 76 c4 79 fd 91 9e 7f a1 0b e3 f7 c7 f3 74 f1 c7 4f 99 df 87 07 5c 57 67 44 57 64 f5 5a 9f 26 3e 5b 3d bf f7 1f 11 ba 3e cb e2 b2 b5 a8 00 00 00 00 00 00 00 0a 65 2d aa e3 6a 75 53 31 7c 84 4a 96 c9 9c 03 92 95 32 a9 6a cc 91 94 b5 ad 17 ca da ba 66 56 d8 b4 be a6 b4 5a f5 c2 2e b7 e4 5c 61 dc 4c a7 12 f9 e1 dd 1d 75 6e 34 ab 14 ea 4c 1b 2d 4f ae 78 24 84 d7 db 7e 57 6e f5 f9 ae ea 77 d3 70 74 fa 18 71 3a 11 af b2 bf a7 af 51 c1 3c 8e 00 e0 62 15 ca 5b 48 65 b6 c2 36 0e b8 cd 5e b9 13 4e fd 28 00 00 00 00 00 00 00 00 70 88 89 e0 eb ac 7c ff 00 b5 11 e6 7a 71 5c 1d 71 1e 2f a1 1d 8e dc 79 37 eb 8b f5 56 dc 96 ea ce 70 f6 d3 8d 6d d1 79 ea dd 8a db 1f 4a f1 9b 75 5e bd 1a d3 3b a7 93 d5 9f aa 7e 49 62 eb e6 48 00 00 00 00 00 00 10 29 11 a5 Data Ascii: TOvytO\WgDWdZ&>[=>e-juS1\|J2jfVZ.\aLun4L-Ox$~Wnwptq:Q<b[He6^N(p\|zq\q/y7VpmyJu^;~IbH)
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 3e db 07 6c e4 6f 4a 44 d6 8b 35 88 98 e9 37 ae 3d 3b f7 3b de 55 98 89 9b da 92 5a e3 da 72 39 18 75 bc 2c 3b 2b 1d a4 3c 5e 57 1d e5 b5 c3 26 1c e2 b8 19 6f dd a6 51 32 f1 de 94 d9 d6 9a cc d3 20 f4 52 d6 5b c5 86 28 00 00 00 00 00 00 06 2a fa d3 1f 46 e7 6e 49 fd 79 f9 44 7d 00 00 02 07 c8 b7 d8 af 09 9c 6b 31 56 c5 cd 83 35 8e 69 92 9e 26 3e 1a 64 b3 eb 9b c0 d2 f9 96 ac cc c5 62 b6 cc 24 ef 5e a3 b6 2b d8 8e b5 fb 2c aa e1 ac 61 b1 36 c7 e9 f6 18 b4 d3 3a f9 f0 4f ca de 31 3d 11 12 22 63 e0 47 21 68 f8 75 1c 0e ab db a4 ea a5 71 cc 42 38 ab 53 5f 35 db bb 6f 74 79 f4 b6 38 09 ad 15 22 54 b1 56 b3 44 5c 5a 99 7c e3 69 a6 01 13 7c ae 35 b7 a9 b9 fa 36 49 33 33 25 39 ca 6b 5c eb 50 98 ba 5f 22 b3 97 39 d4 f2 de 52 53 7a 73 54 f1 ea ef b4 50 ed d9 77 61 Data Ascii: >loJD57=;;UZr9u,;+<^W&oQ2 R[(*FnIyD}k1V5i&>db$^+,a6:O1="cG!huqB8S_5oty8"TVD\Z\|i\|56I33%9k\P_"9RSzsTPwa
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 00 3e 15 e4 ea e4 54 23 4e fa aa 4d 35 72 70 a7 0d 8b 64 b1 ca aa fc 69 e9 fc af 99 47 db 12 e1 0a 92 f0 f1 7d 84 a7 65 b3 e4 72 39 00 7d 02 f6 e6 8f 0e f2 7d 2e a9 cf bf ec 5b e1 ca 27 99 d9 6c ed 53 4b cd b1 bc 4f 0d e6 fc b7 29 e6 b3 6d 82 63 e4 50 7d ad b0 89 2b 57 b8 cc b5 32 66 32 ef 4c b3 90 00 eb 23 88 9c b5 c2 3b 0d 56 b5 3e 56 b2 e1 7c ee 68 b4 4d 69 94 be 75 e9 60 3b c0 22 8f cd 5a 6d 48 9c fb cf 42 c6 97 54 77 11 e9 81 96 56 73 7a 8d 22 6d 48 98 4e c3 66 52 fd b1 3d 05 5e 2d 6e be 32 f7 cf b2 97 ee d2 fc 91 ca 1d 87 08 8e 15 8c 68 bc 25 6d 11 64 0d a9 21 7c aa 16 57 6f 5c c3 62 e7 6d a1 9d f9 23 c6 9a b6 b5 f3 d5 27 b2 29 36 1a 5f b2 72 ca d6 a4 80 30 cd 62 9a 2a 71 73 b5 4d 7d 4f 33 92 cf be 6b 2c 73 b2 c6 76 55 5e 8d 2c 99 6d 21 9f 75 22 9d Data Ascii: >T#NM5rpdiG}er9}}.['lSKO)mcP}+W2f2L#;V>V\|hMiu`;"ZmHBTwVsz"mHNfR=^-n2h%md!\|Wo\bm#')6_r0b*qsM}O3k,svU^,m!u"
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: ef 0f 7b 41 b0 97 db cc db 31 7d b7 8b ae 2d 85 5b 44 67 a5 26 97 bf 75 73 ea 2d 33 d7 33 13 77 ce c5 2a 8a 77 fe 5a ee b9 cf 06 cf 1f 5a 6c b7 a6 d4 ab 6a 66 ee b3 32 d5 00 00 00 c5 2a 45 a4 ce 00 00 00 00 00 00 00 00 04 16 aa 27 e4 be c4 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 04 c7 14 0a a8 49 d6 34 d6 86 5f 31 d7 d2 26 0f 4f 34 cd 6f 69 9a e5 a3 2a f5 fa 00 04 02 d4 65 a7 6b 1a d6 9a 41 cc 63 c2 77 2d 36 54 45 86 f4 d3 d7 53 75 cf 91 44 95 b0 da f4 b6 d7 a4 50 26 de 68 bc 5f 26 bb a9 1b 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 84 16 5d 1d 56 58 75 e4 fb 17 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 a0 a3 a6 90 56 33 bc 19 97 2b 0a 33 d1 95 8e f0 95 b5 f1 1b 4b a7 9b ed aa 48 00 00 3e 1d 06 9a ce fa 0e 74 9d b6 75 04 6e 5c b4 df c7 Data Ascii: {A1}-[Dg&us-33wwZZljf2E'I4_1&O4oi*ekAcw-6TESuDP&h_&]VXuV3+3KH>tun\
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 56 f9 bb ed d1 16 7e 9e 1b 7f af e0 cb 6b 8f d9 00 00 10 26 be ad eb 89 8a 86 51 3b 35 b2 22 d9 68 9f 3e 83 a4 82 e7 bd 57 2d f6 2f 5e 19 16 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 14 1e ac fc c1 ee f9 fe bd f9 ef 42 7f 1d 3e c3 aa 27 cb df 97 fe a9 a8 de b4 d7 db 7e 73 a8 fe 87 e7 b3 6a 96 d6 6e bf 27 f4 f0 ff 00 21 fa 1d 9b ca cb d1 7f 75 f9 fe d2 fa df 94 fb 36 1e 38 ad f4 15 6f e8 2f 91 fa 8d 4f 3d 11 5e b7 99 83 8c f7 69 13 5c 1e c6 f6 f3 b9 e7 b7 c3 63 7b fe 3e c2 f5 bc bf b2 04 56 16 f1 cd 35 ad e5 be fa e5 e9 9c 94 4e d8 e6 4d 39 56 6f 13 19 54 d2 e9 d5 c5 9b a6 60 00 08 d5 2b 41 c5 ec 73 16 15 2c c6 40 00 00 75 18 a6 78 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 d7 7d 59 f9 57 e8 7c 7d ad c1 85 9b Data Ascii: V~k&Q;5"h>W-/^B>'~sjn'!u68o/O=^i\c{>V5NM9VoT`+As,@ux}YW\|}
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 16 ad 38 fd 69 fa 37 e4 fd f7 80 00 15 8e 3e 9f 2c fc 87 d4 49 56 b8 56 df aa 69 db cd 7c 1d 5b a7 d3 f3 37 6f d5 7c e2 40 00 06 98 e7 ec c3 89 90 9a cc a2 20 cc 4c aa 97 1d b1 cf b5 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 0f a9 f8 7d 98 00 00 30 f3 53 39 3b 23 b2 be 06 7a f4 67 7a af 37 44 26 3a ef df 6b c8 b7 7a 3c 40 00 00 f2 f7 3f 65 7d 36 84 6c a2 b1 33 96 59 aa d8 1d 1c 7d b3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 2d 01 2f 90 fb 12 b4 12 00 00 0e 15 98 f4 c1 2d 04 9a 9d 67 11 37 c9 6c 8b e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 8i7>,IVVi\|[7o\|@ L@}0S9;#zgz7D&:kz<@?e}6l3Y}-/-g7l
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: a1 fd 8f 24 e9 d5 8b 8d 96 cc cf 8a d1 1c 4d ea 9b ab ba d9 f7 02 85 d3 d6 47 a1 6c e5 6f f8 96 ab a5 e9 0e 3c 28 b6 d7 4a e2 df 44 69 85 1c 1d 8c 62 4e 0b 0e 89 37 4b 67 fb fb 2d 56 4f d4 77 50 e2 51 be f6 3a c5 03 13 d9 bb d4 b6 6c 24 d5 ac 36 48 ee d3 a2 f6 66 17 5f b1 07 a3 aa eb 88 32 46 39 8c 0a 35 96 71 0f 3f 48 ab 60 b4 cc 69 b0 76 98 a1 1f d4 34 ab 46 86 ba 02 77 1f d2 4c 5a fe 72 e0 76 dc 60 31 b6 b8 ac 88 a2 4a a4 7f 4d fc a4 e3 8e 44 d9 d4 d6 e7 e9 9e 67 2a ef 2d 3a 6c 97 9b e1 7b cf ba ac 5e 41 df 4d 7d 3b 66 57 1d c1 0c a6 3c 06 16 07 47 81 14 cb 24 e3 df fc c1 b0 10 b1 3b 8d 9f 50 bc c5 16 e3 56 d8 59 5c 9c 75 36 70 ed b0 6a 21 f6 73 74 cf 69 56 53 24 9f 8a ba cd ea 1b ce 12 d6 0f 23 6a 00 2a df f3 d6 da e3 bf a4 06 ba fb 1b e1 2d aa ea db Data Ascii: $MGlo<(JDibN7Kg-VOwPQ:l$6Hf_2F95q?H`iv4FwLZrv`1JMDg-:l{^AM};fW<G$;PVY\u6pj!stiVS$#j-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49746	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:33 UTC	384	OUT	GET /uploader/4f4833f5cd52885ef5e46ba206cdc229.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:33 UTC	581	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:33 GMT Content-Type: image/jpeg Content-Length: 359412 Connection: close Cf-Bgj: h2pri ETag: "F379E5F47DAD66BD7D7CB8E67A3545F0-1" Last-Modified: Tue, 31 Oct 2023 09:36:32 GMT x-oss-hash-crc64ecma: 16025932744812259257 x-oss-object-type: Multipart x-oss-request-id: 665076C38BAF673739EA76DE x-oss-server-time: 5 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:56:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1308d9ef7ec-BNA
2024-05-24 22:56:33 UTC	788	IN	Data Raw: ff d8 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 58 59 5a 00 00 01 f4 00 00 00 14 67 58 59 5a 00 00 02 Data Ascii: @ICC_PROFILE0ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCrXYZgXYZ
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 0f 01 02 03 04 05 11 00 06 12 21 07 13 31 41 14 22 51 61 32 71 81 15 23 42 91 a1 08 52 62 b1 c1 16 24 33 72 d1 43 82 92 e1 f0 17 34 53 a2 b2 f1 25 54 63 73 c2 26 44 83 35 93 18 36 a3 b3 d2 45 46 55 64 95 ff c4 00 1c 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 01 02 03 06 00 07 08 ff c4 00 45 11 00 01 03 02 03 04 08 05 03 03 01 08 01 04 03 01 01 00 02 03 04 11 12 21 31 05 41 51 61 13 22 71 81 91 a1 b1 f0 06 14 32 c1 d1 23 e1 f1 15 42 52 33 16 24 43 62 72 82 92 a2 b2 07 53 c2 d2 34 44 e2 f2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 83 44 ab 1a 64 d0 5c 27 c3 38 34 3c 3d bd 7e 63 ae 0f 35 e9 51 17 07 61 62 37 07 d2 de d8 52 97 3a 58 e0 bf 2d 55 bc 4c 63 11 6a fb f8 e9 bb 7f c4 df a7 d3 f9 7c b1 c9 6d 0a 6c 6d e9 1b a8 d5 15 13 ec 6c 8b 4e 87 13 Data Ascii: !1A"Qa2q#BRb$3rC4S%Tcs&D56EFUdE!1AQa"q2#BR3$CbrS4D?Dd\'84<=~c5Qab7R:X-ULcj\|mlmlN
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 76 fa e3 14 2c 36 02 14 5e 52 95 74 97 6f 62 7f d3 11 95 3d 5a 40 06 c7 b9 3e 98 88 b9 4e 38 80 97 d4 94 93 7f f0 f7 db eb 8f 2f 29 2e bc e0 42 90 10 12 94 a4 f9 7a 93 f5 f5 c5 54 a9 03 40 53 80 a6 ca 17 49 17 ed be d8 c5 c7 39 36 d0 e9 e8 42 53 a7 63 f5 c4 07 df 75 f5 04 34 82 b5 28 d8 0d 8d ce 3c bc b1 52 de 92 ff 00 22 39 2a e6 79 40 49 e9 f2 c5 f3 10 1a a5 46 d2 a5 07 1f 23 ef 16 7b fb 7c b1 be 04 24 52 d9 2b 72 ca 92 b1 e6 57 ee fb 0c 1f 64 0c 88 6b 8e b7 59 ae 34 4d 35 2a bc 66 15 b7 89 50 3d 4f f0 0f d7 00 57 d7 c3 b3 a0 33 4c 72 e1 bc 9e 01 6b 14 4e 99 f8 5a b1 e1 ff 00 0e 95 52 53 55 7a db 37 65 5e 68 91 d6 3f c4 ff 00 ea 28 7e ef a0 ef f2 c3 ca 93 45 43 02 e1 22 e7 a9 b6 24 42 87 bd d4 06 e0 74 da de c3 04 90 21 82 ab 28 13 b7 6c 7c 0b 6c ed a9 Data Ascii: v,6^Rtob=Z@>N8/).BzT@SI96BScu4(<R"9y@IF#{\|$R+rWdkY4M5fP=OW3LrkNZRSUz7e^h?(~EC"$Bt!(l\|l
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 4d 63 ec 97 52 88 70 1f 5d a3 ba e9 4a 6d cc 03 75 0d 4b 4e dd 2d 7d 89 c0 d8 df 2b b0 8c 82 70 d8 21 a3 6e 37 f5 9c 84 32 e6 5f 93 9b eb 71 e9 10 dc 6d b9 b2 9a 71 c4 2d fd 5c b4 84 a0 ae f7 00 9b 1b 5a fb f5 c1 9e 52 c8 99 8e 83 c4 6c ba dd 76 96 eb 0d 26 49 5a 64 37 f7 ac ab 42 14 a1 67 13 b7 61 b1 b1 c3 3e 8b 41 14 de 29 50 e3 4c 7b c6 4c 62 81 2a 75 42 49 40 49 7a 43 ef 21 0a 55 86 c9 48 4a 42 10 91 b2 52 90 06 03 28 1f b4 3b 91 e4 29 9c d7 00 3d 13 98 7f bd c1 f2 2c 23 51 b1 53 64 e9 55 87 a1 1f 2c 68 22 63 06 68 59 6b 26 98 38 30 65 65 16 92 c2 6a 9c 75 ad d5 26 ac 22 05 19 d7 e5 c8 75 5d 10 86 9b 0d 82 4f cf f9 62 56 62 9e fa f2 5a e9 d1 81 7b 33 66 f9 cb aa 4c 86 d9 d4 eb 11 4f 9d b4 ac 7e 1f bb 43 63 7b 77 c5 44 9a a5 3a 1a 6a 30 aa 0b 94 db 99 Data Ascii: McRp]JmuKN-}+p!n72_qmq-\ZRlv&IZd7Bga>A)PL{Lb*uBI@IzC!UHJBR(;)=,#QSdU,h"chYk&80eeju&"u]ObVbZ{3fLO~Cc{wD:j0
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: f0 7d 9a 5c 66 56 93 06 42 5c 0d bc 43 81 b0 52 14 ae e5 48 3f 0a bf 42 37 1d c6 03 eb 5a 52 5a 37 f8 ad b6 3b d9 5c 03 98 39 24 f1 dc b5 c5 3f 60 f1 5d 9a 26 47 67 2e e5 6a 73 e8 7d 6c 84 39 21 d4 e9 01 47 e2 36 ef bd f0 1d 93 f2 fc ba 6d 4f ed 76 5c 75 32 90 4b 81 68 b8 d2 70 7b 96 f2 8c 29 82 29 78 97 14 a4 8f 22 45 ce 19 f9 92 2d 0f 24 64 d9 89 79 08 62 a1 21 85 21 b4 db 52 d3 71 df d3 e9 be 32 a6 68 7d db 1e fd 49 48 63 9a 5a 89 9b 13 06 f5 cb 42 0c 6c e3 5c 2f d7 67 29 af 0e de a9 6b 71 5a 8a 95 a8 f4 1e a7 d3 17 f2 aa b1 e6 42 f0 59 69 09 8d 09 83 a5 4e 00 35 2c 8d b7 3d ce 20 e5 7a 55 3e 32 6a d3 73 03 65 c8 ef 46 71 b6 47 33 4a 83 84 79 55 6f f5 c6 be 1c 41 2f d5 57 4d 42 02 59 7d cf 23 ab 36 09 f5 c3 03 5f d0 46 e0 d6 df 0f bf 25 d6 42 c8 2a 2a Data Ascii: }\fVB\CRH?B7ZRZ7;\9$?`]&Gg.js}l9!G6mOv\u2Khp{))x"E-$dyb!!Rq2h}IHcZBl\/g)kqZBYiN5,= zU>2jseFqG3JyUoA/WMBY}#6_F%B**
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: b6 b1 ad 4d f5 c5 08 57 ba 84 5b 07 6c 6a 53 3b e2 7a 9a c6 b2 dd ba 8c 56 ca d7 50 4b 78 d6 5a bf cb 13 d4 df a6 35 96 c9 38 aa 95 00 b7 e9 8d 4a 6a f8 b0 2d df 1a d4 de d8 f2 f2 ac 5b 7d 76 c4 65 a6 c7 b8 c5 aa da df df 11 1c 6b 6d f1 60 a2 ea b1 d4 6d 7c 42 70 75 c5 ab c8 b8 db 10 56 8e f8 95 27 45 5a b6 ef 88 ee 32 0f 50 3f 2c 58 2d 18 8c e0 d3 8b 2a aa d7 59 b1 f2 9b 62 2b 81 68 ea 2e 3d b1 62 a4 dc e2 33 b8 85 37 55 eb 50 23 11 5c 23 ff 00 7c 4c 78 7c 5d f1 05 e1 b6 d7 18 f2 ba 8a eb 48 55 f6 fa e2 13 b1 cd b6 37 1e 87 12 d4 a5 27 ae 23 2d 78 a9 b2 b0 55 af 20 a6 f7 04 7c b1 5e f2 d4 9f 84 e2 d9 f7 2c 09 ed 8a b7 ca 1c e8 2e 71 55 65 58 b7 1c 5a 82 52 2e a3 b0 b0 df e9 82 3a 5d 35 34 c6 4b b2 00 32 57 d7 f8 47 a0 c7 94 ea 72 23 1f 10 e8 bb 96 f2 a4 Data Ascii: MW[ljS;zVPKxZ58Jj-[}vekm`m\|BpuV'EZ2P?,X-*Yb+h.=b37UP#\#\|Lx\|]HU7'#-xU \|^,.qUeXZR.:]54K2WGr#
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 41 22 c3 af f2 c6 ad 6a a2 d2 10 96 c0 27 a8 1d 71 ad 46 fe d8 d8 6f df 73 88 b3 24 b3 0a 3a e4 49 71 0d 34 92 94 eb 5a 82 41 51 36 02 e7 b9 26 c0 77 c6 ba 2f 2c 9c 21 22 ea 3b 7b e0 67 33 e7 6a 5e 56 6a f5 17 89 90 a4 dd b8 ad 59 4e b9 ef 6f c2 9f 73 61 f3 c0 0e 71 e2 bc 97 e4 bd 4d ca 8c 38 db a9 59 42 e5 38 90 a5 dc 1b 1d 09 17 03 fc c6 fe c0 75 c2 fd 9a 43 8f be 5f aa 38 b9 32 5e 5d ca 4a 8a ca d4 7f 79 5d 54 7d b1 84 93 36 3d 53 1a 6a 19 6a 4e 43 25 71 98 33 bd 6f 3a 15 b2 2d 0a 99 7b 78 76 d4 74 1f f3 ab aa cf b7 4f 6c 50 86 0a 1e 75 09 58 59 41 4f 5d 81 ef f9 61 a1 94 b8 6f 2a b8 89 4f 4a 72 3c 58 b0 d9 52 d4 d9 92 94 29 45 2d 97 39 7b 05 e9 51 4a 49 b6 92 6d b9 b0 dc af 26 b2 d3 35 59 cc b0 e9 5b 69 79 c6 db 5b 96 d4 a4 85 94 82 6d b5 ec 3b 60 0e Data Ascii: A"j'qFos$:Iq4ZAQ6&w/,!";{g3j^VjYNosaqM8YB8uC_82^]Jy]T}6=SjjNC%q3o:-{xvtOlPuXYAO]ao*OJr<XR)E-9{QJIm&5Y[iy[m;`
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 6f ca 94 c2 09 42 00 1d af a8 e0 68 e4 ba 5f 30 a9 8c e3 5e 72 a0 87 02 e3 c8 5a c2 d4 cd af b0 17 f7 eb 87 bc 8c bd 48 8d 45 97 0b 26 d2 5b 83 1d 4e 68 fb b5 28 85 58 5a fb 93 63 f3 df 0b ac c5 40 19 2a 8c aa a2 99 66 5b f1 ec eb b1 16 b0 95 b8 c8 36 59 41 ee 53 70 7b e3 90 af ae a9 a2 ac 34 a2 6c 4e ca d9 01 99 dc 53 7a 38 61 9e 13 23 82 89 01 3c 54 87 0d 4a cb 39 cd aa c7 60 c4 e8 e1 0a 20 fa 2c f7 fa e1 8f c3 ba 46 63 cb 2c 06 ab 31 63 b8 b9 2b 42 de 9e c3 09 53 6d 83 6b a5 6a ea 77 24 5c 8f ae 04 e6 67 5a 7a 69 d1 62 e5 54 73 24 4d 8c 14 48 06 ed 95 00 42 36 e8 ab 1b fd 30 51 c2 5c e4 cc 7a 6f d9 19 ce 51 7d 48 49 6c b0 97 75 ab 73 b1 20 61 96 cb da f5 52 49 fe f6 00 67 9f 69 e4 97 57 53 45 18 06 22 98 35 ca 6b 30 aa 2a 7a 5d 1d 94 d3 14 ca b9 b3 23 Data Ascii: oBh_0^rZHE&[Nh(XZc@f[6YASp{4lNSz8a#<TJ9` ,Fc,1c+BSmkjw$\gZzibTs$MHB60Q\zoQ}HIlus aRIgiWSE"5k0z]#
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 8b 6f b8 c6 11 24 96 95 ca 94 87 48 42 41 51 09 bf d7 e5 8b 46 9a 6e 53 4b 5b 37 56 9f 86 dd cf f4 f9 e2 c0 d9 42 a8 63 31 54 69 0b bd 1e 6c 98 8a 1f f8 4e 94 df e9 d3 0c 3c a3 c4 ec ce 1e 42 2b 32 a1 ca 63 6b f3 da 08 5f fc 40 8f e5 80 67 29 cd 3a 39 8a 21 a7 d2 90 b5 23 a8 fc f1 4d 50 6d fe 59 5a 46 a5 11 61 7e 80 fc b1 76 12 55 1c 02 eb 0a 4e 69 8b 52 b5 90 d1 27 ff 00 05 f4 af 05 51 da 0e 27 5b 69 51 16 bf 4d c6 38 19 d9 f3 e9 2f b0 7e d0 29 75 48 0b 50 64 83 a3 f8 4f be 1d 59 7b 8a 75 4c 93 49 a3 4f 6f 32 31 5e 62 5a 96 99 90 dc 8e a0 62 01 6d 04 93 b9 07 70 48 e8 47 43 82 41 ca eb 2c 24 2e 98 69 01 69 ba 2c a1 ea 37 df 1b 83 40 93 71 85 7b d5 26 78 83 01 ea 9e 48 98 fd 1b 34 c5 6b 9a ec 36 de b2 65 37 d7 6e ca f6 55 bd 8e 05 29 dc 61 cc d4 f4 a4 4c Data Ascii: o$HBAQFnSK[7VBc1TilN<B+2ck_@g):9!#MPmYZFa~vUNiR'Q'[iQM8/~)uHPdOY{uLIOo21^bZbmpHGCA,$.ii,7@q{&xH4k6e7nU)aL
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 8e a5 3e ea 4e e4 7b 5c 7a 61 b6 ee f7 f5 c4 17 db 20 82 92 52 52 6e 92 3b 1c 3e d9 d5 b2 50 4e d9 a3 39 8f 3e 23 bd 0f 23 04 8d 2d 2b 9f f8 5d 9c 13 48 96 28 f5 37 b4 d3 a6 39 a9 97 49 d9 87 8d b7 f6 4a f6 07 d0 d8 fa e1 dc eb 64 82 92 08 50 bd c1 ea 0e 12 9c 4f c8 ff 00 62 4b 35 5a 6b 20 52 e6 39 67 50 91 b4 77 8f e1 ff 00 22 b7 23 d0 dc 7a 60 cb 85 d9 cf ed e8 82 91 54 70 aa a9 11 bf ba 5a 8e f2 59 48 f5 ee b4 8e be a2 c7 b1 c7 6f b6 e9 22 ae a7 1b 56 8f 43 f5 0e 07 8f 76 87 b8 e9 72 97 53 bc c4 fe 85 fd c8 c9 90 b8 8f 73 5b 17 1d 14 9f 51 84 b7 14 72 20 cb f2 85 5a 8e df ff 00 05 98 be 89 1b 46 74 fe 0f 64 9d ca 7d 37 1d 86 1e d2 4a 50 93 6e e3 1a 1a 8b 1e a1 12 5c 4a c3 6d 2a 94 f3 65 32 43 aa d2 84 a7 b9 27 b7 cf b1 b1 18 07 61 6d 77 51 c9 d1 c9 f4 Data Ascii: >N{\za RRn;>PN9>##-+]H(79IJdPObK5Zk R9gPw"#z`TpZYHo"VCvrSs[Qr ZFtd}7JPn\Jm*e2C'amwQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49741	157.240.252.13	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:33 UTC	535	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:33 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-24 22:56:33 UTC	1705	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-24 22:56:33 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-05-24 22:56:33 UTC	14632	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-05-24 22:56:33 UTC	16384	IN	Data Raw: 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 61 3d 63 28 61 2c 68 29 3b 76 61 72 20 64 3d 62 28 61 2c 42 6f 6f 6c 65 61 6e 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 3d 64 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3a 64 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 Data Ascii: ctor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.parameter_selectors;if(Array.isArray(a)){a=c(a,h);var d=b(a,Boolean);if(a.length===d.length)return{parameter_selectors:d}}return null}function k(a){if(a==null\|\|(t
2024-05-24 22:56:33 UTC	16384	IN	Data Raw: 6e 74 73 55 74 69 6c 73 22 29 2c 72 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 49 6f 73 49 6e 41 70 70 42 72 6f 77 73 65 72 22 29 2c 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 52 4c 55 74 69 6c 22 29 2c 74 3d 73 2e 67 65 74 55 52 4c 50 61 72 61 6d 65 74 65 72 2c 75 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 56 61 6c 69 64 55 72 6c 22 29 2c 76 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 52 65 73 6f 6c 76 65 4c 69 6e 6b 22 29 3b 73 3d 66 2e 67 65 74 Data Ascii: ntsUtils"),r=f.getFbeventsModules("signalsFBEventsGetIsIosInAppBrowser"),s=f.getFbeventsModules("SignalsFBEventsURLUtil"),t=s.getURLParameter,u=f.getFbeventsModules("SignalsFBEventsGetValidUrl"),v=f.getFbeventsModules("SignalsFBEventsResolveLink");s=f.get
2024-05-24 22:56:33 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 56 61 6c 69 64 55 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6a 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6a 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 61 3d 6e 65 77 20 55 52 4c 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 63 61 74 63 68 28 61 29 7b 72 Data Ascii: ;return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGetValidUrl",function(){return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";j.exports=function(a){if(a==null)return null;try{a=new URL(a);return a}catch(a){r
2024-05-24 22:56:33 UTC	1751	IN	Data Raw: 74 68 46 69 65 6c 64 73 28 7b 74 61 72 67 65 74 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 6e 64 70 6f 69 6e 74 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 75 73 65 50 61 74 68 43 6f 6f 6b 69 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 2c 66 61 6c 6c 62 61 63 6b 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 7d 29 29 2c 65 76 65 6e 74 73 46 69 6c 74 65 72 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 66 69 6c 74 65 72 69 6e 67 4d 6f 64 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 76 65 6e 74 4e 61 6d Data Ascii: thFields({targetDomain:b.allowNull(b.string()),endpoint:b.allowNull(b.string()),usePathCookie:b.allowNull(b["boolean"]()),fallbackDomain:b.allowNull(b.string())})),eventsFilter:b.allowNull(b.objectWithFields({filteringMode:b.allowNull(b.string()),eventNam
2024-05-24 22:56:33 UTC	14633	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 5f 6f 70 74 73 5b 61 5d 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 Data Ascii: :function(a){var b=this._opts[a];return b!=null?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){v
2024-05-24 22:56:33 UTC	16384	IN	Data Raw: 73 2e 61 70 70 65 6e 64 28 63 2c 61 5b 63 5d 29 7d 29 7d 29 3b 66 3d 6f 2e 74 72 69 67 67 65 72 28 70 28 62 29 29 3b 66 21 3d 6e 75 6c 6c 26 26 6d 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 21 3d 6e 75 6c 6c 26 26 6d 28 6e 28 61 29 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 3d 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 7c 7c 6e 65 77 20 64 28 29 2c 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 61 70 70 65 6e 64 28 63 2c 61 5b 63 5d 29 7d 29 7d 29 3b 69 2e 74 72 69 67 67 65 72 28 62 29 3b 66 3d 65 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 68 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e Data Ascii: s.append(c,a[c])})});f=o.trigger(p(b));f!=null&&m(f,function(a){a!=null&&m(n(a),function(c){b.customParams=b.customParams\|\|new d(),b.customParams.append(c,a[c])})});i.trigger(b);f=e.trigger(b);if(l(f,function(a){return a}))return;f=h.trigger(b);if(l(f,fun
2024-05-24 22:56:33 UTC	16384	IN	Data Raw: 2c 74 3d 73 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 61 3d 3d 3d 6e 75 6c 6c 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 2e 6b 65 79 73 20 63 61 6c 6c 65 64 20 6f 6e 20 6e 6f 6e 2d 6f 62 6a 65 63 74 22 29 3b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 71 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 63 29 3b 69 66 28 72 29 66 6f 72 28 63 3d 30 3b 63 3c 74 3b 63 2b 2b 29 71 2e 63 61 6c 6c 28 61 2c 73 5b 63 5d 29 Data Ascii: ,t=s.length;function u(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&(typeof a!=="function"\|\|a===null))throw new TypeError("Object.keys called on non-object");var b=[];for(var c in a)q.call(a,c)&&b.push(c);if(r)for(c=0;c<t;c++)q.call(a,s[c])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49747	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:33 UTC	627	OUT	GET /uploader/dd0bf6a7277d7e58ec2c01e3627a45275be16a24.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:33 UTC	705	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:33 GMT Content-Type: image/jpeg Content-Length: 331016 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221be9433a3a9b6409bf0725ac15c628cc578032_221" Content-MD5: EeBqi0UhhH9ZI8URPmhdmQ== ETag: "11E06A8B4521847F5923C5113E685D99" Last-Modified: Wed, 09 Aug 2023 07:26:10 GMT x-oss-hash-crc64ecma: 1411745452719722105 x-oss-object-type: Normal x-oss-request-id: 6650744576EC4B38309557CB x-oss-server-time: 27 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42716 Expires: Sat, 25 May 2024 02:56:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1308f9cf7cc-BNA
2024-05-24 22:56:33 UTC	664	IN	Data Raw: ff d8 ff e1 00 22 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 12 01 03 00 01 00 00 00 01 00 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 5f 63 70 72 74 00 00 01 4c 00 00 00 0c 77 74 70 74 00 00 01 58 00 00 00 14 72 58 59 5a 00 00 01 6c 00 00 00 14 67 58 59 5a 00 00 01 80 00 00 00 14 62 58 59 5a 00 00 01 Data Ascii: "ExifII*ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc_cprtLwtptXrXYZlgXYZbXYZ
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: X
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 81 02 56 ca e9 5d 2b 44 41 de 8e 9e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 31 2b 44 01 59 85 7a 96 af a2 b3 5b 57 4a b9 5d 20 a0 9c b1 0c 8a cc 26 3c 88 6d a4 f4 e9 af a6 ec ef 02 e0 00 00 00 00 00 00 Data Ascii: V]+DA1+DYz[WJ] &<m
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 02 c6 a2 a6 c2 06 e6 a6 a3 c1 11 b9 a9 b9 91 e0 88 98 dc d4 7e 36 36 01 71 98 e0 48 72 36 37 37 30 28 6c 6a 68 68 60 d4 c0 b0 b9 83 41 41 53 53 51 c0 e4 62 04 b9 02 24 60 c8 f6 d5 29 a5 bf ca fb 46 93 d9 da 36 f2 ad dd ff 00 34 e7 0e ca 36 b8 72 c8 ca bc bb c6 96 ac b5 5f 5e 7b 2e 1e 9f 3a df cc a4 d3 a5 0c 3d db 47 0f d1 c2 e3 e3 c8 f2 fa bd 36 fd 5e 9f ea f8 6e 8d dd f3 fc 8b ce fa df 17 57 eb dd 4c fa c7 6f 98 ee 5d df 1a bf 4e 0b ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 82 2b 84 01 59 20 4a c1 08 56 ca b1 0e 31 ab 06 4d c0 40 50 70 24 22 64 dc d0 5c c8 cc 0c 9b 89 8a 9b 80 d0 05 c5 4c 19 03 61 b8 b0 09 0e 0d 06 c6 a0 6c 6c 22 24 2e 39 35 30 64 d0 dc d4 d8 c0 1b 1b 9b 09 1b 00 98 ec d0 74 24 64 c0 e8 4c 40 48 54 76 33 13 14 10 Data Ascii: ~66qHr6770(ljhh`AASSQb$`)F646r_^{.:=G6^nWLo]N@+Y JV1M@Pp$"d\Lall"$.950dt$dL@HTv3
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 0c 98 01 1b d5 6a db 63 58 6c 28 2c 26 60 00 72 6e 64 88 1f 0b 0d cd 07 c6 82 26 a2 63 93 71 62 3c 58 c1 91 03 06 45 84 cd 4d c4 06 84 90 a0 f0 68 38 34 13 32 6a 64 6e 3c 19 18 12 1d 99 03 61 b9 91 d0 00 98 e0 6c 2c 26 6f 63 1a 5d 6c 76 88 cf be eb 4f 52 d5 cb f5 2d 7a 3e 7f a2 f7 fc 7d 65 b5 e5 9b 93 9a 14 34 35 1d 41 dc ee 45 66 e9 d5 15 cf ee 58 b0 f7 22 fc ff 00 ab f4 6e bf 0f e8 0f 4f e1 b5 99 e4 7e 7f d2 dc 27 ca a4 7a 3d fe 69 cf e9 f6 db e6 8c 3d bf 67 f6 fc 17 cd 69 c1 33 44 ef 8f a7 d5 3c bf 42 cd d1 d4 8e 3d 75 fa f5 ef 4e 9a ce 5d cd ef 0c 75 bb 6d b9 99 f6 fc 53 6d fc 00 79 49 ca 73 56 b6 17 aa 72 d6 b1 ad 8e c0 8a 89 05 ed 55 53 b5 67 51 63 23 51 41 50 35 14 11 1a 0b 98 37 37 01 21 51 41 39 2d 06 e6 c6 86 45 40 d8 c9 a9 88 6b 59 75 cf 6b 0e Data Ascii: jcXl(,&`rnd&cqb<XEMh842jdn<al,&oc]lvOR-z>}e45AEfX"nO~'z=i=gi3D<B=uN]umSmyIsVrUSgQc#QAP577!QA9-E@kYuk
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 0c 89 0e 8c 89 0e c6 06 e2 a0 06 a6 a6 c6 e3 31 e0 cc d8 54 d4 d8 04 85 4c 8a 11 83 91 d8 18 03 23 51 31 f0 b8 80 0d 05 4d 4d 06 c3 61 c0 ec 07 02 43 81 90 d4 b4 15 a5 95 12 8b 33 c3 77 fa e4 c3 5c 76 1d 92 2d 24 52 dd 1a 63 dc b6 1e bd 5f b3 e6 ec 5c bf 45 61 e6 ee 74 a4 56 9c f1 5d 7e 43 5a 6c cb 9f dd 75 cb ec bc cb db dd b5 4f d0 f8 34 3a 3c 95 76 f3 7a 4d 75 a9 bb 55 8e 3b 84 73 33 ab b1 73 cc 97 2d bd 65 ec 71 fc ae 84 61 76 95 5b cd fd 3b a9 4f c9 48 e5 7e 39 3f 5e cf d5 fc b5 59 85 85 6a 04 a2 c8 ae ad 76 de 9e 89 9f 6a d4 ee 56 9d ca 65 e9 29 4e fd f2 ee 5a bd aa 67 dd b4 6e 2d 85 81 a6 ff 00 31 0d ef 7e 19 88 28 32 35 00 15 9a f4 6f 9c ee e2 df 45 c6 4a d9 c3 a5 e7 ca df 2b 2f 04 91 c5 fe 93 89 e6 53 e9 3f 93 ef a1 fb 18 40 f4 e5 a2 c6 13 cf 7d Data Ascii: 1TL#Q1MMaC3w\v-$Rc_\EatV]~CZluO4:<vzMuU;s3s-eqav[;OH~9?^YjvjVe)NZgn-1~(25oEJ+/S?@}
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: fa 6f 9b 6d ea 7e 58 2b a9 78 f0 fa 5e f3 5f 5b 10 89 4e 61 3b 22 37 cf 99 fb 38 13 45 23 4e cd e2 6f ce fd ce 6e 85 f3 fd 7c 5f de e1 94 c7 7e 9d e7 da 83 ed e3 6e f2 75 a9 f4 45 67 b3 3e eb f2 fd b0 9e 8f 3d 73 aa 97 ff 00 1b ae 9d df 94 bf 36 96 0c 34 92 e5 9a d7 7e 32 99 5f 9f fd 17 14 16 95 bb 78 dd 1d 03 c7 e9 8a da ac b6 23 68 91 cd c9 fe 9f 89 51 d0 99 a9 83 71 d1 91 23 51 33 41 31 33 61 43 71 c0 a1 91 43 b4 14 b3 95 8f 05 4d cd c5 08 72 6c 6e 3b 93 09 39 a1 b1 1d 69 4e b1 29 27 71 09 56 e9 56 27 79 ef 31 cd ac b6 04 22 5b c1 0d 21 31 3b d7 4d 51 7b d2 bb d7 9c 07 6e 29 ef 57 06 92 d4 d5 65 13 b1 a1 b9 ba cf 04 33 97 66 8b 29 56 d4 b1 51 17 50 79 16 46 b6 77 16 5a 96 61 35 d4 d9 66 f4 64 55 6d ab 74 4d 6b 65 eb a2 d1 7c 50 a2 fd 02 b1 f4 47 bf c2 Data Ascii: om~X+x^_[Na;"78E#Non\|_~nuEg>=s64~2_x#hQq#Q3A13aCqCMrln;9iN)'qVV'y1"[!1;MQ{n)We3f)VQPyFwZa5fdUmtMke\|PG
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 1c b7 0e 0e 8a bf 6e 0d e6 3b 67 ce f5 73 cf a3 e5 39 ad 69 f2 f7 e5 be e7 37 49 f1 f7 6b b5 58 74 d6 e9 e5 f4 f1 bf 77 8b ae fc ff 00 65 5b e8 39 a5 b8 34 65 8d a8 5e a7 39 77 60 f0 3a e0 3d 0c 60 bb b2 5a 19 14 36 16 14 88 29 ac c7 15 e7 f9 12 79 59 84 9a cc 4b eb 56 93 9c 4d ae cf 4a 41 75 e7 5c ee ce 2f 6c 95 b4 a5 68 2b 3b 99 99 c8 20 03 06 26 01 5b 1b 85 67 06 16 dc d6 4a 5c 98 e8 64 b0 08 d8 00 0c 99 55 43 4a ce a0 a8 62 a0 cc 58 b3 7b b6 59 54 b9 25 b4 88 9c ad 98 b3 81 4a 59 d5 2f 8a df 35 b6 69 60 29 70 d1 19 1c d6 c8 db 36 b3 3a d0 45 81 4a eb b5 4a d6 ec a6 bb 45 de 63 bd bf 8f be 0f a2 b3 9c 9d bd a3 6e 3f 61 7b 1f 29 f3 36 aa 91 a0 e7 0d 76 ca 31 ac c5 74 e2 ba 54 a9 c8 a0 d0 9a f2 3f 64 ed 9f 01 f2 9d cb f5 6f 87 95 47 96 ac f7 99 ca aa e5 Data Ascii: n;gs9i7IkXtwe[94e^9w`:=`Z6)yYKVMJAu\/lh+; &[gJ\dUCJbX{YT%JY/5i`)p6:EJJEcn?a{)6v1tT?doG
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 49 cc 6f 6b e1 d6 d7 c9 a5 0b db c1 de 45 7b f2 ee 09 ef 76 2c 24 41 2b 5e 1d ad 5a 2a 75 75 e2 2c 8a 1b 17 f1 b1 59 1b 17 63 cd 83 f2 e0 9a de b5 60 af 42 c9 d8 57 b7 14 43 52 58 60 34 1a 09 9a 14 0d 23 98 6b 4a c5 eb 0a 96 53 0d a6 9a de 1b 52 58 89 9a 2a 99 89 60 21 80 88 c1 94 ea 87 12 da 08 27 36 ba b3 2e 17 5c d9 6c 8a 9a 56 d9 24 a6 f1 f5 66 96 7a 86 74 b2 ab 27 52 81 5b 68 3a ae 9b 54 b5 6d 15 39 66 2e 55 89 9c d2 fa d2 cb 52 ee 69 a3 ac b5 7f cf d4 d6 d5 4a 91 e8 df 43 cb f5 ef 77 99 f3 6a aa 18 85 db 73 5f 7a 4e a3 3d 2a b6 95 56 4f 49 01 90 ff 00 c6 fd 8b a2 7c bf af 79 f0 3c 3a ff 00 a3 e9 d0 fe 83 dc b0 79 bc 55 af 5b d1 69 a7 56 2d 42 b6 cc c6 26 72 62 58 48 36 df e7 20 3d ef c2 71 10 b8 a9 9c a6 cf e4 74 72 6f 77 98 ac 49 53 5f 4d fc 57 7f Data Ascii: IokE{v,$A+^Zuu,Yc`BWCRX`4#kJSRX`!'6.\lV$fzt'R[h:Tm9f.URiJCwjs_zN=*VOI\|y<:yU[iV-B&rbXH6 =qtrowIS_MW
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 9a cc 80 65 5c ab a3 14 ef c0 96 bc 29 69 e6 a7 af 0a 5a 79 ba eb c0 9d f8 13 bf 9f 8b 71 27 ae 2e 68 c8 b8 dc 71 05 64 de c6 f5 26 38 36 03 26 06 64 89 b1 b0 0c 88 e3 78 48 c4 b9 c5 65 e6 d1 7e 6d 65 b2 b2 53 5e c7 d7 4b 8f 66 57 be ac e9 d7 5d ea 6e 2b 5b 73 13 97 5b 6a 1f 3f 55 c3 c4 b3 cb e3 09 f4 7c b5 cc 3a a6 af c5 24 39 ae b1 cb 58 e7 18 a3 42 0c e3 f6 ab 43 bd 56 dc 60 62 af 58 1e 58 f0 72 49 0b 55 63 3b 1a cd a2 79 16 7a 74 cd 72 8a 2d 20 51 48 02 9e 2a 31 3a 49 c9 ce 92 28 55 56 44 95 aa 38 92 2f 87 3f 59 c5 a9 1d 64 0f 57 3b 2b e6 8e d9 6d ae 31 43 15 e2 a9 68 fc f4 64 ba 15 b2 71 6d a2 db 2d b4 b7 15 8d 5f 67 6c 52 d8 18 8b 5c d6 90 55 b4 58 33 4b 83 bc ec ce d5 2b 6d aa 42 48 8d aa 6d 2c 56 75 a5 f6 2d 59 77 27 4a b9 cb 79 8e 7e ad ab 7d eb Data Ascii: e\)iZyq'.hqd&86&dxHe~meS^KfW]n+[s[j?U\|:$9XBCV`bXXrIUc;yztr- QH*1:I(UVD8/?YdW;+m1Chdqm-_glR\UX3K+mBHm,Vu-Yw'Jy~}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49750	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:33 UTC	392	OUT	GET /uploader/cc9848adf3ffcc99024436d9b23c022632da987e.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:33 UTC	684	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:33 GMT Content-Type: image/png Content-Length: 415868 Connection: close x-oss-request-id: 665076C391795F303908A586 ETag: "4EC9AF0735BF453A0F4ED6D93EEB0CE7" Last-Modified: Wed, 09 Aug 2023 07:26:24 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2204139187792885320 x-oss-storage-class: Standard Content-Disposition: inline; filename="221ce9078c31255d863db04605624e334f585678_221" Content-MD5: TsmvBzW/RToPTtbZPusM5w== x-oss-server-time: 6 CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:56:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1308a05f7e4-BNA
2024-05-24 22:56:33 UTC	685	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 02 62 08 06 00 00 00 54 ff e8 ee 00 00 01 0b 69 43 43 50 69 63 63 00 00 18 95 63 60 60 5c 91 93 9c 5b cc 24 c0 c0 90 9b 57 52 14 e4 ee a4 10 11 19 a5 c0 7e 87 81 91 41 92 81 99 41 93 c1 32 31 b9 b8 c0 31 20 c0 87 01 27 f8 76 8d 81 11 44 5f d6 05 99 c5 40 1a e0 4c 49 2d 4e 66 60 60 f8 c0 c0 c0 10 9f 5c 50 54 c2 c0 c0 08 b2 8b a7 bc a4 00 c4 8e 60 60 60 10 29 8a 88 8c 62 60 60 cc 01 b1 d3 21 ec 06 10 3b 09 c2 9e 02 56 13 12 e4 cc c0 c0 c8 c3 c0 c0 e0 90 8e c4 4e 42 62 43 ed 02 01 d6 64 a3 e4 4c 64 87 24 97 16 95 41 99 52 0c 0c 0c a7 19 4f 32 27 b3 4e e2 c8 e6 fe 26 60 2f 1a 28 6d a2 f8 51 73 82 91 84 f5 24 37 d6 c0 f2 d8 b7 d9 05 55 ac 9d 1b 67 d5 ac c9 dc 5f 7b f9 f0 4b 83 ff ff 4b 52 2b 4a Data Ascii: PNGIHDRbTiCCPiccc``\[$WR~AA211 'vD_@LI-Nf``\PT```)b``!;VNBbCdLd$ARO2'N&`/(mQs$7Ug_{KKR+J
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 9c 0b 79 3e 32 ba 10 92 08 21 88 a6 2a 24 1c 0e 73 23 64 f2 cd 0f 6f 2e 7f ea 3f be f9 a9 2a a7 f8 0a 27 12 1d 7b 74 c5 da a7 5c c3 6c cd 5b b9 65 8a aa 55 80 d0 0a 09 94 28 aa 42 f4 50 0c d9 a2 87 70 3c 01 48 09 52 4a f0 d4 f3 07 7f 56 5b 53 7d e1 6b 5e b5 e9 64 d6 ca 51 4a a9 38 33 1d 51 be ec 8f cc c9 75 03 05 0a f4 87 7b 4f e0 41 0f 14 28 d0 82 43 86 73 eb 32 67 67 82 7e 46 cb 4c ce 23 63 93 a0 5d 22 f0 9c bf b8 62 9d 9d 72 09 21 88 a1 6b d4 05 e5 ed 07 0e 85 0e 3e b6 e5 b5 43 bb 76 bf 4d 8e 8f af 11 94 c5 3d 4a cd ac 40 77 e9 f2 a5 ff f2 17 5f f8 cc 37 28 e7 0a 28 f5 cf 75 4f ba 10 12 52 0a 4a 08 a1 8c 31 a9 eb 1a 37 0c 03 23 a3 63 78 f6 e9 1d b5 79 db ad 3f f8 9d ef 7d a1 d6 ce 5f 5a 1a 32 a1 e9 3a d2 89 72 f4 b5 ad 84 47 29 84 e7 43 08 3e 6d 63 21 Data Ascii: y>2!$s#do.?'{t\l[eU(BPp<HRJV[S}k^dQJ83Qu{OA(Cs2gg~FL#c]"br!k>CvM=J@w_7((uORJ17#cxy?}_Z2:rG)C>mc!
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 2f 9b fa b7 a0 13 9d 89 35 88 40 81 02 40 0f 14 28 d0 79 a2 33 e4 53 95 01 08 cc 95 84 90 44 53 15 ca 18 e3 0a 63 93 19 45 85 80 ed 38 54 bc c0 39 c8 2f ad 4a 16 4a 05 06 70 1e d0 fe 9c 92 f2 59 bb ac eb b8 b4 ae 6e b1 ff d3 ca da fb 3b 1e 7e e8 86 75 0d 8b e9 29 5b 90 6c 7e 14 9a e7 a2 1c 1c 71 10 f8 94 42 00 c8 29 0a da 4a e3 d8 31 96 22 d9 50 54 33 74 5d 0a b9 30 09 48 d3 55 39 30 30 88 ad db 9f ff 50 38 64 c8 b1 d1 11 77 ef ee dd ca a6 6b af 25 ba ae d3 58 2c 46 2b 2a 2a 30 3e 3e 8e 58 2c 86 68 24 82 68 b2 14 25 99 14 56 c7 c2 08 09 0e 38 36 d2 5c 62 dc 73 41 54 8a 98 14 d0 a4 80 14 12 a9 e1 61 f8 9d a7 e0 39 0e b8 ef c3 e7 1c 7c ea 35 ed 41 17 42 80 10 a0 50 b0 d1 d4 54 5f 2c 2b 2f 0d e0 3c 50 a0 40 01 a0 07 0a 14 28 80 f4 60 1d e0 f7 e0 9c 0b 12 32 Data Ascii: /5@@(y3SDScE8T9/JJpYn;~u)[l~qB)J1"PT3t]0HU900P8dwk%X,F+**0>>X,h$h%V86\bsATa9\|5ABPT_,+/<P@(`2
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: c8 39 36 25 d9 2c a9 61 14 95 9e 87 90 ce 30 6e 3b 32 03 2a d3 99 b4 50 a5 a0 42 82 72 21 58 b1 30 f9 9b 90 b2 af ba bc 74 3f 53 95 de 96 86 ba 5d 2d 6d 2d f7 ff fa a1 cd 97 a5 f6 ec 6b 6b bc f6 ea cd 75 2d 4d 7d e9 89 74 65 4f df 60 19 17 a2 ae a3 b3 b7 3e 16 8b 35 0e 0e 8f 36 2b 8a b6 d8 76 dd 45 94 d0 52 45 55 cd a7 76 ee ef eb 1f 18 be f5 e6 9b ae df 91 cb 17 28 a5 54 cc 49 1b 96 67 ed eb f3 00 2a 03 2a 0d 6c 16 00 7a a0 40 81 ce d6 64 96 cc df 5b 0b 30 60 6e ec 21 a4 84 c2 18 29 14 8b f2 89 67 76 b6 78 44 79 fb ad 6f ba e3 af e3 89 84 f0 7c 5f a5 8c 11 29 25 04 e7 f0 3d 97 f8 be 67 b7 b5 34 16 7c ce 41 28 91 b3 6e 54 72 f6 6b 38 68 27 01 90 cf 4e 31 e7 5f 39 85 10 84 52 4a 4b 4a a2 dc ca 5a 7c f3 af b6 b6 6c 7d 66 ef c7 5b 97 2f 7b cb b2 5b 6e c3 b3 Data Ascii: 96%,a0n;2PBr!X0t?S]-m-kku-M}teO`>56+vEREUv(TIg*lz@d[0`n!)gvxDyo\|_)%=g4\|A(nTrk8h'N1_9RJKJZ\|l}f[/{[n
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: cd 2b a3 91 30 1c c7 f1 0b f9 02 53 55 95 85 c3 61 68 9a 06 c6 18 cc 70 08 c9 78 1c f5 8b 16 e1 b1 27 9f c4 d0 d8 28 7c cf 83 94 12 39 a8 e8 e3 1c 35 94 21 aa 28 00 21 a0 53 b0 e8 79 9e 62 17 8a bc ba a6 aa aa 77 3c f3 c0 ff fd b7 ef 7f fa 2f ee 7c cb 3f 46 a2 61 66 db ae 98 b3 84 92 a7 6b 1f 29 b9 a6 6b 58 bd bc f5 27 77 ff e4 81 4f 2c ae 5b 5c 19 8d 46 25 e7 9c 58 39 0b 85 7c 01 86 61 40 d3 34 14 8b 45 30 c6 66 ce 2e e7 42 10 2b 93 cd e9 0a dd be 61 cd ca 1f ae 5d bd 6c c7 92 b6 e6 e3 b5 8b 6b 64 a2 24 06 32 b5 98 61 db 8e 32 91 ce 48 80 08 29 05 89 27 13 ee 2f 7f 7e 7f b3 31 34 f0 d6 2a ca b8 75 aa 5b 3e a3 2a 4c 26 cb 68 9f ed 22 69 98 38 91 2b 50 3b 9d c5 5a 29 51 5a 51 01 46 29 e2 f1 38 52 a9 d4 54 24 c4 a4 19 29 a5 28 14 0a f0 7d 9f 26 12 09 12 8b Data Ascii: +0SUahpx'(\|95!(!Sybw</\|?Fafk)kX'wO,[\F%X9\|a@4E0f.B+a]lkd$2a2H)'/~14u[>L&h"i8+P;Z)QZQF)8RT$)(}&
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 7b 47 f7 5b ec 62 71 57 22 5e 02 d7 f3 88 62 18 22 95 9a 40 aa a7 4f e9 3a de 11 b7 72 b9 b2 68 38 9c 5d 71 d1 86 81 f2 b2 24 9c a2 03 42 cf 8c ad 19 a3 c2 ca e5 89 95 cb 2f cd e5 f3 18 1f 1b a3 d1 68 14 9a a6 21 16 8b cd ec 49 a7 94 42 08 01 55 55 98 cc 48 24 13 25 a7 b2 59 8b 3a 8e 23 14 45 e1 2f ae f9 10 f8 9e 8f 53 9d dd 51 c3 d0 49 82 0b 12 07 45 ab 46 48 c6 29 42 9a 3a b8 10 f0 b8 0f 8d 00 d9 89 09 14 32 19 18 89 04 72 56 16 bd bd bd 48 24 12 33 a1 f6 bf 1d ea 3e 31 91 42 77 4f 1f 2e 59 b7 44 99 dd be 7f 36 21 3d 80 ce 05 03 ea 01 7f 07 80 1e 28 d0 bc 9c 70 06 73 d8 df 79 50 04 e6 78 61 49 29 11 0a 99 b2 b7 67 80 ec d9 7f a4 ad ba b2 ac 6f c3 86 35 79 df e7 44 08 21 67 b7 36 5e f0 53 52 42 22 9e 28 a9 e0 42 80 fb 3e c2 0a 03 a1 04 92 3b 00 c8 64 a6 Data Ascii: {G[bqW"^b"@O:rh8]q$B/h!IBUUH$%Y:#E/SQIEFH)B:2rVH$3>1BwO.YD6!=(psyPxaI)go5yD!g6^SRB"(B>;d
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 56 f1 eb a0 53 90 62 c1 0f 3b 45 f7 60 d6 e5 49 29 e8 91 7c af 87 fa 2a e6 0d 8f bc ef fb ff f8 85 ed d7 dc fc ba 6d 35 4d 0d c4 73 dd b9 4b 3e 29 27 6b bb fd c4 c9 66 21 25 e1 9c 73 4d d7 19 80 99 05 08 ce 39 28 a5 d3 2f c9 85 80 a6 28 c7 c3 e1 10 7f a9 8b a9 84 10 21 7d 1f 75 cb 97 9e 0c ab ca d8 a2 70 28 36 ec 79 ae a5 ea d2 f6 39 1c d7 c5 09 5b 42 13 1c a6 94 28 08 89 5c 3e 8f 02 28 f2 f9 3c 08 21 c8 e7 f3 e8 ea ea c2 ea d5 ab 67 e0 7c 6a a1 44 54 94 97 b3 dd fb 8f fe fd 75 57 0f bd 36 11 2f 91 9e e7 63 76 6c 77 66 bc e8 38 9b 47 b0 05 90 1e 28 00 f4 40 81 e6 e9 c4 93 04 96 0b a6 f3 73 6f 5d 4a a9 c8 17 0a c8 17 0b 4d d5 e1 c5 e2 81 07 ee c7 40 ff 80 6f 98 7a d5 78 6a a2 82 31 d6 0d 48 3a 37 cf d9 df dc 97 10 82 2a 9a 22 1b 16 d7 c8 96 c6 ba ff ee ee Data Ascii: VSb;E`I)\|m5MsK>)'kf!%sM9(/(!}up(6y9[B(\>(<!g\|jDTuW6/cvlwf8G(@so]JM@ozxj1H:7"
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 70 1c 87 5a 56 56 dd b3 ff b0 38 d2 de f3 f1 7d fb bf 75 69 5b 4b 63 97 14 bc 33 51 12 39 55 5e 56 3a 58 5b 53 55 a4 84 f0 58 2c 0a 53 d7 a1 aa 2a 1c d7 83 eb 38 2f 6e 42 4e 82 36 16 e8 bc 02 73 10 42 58 28 64 f2 7c 2e ef 3f b5 eb 60 f5 9e 83 ed 7f 73 b2 b7 ff fd 8c 51 53 72 5f 1e 3e 7a 5c 9c 38 71 82 35 36 34 e0 d6 5b 6e 41 be 50 40 36 93 c1 d0 f0 30 ee b9 e7 1e 5c 71 c5 15 b0 8b 36 5c cf fd 6d cf b9 74 1d 47 d8 8e c3 86 86 87 15 2b 9d ed be ea d2 8b be 70 fb ad 37 7d 73 e9 b2 16 af 50 28 42 42 42 53 55 9c 38 de 85 af fd c7 dd ff d4 db 37 f0 77 8b 6b 17 41 55 15 3f 93 49 93 de de 5e 52 56 56 46 e3 f1 f8 0c 30 4e a4 26 90 3b 7a 0c 17 7b 79 2c 8f 46 90 21 80 e2 39 30 c2 11 38 84 60 0f 18 3a 1c 0e a4 32 20 c5 02 16 33 8a b4 20 2c 04 c9 db 84 bb 7c df a3 9b Data Ascii: pZVV8}ui[Kc3Q9U^V:X[SUX,S*8/nBN6sBX(d\|.?`sQSr_>z\8q564[nAP@60\q6\mtG+p7}sP(BBBSU87wkAU?I^RVVF0N&;z{y,F!908`:2 3 ,\|
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: ee c2 cc 66 b0 b3 7f 08 2b c2 3a 74 46 50 a5 a9 30 14 86 02 55 e0 02 50 09 81 16 0e 23 19 8d e2 48 5f 3f 06 4b 2b 88 42 95 6a b8 2e e6 22 95 bb 94 92 30 85 c9 8e 8e ce c5 92 90 52 02 48 45 51 08 63 0c d3 90 2e a5 c4 f4 df a5 94 12 90 04 52 74 97 97 25 c6 38 17 04 38 3d 40 27 93 f9 03 24 e1 2e bb fa c6 4d 96 e7 ba 20 94 e2 0d 77 7f e3 e3 6f b0 1d 70 5d 43 3c 12 86 09 89 27 b7 6c fd f4 a9 de e1 1f 96 57 94 09 4a 19 14 45 41 2a 95 9a 8c 36 72 1c 8c 8c 8c 60 d1 a2 45 e0 7c c6 49 4e 39 e7 bc a2 a2 b2 e9 e1 c7 b7 7d e0 e2 57 ac fb 22 08 99 e5 08 84 60 3f 7a 80 c3 01 83 07 80 1e 28 80 a2 60 fe 1b 4c f1 cf 01 cb 0a 21 48 38 14 e2 fb f6 1f 52 f6 1c 38 fc e6 b5 17 ac c5 33 4f 6f 27 b7 dc 74 c3 f7 17 2d aa 24 13 e9 cc e4 64 90 cc 7e b9 a4 94 30 0d 83 1c 6e 3f a1 7d Data Ascii: f+:tFP0UP#H_?K+Bj."0RHEQc.Rt%88=@'$.M wop]C<'lWJEA*6r`E\|IN9}W"`?z(`L!H8R83Oo't-$d~0n?}
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 40 ad aa 2a 0a 46 47 c7 f1 c0 a3 bf 7e 6b 4d cd 22 d2 d3 d3 83 a5 6d cd f7 5d 70 c1 aa 6c ae 50 60 94 51 fe 72 cb f7 42 a5 94 90 60 1a b4 44 8b b6 c2 72 7d bf f9 86 d5 24 b9 ac 56 f4 1e eb 23 eb 9a d7 12 95 32 30 85 4e ad b4 0b 40 4e 9d 61 4c 29 14 aa 00 6c 72 ce ee 73 0e ca 28 4c c3 80 65 e5 f0 ec ce 9d d8 78 f1 25 a0 84 a2 ad b5 05 7b f6 ec 41 e7 a9 53 68 6f 6f c7 f5 d7 5f 0f 21 04 8e 1e 3d 0a c3 30 50 51 51 81 96 96 16 74 76 76 82 52 0a d3 34 51 59 59 89 ca ca 4a d8 b6 0d 45 51 50 28 14 d4 70 28 e4 f3 b2 8a 5b bf 77 cf 23 fe 5b 6f b9 e1 ad 4b 96 b4 22 6b e5 c0 18 93 41 0f 0b 34 59 85 0b b7 1e 85 10 84 29 0a 8d 4d 9e a5 8d 42 d1 a6 42 08 49 08 a1 91 48 98 4f a4 26 f8 d6 a7 76 36 ec 3b dc f1 b1 81 91 d1 77 51 46 15 48 21 0e 1c d8 8f ce 53 9d ac 6d c9 12 Data Ascii: @*FG~kM"m]plP`QrB`Dr}$V#20N@NaL)lrs(Lex%{AShoo_!=0PQQtvvR4QYYJEQP(p([w#[oK"kA4Y)MBBIHO&v6;wQFH!Sm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49749	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:33 UTC	627	OUT	GET /uploader/7393e7b9c4c1cf5cc9c8284ee1b106479bbea8cc.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:33 UTC	705	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:33 GMT Content-Type: image/jpeg Content-Length: 60660 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221cf54b7f0fc6c337a34b6dddaa3af022c76312_221" Content-MD5: QIwt4kBKSPWkBuBq46KH9g== ETag: "408C2DE2404A48F5A406E06AE3A287F6" Last-Modified: Wed, 09 Aug 2023 07:24:34 GMT x-oss-hash-crc64ecma: 16809768636961184375 x-oss-object-type: Normal x-oss-request-id: 6650744590AF5139327C9B91 x-oss-server-time: 44 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42716 Expires: Sat, 25 May 2024 02:56:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1308f9cf7c4-BNA
2024-05-24 22:56:33 UTC	664	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 e0 93 04 00 e8 03 00 00 e0 93 04 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 e7 02 00 00 03 a0 04 00 01 00 00 00 20 03 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipimagery40210 ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 03 20 02 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 02 03 04 05 07 01 08 09 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]} ,
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 10 89 45 f5 74 76 4e 9c bd 94 6a b6 1e 1e 95 17 0f 55 a8 ad 6a ca 8c 73 39 5a 8a 8a ca e2 24 77 91 8e 42 72 b7 1c e7 df a6 69 94 73 1d b3 a2 ba 63 79 a5 29 3b 4f 66 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 91 ca 21 95 d3 6e 60 cc 5d b5 66 16 8d 2d 1a e9 b0 02 b2 b2 a5 7d 2b 2a 3d 8b 61 18 31 59 05 d6 e1 92 5e 24 85 56 6a a1 c8 f2 d3 41 85 e7 ba c6 59 65 9e d6 ec 6a e9 0e c9 dc fb 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c5 21 d4 46 73 d2 d1 55 a2 77 7a 65 59 19 a3 c9 b7 a7 87 85 c2 a2 a5 7d 3d 2e 15 45 ae 11 6b 57 16 cb 95 4a e1 b1 24 05 eb 35 10 80 e5 a4 3f 1b cc f4 88 f6 4b 8b ea a8 ca 96 c2 63 b5 77 73 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 10 1c af 8c 98 41 2d b6 7d 1a ed 2d Data Ascii: EtvNjUjs9Z$wBriscy);Of@!n`]f-}+*=a1Y^$VjAYej1!FsUwzeY}=.EkWJ$5?Kcws`A-}-
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: a4 1e 14 9e 17 8a 4f 0c 92 a2 e1 5c ae 97 4d 49 1e b5 6e 97 41 6c 9b d1 c8 f1 d6 2f 8e 9c fe ba 7d 0b d9 c9 bf 96 87 3b e8 ea df 99 11 a5 f5 2f cb aa 75 60 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a4 e7 38 5b 9b d2 fd bb ab 2a c8 a5 6d 6c f0 a4 f6 1e 14 83 c0 5e 29 06 41 59 59 72 55 97 8d 39 a3 b5 6b 2e 94 96 ea e9 84 07 2d 39 17 3d e0 51 b7 d0 1d 5c 9b 69 b4 4b 1b e6 4a 5f 7c f4 19 69 be b6 78 6b f5 ce ac 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 90 5c 35 cd b5 26 9a d7 46 69 ab 6a 4a 8a 44 2d 9e 82 83 d2 f9 e0 2f 97 0a cb 92 b8 5e 34 68 d5 da 33 8d 91 b2 33 6a c9 38 77 2e f1 ca 69 cc 62 df 43 75 72 49 6d 5a 23 48 56 17 99 5f 3d 75 34 cd be 74 45 fa ff 00 56 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 88 73 Data Ascii: O\MInAl/};/u`H8[*ml^)AYYrU9k.-9=Q\iKJ_\|ixk@\5&FijJD-/^4h33j8w.ibCurImZ#HV_=u4tEV s
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 2e 99 c6 b4 8f d2 f0 0c 74 e3 fa 57 33 a7 0e fd 64 34 b9 95 bb 11 19 ca f1 0d a9 ca 2d 5e c8 4b 62 de f3 ed db fa f9 ef 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 42 8f 9e a2 3a 04 cc b1 6d 65 5b 18 b6 9c 95 84 6c 2d 9e 71 66 66 28 48 22 33 cb 13 31 d3 54 b6 9c 8a 55 07 3a 21 35 34 06 1c 36 44 8e 52 29 64 99 8a 46 93 cd b2 d3 97 e1 bf 2c d6 b3 0e 9e 4e d1 6b 69 08 c6 56 ef a4 1b 2b c7 b5 a7 ce 17 af d4 07 4b b4 6d e9 79 cd eb 78 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ae 34 34 67 15 44 5b d2 f8 94 73 c5 7a 61 41 e1 9c 8e 0f 13 18 44 b1 3b e9 6e 61 9c 8d c9 a4 9b ea cd 4d 5a a2 a3 6e 4a ac d8 97 8b 87 a5 c8 65 a9 ae 99 e5 dc db c6 4d 3e 91 c8 ef 9f 73 d6 b6 4e 41 95 be b5 34 6b c6 26 9f 17 5a bf 58 9d 36 6d 73 0b f5 ce 8c b2 c0 00 00 Data Ascii: .tW3d4-^KbB:me[l-qff(H"31TU:!546DR)dF,NkiV+Kmyx44gD[szaAD;naMZnJeM>sNA4k&ZX6ms
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: f7 37 53 2d 79 e4 38 46 17 ea 17 69 ad 1c fe d5 97 d1 c3 a9 6e 9d 4d 3a cd eb 99 46 f2 6b e6 93 9f 6c f3 34 af 14 89 92 d2 f3 59 a7 2f 8b f1 6b 53 a7 5d 3f cb 4f 9b a7 3e a9 2e ee 40 af 5e 37 c9 bf 65 b4 4f 36 cf 36 6d e1 95 15 9a 5c 00 00 00 00 00 00 00 00 00 00 00 00 00 14 18 15 59 3d 2e 1c ea 34 e5 9c bb f3 1c 36 b3 9e 9a 9d 18 77 69 b5 e5 d4 74 61 ae d3 2d 9a fe 44 e4 16 f3 bf 4f e7 bf d4 3d 18 5f bb ca a3 44 8e cd 71 ad aa 1f 56 ce 51 23 5f 35 91 d7 4e 59 54 d0 e9 35 d2 3d 93 7f 78 df 5f 38 b6 b1 01 bd 77 f2 db 91 8a 47 09 89 c4 b4 48 bb 79 fe e5 e2 ea 8d a7 92 e7 3d 59 3b 3b 57 75 65 a5 6a 24 65 a3 73 65 d0 00 00 00 00 00 00 00 00 00 00 00 00 01 e1 a7 29 ab d2 b0 0a 65 66 b3 c9 29 a7 1a ce dc aa f1 1c db 2c 6b bd ac ca b0 bc 86 93 13 3b 2d df 49 e9 Data Ascii: 7S-y8FinM:Fkl4Y/kS]?O>.@^7eO66m\Y=.46wita-DO=_DqVQ#_5NYT5=x_8wGHy=Y;;Wuej$ese)ef),k;-I
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: 3a 51 da ce a2 63 9c 44 f9 cc e7 47 61 3b f1 d9 8b a0 00 00 00 00 00 00 00 00 00 43 89 f0 f5 f2 9f 2f d1 87 e7 a4 93 a7 2f a9 bd 8f 1e 51 b5 00 00 00 00 00 00 00 00 00 00 00 00 35 a5 d3 2c a8 00 00 00 03 04 89 9e 93 90 00 07 86 21 98 00 00 00 00 00 00 00 00 00 00 02 11 3e 6e ae 57 e3 7a b0 0c fa ef 6f cd f4 af b9 e0 49 34 a8 00 00 00 00 00 00 00 00 00 00 00 20 87 c9 27 33 3b 59 f6 09 b1 00 00 00 22 47 c0 67 3b 3b 21 f4 81 de 40 00 00 00 00 00 00 00 00 00 00 00 00 06 21 c1 32 98 d7 8d ef d3 cd dd bc f4 7c 7f a3 7d 6f 22 e2 40 00 00 00 00 00 00 00 00 00 00 01 f2 21 f2 71 a8 3b d9 f4 89 dd c0 00 00 0e 36 7c 3e 40 4e 90 76 a3 ed 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 63 e0 7a b9 49 97 13 76 9b e5 e9 97 d6 0c fe 8c b4 80 00 00 00 00 00 00 00 00 00 00 03 e0 Data Ascii: :QcDGa;C//Q5,!>nWzoI4 '3;Y"Gg;;!@!2\|}o"@!q;6\|>@NvczIv
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: b5 3c 99 d5 cd 31 df 1e b3 af a9 df 3b b2 d1 4f 17 9f 9f 7c 5f 9f 33 fa ae d9 d7 d2 76 00 00 00 00 39 5f c7 fd 47 20 fc e3 f4 38 a7 75 aa d3 4a 29 17 ad 84 8f 2c e4 9d 7c f8 b4 6c a6 97 a2 30 79 3a 32 7a 31 bd a5 30 f8 f7 bb b6 77 f5 a6 2f 36 ad ab 93 68 af 45 10 aa 73 c9 ea c7 af 7e 91 f9 ce e7 b7 96 a9 00 00 16 cf 87 39 fd 7d 2f 87 fa bf 3f f6 ff 00 29 ea fd 3e 3f d0 e7 62 3d 00 00 00 35 06 dc 00 01 c5 0d 79 da 0d 98 06 31 80 6d cf 40 31 b9 d8 38 c6 df ae 6d 55 c5 7f 32 f0 b1 3c 38 e8 1f a5 7a 33 af a4 ed 08 73 8f 8e f3 20 5f 9e 72 c8 3e a5 d9 3f 4b f7 52 00 00 00 03 17 1b 70 8f 85 fb ce 35 f3 df 5b 8f 2f 26 07 ab 65 d2 24 d3 cd 23 65 a6 e1 e8 c8 bc 53 37 c4 a4 de b5 7c b4 62 e7 7a ed 15 5a b8 b4 d7 2f 5c bc 09 95 fb 7e 0f 7f fd 1f f3 cc ed 71 4c 80 00 Data Ascii: <1;O\|_3v9_G 8uJ),\|l0y:2z10w/6hEs~9}/?)>?b=5y1m@18mU2<8z3s _r>?KRp5[/&e$#eS7\|bzZ/\~qL
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: b3 5b cc 4f 0c bc 16 25 65 42 4a a9 f4 36 64 6a d0 f5 18 93 a8 90 ca 88 e1 db 6a 32 0b 88 ec 57 6d 65 57 df 95 3a 7e ef 87 bb 09 07 df 25 0d c4 6d a9 1b 9c 8c 7e 81 63 e5 ef 6d bc fb 1b 11 03 f2 c4 61 60 4c 4c a7 51 2b ec 48 1a 05 fe a0 e9 db 77 62 75 bf fc 1d 12 df 44 d0 d7 7d 77 ff 00 56 b6 ff 00 f2 3a 1e a3 5f 5f 62 fe ac be d1 ec ac 76 93 db 96 e4 a2 b3 8f 49 7d d5 3a c8 57 48 9a b9 8e 5e a2 72 e1 4e 39 3e b3 dd 2b 14 4b 3c 62 40 65 96 33 33 a3 1e 9c 53 79 c4 8f fa 4b 59 92 67 b5 59 cf bb 80 f5 61 f7 cb 52 70 89 bf bf a0 d5 60 d3 5d 95 e4 ee 32 cc c6 31 b6 fb d2 8b a7 1d 74 8c 76 03 88 00 69 db 82 13 f8 3e 9e c1 ec fa eb eb ec 4f d4 9b da 3d 3d 95 bf 55 7d ae aa ea 43 0d c6 4e 78 cd 6b 31 24 aa 65 95 8a d5 88 b6 89 df 16 8d ab 55 e4 b7 0d 6e 92 16 31 Data Ascii: [O%eBJ6djj2WmeW:~%m~cma`LLQ+HwbuD}wV:__bvI}:WH^rN9>+K<b@e33SyKYgYaRp`]21tvi>O==U}CNxk1$eUn1
2024-05-24 22:56:33 UTC	1369	IN	Data Raw: bf 29 76 fa 41 63 aa 09 03 64 b7 34 bd 64 82 21 ef 57 87 a1 0a 27 a9 27 88 24 e9 db 93 12 7f 1f f6 fc 03 d8 34 df 29 f6 47 24 4a 1f 77 51 a3 6a 11 fd 5b e8 dc 5f a2 1d 1b 6f f4 50 35 03 33 c6 18 fa c7 f3 8d 64 2d 0a 91 09 38 17 d6 5e d4 99 78 a6 54 8b 8b 78 78 b0 a7 08 20 83 37 28 f2 53 7b 84 a9 ad 15 4b 0e a2 75 33 d8 8a 38 e9 8b 36 60 2e 69 aa 3b 09 65 90 0d 64 85 9f 77 ad 18 45 a5 b3 51 87 7d 58 c5 d8 ea 44 20 8f dc a3 da ba 06 f5 fb b4 cf d3 42 75 2e ec 0f f7 82 32 91 84 3e 95 2a f3 b5 d7 3e 9a b2 fd 82 fe 47 d4 7e 01 ec 1e 9a 6f 4f 64 67 7e a9 1a 07 be db 68 92 01 d1 ff 00 c9 d5 6f d0 8f 4b ac c6 ec 90 81 ac c8 e8 c8 c4 1e 27 c2 d2 75 31 e3 73 de e4 86 2b 5f 0c 6e ef 62 0b 36 5b 78 ff 00 88 7b 56 2a 43 0b 96 df 41 7a cc f6 03 6d a1 3b 4f 48 87 d6 3d Data Ascii: )vAcd4d!W''$4)G$JwQj[_oP53d-8^xTxx 7(S{Ku386`.i;edwEQ}XD Bu.2>>G~oOdg~hoK'u1s+_nb6[x{VCAzm;OH=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49767	157.240.252.13	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:36 UTC	1307	OUT	GET /signals/config/917164566707525?v=2.9.156&r=stable&domain=www.cravob.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:37 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-24 22:56:37 UTC	1733	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-24 22:56:37 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-24 22:56:37 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-05-24 22:56:37 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-05-24 22:56:37 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-05-24 22:56:37 UTC	1500	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-05-24 22:56:37 UTC	1500	IN	Data Raw: 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 Data Ascii: nts[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user
2024-05-24 22:56:37 UTC	1500	IN	Data Raw: 2e 5f 72 61 74 65 4d 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: ._rateMS=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length
2024-05-24 22:56:37 UTC	1500	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 Data Ascii: .getFbeventsModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)retu
2024-05-24 22:56:37 UTC	1500	IN	Data Raw: 29 2c 63 29 2c 63 2e 65 78 74 72 61 63 74 50 49 49 3d 47 2c 65 29 2c 6a 28 63 2c 64 29 7d 72 65 74 75 72 6e 20 62 7d 28 62 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 75 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 2e 6c 69 73 74 65 6e 4f 6e 63 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 28 46 28 62 29 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 61 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 67 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 61 29 7d 29 2c 6d 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 47 28 Data Ascii: ),c),c.extractPII=G,e),j(c,d)}return b}(b);e.exports=new u(function(a,b){c.listenOnce(function(){var a=w(F(b));h.addEventListener?h.addEventListener("click",a,{capture:!0,once:!1,passive:!0}):g.attachEvent("onclick",a)}),m.listen(function(a,c,d){return G(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49751	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:36 UTC	878	OUT	POST /buyer/user/user-capi HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 459 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468
2024-05-24 22:56:36 UTC	459	OUT	Data Raw: 7b 22 66 61 63 65 62 6f 6f 6b 22 3a 7b 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 22 50 61 67 65 56 69 65 77 22 2c 22 65 76 65 6e 74 5f 74 69 6d 65 22 3a 22 31 37 31 36 35 39 31 33 39 30 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 72 36 30 31 64 74 76 66 76 66 68 50 61 67 65 56 69 65 77 31 37 31 36 35 39 31 33 39 30 31 31 32 22 2c 22 65 76 65 6e 74 5f 73 6f 75 72 63 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 61 76 6f 62 2e 63 6f 6d 2f 22 2c 22 63 75 73 74 6f 6d 5f 64 61 74 61 22 3a 7b 7d 2c 22 70 69 78 65 6c 5f 69 64 22 3a 22 32 37 30 30 31 30 34 39 39 34 33 37 30 30 37 22 2c 22 66 62 63 6c 69 64 22 3a 22 22 2c 22 75 73 65 72 5f 64 61 74 61 22 3a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 75 73 22 2c 22 63 6c 69 65 6e 74 5f 69 70 5f 61 64 64 72 Data Ascii: {"facebook":{"event_name":"PageView","event_time":"1716591390","event_id":"r601dtvfvfhPageView1716591390112","event_source_url":"https://www.cravob.com/","custom_data":{},"pixel_id":"270010499437007","fbclid":"","user_data":{"country":"us","client_ip_addr
2024-05-24 22:56:37 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:36 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:36 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:37 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 36 3a 33 36 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:56:36"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49755	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:36 UTC	1165	OUT	GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2F&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=index&ts=1716591392527&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2F&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1 Host: www.cravob.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
2024-05-24 22:56:37 UTC	147	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:36 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close
2024-05-24 22:56:37 UTC	81	IN	Data Raw: 34 36 0d 0a 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 64 68 41 51 41 42 41 50 41 41 41 4d 50 44 77 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 46data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49758	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:36 UTC	393	OUT	GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:36 UTC	657	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:36 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-2905" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 200898 Expires: Sat, 25 May 2024 02:56:36 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e145ed3bf7c8-BNA
2024-05-24 22:56:36 UTC	712	IN	Data Raw: 32 39 30 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 34 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 34 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 6d 65 72 69 63 61 6e 20 65 78 70 72 65 73 73 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 Data Ascii: 2905<?xml version="1.0" encoding="UTF-8"?><svg width="80px" height="41px" viewBox="0 0 80 41" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>American express1</title> <defs> <polygon
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: a2 22 20 66 69 6c 6c 3d 22 23 30 30 37 30 44 36 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 38 32 22 20 68 65 69 67 68 74 3d 22 34 32 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 e7 bc 96 e7 bb 84 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 33 2e 30 30 30 30 30 30 2c 20 39 2e 32 39 38 30 37 37 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 e7 bc 96 e7 bb 84 2d 31 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 2e 30 30 30 30 30 30 2c 20 30 2e 37 30 31 39 32 33 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 43 6c 69 70 70 65 64 22 3e 0a 20 20 20 20 20 20 20 20 20 Data Ascii: " fill="#0070D6" x="0" y="0" width="82" height="42"></rect> <g id="" transform="translate(13.000000, 9.298077)"> <g id="-12" transform="translate(0.000000, 0.701923)"> <g id="Clipped">
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 33 2c 39 2e 31 33 35 36 36 35 39 37 20 4c 32 37 2e 38 30 38 33 34 30 37 2c 39 2e 31 33 35 36 36 35 39 37 20 4c 32 37 2e 38 30 38 33 34 30 37 2c 37 2e 38 31 34 38 36 37 32 38 20 4c 32 38 2e 38 32 33 30 33 31 35 2c 39 2e 31 33 35 36 36 35 39 37 20 4c 33 34 2e 34 32 31 33 30 39 34 2c 39 2e 31 33 35 36 36 35 39 37 20 4c 33 34 2e 34 32 31 33 30 39 34 2c 38 2e 38 34 35 31 34 36 39 34 20 4c 33 34 2e 34 32 31 33 30 39 34 2c 38 2e 34 37 35 32 36 36 36 32 20 43 33 34 2e 35 36 35 38 36 30 34 2c 38 2e 35 36 38 37 39 39 35 37 20 33 34 2e 37 31 36 30 38 2c 38 2e 36 35 30 35 32 32 38 32 20 33 34 2e 38 36 38 36 36 31 35 2c 38 2e 37 32 31 38 35 33 35 20 43 33 35 2e 30 32 31 37 31 35 35 2c 38 2e 37 39 32 37 31 31 38 20 33 35 2e 31 37 38 30 37 36 31 2c 38 2e 38 35 33 31 37 Data Ascii: 3,9.13566597 L27.8083407,9.13566597 L27.8083407,7.81486728 L28.8230315,9.13566597 L34.4213094,9.13566597 L34.4213094,8.84514694 L34.4213094,8.47526662 C34.5658604,8.56879957 34.71608,8.65052282 34.8686615,8.7218535 C35.0217155,8.7927118 35.1780761,8.85317
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 e7 bc 96 e7 bb 84 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 32 2e 39 32 30 36 38 33 2c 20 31 33 2e 36 39 39 32 31 31 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 43 6c 69 70 70 65 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 2d 34 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 70 61 74 68 2d Data Ascii: </g> <g id="" transform="translate(12.920683, 13.699211)"> <g id="Clipped"> <mask id="mask-4" fill="white"> <use xlink:href="#path-
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 2c 32 2e 34 37 39 36 31 35 33 20 43 33 32 2e 36 30 31 31 34 37 34 2c 32 2e 34 37 39 36 31 35 33 20 33 32 2e 33 35 36 34 35 2c 32 2e 32 35 31 39 32 33 39 37 20 33 32 2e 33 35 36 34 35 2c 31 2e 38 39 33 33 38 30 39 38 20 43 33 32 2e 33 35 36 34 35 2c 31 2e 35 32 35 38 36 32 36 20 33 32 2e 36 30 31 31 34 37 34 2c 31 2e 32 38 31 31 36 35 32 38 20 33 32 2e 39 35 31 31 38 37 33 2c 31 2e 32 38 31 31 36 35 32 38 20 4c 33 35 2e 36 31 30 32 36 33 32 2c 31 2e 32 38 31 31 36 35 32 38 20 4c 33 36 2e 31 35 33 30 33 37 37 2c 30 2e 30 33 38 37 38 33 31 30 38 38 20 4c 33 32 2e 39 39 34 36 34 37 31 2c 30 2e 30 33 38 37 38 33 31 30 38 38 20 43 33 31 2e 36 37 33 38 34 38 35 2c 30 2e 30 33 38 37 38 33 31 30 38 38 20 33 30 2e 38 38 36 33 37 36 36 2c 30 2e 38 34 33 37 33 33 33 Data Ascii: ,2.4796153 C32.6011474,2.4796153 32.35645,2.25192397 32.35645,1.89338098 C32.35645,1.5258626 32.6011474,1.28116528 32.9511873,1.28116528 L35.6102632,1.28116528 L36.1530377,0.0387831088 L32.9946471,0.0387831088 C31.6738485,0.0387831088 30.8863766,0.8437333
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 37 31 39 34 32 20 5a 20 4d 31 36 2e 34 39 36 39 34 35 37 2c 32 2e 30 39 34 31 34 36 31 36 20 43 31 36 2e 34 39 36 39 34 35 37 2c 32 2e 35 30 36 30 36 39 30 37 20 31 36 2e 32 33 34 37 37 2c 32 2e 38 34 36 36 36 31 32 38 20 31 35 2e 37 31 38 34 34 39 32 2c 32 2e 38 34 36 36 36 31 32 38 20 4c 31 33 2e 39 36 30 32 31 38 35 2c 32 2e 38 34 36 36 36 31 32 38 20 4c 31 33 2e 39 36 30 32 31 38 35 2c 31 2e 33 34 32 35 37 35 38 20 4c 31 35 2e 37 31 38 34 34 39 32 2c 31 2e 33 34 32 35 37 35 38 20 43 31 36 2e 32 33 34 37 37 2c 31 2e 33 34 32 35 37 35 38 20 31 36 2e 34 39 36 39 34 35 37 2c 31 2e 36 37 34 36 36 35 30 33 20 31 36 2e 34 39 36 39 34 35 37 2c 32 2e 30 39 34 31 34 36 31 36 20 5a 20 4d 31 32 2e 34 39 30 36 31 37 34 2c 30 2e 30 33 38 37 38 33 31 30 38 38 20 4c Data Ascii: 71942 Z M16.4969457,2.09414616 C16.4969457,2.50606907 16.23477,2.84666128 15.7184492,2.84666128 L13.9602185,2.84666128 L13.9602185,1.3425758 L15.7184492,1.3425758 C16.23477,1.3425758 16.4969457,1.67466503 16.4969457,2.09414616 Z M12.4906174,0.0387831088 L
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 37 38 34 33 20 4c 35 30 2e 39 31 39 32 34 37 32 2c 37 2e 36 35 37 32 37 38 34 33 20 4c 35 30 2e 39 31 39 32 34 37 32 2c 31 2e 35 33 33 37 30 34 32 36 20 4c 34 39 2e 34 38 34 36 30 32 38 2c 31 2e 35 33 33 37 30 34 32 36 20 4c 34 39 2e 34 38 34 36 30 32 38 2c 35 2e 30 37 36 36 31 39 31 38 20 4c 34 39 2e 35 30 32 30 38 31 32 2c 35 2e 35 33 31 35 32 39 34 36 20 4c 34 39 2e 32 33 30 39 33 30 31 2c 35 2e 30 37 36 36 31 39 31 38 20 4c 34 36 2e 39 33 38 34 32 37 39 2c 31 2e 35 33 33 37 30 34 32 36 20 4c 34 35 2e 31 33 37 32 31 2c 31 2e 35 33 33 37 30 34 32 36 20 4c 34 35 2e 31 33 37 32 31 2c 37 2e 36 35 37 32 37 38 34 33 20 4c 34 36 2e 35 37 31 33 38 31 39 2c 37 2e 36 35 37 32 37 38 34 33 20 4c 34 36 2e 35 37 31 33 38 31 39 2c 33 2e 39 39 32 30 31 34 38 33 20 5a Data Ascii: 7843 L50.9192472,7.65727843 L50.9192472,1.53370426 L49.4846028,1.53370426 L49.4846028,5.07661918 L49.5020812,5.53152946 L49.2309301,5.07661918 L46.9384279,1.53370426 L45.13721,1.53370426 L45.13721,7.65727843 L46.5713819,7.65727843 L46.5713819,3.99201483 Z
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 2e 32 39 38 31 32 32 36 38 20 32 38 2e 34 32 30 33 32 30 31 2c 34 2e 32 39 38 31 32 32 36 38 20 4c 32 36 2e 36 39 37 30 34 36 33 2c 34 2e 32 39 38 31 32 32 36 38 20 4c 32 36 2e 36 39 37 30 34 36 33 2c 32 2e 37 38 35 30 36 31 38 31 20 4c 32 38 2e 34 32 30 33 32 30 31 2c 32 2e 37 38 35 30 36 31 38 31 20 5a 20 4d 32 36 2e 36 39 37 30 34 36 33 2c 35 2e 34 35 33 31 31 32 39 34 20 4c 32 37 2e 33 38 38 31 35 30 39 2c 35 2e 34 35 33 31 31 32 39 34 20 4c 32 39 2e 32 31 36 37 36 37 34 2c 37 2e 36 35 37 32 37 38 34 33 20 4c 33 31 2e 30 34 34 39 31 31 35 2c 37 2e 36 35 37 32 37 38 34 33 20 4c 32 39 2e 30 30 36 35 35 34 35 2c 35 2e 34 30 30 32 30 35 34 31 20 43 33 30 2e 30 34 37 36 39 39 31 2c 35 2e 32 30 37 39 34 33 32 33 20 33 30 2e 36 36 38 38 39 30 32 2c 34 2e 34 Data Ascii: .29812268 28.4203201,4.29812268 L26.6970463,4.29812268 L26.6970463,2.78506181 L28.4203201,2.78506181 Z M26.6970463,5.45311294 L27.3881509,5.45311294 L29.2167674,7.65727843 L31.0449115,7.65727843 L29.0065545,5.40020541 C30.0476991,5.20794323 30.6688902,4.4
2024-05-24 22:56:36 UTC	214	IN	Data Raw: 39 32 30 39 31 34 39 2c 37 2e 36 35 37 32 37 38 34 33 20 4c 35 2e 31 30 38 34 31 32 32 39 2c 36 2e 33 34 34 39 38 32 37 33 20 4c 38 2e 30 32 31 31 36 30 37 36 2c 36 2e 33 34 34 39 38 32 37 33 20 4c 38 2e 35 34 35 39 38 34 35 36 2c 37 2e 36 35 37 32 37 38 34 33 20 5a 22 20 69 64 3d 22 e5 bd a2 e7 8a b6 22 20 66 69 6c 6c 3d 22 23 30 30 36 46 43 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0d 0a Data Ascii: 9209149,7.65727843 L5.10841229,6.34498273 L8.02116076,6.34498273 L8.54598456,7.65727843 Z" id="" fill="#006FCF" fill-rule="nonzero"></path> </g> </g> </g> </g></svg>
2024-05-24 22:56:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49754	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:36 UTC	892	OUT	POST /buyer/user/select-coupon HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 17 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
2024-05-24 22:56:36 UTC	17	OUT	Data Raw: 7b 22 63 61 72 74 5f 74 6f 6b 65 6e 22 3a 22 22 7d Data Ascii: {"cart_token":""}
2024-05-24 22:56:37 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:36 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:36 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:37 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 36 3a 33 36 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:56:36"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49768	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:36 UTC	392	OUT	GET /uploader/d334d7f24d8af21f9aa9024236873f7eb5450d87.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:36 UTC	685	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:36 GMT Content-Type: image/png Content-Length: 1032083 Connection: close x-oss-request-id: 665076C3B6DE1D3630F4CCDD ETag: "5250B20144ED26EADFDE22ECF97519C6" Last-Modified: Wed, 09 Aug 2023 07:20:48 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 5206260739107121028 x-oss-storage-class: Standard Content-Disposition: inline; filename="221213764dff62429a2c0a8868ec4e4cbc319738_221" Content-MD5: UlCyAUTtJurf3iLs+XUZxg== x-oss-server-time: 9 CF-Cache-Status: HIT Age: 5 Expires: Sat, 25 May 2024 02:56:36 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e145ee65f7d4-BNA
2024-05-24 22:56:36 UTC	684	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 82 00 00 03 20 08 02 00 00 00 f9 bf 4b d3 00 00 01 0b 69 43 43 50 69 63 63 00 00 18 95 63 60 60 5c 91 93 9c 5b cc 24 c0 c0 90 9b 57 52 14 e4 ee a4 10 11 19 a5 c0 7e 87 81 91 41 92 81 99 41 93 c1 32 31 b9 b8 c0 31 20 c0 87 01 27 f8 76 8d 81 11 44 5f d6 05 99 c5 40 1a e0 4c 49 2d 4e 66 60 60 f8 c0 c0 c0 10 9f 5c 50 54 c2 c0 c0 08 b2 8b a7 bc a4 00 c4 8e 60 60 60 10 29 8a 88 8c 62 60 60 cc 01 b1 d3 21 ec 06 10 3b 09 c2 9e 02 56 13 12 e4 cc c0 c0 c8 c3 c0 c0 e0 90 8e c4 4e 42 62 43 ed 02 01 d6 64 a3 e4 4c 64 87 24 97 16 95 41 99 52 0c 0c 0c a7 19 4f 32 27 b3 4e e2 c8 e6 fe 26 60 2f 1a 28 6d a2 f8 51 73 82 91 84 f5 24 37 d6 c0 f2 d8 b7 d9 05 55 ac 9d 1b 67 d5 ac c9 dc 5f 7b f9 f0 4b 83 ff ff 4b 52 2b 4a Data Ascii: PNGIHDR KiCCPiccc``\[$WR~AA211 'vD_@LI-Nf``\PT```)b``!;VNBbCdLd$ARO2'N&`/(mQs$7Ug_{KKR+J
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: fb fd 7e bb dd 6e b7 db 9b 9b 9b bb bb bb db db db e7 cf 9f e3 87 9b 9b 1b ef fd 0f 7f f8 c3 f7 df 7f ff 8d 37 de c0 4b a4 94 0a 39 5a aa d4 2b ac 02 43 4b 95 2a 55 aa d4 6f 51 fd 72 22 f3 53 52 92 5d d7 1d 0e 87 dd 6e 77 7f 7f 7f 7b 7b bb dd 6e af af af 37 9b cd cd cd cd f3 e7 cf b7 db 2d fe 69 bf df 77 5d 97 73 3e 1c 0e 78 89 94 92 d6 da 39 07 c6 34 84 f0 fa eb af ff e0 07 3f f8 f0 c3 0f df 7e fb 6d 3c 79 21 47 4b 95 7a 55 55 60 68 a9 52 a5 4a 95 fa 0d d5 cb 10 93 f5 e9 7b e5 21 84 fd 7e bf db ed 36 9b cd 66 b3 b9 bb bb bb bb bb 7b f6 ec d9 ed ed ed ed ed 2d b8 cc fd 7e df f7 fd f1 78 1c c7 b1 ef 7b 00 47 c0 59 63 8c b5 16 58 13 3f 83 e6 c4 ff 6a ad 53 4a c4 9a de fb dd 6e d7 f7 7d 55 55 df fe f6 b7 3f fe f8 e3 7f fc c7 7f bc ba ba 2a e4 68 a9 52 af a4 Data Ascii: ~n7K9Z+CKUoQr"SR]nw{{n7-iw]s>x94?~m<y!GKzUU`hRJ{!~6f{-~x{GYcX?jSJn}UU?hR
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: ab 1d 6d 7d 60 3b 3e 09 79 53 fc 13 8e 99 47 22 9f 41 fa e2 f1 bf ce 39 fa dc 09 fe c8 bc 4a a0 4f 88 4c bc 8b a7 05 fb cb d7 25 32 c6 db c1 31 c4 18 ac 35 5a 1b 6b 5d ce 19 48 1d 0f c0 31 1c 0e 87 69 9a fe e0 0f fe e0 fb df ff fe cf 7e f6 b3 92 f1 54 aa d4 59 15 18 5a aa 54 a9 52 ff b3 92 b0 f2 7f 63 fa e9 fb 9e 31 ec 0c c5 bc bd bd 45 80 d1 dd dd 1d f4 9a 9b cd 66 1c c7 e3 f1 48 61 25 d8 3b 1a 77 60 2d c7 31 78 0f d3 4f 62 74 91 e4 f9 68 c1 21 75 07 94 06 d6 13 74 23 68 3f 30 8e d6 da 71 1c e9 2e 1a c7 91 0d 6b f2 82 44 9f 3c 0f 64 55 49 1c 4a 08 4e cc 07 2c 8b f6 3a 40 1b ff 55 9e 6a 3c 83 f7 1e c7 2f cf 30 30 22 d3 9a 08 67 f1 30 22 d1 b3 27 97 dd 79 1e 3c e4 04 20 47 a5 d2 14 7f cb 37 28 e1 ac d6 5a 29 5e 09 1a dd f9 b3 8d 07 d0 ff 30 0c 87 c3 e1 ea Data Ascii: m}`;>ySG"A9JOL%215Zk]H1i~TYZTRc1EfHa%;w`-1xObth!ut#h?0q.kD<dUIJN,:@Uj</00"g0"'y< G7(Z)^0
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: ef f7 5d d7 75 5d 87 35 9e 94 12 50 1a 9b e6 24 ba e4 4b cb 40 1f d9 ec 06 4c 24 73 29 33 db f1 00 7a 7a d8 61 e7 c3 08 16 89 0b 29 3a 94 1e 1d a9 01 05 08 43 57 77 18 86 aa aa d8 b6 26 ea e5 09 94 63 2d d9 08 e6 04 4b 09 7d 08 73 25 eb 29 b3 8a 08 58 99 7f 44 72 57 c2 bb b3 a7 25 ff 77 36 2a 53 9e 28 99 1b 7a 06 c8 08 8b 65 2c bc 44 ba 38 63 9f 04 b5 21 c6 c4 63 23 11 8b 27 c4 d9 63 53 5e 36 ca a5 7e 94 ae 29 e6 a7 e2 6c 48 c0 ca 8f 58 f6 f1 39 c5 5e e2 4b c9 8c 12 dd 12 0a cb 77 1a 42 00 c7 cc b4 2c 68 85 f1 af 70 b6 c5 18 bf f4 a5 2f fd f8 c7 3f 7e fc f8 f1 d7 be f6 35 fc 6d b1 31 95 fa 5c 56 81 a1 a5 4a 95 fa 5f d5 2f ef 95 7f ca ae 62 ce 19 bd 72 04 61 ca 19 3f 98 57 0e dc 09 d5 e6 76 bb 8d 31 02 0a 90 c4 02 56 23 be 84 f5 5b 7a 96 01 59 08 ce c8 5f Data Ascii: ]u]5P$K@L$s)3zza):CWw&c-K}s%)XDrW%w6*S(ze,D8c!c#'cS^6~)lHX9^KwB,hp/?~5m1\VJ_/bra?Wv1V#[zY_
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: b4 bd e3 00 98 13 24 a3 28 81 c3 24 b0 9b 26 cc 3a cf e8 36 93 fc e3 a9 90 b8 59 ba bc 79 a2 c8 ef ce a7 11 a7 e8 13 57 a0 14 30 48 b6 12 87 44 e0 2b 9b e9 b2 bd 4e a2 3a c6 68 8c 8e 31 c9 18 51 5c 57 a4 7e 67 9b 7c a4 04 16 0a 81 a6 69 ce 04 ac 12 ce e2 6d e2 38 a5 3b 9e 57 14 91 3d 9e 19 4f 4b ec 48 1e 54 62 4a 19 db 44 aa 9e db 12 62 6e 39 e9 54 66 11 48 2d 87 7c da 33 a5 f2 59 7e 3e bf 05 10 9c 1c 0e 87 61 18 be f8 c5 2f 7e ef 7b df 7b fc f8 f1 b7 bf fd 6d 3c 5b 21 47 4b fd ce 55 81 a1 a5 4a fd d6 d5 ff cb f4 43 6c f7 69 96 99 18 23 d2 8b 90 b8 8e d1 3e cf 9f 3f bf b9 b9 01 ca dc 6e b7 f8 01 be 72 ad 35 dc e5 00 40 58 7a 67 a0 69 9d c3 fa a7 64 f4 0c 04 70 34 ac 70 25 26 d8 9a c9 21 95 b3 ca 19 d0 e7 d4 5d 05 c9 44 12 0e 4f 8b c6 37 63 c3 cf 2c 2f 33 Data Ascii: $($&:6YyW0HD+N:h1Q\W~g\|im8;W=OKHTbJDbn9TfH-\|3Y~>a/~{{m<[!GKUJCli#>?nr5@Xzgidp4p%&!]DO7c,/3
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 23 0e bb aa 3c 66 0b 01 c1 4b 1c 4c 0d ae 8c fc 24 1a 96 d1 95 44 33 d2 25 46 f8 22 53 fd f9 a9 49 9b 39 2f 27 4e 84 c7 f5 86 37 4b e4 77 66 cc a7 5e f3 2c 2b 80 7d 7c 3a b4 24 10 7c 39 40 80 ac ea 99 c1 48 d2 cc a4 6f e5 66 80 0a 01 4a 81 e9 e2 67 12 93 64 5e f1 00 8e c8 92 92 50 22 4e 19 9b 20 bd f3 38 b7 d2 73 c6 4f 04 8f a4 b0 e1 ac 17 2f b7 25 92 73 95 16 7b de 85 70 e5 6f b7 5b a5 d4 1f ff f1 1f ff e4 27 3f 79 ff fd f7 ff f0 0f ff 10 0f 28 19 4f a5 7e 0b ab c0 d0 52 a5 4e f5 0a 4d 3f bb dd 6e b3 d9 40 8b 09 7c 89 ff bd be be 86 1f e8 70 38 1c 8f 87 e3 b1 93 04 0f 96 a8 aa aa ec 5c 58 e7 e8 4d 26 9b 22 03 62 42 08 4a 69 a5 92 52 59 29 23 db b2 9f 1c 72 1d b5 36 84 a7 b2 21 48 23 8e b5 d6 39 3b 8e 53 ce b9 aa 90 2f f3 89 14 fa 18 a3 52 98 51 9e 73 4e Data Ascii: #<fKL$D3%F"SI9/'N7Kwf^,+}\|:$\|9@HofJgd^P"N 8sO/%s{po['?y(O~RNM?n@\|p8\XM&"bBJiRY)#r6!H#9;S/RQsN
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 29 1e 90 b6 24 89 c6 c8 44 12 1a 4a 9d 80 04 49 8c 5b c2 95 80 a4 4f c9 ea b1 83 cf 2e 3c bf 56 84 d7 d2 62 2f e5 ad 7c 83 b2 d7 4f 5f 91 44 c3 67 d2 4c 4e e6 64 4c 18 c6 41 41 c7 22 05 0f b2 4d 7f 96 be 24 41 39 1f 2f 3b f8 9f e4 bf b3 54 2f 9c 49 02 24 c9 2d 69 60 be cd 61 18 ba ae 7b f3 cd 37 ff e1 1f fe e1 e3 8f 3f 2e 19 4f a5 7e 4b aa c0 d0 52 bf ed f5 cb 89 cc 4f 6f fa c1 c8 72 34 c7 c1 5c c2 f7 83 1f f0 fb c3 e1 70 3c 1e d1 11 1e c7 c9 39 78 47 34 5a 75 cc 88 81 ad c4 18 a3 35 38 cb 08 f6 88 0b fc 0c b3 1c 50 a5 52 5a 36 25 e5 fc 43 12 33 73 62 65 56 2a 79 6f a7 29 71 9d 03 f2 18 c7 91 ec 14 cc 2b c0 0f f0 d6 c4 98 b4 b6 ce 99 aa f2 5c 23 e5 aa 19 63 ec fb 0e c0 08 6f 21 84 90 52 1c 86 53 62 ce 30 4c c8 f5 bc b8 58 0f c3 38 33 37 d3 7a 7d b1 df ef Data Ascii: )$DJI[O.<Vb/\|O_DgLNdLAA"M$A9/;T/I$-i`a{7?.O~KROor4\p<9xG4Zu58PRZ6%C3sbeV*yo)q+\#co!RSb0LX837z}
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 9b cd 8e 5e 69 e1 83 09 f3 72 ae b4 b6 4a 25 e7 d0 d6 54 d6 3a ad 55 d3 d4 80 59 84 e3 74 b7 00 19 58 6b 42 88 f3 1a 9f 43 08 31 a6 10 26 ad 11 00 74 0a e6 54 4a 8f 63 d0 1a 8f 49 29 bd 88 dc d7 3a 3b 67 ab aa 6e 9a 26 c6 08 15 41 4a 39 c6 34 87 61 29 6b 9d 52 7a a6 03 c3 72 b9 08 21 18 63 8d 51 10 b0 82 7c e5 05 46 a7 5a ce 3a a5 e8 bd 1f c7 5e f4 bb dd 62 d1 22 16 c0 18 33 8e a7 91 e8 e3 38 e2 c3 92 03 9c 08 0a f9 25 05 aa a3 45 fd cc c3 fe 32 93 f7 32 2d c7 1e 31 e9 cf 5f 08 74 78 ce c9 9b 4a cd a8 74 e7 e0 82 a7 d3 dc 39 a7 35 86 69 7d c2 b4 c4 f7 85 6b 1b d7 b9 9c a4 4a 70 06 a2 9d df 20 ec 3a 64 c8 91 4c 00 3d 13 2a 48 84 2d 75 0b f2 ad 49 75 2c 55 d4 52 f1 29 1d 4e d2 44 4f e1 04 e1 26 6f 41 b8 e0 81 e6 79 1e 80 c2 e7 6b d5 72 c3 20 b4 bc c1 39 a3 Data Ascii: ^irJ%T:UYtXkBC1&tTJcI):;gn&AJ94a)kRzr!cQ\|FZ:^b"38%E22-1_txJt95i}kJp :dL=*H-uIu,UR)NDO&oAykr 9
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: ce dc 60 65 65 2c f5 ca ab c0 d0 df c7 7a 55 a6 9f c3 e1 80 7c 22 b0 98 f7 f7 f7 d7 d7 d7 68 94 df df df dd de 3e bf b9 b9 db ed f6 7d 7f ec ba 6e 9a 22 24 8c 92 d2 83 92 d2 7b 70 93 66 de d0 6b ad f5 38 4e de 57 1c b2 87 db 31 77 f6 a2 f1 8d 1c 22 27 f9 33 de d6 41 bb c0 b4 31 af 8e 16 12 c0 aa 3a 41 b7 b6 6d f1 87 d0 77 42 22 96 52 ba bf bf af eb fa e1 c3 87 30 c8 43 94 b6 5e af a1 d6 c2 1a 76 71 71 81 3f 9c a6 69 18 86 e5 72 39 8e 93 f7 2f 46 f3 75 5d 07 d6 90 90 02 04 e7 dc e9 36 88 fc a4 9b 01 c7 df 75 9d d6 06 2e 7b 63 74 d3 d4 4d d3 70 a1 45 cb 18 59 ee 20 14 39 08 d1 7b ff ec d9 f3 71 9c 66 cd ab 85 8d dd 7b bf 5e af a7 69 72 ce 0f 43 8f 24 a9 ba ae 57 ab 15 88 c0 b6 6d 41 87 e0 44 8d e3 08 52 19 d7 c6 34 4d 39 c7 9c f3 6a b5 62 06 e4 6c 97 d1 c6 Data Ascii: `ee,zU\|"h>}n"${pfk8NW1w"'3A1:AmwB"R0C^vqq?ir9/Fu]6u.{ctMpEY 9{qf{^irC$WmADR4M9jbl
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 98 39 45 6f 21 4c 7d 3f 84 90 a6 69 c4 51 2d 16 0d 3c 28 94 1e f6 fd c8 dc 16 a4 d0 3b a7 73 56 88 3a 82 bf 04 52 ad cb cb 4b 2c cf 58 62 cf d2 13 25 97 43 3e 86 83 dd 57 ab 15 ba e1 5d 77 ac 2a b8 aa 03 7c e8 cb e5 12 ed 7e 2c b1 e0 0b 11 0f 84 39 43 78 39 f2 b5 72 58 28 de 20 70 27 5e 88 26 f7 71 1c 91 40 84 0f 8b 5d 6c ae e2 33 f1 93 ba 6e 00 1c f7 1e 4b ef 29 82 40 29 1d c2 c4 7e 25 f5 7f 78 f5 be ef 8d 01 fa af b5 ce d6 9a be ef 9d 73 75 dd 84 90 72 0e ce 39 6b cd 38 4e 58 14 87 61 80 d5 1d 3f 53 ce 88 30 7c 0e 16 07 03 a8 54 4e 29 42 ef 4b 5b 95 73 06 17 d5 3c e6 29 c5 18 ac 35 33 f0 3d 35 46 e5 90 1b 99 8e 29 b5 86 e0 7d 8d 71 c8 f6 9a c9 63 3d 0c a3 52 86 9c 3a 60 fd 62 b1 58 af 97 39 e7 10 90 b0 33 2a a5 ad 75 33 69 07 7f b4 c5 e4 4f 24 bc e2 9f Data Ascii: 9Eo!L}?iQ-<(;sV:RK,Xb%C>W]w\|~,9Cx9rX( p'^&q@]l3nK)@)~%xsur9k8NXa?S0\|TN)BK[s<)53=5F)}qc=R:`bX93u3iO$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49763	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:36 UTC	384	OUT	GET /uploader/5d20048868877141ba3fb9ce2a33ade5.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:36 UTC	566	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:36 GMT Content-Type: image/png Content-Length: 780254 Connection: close x-oss-request-id: 66511B20D31A2338325A56F7 ETag: "94FBFA0D40FB6AD6C10F7B875AF042CC-1" Last-Modified: Tue, 31 Oct 2023 10:03:33 GMT x-oss-object-type: Multipart x-oss-hash-crc64ecma: 5954505726984985619 x-oss-storage-class: Standard x-oss-server-time: 204 CF-Cache-Status: HIT Age: 4 Expires: Sat, 25 May 2024 02:56:36 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e145edf8f7d8-BNA
2024-05-24 22:56:36 UTC	803	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 18 08 06 00 00 00 77 eb 2e 48 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec fd 75 78 54 59 a3 ef fb 16 10 88 bb 2b 1a 88 12 82 26 b8 c6 70 77 77 77 f7 c6 dd 1d ba 69 37 ba 1b 1a 77 77 f7 76 79 df b5 d6 bb d6 da 4b f6 3d fb 3e fb 9c 73 9f 7b ee ef ce 31 d2 05 23 c5 8f 90 41 26 45 42 e6 1f 9f a7 92 4a 8d 31 47 cd aa 54 ba be cc 9e 65 fb e9 e1 39 14 c6 0f f7 cf 14 ca d3 7b a7 f3 c5 c6 a8 9e dc 3d f5 46 3d be 73 32 5f 8f 6e 9f c8 17 1b 63 a6 87 b7 8e e7 8b ad 49 c5 c6 38 d3 83 9b c7 0a e5 fe 8d a3 6f 99 58 83 e5 4d b9 77 fd 68 be ee 5f 2b de ee 5d 3d 92 2f Data Ascii: PNGIHDRw.HsRGBgAMAapHYsodIDATx^uxTY+&pwwwi7wwvyK=>s{1#A&EBJ1GTe9{=F=s2_ncI8oXMwh_+]=/
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 62 63 8a 92 b7 bf 5e 1e ca ed ac e0 9e 1b d6 5f 86 45 76 15 8b ec 2a 16 b9 8b 12 16 d1 75 b0 48 6e a6 d7 8d ed 82 15 dc 8d 4b 2b b8 e7 8b 45 74 1d 34 b2 ab 48 64 57 b1 48 ab 83 46 56 05 1b a3 62 91 26 0f 12 19 75 b0 08 a9 e2 91 5d 45 22 b8 33 91 7d a6 83 dd 67 2d e4 31 d5 c2 e6 d4 c0 1e 53 15 1b 63 26 b6 4d 1d 6c 4e 15 1b a3 83 cd a9 a2 bf 53 25 08 0b e1 2a 16 d9 55 6c 4c 41 59 c1 dd 0a ee 96 92 8d 85 f4 82 b2 82 bb f3 59 c1 bd 90 58 04 77 26 16 d1 75 b0 08 ee 4c 2c a2 eb e0 11 dc 99 5e 8c 5c 16 f3 b0 c8 ae e2 11 b6 f8 70 0c d6 8e d8 98 a2 e4 65 6b 7d 16 84 95 eb de 0c 1e ca ed 5e 15 dc df be dc fd 64 67 76 70 7f 15 16 d9 55 2c b2 ab 58 e4 2e 4a 58 44 d7 c1 22 b9 a9 5e 33 b6 0b 56 70 37 2e ad e0 9e 2f 16 d1 75 d0 c8 ae 22 91 5d c5 22 ad 0e 1a 59 15 6c 8c Data Ascii: bc^_EvuHnK+Et4HdWHFVb&u]E"3}g-1Sc&MlNS%UlLAYYXw&uL,^\pek}^dgvpU,X.JXD"^3Vp7./u"]"Yl
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: a9 ff 78 e0 f8 33 36 9f d9 58 84 d7 c1 22 7b 1e 2f 39 87 bb 50 1c 82 bb e3 3f 10 38 62 a1 dc 2c 45 21 b8 ab 58 6c 77 bc ee 75 99 1d e2 ed 58 64 57 d1 c8 ae 22 91 5d 45 23 6d 51 42 22 6b 89 c2 f6 89 06 16 61 9d e9 8f 9f f2 f7 fb 8f 37 f3 c5 c6 e8 60 6b 32 13 8b e0 3a 58 84 d7 c1 d6 94 07 89 90 2a 16 21 de 25 2c 84 3b cb bb 70 84 bb c5 52 18 ec 35 46 0d 9c 8e 3f 73 36 c7 d7 43 47 6c 8c 4a bd 2f 0c 0b e9 05 55 90 e0 fe 2a 6c 4d 2a 76 9f 54 f6 d7 b0 d7 c5 e6 d4 c1 1e 13 1d 6c 4e 95 e3 fe 78 eb c1 bd b0 58 24 57 b1 31 2a 36 46 c5 22 ba 0e 16 c1 0b c3 31 78 b3 db a8 1c 6f ef 88 45 6e 15 1b a3 62 63 cc c4 22 b7 8a 45 72 33 b1 6d aa 58 44 56 39 06 76 47 6c 8c 99 d8 36 f2 04 6b 87 9f e9 52 e7 62 d8 18 15 1b a3 83 47 58 f3 b0 c8 ae 62 63 2c ce 94 37 b0 3b b2 47 ec Data Ascii: x36X"{/9P?8b,E!XlwuXdW"]E#mQB"ka7`k2:X!%,;pR5F?s6CGlJ/UlMvTlNxX$W16F"1xoEnbc"Er3mXDV9vGl6kRbGXbc,7;G
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: db c5 91 ee 22 c4 8b 28 5e bf 46 15 a4 56 8b 44 f3 b4 24 f4 6c df 02 1d 32 ea a3 41 6a 2c 9a d6 4d 90 47 b2 0f ea d1 46 06 f6 3d 9b 96 c9 79 be fc 60 13 fa 77 cd 96 b7 6f d5 20 45 aa 1a e5 87 30 9f d2 88 09 72 93 aa 44 f8 a0 5e 72 45 f9 b3 ec a6 a9 58 b3 78 2a 4e 1d fc 04 9f ec 5a 8d 69 63 fb 61 c2 f0 1e 58 b7 74 3a be fa 70 a3 5c e3 9e cd 4b 70 f4 db 0f e4 fe 14 a7 b8 11 ff 50 20 ee 8b 19 a7 94 79 95 97 c5 76 7b d0 56 af 7b 13 d4 78 fe 3a 68 64 57 59 c1 fd b5 59 c1 bd f0 58 64 57 d1 c8 ae 22 91 5d c5 22 6d 91 c2 22 b8 33 b1 35 15 23 34 c2 6a b9 51 28 2c 82 ab 58 64 57 b1 31 3a f8 7d 2a 41 1c 02 74 49 c3 22 ba 0e 16 d2 0b ca 1e 9d 58 08 b2 58 4a 02 f1 3b e8 78 9d 1a 38 1d 7f 56 d4 a8 6b 7d 1d 2c a4 17 94 15 dc 5f 8d ad 59 c5 c6 e4 e7 ad 07 f7 57 61 91 5d Data Ascii: "(^FVD$l2Aj,MGF=y`wo E0rD^rEXxNZicaXt:p\KpP yv{V{x:hdWYYXdW"]"m"35#4jQ(,XdW1:}AtI"XXJ;x8Vk},_YWa]
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 54 9f 17 22 6c da 4f 95 f2 b2 e7 8d fd f2 4d 53 63 2b c3 22 ad 8a 8d 51 d9 4f 0b 63 0f e8 ba 97 6c cd 3a 1c 5f ef 1d b1 31 2a f1 38 14 0a d9 67 66 62 fb 5c c5 c6 a8 1c 6f 6f 63 11 5c 8f 88 ee 85 c1 e6 7c 8e 45 78 15 8b f0 3a 1c 43 76 71 c3 22 b9 8a 8d 51 b1 31 2a 16 d9 55 0f 6f 15 16 0f e5 66 61 91 5e c5 23 ba 8e 17 23 72 49 c2 22 f8 cb 38 8e 95 51 fe ba 71 99 0f 1e 59 cd c3 b6 69 26 b6 4d cb 73 ec 83 68 55 6c 9f 9a 8b 87 f4 82 12 51 5d 9c 32 46 1c f9 2d 4e b7 22 4e 13 23 ce 77 be 73 fd 62 f9 c1 a6 c7 bf fb 18 27 f6 7f 82 af f6 6e c5 e8 81 dd b1 78 d6 04 54 0e f7 45 54 80 1b 92 2a 85 21 a1 42 08 aa 46 05 a0 52 98 0f 62 82 3c 64 04 17 3f 8b f4 77 95 91 dc 1e cb cb 07 7b 3e bb 4d 85 10 2f c4 46 fa cb 50 5e 39 d4 1d d5 c2 bd 50 35 c2 b8 2e dc 53 c6 f6 84 98 Data Ascii: T"lOMSc+"QOcl:_18gfb\ooc\\|Ex:Cvq"Q1Uofa^##rI"8QqYi&MshUlQ]2F-N"N#wsb'nxTET*!BFRb<d?w{>M/FP^9P5.S
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: e8 3a d8 9a 54 6c 9b 66 62 db 7c 97 b0 fb 6c 51 90 28 aa a2 af 19 26 62 db 34 13 8b 58 66 62 91 54 c5 42 bb 9d 15 dc ad e0 ce 9e 33 2a 16 da ed ac e0 5e 78 6c 9f 98 89 6d 53 07 9b d3 54 e4 77 42 e5 f8 7c b7 82 3b 89 d0 45 09 8b e0 ce c4 22 bb 8a 47 74 1d 3c 94 9b 85 45 76 15 8f e8 3a 9e 07 64 cb 8b 0a 1b dc 8b 3b 16 91 2d 05 c7 f6 a9 b9 5e 8c e8 3a c4 39 da 45 70 17 1f 82 2a 8e 74 7f 7a fb 3c 3e db bd 1e fd bb 66 cb f3 b0 8b f8 dd 20 b5 9a 3c 52 bd 7a 95 08 a4 c4 46 c9 a3 cf c5 51 ee c9 95 23 9e 9d 3a 46 44 75 35 ac 8b af 45 50 17 a7 8f 11 b7 11 a7 9a 11 31 5d 0d f3 e2 28 f9 08 6f 17 44 fa 94 95 97 e1 5e b9 e7 68 17 b1 5d 6c 23 26 c8 13 61 be 6e f0 77 2b 05 4f 17 5b 1e de 6e 2e 08 f6 c9 3d c5 4c 4c b0 8f 71 e9 8d c8 00 77 e3 f6 e5 10 e4 59 1a 01 e2 1f 04 Data Ascii: :Tlfb\|lQ(&b4XfbTB3^xlmSTwB\|;E"Gt<Ev:d;-^:9Eptz<>f <RzFQ#:FDu5EP1](oD^h]l#&anw+O[n.=LLqwY
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 27 a3 b9 18 e7 e7 6e 83 af db f3 e8 2e 2e fd 3d 4a 23 36 2a d4 58 57 00 82 3d dd 8d f5 ba 48 fe 6e 65 fe 92 bb 5d b1 3e 71 a4 7c 8d 6a 31 f2 3c ef e2 c8 fa f8 0a a1 88 2b 1f 22 e3 7f e5 08 7f 34 4d 4b c6 a4 51 fd f1 d9 fb 9b f0 ed 67 bb b0 74 de 44 f4 ef 9e 83 0e 59 0d b0 77 fb 2a e3 77 5d fc 3d 3a 23 4f 25 23 be be 75 f9 b0 f1 f7 c3 0a ee 8e 81 dc 6c 2c 92 9b 89 45 74 1d 2c a2 eb 60 21 bd a0 ac e0 6e 05 f7 42 23 91 d5 52 70 2c a2 eb 60 73 aa 68 24 35 11 db a6 8a 8d 29 4e 58 34 d0 c1 e6 2c 49 d8 73 42 c5 c6 68 21 51 d6 4c 34 32 99 88 85 50 15 0b ed 76 56 70 37 01 f9 9d 75 2a b6 26 0d ec 39 53 50 56 70 7f b5 3f 7f bd 9f 2f 16 d9 55 6c 4e 53 b1 e7 54 11 66 05 77 12 b9 8b 12 16 b9 55 2c b2 ab d8 18 33 f1 88 ae e3 f8 1b c5 22 ba 0e 1e d9 55 79 23 72 49 e3 18 Data Ascii: 'n..=J#6XW=Hne]>q\|j1<+"4MKQgtDYww]=:#O%#ul,Et,`!nB#Rp,`sh$5)NX4,IsBh!QL42PvVp7u*&9SPVp?/UlNSTfwU,3"Uy#rI
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: f6 29 67 ac 37 f7 14 35 e1 be e5 90 5c 39 02 35 aa 46 a1 6a 54 00 a2 02 dc 8c fb 5b 1a 69 d5 2b c9 0f 8e 3d 77 e4 2b 3c b8 66 fc ed ba 75 5a 9e e7 5e ec d3 9f 1f 5c c4 4f f7 2f c8 73 df 5b c1 fd cd 62 91 5c 95 df 6d ad e0 fe 6a 2c 92 9b 89 45 76 15 8b ec 2a 16 d1 75 b0 48 6c 26 16 b9 8b 12 1a d9 55 e4 3e e9 60 11 cf 52 7c b0 88 ae 83 cd a9 62 11 56 c5 c6 e8 60 73 3a 13 5b 93 8a 8d 31 13 db a6 0e 36 a7 99 68 a4 54 91 88 a5 62 91 ca 4c 6c 9b 3a 58 08 2d 28 2b 98 9a 80 3d a7 9c 89 ad 49 03 7b 5e 14 94 f5 fc 79 35 f6 3b af 62 63 74 b0 39 55 6c 8c 8a 45 ee a2 cc 0a ee af c0 c2 f7 db c2 42 b9 7a dd eb 50 43 3a c3 6e a7 06 6f 16 d9 55 3c b2 ab f2 06 74 5d 2c 82 3b 13 8b c8 96 82 e3 11 b4 e4 60 11 bb 38 61 f7 a9 78 e1 a1 dd 4e 04 77 11 87 45 2c 16 91 fd f2 a9 6f Data Ascii: )g75\95FjT[i+=w+<fuZ^\O/s[b\mj,Ev*uHl&U>`R\|bV`s:[16hTbLl:X-(+=I{^y5;bct9UlEBzPC:noU<t],;`8axNwE,o
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 13 5b 93 8a 85 d0 82 2a 48 30 65 6b 32 13 db 66 b1 e2 18 c0 9d 8d ad 49 03 7b 5e 14 94 15 dc 8b bf dc 90 7d f3 a5 fe f8 e9 46 be d8 18 3d 2f 46 f5 fc 58 c1 fd 15 58 f8 7e 5b 58 28 57 af 7b 1d 6a 48 67 d8 ed d4 e0 cd 22 bb 8a 47 76 55 de 80 ae 8b 45 70 67 62 11 f9 5d c2 22 bb 8a 8d d1 c1 23 68 c9 c1 22 76 71 c2 ee 53 f1 f2 62 64 57 89 a3 b2 6f 5e 38 28 4f 27 b3 78 f6 18 a4 54 0d 45 a8 8f 0d 95 23 3c 65 70 0f f7 2d 83 60 4f 71 84 bb 8b 3c 7f b9 88 cd 82 38 ea 5b 84 68 71 7a 15 c9 ad b4 24 8e 70 17 82 3d ca 21 c8 53 1c c5 ee 06 1f f7 72 7f 9d 0e 26 f7 68 75 7b 70 b7 c7 75 11 da 45 70 17 5c 4b db e4 6d 83 7c bd 10 1d 16 0c 4f b7 32 f0 70 2d 2d 63 bb f8 da cf 53 8c 73 87 bf 38 72 fd af 73 c1 47 04 7a cb b8 1f ec 65 fc cc bd b4 0c ee 22 b6 fb 94 cd fd d0 56 11 Data Ascii: [*H0ek2fI{^}F=/FXX~[X(W{jHg"GvUEpgb]"#h"vqSbdWo^8(O'xTE#<ep-`Oq<8[hqz$p=!Sr&hu{puEp\Km\|O2p--cSs8rsGze"V
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: f8 40 44 f5 97 fb e1 be 08 ed af ef e9 3d 11 e6 f3 73 ba 50 9e dc 2d 1c 35 7e bf 09 6a 28 67 d8 18 15 1b a3 62 11 dc 4c 2c 72 e7 f5 62 04 d6 c1 22 b0 9e a3 85 c4 e6 7c ee de f5 a3 f9 62 63 de 25 ec 3e ab 78 38 2d 3a 58 a4 56 b1 31 2a 36 46 75 ef ea 91 7c b1 31 2a b6 cd 92 e4 ce c5 03 b8 76 fa 6b 5c 3d bb 0f d7 cf 7d 87 ab 67 be c1 9d cb 87 8c bf 4d 17 f1 fb 0f d7 f0 ef 7f 7b 8c 55 8b a6 a1 66 42 34 c2 02 ca 21 26 c4 53 1e ed ed 27 8e ec f6 2a 2d 4f a7 22 22 b6 38 92 3d cc db 55 1e 31 2e 4e bf 22 ce 7d ee 56 ca 26 cf a3 1e e8 5b ce b8 ad 8b 3c 4d 8b 38 72 5c 84 70 11 db 5d 0d e2 03 51 45 6c 97 e7 62 37 94 75 29 2d 95 29 53 0a a5 8d 9f f9 fa fb c0 c3 cb 1d 2e c6 75 36 e3 f6 a5 0c e2 e7 ee ae 6e f0 f2 74 87 af 8f 17 3c bd 5c e1 e9 51 0e 7e de 6e 08 f1 f7 94 Data Ascii: @D=sP-5~j(gbL,rb"\|bc%>x8-:XV16Fu\|1vk\=}gM{UfB4!&S'*-O""8=U1.N"}V&[<M8r\p]QElb7u)-)S.u6nt<\Q~n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49762	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:36 UTC	393	OUT	GET /uploader/7393e7b9c4c1cf5cc9c8284ee1b106479bbea8cc.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:36 UTC	705	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:36 GMT Content-Type: image/jpeg Content-Length: 60660 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221cf54b7f0fc6c337a34b6dddaa3af022c76312_221" Content-MD5: QIwt4kBKSPWkBuBq46KH9g== ETag: "408C2DE2404A48F5A406E06AE3A287F6" Last-Modified: Wed, 09 Aug 2023 07:24:34 GMT x-oss-hash-crc64ecma: 16809768636961184375 x-oss-object-type: Normal x-oss-request-id: 6650744590AF5139327C9B91 x-oss-server-time: 44 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42719 Expires: Sat, 25 May 2024 02:56:36 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e145eee0f7f8-BNA
2024-05-24 22:56:36 UTC	664	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 e0 93 04 00 e8 03 00 00 e0 93 04 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 e7 02 00 00 03 a0 04 00 01 00 00 00 20 03 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipimagery40210 ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 03 20 02 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 02 03 04 05 07 01 08 09 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]} ,
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 10 89 45 f5 74 76 4e 9c bd 94 6a b6 1e 1e 95 17 0f 55 a8 ad 6a ca 8c 73 39 5a 8a 8a ca e2 24 77 91 8e 42 72 b7 1c e7 df a6 69 94 73 1d b3 a2 ba 63 79 a5 29 3b 4f 66 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 91 ca 21 95 d3 6e 60 cc 5d b5 66 16 8d 2d 1a e9 b0 02 b2 b2 a5 7d 2b 2a 3d 8b 61 18 31 59 05 d6 e1 92 5e 24 85 56 6a a1 c8 f2 d3 41 85 e7 ba c6 59 65 9e d6 ec 6a e9 0e c9 dc fb 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c5 21 d4 46 73 d2 d1 55 a2 77 7a 65 59 19 a3 c9 b7 a7 87 85 c2 a2 a5 7d 3d 2e 15 45 ae 11 6b 57 16 cb 95 4a e1 b1 24 05 eb 35 10 80 e5 a4 3f 1b cc f4 88 f6 4b 8b ea a8 ca 96 c2 63 b5 77 73 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 10 1c af 8c 98 41 2d b6 7d 1a ed 2d Data Ascii: EtvNjUjs9Z$wBriscy);Of@!n`]f-}+*=a1Y^$VjAYej1!FsUwzeY}=.EkWJ$5?Kcws`A-}-
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: a4 1e 14 9e 17 8a 4f 0c 92 a2 e1 5c ae 97 4d 49 1e b5 6e 97 41 6c 9b d1 c8 f1 d6 2f 8e 9c fe ba 7d 0b d9 c9 bf 96 87 3b e8 ea df 99 11 a5 f5 2f cb aa 75 60 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a4 e7 38 5b 9b d2 fd bb ab 2a c8 a5 6d 6c f0 a4 f6 1e 14 83 c0 5e 29 06 41 59 59 72 55 97 8d 39 a3 b5 6b 2e 94 96 ea e9 84 07 2d 39 17 3d e0 51 b7 d0 1d 5c 9b 69 b4 4b 1b e6 4a 5f 7c f4 19 69 be b6 78 6b f5 ce ac 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 90 5c 35 cd b5 26 9a d7 46 69 ab 6a 4a 8a 44 2d 9e 82 83 d2 f9 e0 2f 97 0a cb 92 b8 5e 34 68 d5 da 33 8d 91 b2 33 6a c9 38 77 2e f1 ca 69 cc 62 df 43 75 72 49 6d 5a 23 48 56 17 99 5f 3d 75 34 cd be 74 45 fa ff 00 56 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 88 73 Data Ascii: O\MInAl/};/u`H8[*ml^)AYYrU9k.-9=Q\iKJ_\|ixk@\5&FijJD-/^4h33j8w.ibCurImZ#HV_=u4tEV s
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 2e 99 c6 b4 8f d2 f0 0c 74 e3 fa 57 33 a7 0e fd 64 34 b9 95 bb 11 19 ca f1 0d a9 ca 2d 5e c8 4b 62 de f3 ed db fa f9 ef 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 42 8f 9e a2 3a 04 cc b1 6d 65 5b 18 b6 9c 95 84 6c 2d 9e 71 66 66 28 48 22 33 cb 13 31 d3 54 b6 9c 8a 55 07 3a 21 35 34 06 1c 36 44 8e 52 29 64 99 8a 46 93 cd b2 d3 97 e1 bf 2c d6 b3 0e 9e 4e d1 6b 69 08 c6 56 ef a4 1b 2b c7 b5 a7 ce 17 af d4 07 4b b4 6d e9 79 cd eb 78 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ae 34 34 67 15 44 5b d2 f8 94 73 c5 7a 61 41 e1 9c 8e 0f 13 18 44 b1 3b e9 6e 61 9c 8d c9 a4 9b ea cd 4d 5a a2 a3 6e 4a ac d8 97 8b 87 a5 c8 65 a9 ae 99 e5 dc db c6 4d 3e 91 c8 ef 9f 73 d6 b6 4e 41 95 be b5 34 6b c6 26 9f 17 5a bf 58 9d 36 6d 73 0b f5 ce 8c b2 c0 00 00 Data Ascii: .tW3d4-^KbB:me[l-qff(H"31TU:!546DR)dF,NkiV+Kmyx44gD[szaAD;naMZnJeM>sNA4k&ZX6ms
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: f7 37 53 2d 79 e4 38 46 17 ea 17 69 ad 1c fe d5 97 d1 c3 a9 6e 9d 4d 3a cd eb 99 46 f2 6b e6 93 9f 6c f3 34 af 14 89 92 d2 f3 59 a7 2f 8b f1 6b 53 a7 5d 3f cb 4f 9b a7 3e a9 2e ee 40 af 5e 37 c9 bf 65 b4 4f 36 cf 36 6d e1 95 15 9a 5c 00 00 00 00 00 00 00 00 00 00 00 00 00 14 18 15 59 3d 2e 1c ea 34 e5 9c bb f3 1c 36 b3 9e 9a 9d 18 77 69 b5 e5 d4 74 61 ae d3 2d 9a fe 44 e4 16 f3 bf 4f e7 bf d4 3d 18 5f bb ca a3 44 8e cd 71 ad aa 1f 56 ce 51 23 5f 35 91 d7 4e 59 54 d0 e9 35 d2 3d 93 7f 78 df 5f 38 b6 b1 01 bd 77 f2 db 91 8a 47 09 89 c4 b4 48 bb 79 fe e5 e2 ea 8d a7 92 e7 3d 59 3b 3b 57 75 65 a5 6a 24 65 a3 73 65 d0 00 00 00 00 00 00 00 00 00 00 00 00 01 e1 a7 29 ab d2 b0 0a 65 66 b3 c9 29 a7 1a ce dc aa f1 1c db 2c 6b bd ac ca b0 bc 86 93 13 3b 2d df 49 e9 Data Ascii: 7S-y8FinM:Fkl4Y/kS]?O>.@^7eO66m\Y=.46wita-DO=_DqVQ#_5NYT5=x_8wGHy=Y;;Wuej$ese)ef),k;-I
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 3a 51 da ce a2 63 9c 44 f9 cc e7 47 61 3b f1 d9 8b a0 00 00 00 00 00 00 00 00 00 43 89 f0 f5 f2 9f 2f d1 87 e7 a4 93 a7 2f a9 bd 8f 1e 51 b5 00 00 00 00 00 00 00 00 00 00 00 00 35 a5 d3 2c a8 00 00 00 03 04 89 9e 93 90 00 07 86 21 98 00 00 00 00 00 00 00 00 00 00 02 11 3e 6e ae 57 e3 7a b0 0c fa ef 6f cd f4 af b9 e0 49 34 a8 00 00 00 00 00 00 00 00 00 00 00 20 87 c9 27 33 3b 59 f6 09 b1 00 00 00 22 47 c0 67 3b 3b 21 f4 81 de 40 00 00 00 00 00 00 00 00 00 00 00 00 06 21 c1 32 98 d7 8d ef d3 cd dd bc f4 7c 7f a3 7d 6f 22 e2 40 00 00 00 00 00 00 00 00 00 00 01 f2 21 f2 71 a8 3b d9 f4 89 dd c0 00 00 0e 36 7c 3e 40 4e 90 76 a3 ed 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 63 e0 7a b9 49 97 13 76 9b e5 e9 97 d6 0c fe 8c b4 80 00 00 00 00 00 00 00 00 00 00 03 e0 Data Ascii: :QcDGa;C//Q5,!>nWzoI4 '3;Y"Gg;;!@!2\|}o"@!q;6\|>@NvczIv
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: b5 3c 99 d5 cd 31 df 1e b3 af a9 df 3b b2 d1 4f 17 9f 9f 7c 5f 9f 33 fa ae d9 d7 d2 76 00 00 00 00 39 5f c7 fd 47 20 fc e3 f4 38 a7 75 aa d3 4a 29 17 ad 84 8f 2c e4 9d 7c f8 b4 6c a6 97 a2 30 79 3a 32 7a 31 bd a5 30 f8 f7 bb b6 77 f5 a6 2f 36 ad ab 93 68 af 45 10 aa 73 c9 ea c7 af 7e 91 f9 ce e7 b7 96 a9 00 00 16 cf 87 39 fd 7d 2f 87 fa bf 3f f6 ff 00 29 ea fd 3e 3f d0 e7 62 3d 00 00 00 35 06 dc 00 01 c5 0d 79 da 0d 98 06 31 80 6d cf 40 31 b9 d8 38 c6 df ae 6d 55 c5 7f 32 f0 b1 3c 38 e8 1f a5 7a 33 af a4 ed 08 73 8f 8e f3 20 5f 9e 72 c8 3e a5 d9 3f 4b f7 52 00 00 00 03 17 1b 70 8f 85 fb ce 35 f3 df 5b 8f 2f 26 07 ab 65 d2 24 d3 cd 23 65 a6 e1 e8 c8 bc 53 37 c4 a4 de b5 7c b4 62 e7 7a ed 15 5a b8 b4 d7 2f 5c bc 09 95 fb 7e 0f 7f fd 1f f3 cc ed 71 4c 80 00 Data Ascii: <1;O\|_3v9_G 8uJ),\|l0y:2z10w/6hEs~9}/?)>?b=5y1m@18mU2<8z3s _r>?KRp5[/&e$#eS7\|bzZ/\~qL
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: b3 5b cc 4f 0c bc 16 25 65 42 4a a9 f4 36 64 6a d0 f5 18 93 a8 90 ca 88 e1 db 6a 32 0b 88 ec 57 6d 65 57 df 95 3a 7e ef 87 bb 09 07 df 25 0d c4 6d a9 1b 9c 8c 7e 81 63 e5 ef 6d bc fb 1b 11 03 f2 c4 61 60 4c 4c a7 51 2b ec 48 1a 05 fe a0 e9 db 77 62 75 bf fc 1d 12 df 44 d0 d7 7d 77 ff 00 56 b6 ff 00 f2 3a 1e a3 5f 5f 62 fe ac be d1 ec ac 76 93 db 96 e4 a2 b3 8f 49 7d d5 3a c8 57 48 9a b9 8e 5e a2 72 e1 4e 39 3e b3 dd 2b 14 4b 3c 62 40 65 96 33 33 a3 1e 9c 53 79 c4 8f fa 4b 59 92 67 b5 59 cf bb 80 f5 61 f7 cb 52 70 89 bf bf a0 d5 60 d3 5d 95 e4 ee 32 cc c6 31 b6 fb d2 8b a7 1d 74 8c 76 03 88 00 69 db 82 13 f8 3e 9e c1 ec fa eb eb ec 4f d4 9b da 3d 3d 95 bf 55 7d ae aa ea 43 0d c6 4e 78 cd 6b 31 24 aa 65 95 8a d5 88 b6 89 df 16 8d ab 55 e4 b7 0d 6e 92 16 31 Data Ascii: [O%eBJ6djj2WmeW:~%m~cma`LLQ+HwbuD}wV:__bvI}:WH^rN9>+K<b@e33SyKYgYaRp`]21tvi>O==U}CNxk1$eUn1
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: bf 29 76 fa 41 63 aa 09 03 64 b7 34 bd 64 82 21 ef 57 87 a1 0a 27 a9 27 88 24 e9 db 93 12 7f 1f f6 fc 03 d8 34 df 29 f6 47 24 4a 1f 77 51 a3 6a 11 fd 5b e8 dc 5f a2 1d 1b 6f f4 50 35 03 33 c6 18 fa c7 f3 8d 64 2d 0a 91 09 38 17 d6 5e d4 99 78 a6 54 8b 8b 78 78 b0 a7 08 20 83 37 28 f2 53 7b 84 a9 ad 15 4b 0e a2 75 33 d8 8a 38 e9 8b 36 60 2e 69 aa 3b 09 65 90 0d 64 85 9f 77 ad 18 45 a5 b3 51 87 7d 58 c5 d8 ea 44 20 8f dc a3 da ba 06 f5 fb b4 cf d3 42 75 2e ec 0f f7 82 32 91 84 3e 95 2a f3 b5 d7 3e 9a b2 fd 82 fe 47 d4 7e 01 ec 1e 9a 6f 4f 64 67 7e a9 1a 07 be db 68 92 01 d1 ff 00 c9 d5 6f d0 8f 4b ac c6 ec 90 81 ac c8 e8 c8 c4 1e 27 c2 d2 75 31 e3 73 de e4 86 2b 5f 0c 6e ef 62 0b 36 5b 78 ff 00 88 7b 56 2a 43 0b 96 df 41 7a cc f6 03 6d a1 3b 4f 48 87 d6 3d Data Ascii: )vAcd4d!W''$4)G$JwQj[_oP53d-8^xTxx 7(S{Ku386`.i;edwEQ}XD Bu.2>>G~oOdg~hoK'u1s+_nb6[x{VCAzm;OH=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49759	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:36 UTC	388	OUT	GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:36 UTC	657	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:36 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-2f86" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367877 Expires: Sat, 25 May 2024 02:56:36 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e145e9086a79-BNA
2024-05-24 22:56:36 UTC	712	IN	Data Raw: 32 66 38 36 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 31 70 78 22 20 68 65 69 67 68 74 3d 22 34 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 31 20 34 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 6d 61 73 74 65 72 63 61 72 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 e8 ae be e7 bd ae 2d e9 85 8d e7 bd ae e6 94 af e4 bb 98 e6 b8 a0 e9 81 Data Ascii: 2f86<?xml version="1.0" encoding="UTF-8"?><svg width="81px" height="41px" viewBox="0 0 81 41" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>mastercard</title> <g id="-
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 32 20 43 35 2e 31 35 34 35 36 34 39 33 2c 32 31 2e 32 33 34 36 37 34 37 20 34 2e 38 39 32 32 35 36 34 2c 32 31 2e 31 33 34 31 32 37 36 20 34 2e 36 32 33 37 34 33 37 39 2c 32 31 2e 31 34 39 38 38 32 31 20 43 34 2e 32 36 39 38 38 37 38 35 2c 32 31 2e 31 32 36 36 38 33 39 20 33 2e 39 33 31 34 35 31 37 32 2c 32 31 2e 32 39 37 39 31 36 35 20 33 2e 37 34 30 35 32 37 32 34 2c 32 31 2e 35 39 36 37 34 37 36 20 43 33 2e 35 36 36 34 35 38 39 31 2c 32 31 2e 33 30 36 38 32 36 33 20 33 2e 32 34 37 37 33 34 30 32 2c 32 31 2e 31 33 35 33 36 30 34 20 32 2e 39 30 39 38 38 33 31 2c 32 31 2e 31 34 39 38 38 32 31 20 43 32 2e 36 31 35 37 31 38 37 33 2c 32 31 2e 31 33 35 30 31 31 32 20 32 2e 33 33 35 36 37 37 30 39 2c 32 31 2e 32 37 37 30 33 32 33 20 32 2e 31 37 33 38 36 39 33 Data Ascii: 2 C5.15456493,21.2346747 4.8922564,21.1341276 4.62374379,21.1498821 C4.26988785,21.1266839 3.93145172,21.2979165 3.74052724,21.5967476 C3.56645891,21.3068263 3.24773402,21.1353604 2.9098831,21.1498821 C2.61571873,21.1350112 2.33567709,21.2770323 2.1738693
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 38 35 38 34 38 35 35 20 4c 31 32 2e 38 39 30 37 35 35 39 2c 32 31 2e 37 31 32 34 30 36 39 20 4c 31 33 2e 37 38 34 34 38 36 39 2c 32 31 2e 37 31 32 34 30 36 39 20 4c 31 33 2e 37 37 39 32 32 39 37 2c 32 31 2e 32 31 32 39 36 39 20 5a 20 4d 31 38 2e 34 34 32 34 30 32 38 2c 32 31 2e 31 34 39 38 38 32 31 20 43 31 38 2e 31 37 30 38 34 34 35 2c 32 31 2e 31 34 31 38 39 35 36 20 31 37 2e 39 31 36 36 37 34 31 2c 32 31 2e 32 38 33 31 30 31 34 20 31 37 2e 37 37 39 39 39 30 33 2c 32 31 2e 35 31 37 38 38 39 20 4c 31 37 2e 37 37 39 39 39 30 33 2c 32 31 2e 32 31 32 39 36 39 20 4c 31 37 2e 32 33 38 34 39 34 35 2c 32 31 2e 32 31 32 39 36 39 20 4c 31 37 2e 32 33 38 34 39 34 35 2c 32 33 2e 37 32 35 39 33 30 33 20 4c 31 37 2e 37 38 35 32 34 37 36 2c 32 33 2e 37 32 35 39 33 30 Data Ascii: 8584855 L12.8907559,21.7124069 L13.7844869,21.7124069 L13.7792297,21.212969 Z M18.4424028,21.1498821 C18.1708445,21.1418956 17.9166741,21.2831014 17.7799903,21.517889 L17.7799903,21.212969 L17.2384945,21.212969 L17.2384945,23.7259303 L17.7852476,23.725930
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 2e 39 31 30 35 30 39 37 2c 32 31 2e 37 31 36 32 33 37 32 20 31 31 2e 31 35 30 36 30 39 2c 32 31 2e 38 35 34 33 35 32 34 20 4c 31 31 2e 33 39 32 34 34 32 31 2c 32 31 2e 34 31 32 37 34 34 31 20 5a 20 4d 32 36 2e 30 33 36 34 38 37 39 2c 32 31 2e 31 34 39 38 38 32 31 20 43 32 35 2e 37 36 34 39 32 39 37 2c 32 31 2e 31 34 31 38 39 35 36 20 32 35 2e 35 31 30 37 35 39 33 2c 32 31 2e 32 38 33 31 30 31 34 20 32 35 2e 33 37 34 30 37 35 35 2c 32 31 2e 35 31 37 38 38 39 20 4c 32 35 2e 33 37 34 30 37 35 35 2c 32 31 2e 32 31 32 39 36 39 20 4c 32 34 2e 38 33 32 35 37 39 37 2c 32 31 2e 32 31 32 39 36 39 20 4c 32 34 2e 38 33 32 35 37 39 37 2c 32 33 2e 37 32 35 39 33 30 33 20 4c 32 35 2e 33 37 39 33 33 32 38 2c 32 33 2e 37 32 35 39 33 30 33 20 4c 32 35 2e 33 37 39 33 33 32 Data Ascii: .9105097,21.7162372 11.150609,21.8543524 L11.3924421,21.4127441 Z M26.0364879,21.1498821 C25.7649297,21.1418956 25.5107593,21.2831014 25.3740755,21.517889 L25.3740755,21.212969 L24.8325797,21.212969 L24.8325797,23.7259303 L25.3793328,23.7259303 L25.379332
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 32 37 35 35 31 37 20 32 33 2e 30 38 33 37 35 32 31 2c 32 31 2e 31 33 38 35 36 36 31 20 32 32 2e 37 37 36 39 39 38 33 2c 32 31 2e 31 34 39 38 38 32 31 20 43 32 32 2e 30 35 31 31 32 34 37 2c 32 31 2e 31 34 39 38 38 32 31 20 32 31 2e 34 36 32 36 38 37 39 2c 32 31 2e 37 33 38 33 31 38 39 20 32 31 2e 34 36 32 36 38 37 39 2c 32 32 2e 34 36 34 31 39 32 34 20 43 32 31 2e 34 36 32 36 38 37 39 2c 32 33 2e 31 39 30 30 36 36 20 32 32 2e 30 35 31 31 32 34 37 2c 32 33 2e 37 37 38 35 30 32 38 20 32 32 2e 37 37 36 39 39 38 33 2c 32 33 2e 37 37 38 35 30 32 38 20 43 32 33 2e 30 38 33 37 35 32 31 2c 32 33 2e 37 38 39 38 31 38 38 20 32 33 2e 33 37 37 32 31 38 34 2c 32 33 2e 36 35 32 38 36 37 38 20 32 33 2e 35 36 35 35 38 34 35 2c 32 33 2e 34 31 30 34 39 35 39 20 4c 32 33 2e Data Ascii: 275517 23.0837521,21.1385661 22.7769983,21.1498821 C22.0511247,21.1498821 21.4626879,21.7383189 21.4626879,22.4641924 C21.4626879,23.190066 22.0511247,23.7785028 22.7769983,23.7785028 C23.0837521,23.7898188 23.3772184,23.6528678 23.5655845,23.4104959 L23.
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 31 36 2e 31 31 32 36 32 34 32 2c 32 32 2e 30 38 33 34 30 38 31 20 31 36 2e 31 31 36 30 37 33 34 2c 32 32 2e 32 34 38 36 34 35 35 20 4c 31 34 2e 38 30 31 37 36 33 31 2c 32 32 2e 32 34 38 36 34 35 35 20 43 31 34 2e 38 32 31 35 36 34 31 2c 32 31 2e 38 39 37 36 37 38 32 20 31 35 2e 31 31 38 31 31 31 39 2c 32 31 2e 36 32 36 38 31 35 37 20 31 35 2e 34 36 39 34 33 32 38 2c 32 31 2e 36 33 38 38 30 35 35 20 4c 31 35 2e 34 37 39 39 34 37 32 2c 32 31 2e 36 33 38 38 30 35 35 20 5a 20 4d 32 39 2e 31 37 37 36 38 39 37 2c 32 32 2e 34 36 39 34 34 39 37 20 4c 32 39 2e 31 37 37 36 38 39 37 2c 32 30 2e 32 30 33 35 37 38 36 20 4c 32 38 2e 36 35 31 39 36 35 35 2c 32 30 2e 32 30 33 35 37 38 36 20 4c 32 38 2e 36 35 31 39 36 35 35 2c 32 31 2e 35 31 37 38 38 39 20 43 32 38 2e 34 Data Ascii: 16.1126242,22.0834081 16.1160734,22.2486455 L14.8017631,22.2486455 C14.8215641,21.8976782 15.1181119,21.6268157 15.4694328,21.6388055 L15.4799472,21.6388055 Z M29.1776897,22.4694497 L29.1776897,20.2035786 L28.6519655,20.2035786 L28.6519655,21.517889 C28.4
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 39 38 2c 32 33 2e 33 35 39 30 36 34 31 20 33 30 2e 30 39 37 37 30 36 39 2c 32 33 2e 33 36 30 35 35 32 31 20 4c 33 30 2e 30 38 39 38 32 31 2c 32 33 2e 33 36 30 35 35 32 31 20 5a 20 4d 33 30 2e 30 38 39 38 32 31 2c 32 33 2e 38 30 34 37 38 39 20 43 33 30 2e 31 31 36 30 35 37 32 2c 32 33 2e 38 30 34 39 34 38 33 20 33 30 2e 31 34 32 30 33 32 31 2c 32 33 2e 37 39 39 35 37 34 32 20 33 30 2e 31 36 36 30 35 31 2c 32 33 2e 37 38 39 30 31 37 32 20 43 33 30 2e 31 38 38 36 36 36 37 2c 32 33 2e 37 37 38 39 32 30 31 20 33 30 2e 32 30 39 31 37 37 33 2c 32 33 2e 37 36 34 36 35 31 38 20 33 30 2e 32 32 36 35 30 39 33 2c 32 33 2e 37 34 36 39 35 39 33 20 43 33 30 2e 32 39 34 36 36 38 36 2c 32 33 2e 36 37 32 35 39 33 38 20 33 30 2e 32 39 34 36 36 38 36 2c 32 33 2e 35 35 38 34 Data Ascii: 98,23.3590641 30.0977069,23.3605521 L30.089821,23.3605521 Z M30.089821,23.804789 C30.1160572,23.8049483 30.1420321,23.7995742 30.166051,23.7890172 C30.1886667,23.7789201 30.2091773,23.7646518 30.2265093,23.7469593 C30.2946686,23.6725938 30.2946686,23.5584
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 32 33 2e 35 39 39 37 35 36 36 20 43 33 30 2e 31 34 30 38 38 35 34 2c 32 33 2e 35 39 32 33 31 36 33 20 33 30 2e 31 34 30 38 38 35 34 2c 32 33 2e 35 38 33 35 33 39 32 20 33 30 2e 31 33 37 31 33 36 32 2c 32 33 2e 35 37 36 30 39 39 20 43 33 30 2e 31 34 30 38 38 35 34 2c 32 33 2e 35 36 38 36 35 38 37 20 33 30 2e 31 34 30 38 38 35 34 2c 32 33 2e 35 35 39 38 38 31 36 20 33 30 2e 31 33 37 31 33 36 32 2c 32 33 2e 35 35 32 34 34 31 34 20 43 33 30 2e 31 32 36 38 34 35 35 2c 32 33 2e 35 34 39 33 37 33 33 20 33 30 2e 31 31 35 38 38 33 34 2c 32 33 2e 35 34 39 33 37 33 33 20 33 30 2e 31 30 35 35 39 32 38 2c 32 33 2e 35 35 32 34 34 31 34 20 4c 33 30 2e 30 34 37 37 36 33 31 2c 32 33 2e 35 33 36 36 36 39 37 20 5a 20 4d 32 37 2e 31 35 36 32 38 30 33 2c 32 32 2e 34 36 39 34 Data Ascii: 23.5997566 C30.1408854,23.5923163 30.1408854,23.5835392 30.1371362,23.576099 C30.1408854,23.5686587 30.1408854,23.5598816 30.1371362,23.5524414 C30.1268455,23.5493733 30.1158834,23.5493733 30.1055928,23.5524414 L30.0477631,23.5366697 Z M27.1562803,22.4694
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 33 34 31 36 20 36 2e 36 35 35 36 36 37 35 39 2c 32 32 2e 34 36 39 34 34 39 37 20 4c 36 2e 36 36 30 39 32 34 38 33 2c 32 32 2e 34 36 39 34 34 39 37 20 5a 22 20 69 64 3d 22 e5 bd a2 e7 8a b6 22 20 66 69 6c 6c 3d 22 23 32 33 31 46 32 30 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 5f 47 72 6f 75 70 5f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 e7 9f a9 e5 bd a2 22 20 66 69 6c 6c 3d 22 23 46 46 35 46 30 30 22 20 78 3d 22 31 31 2e 32 31 31 30 36 37 32 22 20 79 3d 22 32 2e 30 36 33 34 36 37 32 34 22 20 77 69 64 74 68 3d 22 38 2e 32 38 30 31 35 35 31 37 22 20 68 65 69 67 68 74 3d 22 31 34 2e 38 38 30 36 32 31 37 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 20 20 Data Ascii: 3416 6.65566759,22.4694497 L6.66092483,22.4694497 Z" id="" fill="#231F20"></path> <g id="_Group_"> <rect id="" fill="#FF5F00" x="11.2110672" y="2.06346724" width="8.28015517" height="14.8806217"></rect>
2024-05-24 22:56:36 UTC	510	IN	Data Raw: 33 35 34 31 2c 31 35 2e 30 36 31 39 39 36 36 20 4c 32 39 2e 37 30 33 34 31 33 38 2c 31 35 2e 30 36 31 39 39 36 36 20 4c 32 39 2e 37 30 33 34 31 33 38 2c 31 35 2e 33 36 36 39 31 36 36 20 4c 32 39 2e 37 35 38 36 31 34 38 2c 31 35 2e 33 36 36 39 31 36 36 20 5a 20 4d 33 30 2e 33 36 35 38 32 36 32 2c 31 35 2e 33 36 36 39 31 36 36 20 4c 33 30 2e 33 36 35 38 32 36 32 2c 31 34 2e 39 39 38 39 30 39 37 20 4c 33 30 2e 32 37 31 31 39 35 39 2c 31 34 2e 39 39 38 39 30 39 37 20 4c 33 30 2e 31 36 30 37 39 33 38 2c 31 35 2e 32 36 31 37 37 31 37 20 4c 33 30 2e 30 35 30 33 39 31 37 2c 31 34 2e 39 39 38 39 30 39 37 20 4c 32 39 2e 39 36 36 32 37 35 39 2c 31 34 2e 39 39 38 39 30 39 37 20 4c 32 39 2e 39 36 36 32 37 35 39 2c 31 35 2e 33 36 36 39 31 36 36 20 4c 33 30 2e 30 33 34 Data Ascii: 3541,15.0619966 L29.7034138,15.0619966 L29.7034138,15.3669166 L29.7586148,15.3669166 Z M30.3658262,15.3669166 L30.3658262,14.9989097 L30.2711959,14.9989097 L30.1607938,15.2617717 L30.0503917,14.9989097 L29.9662759,14.9989097 L29.9662759,15.3669166 L30.034

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49757	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:36 UTC	385	OUT	GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:36 UTC	657	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:36 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-20a8" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 191721 Expires: Sat, 25 May 2024 02:56:36 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e145ec0bf7ec-BNA
2024-05-24 22:56:36 UTC	712	IN	Data Raw: 32 30 61 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 34 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 34 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 6d 61 65 73 74 72 6f 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 e8 ae be e7 bd ae 2d e9 85 8d e7 bd ae e6 94 af e4 bb 98 e6 b8 a0 e9 81 93 22 20 Data Ascii: 20a8<?xml version="1.0" encoding="UTF-8"?><svg width="80px" height="40px" viewBox="0 0 80 40" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>maestro</title> <g id="-"
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 31 39 37 32 38 30 34 20 33 31 2e 34 36 38 34 34 32 2c 33 30 2e 32 31 31 36 37 37 39 20 43 33 31 2e 31 37 36 37 39 31 39 2c 33 30 2e 31 39 36 39 33 34 31 20 33 30 2e 38 39 39 31 34 33 38 2c 33 30 2e 33 33 37 37 34 31 34 20 33 30 2e 37 33 38 37 31 38 39 2c 33 30 2e 35 38 31 37 35 31 38 20 4c 33 30 2e 37 33 38 37 31 38 39 2c 33 30 2e 32 37 34 32 32 35 36 20 4c 33 30 2e 31 39 36 36 33 38 39 2c 33 30 2e 32 37 34 32 32 35 36 20 4c 33 30 2e 31 39 36 36 33 38 39 2c 33 32 2e 37 36 35 37 30 38 37 20 4c 33 30 2e 37 34 33 39 33 31 33 2c 33 32 2e 37 36 35 37 30 38 37 20 4c 33 30 2e 37 34 33 39 33 31 33 2c 33 31 2e 33 39 34 38 37 31 38 20 43 33 30 2e 37 32 30 33 36 30 38 2c 33 31 2e 32 32 32 33 36 37 39 20 33 30 2e 37 37 35 30 31 36 38 2c 33 31 2e 30 34 38 33 34 36 34 Data Ascii: 1972804 31.468442,30.2116779 C31.1767919,30.1969341 30.8991438,30.3377414 30.7387189,30.5817518 L30.7387189,30.2742256 L30.1966389,30.2742256 L30.1966389,32.7657087 L30.7439313,32.7657087 L30.7439313,31.3948718 C30.7203608,31.2223679 30.7750168,31.0483464
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 35 37 36 35 33 39 35 20 4c 34 36 2e 32 31 31 34 35 34 33 2c 33 30 2e 32 37 34 32 32 35 36 20 4c 34 35 2e 36 37 34 35 38 36 36 2c 33 30 2e 32 37 34 32 32 35 36 20 4c 34 35 2e 36 37 34 35 38 36 36 2c 33 32 2e 37 36 35 37 30 38 37 20 4c 34 36 2e 32 31 36 36 36 36 36 2c 33 32 2e 37 36 35 37 30 38 37 20 4c 34 36 2e 32 31 36 36 36 36 36 2c 33 31 2e 33 36 38 38 31 30 33 20 43 34 36 2e 32 31 36 36 36 36 36 2c 33 30 2e 39 35 37 30 33 37 39 20 34 36 2e 33 39 33 38 38 35 31 2c 33 30 2e 37 32 37 36 39 36 34 20 34 36 2e 37 33 37 38 39 37 34 2c 33 30 2e 37 32 37 36 39 36 34 20 43 34 36 2e 38 35 33 38 34 31 31 2c 33 30 2e 37 32 36 31 31 30 35 20 34 36 2e 39 36 38 39 36 32 39 2c 33 30 2e 37 34 37 33 36 33 37 20 34 37 2e 30 37 36 36 39 37 34 2c 33 30 2e 37 39 30 32 34 34 Data Ascii: 5765395 L46.2114543,30.2742256 L45.6745866,30.2742256 L45.6745866,32.7657087 L46.2166666,32.7657087 L46.2166666,31.3688103 C46.2166666,30.9570379 46.3938851,30.7276964 46.7378974,30.7276964 C46.8538411,30.7261105 46.9689629,30.7473637 47.0766974,30.790244
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 20 34 39 2e 35 30 32 31 32 30 34 2c 33 31 2e 31 34 37 33 35 31 32 20 34 39 2e 35 30 32 31 32 30 34 2c 33 31 2e 34 35 35 35 34 36 38 20 43 34 39 2e 35 30 32 31 32 30 34 2c 33 31 2e 37 38 32 35 31 35 37 20 34 39 2e 34 33 32 35 30 32 37 2c 33 32 2e 30 32 35 37 38 36 38 20 34 39 2e 32 39 33 32 36 37 31 2c 33 32 2e 31 38 35 33 36 30 31 20 43 34 39 2e 31 35 34 30 33 31 36 2c 33 32 2e 33 34 34 39 33 33 34 20 34 38 2e 39 37 39 35 39 36 2c 33 32 2e 34 32 34 37 32 30 31 20 34 38 2e 37 36 39 39 36 30 34 2c 33 32 2e 34 32 34 37 32 30 31 20 5a 20 4d 34 32 2e 37 31 35 33 33 33 36 2c 33 30 2e 34 30 39 30 36 34 37 20 43 34 32 2e 34 30 38 34 39 31 35 2c 33 30 2e 32 32 36 36 32 38 20 34 32 2e 30 35 35 37 30 33 2c 33 30 2e 31 33 36 31 36 39 34 20 34 31 2e 36 39 38 39 33 33 Data Ascii: 49.5021204,31.1473512 49.5021204,31.4555468 C49.5021204,31.7825157 49.4325027,32.0257868 49.2932671,32.1853601 C49.1540316,32.3449334 48.979596,32.4247201 48.7699604,32.4247201 Z M42.7153336,30.4090647 C42.4084915,30.226628 42.055703,30.1361694 41.698933
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 32 37 30 33 31 33 20 43 35 30 2e 32 39 39 38 38 33 38 2c 33 32 2e 32 34 36 30 36 35 35 20 35 30 2e 34 35 33 32 34 35 32 2c 33 32 2e 31 30 36 38 31 36 39 20 35 30 2e 36 33 34 33 39 37 35 2c 33 32 2e 31 31 33 36 31 36 33 20 5a 20 4d 33 38 2e 38 39 35 39 38 30 35 2c 33 30 2e 32 31 31 37 30 34 35 20 43 33 38 2e 31 37 36 33 31 31 2c 33 30 2e 32 32 31 37 37 39 39 20 33 37 2e 36 30 31 30 37 31 33 2c 33 30 2e 38 31 33 33 35 35 20 33 37 2e 36 31 31 31 34 36 36 2c 33 31 2e 35 33 33 30 32 34 35 20 43 33 37 2e 36 32 31 32 32 32 2c 33 32 2e 32 35 32 36 39 34 20 33 38 2e 32 31 32 37 39 37 31 2c 33 32 2e 38 32 37 39 33 33 37 20 33 38 2e 39 33 32 34 36 36 36 2c 33 32 2e 38 31 37 38 35 38 33 20 43 33 39 2e 33 30 37 34 32 34 33 2c 33 32 2e 38 33 37 31 30 34 35 20 33 39 2e Data Ascii: 270313 C50.2998838,32.2460655 50.4532452,32.1068169 50.6343975,32.1136163 Z M38.8959805,30.2117045 C38.176311,30.2217799 37.6010713,30.813355 37.6111466,31.5330245 C37.621222,32.252694 38.2127971,32.8279337 38.9324666,32.8178583 C39.3074243,32.8371045 39.
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 37 35 33 20 33 35 2e 35 35 38 31 33 33 38 2c 33 30 2e 37 39 36 32 36 36 35 20 33 35 2e 39 36 37 35 34 37 32 2c 33 30 2e 38 31 31 36 33 33 35 20 43 33 36 2e 33 37 36 39 36 30 36 2c 33 30 2e 38 32 37 30 30 30 34 20 33 36 2e 36 39 38 39 39 38 36 2c 33 31 2e 31 36 36 38 30 36 31 20 33 36 2e 36 39 32 33 37 37 33 2c 33 31 2e 35 37 36 34 35 34 32 20 43 33 36 2e 36 38 35 37 35 36 2c 33 31 2e 39 38 36 31 30 32 34 20 33 36 2e 33 35 32 39 30 34 33 2c 33 32 2e 33 31 35 33 32 32 38 20 33 35 2e 39 34 33 32 30 38 32 2c 33 32 2e 33 31 37 34 35 30 33 20 43 33 35 2e 37 33 33 36 39 36 37 2c 33 32 2e 33 32 31 35 36 33 34 20 33 35 2e 35 33 32 30 36 38 31 2c 33 32 2e 32 33 37 35 39 39 35 20 33 35 2e 33 38 37 34 30 31 32 2c 33 32 2e 30 38 35 39 39 36 36 20 43 33 35 2e 32 34 32 Data Ascii: 753 35.5581338,30.7962665 35.9675472,30.8116335 C36.3769606,30.8270004 36.6989986,31.1668061 36.6923773,31.5764542 C36.685756,31.9861024 36.3529043,32.3153228 35.9432082,32.3174503 C35.7336967,32.3215634 35.5320681,32.2375995 35.3874012,32.0859966 C35.242
2024-05-24 22:56:36 UTC	811	IN	Data Raw: 37 35 34 35 38 2c 2d 30 2e 35 38 37 32 30 32 32 37 36 20 32 35 2e 31 31 38 35 36 38 32 2c 30 2e 39 38 32 35 34 37 36 35 36 20 43 32 38 2e 33 34 39 35 39 30 36 2c 32 2e 35 35 32 32 39 37 35 39 20 33 30 2e 34 30 30 37 38 34 36 2c 35 2e 38 32 39 30 38 35 31 37 20 33 30 2e 34 30 30 37 38 34 36 2c 39 2e 34 32 31 32 34 36 31 35 20 4c 33 30 2e 34 30 30 37 38 34 36 2c 39 2e 34 32 33 38 35 32 33 31 20 5a 22 20 69 64 3d 22 e8 b7 af e5 be 84 22 20 66 69 6c 6c 3d 22 23 30 32 41 31 44 46 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 39 2e 35 31 39 39 30 34 36 2c 31 35 2e 32 36 35 39 38 30 35 20 4c 32 39 2e 35 31 39 39 30 34 36 2c 31 34 2e 39 33 38 34 37 33 38 20 4c 32 39 2e 36 35 32 36 30 31 33 2c 31 34 Data Ascii: 75458,-0.587202276 25.1185682,0.982547656 C28.3495906,2.55229759 30.4007846,5.82908517 30.4007846,9.42124615 L30.4007846,9.42385231 Z" id="" fill="#02A1DF"></path> <path d="M29.5199046,15.2659805 L29.5199046,14.9384738 L29.6526013,14
2024-05-24 22:56:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49760	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:36 UTC	384	OUT	GET /uploader/e9965ee36481434b14cbe1bea3260a80.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:36 UTC	567	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:36 GMT Content-Type: image/png Content-Length: 1913256 Connection: close x-oss-request-id: 665076C39EAA1A33371B8654 ETag: "869A21755C2540755FEA361E7E445837-2" Last-Modified: Tue, 31 Oct 2023 09:39:45 GMT x-oss-object-type: Multipart x-oss-hash-crc64ecma: 15260248135148437500 x-oss-storage-class: Standard x-oss-server-time: 32 CF-Cache-Status: HIT Age: 5 Expires: Sat, 25 May 2024 02:56:36 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e145ec0ff7ec-BNA
2024-05-24 22:56:36 UTC	802	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 58 00 00 02 69 08 06 00 00 00 99 f5 86 97 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 ff ba 49 44 41 54 78 5e 4c fd 07 9c a4 d7 75 1d 88 9f ca 39 77 75 ce 93 73 4e 98 41 0e 24 08 10 20 c1 6c 2a 50 a2 b2 b5 b2 24 47 69 bd f6 ae bc 5e af e4 24 ef 5f 92 ff 92 4c 45 4b 22 29 92 22 44 10 39 a7 c1 e4 3c d3 d3 3d 9d 73 77 e5 9c 6b cf 79 45 e8 b7 35 68 74 75 d5 17 de bb ef de 73 cf bd ef be f7 59 be f1 95 ed ff ca 61 6d f4 a0 5c 47 1d 36 34 1c 76 8c 8c f7 a1 bf cb 8b b9 b9 4d b8 e2 3d e8 da f7 24 a6 36 ea a8 b5 81 66 be 8c 07 9e 7d 0e a3 db 76 e1 3f fd 9b 7f 89 53 a7 8e e0 d0 e8 08 5e fe ce 5f 61 66 6a 12 55 8f 0f 07 0f 1e c7 56 db 06 be f7 c6 05 f4 9d 78 14 Data Ascii: PNGIHDRXisRGBgAMAaIDATx^Lu9wusNA$ l*P$Gi^$_LEK")"D9<=swkyE5htusYam\G64vM=$6f}v?S^_afjUVx
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 76 f1 9e 40 29 97 83 ad 65 83 c7 1f c0 fe d3 0f c0 c9 fb be fa 9d 3f 47 c8 e5 43 c3 ee 43 7e 23 c1 a6 d9 d1 b2 02 a1 40 18 2d 5b 0b 1e 97 15 7e 9f 03 76 9f 07 bf fd 5b 3f 87 be e1 38 0a 54 58 9b af 0f 4d ea 85 85 c7 a2 46 7b b1 ca aa 1c 68 53 1e ba 97 8d 63 54 a7 ad d9 9c e0 51 0e da 57 08 17 5e f9 26 7e f8 e6 07 38 7d f8 24 2c b5 32 da 4e 07 bc 36 2b 75 90 7d 7a e8 19 5a 8c cb d8 85 6c d3 de 76 01 16 07 40 5b 6c 54 33 70 39 dc fc 2e 81 b7 ce 5e 47 81 d7 ab 4a 00 6c a8 cf eb 32 6d 70 b1 fd 85 72 0e e7 cf 7d 80 90 c7 83 a7 9f 79 1a 1f 7e 70 0e b3 33 33 f8 c7 bf fe 4f e0 63 1f 96 a7 a6 30 b6 f7 01 d4 5a 4d 54 33 59 bc fa c2 77 e0 6b cc e2 f0 81 5d f8 d6 37 df 43 34 18 46 2c 10 c0 27 9f 39 82 3f fa fe fb b8 ba 90 c7 97 3e f3 2c ec 0e 0b 8a 85 2a ed c5 89 6a Data Ascii: v@)e?GCC~#@-[~v[?8TXMF{hScTQW^&~8}$,2N6+u}zZlv@[lT3p9.^GJl2mpr}y~p33Oc0ZMT3Ywk]7C4F,'9?>,*j
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 1e 1c 3c 73 10 e3 07 1e 40 8f 3f 8a 72 62 06 d5 e4 2c 39 44 0a a9 0c 4f b2 87 31 79 77 19 2f 7c 78 13 ae 08 fd 2b ff d5 a9 a3 56 2a 8c cd ae f7 fc 84 97 95 5d 36 f4 5e ba e7 a1 a6 d7 2d d4 ad 26 ef d5 a0 6f b1 13 ce 28 77 61 19 81 b6 c1 7f fa ce 49 dd b2 f0 ef 32 fd 53 80 36 2d cb 32 3e 92 ed e6 05 f8 17 f9 07 6d 88 4a c5 cf 75 ed 86 f1 bb fa be 58 a5 4d c9 c6 50 86 cb e2 84 c3 4a 7b b1 f3 1c aa aa 45 8a 4c dd 10 0a 06 03 41 94 39 76 46 49 39 b6 0e 8e 79 95 fc ab d5 68 a3 4d 2c d4 cb 42 dd f6 50 c7 64 c3 a4 98 6c 9b 44 6a 33 36 d4 6a 10 7b 69 9f 4d da 43 96 e7 d5 6b 55 f8 42 3e 64 33 45 10 b6 4d 9b d4 36 3b c7 a1 d1 24 76 52 2f 84 73 56 ca bc c6 fb 55 38 9e 0e a3 db ec 13 c7 22 ec f6 a1 25 7c e2 df 36 36 d3 4a 6c 2a 50 47 f5 72 58 89 2b c2 31 7e 26 6c a8 Data Ascii: <s@?rb,9DO1yw/\|x+V]6^-&o(waI2S6-2>mJuXMPJ{ELA9vFI9yhM,BPdlDj36j{iMCkUB>d3EM6;$vR/sVU8"%\|66JlPGrX+1~&l
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 82 9f fd a7 ff 0a a5 46 18 7f ff c7 ff 11 7b 0f 1e c1 d3 5f ff 35 dc 5e 58 c4 c0 d8 38 3e 78 e1 45 dc 78 ff 2d b8 fc 56 f4 92 b0 eb 5e 60 c0 1b a0 91 6c 32 10 3b 3d 1a 40 81 01 de df 5c 9f 63 70 5d c4 27 b6 0f e2 a1 dd 03 f8 ff bf 35 81 1a c1 fa d7 1e dd 8e 89 14 49 54 22 4b 43 b1 a3 7f cb 38 7e eb cf 7f 80 9f ff 89 af e3 c0 c9 fb f1 da 5f fd 11 3c d5 39 6c 19 8a 32 a0 ea 45 d6 3e 80 ef 7d f8 11 2c 24 5b bd 1c d0 2e f6 63 7e 6d 0d 0b 0c 50 a7 16 12 ec 1f 81 ce 67 a1 d1 53 c9 4a 35 ec 1e 09 e2 81 83 7b 70 e1 f6 12 2e 5d 9b c0 e8 f6 51 fc ce 6f ff 27 7c fd 9f fc af 18 1f 88 e3 f8 f1 a3 f8 f6 77 5f c6 96 e1 5e 06 dc 07 09 d0 1e 6c dd 3a 8a 12 9d cf dc dc 0c 01 2c 84 26 9d 54 9d 46 18 27 39 3a 72 e2 21 2a 32 49 66 2a 89 b9 c5 39 78 22 51 b4 18 78 7c f4 ce bb Data Ascii: F{_5^X8>xEx-V^`l2;=@\cp]'5IT"KC8~_<9l2E>},$[.c~mPgSJ5{p.]Qo'\|w_^l:,&TF'9:r!2If9x"Qx\|
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 71 d4 ab 73 7e 47 9e fa ce 4d f2 46 d8 32 f7 b2 31 f0 70 7b 03 46 77 2d 6c 43 8b 41 af 85 9f 29 30 2c 37 0a 48 a4 ca 24 71 65 33 2e e9 8d 04 b1 b5 41 fd 4f 51 d6 49 da 4a ce e8 b5 85 38 20 59 54 8a 25 5e db 4e 3f 43 cc a3 fc 53 c9 0c 65 cf 00 89 38 c0 86 62 7d e1 92 91 ed 70 dc 89 5d c3 7e 8c f7 7a 10 f3 35 30 c8 e0 23 1a 54 20 a8 04 86 05 4b f4 c7 1b 99 36 03 85 3a 83 47 2b fc 2e 8e 0f d5 57 f7 f1 85 9d e8 0a 39 10 a3 7f 57 9a c1 46 7e 52 24 1b ab 11 b3 7b 06 23 48 51 17 ca 85 1a ed 89 fd e6 d8 38 da 94 0d 75 c8 c2 71 b4 db 2b 08 74 6f 43 60 e4 18 0a e9 0d 06 f7 6d e4 37 37 29 08 62 47 79 83 32 62 df 0d a9 e5 75 d9 df 62 83 41 af b8 34 f1 29 47 75 d9 c8 96 b1 9c b7 60 3d dd c2 85 e9 2c f9 49 0b 41 ea e9 f1 6d dd f8 d2 17 7f 0c ce f0 00 12 77 cf e1 e2 a5 Data Ascii: qs~GMF21p{Fw-lCA)0,7H$qe3.AOQIJ8 YT%^N?CSe8b}p]~z50#T K6:G+.W9WF~R${#HQ8uq+toC`m77)bGy2bubA4)Gu`=,IAmw
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: a1 b0 d6 4c 3e d1 9a 9d 54 a6 1c 75 ab dd 76 61 95 7e 37 57 21 36 5b bd f4 7f e4 84 8c d7 ac a1 d8 db b6 74 d5 f6 b5 6c ae 36 da 6e 7a b1 92 a9 93 20 a7 f1 3f be f3 01 7e 78 6e 1e 75 57 17 5e bf 31 8f 64 26 8f 83 74 c4 9a 46 d0 2c 51 9b 83 f4 c1 87 ef 21 12 f6 63 ff a1 fd b8 3b 79 1d ab 33 d3 d8 c6 c0 3b 1c ed 62 23 da 38 77 6d 86 e4 c3 85 be ee 18 36 d7 d6 e9 e9 aa ec 18 07 9a 02 ba 73 67 da 18 f2 23 0f 3f 04 af a6 f2 8b 65 f4 f4 c7 e0 ca 97 70 fb ed 8f 10 a7 53 f0 f0 58 52 69 b8 08 3c 22 36 ca f4 79 29 94 26 15 df 47 01 58 69 dc 65 12 cb 06 1d 6e 8d 81 61 95 ca 53 2a 36 90 4a a4 50 53 f4 c1 eb fa 9d 5e 7e 56 c0 0e 12 9b 23 07 b7 63 79 35 8d 95 b5 34 07 9b 6c 28 e0 27 a0 0e 74 0c 9c 0a 2c 2b 11 68 09 08 44 28 1b 34 50 2f 89 8d bf 9a a3 52 13 b4 a9 10 15 Data Ascii: L>Tuva~7W!6[tl6nz ?~xnuW^1d&tF,Q!c;y3;b#8wm6sg#?epSXRi<"6y)&GXienaS*6JPS^~V#cy54l('t,+hD(4P/R
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 45 b3 2a 4a 54 6a 96 48 e4 41 c1 83 f4 48 3f 22 90 0c 41 38 22 0d 93 00 b2 a9 04 86 72 7d fe fb cf e3 dc b9 09 bc f9 d6 3b f8 de 4b 3f c4 4b af bf 8d e7 5f 7a 0d ef 7d 70 1e e7 cf 5d c0 a5 ab 97 71 f9 f2 45 dc ba 79 13 f7 a6 ee 31 a8 5d c0 dc da 1a 66 f9 7e df f8 28 86 06 a2 68 54 f2 e8 27 a1 8d c9 57 91 e8 76 87 48 8a 19 ec 0d 74 87 d0 13 f5 a0 8f 24 b7 27 e2 c1 e8 60 17 46 fb 23 e8 8b 78 31 d4 13 c6 48 4f 88 3f 61 0c 75 07 31 dc 17 46 7f 3c 80 a1 de 10 86 ba 42 e8 8b fa 31 d6 1f 47 5f cc 47 79 86 30 40 52 d7 47 82 3c dc db a9 34 9a 9c 5b 36 89 49 a5 bb 9a b4 b7 8a 02 40 ea 80 82 a3 2a c7 52 a0 a5 99 5b 2f 7d 8d 88 92 c6 57 f6 df e2 f8 e9 6f 2b f5 49 a4 d1 47 ac d5 6f f9 57 43 bc 48 66 44 54 65 f3 46 d7 84 83 24 61 0a 80 2c 34 06 cd ce 2a 70 b4 11 1b 35 Data Ascii: EJTjHAH?"A8"r};K?K_z}p]qEy1]f~(hT'WvHt$'`F#x1HO?au1F<B1G_Gy0@RG<4[6I@R[/}Wo+IGoWCHfDTeF$a,4*p5
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 89 43 24 0e 46 ad 25 87 6a 2b 51 a0 71 a4 5d 2b a1 2a ee 17 0a c6 c9 91 19 f8 13 67 2c 3c 2f 9d cd 1a bd 77 aa d2 9d fd b4 f0 38 f1 f9 3c e3 9a 20 c7 c4 c9 73 f3 8c 97 dd 6c af 5b ba c6 b1 50 b1 81 2a 7f 6b b4 dd a0 5f 49 2a c5 1a c4 16 5e 47 3a 55 a7 ad b8 e9 af eb d4 71 0f 71 4d 3c 69 31 99 33 55 31 eb e4 9d d2 99 de 88 cf c8 77 24 1e 26 77 76 33 8e 2a 52 27 19 2f d1 ae 0d 36 50 fe a6 72 8e 84 4f b2 56 65 aa 99 2c e5 3d 54 15 d6 a2 8d e9 78 c9 5d 95 84 b2 0d 61 4d 53 b6 47 39 98 18 80 6f c4 43 65 ff 4a 8a 49 1f f5 b7 04 25 bf af 03 c5 31 84 05 b2 13 61 b8 fa a1 b8 52 71 86 f8 82 12 b5 eb 9b 1b 58 4e 33 1e a8 b5 90 22 9e d6 f9 fd 30 63 53 ba 5e 8c 93 f7 b8 e9 23 16 d6 d3 8c ed 3c 08 29 8e a4 1e 6e 92 2b fb d9 a6 20 e5 20 fb 26 0a 10 77 a8 9b e5 a2 49 18 Data Ascii: C$F%j+Qq]+g,</w8< sl[Pk_I^G:UqqM<i13U1w$&wv3R'/6PrOVe,=Tx]aMSG9oCeJI%1aRqXN3"0cS^#<)n+ &wI
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: c5 b4 45 0f c7 57 cb 15 7d 8f 3d 0a 8b 9f 36 fa 67 7f 84 d0 c1 01 44 77 ed 45 8d 40 6e a3 3c ab 4a 22 d5 0b 1c e7 04 75 b9 28 55 30 b3 67 22 87 1c 2a e3 2c 6c 56 11 22 95 65 f2 6f e2 a6 08 5f ad 9a 23 81 fa 11 d9 b5 ca 21 8a 38 92 b8 10 53 df 39 77 0d 13 4b 9b 74 76 a2 0a b4 a7 96 2a bd 5c 18 18 ea 81 66 0a d6 89 b5 73 cb 4b bc 0e 6d 87 fe c3 62 d5 52 07 3a 4b 1e d3 4b 1d 33 b3 67 c4 e8 98 df 8d de b0 9b d8 14 c7 ae 2d c3 18 19 ec c2 40 57 10 a3 03 bd 18 ea 8b 61 a8 3b 86 c1 ee 38 86 7b ba 31 36 30 80 61 06 d0 43 3d 3d c4 91 38 83 ea 18 e2 43 83 0c fc ba f1 ca 1b ef 62 72 7a 99 f7 a1 dc 9b 15 04 3c d4 d5 b1 d1 ce cf f6 9d 48 65 33 48 a6 32 58 59 59 41 b9 94 27 0e 93 c8 53 07 7b fa fb 71 f2 f8 69 4c df 9b 46 94 81 f1 91 23 87 50 48 ac 19 dc 17 b6 29 1c 13 Data Ascii: EW}=6gDwE@n<J"u(U0g",lV"eo_#!8S9wKtv\fsKmbR:KK3g-@Wa;8{160aC==8Cbrz<He3H2XYYA'S{qiLF#PH)
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: ae 93 7f 65 38 7e 15 b3 bd 82 8d 3e 94 5d a3 bc dc e4 95 4e 64 b2 79 ea 7f 12 85 6a 0b 33 b3 2b a8 68 a9 31 f9 4e b5 d6 46 ba 58 41 83 7a 61 b8 a1 db 8e 60 38 c6 36 35 91 4d 14 c9 83 9b e6 dc 02 f1 50 32 2b 52 ff f2 c5 12 fb d6 b1 07 1b 75 50 09 27 97 3f c4 f7 1a 31 a5 3f ed c6 fe 1d 4a 92 79 54 8d 40 5e 42 e5 94 9d 28 c1 6c 7c 20 31 4d cb 4d 54 71 55 25 b7 f1 52 6f e5 2f a3 a1 10 ed 1d 26 f9 9f 27 2e 28 21 11 ed 8d f1 7e 36 64 c8 f7 94 44 2c 71 6c 95 bc 73 70 4c 3c ec 6b bb c1 60 9c 98 b0 65 78 c4 4c 0a 99 4a 33 da af 74 d1 cb 40 dc e5 0e d0 16 bb a8 37 0e 6c 72 38 d3 f4 21 d9 ba 1d 05 c6 21 15 25 9a 2d 2e b4 29 07 e9 6c 99 ed e6 d0 c1 4a bc 51 e5 9f 93 be ad 41 5c f7 72 1c 85 47 aa d2 d0 4a 0d 2d 09 54 25 be 6c b9 49 19 54 aa 0d ca b3 c8 f1 66 f0 ef f6 Data Ascii: e8~>]Ndyj3+h1NFXAza`865MP2+RuP'?1?JyT@^B(l\| 1MMTqU%Ro/&'.(!~6dD,qlspL<k`exLJ3t@7lr8!!%-.)lJQA\rGJ-T%lITf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49761	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:36 UTC	393	OUT	GET /uploader/8e02e850002eb3ce0a0be48daf2693336403eb86.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:36 UTC	704	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:36 GMT Content-Type: image/jpeg Content-Length: 188709 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221cfd17a9d7dddde6172b2f0a611a29e3228316_221" Content-MD5: VSH/hgjIuSbNcLAgT62y9Q== ETag: "5521FF8608C8B926CD70B0204FADB2F5" Last-Modified: Wed, 09 Aug 2023 07:26:16 GMT x-oss-hash-crc64ecma: 8998513415771323797 x-oss-object-type: Normal x-oss-request-id: 665074451F5247373259390A x-oss-server-time: 1 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42719 Expires: Sat, 25 May 2024 02:56:36 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e145ee0c6a7a-BNA
2024-05-24 22:56:36 UTC	665	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 00 77 01 00 e8 03 00 00 00 77 01 00 e8 03 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 d4 03 00 00 03 a0 04 00 01 00 00 00 20 03 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifww02100100 ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 03 20 03 d4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 01 02 07 08 09 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 18 63 3a df 38 e6 79 47 97 b3 4f 37 e8 ac 95 c6 c9 d3 c5 62 af 0d 82 b8 59 ea 2d 15 16 9c 5a 13 3d b6 a6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]} Xc:8yGO7bY-Z=
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 83 73 34 70 3e 56 06 82 22 e9 74 2c a5 4d 09 f2 37 72 5e 6a c5 b9 1c ba ca 1b 0e b1 73 3d 2d a7 1a e2 3d 62 32 56 fd ca 46 9b 70 ec eb 32 11 92 8b 83 73 a9 11 ac 8b 30 6c 60 00 00 01 9b 69 d7 7e 53 d7 ce 5d ad 73 55 64 f6 6d 8b 36 7c b0 65 58 b9 74 b3 2a d0 db 49 66 1f 80 00 00 00 00 00 1e 0a eb e7 a9 dc 40 fe 73 fb a2 be 5f d5 e1 a1 94 1b 29 ef 91 3e 9f 3f 7e 9e 05 7a fc e5 7b 7c e9 2f a3 f8 39 5e bf 3f 71 6c 2e 39 92 f1 6e a4 e2 4e b2 dc 0b e5 38 17 53 a9 39 82 c2 fb 29 5a 1b 72 12 d1 0c 6f a8 8d d8 aa 33 cc 81 19 35 11 b4 ec 70 e8 d3 48 e1 be 9c 31 b9 26 2f 98 96 ec 59 17 98 1a b3 73 0d 00 0c 0a 1b 0e c5 49 b1 95 a5 cd 46 da 9d a9 96 f5 28 73 aa 72 95 e3 5f bd 6e b9 d3 9e be 18 79 de b5 c7 ea 43 f2 f5 e8 58 3d 1f 1d 53 0c e6 53 3c b9 20 00 28 d3 8e 9c Data Ascii: s4p>V"t,M7r^js=-=b2VFp2s0l`i~S]sUdm6\|eXt*If@s_)>?~z{\|/9^?ql.9nN8S9)Zro35pH1&/YsIF(sr_nyCX=SS< (
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: dc 6f 0d b3 72 b5 67 73 ba a4 8e 92 e8 52 1b 4b 7d 2b 17 ae 60 23 64 5b b5 4a 90 53 0e 45 ac b5 0d 9c eb 3b 98 bc d5 1a 89 d6 68 6b 59 8a 69 8d 18 9d c6 bd 61 2b 94 6e 51 4a 77 29 5c a7 52 96 ce 94 d7 41 86 99 7b 45 23 d2 61 b6 20 2b 21 a2 a2 1b 14 c8 d2 35 91 c4 76 d6 cd 73 b0 e2 a2 4b d9 f3 65 3d ff 00 29 d7 af e7 2f ec f9 ca 77 f3 e2 29 ef 97 e8 c4 cd a3 c7 ba 3c 3d 49 79 3e 84 37 83 ea d2 7c fe a8 3f 2f a7 15 78 6b 8e 5e cb 07 8b f7 0c fb 7c c8 3f 67 e3 0c d0 96 3d b7 b3 ca b5 57 f8 1f d1 3a 9f c8 fc a4 d7 d9 f0 a3 e8 e5 62 f7 73 46 5d 7b bb cb 9e 5d f4 f7 ab 23 b1 e5 5f e7 bf d1 28 7f b6 f1 cc fd 2f c1 a6 6b 8b c4 5f af a7 7e 75 75 e4 b6 6f d2 08 eb 08 c8 22 ae 55 ce 4f 2f 41 9e 6d b8 9e 26 e2 e4 85 e8 c8 ac 4e 4e 4d c3 57 3b 6d 6d 17 2b a9 63 9d 79 Data Ascii: orgsRK}+`#d[JSE;hkYia+nQJw)\RA{E#a +!5vsKe=)/w)<=Iy>7\|?/xk^\|?g=W:bsF]{]#_(/k_~uuo"UO/Am&NNMW;mm+cy
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: a9 c6 5a 0f 4e 79 fd 25 33 dc 93 e9 25 cf e8 36 f4 7e 71 e6 fe 49 63 01 4d e5 21 d5 37 dc f2 91 bc 6a b5 08 81 f1 b6 30 68 10 77 93 a9 0f d2 92 c3 ac 29 67 70 74 02 e4 c7 31 d5 3d e8 88 8e d9 39 d1 03 16 ff 00 12 e4 95 6a d2 8d 8a e9 d1 49 72 b4 f9 5b 38 96 f2 62 04 7a 63 06 03 5a 31 ac 79 49 a9 97 d0 57 10 c4 4b 14 31 a6 44 6d eb 7a 48 62 df 17 6d ae b2 c2 6c 8f 1b 4c a4 46 d4 43 df 2a a4 a2 c4 c7 92 de 49 8d 2c 90 e2 65 f0 65 22 34 4b b1 aa a2 fb 13 d9 79 07 9c ce cc 08 08 d9 90 d6 ad 32 1b ae 56 bd 60 0b 7f cd fb 5e 98 fa 3f 13 48 eb 49 f8 9f 63 87 7d 1f ad 05 ed fc 61 ba 16 03 da 1e 5c f3 27 9b 37 36 93 dc 63 09 e9 43 56 6a d7 0d dd 2c f7 59 d1 d4 9c 1a 0d 6d 13 45 49 78 2d 68 dd a6 34 60 64 28 dc 93 86 f0 8d a9 73 89 19 a7 c2 b2 46 92 22 a4 77 43 1e Data Ascii: ZNy%3%6~qIcM!7j0hw)gpt1=9jIr[8bzcZ1yIWK1DmzHbmlLFC*I,ee"4Ky2V`^?HIc}a\'76cCVj,YmEIx-h4`d(sF"wC
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 6a fa c8 9d 62 22 53 2d 84 98 80 ce b9 b7 16 4a 82 73 a9 08 8a d1 e5 b7 10 4a a5 47 df c3 86 fa a2 e6 47 94 dc ab 3c 5e 9b c9 4f ad e1 ec 73 56 ef 2f 7d 38 f4 e5 67 38 6b c3 af 71 ae bc 5c 9b 2b b4 d7 65 b9 01 73 5b a8 a5 26 26 a1 29 ec 72 f5 35 9d 50 55 ba 72 ed a3 2b de af 9b 50 db e9 5e 2f 52 7e 1f bc b4 7d 4a 67 9f de ce bd de 84 7e 2f ce 8f d5 61 96 9f 7f e6 6d fe 8f 8d d2 f9 42 7e 7e ad da ca 25 01 2c 62 ca 54 3a 30 47 09 d6 ef 92 8c cc 3a 39 be a9 37 0b b1 c4 91 d9 dc ab 77 aa 9f ac 00 00 b1 d6 8e 92 48 91 e7 9a c9 93 e8 a7 95 e6 ff 00 97 19 d5 db ba 42 91 bc d1 f8 c0 94 ee a2 7b 8d c4 9b 1a 37 c6 86 b8 0c 89 08 6e a6 63 6b 2a 90 cb 9e 75 b5 ed cc 0b a9 61 56 a8 dc a1 31 bd 52 22 69 d0 6f 32 d8 4e b9 2b 6d cd 45 12 be b9 97 d5 f1 f2 bd aa d5 6f 41 Data Ascii: jb"S-JsJGG<^OsV/}8g8kq\+es[&&)r5PUr+P^/R~}Jg~/amB~~%,bT:0G:97wHB{7nck*uaV1R"io2N+mEoA
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: d8 76 ab 18 fe b9 cb 75 e5 5c dc 78 55 72 3c d3 d1 ca ad 04 77 ff 00 27 6f 41 f8 bd 59 b8 c0 28 34 c2 3b 9e 3d fa be 08 2d c9 61 b2 a1 a4 11 e6 a3 a1 33 2c c0 a0 ff 00 cf d5 5d 32 eb 16 bf b1 f3 3a 1f 3e 97 5e 77 47 f2 f7 a4 4e d3 57 61 b8 4b d7 e6 b1 d4 74 8e 5d 2f 9c bb 4e c6 ca b5 e8 fe 6f 92 a7 ce 03 49 a7 5a b9 22 cb ae 48 b9 b8 de df f2 7d c4 eb 61 be e4 04 fd 1e 51 e5 fd c5 97 cf f5 dc b6 73 3e 55 bb d7 f8 37 5e 8f 13 a9 d5 4c 54 e6 a1 66 43 dc 70 1e d1 cd fd 7c 74 53 70 00 00 00 02 ec 7d 2d e6 f0 97 cb 64 ba 75 5c ba 6d 4e 56 ae 99 3d a4 b5 c1 3c a4 25 8a 60 da 49 28 1d 61 c1 21 69 dd 57 f9 e8 38 cd 72 d7 2a 7f a9 0a c7 c4 8a a4 1b 21 ba fb 50 9e 8e 74 8f b3 e1 80 f4 63 df cf fe cb bf 67 ce e8 3e af 8c d6 91 ac 88 9c 68 41 69 3c 79 c3 a3 8b 1d 3b Data Ascii: vu\xUr<w'oAY(4;=-a3,]2:>^wGNWaKt]/NoIZ"H}aQs>U7^LTfCp\|tSp}-du\mNV=<%`I(a!iW8r*!Ptcg>hAi<y;
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: b6 b9 75 f4 f8 f2 dd ab ef 0e 9e 90 88 9d f4 cd 73 dd cf b5 f8 7b e8 53 19 e7 2a 9a 18 91 31 59 53 9d eb f9 b5 4f 4f 0b 67 9f bd bc b1 f9 7e bf 38 f9 9f b3 a0 7a 3e 4d 27 db f9 f8 ba f9 e9 6f 54 cb 3e 52 de 2f d0 4c 7d 1f ca 46 5e b0 93 74 83 a1 e0 e5 b9 2c 3b 37 33 a0 6e 5f 56 a4 a8 08 e6 da af 14 65 c3 0d 71 a0 9e 6a 24 e6 ec f2 57 63 72 09 8d 16 d3 35 33 56 02 da 74 2e 26 39 4c f8 b1 22 50 39 77 b7 fc 1f 7d 4b eb f9 58 7b 7c b8 c0 02 c3 d2 ca 56 c6 e6 c3 73 d0 b5 30 84 2f 0f a7 69 eb f3 3d 0b 3d 27 15 e3 8f 7f 91 5f cd 7f 41 98 f0 fe 89 c5 79 ad 7e 9f c9 4f 74 f9 26 b5 35 4e a2 b8 5f 1c d3 bc 79 97 dd c2 f0 cb 89 b8 81 7b 29 04 53 7a f7 5f 37 3b e5 df 88 b7 a0 9f 52 a5 f3 9b e6 11 50 63 1a 9a 6b 53 7d 4a fd 1e 1c 97 b6 b2 ca b8 e6 7a f6 e7 87 cc fa 55 Data Ascii: us{S*1YSOOg~8z>M'oT>R/L}F^t,;73n_Veqj$Wcr53Vt.&9L"P9w}KX{\|Vs0/i=='_Ay~Ot&5N_y{)Sz_7;RPckS}JzU
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: d3 1d c6 bc 1b 0d 8e 51 df 87 95 7d dc 3d 1d b9 cc c9 c1 e9 71 3c f2 44 8a 5c 27 16 1d 54 fa 6b 8f 04 7c eb a7 46 60 c6 b6 37 84 97 d5 e3 c9 3a 53 23 5d cb 8f da f8 b6 2b f5 eb f8 7f eb ee fc be 9e d1 f6 bf 0f 74 f4 fc 1e 53 b1 c1 1b e9 b6 f6 f9 de 23 e1 fd 23 c8 f5 33 f5 fc 4e 33 df e5 fa 77 0a b1 c5 4f 4c 9a d8 e7 b4 e3 f9 3c f2 b4 3d a9 ce e4 0e 25 b9 6b a8 73 53 c5 8e 00 af 4e 5f 2f 33 f1 ed 48 9b d5 a5 4e db 9a 9a 0f 47 a3 81 de e3 d2 6f 63 ab 79 7e c5 3f 87 d1 ae 7a be 7b cf a1 f1 ee fe 9f 9b df fc bd ee 3c 3d 8f a6 b6 23 32 b0 6c 9c 9e 57 d7 9e d2 e0 f4 f1 47 22 6e 1f 23 72 67 2e 87 37 53 d6 e4 2e 6a 06 e2 e3 aa 95 c7 a4 19 e9 f8 9e 8c eb 58 64 dd 4f 08 eb 1e 82 9a b5 f2 eb 13 73 11 ee f1 b0 f3 f5 f3 47 9b bf 39 ef c2 46 3a 23 1d ac 9e 3f d4 77 9f Data Ascii: Q}=q<D\'Tk\|F`7:S#]+tS##3N3wOL<=%ksSN_/3HNGocy~?z{<=#2lWG"n#rg.7S.jXdOsG9F:#?w
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 3b e4 7c 4a 6b 5c 26 38 ac 95 fa 9c 38 f4 58 2d 44 cd 72 94 e5 ea 71 cb dc db b7 82 f5 3e 46 5f 67 e7 3d f5 79 53 e5 df ac f8 7d 5c f3 e9 f9 af 1c 2b d1 1f 33 dd 5c 8b f3 af 83 f4 d3 d7 df 5f 67 e3 fa 64 f5 ea fc be 8f 1e f1 7e 93 4f 5f c4 ee 5d 7e 23 1b cf 11 5e 7a 84 bb c5 ba 2a e9 f0 cd 9c 66 76 12 47 1e 92 d5 d3 9d c9 8a 0c f5 e6 ef 57 2e 67 17 d8 f9 6b af 07 d0 e1 7e 0f da da 3b 70 ee ff 00 4b f1 f2 dd bc 2d 33 12 39 0c bc 9a 7a 42 9c ac aa 63 d7 36 f3 bc 54 b9 ea eb 86 0a 8d 9d 64 30 d8 8f b9 a2 69 dc 3d 0d 37 61 39 2c cc 66 ac 1a b9 4d d6 a3 d9 05 3e 9e b9 df e6 d4 5c f8 c1 d0 06 c3 d3 ab 65 55 ab 97 88 9b 01 15 d4 65 e9 4e dc b9 2f d3 f3 cb 7c ff 00 4f a6 39 74 8f 1b 08 9a 8a b6 53 5f 3f 3d 1c 2c 5d 39 fa 4b f3 ff 00 62 4a 3a 68 40 2a b0 73 9e fc Data Ascii: ;\|Jk\&88X-Drq>F_g=yS}\+3\_gd~O_]~#^zfvGW.gk~;pK-39zBc6Td0i=7a9,fM>\eUeN/\|O9tS_?=,]9KbJ:h@s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49753	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:36 UTC	627	OUT	GET /uploader/35ba491724c524231c180060c6634fbcb3366865.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:36 UTC	706	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:36 GMT Content-Type: image/jpeg Content-Length: 122557 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2214d6bfc29077121919605a7bfa5f434ca66808_221" Content-MD5: K/Y9gxH/SeFcylalk/HgZA== ETag: "2BF63D8311FF49E15CCA56A593F1E064" Last-Modified: Wed, 09 Aug 2023 07:22:31 GMT x-oss-hash-crc64ecma: 13441064737030444594 x-oss-object-type: Normal x-oss-request-id: 66507445342C4831336B56A2 x-oss-server-time: 31 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42719 Expires: Sat, 25 May 2024 02:56:36 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e145ee7af7c4-BNA
2024-05-24 22:56:36 UTC	663	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 e0 93 04 00 e8 03 00 00 e0 93 04 00 e8 03 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 e8 03 00 00 03 a0 04 00 01 00 00 00 46 02 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(if02100100FICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 02 46 03 e8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 02 03 08 01 09 ff c4 00 1b 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}FX
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1d 05 72 6b 5b 94 04 d6 26 62 2a 5a 7a b6 c0 c1 b5 d7 a9 d9 c8 be 2e 7b 9c 5b c6 5d 69 83 53 46 7d 21 5b 65 91 c6 d8 b5 76 cc e3 b1 da 92 69 fb 59 93 29 35 bf 9e 37 b9 9d 7d 9e 0c b7 43 9e d9 88 4c 3b fd 78 36 60 f1 ef 75 6b 66 d8 be 6f ad 19 86 f4 ab 3d 23 67 b8 68 00 00 00 f3 96 6c 1e 14 c5 b5 d5 31 c4 c1 38 1c 09 04 6c 1b 57 62 92 96 ac 0d 2f 47 a3 36 ed 8b 6a 59 8c 8c 77 e5 4b ca 4c fa a6 71 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 32 a0 54 f2 63 a2 1d d3 15 04 62 27 62 89 8f 30 d3 26 bb 8b 67 23 ea dc cd fb 7c 57 e6 08 66 5d 41 5c 9a f2 2f 04 8b 02 3a 96 f4 d5 b1 5a 0a fd ab dd 0b 5c d2 a3 df f3 1a 27 67 6a af 1b 11 9a bb d2 fb bc ee 11 68 fd 4d bc 95 6d 9c 6d ee 8c 79 Data Ascii: rk[&b*Zz.{[]iSF}![eviY)57}CL;x6`ukfo=#ghl18lWb/G6jYwKLq2Tcb'b0&g#\|Wf]A\/:Z\'gjhMmmy
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 2a 46 bc 3c 5f 7c 77 63 78 ad 6d 34 6c 5a 24 c3 3a 4b 6d eb 5d 36 cc c4 d1 05 5b 47 d6 d7 4b eb df 17 82 5e 4d 8f aa 1d 52 8c 4e bf 28 95 52 48 99 c9 07 08 c3 22 16 6c f8 e6 36 31 c8 eb 5b 2f 0e 6c 99 af d8 62 4d a3 88 88 53 e1 16 8e 5b ba f3 98 73 77 51 5c 4e 05 2f d5 11 6d de e7 ef cf 41 e4 2a 9c 0f 51 48 d5 e9 63 4c 4a e2 cd 42 bc 58 61 16 ae 5e 7d 7b 1e ce 9c 26 5a 61 eb e7 c3 d1 e9 64 cd a6 2d 8a 5f a5 cc ad 67 c5 1f c7 ed db b0 ce c0 87 39 b7 d2 56 b1 ad ad 5c 79 9b 69 92 6e 9b 53 d3 f8 ee 00 00 00 00 00 00 00 00 00 00 00 01 06 79 63 36 0e fb 44 03 25 1b 1a 00 f7 d6 3c 97 90 47 1e 54 bc f9 9a 66 a9 5b 6d a8 7b 42 29 b5 51 f4 1e 59 97 8b a5 37 78 de b5 8d c9 5b 52 25 ae c1 5f 98 ce b2 6e 6b 18 6e 98 ad 7e 97 ac 5a be 7c 8c 95 c4 ef 09 a6 e4 96 b8 35 Data Ascii: F<_\|wcxm4lZ$:Km]6[GK^MRN(RH"l61[/lbMS[swQ\N/mAQHcLJBXa^}{&Zad-_g9V\yinSyc6D%<GTf[m{B)QY7x[R%_nkn~Z\|5
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 80 00 00 00 00 00 00 00 00 00 02 1c 66 9c a2 c8 9e bb 52 0f 6f 4a a5 d5 e0 6a 9f 41 e6 7c b1 e3 3e 91 81 a5 bd c3 2d 60 d3 15 15 dd 7e b7 c5 6d 6c da 74 1d 0e e3 95 d4 b2 69 6e f5 c4 e9 35 f5 fe 2b 7d 32 a5 b5 ba da 5a cb 6e bd 78 ad d3 8f 27 1c 17 e1 86 78 d2 dc 71 58 5c 62 2d 06 b3 8b 77 1d e8 b4 92 b6 c7 67 99 e2 8a e6 3b d7 6d 31 b2 81 a4 e3 c3 e1 9f 67 5a 7b 8e 11 13 d2 8c 3a 35 33 dc f8 5d 0d 83 e7 f6 b1 36 31 e8 bf 77 c6 ea cf 4b 17 4f 42 43 7b 46 36 b9 ad 9e 97 cf dd 77 3c f5 b3 a9 e6 e4 5a 3c a3 25 9b 8f da ac 6e e0 91 d1 e8 6c ff 00 37 ea a0 77 b9 f5 ce 87 1e 23 a9 c7 8d da d4 c8 88 99 d5 de 9f e5 f4 aa 7d ff 00 23 79 f3 3e d6 9b b3 6d 30 ed 5a bb 1e 6e 7d a7 c3 93 db a7 69 75 23 b2 62 b6 ef f9 fb 67 43 ce f4 5a 30 39 5e e7 dc 5f 31 fa 7e bc 5f Data Ascii: fRoJjA\|>-`~mltin5+}2Znx'xqX\b-wg;m1gZ{:53]61wKOBC{F6w<Z<%nl7w#}#y>m0Zn}iu#bgCZ09^_1~_
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 99 b9 b0 b0 5b 51 26 b4 bd 70 91 46 ec 57 d6 15 90 00 00 00 00 00 00 23 66 9e 70 ee f0 6c 3a 1b f6 6d 7d 8a e6 c6 be 95 f4 fe 5a 87 37 89 e2 7a 8f 5a 71 77 bc 57 74 79 b1 32 6b dd 62 d6 e8 49 cd 79 02 b7 19 6a 94 be c6 9d 7e eb a1 a9 3e 73 8c fd 75 be f2 9a 6a fe af 3e a3 ce de c6 da af ae f5 27 cb 14 c9 49 4d a2 cb ba ba 96 b3 f2 93 67 cb 59 2b c5 3b 1d b0 2b 3d 75 72 b3 e9 63 45 aa 71 ce da f4 e2 b5 5b 45 c3 88 3e 54 3b 8e fb 32 6e e6 73 57 e1 75 86 ba d8 c7 95 d1 d7 c3 e2 6e 63 56 dc ad 1d db 38 f8 d6 dc 69 3f 62 78 54 89 ef d8 c5 77 f5 5e 5f 6f fa 9f 9f cc 6d f2 b6 0f 9e f5 1d 59 74 f4 a6 2e c6 b0 f1 bf 42 d9 be 8b c9 6f ae 8f 9e c9 8b d5 b3 60 c1 e8 f1 e3 36 35 a9 d4 ed d8 35 f5 f5 7c 7a a9 7e 7d 75 d7 84 f6 d1 3a 7d 0b 45 f1 ec 6a 24 62 dc 4e c4 52 Data Ascii: [Q&pFW#fpl:m}Z7zZqwWty2kbIyj~>suj>'IMgY+;+=urcEq[E>T;2nsWuncV8i?bxTw^_omYt.Bo`655\|z~}u:}Ej$bNR
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: ad b5 bd 39 5b 5b f7 56 7b 76 b4 f3 31 e5 b9 e9 f4 35 e5 32 60 23 6b 9a aa 2f d7 38 f4 ed a3 4d d6 f9 b5 a4 6b 26 dd 96 84 cf 8f 9e d6 ad b3 4b 63 67 e4 c7 34 73 a5 f5 3c 64 d5 f1 7e b3 30 d9 13 4d 8f 92 93 a9 f3 ee 0b dc 26 3d 25 9b 0d fb 9d df 81 cb ab 43 d8 e6 69 ba de 8e 6c 78 b4 74 d2 6a d4 b8 d9 54 a5 ab e5 24 a5 d3 3c d6 5c 5b 63 bf e5 ab dc 4f 47 6d c7 9a cf 59 d7 14 bf 35 30 6e 84 8b 70 cf af 4a bd ed 9e 9f ce d9 fb fe 7e 4b 36 95 83 7f 8f c6 d3 db 8b 2f 4e 6c 49 45 79 de df 7e 6d 5c ce 8e 8e 07 23 b5 89 e7 7d 1e b6 e1 fa 08 ad 4d bb 95 67 5e 59 c6 27 1d 1d bb 38 af 9e d7 ca c8 e5 d2 be f4 bc b5 d6 75 f7 07 cd be bb 9b a7 d1 d6 5f 48 f8 fd 8b c0 fd b2 1b ad e7 2a 7d 5f 1d a7 eb b1 4d e6 7a 59 df 47 c2 e1 c6 de d7 7e 57 d4 cf cb 71 42 9c b5 0d 1d Data Ascii: 9[[V{v152`#k/8Mk&Kcg4s<d~0M&=%CilxtjT$<\[cOGmY50npJ~K6/NlIEy~m\#}Mg^Y'8u_H*}_MzYG~WqB
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: aa d5 65 a1 5d cc 7b 6e b6 00 00 00 00 00 00 03 e5 63 55 65 8f cf 5b c5 3a 99 36 a5 6b ec 3b e1 b4 c5 f5 61 7b c9 8a 5e f1 97 4c 9a 16 1e 5c c9 13 3b 18 79 e9 e5 ee 64 aa d6 f3 59 31 d8 eb 4e 82 93 19 6b 2b f2 a8 66 18 50 e0 58 ec 8a c9 8f 96 ce 09 cd 3d 89 b9 c5 d8 b6 4c a5 67 15 be d1 7d 89 9d 8c 91 11 30 89 c6 9c 51 9b fa 36 0e 87 17 63 74 79 13 75 9a c6 ce 2a 8e ee bd 27 a1 a9 9d a1 bb 27 a1 d2 9a d2 e8 6a b9 cb af 74 f7 6b 7c 6e c6 16 b6 79 ea 26 22 d8 e6 d7 e9 72 ac 5e cb e6 be 6d f0 9f 54 89 d7 d9 b5 13 70 c1 9a e0 da 71 ac 8f cf af d1 6a f5 63 cd 83 82 fc 72 33 ba 9a 99 7b ba ea 4f db 55 91 db 5a 66 52 8c f5 ca ae be 36 5c b5 4f 27 df 93 ad b6 b5 a2 f7 4b f1 a5 b6 bd 9d 54 6e 3c aa 25 63 cf 75 a5 52 ed 60 88 85 ac 13 5d a0 88 73 56 56 f8 96 8b 54 Data Ascii: e]{ncUe[:6k;a{^L\;ydY1Nk+fPX=Lg}0Q6ctyu*''jtk\|ny&"r^mTpqjcr3{OUZfR6\O'KTn<%cuR`]sVVT
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 1f af 18 f1 37 75 66 a2 65 31 e4 e9 ae 4a 36 df 36 81 a1 d3 d7 91 92 0d 1e 93 b4 ed 3b e0 d4 fe 83 ce 5d f8 fd ba 16 d6 b6 89 c1 d1 d6 5e c3 cc 5c f0 eb ea fe 67 a2 8e ae 5f 44 6f 79 6f 5e 79 5f 57 aa 3a 3c f9 ee 7e fe 98 f4 be 6b 60 79 bf 4b 89 b5 ab ad bd a7 cf e9 5c 9e d5 07 8b e8 a0 f9 7d ac 7c 79 3e 44 e0 43 b7 2d 6e 1e 87 cf 6c ef 43 e4 6f 7a d4 d6 5e 3b e8 10 ba 3d 4f bb 1a 96 1e ff 00 97 d7 3b db d6 ae bf 0a 5b 1e b3 36 1e a9 bc 0f 27 ad 4e f3 de 8a 2f 4f 7b 1f 57 6b e4 d3 21 38 b4 9f b2 f8 0f b1 6f b3 08 9f aa cc c3 62 cb a8 f8 61 1f 01 f4 55 22 7a fc 1b 4c b2 00 00 00 00 00 00 00 00 00 00 00 3e 15 43 53 ca 0e 71 c6 c3 74 46 4c b3 4c 9e 62 89 f4 7d e9 be b2 57 10 ea 57 91 c4 fa 64 9d 36 9e 31 58 29 a6 8a ad f4 36 a6 d7 ba 36 b5 26 b2 62 ad ed 6a Data Ascii: 7ufe1J66;]^\g_Doyo^y_W:<~k`yK\}\|y>DC-nlCoz^;=O;[6'N/O{Wk!8obaU"zL>CSqtFLLb}WWd61X)66&bj
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: d9 75 76 f5 87 53 93 e7 ff 00 49 e7 34 2f 8e f6 d2 7a 7b 33 74 bf d2 bf 65 3e ab 6c a3 25 c6 ae fb 3a 61 dd 29 62 68 c2 a2 3b a5 a8 ee f1 ad dd 4e 44 86 1a d1 b9 5d d8 2e 5f 4b a7 4b 7b b6 6b 29 59 9d 44 cd 5d 75 60 43 aa d6 ea 38 d5 3e 6f 43 7d 1b 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 67 93 cd 49 4c 93 8a 75 e6 ae 87 94 6d 1d b1 6f 57 e3 5f 73 63 8e 57 ae d3 e7 39 9d 79 59 c9 99 e1 92 91 75 b7 19 9e 79 71 ca 75 74 7b f2 62 ea ad f0 74 36 fa 34 f2 f0 c3 97 2a 5f 6f 19 39 f5 2e fe cb cb e5 f4 34 b2 ad 83 b2 69 93 5c 59 b9 b5 7b 63 1c e7 91 fa 07 ab b8 bb f4 6e 97 1a e1 a7 d4 f3 df af f1 1e 78 f3 7e a6 ad c4 f4 5b 0a b1 f2 27 18 d7 20 9f 94 74 bb ce 93 38 8d aa 56 cb 69 83 44 4e 58 85 cd 8e 4f 6f 53 22 18 97 a6 35 32 e1 68 ef 5d 22 30 Data Ascii: uvSI4/z{3te>l%:a)bh;ND]._KK{k)YD]u`C8>oC}gILumoW_scW9yYuyqut{bt64*_o9.4i\Y{cnx~[' t8ViDNXOoS"52h]"0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49752	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:36 UTC	627	OUT	GET /uploader/3474c0a0e52dc1984476bef3a986c4b06b9ce11e.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:36 UTC	706	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:36 GMT Content-Type: image/jpeg Content-Length: 110027 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="22100b1940199bdf78d7e3c1bdb91b7d88877806_221" Content-MD5: bzg3VafdnqDfE4hx2B2tKg== ETag: "6F383755A7DD9EA0DF138871D81DAD2A" Last-Modified: Wed, 09 Aug 2023 07:22:25 GMT x-oss-hash-crc64ecma: 11964597626529005413 x-oss-object-type: Normal x-oss-request-id: 66507445D561043631474AE2 x-oss-server-time: 32 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42719 Expires: Sat, 25 May 2024 02:56:36 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e145ee74f7f4-BNA
2024-05-24 22:56:36 UTC	663	IN	Data Raw: ff d8 ff e1 00 22 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 12 01 03 00 01 00 00 00 01 00 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 5f 63 70 72 74 00 00 01 4c 00 00 00 0c 77 74 70 74 00 00 01 58 00 00 00 14 72 58 59 5a 00 00 01 6c 00 00 00 14 67 58 59 5a 00 00 01 80 00 00 00 14 62 58 59 5a 00 00 01 Data Ascii: "ExifII*ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc_cprtLwtptXrXYZlgXYZbXYZ
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 09 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 0a 94 34 e7 2f b9 cc 33 98 cd e6 8e 5d bc ce b9 96 73 a7 24 74 c7 d5 c7 d2 6c d8 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 42 a4 67 32 73 07 30 73 27 32 72 e7 30 73 47 2e 73 35 38 26 4b 6c c7 53 e3 f4 6d 3c bd f6 1b 3e 7f f4 bc 78 17 96 19 e6 21 0e e6 fb 37 ea 0c df aa 0e bc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 1c b9 cd 6b 98 39 86 73 07 30 73 27 30 73 07 3e 46 37 28 00 00 00 5f 9b 21 97 Data Ascii: ,4/3]s$tleBg2s0s'2r0sG.s58&KlSm<>x!7k9s0s'0s>F7(_!
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 28 59 53 42 80 00 00 05 4a 00 00 00 00 00 00 00 00 00 00 00 3d 26 6b 81 30 8a 92 17 c8 01 6d 2c 28 9b 8d b1 ee 32 f4 3c ac d3 34 98 94 a9 93 ab 57 7c c4 67 39 55 bd 36 09 b4 d2 9c c9 a5 da d8 b2 2c 8e 7d 7d 52 f7 1b 3c 89 a1 39 5c dd 19 73 30 cd 42 f3 d1 81 1d a6 ce dd 06 ce 9b 78 68 69 1a 2c aa 8d 96 22 58 ed 35 4c 95 ca 0c cb 4b f6 aa 7a 5e e7 4e cd b9 aa e1 df 14 d6 eb 59 51 af 66 0b 70 8c 4b 9c 73 1f 72 12 26 00 00 00 00 00 02 fc df 47 67 09 8b cd 6d 00 00 00 00 00 00 00 00 00 00 00 7a b4 d7 9d 1a c0 0b b1 2e 2e 2e 2d a5 c5 d7 37 36 b8 ee 25 ee 0d e7 ce 40 e6 49 8c a3 95 9b d7 23 6f 8d 46 77 93 2b d0 37 39 4a 9e 65 c4 54 bf 2a 4c 64 e7 4b 9d 2c 6c 6e 74 de 57 15 ad bb 12 6e 4c 5c 48 e7 7a e8 51 b9 45 e4 08 c4 ad c6 31 4c db 4f 13 7e b3 31 21 97 b5 00 Data Ascii: (YSBJ=&k0m,(2<4W\|g9U6,}}R<9\s0Bxhi,"X5LKz^NYQfpKsr&Ggmz...-76%@I#oFw+79JeT*LdK,lntWnL\HzQE1LO~1!
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 41 20 05 0c 72 c2 a0 b4 c8 2f 2a 0a 14 22 23 2d 24 2f d5 f8 16 ea d8 7a 79 e9 07 87 1f 48 ea d9 6e 31 c4 6b e7 ee 5d a7 a6 67 cb f6 c5 d1 6e e4 a5 22 b5 dd b8 5f 55 6d 4d 59 69 81 e8 e1 3f 5e 3b 6c be 84 c2 ac e3 f1 87 b8 00 00 00 00 00 00 00 03 ee 29 af 97 75 c0 0d 91 5c 65 70 fa 9d 57 cc fe 93 ad ed f0 f9 af a7 f8 0a 00 56 a6 a0 00 00 00 06 83 18 aa 97 8c c1 49 34 c0 ae d3 67 be f9 fd f8 1f 77 1e b7 c1 e9 8a 9c c7 bb cd f5 67 f3 2f d3 eb 7d 7c b6 9d 78 7c ab fb bf 8b 0d 48 02 52 72 e0 0b 4c 70 54 a1 61 29 29 50 50 16 ea 2c 46 54 bc bf 55 33 73 7d 2e 73 b5 22 2c 36 fa de 4b c6 73 7c cb 97 7c be 1d 73 3d 1c 32 3c 7d a9 c7 be 0f af 85 99 b9 1c 3a 53 76 da e7 4e d9 0e e5 3a f0 d8 f4 8d e9 99 4e 48 e6 ea 40 00 00 00 00 00 00 00 01 f7 8c d7 ca 47 9f 02 a5 13 Data Ascii: A r/*"#-$/zyHn1k]gn"_UmMYi?^;l)u\epWVI4gwg/}\|x\|HRrLpTa))PP,FTU3s}.s",6Ks\|\|s=2<}:SvN:NH@G
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: fe 67 ab 81 f4 72 e5 7e 87 3f 4d fc bf d4 f3 af d0 fc ee 4b db c3 ba f3 f4 e2 bd 9c 39 9f 77 8e ed a3 28 50 8c 8c 97 57 60 59 a8 b1 52 4d 54 12 e3 71 2d 79 b2 26 29 49 4e 7f 2b 07 0c 4b ca ec d5 b5 ce ba 52 ba b0 66 d7 5b 7c 44 6b 8b 75 5d 9b b1 62 9a ac a9 aa ca e2 ca 35 5c c0 cd a6 ba 09 df 52 86 a7 57 e3 cf 7a ce 83 70 00 00 00 00 05 4f d4 49 af 87 8f 2f 24 55 c5 53 82 40 50 14 25 d6 36 15 20 00 00 02 ba 66 cb 94 9c b6 f2 d9 76 5e 7e d9 dc ef 89 f5 72 c4 e9 c8 c5 d7 49 e1 f4 fa 77 9b a6 bf 85 f9 bf d6 f2 7d 3b f8 cf b7 e4 df 6b c5 df fc 3f 5c d9 d7 9f f6 79 bc bb ee 78 fa 6f 17 7e 57 e9 f9 37 fe 1e fa 1f 77 9b af f1 fa f9 4f 5f 8f 96 f7 79 c5 4a 96 82 22 c2 5d 5f 81 66 a3 c5 a4 85 da ca 86 71 1d 23 33 4b c8 32 b4 65 bb 21 35 52 80 b8 a1 b6 32 4c 4d 6a Data Ascii: gr~?MK9w(PW`YRMTq-y&)IN+KRf[\|Dku]b5\RWzpOI/$US@P%6 fv^~rIw};k?\yxo~W7wO_yJ"]_fq#3K2e!5R2LMj
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 29 ab a1 f4 36 74 f7 bf 3d f9 b5 6f 92 dc 79 8d 4c 97 3e cb cf 7d 1e 2f ac 3c bf b7 1d 47 cc fa be 71 f4 be 66 45 e5 4c e9 df be a2 b7 9a da 83 f3 d7 cd d3 cd bd 7c 3d 20 d9 4d 68 cf 20 ac c0 c6 cf cf e8 e9 7e 5f d2 ed 3e 3f bf 6f e3 f5 57 37 80 fd 0f c4 db 79 7d 7d 3f 8f dd 81 df 94 5d 27 69 c7 30 fb f1 d5 fb 7c ba 3f a3 e2 d7 7a bc b8 1b 97 b7 30 dd 45 ed 0c fc cc d3 37 77 89 b8 f2 aa 8f a9 78 f5 f2 9e dc bc ae f1 80 00 00 00 00 db 66 fe be e6 fc 14 78 19 ce ea 98 90 9c a9 43 60 54 ec cd 71 c2 d4 d8 00 00 00 00 00 00 00 00 00 00 00 02 a5 4b c1 5d 5c 01 69 b5 87 d4 93 bf 48 f3 ed 2c 74 d1 54 f8 9d 47 8c 5c 79 95 cd d3 be 99 37 a9 b8 e0 0c cf 2f b2 5f 5f 8f a4 d9 c8 3e 8f e5 bf 49 4d 43 ab 4e 0b 8f 4f ce 3f 44 6e ab 9f a7 1b a9 ad f1 e4 55 3e 6a 47 5b 59 Data Ascii: )6t=oyL>}/<GqfEL\|= Mh ~_>?oW7y}}?]'i0\|?z0E7wxfxC`TqK]\iH,tTG\y7/__>IMCNO?DnU>jG[Y
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: c4 a6 36 a2 2f d6 54 b6 5c ab 3f 54 a0 90 bc 8e 56 82 53 62 4f 8b d7 09 c5 57 3f 77 9a f0 bb 8a 17 99 06 52 b2 8d 84 b3 49 b7 38 7b 9d 3b 3e bb e3 db e4 7e fc b1 77 00 00 00 00 00 7d 0f 9b fa 19 9b f0 11 e1 3e 7f 4e 67 0f 64 7e 8f 07 37 e9 e5 bf f2 76 f5 0f 85 f5 27 e7 ba 5e ec 3f 47 9f 2f a6 e4 7d 3f 9f e5 7d a3 58 83 00 00 00 00 00 00 00 00 00 00 02 a5 41 52 a5 24 3b 6c 7d 1d c7 be 7c f4 e0 aa 7c b3 a7 3e 02 e2 20 56 a6 a5 73 4c 6e cc c9 32 a4 84 fc ef 71 e3 ef a1 fa 1e 5a 97 d5 64 99 33 35 35 f4 c5 2f 95 c4 14 ca 86 4e 56 c4 b6 94 31 ca 19 32 17 13 9b 22 fc 5c b8 0e 26 b9 fb 9c d7 86 dc 5a 5e 64 19 0a cc 33 a5 9a 4d b9 c3 dc eb 19 f5 d7 2e df 20 76 e5 6e e0 00 00 00 00 0f a5 33 7e ff 00 cd f8 93 cb db e7 2e 5d ba 9f 0f b7 9d f6 f9 39 7f 77 8e ea 8f 5a Data Ascii: 6/T\?TVSbOW?wRI8{;>~w}>Ngd~7v'^?G/}?}XAR$;l}\|\|> VsLn2qZd355/NV12"\&Z^d3M. vn3~.]9wZ
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 69 40 50 00 00 00 00 00 3e f9 cd fa 6b 37 e4 06 fc 89 73 a9 9c eb be 5f d5 e9 be 7f d4 e8 bb 78 a4 cc f3 af 5c 64 f5 f3 6a 79 7a b6 dc 7a 6f 7e b7 c5 e1 6f 79 bb 86 60 00 00 00 00 00 00 00 00 00 00 54 a8 00 c9 ca ef 35 e7 05 d8 ed b1 b1 04 85 d2 d8 1b 69 77 27 a2 4d 77 6d db 66 73 36 8c dd 1d ad 33 0d 59 8c 78 ac c7 90 9e 21 5b 29 bb 8a c0 31 cb 8b 75 21 42 43 33 52 6b 2a 52 e2 5d 58 49 97 21 b5 35 e6 46 66 88 d2 dc ef 0e 52 e6 c3 0e a7 0c 13 0d 5b 8b 0a 14 05 a0 a1 40 00 00 00 01 fa 0d 9b f4 6e 6f c5 db 5f 2f 33 5c 8c 48 eb e8 1f 0f ed 66 cf 4e d3 97 0e 33 dd cb 5b b7 ae 67 4d c3 b7 0b f7 be 16 cf 77 90 49 80 00 00 00 00 00 00 00 00 00 01 52 a0 02 56 fa 03 3c e4 90 ea 26 b6 c4 60 a1 29 50 7a df e6 fe a7 6b e0 f6 57 f4 7f 1b b2 f5 f0 ec 2d 8c 68 71 99 8e Data Ascii: i@P>k7s_x\djyzzo~oy`T5iw'Mwmfs63Yx![)1u!BC3Rk*R]XI!5FfR[@no_/3\HfN3[gMwIRV<&`)PzkW-hq
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: 16 94 05 01 42 1b 8c 43 8a ae 7b 5c e9 bf c4 a5 f9 77 89 44 61 dc 61 98 69 c5 31 ea 71 f5 1e 2d 28 50 0c 75 be 5e bc 97 af 99 82 aa fd 78 96 e8 f9 2c f8 dc f5 29 7d 23 2f 16 ce 9e 2b 59 a9 be 78 55 9b 2f 27 a7 a2 f9 df 5f 69 cb a5 3e af c5 f3 7f 47 0b 3a 49 80 00 00 00 00 00 02 a5 c5 49 0e 82 6b 64 6f 65 cc 95 36 a4 a6 84 cf 37 c7 4f 1d 36 06 9f 2e 52 fd cb cb 81 78 2b 2e 22 f9 f9 ff 00 49 c2 33 b1 ef 11 e8 ac c8 14 2d d4 67 9c df 3e 5a e3 79 1b ad 35 b3 95 32 f6 ed d6 25 4c 44 65 4a 13 9d 64 75 e8 0a 16 94 d5 0b 51 42 ab b4 02 80 b2 a3 10 e3 aa 2f 67 41 95 b3 8e b9 38 a9 11 8e 61 5c 62 98 69 c6 31 aa 60 2c 2d 28 50 ae a4 9a eb fc 5d 78 cf a1 c2 92 15 dd fd 86 8c cc 57 c9 c7 c5 46 5c 3e a1 96 a3 5e 5d 4e 7f 3a e8 6f 8e bf 77 a8 f9 bf 47 33 87 b7 96 fa 7f Data Ascii: BC{\wDaai1q-(Pu^x,)}#/+YxU/'_i>G:IIkdoe67O6.Rx+."I3-g>Zy52%LDeJduQB/gA8a\bi1`,-(P]xWF\>^]N:owG3
2024-05-24 22:56:36 UTC	1369	IN	Data Raw: fe 68 99 b4 a9 d1 80 00 00 02 a5 4b c9 4c 8d 66 45 65 99 ca ce 33 e2 f3 4d b4 e7 a8 ef 3f 15 a6 f4 f5 48 ac 5e 1d be 6f f4 f0 e3 2e 7b 18 e9 cb e7 aa 3a e1 d0 57 0f 79 e5 78 07 2b d1 b8 31 f9 f4 c3 22 28 5b 59 09 0b 39 5d 8e 69 d3 d1 11 93 97 20 05 0a 16 94 66 8b 39 57 13 ee f2 dd 1a d9 ce b1 5d 05 6e b9 9c db 3a ce 7d 39 6c 8d 4d c4 75 bd 92 f7 00 4d 81 42 2a 9a 14 2d 65 85 a5 84 65 85 e6 a9 31 90 97 12 18 e4 14 84 8d 36 94 28 5a 00 3d 63 e3 7d 2f a5 bf 37 f7 b8 cd ac 8b df 2d fd 27 e7 b9 7a bf 37 fa 7f 32 99 9e af 9b fa 76 54 f9 98 f8 14 54 d4 ce ca ca 36 13 3f 5e c5 e3 2e 63 e3 eb 61 6f 1b 6f 75 99 80 00 00 02 e2 e2 53 22 6b 2c cc 56 69 9f 17 9e 66 ce e6 99 da 92 f9 f4 79 36 1c 91 a6 39 aa 72 25 b5 33 36 2c dc 83 63 73 2b 6f 56 d3 9e 7a 2f 2e d8 26 23 Data Ascii: hKLfEe3M?H^o.{:Wyx+1"([Y9]i f9W]n:}9lMuMB*-ee16(Z=c}/7-'z72vTT6?^.caoouS"k,Vify69r%36,cs+oVz/.&#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49769	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:38 UTC	878	OUT	POST /buyer/cart HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 94 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
2024-05-24 22:56:38 UTC	94	OUT	Data Raw: 7b 22 63 61 72 74 22 3a 7b 22 63 61 72 74 5f 74 6f 6b 65 6e 22 3a 22 22 7d 2c 22 63 6f 75 70 6f 6e 22 3a 7b 22 63 6f 75 70 6f 6e 5f 63 6f 64 65 22 3a 22 22 7d 2c 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 22 22 2c 22 63 75 72 72 65 6e 74 5f 70 72 6f 64 75 63 74 5f 69 64 22 3a 22 22 7d Data Ascii: {"cart":{"cart_token":""},"coupon":{"coupon_code":""},"country_id":"","current_product_id":""}
2024-05-24 22:56:38 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:38 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:38 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:38 UTC	1213	IN	Data Raw: 34 62 31 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 65 78 70 72 65 73 73 22 3a 7b 22 68 61 73 5f 69 6e 73 75 72 61 6e 63 65 22 3a 22 30 22 2c 22 69 6e 73 75 72 61 6e 63 65 5f 73 65 6c 65 63 74 22 3a 22 30 22 2c 22 69 73 5f 6d 61 74 63 68 22 3a 30 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 73 65 6c 65 63 74 65 64 22 3a 30 2c 22 6c 69 73 74 22 3a 5b 5d 7d 2c 22 63 61 72 74 22 3a 7b 22 74 79 70 65 22 3a 22 22 2c 22 74 6f 6b 65 6e 22 3a 22 37 64 32 31 38 38 39 64 31 39 34 38 64 35 39 61 35 32 34 30 65 63 34 38 38 30 38 33 32 39 64 66 22 2c 22 77 65 69 67 68 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f 61 6d 6f 75 6e 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f Data Ascii: 4b1{"code":0,"msg":"success","data":{"express":{"has_insurance":"0","insurance_select":"0","is_match":0,"error_code":0,"selected":0,"list":[]},"cart":{"type":"","token":"7d21889d1948d59a5240ec48808329df","weight":"0.00","product_amount":"0.00","product_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49770	157.240.252.13	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:38 UTC	1463	OUT	GET /signals/config/751867630178087?v=2.9.156&r=stable&domain=www.cravob.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C217%2C152%2C110%2C133%2C126%2C114 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:38 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-24 22:56:38 UTC	1730	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-24 22:56:38 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-24 22:56:38 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-05-24 22:56:38 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-05-24 22:56:38 UTC	1500	IN	Data Raw: 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 69 6e 20 4f 62 6a 65 63 74 28 62 29 29 72 65 74 75 72 6e 20 61 28 62 2c 63 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 68 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 Data Ascii: Symbol==="function"?Symbol.iterator:"@@iterator")in Object(b))return a(b,c);else throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),h=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")
2024-05-24 22:56:38 UTC	1500	IN	Data Raw: 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 Data Ascii: orts})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB
2024-05-24 22:56:38 UTC	1500	IN	Data Raw: 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 62 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 62 29 7b 69 66 28 Data Ascii: stanceof b))throw new TypeError("Cannot call a class as a function")}function h(a,b){if(!a)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return b&&(typeof b==="object"\|\|typeof b==="function")?b:a}function i(a,b){if(
2024-05-24 22:56:38 UTC	1500	IN	Data Raw: 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 Data Ascii: return!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="f
2024-05-24 22:56:38 UTC	1500	IN	Data Raw: 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 70 72 6f 68 Data Ascii: Modules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("fbevents.plugins.proh
2024-05-24 22:56:38 UTC	1500	IN	Data Raw: 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 Data Ascii: };if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49771	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:38 UTC	393	OUT	GET /uploader/35ba491724c524231c180060c6634fbcb3366865.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:38 UTC	706	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:38 GMT Content-Type: image/jpeg Content-Length: 122557 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2214d6bfc29077121919605a7bfa5f434ca66808_221" Content-MD5: K/Y9gxH/SeFcylalk/HgZA== ETag: "2BF63D8311FF49E15CCA56A593F1E064" Last-Modified: Wed, 09 Aug 2023 07:22:31 GMT x-oss-hash-crc64ecma: 13441064737030444594 x-oss-object-type: Normal x-oss-request-id: 66507445342C4831336B56A2 x-oss-server-time: 31 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42721 Expires: Sat, 25 May 2024 02:56:38 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e14f4d22f7e8-BNA
2024-05-24 22:56:38 UTC	663	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 e0 93 04 00 e8 03 00 00 e0 93 04 00 e8 03 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 e8 03 00 00 03 a0 04 00 01 00 00 00 46 02 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(if02100100FICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 02 46 03 e8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 02 03 08 01 09 ff c4 00 1b 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}FX
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1d 05 72 6b 5b 94 04 d6 26 62 2a 5a 7a b6 c0 c1 b5 d7 a9 d9 c8 be 2e 7b 9c 5b c6 5d 69 83 53 46 7d 21 5b 65 91 c6 d8 b5 76 cc e3 b1 da 92 69 fb 59 93 29 35 bf 9e 37 b9 9d 7d 9e 0c b7 43 9e d9 88 4c 3b fd 78 36 60 f1 ef 75 6b 66 d8 be 6f ad 19 86 f4 ab 3d 23 67 b8 68 00 00 00 f3 96 6c 1e 14 c5 b5 d5 31 c4 c1 38 1c 09 04 6c 1b 57 62 92 96 ac 0d 2f 47 a3 36 ed 8b 6a 59 8c 8c 77 e5 4b ca 4c fa a6 71 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 32 a0 54 f2 63 a2 1d d3 15 04 62 27 62 89 8f 30 d3 26 bb 8b 67 23 ea dc cd fb 7c 57 e6 08 66 5d 41 5c 9a f2 2f 04 8b 02 3a 96 f4 d5 b1 5a 0a fd ab dd 0b 5c d2 a3 df f3 1a 27 67 6a af 1b 11 9a bb d2 fb bc ee 11 68 fd 4d bc 95 6d 9c 6d ee 8c 79 Data Ascii: rk[&b*Zz.{[]iSF}![eviY)57}CL;x6`ukfo=#ghl18lWb/G6jYwKLq2Tcb'b0&g#\|Wf]A\/:Z\'gjhMmmy
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: 2a 46 bc 3c 5f 7c 77 63 78 ad 6d 34 6c 5a 24 c3 3a 4b 6d eb 5d 36 cc c4 d1 05 5b 47 d6 d7 4b eb df 17 82 5e 4d 8f aa 1d 52 8c 4e bf 28 95 52 48 99 c9 07 08 c3 22 16 6c f8 e6 36 31 c8 eb 5b 2f 0e 6c 99 af d8 62 4d a3 88 88 53 e1 16 8e 5b ba f3 98 73 77 51 5c 4e 05 2f d5 11 6d de e7 ef cf 41 e4 2a 9c 0f 51 48 d5 e9 63 4c 4a e2 cd 42 bc 58 61 16 ae 5e 7d 7b 1e ce 9c 26 5a 61 eb e7 c3 d1 e9 64 cd a6 2d 8a 5f a5 cc ad 67 c5 1f c7 ed db b0 ce c0 87 39 b7 d2 56 b1 ad ad 5c 79 9b 69 92 6e 9b 53 d3 f8 ee 00 00 00 00 00 00 00 00 00 00 00 01 06 79 63 36 0e fb 44 03 25 1b 1a 00 f7 d6 3c 97 90 47 1e 54 bc f9 9a 66 a9 5b 6d a8 7b 42 29 b5 51 f4 1e 59 97 8b a5 37 78 de b5 8d c9 5b 52 25 ae c1 5f 98 ce b2 6e 6b 18 6e 98 ad 7e 97 ac 5a be 7c 8c 95 c4 ef 09 a6 e4 96 b8 35 Data Ascii: F<_\|wcxm4lZ$:Km]6[GK^MRN(RH"l61[/lbMS[swQ\N/mAQHcLJBXa^}{&Zad-_g9V\yinSyc6D%<GTf[m{B)QY7x[R%_nkn~Z\|5
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: 80 00 00 00 00 00 00 00 00 00 02 1c 66 9c a2 c8 9e bb 52 0f 6f 4a a5 d5 e0 6a 9f 41 e6 7c b1 e3 3e 91 81 a5 bd c3 2d 60 d3 15 15 dd 7e b7 c5 6d 6c da 74 1d 0e e3 95 d4 b2 69 6e f5 c4 e9 35 f5 fe 2b 7d 32 a5 b5 ba da 5a cb 6e bd 78 ad d3 8f 27 1c 17 e1 86 78 d2 dc 71 58 5c 62 2d 06 b3 8b 77 1d e8 b4 92 b6 c7 67 99 e2 8a e6 3b d7 6d 31 b2 81 a4 e3 c3 e1 9f 67 5a 7b 8e 11 13 d2 8c 3a 35 33 dc f8 5d 0d 83 e7 f6 b1 36 31 e8 bf 77 c6 ea cf 4b 17 4f 42 43 7b 46 36 b9 ad 9e 97 cf dd 77 3c f5 b3 a9 e6 e4 5a 3c a3 25 9b 8f da ac 6e e0 91 d1 e8 6c ff 00 37 ea a0 77 b9 f5 ce 87 1e 23 a9 c7 8d da d4 c8 88 99 d5 de 9f e5 f4 aa 7d ff 00 23 79 f3 3e d6 9b b3 6d 30 ed 5a bb 1e 6e 7d a7 c3 93 db a7 69 75 23 b2 62 b6 ef f9 fb 67 43 ce f4 5a 30 39 5e e7 dc 5f 31 fa 7e bc 5f Data Ascii: fRoJjA\|>-`~mltin5+}2Znx'xqX\b-wg;m1gZ{:53]61wKOBC{F6w<Z<%nl7w#}#y>m0Zn}iu#bgCZ09^_1~_
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: 99 b9 b0 b0 5b 51 26 b4 bd 70 91 46 ec 57 d6 15 90 00 00 00 00 00 00 23 66 9e 70 ee f0 6c 3a 1b f6 6d 7d 8a e6 c6 be 95 f4 fe 5a 87 37 89 e2 7a 8f 5a 71 77 bc 57 74 79 b1 32 6b dd 62 d6 e8 49 cd 79 02 b7 19 6a 94 be c6 9d 7e eb a1 a9 3e 73 8c fd 75 be f2 9a 6a fe af 3e a3 ce de c6 da af ae f5 27 cb 14 c9 49 4d a2 cb ba ba 96 b3 f2 93 67 cb 59 2b c5 3b 1d b0 2b 3d 75 72 b3 e9 63 45 aa 71 ce da f4 e2 b5 5b 45 c3 88 3e 54 3b 8e fb 32 6e e6 73 57 e1 75 86 ba d8 c7 95 d1 d7 c3 e2 6e 63 56 dc ad 1d db 38 f8 d6 dc 69 3f 62 78 54 89 ef d8 c5 77 f5 5e 5f 6f fa 9f 9f cc 6d f2 b6 0f 9e f5 1d 59 74 f4 a6 2e c6 b0 f1 bf 42 d9 be 8b c9 6f ae 8f 9e c9 8b d5 b3 60 c1 e8 f1 e3 36 35 a9 d4 ed d8 35 f5 f5 7c 7a a9 7e 7d 75 d7 84 f6 d1 3a 7d 0b 45 f1 ec 6a 24 62 dc 4e c4 52 Data Ascii: [Q&pFW#fpl:m}Z7zZqwWty2kbIyj~>suj>'IMgY+;+=urcEq[E>T;2nsWuncV8i?bxTw^_omYt.Bo`655\|z~}u:}Ej$bNR
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: ad b5 bd 39 5b 5b f7 56 7b 76 b4 f3 31 e5 b9 e9 f4 35 e5 32 60 23 6b 9a aa 2f d7 38 f4 ed a3 4d d6 f9 b5 a4 6b 26 dd 96 84 cf 8f 9e d6 ad b3 4b 63 67 e4 c7 34 73 a5 f5 3c 64 d5 f1 7e b3 30 d9 13 4d 8f 92 93 a9 f3 ee 0b dc 26 3d 25 9b 0d fb 9d df 81 cb ab 43 d8 e6 69 ba de 8e 6c 78 b4 74 d2 6a d4 b8 d9 54 a5 ab e5 24 a5 d3 3c d6 5c 5b 63 bf e5 ab dc 4f 47 6d c7 9a cf 59 d7 14 bf 35 30 6e 84 8b 70 cf af 4a bd ed 9e 9f ce d9 fb fe 7e 4b 36 95 83 7f 8f c6 d3 db 8b 2f 4e 6c 49 45 79 de df 7e 6d 5c ce 8e 8e 07 23 b5 89 e7 7d 1e b6 e1 fa 08 ad 4d bb 95 67 5e 59 c6 27 1d 1d bb 38 af 9e d7 ca c8 e5 d2 be f4 bc b5 d6 75 f7 07 cd be bb 9b a7 d1 d6 5f 48 f8 fd 8b c0 fd b2 1b ad e7 2a 7d 5f 1d a7 eb b1 4d e6 7a 59 df 47 c2 e1 c6 de d7 7e 57 d4 cf cb 71 42 9c b5 0d 1d Data Ascii: 9[[V{v152`#k/8Mk&Kcg4s<d~0M&=%CilxtjT$<\[cOGmY50npJ~K6/NlIEy~m\#}Mg^Y'8u_H*}_MzYG~WqB
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: aa d5 65 a1 5d cc 7b 6e b6 00 00 00 00 00 00 03 e5 63 55 65 8f cf 5b c5 3a 99 36 a5 6b ec 3b e1 b4 c5 f5 61 7b c9 8a 5e f1 97 4c 9a 16 1e 5c c9 13 3b 18 79 e9 e5 ee 64 aa d6 f3 59 31 d8 eb 4e 82 93 19 6b 2b f2 a8 66 18 50 e0 58 ec 8a c9 8f 96 ce 09 cd 3d 89 b9 c5 d8 b6 4c a5 67 15 be d1 7d 89 9d 8c 91 11 30 89 c6 9c 51 9b fa 36 0e 87 17 63 74 79 13 75 9a c6 ce 2a 8e ee bd 27 a1 a9 9d a1 bb 27 a1 d2 9a d2 e8 6a b9 cb af 74 f7 6b 7c 6e c6 16 b6 79 ea 26 22 d8 e6 d7 e9 72 ac 5e cb e6 be 6d f0 9f 54 89 d7 d9 b5 13 70 c1 9a e0 da 71 ac 8f cf af d1 6a f5 63 cd 83 82 fc 72 33 ba 9a 99 7b ba ea 4f db 55 91 db 5a 66 52 8c f5 ca ae be 36 5c b5 4f 27 df 93 ad b6 b5 a2 f7 4b f1 a5 b6 bd 9d 54 6e 3c aa 25 63 cf 75 a5 52 ed 60 88 85 ac 13 5d a0 88 73 56 56 f8 96 8b 54 Data Ascii: e]{ncUe[:6k;a{^L\;ydY1Nk+fPX=Lg}0Q6ctyu*''jtk\|ny&"r^mTpqjcr3{OUZfR6\O'KTn<%cuR`]sVVT
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: 1f af 18 f1 37 75 66 a2 65 31 e4 e9 ae 4a 36 df 36 81 a1 d3 d7 91 92 0d 1e 93 b4 ed 3b e0 d4 fe 83 ce 5d f8 fd ba 16 d6 b6 89 c1 d1 d6 5e c3 cc 5c f0 eb ea fe 67 a2 8e ae 5f 44 6f 79 6f 5e 79 5f 57 aa 3a 3c f9 ee 7e fe 98 f4 be 6b 60 79 bf 4b 89 b5 ab ad bd a7 cf e9 5c 9e d5 07 8b e8 a0 f9 7d ac 7c 79 3e 44 e0 43 b7 2d 6e 1e 87 cf 6c ef 43 e4 6f 7a d4 d6 5e 3b e8 10 ba 3d 4f bb 1a 96 1e ff 00 97 d7 3b db d6 ae bf 0a 5b 1e b3 36 1e a9 bc 0f 27 ad 4e f3 de 8a 2f 4f 7b 1f 57 6b e4 d3 21 38 b4 9f b2 f8 0f b1 6f b3 08 9f aa cc c3 62 cb a8 f8 61 1f 01 f4 55 22 7a fc 1b 4c b2 00 00 00 00 00 00 00 00 00 00 00 3e 15 43 53 ca 0e 71 c6 c3 74 46 4c b3 4c 9e 62 89 f4 7d e9 be b2 57 10 ea 57 91 c4 fa 64 9d 36 9e 31 58 29 a6 8a ad f4 36 a6 d7 ba 36 b5 26 b2 62 ad ed 6a Data Ascii: 7ufe1J66;]^\g_Doyo^y_W:<~k`yK\}\|y>DC-nlCoz^;=O;[6'N/O{Wk!8obaU"zL>CSqtFLLb}WWd61X)66&bj
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: d9 75 76 f5 87 53 93 e7 ff 00 49 e7 34 2f 8e f6 d2 7a 7b 33 74 bf d2 bf 65 3e ab 6c a3 25 c6 ae fb 3a 61 dd 29 62 68 c2 a2 3b a5 a8 ee f1 ad dd 4e 44 86 1a d1 b9 5d d8 2e 5f 4b a7 4b 7b b6 6b 29 59 9d 44 cd 5d 75 60 43 aa d6 ea 38 d5 3e 6f 43 7d 1b 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 67 93 cd 49 4c 93 8a 75 e6 ae 87 94 6d 1d b1 6f 57 e3 5f 73 63 8e 57 ae d3 e7 39 9d 79 59 c9 99 e1 92 91 75 b7 19 9e 79 71 ca 75 74 7b f2 62 ea ad f0 74 36 fa 34 f2 f0 c3 97 2a 5f 6f 19 39 f5 2e fe cb cb e5 f4 34 b2 ad 83 b2 69 93 5c 59 b9 b5 7b 63 1c e7 91 fa 07 ab b8 bb f4 6e 97 1a e1 a7 d4 f3 df af f1 1e 78 f3 7e a6 ad c4 f4 5b 0a b1 f2 27 18 d7 20 9f 94 74 bb ce 93 38 8d aa 56 cb 69 83 44 4e 58 85 cd 8e 4f 6f 53 22 18 97 a6 35 32 e1 68 ef 5d 22 30 Data Ascii: uvSI4/z{3te>l%:a)bh;ND]._KK{k)YD]u`C8>oC}gILumoW_scW9yYuyqut{bt64*_o9.4i\Y{cnx~[' t8ViDNXOoS"52h]"0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49772	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:38 UTC	393	OUT	GET /uploader/3474c0a0e52dc1984476bef3a986c4b06b9ce11e.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:38 UTC	706	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:38 GMT Content-Type: image/jpeg Content-Length: 110027 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="22100b1940199bdf78d7e3c1bdb91b7d88877806_221" Content-MD5: bzg3VafdnqDfE4hx2B2tKg== ETag: "6F383755A7DD9EA0DF138871D81DAD2A" Last-Modified: Wed, 09 Aug 2023 07:22:25 GMT x-oss-hash-crc64ecma: 11964597626529005413 x-oss-object-type: Normal x-oss-request-id: 66507445D561043631474AE2 x-oss-server-time: 32 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42721 Expires: Sat, 25 May 2024 02:56:38 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e14f6df0f7cc-BNA
2024-05-24 22:56:38 UTC	663	IN	Data Raw: ff d8 ff e1 00 22 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 12 01 03 00 01 00 00 00 01 00 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 5f 63 70 72 74 00 00 01 4c 00 00 00 0c 77 74 70 74 00 00 01 58 00 00 00 14 72 58 59 5a 00 00 01 6c 00 00 00 14 67 58 59 5a 00 00 01 80 00 00 00 14 62 58 59 5a 00 00 01 Data Ascii: "ExifII*ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc_cprtLwtptXrXYZlgXYZbXYZ
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: 09 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 0a 94 34 e7 2f b9 cc 33 98 cd e6 8e 5d bc ce b9 96 73 a7 24 74 c7 d5 c7 d2 6c d8 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 42 a4 67 32 73 07 30 73 27 32 72 e7 30 73 47 2e 73 35 38 26 4b 6c c7 53 e3 f4 6d 3c bd f6 1b 3e 7f f4 bc 78 17 96 19 e6 21 0e e6 fb 37 ea 0c df aa 0e bc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 1c b9 cd 6b 98 39 86 73 07 30 73 27 30 73 07 3e 46 37 28 00 00 00 5f 9b 21 97 Data Ascii: ,4/3]s$tleBg2s0s'2r0sG.s58&KlSm<>x!7k9s0s'0s>F7(_!
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: 28 59 53 42 80 00 00 05 4a 00 00 00 00 00 00 00 00 00 00 00 3d 26 6b 81 30 8a 92 17 c8 01 6d 2c 28 9b 8d b1 ee 32 f4 3c ac d3 34 98 94 a9 93 ab 57 7c c4 67 39 55 bd 36 09 b4 d2 9c c9 a5 da d8 b2 2c 8e 7d 7d 52 f7 1b 3c 89 a1 39 5c dd 19 73 30 cd 42 f3 d1 81 1d a6 ce dd 06 ce 9b 78 68 69 1a 2c aa 8d 96 22 58 ed 35 4c 95 ca 0c cb 4b f6 aa 7a 5e e7 4e cd b9 aa e1 df 14 d6 eb 59 51 af 66 0b 70 8c 4b 9c 73 1f 72 12 26 00 00 00 00 00 02 fc df 47 67 09 8b cd 6d 00 00 00 00 00 00 00 00 00 00 00 7a b4 d7 9d 1a c0 0b b1 2e 2e 2e 2d a5 c5 d7 37 36 b8 ee 25 ee 0d e7 ce 40 e6 49 8c a3 95 9b d7 23 6f 8d 46 77 93 2b d0 37 39 4a 9e 65 c4 54 bf 2a 4c 64 e7 4b 9d 2c 6c 6e 74 de 57 15 ad bb 12 6e 4c 5c 48 e7 7a e8 51 b9 45 e4 08 c4 ad c6 31 4c db 4f 13 7e b3 31 21 97 b5 00 Data Ascii: (YSBJ=&k0m,(2<4W\|g9U6,}}R<9\s0Bxhi,"X5LKz^NYQfpKsr&Ggmz...-76%@I#oFw+79JeT*LdK,lntWnL\HzQE1LO~1!
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: 41 20 05 0c 72 c2 a0 b4 c8 2f 2a 0a 14 22 23 2d 24 2f d5 f8 16 ea d8 7a 79 e9 07 87 1f 48 ea d9 6e 31 c4 6b e7 ee 5d a7 a6 67 cb f6 c5 d1 6e e4 a5 22 b5 dd b8 5f 55 6d 4d 59 69 81 e8 e1 3f 5e 3b 6c be 84 c2 ac e3 f1 87 b8 00 00 00 00 00 00 00 03 ee 29 af 97 75 c0 0d 91 5c 65 70 fa 9d 57 cc fe 93 ad ed f0 f9 af a7 f8 0a 00 56 a6 a0 00 00 00 06 83 18 aa 97 8c c1 49 34 c0 ae d3 67 be f9 fd f8 1f 77 1e b7 c1 e9 8a 9c c7 bb cd f5 67 f3 2f d3 eb 7d 7c b6 9d 78 7c ab fb bf 8b 0d 48 02 52 72 e0 0b 4c 70 54 a1 61 29 29 50 50 16 ea 2c 46 54 bc bf 55 33 73 7d 2e 73 b5 22 2c 36 fa de 4b c6 73 7c cb 97 7c be 1d 73 3d 1c 32 3c 7d a9 c7 be 0f af 85 99 b9 1c 3a 53 76 da e7 4e d9 0e e5 3a f0 d8 f4 8d e9 99 4e 48 e6 ea 40 00 00 00 00 00 00 00 01 f7 8c d7 ca 47 9f 02 a5 13 Data Ascii: A r/*"#-$/zyHn1k]gn"_UmMYi?^;l)u\epWVI4gwg/}\|x\|HRrLpTa))PP,FTU3s}.s",6Ks\|\|s=2<}:SvN:NH@G
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: fe 67 ab 81 f4 72 e5 7e 87 3f 4d fc bf d4 f3 af d0 fc ee 4b db c3 ba f3 f4 e2 bd 9c 39 9f 77 8e ed a3 28 50 8c 8c 97 57 60 59 a8 b1 52 4d 54 12 e3 71 2d 79 b2 26 29 49 4e 7f 2b 07 0c 4b ca ec d5 b5 ce ba 52 ba b0 66 d7 5b 7c 44 6b 8b 75 5d 9b b1 62 9a ac a9 aa ca e2 ca 35 5c c0 cd a6 ba 09 df 52 86 a7 57 e3 cf 7a ce 83 70 00 00 00 00 05 4f d4 49 af 87 8f 2f 24 55 c5 53 82 40 50 14 25 d6 36 15 20 00 00 02 ba 66 cb 94 9c b6 f2 d9 76 5e 7e d9 dc ef 89 f5 72 c4 e9 c8 c5 d7 49 e1 f4 fa 77 9b a6 bf 85 f9 bf d6 f2 7d 3b f8 cf b7 e4 df 6b c5 df fc 3f 5c d9 d7 9f f6 79 bc bb ee 78 fa 6f 17 7e 57 e9 f9 37 fe 1e fa 1f 77 9b af f1 fa f9 4f 5f 8f 96 f7 79 c5 4a 96 82 22 c2 5d 5f 81 66 a3 c5 a4 85 da ca 86 71 1d 23 33 4b c8 32 b4 65 bb 21 35 52 80 b8 a1 b6 32 4c 4d 6a Data Ascii: gr~?MK9w(PW`YRMTq-y&)IN+KRf[\|Dku]b5\RWzpOI/$US@P%6 fv^~rIw};k?\yxo~W7wO_yJ"]_fq#3K2e!5R2LMj
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: 29 ab a1 f4 36 74 f7 bf 3d f9 b5 6f 92 dc 79 8d 4c 97 3e cb cf 7d 1e 2f ac 3c bf b7 1d 47 cc fa be 71 f4 be 66 45 e5 4c e9 df be a2 b7 9a da 83 f3 d7 cd d3 cd bd 7c 3d 20 d9 4d 68 cf 20 ac c0 c6 cf cf e8 e9 7e 5f d2 ed 3e 3f bf 6f e3 f5 57 37 80 fd 0f c4 db 79 7d 7d 3f 8f dd 81 df 94 5d 27 69 c7 30 fb f1 d5 fb 7c ba 3f a3 e2 d7 7a bc b8 1b 97 b7 30 dd 45 ed 0c fc cc d3 37 77 89 b8 f2 aa 8f a9 78 f5 f2 9e dc bc ae f1 80 00 00 00 00 db 66 fe be e6 fc 14 78 19 ce ea 98 90 9c a9 43 60 54 ec cd 71 c2 d4 d8 00 00 00 00 00 00 00 00 00 00 00 02 a5 4b c1 5d 5c 01 69 b5 87 d4 93 bf 48 f3 ed 2c 74 d1 54 f8 9d 47 8c 5c 79 95 cd d3 be 99 37 a9 b8 e0 0c cf 2f b2 5f 5f 8f a4 d9 c8 3e 8f e5 bf 49 4d 43 ab 4e 0b 8f 4f ce 3f 44 6e ab 9f a7 1b a9 ad f1 e4 55 3e 6a 47 5b 59 Data Ascii: )6t=oyL>}/<GqfEL\|= Mh ~_>?oW7y}}?]'i0\|?z0E7wxfxC`TqK]\iH,tTG\y7/__>IMCNO?DnU>jG[Y
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: c4 a6 36 a2 2f d6 54 b6 5c ab 3f 54 a0 90 bc 8e 56 82 53 62 4f 8b d7 09 c5 57 3f 77 9a f0 bb 8a 17 99 06 52 b2 8d 84 b3 49 b7 38 7b 9d 3b 3e bb e3 db e4 7e fc b1 77 00 00 00 00 00 7d 0f 9b fa 19 9b f0 11 e1 3e 7f 4e 67 0f 64 7e 8f 07 37 e9 e5 bf f2 76 f5 0f 85 f5 27 e7 ba 5e ec 3f 47 9f 2f a6 e4 7d 3f 9f e5 7d a3 58 83 00 00 00 00 00 00 00 00 00 00 02 a5 41 52 a5 24 3b 6c 7d 1d c7 be 7c f4 e0 aa 7c b3 a7 3e 02 e2 20 56 a6 a5 73 4c 6e cc c9 32 a4 84 fc ef 71 e3 ef a1 fa 1e 5a 97 d5 64 99 33 35 35 f4 c5 2f 95 c4 14 ca 86 4e 56 c4 b6 94 31 ca 19 32 17 13 9b 22 fc 5c b8 0e 26 b9 fb 9c d7 86 dc 5a 5e 64 19 0a cc 33 a5 9a 4d b9 c3 dc eb 19 f5 d7 2e df 20 76 e5 6e e0 00 00 00 00 0f a5 33 7e ff 00 cd f8 93 cb db e7 2e 5d ba 9f 0f b7 9d f6 f9 39 7f 77 8e ea 8f 5a Data Ascii: 6/T\?TVSbOW?wRI8{;>~w}>Ngd~7v'^?G/}?}XAR$;l}\|\|> VsLn2qZd355/NV12"\&Z^d3M. vn3~.]9wZ
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: 69 40 50 00 00 00 00 00 3e f9 cd fa 6b 37 e4 06 fc 89 73 a9 9c eb be 5f d5 e9 be 7f d4 e8 bb 78 a4 cc f3 af 5c 64 f5 f3 6a 79 7a b6 dc 7a 6f 7e b7 c5 e1 6f 79 bb 86 60 00 00 00 00 00 00 00 00 00 00 54 a8 00 c9 ca ef 35 e7 05 d8 ed b1 b1 04 85 d2 d8 1b 69 77 27 a2 4d 77 6d db 66 73 36 8c dd 1d ad 33 0d 59 8c 78 ac c7 90 9e 21 5b 29 bb 8a c0 31 cb 8b 75 21 42 43 33 52 6b 2a 52 e2 5d 58 49 97 21 b5 35 e6 46 66 88 d2 dc ef 0e 52 e6 c3 0e a7 0c 13 0d 5b 8b 0a 14 05 a0 a1 40 00 00 00 01 fa 0d 9b f4 6e 6f c5 db 5f 2f 33 5c 8c 48 eb e8 1f 0f ed 66 cf 4e d3 97 0e 33 dd cb 5b b7 ae 67 4d c3 b7 0b f7 be 16 cf 77 90 49 80 00 00 00 00 00 00 00 00 00 01 52 a0 02 56 fa 03 3c e4 90 ea 26 b6 c4 60 a1 29 50 7a df e6 fe a7 6b e0 f6 57 f4 7f 1b b2 f5 f0 ec 2d 8c 68 71 99 8e Data Ascii: i@P>k7s_x\djyzzo~oy`T5iw'Mwmfs63Yx![)1u!BC3Rk*R]XI!5FfR[@no_/3\HfN3[gMwIRV<&`)PzkW-hq
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: 16 94 05 01 42 1b 8c 43 8a ae 7b 5c e9 bf c4 a5 f9 77 89 44 61 dc 61 98 69 c5 31 ea 71 f5 1e 2d 28 50 0c 75 be 5e bc 97 af 99 82 aa fd 78 96 e8 f9 2c f8 dc f5 29 7d 23 2f 16 ce 9e 2b 59 a9 be 78 55 9b 2f 27 a7 a2 f9 df 5f 69 cb a5 3e af c5 f3 7f 47 0b 3a 49 80 00 00 00 00 00 02 a5 c5 49 0e 82 6b 64 6f 65 cc 95 36 a4 a6 84 cf 37 c7 4f 1d 36 06 9f 2e 52 fd cb cb 81 78 2b 2e 22 f9 f9 ff 00 49 c2 33 b1 ef 11 e8 ac c8 14 2d d4 67 9c df 3e 5a e3 79 1b ad 35 b3 95 32 f6 ed d6 25 4c 44 65 4a 13 9d 64 75 e8 0a 16 94 d5 0b 51 42 ab b4 02 80 b2 a3 10 e3 aa 2f 67 41 95 b3 8e b9 38 a9 11 8e 61 5c 62 98 69 c6 31 aa 60 2c 2d 28 50 ae a4 9a eb fc 5d 78 cf a1 c2 92 15 dd fd 86 8c cc 57 c9 c7 c5 46 5c 3e a1 96 a3 5e 5d 4e 7f 3a e8 6f 8e bf 77 a8 f9 bf 47 33 87 b7 96 fa 7f Data Ascii: BC{\wDaai1q-(Pu^x,)}#/+YxU/'_i>G:IIkdoe67O6.Rx+."I3-g>Zy52%LDeJduQB/gA8a\bi1`,-(P]xWF\>^]N:owG3
2024-05-24 22:56:38 UTC	1369	IN	Data Raw: fe 68 99 b4 a9 d1 80 00 00 02 a5 4b c9 4c 8d 66 45 65 99 ca ce 33 e2 f3 4d b4 e7 a8 ef 3f 15 a6 f4 f5 48 ac 5e 1d be 6f f4 f0 e3 2e 7b 18 e9 cb e7 aa 3a e1 d0 57 0f 79 e5 78 07 2b d1 b8 31 f9 f4 c3 22 28 5b 59 09 0b 39 5d 8e 69 d3 d1 11 93 97 20 05 0a 16 94 66 8b 39 57 13 ee f2 dd 1a d9 ce b1 5d 05 6e b9 9c db 3a ce 7d 39 6c 8d 4d c4 75 bd 92 f7 00 4d 81 42 2a 9a 14 2d 65 85 a5 84 65 85 e6 a9 31 90 97 12 18 e4 14 84 8d 36 94 28 5a 00 3d 63 e3 7d 2f a5 bf 37 f7 b8 cd ac 8b df 2d fd 27 e7 b9 7a bf 37 fa 7f 32 99 9e af 9b fa 76 54 f9 98 f8 14 54 d4 ce ca ca 36 13 3f 5e c5 e3 2e 63 e3 eb 61 6f 1b 6f 75 99 80 00 00 02 e2 e2 53 22 6b 2c cc 56 69 9f 17 9e 66 ce e6 99 da 92 f9 f4 79 36 1c 91 a6 39 aa 72 25 b5 33 36 2c dc 83 63 73 2b 6f 56 d3 9e 7a 2f 2e d8 26 23 Data Ascii: hKLfEe3M?H^o.{:Wyx+1"([Y9]i f9W]n:}9lMuMB*-ee16(Z=c}/7-'z72vTT6?^.caoouS"k,Vify69r%36,cs+oVz/.&#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49775	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:38 UTC	555	OUT	GET /buyer/user/user-capi HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
2024-05-24 22:56:39 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:39 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:39 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:39 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 36 3a 33 39 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:56:39"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49776	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:38 UTC	559	OUT	GET /buyer/user/select-coupon HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
2024-05-24 22:56:39 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:39 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:39 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:39 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 36 3a 33 39 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:56:39"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49777	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:38 UTC	885	OUT	GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2F&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=index&ts=1716591392527&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2F&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
2024-05-24 22:56:39 UTC	147	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:39 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close
2024-05-24 22:56:39 UTC	81	IN	Data Raw: 34 36 0d 0a 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 64 68 41 51 41 42 41 50 41 41 41 4d 50 44 77 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 46data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49778	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:38 UTC	545	OUT	GET /buyer/cart HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
2024-05-24 22:56:39 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:39 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:39 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:39 UTC	1213	IN	Data Raw: 34 62 31 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 65 78 70 72 65 73 73 22 3a 7b 22 68 61 73 5f 69 6e 73 75 72 61 6e 63 65 22 3a 22 30 22 2c 22 69 6e 73 75 72 61 6e 63 65 5f 73 65 6c 65 63 74 22 3a 22 30 22 2c 22 69 73 5f 6d 61 74 63 68 22 3a 30 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 73 65 6c 65 63 74 65 64 22 3a 30 2c 22 6c 69 73 74 22 3a 5b 5d 7d 2c 22 63 61 72 74 22 3a 7b 22 74 79 70 65 22 3a 22 22 2c 22 74 6f 6b 65 6e 22 3a 22 37 64 32 31 38 38 39 64 31 39 34 38 64 35 39 61 35 32 34 30 65 63 34 38 38 30 38 33 32 39 64 66 22 2c 22 77 65 69 67 68 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f 61 6d 6f 75 6e 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f Data Ascii: 4b1{"code":0,"msg":"success","data":{"express":{"has_insurance":"0","insurance_select":"0","is_match":0,"error_code":0,"selected":0,"list":[]},"cart":{"type":"","token":"7d21889d1948d59a5240ec48808329df","weight":"0.00","product_amount":"0.00","product_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49779	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:39 UTC	894	OUT	POST /buyer/express/free-express HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 32 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
2024-05-24 22:56:39 UTC	32	OUT	Data Raw: 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 22 22 2c 22 74 6f 74 61 6c 22 3a 22 30 2e 30 30 22 7d Data Ascii: {"country_id":"","total":"0.00"}
2024-05-24 22:56:39 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:39 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:39 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:39 UTC	82	IN	Data Raw: 34 37 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 76 61 6c 22 3a 30 7d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 36 3a 33 39 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 47{"code":0,"msg":"success","data":{"val":0},"now":"2024-05-25 06:56:39"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49781	157.240.252.13	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:39 UTC	1463	OUT	GET /signals/config/758694462259787?v=2.9.156&r=stable&domain=www.cravob.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C217%2C152%2C110%2C133%2C126%2C114 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:39 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-24 22:56:39 UTC	1731	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-24 22:56:39 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-24 22:56:39 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-05-24 22:56:39 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-05-24 22:56:39 UTC	1500	IN	Data Raw: 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 69 6e 20 4f 62 6a 65 63 74 28 62 29 29 72 65 74 75 72 6e 20 61 28 62 2c 63 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 68 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 Data Ascii: Symbol==="function"?Symbol.iterator:"@@iterator")in Object(b))return a(b,c);else throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),h=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")
2024-05-24 22:56:39 UTC	1500	IN	Data Raw: 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 Data Ascii: orts})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB
2024-05-24 22:56:39 UTC	1500	IN	Data Raw: 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 62 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 62 29 7b 69 66 28 Data Ascii: stanceof b))throw new TypeError("Cannot call a class as a function")}function h(a,b){if(!a)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return b&&(typeof b==="object"\|\|typeof b==="function")?b:a}function i(a,b){if(
2024-05-24 22:56:39 UTC	1500	IN	Data Raw: 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 Data Ascii: return!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="f
2024-05-24 22:56:39 UTC	1500	IN	Data Raw: 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 70 72 6f 68 Data Ascii: Modules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("fbevents.plugins.proh
2024-05-24 22:56:39 UTC	1500	IN	Data Raw: 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 Data Ascii: };if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49780	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:40 UTC	561	OUT	GET /buyer/express/free-express HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}
2024-05-24 22:56:40 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:40 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:40 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:40 UTC	82	IN	Data Raw: 34 37 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 76 61 6c 22 3a 30 7d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 36 3a 34 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 47{"code":0,"msg":"success","data":{"val":0},"now":"2024-05-25 06:56:40"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49783	157.240.252.13	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:40 UTC	1463	OUT	GET /signals/config/270010499437007?v=2.9.156&r=stable&domain=www.cravob.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C184%2C183%2C185%2C190%2C191%2C192%2C188%2C180%2C122%2C150%2C179%2C181%2C113%2C144%2C135%2C139%2C119%2C174%2C216%2C106%2C217%2C152%2C110%2C133%2C126%2C114 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:41 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-24 22:56:41 UTC	1731	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-24 22:56:41 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-24 22:56:41 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-05-24 22:56:41 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-05-24 22:56:41 UTC	1500	IN	Data Raw: 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 69 6e 20 4f 62 6a 65 63 74 28 62 29 29 72 65 74 75 72 6e 20 61 28 62 2c 63 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 68 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 Data Ascii: Symbol==="function"?Symbol.iterator:"@@iterator")in Object(b))return a(b,c);else throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),h=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")
2024-05-24 22:56:41 UTC	900	IN	Data Raw: 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 Data Ascii: orts})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB
2024-05-24 22:56:41 UTC	1500	IN	Data Raw: 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 Data Ascii: ModuleRegistered("fbevents.plugins.iwlbootstrapper",function(){return e.exports})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance
2024-05-24 22:56:41 UTC	1500	IN	Data Raw: 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 63 6f 6f 6b 69 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 Data Ascii: duleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("fbevents.plugins.cookie",function(){return e.exports})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.p
2024-05-24 22:56:41 UTC	1500	IN	Data Raw: 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 Data Ascii: };e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correct
2024-05-24 22:56:41 UTC	1500	IN	Data Raw: 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c Data Ascii: ){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49788	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:42 UTC	1112	OUT	GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400300&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:42 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=97, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:42 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49789	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:42 UTC	1227	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400300&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:42 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x1e56ca29f3892d0e","source_keys":["1","2"]},{"key_piece":"0x30408da2837dfb7e","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:56:42 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:56:42 UTC	1786	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:56:42 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49787	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:42 UTC	1112	OUT	GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400303&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:42 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=90, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:42 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49792	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:42 UTC	1222	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400303&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:42 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0xbb4fa5585ce11ee5","source_keys":["1","2"]},{"key_piece":"0xad62cbaed5dcda6b","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:56:42 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:56:42 UTC	1786	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:56:42 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49791	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:42 UTC	1112	OUT	GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400304&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:42 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=92, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:42 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49790	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:42 UTC	1222	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400304&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:42 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x574c259545720cd1","source_keys":["1","2"]},{"key_piece":"0xdb8fa5999d29a54c","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:56:42 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:56:42 UTC	1786	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:56:42 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49797	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:43 UTC	1112	OUT	GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400306&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:43 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:43 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49796	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:43 UTC	1222	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400306&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:43 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x4172baf88b225bc1","source_keys":["1","2"]},{"key_piece":"0x0200d14e8dc1bf6f","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:56:43 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:56:43 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:56:43 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49798	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:43 UTC	878	OUT	GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400303&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:43 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:43 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49800	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:43 UTC	878	OUT	GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400304&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:43 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:43 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49803	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:43 UTC	878	OUT	GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400300&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:43 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:43 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49799	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:43 UTC	915	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400300&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:43 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:56:43 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49802	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:43 UTC	915	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400303&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:43 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:56:43 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49801	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:43 UTC	915	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400304&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:43 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:56:43 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49806	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:44 UTC	878	OUT	GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400306&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:44 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:44 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49805	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:44 UTC	915	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2F&rl=&if=false&ts=1716591400306&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591392884&coo=false&dpo=&eid=r601dtvfvfhPageView1716591390112&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:44 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:56:44 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49807	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:46 UTC	880	OUT	GET /categories HTTP/1.1 Host: www.cravob.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
2024-05-24 22:56:46 UTC	302	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:46 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:46 UTC	16082	IN	Data Raw: 31 66 66 34 38 0d 0a 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 67 65 6e 65 72 61 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 41 6d 61 7a 6f 6e 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c Data Ascii: 1ff48 <!DOCTYPE html><html lang="en" class="general"><head> <meta charset="UTF-8"> <meta name="keywords" content="Amazon"> <titl
2024-05-24 22:56:46 UTC	16384	IN	Data Raw: 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 6f 6e 74 73 65 72 72 61 74 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 73 68 6f 70 79 6d 6e 2e 63 6f 6d 2f 6c 69 71 75 69 64 2f 62 75 79 65 72 2f 70 75 62 6c 69 63 2f 63 73 73 2f 66 6f 6e 74 2f 4d 6f 6e 74 73 65 72 72 61 74 2d 53 65 6d 69 42 6f 6c 64 2e 74 74 66 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 61 70 65 79 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 73 68 6f 70 79 6d 6e 2e 63 6f 6d 2f 6c 69 71 75 69 64 2f 62 75 79 65 72 2f 70 Data Ascii: 00;font-style:normal}@font-face{font-family:Montserrat;src:url(https://fonts.shopymn.com/liquid/buyer/public/css/font/Montserrat-SemiBold.ttf);font-weight:700;font-style:normal}@font-face{font-family:Arapey;src:url(https://fonts.shopymn.com/liquid/buyer/p
2024-05-24 22:56:46 UTC	16384	IN	Data Raw: 6e 74 2d 6d 61 69 6e 20 2e 6d 79 2d 6f 72 64 65 72 73 2d 63 6f 6e 74 65 6e 74 20 2e 6f 72 64 65 72 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 74 6f 74 61 6c 2d 70 72 69 63 65 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 72 65 63 65 6e 74 6c 79 2d 6f 72 64 65 72 73 2d 62 6f 78 20 2e 6f 72 64 65 72 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 72 65 63 65 6e 74 6c 79 2d 6f 72 64 65 72 73 2d 62 6f 78 20 2e 6f 72 64 65 72 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 6f 70 65 72 61 74 69 6f 6e 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 72 65 63 65 Data Ascii: nt-main .my-orders-content .order-box-content .table-content .total-price,.account-main .recently-orders-box .order-box-content .table-content .information,.account-main .recently-orders-box .order-box-content .table-content .operation,.account-main .rece
2024-05-24 22:56:46 UTC	16384	IN	Data Raw: 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 3a 68 6f 76 65 72 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 61 63 63 6f 75 6e 74 2d 73 65 63 75 72 69 74 79 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 69 74 79 2d 70 61 73 73 77 6f 72 64 20 2e 73 65 63 75 72 69 74 79 2d 62 6f 78 20 2e 73 65 63 75 72 69 74 79 2d 69 6e 70 75 74 2d 62 6f 78 2d 72 6f 77 20 73 65 6c 65 63 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 36 36 7d 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 61 63 63 6f 75 6e 74 2d 73 65 63 75 72 69 74 79 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 69 74 79 2d 65 6d 61 69 6c 20 2e 73 65 63 75 72 69 74 79 2d 62 6f 78 20 2e 73 65 63 75 72 69 74 79 2d 69 6e 70 75 74 2d 62 6f 78 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 Data Ascii: pe=checkbox]):hover,.account-main .account-security-content .security-password .security-box .security-input-box-row select:hover{border-color:#666}.account-main .account-security-content .security-email .security-box .security-input-box input:not([type=c
2024-05-24 22:56:46 UTC	16384	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 63 6f 75 70 6f 6e 5f 73 65 6c 65 63 74 65 64 2e 70 6e 67 29 7d 2e 6d 79 2d 63 6f 75 70 6f 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 65 6d 2e 73 65 6c 65 63 74 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 63 6f 75 70 6f 6e 5f 73 65 6c 65 63 74 65 64 2e 70 6e 67 29 7d 2e 6d 79 2d 63 6f 75 70 6f 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 65 6d 2e 65 78 70 69 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 63 6f 75 70 6f 6e 5f 64 69 73 61 62 6c 65 64 2e Data Ascii: -image:url(../img/coupon_selected.png)}.my-coupon-content .coupon-item-content .coupon-item.selected{background-image:url(../img/coupon_selected.png)}.my-coupon-content .coupon-item-content .coupon-item.expired{background-image:url(../img/coupon_disabled.
2024-05-24 22:56:46 UTC	16384	IN	Data Raw: 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 76 77 20 2d 20 33 32 70 78 29 7d 7d 0a 2e 62 6c 6f 67 2d 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 63 6f 6c 6f 72 3a 23 32 36 32 36 32 36 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 33 32 70 78 20 35 36 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 32 36 34 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 67 61 70 3a 33 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 66 6f Data Ascii: sform:translateX(-50%);width:calc(100vw - 32px)}}.blog-section{display:flex;text-align:left;color:#262626;padding:20px 32px 56px;max-width:1264px;box-sizing:border-box;margin:0 auto;gap:32px;font-size:20px;line-height:1.4;justify-content:space-between;fo
2024-05-24 22:56:46 UTC	16384	IN	Data Raw: 72 64 65 72 2d 77 69 64 74 68 3a 38 70 78 20 38 70 78 20 30 20 38 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 2c 38 70 78 29 3b 6c 65 66 74 3a 35 36 70 78 7d 2e 63 61 72 74 6c 69 73 74 2d 64 69 73 63 6f 75 6e 74 2d 74 69 70 73 2e 64 69 73 63 6f 75 6e 74 2d 74 69 70 73 2d 2d 73 68 6f 77 7b 6f 70 61 63 69 74 79 3a 31 3b 7a 2d 69 6e 64 65 78 3a 32 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 58 28 32 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 2d 31 30 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 58 28 32 30 64 65 67 29 20 73 63 61 6c 65 Data Ascii: rder-width:8px 8px 0 8px;content:"";position:absolute;bottom:0;transform:translate(0,8px);left:56px}.cartlist-discount-tips.discount-tips--show{opacity:1;z-index:2;-webkit-transform:rotateX(20deg) scale(1) translate(0,-100%);transform:rotateX(20deg) scale
2024-05-24 22:56:46 UTC	16384	IN	Data Raw: 65 6e 74 20 2e 61 63 74 69 76 65 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 63 6f 6c 6f 72 50 69 65 63 65 4c 69 73 74 20 2e 63 6f 6c 6f 72 50 69 63 65 2d 6c 69 73 74 20 2e 73 77 61 74 63 68 2d 65 6c 65 6d 65 6e 74 20 2e 61 63 74 69 76 65 20 2e 73 65 74 43 6f 6d 6d 65 6e 73 7b 77 69 64 74 68 3a 32 32 70 78 3b 68 65 69 67 68 74 3a 32 32 70 78 7d 2e 63 6f 6c 6f 72 50 69 65 63 65 4c 69 73 74 20 2e 63 6f 6c 6f 72 50 69 63 65 2d 6c 69 73 74 20 2e 63 6f 6d 6d 65 6e 73 7b 77 69 64 74 68 3a 32 36 70 78 3b 68 65 69 67 68 74 Data Ascii: ent .active{overflow:hidden;cursor:pointer;text-align:center;border:2px solid #000;width:24px;height:24px}.colorPieceList .colorPice-list .swatch-element .active .setCommens{width:22px;height:22px}.colorPieceList .colorPice-list .commens{width:26px;height
2024-05-24 22:56:46 UTC	16384	IN	Data Raw: 72 3a 30 7d 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 63 6f 6e 74 65 6e 74 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 6d 6f 64 61 6c 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 6c 65 66 74 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 20 2e 74 69 74 6c 65 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 31 32 70 78 20 0d 0a 31 66 66 66 30 0d 0a 38 70 78 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 63 6f 6e 74 65 6e 74 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 6d 6f 64 61 6c 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 6c 65 66 74 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 20 2e 64 65 73 63 72 69 70 74 69 6f 6e Data Ascii: r:0}.customize-product-content .customize-product-modal .customize-left .swiper-slide .title{margin:0 auto;padding:20px 12px 1fff08px 12px;text-align:center}.customize-product-content .customize-product-modal .customize-left .swiper-slide .description
2024-05-24 22:56:46 UTC	16384	IN	Data Raw: 65 6e 74 3a 22 5c 65 36 61 38 22 7d 2e 69 63 6f 6e 2d 4c 5f 61 6e 71 75 61 6e 73 75 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 38 22 7d 2e 69 63 6f 6e 2d 4c 5f 61 69 78 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 39 22 7d 2e 69 63 6f 6e 2d 4c 5f 64 69 61 6e 7a 69 79 6f 75 6a 69 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 62 22 7d 2e 69 63 6f 6e 2d 4c 5f 64 69 6e 67 77 65 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 63 22 7d 2e 69 63 6f 6e 2d 4c 5f 73 68 6f 75 6a 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 65 22 7d 2e 69 63 6f 6e 2d 4c 5f 67 75 6b 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 61 30 22 7d 2e 69 63 6f 6e 2d 4c Data Ascii: ent:"\e6a8"}.icon-L_anquansuo:before{content:"\e698"}.icon-L_aixin:before{content:"\e699"}.icon-L_dianziyoujian:before{content:"\e69b"}.icon-L_dingwei:before{content:"\e69c"}.icon-L_shouji:before{content:"\e69e"}.icon-L_guke:before{content:"\e6a0"}.icon-L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49809	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:47 UTC	638	OUT	GET /liquid/buyer/public/js/plug/Swiper.js HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ee8-1e6ff" If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
2024-05-24 22:56:47 UTC	611	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:47 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-1e6ff" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367888 Expires: Sat, 25 May 2024 02:56:47 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1880f96f7f4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49811	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:47 UTC	659	OUT	GET /liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66504476-188b7" If-Modified-Since: Fri, 24 May 2024 07:40:38 GMT
2024-05-24 22:56:48 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:48 GMT Connection: close last-modified: Fri, 24 May 2024 07:40:38 GMT vary: Accept-Encoding etag: W/"66504476-188b7" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54110 Expires: Sat, 25 May 2024 02:56:48 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e18c3a0bf7e8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49812	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:47 UTC	619	OUT	GET /wp-includes/img/pro-shipping-protection.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:48 UTC	178	IN	HTTP/1.1 403 Forbidden Date: Fri, 24 May 2024 22:56:48 GMT Content-Type: text/html Content-Length: 131 Connection: close Server: cloudflare CF-RAY: 8890e18c3843f7e0-BNA
2024-05-24 22:56:48 UTC	131	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 70 6c 65 61 73 65 20 64 6f 6e 27 74 20 6d 65 73 73 20 61 72 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <meta charset="UTF-8"> <title>please don't mess around</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49813	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:47 UTC	614	OUT	GET /wp-includes/img/shipping-insurance.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:48 UTC	178	IN	HTTP/1.1 403 Forbidden Date: Fri, 24 May 2024 22:56:48 GMT Content-Type: text/html Content-Length: 131 Connection: close Server: cloudflare CF-RAY: 8890e18c9febf7d0-BNA
2024-05-24 22:56:48 UTC	131	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 70 6c 65 61 73 65 20 64 6f 6e 27 74 20 6d 65 73 73 20 61 72 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <meta charset="UTF-8"> <title>please don't mess around</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49810	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:48 UTC	719	OUT	GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "CAE408692E9DF180175752E8BC159AD1" If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
2024-05-24 22:56:48 UTC	542	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:48 GMT Connection: close x-oss-request-id: 6650748AF488A53436FC7D32 ETag: "CAE408692E9DF180175752E8BC159AD1" Last-Modified: Tue, 31 Oct 2023 09:59:39 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3292476528251743927 x-oss-storage-class: Standard Content-MD5: yuQIaS6d8YAXV1LovBWa0Q== x-oss-server-time: 38 CF-Cache-Status: HIT Age: 42662 Expires: Sat, 25 May 2024 02:56:48 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e18f2ad7f7f4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49816	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:49 UTC	693	OUT	GET /liquid/buyer/public/img/default.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66387ef8-1a84" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:56:49 UTC	585	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:49 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT etag: "66387ef8-1a84" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 221017 Expires: Sat, 25 May 2024 02:56:49 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1933963f7d0-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49815	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:49 UTC	652	OUT	GET /liquid/buyer/public/js/lib/event.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66504480-1714" If-Modified-Since: Fri, 24 May 2024 07:40:48 GMT
2024-05-24 22:56:49 UTC	609	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:49 GMT Connection: close last-modified: Fri, 24 May 2024 07:40:48 GMT vary: Accept-Encoding etag: W/"66504480-1714" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54111 Expires: Sat, 25 May 2024 02:56:49 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1934938f7f4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49814	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:49 UTC	653	OUT	GET /liquid/buyer/public/js/lib/index.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"6650447c-eac61" If-Modified-Since: Fri, 24 May 2024 07:40:44 GMT
2024-05-24 22:56:49 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:49 GMT Connection: close last-modified: Fri, 24 May 2024 07:40:44 GMT vary: Accept-Encoding etag: W/"6650447c-eac61" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54111 Expires: Sat, 25 May 2024 02:56:49 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1935bf9f7e8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49817	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:49 UTC	702	OUT	GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-1516" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:56:49 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:49 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-1516" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183456 Expires: Sat, 25 May 2024 02:56:49 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1938b37f7e0-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49818	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:49 UTC	700	OUT	GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-e1e" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:56:49 UTC	609	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:49 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-e1e" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183456 Expires: Sat, 25 May 2024 02:56:49 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1938892f7d4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49819	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:49 UTC	706	OUT	GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-2f86" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:56:49 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:49 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-2f86" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367890 Expires: Sat, 25 May 2024 02:56:49 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1939897f7f8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49820	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:49 UTC	485	OUT	GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "CAE408692E9DF180175752E8BC159AD1" If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
2024-05-24 22:56:50 UTC	542	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:49 GMT Connection: close x-oss-request-id: 6650748AF488A53436FC7D32 ETag: "CAE408692E9DF180175752E8BC159AD1" Last-Modified: Tue, 31 Oct 2023 09:59:39 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3292476528251743927 x-oss-storage-class: Standard Content-MD5: yuQIaS6d8YAXV1LovBWa0Q== x-oss-server-time: 38 CF-Cache-Status: HIT Age: 42663 Expires: Sat, 25 May 2024 02:56:49 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1962bc5f7f0-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49808	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:49 UTC	935	OUT	POST /buyer/user/user-capi HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 498 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/categories Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
2024-05-24 22:56:49 UTC	498	OUT	Data Raw: 7b 22 66 61 63 65 62 6f 6f 6b 22 3a 7b 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 22 50 61 67 65 56 69 65 77 22 2c 22 65 76 65 6e 74 5f 74 69 6d 65 22 3a 22 31 37 31 36 35 39 31 34 30 37 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 62 78 32 6e 67 78 6d 32 35 62 38 50 61 67 65 56 69 65 77 31 37 31 36 35 39 31 34 30 37 32 34 33 22 2c 22 65 76 65 6e 74 5f 73 6f 75 72 63 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 61 76 6f 62 2e 63 6f 6d 2f 63 61 74 65 67 6f 72 69 65 73 22 2c 22 63 75 73 74 6f 6d 5f 64 61 74 61 22 3a 7b 7d 2c 22 70 69 78 65 6c 5f 69 64 22 3a 22 32 37 30 30 31 30 34 39 39 34 33 37 30 30 37 22 2c 22 66 62 63 6c 69 64 22 3a 22 22 2c 22 75 73 65 72 5f 64 61 74 61 22 3a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 75 73 22 2c 22 63 6c 69 65 Data Ascii: {"facebook":{"event_name":"PageView","event_time":"1716591407","event_id":"bx2ngxm25b8PageView1716591407243","event_source_url":"https://www.cravob.com/categories","custom_data":{},"pixel_id":"270010499437007","fbclid":"","user_data":{"country":"us","clie
2024-05-24 22:56:50 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:50 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:50 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:50 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 36 3a 35 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:56:50"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49823	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:50 UTC	662	OUT	GET /uploader/d993a1725f58924f23cadb81743e03e2.jpg?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:50 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:50 GMT Content-Type: image/webp Content-Length: 9304 Connection: close x-oss-request-id: 6650748BF488A53434C48432 ETag: "2A6F86D2A7C72B9CF260025BA9BA7410" Last-Modified: Fri, 12 Jan 2024 10:02:30 GMT x-oss-object-type: Normal x-oss-storage-class: Standard x-oss-server-time: 118 x-oss-hash-crc64ecma: 9146761236160919061 CF-Cache-Status: HIT Age: 42663 Expires: Sat, 25 May 2024 02:56:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e19a1e86f7e8-BNA
2024-05-24 22:56:50 UTC	805	IN	Data Raw: 52 49 46 46 50 24 00 00 57 45 42 50 56 50 38 20 44 24 00 00 90 99 00 9d 01 2a 4f 01 47 01 3e 6d 34 96 48 24 22 a2 21 23 d8 9a 20 80 0d 89 63 6e e1 73 f0 f9 e2 fd 77 b2 0f ae ff 61 f9 77 ed fd c8 bd ef 7b 5b c5 3c a8 c7 2f bc ac e9 7f b7 f5 9d f9 b3 fd 97 f7 5f df ff a0 fe 7c 5f b7 5e a2 ff 9a 7f 83 fd a7 f7 66 ff 4d fb 95 ee db fb e7 a8 67 ec e7 5a ff f7 7f 52 2f e5 1f ed 3d 3a fd 9f 7f b0 ff d9 f4 db d5 2d fa 6f 94 cf 9d fe eb fe bf c3 bf 25 1e a0 f6 ab e3 07 08 fd 99 ea 41 f2 cf c0 ff a9 ff 03 fb bb f1 cb fb 5f 06 7e 29 7f a1 ea 1d f9 1f f3 ff f3 7f 9a 7e 26 7e 0c f6 6b fe 3f a8 47 b4 3f 54 ff 7b fe 23 f7 6b fc c7 c6 cf c8 7f aa f4 9f ec 0f fb 7f b6 6f b0 1f e6 bf d3 ff d9 7f 69 fd dc f8 ff fd 87 8a b7 db 7f dc fb 00 7f 37 fe c1 ff 5f fc 47 e6 3f c9 3f Data Ascii: RIFFP$WEBPVP8 D$*OG>m4H$"!# cnswaw{[</_\|_^fMgZR/=:-o%A_~)~&~k?G?T{#koi7_G??
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 3e 17 9e 56 f8 65 0e f7 05 91 ef 1e 1c 57 95 af 63 63 8e fc dd f3 98 a3 86 31 2f 5d b5 d7 f9 5d 26 7b 00 c9 77 51 bf e6 08 3e e9 1b b2 ec cd 63 13 4c ba af b4 8c 78 ca e0 2c ef e2 75 1b 3f ce b0 0d 87 39 55 c1 91 a2 64 72 45 0b b7 6b 8c fd 96 87 63 ed 83 26 d4 9b 69 3b fc 32 69 fd 71 b5 75 dd 12 00 95 a6 a7 69 8c c1 f5 00 ca 63 07 36 c1 84 d8 2c d2 df 0c 9d 73 e0 2d 12 9e 9e e8 61 95 a0 bf dc d9 4b da 77 96 4b 35 25 bc de fe 4a 9a ca c6 3d d1 fc 10 b3 e6 66 58 f7 e8 f7 79 91 98 34 37 04 18 80 52 e2 db 72 cd 36 ea e2 ef 63 1f 3a 38 bd ca 80 c9 b7 c4 d4 5c 31 3c 91 56 b7 9a cb 7b 24 81 6f 3d ab 09 fb 0b b4 ae 97 d1 b6 a5 8c 77 10 e9 ff f3 57 e2 11 7f e3 35 87 e3 9a 02 2e f4 1c ff 2c 6c 8e 8e d3 ae 81 4f 2a ec 5e ce 9f bf 60 25 6c 6d 58 c7 bf 47 bb c7 be 6f Data Ascii: >VeWcc1/]]&{wQ>cLx,u?9UdrEkc&i;2iquic6,s-aKwK5%J=fXy47Rr6c:8\1<V{$o=wW5.,lO*^`%lmXGo
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: e5 d0 4b 8c 8b d5 0b ed d5 c1 15 d2 85 9d a6 2f 4a 60 14 c8 3e 81 ec a3 0b 99 34 42 92 cf 7d e8 1c 89 55 1f be 02 76 e9 3e d0 c0 fa d9 b9 be 4c 7d b5 e1 b7 9b f9 ef 97 dd 6a d5 90 a9 fb 98 3b 49 dc 42 b5 01 3c 8c c7 56 63 13 ed 2b 5d 0b 8c 4c 5a 8c 46 66 12 6f a5 66 24 96 9b 91 a9 59 b5 a8 9b 7b bc db 3f a3 bf 7d 7c 29 30 be 60 07 d0 7e 04 e0 6d fc 84 d6 16 2f 53 ff 81 bc 37 0a c3 d2 63 50 6e 88 c8 57 1c 6a 1e 2e 3d 08 84 c9 51 f4 3e 5f 58 e7 44 b8 23 14 71 6e f2 6a 87 1e 5c d3 96 27 5c b7 29 55 14 05 64 4a b6 d6 04 b5 78 67 30 68 70 73 97 dc c2 9d 5f d1 f0 3f eb 76 2d 7d dc 2d 83 c0 3f c9 b0 a1 bc 92 11 7b d8 b7 83 70 1d 6f 2b 8f d9 37 63 f2 0a c9 be 25 26 9d 3b 02 b8 95 63 d7 85 ac 3c 59 3c f0 31 91 27 b9 56 c2 99 4f 4f 5a fa 99 11 b5 79 4a 4a 1a a0 2c Data Ascii: K/J`>4B}Uv>L}j;IB<Vc+]LZFfof$Y{?}\|)0`~m/S7cPnWj.=Q>_XD#qnj\'\)UdJxg0hps_?v-}-?{po+7c%&;c<Y<1'VOOZyJJ,
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 41 52 3d ab b7 60 d6 3a bf b7 2f b6 d6 7e fa 50 4c 09 3e 0c 60 65 c2 62 fb 64 fa d1 46 ec 92 76 41 e4 4c c4 39 f5 6c 4c d6 86 92 eb 60 a9 5d 63 47 ec e0 79 f1 52 40 27 ae 32 65 08 4f f4 37 83 34 72 eb de e9 5d b5 5b 29 9f f1 5f 9e d2 c4 08 41 51 b6 2d 6c e9 e2 dd 79 bd eb 68 43 61 d0 58 08 90 63 c5 ac 51 7c e0 de 4a 76 b3 9b 9c b9 04 82 a9 b7 fb 27 9f c3 05 d9 17 a7 c0 bc 92 0f 40 d8 41 cc fd a3 d6 cc 24 ca 91 8c 63 f9 9f 77 6c 1d f2 d1 a5 63 d5 f5 25 88 0d 71 e7 e4 af fb f1 30 15 13 47 83 4b b9 46 f8 9f d4 81 b6 c0 82 aa b5 4f 09 d8 9c e1 0a 8d 38 e6 68 b1 30 c8 a1 07 02 e7 0b 07 a0 03 68 68 14 b3 67 ea 72 a0 37 c6 12 27 2a 41 a2 ce cc f9 73 64 fb f7 80 39 93 5d c1 be 66 b0 93 a8 1d a7 9d ad c0 72 c2 93 8d 2f 9f be 2f c6 fd 5c 0a 61 61 f7 bc d9 97 5a 7a Data Ascii: AR=`:/~PL>`ebdFvAL9lL`]cGyR@'2eO74r][)_AQ-lyhCaXcQ\|Jv'@A$cwlc%q0GKFO8h0hhgr7'*Asd9]fr//\aaZz
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 2b 10 b5 66 1d ce 3e b5 55 fc 3b d2 3e 05 99 ae c2 ae d8 2e 67 2b e2 1c f1 be 66 c0 a0 5b 67 f1 7d 14 2e 52 a9 e4 56 7e f9 b0 6c 7f eb ec 21 2e 2e 19 31 b3 e6 af 7b 11 89 98 67 39 00 1d 2b f8 26 9d 8b 44 35 f5 d3 e1 0c 48 fe 05 a9 51 14 f2 72 80 f5 e6 5c 31 64 a0 f6 d7 6e 08 9c 56 1a 90 0b 6d fd 8d 00 d2 e8 16 6d 9f b0 40 a3 4b 32 aa d8 76 c8 bc 76 d0 a8 ee 73 b7 4d fb 44 1a d8 af 4e 51 18 01 5d 28 35 37 b7 14 95 e9 e3 9a 01 03 18 c0 51 61 74 b5 94 7a 9b 16 9c 8a a9 e9 a6 a7 9a 7b e8 68 8c 53 ad 58 b1 1e 7d f5 f4 26 55 34 93 15 c1 a0 f9 27 14 87 95 bf d6 5e 42 00 e3 f6 bb 60 f2 6e 57 ab 7e f7 06 c9 69 29 3e 1b e5 b0 81 01 a3 69 7e 2d 24 96 54 82 3f 9d bc 4f 8e 90 20 a0 2d 83 01 71 18 17 8d 1c 0f 86 f0 01 0e 7d 14 25 2b 0b e7 00 26 ce 89 e6 dd 0f eb 6b fc Data Ascii: +f>U;>.g+f[g}.RV~l!..1{g9+&D5HQr\1dnVmm@K2vvsMDNQ](57Qatz{hSX}&U4'^B`nW~i)>i~-$T?O -q}%+&k
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: b7 44 aa ac 3f ec ac 57 b5 7b 06 22 06 bc 3e 5b 76 db 81 93 44 68 4f bd e6 1a e2 85 46 ff 09 73 e7 ef 18 47 d0 67 d8 53 90 27 7b 41 27 4a f0 09 52 e7 6a 99 47 e6 8d 62 dd a0 f7 31 24 44 c2 a2 07 d0 08 e3 38 e6 02 23 d1 14 d2 72 44 be 64 2b f9 68 17 7d 2f 8a b6 85 b5 2d a6 ac 53 5d 0d 41 e8 c5 1c 64 6e 52 f1 90 f9 4f 8c 83 ef 94 1e 56 e5 f5 a4 b7 44 e1 cc f0 49 1c 14 53 47 a7 61 cd 01 74 f5 76 99 4b 4a e8 d3 69 63 a5 99 4c 46 93 c2 58 44 0e 6b 18 3a 35 ee 9c ac e6 7f 98 d8 c3 b0 4c 47 d6 a3 9e 9c aa c2 5d f8 71 63 1a e1 c8 fc b0 50 50 85 29 2b 59 4d 3f 33 c4 07 4f b5 12 78 ec 45 d9 71 8d dd 4c 0e 20 bc c7 94 9c 33 a1 e4 1f 4f 8d 8d 53 0c a6 28 bc 8a bc 6b 9b 4f 8d 9a db e0 dc 27 30 02 1b 18 d3 22 df 77 d3 ed db 6a 11 73 d5 ca 1a a8 f1 ad a9 54 2c 97 8c cc Data Ascii: D?W{">[vDhOFsGgS'{A'JRjGb1$D8#rDd+h}/-S]AdnROVDISGatvKJicLFXDk:5LG]qcPP)+YM?3OxEqL 3OS(kO'0"wjsT,
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: ec 96 00 f6 28 82 a8 4f 64 e2 42 a4 8c 80 48 ce 94 9d 07 9e af ef c6 fb 80 92 a7 11 76 97 8a 87 9d 07 f6 e8 f3 d0 81 25 3a 4e 76 8f 63 dd 2f 29 3b 4c 78 75 05 8b 44 5f 16 e3 87 56 7d 88 6d 22 5e 76 01 91 df 36 d8 fb 8d 7c df 7d 2e 64 89 fd 1a 68 35 91 10 97 72 23 69 ea 64 d0 1f a2 53 3e 17 0a dd ec 5d 02 e2 87 f6 06 cd 40 82 7c 19 49 ce bf a1 ff ce bc ae d0 2a 2d 0d 22 67 e8 3b cd 4e 4b 28 f7 30 c7 3b 73 33 40 17 b0 21 bd 03 fc 19 bb c1 15 93 08 9a b8 eb d7 d2 27 21 08 65 d5 ef 6d c6 bd 99 e4 5f 49 6e 68 80 3c f3 ad 85 d3 8a 0b 42 88 11 24 d8 f9 76 b6 ed 00 2b 45 21 d6 35 9c 0a c2 c9 d2 86 44 89 6c 3b 42 88 ea 1b 48 f2 61 52 35 b9 7e d4 d7 2e 85 01 55 04 a7 37 11 f0 2f da 14 79 de 4c d2 ff 16 f6 8e 3c 97 5d ed a6 69 94 90 a2 93 40 b9 92 81 f0 74 af 89 58 Data Ascii: (OdBHv%:Nvc/);LxuD_V}m"^v6\|}.dh5r#idS>]@\|I*-"g;NK(0;s3@!'!em_Inh<B$v+E!5Dl;BHaR5~.U7/yL<]i@tX
2024-05-24 22:56:50 UTC	285	IN	Data Raw: a0 33 27 8c 7c 91 81 cd 30 49 ba 1c e3 02 3c 05 40 cb 7e 1c dc 74 63 90 ce 4b 20 d4 aa 5f 08 d0 51 98 2a b9 f1 a7 eb 45 38 0e 2d 46 01 14 09 95 94 82 90 e7 1f fb 56 87 36 7b 76 cd 6a 22 2d 0b 82 ba 8a 48 ba a7 73 04 d2 4e ac 73 82 25 35 94 a1 79 b0 50 ea e4 e2 c7 a1 ec b4 83 a1 a4 e3 2d a0 16 58 a4 7e 41 ed 0b 1b ea e6 6c ad 25 c9 0d cf 64 3a 46 55 9e cc 48 8e 10 21 ce c6 08 91 77 39 25 42 22 25 2b b9 e8 0d 60 1f 3f b3 e6 50 18 d7 75 2d aa f7 f3 f4 b1 0a b5 8b c5 b6 0d b6 7d 09 5f ab 06 5e 00 0c 06 58 df b9 83 77 e5 65 cc a0 36 da d4 6f 40 10 1e 82 c1 b7 81 9b ee 21 b9 9d 52 d4 53 38 50 64 21 1d b6 83 5b 2e e4 e6 48 1b 35 68 9a d3 f0 fb 99 58 de 71 b6 22 8f 03 43 53 c4 0e 81 e8 21 95 bc 05 a3 fb 17 e0 e8 46 b1 a6 ca 62 76 42 8e a6 a4 80 20 4b bb 68 07 1e Data Ascii: 3'\|0I<@~tcK _Q*E8-FV6{vj"-HsNs%5yP-X~Al%d:FUH!w9%B"%+`?Pu-}_^Xwe6o@!RS8Pd![.H5hXq"CS!FbvB Kh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49824	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:50 UTC	703	OUT	GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-20a8" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:56:50 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:50 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-20a8" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 191735 Expires: Sat, 25 May 2024 02:56:50 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e19a1bd7f7f4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49821	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:50 UTC	711	OUT	GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ee8-2905" If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
2024-05-24 22:56:50 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:50 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-2905" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 200912 Expires: Sat, 25 May 2024 02:56:50 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e19a0ddbf7e0-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49822	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:50 UTC	459	OUT	GET /liquid/buyer/public/img/default.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66387ef8-1a84" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:56:50 UTC	585	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:50 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT etag: "66387ef8-1a84" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 221018 Expires: Sat, 25 May 2024 02:56:50 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e19a3c23f7ec-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49825	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:50 UTC	662	OUT	GET /uploader/d3a5e4fb2365a048a7c7c731cb9f7f72.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:50 UTC	570	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:50 GMT Content-Type: image/webp Content-Length: 48258 Connection: close x-oss-request-id: 6650748BD561043835CE39E4 ETag: "CE0DDEBCE851BFE787EA85B224E38F14-1" Last-Modified: Mon, 08 Jan 2024 08:41:18 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 442 x-oss-hash-crc64ecma: 6909701072070749798 CF-Cache-Status: HIT Age: 42663 Expires: Sat, 25 May 2024 02:56:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e19a6b7bf7c4-BNA
2024-05-24 22:56:50 UTC	799	IN	Data Raw: 52 49 46 46 7a bc 00 00 57 45 42 50 56 50 38 20 6e bc 00 00 90 25 02 9d 01 2a f4 01 f4 01 3e 6d 2e 93 46 24 22 a1 a1 2b 73 1d 20 80 0d 89 63 6e fc 4a fb 1f c9 ed e2 db c3 d2 7a 1f bc 3d 8a f1 ef bc 7f c3 fe 77 d2 bb 8f fb c9 f9 e7 e0 f8 91 8b 75 98 3d 66 6e 1b ff 95 e9 97 a7 4e 9a 6f 98 ff ac 1e 40 54 b5 7c cb f8 6f f0 3f 98 3f d7 fd 17 fc bf e9 bf cb ff 7e ff 3d ff 27 fc 27 cc bf e7 f8 cb f7 cf f0 bf e9 7a 0d fc d3 f1 bf ef 3f bd fe f2 fc 7a fe ab fe b7 83 3f 27 7f cc ff 1d f9 69 f2 0b f9 27 f4 7f f3 1f dc 7f 74 ff c4 fc a3 fe 87 fd 5f f5 9d da 1b d7 fb ef fa 9f eb 3d 82 3d a1 fb 27 fc 3f ef 3f 95 bf 18 bf 95 ff 77 d1 1f dc ff dc ff cd ff 1f f0 05 fd 57 f7 23 fc 27 e4 c7 cf 1f fa 7c 28 3f 2d ff 53 f6 b3 e0 0f fa 0f f8 df f9 1f e1 bf 34 3e 62 bf f3 ff 53 Data Ascii: RIFFzWEBPVP8 n%*>m.F$"+s cnJz=wu=fnNo@T\|o??~=''z?z?'i't_=='??wW#'\|(?-S4>bS
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 62 47 43 2f c0 0b df fa 99 6d 38 ef fd 01 f2 5e 50 f8 f7 54 41 b1 f3 a4 36 f7 15 74 17 58 fb 66 bf 19 af 18 5c f3 ff 3d 6c 8c dc 46 40 d9 a1 8e 23 08 23 67 41 db ba dd 97 8d 40 2b 77 e3 4f 52 02 07 39 bb fe e8 d3 df 3e 7d aa 0f 07 4a c7 6e aa 4f 00 a2 65 0b ce 5a 89 5b fd 31 6d c4 f4 68 0f d3 c0 1d 77 cc dd 8a 0a 35 a2 b2 13 ee 76 44 34 e3 f1 59 c4 6a 73 c5 35 86 5c f6 f7 fa b7 74 36 58 5c 1b ec 56 f6 2d 56 61 5a 94 80 d6 24 2b b6 28 ac 50 87 1b 0a 72 53 26 d2 f9 ba 79 88 05 32 b9 72 f0 f3 50 85 49 96 54 2e 40 56 bb dc fd 02 1a e6 d6 b4 52 c3 1f b9 f9 c4 fb c1 56 d9 a0 fe 40 4a 0c 4a ff 88 fb 9a 2b 12 47 5e f3 ff ee 8b a5 d0 29 ae 5c 6d 53 19 a7 d1 c1 0f ec 0a ef 0c 8c 83 ff ca 2b ff d6 cc d7 d6 0e 97 51 95 99 50 24 f6 18 90 0f 7b b6 77 6b 37 db e0 07 d2 Data Ascii: bGC/m8^PTA6tXf\=lF@##gA@+wOR9>}JnOeZ[1mhw5vD4Yjs5\t6X\V-VaZ$+(PrS&y2rPIT.@VRV@JJ+G^)\mS+QP${wk7
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 72 23 53 54 eb 7f 20 37 ed 8c 08 af 72 3b 74 52 9a 0a 04 c7 0d c1 6e b6 17 39 2e e5 80 05 70 95 2f af 1c 9e 95 07 5e ce 8b 99 75 80 9a 71 25 c9 86 08 cd c3 43 bd bf 1c bf c9 ba 28 32 cc 81 ce 91 3b 99 f7 24 1e f8 40 b5 89 d1 2c c4 f2 af e2 10 5f 4e 01 a1 0c c4 e2 e7 7e 3c c1 52 3e f0 19 8a 80 0e 06 06 2b ea e1 b6 cb 63 16 a8 2e 6b 35 ff 9e 27 a9 c4 28 a6 d4 fb e0 d0 ac 69 2b 53 ad c9 a2 bc da 83 fd e3 27 5d a3 e1 b1 0f 7f 31 de 19 73 3b 53 82 a6 ab cb c3 73 c5 70 55 07 63 4a 3f 71 e2 67 ad 17 0f 8f 6e 29 bf 33 c1 a0 85 dc 9e 60 20 f5 ea d4 13 36 e0 cb d1 6c 6f b8 43 89 82 a0 27 28 a6 51 f7 bc 04 68 17 93 a4 df 2f bb 5e 67 e8 c3 97 b5 48 d6 ff 45 5d 99 ee 4f f9 f3 e3 fc 38 47 ad e8 13 d1 80 ba cf a7 bb 68 69 dc 9e a6 c1 4d 49 7c 85 77 11 e9 fb f1 a0 ac 67 Data Ascii: r#ST 7r;tRn9.p/^uq%C(2;$@,_N~<R>+c.k5'(i+S']1s;SspUcJ?qgn)3` 6loC'(Qh/^gHE]O8GhiMI\|wg
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: e4 64 6a 3d 52 46 75 73 df 0c 5d 2b ec 64 84 a7 61 c2 f4 7b d1 86 90 44 4f 30 81 46 fd 3f 8b f0 56 ba 49 ff b0 b5 2b 23 47 6f aa 61 bd c8 b1 42 e8 f2 62 63 48 b8 1d e4 28 3d c5 5b 8e 41 a3 cd 5c c1 0a 4d e1 fd 63 ab d9 74 1e 12 fd 4b e2 6f 44 a8 f0 06 a1 0d f3 0b 10 7d 9c d7 4e 89 41 1c 26 cb f2 cb 8a 9c 9e f0 bb 76 dd 87 bc 16 58 7c 9b 80 a3 07 9b 65 5e 97 4f ea bc 01 0a 0e 95 dd e1 ce 6b 99 92 69 16 8a 40 e5 3d 81 8c e9 9f 77 06 7a ab 35 03 30 a7 b2 85 1f ff 7d 3f be 9c fb ee d1 96 3d 1c e0 85 31 75 27 5a e9 50 69 4e 21 2a 83 18 60 02 9e 3a 6e dc 52 ff fa 70 16 fc fd b8 d4 25 03 c0 95 f3 d4 33 60 11 61 bb 46 06 66 b6 41 15 bf 85 79 66 35 1b f0 ef 19 d8 9d 28 12 00 b1 90 df ef f3 4c 68 fd 7e 7d ff e9 03 56 21 b6 60 09 38 09 85 e7 56 95 90 0e 8e b3 41 58 Data Ascii: dj=RFus]+da{DO0F?VI+#GoaBbcH(=[A\MctKoD}NA&vX\|e^Oki@=wz50}?=1u'ZPiN!*`:nRp%3`aFfAyf5(Lh~}V!`8VAX
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: d7 5e 75 66 16 89 3c cd ce 00 20 40 70 bd 12 16 53 6b 25 e3 ae db 83 c5 b6 f3 e9 77 23 22 e0 64 b4 e5 ff dd 57 a2 1b 85 b6 35 98 6f f2 12 d5 04 d4 b6 3a d9 de 38 d7 9b 0f 5f bf 42 52 41 d3 ac b1 89 8d 05 b6 ba ea 26 4f 05 2a 35 db c8 d0 45 2d 01 98 f3 09 f5 01 b2 ac 1f a0 5b 18 c9 53 ef 89 5c 3a a6 c0 4f 13 f6 21 48 c7 82 64 59 cc 5e 64 01 b8 21 46 35 97 78 3e b3 5f 1c 14 1f 43 9d f4 a6 1a d0 27 5c 59 81 a5 ca 36 fe c3 c3 38 6d 48 83 54 91 4e e1 13 54 fd 20 ed 8f b8 dc c9 ff 02 8f ba a0 5f 2e 46 60 5b 89 89 ee 0d b5 f9 24 1a d7 0e a5 78 d3 56 6f ce e9 66 83 82 c3 dc c5 74 ce 8e ad 37 31 53 f4 98 29 37 39 53 f4 11 a5 10 03 ff 4f ad 18 b5 80 37 b8 2d 8c 44 08 85 13 a8 a6 7e 3b 54 78 77 e5 cc 00 16 56 70 68 fc e7 46 bd 36 72 c0 86 e9 69 49 d1 1f 51 69 06 1c Data Ascii: ^uf< @pSk%w#"dW5o:8_BRA&O*5E-[S\:O!HdY^d!F5x>_C'\Y68mHTNT _.F`[$xVoft71S)79SO7-D~;TxwVphF6riIQi
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 41 1c 30 8d bc 88 df 3a 02 7e 81 23 41 02 55 9a 61 35 bc ae a1 de 15 79 97 37 b4 04 5b f7 dd 68 1d 77 da be 7f 91 7e f1 c4 25 3a b9 d7 7c d1 7a 7c 9e 07 e3 4a ac 8a 8e af 4f 02 77 76 2e e5 6e a9 4b 34 ad a7 36 ac 02 e3 7d 1d fe 6e 0c 42 10 07 53 61 42 6b 0f 0d 5b 7e ee 58 db 72 0a d9 80 68 0b 4c 26 84 e7 2e 55 41 fb e8 fc f9 c1 67 78 8f 52 87 e2 5e e5 17 7f a3 56 67 98 19 bf 1e 14 8a aa fb c4 bc eb 78 54 40 03 de 31 8c fa 59 75 ec 93 a3 8e e0 d3 1a b3 88 29 4a 59 7a 96 45 cb a3 c7 1f fb c1 48 64 e5 0f b4 66 4d 8d e4 e8 5a ab 75 48 b5 73 5b 15 fe ad a7 36 24 79 7f c0 f4 d4 54 3d a7 d9 f3 de 53 1d 3b e3 8b 49 17 ad 2b d2 e6 40 26 f1 81 36 7e 6f e5 40 45 c7 e8 43 22 dc 09 0d d6 05 83 6c 43 dd 97 a5 fb 80 4c fb bc f1 1d 1e be 71 8b b7 82 cf 8f 54 91 48 22 39 Data Ascii: A0:~#AUa5y7[hw~%:\|z\|JOwv.nK46}nBSaBk[~XrhL&.UAgxR^VgxT@1Yu)JYzEHdfMZuHs[6$yT=S;I+@&6~o@EC"lCLqTH"9
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 30 00 0d af 3b ec d3 36 4d 9f 66 f6 51 81 69 86 b2 52 12 1b 96 6e 7d a6 d2 c9 cf 20 cc 06 34 55 b1 de 5a 9a 7a a7 19 2a 6c 43 09 dd 27 7e b1 fc 87 f1 ed ff a6 33 cb be ca ad 19 8f 14 d9 cc 4b 73 63 2d ae a1 86 d6 e5 ff b6 cc 8f 78 92 50 f1 43 e3 ce cb b8 c1 31 a8 ff fa 52 f4 45 41 1e 95 c8 2d 73 ea a2 22 62 bb c2 76 1e c0 6f e6 4c 27 e3 de db d4 9b 63 60 35 5b b0 7f fa 1a f7 c2 2e 5e 68 5e 98 92 ed bc 38 ea 81 c1 91 56 42 21 0c 53 1a ca d0 57 32 9b 99 76 d6 72 84 55 04 71 b2 63 dd ae 43 a2 0c b0 9f 18 70 33 99 0c 85 34 d8 a0 29 a5 bd 15 48 8c 7d 65 99 6b af e4 cf 98 a6 6c 0d aa 26 c1 8b 91 16 26 cc b4 b6 30 bb a9 17 a9 20 75 9e fb 68 51 68 58 3e 89 1d f2 6f a1 ae 4c 7a ad 90 d5 9e b6 f7 dc 10 be c9 49 b2 85 f9 35 ae 10 53 41 b2 18 fa 08 66 31 7c 6c ae 54 Data Ascii: 0;6MfQiRn} 4UZz*lC'~3Ksc-xPC1REA-s"bvoL'c`5[.^h^8VB!SW2vrUqcCp34)H}ekl&&0 uhQhX>oLzI5SAf1\|lT
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 4d 2b bf 08 fb de 1b 99 37 81 e3 99 95 f6 5f c5 a0 1d ef bc 92 1e 3a 1e 5a e3 97 dc c1 a3 cb 44 8f 20 5d 9a c9 5d ac 57 41 80 b0 5c 88 66 08 3c 26 3b 40 48 a3 88 e8 6e ca 85 92 c8 23 78 01 98 4b 0f 29 35 4b ab fb a0 8a 3c 1c 86 4a 61 48 63 b8 fd f0 34 7d 4f bc 02 8a f0 ae 2c 7e 3e 49 00 87 28 33 d0 e8 8a 0a 74 4b 4c 23 bb 75 24 f5 35 cf c1 cd 4d 84 6b b9 31 8b a3 84 21 bf 0b f7 ec 4c cf f7 48 f1 51 0f 94 43 1c f0 09 a6 dc 9c 18 ed 95 5a e7 03 62 b2 90 87 26 ed f1 20 79 3d dd 9a a6 f8 0a a6 86 8b b0 f0 f5 bf 89 fa 4a 35 eb c6 db 92 81 b4 79 e6 a9 7a 64 ce ab 86 db 8e 0f 5e c6 28 09 c9 75 d7 cb 41 49 33 cc e5 dc 80 54 02 11 db 9a af 0b 36 55 73 e4 41 27 21 4b 09 cd 48 ce 1d b0 14 63 d4 a5 bb 40 49 33 ae f1 fb 32 d4 43 96 86 a0 ac e6 a0 8a 90 a2 c8 e4 2f c0 Data Ascii: M+7_:ZD ]]WA\f<&;@Hn#xK)5K<JaHc4}O,~>I(3tKL#u$5Mk1!LHQCZb& y=J5yzd^(uAI3T6UsA'!KHc@I32C/
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: e3 a0 10 c0 d7 0e 7f 16 10 93 36 ae 1d 86 e1 f8 0c ef c1 d3 16 ec bf cd 80 d7 fd 4a 59 81 28 eb ef 91 b6 82 9a 35 f3 25 6b 49 38 b3 b0 ce 63 92 46 fb 0e 1f a2 c4 6f 02 96 ff 16 31 68 a7 27 d9 1b 77 62 d2 e3 a3 8a e2 83 2b 57 61 96 98 80 0a 2d 8e 25 9f 7d 4f de 68 c2 6b 15 3d 74 8c 30 08 fa ff 45 28 45 90 09 73 c6 d3 5f 29 ac 33 96 3e 45 b8 ab 95 f1 23 c9 35 70 c0 74 ee 8e 62 c2 cb 03 77 43 f4 18 29 c1 60 c5 a4 4c 0c 55 2f 4a 69 95 4a 77 6c 00 02 8a ab 64 61 22 53 b1 8a 23 8c c0 05 8a 13 b7 e7 b9 6f d2 06 68 1a 6c 46 c5 f6 f1 e8 e6 fe 71 39 1e a7 e8 29 2f 85 e9 c5 f9 6c d5 ff aa 28 5f 03 4b a2 a9 bd 29 21 d4 88 a8 f9 02 ce 43 d0 b8 79 0b 70 b9 6b 2e b0 96 b7 e4 83 85 08 87 95 db f2 7d 3b ae ea 43 16 67 38 60 bb ae 7f 1a 43 82 b0 70 df 1e d8 58 22 e8 c5 49 Data Ascii: 6JY(5%kI8cFo1h'wb+Wa-%}Ohk=t0E(Es_)3>E#5ptbwC)`LU/JiJwlda"S#ohlFq9)/l(_K)!Cypk.};Cg8`CpX"I
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 4b ac db 1c ee dd 8e 2f 07 ef 76 29 3b a4 a5 67 89 ec cf f7 94 b7 61 6e 44 1e 25 d4 0e e3 d0 64 a2 8e 49 6b 6a 2c 9c 54 20 09 e9 1c b3 70 2d 04 ad 14 db d9 bd a2 19 a5 ce 19 b2 b0 a7 65 66 27 ac ea 20 41 b5 32 1a 9f a2 0d 5b ea b7 da ff 75 f4 ce b2 03 6b 71 6d ef de 94 ea 19 6d bb b2 6d c1 e6 a6 8a 6e 53 01 64 20 09 a5 78 04 0e 13 80 c7 07 93 c5 99 e5 6f 75 c8 cc 9a 4b f8 f9 0a 9e 94 0a d7 77 f3 e9 18 73 a6 fa bd a1 c1 bf d8 e8 48 64 24 f2 da f0 e9 f2 cc d8 82 ea 9f 27 28 6b 22 6c 4d 24 44 ee 3c 6c 51 55 ad fb 2c 29 34 f5 a8 f4 be 15 29 ad 07 e9 45 fa d0 8b 8d 30 f8 11 d4 fc 56 47 d0 fd 55 3b ed 07 42 2e a9 36 dc 8e 4e a1 a7 a8 38 2d 6a 7e 10 e8 67 72 dc d3 4e ff 32 a3 0e ed 99 86 3c 2b 2c 83 9d 31 2a 5e 63 4f b6 01 67 f4 94 f3 52 f7 ac 0d 8e 1a 6d 54 1e Data Ascii: K/v);ganD%dIkj,T p-ef' A2[ukqmmmnSd xouKwsHd$'(k"lM$D<lQU,)4)E0VGU;B.6N8-j~grN2<+,1*^cOgRmT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49826	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:50 UTC	662	OUT	GET /uploader/d2df150284cdfe15bf44c5a379f89f09.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:50 UTC	570	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:50 GMT Content-Type: image/webp Content-Length: 75982 Connection: close x-oss-request-id: 6650748B76EC4B3934392FCD ETag: "ADA50B8E2D36AB43F03993A43162061B-1" Last-Modified: Wed, 10 Jan 2024 05:54:48 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 228 x-oss-hash-crc64ecma: 8530984011307495399 CF-Cache-Status: HIT Age: 42663 Expires: Sat, 25 May 2024 02:56:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e19a6b57f7d4-BNA
2024-05-24 22:56:50 UTC	799	IN	Data Raw: 52 49 46 46 c6 28 01 00 57 45 42 50 56 50 38 20 ba 28 01 00 f0 78 03 9d 01 2a 58 02 58 02 3e 6d 2e 93 47 24 22 21 aa 29 34 0d 19 40 0d 89 63 6b 6c db 2a bb a8 fd d6 c4 c6 0a 6f 27 bb a7 34 6c a8 ec c8 20 0d 91 c0 24 4f e2 36 d5 25 2d d0 6e b4 6b 9f 60 8d a2 fa 40 7f a9 e4 9f ec 6b 4b 9d cb f2 f4 b5 c8 ff 33 ce 9f ae 9d 84 98 ce f0 be 23 cb bb dd 3b d1 ff e6 f6 1f cb d9 ed 4a 91 7e f3 76 56 5e 7d f6 e7 c2 1f 32 3f 09 fe 1f fd 27 fd af f2 1f 35 9f a8 e4 7f e1 7f c1 fd b9 f5 2b ed 0f f3 bf c9 7d 6a fd e9 fe d7 ff 1f fa 1f 1d fe 59 7f ab fe 6b f2 b7 e4 3b f3 8f e9 df ed 7f c2 7e 48 7c b0 7e 3f fe 9f f5 fe 0a 3c 1f fb 3f fc 1f ee 3d 83 bd bc fb 37 fc af f0 ff e9 7f 6a fe 33 ff 1b ff 87 fb 3f 57 7f 7a ff 4b ff bb fd 1f c0 17 eb d7 fc ff 60 7f ed 78 b5 fe 2f fe Data Ascii: RIFF(WEBPVP8 (xXX>m.G$"!)4@cklo'4l $O6%-nk`@kK3#;J~vV^}2?'5+}jYk;~H\|~?<?=7j3?WzK`x/
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 3e 5c 7e 3c 1a 6c cf 70 36 b2 e9 75 13 8b 0d 31 99 eb 6c c9 35 af d7 14 23 fb 5e d7 9a 0b 1c b2 10 03 5e 8d 99 e6 12 8d 5f be 27 07 d7 34 94 c8 27 03 d9 e1 fa 72 60 3e 4a c7 47 cc 13 b3 da 14 1e 85 6b 40 0b 1e 96 56 e6 df e9 31 74 7e 98 69 54 5e 01 29 82 ff 5e de 9f f0 fd 80 94 0b b1 68 91 8c c0 9a 71 1c a4 c3 31 f9 02 a2 44 5f c7 93 d9 3a 70 9f c1 e2 60 e0 69 5e b9 13 19 50 98 41 4a a5 fd a7 be 87 24 a0 b5 0d 4f a9 03 ca d3 67 9a 36 57 bf 17 6d 6d f4 cb f4 1d e1 ee 5e c1 39 32 f4 ab 05 91 1c 41 1c 04 4e af d1 17 7b 9b c1 b0 fe aa 03 d9 70 da 50 26 05 13 4a f1 7c e9 b7 88 59 1e e7 03 a0 3d d3 04 e8 38 8b 68 c1 2b ab cb 1c 66 aa 4e 5c 8d 88 7d ff ae 3c 83 12 bf ab 69 60 ee ae 38 cd a9 4f 41 05 b1 d7 8d 67 f5 80 2c ce a4 d3 6f 79 0a 50 27 03 4e 24 62 ec cc Data Ascii: >\~<lp6u1l5#^^_'4'r`>JGk@V1t~iT^)^hq1D_:p`i^PAJ$Og6Wmm^92AN{pP&J\|Y=8h+fN\}<i`8OAg,oyP'N$b
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 1b 7b 26 60 79 32 bc f9 39 b8 74 e3 ea 30 27 02 e2 41 52 c0 a5 d8 3e e1 c8 2b 83 94 60 a3 1a 7f ab 20 b3 70 eb 1e 2f b3 59 76 a9 83 a4 fa 5a 58 3d cb cc ed d2 be ee fb f4 c6 74 70 5a 42 89 e0 40 f0 bc 1e e3 a3 65 36 9a e5 6a d9 56 f9 9d 87 0c 0a a4 ec 5e 42 33 b3 67 be ef 6a fc 55 b3 ab ca 50 48 db 11 66 6e c6 00 ac af 92 43 f3 5c 9b 59 93 62 5f e1 30 23 ab a1 a9 0b a8 4a ea 95 15 9d 29 85 76 16 83 94 5c e3 f6 75 80 76 81 af d3 ed 31 93 2f 6a cd 58 2d c7 0e a4 d2 21 da f3 f0 17 e2 a8 5a d4 20 ad f0 33 4e e4 b8 88 ea eb 15 c4 5f ec e0 82 3e 29 d4 32 79 eb 8b 08 86 4c 9f c7 9a fc e0 f0 a3 63 7a 78 ab c5 9a 04 9d c6 21 6f e8 bd 71 2e eb 71 ae 1c 31 0e c7 4e 35 b5 b5 71 0a 0b d3 44 c7 ab 92 e9 cd 28 5c 8d 2a 20 7f 7a f6 e4 c9 73 30 05 64 6a 4c 8c f4 86 4f 4e Data Ascii: {&`y29t0'AR>+` p/YvZX=tpZB@e6jV^B3gjUPHfnC\Yb_0#J)v\uv1/jX-!Z 3N_>)2yLczx!oq.q1N5qD(\* zs0djLON
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 3f 65 30 b6 88 f6 d6 42 ac e4 0e 8a 79 3b ae 5a 15 7c ac da 37 30 ed 23 aa 62 12 aa f2 3c 79 6e cd e0 7e f2 a6 e6 9f 41 03 10 c8 0f 9a 84 eb 29 cb af f7 18 b6 ef c6 c2 62 fe 1d 66 1a f9 9f 62 e0 c9 f9 f6 da c8 b9 ea b1 18 bd 3f a4 66 35 e9 e8 ea 51 84 c2 2c 7e c1 bf af c2 f1 ab 6a 49 7d ee 9e 83 63 79 ff ef 44 0f f3 d9 fd 51 e6 85 9c 8a 0d b9 9a c4 e7 b6 4f 2c 15 3b 99 fc c5 f9 20 83 f4 02 c3 b4 c2 84 87 76 ff 69 fe cc ba 77 8c b0 da 99 b2 d1 a1 a2 74 a4 c5 da dc cc 25 07 b7 b1 e4 52 db b3 3e 52 64 57 8d 47 b7 61 1f ff fa c7 d9 fe 9d 65 3d 1f 1a 12 db 87 e0 49 9f 90 f5 62 40 bb 36 5e a1 a7 f8 6a 83 c7 0d 5b 9e 91 d1 36 d8 f8 58 90 7e 94 2a 2b 31 d8 34 1f 7c 25 c3 64 ce d5 d5 8f 5b 00 6b 66 ce 0a a3 af 5e cd a4 bb 63 33 48 2e 93 8f 3a b4 83 d0 f0 40 48 8d Data Ascii: ?e0By;Z\|70#b<yn~A)bfb?f5Q,~jI}cyDQO,; viwt%R>RdWGae=Ib@6^j[6X~*+14\|%d[kf^c3H.:@H
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: d7 a4 15 c5 2b 72 3c d1 25 cf 8b 85 e8 be 93 47 9a c6 64 53 26 39 0a 00 b6 38 97 ef e1 81 8d 7e 11 e8 b4 30 7e 5f 37 e5 6d 41 fb fd 98 19 cf c6 d3 f1 40 d8 12 b6 3d 5f 47 08 59 43 69 e3 da d5 67 be d6 55 9b fd f0 91 d4 98 9e 25 9b 11 0e da 5a bd 61 f7 6b 83 3e 7d bb 9b e8 69 4f 25 4b 30 4f a5 db 77 31 77 4e 4f 3c 88 a1 9d 12 08 cd e4 26 a1 25 b9 31 ea 3a 6a 3b cf 18 7f 31 6b 2b 91 7f 9f 11 42 71 9a ff ff 82 6f 5b ed 3b f1 93 1e bb c8 cc 09 d9 b7 39 0b e3 e6 a1 d2 d8 2c 8f 1f af a4 87 85 84 dc 50 3f 94 8b 4d d3 23 e2 34 78 7e f7 2b 02 99 9a ab 37 9e 96 d3 fd 2c 9b 2a c7 53 6a 95 26 90 ee ce 3c 90 ae 0b 17 bd 13 bf 32 06 1f b8 b8 2a 3e e4 35 23 16 2b 56 4c f8 76 69 db 47 d7 35 70 63 31 f4 48 dc 90 4e a6 62 d3 9b 80 8c a5 e6 c8 8c 06 36 ec a0 d9 bf 0c 35 71 Data Ascii: +r<%GdS&98~0~_7mA@=_GYCigU%Zak>}iO%K0Ow1wNO<&%1:j;1k+Bqo[;9,P?M#4x~+7,Sj&<2>5#+VLviG5pc1HNb65q
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 1b e3 2e 17 cf f4 2b cd 32 3e a6 9f dd a7 66 31 6d cc e2 40 b9 5e 90 f9 dd d8 6c b8 38 fa d4 40 7a 7e 13 5d 8e 44 2d 79 a4 63 ba 56 fa fa 80 d9 66 5d f0 ea 27 8f cb 86 15 10 10 e5 70 d0 7a ca c4 12 8d 8c 39 80 e4 60 bd 45 89 74 27 56 99 b6 e1 aa bd 18 75 53 cf ed 97 7e fa 3e 7d c7 03 82 df 2a 77 d6 e9 91 2e 06 51 3d 24 d1 5d 9c 86 3b c9 bf 26 ce 90 de 47 e7 3d 89 51 f4 e9 92 14 b8 50 b1 3f 92 d2 93 75 d1 94 08 60 00 ff a1 58 5f d4 46 d8 7f 7a 97 69 b2 95 b5 17 5e 8d c3 31 16 df 21 24 fd ca 75 35 de 77 b3 77 aa a8 12 53 10 f5 32 6c 2d 62 a0 91 1c 18 90 21 8f 90 19 26 32 2d 59 7e 5a 5a 10 8a 95 fb 46 d5 43 90 dc 76 23 ee 73 c8 60 1b c6 43 65 6b 12 0f cf c7 e9 48 da 78 1b 97 f2 bb 44 8e b4 8e a9 8a 95 6e 5d 0e bc 79 82 6a 35 c2 37 36 89 c6 89 0b 92 a1 a4 0e Data Ascii: .+2>f1m@^l8@z~]D-ycVf]'pz9`Et'VuS~>}*w.Q=$];&G=QP?u`X_Fzi^1!$u5wwS2l-b!&2-Y~ZZFCv#s`CekHxDn]yj576
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: f2 39 5b b5 24 83 0b b6 a0 cb 13 b1 a5 24 f0 5f 4e 2a c6 02 4c bd aa 82 86 02 59 ea 59 c5 e0 4c ee ef 4d 3b 5c 1f df cc 69 bb fd 83 be 4f 4b 49 fc 70 97 dd 37 a0 72 48 e7 82 f1 0f 82 71 ce 96 e9 ab a9 f4 9a 5c 99 4f 40 56 86 84 c0 ef 4b 36 17 5f d8 da 82 f9 04 ae 42 45 c4 16 e3 32 3f 52 f3 a8 f8 d2 5f a3 6b f2 43 25 e2 e3 11 a6 c9 1c f0 f7 2a bc af 53 12 7a 0e 6c 1f b8 05 f0 8a 0c 25 e1 66 56 38 2f 24 00 89 56 8e 40 6f e7 72 d9 50 a6 1f 8f 04 b6 91 64 44 b5 20 d8 f3 de 67 f1 0c de 3a 93 43 e5 7c 3d d6 98 93 06 40 e4 4f e7 dc 5f cb 71 ca e8 5e f7 32 bf e7 2e 5e d4 ce 90 97 bd cf 0e b2 0f dc d6 df 1d 9a 44 4a 03 4a 29 8e 9b 2a ca 1b d1 cb 31 a2 b5 68 a2 e8 76 60 28 d2 79 4b a2 3c 2c 3a 5e 73 c0 ca 91 41 ec 47 76 b2 27 c7 0c 1a f2 f3 ed 79 c2 bc 12 9d 5d c0 Data Ascii: 9[$$_NLYYLM;\iOKIp7rHq\O@VK6_BE2?R_kC%Szl%fV8/$V@orPdD g:C\|=@O_q^2.^DJJ)*1hv`(yK<,:^sAGv'y]
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 27 e4 f5 ac c4 be 53 6f ce 0f 0b c9 a6 0c 35 c8 d9 94 5f 96 17 57 f2 6c 73 ea 08 74 5f cb ad 6a 4c af f7 ea 3c fa db 30 90 de 47 e2 06 c3 ee a9 af 08 83 b1 b5 97 d1 b9 4b 21 06 35 b7 97 19 6f fe 0f ca 90 7a 18 7b a5 46 49 fd 48 e4 24 cf 0a 99 20 0e 37 31 6f 8f d5 6f a8 80 d0 56 54 32 36 3f f9 df b9 57 b3 f3 06 05 38 60 c5 c3 74 5a 18 f1 0f 7d 9a aa 36 71 cc 33 6f 5e 50 1c fb b1 7d a7 f3 5f 93 3d 3e 37 b2 5c ce 0b a9 d6 cf 93 80 dd ee 6a ce de a1 e6 02 d6 fe 7a cd 0d 71 c0 88 24 70 11 f1 d8 fe 15 cd d3 2f c3 ca 91 e6 7b de 46 31 24 45 17 6c 9b f0 41 7e 6a 06 d2 a6 10 fe f1 4b c1 ef 9b d4 9f de ef 64 5e 61 d8 72 1e 5b e8 0c cb d7 dc 9b 31 60 50 89 ae c8 7e b4 64 a8 4e 6c d9 33 11 a2 0d 9f 2e 9c 30 e5 a2 fe bc ff fc ef 84 f6 d1 d5 6f b6 3b 79 b3 97 54 03 65 Data Ascii: 'So5_Wlst_jL<0GK!5oz{FIH$ 71ooVT26?W8`tZ}6q3o^P}_=>7\jzq$p/{F1$ElA~jKd^ar[1`P~dNl3.0o;yTe
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 62 00 23 8a ec 59 00 56 b4 49 70 47 d3 d1 c9 bb f1 44 de 7c 59 be 52 e5 b8 f1 86 5d 88 92 2c 72 d6 a7 3a 58 0d 04 8c 40 7c 33 f9 a2 96 eb 16 83 29 d2 49 96 c5 73 7e 87 a5 5d 28 e5 9b fd 5e 18 cc b5 66 5a 61 9e c8 46 0e 26 39 d5 80 9d d1 e2 f8 03 6f 42 00 37 2e 62 8b ea 92 ee 70 28 35 2c 26 f0 53 7e 5e c4 b7 59 e4 2a e4 6c 0a 27 c1 90 bd 60 db 20 eb 95 a1 ad b5 d7 7b 5c 0a 9a 84 ee e6 d7 b2 96 98 cb d9 29 2d 52 1d 3e 62 9f 62 ca 02 58 02 82 c1 0c bf 38 b3 8b 6a 17 50 d9 c1 e7 87 d3 e7 41 36 32 03 48 86 f5 8d 90 33 48 2f 4e 7d c1 d1 03 51 4f da 39 38 3c 2e 7d 47 3e d7 48 e8 fb 23 13 a8 f8 a7 84 5f a2 45 76 87 49 64 2a fa 5e c3 aa b1 da 37 a4 fe 2a 7f bb 4a 3f 27 01 51 cb 1c 54 53 97 f9 76 9d 62 92 96 17 1b e0 fd e3 e5 91 99 bd 3f 24 74 87 ac 6c 90 f2 50 17 Data Ascii: b#YVIpGD\|YR],r:X@\|3)Is~](^fZaF&9oB7.bp(5,&S~^Yl'` {\)-R>bbX8jPA62H3H/N}QO98<.}G>H#_EvId^7*J?'QTSvb?$tlP
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 1d 64 cd 7f 1e 8b 5b 58 43 f0 80 40 04 20 eb 7c 6a e6 31 f2 63 29 19 85 fd dc f0 ee 80 69 2c 5c 8f d5 8a 8b 27 45 12 76 cd eb f1 0a 5c ed 64 15 58 7c 07 78 91 74 4b 11 b8 de 00 69 69 34 1a b1 f9 14 04 4d 1a 92 83 de c2 fb a9 73 a6 08 11 77 9c 78 53 96 97 20 35 7a e9 36 e4 ce 34 6f ee a7 84 2a ae 5c 74 50 42 6b 44 22 1a 92 6e df d6 1c 96 25 ec ef 09 0c ca 6e 2e 59 c6 b3 80 86 ff 0a 91 0c 0b fe e6 80 9a c5 af f5 3e 2f 7b 04 13 ef fc 34 e9 32 7a 6e ca 95 84 b0 1f d8 58 1e f8 72 57 8a 86 cc f2 2b 60 e9 5f 98 75 6b a7 b9 6f 71 c8 d5 1d 56 67 ad 1c 2d 56 87 68 ef 7a 37 c5 28 7b 30 85 2d 4b e3 f7 47 01 72 54 0d 25 c3 14 5f 11 9b 6e 27 90 bf f6 b4 42 1a 3a 49 3b 6f 36 b2 4c 85 ba 4f 2b d6 45 e4 db e1 4b ea 12 41 22 00 74 92 43 a7 3f 34 a7 41 ed 6d 95 4f 4f 14 cc Data Ascii: d[XC@ \|j1c)i,\'Ev\dX\|xtKii4MswxS 5z64o*\tPBkD"n%n.Y>/{42znXrW+`_ukoqVg-Vhz7({0-KGrT%_n'B:I;o6LO+EKA"tC?4AmOO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49829	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:50 UTC	662	OUT	GET /uploader/d1000179a6d6aeab89d03ab4e2125ff2.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:50 UTC	571	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:50 GMT Content-Type: image/webp Content-Length: 28204 Connection: close x-oss-request-id: 6650748BB6DE1D3635B83CCE ETag: "A5C1FCC4869C0AB77A624D857BF6765D-1" Last-Modified: Fri, 05 Jan 2024 05:42:57 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 163 x-oss-hash-crc64ecma: 12640285698440337696 CF-Cache-Status: HIT Age: 42663 Expires: Sat, 25 May 2024 02:56:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e19a68fcf7dc-BNA
2024-05-24 22:56:50 UTC	798	IN	Data Raw: 52 49 46 46 24 6e 00 00 57 45 42 50 56 50 38 20 18 6e 00 00 b0 7b 01 9d 01 2a 8f 02 d4 01 3e 6d 34 94 47 a4 23 26 a1 27 57 8a 00 d0 0d 89 67 6e f8 37 3b 6c e1 82 4a 78 ab 89 d6 ff 85 7d 56 f7 8f e1 79 e8 da 3f c4 7f 6a fd 5d f1 b9 fb 3f 37 ba f3 cc af cd 7f 76 ff ad fd fb f3 3b e5 cf fd 6f 56 bf ab bd 83 ff 88 ff 53 ff a5 fe 2f fc c7 68 bf 36 1f ba 3e ad 3e a4 3f c2 fa a7 7f 73 ff af d7 31 e8 d5 fb 01 ea bf ff 6f da 77 f6 97 f7 2f da e7 54 0e 5e 7e 7f d6 af e7 bf 72 ff 47 d8 32 e5 ff 39 e0 47 f6 7e de 9f e1 f7 ab fa ef f4 fe 81 1e d3 f3 b6 fc de d2 8d ef fe 27 a0 8f bd 9f 8b f4 8d 99 df dc 5a 81 f9 8f de fb 40 af ea bf e9 fd 5f ff d9 f2 31 fb 67 fc af 61 7f 2e 4f ff fe e9 bf 74 3f ff ff d5 f8 8c fd ab ff fe 56 c0 ec ba f6 36 0f 2b 52 1d 97 5e c6 c1 e5 6a Data Ascii: RIFF$nWEBPVP8 n{*>m4G#&'Wgn7;lJx}Vy?j]?7v;oVS/h6>>?s1ow/T^~rG29G~'Z@_1ga.Ot?V6+R^j
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 7f fe b7 d5 6b 07 ab c0 5c a7 08 bd 3d 7d 5c 21 11 96 8f 61 74 b0 5b 58 f6 a6 62 3e a9 d0 7b 49 8f 41 9f aa 87 8d 8c e4 fa f2 8b c6 bb 7b 5f 42 6b 3f 12 ee d0 13 1f 5c 75 a7 89 a0 d0 5c 8d 7a 9a f1 fc 7f df dd 0a 7b 2e bd 8d 83 ca a5 16 09 fa 7d 9d 65 7b 52 00 25 c4 a7 45 82 3f 3c 1e 1c fa 20 00 75 45 99 1c ba 99 05 61 f7 70 fe 5e 33 82 3b 92 d2 d1 35 43 5a 7f 48 4f 09 a1 3e 0d 2a 7e bb 83 5b a1 25 e9 37 fd cb fe bb 79 85 4b 75 66 a4 3f a1 24 df 9b 7b 12 99 5c 88 aa 38 da 81 c1 4a 4a fc e9 45 9d 10 86 f5 bb 70 1e a4 a8 b7 47 0b e5 6f 9f 87 04 22 c6 d1 05 0b c6 af 9a c8 e6 60 96 fe 57 3b 3e 38 0b 45 08 bd a1 dc 64 f6 72 6e fd e6 2b 5f 47 95 b7 76 b8 1c 06 63 91 df 53 30 44 cb 88 a2 a6 9b 4d 0b bc 7c 76 25 7c ce 26 c5 5d 17 a1 4f 62 94 ff 51 29 01 66 09 2f Data Ascii: k\=}\!at[Xb>{IA{_Bk?\u\z{.}e{R%E?< uEap^3;5CZHO>*~[%7yKuf?${\8JJEpGo"`W;>8Edrn+_GvcS0DM\|v%\|&]ObQ)f/
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 0c 94 97 63 ed 5f ab 5b 2f 3a 1a e8 f3 78 4d 44 62 f5 e7 98 4c 70 b3 fe f0 c0 68 b9 77 d9 5f 24 49 df 95 b3 f6 55 e3 d4 99 40 4d 5c 7a 05 67 6a 8b 6c 20 35 6f b3 5b b8 69 a9 2a db 61 c1 c6 73 2e 35 22 4d 54 3e 3f bf 73 a0 90 a7 eb 42 d1 8c 78 65 b8 ff 79 29 04 f6 f4 18 0b 75 57 0f d9 ff 79 15 51 38 93 11 76 27 43 8a ef ed fe 3e 51 21 57 e5 e8 ce 8b 90 04 76 8e 56 cd e6 d2 7b 33 e2 c6 94 75 68 7e ac e5 6b 05 d9 98 60 46 dd bd 4b ce b1 4d 4c ac ef 45 76 c8 03 23 ad 91 a8 1e 0f 2c c6 09 25 91 9a d6 a3 ff 04 24 e1 4c e4 b1 92 b5 cb f0 23 7f 55 49 0f ff 5d f7 98 61 46 be 46 26 96 eb 4b 5a c4 bf e4 4d 65 85 e0 06 5a da d3 24 c8 d6 0a e0 bf bc f1 aa c6 71 20 1e 91 2a d5 58 d1 c4 7c ff 15 54 07 52 e3 17 6a dc ab de 6f 0e a0 a8 ee e2 71 1f 2c bf 77 7c 97 d7 e5 ff Data Ascii: c_[/:xMDbLphw_$IU@M\zgjl 5o[ias.5"MT>?sBxey)uWyQ8v'C>Q!WvV{3uh~k`FKMLEv#,%$L#UI]aFF&KZMeZ$q X\|TRjoq,w\|
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 05 f8 1b aa 92 7e 85 35 20 05 4c db 9e 44 c2 c6 53 e0 a4 78 5a f1 37 7f 4a 7e 7c c7 84 b8 85 03 b6 72 f1 5f 73 5b bf e5 15 8e 64 59 b2 4b e7 87 48 05 94 d8 af f2 66 7d 4c 2b 70 da b1 e3 78 ed a9 01 c4 8e 9d b7 c0 ee c9 57 5f 27 61 15 cf 4c e6 1b 68 0d 1d c4 bf d0 d5 f2 66 3e 95 ca 7c a6 26 5e 3c 07 b6 39 28 1a 7f 39 ea e9 68 00 00 1c fe 0c 11 ce 90 58 bc ff f4 b4 24 48 81 d4 02 2d f7 92 99 c7 9f 1d b7 5e 30 a2 97 96 87 3e 01 cb 7e fb 8d d2 d2 bb 93 ab a9 97 1b bc 64 12 20 ee ea 60 fa 49 8e fa 64 92 3d 23 79 e0 23 14 de 6c 56 4e c6 60 5c 77 80 32 ac 76 3a 6d 1b 2b fb 01 4b e0 1f dd dd 8e 61 0b 9a 95 c7 18 c5 82 25 b2 a6 96 7f 40 5d 75 e1 50 4b 50 ab fe e9 0d 91 1e 2d 83 60 8d b2 93 7e ad 0e 38 67 4e d1 c4 b2 64 0d 99 3f 12 36 f1 aa ef 6a 34 b4 e9 0c 0f e2 Data Ascii: ~5 LDSxZ7J~\|r_s[dYKHf}L+pxW_'aLhf>\|&^<9(9hX$H-^0>~d `Id=#y#lVN`\w2v:m+Ka%@]uPKP-`~8gNd?6j4
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 6c 4f dd fb 99 35 29 37 9d a0 44 94 4e 57 15 8d b5 79 74 80 13 8d 7c 07 4f 2d a5 cb 4f 55 76 b7 9b 72 68 86 80 b0 14 44 1d 87 7c 91 b5 65 61 70 b9 3a ab 4b 5b 31 ec 90 8f 3c 1a 94 f5 c0 42 9f f8 5c 87 70 1c 64 95 1a ee 04 14 6f 7e 13 35 82 b4 27 fd 78 5f 97 ad 35 55 dd 77 02 23 25 10 39 80 b0 42 0a f3 33 13 4c 48 f1 5e 69 f5 91 49 68 d4 76 5a 95 de 43 c1 9f 47 bc 54 12 d8 a8 98 17 c3 18 a4 eb 61 50 52 38 f8 ee f7 32 24 1e 99 10 d2 89 60 39 af cc e7 6e f5 af 30 56 83 5d b4 f7 c4 c7 a1 34 0f 4e 8f 95 4f 2d 2a 73 c0 42 51 a7 9e 4a 79 64 29 b3 50 27 71 38 cd 6e 7e 5b 46 45 eb 67 7e 95 05 d4 e8 e5 c1 1a ba 68 96 19 16 be ab 52 90 2a a9 7a e5 8a d7 15 38 50 b1 7e da da 91 41 09 26 eb 91 20 e9 f7 28 ad 96 50 ce 61 a4 bf cb ad 53 c7 83 c3 b1 35 c4 1c 7e 56 82 91 Data Ascii: lO5)7DNWyt\|O-OUvrhD\|eap:K[1<B\pdo~5'x_5Uw#%9B3LH^iIhvZCGTaPR82$`9n0V]4NO-sBQJyd)P'q8n~[FEg~hRz8P~A& (PaS5~V
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 01 ab 15 64 71 ac 92 61 43 06 78 02 b3 dd f6 26 c5 3d e0 22 87 ba 7f 08 e3 80 2d 38 61 cf ef 64 ca 7c fb 93 5b b9 5a b0 70 bb a9 5d 8f 49 54 ec 9a eb 4f c2 b3 ba 03 41 75 6a 5f c4 e9 2a 69 3a 3f ec f5 9d 69 73 f4 8b 2c 00 bf 36 6b 07 01 8c b1 ed 73 23 eb 1a e7 7f c8 68 20 74 d0 9c d9 16 be 65 5f 2c ba f3 04 8a 47 7f ce ed 6f c5 23 d7 da 69 cb d7 04 fc af ba e0 f2 94 e3 78 24 c6 50 78 e5 eb 4d 72 81 55 35 68 f6 93 27 5f c1 d8 b6 6e 85 0b 2c f0 c7 98 3b f3 c2 c4 a0 ab b4 79 76 84 09 86 0e 7e de ec af 11 5c d1 13 c7 6b 23 75 48 ed 3e c8 54 38 f0 a2 00 40 35 d7 94 f0 d5 2c 5b ee c8 cb 52 f1 b9 52 18 37 e9 6c f3 5d aa c8 34 15 4e c0 1d 08 37 fe cb 3a 02 19 42 ad f0 51 ab 72 19 1c b0 4c d4 e7 a3 72 f1 7c a6 08 52 fb ba 35 ef e1 36 97 0f 84 9f 83 10 8c 27 66 33 Data Ascii: dqaCx&="-8ad\|[Zp]ITOAuj_*i:?is,6ks#h te_,Go#ix$PxMrU5h'_n,;yv~\k#uH>T8@5,[RR7l]4N7:BQrLr\|R56'f3
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 7e e8 41 cb 37 7d 5d fd b0 85 b7 9c 09 10 56 02 59 58 c3 95 fa 55 67 30 52 72 c5 70 ab 79 12 a5 ae 82 27 78 58 cd a1 8f bd 02 c9 4b 98 6a 67 6e ba 7e 54 59 84 ca 3f 77 31 98 92 35 5a 33 e7 69 8f 75 91 88 dc 6a 78 fb 36 1a 9a f0 09 af 8e 86 1d 11 67 ca aa 8b b7 b3 01 8f bc 32 b7 a4 0b ae 41 f0 83 30 42 26 e7 2c 32 37 7e 94 43 df 30 bd 37 80 ee 71 ef 5f dc ba 39 62 95 06 20 dc 5d 0e 31 52 42 6e ba fa 22 ef 54 d7 75 6c 53 8a 8f 4a 35 42 68 58 09 20 e9 67 01 ba 1a 74 6d 05 08 82 9d 21 c1 c5 64 60 61 fe 39 36 3e 1e b0 84 7d 56 72 fb 37 9d 81 46 43 db 6d 63 c0 09 a9 6e 50 7d 38 fd cf 6d 69 91 b0 e7 58 6c c1 7f 51 a4 19 39 78 83 24 1c 40 90 1a bb b4 e7 f8 ae 22 3d f7 8d 3c 3f 2c 55 5f 28 05 11 6d 3a 33 44 6a 0e cb 25 89 7c 47 fc b8 2d db be a5 86 16 e1 49 07 4f Data Ascii: ~A7}]VYXUg0Rrpy'xXKjgn~TY?w15Z3iujx6g2A0B&,27~C07q_9b ]1RBn"TulSJ5BhX gtm!d`a96>}Vr7FCmcnP}8miXlQ9x$@"=<?,U_(m:3Dj%\|G-IO
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 1c 26 be bb e0 b4 e4 08 8e 64 df 65 15 b5 24 24 bf c2 70 3e e8 36 34 c8 96 37 3b 10 a4 a1 83 61 92 47 06 5b 80 c6 4a f1 85 3b 03 ca d0 6b 7b 3e 7a 23 f5 b2 c6 42 7f 36 9f 06 2a c6 83 a8 e8 58 1d b7 6a 7f b5 2b ec 40 3a fc 1b b9 9f 92 01 1a e7 b1 52 44 be 44 88 0a 35 73 25 12 c9 fc fe 02 44 ec 19 f0 28 e7 e4 9b a4 87 74 27 2b d3 7c 51 78 87 12 36 2d cc 26 61 32 b5 f8 a4 7e 61 b6 e7 bf f9 69 9f 73 91 ee 16 5d a8 bf 27 0f 5b b5 27 93 6c f4 dd 47 6b 7c 8c a1 ec 13 73 24 3c 6e 1f 43 02 42 95 cc f3 b5 cf b8 ff 1a 0d 4e e7 41 8f 1d 93 80 4c 09 5d 58 0e 42 f7 6a 33 3e d4 91 35 41 0c 4c 85 7d a3 f2 3b e9 61 83 e4 5a c4 74 47 49 19 0a e4 69 5a 08 d0 5f 25 f5 ea fa 7c 50 c1 8a 5d 95 1a 7b 8a cb 78 f6 c8 0a d6 2c d3 fb b4 b1 89 8b 31 08 52 c0 a7 65 f1 f9 5d d3 cb ef Data Ascii: &de$$p>647;aG[J;k{>z#B6*Xj+@:RDD5s%D(t'+\|Qx6-&a2~ais]'['lGk\|s$<nCBNAL]XBj3>5AL};aZtGIiZ_%\|P]{x,1Re]
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 3f d8 dc b5 82 db 17 60 41 3b 9f 6f 2e bb f0 93 7f 6b fa 9d e6 1a fb 23 2e a3 79 75 0e b0 9c 32 23 02 3a 52 ca 80 1d 17 0d a1 2e 2a 32 0e 61 b8 42 8a bc 65 4b e8 16 15 b9 ec 3e 04 f4 26 6c 3d bf cb 3c 7c 79 b3 37 aa 64 73 b4 c8 33 d9 f2 d2 ca 50 5e eb 39 7f 11 54 06 3a 15 fc 29 b3 87 53 2a 9a a7 ef ad d7 1d 26 44 56 5a 40 70 18 84 6f 1c a6 10 db 56 66 8c 90 79 d5 7d 59 aa 40 c5 07 33 21 95 f9 d8 78 54 51 73 36 d9 7c c9 24 00 a7 a1 12 c5 2a 27 18 f2 66 11 b1 b4 47 d5 15 96 ec c9 7d 08 ed db 65 83 a3 6e a3 4e 0e 6a b9 f9 a2 cc 73 d1 41 0c be 1a 2c 0c 28 09 50 49 e8 b3 36 11 e9 32 e0 86 1d 41 e2 7e 1b a4 bb e3 1a 90 ef 4b d4 be 79 41 51 89 a8 9e a2 5a b6 55 ca 75 9b aa 64 2e f3 14 90 e8 1b 25 d6 08 48 0e ea 44 0b a3 4c 9b 71 a5 91 0f b7 4e cc 66 45 c2 3e 9c Data Ascii: ?`A;o.k#.yu2#:R.2aBeK>&l=<\|y7ds3P^9T:)S&DVZ@poVfy}Y@3!xTQs6\|$*'fG}enNjsA,(PI62A~KyAQZUud.%HDLqNfE>
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: ff cd de 62 00 d3 b8 36 0c 42 e0 a0 e4 65 c6 c3 bb b6 78 79 ac 86 30 2c 6a 96 43 cc f5 cd 37 93 fe 07 0a 13 6d 1d e2 ac 03 ea 2c 99 1c 07 fb 7f b9 b6 58 56 53 99 34 10 82 41 2f 90 70 f2 03 70 f5 09 30 4d 6f b2 b3 9e 72 ba 20 6e 6c 8b 52 e6 d3 19 7b 5d 5e 86 94 a5 b8 ac a0 1d a6 a5 63 aa c7 93 71 bd 53 44 a0 9a 20 0c 6e 64 87 dd c4 3e a6 61 dc de e7 e5 ae ea d8 cb d9 04 5c 8c 12 de d9 65 88 11 31 11 8a a4 13 fd 9c ea 02 c4 f1 d3 b2 36 15 81 33 23 97 94 89 68 09 7c 58 d8 40 9a 46 d2 74 76 6d 6c a8 76 75 83 25 7a 36 18 a2 fd a7 f1 1a 0f 1c 64 58 16 96 df a9 4a d7 59 18 78 4b d0 af 75 ea 30 d3 65 47 4c 1e 3e af b7 80 f8 6d 16 85 7e 83 2d 85 b7 bf be a8 92 69 a2 a6 3a 21 7e b9 0b 70 4e 95 4a c3 86 11 15 59 e0 88 01 f2 2e 3a 9b b2 64 d2 60 cb 66 f8 bc 5c 54 e0 Data Ascii: b6Bexy0,jC7m,XVS4A/pp0Mor nlR{]^cqSD nd>a\e163#h\|X@Ftvmlvu%z6dXJYxKu0eGL>m~-i:!~pNJY.:d`f\T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49828	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:50 UTC	662	OUT	GET /uploader/a30aeca4280b3df9337a23d751cfbb46.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:50 UTC	571	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:50 GMT Content-Type: image/webp Content-Length: 28450 Connection: close x-oss-request-id: 6650748BE901193636B681E2 ETag: "51285F66CA1A5BFA5DCD816410E7B8F4-1" Last-Modified: Wed, 10 Jan 2024 08:28:40 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 279 x-oss-hash-crc64ecma: 10624972221113542133 CF-Cache-Status: HIT Age: 42663 Expires: Sat, 25 May 2024 02:56:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e19a4d42f7c8-BNA
2024-05-24 22:56:50 UTC	798	IN	Data Raw: 52 49 46 46 1a 6f 00 00 57 45 42 50 56 50 38 20 0e 6f 00 00 f0 09 02 9d 01 2a d0 02 d0 02 3e 6d 34 97 48 a4 22 af 28 22 71 5a 19 e0 0d 89 69 4b 78 ba 3e d3 7b 7b 0a c2 ec 7e 10 a7 f6 f3 3d 9b b6 a1 a7 0c a1 a2 db af da 88 fc 5c fb 47 43 e4 07 c5 e9 82 5b 98 79 61 f9 d7 f4 3f f1 3c 29 fc fb f0 1f 3b 5c 8f e2 53 6e 4e cc ff 59 ff 23 d0 2f 19 bb 3e 40 2f eb 3e 56 d3 65 f9 ff 50 4f db 6f 51 fc 12 28 15 e3 b7 a4 57 da 3f f1 7b 05 ff 3e ea a8 36 3c a3 c5 e7 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 Data Ascii: RIFFoWEBPVP8 o*>m4H"("qZiKx>{{~=\GC[ya?<);\SnNY#/>@/>VePOoQ(W?{>6<wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 80 2a d6 7a 8b 79 e0 86 3d 58 9b 9d 95 7d 69 3c 30 1a b5 40 44 c1 b2 c9 0e ad dd fa 6b 41 56 6e 7c d3 ed 33 71 1e 3d 0a ec dd 67 52 68 cb 69 a7 c8 af 8a a5 4e 43 c8 f0 ec 11 f0 f4 87 d8 b0 0a a1 b1 16 1d 86 41 91 70 4c d1 a0 36 60 d0 6a 67 30 64 01 16 47 9d 9b 64 dc 25 81 eb 56 36 d8 8c 28 ee 4a f5 99 99 99 99 98 ec ef 03 0a 10 1a 6e c4 53 33 5a b1 2b 93 1d 10 a9 96 39 e7 e7 00 8c 7b a9 05 f9 b2 f7 b7 0d 52 ca 37 7b 5e ef e0 c1 76 27 31 9b 6a 11 88 ab 87 3e 44 af fe 8d f4 af af 92 a3 73 fd b3 a8 55 51 c4 f2 b9 81 e9 60 0c 1f 47 2c d2 da 03 cd 49 a6 d5 f1 ba 1d b2 1b 2d 80 7e 45 c5 6d 72 10 8c 2c d0 77 16 99 fb bb bb bb bb bb bb bb 32 3a 8d 80 3a 53 68 e3 a0 9a d2 50 a1 6b 92 80 ca f4 66 59 b6 4d a5 28 9e df bf 8a 92 b7 4d eb 6c 97 52 28 8c ed 00 18 35 5e Data Ascii: *zy=X}i<0@DkAVn\|3q=gRhiNCApL6`jg0dGd%V6(JnS3Z+9{R7{^v'1j>DsUQ`G,I-~Emr,w2::ShPkfYM(MlR(5^
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 7e ee fb 0a bf e7 70 1d 11 9f 17 18 3d 68 3c e7 22 77 16 9f c8 12 ba b9 16 9a 94 a9 16 80 b6 b2 42 0b ec 2f 49 db 0e 9c 40 53 90 e3 7f ab f1 c5 b5 ed 8e 88 48 da ce f8 32 c7 4c 6d 2e b6 b7 01 10 b6 da d2 0d 5d 3c 8c 11 aa 4d 42 8c c8 cc ff 3f d5 33 1f 25 7a 84 1e dd 1b 5d 1b db 4c 6e 81 65 11 a4 b2 4c a4 06 19 a9 a2 71 fc af 22 96 70 13 b4 cf b2 71 45 c2 4e bb f3 fd bd 50 33 d3 0f 50 90 a4 b7 cd f9 a9 15 20 1f 02 d0 84 5d 3f c9 d9 22 bd f6 de 7e 56 65 38 95 64 06 14 5a bd 1c 0e bb 0e 23 f7 75 07 cc 49 04 9d 97 8f 7a c3 88 61 cd e0 64 d7 60 cf 8d 7b 10 57 f5 d2 c8 62 1a 43 9d bd 04 f3 a2 65 dc 4d 4c 4c a2 14 eb 31 d6 c8 9e 29 94 e0 54 15 83 ce b4 df f8 86 0e 99 eb 86 64 44 dd 94 49 de ba e1 51 b5 ca 63 19 87 cd 84 d5 85 d3 62 a7 50 4c a6 01 a4 a4 46 19 da Data Ascii: ~p=h<"wB/I@SH2Lm.]<MB?3%z]LneLq"pqENP3P ]?"~Ve8dZ#uIzad`{WbCeMLL1)TdDIQcbPLF
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 55 cb e1 15 34 52 4e 83 0e 5d c6 9d 70 17 94 09 9f c6 be 89 74 6d af 62 a5 43 21 5f 40 aa c6 17 22 54 c1 d0 cc 8b 07 6e c2 0b 36 e0 4f e2 fb f9 9e 70 d4 c3 c3 fe 2d fa 2b 29 c9 9b 26 6d 3f f7 09 64 80 30 77 a4 3f 77 8c 36 64 91 c7 46 32 e1 f8 d3 06 03 94 54 0e 51 58 e8 47 57 68 50 d1 50 d4 98 cd 1c 76 e6 1b 05 27 27 75 a9 c9 9b 9f 28 d5 03 e3 d9 3b f6 36 16 05 7d 4f c0 84 ee 6d 4a 3a ec 8c 56 80 aa c9 a9 7e ca f6 35 17 36 b8 26 ec 1e df 28 de a1 04 9f 0c be da be 47 df 7b cc c7 c3 bb 6f 5f 50 a1 bb 78 7e bb 73 17 7e 86 4d 1f 29 ff be 81 44 93 a0 c3 fb 54 9d b4 65 b5 e2 38 4f 29 03 fe 2f f8 e6 ed c8 dd bd 00 86 67 2a 7f 2d 29 56 72 5a 85 6b 48 1a 71 be a6 7c 37 8d 2f e8 7a 5a 9b 64 43 08 83 29 1c f0 f0 70 1f dc ee 1a 14 94 5a 1e 31 00 16 e8 f1 ad f0 7c 22 Data Ascii: U4RN]ptmbC!_@"Tn6Op-+)&m?d0w?w6dF2TQXGWhPPv''u(;6}OmJ:V~56&(G{o_Px~s~M)DTe8O)/g*-)VrZkHq\|7/zZdC)pZ1\|"
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: fa 8a 4f c7 81 80 02 36 86 b7 78 18 69 94 af 65 72 2d 9d 82 de 1a d2 c0 f6 0a ec 8c d5 92 b3 8c 85 20 06 42 87 51 81 0d 69 c3 fc 71 e1 ee 0c 7c b9 70 ad 4e d5 1a 58 91 de 3a b0 c3 0c d1 e7 46 8c da 46 ef 90 45 e3 33 ab 2c 2c 4b 78 31 6a 96 46 0b 9a 2b 90 2e ad de d6 f6 c7 e3 50 c4 80 04 07 d6 5b fb 1f 98 b9 6b e3 60 fc 3c 54 2d f2 e0 59 7f 71 4f e3 c8 62 0f 97 d5 73 74 5e 5a fe fb 61 fe a8 3e 71 b3 c2 9e 65 30 0a 59 d8 b2 ff 3a 7f 05 c9 c1 2c b0 bf 91 f2 bb 6e c3 b5 45 a9 16 10 7b 64 59 60 63 c1 45 bf 24 35 a8 8c ad 8f 2a 51 34 e4 21 64 3a 7b 73 ab 87 23 47 4f 7f 2a c3 f1 1d 64 44 96 6d 37 d4 77 85 91 d0 43 4d 18 21 41 f3 6c 9c da b5 20 46 1c aa 32 28 9b e8 cd 08 2d 43 28 56 6c d6 f3 cf d7 e7 a3 5d 94 4f 25 fb 12 50 55 1a e8 2e 5a 8a 13 1f 8e 43 e8 8c 2b Data Ascii: O6xier- BQiq\|pNX:FFE3,,Kx1jF+.P[k`<T-YqObst^Za>qe0Y:,nE{dY`cE$5Q4!d:{s#GOdDm7wCM!Al F2(-C(Vl]O%PU.ZC+
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 4b 09 48 31 11 a0 d8 7b cd bb 8d 7b 99 8d e8 9d 7e ef e5 82 fa 63 53 ae 1c bf f0 07 5d 33 84 47 00 0a f3 f6 f9 e8 4b 19 a3 a4 1e f3 77 1f 78 6a 9e d8 2e ca 3b f5 77 08 24 2e 30 47 51 0c 89 6a 75 51 b0 79 65 22 44 e0 94 e4 e5 84 0a 1d 7d 73 38 c8 e9 b9 49 a6 4b bb ec 98 8f 85 f3 e2 ac f7 1c d4 40 74 e2 6d 2a 81 d3 c7 14 9d 00 d0 63 ce 77 60 aa 1e 33 ed 2a b4 59 78 b0 03 2c c5 ca 2b a2 66 4b 5f 52 41 74 96 fd 1b f7 91 07 83 58 ac 1b 26 ed 54 c1 fc 90 ef 1d f5 be ce ed 00 05 60 55 2f e7 c6 9e 1d 9f ea 82 81 38 ea a4 7f 64 a8 47 e2 40 00 a7 9f 58 06 ee c1 cd 36 e3 e5 da cb a6 aa 6f ad e7 76 a1 53 cc af 1e 58 68 82 21 b7 2a 25 bb b5 ff c5 22 23 8d 1f c4 ff d1 4d a5 e5 73 d1 5e db 9b 3d 3a bf 5a e2 2e ae 2e bf 07 7b 42 72 ca 31 79 01 2e b6 5e d3 90 40 cc ba 6d Data Ascii: KH1{{~cS]3GKwxj.;w$.0GQjuQye"D}s8IK@tmcw`3Yx,+fK_RAtX&T`U/8dG@X6ovSXh!*%"#Ms^=:Z..{Br1y.^@m
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 51 db 45 60 72 b1 47 09 1c 81 cf e3 b9 7e 55 cb 7f 08 89 50 0b e1 42 76 dc 98 e3 24 aa f0 f1 44 59 c7 9e 2d 04 00 8d fc d7 ff d3 05 14 97 cc 6e e6 21 19 cf ae 8b 68 7e 12 70 0c 86 47 9c 37 12 86 57 bf 2c 80 ea 7f 1f 14 3c f4 3a 9f 6e 23 1f 79 3b f9 22 12 59 53 6c ac 75 91 d6 a4 d1 8c 89 a0 e2 99 b4 b9 40 bc 80 19 5a 84 39 e4 eb f7 9e 7e ac a2 40 10 7a 5b 85 ed 9c dd df 3f 2a 53 b7 3f 7e 5b 1f c4 ab fa 15 40 ab 9d b9 98 39 96 cc ec 31 df 4a 86 7d 7f d6 06 fc 27 1f a9 7d 86 3d 9d f3 c6 80 83 7c cd 90 6b 19 05 f1 58 79 00 47 ac 2b e0 52 b0 29 65 d3 64 d0 33 60 b9 28 84 64 13 71 11 a4 d7 45 05 73 46 78 aa 25 d8 8e 66 2e 0c de 1b 37 aa 35 e9 b5 d1 81 0c 08 df 0f 63 60 f8 94 79 38 8c a8 c1 9a 32 9a 80 95 3d fd c5 4f 15 07 b6 97 b7 31 94 dc 54 a3 46 9d 89 b2 55 Data Ascii: QE`rG~UPBv$DY-n!h~pG7W,<:n#y;"YSlu@Z9~@z[?*S?~[@91J}'}=\|kXyG+R)ed3`(dqEsFx%f.75c`y82=O1TFU
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: d9 6c 16 c3 78 5c e6 0b 9f 73 56 23 6a 90 ed 3a 79 ab a0 5b 24 5d 1e ee 9a 2c be 3d 80 e6 7d c8 80 5c 0d f3 54 5d 47 a4 a5 8e 81 ce a3 00 b0 a5 7f 2a a1 89 36 cf 2f ae 4d d2 45 f2 0f cd 5f 5e 25 ca 88 00 66 b7 20 2d 0e 0a fb f0 bb e7 46 9b 61 0c b7 a9 30 63 d9 da 7b d9 a0 52 bb 07 fd 45 2d 14 7b 2c b9 e0 85 f3 06 cd e0 01 ef 7d cd 88 97 ce c8 e1 30 bd f3 0f 1c 02 c3 d8 0b 29 97 41 f6 18 34 5e 16 2f c2 91 2b 23 8e ab f7 3c 23 83 78 f2 27 7a 54 1f d9 c4 6e 66 51 20 13 07 96 b8 1f a4 28 29 2f 5f 0a 9e 52 9d 62 4d 39 3a f1 a5 77 a3 eb 9a 47 d2 3a 43 7c a6 69 f7 a9 54 5b 9f a8 ad f9 12 b6 43 d7 c6 d4 53 95 2f 94 06 a0 7f 31 9a 5b 9c 81 44 67 58 0a 8a 36 35 f4 58 42 18 8f 31 f6 f5 86 ff 61 1f 54 1b 8a b0 f8 c6 88 cb 5e fd eb cc f9 2a f1 e9 63 47 5d 2a 0d ec e6 Data Ascii: lx\sV#j:y[$],=}\T]G6/ME_^%f -Fa0c{RE-{,}0)A4^/+#<#x'zTnfQ ()/_RbM9:wG:C\|iT[CS/1[DgX65XB1aT^cG]*
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 26 c6 de 41 cf 62 7c 04 78 5d 20 a2 33 73 07 d7 c0 9b df d1 88 c8 03 13 35 1c 2d eb 43 e0 98 2b 19 6f 26 4d 1e 8a d8 f8 92 86 20 c6 a0 d2 4f ef 09 9e 7c d1 a3 38 b8 39 4a 1a c2 81 b2 7a 84 83 56 76 c7 65 3d 0e bd 52 b3 51 68 29 bc c3 0c e3 9e 66 f8 ee 55 8c db 98 40 92 f7 5d fd 5c 1b 32 30 a0 c8 60 da 42 24 49 78 c3 6c cc 0a ff 3d 7d 42 4a f4 cc 86 59 67 05 9b 64 db 4b f0 ca 98 81 b2 ce f6 a0 ce 7e 47 fc 7a c1 8a 6e d9 06 0a fc 28 e2 67 86 f1 1d f9 30 3f 93 2c 03 c9 a5 ea a4 ac 09 8d 9b 0b 86 ac 99 39 a3 0a 9e 43 2f 6d 92 8e 3c de 70 8b 95 64 ef 14 f7 86 a6 f9 77 50 6d 71 be 7d b5 e6 51 fa 4c 27 27 19 81 36 90 4b b2 fd bc 8f d5 6e 72 20 00 28 a8 72 71 fd 21 af 2d 74 a9 73 ee 59 dd 90 c1 ea cd 70 15 13 a8 f9 53 8c ae 1a 8c 02 ff 35 56 77 e5 bc dd 1f 35 fe Data Ascii: &Ab\|x] 3s5-C+o&M O\|89JzVve=RQh)fU@]\20`B$Ixl=}BJYgdK~Gzn(g0?,9C/m<pdwPmq}QL''6Knr (rq!-tsYpS5Vw5
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 6e 75 2e 3f eb 72 44 7b 3e 1c 91 84 aa 95 5c 4d 65 1d 65 72 ed 34 40 00 74 49 a3 96 d3 59 90 1b 2e ea 4d cb ee b5 f2 a1 ba 8e 61 fb 64 30 c7 a3 3c 1d dd 18 6f fd bc cd 56 d9 41 3a 8c ca 58 73 12 60 e1 ff 89 82 4e 52 25 b1 2c a2 58 a1 f3 81 fa 2e fd ad f7 fd 8b eb e0 3e c6 c4 8d 74 4b 11 eb dd 63 73 82 2b 81 bd ea d5 ed 02 82 c4 0c a7 3f 50 d5 a0 d6 6b 76 d5 d0 e5 d3 d4 e5 5f a0 eb 92 e2 21 38 67 b8 e8 35 e6 9a af be ef bb a1 77 69 86 85 56 d5 42 84 05 1e 8f 94 cf 67 16 1d 1d cb af 94 db 47 94 d8 e6 7c 9f 96 9c 30 94 4b 41 a1 5f 85 b9 fa 3b 11 c9 e1 f2 ab 63 93 92 75 9c 62 93 58 3f 78 55 46 08 7f e3 54 f7 78 ea f1 a2 d0 76 3f ae bb 5b 3e fb 67 fb 03 98 d0 e4 b4 c5 10 4b 61 a4 61 f7 a9 f3 47 51 aa 1a 71 57 fc bf 7e 2c 59 7d 00 b4 9d 19 14 ce 1e 7e 38 84 61 Data Ascii: nu.?rD{>\Meer4@tIY.Mad0<oVA:Xs`NR%,X.>tKcs+?Pkv_!8g5wiVBgG\|0KA_;cubX?xUFTxv?[>gKaaGQqW~,Y}~8a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49827	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:50 UTC	662	OUT	GET /uploader/577b4dd48a7d2380c647e2e55515d3f5.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:50 UTC	570	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:50 GMT Content-Type: image/webp Content-Length: 6622 Connection: close x-oss-request-id: 6650748B1F52473534751A0C ETag: "C1C54D65A17F2725A1766AEC3B2ED336-1" Last-Modified: Fri, 05 Jan 2024 04:00:09 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 135 x-oss-hash-crc64ecma: 15027862288381981426 CF-Cache-Status: HIT Age: 42663 Expires: Sat, 25 May 2024 02:56:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e19a5b03f7d0-BNA
2024-05-24 22:56:50 UTC	799	IN	Data Raw: 52 49 46 46 d6 19 00 00 57 45 42 50 56 50 38 20 ca 19 00 00 70 a9 00 9d 01 2a 8f 02 d4 01 3e 6d 36 99 49 24 23 22 a2 22 53 68 a0 80 0d 89 69 6e dc f3 dc 8f e1 c3 1f fc bb d1 9d 47 9c 35 d8 59 d1 67 5d a6 ad 91 8b 3f 5d 5d 75 8f d9 e4 8d 61 81 17 be 0c 33 7a ed 97 c2 fa 64 cf d6 ed e7 8e 1f 36 5f 97 d2 5a ff 8e cc f6 00 e1 00 2a 5c ac ff 75 a3 7b 2a 43 ce 7f ab e6 a3 f6 cf f8 1d 37 5e d1 43 76 cc 84 63 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 c1 64 Data Ascii: RIFFWEBPVP8 p>m6I$#""ShinG5Yg]?]]ua3zd6_Z\u{*C7^Cvcsq98sq98sq98sq98sq98sq98sq98sq98sq98sq98sq98d
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 1e 1e 46 3b 84 2f 97 01 d1 4a 0c 0d 15 3a db 25 ed f3 97 e0 2c 33 52 97 02 cd 62 cb c1 a4 7e 26 e1 cf 97 24 c5 5d 25 8f 93 ac 68 19 13 b5 ee 2a 8c 43 73 b0 98 8e 8d 92 51 2a 1c ea 8b bb 84 32 cf 2d 72 f3 1f a6 eb ee 8f b4 53 b8 14 61 40 d9 ce de 6d b2 e9 d3 ec 4e d1 eb ed 26 93 3d 54 4a d6 53 a2 44 f5 4d f2 50 4e d6 2d aa 50 1c 57 a9 75 fa d5 22 87 01 9d 18 cc 09 5d 08 28 4e d5 1e d0 df 1c c1 5c d1 2c e6 09 66 ac 1d 09 c7 48 b2 8e e3 45 0d 7d 7f bf 7a 87 ee e1 fa a3 9a a1 01 ed 13 40 27 10 80 b6 a3 33 e9 ce 4f d9 2a 2f 7a db f5 ba eb ff 67 ec 76 be f9 cc 05 17 bf fc 5a 14 14 07 01 ca 1b 01 e6 96 3c e6 49 ae 7d 7d 09 e8 07 28 5f 9d 3f 3d 1c 2d 47 91 6c 4a a4 52 3e 54 0e a9 a6 b8 ba 9f ab b4 5f 14 66 6e bc f9 89 37 bf 97 30 f3 ae 3a 28 52 b5 11 00 60 61 02 Data Ascii: F;/J:%,3Rb~&$]%hCsQ2-rSa@mN&=TJSDMPN-PWu"](N\,fHE}z@'3O*/zgvZ<I}}(_?=-GlJR>T_fn70:(R`a
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: 98 f4 f6 cc 02 aa 97 78 18 44 25 40 3f f7 e9 f1 e3 ad d0 26 bd f4 b1 83 cd 4e f2 a1 49 28 eb 26 a7 e4 a2 17 9e 27 10 dd 53 07 03 c2 a2 e8 7f db 98 0f 4a d4 a9 3f ee 7c 4f dd 42 19 9d 10 85 fd f5 9f 7a 3f 32 b2 1f 36 7d 67 a2 0b 64 55 b8 00 22 6a a1 9b 9c 92 4a 3b 5c 78 dd 82 fa 8d 83 e2 6c 8a 46 ee f1 4a 13 86 f9 1b 74 c5 b5 e3 e9 e8 07 91 4b b2 01 10 7e a8 7a 1a 59 6e e4 2b e3 4a c6 2e 15 12 fa 58 9e 4b 65 85 c0 f0 73 f5 0c 53 20 85 52 2d 5d d4 6e e9 d1 fd 06 60 d4 1e 47 f0 43 4b 15 dc 6e 1e 6e e3 ed 79 8d e1 15 3e be 84 38 a4 c5 11 12 3f 66 d1 15 e9 9b 3e 33 e6 dd 40 13 44 ab 33 dd fa c2 97 d1 3c cb 4d 6a 3d e7 ba 5c 44 63 a2 5a 02 b6 d3 19 e2 be e2 b8 b9 65 6c 27 a0 5b 2d ba 13 97 e6 7d b6 af cb ae 0c e9 f0 a6 db e0 00 2b 3c b8 ad 2e 67 c3 c3 80 42 bc Data Ascii: xD%@?&NI(&'SJ?\|OBz?26}gdU"jJ;\xlFJtK~zYn+J.XKesS R-]n`GCKnny>8?f>3@D3<Mj=\DcZel'[-}+<.gB
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: b0 00 8e 46 89 05 67 9d 25 2a 80 f1 75 aa ef b5 33 4c 19 c0 19 20 a2 0e ba 23 3f 09 82 df 6a f9 97 9e 5d 5d c4 77 ed 21 bc 21 53 3c 79 ec 93 23 2c 37 dc 8c 2a d7 ab 1a 2f 3d 8e 6b 0a ac 6c 58 83 f7 7c 46 4c e0 41 e6 56 45 cb db 66 24 3b 05 40 5e 33 44 18 98 29 e1 44 01 5b 4f da aa b1 c9 db 27 73 47 1e 2c 3d 37 1d 65 e6 58 92 ed 42 07 ef aa 85 c2 02 cb 10 96 06 cb 26 3a 0d 7b da ab dc 48 e6 4f bb 2e 2a 22 94 d1 f2 fc d3 8d 56 19 1e bf 92 96 9c 4b cd ab 1c da 50 02 dc 17 31 31 20 dc 70 f5 7c a9 ef 2e 8b 3a 36 9b 7f 3f 66 cc 55 99 85 03 e8 df 39 55 ca 3d 7f 26 3b d7 d8 90 db ae 66 b8 69 2c 9a d8 9d f1 b6 9d fa 78 40 ae 5a cf 44 3c b6 81 c0 42 b4 38 f7 cc a6 fc 92 98 ac fd ac 55 b2 2c 55 9c 9d a1 f2 05 1b 9f 94 61 47 38 c7 7b db 23 61 f4 66 ea 17 e2 27 39 f9 Data Ascii: Fg%u3L #?j]]w!!S<y#,7/=klX\|FLAVEf$;@^3D)D[O'sG,=7eXB&:{HO.*"VKP11 p\|.:6?fU9U=&;fi,x@ZD<B8U,UaG8{#af'9
2024-05-24 22:56:50 UTC	1369	IN	Data Raw: fa 9c c1 da 28 75 32 2c cf 13 2c 94 66 ca 00 b3 93 97 bc d8 ca c5 61 e6 14 eb 89 d6 ac d0 f3 13 87 0c 7a de 50 51 29 b6 d6 7c ad 12 84 e8 32 b0 7c 8f ee 24 9c ee c8 f4 e8 62 72 16 fd 4e bb ad 06 3c b7 26 19 9c d1 e4 d3 f1 b3 41 9a 24 c8 70 79 14 db 06 57 45 c3 df bb eb e0 93 97 78 9b c5 ae 89 26 c2 38 d6 14 45 1b 63 e8 9f 15 2d 40 37 a9 30 39 82 20 eb 62 aa 64 c8 0b 3c 65 69 c3 a8 b6 af b9 e9 e9 c9 d1 37 cd 5f 27 4e 69 0c df 81 b1 bc c4 81 ec 9f dd 42 55 c6 22 5b f0 98 c6 a3 7a f3 5f a1 b7 ea e0 99 48 b1 28 fe dc 66 f8 c8 3d a1 f8 15 3c cf f0 81 d9 22 c1 64 73 57 d7 82 8b 0b e2 d7 d6 c5 56 66 30 b2 f0 01 c3 9e c9 51 d6 2c 32 3d 75 18 70 5e 12 dd 9b 7b 4a 10 a8 e7 66 87 50 26 78 9a ad 69 8e d9 98 21 c2 2f 01 aa 5e 57 36 2f 5e 28 d7 38 88 ad d6 60 b5 b3 f0 Data Ascii: (u2,,fazPQ)\|2\|$brN<&A$pyWEx&8Ec-@709 bd<ei7_'NiBU"[z_H(f=<"dsWVf0Q,2=up^{JfP&xi!/^W6/^(8`
2024-05-24 22:56:50 UTC	347	IN	Data Raw: dc 0d 22 4d 32 4f e4 25 51 d3 08 4d e1 c6 90 97 53 c6 af 75 aa 32 41 1b 63 73 8b 2c 4d 99 4b 81 49 7f bb 95 d8 11 fa c9 ab 02 91 c4 3e 5e 9c fc 7b d8 05 00 e3 7a 7a 6d 82 0d 3a 1e 4f 02 3d 46 7c e9 b6 a4 08 fa ae 5a e5 79 46 79 60 0f 13 c5 a3 df d2 02 ee 23 3c 4d 35 a2 40 63 1f 0c f7 ee 38 80 5a 14 66 5c 8d 18 c9 29 8a fa e3 9a f8 17 4e a0 e7 c0 83 33 96 94 d1 f9 25 d9 5f 3c c1 70 3a 0b f5 3e 9a f4 d2 03 37 49 52 91 a9 81 b5 ac 83 06 b1 35 4b 5f 38 27 e1 99 e6 9f 46 12 74 1a c4 6a 87 43 6b 7a 27 8b 77 4b 80 5c f5 3b 9d 16 15 b3 80 96 39 05 42 e0 28 c2 d8 ac 8e f4 6d c7 00 d7 6e 83 be b0 02 84 da 29 66 ca 2f ea 36 ba 03 ce 00 c0 4d 14 38 02 ab c2 0c 52 9f da 0b 81 90 f8 7d 55 31 b3 59 52 1d cd 39 00 a7 ab 39 3e 79 ca 7b 3c 64 ac bf 68 ae b2 a0 38 6a 72 c2 Data Ascii: "M2O%QMSu2Acs,MKI>^{zzm:O=F\|ZyFy`#<M5@c8Zf\)N3%_<p:>7IR5K_8'FtjCkz'wK\;9B(mn)f/6M8R}U1YR99>y{<dh8jr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49834	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:51 UTC	468	OUT	GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-1516" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:56:51 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:51 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-1516" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183458 Expires: Sat, 25 May 2024 02:56:51 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e19f7e03f7e4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49835	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:51 UTC	472	OUT	GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-2f86" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:56:51 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:51 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-2f86" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367892 Expires: Sat, 25 May 2024 02:56:51 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e19f7bfef7f8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49833	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:51 UTC	466	OUT	GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-e1e" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:56:51 UTC	609	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:51 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-e1e" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183458 Expires: Sat, 25 May 2024 02:56:51 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e19f7aa0f7c4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49830	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:51 UTC	938	OUT	POST /buyer/user/select-coupon HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 17 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/categories Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
2024-05-24 22:56:51 UTC	17	OUT	Data Raw: 7b 22 63 61 72 74 5f 74 6f 6b 65 6e 22 3a 22 22 7d Data Ascii: {"cart_token":""}
2024-05-24 22:56:51 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:51 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:51 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:51 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 36 3a 35 31 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:56:51"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49831	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:51 UTC	1234	OUT	GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fcategories&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591408397&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fcategories&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1 Host: www.cravob.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/categories Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
2024-05-24 22:56:51 UTC	147	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:51 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close
2024-05-24 22:56:51 UTC	81	IN	Data Raw: 34 36 0d 0a 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 64 68 41 51 41 42 41 50 41 41 41 4d 50 44 77 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 46data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49836	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:52 UTC	662	OUT	GET /uploader/7031c12368f9d1fee63f7904e93284d2.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:52 UTC	570	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:52 GMT Content-Type: image/webp Content-Length: 16010 Connection: close x-oss-request-id: 6650748B1F524735344B1A0C ETag: "18D853FEB3321A2DDCF99B7F0A925616-1" Last-Modified: Fri, 05 Jan 2024 05:50:00 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 156 x-oss-hash-crc64ecma: 1588804040121143340 CF-Cache-Status: HIT Age: 42665 Expires: Sat, 25 May 2024 02:56:52 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1a91995f7d4-BNA
2024-05-24 22:56:52 UTC	799	IN	Data Raw: 52 49 46 46 82 3e 00 00 57 45 42 50 56 50 38 20 76 3e 00 00 b0 3f 01 9d 01 2a 8f 02 d4 01 3e 6d 32 95 49 24 22 a4 a2 22 91 3a 98 90 0d 89 69 6e ff f6 bb ce 1a df e1 cc d7 3c 0c 43 e8 1e 50 d3 0d f8 a1 cf 22 87 63 d7 80 31 c2 b0 7a ee 73 42 af 4e 39 de 36 28 ff 0d 9d be 7a c0 e6 d7 ec d8 a1 15 73 6e a9 e4 6b e4 f7 e8 9d 7b fe 85 e5 a1 f2 67 7d bf af f0 5b fb 9f 6f 1f f3 7b f7 e0 35 ed 9f 3b 68 9b 75 d6 83 ff 47 f3 88 9f c7 e1 ec 86 d0 17 ca 03 fe 5f 3a bf b5 6e 4e 90 09 07 1b ab 9b f3 86 dd 5c df 9c 36 ea e6 fc e1 b7 57 37 e7 0d ba b9 bf 38 6d d5 cd f9 c3 6e ae 6f ce 1b 75 73 7e 70 db ab 9b f3 86 dd 5c df 9c 36 ea e6 fc e1 b7 57 37 e7 0d ba b9 bf 38 6d d5 cd f9 c3 6e ae 6f ce 1b 75 73 7e 70 db ab 9b f3 86 dd 5c df 9c 36 ea e6 fc e1 b7 57 27 19 7a 1a 3b 76 Data Ascii: RIFF>WEBPVP8 v>?*>m2I$"":in<CP"c1zsBN96(zsnk{g}[o{5;huG_:nN\6W78mnous~p\6W78mnous~p\6W'z;v
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: df ef c9 0f 2e 00 36 e9 8b 7c 9a d3 49 67 8b 7e 91 ea d6 b3 ea 5b 15 2d ac 80 e3 8e 04 86 0f 06 36 a7 45 ab f6 28 2e 4e eb eb da a1 58 6f c3 b6 a4 eb 11 e7 2a b6 c5 b2 1c b0 fa c5 c1 e4 a0 00 c8 59 b0 3f ae 8d b9 9a 31 74 bd cc 04 a1 4c 89 20 e3 75 73 6f d8 4a ad 5f b8 5e bf b2 9d 58 99 e9 03 ae db cd 37 d3 d5 fa 37 1a 48 17 f3 67 01 39 f0 bc 3b 40 78 cc 23 f2 88 b0 31 c2 5f de e8 13 23 ab 61 2b b3 bc 8c a2 03 b5 62 c0 ca 11 b8 e4 fd 2c ee a3 98 fe 66 bb 58 a0 f4 e8 c1 df 8d ab ff 6a dc 9c c1 8a c3 b4 f5 ea c6 1e a7 79 67 4a 49 a7 19 09 0c 39 fa 10 1d 3a 60 15 07 90 db ab 9b f3 86 dd 1b 8e d8 39 62 b8 d8 0d 88 83 93 7f 1b 16 8a 51 d3 f4 bc b0 fd 82 fc d0 5f 09 84 31 d2 c0 79 62 72 89 77 27 bf c1 39 1b 77 48 5d 83 fa 31 17 4b da b5 33 4c 54 3e 92 f5 74 9d Data Ascii: .6\|Ig~[-6E(.NXo*Y?1tL usoJ_^X77Hg9;@x#1_#a+b,fXjygJI9:`9bQ_1ybrw'9wH]1K3LT>t
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: 4d 9e 1a cd c5 79 15 55 92 5d 59 f6 99 47 a8 4f a6 50 b5 5e 4c e8 3f f1 44 71 96 5b 4f 1f dc 04 00 84 3a 8b 0d 93 f6 83 db 49 3f ae 08 df cc 00 29 9e c7 75 fd b8 12 73 fc 47 88 b6 a1 8a 1b 1b 54 69 dc 64 16 8e a3 b5 11 ef 1d de 6a e2 cb 0c e8 c2 cb e2 bb 80 e9 87 8a 42 b9 83 5c 08 5b a6 c3 b2 5e 51 b7 53 11 53 37 ea 92 81 40 bd 82 12 47 7f ee 83 61 9a 00 b6 ab 3b 46 17 e3 bd fc e2 d8 3e 94 7e 98 47 fb 4d ee 27 e9 7c a3 cd 49 8b c2 48 dc 6a 92 13 ef ed 35 06 86 ec 96 61 d5 74 e2 8f 06 b0 63 09 b0 ce b5 ed 59 ce f9 4c 11 d1 83 8a 0b f7 63 1c 65 d1 9c db 5f a8 71 e3 75 29 74 ee 93 bf 74 5c 2c 7c 97 a6 69 72 cf 4d 5f a9 8c 14 f3 17 ee 65 f3 b8 c8 79 9b 97 5b ce fe e6 ec 51 d0 9d 29 a8 11 e7 19 6d 0f a9 2a 54 97 7b 86 fc 64 9d 18 fe 34 6b 84 fe 76 17 9d a9 e0 Data Ascii: MyU]YGOP^L?Dq[O:I?)usGTidjB\[^QSS7@Ga;F>~GM'\|IHj5atcYLce_qu)tt\,\|irM_ey[Q)m*T{d4kv
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: 52 33 3e 07 97 bf 13 5c bd 6b 6e ed b6 68 38 91 79 29 4d 80 30 6b 93 ce 0c c8 88 65 ec 62 00 f9 b3 53 f2 9f f2 c2 ed ee dd e6 67 fb 11 2c 4a bc 9f bf 68 3d 89 10 40 07 07 71 e1 76 a1 5b a6 ca 5e 27 54 38 47 3d b7 73 e5 66 f5 78 9e 2e f1 61 48 92 29 b4 20 bc ca 87 30 3c 68 ec c9 5d d4 29 72 44 20 ab 49 38 c7 99 0d 2c 9a 0f 99 62 0f e9 4c 48 bb be 3e ca bb cc 96 6c b9 58 b5 d6 c9 d4 fc 4b a4 bb 00 d1 4c 76 fe 7c b8 59 dd 7c 36 0b 34 ca e6 21 fe 92 4a 0c e2 f7 5d f7 a3 f9 51 da 24 31 0f 92 41 6e 10 02 72 50 c0 00 ab dc 2b be e1 cd b5 2d cd 1d 86 04 c4 3f 2e 36 91 0a 81 ce 94 64 2b 9d aa a1 26 c4 e1 a6 d4 a1 79 ef d0 6a 76 33 ea ff 0f 0f 35 82 1c f0 07 fb e3 43 43 b3 ad f7 53 62 25 d4 97 d1 28 e6 f8 c7 6e 8a 89 aa 9e 19 52 ef 05 b7 8e 84 4d 58 d7 a2 e3 0f 7e Data Ascii: R3>\knh8y)M0kebSg,Jh=@qv[^'T8G=sfx.aH) 0<h])rD I8,bLH>lXKLv\|Y\|64!J]Q$1AnrP+-?.6d+&yjv35CCSb%(nRMX~
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: 06 1d 0b 59 0e d5 b2 a0 b8 97 d9 5e ca d6 58 31 b4 33 9c e7 1a 69 75 d0 c0 5a 81 64 e7 b4 79 49 13 91 02 53 49 5c 0c b1 c2 e5 e7 af f4 37 61 e4 ac 72 52 cc d1 23 d6 b2 26 74 e6 8c a1 5d e2 34 68 67 a1 91 a7 6f 0c 1f 38 b3 f7 96 44 29 3d 5e ef 6f 5c 34 7a 56 37 16 0e 23 c9 08 e5 98 2c b5 0a 0a ec 18 c4 40 e3 f6 8b 8e 9b 06 21 1b b5 0d b7 20 04 87 01 e9 d9 cc 44 66 85 64 07 b7 92 cf 4e 89 0f b9 f4 35 a8 d1 03 45 7f d6 8f 14 3b 87 6f 72 e2 4f 7f 73 90 41 d1 71 54 62 3d 63 33 91 ac 40 30 65 6a b7 79 c9 c4 62 e5 b0 ba b6 a9 d0 e2 0c f0 78 f8 80 a4 6d 86 db dd 5d 9d 5c ad 8a 37 77 33 83 70 5c d1 6e 83 b2 93 e8 a6 b8 31 e8 96 34 a5 5b e0 5d e8 71 29 28 b3 dc 9c 72 b3 5a 98 df 33 64 76 fa c4 03 f0 1a 33 9e 9e 7d 65 bf 86 11 70 08 e0 4d d1 6f a6 61 9d d0 8b 6a b0 Data Ascii: Y^X13iuZdyISI\7arR#&t]4hgo8D)=^o\4zV7#,@! DfdN5E;orOsAqTb=c3@0ejybxm]\7w3p\n14[]q)(rZ3dv3}epMoaj
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: 29 01 90 9e 90 d9 e2 39 a5 95 f9 53 53 8b f3 1c da 61 d9 d3 a9 44 88 1b 14 80 01 df 20 f2 19 d3 55 00 d1 f3 fc 54 1e 2f eb d4 f9 64 a1 c4 41 0b 13 19 2a 96 87 97 77 a4 21 e3 70 15 8d f5 2b 70 33 bc e2 f1 4d 85 53 0a d2 c1 0a 71 ac 13 b8 00 11 75 11 bf 6e 46 b5 bb 3c 93 44 8f ee b5 84 c9 84 3b da 4b 91 8a ce a2 26 88 0c d2 19 35 7d 51 3b 33 10 55 df 84 3c 27 57 c9 ef 92 5d a1 97 f9 1b a0 c8 1d 7c ca d0 8c ea 1a 42 9d b2 4a c6 ef 8d 73 50 d8 66 87 72 d1 ef b7 16 92 b7 96 91 00 25 c0 fb d8 55 8e 0c 1f 31 7c ff b8 59 46 28 05 5e ea 13 5a fc 1f 64 9e 99 9c 0c d4 33 31 42 2c b0 85 9c 42 fa b9 31 71 c2 a2 52 22 73 60 a0 c8 64 56 e5 d4 71 77 ac c6 b3 86 54 05 67 26 99 8e ed 12 f9 82 36 b8 24 ca 01 d8 d3 b4 ad b8 b6 40 6e 47 f8 6d b4 45 97 ee 92 11 2d be d7 1c 2c Data Ascii: )9SSaD UT/dA*w!p+p3MSqunF<D;K&5}Q;3U<'W]\|BJsPfr%U1\|YF(^Zd31B,B1qR"s`dVqwTg&6$@nGmE-,
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: bd 5e ba bb 82 57 7f 68 32 ff 8f 18 ea 75 a9 63 3a 9f f0 d6 7c 58 8d 9c b6 a5 3f 16 0e 43 69 f3 b2 8a 59 c7 1c f8 3a b6 77 0f 65 9c 7d ed c3 dd d1 97 df 2b ec ea a0 08 1e e3 46 21 9f 1e 55 16 04 34 d1 06 e5 b3 2f 37 64 e9 25 a2 70 f9 7f 7a fb e3 30 7d f6 b5 15 69 ca ea 5b bf 88 56 93 48 fb 64 eb db 36 58 83 dc f8 78 a8 1a 2a dc 37 fc 60 fa 79 dd 3d 56 0b f9 e9 2a ab 48 c4 58 0e 28 29 2b 62 4a 72 e5 c2 b5 94 c9 5e f1 eb 78 54 b9 77 d7 33 fb 13 b8 f2 a3 22 61 de 16 f5 d5 a1 af b9 ff 65 16 46 69 1a 94 5d ab cb 6a a2 46 59 1c cd 58 3c d5 41 44 b3 29 da 5d fd ea e3 34 20 0c be dd d0 80 23 98 cb 33 89 e9 6c e9 a8 bb ca 3f 83 48 c5 6f 85 eb 1a 00 3c 99 ea 0e 03 72 91 75 4f 5a e7 02 b5 36 89 78 8a 23 fc 5c 7c 33 46 1b fa 62 59 fc 33 ff 75 04 00 bc 21 7d f3 ca 11 Data Ascii: ^Wh2uc:\|X?CiY:we}+F!U4/7d%pz0}i[VHd6Xx7`y=VHX()+bJr^xTw3"aeFi]jFYX<AD)]4 #3l?Ho<ruOZ6x#\\|3FbY3u!}
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: 10 05 81 56 2d f5 67 8f 22 10 64 26 78 4b c9 bf 68 5b 95 13 07 62 49 63 93 bb b7 9e af f0 4c 89 6a 80 50 6d 3f 9e 5f 5a 3a 1a 8e ff fa 26 33 29 b3 32 4f 2e 09 ba e3 84 17 59 c4 55 27 f2 d1 db 4b 25 4d 3e e9 1d 77 64 7c 26 83 d7 8c cc f9 51 8d 29 61 c8 fd b8 90 47 91 7f ae 61 bb 67 be a0 a3 1e c7 02 22 be 8f 6a a3 0e 8e 6b 20 d7 0e 32 1c 9e dc 44 d1 1b e4 20 e7 b5 1e 98 40 cf 8c 61 25 6a f7 81 f2 14 c7 df 5c 88 82 7d 47 d3 69 5c c6 2d 4e fe 34 ef d5 7e 88 28 f0 54 e8 35 05 7f 45 a0 dc 50 46 c9 34 62 7c 6f f2 81 12 16 d9 ac 58 ff f2 dd f5 f9 48 b9 c1 65 8c f2 4a 40 18 07 30 ec ef dc 4e 20 1e 04 83 b5 95 6a ec 1d 05 70 23 27 b2 c6 03 40 9d 87 74 87 7e ed 7f 1a 4f d3 07 83 b9 44 6b 5e aa 4c 99 f0 35 87 36 1d 70 ca ac 8c 96 3e 50 27 55 0a 1c 4a 30 89 3f bc e9 Data Ascii: V-g"d&xKh[bIcLjPm?_Z:&3)2O.YU'K%M>wd\|&Q)aGag"jk 2D @a%j\}Gi\-N4~(T5EPF4b\|oXHeJ@0N jp#'@t~ODk^L56p>P'UJ0?
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: ee 24 4d 34 b7 ad 61 17 53 40 b4 95 3a 81 b2 11 f7 71 7b 3b 44 90 2b 2f 97 2c d4 be 08 8b bc fe 6c 02 fd 36 34 fc 36 b5 cd 9e 98 6d 81 a9 3a f8 7e 98 05 cf 93 d4 9f 3f 29 d6 5b be 60 56 05 81 a9 b2 80 92 9a 77 04 d0 45 e5 94 62 bc 7d f9 07 81 37 3f a0 1a 70 e4 73 40 0a 2f dd fc 07 0b 8a 4d fb f5 3b 0f c6 83 6d c9 ed fd 94 5f 2f 8d 51 d8 88 e8 ea 39 e4 2f ab 22 75 57 50 ca 53 15 8f 5c fc 46 ec 90 40 b9 92 a9 59 c5 4c a4 b6 5f 11 4b 13 ed fc 1d b0 54 55 88 9f fc 54 e8 be 08 17 66 9a 25 6a af bd 82 27 b7 32 34 64 ec fe c3 da 3e 88 2b 39 eb 27 d3 2e f9 05 d9 bc ee 64 cc 76 7e 13 c5 70 ba 54 6c f6 74 df d6 26 83 d9 18 cd bd e4 fa bf 96 3e c0 ea 6c 5f 33 77 12 30 00 e4 b7 49 e3 5a 04 4d be ae 5d e8 96 4f c3 3c c4 38 82 e8 1e 1c 6a 1a cb 45 bb 33 c1 15 6e 65 82 Data Ascii: $M4aS@:q{;D+/,l646m:~?)[`VwEb}7?ps@/M;m_/Q9/"uWPS\F@YL_KTUTf%j'24d>+9'.dv~pTlt&>l_3w0IZM]O<8jE3ne
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: 37 87 e9 3a 8f cd aa 37 e7 38 4a 72 25 f6 6a 53 74 40 26 48 a7 27 a0 70 8f d9 9a 7a a5 ba aa 5e dd 01 30 7d b4 bf 55 c0 43 f6 73 d9 f5 b5 60 6e a4 fd 63 7a 92 6b 1a db 62 aa 68 3c 96 ac 8e 09 88 2f 21 a7 b3 21 14 ff b3 de 2d a7 92 1c c1 92 ef e6 0e 32 6e ef dd f6 ba 77 1a a1 46 2a 5c b1 1c e1 14 78 68 fb 34 53 e1 a0 83 f1 e2 92 6c d4 d7 c3 6c 57 46 dd 9b 5a 95 9b f5 4c 1f b8 95 5a 44 25 85 04 0e b9 53 9c f6 6f aa 8b e1 6c b6 48 09 60 fa f5 96 53 52 16 fa e7 a6 fb 18 fa f3 b9 98 e8 86 76 d0 09 ae 58 42 a7 6e 0e d2 01 63 cc c8 2f dd 32 f6 f4 77 a6 ae 9c eb ca b1 b1 3b 91 bc cd e1 be 4c cf 0f 83 c1 56 65 63 3e 3c 21 bd ed 92 89 88 17 b8 22 53 85 18 18 a1 75 86 a5 7a 5f e4 f5 61 49 fe 55 d1 3f f9 89 8b 21 1d 92 fc 56 5c 3f b9 ab 6b 17 12 c0 66 4b 45 e7 3a 95 Data Ascii: 7:78Jr%jSt@&H'pz^0}UCs`nczkbh</!!-2nwF*\xh4SllWFZLZD%SolH`SRvXBnc/2w;LVec><!"Suz_aIU?!V\?kfKE:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49837	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:52 UTC	662	OUT	GET /uploader/9007085244817a5cfa454f8854cb9a50.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:52 UTC	571	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:52 GMT Content-Type: image/webp Content-Length: 16642 Connection: close x-oss-request-id: 6650748B76EC4B3434352FCD ETag: "B0495630F260E23868BFA2BDFF413056-1" Last-Modified: Fri, 05 Jan 2024 05:44:12 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 149 x-oss-hash-crc64ecma: 16917837872685638940 CF-Cache-Status: HIT Age: 42665 Expires: Sat, 25 May 2024 02:56:52 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1a92c4cf7ec-BNA
2024-05-24 22:56:52 UTC	798	IN	Data Raw: 52 49 46 46 fa 40 00 00 57 45 42 50 56 50 38 20 ee 40 00 00 50 40 01 9d 01 2a 8f 02 d4 01 3e 6d 34 96 48 a4 22 b1 a1 23 91 3a 72 30 0d 89 67 6e fb fb fa fb 38 a5 ec b0 a4 d2 7e 1d d5 12 b2 4a 65 1f 2d ff 0f cc bf e8 fb a7 ff d0 f2 df d2 5b fe 17 99 ef f7 9e ac 7f 5f 7f 6c bd fc 7c f8 f1 f1 bf 6e eb 88 3c df b0 1f ce fe ff e6 79 82 ff a8 f0 53 fb 17 6e 5f f0 3b db f9 47 a8 5e 30 7f cc fd a7 f0 ca dc ff db fe d7 fb 10 7b c1 f7 cf 4f 69 c3 7e 07 a8 37 05 e5 02 ff 54 7a c4 7f b1 e6 07 f6 6f f8 1d 3c 1e ce bf 75 ff ff fb c8 fe e3 91 b6 0b 5f eb ce 9d af f5 e7 4e d7 fa f3 a7 6b fd 79 d3 b5 fe bc e9 da ff 5e 74 ed 7f af 3a 76 bf d7 9d 3b 5f eb ce 9d af f5 e7 4e d7 fa f3 a7 6b fd 79 d3 b5 fe bc e9 da ff 5e 74 ed 7f af 3a 76 bf d7 9d 3b 5f eb ce 9d af f5 e7 4e d7 Data Ascii: RIFF@WEBPVP8 @P@*>m4H"#:r0gn8~Je-[_l\|n<ySn_;G^0{Oi~7Tzo<u_Nky^t:v;_Nky^t:v;_N
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: 20 f3 38 be 45 3e be f6 25 96 88 22 78 30 ab 27 a0 e5 4d 57 fc 06 a7 8c e3 b4 3b 17 4c 26 4a 01 a2 6c 6b 80 45 41 18 31 0b ef c6 5f 75 37 ce 1e dd c0 fb 6b a9 c0 2e bf 06 93 45 c6 8d e1 40 70 85 e2 ca 6b f8 71 90 14 29 2b 8e 06 0e 28 72 01 18 e0 ec 1c 1e 92 b5 39 dc 32 9c a2 ae 81 94 92 27 51 39 da 86 3d c4 8c aa 79 4d 46 89 1b 4b f0 a8 4f e8 97 4d a9 01 da a5 c7 37 bf dc 59 de 99 47 f6 90 9c 8d 9b 46 8e e4 d3 c9 5b 64 d3 5a c7 23 b4 57 4e af 75 b7 52 53 93 a1 ef f5 64 74 57 7b 9a 29 84 3b b4 8d 6b 32 69 50 04 8c c9 97 b0 84 9c 40 aa 7d c1 ee 28 58 40 97 a7 c5 44 4d c3 b5 71 40 2a 02 4f 23 d8 66 e6 be b4 89 e8 89 47 6c 26 c7 60 ee d3 cf b1 c2 84 22 55 be 86 1f f6 81 f5 15 9c 6c 7c d9 6b 46 9a 36 27 1e 67 08 1b f5 4a c5 89 0a 07 bb 44 40 59 c7 c7 69 34 c6 Data Ascii: 8E>%"x0'MW;L&JlkEA1_u7k.E@pkq)+(r92'Q9=yMFKOM7YGF[dZ#WNuRSdtW{);k2iP@}(X@DMq@*O#fGl&`"Ul\|kF6'gJD@Yi4
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: b0 60 8a 98 1f fc 49 f9 60 e4 5e 0f 99 2b ba f7 51 c4 44 28 ed db 88 8e 0d 43 94 69 98 f6 cb 95 ee 38 42 d7 42 22 76 a9 e2 24 7d 88 56 44 60 c1 37 3f 6d 34 19 60 38 2b 9d 92 c0 e3 cb b1 13 6c e2 19 2c d6 76 cb 00 77 3b f9 ac f4 07 09 81 67 ce 7b 1a 47 54 07 40 1e 94 df 65 37 ec b2 6a bc 35 e6 b4 96 cd 2d 59 18 92 06 83 6a 22 b7 2c 7b 7e 47 18 53 df 35 f5 96 37 e7 b5 0f 1c cd ff 35 cc bb 7a 6e 04 e2 6b 86 ce 7a 79 4c 49 c5 f3 9e cc 12 09 ec 0b 71 6f d9 2c bd 0a 92 f5 93 ea 3b 9d 53 d7 f1 6a a8 aa 9f b9 42 69 40 37 fc 08 c4 b1 68 c1 a6 9a be 92 39 8e 3a e9 c1 64 08 37 09 c2 74 89 52 25 ab ea 4c b3 16 d2 28 bd 97 84 fa 47 25 99 29 c5 3d 1b 06 49 aa cf bc 26 9b d4 6e fd 62 9c 1e 59 88 1c 94 bc 52 fb f6 93 03 d6 ee 01 2f 9b bc 3c 90 01 5b 33 5c a3 ee 95 9f 13 Data Ascii: `I`^+QD(Ci8BB"v$}VD`7?m4`8+l,vw;g{GT@e7j5-Yj",{~GS575znkzyLIqo,;SjBi@7h9:d7tR%L(G%)=I&nbYR/<[3\
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: c6 6d 98 b4 06 bf 98 e2 f1 b1 90 ea 6a 5e c2 f3 ba a6 65 a9 52 12 66 97 82 dc 03 98 41 a9 66 d1 ba 30 ac fa 47 df 77 61 c0 ff 17 81 84 14 7a be fc f6 75 ae 21 92 96 a6 c1 30 58 a4 33 34 63 1c ca 3e be e6 f7 3d 6e 15 72 cd 55 1a 6a 26 64 f2 e6 a1 e0 0e 6b b1 25 75 8b 0c ac 22 c6 89 a6 83 2b 5f 29 f6 2f f0 f1 2d de b3 63 02 be 9f e2 81 50 78 09 28 07 95 48 05 dc a6 e5 e9 db d0 df 83 88 df 82 54 bd d9 e0 93 c4 3b a2 85 24 53 e9 6d 74 23 a0 37 91 74 20 ce 58 8c f5 7e fe 54 62 c5 7c 29 e5 d6 9a c4 ef f3 20 6a b0 7a fd 4f b4 30 56 2f 83 9a 8f bd c3 fa a8 23 c6 52 8d b8 e7 73 19 dd d6 6d 55 20 5a 9d d3 9b 6e a3 b9 77 f4 be 71 91 1d 75 2e 23 45 7e 91 cb cf 1e a5 19 de e6 f9 0b f1 75 4c fb 5a 25 2d 82 69 61 69 d2 c3 87 2d bf ec a9 3e 7e ca b6 31 44 82 60 68 44 a0 Data Ascii: mj^eRfAf0Gwazu!0X34c>=nrUj&dk%u"+_)/-cPx(HT;$Smt#7t X~Tb\|) jzO0V/#RsmU Znwqu.#E~uLZ%-iai->~1D`hD
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: 61 ec 54 8d 42 2f a5 a9 03 59 8d 44 b2 73 2d a0 e0 d6 aa 69 58 81 4c 12 22 31 76 5d 31 fd 23 86 79 5e c9 ce 3b e4 61 8e 11 b1 4c 05 92 45 88 f5 e7 cf 73 65 3c 23 7d cd 6a f1 f3 5e 4c 26 e8 29 d3 2d 85 58 98 3c 20 a8 18 a9 4d cc 50 85 3f f3 e3 fe fd 27 bc fe ee f3 40 2d c8 86 3d 4e ad 6a 29 88 c9 4f e0 d6 54 86 c1 08 cf 2a 77 90 a2 85 40 ac f7 4e f3 9b 5e ea b7 95 a5 84 70 bb 7a be e8 76 94 a8 c2 fa c7 ff b1 ab 5b 43 4f 1b a1 3f 39 56 c9 5d 75 d9 33 9d e3 f8 e7 2d 24 ca 8c f1 2d ef da 3d 4d 9d a3 28 60 01 7a fb 11 f8 28 78 8c 9a 63 47 a4 f2 47 44 ef 42 e6 48 0e 9e 8b 5b 3a 22 db 05 53 f4 75 51 fe 02 cb 73 1c 0b 54 e4 d1 cb 45 4b 1c c0 88 c3 a0 91 62 ed 46 c5 86 23 db ae b6 7a 40 82 98 ec 2a 45 e3 7c cd 62 3e 1d ec e2 9a 7f d1 eb e4 f1 56 3f 53 27 df 95 47 Data Ascii: aTB/YDs-iXL"1v]1#y^;aLEse<#}j^L&)-X< MP?'@-=Nj)OTw@N^pzv[CO?9V]u3-$-=M(`z(xcGGDBH[:"SuQsTEKbF#z@E\|b>V?S'G
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: c7 ce 5f 61 25 af ad f2 3d 3f 5c 3f 90 1b 20 a8 68 63 3a 29 9e c6 19 ab b9 cf 19 b3 b5 9f 12 76 eb f0 c3 5e 3b f4 31 0a f2 e9 ee 56 3e 82 cd 55 2d bd bb a5 41 12 2b 9c 9a 9b 09 cf 97 ac 58 b9 b7 92 9c fa 2c 91 cc 97 2e 5e 4c 26 c5 62 5a dc 46 f9 37 92 d3 7a 9f 21 3c 67 af bd 09 be df 51 46 93 de f9 e6 54 a4 f9 0a 70 eb d6 27 1c 1e 1f 58 3b ee 46 70 6a 90 bc 37 84 40 8e 4c a0 fe ef 90 ab 12 a2 d9 fc 88 ef 48 71 81 60 7e d7 cc b0 8c 6e 5e e8 68 e5 6d 47 35 79 3a 25 48 40 5d 63 4e eb 4b 0b a1 d8 78 d7 94 ae a6 b3 f5 a8 5f ed fd 37 74 4b 7a e0 b0 d6 ee ae ed 6b fb a8 63 14 d8 25 2e ca c3 7c b7 ee 0f 7f 0d 85 20 1a 5e f3 d1 61 09 a1 b8 22 7c b3 f3 89 8e 36 dd 28 21 e9 6e cf b2 b1 0e 8b 10 81 e9 bd 9b 51 05 fe 85 2a 76 a1 05 f6 00 3b dc 3c 72 2c e0 1a f9 1b 2d Data Ascii: _a%=?\? hc:)v^;1V>U-A+X,.^L&bZF7z!<gQFTp'X;Fpj7@LHq`~n^hmG5y:%H@]cNKx_7tKzkc%.\| ^a"\|6(!nQ*v;<r,-
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: f3 67 17 cc 30 dd d1 22 6a 8d 0b b4 51 c6 9b db af 60 ef 6c 70 c4 57 14 ef 23 fd 82 ec 58 c4 f1 2c 44 88 c8 f3 cc d6 e7 78 cc 53 55 b6 94 3b 94 bb 46 df e9 d6 2a f3 53 78 1d 2f ab 80 99 a8 08 2b 2d 23 7e 42 7b a1 19 11 8f 23 bf 22 4a be a4 0a 64 2f b0 92 00 87 f7 e6 0e 23 d5 7b e3 31 c4 24 5e 64 07 a1 bb 38 81 92 f4 80 38 ed b7 e7 34 8f 71 a1 c1 63 15 ff 7d fd e8 6c de 47 e4 cf 8d a9 6c 8e 2c 6b 82 45 bf 52 72 cb 08 d9 e9 c9 b0 34 b1 74 e0 2c 86 5a e6 c2 16 8f a3 65 b6 9b e0 75 8b 2d a0 84 cc 2d f9 89 3b 42 12 c7 be c1 2f d1 a2 8a 34 c9 bf c0 2b 37 ee 0d 0a ad 4e 50 8b 40 8a 27 08 6c 20 c0 aa 73 65 49 e0 ff ba 63 ed c4 9c 38 b6 a4 00 93 5b 3f 8e 0d 35 5b aa 74 e3 29 fa ec f6 d9 76 4c 26 db a9 80 d4 97 a2 1f 71 48 e4 a4 96 8a 69 72 69 02 67 ef 1e 38 3c 12 Data Ascii: g0"jQ`lpW#X,DxSU;F*Sx/+-#~B{#"Jd/#{1$^d884qc}lGl,kERr4t,Zeu--;B/4+7NP@'l seIc8[?5[t)vL&qHirig8<
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: 8a 83 ab 03 52 ca cf 83 b1 de ed 56 da 59 a8 b7 b7 38 fb eb fc 38 d4 ea 0e 87 c9 a8 3d 87 90 99 17 6d 33 42 38 1e 94 b6 ba 8b 12 33 6c 43 f3 4e 4b f6 79 51 fc f2 bb d3 e9 27 de 98 bb 14 a6 42 b3 ec fd df 4c c1 ef 23 96 b7 dc cf ce 7a 93 6b cc 30 ad 35 bc bf 02 93 de 7b 46 59 01 5e 96 cf 15 25 dd 92 4e 11 c5 1c ca 11 0f 28 a5 8e 28 25 e0 a3 2c f1 27 a0 4a 20 ea 8e 80 62 47 cb cb 69 69 e2 d8 54 a9 31 99 af f8 16 69 15 60 e0 70 77 39 5a 97 6f 9d a7 23 4c 20 6c ca e9 b4 42 9e ca b4 74 f6 fa 2a a4 6f c3 25 45 6c be 3e 66 e0 b1 0d 91 85 96 2c 4c 5d ef 2f 91 a2 9c b2 77 93 71 8e f7 40 fe 2c f8 2b e7 54 d3 bb b1 d1 0e 2c 56 7d 8b 1d 49 47 73 94 a6 c9 4c 6b f9 4f e0 c5 85 3c 43 84 25 cc 30 e1 8f 97 33 b3 19 bf a9 90 8a 3f 8b 6c d3 1e 87 6c 9e 95 dd cc 4b 0f 99 40 Data Ascii: RVY88=m3B83lCNKyQ'BL#zk05{FY^%N((%,'J bGiiT1i`pw9Zo#L lBt*o%El>f,L]/wq@,+T,V}IGsLkO<C%03?llK@
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: bc 54 7d fc 69 fc d6 2b 15 1d 8c 5e d0 83 79 61 06 b2 34 26 cd 77 24 4e 96 6d a5 b0 80 ac e4 4c 93 32 88 3d 26 8f ba a3 6e 4e 17 94 fc 77 4b 6f b8 36 01 fb 03 7e b4 f9 18 56 87 14 c0 c8 ba 77 0f bd 1f 5d 2a e9 de bd e7 ef 1b 58 ec ff 1d 74 a4 7d 58 fd 26 ae 34 cb 05 c7 66 84 0b be ff f9 66 01 c3 7c 20 94 43 d1 0a b9 3b 67 26 d7 f7 05 b6 7a 7d f1 58 42 b2 5a 6f 16 09 39 d8 98 58 11 8e a6 b5 f2 45 ee 64 1d c1 e1 7c 00 b7 8b 8b 4d 63 f8 dc 9b 01 cf e5 62 48 9e 7c ce d9 37 eb db 11 cd 41 f2 5a 32 ff 97 b7 e3 45 7c db 88 78 e5 1e 36 87 fa 43 89 8e 1a 17 0e d3 c1 a7 e2 7a 5d 9e 1e 5f 19 2a 52 4b 97 4c ea c1 49 42 34 70 d4 64 c3 e3 0e e2 d4 b0 b2 b7 9d 1d cc fc 80 b8 c0 48 99 46 06 c3 69 01 47 17 8d 57 22 ca d0 54 3e fe 51 ff 3d 75 be 52 20 e2 69 f7 4d cd c9 c5 Data Ascii: T}i+^ya4&w$NmL2=&nNwKo6~Vw]Xt}X&4ff\| C;g&z}XBZo9XEd\|McbH\|7AZ2E\|x6Cz]_RKLIB4pdHFiGW"T>Q=uR iM
2024-05-24 22:56:52 UTC	1369	IN	Data Raw: 03 67 32 96 40 02 68 13 60 fc d8 18 6d 49 94 2d ac 3a de 0f 5e 55 ee 9b f5 2f 78 ed dd cd 21 8f 04 5a 65 79 99 c3 e3 e0 34 d2 db b7 74 6a 4c 7a 59 62 6c f6 89 21 dc 4e 43 65 b3 86 2c 06 df 98 e9 8d f4 7f fb 94 2b 57 21 32 03 3d 3e fe 0a c9 ff f8 6c 7d 7b f5 28 78 43 d6 3e e4 e7 2e 45 15 da aa 65 13 7f 9d de e6 48 d3 95 83 0f c5 fa 7f 4a 45 3b e7 bd 98 8f 5f a2 9f 87 cf 86 51 1f 0c 27 b1 95 ae 86 86 ba c4 83 9b 81 dd 3a cd 55 59 12 71 d9 60 23 56 a4 f2 4d 1d d0 ab 8a 9d c7 f7 1c 39 da 42 a8 6c e8 13 51 a2 4c 44 a9 c1 44 1a ea 8a b2 c3 da 31 03 27 45 15 bc dc 29 04 5f fd b3 70 80 16 b4 a5 a9 4f c5 cb 2a c2 6e 8e 01 3f 95 e6 4e 51 29 41 9a 2a e4 21 2c ba 6e 67 8e 6c 6e 90 fa 5d dd b2 a2 79 26 44 73 af 51 45 b8 55 65 96 2b 83 95 eb 98 7a 20 a1 6f 9f 90 d9 f9 Data Ascii: g2@h`mI-:^U/x!Zey4tjLzYbl!NCe,+W!2=>l}{(xC>.EeHJE;_Q':UYq`#VM9BlQLDD1'E)_pOn?NQ)A!,ngln]y&DsQEUe+z o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49839	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	662	OUT	GET /uploader/75df6de93d8baaa5ce1c4b4bbafbb7f5.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:53 UTC	570	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:53 GMT Content-Type: image/webp Content-Length: 55414 Connection: close x-oss-request-id: 6650748B3BC7A83330C248BE ETag: "6748145BB250419EA3FEB6BC24549225-1" Last-Modified: Fri, 05 Jan 2024 05:39:51 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 311 x-oss-hash-crc64ecma: 8818635318462567132 CF-Cache-Status: HIT Age: 42666 Expires: Sat, 25 May 2024 02:56:53 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1ad4addf7e4-BNA
2024-05-24 22:56:53 UTC	799	IN	Data Raw: 52 49 46 46 6e d8 00 00 57 45 42 50 56 50 38 20 62 d8 00 00 d0 bc 04 9d 01 2a 78 05 e8 03 3e 6d 36 98 48 a4 23 28 26 23 53 89 69 00 0d 89 69 6e dc cc db 9f 54 c4 eb ec fa 9a ae b8 97 b9 1f 9f fc 7f f3 71 b3 de 85 ce 6c d4 ba 2a 62 f8 65 76 83 a5 4b fd 5e f9 de fb ff 17 a8 f3 36 b7 0a 74 0e ff a7 ca 88 f5 29 c5 ab f5 2b e7 c1 59 a1 e7 9a bf 63 e6 ff f3 5f f7 74 09 e6 e1 e5 73 a1 d5 f3 1f e5 df f9 bc e6 7c d7 af 3f cd 3e e5 fe 37 f8 ff 6d 3c 09 fc 97 fa be 67 7f 56 fd 77 9c 7f f0 ff 6d 3c 8b f9 65 ff 4f fa 6f 60 bf cc 7f a8 7e c3 7a db 72 d3 c7 4b 73 ff ab e8 3b f0 57 e4 fd 07 e8 0f f5 df f7 fd 37 7f b8 fd cb f7 c7 c3 a7 fc 3e a1 df ea bd 1b 3f e4 f3 f3 f6 37 ee 00 a4 a9 86 6b f7 db be 4c 2a 61 9a fd f6 ef 93 0a 98 66 bf 7d bb e4 c2 a6 19 af df 6e f9 30 a9 Data Ascii: RIFFnWEBPVP8 bx>m6H#(&#SiinTqlbevK^6t)+Yc_ts\|?>7m<gVwm<eOo`~zrKs;W7>?7kL*af}n0
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 19 af df 6e f9 30 a9 86 6b f7 db be 4c 2a 61 9a fd f6 ef 93 0a 98 66 bf 7d bb e4 c2 a6 19 af df 6e f3 9f b8 6a df 41 69 fd 43 d3 f2 ce e1 ac 36 14 ed da c6 9a a1 93 bc 8f ea b1 00 f2 4a 15 30 cd 7e fb 77 c9 85 4c 33 5f be dd f2 61 53 0c d7 ef b7 7c 98 54 c3 35 fb ed df 26 15 30 cd 7e fb 77 c6 37 02 ba 95 40 7b cf 0d db d8 04 c9 88 cb f1 e4 42 5b e3 ff c1 67 c7 81 93 ef b9 8d d6 4c 97 9b ef da 69 1a 72 8a aa fe fb 77 c9 85 4c 33 5f be dd f2 61 53 0c d7 ef b7 7c 98 54 c3 35 fb ed df 26 15 30 cd 7e fb 77 c9 85 09 dd 60 a4 fb 60 4c 04 21 d1 6b a5 a9 20 39 d3 87 5d 6d 9b a9 6c 84 91 06 76 ef 2a 8f b5 2e 6f 2f 7e b7 c9 a5 14 fe 88 e5 ea c7 d7 c0 9e 1c ba 36 8a 45 05 c4 3b 65 0f 12 86 0f 38 9e 25 e5 57 30 3a f8 3d 5b 86 d6 59 55 5f df 6e f9 30 a9 86 6b f7 db be Data Ascii: n0kLaf}njAiC6J0~wL3_aS\|T5&0~w7@{B[gLirwL3_aS\|T5&0~w``L!k 9]mlv.o/~6E;e8%W0:=[YU_n0k
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: d2 17 cf f0 41 60 16 0e f5 59 e8 99 41 e5 cc d1 fc 77 29 2b fc c2 96 6f d6 3c 3d 00 78 50 0b 31 5c ad 17 7e 00 e6 a2 db 60 14 af fa 1c fb 43 1d 73 f1 31 0d 02 7f 7b c8 41 c2 89 a6 e9 5a 50 89 52 75 40 b3 c4 61 04 4c 03 4e 6d 4e 15 70 c2 70 5c 40 42 ad 62 63 46 08 3d 6e 14 a2 4b ff f8 df e9 94 a8 7a 36 d6 69 4b a5 35 ac b8 fb 40 aa af ef b7 7c 98 54 c3 35 fb ed df 26 15 30 cd 65 be 65 6a 35 c1 75 17 c8 60 1f e5 9a 0e 6f 40 01 1b 4b f6 53 02 46 50 af fb fd 9f 99 f4 d5 82 63 23 90 38 7f ea 7b fa c4 b1 a2 20 02 62 66 6b 81 98 64 01 35 54 69 1d eb ed ce ba ef 48 bf ad 5f be 17 ee 58 e2 18 62 7c e4 31 42 1e d9 95 29 c5 ec 2a 21 7b 4f ff f5 e6 e3 df 14 fa 9b 71 bf 19 39 5f 6a 1c cb 23 fc f8 e5 c9 40 bf 5a 59 e4 f9 49 54 b3 44 64 d1 dc 00 6e 56 7f e9 58 0f e8 b1 Data Ascii: A`YAw)+o<=xP1\~`Cs1{AZPRu@aLNmNpp\@BbcF=nKz6iK5@\|T5&0eej5u`o@KSFPc#8{ bfkd5TiH_Xb\|1B)*!{Oq9_j#@ZYITDdnVX
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: b4 ed 56 0d da 06 01 1c df 5d 24 59 ad ed 09 ee d5 4a 58 6d d4 fe 69 c4 57 69 d8 63 9d 81 ee 45 c8 cc bc 8f 5f 52 f7 aa b0 b9 bf 84 55 c5 44 cf b7 7c 98 50 de 3e 45 96 01 6a ae 3f b9 52 77 35 b9 e8 91 36 20 cb a6 98 6b 61 41 56 fc 49 91 83 26 e9 cb 11 37 e4 37 59 ed 4b b8 be 1c d9 eb 15 c6 63 f9 30 3d 34 a3 a4 df 1c 04 6a 22 8b d8 ac a6 62 6f fa 9e ed 3a 95 ce bf 3c 41 82 14 1d e7 56 17 ab ed a1 1b de ee df ca 24 de 13 db 69 17 35 ef ba 88 e5 2d 8e 17 73 9d ef f0 b6 95 50 27 e5 03 f3 dc a2 da 03 a4 f2 4a e2 29 35 cb 73 87 4f 61 b9 05 22 39 07 d0 6b a6 d0 f3 d3 2d 17 b1 96 55 e6 b1 87 0d bd 7c 81 ab 2e 4d b7 74 08 18 c7 a8 df ed 22 5b 08 eb 57 44 f5 42 a6 92 46 e7 65 70 1d e5 21 d3 de 8c 5c 78 f0 5b 45 a7 4e af 00 bb 02 e3 1e ad a7 eb 1a 74 b0 ba 23 55 ab Data Ascii: V]$YJXmiWicE_RUD\|P>Ej?Rw56 kaAVI&77YKc0=4j"bo:<AV$i5-sP'J)5sOa"9k-U\|.Mt"[WDBFep!\x[ENt#U
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: e2 4d e6 fd af 2d a1 9b 43 a6 26 9d a1 6f b6 b6 c1 07 ae 02 aa fe 11 a8 3a a1 9a 64 71 b6 43 10 ff ff d0 84 fe b8 b7 9a f9 72 fe d5 eb c6 4e 73 99 c6 b9 fa 64 95 b9 6c 39 90 50 c2 2f 1e b6 82 95 d7 6e 31 89 72 66 24 85 7a c9 86 db 48 e7 55 a0 fb c4 fb c9 ee ee 28 f3 7a 63 2f 68 9b c4 50 ae ef 66 8a cb d4 8c d9 8b 69 20 96 a7 a1 c0 c5 66 0c ab 3f f2 49 20 d9 fd a5 2e 0f dd 4e 8b 16 09 e8 da ff b3 a8 0b e4 ca 3c 0a b3 14 8f ec 91 91 a6 56 a7 e8 cb 9f a4 9a 97 0a 56 a7 67 fc d1 53 4f f5 ff 64 9f c3 eb 53 83 82 be 24 4c 95 5b 63 6c c0 23 ab 29 20 4f 8b 4d dc 96 7b b1 26 4a c5 38 c3 8e f3 d7 a7 73 3a c9 b7 5c d3 49 93 34 48 5b 0a 84 22 8b 53 26 ea 2a 18 2a 6c 26 9e ed b6 06 46 0d bf 66 5d 3f 16 89 b9 94 9f f7 64 b3 df 89 24 c6 ea 16 0a 7e a4 9e 5d d3 58 3c 55 Data Ascii: M-C&o:dqCrNsdl9P/n1rf$zHU(zc/hPfi f?I .N<VVgSOdS$L[cl#) OM{&J8s:\I4H["S&**l&Ff]?d$~]X<U
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 5d 3e 76 63 9e 06 7f 8c 9a 5c 39 29 cd 56 7d 42 11 c1 27 f3 2c 85 d1 08 ae 6f 4d 19 71 1d a8 6d f4 52 98 45 8f 04 59 8c 3e bc ce 29 e8 f1 e3 39 25 e5 91 4b 62 88 0f 08 36 81 42 59 10 00 56 47 40 97 7c e2 f5 00 1d 9e a8 ba a3 27 5a 0b 14 f2 8b 7d 44 4b 07 fc 71 be 38 9a 4e 29 08 43 2b 9b 61 f8 89 72 b0 6d e0 43 08 e7 7e 88 d1 e1 a7 51 d3 7c 5e 3c 17 6b e6 58 28 32 39 45 52 04 b4 73 b6 9c 60 98 a9 75 00 35 3f 0c 14 83 0d 68 4c 2c af cb bb 06 3c ff 7c 7e fb 16 f0 17 f4 b5 d1 c7 21 0e 9a 0d dd 8a ea fe 5c 0e 9b 32 57 51 57 6b 19 ff ed 4e c6 ff ea 13 e5 d8 d5 a7 25 0f cc 45 4d 10 aa b1 a3 a7 dc 2d 21 78 46 35 e8 28 bc a3 c6 07 51 d9 5c da 9c a5 70 dc a8 9f a6 74 e6 cc f8 cd b3 30 41 cd f9 5f ec 02 c1 97 42 26 9e e1 d8 b5 af f2 95 91 c4 cc 88 62 92 4f 4d 6c 45 Data Ascii: ]>vc\9)V}B',oMqmREY>)9%Kb6BYVG@\|'Z}DKq8N)C+armC~Q\|^<kX(29ERs`u5?hL,<\|~!\2WQWkN%EM-!xF5(Q\pt0A_B&bOMlE
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: b8 0e df 4b c1 07 8f 97 46 c8 45 19 0b e5 6f 90 25 8f 5f 51 9b d1 51 43 28 92 c1 dc ef 87 54 fc 0c 97 75 13 72 69 fd 8c e3 49 83 28 37 5a 99 d7 4a 68 b7 85 71 ad 20 90 85 7b 20 30 c4 be 57 b9 01 e1 c4 e2 d1 41 c2 7d 1d 74 45 df 18 61 76 0c 39 41 c9 dc e2 f9 0e 87 eb 06 25 ae dd 21 8c 4d 87 ab 69 de dd 47 76 d9 60 28 44 19 10 c4 68 3c fe 29 89 78 1f 0b 32 c2 d0 ec 68 8c 93 18 39 bb 21 ee 8e bb 78 7a b6 98 c5 ae bd fb 30 74 3f 11 00 eb c1 93 30 74 5c 56 fe f2 9c cb de 6c c1 87 88 c7 e4 3f f8 c0 0c f9 84 55 42 44 93 98 c7 71 07 2a f6 32 ac 2c a1 d6 15 ad f8 1e 2c 59 c2 3b 4b 00 53 20 2a 8e 7e 2b 47 81 16 9f aa 40 d5 8d 23 36 62 64 8e e4 e8 6b 8a f6 30 9f 69 66 f2 aa 17 49 28 a9 6f ad 5d 49 3d c7 e0 8b 50 3c f8 62 07 ef 57 5f 4f ea 35 ff fd ab 8b 39 20 fd 8e Data Ascii: KFEo%_QQC(TuriI(7ZJhq { 0WA}tEav9A%!MiGv`(Dh<)x2h9!xz0t?0t\Vl?UBDq2,,Y;KS ~+G@#6bdk0ifI(o]I=P<bW_O59
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: d4 11 53 2d 4f e3 5a 2c 58 c1 d1 1c 0b 44 aa e6 41 44 a6 95 69 44 17 87 5c f9 90 45 77 3c 64 a3 ae 86 0a ec c5 16 8e e3 b4 0b e9 c4 df 37 d1 c6 97 ef 8b ab 17 06 86 fb 05 eb fb b5 99 92 39 81 c2 c3 08 f2 17 b9 2e 5d f0 6e a9 22 d7 cb fc d9 a0 ef c7 a3 0e 04 7b a9 f7 e0 bc 0a a3 9c 20 49 8e c4 ee 23 6f a2 ef df 7b e5 6a 55 b6 2c e6 99 95 92 77 dd 48 3c 92 85 4c 33 5f be dd f2 61 53 0c d7 ef b7 7c a7 f9 34 f1 dd 16 6a c5 3f 0d 27 d9 65 55 b9 4f 73 ec 1c 8b a1 9a fd f6 ef 93 0a 98 66 bf 7d bb e4 c2 a6 19 af df 6e f9 30 a9 86 6b f7 db be 4c 2a 61 9a fd f6 ef 93 0a 98 66 bf 7d bb e4 c2 a6 19 af df 6e f9 30 a9 86 6b f7 db be 4c 2a 61 9a fd f6 ef 93 0a 98 66 bf 7d bb e4 c2 a6 19 af df 6e f9 30 a9 86 6b f7 db be 4c 2a 61 9a fd f6 ef 93 0a 98 66 bf 7d bb e4 c2 a6 Data Ascii: S-OZ,XDADiD\Ew<d79.]n"{ I#o{jU,wH<L3_aS\|4j?'eUOsf}n0kLaf}n0kLaf}n0kL*af}
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 93 a9 b7 ed 2c 10 70 25 19 b6 0a 9d cd 3f 69 34 6f f6 bb 9c ee 1c 70 b3 c3 51 a2 2a ec 12 fc 41 c1 77 4f 45 64 74 78 d2 64 50 36 41 d7 44 60 87 81 1c 9d f7 4e 7a 06 79 9c d4 79 fd 59 bb f7 68 34 17 ec fe 3e 68 ee 19 7b 58 0e 5d be 4e ec 1f cb f7 15 e2 88 4e aa 5c 19 d3 9d b1 91 10 ad 7d 51 e1 f4 73 40 d7 60 7f 82 d1 bd 80 98 c7 b4 1b 61 35 4b a4 0c ae 7e 1e 58 a7 67 4a 89 14 39 8e 92 64 d5 bd b1 8f 97 1a 06 79 ba ad e3 dd 3c b6 e7 aa 6c 3a 3f 0f 58 a7 c5 50 03 e0 65 d5 fb 83 58 c6 b4 d7 21 9a 3d 29 64 a1 da f3 eb 10 28 88 00 a0 c9 60 96 13 d5 b9 87 be 3a 07 ac 77 0a 65 8d 18 a0 c0 64 93 0a 5e b8 46 ce 69 e8 36 57 cf 52 eb d7 89 13 df 40 28 03 1d b2 14 fa 17 6f 0e ea 53 6f 2f 8a c6 e2 74 9e 19 7d 70 53 f1 db c5 40 c8 d9 2b 64 db ed 3e f4 6a ea 47 46 49 fb Data Ascii: ,p%?i4opQ*AwOEdtxdP6AD`NzyyYh4>h{X]NN\}Qs@`a5K~XgJ9dy<l:?XPeX!=)d(`:wed^Fi6WR@(oSo/t}pS@+d>jGFI
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: c4 45 86 c3 da c6 5b 13 eb e7 32 f9 74 41 87 a5 c0 82 50 46 c5 6a 1a 94 35 f7 7f e0 68 af 2c 35 7e 9c bc ed f7 f1 dc 5d 5c 0b 18 0a be 89 f0 f5 5f b9 a9 71 28 a3 ec 44 08 cf bc ba a9 f8 bb 47 1f 52 13 b5 88 1f 01 03 3c 53 dd a6 ae e5 32 cf 4a 5d 6d 6b d7 65 7e 0d 8e 7d 8a 25 4d 83 ca ab 76 ea db 55 2e 81 3e 01 00 00 00 00 03 50 dc 6c 3a a9 15 14 1a 7d 41 85 49 62 16 f1 49 40 f4 58 f3 2f 52 58 0f 51 a8 f6 c3 19 22 c5 d7 5f 3b ad 33 18 f2 01 cb 9b 59 93 b6 75 45 fc 2a cd d4 86 98 fd 67 f3 90 ea 04 22 e5 ed ae 70 10 66 74 f6 0d b7 96 5a 0b 8f 3e 7a ce ea 8b cd 4c f2 90 39 a6 e6 21 c2 a5 15 96 11 f3 8d bd 72 4a f1 a5 ae 37 61 7d ec 7e 2d 1e d1 bf 2c f3 b6 75 fa 5b 92 09 0e 24 4b 3a 58 bb 8e fa cd 9f cc 02 6e 6d 50 ce 40 97 ba 8f bb 62 c8 59 bd b7 09 51 54 9a Data Ascii: E[2tAPFj5h,5~]\_q(DGR<S2J]mke~}%MvU.>Pl:}AIbI@X/RXQ"_;3YuE*g"pftZ>zL9!rJ7a}~-,u[$K:XnmP@bYQT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49840	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	662	OUT	GET /uploader/9b07c55298c5eecabc44b3b38b837976.jpg?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:54 UTC	571	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:53 GMT Content-Type: image/webp Content-Length: 86704 Connection: close x-oss-request-id: 6650748BF488A53136218532 ETag: "604B6311943B139FC729BAD17C32D276-1" Last-Modified: Mon, 15 Jan 2024 07:00:18 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 222 x-oss-hash-crc64ecma: 15536497625066380195 CF-Cache-Status: HIT Age: 42666 Expires: Sat, 25 May 2024 02:56:53 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1affc1ef7d4-BNA
2024-05-24 22:56:54 UTC	798	IN	Data Raw: 52 49 46 46 a8 52 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 83 03 00 83 03 00 49 43 43 50 48 0c 00 00 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: RIFFRWEBPVP8X ICCPHHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 69 65 77 00 00 00 00 00 13 a4 fe 00 14 5f 2e 00 10 cf 14 00 03 ed cc 00 04 13 0b 00 03 5c 9e 00 00 00 Data Ascii: sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference Viewing Condition in IEC61966-2.1view_.\
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f dd 50 27 50 71 50 bb 51 06 51 50 51 9b 51 e6 52 31 52 7c 52 c7 53 13 53 5f 53 aa 53 f6 54 42 54 8f 54 db 55 28 55 75 55 c2 56 0f 56 5c 56 a9 56 f7 57 44 57 92 57 e0 58 2f 58 7d 58 cb 59 1a 59 69 59 b8 5a 07 5a 56 Data Ascii: 88P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKL*LrLMMJMMN%NnNOOIOOP'PqPQQPQQR1R\|RSS_SSTBTTU(UuUVV\VVWDWWX/X}XYYiYZZV
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: b6 b8 05 e3 14 f6 97 de a4 c4 bf bb eb be fd e0 95 0a 9e cc 8a d3 ae 30 6c 9d 6b c5 cb 52 d7 8c 55 4a c8 1d 9c 48 ba 6d 81 59 2d e5 40 8d a1 2f 5d 4e d0 b8 42 07 96 00 4f e9 d4 ad eb e8 13 25 c0 8c e1 ba 3f ca b0 fd fb 0b fa 14 7a 01 e0 e8 49 0f 9e 7f 4f 62 3a 1f f2 75 5d 52 65 b2 62 ce 64 63 38 2c 53 5a d7 b4 0b 60 9e c7 af 8f 22 11 7a f3 e0 d0 4c 0c af 68 16 ae c3 8a 3f e6 04 5d 74 8b 40 bc 90 76 16 14 8a 4c 0b 59 62 3d 1e 12 de 09 35 4b 0d fe 4c 70 d5 ce 40 58 b4 de 48 fc cf 17 73 52 f1 8b 3b 7c bd 19 57 19 68 86 3e 91 54 5f d1 1a 9d f2 ea 52 55 68 b6 90 e7 c4 6c 61 10 65 fb 9b 1a 62 d5 70 10 31 16 ff 2e 4d aa 00 35 ca 1f b6 86 e8 c1 fa f9 e1 00 00 e3 6d 6d 19 97 30 f4 cf d8 fa 99 cf 16 a5 48 49 bc 94 4b 3a 0c 1e 3a b4 63 8d aa 0b 91 e3 68 5d 91 fd 5c Data Ascii: 0lkRUJHmY-@/]NBO%?zIOb:u]Rebdc8,SZ`"zLh?]t@vLYb=5KLp@XHsR;\|Wh>T_RUhlaebp1.M5mm0HIK::ch]\
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: c7 66 35 37 37 ca 6d ca 55 fa 60 e5 77 28 b7 18 c3 f6 a2 3d af 0b 8a 2c 7f 03 61 28 57 29 b3 fa 4c a7 c7 a2 f0 80 60 0a 9e d5 65 56 1c ef 40 2d dc 34 22 ec e4 51 3d 1d df 53 a8 05 df 4e 02 10 f7 84 d0 f8 95 51 02 bd f8 70 bf 4c 3e 8b 1e ba d9 7c 7d 5c 21 4a 07 2b 1c 76 29 2f c4 34 dc c5 ac 11 5a 5b 3a fa 3b 90 3f 13 8f 53 4c d4 94 33 47 47 df 31 f3 a3 84 59 87 ca cc 81 44 d3 ba e3 69 3b ee e5 90 a1 cd 5d 76 e9 ba f7 ce 35 5d ba 90 58 60 1c 23 28 e5 5d e4 08 2c 72 4d 42 d5 58 ac 54 f4 ad 96 fc 59 9e 5a 02 cc 5c 76 59 4d 8e 76 d9 b0 e1 e8 d8 7a 1f 62 5e da 6a 84 42 17 1d 77 3a 7d c6 3a 54 b0 10 b1 f6 0e a8 cd 3f 05 b1 1f 97 f3 89 0d cb 7a 2e 62 5c 5f 46 7e a3 80 c7 74 77 74 a9 e9 bc 05 d0 80 d7 c4 c7 63 6b 7b 82 6a 78 2f 43 9a fc 34 62 f2 30 4d 87 26 a0 f3 Data Ascii: f577mU`w(=,a(W)L`eV@-4"Q=SNQpL>\|}\!J+v)/4Z[:;?SL3GG1YDi;]v5]X`#(],rMBXTYZ\vYMvzb^jBw:}:T?z.b\_F~twtck{jx/C4b0M&
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: e8 25 db eb 58 2d 19 b4 70 43 73 ae 47 2f 1c 2d a5 76 09 db 03 53 e7 61 3a a2 c1 94 e8 80 4e 4c 31 98 63 6a 74 2e 2d 88 e5 1f a0 8c 58 c3 87 9b 73 db fe 50 96 3f 4f cc 54 69 22 9a fd e8 da c0 b6 60 ae 1c 32 e1 2e 7d 6f 95 5a 00 f4 cd f5 88 e3 55 8e a0 29 11 c1 79 75 13 2a 65 74 fd 11 36 a9 e3 f9 01 ba c3 53 9b 18 ed e8 66 b4 83 47 34 ce aa bf 7c 24 f3 fa 66 ff 52 4f cd 74 3c 0e 3f fe ef 23 66 e9 a5 df 6c c7 3c 4b 64 46 2e 2b 72 d2 5b f5 02 a9 88 03 68 ea 0b 6e f2 4c e4 fa 9a 7f cc e0 b9 68 16 1e 01 7d 68 d3 d3 78 86 d1 13 e8 1e dd cc 8c d2 d1 98 36 be e9 d9 d6 1a a6 d7 ef 0d c8 69 77 86 c5 8b e2 df 5e 64 3b d0 8a 9b a7 26 dc dc 0d dc fd e8 f8 4d 71 08 d5 a6 f9 c2 31 e5 81 42 af 27 bc 7d 02 e9 5d 8f 7e 96 ae 0a 33 95 10 6b df 5f 97 9f 3b f5 28 94 9b 91 1f Data Ascii: %X-pCsG/-vSa:NL1cjt.-XsP?OTi"`2.}oZU)yu*et6SfG4\|$fROt<?#fl<KdF.+r[hnLh}hx6iw^d;&Mq1B'}]~3k_;(
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: dd b5 fc a3 f9 9e 23 cb 6a a4 ab 54 b7 ee 1f 14 d2 d8 22 31 23 a7 96 4d f1 99 c1 4e a3 f0 88 f9 a3 57 75 88 0b 91 3c 23 2d 15 5b 41 3e b2 39 84 b6 72 16 0d 6b 71 c1 ee d9 d8 e4 7a a7 bc d1 bd 54 b6 0e 18 a5 b4 ef cc 2b a7 d4 a8 cb 61 5e c1 8a a1 bf b3 6a fe ca 8b f1 7a f4 1d 54 94 a0 d6 ea 2a 2a a6 7f c9 a5 59 2d a4 da 3b 90 b1 01 40 48 f8 ee 78 86 78 76 51 4c f1 39 60 d0 1b 37 26 85 0e 08 23 57 19 eb 32 0b b9 69 32 72 89 ff c5 a9 27 09 d7 80 63 68 0f d4 15 9a c4 d4 07 68 bb 2c 65 d0 d0 53 59 31 88 cb 37 b3 4a 3d 27 38 8e 88 37 01 d8 ab 34 0b 26 06 25 f4 89 09 62 d9 77 a4 f6 15 78 89 c5 53 12 e9 f8 24 9e 47 5f 2a c5 24 76 08 a3 7b 00 d2 74 da 2f 2d 35 4e b6 bf 0b 15 fa 37 4c 55 5a e1 7e 47 77 e8 4c a3 02 66 07 49 45 9e 97 85 7c 54 f3 1d 72 7c e6 f0 32 58 Data Ascii: #jT"1#MNWu<#-[A>9rkqzT+a^jzT*Y-;@HxxvQL9`7&#W2i2r'chh,eSY17J='874&%bwxS$G_$v{t/-5N7LUZ~GwLfIE\|Tr\|2X
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 64 87 f7 8b 24 0d 3d cb 96 89 b1 3c a5 1e bb 18 aa c2 a7 70 c3 8a d6 1c aa b6 46 87 09 b3 3e 28 5f 67 bc 38 5f 97 6f a9 5b ed 11 76 22 e8 3e 52 c3 e0 8c 2a aa 28 9f e8 aa 3e 8a ff c1 b2 6c 80 80 87 db 46 de 6c 56 12 5f ff c6 6e 1b 67 8d f6 98 29 6f 58 93 69 f7 b6 f0 87 a4 e9 43 3f ff 9b 37 23 0a 8d 77 3f bd 23 55 d8 ad 6e fb cd 51 16 c0 2e 1d af f4 6f 95 9b 2e 16 30 f9 e0 e7 a6 c1 ff 82 db fa 8a 33 96 92 1b 8b ab b1 bc fe 1d a4 b7 63 4d 8a 29 72 9c 1b 08 a7 af be d9 b3 5a 50 43 67 9d d8 86 c7 16 f4 e8 e4 3b 42 6d e4 3c bc 21 34 75 b9 79 47 db 88 10 ea 6d 5e c4 fb 0f 09 b1 17 b5 18 0e 1f d2 1d 03 05 f7 5a 92 b9 11 fe 6d 79 fe de a2 fc 42 50 96 7b fd 88 24 93 3b 56 7a 5f f1 be 6a a5 97 06 b3 10 1f 0e 80 82 ee d6 c3 70 93 4c 77 13 3b 8e cc d3 37 ad 3b 89 18 Data Ascii: d$=<pF>(_g8_o[v">R*(>lFlV_ng)oXiC?7#w?#UnQ.o.03cM)rZPCg;Bm<!4uyGm^ZmyBP{$;Vz_jpLw;7;
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 44 65 1e 9a b7 3a e1 1e 78 9a f4 b3 0b 59 e3 2d 72 42 37 b7 45 70 41 26 79 4e 88 73 1c 70 6c 21 f2 4c 89 f9 92 50 fd db 4f 43 e0 99 61 0b e7 63 78 f5 5f fd bd d9 59 06 40 39 9e 5c f3 61 05 89 5b e1 ec d1 58 ae bc 0f 5a 32 55 51 69 82 17 fd 21 f5 5d 1e c1 45 d9 f3 2f 8c 7e ec c8 57 da e9 c8 ef b4 73 57 43 36 6f dc b9 09 1e 3a 18 93 e1 62 6c 6d 6f dd 57 60 0a 6e 5d 4f 2a 74 9f 4a b7 8c db 3b 52 ac 6a d1 62 64 6f a3 0a 07 4a 29 78 88 f0 8e 3a 78 ea 2e 7b 07 dc 20 4b 2f 7c 44 22 5d 1a 76 e1 1d e4 7a cb 84 ed f6 26 59 d7 0b 6d a3 5d cc 7f 1c 8d d3 c0 ba d9 74 41 18 cc 1a c3 39 75 bb f3 17 37 fe e0 89 07 2e ef 61 1c cb 08 ee 45 94 2d 15 8b 0d 7a f6 f0 fd 4d 3f fb e9 6d 00 ad f4 fb 70 ff 59 a7 25 26 9b 1f 90 fe 2d cf ab 07 98 ca c1 3a 89 69 5e 9d 9a b4 f7 83 41 Data Ascii: De:xY-rB7EpA&yNspl!LPOCacx_Y@9\a[XZ2UQi!]E/~WsWC6o:blmoW`n]O*tJ;RjbdoJ)x:x.{ K/\|D"]vz&Ym]tA9u7.aE-zM?mpY%&-:i^A
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 4b 7f b9 58 96 fa d1 74 4f 3e c6 b0 d6 47 45 be ed 25 62 5b eb 45 be ed 25 62 5b eb 45 be ed 25 64 95 c0 96 fa d1 6f bb 49 58 9e 29 df 1a b4 5b ee d2 56 25 be b4 5b ee d2 56 25 be b4 5b ee d1 6a c0 ca f6 81 6c 27 5f e5 0f 71 91 8d 5a 2d f7 69 2b 12 df 5a 2b 40 00 eb f1 80 50 21 a8 40 64 8c 30 93 66 80 7c 27 65 13 aa 35 98 ff 95 3a 66 24 f7 8c a7 fe 27 e4 2b a6 13 5e eb fa 5e 05 67 a2 11 ff 88 2e d6 e2 23 74 03 4c 4c e1 c3 71 dd 8c 2c 8a 37 8a de 14 4b c4 aa e1 c8 03 dd ee 91 ab 61 e1 e7 d8 e0 64 92 d6 ac 56 e7 07 df 0e a1 49 95 c6 41 b7 e6 be 11 e2 d4 b8 ba 1d d5 ee c9 09 73 96 e9 26 57 ce 2b 6a f2 8c 31 e7 9d 3a ec 45 b7 32 1f 96 86 6c ff 8b 7b a9 71 33 65 87 79 2e ce 0b 59 e8 14 f7 af 8d cd 32 d6 ec ea 37 7f ff af 3c 30 0e 9b c8 ab 04 28 d1 df ee 7d 7a Data Ascii: KXtO>GE%b[E%b[E%doIX)[V%[V%[jl'_qZ-i+Z+@P!@d0f\|'e5:f$'+^^g.#tLLq,7KadVIAs&W+j1:E2l{q3ey.Y27<0(}z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49849	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	428	OUT	GET /uploader/577b4dd48a7d2380c647e2e55515d3f5.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:53 UTC	570	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:53 GMT Content-Type: image/webp Content-Length: 6622 Connection: close x-oss-request-id: 6650748B1F52473534751A0C ETag: "C1C54D65A17F2725A1766AEC3B2ED336-1" Last-Modified: Fri, 05 Jan 2024 04:00:09 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 135 x-oss-hash-crc64ecma: 15027862288381981426 CF-Cache-Status: HIT Age: 42666 Expires: Sat, 25 May 2024 02:56:53 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1afff5bf7e0-BNA
2024-05-24 22:56:53 UTC	799	IN	Data Raw: 52 49 46 46 d6 19 00 00 57 45 42 50 56 50 38 20 ca 19 00 00 70 a9 00 9d 01 2a 8f 02 d4 01 3e 6d 36 99 49 24 23 22 a2 22 53 68 a0 80 0d 89 69 6e dc f3 dc 8f e1 c3 1f fc bb d1 9d 47 9c 35 d8 59 d1 67 5d a6 ad 91 8b 3f 5d 5d 75 8f d9 e4 8d 61 81 17 be 0c 33 7a ed 97 c2 fa 64 cf d6 ed e7 8e 1f 36 5f 97 d2 5a ff 8e cc f6 00 e1 00 2a 5c ac ff 75 a3 7b 2a 43 ce 7f ab e6 a3 f6 cf f8 1d 37 5e d1 43 76 cc 84 63 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 e7 1c e3 9c 73 8e 71 ce 39 c7 38 c1 64 Data Ascii: RIFFWEBPVP8 p>m6I$#""ShinG5Yg]?]]ua3zd6_Z\u{*C7^Cvcsq98sq98sq98sq98sq98sq98sq98sq98sq98sq98sq98d
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 1e 1e 46 3b 84 2f 97 01 d1 4a 0c 0d 15 3a db 25 ed f3 97 e0 2c 33 52 97 02 cd 62 cb c1 a4 7e 26 e1 cf 97 24 c5 5d 25 8f 93 ac 68 19 13 b5 ee 2a 8c 43 73 b0 98 8e 8d 92 51 2a 1c ea 8b bb 84 32 cf 2d 72 f3 1f a6 eb ee 8f b4 53 b8 14 61 40 d9 ce de 6d b2 e9 d3 ec 4e d1 eb ed 26 93 3d 54 4a d6 53 a2 44 f5 4d f2 50 4e d6 2d aa 50 1c 57 a9 75 fa d5 22 87 01 9d 18 cc 09 5d 08 28 4e d5 1e d0 df 1c c1 5c d1 2c e6 09 66 ac 1d 09 c7 48 b2 8e e3 45 0d 7d 7f bf 7a 87 ee e1 fa a3 9a a1 01 ed 13 40 27 10 80 b6 a3 33 e9 ce 4f d9 2a 2f 7a db f5 ba eb ff 67 ec 76 be f9 cc 05 17 bf fc 5a 14 14 07 01 ca 1b 01 e6 96 3c e6 49 ae 7d 7d 09 e8 07 28 5f 9d 3f 3d 1c 2d 47 91 6c 4a a4 52 3e 54 0e a9 a6 b8 ba 9f ab b4 5f 14 66 6e bc f9 89 37 bf 97 30 f3 ae 3a 28 52 b5 11 00 60 61 02 Data Ascii: F;/J:%,3Rb~&$]%hCsQ2-rSa@mN&=TJSDMPN-PWu"](N\,fHE}z@'3O*/zgvZ<I}}(_?=-GlJR>T_fn70:(R`a
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 98 f4 f6 cc 02 aa 97 78 18 44 25 40 3f f7 e9 f1 e3 ad d0 26 bd f4 b1 83 cd 4e f2 a1 49 28 eb 26 a7 e4 a2 17 9e 27 10 dd 53 07 03 c2 a2 e8 7f db 98 0f 4a d4 a9 3f ee 7c 4f dd 42 19 9d 10 85 fd f5 9f 7a 3f 32 b2 1f 36 7d 67 a2 0b 64 55 b8 00 22 6a a1 9b 9c 92 4a 3b 5c 78 dd 82 fa 8d 83 e2 6c 8a 46 ee f1 4a 13 86 f9 1b 74 c5 b5 e3 e9 e8 07 91 4b b2 01 10 7e a8 7a 1a 59 6e e4 2b e3 4a c6 2e 15 12 fa 58 9e 4b 65 85 c0 f0 73 f5 0c 53 20 85 52 2d 5d d4 6e e9 d1 fd 06 60 d4 1e 47 f0 43 4b 15 dc 6e 1e 6e e3 ed 79 8d e1 15 3e be 84 38 a4 c5 11 12 3f 66 d1 15 e9 9b 3e 33 e6 dd 40 13 44 ab 33 dd fa c2 97 d1 3c cb 4d 6a 3d e7 ba 5c 44 63 a2 5a 02 b6 d3 19 e2 be e2 b8 b9 65 6c 27 a0 5b 2d ba 13 97 e6 7d b6 af cb ae 0c e9 f0 a6 db e0 00 2b 3c b8 ad 2e 67 c3 c3 80 42 bc Data Ascii: xD%@?&NI(&'SJ?\|OBz?26}gdU"jJ;\xlFJtK~zYn+J.XKesS R-]n`GCKnny>8?f>3@D3<Mj=\DcZel'[-}+<.gB
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: b0 00 8e 46 89 05 67 9d 25 2a 80 f1 75 aa ef b5 33 4c 19 c0 19 20 a2 0e ba 23 3f 09 82 df 6a f9 97 9e 5d 5d c4 77 ed 21 bc 21 53 3c 79 ec 93 23 2c 37 dc 8c 2a d7 ab 1a 2f 3d 8e 6b 0a ac 6c 58 83 f7 7c 46 4c e0 41 e6 56 45 cb db 66 24 3b 05 40 5e 33 44 18 98 29 e1 44 01 5b 4f da aa b1 c9 db 27 73 47 1e 2c 3d 37 1d 65 e6 58 92 ed 42 07 ef aa 85 c2 02 cb 10 96 06 cb 26 3a 0d 7b da ab dc 48 e6 4f bb 2e 2a 22 94 d1 f2 fc d3 8d 56 19 1e bf 92 96 9c 4b cd ab 1c da 50 02 dc 17 31 31 20 dc 70 f5 7c a9 ef 2e 8b 3a 36 9b 7f 3f 66 cc 55 99 85 03 e8 df 39 55 ca 3d 7f 26 3b d7 d8 90 db ae 66 b8 69 2c 9a d8 9d f1 b6 9d fa 78 40 ae 5a cf 44 3c b6 81 c0 42 b4 38 f7 cc a6 fc 92 98 ac fd ac 55 b2 2c 55 9c 9d a1 f2 05 1b 9f 94 61 47 38 c7 7b db 23 61 f4 66 ea 17 e2 27 39 f9 Data Ascii: Fg%u3L #?j]]w!!S<y#,7/=klX\|FLAVEf$;@^3D)D[O'sG,=7eXB&:{HO.*"VKP11 p\|.:6?fU9U=&;fi,x@ZD<B8U,UaG8{#af'9
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: fa 9c c1 da 28 75 32 2c cf 13 2c 94 66 ca 00 b3 93 97 bc d8 ca c5 61 e6 14 eb 89 d6 ac d0 f3 13 87 0c 7a de 50 51 29 b6 d6 7c ad 12 84 e8 32 b0 7c 8f ee 24 9c ee c8 f4 e8 62 72 16 fd 4e bb ad 06 3c b7 26 19 9c d1 e4 d3 f1 b3 41 9a 24 c8 70 79 14 db 06 57 45 c3 df bb eb e0 93 97 78 9b c5 ae 89 26 c2 38 d6 14 45 1b 63 e8 9f 15 2d 40 37 a9 30 39 82 20 eb 62 aa 64 c8 0b 3c 65 69 c3 a8 b6 af b9 e9 e9 c9 d1 37 cd 5f 27 4e 69 0c df 81 b1 bc c4 81 ec 9f dd 42 55 c6 22 5b f0 98 c6 a3 7a f3 5f a1 b7 ea e0 99 48 b1 28 fe dc 66 f8 c8 3d a1 f8 15 3c cf f0 81 d9 22 c1 64 73 57 d7 82 8b 0b e2 d7 d6 c5 56 66 30 b2 f0 01 c3 9e c9 51 d6 2c 32 3d 75 18 70 5e 12 dd 9b 7b 4a 10 a8 e7 66 87 50 26 78 9a ad 69 8e d9 98 21 c2 2f 01 aa 5e 57 36 2f 5e 28 d7 38 88 ad d6 60 b5 b3 f0 Data Ascii: (u2,,fazPQ)\|2\|$brN<&A$pyWEx&8Ec-@709 bd<ei7_'NiBU"[z_H(f=<"dsWVf0Q,2=up^{JfP&xi!/^W6/^(8`
2024-05-24 22:56:53 UTC	347	IN	Data Raw: dc 0d 22 4d 32 4f e4 25 51 d3 08 4d e1 c6 90 97 53 c6 af 75 aa 32 41 1b 63 73 8b 2c 4d 99 4b 81 49 7f bb 95 d8 11 fa c9 ab 02 91 c4 3e 5e 9c fc 7b d8 05 00 e3 7a 7a 6d 82 0d 3a 1e 4f 02 3d 46 7c e9 b6 a4 08 fa ae 5a e5 79 46 79 60 0f 13 c5 a3 df d2 02 ee 23 3c 4d 35 a2 40 63 1f 0c f7 ee 38 80 5a 14 66 5c 8d 18 c9 29 8a fa e3 9a f8 17 4e a0 e7 c0 83 33 96 94 d1 f9 25 d9 5f 3c c1 70 3a 0b f5 3e 9a f4 d2 03 37 49 52 91 a9 81 b5 ac 83 06 b1 35 4b 5f 38 27 e1 99 e6 9f 46 12 74 1a c4 6a 87 43 6b 7a 27 8b 77 4b 80 5c f5 3b 9d 16 15 b3 80 96 39 05 42 e0 28 c2 d8 ac 8e f4 6d c7 00 d7 6e 83 be b0 02 84 da 29 66 ca 2f ea 36 ba 03 ce 00 c0 4d 14 38 02 ab c2 0c 52 9f da 0b 81 90 f8 7d 55 31 b3 59 52 1d cd 39 00 a7 ab 39 3e 79 ca 7b 3c 64 ac bf 68 ae b2 a0 38 6a 72 c2 Data Ascii: "M2O%QMSu2Acs,MKI>^{zzm:O=F\|ZyFy`#<M5@c8Zf\)N3%_<p:>7IR5K_8'FtjCkz'wK\;9B(mn)f/6M8R}U1YR99>y{<dh8jr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49851	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	428	OUT	GET /uploader/d993a1725f58924f23cadb81743e03e2.jpg?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:53 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:53 GMT Content-Type: image/webp Content-Length: 9304 Connection: close x-oss-request-id: 6650748BF488A53434C48432 ETag: "2A6F86D2A7C72B9CF260025BA9BA7410" Last-Modified: Fri, 12 Jan 2024 10:02:30 GMT x-oss-object-type: Normal x-oss-storage-class: Standard x-oss-server-time: 118 x-oss-hash-crc64ecma: 9146761236160919061 CF-Cache-Status: HIT Age: 42666 Expires: Sat, 25 May 2024 02:56:53 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1affb8a6a79-BNA
2024-05-24 22:56:53 UTC	805	IN	Data Raw: 52 49 46 46 50 24 00 00 57 45 42 50 56 50 38 20 44 24 00 00 90 99 00 9d 01 2a 4f 01 47 01 3e 6d 34 96 48 24 22 a2 21 23 d8 9a 20 80 0d 89 63 6e e1 73 f0 f9 e2 fd 77 b2 0f ae ff 61 f9 77 ed fd c8 bd ef 7b 5b c5 3c a8 c7 2f bc ac e9 7f b7 f5 9d f9 b3 fd 97 f7 5f df ff a0 fe 7c 5f b7 5e a2 ff 9a 7f 83 fd a7 f7 66 ff 4d fb 95 ee db fb e7 a8 67 ec e7 5a ff f7 7f 52 2f e5 1f ed 3d 3a fd 9f 7f b0 ff d9 f4 db d5 2d fa 6f 94 cf 9d fe eb fe bf c3 bf 25 1e a0 f6 ab e3 07 08 fd 99 ea 41 f2 cf c0 ff a9 ff 03 fb bb f1 cb fb 5f 06 7e 29 7f a1 ea 1d f9 1f f3 ff f3 7f 9a 7e 26 7e 0c f6 6b fe 3f a8 47 b4 3f 54 ff 7b fe 23 f7 6b fc c7 c6 cf c8 7f aa f4 9f ec 0f fb 7f b6 6f b0 1f e6 bf d3 ff d9 7f 69 fd dc f8 ff fd 87 8a b7 db 7f dc fb 00 7f 37 fe c1 ff 5f fc 47 e6 3f c9 3f Data Ascii: RIFFP$WEBPVP8 D$*OG>m4H$"!# cnswaw{[</_\|_^fMgZR/=:-o%A_~)~&~k?G?T{#koi7_G??
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 3e 17 9e 56 f8 65 0e f7 05 91 ef 1e 1c 57 95 af 63 63 8e fc dd f3 98 a3 86 31 2f 5d b5 d7 f9 5d 26 7b 00 c9 77 51 bf e6 08 3e e9 1b b2 ec cd 63 13 4c ba af b4 8c 78 ca e0 2c ef e2 75 1b 3f ce b0 0d 87 39 55 c1 91 a2 64 72 45 0b b7 6b 8c fd 96 87 63 ed 83 26 d4 9b 69 3b fc 32 69 fd 71 b5 75 dd 12 00 95 a6 a7 69 8c c1 f5 00 ca 63 07 36 c1 84 d8 2c d2 df 0c 9d 73 e0 2d 12 9e 9e e8 61 95 a0 bf dc d9 4b da 77 96 4b 35 25 bc de fe 4a 9a ca c6 3d d1 fc 10 b3 e6 66 58 f7 e8 f7 79 91 98 34 37 04 18 80 52 e2 db 72 cd 36 ea e2 ef 63 1f 3a 38 bd ca 80 c9 b7 c4 d4 5c 31 3c 91 56 b7 9a cb 7b 24 81 6f 3d ab 09 fb 0b b4 ae 97 d1 b6 a5 8c 77 10 e9 ff f3 57 e2 11 7f e3 35 87 e3 9a 02 2e f4 1c ff 2c 6c 8e 8e d3 ae 81 4f 2a ec 5e ce 9f bf 60 25 6c 6d 58 c7 bf 47 bb c7 be 6f Data Ascii: >VeWcc1/]]&{wQ>cLx,u?9UdrEkc&i;2iquic6,s-aKwK5%J=fXy47Rr6c:8\1<V{$o=wW5.,lO*^`%lmXGo
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: e5 d0 4b 8c 8b d5 0b ed d5 c1 15 d2 85 9d a6 2f 4a 60 14 c8 3e 81 ec a3 0b 99 34 42 92 cf 7d e8 1c 89 55 1f be 02 76 e9 3e d0 c0 fa d9 b9 be 4c 7d b5 e1 b7 9b f9 ef 97 dd 6a d5 90 a9 fb 98 3b 49 dc 42 b5 01 3c 8c c7 56 63 13 ed 2b 5d 0b 8c 4c 5a 8c 46 66 12 6f a5 66 24 96 9b 91 a9 59 b5 a8 9b 7b bc db 3f a3 bf 7d 7c 29 30 be 60 07 d0 7e 04 e0 6d fc 84 d6 16 2f 53 ff 81 bc 37 0a c3 d2 63 50 6e 88 c8 57 1c 6a 1e 2e 3d 08 84 c9 51 f4 3e 5f 58 e7 44 b8 23 14 71 6e f2 6a 87 1e 5c d3 96 27 5c b7 29 55 14 05 64 4a b6 d6 04 b5 78 67 30 68 70 73 97 dc c2 9d 5f d1 f0 3f eb 76 2d 7d dc 2d 83 c0 3f c9 b0 a1 bc 92 11 7b d8 b7 83 70 1d 6f 2b 8f d9 37 63 f2 0a c9 be 25 26 9d 3b 02 b8 95 63 d7 85 ac 3c 59 3c f0 31 91 27 b9 56 c2 99 4f 4f 5a fa 99 11 b5 79 4a 4a 1a a0 2c Data Ascii: K/J`>4B}Uv>L}j;IB<Vc+]LZFfof$Y{?}\|)0`~m/S7cPnWj.=Q>_XD#qnj\'\)UdJxg0hps_?v-}-?{po+7c%&;c<Y<1'VOOZyJJ,
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 41 52 3d ab b7 60 d6 3a bf b7 2f b6 d6 7e fa 50 4c 09 3e 0c 60 65 c2 62 fb 64 fa d1 46 ec 92 76 41 e4 4c c4 39 f5 6c 4c d6 86 92 eb 60 a9 5d 63 47 ec e0 79 f1 52 40 27 ae 32 65 08 4f f4 37 83 34 72 eb de e9 5d b5 5b 29 9f f1 5f 9e d2 c4 08 41 51 b6 2d 6c e9 e2 dd 79 bd eb 68 43 61 d0 58 08 90 63 c5 ac 51 7c e0 de 4a 76 b3 9b 9c b9 04 82 a9 b7 fb 27 9f c3 05 d9 17 a7 c0 bc 92 0f 40 d8 41 cc fd a3 d6 cc 24 ca 91 8c 63 f9 9f 77 6c 1d f2 d1 a5 63 d5 f5 25 88 0d 71 e7 e4 af fb f1 30 15 13 47 83 4b b9 46 f8 9f d4 81 b6 c0 82 aa b5 4f 09 d8 9c e1 0a 8d 38 e6 68 b1 30 c8 a1 07 02 e7 0b 07 a0 03 68 68 14 b3 67 ea 72 a0 37 c6 12 27 2a 41 a2 ce cc f9 73 64 fb f7 80 39 93 5d c1 be 66 b0 93 a8 1d a7 9d ad c0 72 c2 93 8d 2f 9f be 2f c6 fd 5c 0a 61 61 f7 bc d9 97 5a 7a Data Ascii: AR=`:/~PL>`ebdFvAL9lL`]cGyR@'2eO74r][)_AQ-lyhCaXcQ\|Jv'@A$cwlc%q0GKFO8h0hhgr7'*Asd9]fr//\aaZz
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 2b 10 b5 66 1d ce 3e b5 55 fc 3b d2 3e 05 99 ae c2 ae d8 2e 67 2b e2 1c f1 be 66 c0 a0 5b 67 f1 7d 14 2e 52 a9 e4 56 7e f9 b0 6c 7f eb ec 21 2e 2e 19 31 b3 e6 af 7b 11 89 98 67 39 00 1d 2b f8 26 9d 8b 44 35 f5 d3 e1 0c 48 fe 05 a9 51 14 f2 72 80 f5 e6 5c 31 64 a0 f6 d7 6e 08 9c 56 1a 90 0b 6d fd 8d 00 d2 e8 16 6d 9f b0 40 a3 4b 32 aa d8 76 c8 bc 76 d0 a8 ee 73 b7 4d fb 44 1a d8 af 4e 51 18 01 5d 28 35 37 b7 14 95 e9 e3 9a 01 03 18 c0 51 61 74 b5 94 7a 9b 16 9c 8a a9 e9 a6 a7 9a 7b e8 68 8c 53 ad 58 b1 1e 7d f5 f4 26 55 34 93 15 c1 a0 f9 27 14 87 95 bf d6 5e 42 00 e3 f6 bb 60 f2 6e 57 ab 7e f7 06 c9 69 29 3e 1b e5 b0 81 01 a3 69 7e 2d 24 96 54 82 3f 9d bc 4f 8e 90 20 a0 2d 83 01 71 18 17 8d 1c 0f 86 f0 01 0e 7d 14 25 2b 0b e7 00 26 ce 89 e6 dd 0f eb 6b fc Data Ascii: +f>U;>.g+f[g}.RV~l!..1{g9+&D5HQr\1dnVmm@K2vvsMDNQ](57Qatz{hSX}&U4'^B`nW~i)>i~-$T?O -q}%+&k
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: b7 44 aa ac 3f ec ac 57 b5 7b 06 22 06 bc 3e 5b 76 db 81 93 44 68 4f bd e6 1a e2 85 46 ff 09 73 e7 ef 18 47 d0 67 d8 53 90 27 7b 41 27 4a f0 09 52 e7 6a 99 47 e6 8d 62 dd a0 f7 31 24 44 c2 a2 07 d0 08 e3 38 e6 02 23 d1 14 d2 72 44 be 64 2b f9 68 17 7d 2f 8a b6 85 b5 2d a6 ac 53 5d 0d 41 e8 c5 1c 64 6e 52 f1 90 f9 4f 8c 83 ef 94 1e 56 e5 f5 a4 b7 44 e1 cc f0 49 1c 14 53 47 a7 61 cd 01 74 f5 76 99 4b 4a e8 d3 69 63 a5 99 4c 46 93 c2 58 44 0e 6b 18 3a 35 ee 9c ac e6 7f 98 d8 c3 b0 4c 47 d6 a3 9e 9c aa c2 5d f8 71 63 1a e1 c8 fc b0 50 50 85 29 2b 59 4d 3f 33 c4 07 4f b5 12 78 ec 45 d9 71 8d dd 4c 0e 20 bc c7 94 9c 33 a1 e4 1f 4f 8d 8d 53 0c a6 28 bc 8a bc 6b 9b 4f 8d 9a db e0 dc 27 30 02 1b 18 d3 22 df 77 d3 ed db 6a 11 73 d5 ca 1a a8 f1 ad a9 54 2c 97 8c cc Data Ascii: D?W{">[vDhOFsGgS'{A'JRjGb1$D8#rDd+h}/-S]AdnROVDISGatvKJicLFXDk:5LG]qcPP)+YM?3OxEqL 3OS(kO'0"wjsT,
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: ec 96 00 f6 28 82 a8 4f 64 e2 42 a4 8c 80 48 ce 94 9d 07 9e af ef c6 fb 80 92 a7 11 76 97 8a 87 9d 07 f6 e8 f3 d0 81 25 3a 4e 76 8f 63 dd 2f 29 3b 4c 78 75 05 8b 44 5f 16 e3 87 56 7d 88 6d 22 5e 76 01 91 df 36 d8 fb 8d 7c df 7d 2e 64 89 fd 1a 68 35 91 10 97 72 23 69 ea 64 d0 1f a2 53 3e 17 0a dd ec 5d 02 e2 87 f6 06 cd 40 82 7c 19 49 ce bf a1 ff ce bc ae d0 2a 2d 0d 22 67 e8 3b cd 4e 4b 28 f7 30 c7 3b 73 33 40 17 b0 21 bd 03 fc 19 bb c1 15 93 08 9a b8 eb d7 d2 27 21 08 65 d5 ef 6d c6 bd 99 e4 5f 49 6e 68 80 3c f3 ad 85 d3 8a 0b 42 88 11 24 d8 f9 76 b6 ed 00 2b 45 21 d6 35 9c 0a c2 c9 d2 86 44 89 6c 3b 42 88 ea 1b 48 f2 61 52 35 b9 7e d4 d7 2e 85 01 55 04 a7 37 11 f0 2f da 14 79 de 4c d2 ff 16 f6 8e 3c 97 5d ed a6 69 94 90 a2 93 40 b9 92 81 f0 74 af 89 58 Data Ascii: (OdBHv%:Nvc/);LxuD_V}m"^v6\|}.dh5r#idS>]@\|I*-"g;NK(0;s3@!'!em_Inh<B$v+E!5Dl;BHaR5~.U7/yL<]i@tX
2024-05-24 22:56:53 UTC	285	IN	Data Raw: a0 33 27 8c 7c 91 81 cd 30 49 ba 1c e3 02 3c 05 40 cb 7e 1c dc 74 63 90 ce 4b 20 d4 aa 5f 08 d0 51 98 2a b9 f1 a7 eb 45 38 0e 2d 46 01 14 09 95 94 82 90 e7 1f fb 56 87 36 7b 76 cd 6a 22 2d 0b 82 ba 8a 48 ba a7 73 04 d2 4e ac 73 82 25 35 94 a1 79 b0 50 ea e4 e2 c7 a1 ec b4 83 a1 a4 e3 2d a0 16 58 a4 7e 41 ed 0b 1b ea e6 6c ad 25 c9 0d cf 64 3a 46 55 9e cc 48 8e 10 21 ce c6 08 91 77 39 25 42 22 25 2b b9 e8 0d 60 1f 3f b3 e6 50 18 d7 75 2d aa f7 f3 f4 b1 0a b5 8b c5 b6 0d b6 7d 09 5f ab 06 5e 00 0c 06 58 df b9 83 77 e5 65 cc a0 36 da d4 6f 40 10 1e 82 c1 b7 81 9b ee 21 b9 9d 52 d4 53 38 50 64 21 1d b6 83 5b 2e e4 e6 48 1b 35 68 9a d3 f0 fb 99 58 de 71 b6 22 8f 03 43 53 c4 0e 81 e8 21 95 bc 05 a3 fb 17 e0 e8 46 b1 a6 ca 62 76 42 8e a6 a4 80 20 4b bb 68 07 1e Data Ascii: 3'\|0I<@~tcK _Q*E8-FV6{vj"-HsNs%5yP-X~Al%d:FUH!w9%B"%+`?Pu-}_^Xwe6o@!RS8Pd![.H5hXq"CS!FbvB Kh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49850	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	428	OUT	GET /uploader/d1000179a6d6aeab89d03ab4e2125ff2.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:53 UTC	571	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:53 GMT Content-Type: image/webp Content-Length: 28204 Connection: close x-oss-request-id: 6650748BB6DE1D3635B83CCE ETag: "A5C1FCC4869C0AB77A624D857BF6765D-1" Last-Modified: Fri, 05 Jan 2024 05:42:57 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 163 x-oss-hash-crc64ecma: 12640285698440337696 CF-Cache-Status: HIT Age: 42666 Expires: Sat, 25 May 2024 02:56:53 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1affd9af7d0-BNA
2024-05-24 22:56:53 UTC	798	IN	Data Raw: 52 49 46 46 24 6e 00 00 57 45 42 50 56 50 38 20 18 6e 00 00 b0 7b 01 9d 01 2a 8f 02 d4 01 3e 6d 34 94 47 a4 23 26 a1 27 57 8a 00 d0 0d 89 67 6e f8 37 3b 6c e1 82 4a 78 ab 89 d6 ff 85 7d 56 f7 8f e1 79 e8 da 3f c4 7f 6a fd 5d f1 b9 fb 3f 37 ba f3 cc af cd 7f 76 ff ad fd fb f3 3b e5 cf fd 6f 56 bf ab bd 83 ff 88 ff 53 ff a5 fe 2f fc c7 68 bf 36 1f ba 3e ad 3e a4 3f c2 fa a7 7f 73 ff af d7 31 e8 d5 fb 01 ea bf ff 6f da 77 f6 97 f7 2f da e7 54 0e 5e 7e 7f d6 af e7 bf 72 ff 47 d8 32 e5 ff 39 e0 47 f6 7e de 9f e1 f7 ab fa ef f4 fe 81 1e d3 f3 b6 fc de d2 8d ef fe 27 a0 8f bd 9f 8b f4 8d 99 df dc 5a 81 f9 8f de fb 40 af ea bf e9 fd 5f ff d9 f2 31 fb 67 fc af 61 7f 2e 4f ff fe e9 bf 74 3f ff ff d5 f8 8c fd ab ff fe 56 c0 ec ba f6 36 0f 2b 52 1d 97 5e c6 c1 e5 6a Data Ascii: RIFF$nWEBPVP8 n{*>m4G#&'Wgn7;lJx}Vy?j]?7v;oVS/h6>>?s1ow/T^~rG29G~'Z@_1ga.Ot?V6+R^j
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 7f fe b7 d5 6b 07 ab c0 5c a7 08 bd 3d 7d 5c 21 11 96 8f 61 74 b0 5b 58 f6 a6 62 3e a9 d0 7b 49 8f 41 9f aa 87 8d 8c e4 fa f2 8b c6 bb 7b 5f 42 6b 3f 12 ee d0 13 1f 5c 75 a7 89 a0 d0 5c 8d 7a 9a f1 fc 7f df dd 0a 7b 2e bd 8d 83 ca a5 16 09 fa 7d 9d 65 7b 52 00 25 c4 a7 45 82 3f 3c 1e 1c fa 20 00 75 45 99 1c ba 99 05 61 f7 70 fe 5e 33 82 3b 92 d2 d1 35 43 5a 7f 48 4f 09 a1 3e 0d 2a 7e bb 83 5b a1 25 e9 37 fd cb fe bb 79 85 4b 75 66 a4 3f a1 24 df 9b 7b 12 99 5c 88 aa 38 da 81 c1 4a 4a fc e9 45 9d 10 86 f5 bb 70 1e a4 a8 b7 47 0b e5 6f 9f 87 04 22 c6 d1 05 0b c6 af 9a c8 e6 60 96 fe 57 3b 3e 38 0b 45 08 bd a1 dc 64 f6 72 6e fd e6 2b 5f 47 95 b7 76 b8 1c 06 63 91 df 53 30 44 cb 88 a2 a6 9b 4d 0b bc 7c 76 25 7c ce 26 c5 5d 17 a1 4f 62 94 ff 51 29 01 66 09 2f Data Ascii: k\=}\!at[Xb>{IA{_Bk?\u\z{.}e{R%E?< uEap^3;5CZHO>*~[%7yKuf?${\8JJEpGo"`W;>8Edrn+_GvcS0DM\|v%\|&]ObQ)f/
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 0c 94 97 63 ed 5f ab 5b 2f 3a 1a e8 f3 78 4d 44 62 f5 e7 98 4c 70 b3 fe f0 c0 68 b9 77 d9 5f 24 49 df 95 b3 f6 55 e3 d4 99 40 4d 5c 7a 05 67 6a 8b 6c 20 35 6f b3 5b b8 69 a9 2a db 61 c1 c6 73 2e 35 22 4d 54 3e 3f bf 73 a0 90 a7 eb 42 d1 8c 78 65 b8 ff 79 29 04 f6 f4 18 0b 75 57 0f d9 ff 79 15 51 38 93 11 76 27 43 8a ef ed fe 3e 51 21 57 e5 e8 ce 8b 90 04 76 8e 56 cd e6 d2 7b 33 e2 c6 94 75 68 7e ac e5 6b 05 d9 98 60 46 dd bd 4b ce b1 4d 4c ac ef 45 76 c8 03 23 ad 91 a8 1e 0f 2c c6 09 25 91 9a d6 a3 ff 04 24 e1 4c e4 b1 92 b5 cb f0 23 7f 55 49 0f ff 5d f7 98 61 46 be 46 26 96 eb 4b 5a c4 bf e4 4d 65 85 e0 06 5a da d3 24 c8 d6 0a e0 bf bc f1 aa c6 71 20 1e 91 2a d5 58 d1 c4 7c ff 15 54 07 52 e3 17 6a dc ab de 6f 0e a0 a8 ee e2 71 1f 2c bf 77 7c 97 d7 e5 ff Data Ascii: c_[/:xMDbLphw_$IU@M\zgjl 5o[ias.5"MT>?sBxey)uWyQ8v'C>Q!WvV{3uh~k`FKMLEv#,%$L#UI]aFF&KZMeZ$q X\|TRjoq,w\|
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 05 f8 1b aa 92 7e 85 35 20 05 4c db 9e 44 c2 c6 53 e0 a4 78 5a f1 37 7f 4a 7e 7c c7 84 b8 85 03 b6 72 f1 5f 73 5b bf e5 15 8e 64 59 b2 4b e7 87 48 05 94 d8 af f2 66 7d 4c 2b 70 da b1 e3 78 ed a9 01 c4 8e 9d b7 c0 ee c9 57 5f 27 61 15 cf 4c e6 1b 68 0d 1d c4 bf d0 d5 f2 66 3e 95 ca 7c a6 26 5e 3c 07 b6 39 28 1a 7f 39 ea e9 68 00 00 1c fe 0c 11 ce 90 58 bc ff f4 b4 24 48 81 d4 02 2d f7 92 99 c7 9f 1d b7 5e 30 a2 97 96 87 3e 01 cb 7e fb 8d d2 d2 bb 93 ab a9 97 1b bc 64 12 20 ee ea 60 fa 49 8e fa 64 92 3d 23 79 e0 23 14 de 6c 56 4e c6 60 5c 77 80 32 ac 76 3a 6d 1b 2b fb 01 4b e0 1f dd dd 8e 61 0b 9a 95 c7 18 c5 82 25 b2 a6 96 7f 40 5d 75 e1 50 4b 50 ab fe e9 0d 91 1e 2d 83 60 8d b2 93 7e ad 0e 38 67 4e d1 c4 b2 64 0d 99 3f 12 36 f1 aa ef 6a 34 b4 e9 0c 0f e2 Data Ascii: ~5 LDSxZ7J~\|r_s[dYKHf}L+pxW_'aLhf>\|&^<9(9hX$H-^0>~d `Id=#y#lVN`\w2v:m+Ka%@]uPKP-`~8gNd?6j4
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 6c 4f dd fb 99 35 29 37 9d a0 44 94 4e 57 15 8d b5 79 74 80 13 8d 7c 07 4f 2d a5 cb 4f 55 76 b7 9b 72 68 86 80 b0 14 44 1d 87 7c 91 b5 65 61 70 b9 3a ab 4b 5b 31 ec 90 8f 3c 1a 94 f5 c0 42 9f f8 5c 87 70 1c 64 95 1a ee 04 14 6f 7e 13 35 82 b4 27 fd 78 5f 97 ad 35 55 dd 77 02 23 25 10 39 80 b0 42 0a f3 33 13 4c 48 f1 5e 69 f5 91 49 68 d4 76 5a 95 de 43 c1 9f 47 bc 54 12 d8 a8 98 17 c3 18 a4 eb 61 50 52 38 f8 ee f7 32 24 1e 99 10 d2 89 60 39 af cc e7 6e f5 af 30 56 83 5d b4 f7 c4 c7 a1 34 0f 4e 8f 95 4f 2d 2a 73 c0 42 51 a7 9e 4a 79 64 29 b3 50 27 71 38 cd 6e 7e 5b 46 45 eb 67 7e 95 05 d4 e8 e5 c1 1a ba 68 96 19 16 be ab 52 90 2a a9 7a e5 8a d7 15 38 50 b1 7e da da 91 41 09 26 eb 91 20 e9 f7 28 ad 96 50 ce 61 a4 bf cb ad 53 c7 83 c3 b1 35 c4 1c 7e 56 82 91 Data Ascii: lO5)7DNWyt\|O-OUvrhD\|eap:K[1<B\pdo~5'x_5Uw#%9B3LH^iIhvZCGTaPR82$`9n0V]4NO-sBQJyd)P'q8n~[FEg~hRz8P~A& (PaS5~V
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 01 ab 15 64 71 ac 92 61 43 06 78 02 b3 dd f6 26 c5 3d e0 22 87 ba 7f 08 e3 80 2d 38 61 cf ef 64 ca 7c fb 93 5b b9 5a b0 70 bb a9 5d 8f 49 54 ec 9a eb 4f c2 b3 ba 03 41 75 6a 5f c4 e9 2a 69 3a 3f ec f5 9d 69 73 f4 8b 2c 00 bf 36 6b 07 01 8c b1 ed 73 23 eb 1a e7 7f c8 68 20 74 d0 9c d9 16 be 65 5f 2c ba f3 04 8a 47 7f ce ed 6f c5 23 d7 da 69 cb d7 04 fc af ba e0 f2 94 e3 78 24 c6 50 78 e5 eb 4d 72 81 55 35 68 f6 93 27 5f c1 d8 b6 6e 85 0b 2c f0 c7 98 3b f3 c2 c4 a0 ab b4 79 76 84 09 86 0e 7e de ec af 11 5c d1 13 c7 6b 23 75 48 ed 3e c8 54 38 f0 a2 00 40 35 d7 94 f0 d5 2c 5b ee c8 cb 52 f1 b9 52 18 37 e9 6c f3 5d aa c8 34 15 4e c0 1d 08 37 fe cb 3a 02 19 42 ad f0 51 ab 72 19 1c b0 4c d4 e7 a3 72 f1 7c a6 08 52 fb ba 35 ef e1 36 97 0f 84 9f 83 10 8c 27 66 33 Data Ascii: dqaCx&="-8ad\|[Zp]ITOAuj_*i:?is,6ks#h te_,Go#ix$PxMrU5h'_n,;yv~\k#uH>T8@5,[RR7l]4N7:BQrLr\|R56'f3
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 7e e8 41 cb 37 7d 5d fd b0 85 b7 9c 09 10 56 02 59 58 c3 95 fa 55 67 30 52 72 c5 70 ab 79 12 a5 ae 82 27 78 58 cd a1 8f bd 02 c9 4b 98 6a 67 6e ba 7e 54 59 84 ca 3f 77 31 98 92 35 5a 33 e7 69 8f 75 91 88 dc 6a 78 fb 36 1a 9a f0 09 af 8e 86 1d 11 67 ca aa 8b b7 b3 01 8f bc 32 b7 a4 0b ae 41 f0 83 30 42 26 e7 2c 32 37 7e 94 43 df 30 bd 37 80 ee 71 ef 5f dc ba 39 62 95 06 20 dc 5d 0e 31 52 42 6e ba fa 22 ef 54 d7 75 6c 53 8a 8f 4a 35 42 68 58 09 20 e9 67 01 ba 1a 74 6d 05 08 82 9d 21 c1 c5 64 60 61 fe 39 36 3e 1e b0 84 7d 56 72 fb 37 9d 81 46 43 db 6d 63 c0 09 a9 6e 50 7d 38 fd cf 6d 69 91 b0 e7 58 6c c1 7f 51 a4 19 39 78 83 24 1c 40 90 1a bb b4 e7 f8 ae 22 3d f7 8d 3c 3f 2c 55 5f 28 05 11 6d 3a 33 44 6a 0e cb 25 89 7c 47 fc b8 2d db be a5 86 16 e1 49 07 4f Data Ascii: ~A7}]VYXUg0Rrpy'xXKjgn~TY?w15Z3iujx6g2A0B&,27~C07q_9b ]1RBn"TulSJ5BhX gtm!d`a96>}Vr7FCmcnP}8miXlQ9x$@"=<?,U_(m:3Dj%\|G-IO
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 1c 26 be bb e0 b4 e4 08 8e 64 df 65 15 b5 24 24 bf c2 70 3e e8 36 34 c8 96 37 3b 10 a4 a1 83 61 92 47 06 5b 80 c6 4a f1 85 3b 03 ca d0 6b 7b 3e 7a 23 f5 b2 c6 42 7f 36 9f 06 2a c6 83 a8 e8 58 1d b7 6a 7f b5 2b ec 40 3a fc 1b b9 9f 92 01 1a e7 b1 52 44 be 44 88 0a 35 73 25 12 c9 fc fe 02 44 ec 19 f0 28 e7 e4 9b a4 87 74 27 2b d3 7c 51 78 87 12 36 2d cc 26 61 32 b5 f8 a4 7e 61 b6 e7 bf f9 69 9f 73 91 ee 16 5d a8 bf 27 0f 5b b5 27 93 6c f4 dd 47 6b 7c 8c a1 ec 13 73 24 3c 6e 1f 43 02 42 95 cc f3 b5 cf b8 ff 1a 0d 4e e7 41 8f 1d 93 80 4c 09 5d 58 0e 42 f7 6a 33 3e d4 91 35 41 0c 4c 85 7d a3 f2 3b e9 61 83 e4 5a c4 74 47 49 19 0a e4 69 5a 08 d0 5f 25 f5 ea fa 7c 50 c1 8a 5d 95 1a 7b 8a cb 78 f6 c8 0a d6 2c d3 fb b4 b1 89 8b 31 08 52 c0 a7 65 f1 f9 5d d3 cb ef Data Ascii: &de$$p>647;aG[J;k{>z#B6*Xj+@:RDD5s%D(t'+\|Qx6-&a2~ais]'['lGk\|s$<nCBNAL]XBj3>5AL};aZtGIiZ_%\|P]{x,1Re]
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 3f d8 dc b5 82 db 17 60 41 3b 9f 6f 2e bb f0 93 7f 6b fa 9d e6 1a fb 23 2e a3 79 75 0e b0 9c 32 23 02 3a 52 ca 80 1d 17 0d a1 2e 2a 32 0e 61 b8 42 8a bc 65 4b e8 16 15 b9 ec 3e 04 f4 26 6c 3d bf cb 3c 7c 79 b3 37 aa 64 73 b4 c8 33 d9 f2 d2 ca 50 5e eb 39 7f 11 54 06 3a 15 fc 29 b3 87 53 2a 9a a7 ef ad d7 1d 26 44 56 5a 40 70 18 84 6f 1c a6 10 db 56 66 8c 90 79 d5 7d 59 aa 40 c5 07 33 21 95 f9 d8 78 54 51 73 36 d9 7c c9 24 00 a7 a1 12 c5 2a 27 18 f2 66 11 b1 b4 47 d5 15 96 ec c9 7d 08 ed db 65 83 a3 6e a3 4e 0e 6a b9 f9 a2 cc 73 d1 41 0c be 1a 2c 0c 28 09 50 49 e8 b3 36 11 e9 32 e0 86 1d 41 e2 7e 1b a4 bb e3 1a 90 ef 4b d4 be 79 41 51 89 a8 9e a2 5a b6 55 ca 75 9b aa 64 2e f3 14 90 e8 1b 25 d6 08 48 0e ea 44 0b a3 4c 9b 71 a5 91 0f b7 4e cc 66 45 c2 3e 9c Data Ascii: ?`A;o.k#.yu2#:R.2aBeK>&l=<\|y7ds3P^9T:)S&DVZ@poVfy}Y@3!xTQs6\|$*'fG}enNjsA,(PI62A~KyAQZUud.%HDLqNfE>
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: ff cd de 62 00 d3 b8 36 0c 42 e0 a0 e4 65 c6 c3 bb b6 78 79 ac 86 30 2c 6a 96 43 cc f5 cd 37 93 fe 07 0a 13 6d 1d e2 ac 03 ea 2c 99 1c 07 fb 7f b9 b6 58 56 53 99 34 10 82 41 2f 90 70 f2 03 70 f5 09 30 4d 6f b2 b3 9e 72 ba 20 6e 6c 8b 52 e6 d3 19 7b 5d 5e 86 94 a5 b8 ac a0 1d a6 a5 63 aa c7 93 71 bd 53 44 a0 9a 20 0c 6e 64 87 dd c4 3e a6 61 dc de e7 e5 ae ea d8 cb d9 04 5c 8c 12 de d9 65 88 11 31 11 8a a4 13 fd 9c ea 02 c4 f1 d3 b2 36 15 81 33 23 97 94 89 68 09 7c 58 d8 40 9a 46 d2 74 76 6d 6c a8 76 75 83 25 7a 36 18 a2 fd a7 f1 1a 0f 1c 64 58 16 96 df a9 4a d7 59 18 78 4b d0 af 75 ea 30 d3 65 47 4c 1e 3e af b7 80 f8 6d 16 85 7e 83 2d 85 b7 bf be a8 92 69 a2 a6 3a 21 7e b9 0b 70 4e 95 4a c3 86 11 15 59 e0 88 01 f2 2e 3a 9b b2 64 d2 60 cb 66 f8 bc 5c 54 e0 Data Ascii: b6Bexy0,jC7m,XVS4A/pp0Mor nlR{]^cqSD nd>a\e163#h\|X@Ftvmlvu%z6dXJYxKu0eGL>m~-i:!~pNJY.:d`f\T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49845	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	428	OUT	GET /uploader/d3a5e4fb2365a048a7c7c731cb9f7f72.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:53 UTC	570	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:53 GMT Content-Type: image/webp Content-Length: 48258 Connection: close x-oss-request-id: 6650748BD561043835CE39E4 ETag: "CE0DDEBCE851BFE787EA85B224E38F14-1" Last-Modified: Mon, 08 Jan 2024 08:41:18 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 442 x-oss-hash-crc64ecma: 6909701072070749798 CF-Cache-Status: HIT Age: 42666 Expires: Sat, 25 May 2024 02:56:53 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1affb8d6a79-BNA
2024-05-24 22:56:53 UTC	799	IN	Data Raw: 52 49 46 46 7a bc 00 00 57 45 42 50 56 50 38 20 6e bc 00 00 90 25 02 9d 01 2a f4 01 f4 01 3e 6d 2e 93 46 24 22 a1 a1 2b 73 1d 20 80 0d 89 63 6e fc 4a fb 1f c9 ed e2 db c3 d2 7a 1f bc 3d 8a f1 ef bc 7f c3 fe 77 d2 bb 8f fb c9 f9 e7 e0 f8 91 8b 75 98 3d 66 6e 1b ff 95 e9 97 a7 4e 9a 6f 98 ff ac 1e 40 54 b5 7c cb f8 6f f0 3f 98 3f d7 fd 17 fc bf e9 bf cb ff 7e ff 3d ff 27 fc 27 cc bf e7 f8 cb f7 cf f0 bf e9 7a 0d fc d3 f1 bf ef 3f bd fe f2 fc 7a fe ab fe b7 83 3f 27 7f cc ff 1d f9 69 f2 0b f9 27 f4 7f f3 1f dc 7f 74 ff c4 fc a3 fe 87 fd 5f f5 9d da 1b d7 fb ef fa 9f eb 3d 82 3d a1 fb 27 fc 3f ef 3f 95 bf 18 bf 95 ff 77 d1 1f dc ff dc ff cd ff 1f f0 05 fd 57 f7 23 fc 27 e4 c7 cf 1f fa 7c 28 3f 2d ff 53 f6 b3 e0 0f fa 0f f8 df f9 1f e1 bf 34 3e 62 bf f3 ff 53 Data Ascii: RIFFzWEBPVP8 n%*>m.F$"+s cnJz=wu=fnNo@T\|o??~=''z?z?'i't_=='??wW#'\|(?-S4>bS
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 62 47 43 2f c0 0b df fa 99 6d 38 ef fd 01 f2 5e 50 f8 f7 54 41 b1 f3 a4 36 f7 15 74 17 58 fb 66 bf 19 af 18 5c f3 ff 3d 6c 8c dc 46 40 d9 a1 8e 23 08 23 67 41 db ba dd 97 8d 40 2b 77 e3 4f 52 02 07 39 bb fe e8 d3 df 3e 7d aa 0f 07 4a c7 6e aa 4f 00 a2 65 0b ce 5a 89 5b fd 31 6d c4 f4 68 0f d3 c0 1d 77 cc dd 8a 0a 35 a2 b2 13 ee 76 44 34 e3 f1 59 c4 6a 73 c5 35 86 5c f6 f7 fa b7 74 36 58 5c 1b ec 56 f6 2d 56 61 5a 94 80 d6 24 2b b6 28 ac 50 87 1b 0a 72 53 26 d2 f9 ba 79 88 05 32 b9 72 f0 f3 50 85 49 96 54 2e 40 56 bb dc fd 02 1a e6 d6 b4 52 c3 1f b9 f9 c4 fb c1 56 d9 a0 fe 40 4a 0c 4a ff 88 fb 9a 2b 12 47 5e f3 ff ee 8b a5 d0 29 ae 5c 6d 53 19 a7 d1 c1 0f ec 0a ef 0c 8c 83 ff ca 2b ff d6 cc d7 d6 0e 97 51 95 99 50 24 f6 18 90 0f 7b b6 77 6b 37 db e0 07 d2 Data Ascii: bGC/m8^PTA6tXf\=lF@##gA@+wOR9>}JnOeZ[1mhw5vD4Yjs5\t6X\V-VaZ$+(PrS&y2rPIT.@VRV@JJ+G^)\mS+QP${wk7
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 72 23 53 54 eb 7f 20 37 ed 8c 08 af 72 3b 74 52 9a 0a 04 c7 0d c1 6e b6 17 39 2e e5 80 05 70 95 2f af 1c 9e 95 07 5e ce 8b 99 75 80 9a 71 25 c9 86 08 cd c3 43 bd bf 1c bf c9 ba 28 32 cc 81 ce 91 3b 99 f7 24 1e f8 40 b5 89 d1 2c c4 f2 af e2 10 5f 4e 01 a1 0c c4 e2 e7 7e 3c c1 52 3e f0 19 8a 80 0e 06 06 2b ea e1 b6 cb 63 16 a8 2e 6b 35 ff 9e 27 a9 c4 28 a6 d4 fb e0 d0 ac 69 2b 53 ad c9 a2 bc da 83 fd e3 27 5d a3 e1 b1 0f 7f 31 de 19 73 3b 53 82 a6 ab cb c3 73 c5 70 55 07 63 4a 3f 71 e2 67 ad 17 0f 8f 6e 29 bf 33 c1 a0 85 dc 9e 60 20 f5 ea d4 13 36 e0 cb d1 6c 6f b8 43 89 82 a0 27 28 a6 51 f7 bc 04 68 17 93 a4 df 2f bb 5e 67 e8 c3 97 b5 48 d6 ff 45 5d 99 ee 4f f9 f3 e3 fc 38 47 ad e8 13 d1 80 ba cf a7 bb 68 69 dc 9e a6 c1 4d 49 7c 85 77 11 e9 fb f1 a0 ac 67 Data Ascii: r#ST 7r;tRn9.p/^uq%C(2;$@,_N~<R>+c.k5'(i+S']1s;SspUcJ?qgn)3` 6loC'(Qh/^gHE]O8GhiMI\|wg
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: e4 64 6a 3d 52 46 75 73 df 0c 5d 2b ec 64 84 a7 61 c2 f4 7b d1 86 90 44 4f 30 81 46 fd 3f 8b f0 56 ba 49 ff b0 b5 2b 23 47 6f aa 61 bd c8 b1 42 e8 f2 62 63 48 b8 1d e4 28 3d c5 5b 8e 41 a3 cd 5c c1 0a 4d e1 fd 63 ab d9 74 1e 12 fd 4b e2 6f 44 a8 f0 06 a1 0d f3 0b 10 7d 9c d7 4e 89 41 1c 26 cb f2 cb 8a 9c 9e f0 bb 76 dd 87 bc 16 58 7c 9b 80 a3 07 9b 65 5e 97 4f ea bc 01 0a 0e 95 dd e1 ce 6b 99 92 69 16 8a 40 e5 3d 81 8c e9 9f 77 06 7a ab 35 03 30 a7 b2 85 1f ff 7d 3f be 9c fb ee d1 96 3d 1c e0 85 31 75 27 5a e9 50 69 4e 21 2a 83 18 60 02 9e 3a 6e dc 52 ff fa 70 16 fc fd b8 d4 25 03 c0 95 f3 d4 33 60 11 61 bb 46 06 66 b6 41 15 bf 85 79 66 35 1b f0 ef 19 d8 9d 28 12 00 b1 90 df ef f3 4c 68 fd 7e 7d ff e9 03 56 21 b6 60 09 38 09 85 e7 56 95 90 0e 8e b3 41 58 Data Ascii: dj=RFus]+da{DO0F?VI+#GoaBbcH(=[A\MctKoD}NA&vX\|e^Oki@=wz50}?=1u'ZPiN!*`:nRp%3`aFfAyf5(Lh~}V!`8VAX
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: d7 5e 75 66 16 89 3c cd ce 00 20 40 70 bd 12 16 53 6b 25 e3 ae db 83 c5 b6 f3 e9 77 23 22 e0 64 b4 e5 ff dd 57 a2 1b 85 b6 35 98 6f f2 12 d5 04 d4 b6 3a d9 de 38 d7 9b 0f 5f bf 42 52 41 d3 ac b1 89 8d 05 b6 ba ea 26 4f 05 2a 35 db c8 d0 45 2d 01 98 f3 09 f5 01 b2 ac 1f a0 5b 18 c9 53 ef 89 5c 3a a6 c0 4f 13 f6 21 48 c7 82 64 59 cc 5e 64 01 b8 21 46 35 97 78 3e b3 5f 1c 14 1f 43 9d f4 a6 1a d0 27 5c 59 81 a5 ca 36 fe c3 c3 38 6d 48 83 54 91 4e e1 13 54 fd 20 ed 8f b8 dc c9 ff 02 8f ba a0 5f 2e 46 60 5b 89 89 ee 0d b5 f9 24 1a d7 0e a5 78 d3 56 6f ce e9 66 83 82 c3 dc c5 74 ce 8e ad 37 31 53 f4 98 29 37 39 53 f4 11 a5 10 03 ff 4f ad 18 b5 80 37 b8 2d 8c 44 08 85 13 a8 a6 7e 3b 54 78 77 e5 cc 00 16 56 70 68 fc e7 46 bd 36 72 c0 86 e9 69 49 d1 1f 51 69 06 1c Data Ascii: ^uf< @pSk%w#"dW5o:8_BRA&O*5E-[S\:O!HdY^d!F5x>_C'\Y68mHTNT _.F`[$xVoft71S)79SO7-D~;TxwVphF6riIQi
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 41 1c 30 8d bc 88 df 3a 02 7e 81 23 41 02 55 9a 61 35 bc ae a1 de 15 79 97 37 b4 04 5b f7 dd 68 1d 77 da be 7f 91 7e f1 c4 25 3a b9 d7 7c d1 7a 7c 9e 07 e3 4a ac 8a 8e af 4f 02 77 76 2e e5 6e a9 4b 34 ad a7 36 ac 02 e3 7d 1d fe 6e 0c 42 10 07 53 61 42 6b 0f 0d 5b 7e ee 58 db 72 0a d9 80 68 0b 4c 26 84 e7 2e 55 41 fb e8 fc f9 c1 67 78 8f 52 87 e2 5e e5 17 7f a3 56 67 98 19 bf 1e 14 8a aa fb c4 bc eb 78 54 40 03 de 31 8c fa 59 75 ec 93 a3 8e e0 d3 1a b3 88 29 4a 59 7a 96 45 cb a3 c7 1f fb c1 48 64 e5 0f b4 66 4d 8d e4 e8 5a ab 75 48 b5 73 5b 15 fe ad a7 36 24 79 7f c0 f4 d4 54 3d a7 d9 f3 de 53 1d 3b e3 8b 49 17 ad 2b d2 e6 40 26 f1 81 36 7e 6f e5 40 45 c7 e8 43 22 dc 09 0d d6 05 83 6c 43 dd 97 a5 fb 80 4c fb bc f1 1d 1e be 71 8b b7 82 cf 8f 54 91 48 22 39 Data Ascii: A0:~#AUa5y7[hw~%:\|z\|JOwv.nK46}nBSaBk[~XrhL&.UAgxR^VgxT@1Yu)JYzEHdfMZuHs[6$yT=S;I+@&6~o@EC"lCLqTH"9
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 30 00 0d af 3b ec d3 36 4d 9f 66 f6 51 81 69 86 b2 52 12 1b 96 6e 7d a6 d2 c9 cf 20 cc 06 34 55 b1 de 5a 9a 7a a7 19 2a 6c 43 09 dd 27 7e b1 fc 87 f1 ed ff a6 33 cb be ca ad 19 8f 14 d9 cc 4b 73 63 2d ae a1 86 d6 e5 ff b6 cc 8f 78 92 50 f1 43 e3 ce cb b8 c1 31 a8 ff fa 52 f4 45 41 1e 95 c8 2d 73 ea a2 22 62 bb c2 76 1e c0 6f e6 4c 27 e3 de db d4 9b 63 60 35 5b b0 7f fa 1a f7 c2 2e 5e 68 5e 98 92 ed bc 38 ea 81 c1 91 56 42 21 0c 53 1a ca d0 57 32 9b 99 76 d6 72 84 55 04 71 b2 63 dd ae 43 a2 0c b0 9f 18 70 33 99 0c 85 34 d8 a0 29 a5 bd 15 48 8c 7d 65 99 6b af e4 cf 98 a6 6c 0d aa 26 c1 8b 91 16 26 cc b4 b6 30 bb a9 17 a9 20 75 9e fb 68 51 68 58 3e 89 1d f2 6f a1 ae 4c 7a ad 90 d5 9e b6 f7 dc 10 be c9 49 b2 85 f9 35 ae 10 53 41 b2 18 fa 08 66 31 7c 6c ae 54 Data Ascii: 0;6MfQiRn} 4UZz*lC'~3Ksc-xPC1REA-s"bvoL'c`5[.^h^8VB!SW2vrUqcCp34)H}ekl&&0 uhQhX>oLzI5SAf1\|lT
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 4d 2b bf 08 fb de 1b 99 37 81 e3 99 95 f6 5f c5 a0 1d ef bc 92 1e 3a 1e 5a e3 97 dc c1 a3 cb 44 8f 20 5d 9a c9 5d ac 57 41 80 b0 5c 88 66 08 3c 26 3b 40 48 a3 88 e8 6e ca 85 92 c8 23 78 01 98 4b 0f 29 35 4b ab fb a0 8a 3c 1c 86 4a 61 48 63 b8 fd f0 34 7d 4f bc 02 8a f0 ae 2c 7e 3e 49 00 87 28 33 d0 e8 8a 0a 74 4b 4c 23 bb 75 24 f5 35 cf c1 cd 4d 84 6b b9 31 8b a3 84 21 bf 0b f7 ec 4c cf f7 48 f1 51 0f 94 43 1c f0 09 a6 dc 9c 18 ed 95 5a e7 03 62 b2 90 87 26 ed f1 20 79 3d dd 9a a6 f8 0a a6 86 8b b0 f0 f5 bf 89 fa 4a 35 eb c6 db 92 81 b4 79 e6 a9 7a 64 ce ab 86 db 8e 0f 5e c6 28 09 c9 75 d7 cb 41 49 33 cc e5 dc 80 54 02 11 db 9a af 0b 36 55 73 e4 41 27 21 4b 09 cd 48 ce 1d b0 14 63 d4 a5 bb 40 49 33 ae f1 fb 32 d4 43 96 86 a0 ac e6 a0 8a 90 a2 c8 e4 2f c0 Data Ascii: M+7_:ZD ]]WA\f<&;@Hn#xK)5K<JaHc4}O,~>I(3tKL#u$5Mk1!LHQCZb& y=J5yzd^(uAI3T6UsA'!KHc@I32C/
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: e3 a0 10 c0 d7 0e 7f 16 10 93 36 ae 1d 86 e1 f8 0c ef c1 d3 16 ec bf cd 80 d7 fd 4a 59 81 28 eb ef 91 b6 82 9a 35 f3 25 6b 49 38 b3 b0 ce 63 92 46 fb 0e 1f a2 c4 6f 02 96 ff 16 31 68 a7 27 d9 1b 77 62 d2 e3 a3 8a e2 83 2b 57 61 96 98 80 0a 2d 8e 25 9f 7d 4f de 68 c2 6b 15 3d 74 8c 30 08 fa ff 45 28 45 90 09 73 c6 d3 5f 29 ac 33 96 3e 45 b8 ab 95 f1 23 c9 35 70 c0 74 ee 8e 62 c2 cb 03 77 43 f4 18 29 c1 60 c5 a4 4c 0c 55 2f 4a 69 95 4a 77 6c 00 02 8a ab 64 61 22 53 b1 8a 23 8c c0 05 8a 13 b7 e7 b9 6f d2 06 68 1a 6c 46 c5 f6 f1 e8 e6 fe 71 39 1e a7 e8 29 2f 85 e9 c5 f9 6c d5 ff aa 28 5f 03 4b a2 a9 bd 29 21 d4 88 a8 f9 02 ce 43 d0 b8 79 0b 70 b9 6b 2e b0 96 b7 e4 83 85 08 87 95 db f2 7d 3b ae ea 43 16 67 38 60 bb ae 7f 1a 43 82 b0 70 df 1e d8 58 22 e8 c5 49 Data Ascii: 6JY(5%kI8cFo1h'wb+Wa-%}Ohk=t0E(Es_)3>E#5ptbwC)`LU/JiJwlda"S#ohlFq9)/l(_K)!Cypk.};Cg8`CpX"I
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 4b ac db 1c ee dd 8e 2f 07 ef 76 29 3b a4 a5 67 89 ec cf f7 94 b7 61 6e 44 1e 25 d4 0e e3 d0 64 a2 8e 49 6b 6a 2c 9c 54 20 09 e9 1c b3 70 2d 04 ad 14 db d9 bd a2 19 a5 ce 19 b2 b0 a7 65 66 27 ac ea 20 41 b5 32 1a 9f a2 0d 5b ea b7 da ff 75 f4 ce b2 03 6b 71 6d ef de 94 ea 19 6d bb b2 6d c1 e6 a6 8a 6e 53 01 64 20 09 a5 78 04 0e 13 80 c7 07 93 c5 99 e5 6f 75 c8 cc 9a 4b f8 f9 0a 9e 94 0a d7 77 f3 e9 18 73 a6 fa bd a1 c1 bf d8 e8 48 64 24 f2 da f0 e9 f2 cc d8 82 ea 9f 27 28 6b 22 6c 4d 24 44 ee 3c 6c 51 55 ad fb 2c 29 34 f5 a8 f4 be 15 29 ad 07 e9 45 fa d0 8b 8d 30 f8 11 d4 fc 56 47 d0 fd 55 3b ed 07 42 2e a9 36 dc 8e 4e a1 a7 a8 38 2d 6a 7e 10 e8 67 72 dc d3 4e ff 32 a3 0e ed 99 86 3c 2b 2c 83 9d 31 2a 5e 63 4f b6 01 67 f4 94 f3 52 f7 ac 0d 8e 1a 6d 54 1e Data Ascii: K/v);ganD%dIkj,T p-ef' A2[ukqmmmnSd xouKwsHd$'(k"lM$D<lQU,)4)E0VGU;B.6N8-j~grN2<+,1*^cOgRmT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49838	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	924	OUT	POST /buyer/cart HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 94 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/categories Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
2024-05-24 22:56:53 UTC	94	OUT	Data Raw: 7b 22 63 61 72 74 22 3a 7b 22 63 61 72 74 5f 74 6f 6b 65 6e 22 3a 22 22 7d 2c 22 63 6f 75 70 6f 6e 22 3a 7b 22 63 6f 75 70 6f 6e 5f 63 6f 64 65 22 3a 22 22 7d 2c 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 22 22 2c 22 63 75 72 72 65 6e 74 5f 70 72 6f 64 75 63 74 5f 69 64 22 3a 22 22 7d Data Ascii: {"cart":{"cart_token":""},"coupon":{"coupon_code":""},"country_id":"","current_product_id":""}
2024-05-24 22:56:54 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:53 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:53 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:54 UTC	1213	IN	Data Raw: 34 62 31 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 65 78 70 72 65 73 73 22 3a 7b 22 68 61 73 5f 69 6e 73 75 72 61 6e 63 65 22 3a 22 30 22 2c 22 69 6e 73 75 72 61 6e 63 65 5f 73 65 6c 65 63 74 22 3a 22 30 22 2c 22 69 73 5f 6d 61 74 63 68 22 3a 30 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 73 65 6c 65 63 74 65 64 22 3a 30 2c 22 6c 69 73 74 22 3a 5b 5d 7d 2c 22 63 61 72 74 22 3a 7b 22 74 79 70 65 22 3a 22 22 2c 22 74 6f 6b 65 6e 22 3a 22 37 64 32 31 38 38 39 64 31 39 34 38 64 35 39 61 35 32 34 30 65 63 34 38 38 30 38 33 32 39 64 66 22 2c 22 77 65 69 67 68 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f 61 6d 6f 75 6e 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f Data Ascii: 4b1{"code":0,"msg":"success","data":{"express":{"has_insurance":"0","insurance_select":"0","is_match":0,"error_code":0,"selected":0,"list":[]},"cart":{"type":"","token":"7d21889d1948d59a5240ec48808329df","weight":"0.00","product_amount":"0.00","product_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49841	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	662	OUT	GET /uploader/30a95dee1357c4c153be7b33d4c6c34e.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:53 UTC	571	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:53 GMT Content-Type: image/webp Content-Length: 46084 Connection: close x-oss-request-id: 6650748B2CAF3630391D8BEE ETag: "29469F05BB5F22353CC4593079233F68-1" Last-Modified: Fri, 05 Jan 2024 04:00:38 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 501 x-oss-hash-crc64ecma: 17800959005902537035 CF-Cache-Status: HIT Age: 42666 Expires: Sat, 25 May 2024 02:56:53 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1affed7f7f8-BNA
2024-05-24 22:56:53 UTC	798	IN	Data Raw: 52 49 46 46 fc b3 00 00 57 45 42 50 56 50 38 20 f0 b3 00 00 90 16 04 9d 01 2a 78 05 e8 03 3e 6d 34 97 49 24 22 a2 24 21 31 69 30 80 0d 89 69 6e 96 ad 59 bf 63 c4 9b ea 7f f8 d3 5f 85 52 85 ed 9c 8e f5 1e a6 67 9f 86 3d b9 aa 78 c8 fd 57 d2 06 9d ed 19 9e 00 9d b4 eb 87 6b 67 d3 b6 c2 f0 92 ec e7 a1 d7 a6 b7 fa 9d ec fe 43 d4 23 cd cb 38 6f ef ba 67 f9 ab 52 ab ff 1f 2c 13 e5 fb 42 fe e6 74 99 d1 3f ff a5 2d dc 7e be 8f 5a af 8b 96 9e 3e b5 9c 3d 8c 39 50 fd 41 73 91 f3 6e f3 88 f4 64 ea a9 de a9 fd c5 f4 80 ce 30 ff df e7 87 e7 3f e0 7f ba f1 57 f3 df 70 cf 72 7f c2 7c f7 62 5f e7 3c 10 fb 4d fc 6f f0 5f bb ff 15 be f9 bc 77 fa 2b ff 1f f9 2f 60 ef c8 bf 9b 7f 94 fe e5 fb cb fe 2f e2 63 fb 3c 5f f6 ff 32 9f 6f fe e1 ff 7f fc 57 b1 4f ec 78 cb e5 0b ff 27 Data Ascii: RIFFWEBPVP8 *x>m4I$"$!1i0inYc_Rg=xWkgC#8ogR,Bt?-~Z>=9PAsnd0?Wpr\|b_<Mo_w+/`/c<_2oWOx'
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 2f 11 ff 6c e8 f0 a5 05 04 79 41 41 1e 50 50 47 94 14 11 e5 05 04 79 41 41 1e 50 50 47 94 14 11 e5 05 04 79 41 41 1e 50 50 30 49 b7 14 da c0 80 b7 6a 79 ea 9f c8 a9 0d 59 a5 00 c6 92 03 a8 cb 92 4b 06 a0 79 b3 2c 78 ff 55 e1 51 38 0c 6f e2 68 a7 53 27 2b 19 13 6a e3 ac da b8 eb 36 ae 3a cd ab 8e b3 6a e3 ac da b8 eb 36 ae 3a cd ab 8e b3 6a e3 ac da b8 eb 36 ae 03 97 9d cc 90 f8 dd 4e ce 6e 28 91 c6 2d 47 7e fd 68 c1 3f 53 02 78 30 78 66 66 01 e9 b4 d1 61 e8 d1 e0 49 ed cc a2 53 5f 59 8e fe 0d c1 12 7f 95 7a 3e dc 4c 0e 02 b9 7d 90 77 3c b3 d6 ae 94 8a 99 32 b8 eb 36 ae 3a cd ab 8e b3 6a e3 ac da b8 eb 36 ae 3a cd aa 28 d8 14 78 73 f7 79 cf d0 bf 87 c4 d2 ae 3a cd ab 8e b3 6a df e0 53 52 65 27 da cf ea d8 8b 51 e8 f1 30 dc 1c 69 f5 e7 4b 12 fe 04 9b a2 f2 Data Ascii: /lyAAPPGyAAPPGyAAPP0IjyYKy,xUQ8ohS'+j6:j6:j6Nn(-G~h?Sx0xffaIS_Yz>L}w<26:j6:(xsy:jSRe'Q0iK
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 1f 85 39 9d eb ed 0b e3 e1 e8 78 8a 17 dc 22 1b a4 eb 9f fb 38 c5 86 76 42 b9 87 2c 74 d8 c4 44 e0 3e b4 35 a3 d8 74 58 6e a3 bf 9b 56 61 db b5 39 a6 51 f7 e8 d5 1c 3a 20 ba 38 4c 7d cc ad e9 05 30 50 47 94 14 11 e5 05 04 79 41 41 1e 4f a0 50 eb ff 10 0f 0f cb f9 bb 38 4a 35 ca 4d db c9 a8 f8 af b5 9f d5 59 e4 ec 1c 75 ac 4e 65 a3 59 ad b6 bd f7 4e 14 9a 84 76 ad 26 ee be ef 29 4e 22 93 fb fe 53 ec e2 a7 c5 cf 40 47 9b 52 b5 20 51 cd b8 95 60 22 9d bf 65 cb f8 1b 94 ff b9 e3 f8 a8 02 a1 13 46 7e 42 1c a8 24 f7 3a 8a 73 53 d1 5d 0f 66 dc f3 26 e5 bb f9 62 87 b3 25 68 17 d2 aa 61 ee 64 4d b8 02 6d 20 13 0a ee 6e d0 d3 61 ec 8b 75 cf 46 a8 69 58 95 a0 54 8a 45 36 77 47 56 ab 8e b3 6a e3 ac da b8 eb 36 ae 36 9f f0 33 a3 85 02 aa 5c 68 05 59 1c ec d8 32 32 95 Data Ascii: 9x"8vB,tD>5tXnVa9Q: 8L}0PGyAAOP8J5MYuNeYNv&)N"S@GR Q`"eF~B$:sS]f&b%hadMm nauFiXTE6wGVj663\hY22
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: ca 84 c2 6f 4c 0e 23 5d 9f 77 b9 e3 e4 a4 dd b2 3e db 7a d1 3c 1c ce 24 1e 05 1d 05 51 fe 35 4a a2 12 5a 3f 4c 14 11 e5 05 04 79 41 41 1e 45 91 4c f6 31 5f ea cf 27 10 48 aa f2 21 74 11 67 18 38 75 c7 aa a4 1a e0 90 6a c8 45 a5 3d b1 1d cf c1 bd 43 eb b1 ad 86 33 6b 44 86 1f a0 30 74 d4 88 18 47 d1 07 0b 75 1d ad 95 6f 19 41 71 4c b1 c5 eb 2f b3 1d 4f ee 22 fa 70 b7 9f b3 dd e3 a1 4f 86 f1 49 1b 78 29 8c c2 59 59 68 7c 05 1f 6a 56 76 f8 d9 23 e3 fe d5 fd 0d 7b 49 24 77 ad e6 ac 4a 57 c0 e9 0e 0d 25 85 f9 bb 31 b3 05 18 a9 28 e0 1d bf e3 d1 f3 52 b4 5e ca 22 a1 7b a3 69 68 30 97 bd 54 a8 ac e1 6d f8 06 49 00 d5 2d cc 7a ab 9d f1 22 3d 22 f9 63 ba d3 d7 f8 c3 de 8d 2d b5 80 44 df 6b 2d f2 b2 35 58 9d 09 09 db 9f 3e b0 34 07 54 d5 52 18 02 5d f0 b6 d8 6f 72 Data Ascii: oL#]w>z<$Q5JZ?LyAAEL1_'H!tg8ujE=C3kD0tGuoAqL/O"pOIx)YYh\|jVv#{I$wJW%1(R^"{ih0TmI-z"="c-Dk-5X>4TR]or
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 81 ae 13 3e 3e 65 2f c1 39 23 86 8f b2 c4 2c 4a f7 03 40 a3 50 40 3f cb b2 a0 11 22 69 53 b3 f0 9b dd 43 d7 f6 29 34 aa a8 52 25 82 4d b6 22 35 7f 7c 2b 65 b3 85 97 63 2a e2 48 95 bf c1 ea 12 68 73 ca d9 b0 f9 17 e7 cf c1 ac 1e d2 be 48 9b b6 e4 8a 56 14 a0 42 49 50 5b b7 f1 ad 4a b3 7e f5 7d 5d 59 0b 35 7a c7 d2 15 e3 0c e6 7b 12 da ff 9c cb 30 e8 b8 5c 33 96 5f e6 a3 17 6a cf 49 3f 13 dc c6 fa c2 ad 81 1c fa c0 c1 a0 54 65 7d cd 37 84 62 d5 e3 df 75 61 dd 08 ed 1d d3 f8 21 b1 6b 9a 2a 3e 9c 4e 6b f8 60 40 dd e8 86 ad 93 66 f9 92 26 f2 89 41 da 8b 80 a5 0f bd 74 20 24 6d e6 53 f4 63 b9 b9 9c e0 d0 da 0a 47 19 fb 0c 8e bc 5a ef b3 9b 0b 5b 59 0e f4 d9 b9 2d 5d d3 85 5e e4 6c 4b bd bc ad 82 81 cb 74 b1 26 07 93 b7 ab 5c c7 2d 64 aa c1 22 0a da 48 70 50 93 Data Ascii: >>e/9#,J@P@?"iSC)4R%M"5\|+ecHhsHVBIP[J~}]Y5z{0\3_jI?Te}7bua!k>Nk`@f&At $mScGZ[Y-]^lKt&\-d"HpP
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: d7 98 c2 d1 b5 20 2e ca d0 f0 7f 0c af 39 eb 4f 1a 7f 81 53 18 08 70 88 33 91 bd 9f 63 30 aa 08 d6 13 5e f5 20 26 77 5e 14 bf 65 34 ab 8e b3 56 2e 41 77 c0 16 3c 80 52 a2 ee e1 07 2e 17 1e 94 81 5b 15 7d 16 8c c9 df 03 a0 03 98 06 b7 a6 cf e1 20 fb 3e 09 7e fd 2f c8 7b 2f 84 f8 92 13 75 05 20 9f 4d ec 58 7a de 4a ac 75 62 27 5f f1 46 90 47 52 de d2 ab 15 1e e1 7e 76 9a 8e 7d 6a ea df 25 7b 56 0f ac bb 52 9e ce 1f 1b 87 40 de 65 a7 67 1d 49 d0 f0 15 ab 2d 0c 68 ee 25 b0 0c 12 94 bf 2a bc f4 1e eb d3 47 49 5e d6 04 f3 a8 3f 0c f8 71 16 24 2d e3 ca 3f a8 bd 3f 8b ad 98 12 df 54 c2 8e 67 d3 a4 b9 80 a1 8c bc 9c c3 1f 85 ce ce 9e 17 43 92 94 21 57 9e f7 6f f6 58 f0 3d 52 69 e6 ee 2f 79 bb 02 c6 84 ec fd d4 60 bc 6a f3 04 de f6 90 6a 4a 37 e8 fd 78 9e f7 e2 53 Data Ascii: .9OSp3c0^ &w^e4V.Aw<R.[} >~/{/u MXzJub'_FGR~v}j%{VR@egI-h%*GI^?q$-??TgC!WoX=Ri/y`jjJ7xS
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 88 e5 40 d9 68 9e 7c d2 04 44 10 14 68 55 f3 94 1c 85 fc a6 de 27 b8 e9 7c ab 38 61 d1 e0 ba 0d 9f f2 fc 47 b0 4c b3 e9 69 eb 6b f0 a8 99 a6 a4 86 a2 d6 69 88 c5 53 57 4e 7e 71 cd 8d f4 6c 9c 29 54 90 52 4b 29 b0 9e f6 a2 5e 09 40 b6 f5 b9 04 2d bd bb 76 4f 24 57 0b e7 2c 4e 3e 2e 69 06 24 81 5e 22 a0 55 8d 03 7e 91 b8 cc ac 08 dd 35 d5 29 62 58 ff 82 dd 88 e4 b6 90 1f 63 51 c6 11 ab 4e 6a 36 1f 31 fa bc a3 49 98 26 8c 63 b0 a9 79 a3 bf 95 f7 f1 01 ed ad 2e 67 af ae 14 da 46 5e 3d 7e a5 da e2 8b 1d 90 5c 54 c1 5b 84 88 d5 a4 92 63 8d 2e 3b 0d ba 91 2a a2 23 f7 ab 17 3d c0 1a 66 25 f1 ba e6 1b 9f f1 80 7a 3f 3f 8d de 0c 8d 3c 14 78 91 89 81 70 6a 25 36 55 0c 44 24 ea 29 4f 10 de 8d 30 32 40 c1 8b 9d 9b 6e 83 63 8b 93 44 e8 5b bd 26 b9 9a a1 c1 b2 65 c8 8a Data Ascii: @h\|DhU'\|8aGLikiSWN~ql)TRK)^@-vO$W,N>.i$^"U~5)bXcQNj61I&cy.gF^=~\T[c.;*#=f%z??<xpj%6UD$)O02@ncD[&e
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 65 c9 45 ec e7 32 87 7f c7 c5 e2 ec 21 2f 7b 02 64 78 4f 61 db fa 76 b7 cc 36 d1 fc 5c 71 19 1e 8f b1 e4 6f e0 b1 5a 8c f8 33 17 74 92 f8 58 ec 5e b9 1a e0 32 48 8d 05 ef 70 fc db 0f 74 d6 29 ff 02 7e 99 e6 ca b3 4a 96 e4 ce bb 37 9b d8 40 d8 d5 bf 49 ae 7f ac 6b f2 62 b0 57 a1 16 81 f0 7d 6c 4d 3c a7 5e 43 07 32 37 c2 1c f3 b6 d9 fd 9e b1 4b ad 79 3a 74 42 60 7e 2e e7 ec 0f d1 06 0f c4 1c 45 e7 51 e2 00 67 97 79 26 b7 8c 3a 6c 0f 1b 84 bd 11 79 e2 14 4b e3 6f 79 1d f3 c9 8f 60 ac ae 60 3c 70 c5 3d e6 f3 83 90 b4 21 d8 d9 5d 5f 0f f3 e3 e6 da a2 7b 3c 23 54 cd cf 34 3b 98 b3 11 88 9a 97 8c e1 0b 4d e0 af e8 dd 1c e5 5f 63 92 d2 88 5f a8 e3 0e dd 87 93 ca 9e 2f 09 0f 23 2f e6 f9 e4 75 6f 89 f5 e2 ff d7 18 cf f3 c5 e4 af 48 cb fd 6f 27 e0 09 89 cd 8d 59 70 Data Ascii: eE2!/{dxOav6\qoZ3tX^2Hpt)~J7@IkbW}lM<^C27Ky:tB`~.EQgy&:lyKoy``<p=!]_{<#T4;M_c_/#/uoHo'Yp
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 60 37 62 86 c5 ca 19 4d 3c ea 94 ca 4f d8 1b 90 0f 22 d3 53 a8 05 b5 7a 46 57 45 e9 33 99 77 7b 1c 1a de 4d e6 fd e7 ea 7a 50 d6 c8 ed 7a 38 e7 d5 52 e0 6b ce bf 3c 6c 21 b2 06 a9 ad 1d ef 44 bc a5 13 60 00 00 05 c4 10 a7 97 36 38 bb 79 8b d3 fc a6 36 c3 ea ab 51 15 f2 ef 01 8f 2f 4a b9 8a 53 65 3e 4c 97 fe c8 1c fa 70 6c fc 7c ae 17 46 71 23 59 4b 30 e0 a0 79 13 61 a5 5c 5c 6d 25 4a 83 83 33 46 54 ef 22 f0 e6 31 0a 53 de 96 a3 ec b0 0e 11 c8 64 9c 29 34 8c d9 ea bd 12 55 8b 99 9d c6 b8 96 21 9c fc 86 89 e7 e3 18 5c 19 5f 6d 80 52 d4 20 28 df 34 bd 9f a1 4f cd 54 ea a5 c7 66 35 52 c2 72 f6 9e 11 46 7f c4 c7 14 9d 04 d0 35 cb fe f3 9b 8f 7f e6 7b c3 a8 76 77 03 ad d1 01 8f da 1c 42 ae 0f 8f 61 96 87 a5 39 fd 53 85 b0 f6 e7 ff 6a 0c 1a 52 37 d1 7f 2f 2a 7e Data Ascii: `7bM<O"SzFWE3w{MzPz8Rk<l!D`68y6Q/JSe>Lpl\|Fq#YK0ya\\m%J3FT"1Sd)4U!\_mR (4OTf5RrF5{vwBa9SjR7/*~
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 40 00 69 d5 c3 c8 ba 92 51 8e 4c b0 f0 9a ef 4c 41 84 ca f4 92 4e 03 57 6e 31 2d 74 b0 88 e0 a1 68 07 e3 b3 b0 ec 6d d2 33 44 1f aa d6 a3 89 71 75 fd 40 a9 15 bd d7 e3 cf 1e f6 ea da 4c 68 3b 48 4f c3 15 e6 57 31 c4 dd 49 fc c7 c4 25 a5 47 4f b4 f6 78 f9 2a 6b e4 82 8e 45 63 31 0e 1c f3 01 70 3b 8f 4e 17 b3 d0 da 9a a6 11 1c 73 77 dc 5b de a8 9b c6 e9 e2 01 e1 3f cb f1 21 bc 92 09 6b 81 3a 19 54 92 34 22 56 54 00 5b ca db 60 26 55 65 5b 59 bb d7 1b 93 7c 27 ae 95 66 26 cd d9 ab ab 2b 82 25 08 d6 fb 0a a9 12 22 18 86 f2 46 9d 29 c0 4f a0 18 e5 43 2c 85 07 c6 41 62 00 83 8a 69 04 b2 c2 fd d0 bf a0 eb 42 06 d4 b6 c1 51 e4 88 17 b8 99 a0 1a f1 25 45 c9 49 9a 99 16 c5 8a 33 79 61 79 1d 61 b5 b2 2c 41 93 8a 77 a3 ce ea 5d ae 31 4b 73 ab f3 28 34 42 03 de 85 ef Data Ascii: @iQLLANWn1-thm3Dqu@Lh;HOW1I%GOx*kEc1p;Nsw[?!k:T4"VT[`&Ue[Y\|'f&+%"F)OC,AbiBQ%EI3yaya,Aw]1Ks(4B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49844	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	477	OUT	GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ee8-2905" If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
2024-05-24 22:56:54 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:53 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-2905" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 200915 Expires: Sat, 25 May 2024 02:56:53 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1aff9a7f7dc-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49848	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	428	OUT	GET /uploader/d2df150284cdfe15bf44c5a379f89f09.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:53 UTC	570	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:53 GMT Content-Type: image/webp Content-Length: 75982 Connection: close x-oss-request-id: 6650748B76EC4B3934392FCD ETag: "ADA50B8E2D36AB43F03993A43162061B-1" Last-Modified: Wed, 10 Jan 2024 05:54:48 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 228 x-oss-hash-crc64ecma: 8530984011307495399 CF-Cache-Status: HIT Age: 42666 Expires: Sat, 25 May 2024 02:56:53 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1affd50f7f0-BNA
2024-05-24 22:56:53 UTC	799	IN	Data Raw: 52 49 46 46 c6 28 01 00 57 45 42 50 56 50 38 20 ba 28 01 00 f0 78 03 9d 01 2a 58 02 58 02 3e 6d 2e 93 47 24 22 21 aa 29 34 0d 19 40 0d 89 63 6b 6c db 2a bb a8 fd d6 c4 c6 0a 6f 27 bb a7 34 6c a8 ec c8 20 0d 91 c0 24 4f e2 36 d5 25 2d d0 6e b4 6b 9f 60 8d a2 fa 40 7f a9 e4 9f ec 6b 4b 9d cb f2 f4 b5 c8 ff 33 ce 9f ae 9d 84 98 ce f0 be 23 cb bb dd 3b d1 ff e6 f6 1f cb d9 ed 4a 91 7e f3 76 56 5e 7d f6 e7 c2 1f 32 3f 09 fe 1f fd 27 fd af f2 1f 35 9f a8 e4 7f e1 7f c1 fd b9 f5 2b ed 0f f3 bf c9 7d 6a fd e9 fe d7 ff 1f fa 1f 1d fe 59 7f ab fe 6b f2 b7 e4 3b f3 8f e9 df ed 7f c2 7e 48 7c b0 7e 3f fe 9f f5 fe 0a 3c 1f fb 3f fc 1f ee 3d 83 bd bc fb 37 fc af f0 ff e9 7f 6a fe 33 ff 1b ff 87 fb 3f 57 7f 7a ff 4b ff bb fd 1f c0 17 eb d7 fc ff 60 7f ed 78 b5 fe 2f fe Data Ascii: RIFF(WEBPVP8 (xXX>m.G$"!)4@cklo'4l $O6%-nk`@kK3#;J~vV^}2?'5+}jYk;~H\|~?<?=7j3?WzK`x/
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 3e 5c 7e 3c 1a 6c cf 70 36 b2 e9 75 13 8b 0d 31 99 eb 6c c9 35 af d7 14 23 fb 5e d7 9a 0b 1c b2 10 03 5e 8d 99 e6 12 8d 5f be 27 07 d7 34 94 c8 27 03 d9 e1 fa 72 60 3e 4a c7 47 cc 13 b3 da 14 1e 85 6b 40 0b 1e 96 56 e6 df e9 31 74 7e 98 69 54 5e 01 29 82 ff 5e de 9f f0 fd 80 94 0b b1 68 91 8c c0 9a 71 1c a4 c3 31 f9 02 a2 44 5f c7 93 d9 3a 70 9f c1 e2 60 e0 69 5e b9 13 19 50 98 41 4a a5 fd a7 be 87 24 a0 b5 0d 4f a9 03 ca d3 67 9a 36 57 bf 17 6d 6d f4 cb f4 1d e1 ee 5e c1 39 32 f4 ab 05 91 1c 41 1c 04 4e af d1 17 7b 9b c1 b0 fe aa 03 d9 70 da 50 26 05 13 4a f1 7c e9 b7 88 59 1e e7 03 a0 3d d3 04 e8 38 8b 68 c1 2b ab cb 1c 66 aa 4e 5c 8d 88 7d ff ae 3c 83 12 bf ab 69 60 ee ae 38 cd a9 4f 41 05 b1 d7 8d 67 f5 80 2c ce a4 d3 6f 79 0a 50 27 03 4e 24 62 ec cc Data Ascii: >\~<lp6u1l5#^^_'4'r`>JGk@V1t~iT^)^hq1D_:p`i^PAJ$Og6Wmm^92AN{pP&J\|Y=8h+fN\}<i`8OAg,oyP'N$b
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 1b 7b 26 60 79 32 bc f9 39 b8 74 e3 ea 30 27 02 e2 41 52 c0 a5 d8 3e e1 c8 2b 83 94 60 a3 1a 7f ab 20 b3 70 eb 1e 2f b3 59 76 a9 83 a4 fa 5a 58 3d cb cc ed d2 be ee fb f4 c6 74 70 5a 42 89 e0 40 f0 bc 1e e3 a3 65 36 9a e5 6a d9 56 f9 9d 87 0c 0a a4 ec 5e 42 33 b3 67 be ef 6a fc 55 b3 ab ca 50 48 db 11 66 6e c6 00 ac af 92 43 f3 5c 9b 59 93 62 5f e1 30 23 ab a1 a9 0b a8 4a ea 95 15 9d 29 85 76 16 83 94 5c e3 f6 75 80 76 81 af d3 ed 31 93 2f 6a cd 58 2d c7 0e a4 d2 21 da f3 f0 17 e2 a8 5a d4 20 ad f0 33 4e e4 b8 88 ea eb 15 c4 5f ec e0 82 3e 29 d4 32 79 eb 8b 08 86 4c 9f c7 9a fc e0 f0 a3 63 7a 78 ab c5 9a 04 9d c6 21 6f e8 bd 71 2e eb 71 ae 1c 31 0e c7 4e 35 b5 b5 71 0a 0b d3 44 c7 ab 92 e9 cd 28 5c 8d 2a 20 7f 7a f6 e4 c9 73 30 05 64 6a 4c 8c f4 86 4f 4e Data Ascii: {&`y29t0'AR>+` p/YvZX=tpZB@e6jV^B3gjUPHfnC\Yb_0#J)v\uv1/jX-!Z 3N_>)2yLczx!oq.q1N5qD(\* zs0djLON
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 3f 65 30 b6 88 f6 d6 42 ac e4 0e 8a 79 3b ae 5a 15 7c ac da 37 30 ed 23 aa 62 12 aa f2 3c 79 6e cd e0 7e f2 a6 e6 9f 41 03 10 c8 0f 9a 84 eb 29 cb af f7 18 b6 ef c6 c2 62 fe 1d 66 1a f9 9f 62 e0 c9 f9 f6 da c8 b9 ea b1 18 bd 3f a4 66 35 e9 e8 ea 51 84 c2 2c 7e c1 bf af c2 f1 ab 6a 49 7d ee 9e 83 63 79 ff ef 44 0f f3 d9 fd 51 e6 85 9c 8a 0d b9 9a c4 e7 b6 4f 2c 15 3b 99 fc c5 f9 20 83 f4 02 c3 b4 c2 84 87 76 ff 69 fe cc ba 77 8c b0 da 99 b2 d1 a1 a2 74 a4 c5 da dc cc 25 07 b7 b1 e4 52 db b3 3e 52 64 57 8d 47 b7 61 1f ff fa c7 d9 fe 9d 65 3d 1f 1a 12 db 87 e0 49 9f 90 f5 62 40 bb 36 5e a1 a7 f8 6a 83 c7 0d 5b 9e 91 d1 36 d8 f8 58 90 7e 94 2a 2b 31 d8 34 1f 7c 25 c3 64 ce d5 d5 8f 5b 00 6b 66 ce 0a a3 af 5e cd a4 bb 63 33 48 2e 93 8f 3a b4 83 d0 f0 40 48 8d Data Ascii: ?e0By;Z\|70#b<yn~A)bfb?f5Q,~jI}cyDQO,; viwt%R>RdWGae=Ib@6^j[6X~*+14\|%d[kf^c3H.:@H
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: d7 a4 15 c5 2b 72 3c d1 25 cf 8b 85 e8 be 93 47 9a c6 64 53 26 39 0a 00 b6 38 97 ef e1 81 8d 7e 11 e8 b4 30 7e 5f 37 e5 6d 41 fb fd 98 19 cf c6 d3 f1 40 d8 12 b6 3d 5f 47 08 59 43 69 e3 da d5 67 be d6 55 9b fd f0 91 d4 98 9e 25 9b 11 0e da 5a bd 61 f7 6b 83 3e 7d bb 9b e8 69 4f 25 4b 30 4f a5 db 77 31 77 4e 4f 3c 88 a1 9d 12 08 cd e4 26 a1 25 b9 31 ea 3a 6a 3b cf 18 7f 31 6b 2b 91 7f 9f 11 42 71 9a ff ff 82 6f 5b ed 3b f1 93 1e bb c8 cc 09 d9 b7 39 0b e3 e6 a1 d2 d8 2c 8f 1f af a4 87 85 84 dc 50 3f 94 8b 4d d3 23 e2 34 78 7e f7 2b 02 99 9a ab 37 9e 96 d3 fd 2c 9b 2a c7 53 6a 95 26 90 ee ce 3c 90 ae 0b 17 bd 13 bf 32 06 1f b8 b8 2a 3e e4 35 23 16 2b 56 4c f8 76 69 db 47 d7 35 70 63 31 f4 48 dc 90 4e a6 62 d3 9b 80 8c a5 e6 c8 8c 06 36 ec a0 d9 bf 0c 35 71 Data Ascii: +r<%GdS&98~0~_7mA@=_GYCigU%Zak>}iO%K0Ow1wNO<&%1:j;1k+Bqo[;9,P?M#4x~+7,Sj&<2>5#+VLviG5pc1HNb65q
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 1b e3 2e 17 cf f4 2b cd 32 3e a6 9f dd a7 66 31 6d cc e2 40 b9 5e 90 f9 dd d8 6c b8 38 fa d4 40 7a 7e 13 5d 8e 44 2d 79 a4 63 ba 56 fa fa 80 d9 66 5d f0 ea 27 8f cb 86 15 10 10 e5 70 d0 7a ca c4 12 8d 8c 39 80 e4 60 bd 45 89 74 27 56 99 b6 e1 aa bd 18 75 53 cf ed 97 7e fa 3e 7d c7 03 82 df 2a 77 d6 e9 91 2e 06 51 3d 24 d1 5d 9c 86 3b c9 bf 26 ce 90 de 47 e7 3d 89 51 f4 e9 92 14 b8 50 b1 3f 92 d2 93 75 d1 94 08 60 00 ff a1 58 5f d4 46 d8 7f 7a 97 69 b2 95 b5 17 5e 8d c3 31 16 df 21 24 fd ca 75 35 de 77 b3 77 aa a8 12 53 10 f5 32 6c 2d 62 a0 91 1c 18 90 21 8f 90 19 26 32 2d 59 7e 5a 5a 10 8a 95 fb 46 d5 43 90 dc 76 23 ee 73 c8 60 1b c6 43 65 6b 12 0f cf c7 e9 48 da 78 1b 97 f2 bb 44 8e b4 8e a9 8a 95 6e 5d 0e bc 79 82 6a 35 c2 37 36 89 c6 89 0b 92 a1 a4 0e Data Ascii: .+2>f1m@^l8@z~]D-ycVf]'pz9`Et'VuS~>}*w.Q=$];&G=QP?u`X_Fzi^1!$u5wwS2l-b!&2-Y~ZZFCv#s`CekHxDn]yj576
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: f2 39 5b b5 24 83 0b b6 a0 cb 13 b1 a5 24 f0 5f 4e 2a c6 02 4c bd aa 82 86 02 59 ea 59 c5 e0 4c ee ef 4d 3b 5c 1f df cc 69 bb fd 83 be 4f 4b 49 fc 70 97 dd 37 a0 72 48 e7 82 f1 0f 82 71 ce 96 e9 ab a9 f4 9a 5c 99 4f 40 56 86 84 c0 ef 4b 36 17 5f d8 da 82 f9 04 ae 42 45 c4 16 e3 32 3f 52 f3 a8 f8 d2 5f a3 6b f2 43 25 e2 e3 11 a6 c9 1c f0 f7 2a bc af 53 12 7a 0e 6c 1f b8 05 f0 8a 0c 25 e1 66 56 38 2f 24 00 89 56 8e 40 6f e7 72 d9 50 a6 1f 8f 04 b6 91 64 44 b5 20 d8 f3 de 67 f1 0c de 3a 93 43 e5 7c 3d d6 98 93 06 40 e4 4f e7 dc 5f cb 71 ca e8 5e f7 32 bf e7 2e 5e d4 ce 90 97 bd cf 0e b2 0f dc d6 df 1d 9a 44 4a 03 4a 29 8e 9b 2a ca 1b d1 cb 31 a2 b5 68 a2 e8 76 60 28 d2 79 4b a2 3c 2c 3a 5e 73 c0 ca 91 41 ec 47 76 b2 27 c7 0c 1a f2 f3 ed 79 c2 bc 12 9d 5d c0 Data Ascii: 9[$$_NLYYLM;\iOKIp7rHq\O@VK6_BE2?R_kC%Szl%fV8/$V@orPdD g:C\|=@O_q^2.^DJJ)*1hv`(yK<,:^sAGv'y]
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 27 e4 f5 ac c4 be 53 6f ce 0f 0b c9 a6 0c 35 c8 d9 94 5f 96 17 57 f2 6c 73 ea 08 74 5f cb ad 6a 4c af f7 ea 3c fa db 30 90 de 47 e2 06 c3 ee a9 af 08 83 b1 b5 97 d1 b9 4b 21 06 35 b7 97 19 6f fe 0f ca 90 7a 18 7b a5 46 49 fd 48 e4 24 cf 0a 99 20 0e 37 31 6f 8f d5 6f a8 80 d0 56 54 32 36 3f f9 df b9 57 b3 f3 06 05 38 60 c5 c3 74 5a 18 f1 0f 7d 9a aa 36 71 cc 33 6f 5e 50 1c fb b1 7d a7 f3 5f 93 3d 3e 37 b2 5c ce 0b a9 d6 cf 93 80 dd ee 6a ce de a1 e6 02 d6 fe 7a cd 0d 71 c0 88 24 70 11 f1 d8 fe 15 cd d3 2f c3 ca 91 e6 7b de 46 31 24 45 17 6c 9b f0 41 7e 6a 06 d2 a6 10 fe f1 4b c1 ef 9b d4 9f de ef 64 5e 61 d8 72 1e 5b e8 0c cb d7 dc 9b 31 60 50 89 ae c8 7e b4 64 a8 4e 6c d9 33 11 a2 0d 9f 2e 9c 30 e5 a2 fe bc ff fc ef 84 f6 d1 d5 6f b6 3b 79 b3 97 54 03 65 Data Ascii: 'So5_Wlst_jL<0GK!5oz{FIH$ 71ooVT26?W8`tZ}6q3o^P}_=>7\jzq$p/{F1$ElA~jKd^ar[1`P~dNl3.0o;yTe
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 62 00 23 8a ec 59 00 56 b4 49 70 47 d3 d1 c9 bb f1 44 de 7c 59 be 52 e5 b8 f1 86 5d 88 92 2c 72 d6 a7 3a 58 0d 04 8c 40 7c 33 f9 a2 96 eb 16 83 29 d2 49 96 c5 73 7e 87 a5 5d 28 e5 9b fd 5e 18 cc b5 66 5a 61 9e c8 46 0e 26 39 d5 80 9d d1 e2 f8 03 6f 42 00 37 2e 62 8b ea 92 ee 70 28 35 2c 26 f0 53 7e 5e c4 b7 59 e4 2a e4 6c 0a 27 c1 90 bd 60 db 20 eb 95 a1 ad b5 d7 7b 5c 0a 9a 84 ee e6 d7 b2 96 98 cb d9 29 2d 52 1d 3e 62 9f 62 ca 02 58 02 82 c1 0c bf 38 b3 8b 6a 17 50 d9 c1 e7 87 d3 e7 41 36 32 03 48 86 f5 8d 90 33 48 2f 4e 7d c1 d1 03 51 4f da 39 38 3c 2e 7d 47 3e d7 48 e8 fb 23 13 a8 f8 a7 84 5f a2 45 76 87 49 64 2a fa 5e c3 aa b1 da 37 a4 fe 2a 7f bb 4a 3f 27 01 51 cb 1c 54 53 97 f9 76 9d 62 92 96 17 1b e0 fd e3 e5 91 99 bd 3f 24 74 87 ac 6c 90 f2 50 17 Data Ascii: b#YVIpGD\|YR],r:X@\|3)Is~](^fZaF&9oB7.bp(5,&S~^Yl'` {\)-R>bbX8jPA62H3H/N}QO98<.}G>H#_EvId^7*J?'QTSvb?$tlP
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 1d 64 cd 7f 1e 8b 5b 58 43 f0 80 40 04 20 eb 7c 6a e6 31 f2 63 29 19 85 fd dc f0 ee 80 69 2c 5c 8f d5 8a 8b 27 45 12 76 cd eb f1 0a 5c ed 64 15 58 7c 07 78 91 74 4b 11 b8 de 00 69 69 34 1a b1 f9 14 04 4d 1a 92 83 de c2 fb a9 73 a6 08 11 77 9c 78 53 96 97 20 35 7a e9 36 e4 ce 34 6f ee a7 84 2a ae 5c 74 50 42 6b 44 22 1a 92 6e df d6 1c 96 25 ec ef 09 0c ca 6e 2e 59 c6 b3 80 86 ff 0a 91 0c 0b fe e6 80 9a c5 af f5 3e 2f 7b 04 13 ef fc 34 e9 32 7a 6e ca 95 84 b0 1f d8 58 1e f8 72 57 8a 86 cc f2 2b 60 e9 5f 98 75 6b a7 b9 6f 71 c8 d5 1d 56 67 ad 1c 2d 56 87 68 ef 7a 37 c5 28 7b 30 85 2d 4b e3 f7 47 01 72 54 0d 25 c3 14 5f 11 9b 6e 27 90 bf f6 b4 42 1a 3a 49 3b 6f 36 b2 4c 85 ba 4f 2b d6 45 e4 db e1 4b ea 12 41 22 00 74 92 43 a7 3f 34 a7 41 ed 6d 95 4f 4f 14 cc Data Ascii: d[XC@ \|j1c)i,\'Ev\dX\|xtKii4MswxS 5z64o*\tPBkD"n%n.Y>/{42znXrW+`_ukoqVg-Vhz7({0-KGrT%_n'B:I;o6LO+EKA"tC?4AmOO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49842	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	428	OUT	GET /uploader/a30aeca4280b3df9337a23d751cfbb46.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:53 UTC	571	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:53 GMT Content-Type: image/webp Content-Length: 28450 Connection: close x-oss-request-id: 6650748BE901193636B681E2 ETag: "51285F66CA1A5BFA5DCD816410E7B8F4-1" Last-Modified: Wed, 10 Jan 2024 08:28:40 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 279 x-oss-hash-crc64ecma: 10624972221113542133 CF-Cache-Status: HIT Age: 42666 Expires: Sat, 25 May 2024 02:56:53 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1affed6f7f8-BNA
2024-05-24 22:56:53 UTC	798	IN	Data Raw: 52 49 46 46 1a 6f 00 00 57 45 42 50 56 50 38 20 0e 6f 00 00 f0 09 02 9d 01 2a d0 02 d0 02 3e 6d 34 97 48 a4 22 af 28 22 71 5a 19 e0 0d 89 69 4b 78 ba 3e d3 7b 7b 0a c2 ec 7e 10 a7 f6 f3 3d 9b b6 a1 a7 0c a1 a2 db af da 88 fc 5c fb 47 43 e4 07 c5 e9 82 5b 98 79 61 f9 d7 f4 3f f1 3c 29 fc fb f0 1f 3b 5c 8f e2 53 6e 4e cc ff 59 ff 23 d0 2f 19 bb 3e 40 2f eb 3e 56 d3 65 f9 ff 50 4f db 6f 51 fc 12 28 15 e3 b7 a4 57 da 3f f1 7b 05 ff 3e ea a8 36 3c a3 c5 e7 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 77 Data Ascii: RIFFoWEBPVP8 o*>m4H"("qZiKx>{{~=\GC[ya?<);\SnNY#/>@/>VePOoQ(W?{>6<wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 80 2a d6 7a 8b 79 e0 86 3d 58 9b 9d 95 7d 69 3c 30 1a b5 40 44 c1 b2 c9 0e ad dd fa 6b 41 56 6e 7c d3 ed 33 71 1e 3d 0a ec dd 67 52 68 cb 69 a7 c8 af 8a a5 4e 43 c8 f0 ec 11 f0 f4 87 d8 b0 0a a1 b1 16 1d 86 41 91 70 4c d1 a0 36 60 d0 6a 67 30 64 01 16 47 9d 9b 64 dc 25 81 eb 56 36 d8 8c 28 ee 4a f5 99 99 99 99 98 ec ef 03 0a 10 1a 6e c4 53 33 5a b1 2b 93 1d 10 a9 96 39 e7 e7 00 8c 7b a9 05 f9 b2 f7 b7 0d 52 ca 37 7b 5e ef e0 c1 76 27 31 9b 6a 11 88 ab 87 3e 44 af fe 8d f4 af af 92 a3 73 fd b3 a8 55 51 c4 f2 b9 81 e9 60 0c 1f 47 2c d2 da 03 cd 49 a6 d5 f1 ba 1d b2 1b 2d 80 7e 45 c5 6d 72 10 8c 2c d0 77 16 99 fb bb bb bb bb bb bb bb 32 3a 8d 80 3a 53 68 e3 a0 9a d2 50 a1 6b 92 80 ca f4 66 59 b6 4d a5 28 9e df bf 8a 92 b7 4d eb 6c 97 52 28 8c ed 00 18 35 5e Data Ascii: *zy=X}i<0@DkAVn\|3q=gRhiNCApL6`jg0dGd%V6(JnS3Z+9{R7{^v'1j>DsUQ`G,I-~Emr,w2::ShPkfYM(MlR(5^
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 7e ee fb 0a bf e7 70 1d 11 9f 17 18 3d 68 3c e7 22 77 16 9f c8 12 ba b9 16 9a 94 a9 16 80 b6 b2 42 0b ec 2f 49 db 0e 9c 40 53 90 e3 7f ab f1 c5 b5 ed 8e 88 48 da ce f8 32 c7 4c 6d 2e b6 b7 01 10 b6 da d2 0d 5d 3c 8c 11 aa 4d 42 8c c8 cc ff 3f d5 33 1f 25 7a 84 1e dd 1b 5d 1b db 4c 6e 81 65 11 a4 b2 4c a4 06 19 a9 a2 71 fc af 22 96 70 13 b4 cf b2 71 45 c2 4e bb f3 fd bd 50 33 d3 0f 50 90 a4 b7 cd f9 a9 15 20 1f 02 d0 84 5d 3f c9 d9 22 bd f6 de 7e 56 65 38 95 64 06 14 5a bd 1c 0e bb 0e 23 f7 75 07 cc 49 04 9d 97 8f 7a c3 88 61 cd e0 64 d7 60 cf 8d 7b 10 57 f5 d2 c8 62 1a 43 9d bd 04 f3 a2 65 dc 4d 4c 4c a2 14 eb 31 d6 c8 9e 29 94 e0 54 15 83 ce b4 df f8 86 0e 99 eb 86 64 44 dd 94 49 de ba e1 51 b5 ca 63 19 87 cd 84 d5 85 d3 62 a7 50 4c a6 01 a4 a4 46 19 da Data Ascii: ~p=h<"wB/I@SH2Lm.]<MB?3%z]LneLq"pqENP3P ]?"~Ve8dZ#uIzad`{WbCeMLL1)TdDIQcbPLF
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 55 cb e1 15 34 52 4e 83 0e 5d c6 9d 70 17 94 09 9f c6 be 89 74 6d af 62 a5 43 21 5f 40 aa c6 17 22 54 c1 d0 cc 8b 07 6e c2 0b 36 e0 4f e2 fb f9 9e 70 d4 c3 c3 fe 2d fa 2b 29 c9 9b 26 6d 3f f7 09 64 80 30 77 a4 3f 77 8c 36 64 91 c7 46 32 e1 f8 d3 06 03 94 54 0e 51 58 e8 47 57 68 50 d1 50 d4 98 cd 1c 76 e6 1b 05 27 27 75 a9 c9 9b 9f 28 d5 03 e3 d9 3b f6 36 16 05 7d 4f c0 84 ee 6d 4a 3a ec 8c 56 80 aa c9 a9 7e ca f6 35 17 36 b8 26 ec 1e df 28 de a1 04 9f 0c be da be 47 df 7b cc c7 c3 bb 6f 5f 50 a1 bb 78 7e bb 73 17 7e 86 4d 1f 29 ff be 81 44 93 a0 c3 fb 54 9d b4 65 b5 e2 38 4f 29 03 fe 2f f8 e6 ed c8 dd bd 00 86 67 2a 7f 2d 29 56 72 5a 85 6b 48 1a 71 be a6 7c 37 8d 2f e8 7a 5a 9b 64 43 08 83 29 1c f0 f0 70 1f dc ee 1a 14 94 5a 1e 31 00 16 e8 f1 ad f0 7c 22 Data Ascii: U4RN]ptmbC!_@"Tn6Op-+)&m?d0w?w6dF2TQXGWhPPv''u(;6}OmJ:V~56&(G{o_Px~s~M)DTe8O)/g*-)VrZkHq\|7/zZdC)pZ1\|"
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: fa 8a 4f c7 81 80 02 36 86 b7 78 18 69 94 af 65 72 2d 9d 82 de 1a d2 c0 f6 0a ec 8c d5 92 b3 8c 85 20 06 42 87 51 81 0d 69 c3 fc 71 e1 ee 0c 7c b9 70 ad 4e d5 1a 58 91 de 3a b0 c3 0c d1 e7 46 8c da 46 ef 90 45 e3 33 ab 2c 2c 4b 78 31 6a 96 46 0b 9a 2b 90 2e ad de d6 f6 c7 e3 50 c4 80 04 07 d6 5b fb 1f 98 b9 6b e3 60 fc 3c 54 2d f2 e0 59 7f 71 4f e3 c8 62 0f 97 d5 73 74 5e 5a fe fb 61 fe a8 3e 71 b3 c2 9e 65 30 0a 59 d8 b2 ff 3a 7f 05 c9 c1 2c b0 bf 91 f2 bb 6e c3 b5 45 a9 16 10 7b 64 59 60 63 c1 45 bf 24 35 a8 8c ad 8f 2a 51 34 e4 21 64 3a 7b 73 ab 87 23 47 4f 7f 2a c3 f1 1d 64 44 96 6d 37 d4 77 85 91 d0 43 4d 18 21 41 f3 6c 9c da b5 20 46 1c aa 32 28 9b e8 cd 08 2d 43 28 56 6c d6 f3 cf d7 e7 a3 5d 94 4f 25 fb 12 50 55 1a e8 2e 5a 8a 13 1f 8e 43 e8 8c 2b Data Ascii: O6xier- BQiq\|pNX:FFE3,,Kx1jF+.P[k`<T-YqObst^Za>qe0Y:,nE{dY`cE$5Q4!d:{s#GOdDm7wCM!Al F2(-C(Vl]O%PU.ZC+
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 4b 09 48 31 11 a0 d8 7b cd bb 8d 7b 99 8d e8 9d 7e ef e5 82 fa 63 53 ae 1c bf f0 07 5d 33 84 47 00 0a f3 f6 f9 e8 4b 19 a3 a4 1e f3 77 1f 78 6a 9e d8 2e ca 3b f5 77 08 24 2e 30 47 51 0c 89 6a 75 51 b0 79 65 22 44 e0 94 e4 e5 84 0a 1d 7d 73 38 c8 e9 b9 49 a6 4b bb ec 98 8f 85 f3 e2 ac f7 1c d4 40 74 e2 6d 2a 81 d3 c7 14 9d 00 d0 63 ce 77 60 aa 1e 33 ed 2a b4 59 78 b0 03 2c c5 ca 2b a2 66 4b 5f 52 41 74 96 fd 1b f7 91 07 83 58 ac 1b 26 ed 54 c1 fc 90 ef 1d f5 be ce ed 00 05 60 55 2f e7 c6 9e 1d 9f ea 82 81 38 ea a4 7f 64 a8 47 e2 40 00 a7 9f 58 06 ee c1 cd 36 e3 e5 da cb a6 aa 6f ad e7 76 a1 53 cc af 1e 58 68 82 21 b7 2a 25 bb b5 ff c5 22 23 8d 1f c4 ff d1 4d a5 e5 73 d1 5e db 9b 3d 3a bf 5a e2 2e ae 2e bf 07 7b 42 72 ca 31 79 01 2e b6 5e d3 90 40 cc ba 6d Data Ascii: KH1{{~cS]3GKwxj.;w$.0GQjuQye"D}s8IK@tmcw`3Yx,+fK_RAtX&T`U/8dG@X6ovSXh!*%"#Ms^=:Z..{Br1y.^@m
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 51 db 45 60 72 b1 47 09 1c 81 cf e3 b9 7e 55 cb 7f 08 89 50 0b e1 42 76 dc 98 e3 24 aa f0 f1 44 59 c7 9e 2d 04 00 8d fc d7 ff d3 05 14 97 cc 6e e6 21 19 cf ae 8b 68 7e 12 70 0c 86 47 9c 37 12 86 57 bf 2c 80 ea 7f 1f 14 3c f4 3a 9f 6e 23 1f 79 3b f9 22 12 59 53 6c ac 75 91 d6 a4 d1 8c 89 a0 e2 99 b4 b9 40 bc 80 19 5a 84 39 e4 eb f7 9e 7e ac a2 40 10 7a 5b 85 ed 9c dd df 3f 2a 53 b7 3f 7e 5b 1f c4 ab fa 15 40 ab 9d b9 98 39 96 cc ec 31 df 4a 86 7d 7f d6 06 fc 27 1f a9 7d 86 3d 9d f3 c6 80 83 7c cd 90 6b 19 05 f1 58 79 00 47 ac 2b e0 52 b0 29 65 d3 64 d0 33 60 b9 28 84 64 13 71 11 a4 d7 45 05 73 46 78 aa 25 d8 8e 66 2e 0c de 1b 37 aa 35 e9 b5 d1 81 0c 08 df 0f 63 60 f8 94 79 38 8c a8 c1 9a 32 9a 80 95 3d fd c5 4f 15 07 b6 97 b7 31 94 dc 54 a3 46 9d 89 b2 55 Data Ascii: QE`rG~UPBv$DY-n!h~pG7W,<:n#y;"YSlu@Z9~@z[?*S?~[@91J}'}=\|kXyG+R)ed3`(dqEsFx%f.75c`y82=O1TFU
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: d9 6c 16 c3 78 5c e6 0b 9f 73 56 23 6a 90 ed 3a 79 ab a0 5b 24 5d 1e ee 9a 2c be 3d 80 e6 7d c8 80 5c 0d f3 54 5d 47 a4 a5 8e 81 ce a3 00 b0 a5 7f 2a a1 89 36 cf 2f ae 4d d2 45 f2 0f cd 5f 5e 25 ca 88 00 66 b7 20 2d 0e 0a fb f0 bb e7 46 9b 61 0c b7 a9 30 63 d9 da 7b d9 a0 52 bb 07 fd 45 2d 14 7b 2c b9 e0 85 f3 06 cd e0 01 ef 7d cd 88 97 ce c8 e1 30 bd f3 0f 1c 02 c3 d8 0b 29 97 41 f6 18 34 5e 16 2f c2 91 2b 23 8e ab f7 3c 23 83 78 f2 27 7a 54 1f d9 c4 6e 66 51 20 13 07 96 b8 1f a4 28 29 2f 5f 0a 9e 52 9d 62 4d 39 3a f1 a5 77 a3 eb 9a 47 d2 3a 43 7c a6 69 f7 a9 54 5b 9f a8 ad f9 12 b6 43 d7 c6 d4 53 95 2f 94 06 a0 7f 31 9a 5b 9c 81 44 67 58 0a 8a 36 35 f4 58 42 18 8f 31 f6 f5 86 ff 61 1f 54 1b 8a b0 f8 c6 88 cb 5e fd eb cc f9 2a f1 e9 63 47 5d 2a 0d ec e6 Data Ascii: lx\sV#j:y[$],=}\T]G6/ME_^%f -Fa0c{RE-{,}0)A4^/+#<#x'zTnfQ ()/_RbM9:wG:C\|iT[CS/1[DgX65XB1aT^cG]*
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 26 c6 de 41 cf 62 7c 04 78 5d 20 a2 33 73 07 d7 c0 9b df d1 88 c8 03 13 35 1c 2d eb 43 e0 98 2b 19 6f 26 4d 1e 8a d8 f8 92 86 20 c6 a0 d2 4f ef 09 9e 7c d1 a3 38 b8 39 4a 1a c2 81 b2 7a 84 83 56 76 c7 65 3d 0e bd 52 b3 51 68 29 bc c3 0c e3 9e 66 f8 ee 55 8c db 98 40 92 f7 5d fd 5c 1b 32 30 a0 c8 60 da 42 24 49 78 c3 6c cc 0a ff 3d 7d 42 4a f4 cc 86 59 67 05 9b 64 db 4b f0 ca 98 81 b2 ce f6 a0 ce 7e 47 fc 7a c1 8a 6e d9 06 0a fc 28 e2 67 86 f1 1d f9 30 3f 93 2c 03 c9 a5 ea a4 ac 09 8d 9b 0b 86 ac 99 39 a3 0a 9e 43 2f 6d 92 8e 3c de 70 8b 95 64 ef 14 f7 86 a6 f9 77 50 6d 71 be 7d b5 e6 51 fa 4c 27 27 19 81 36 90 4b b2 fd bc 8f d5 6e 72 20 00 28 a8 72 71 fd 21 af 2d 74 a9 73 ee 59 dd 90 c1 ea cd 70 15 13 a8 f9 53 8c ae 1a 8c 02 ff 35 56 77 e5 bc dd 1f 35 fe Data Ascii: &Ab\|x] 3s5-C+o&M O\|89JzVve=RQh)fU@]\20`B$Ixl=}BJYgdK~Gzn(g0?,9C/m<pdwPmq}QL''6Knr (rq!-tsYpS5Vw5
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 6e 75 2e 3f eb 72 44 7b 3e 1c 91 84 aa 95 5c 4d 65 1d 65 72 ed 34 40 00 74 49 a3 96 d3 59 90 1b 2e ea 4d cb ee b5 f2 a1 ba 8e 61 fb 64 30 c7 a3 3c 1d dd 18 6f fd bc cd 56 d9 41 3a 8c ca 58 73 12 60 e1 ff 89 82 4e 52 25 b1 2c a2 58 a1 f3 81 fa 2e fd ad f7 fd 8b eb e0 3e c6 c4 8d 74 4b 11 eb dd 63 73 82 2b 81 bd ea d5 ed 02 82 c4 0c a7 3f 50 d5 a0 d6 6b 76 d5 d0 e5 d3 d4 e5 5f a0 eb 92 e2 21 38 67 b8 e8 35 e6 9a af be ef bb a1 77 69 86 85 56 d5 42 84 05 1e 8f 94 cf 67 16 1d 1d cb af 94 db 47 94 d8 e6 7c 9f 96 9c 30 94 4b 41 a1 5f 85 b9 fa 3b 11 c9 e1 f2 ab 63 93 92 75 9c 62 93 58 3f 78 55 46 08 7f e3 54 f7 78 ea f1 a2 d0 76 3f ae bb 5b 3e fb 67 fb 03 98 d0 e4 b4 c5 10 4b 61 a4 61 f7 a9 f3 47 51 aa 1a 71 57 fc bf 7e 2c 59 7d 00 b4 9d 19 14 ce 1e 7e 38 84 61 Data Ascii: nu.?rD{>\Meer4@tIY.Mad0<oVA:Xs`NR%,X.>tKcs+?Pkv_!8g5wiVBgG\|0KA_;cubX?xUFTxv?[>gKaaGQqW~,Y}~8a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49843	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	469	OUT	GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-20a8" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:56:53 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:56:53 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-20a8" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 191738 Expires: Sat, 25 May 2024 02:56:53 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1affc25f7d4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49847	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	662	OUT	GET /uploader/2ce71f6504e8177d94cc448329a848fe.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:53 UTC	569	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:53 GMT Content-Type: image/webp Content-Length: 27232 Connection: close x-oss-request-id: 6650748B9979C736344CBDFB ETag: "2B544F2C4A3F58009D24E41A79A73488-1" Last-Modified: Fri, 05 Jan 2024 03:59:27 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 267 x-oss-hash-crc64ecma: 988663062298426198 CF-Cache-Status: HIT Age: 42666 Expires: Sat, 25 May 2024 02:56:53 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1affd58f7f0-BNA
2024-05-24 22:56:53 UTC	800	IN	Data Raw: 52 49 46 46 58 6a 00 00 57 45 42 50 56 50 38 20 4c 6a 00 00 d0 72 01 9d 01 2a 8f 02 d4 01 3e 6d 34 95 48 24 23 22 21 26 75 e9 a0 80 0d 89 67 6e fa 6b 5a 01 8e ba 56 d0 41 fe fe 9f f5 af d9 e0 f3 7d 8a f4 90 78 80 62 52 fe 93 c5 f7 ea 9f 8d dc 24 1c df 13 dc 8f 9c 5f 99 fc c5 f8 96 a7 f9 3d f7 16 5a fe ff fc ef fd 6f 56 ff f4 3d 76 fe 89 ff a7 ee 0d fa ab e9 57 ff 4f b1 8f ea 9f f3 3d 52 7f 4b ff 35 fb 95 ef 47 e9 ff fb bf f9 9f 53 9f f6 fd 71 3e 8c 1e 5c 5e d4 ff ba 3e 9a f8 46 9e 69 f7 0f c1 7f cf 3e db fe 47 ad 65 d3 fe 0f fc bf 31 fe f0 27 ef fb 9f da 6f 1f ff 65 fe 8b d0 5f dc de 73 bf 9d da bf b7 ff c1 f4 0b f7 5f f0 be 7e 5f b1 e6 af ef fe a0 be 5a ff ea f0 84 fc 8f fd bf 60 7f d5 7e ae 3f ea 79 36 fd 9f fe 07 b0 ef 96 a7 ff ff 77 7f bb bf fd bd e2 Data Ascii: RIFFXjWEBPVP8 Ljr*>m4H$#"!&ugnkZVA}xbR$_=ZoV=vWO=RK5GSq>\^>Fi>Ge1'oe_s_~_Z`~?y6w
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 3e 98 e2 55 f6 ed 52 43 86 3f ff 23 f5 cf a5 cd 5d 53 76 47 07 26 09 b6 76 30 23 8e 73 a5 f6 2b b9 12 60 9e 46 85 32 c1 f5 b2 c5 6b 69 da de 5f 07 60 f7 9b 57 13 6a f3 7b bc d8 83 3d 89 ad 6b 24 76 bd fc 85 10 04 f9 9c 54 1b 62 fa 45 4a cf 52 e7 d1 1d 77 e1 4d 69 59 5f 6d 05 9f f9 b0 56 a2 da fc e4 a5 75 44 2b 42 02 50 2f 35 f2 91 e7 cd d8 b8 99 8c 72 a8 a4 8f 08 79 e3 ff d8 89 d0 50 81 14 72 3c db a8 5e e0 86 68 36 1b 42 f5 d6 b7 fb ee 50 67 90 3e bd 6c a5 f0 ba cb fe 2f 2b c9 48 48 57 c8 13 86 3b 8f b0 e0 33 be d5 ab cd ee f3 6a d9 04 d8 19 0b 28 49 c3 db 09 bd cf b3 25 a2 97 a7 21 da b3 64 e2 e1 ed d0 c5 de d6 94 b0 7e a8 23 57 0d 36 aa b8 9a f0 b0 77 c2 7f ed 63 1b 7c bd ef e7 7b 33 ce ce 64 7f 3a 31 34 ca a0 ce b1 80 9f 54 41 c3 09 8e 15 8a e3 87 e1 Data Ascii: >URC?#]SvG&v0#s+`F2ki_`Wj{=k$vTbEJRwMiY_mVuD+BP/5ryPr<^h6BPg>l/+HHW;3j(I%!d~#W6wc\|{3d:14TA
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 12 c7 b2 e7 26 3c 03 db 0d 05 18 68 0d 7a fe 3c 29 08 44 c8 18 ce 61 a4 5f 21 24 07 d6 60 27 2d c6 7c d5 e4 db 1a 5a b9 34 de 5b 4f ca 4f 5c 0e 20 32 e4 da 85 48 2d 2f d8 79 a7 ff 4c 34 a9 58 a9 3c d3 80 b3 97 e8 fd b6 a5 68 6a ef 44 0a 18 64 a1 2d d2 7f 3e 60 ff cf ae bc 73 ab fa ee e9 c7 22 6b 74 e5 2d 77 67 7a 74 0c a3 c1 a1 03 0b 7e 36 b6 d9 4c 20 b5 1b 3d c8 21 0d 32 38 3d 15 8f 63 1f 14 0e 15 fb ec d9 5b c7 85 31 cd 95 dd ed 2d 96 c8 4d 02 f8 73 62 61 5a 55 ef 12 f1 0d d7 84 6a 4c 88 b1 ad 73 4f 6c 40 b9 c8 84 53 c7 74 19 4c 0a 35 b3 89 a2 a6 39 53 7f bf 66 dd 16 da f9 b6 8f 2c 82 ec ed b2 bc 9e d3 8d 16 bd f5 65 59 6c d5 ee 21 cf 30 09 a8 1e ff 7f da 60 52 e5 64 52 61 ea e7 83 ae 66 52 fc 3d 36 28 ff ed 18 b2 40 66 41 3a 4f 10 fb 3c e9 f8 ed a3 87 Data Ascii: &<hz<)Da_!$`'-\|Z4[OO\ 2H-/yL4X<hjDd->`s"kt-wgzt~6L =!28=c[1-MsbaZUjLsOl@StL59Sf,eYl!0`RdRafR=6(@fA:O<
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: c4 c3 92 f8 aa 1d 49 01 8c 6a 2b 77 50 7d 9e b7 3c be 09 48 ff 95 02 5f 83 ae ae 00 1f 65 d2 c1 44 a9 c8 7f ec 85 e7 f5 61 0e 00 16 41 ad 80 9f d8 59 e9 97 15 28 d4 a0 96 2e 67 ec 28 a3 d1 df 99 00 00 00 75 a4 b3 b6 77 50 dd 2c 02 14 74 7a 77 fc d3 9c b2 2f ef b9 91 e9 0e 4e f7 be b6 d5 ce a6 e1 44 23 52 18 c0 59 b8 8b 0d 0d 45 0a f6 bc 07 e6 28 5e c8 ce 81 7b 14 35 37 df 51 51 73 56 a9 7f 97 fb c7 6d 3c ff 81 9e 62 6b 18 46 61 13 bc df d0 42 b3 54 a9 d9 d6 e6 f1 6f a5 5d 2f 17 8a 9c f9 fb 19 8b 24 57 51 04 bd f2 e8 80 b1 93 a9 6e 99 45 d6 90 a1 4d 57 78 7d 90 f0 08 d6 19 3e 83 cc 09 f9 a8 05 4f 3d 82 c8 21 cd fb c3 2b 9d 07 0b d8 17 3f 98 90 6e c8 fe c2 fd d8 69 0d 48 42 84 9e 36 bc a1 f7 ef 4b 39 b4 7e 66 54 26 9e 39 65 cd b1 13 f1 fd 0a 38 e3 a3 f6 18 Data Ascii: Ij+wP}<H_eDaAY(.g(uwP,tzw/ND#RYE(^{57QQsVm<bkFaBTo]/$WQnEMWx}>O=!+?niHB6K9~fT&9e8
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 4b 34 e5 85 9c 94 f8 af 76 b4 ee 62 04 dc a0 26 cc 52 52 5d 3c a1 84 b9 d0 64 10 76 12 cd 7c 4a c3 c7 67 2b 81 0b 57 47 cb 5c 21 b1 26 0e 8f a4 fd 80 74 71 1c 20 11 2a f1 9a 98 5c 84 3a c7 0f ab 42 c2 08 fc b8 07 c9 16 96 16 3c 62 aa c4 87 db 70 52 33 6d cc 79 b3 4a bd 7f 95 c0 12 02 d7 05 1d 24 34 31 45 0a 92 89 87 81 ff 76 3d 69 0a 4d b9 60 2a af 1d 7a 7d 14 a5 eb 2f 5f 72 22 6c d8 2e 79 12 ef 8a 85 a8 82 04 76 86 4e 44 8c 0f dc 77 58 03 2d 91 1c f8 75 3c 4e b0 0a 6a d5 d9 8b 3c ca 3b 27 7f 56 01 69 18 92 ee b1 0b ee a5 2b cc d6 6e 39 7d ef eb 08 90 64 c2 de a2 5b d2 c5 a7 bb 06 8c 5d 07 08 d7 12 44 91 7a 12 22 0c ef a2 1b f6 a3 a8 41 74 12 1c 33 61 cf 02 8a 70 21 e3 1d a7 02 60 64 74 fa 11 f7 91 8f 7d fb 99 87 4c 46 31 5e 68 72 36 fc ae 10 12 63 a9 c7 Data Ascii: K4vb&RR]<dv\|Jg+WG\!&tq \:B<bpR3myJ$41Ev=iM`z}/_r"l.yvNDwX-u<Nj<;'Vi+n9}d[]Dz"At3ap!`dt}LF1^hr6c
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: d1 ee e4 b0 39 3e 37 9d ff d2 0c 8d 43 b6 ff 7b 2f b4 01 38 88 49 ed 3d 28 a2 cd 24 bf 20 f6 2b 88 6a c2 29 2a 45 63 79 f0 48 32 a0 6e 36 ca 31 fa c2 d6 55 98 4e fc 57 1f 45 b0 a5 46 7f 66 a6 b3 32 73 06 90 dc 1c 47 f7 1c fc 9c a9 19 a4 f5 d7 d4 61 52 f7 49 01 77 e0 d7 2e f7 a9 9d b8 74 9b 4f 17 bd c8 04 f1 50 91 d0 99 f2 0b 4f e4 6d 61 c9 37 d7 04 6f cc e1 4c 7b b3 42 98 9a 85 88 0b fb 3f 03 d0 ca 2a a1 67 6d a3 e7 bf 35 fa e0 22 03 9c 37 e7 0f a1 da ad 38 c9 2d ab 8f 64 83 93 8a b5 68 49 56 21 c1 c4 7d 76 77 c1 72 92 1e 02 4d 1b 03 e1 ef c6 f7 f6 8f 2a 82 07 45 73 d9 8c 4f 84 88 a9 ee 60 ba fa 31 55 58 24 98 72 aa 7e 96 5e 93 6b 5a 38 84 c5 de 19 7f 62 08 df 88 69 1e 4d e1 d6 70 1d e1 bf 78 a0 da e8 8b 2a 94 59 6d 59 9c 48 f5 38 50 85 bb 2d 19 5d 4e 04 Data Ascii: 9>7C{/8I=($ +j)EcyH2n61UNWEFf2sGaRIw.tOPOma7oL{B?gm5"78-dhIV!}vwrMEsO`1UX$r~^kZ8biMpxYmYH8P-]N
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 31 06 51 ea f8 7a 05 cb b7 27 61 82 8f 93 01 2b 02 49 8d 93 65 cf c6 db 0a 30 86 52 ee 7a 24 09 db e3 d9 d9 34 31 c2 26 59 38 ca 3a c7 30 77 67 19 d9 b9 54 45 e0 0b f7 a1 87 91 f9 3d cb 71 2f 18 57 c4 c0 94 3e 84 38 3e cd f4 48 dd 83 f6 e1 72 e2 2d 32 da 9b b7 c9 74 e0 e1 9c 9d 3b 62 7e 6b 51 5e 74 74 86 03 6e 33 85 e8 ea 00 4f e5 66 aa 3a b9 4e 79 a4 55 38 45 f9 c4 cf e8 05 7b 39 8b ee f0 91 dc ec d5 3e 91 f9 58 15 3d 1b fe c3 73 37 d0 a7 65 7f 81 30 3d c9 f6 86 4d ba e8 f9 f4 8d 19 76 d9 52 20 95 b4 0f 7d b6 e3 b0 fb e0 e2 66 f7 fd 8f 71 fc cb 76 77 e3 bb 6d a2 af 0a 6d 9d 96 e1 4b 29 26 fc 07 12 fb 4d e8 da 1c a7 00 db 1d 18 49 6e 90 c6 72 3f 99 b4 e3 71 57 58 a5 87 ce 9f f1 98 94 5d 8d cf 0b 89 79 4d c3 44 62 d1 62 67 df b5 05 3d 03 ad 53 42 b2 81 2b Data Ascii: 1Qz'a+Ie0Rz$41&Y8:0wgTE=q/W>8>Hr-2t;b~kQ^ttn3Of:NyU8E{9>X=s7e0=MvR }fqvwmmK)&MInr?qWX]yMDbbg=SB+
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: a3 31 c1 27 04 b3 d3 c8 ad 4b b6 0c f7 b8 5c 2f a1 b2 63 b1 10 cd e0 83 fe a0 a0 6e 75 3f b3 61 49 5b 5b 25 91 ce 2a 10 95 97 65 28 8c 46 4e 70 13 17 d3 6a a6 6f 36 61 49 8e 1f b3 26 ac 9d 9f e0 b2 0c a2 5f ef f6 a0 59 35 0c 61 33 54 98 bb ff b4 ac 40 43 a5 27 20 ba f2 87 65 e9 5c 15 61 b7 83 b7 b9 2b b3 53 53 21 68 72 b7 f3 87 07 5f ae d9 b6 e3 f3 39 3c bb 5d 52 13 1c 84 2f 50 15 ae 02 27 42 ed 56 87 2b 64 6c 57 b8 3b 8d 6e 90 f0 d0 56 d7 53 e4 2e bb 04 af 9d fa 0c fb 26 3d d4 76 1f bc d4 89 24 05 cc c3 fd 92 b3 e2 08 52 18 fd 18 14 f0 1e bb 2f 9b 2d c4 17 16 8e 32 98 c5 6f 1d 37 5b f4 f3 18 85 82 57 eb 76 07 d3 e5 37 74 c3 03 c5 f1 50 8d f9 10 27 ac 1b f2 ec 1e 5b 5e 4b ca f1 3a 0f da aa 31 fd 70 64 69 8e e2 ec cf f3 f7 04 a2 2a 3e 7b e4 10 0e 8d 42 65 Data Ascii: 1'K\/cnu?aI[[%e(FNpjo6aI&_Y5a3T@C' e\a+SS!hr_9<]R/P'BV+dlW;nVS.&=v$R/-2o7[Wv7tP'[^K:1pdi>{Be
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 5e 94 be 5e c5 ff 1e c2 91 1f 71 1d 46 fe 33 82 5d 3e b3 4c 32 27 71 15 f2 ff 2e 13 84 5f 5a 9e 72 2a 34 95 9b 28 c2 44 12 e0 66 37 ce 40 72 cc 10 f7 25 ba 88 b7 bf e0 4f 7d 07 c7 a7 3e a8 eb ca 98 e9 bf 65 86 bd ca 2e 7e 33 47 78 a5 58 42 91 93 25 54 fe 81 cc b4 92 a6 ea 87 0f 12 6e 1d f8 e1 26 f4 ee a4 40 16 52 db dc 1c a8 aa a3 b0 f5 49 e4 11 31 4c bb f2 75 e9 cc 27 52 e7 15 16 e9 35 65 4f 38 24 d4 ae e9 66 d7 25 56 25 4f a6 91 55 14 a8 32 ff ea 6f 6a 4a ae 8a f8 e2 07 ee b9 bc 27 51 67 25 2a 4a 4e 6f ac 42 cb b1 88 3d b3 8f 32 49 74 7f 7c 0b a0 e6 bd 60 32 c2 44 1b 98 81 9e 36 72 79 e7 cd 12 6c 2e 45 bb 7d 5a 96 97 e9 6f b5 f2 9e 7a 91 17 2a 21 e6 3a 52 cb 5c 76 38 ad d1 d5 9d 16 d8 83 4d 07 50 26 42 86 6c 17 ba f0 fb de 04 0e 1b 26 9f 69 3b 59 da 6d Data Ascii: ^^qF3]>L2'q._Zr4(Df7@r%O}>e.~3GxXB%Tn&@RI1Lu'R5eO8$f%V%OU2ojJ'Qg%JNoB=2It\|`2D6ryl.E}Zoz*!:R\v8MP&Bl&i;Ym
2024-05-24 22:56:53 UTC	1369	IN	Data Raw: 34 37 aa a1 44 19 82 23 a7 05 fa 71 e7 04 65 da 75 93 44 00 57 cd 32 32 0b 0e 4f 7c df c1 fd 26 89 58 d6 cb ea 87 cf 4f 5e 82 af 62 c8 a5 cc 26 c9 28 f5 3c 41 15 9d 13 c5 6a d2 c0 e0 0a 97 a2 41 c2 01 df cc 90 fe 23 56 c9 9a 92 dd 2d b1 2b 7c 71 9a f4 4c a0 3d c7 52 07 41 51 2c c0 9d 5d 01 a2 81 a8 17 53 f9 aa 57 eb 12 a1 21 91 16 7e 45 71 fc f7 d9 e3 3f e4 e6 51 2f e6 a6 bb 7b 90 cf 77 6b c9 5a c2 da 7d fe 1c 72 d6 b2 46 85 5d 48 28 af 39 c3 82 f2 2b b2 5c f7 6b 4f d8 d6 f4 f2 77 71 ae 0a b7 53 e5 c8 62 f5 df 2e fe 31 db 5e 92 4d d8 0a 3c c7 fa 50 e0 a5 54 db 9d f4 82 60 5f 71 bc 48 fe 14 4e 84 50 b7 83 26 13 1c 23 cc df b1 3e 72 7d 71 b2 c6 ac 8d 6d 9a 05 db c7 23 37 89 65 71 80 10 9d a8 73 14 0d ca 1a 5a 57 b5 df 69 ce 6c a6 cc 62 ff 91 c2 a4 a3 a3 1f Data Ascii: 47D#qeuDW22O\|&XO^b&(<AjA#V-+\|qL=RAQ,]SW!~Eq?Q/{wkZ}rF]H(9+\kOwqSb.1^M<PT`_qHNP&#>r}qm#7eqsZWilb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49852	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	591	OUT	GET /buyer/user/user-capi HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
2024-05-24 22:56:54 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:53 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:53 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:54 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 36 3a 35 33 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:56:53"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49853	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	595	OUT	GET /buyer/user/select-coupon HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
2024-05-24 22:56:54 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:53 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:53 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:54 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 36 3a 35 33 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:56:53"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49846	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:53 UTC	944	OUT	GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fcategories&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591408397&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fcategories&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
2024-05-24 22:56:54 UTC	147	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:53 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close
2024-05-24 22:56:54 UTC	81	IN	Data Raw: 34 36 0d 0a 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 64 68 41 51 41 42 41 50 41 41 41 4d 50 44 77 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 46data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49854	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:54 UTC	1122	OUT	GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412187&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:54 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:54 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49855	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:54 UTC	1232	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412187&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:54 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x1e56ca29f3892d0e","source_keys":["1","2"]},{"key_piece":"0x30408da2837dfb7e","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:56:54 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:56:54 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:56:54 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49857	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:54 UTC	428	OUT	GET /uploader/7031c12368f9d1fee63f7904e93284d2.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:54 UTC	570	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:54 GMT Content-Type: image/webp Content-Length: 16010 Connection: close x-oss-request-id: 6650748B1F524735344B1A0C ETag: "18D853FEB3321A2DDCF99B7F0A925616-1" Last-Modified: Fri, 05 Jan 2024 05:50:00 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 156 x-oss-hash-crc64ecma: 1588804040121143340 CF-Cache-Status: HIT Age: 42667 Expires: Sat, 25 May 2024 02:56:54 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1b5fb3e6a79-BNA
2024-05-24 22:56:54 UTC	799	IN	Data Raw: 52 49 46 46 82 3e 00 00 57 45 42 50 56 50 38 20 76 3e 00 00 b0 3f 01 9d 01 2a 8f 02 d4 01 3e 6d 32 95 49 24 22 a4 a2 22 91 3a 98 90 0d 89 69 6e ff f6 bb ce 1a df e1 cc d7 3c 0c 43 e8 1e 50 d3 0d f8 a1 cf 22 87 63 d7 80 31 c2 b0 7a ee 73 42 af 4e 39 de 36 28 ff 0d 9d be 7a c0 e6 d7 ec d8 a1 15 73 6e a9 e4 6b e4 f7 e8 9d 7b fe 85 e5 a1 f2 67 7d bf af f0 5b fb 9f 6f 1f f3 7b f7 e0 35 ed 9f 3b 68 9b 75 d6 83 ff 47 f3 88 9f c7 e1 ec 86 d0 17 ca 03 fe 5f 3a bf b5 6e 4e 90 09 07 1b ab 9b f3 86 dd 5c df 9c 36 ea e6 fc e1 b7 57 37 e7 0d ba b9 bf 38 6d d5 cd f9 c3 6e ae 6f ce 1b 75 73 7e 70 db ab 9b f3 86 dd 5c df 9c 36 ea e6 fc e1 b7 57 37 e7 0d ba b9 bf 38 6d d5 cd f9 c3 6e ae 6f ce 1b 75 73 7e 70 db ab 9b f3 86 dd 5c df 9c 36 ea e6 fc e1 b7 57 27 19 7a 1a 3b 76 Data Ascii: RIFF>WEBPVP8 v>?*>m2I$"":in<CP"c1zsBN96(zsnk{g}[o{5;huG_:nN\6W78mnous~p\6W78mnous~p\6W'z;v
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: df ef c9 0f 2e 00 36 e9 8b 7c 9a d3 49 67 8b 7e 91 ea d6 b3 ea 5b 15 2d ac 80 e3 8e 04 86 0f 06 36 a7 45 ab f6 28 2e 4e eb eb da a1 58 6f c3 b6 a4 eb 11 e7 2a b6 c5 b2 1c b0 fa c5 c1 e4 a0 00 c8 59 b0 3f ae 8d b9 9a 31 74 bd cc 04 a1 4c 89 20 e3 75 73 6f d8 4a ad 5f b8 5e bf b2 9d 58 99 e9 03 ae db cd 37 d3 d5 fa 37 1a 48 17 f3 67 01 39 f0 bc 3b 40 78 cc 23 f2 88 b0 31 c2 5f de e8 13 23 ab 61 2b b3 bc 8c a2 03 b5 62 c0 ca 11 b8 e4 fd 2c ee a3 98 fe 66 bb 58 a0 f4 e8 c1 df 8d ab ff 6a dc 9c c1 8a c3 b4 f5 ea c6 1e a7 79 67 4a 49 a7 19 09 0c 39 fa 10 1d 3a 60 15 07 90 db ab 9b f3 86 dd 1b 8e d8 39 62 b8 d8 0d 88 83 93 7f 1b 16 8a 51 d3 f4 bc b0 fd 82 fc d0 5f 09 84 31 d2 c0 79 62 72 89 77 27 bf c1 39 1b 77 48 5d 83 fa 31 17 4b da b5 33 4c 54 3e 92 f5 74 9d Data Ascii: .6\|Ig~[-6E(.NXo*Y?1tL usoJ_^X77Hg9;@x#1_#a+b,fXjygJI9:`9bQ_1ybrw'9wH]1K3LT>t
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 4d 9e 1a cd c5 79 15 55 92 5d 59 f6 99 47 a8 4f a6 50 b5 5e 4c e8 3f f1 44 71 96 5b 4f 1f dc 04 00 84 3a 8b 0d 93 f6 83 db 49 3f ae 08 df cc 00 29 9e c7 75 fd b8 12 73 fc 47 88 b6 a1 8a 1b 1b 54 69 dc 64 16 8e a3 b5 11 ef 1d de 6a e2 cb 0c e8 c2 cb e2 bb 80 e9 87 8a 42 b9 83 5c 08 5b a6 c3 b2 5e 51 b7 53 11 53 37 ea 92 81 40 bd 82 12 47 7f ee 83 61 9a 00 b6 ab 3b 46 17 e3 bd fc e2 d8 3e 94 7e 98 47 fb 4d ee 27 e9 7c a3 cd 49 8b c2 48 dc 6a 92 13 ef ed 35 06 86 ec 96 61 d5 74 e2 8f 06 b0 63 09 b0 ce b5 ed 59 ce f9 4c 11 d1 83 8a 0b f7 63 1c 65 d1 9c db 5f a8 71 e3 75 29 74 ee 93 bf 74 5c 2c 7c 97 a6 69 72 cf 4d 5f a9 8c 14 f3 17 ee 65 f3 b8 c8 79 9b 97 5b ce fe e6 ec 51 d0 9d 29 a8 11 e7 19 6d 0f a9 2a 54 97 7b 86 fc 64 9d 18 fe 34 6b 84 fe 76 17 9d a9 e0 Data Ascii: MyU]YGOP^L?Dq[O:I?)usGTidjB\[^QSS7@Ga;F>~GM'\|IHj5atcYLce_qu)tt\,\|irM_ey[Q)m*T{d4kv
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 52 33 3e 07 97 bf 13 5c bd 6b 6e ed b6 68 38 91 79 29 4d 80 30 6b 93 ce 0c c8 88 65 ec 62 00 f9 b3 53 f2 9f f2 c2 ed ee dd e6 67 fb 11 2c 4a bc 9f bf 68 3d 89 10 40 07 07 71 e1 76 a1 5b a6 ca 5e 27 54 38 47 3d b7 73 e5 66 f5 78 9e 2e f1 61 48 92 29 b4 20 bc ca 87 30 3c 68 ec c9 5d d4 29 72 44 20 ab 49 38 c7 99 0d 2c 9a 0f 99 62 0f e9 4c 48 bb be 3e ca bb cc 96 6c b9 58 b5 d6 c9 d4 fc 4b a4 bb 00 d1 4c 76 fe 7c b8 59 dd 7c 36 0b 34 ca e6 21 fe 92 4a 0c e2 f7 5d f7 a3 f9 51 da 24 31 0f 92 41 6e 10 02 72 50 c0 00 ab dc 2b be e1 cd b5 2d cd 1d 86 04 c4 3f 2e 36 91 0a 81 ce 94 64 2b 9d aa a1 26 c4 e1 a6 d4 a1 79 ef d0 6a 76 33 ea ff 0f 0f 35 82 1c f0 07 fb e3 43 43 b3 ad f7 53 62 25 d4 97 d1 28 e6 f8 c7 6e 8a 89 aa 9e 19 52 ef 05 b7 8e 84 4d 58 d7 a2 e3 0f 7e Data Ascii: R3>\knh8y)M0kebSg,Jh=@qv[^'T8G=sfx.aH) 0<h])rD I8,bLH>lXKLv\|Y\|64!J]Q$1AnrP+-?.6d+&yjv35CCSb%(nRMX~
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 06 1d 0b 59 0e d5 b2 a0 b8 97 d9 5e ca d6 58 31 b4 33 9c e7 1a 69 75 d0 c0 5a 81 64 e7 b4 79 49 13 91 02 53 49 5c 0c b1 c2 e5 e7 af f4 37 61 e4 ac 72 52 cc d1 23 d6 b2 26 74 e6 8c a1 5d e2 34 68 67 a1 91 a7 6f 0c 1f 38 b3 f7 96 44 29 3d 5e ef 6f 5c 34 7a 56 37 16 0e 23 c9 08 e5 98 2c b5 0a 0a ec 18 c4 40 e3 f6 8b 8e 9b 06 21 1b b5 0d b7 20 04 87 01 e9 d9 cc 44 66 85 64 07 b7 92 cf 4e 89 0f b9 f4 35 a8 d1 03 45 7f d6 8f 14 3b 87 6f 72 e2 4f 7f 73 90 41 d1 71 54 62 3d 63 33 91 ac 40 30 65 6a b7 79 c9 c4 62 e5 b0 ba b6 a9 d0 e2 0c f0 78 f8 80 a4 6d 86 db dd 5d 9d 5c ad 8a 37 77 33 83 70 5c d1 6e 83 b2 93 e8 a6 b8 31 e8 96 34 a5 5b e0 5d e8 71 29 28 b3 dc 9c 72 b3 5a 98 df 33 64 76 fa c4 03 f0 1a 33 9e 9e 7d 65 bf 86 11 70 08 e0 4d d1 6f a6 61 9d d0 8b 6a b0 Data Ascii: Y^X13iuZdyISI\7arR#&t]4hgo8D)=^o\4zV7#,@! DfdN5E;orOsAqTb=c3@0ejybxm]\7w3p\n14[]q)(rZ3dv3}epMoaj
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 29 01 90 9e 90 d9 e2 39 a5 95 f9 53 53 8b f3 1c da 61 d9 d3 a9 44 88 1b 14 80 01 df 20 f2 19 d3 55 00 d1 f3 fc 54 1e 2f eb d4 f9 64 a1 c4 41 0b 13 19 2a 96 87 97 77 a4 21 e3 70 15 8d f5 2b 70 33 bc e2 f1 4d 85 53 0a d2 c1 0a 71 ac 13 b8 00 11 75 11 bf 6e 46 b5 bb 3c 93 44 8f ee b5 84 c9 84 3b da 4b 91 8a ce a2 26 88 0c d2 19 35 7d 51 3b 33 10 55 df 84 3c 27 57 c9 ef 92 5d a1 97 f9 1b a0 c8 1d 7c ca d0 8c ea 1a 42 9d b2 4a c6 ef 8d 73 50 d8 66 87 72 d1 ef b7 16 92 b7 96 91 00 25 c0 fb d8 55 8e 0c 1f 31 7c ff b8 59 46 28 05 5e ea 13 5a fc 1f 64 9e 99 9c 0c d4 33 31 42 2c b0 85 9c 42 fa b9 31 71 c2 a2 52 22 73 60 a0 c8 64 56 e5 d4 71 77 ac c6 b3 86 54 05 67 26 99 8e ed 12 f9 82 36 b8 24 ca 01 d8 d3 b4 ad b8 b6 40 6e 47 f8 6d b4 45 97 ee 92 11 2d be d7 1c 2c Data Ascii: )9SSaD UT/dA*w!p+p3MSqunF<D;K&5}Q;3U<'W]\|BJsPfr%U1\|YF(^Zd31B,B1qR"s`dVqwTg&6$@nGmE-,
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: bd 5e ba bb 82 57 7f 68 32 ff 8f 18 ea 75 a9 63 3a 9f f0 d6 7c 58 8d 9c b6 a5 3f 16 0e 43 69 f3 b2 8a 59 c7 1c f8 3a b6 77 0f 65 9c 7d ed c3 dd d1 97 df 2b ec ea a0 08 1e e3 46 21 9f 1e 55 16 04 34 d1 06 e5 b3 2f 37 64 e9 25 a2 70 f9 7f 7a fb e3 30 7d f6 b5 15 69 ca ea 5b bf 88 56 93 48 fb 64 eb db 36 58 83 dc f8 78 a8 1a 2a dc 37 fc 60 fa 79 dd 3d 56 0b f9 e9 2a ab 48 c4 58 0e 28 29 2b 62 4a 72 e5 c2 b5 94 c9 5e f1 eb 78 54 b9 77 d7 33 fb 13 b8 f2 a3 22 61 de 16 f5 d5 a1 af b9 ff 65 16 46 69 1a 94 5d ab cb 6a a2 46 59 1c cd 58 3c d5 41 44 b3 29 da 5d fd ea e3 34 20 0c be dd d0 80 23 98 cb 33 89 e9 6c e9 a8 bb ca 3f 83 48 c5 6f 85 eb 1a 00 3c 99 ea 0e 03 72 91 75 4f 5a e7 02 b5 36 89 78 8a 23 fc 5c 7c 33 46 1b fa 62 59 fc 33 ff 75 04 00 bc 21 7d f3 ca 11 Data Ascii: ^Wh2uc:\|X?CiY:we}+F!U4/7d%pz0}i[VHd6Xx7`y=VHX()+bJr^xTw3"aeFi]jFYX<AD)]4 #3l?Ho<ruOZ6x#\\|3FbY3u!}
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 10 05 81 56 2d f5 67 8f 22 10 64 26 78 4b c9 bf 68 5b 95 13 07 62 49 63 93 bb b7 9e af f0 4c 89 6a 80 50 6d 3f 9e 5f 5a 3a 1a 8e ff fa 26 33 29 b3 32 4f 2e 09 ba e3 84 17 59 c4 55 27 f2 d1 db 4b 25 4d 3e e9 1d 77 64 7c 26 83 d7 8c cc f9 51 8d 29 61 c8 fd b8 90 47 91 7f ae 61 bb 67 be a0 a3 1e c7 02 22 be 8f 6a a3 0e 8e 6b 20 d7 0e 32 1c 9e dc 44 d1 1b e4 20 e7 b5 1e 98 40 cf 8c 61 25 6a f7 81 f2 14 c7 df 5c 88 82 7d 47 d3 69 5c c6 2d 4e fe 34 ef d5 7e 88 28 f0 54 e8 35 05 7f 45 a0 dc 50 46 c9 34 62 7c 6f f2 81 12 16 d9 ac 58 ff f2 dd f5 f9 48 b9 c1 65 8c f2 4a 40 18 07 30 ec ef dc 4e 20 1e 04 83 b5 95 6a ec 1d 05 70 23 27 b2 c6 03 40 9d 87 74 87 7e ed 7f 1a 4f d3 07 83 b9 44 6b 5e aa 4c 99 f0 35 87 36 1d 70 ca ac 8c 96 3e 50 27 55 0a 1c 4a 30 89 3f bc e9 Data Ascii: V-g"d&xKh[bIcLjPm?_Z:&3)2O.YU'K%M>wd\|&Q)aGag"jk 2D @a%j\}Gi\-N4~(T5EPF4b\|oXHeJ@0N jp#'@t~ODk^L56p>P'UJ0?
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: ee 24 4d 34 b7 ad 61 17 53 40 b4 95 3a 81 b2 11 f7 71 7b 3b 44 90 2b 2f 97 2c d4 be 08 8b bc fe 6c 02 fd 36 34 fc 36 b5 cd 9e 98 6d 81 a9 3a f8 7e 98 05 cf 93 d4 9f 3f 29 d6 5b be 60 56 05 81 a9 b2 80 92 9a 77 04 d0 45 e5 94 62 bc 7d f9 07 81 37 3f a0 1a 70 e4 73 40 0a 2f dd fc 07 0b 8a 4d fb f5 3b 0f c6 83 6d c9 ed fd 94 5f 2f 8d 51 d8 88 e8 ea 39 e4 2f ab 22 75 57 50 ca 53 15 8f 5c fc 46 ec 90 40 b9 92 a9 59 c5 4c a4 b6 5f 11 4b 13 ed fc 1d b0 54 55 88 9f fc 54 e8 be 08 17 66 9a 25 6a af bd 82 27 b7 32 34 64 ec fe c3 da 3e 88 2b 39 eb 27 d3 2e f9 05 d9 bc ee 64 cc 76 7e 13 c5 70 ba 54 6c f6 74 df d6 26 83 d9 18 cd bd e4 fa bf 96 3e c0 ea 6c 5f 33 77 12 30 00 e4 b7 49 e3 5a 04 4d be ae 5d e8 96 4f c3 3c c4 38 82 e8 1e 1c 6a 1a cb 45 bb 33 c1 15 6e 65 82 Data Ascii: $M4aS@:q{;D+/,l646m:~?)[`VwEb}7?ps@/M;m_/Q9/"uWPS\F@YL_KTUTf%j'24d>+9'.dv~pTlt&>l_3w0IZM]O<8jE3ne
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 37 87 e9 3a 8f cd aa 37 e7 38 4a 72 25 f6 6a 53 74 40 26 48 a7 27 a0 70 8f d9 9a 7a a5 ba aa 5e dd 01 30 7d b4 bf 55 c0 43 f6 73 d9 f5 b5 60 6e a4 fd 63 7a 92 6b 1a db 62 aa 68 3c 96 ac 8e 09 88 2f 21 a7 b3 21 14 ff b3 de 2d a7 92 1c c1 92 ef e6 0e 32 6e ef dd f6 ba 77 1a a1 46 2a 5c b1 1c e1 14 78 68 fb 34 53 e1 a0 83 f1 e2 92 6c d4 d7 c3 6c 57 46 dd 9b 5a 95 9b f5 4c 1f b8 95 5a 44 25 85 04 0e b9 53 9c f6 6f aa 8b e1 6c b6 48 09 60 fa f5 96 53 52 16 fa e7 a6 fb 18 fa f3 b9 98 e8 86 76 d0 09 ae 58 42 a7 6e 0e d2 01 63 cc c8 2f dd 32 f6 f4 77 a6 ae 9c eb ca b1 b1 3b 91 bc cd e1 be 4c cf 0f 83 c1 56 65 63 3e 3c 21 bd ed 92 89 88 17 b8 22 53 85 18 18 a1 75 86 a5 7a 5f e4 f5 61 49 fe 55 d1 3f f9 89 8b 21 1d 92 fc 56 5c 3f b9 ab 6b 17 12 c0 66 4b 45 e7 3a 95 Data Ascii: 7:78Jr%jSt@&H'pz^0}UCs`nczkbh</!!-2nwF*\xh4SllWFZLZD%SolH`SRvXBnc/2w;LVec><!"Suz_aIU?!V\?kfKE:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49856	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:54 UTC	428	OUT	GET /uploader/9007085244817a5cfa454f8854cb9a50.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:54 UTC	571	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:54 GMT Content-Type: image/webp Content-Length: 16642 Connection: close x-oss-request-id: 6650748B76EC4B3434352FCD ETag: "B0495630F260E23868BFA2BDFF413056-1" Last-Modified: Fri, 05 Jan 2024 05:44:12 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 149 x-oss-hash-crc64ecma: 16917837872685638940 CF-Cache-Status: HIT Age: 42667 Expires: Sat, 25 May 2024 02:56:54 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1b60a99f7cc-BNA
2024-05-24 22:56:54 UTC	798	IN	Data Raw: 52 49 46 46 fa 40 00 00 57 45 42 50 56 50 38 20 ee 40 00 00 50 40 01 9d 01 2a 8f 02 d4 01 3e 6d 34 96 48 a4 22 b1 a1 23 91 3a 72 30 0d 89 67 6e fb fb fa fb 38 a5 ec b0 a4 d2 7e 1d d5 12 b2 4a 65 1f 2d ff 0f cc bf e8 fb a7 ff d0 f2 df d2 5b fe 17 99 ef f7 9e ac 7f 5f 7f 6c bd fc 7c f8 f1 f1 bf 6e eb 88 3c df b0 1f ce fe ff e6 79 82 ff a8 f0 53 fb 17 6e 5f f0 3b db f9 47 a8 5e 30 7f cc fd a7 f0 ca dc ff db fe d7 fb 10 7b c1 f7 cf 4f 69 c3 7e 07 a8 37 05 e5 02 ff 54 7a c4 7f b1 e6 07 f6 6f f8 1d 3c 1e ce bf 75 ff ff fb c8 fe e3 91 b6 0b 5f eb ce 9d af f5 e7 4e d7 fa f3 a7 6b fd 79 d3 b5 fe bc e9 da ff 5e 74 ed 7f af 3a 76 bf d7 9d 3b 5f eb ce 9d af f5 e7 4e d7 fa f3 a7 6b fd 79 d3 b5 fe bc e9 da ff 5e 74 ed 7f af 3a 76 bf d7 9d 3b 5f eb ce 9d af f5 e7 4e d7 Data Ascii: RIFF@WEBPVP8 @P@*>m4H"#:r0gn8~Je-[_l\|n<ySn_;G^0{Oi~7Tzo<u_Nky^t:v;_Nky^t:v;_N
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 20 f3 38 be 45 3e be f6 25 96 88 22 78 30 ab 27 a0 e5 4d 57 fc 06 a7 8c e3 b4 3b 17 4c 26 4a 01 a2 6c 6b 80 45 41 18 31 0b ef c6 5f 75 37 ce 1e dd c0 fb 6b a9 c0 2e bf 06 93 45 c6 8d e1 40 70 85 e2 ca 6b f8 71 90 14 29 2b 8e 06 0e 28 72 01 18 e0 ec 1c 1e 92 b5 39 dc 32 9c a2 ae 81 94 92 27 51 39 da 86 3d c4 8c aa 79 4d 46 89 1b 4b f0 a8 4f e8 97 4d a9 01 da a5 c7 37 bf dc 59 de 99 47 f6 90 9c 8d 9b 46 8e e4 d3 c9 5b 64 d3 5a c7 23 b4 57 4e af 75 b7 52 53 93 a1 ef f5 64 74 57 7b 9a 29 84 3b b4 8d 6b 32 69 50 04 8c c9 97 b0 84 9c 40 aa 7d c1 ee 28 58 40 97 a7 c5 44 4d c3 b5 71 40 2a 02 4f 23 d8 66 e6 be b4 89 e8 89 47 6c 26 c7 60 ee d3 cf b1 c2 84 22 55 be 86 1f f6 81 f5 15 9c 6c 7c d9 6b 46 9a 36 27 1e 67 08 1b f5 4a c5 89 0a 07 bb 44 40 59 c7 c7 69 34 c6 Data Ascii: 8E>%"x0'MW;L&JlkEA1_u7k.E@pkq)+(r92'Q9=yMFKOM7YGF[dZ#WNuRSdtW{);k2iP@}(X@DMq@*O#fGl&`"Ul\|kF6'gJD@Yi4
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: b0 60 8a 98 1f fc 49 f9 60 e4 5e 0f 99 2b ba f7 51 c4 44 28 ed db 88 8e 0d 43 94 69 98 f6 cb 95 ee 38 42 d7 42 22 76 a9 e2 24 7d 88 56 44 60 c1 37 3f 6d 34 19 60 38 2b 9d 92 c0 e3 cb b1 13 6c e2 19 2c d6 76 cb 00 77 3b f9 ac f4 07 09 81 67 ce 7b 1a 47 54 07 40 1e 94 df 65 37 ec b2 6a bc 35 e6 b4 96 cd 2d 59 18 92 06 83 6a 22 b7 2c 7b 7e 47 18 53 df 35 f5 96 37 e7 b5 0f 1c cd ff 35 cc bb 7a 6e 04 e2 6b 86 ce 7a 79 4c 49 c5 f3 9e cc 12 09 ec 0b 71 6f d9 2c bd 0a 92 f5 93 ea 3b 9d 53 d7 f1 6a a8 aa 9f b9 42 69 40 37 fc 08 c4 b1 68 c1 a6 9a be 92 39 8e 3a e9 c1 64 08 37 09 c2 74 89 52 25 ab ea 4c b3 16 d2 28 bd 97 84 fa 47 25 99 29 c5 3d 1b 06 49 aa cf bc 26 9b d4 6e fd 62 9c 1e 59 88 1c 94 bc 52 fb f6 93 03 d6 ee 01 2f 9b bc 3c 90 01 5b 33 5c a3 ee 95 9f 13 Data Ascii: `I`^+QD(Ci8BB"v$}VD`7?m4`8+l,vw;g{GT@e7j5-Yj",{~GS575znkzyLIqo,;SjBi@7h9:d7tR%L(G%)=I&nbYR/<[3\
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: c6 6d 98 b4 06 bf 98 e2 f1 b1 90 ea 6a 5e c2 f3 ba a6 65 a9 52 12 66 97 82 dc 03 98 41 a9 66 d1 ba 30 ac fa 47 df 77 61 c0 ff 17 81 84 14 7a be fc f6 75 ae 21 92 96 a6 c1 30 58 a4 33 34 63 1c ca 3e be e6 f7 3d 6e 15 72 cd 55 1a 6a 26 64 f2 e6 a1 e0 0e 6b b1 25 75 8b 0c ac 22 c6 89 a6 83 2b 5f 29 f6 2f f0 f1 2d de b3 63 02 be 9f e2 81 50 78 09 28 07 95 48 05 dc a6 e5 e9 db d0 df 83 88 df 82 54 bd d9 e0 93 c4 3b a2 85 24 53 e9 6d 74 23 a0 37 91 74 20 ce 58 8c f5 7e fe 54 62 c5 7c 29 e5 d6 9a c4 ef f3 20 6a b0 7a fd 4f b4 30 56 2f 83 9a 8f bd c3 fa a8 23 c6 52 8d b8 e7 73 19 dd d6 6d 55 20 5a 9d d3 9b 6e a3 b9 77 f4 be 71 91 1d 75 2e 23 45 7e 91 cb cf 1e a5 19 de e6 f9 0b f1 75 4c fb 5a 25 2d 82 69 61 69 d2 c3 87 2d bf ec a9 3e 7e ca b6 31 44 82 60 68 44 a0 Data Ascii: mj^eRfAf0Gwazu!0X34c>=nrUj&dk%u"+_)/-cPx(HT;$Smt#7t X~Tb\|) jzO0V/#RsmU Znwqu.#E~uLZ%-iai->~1D`hD
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 61 ec 54 8d 42 2f a5 a9 03 59 8d 44 b2 73 2d a0 e0 d6 aa 69 58 81 4c 12 22 31 76 5d 31 fd 23 86 79 5e c9 ce 3b e4 61 8e 11 b1 4c 05 92 45 88 f5 e7 cf 73 65 3c 23 7d cd 6a f1 f3 5e 4c 26 e8 29 d3 2d 85 58 98 3c 20 a8 18 a9 4d cc 50 85 3f f3 e3 fe fd 27 bc fe ee f3 40 2d c8 86 3d 4e ad 6a 29 88 c9 4f e0 d6 54 86 c1 08 cf 2a 77 90 a2 85 40 ac f7 4e f3 9b 5e ea b7 95 a5 84 70 bb 7a be e8 76 94 a8 c2 fa c7 ff b1 ab 5b 43 4f 1b a1 3f 39 56 c9 5d 75 d9 33 9d e3 f8 e7 2d 24 ca 8c f1 2d ef da 3d 4d 9d a3 28 60 01 7a fb 11 f8 28 78 8c 9a 63 47 a4 f2 47 44 ef 42 e6 48 0e 9e 8b 5b 3a 22 db 05 53 f4 75 51 fe 02 cb 73 1c 0b 54 e4 d1 cb 45 4b 1c c0 88 c3 a0 91 62 ed 46 c5 86 23 db ae b6 7a 40 82 98 ec 2a 45 e3 7c cd 62 3e 1d ec e2 9a 7f d1 eb e4 f1 56 3f 53 27 df 95 47 Data Ascii: aTB/YDs-iXL"1v]1#y^;aLEse<#}j^L&)-X< MP?'@-=Nj)OTw@N^pzv[CO?9V]u3-$-=M(`z(xcGGDBH[:"SuQsTEKbF#z@E\|b>V?S'G
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: c7 ce 5f 61 25 af ad f2 3d 3f 5c 3f 90 1b 20 a8 68 63 3a 29 9e c6 19 ab b9 cf 19 b3 b5 9f 12 76 eb f0 c3 5e 3b f4 31 0a f2 e9 ee 56 3e 82 cd 55 2d bd bb a5 41 12 2b 9c 9a 9b 09 cf 97 ac 58 b9 b7 92 9c fa 2c 91 cc 97 2e 5e 4c 26 c5 62 5a dc 46 f9 37 92 d3 7a 9f 21 3c 67 af bd 09 be df 51 46 93 de f9 e6 54 a4 f9 0a 70 eb d6 27 1c 1e 1f 58 3b ee 46 70 6a 90 bc 37 84 40 8e 4c a0 fe ef 90 ab 12 a2 d9 fc 88 ef 48 71 81 60 7e d7 cc b0 8c 6e 5e e8 68 e5 6d 47 35 79 3a 25 48 40 5d 63 4e eb 4b 0b a1 d8 78 d7 94 ae a6 b3 f5 a8 5f ed fd 37 74 4b 7a e0 b0 d6 ee ae ed 6b fb a8 63 14 d8 25 2e ca c3 7c b7 ee 0f 7f 0d 85 20 1a 5e f3 d1 61 09 a1 b8 22 7c b3 f3 89 8e 36 dd 28 21 e9 6e cf b2 b1 0e 8b 10 81 e9 bd 9b 51 05 fe 85 2a 76 a1 05 f6 00 3b dc 3c 72 2c e0 1a f9 1b 2d Data Ascii: _a%=?\? hc:)v^;1V>U-A+X,.^L&bZF7z!<gQFTp'X;Fpj7@LHq`~n^hmG5y:%H@]cNKx_7tKzkc%.\| ^a"\|6(!nQ*v;<r,-
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: f3 67 17 cc 30 dd d1 22 6a 8d 0b b4 51 c6 9b db af 60 ef 6c 70 c4 57 14 ef 23 fd 82 ec 58 c4 f1 2c 44 88 c8 f3 cc d6 e7 78 cc 53 55 b6 94 3b 94 bb 46 df e9 d6 2a f3 53 78 1d 2f ab 80 99 a8 08 2b 2d 23 7e 42 7b a1 19 11 8f 23 bf 22 4a be a4 0a 64 2f b0 92 00 87 f7 e6 0e 23 d5 7b e3 31 c4 24 5e 64 07 a1 bb 38 81 92 f4 80 38 ed b7 e7 34 8f 71 a1 c1 63 15 ff 7d fd e8 6c de 47 e4 cf 8d a9 6c 8e 2c 6b 82 45 bf 52 72 cb 08 d9 e9 c9 b0 34 b1 74 e0 2c 86 5a e6 c2 16 8f a3 65 b6 9b e0 75 8b 2d a0 84 cc 2d f9 89 3b 42 12 c7 be c1 2f d1 a2 8a 34 c9 bf c0 2b 37 ee 0d 0a ad 4e 50 8b 40 8a 27 08 6c 20 c0 aa 73 65 49 e0 ff ba 63 ed c4 9c 38 b6 a4 00 93 5b 3f 8e 0d 35 5b aa 74 e3 29 fa ec f6 d9 76 4c 26 db a9 80 d4 97 a2 1f 71 48 e4 a4 96 8a 69 72 69 02 67 ef 1e 38 3c 12 Data Ascii: g0"jQ`lpW#X,DxSU;F*Sx/+-#~B{#"Jd/#{1$^d884qc}lGl,kERr4t,Zeu--;B/4+7NP@'l seIc8[?5[t)vL&qHirig8<
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 8a 83 ab 03 52 ca cf 83 b1 de ed 56 da 59 a8 b7 b7 38 fb eb fc 38 d4 ea 0e 87 c9 a8 3d 87 90 99 17 6d 33 42 38 1e 94 b6 ba 8b 12 33 6c 43 f3 4e 4b f6 79 51 fc f2 bb d3 e9 27 de 98 bb 14 a6 42 b3 ec fd df 4c c1 ef 23 96 b7 dc cf ce 7a 93 6b cc 30 ad 35 bc bf 02 93 de 7b 46 59 01 5e 96 cf 15 25 dd 92 4e 11 c5 1c ca 11 0f 28 a5 8e 28 25 e0 a3 2c f1 27 a0 4a 20 ea 8e 80 62 47 cb cb 69 69 e2 d8 54 a9 31 99 af f8 16 69 15 60 e0 70 77 39 5a 97 6f 9d a7 23 4c 20 6c ca e9 b4 42 9e ca b4 74 f6 fa 2a a4 6f c3 25 45 6c be 3e 66 e0 b1 0d 91 85 96 2c 4c 5d ef 2f 91 a2 9c b2 77 93 71 8e f7 40 fe 2c f8 2b e7 54 d3 bb b1 d1 0e 2c 56 7d 8b 1d 49 47 73 94 a6 c9 4c 6b f9 4f e0 c5 85 3c 43 84 25 cc 30 e1 8f 97 33 b3 19 bf a9 90 8a 3f 8b 6c d3 1e 87 6c 9e 95 dd cc 4b 0f 99 40 Data Ascii: RVY88=m3B83lCNKyQ'BL#zk05{FY^%N((%,'J bGiiT1i`pw9Zo#L lBt*o%El>f,L]/wq@,+T,V}IGsLkO<C%03?llK@
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: bc 54 7d fc 69 fc d6 2b 15 1d 8c 5e d0 83 79 61 06 b2 34 26 cd 77 24 4e 96 6d a5 b0 80 ac e4 4c 93 32 88 3d 26 8f ba a3 6e 4e 17 94 fc 77 4b 6f b8 36 01 fb 03 7e b4 f9 18 56 87 14 c0 c8 ba 77 0f bd 1f 5d 2a e9 de bd e7 ef 1b 58 ec ff 1d 74 a4 7d 58 fd 26 ae 34 cb 05 c7 66 84 0b be ff f9 66 01 c3 7c 20 94 43 d1 0a b9 3b 67 26 d7 f7 05 b6 7a 7d f1 58 42 b2 5a 6f 16 09 39 d8 98 58 11 8e a6 b5 f2 45 ee 64 1d c1 e1 7c 00 b7 8b 8b 4d 63 f8 dc 9b 01 cf e5 62 48 9e 7c ce d9 37 eb db 11 cd 41 f2 5a 32 ff 97 b7 e3 45 7c db 88 78 e5 1e 36 87 fa 43 89 8e 1a 17 0e d3 c1 a7 e2 7a 5d 9e 1e 5f 19 2a 52 4b 97 4c ea c1 49 42 34 70 d4 64 c3 e3 0e e2 d4 b0 b2 b7 9d 1d cc fc 80 b8 c0 48 99 46 06 c3 69 01 47 17 8d 57 22 ca d0 54 3e fe 51 ff 3d 75 be 52 20 e2 69 f7 4d cd c9 c5 Data Ascii: T}i+^ya4&w$NmL2=&nNwKo6~Vw]Xt}X&4ff\| C;g&z}XBZo9XEd\|McbH\|7AZ2E\|x6Cz]_RKLIB4pdHFiGW"T>Q=uR iM
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 03 67 32 96 40 02 68 13 60 fc d8 18 6d 49 94 2d ac 3a de 0f 5e 55 ee 9b f5 2f 78 ed dd cd 21 8f 04 5a 65 79 99 c3 e3 e0 34 d2 db b7 74 6a 4c 7a 59 62 6c f6 89 21 dc 4e 43 65 b3 86 2c 06 df 98 e9 8d f4 7f fb 94 2b 57 21 32 03 3d 3e fe 0a c9 ff f8 6c 7d 7b f5 28 78 43 d6 3e e4 e7 2e 45 15 da aa 65 13 7f 9d de e6 48 d3 95 83 0f c5 fa 7f 4a 45 3b e7 bd 98 8f 5f a2 9f 87 cf 86 51 1f 0c 27 b1 95 ae 86 86 ba c4 83 9b 81 dd 3a cd 55 59 12 71 d9 60 23 56 a4 f2 4d 1d d0 ab 8a 9d c7 f7 1c 39 da 42 a8 6c e8 13 51 a2 4c 44 a9 c1 44 1a ea 8a b2 c3 da 31 03 27 45 15 bc dc 29 04 5f fd b3 70 80 16 b4 a5 a9 4f c5 cb 2a c2 6e 8e 01 3f 95 e6 4e 51 29 41 9a 2a e4 21 2c ba 6e 67 8e 6c 6e 90 fa 5d dd b2 a2 79 26 44 73 af 51 45 b8 55 65 96 2b 83 95 eb 98 7a 20 a1 6f 9f 90 d9 f9 Data Ascii: g2@h`mI-:^U/x!Zey4tjLzYbl!NCe,+W!2=>l}{(xC>.EeHJE;_Q':UYq`#VM9BlQLDD1'E)_pOn?NQ)A!,ngln]y&DsQEUe+z o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49858	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:54 UTC	428	OUT	GET /uploader/75df6de93d8baaa5ce1c4b4bbafbb7f5.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:54 UTC	570	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:54 GMT Content-Type: image/webp Content-Length: 55414 Connection: close x-oss-request-id: 6650748B3BC7A83330C248BE ETag: "6748145BB250419EA3FEB6BC24549225-1" Last-Modified: Fri, 05 Jan 2024 05:39:51 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 311 x-oss-hash-crc64ecma: 8818635318462567132 CF-Cache-Status: HIT Age: 42667 Expires: Sat, 25 May 2024 02:56:54 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1b66c606a7a-BNA
2024-05-24 22:56:54 UTC	799	IN	Data Raw: 52 49 46 46 6e d8 00 00 57 45 42 50 56 50 38 20 62 d8 00 00 d0 bc 04 9d 01 2a 78 05 e8 03 3e 6d 36 98 48 a4 23 28 26 23 53 89 69 00 0d 89 69 6e dc cc db 9f 54 c4 eb ec fa 9a ae b8 97 b9 1f 9f fc 7f f3 71 b3 de 85 ce 6c d4 ba 2a 62 f8 65 76 83 a5 4b fd 5e f9 de fb ff 17 a8 f3 36 b7 0a 74 0e ff a7 ca 88 f5 29 c5 ab f5 2b e7 c1 59 a1 e7 9a bf 63 e6 ff f3 5f f7 74 09 e6 e1 e5 73 a1 d5 f3 1f e5 df f9 bc e6 7c d7 af 3f cd 3e e5 fe 37 f8 ff 6d 3c 09 fc 97 fa be 67 7f 56 fd 77 9c 7f f0 ff 6d 3c 8b f9 65 ff 4f fa 6f 60 bf cc 7f a8 7e c3 7a db 72 d3 c7 4b 73 ff ab e8 3b f0 57 e4 fd 07 e8 0f f5 df f7 fd 37 7f b8 fd cb f7 c7 c3 a7 fc 3e a1 df ea bd 1b 3f e4 f3 f3 f6 37 ee 00 a4 a9 86 6b f7 db be 4c 2a 61 9a fd f6 ef 93 0a 98 66 bf 7d bb e4 c2 a6 19 af df 6e f9 30 a9 Data Ascii: RIFFnWEBPVP8 bx>m6H#(&#SiinTqlbevK^6t)+Yc_ts\|?>7m<gVwm<eOo`~zrKs;W7>?7kL*af}n0
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 19 af df 6e f9 30 a9 86 6b f7 db be 4c 2a 61 9a fd f6 ef 93 0a 98 66 bf 7d bb e4 c2 a6 19 af df 6e f3 9f b8 6a df 41 69 fd 43 d3 f2 ce e1 ac 36 14 ed da c6 9a a1 93 bc 8f ea b1 00 f2 4a 15 30 cd 7e fb 77 c9 85 4c 33 5f be dd f2 61 53 0c d7 ef b7 7c 98 54 c3 35 fb ed df 26 15 30 cd 7e fb 77 c6 37 02 ba 95 40 7b cf 0d db d8 04 c9 88 cb f1 e4 42 5b e3 ff c1 67 c7 81 93 ef b9 8d d6 4c 97 9b ef da 69 1a 72 8a aa fe fb 77 c9 85 4c 33 5f be dd f2 61 53 0c d7 ef b7 7c 98 54 c3 35 fb ed df 26 15 30 cd 7e fb 77 c9 85 09 dd 60 a4 fb 60 4c 04 21 d1 6b a5 a9 20 39 d3 87 5d 6d 9b a9 6c 84 91 06 76 ef 2a 8f b5 2e 6f 2f 7e b7 c9 a5 14 fe 88 e5 ea c7 d7 c0 9e 1c ba 36 8a 45 05 c4 3b 65 0f 12 86 0f 38 9e 25 e5 57 30 3a f8 3d 5b 86 d6 59 55 5f df 6e f9 30 a9 86 6b f7 db be Data Ascii: n0kLaf}njAiC6J0~wL3_aS\|T5&0~w7@{B[gLirwL3_aS\|T5&0~w``L!k 9]mlv.o/~6E;e8%W0:=[YU_n0k
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: d2 17 cf f0 41 60 16 0e f5 59 e8 99 41 e5 cc d1 fc 77 29 2b fc c2 96 6f d6 3c 3d 00 78 50 0b 31 5c ad 17 7e 00 e6 a2 db 60 14 af fa 1c fb 43 1d 73 f1 31 0d 02 7f 7b c8 41 c2 89 a6 e9 5a 50 89 52 75 40 b3 c4 61 04 4c 03 4e 6d 4e 15 70 c2 70 5c 40 42 ad 62 63 46 08 3d 6e 14 a2 4b ff f8 df e9 94 a8 7a 36 d6 69 4b a5 35 ac b8 fb 40 aa af ef b7 7c 98 54 c3 35 fb ed df 26 15 30 cd 65 be 65 6a 35 c1 75 17 c8 60 1f e5 9a 0e 6f 40 01 1b 4b f6 53 02 46 50 af fb fd 9f 99 f4 d5 82 63 23 90 38 7f ea 7b fa c4 b1 a2 20 02 62 66 6b 81 98 64 01 35 54 69 1d eb ed ce ba ef 48 bf ad 5f be 17 ee 58 e2 18 62 7c e4 31 42 1e d9 95 29 c5 ec 2a 21 7b 4f ff f5 e6 e3 df 14 fa 9b 71 bf 19 39 5f 6a 1c cb 23 fc f8 e5 c9 40 bf 5a 59 e4 f9 49 54 b3 44 64 d1 dc 00 6e 56 7f e9 58 0f e8 b1 Data Ascii: A`YAw)+o<=xP1\~`Cs1{AZPRu@aLNmNpp\@BbcF=nKz6iK5@\|T5&0eej5u`o@KSFPc#8{ bfkd5TiH_Xb\|1B)*!{Oq9_j#@ZYITDdnVX
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: b4 ed 56 0d da 06 01 1c df 5d 24 59 ad ed 09 ee d5 4a 58 6d d4 fe 69 c4 57 69 d8 63 9d 81 ee 45 c8 cc bc 8f 5f 52 f7 aa b0 b9 bf 84 55 c5 44 cf b7 7c 98 50 de 3e 45 96 01 6a ae 3f b9 52 77 35 b9 e8 91 36 20 cb a6 98 6b 61 41 56 fc 49 91 83 26 e9 cb 11 37 e4 37 59 ed 4b b8 be 1c d9 eb 15 c6 63 f9 30 3d 34 a3 a4 df 1c 04 6a 22 8b d8 ac a6 62 6f fa 9e ed 3a 95 ce bf 3c 41 82 14 1d e7 56 17 ab ed a1 1b de ee df ca 24 de 13 db 69 17 35 ef ba 88 e5 2d 8e 17 73 9d ef f0 b6 95 50 27 e5 03 f3 dc a2 da 03 a4 f2 4a e2 29 35 cb 73 87 4f 61 b9 05 22 39 07 d0 6b a6 d0 f3 d3 2d 17 b1 96 55 e6 b1 87 0d bd 7c 81 ab 2e 4d b7 74 08 18 c7 a8 df ed 22 5b 08 eb 57 44 f5 42 a6 92 46 e7 65 70 1d e5 21 d3 de 8c 5c 78 f0 5b 45 a7 4e af 00 bb 02 e3 1e ad a7 eb 1a 74 b0 ba 23 55 ab Data Ascii: V]$YJXmiWicE_RUD\|P>Ej?Rw56 kaAVI&77YKc0=4j"bo:<AV$i5-sP'J)5sOa"9k-U\|.Mt"[WDBFep!\x[ENt#U
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: e2 4d e6 fd af 2d a1 9b 43 a6 26 9d a1 6f b6 b6 c1 07 ae 02 aa fe 11 a8 3a a1 9a 64 71 b6 43 10 ff ff d0 84 fe b8 b7 9a f9 72 fe d5 eb c6 4e 73 99 c6 b9 fa 64 95 b9 6c 39 90 50 c2 2f 1e b6 82 95 d7 6e 31 89 72 66 24 85 7a c9 86 db 48 e7 55 a0 fb c4 fb c9 ee ee 28 f3 7a 63 2f 68 9b c4 50 ae ef 66 8a cb d4 8c d9 8b 69 20 96 a7 a1 c0 c5 66 0c ab 3f f2 49 20 d9 fd a5 2e 0f dd 4e 8b 16 09 e8 da ff b3 a8 0b e4 ca 3c 0a b3 14 8f ec 91 91 a6 56 a7 e8 cb 9f a4 9a 97 0a 56 a7 67 fc d1 53 4f f5 ff 64 9f c3 eb 53 83 82 be 24 4c 95 5b 63 6c c0 23 ab 29 20 4f 8b 4d dc 96 7b b1 26 4a c5 38 c3 8e f3 d7 a7 73 3a c9 b7 5c d3 49 93 34 48 5b 0a 84 22 8b 53 26 ea 2a 18 2a 6c 26 9e ed b6 06 46 0d bf 66 5d 3f 16 89 b9 94 9f f7 64 b3 df 89 24 c6 ea 16 0a 7e a4 9e 5d d3 58 3c 55 Data Ascii: M-C&o:dqCrNsdl9P/n1rf$zHU(zc/hPfi f?I .N<VVgSOdS$L[cl#) OM{&J8s:\I4H["S&**l&Ff]?d$~]X<U
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 5d 3e 76 63 9e 06 7f 8c 9a 5c 39 29 cd 56 7d 42 11 c1 27 f3 2c 85 d1 08 ae 6f 4d 19 71 1d a8 6d f4 52 98 45 8f 04 59 8c 3e bc ce 29 e8 f1 e3 39 25 e5 91 4b 62 88 0f 08 36 81 42 59 10 00 56 47 40 97 7c e2 f5 00 1d 9e a8 ba a3 27 5a 0b 14 f2 8b 7d 44 4b 07 fc 71 be 38 9a 4e 29 08 43 2b 9b 61 f8 89 72 b0 6d e0 43 08 e7 7e 88 d1 e1 a7 51 d3 7c 5e 3c 17 6b e6 58 28 32 39 45 52 04 b4 73 b6 9c 60 98 a9 75 00 35 3f 0c 14 83 0d 68 4c 2c af cb bb 06 3c ff 7c 7e fb 16 f0 17 f4 b5 d1 c7 21 0e 9a 0d dd 8a ea fe 5c 0e 9b 32 57 51 57 6b 19 ff ed 4e c6 ff ea 13 e5 d8 d5 a7 25 0f cc 45 4d 10 aa b1 a3 a7 dc 2d 21 78 46 35 e8 28 bc a3 c6 07 51 d9 5c da 9c a5 70 dc a8 9f a6 74 e6 cc f8 cd b3 30 41 cd f9 5f ec 02 c1 97 42 26 9e e1 d8 b5 af f2 95 91 c4 cc 88 62 92 4f 4d 6c 45 Data Ascii: ]>vc\9)V}B',oMqmREY>)9%Kb6BYVG@\|'Z}DKq8N)C+armC~Q\|^<kX(29ERs`u5?hL,<\|~!\2WQWkN%EM-!xF5(Q\pt0A_B&bOMlE
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: b8 0e df 4b c1 07 8f 97 46 c8 45 19 0b e5 6f 90 25 8f 5f 51 9b d1 51 43 28 92 c1 dc ef 87 54 fc 0c 97 75 13 72 69 fd 8c e3 49 83 28 37 5a 99 d7 4a 68 b7 85 71 ad 20 90 85 7b 20 30 c4 be 57 b9 01 e1 c4 e2 d1 41 c2 7d 1d 74 45 df 18 61 76 0c 39 41 c9 dc e2 f9 0e 87 eb 06 25 ae dd 21 8c 4d 87 ab 69 de dd 47 76 d9 60 28 44 19 10 c4 68 3c fe 29 89 78 1f 0b 32 c2 d0 ec 68 8c 93 18 39 bb 21 ee 8e bb 78 7a b6 98 c5 ae bd fb 30 74 3f 11 00 eb c1 93 30 74 5c 56 fe f2 9c cb de 6c c1 87 88 c7 e4 3f f8 c0 0c f9 84 55 42 44 93 98 c7 71 07 2a f6 32 ac 2c a1 d6 15 ad f8 1e 2c 59 c2 3b 4b 00 53 20 2a 8e 7e 2b 47 81 16 9f aa 40 d5 8d 23 36 62 64 8e e4 e8 6b 8a f6 30 9f 69 66 f2 aa 17 49 28 a9 6f ad 5d 49 3d c7 e0 8b 50 3c f8 62 07 ef 57 5f 4f ea 35 ff fd ab 8b 39 20 fd 8e Data Ascii: KFEo%_QQC(TuriI(7ZJhq { 0WA}tEav9A%!MiGv`(Dh<)x2h9!xz0t?0t\Vl?UBDq2,,Y;KS ~+G@#6bdk0ifI(o]I=P<bW_O59
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: d4 11 53 2d 4f e3 5a 2c 58 c1 d1 1c 0b 44 aa e6 41 44 a6 95 69 44 17 87 5c f9 90 45 77 3c 64 a3 ae 86 0a ec c5 16 8e e3 b4 0b e9 c4 df 37 d1 c6 97 ef 8b ab 17 06 86 fb 05 eb fb b5 99 92 39 81 c2 c3 08 f2 17 b9 2e 5d f0 6e a9 22 d7 cb fc d9 a0 ef c7 a3 0e 04 7b a9 f7 e0 bc 0a a3 9c 20 49 8e c4 ee 23 6f a2 ef df 7b e5 6a 55 b6 2c e6 99 95 92 77 dd 48 3c 92 85 4c 33 5f be dd f2 61 53 0c d7 ef b7 7c a7 f9 34 f1 dd 16 6a c5 3f 0d 27 d9 65 55 b9 4f 73 ec 1c 8b a1 9a fd f6 ef 93 0a 98 66 bf 7d bb e4 c2 a6 19 af df 6e f9 30 a9 86 6b f7 db be 4c 2a 61 9a fd f6 ef 93 0a 98 66 bf 7d bb e4 c2 a6 19 af df 6e f9 30 a9 86 6b f7 db be 4c 2a 61 9a fd f6 ef 93 0a 98 66 bf 7d bb e4 c2 a6 19 af df 6e f9 30 a9 86 6b f7 db be 4c 2a 61 9a fd f6 ef 93 0a 98 66 bf 7d bb e4 c2 a6 Data Ascii: S-OZ,XDADiD\Ew<d79.]n"{ I#o{jU,wH<L3_aS\|4j?'eUOsf}n0kLaf}n0kLaf}n0kL*af}
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 93 a9 b7 ed 2c 10 70 25 19 b6 0a 9d cd 3f 69 34 6f f6 bb 9c ee 1c 70 b3 c3 51 a2 2a ec 12 fc 41 c1 77 4f 45 64 74 78 d2 64 50 36 41 d7 44 60 87 81 1c 9d f7 4e 7a 06 79 9c d4 79 fd 59 bb f7 68 34 17 ec fe 3e 68 ee 19 7b 58 0e 5d be 4e ec 1f cb f7 15 e2 88 4e aa 5c 19 d3 9d b1 91 10 ad 7d 51 e1 f4 73 40 d7 60 7f 82 d1 bd 80 98 c7 b4 1b 61 35 4b a4 0c ae 7e 1e 58 a7 67 4a 89 14 39 8e 92 64 d5 bd b1 8f 97 1a 06 79 ba ad e3 dd 3c b6 e7 aa 6c 3a 3f 0f 58 a7 c5 50 03 e0 65 d5 fb 83 58 c6 b4 d7 21 9a 3d 29 64 a1 da f3 eb 10 28 88 00 a0 c9 60 96 13 d5 b9 87 be 3a 07 ac 77 0a 65 8d 18 a0 c0 64 93 0a 5e b8 46 ce 69 e8 36 57 cf 52 eb d7 89 13 df 40 28 03 1d b2 14 fa 17 6f 0e ea 53 6f 2f 8a c6 e2 74 9e 19 7d 70 53 f1 db c5 40 c8 d9 2b 64 db ed 3e f4 6a ea 47 46 49 fb Data Ascii: ,p%?i4opQ*AwOEdtxdP6AD`NzyyYh4>h{X]NN\}Qs@`a5K~XgJ9dy<l:?XPeX!=)d(`:wed^Fi6WR@(oSo/t}pS@+d>jGFI
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: c4 45 86 c3 da c6 5b 13 eb e7 32 f9 74 41 87 a5 c0 82 50 46 c5 6a 1a 94 35 f7 7f e0 68 af 2c 35 7e 9c bc ed f7 f1 dc 5d 5c 0b 18 0a be 89 f0 f5 5f b9 a9 71 28 a3 ec 44 08 cf bc ba a9 f8 bb 47 1f 52 13 b5 88 1f 01 03 3c 53 dd a6 ae e5 32 cf 4a 5d 6d 6b d7 65 7e 0d 8e 7d 8a 25 4d 83 ca ab 76 ea db 55 2e 81 3e 01 00 00 00 00 03 50 dc 6c 3a a9 15 14 1a 7d 41 85 49 62 16 f1 49 40 f4 58 f3 2f 52 58 0f 51 a8 f6 c3 19 22 c5 d7 5f 3b ad 33 18 f2 01 cb 9b 59 93 b6 75 45 fc 2a cd d4 86 98 fd 67 f3 90 ea 04 22 e5 ed ae 70 10 66 74 f6 0d b7 96 5a 0b 8f 3e 7a ce ea 8b cd 4c f2 90 39 a6 e6 21 c2 a5 15 96 11 f3 8d bd 72 4a f1 a5 ae 37 61 7d ec 7e 2d 1e d1 bf 2c f3 b6 75 fa 5b 92 09 0e 24 4b 3a 58 bb 8e fa cd 9f cc 02 6e 6d 50 ce 40 97 ba 8f bb 62 c8 59 bd b7 09 51 54 9a Data Ascii: E[2tAPFj5h,5~]\_q(DGR<S2J]mke~}%MvU.>Pl:}AIbI@X/RXQ"_;3YuE*g"pftZ>zL9!rJ7a}~-,u[$K:XnmP@bYQT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49864	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:54 UTC	428	OUT	GET /uploader/2ce71f6504e8177d94cc448329a848fe.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:54 UTC	569	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:54 GMT Content-Type: image/webp Content-Length: 27232 Connection: close x-oss-request-id: 6650748B9979C736344CBDFB ETag: "2B544F2C4A3F58009D24E41A79A73488-1" Last-Modified: Fri, 05 Jan 2024 03:59:27 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 267 x-oss-hash-crc64ecma: 988663062298426198 CF-Cache-Status: HIT Age: 42667 Expires: Sat, 25 May 2024 02:56:54 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1b72d06f7dc-BNA
2024-05-24 22:56:54 UTC	800	IN	Data Raw: 52 49 46 46 58 6a 00 00 57 45 42 50 56 50 38 20 4c 6a 00 00 d0 72 01 9d 01 2a 8f 02 d4 01 3e 6d 34 95 48 24 23 22 21 26 75 e9 a0 80 0d 89 67 6e fa 6b 5a 01 8e ba 56 d0 41 fe fe 9f f5 af d9 e0 f3 7d 8a f4 90 78 80 62 52 fe 93 c5 f7 ea 9f 8d dc 24 1c df 13 dc 8f 9c 5f 99 fc c5 f8 96 a7 f9 3d f7 16 5a fe ff fc ef fd 6f 56 ff f4 3d 76 fe 89 ff a7 ee 0d fa ab e9 57 ff 4f b1 8f ea 9f f3 3d 52 7f 4b ff 35 fb 95 ef 47 e9 ff fb bf f9 9f 53 9f f6 fd 71 3e 8c 1e 5c 5e d4 ff ba 3e 9a f8 46 9e 69 f7 0f c1 7f cf 3e db fe 47 ad 65 d3 fe 0f fc bf 31 fe f0 27 ef fb 9f da 6f 1f ff 65 fe 8b d0 5f dc de 73 bf 9d da bf b7 ff c1 f4 0b f7 5f f0 be 7e 5f b1 e6 af ef fe a0 be 5a ff ea f0 84 fc 8f fd bf 60 7f d5 7e ae 3f ea 79 36 fd 9f fe 07 b0 ef 96 a7 ff ff 77 7f bb bf fd bd e2 Data Ascii: RIFFXjWEBPVP8 Ljr*>m4H$#"!&ugnkZVA}xbR$_=ZoV=vWO=RK5GSq>\^>Fi>Ge1'oe_s_~_Z`~?y6w
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 3e 98 e2 55 f6 ed 52 43 86 3f ff 23 f5 cf a5 cd 5d 53 76 47 07 26 09 b6 76 30 23 8e 73 a5 f6 2b b9 12 60 9e 46 85 32 c1 f5 b2 c5 6b 69 da de 5f 07 60 f7 9b 57 13 6a f3 7b bc d8 83 3d 89 ad 6b 24 76 bd fc 85 10 04 f9 9c 54 1b 62 fa 45 4a cf 52 e7 d1 1d 77 e1 4d 69 59 5f 6d 05 9f f9 b0 56 a2 da fc e4 a5 75 44 2b 42 02 50 2f 35 f2 91 e7 cd d8 b8 99 8c 72 a8 a4 8f 08 79 e3 ff d8 89 d0 50 81 14 72 3c db a8 5e e0 86 68 36 1b 42 f5 d6 b7 fb ee 50 67 90 3e bd 6c a5 f0 ba cb fe 2f 2b c9 48 48 57 c8 13 86 3b 8f b0 e0 33 be d5 ab cd ee f3 6a d9 04 d8 19 0b 28 49 c3 db 09 bd cf b3 25 a2 97 a7 21 da b3 64 e2 e1 ed d0 c5 de d6 94 b0 7e a8 23 57 0d 36 aa b8 9a f0 b0 77 c2 7f ed 63 1b 7c bd ef e7 7b 33 ce ce 64 7f 3a 31 34 ca a0 ce b1 80 9f 54 41 c3 09 8e 15 8a e3 87 e1 Data Ascii: >URC?#]SvG&v0#s+`F2ki_`Wj{=k$vTbEJRwMiY_mVuD+BP/5ryPr<^h6BPg>l/+HHW;3j(I%!d~#W6wc\|{3d:14TA
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 12 c7 b2 e7 26 3c 03 db 0d 05 18 68 0d 7a fe 3c 29 08 44 c8 18 ce 61 a4 5f 21 24 07 d6 60 27 2d c6 7c d5 e4 db 1a 5a b9 34 de 5b 4f ca 4f 5c 0e 20 32 e4 da 85 48 2d 2f d8 79 a7 ff 4c 34 a9 58 a9 3c d3 80 b3 97 e8 fd b6 a5 68 6a ef 44 0a 18 64 a1 2d d2 7f 3e 60 ff cf ae bc 73 ab fa ee e9 c7 22 6b 74 e5 2d 77 67 7a 74 0c a3 c1 a1 03 0b 7e 36 b6 d9 4c 20 b5 1b 3d c8 21 0d 32 38 3d 15 8f 63 1f 14 0e 15 fb ec d9 5b c7 85 31 cd 95 dd ed 2d 96 c8 4d 02 f8 73 62 61 5a 55 ef 12 f1 0d d7 84 6a 4c 88 b1 ad 73 4f 6c 40 b9 c8 84 53 c7 74 19 4c 0a 35 b3 89 a2 a6 39 53 7f bf 66 dd 16 da f9 b6 8f 2c 82 ec ed b2 bc 9e d3 8d 16 bd f5 65 59 6c d5 ee 21 cf 30 09 a8 1e ff 7f da 60 52 e5 64 52 61 ea e7 83 ae 66 52 fc 3d 36 28 ff ed 18 b2 40 66 41 3a 4f 10 fb 3c e9 f8 ed a3 87 Data Ascii: &<hz<)Da_!$`'-\|Z4[OO\ 2H-/yL4X<hjDd->`s"kt-wgzt~6L =!28=c[1-MsbaZUjLsOl@StL59Sf,eYl!0`RdRafR=6(@fA:O<
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: c4 c3 92 f8 aa 1d 49 01 8c 6a 2b 77 50 7d 9e b7 3c be 09 48 ff 95 02 5f 83 ae ae 00 1f 65 d2 c1 44 a9 c8 7f ec 85 e7 f5 61 0e 00 16 41 ad 80 9f d8 59 e9 97 15 28 d4 a0 96 2e 67 ec 28 a3 d1 df 99 00 00 00 75 a4 b3 b6 77 50 dd 2c 02 14 74 7a 77 fc d3 9c b2 2f ef b9 91 e9 0e 4e f7 be b6 d5 ce a6 e1 44 23 52 18 c0 59 b8 8b 0d 0d 45 0a f6 bc 07 e6 28 5e c8 ce 81 7b 14 35 37 df 51 51 73 56 a9 7f 97 fb c7 6d 3c ff 81 9e 62 6b 18 46 61 13 bc df d0 42 b3 54 a9 d9 d6 e6 f1 6f a5 5d 2f 17 8a 9c f9 fb 19 8b 24 57 51 04 bd f2 e8 80 b1 93 a9 6e 99 45 d6 90 a1 4d 57 78 7d 90 f0 08 d6 19 3e 83 cc 09 f9 a8 05 4f 3d 82 c8 21 cd fb c3 2b 9d 07 0b d8 17 3f 98 90 6e c8 fe c2 fd d8 69 0d 48 42 84 9e 36 bc a1 f7 ef 4b 39 b4 7e 66 54 26 9e 39 65 cd b1 13 f1 fd 0a 38 e3 a3 f6 18 Data Ascii: Ij+wP}<H_eDaAY(.g(uwP,tzw/ND#RYE(^{57QQsVm<bkFaBTo]/$WQnEMWx}>O=!+?niHB6K9~fT&9e8
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 4b 34 e5 85 9c 94 f8 af 76 b4 ee 62 04 dc a0 26 cc 52 52 5d 3c a1 84 b9 d0 64 10 76 12 cd 7c 4a c3 c7 67 2b 81 0b 57 47 cb 5c 21 b1 26 0e 8f a4 fd 80 74 71 1c 20 11 2a f1 9a 98 5c 84 3a c7 0f ab 42 c2 08 fc b8 07 c9 16 96 16 3c 62 aa c4 87 db 70 52 33 6d cc 79 b3 4a bd 7f 95 c0 12 02 d7 05 1d 24 34 31 45 0a 92 89 87 81 ff 76 3d 69 0a 4d b9 60 2a af 1d 7a 7d 14 a5 eb 2f 5f 72 22 6c d8 2e 79 12 ef 8a 85 a8 82 04 76 86 4e 44 8c 0f dc 77 58 03 2d 91 1c f8 75 3c 4e b0 0a 6a d5 d9 8b 3c ca 3b 27 7f 56 01 69 18 92 ee b1 0b ee a5 2b cc d6 6e 39 7d ef eb 08 90 64 c2 de a2 5b d2 c5 a7 bb 06 8c 5d 07 08 d7 12 44 91 7a 12 22 0c ef a2 1b f6 a3 a8 41 74 12 1c 33 61 cf 02 8a 70 21 e3 1d a7 02 60 64 74 fa 11 f7 91 8f 7d fb 99 87 4c 46 31 5e 68 72 36 fc ae 10 12 63 a9 c7 Data Ascii: K4vb&RR]<dv\|Jg+WG\!&tq \:B<bpR3myJ$41Ev=iM`z}/_r"l.yvNDwX-u<Nj<;'Vi+n9}d[]Dz"At3ap!`dt}LF1^hr6c
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: d1 ee e4 b0 39 3e 37 9d ff d2 0c 8d 43 b6 ff 7b 2f b4 01 38 88 49 ed 3d 28 a2 cd 24 bf 20 f6 2b 88 6a c2 29 2a 45 63 79 f0 48 32 a0 6e 36 ca 31 fa c2 d6 55 98 4e fc 57 1f 45 b0 a5 46 7f 66 a6 b3 32 73 06 90 dc 1c 47 f7 1c fc 9c a9 19 a4 f5 d7 d4 61 52 f7 49 01 77 e0 d7 2e f7 a9 9d b8 74 9b 4f 17 bd c8 04 f1 50 91 d0 99 f2 0b 4f e4 6d 61 c9 37 d7 04 6f cc e1 4c 7b b3 42 98 9a 85 88 0b fb 3f 03 d0 ca 2a a1 67 6d a3 e7 bf 35 fa e0 22 03 9c 37 e7 0f a1 da ad 38 c9 2d ab 8f 64 83 93 8a b5 68 49 56 21 c1 c4 7d 76 77 c1 72 92 1e 02 4d 1b 03 e1 ef c6 f7 f6 8f 2a 82 07 45 73 d9 8c 4f 84 88 a9 ee 60 ba fa 31 55 58 24 98 72 aa 7e 96 5e 93 6b 5a 38 84 c5 de 19 7f 62 08 df 88 69 1e 4d e1 d6 70 1d e1 bf 78 a0 da e8 8b 2a 94 59 6d 59 9c 48 f5 38 50 85 bb 2d 19 5d 4e 04 Data Ascii: 9>7C{/8I=($ +j)EcyH2n61UNWEFf2sGaRIw.tOPOma7oL{B?gm5"78-dhIV!}vwrMEsO`1UX$r~^kZ8biMpxYmYH8P-]N
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 31 06 51 ea f8 7a 05 cb b7 27 61 82 8f 93 01 2b 02 49 8d 93 65 cf c6 db 0a 30 86 52 ee 7a 24 09 db e3 d9 d9 34 31 c2 26 59 38 ca 3a c7 30 77 67 19 d9 b9 54 45 e0 0b f7 a1 87 91 f9 3d cb 71 2f 18 57 c4 c0 94 3e 84 38 3e cd f4 48 dd 83 f6 e1 72 e2 2d 32 da 9b b7 c9 74 e0 e1 9c 9d 3b 62 7e 6b 51 5e 74 74 86 03 6e 33 85 e8 ea 00 4f e5 66 aa 3a b9 4e 79 a4 55 38 45 f9 c4 cf e8 05 7b 39 8b ee f0 91 dc ec d5 3e 91 f9 58 15 3d 1b fe c3 73 37 d0 a7 65 7f 81 30 3d c9 f6 86 4d ba e8 f9 f4 8d 19 76 d9 52 20 95 b4 0f 7d b6 e3 b0 fb e0 e2 66 f7 fd 8f 71 fc cb 76 77 e3 bb 6d a2 af 0a 6d 9d 96 e1 4b 29 26 fc 07 12 fb 4d e8 da 1c a7 00 db 1d 18 49 6e 90 c6 72 3f 99 b4 e3 71 57 58 a5 87 ce 9f f1 98 94 5d 8d cf 0b 89 79 4d c3 44 62 d1 62 67 df b5 05 3d 03 ad 53 42 b2 81 2b Data Ascii: 1Qz'a+Ie0Rz$41&Y8:0wgTE=q/W>8>Hr-2t;b~kQ^ttn3Of:NyU8E{9>X=s7e0=MvR }fqvwmmK)&MInr?qWX]yMDbbg=SB+
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: a3 31 c1 27 04 b3 d3 c8 ad 4b b6 0c f7 b8 5c 2f a1 b2 63 b1 10 cd e0 83 fe a0 a0 6e 75 3f b3 61 49 5b 5b 25 91 ce 2a 10 95 97 65 28 8c 46 4e 70 13 17 d3 6a a6 6f 36 61 49 8e 1f b3 26 ac 9d 9f e0 b2 0c a2 5f ef f6 a0 59 35 0c 61 33 54 98 bb ff b4 ac 40 43 a5 27 20 ba f2 87 65 e9 5c 15 61 b7 83 b7 b9 2b b3 53 53 21 68 72 b7 f3 87 07 5f ae d9 b6 e3 f3 39 3c bb 5d 52 13 1c 84 2f 50 15 ae 02 27 42 ed 56 87 2b 64 6c 57 b8 3b 8d 6e 90 f0 d0 56 d7 53 e4 2e bb 04 af 9d fa 0c fb 26 3d d4 76 1f bc d4 89 24 05 cc c3 fd 92 b3 e2 08 52 18 fd 18 14 f0 1e bb 2f 9b 2d c4 17 16 8e 32 98 c5 6f 1d 37 5b f4 f3 18 85 82 57 eb 76 07 d3 e5 37 74 c3 03 c5 f1 50 8d f9 10 27 ac 1b f2 ec 1e 5b 5e 4b ca f1 3a 0f da aa 31 fd 70 64 69 8e e2 ec cf f3 f7 04 a2 2a 3e 7b e4 10 0e 8d 42 65 Data Ascii: 1'K\/cnu?aI[[%e(FNpjo6aI&_Y5a3T@C' e\a+SS!hr_9<]R/P'BV+dlW;nVS.&=v$R/-2o7[Wv7tP'[^K:1pdi>{Be
2024-05-24 22:56:55 UTC	1369	IN	Data Raw: 5e 94 be 5e c5 ff 1e c2 91 1f 71 1d 46 fe 33 82 5d 3e b3 4c 32 27 71 15 f2 ff 2e 13 84 5f 5a 9e 72 2a 34 95 9b 28 c2 44 12 e0 66 37 ce 40 72 cc 10 f7 25 ba 88 b7 bf e0 4f 7d 07 c7 a7 3e a8 eb ca 98 e9 bf 65 86 bd ca 2e 7e 33 47 78 a5 58 42 91 93 25 54 fe 81 cc b4 92 a6 ea 87 0f 12 6e 1d f8 e1 26 f4 ee a4 40 16 52 db dc 1c a8 aa a3 b0 f5 49 e4 11 31 4c bb f2 75 e9 cc 27 52 e7 15 16 e9 35 65 4f 38 24 d4 ae e9 66 d7 25 56 25 4f a6 91 55 14 a8 32 ff ea 6f 6a 4a ae 8a f8 e2 07 ee b9 bc 27 51 67 25 2a 4a 4e 6f ac 42 cb b1 88 3d b3 8f 32 49 74 7f 7c 0b a0 e6 bd 60 32 c2 44 1b 98 81 9e 36 72 79 e7 cd 12 6c 2e 45 bb 7d 5a 96 97 e9 6f b5 f2 9e 7a 91 17 2a 21 e6 3a 52 cb 5c 76 38 ad d1 d5 9d 16 d8 83 4d 07 50 26 42 86 6c 17 ba f0 fb de 04 0e 1b 26 9f 69 3b 59 da 6d Data Ascii: ^^qF3]>L2'q._Zr4(Df7@r%O}>e.~3GxXB%Tn&@RI1Lu'R5eO8$f%V%OU2ojJ'Qg%JNoB=2It\|`2D6ryl.E}Zoz*!:R\v8MP&Bl&i;Ym
2024-05-24 22:56:55 UTC	1369	IN	Data Raw: 34 37 aa a1 44 19 82 23 a7 05 fa 71 e7 04 65 da 75 93 44 00 57 cd 32 32 0b 0e 4f 7c df c1 fd 26 89 58 d6 cb ea 87 cf 4f 5e 82 af 62 c8 a5 cc 26 c9 28 f5 3c 41 15 9d 13 c5 6a d2 c0 e0 0a 97 a2 41 c2 01 df cc 90 fe 23 56 c9 9a 92 dd 2d b1 2b 7c 71 9a f4 4c a0 3d c7 52 07 41 51 2c c0 9d 5d 01 a2 81 a8 17 53 f9 aa 57 eb 12 a1 21 91 16 7e 45 71 fc f7 d9 e3 3f e4 e6 51 2f e6 a6 bb 7b 90 cf 77 6b c9 5a c2 da 7d fe 1c 72 d6 b2 46 85 5d 48 28 af 39 c3 82 f2 2b b2 5c f7 6b 4f d8 d6 f4 f2 77 71 ae 0a b7 53 e5 c8 62 f5 df 2e fe 31 db 5e 92 4d d8 0a 3c c7 fa 50 e0 a5 54 db 9d f4 82 60 5f 71 bc 48 fe 14 4e 84 50 b7 83 26 13 1c 23 cc df b1 3e 72 7d 71 b2 c6 ac 8d 6d 9a 05 db c7 23 37 89 65 71 80 10 9d a8 73 14 0d ca 1a 5a 57 b5 df 69 ce 6c a6 cc 62 ff 91 c2 a4 a3 a3 1f Data Ascii: 47D#qeuDW22O\|&XO^b&(<AjA#V-+\|qL=RAQ,]SW!~Eq?Q/{wkZ}rF]H(9+\kOwqSb.1^M<PT`_qHNP&#>r}qm#7eqsZWilb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49860	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:54 UTC	1122	OUT	GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412200&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:55 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49865	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:54 UTC	428	OUT	GET /uploader/30a95dee1357c4c153be7b33d4c6c34e.png?x-oss-process=image/interlace,1/format,webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:54 UTC	571	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:56:54 GMT Content-Type: image/webp Content-Length: 46084 Connection: close x-oss-request-id: 6650748B2CAF3630391D8BEE ETag: "29469F05BB5F22353CC4593079233F68-1" Last-Modified: Fri, 05 Jan 2024 04:00:38 GMT x-oss-object-type: Multipart x-oss-storage-class: Standard x-oss-server-time: 501 x-oss-hash-crc64ecma: 17800959005902537035 CF-Cache-Status: HIT Age: 42667 Expires: Sat, 25 May 2024 02:56:54 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1b72d2a6a7a-BNA
2024-05-24 22:56:54 UTC	798	IN	Data Raw: 52 49 46 46 fc b3 00 00 57 45 42 50 56 50 38 20 f0 b3 00 00 90 16 04 9d 01 2a 78 05 e8 03 3e 6d 34 97 49 24 22 a2 24 21 31 69 30 80 0d 89 69 6e 96 ad 59 bf 63 c4 9b ea 7f f8 d3 5f 85 52 85 ed 9c 8e f5 1e a6 67 9f 86 3d b9 aa 78 c8 fd 57 d2 06 9d ed 19 9e 00 9d b4 eb 87 6b 67 d3 b6 c2 f0 92 ec e7 a1 d7 a6 b7 fa 9d ec fe 43 d4 23 cd cb 38 6f ef ba 67 f9 ab 52 ab ff 1f 2c 13 e5 fb 42 fe e6 74 99 d1 3f ff a5 2d dc 7e be 8f 5a af 8b 96 9e 3e b5 9c 3d 8c 39 50 fd 41 73 91 f3 6e f3 88 f4 64 ea a9 de a9 fd c5 f4 80 ce 30 ff df e7 87 e7 3f e0 7f ba f1 57 f3 df 70 cf 72 7f c2 7c f7 62 5f e7 3c 10 fb 4d fc 6f f0 5f bb ff 15 be f9 bc 77 fa 2b ff 1f f9 2f 60 ef c8 bf 9b 7f 94 fe e5 fb cb fe 2f e2 63 fb 3c 5f f6 ff 32 9f 6f fe e1 ff 7f fc 57 b1 4f ec 78 cb e5 0b ff 27 Data Ascii: RIFFWEBPVP8 *x>m4I$"$!1i0inYc_Rg=xWkgC#8ogR,Bt?-~Z>=9PAsnd0?Wpr\|b_<Mo_w+/`/c<_2oWOx'
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 2f 11 ff 6c e8 f0 a5 05 04 79 41 41 1e 50 50 47 94 14 11 e5 05 04 79 41 41 1e 50 50 47 94 14 11 e5 05 04 79 41 41 1e 50 50 30 49 b7 14 da c0 80 b7 6a 79 ea 9f c8 a9 0d 59 a5 00 c6 92 03 a8 cb 92 4b 06 a0 79 b3 2c 78 ff 55 e1 51 38 0c 6f e2 68 a7 53 27 2b 19 13 6a e3 ac da b8 eb 36 ae 3a cd ab 8e b3 6a e3 ac da b8 eb 36 ae 3a cd ab 8e b3 6a e3 ac da b8 eb 36 ae 03 97 9d cc 90 f8 dd 4e ce 6e 28 91 c6 2d 47 7e fd 68 c1 3f 53 02 78 30 78 66 66 01 e9 b4 d1 61 e8 d1 e0 49 ed cc a2 53 5f 59 8e fe 0d c1 12 7f 95 7a 3e dc 4c 0e 02 b9 7d 90 77 3c b3 d6 ae 94 8a 99 32 b8 eb 36 ae 3a cd ab 8e b3 6a e3 ac da b8 eb 36 ae 3a cd aa 28 d8 14 78 73 f7 79 cf d0 bf 87 c4 d2 ae 3a cd ab 8e b3 6a df e0 53 52 65 27 da cf ea d8 8b 51 e8 f1 30 dc 1c 69 f5 e7 4b 12 fe 04 9b a2 f2 Data Ascii: /lyAAPPGyAAPPGyAAPP0IjyYKy,xUQ8ohS'+j6:j6:j6Nn(-G~h?Sx0xffaIS_Yz>L}w<26:j6:(xsy:jSRe'Q0iK
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: 1f 85 39 9d eb ed 0b e3 e1 e8 78 8a 17 dc 22 1b a4 eb 9f fb 38 c5 86 76 42 b9 87 2c 74 d8 c4 44 e0 3e b4 35 a3 d8 74 58 6e a3 bf 9b 56 61 db b5 39 a6 51 f7 e8 d5 1c 3a 20 ba 38 4c 7d cc ad e9 05 30 50 47 94 14 11 e5 05 04 79 41 41 1e 4f a0 50 eb ff 10 0f 0f cb f9 bb 38 4a 35 ca 4d db c9 a8 f8 af b5 9f d5 59 e4 ec 1c 75 ac 4e 65 a3 59 ad b6 bd f7 4e 14 9a 84 76 ad 26 ee be ef 29 4e 22 93 fb fe 53 ec e2 a7 c5 cf 40 47 9b 52 b5 20 51 cd b8 95 60 22 9d bf 65 cb f8 1b 94 ff b9 e3 f8 a8 02 a1 13 46 7e 42 1c a8 24 f7 3a 8a 73 53 d1 5d 0f 66 dc f3 26 e5 bb f9 62 87 b3 25 68 17 d2 aa 61 ee 64 4d b8 02 6d 20 13 0a ee 6e d0 d3 61 ec 8b 75 cf 46 a8 69 58 95 a0 54 8a 45 36 77 47 56 ab 8e b3 6a e3 ac da b8 eb 36 ae 36 9f f0 33 a3 85 02 aa 5c 68 05 59 1c ec d8 32 32 95 Data Ascii: 9x"8vB,tD>5tXnVa9Q: 8L}0PGyAAOP8J5MYuNeYNv&)N"S@GR Q`"eF~B$:sS]f&b%hadMm nauFiXTE6wGVj663\hY22
2024-05-24 22:56:54 UTC	1369	IN	Data Raw: ca 84 c2 6f 4c 0e 23 5d 9f 77 b9 e3 e4 a4 dd b2 3e db 7a d1 3c 1c ce 24 1e 05 1d 05 51 fe 35 4a a2 12 5a 3f 4c 14 11 e5 05 04 79 41 41 1e 45 91 4c f6 31 5f ea cf 27 10 48 aa f2 21 74 11 67 18 38 75 c7 aa a4 1a e0 90 6a c8 45 a5 3d b1 1d cf c1 bd 43 eb b1 ad 86 33 6b 44 86 1f a0 30 74 d4 88 18 47 d1 07 0b 75 1d ad 95 6f 19 41 71 4c b1 c5 eb 2f b3 1d 4f ee 22 fa 70 b7 9f b3 dd e3 a1 4f 86 f1 49 1b 78 29 8c c2 59 59 68 7c 05 1f 6a 56 76 f8 d9 23 e3 fe d5 fd 0d 7b 49 24 77 ad e6 ac 4a 57 c0 e9 0e 0d 25 85 f9 bb 31 b3 05 18 a9 28 e0 1d bf e3 d1 f3 52 b4 5e ca 22 a1 7b a3 69 68 30 97 bd 54 a8 ac e1 6d f8 06 49 00 d5 2d cc 7a ab 9d f1 22 3d 22 f9 63 ba d3 d7 f8 c3 de 8d 2d b5 80 44 df 6b 2d f2 b2 35 58 9d 09 09 db 9f 3e b0 34 07 54 d5 52 18 02 5d f0 b6 d8 6f 72 Data Ascii: oL#]w>z<$Q5JZ?LyAAEL1_'H!tg8ujE=C3kD0tGuoAqL/O"pOIx)YYh\|jVv#{I$wJW%1(R^"{ih0TmI-z"="c-Dk-5X>4TR]or
2024-05-24 22:56:55 UTC	1369	IN	Data Raw: 81 ae 13 3e 3e 65 2f c1 39 23 86 8f b2 c4 2c 4a f7 03 40 a3 50 40 3f cb b2 a0 11 22 69 53 b3 f0 9b dd 43 d7 f6 29 34 aa a8 52 25 82 4d b6 22 35 7f 7c 2b 65 b3 85 97 63 2a e2 48 95 bf c1 ea 12 68 73 ca d9 b0 f9 17 e7 cf c1 ac 1e d2 be 48 9b b6 e4 8a 56 14 a0 42 49 50 5b b7 f1 ad 4a b3 7e f5 7d 5d 59 0b 35 7a c7 d2 15 e3 0c e6 7b 12 da ff 9c cb 30 e8 b8 5c 33 96 5f e6 a3 17 6a cf 49 3f 13 dc c6 fa c2 ad 81 1c fa c0 c1 a0 54 65 7d cd 37 84 62 d5 e3 df 75 61 dd 08 ed 1d d3 f8 21 b1 6b 9a 2a 3e 9c 4e 6b f8 60 40 dd e8 86 ad 93 66 f9 92 26 f2 89 41 da 8b 80 a5 0f bd 74 20 24 6d e6 53 f4 63 b9 b9 9c e0 d0 da 0a 47 19 fb 0c 8e bc 5a ef b3 9b 0b 5b 59 0e f4 d9 b9 2d 5d d3 85 5e e4 6c 4b bd bc ad 82 81 cb 74 b1 26 07 93 b7 ab 5c c7 2d 64 aa c1 22 0a da 48 70 50 93 Data Ascii: >>e/9#,J@P@?"iSC)4R%M"5\|+ecHhsHVBIP[J~}]Y5z{0\3_jI?Te}7bua!k>Nk`@f&At $mScGZ[Y-]^lKt&\-d"HpP
2024-05-24 22:56:55 UTC	1369	IN	Data Raw: d7 98 c2 d1 b5 20 2e ca d0 f0 7f 0c af 39 eb 4f 1a 7f 81 53 18 08 70 88 33 91 bd 9f 63 30 aa 08 d6 13 5e f5 20 26 77 5e 14 bf 65 34 ab 8e b3 56 2e 41 77 c0 16 3c 80 52 a2 ee e1 07 2e 17 1e 94 81 5b 15 7d 16 8c c9 df 03 a0 03 98 06 b7 a6 cf e1 20 fb 3e 09 7e fd 2f c8 7b 2f 84 f8 92 13 75 05 20 9f 4d ec 58 7a de 4a ac 75 62 27 5f f1 46 90 47 52 de d2 ab 15 1e e1 7e 76 9a 8e 7d 6a ea df 25 7b 56 0f ac bb 52 9e ce 1f 1b 87 40 de 65 a7 67 1d 49 d0 f0 15 ab 2d 0c 68 ee 25 b0 0c 12 94 bf 2a bc f4 1e eb d3 47 49 5e d6 04 f3 a8 3f 0c f8 71 16 24 2d e3 ca 3f a8 bd 3f 8b ad 98 12 df 54 c2 8e 67 d3 a4 b9 80 a1 8c bc 9c c3 1f 85 ce ce 9e 17 43 92 94 21 57 9e f7 6f f6 58 f0 3d 52 69 e6 ee 2f 79 bb 02 c6 84 ec fd d4 60 bc 6a f3 04 de f6 90 6a 4a 37 e8 fd 78 9e f7 e2 53 Data Ascii: .9OSp3c0^ &w^e4V.Aw<R.[} >~/{/u MXzJub'_FGR~v}j%{VR@egI-h%*GI^?q$-??TgC!WoX=Ri/y`jjJ7xS
2024-05-24 22:56:55 UTC	1369	IN	Data Raw: 88 e5 40 d9 68 9e 7c d2 04 44 10 14 68 55 f3 94 1c 85 fc a6 de 27 b8 e9 7c ab 38 61 d1 e0 ba 0d 9f f2 fc 47 b0 4c b3 e9 69 eb 6b f0 a8 99 a6 a4 86 a2 d6 69 88 c5 53 57 4e 7e 71 cd 8d f4 6c 9c 29 54 90 52 4b 29 b0 9e f6 a2 5e 09 40 b6 f5 b9 04 2d bd bb 76 4f 24 57 0b e7 2c 4e 3e 2e 69 06 24 81 5e 22 a0 55 8d 03 7e 91 b8 cc ac 08 dd 35 d5 29 62 58 ff 82 dd 88 e4 b6 90 1f 63 51 c6 11 ab 4e 6a 36 1f 31 fa bc a3 49 98 26 8c 63 b0 a9 79 a3 bf 95 f7 f1 01 ed ad 2e 67 af ae 14 da 46 5e 3d 7e a5 da e2 8b 1d 90 5c 54 c1 5b 84 88 d5 a4 92 63 8d 2e 3b 0d ba 91 2a a2 23 f7 ab 17 3d c0 1a 66 25 f1 ba e6 1b 9f f1 80 7a 3f 3f 8d de 0c 8d 3c 14 78 91 89 81 70 6a 25 36 55 0c 44 24 ea 29 4f 10 de 8d 30 32 40 c1 8b 9d 9b 6e 83 63 8b 93 44 e8 5b bd 26 b9 9a a1 c1 b2 65 c8 8a Data Ascii: @h\|DhU'\|8aGLikiSWN~ql)TRK)^@-vO$W,N>.i$^"U~5)bXcQNj61I&cy.gF^=~\T[c.;*#=f%z??<xpj%6UD$)O02@ncD[&e
2024-05-24 22:56:55 UTC	1369	IN	Data Raw: 65 c9 45 ec e7 32 87 7f c7 c5 e2 ec 21 2f 7b 02 64 78 4f 61 db fa 76 b7 cc 36 d1 fc 5c 71 19 1e 8f b1 e4 6f e0 b1 5a 8c f8 33 17 74 92 f8 58 ec 5e b9 1a e0 32 48 8d 05 ef 70 fc db 0f 74 d6 29 ff 02 7e 99 e6 ca b3 4a 96 e4 ce bb 37 9b d8 40 d8 d5 bf 49 ae 7f ac 6b f2 62 b0 57 a1 16 81 f0 7d 6c 4d 3c a7 5e 43 07 32 37 c2 1c f3 b6 d9 fd 9e b1 4b ad 79 3a 74 42 60 7e 2e e7 ec 0f d1 06 0f c4 1c 45 e7 51 e2 00 67 97 79 26 b7 8c 3a 6c 0f 1b 84 bd 11 79 e2 14 4b e3 6f 79 1d f3 c9 8f 60 ac ae 60 3c 70 c5 3d e6 f3 83 90 b4 21 d8 d9 5d 5f 0f f3 e3 e6 da a2 7b 3c 23 54 cd cf 34 3b 98 b3 11 88 9a 97 8c e1 0b 4d e0 af e8 dd 1c e5 5f 63 92 d2 88 5f a8 e3 0e dd 87 93 ca 9e 2f 09 0f 23 2f e6 f9 e4 75 6f 89 f5 e2 ff d7 18 cf f3 c5 e4 af 48 cb fd 6f 27 e0 09 89 cd 8d 59 70 Data Ascii: eE2!/{dxOav6\qoZ3tX^2Hpt)~J7@IkbW}lM<^C27Ky:tB`~.EQgy&:lyKoy``<p=!]_{<#T4;M_c_/#/uoHo'Yp
2024-05-24 22:56:55 UTC	1369	IN	Data Raw: 60 37 62 86 c5 ca 19 4d 3c ea 94 ca 4f d8 1b 90 0f 22 d3 53 a8 05 b5 7a 46 57 45 e9 33 99 77 7b 1c 1a de 4d e6 fd e7 ea 7a 50 d6 c8 ed 7a 38 e7 d5 52 e0 6b ce bf 3c 6c 21 b2 06 a9 ad 1d ef 44 bc a5 13 60 00 00 05 c4 10 a7 97 36 38 bb 79 8b d3 fc a6 36 c3 ea ab 51 15 f2 ef 01 8f 2f 4a b9 8a 53 65 3e 4c 97 fe c8 1c fa 70 6c fc 7c ae 17 46 71 23 59 4b 30 e0 a0 79 13 61 a5 5c 5c 6d 25 4a 83 83 33 46 54 ef 22 f0 e6 31 0a 53 de 96 a3 ec b0 0e 11 c8 64 9c 29 34 8c d9 ea bd 12 55 8b 99 9d c6 b8 96 21 9c fc 86 89 e7 e3 18 5c 19 5f 6d 80 52 d4 20 28 df 34 bd 9f a1 4f cd 54 ea a5 c7 66 35 52 c2 72 f6 9e 11 46 7f c4 c7 14 9d 04 d0 35 cb fe f3 9b 8f 7f e6 7b c3 a8 76 77 03 ad d1 01 8f da 1c 42 ae 0f 8f 61 96 87 a5 39 fd 53 85 b0 f6 e7 ff 6a 0c 1a 52 37 d1 7f 2f 2a 7e Data Ascii: `7bM<O"SzFWE3w{MzPz8Rk<l!D`68y6Q/JSe>Lpl\|Fq#YK0ya\\m%J3FT"1Sd)4U!\_mR (4OTf5RrF5{vwBa9SjR7/*~
2024-05-24 22:56:55 UTC	1369	IN	Data Raw: 40 00 69 d5 c3 c8 ba 92 51 8e 4c b0 f0 9a ef 4c 41 84 ca f4 92 4e 03 57 6e 31 2d 74 b0 88 e0 a1 68 07 e3 b3 b0 ec 6d d2 33 44 1f aa d6 a3 89 71 75 fd 40 a9 15 bd d7 e3 cf 1e f6 ea da 4c 68 3b 48 4f c3 15 e6 57 31 c4 dd 49 fc c7 c4 25 a5 47 4f b4 f6 78 f9 2a 6b e4 82 8e 45 63 31 0e 1c f3 01 70 3b 8f 4e 17 b3 d0 da 9a a6 11 1c 73 77 dc 5b de a8 9b c6 e9 e2 01 e1 3f cb f1 21 bc 92 09 6b 81 3a 19 54 92 34 22 56 54 00 5b ca db 60 26 55 65 5b 59 bb d7 1b 93 7c 27 ae 95 66 26 cd d9 ab ab 2b 82 25 08 d6 fb 0a a9 12 22 18 86 f2 46 9d 29 c0 4f a0 18 e5 43 2c 85 07 c6 41 62 00 83 8a 69 04 b2 c2 fd d0 bf a0 eb 42 06 d4 b6 c1 51 e4 88 17 b8 99 a0 1a f1 25 45 c9 49 9a 99 16 c5 8a 33 79 61 79 1d 61 b5 b2 2c 41 93 8a 77 a3 ce ea 5d ae 31 4b 73 ab f3 28 34 42 03 de 85 ef Data Ascii: @iQLLANWn1-thm3Dqu@Lh;HOW1I%GOx*kEc1p;Nsw[?!k:T4"VT[`&Ue[Y\|'f&+%"F)OC,AbiBQ%EI3yaya,Aw]1Ks(4B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49862	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:54 UTC	1237	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412200&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:55 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0xbb4fa5585ce11ee5","source_keys":["1","2"]},{"key_piece":"0xad62cbaed5dcda6b","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:56:55 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:56:55 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:56:55 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49861	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:54 UTC	1122	OUT	GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412205&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:55 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=92, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49859	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:54 UTC	940	OUT	POST /buyer/express/free-express HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 32 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/categories Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
2024-05-24 22:56:54 UTC	32	OUT	Data Raw: 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 22 22 2c 22 74 6f 74 61 6c 22 3a 22 30 2e 30 30 22 7d Data Ascii: {"country_id":"","total":"0.00"}
2024-05-24 22:56:55 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:55 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:55 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:55 UTC	82	IN	Data Raw: 34 37 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 76 61 6c 22 3a 30 7d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 36 3a 35 35 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 47{"code":0,"msg":"success","data":{"val":0},"now":"2024-05-25 06:56:55"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49863	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:55 UTC	581	OUT	GET /buyer/cart HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
2024-05-24 22:56:55 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:55 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:55 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:55 UTC	1213	IN	Data Raw: 34 62 31 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 65 78 70 72 65 73 73 22 3a 7b 22 68 61 73 5f 69 6e 73 75 72 61 6e 63 65 22 3a 22 30 22 2c 22 69 6e 73 75 72 61 6e 63 65 5f 73 65 6c 65 63 74 22 3a 22 30 22 2c 22 69 73 5f 6d 61 74 63 68 22 3a 30 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 73 65 6c 65 63 74 65 64 22 3a 30 2c 22 6c 69 73 74 22 3a 5b 5d 7d 2c 22 63 61 72 74 22 3a 7b 22 74 79 70 65 22 3a 22 22 2c 22 74 6f 6b 65 6e 22 3a 22 37 64 32 31 38 38 39 64 31 39 34 38 64 35 39 61 35 32 34 30 65 63 34 38 38 30 38 33 32 39 64 66 22 2c 22 77 65 69 67 68 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f 61 6d 6f 75 6e 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f Data Ascii: 4b1{"code":0,"msg":"success","data":{"express":{"has_insurance":"0","insurance_select":"0","is_match":0,"error_code":0,"selected":0,"list":[]},"cart":{"type":"","token":"7d21889d1948d59a5240ec48808329df","weight":"0.00","product_amount":"0.00","product_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49866	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:55 UTC	1214	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412205&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:55 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x574c259545720cd1","source_keys":["1","2"]},{"key_piece":"0xdb8fa5999d29a54c","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:56:55 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:56:55 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:56:55 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-05-24 22:56:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49867	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:55 UTC	888	OUT	GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412187&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:55 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49868	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:55 UTC	1122	OUT	GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412208&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:55 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49869	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:55 UTC	925	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412187&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:55 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:56:55 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49871	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:55 UTC	888	OUT	GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412200&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:56 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49870	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:55 UTC	1214	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412208&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:56 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x4172baf88b225bc1","source_keys":["1","2"]},{"key_piece":"0x0200d14e8dc1bf6f","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:56:56 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:56:56 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:56:56 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49872	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:55 UTC	888	OUT	GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412205&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:56 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49873	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:55 UTC	925	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412200&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:56 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:56:56 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49874	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:56 UTC	597	OUT	GET /buyer/express/free-express HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
2024-05-24 22:56:56 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:56 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:56 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:56 UTC	82	IN	Data Raw: 34 37 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 76 61 6c 22 3a 30 7d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 36 3a 35 36 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 47{"code":0,"msg":"success","data":{"val":0},"now":"2024-05-25 06:56:56"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49875	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:56 UTC	888	OUT	GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412208&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:56 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:56:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49876	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:56 UTC	925	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412205&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:56 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:56:56 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49877	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:56 UTC	925	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fcategories&rl=&if=false&ts=1716591412208&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591407554&coo=false&dpo=&eid=bx2ngxm25b8PageView1716591407243&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:56:57 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:56:57 UTC	1855	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49879	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:56:58 UTC	894	OUT	GET /products?handler=whiskys HTTP/1.1 Host: www.cravob.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
2024-05-24 22:56:58 UTC	302	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:56:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:56:58 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:56:58 UTC	16082	IN	Data Raw: 31 66 66 34 38 0d 0a 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 67 65 6e 65 72 61 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 41 6d 61 7a 6f 6e 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c Data Ascii: 1ff48 <!DOCTYPE html><html lang="en" class="general"><head> <meta charset="UTF-8"> <meta name="keywords" content="Amazon"> <titl
2024-05-24 22:56:58 UTC	16384	IN	Data Raw: 69 6c 79 3a 4d 6f 6e 74 73 65 72 72 61 74 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 73 68 6f 70 79 6d 6e 2e 63 6f 6d 2f 6c 69 71 75 69 64 2f 62 75 79 65 72 2f 70 75 62 6c 69 63 2f 63 73 73 2f 66 6f 6e 74 2f 4d 6f 6e 74 73 65 72 72 61 74 2d 53 65 6d 69 42 6f 6c 64 2e 74 74 66 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 61 70 65 79 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 73 68 6f 70 79 6d 6e 2e 63 6f 6d 2f 6c 69 71 75 69 64 2f 62 75 79 65 72 2f 70 75 62 6c 69 63 2f 63 73 73 2f 66 6f 6e 74 2f 61 72 61 70 65 79 2d 69 74 61 6c 69 63 2e 74 74 66 29 3b 66 6f 6e 74 2d 77 Data Ascii: ily:Montserrat;src:url(https://fonts.shopymn.com/liquid/buyer/public/css/font/Montserrat-SemiBold.ttf);font-weight:700;font-style:normal}@font-face{font-family:Arapey;src:url(https://fonts.shopymn.com/liquid/buyer/public/css/font/arapey-italic.ttf);font-w
2024-05-24 22:56:58 UTC	16384	IN	Data Raw: 6e 74 65 6e 74 20 2e 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 74 6f 74 61 6c 2d 70 72 69 63 65 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 72 65 63 65 6e 74 6c 79 2d 6f 72 64 65 72 73 2d 62 6f 78 20 2e 6f 72 64 65 72 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 72 65 63 65 6e 74 6c 79 2d 6f 72 64 65 72 73 2d 62 6f 78 20 2e 6f 72 64 65 72 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 6f 70 65 72 61 74 69 6f 6e 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 72 65 63 65 6e 74 6c 79 2d 6f 72 64 65 72 73 2d 62 6f 78 20 2e 6f 72 64 65 72 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 6c Data Ascii: ntent .table-content .total-price,.account-main .recently-orders-box .order-box-content .table-content .information,.account-main .recently-orders-box .order-box-content .table-content .operation,.account-main .recently-orders-box .order-box-content .tabl
2024-05-24 22:56:58 UTC	16384	IN	Data Raw: 6e 74 2d 73 65 63 75 72 69 74 79 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 69 74 79 2d 70 61 73 73 77 6f 72 64 20 2e 73 65 63 75 72 69 74 79 2d 62 6f 78 20 2e 73 65 63 75 72 69 74 79 2d 69 6e 70 75 74 2d 62 6f 78 2d 72 6f 77 20 73 65 6c 65 63 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 36 36 7d 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 61 63 63 6f 75 6e 74 2d 73 65 63 75 72 69 74 79 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 69 74 79 2d 65 6d 61 69 6c 20 2e 73 65 63 75 72 69 74 79 2d 62 6f 78 20 2e 73 65 63 75 72 69 74 79 2d 69 6e 70 75 74 2d 62 6f 78 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 3a 66 6f 63 75 73 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 61 63 63 6f 75 6e 74 2d 73 Data Ascii: nt-security-content .security-password .security-box .security-input-box-row select:hover{border-color:#666}.account-main .account-security-content .security-email .security-box .security-input-box input:not([type=checkbox]):focus,.account-main .account-s
2024-05-24 22:56:58 UTC	16384	IN	Data Raw: 6d 79 2d 63 6f 75 70 6f 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 65 6d 2e 73 65 6c 65 63 74 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 63 6f 75 70 6f 6e 5f 73 65 6c 65 63 74 65 64 2e 70 6e 67 29 7d 2e 6d 79 2d 63 6f 75 70 6f 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 65 6d 2e 65 78 70 69 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 63 6f 75 70 6f 6e 5f 64 69 73 61 62 6c 65 64 2e 70 6e 67 29 7d 2e 6d 79 2d 63 6f 75 70 6f 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 65 6d 2d 63 6f 6e Data Ascii: my-coupon-content .coupon-item-content .coupon-item.selected{background-image:url(../img/coupon_selected.png)}.my-coupon-content .coupon-item-content .coupon-item.expired{background-image:url(../img/coupon_disabled.png)}.my-coupon-content .coupon-item-con
2024-05-24 22:56:58 UTC	16384	IN	Data Raw: 2d 20 33 32 70 78 29 7d 7d 0a 2e 62 6c 6f 67 2d 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 63 6f 6c 6f 72 3a 23 32 36 32 36 32 36 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 33 32 70 78 20 35 36 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 32 36 34 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 67 61 70 3a 33 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4f 70 65 6e 20 53 61 6e 73 27 2c 73 61 Data Ascii: - 32px)}}.blog-section{display:flex;text-align:left;color:#262626;padding:20px 32px 56px;max-width:1264px;box-sizing:border-box;margin:0 auto;gap:32px;font-size:20px;line-height:1.4;justify-content:space-between;font-weight:400;font-family:'Open Sans',sa
2024-05-24 22:56:58 UTC	16384	IN	Data Raw: 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 2c 38 70 78 29 3b 6c 65 66 74 3a 35 36 70 78 7d 2e 63 61 72 74 6c 69 73 74 2d 64 69 73 63 6f 75 6e 74 2d 74 69 70 73 2e 64 69 73 63 6f 75 6e 74 2d 74 69 70 73 2d 2d 73 68 6f 77 7b 6f 70 61 63 69 74 79 3a 31 3b 7a 2d 69 6e 64 65 78 3a 32 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 58 28 32 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 2d 31 30 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 58 28 32 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 2d 31 30 30 25 29 7d 2e 63 61 72 74 6c 69 73 74 2d 64 69 73 63 6f 75 6e Data Ascii: tion:absolute;bottom:0;transform:translate(0,8px);left:56px}.cartlist-discount-tips.discount-tips--show{opacity:1;z-index:2;-webkit-transform:rotateX(20deg) scale(1) translate(0,-100%);transform:rotateX(20deg) scale(1) translate(0,-100%)}.cartlist-discoun
2024-05-24 22:56:58 UTC	16384	IN	Data Raw: 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 63 6f 6c 6f 72 50 69 65 63 65 4c 69 73 74 20 2e 63 6f 6c 6f 72 50 69 63 65 2d 6c 69 73 74 20 2e 73 77 61 74 63 68 2d 65 6c 65 6d 65 6e 74 20 2e 61 63 74 69 76 65 20 2e 73 65 74 43 6f 6d 6d 65 6e 73 7b 77 69 64 74 68 3a 32 32 70 78 3b 68 65 69 67 68 74 3a 32 32 70 78 7d 2e 63 6f 6c 6f 72 50 69 65 63 65 4c 69 73 74 20 2e 63 6f 6c 6f 72 50 69 63 65 2d 6c 69 73 74 20 2e 63 6f 6d 6d 65 6e 73 7b 77 69 64 74 68 3a 32 36 70 78 3b 68 65 69 67 68 74 3a 32 36 70 78 3b 70 61 64 64 69 6e 67 3a 32 70 78 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 Data Ascii: er;text-align:center;border:2px solid #000;width:24px;height:24px}.colorPieceList .colorPice-list .swatch-element .active .setCommens{width:22px;height:22px}.colorPieceList .colorPice-list .commens{width:26px;height:26px;padding:2px;border:2px solid trans
2024-05-24 22:56:58 UTC	16384	IN	Data Raw: 65 2d 70 72 6f 64 75 63 74 2d 6d 6f 64 61 6c 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 6c 65 66 74 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 20 2e 74 69 74 6c 65 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 31 32 70 78 20 38 70 78 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 0d 0a 66 66 66 38 0d 0a 6f 64 75 63 74 2d 63 6f 6e 74 65 6e 74 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 6d 6f 64 61 6c 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 6c 65 66 74 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 20 2e 64 65 73 63 72 69 70 74 69 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 20 31 32 70 78 7d 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 63 6f 6e 74 65 6e Data Ascii: e-product-modal .customize-left .swiper-slide .title{margin:0 auto;padding:20px 12px 8px 12px;text-align:center}.customize-prfff8oduct-content .customize-product-modal .customize-left .swiper-slide .description{padding:0 12px}.customize-product-conten
2024-05-24 22:56:58 UTC	16384	IN	Data Raw: 65 6e 74 3a 22 5c 65 36 39 38 22 7d 2e 69 63 6f 6e 2d 4c 5f 61 69 78 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 39 22 7d 2e 69 63 6f 6e 2d 4c 5f 64 69 61 6e 7a 69 79 6f 75 6a 69 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 62 22 7d 2e 69 63 6f 6e 2d 4c 5f 64 69 6e 67 77 65 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 63 22 7d 2e 69 63 6f 6e 2d 4c 5f 73 68 6f 75 6a 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 65 22 7d 2e 69 63 6f 6e 2d 4c 5f 67 75 6b 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 61 30 22 7d 2e 69 63 6f 6e 2d 4c 5f 77 75 6c 69 75 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 61 32 22 7d 2e 69 63 6f 6e 2d 4c 5f 77 65 6e Data Ascii: ent:"\e698"}.icon-L_aixin:before{content:"\e699"}.icon-L_dianziyoujian:before{content:"\e69b"}.icon-L_dingwei:before{content:"\e69c"}.icon-L_shouji:before{content:"\e69e"}.icon-L_guke:before{content:"\e6a0"}.icon-L_wuliu:before{content:"\e6a2"}.icon-L_wen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	49880	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:03 UTC	619	OUT	GET /wp-includes/img/pro-shipping-protection.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:03 UTC	178	IN	HTTP/1.1 403 Forbidden Date: Fri, 24 May 2024 22:57:03 GMT Content-Type: text/html Content-Length: 131 Connection: close Server: cloudflare CF-RAY: 8890e1edda11f7dc-BNA
2024-05-24 22:57:03 UTC	131	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 70 6c 65 61 73 65 20 64 6f 6e 27 74 20 6d 65 73 73 20 61 72 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <meta charset="UTF-8"> <title>please don't mess around</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	49881	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:03 UTC	719	OUT	GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "CAE408692E9DF180175752E8BC159AD1" If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
2024-05-24 22:57:03 UTC	542	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:03 GMT Connection: close x-oss-request-id: 6650748AF488A53436FC7D32 ETag: "CAE408692E9DF180175752E8BC159AD1" Last-Modified: Tue, 31 Oct 2023 09:59:39 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3292476528251743927 x-oss-storage-class: Standard Content-MD5: yuQIaS6d8YAXV1LovBWa0Q== x-oss-server-time: 38 CF-Cache-Status: HIT Age: 42677 Expires: Sat, 25 May 2024 02:57:03 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1eece4ff7c4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	49884	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:04 UTC	638	OUT	GET /liquid/buyer/public/js/plug/Swiper.js HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ee8-1e6ff" If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
2024-05-24 22:57:04 UTC	611	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:04 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-1e6ff" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367905 Expires: Sat, 25 May 2024 02:57:04 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1f27fa0f7e8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	49882	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:04 UTC	659	OUT	GET /liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66504476-188b7" If-Modified-Since: Fri, 24 May 2024 07:40:38 GMT
2024-05-24 22:57:04 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:04 GMT Connection: close last-modified: Fri, 24 May 2024 07:40:38 GMT vary: Accept-Encoding etag: W/"66504476-188b7" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54126 Expires: Sat, 25 May 2024 02:57:04 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1f28f1c6a7a-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	49883	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:04 UTC	614	OUT	GET /wp-includes/img/shipping-insurance.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:04 UTC	178	IN	HTTP/1.1 403 Forbidden Date: Fri, 24 May 2024 22:57:04 GMT Content-Type: text/html Content-Length: 131 Connection: close Server: cloudflare CF-RAY: 8890e1f288faf7d0-BNA
2024-05-24 22:57:04 UTC	131	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 70 6c 65 61 73 65 20 64 6f 6e 27 74 20 6d 65 73 73 20 61 72 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <meta charset="UTF-8"> <title>please don't mess around</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	49885	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:04 UTC	485	OUT	GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "CAE408692E9DF180175752E8BC159AD1" If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
2024-05-24 22:57:04 UTC	542	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:04 GMT Connection: close x-oss-request-id: 6650748AF488A53436FC7D32 ETag: "CAE408692E9DF180175752E8BC159AD1" Last-Modified: Tue, 31 Oct 2023 09:59:39 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3292476528251743927 x-oss-storage-class: Standard Content-MD5: yuQIaS6d8YAXV1LovBWa0Q== x-oss-server-time: 38 CF-Cache-Status: HIT Age: 42678 Expires: Sat, 25 May 2024 02:57:04 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1f589d0f7c4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	49886	103.160.204.8	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:04 UTC	618	OUT	GET /uploader/9f39b843564a229065a9a9a6224cc6dd.jpg HTTP/1.1 Host: cdn.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:05 UTC	561	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:05 GMT Content-Type: image/jpeg Content-Length: 276363 Connection: close x-oss-request-id: 66511B41D31A233239AC67F8 ETag: "8F8B3C6B6969EA183F2628FB3AE247B2-1" Last-Modified: Tue, 08 Aug 2023 07:12:40 GMT x-oss-object-type: Multipart x-oss-hash-crc64ecma: 16258879044099338313 x-oss-storage-class: Standard x-oss-server-time: 123 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:05 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1f5bbdd6a7a-BNA
2024-05-24 22:57:05 UTC	808	IN	Data Raw: ff d8 ff e1 0c be 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 06 40 00 00 01 01 00 03 00 00 00 01 01 54 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 38 3a 30 38 20 31 35 3a 31 31 3a 33 36 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*@T(12i ''Adobe Photoshop 23.4 (Windows)2023:08:08 15:11:360
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 eb d2 ff 00 7a 67 bd 95 b0 bd e7 6b 1b c9 f0 54 b2 b0 98 73 69 ea 8d b1 d5 ba 91 b5 ef 64 1d f5 1d 7e ce 41 f6 3e bb 5f ff 00 6d ff 00 38 b8 0c 38 44 c8 e3 91 c7 19 71 46 19 0c 78 b1 cb 2c 47 a7 1c a5 fc b8 1d 79 48 8f 94 71 1d 3d 3d 69 d0 66 d7 6f 6c 1d ec 01 de 50 9a 16 70 6d dd 52 d6 d5 5d 56 10 d6 92 5b 55 9b 0c b5 ec 7c 3b 7f a6 db 28 bb 6f a5 63 1f ff 00 a3 d5 fc 7c 4b 31 6a 6b 5e 5a 43 cb 9e c6 30 c8 60 71 df e8 ff 00 Data Ascii: "2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?zgkTsid~A>_m88DqFx,GyHq==ifolPpmR]V[U\|;(oc\|K1jk^ZC0`q
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: da fa cb 76 17 b9 f5 ed aa ab bd 56 dd 34 fe 67 d3 a5 5b 36 d7 59 0e b1 ed 68 04 6a e2 07 e5 55 b3 88 73 dc 5b 90 c6 b6 44 80 1a e3 c7 bb dc ef e5 28 3e 1d 9a f1 91 c3 5c 27 7b 97 e9 76 e1 5d 38 7a af 5d 5e 6b ae 51 d2 7a b5 cc fb 56 59 c6 bc 62 55 8d 5d d6 53 77 a4 3d 31 60 b9 ad 7d 37 b5 ce aa db 2e 73 ff 00 5b c3 5d 97 4d ce e9 1f 61 c5 c3 a3 3a ab df 45 2c a4 16 e9 b8 d4 c6 b1 c5 a3 5f 0d cb cf fa e6 36 5d 9d 4d cf af 28 36 97 35 bb 1a 6c 2d 88 1b 5f ed 63 76 b7 75 81 cf f6 ad cf aa 4e b7 1e bc 9a 72 32 d9 60 79 ad d4 d7 bc b8 88 f5 3d 42 3d 40 cf de 67 d1 57 f9 cc dc 3c a9 94 aa 60 00 78 2e 5f ec fd 3f bb c2 b7 da 06 5a 02 35 3a d4 7f 19 70 f1 49 ad fe 32 3a a5 98 94 d5 88 c7 b8 32 e6 17 9a da 48 65 84 58 d6 9a f2 76 fb ac a7 d3 1b 3d 1d fe ff 00 5b Data Ascii: vV4g[6YhjUs[D(>\'{v]8z]^kQzVYbU]Sw=1`}7.s[]Ma:E,_6]M(65l-_cvuNr2`y=B=@gW<`x._?Z5:pI2:2HeXv=[
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 74 69 6e 50 72 6f 6f 66 00 00 00 09 70 72 6f 6f 66 43 4d 59 4b 00 38 42 49 4d 04 3b 00 00 00 00 02 2d 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 17 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 00 00 00 00 52 67 73 4d 62 6f 6f 6c 00 00 00 00 00 43 72 6e 43 62 6f 6f 6c 00 00 00 00 00 43 6e 74 43 62 6f 6f 6c 00 00 00 00 00 4c 62 6c 73 62 6f 6f 6c 00 00 00 00 00 4e 67 74 76 62 6f 6f 6c 00 00 00 00 00 45 6d 6c 44 62 6f 6f 6c 00 00 00 00 00 49 6e 74 72 62 6f 6f 6c 00 00 00 00 00 42 63 6b 67 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 47 42 43 00 00 00 03 00 00 00 00 52 64 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 47 72 6e 20 64 6f 75 62 40 6f e0 00 00 00 Data Ascii: tinProofproofCMYK8BIM;-printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@o
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 01 54 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 06 40 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 Data Ascii: eOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongTRghtlong@urlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolc
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: d7 be ff 00 51 af fd 13 5c d6 57 fe 05 9f f0 9f a6 4e e4 f9 73 c2 72 10 0d 89 63 e1 e1 94 ef dd 84 a1 2e 18 c3 8b d7 08 7e b2 08 91 e2 3c 37 5f a5 67 4f 95 ad f5 d9 f9 98 df 56 ef 38 4f 75 59 77 3a b6 54 fa df e9 bd b0 e1 6d 8f 6b f7 31 df 42 bf 4f fe b8 b7 2c ab 69 32 23 8d 39 ed e2 b8 af af 9d 48 b3 3b 0d ce 69 63 ed e9 a2 db 85 66 b0 61 cf 7e f6 37 d7 aa f7 7d 2f a1 ff 00 82 ae ab ea fe 2b 68 fa b5 d2 aa 68 20 7d 92 a7 10 79 97 b7 d5 77 fd 27 ab 9c df c3 86 2e 52 04 56 92 32 04 7c d2 f7 63 1e 2e 2f ee fb 71 e0 62 86 50 67 fa 5c 7a 89 03 f2 01 1f 97 87 fe e9 31 08 46 ea c5 e2 83 bb 79 6e e1 a1 22 38 fa 5f 35 60 b4 93 00 6a 78 5c 87 48 ce 6f 52 fa ef 9f 6b 68 a9 cc c2 ad d4 d7 94 c7 3f 7c 30 b6 bd b6 ed b3 ec d6 b6 cf 59 fb 37 57 fe 0d 67 72 dc a0 cb 1e Data Ascii: Q\WNsrc.~<7_gOV8OuYw:Tmk1BO,i2#9H;icfa~7}/+hh }yw'.RV2\|c./qbPg\z1Fyn"8_5`jx\HoRkh?\|0Y7Wgr
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: d3 fc c4 fe 53 9d e4 63 f0 ca 99 c7 c6 21 90 e4 c0 4d 4f 24 e5 29 7a 38 7f ca 71 fa 5a f9 31 e5 f7 8d 03 44 8a 93 dd 91 04 8f 05 9f d6 f0 ed cc c3 65 75 b7 d5 15 dd 55 b6 d0 23 f4 b5 b1 d3 65 23 7c 33 73 be 93 7d 45 7d 57 7b 73 8b e5 8e 63 5b e1 ba 7e 1f 4b 1d df f5 6b 9b e4 f3 4f 06 7c 79 f1 98 f1 e1 90 c9 1f 73 e4 26 2d dc b0 13 84 a1 2b a9 0a 34 e0 bd 83 d5 6b aa e8 b7 b5 a4 c5 85 b4 36 b7 00 5a f1 6d b4 be bb 37 ee b5 ee a3 f4 36 7e 8e 8f b3 7f dd ab 16 67 ec 4e a1 77 ea f4 f4 eb 58 e7 98 6e 45 d2 c0 d1 22 1e fd 7d 2f a3 f4 bf f0 35 d8 7a 7d 40 01 16 34 9e f2 5b 1f 86 32 42 be a1 26 6d 6c 48 82 0b 64 7e ff 00 fd a6 5d 20 ff 00 8d 7c d4 6f 87 1f 2e 0f 42 67 98 eb d3 d3 c4 e6 9f 84 e3 35 72 97 d2 31 6c b0 10 1a 0b b7 10 00 2e 3d c8 1f 4b fb 4a e6 30 93 Data Ascii: Sc!MO$)z8qZ1DeuU#e#\|3s}E}W{sc[~KkO\|ys&-+4k6Zm76~gNwXnE"}/5z}@4[2B&mlHd~] \|o.Bg5r1l.=KJ0
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 31 64 33 38 63 64 37 2d 32 33 33 64 2d 32 63 34 38 2d 38 35 39 36 2d 38 31 39 38 35 39 61 62 34 62 63 39 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 31 31 37 32 66 31 39 2d 64 34 62 31 2d 30 31 34 66 2d 39 64 61 34 2d 34 37 34 61 64 36 36 61 38 32 39 32 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 38 33 38 31 35 42 44 38 37 43 33 42 42 31 32 31 42 36 35 42 31 33 42 41 35 45 42 43 46 33 43 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 20 70 68 6f 74 6f Data Ascii: //ns.adobe.com/xap/1.0/" xmpMM:DocumentID="adobe:docid:photoshop:11d38cd7-233d-2c48-8596-819859ab4bc9" xmpMM:InstanceID="xmp.iid:61172f19-d4b1-014f-9da4-474ad66a8292" xmpMM:OriginalDocumentID="83815BD87C3BB121B65B13BA5EBCF3C0" dc:format="image/jpeg" photo
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	49889	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:05 UTC	618	OUT	GET /uploader/035ebc6dc320fc94a1d54b8584520801.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:05 UTC	593	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:05 GMT Content-Type: image/jpeg Content-Length: 92185 Connection: close x-oss-request-id: 66511B41B6DE1D35359F3E2A ETag: "50DA196D1F219204C652502AE7835561" Last-Modified: Sat, 05 Aug 2023 08:00:34 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 12280659794402168421 x-oss-storage-class: Standard Content-MD5: UNoZbR8hkgTGUlAq54NVYQ== x-oss-server-time: 51 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:05 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1f7a841f7f8-BNA
2024-05-24 22:57:05 UTC	776	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 00 ff 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCC
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 6e f5 f5 fd 0f f8 50 4f 3c 7b fe 0f fc 87 50 50 99 1f fe b0 47 f3 a0 57 bf 7f 9a 6b f3 00 41 e8 7a 7f 9f f3 fa d6 6e a2 bb 4a ce de 76 fd 3a 14 d3 5a b5 61 69 f3 c3 57 cc b4 df e6 20 a3 da 43 f9 90 0d dc a3 bf e8 7f c2 a9 34 d5 d3 ba 27 9a 2b af e0 ff 00 c8 5c 8e bc f1 ea 0f f8 53 1d d6 fa e9 dd 3f f2 00 41 e8 68 05 25 2d 9d c5 a0 61 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 1c 2f c4 7f 1d e9 5f 0d 7c 0f e2 7f 1d eb 66 05 d2 fc 2f a1 ea 3a d5 d9 ba d4 2c 34 b8 1c 59 42 5a 1b 67 d4 75 39 60 b1 b2 17 73 98 ed c5 cd d4 89 04 26 40 ee c7 0a 8f 9d 5a 8a 94 1d 47 b4 6d d6 d6 d7 7b 9a 50 a4 f1 0d 24 b5 d3 a5 fa ea f6 ec 9f ab b7 4b b5 fc a9 78 53 fe 0b db Data Ascii: ((nPO<{PPGWkAznJv:ZaiW C4'+\S?Ah%-a@P@P@P@P@P@/_\|f/:,4YBZgu9`s&@ZGm{P$KxS
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 7d 6b d8 3c a4 ee 93 ee 2d 03 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 06 bf dd 3f 87 f3 15 33 f8 5f cb f3 44 cf e1 7f 2f cd 1e 2b fb 43 f8 2e cb e2 27 c0 ff 00 8a 3e 0d bf 47 78 35 ef 03 f8 8e d3 11 5a 5e ea 33 79 f1 69 b7 17 b6 66 0d 33 4e d5 b4 0b ed 4e 51 7b 6d 6c cb a6 da 6b 9a 35 c5 f6 d3 6b 06 ab a7 cb 2a 5d c3 c5 98 2b e0 aa 2b a5 78 ad 7a ab 2b d9 6a ac dd ad d7 7b 58 ee ca e6 a3 88 a6 da 6e 3c f1 4e c9 3d 65 25 14 e5 75 a4 62 a6 e4 da d7 dd f5 47 f9 f8 fc 38 d2 bc 43 f0 b7 f6 c4 9a df 58 f0 d6 b7 67 a2 68 de 31 be d6 6c 34 bf 11 6b 3a 6f 85 bc 59 7f 0a 5d dc 6b da 25 b9 f0 74 1a 6d a7 84 3c 3f 65 e2 3d 62 1f 87 fe 0b d6 fc 37 73 e2 7d 7e 3d 5b c1 1f 1b 7c 0b 1f 88 35 5b 9b 2f 86 56 97 90 Data Ascii: }k<-(((((?3_D/+C.'>Gx5Z^3yif3NNQ{mlk5k*]++xz+j{Xn<N=e%ubG8CXgh1l4k:oY]k%tm<?e=b7s}~=[\|5[/V
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: bc 27 0b 3d 9f a7 5b fc 8f e0 5f f6 de f8 07 e1 3f 83 5f b7 c4 ef af f8 6f fe 12 8f 88 7f 12 61 d3 de e3 c4 de 25 d4 b5 2d 6f c4 5a d3 78 e2 2d 33 c2 f7 f7 e7 5a d5 ae af ee 23 5b dd 73 c5 de 0a b4 8d 2d 7c b1 69 a9 78 6e 57 b0 96 dc 09 d4 fe 53 9a 29 4f db d2 e6 f7 69 ca ee 3a a4 da 4e cd de d7 69 37 e7 67 6b 2d 6f fa f6 41 25 52 8c 79 ac 92 8a 5b ae de 69 5b ee d6 cb 6b 33 f7 e0 78 5f c1 77 be 0d d7 24 d7 be 2c fc 0c f0 ae a5 e3 8f 09 fc 78 d4 2c 2d 7c 5f f1 13 c3 fa 6e a1 0d cf c5 5f 8b 9e 0e f1 2e 67 b0 d4 ae f4 eb 88 25 d5 7e 12 e8 cb a5 df 43 b6 49 ec ef d6 39 21 8a fe c0 1b c1 f3 6a 9d 49 45 5b 5d 1b d1 ae fe 5a ad 9f 67 d7 6d 4f 3b 3a 95 3a 78 88 a8 49 3f 7d 29 fb 92 5a 72 39 2e 57 6e 56 9b e5 57 4d 45 3f 76 fc fa 1f 20 7e dc 3f 10 be 10 f8 67 c3 Data Ascii: '=[_?_oa%-oZx-3Z#[s-\|ixnWS)Oi:Ni7gk-oA%Ry[i[k3x_w$,x,-\|_n_.g%~CI9!jIE[]ZgmO;::xI?})Zr9.WnVWME?v ~?g
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: f1 1a cf e0 da 78 83 41 17 fa fe 97 ae 69 b7 b6 76 de 5f c4 cf da 0f 5b 96 eb c5 37 3e 2c 5f 06 e9 6f 67 a6 df db fc 3a b5 4f 07 f8 92 fb ca bd b4 d5 e3 d1 a2 d4 fc 33 a5 e9 ba e4 d3 d8 f8 86 df 54 f0 e6 bd 17 3d 49 45 d5 ba 7b 37 65 66 d3 ba eb f7 7f 57 d7 d9 c8 6e a8 f2 b5 6b 2d ee b7 b6 d6 5d 7e 6d 76 7d 17 f0 e1 fb 5b c3 ad f8 1e cb 56 f1 8d e7 89 7c 25 a8 f8 ff 00 44 f8 c9 e2 3f 0a 78 93 c2 56 56 36 ba 8e 9d 63 e0 0b 7d 0b c1 5a 97 87 3e 27 f8 73 c4 37 3e 2b bc f1 26 a1 a2 78 f3 54 f1 49 d1 f4 19 23 8e 43 10 d0 6f b5 09 ae 05 b7 9c b6 bf a5 65 51 e7 c9 dd 36 ad 29 42 56 8a 69 36 d5 f9 6d 74 da ef 64 bd e5 ee c5 a7 66 79 b9 b5 74 b1 0b 92 4e ea 50 5a 5d af 89 5e c9 34 d3 e9 cc af 6d 2e 9d 9a 3f ac df f8 25 46 b1 e2 1f 04 78 1b 44 9e d2 6f 1c 78 db c3 Data Ascii: xAiv_[7>,_og:O3T=IE{7efWnk-]~mv}[V\|%D?xVV6c}Z>'s7>+&xTI#CoeQ6)BVi6mtdfytNPZ]^4m.?%FxDox
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 22 7b 6d 4f 5c f0 26 b3 e1 4d 45 a3 fe d3 1a 2e a1 76 fe 1e f8 77 71 f1 23 50 87 44 d1 35 1d 5a c5 7c 55 e2 2d 51 e1 f0 f7 84 ed a4 b6 bd d7 35 2d 32 ce f0 4a 7f 37 74 ed 9e 37 7d a7 d5 6a 97 33 be bd 5d d7 54 ad f7 9f 47 99 ca 53 c0 47 95 b6 92 4d 5f 66 ed ad bd 55 bb 69 d8 fd 57 fd a3 7c 3d fb 20 de f8 42 fb c1 7a ff 00 c4 af 10 7c 3c d7 35 0d 35 f5 3d 2e ef fb 13 e2 85 ff 00 83 2f 60 88 c5 e6 1b 4b eb 8f 86 97 5e 12 f1 24 3b 5a 16 92 eb 4d bf d5 2d 2d 2d ee ed 2e de fa d6 df 56 d3 a7 bc db 88 1d a3 7b a4 d4 1b 69 a6 ec f9 5e 9a 2d 7a 6b ae 8b 5e 87 8b 92 d4 c6 c2 a3 6a 12 71 52 5a c5 53 d5 5e ee 4d 73 a7 65 6d 74 e6 d5 28 c5 ea 7e 57 78 67 c2 3f b3 2e 81 a2 78 89 7e 15 fc 70 f1 b6 a3 ae 78 32 79 e0 f1 38 f0 c7 87 a7 f8 25 fd 91 a9 40 59 ee 6e 75 6b 4f Data Ascii: "{mO\&ME.vwq#PD5Z\|U-Q5-2J7t7}j3]TGSGM_fUiW\|= Bz\|<55=./`K^$;ZM---.V{i^-zk^jqRZS^Msemt(~Wxg?.x~px2y8%@YnukO
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: c4 df 03 fe 3d 78 7f c6 9e 26 6b 29 bc 0d e2 fb cf 0e 78 5f 58 f0 47 8c e2 f1 07 86 24 be f1 5f 84 2d bc 77 a0 f8 7f c0 1e 24 d6 3c 49 65 f3 39 5d 3e 79 3b ae 92 95 da b2 4e fd 1b bb eb d3 be ac fd 16 18 68 53 d3 91 73 72 bb f2 db 99 5d 5e fd 6e ec b4 da f7 69 a7 a9 fa 8b fb 20 fc 1d d3 fc 4b fb 5f 68 bf f0 8c f8 67 4d d1 f4 8b df 15 43 f1 8a ef c4 5e 0e b6 1e 0f 6f 0e e9 3a ae 98 b2 cb e1 5f 1e 68 0d a3 da 78 b3 c1 be 3e f8 84 f3 f8 8e ff 00 c5 5f 0a f5 a1 6d e1 3d 4a c3 44 b3 f1 55 e7 85 f4 9b cb 8b 49 ee be 87 86 a8 df 3e 8f 2b ba 73 b3 d2 fa 27 ab ba d7 a3 b7 7d fa 34 be 6f 8b 66 96 47 5d ca e9 a8 cb 93 9d 3b 36 da b2 57 71 bc 5b 69 2b 3e ea e9 ad 7f a9 53 8c 9c 74 cd 7f 41 46 3c b1 8a b3 5a 2d d5 8f e7 59 6e fd 58 95 42 2c 50 74 05 00 14 00 50 01 40 Data Ascii: =x&k)x_XG$_-w$<Ie9]>y;NhSsr]^ni K_hgMC^o:_hx>_m=JDUI>+s'}4ofG];6Wq[i+>StAF<Z-YnXB,PtP@
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: bd cb b7 ad d5 da 4f e1 7f d8 ef 87 f5 cd 23 c4 fa 2e 97 e2 2d 03 56 d2 f5 dd 0b 5c b0 b4 d5 b4 5d 67 45 d4 6d 35 6d 27 57 d2 75 08 56 eb 4d d5 74 ad 4f 4f 9e e6 c7 50 d3 75 0b 39 21 ba b3 bd b3 9e 7b 5b a8 64 49 ad e6 92 26 47 6f d3 65 cd 4d 46 32 8b e6 b2 bd d3 8f 44 ed 66 93 4e cd 36 bb 34 7e 3a ec ee e2 d3 4e 52 b6 b7 6e ed bb fa 7a 69 db 43 66 b0 11 62 83 a0 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 fc d3 ff 00 82 b8 bf c7 f3 fb 06 7c 76 b6 fd 9a bc 61 77 f0 ff 00 e2 75 ef 86 ae 34 fb 2f 19 d8 41 04 d7 be 1c d3 f5 08 a4 b3 bc d4 62 69 52 59 6c e1 2d 3c 36 57 9a 8d a4 17 13 e9 d6 b7 b2 de 18 5a 18 65 65 f4 72 af 66 f1 b4 94 ed f1 2e db ad 55 ef da d7 5d 74 ba d1 33 1a b2 7c b2 49 2e 9b be Data Ascii: O#.-V\]gEm5m'WuVMtOOPu9!{[dI&GoeMF2DfN64~:NRnziCfb(((((\|vawu4/AbiRYl-<6WZeerf.U]t3\|I.
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 5e 4d 49 37 df 46 df ca de 7a fc b7 3f 17 7e 33 58 69 3a 6b 69 e3 4a d3 e0 d3 d2 eb 78 78 2d 03 47 6c 8a 9b 82 24 31 16 61 1a 2e d1 b5 41 20 02 46 4f 5a 25 55 4e 2d bd 12 d5 7a 5f 5e 9d 2d d4 f4 b0 fe fd dc 55 f5 b3 7d 76 bd ee da dd be df 3e ff 00 3f c6 02 a9 c1 24 01 93 c1 43 dc f5 ea 3e a3 a7 5a f2 aa fc 4e f7 d2 dd 2e 9d d2 eb b2 f9 df e7 b1 d1 19 b8 a7 78 bb bb 25 ae 9e 5a fc fb a3 f4 7f e0 6f c0 2f 83 7e 2c f0 e5 85 df 89 b4 dd 53 50 b9 be 86 da 69 da db 5d d4 ac 46 e9 60 49 b0 56 09 d5 5b 61 7c 0c e0 71 90 45 4a 4a cb 47 b7 57 2b 2b 6b ad f7 49 f7 d2 dd 76 47 2b c6 c5 36 ad ae e9 db ab d3 f9 6e ae b5 e9 fa 9e 5b f1 b7 e0 bf c3 ef 0c 6b 82 cf c1 b6 fa de 96 8e 58 ba 6a 37 b1 5f a6 d5 23 e5 47 df 34 e4 60 e0 f9 d2 36 e0 7a 2e 08 a3 5b bb 68 de b7 69 Data Ascii: ^MI7Fz?~3Xi:kiJxx-Gl$1a.A FOZ%UN-z_^-U}v>?$C>ZN.x%Zo/~,SPi]F`IV[a\|qEJJGW++kIvG+6n[kXj7_#G4`6z.[hi
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: b6 77 6b a2 b5 d3 4b aa 3f 77 7f e0 9a 3f b3 ef c7 9f d8 ab f6 b5 fd 9f 3c 49 f1 2f 49 f0 93 78 6f c5 5e 3b bd f8 61 7d ae 78 0b e2 37 83 fc 77 a7 c9 07 c4 cd 03 56 f0 d5 8c 17 87 40 d5 26 bb b5 b5 4f 16 dd 78 4e 58 ee 5e d0 c7 2d dc 76 f1 82 92 04 49 78 a5 c6 98 0c e5 7b 3a 49 c6 f2 db 96 56 ba 69 ad 12 d5 5e d2 b6 b7 5b 77 3c f7 c3 78 fc a6 ee 71 e6 86 ad bb 2d 2d ab 4f cd 2f 2e af 46 da 3f b4 62 c0 67 d4 76 ff 00 eb d5 3a 90 b7 bb 1d fc df f5 a9 9a 8c a4 ee f4 bf a6 8d 5e fd b5 be fa 2f d4 b5 53 ed 3c bf 1f f8 04 85 68 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 03 59 80 07 24 0c 02 79 ed 80 4e 7d 30 30 73 58 d5 8b e5 94 94 ad 64 de dd 97 7f 90 24 db b2 57 6f 44 96 ed f6 3f 80 ad 2f e0 47 c3 Data Ascii: wkK?w?<I/Ixo^;a}x7wV@&OxNX^-vIx{:IVi^[w<xq--O/.F?bgv:^/S<h@P@P@P@P@PY$yN}00sXd$WoD?/G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	49892	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:05 UTC	618	OUT	GET /uploader/dbaf20a93b83347c91f7674df9783ada.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:05 UTC	560	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:05 GMT Content-Type: image/jpeg Content-Length: 143686 Connection: close x-oss-request-id: 66511B41B6DE1D3539F43E2A ETag: "995A0703D4DEDBEF84A0CD0087114249-1" Last-Modified: Sat, 05 Aug 2023 07:50:13 GMT x-oss-object-type: Multipart x-oss-hash-crc64ecma: 14096733061716009858 x-oss-storage-class: Standard x-oss-server-time: 91 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:05 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1f7cfccf7e8-BNA
2024-05-24 22:57:05 UTC	809	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 c4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCC
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 01 bb d7 d7 f4 3f e1 40 0e a0 0c fb bd 52 c6 c9 a2 8e e6 f2 ce da 5b 8d ff 00 66 8e ee ee 1b 53 71 e5 6c f3 3c af 35 83 3f 97 bd 37 ec 56 db bd 37 63 70 aa 51 6f 5d 97 7d ff 00 0d ff 00 ab 98 ba f4 d4 b9 5c 92 7e 6d 25 65 d6 ee cb e5 7b fc f4 2d 2c b9 ce 47 23 19 c1 e3 f3 e7 3f 5e 2a bd 9f 9f e1 ff 00 04 a5 56 93 da 71 7e 8e ff 00 91 26 f5 f5 fd 0f f8 54 59 f6 7f 73 1f b4 87 f3 20 de be bf a1 ff 00 0a 2c fb 3f b9 87 b4 87 f3 20 de be bf a1 ff 00 0a 2c fb 3f b9 87 b4 87 f3 20 de be bf a1 ff 00 0a 2c fb 3f b9 87 b4 87 f3 21 72 3d 47 e6 29 15 75 dd 7d e8 4d eb eb fa 1f f0 a7 67 d9 fd Data Ascii: (((((((((?@R[fSql<5?7V7cpQo]}\~m%e{-,G#?^*Vq~&TYs ,? ,? ,?!r=G)u}Mg
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 8b 46 81 b0 d9 1b b7 b3 e0 a8 2b b3 2d bb 2f 67 e7 bf 97 e5 af f5 b1 ac 33 5c 4e 8e 52 97 9a 76 d9 5e d7 e5 df 77 f8 5c d8 4f f8 38 87 fe 0a 53 f2 ee f8 83 f0 b6 f7 18 2e 27 f8 3f e1 10 73 93 c1 f2 a3 8f 23 81 d3 1d b8 ce 72 3a 56 dd bd 7c a4 bf f6 eb 5f ef 5a f7 db aa 19 c5 54 f5 94 76 df 92 09 bd 76 bf 2f 5f d1 58 e8 a1 ff 00 83 8f 3f e0 a3 56 2a 8a 6e fe 07 5e 29 1f 31 ba f8 58 63 3c 64 1c ae 9f e2 1d 3e 13 bb 19 24 42 3a e0 63 07 27 b3 b7 5f bf 5f d7 fa fc 0e 87 9a d5 6b 9a 32 b4 ec b6 d1 2d 3f 95 24 af 7d ef e7 a5 ec 6e 69 bf f0 72 9f fc 14 0a 09 11 ee 34 7f d9 f6 fe 21 fe b6 1f f8 57 1a d5 a1 63 cf 3e 65 bf 8c f2 3b 1e 50 9c 71 c7 06 87 4a da 36 f5 f5 fc 1d ff 00 2f 43 8e 59 be 39 bf 89 35 6b 3b c6 9b ba d6 fb a7 7d 3b 9d 22 7f c1 cd df b7 1c 7f eb Data Ascii: F+-/g3\NRv^w\O8S.'?s#r:V\|_ZTvv/_X?V*n^)1Xc<d>$B:c'__k2-?$}nir4!Wc>e;PqJ6/CY95k;};"
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 70 33 c0 c6 87 2c f1 52 a8 97 2c 9a b6 ea ca cb 4d 92 db ab d6 c9 bd bb a3 2e e9 70 14 f0 76 80 06 48 1d cf a9 f7 fc 31 41 8f 34 a4 f5 6e ed 5a f6 e9 da cb f4 f3 f3 33 ee 65 f3 2d 2e 57 1c 85 38 c9 e4 e4 7b 93 fc eb 4a 7d 7e 5f a8 a5 1b 59 bd f5 b7 91 f8 67 fb 5f db 79 1f 1f e4 81 5b 09 75 a1 58 49 90 33 86 49 98 b8 c0 3c 92 11 90 f3 9c 8f ad 7a 94 f6 7b ab da 29 3d 6d 7b ea b6 d3 63 e7 f3 25 1b 5e ca fa 59 d9 5f ef df b9 e2 3e 1c 8e 5d 36 de ff 00 c4 56 f3 5b ce 9a 75 c8 b6 d5 ec 23 98 4b 73 1d 9d d9 74 b0 92 64 8c 34 26 c3 5a b8 0d a7 c7 3a c9 24 b6 d7 f0 35 a4 d6 eb 35 cd 9a cf 94 da a6 af 29 7c 36 5b 3e bf 65 74 bf 9e b7 f9 1c 8a 9c 65 45 c9 46 e9 25 b6 bb 5f ab d5 59 a4 ad a5 9e b7 3d 02 e7 4d b3 bd b6 8e d6 19 f7 e9 f3 5d ad c7 84 35 47 63 24 76 92 Data Ascii: p3,R,M.pvH1A4nZ3e-.W8{J}~_Yg_y[uXI3I<z{)=m{c%^Y_>]6V[u#Kstd4&Z:$55)\|6[>eteEF%_Y=M]5Gc$v
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 2c ed bc 09 25 7d aa 46 9e cf cf f0 ff 00 82 78 18 8a b3 6d 6b 64 f6 5e 6a dd 5e db e8 ff 00 e0 b7 e6 3a e4 42 ca ed 61 89 54 5b 49 04 17 10 45 b4 90 21 b8 8e 29 23 7c 9f ef 3c 8e 84 67 01 90 e7 9e 85 3e bf 2f d4 f3 a5 37 3b 5e ff 00 36 df f5 bb fb d9 91 24 c2 5b 79 61 55 c1 63 b4 74 20 15 c7 1d 46 3d 3a 71 fc ba a3 1e 5b eb 7b 99 d9 5d be fb fc 8c f5 05 17 93 9c 01 fa 0a ce 51 e5 b6 b7 b9 d0 92 5b 22 bc ee 65 23 19 5d bc 71 df 04 fb fb d4 94 9a 4f 55 72 84 a4 a0 db 8d c1 87 23 81 c7 b8 24 03 f9 fe 15 a5 3e bf 2f d4 72 7c c9 3b 5b 56 bf 23 f1 2b f6 d0 87 c8 f8 f7 62 b8 00 c9 e1 f5 05 89 e3 9b 89 d8 67 93 80 a2 4c 67 d0 7e 5e bd 0f 89 5f 74 ed 6e de e4 bf e1 fe 76 e8 7c f6 67 f0 bf 47 ff 00 a4 c8 f9 d3 c3 eb 2d 85 c9 d4 cc 42 e6 d4 5c 5c 58 dc 58 bc d3 c3 Data Ascii: ,%}Fxmkd^j^:BaT[IE!)#\|<g>/7;^6$[yaUct F=:q[{]Q["e#]qOUr#$>/r\|;[V#+bgLg~^_tnv\|gG-B\\XX
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 66 cb 07 30 dd ea 76 29 91 8c 5b c5 75 67 aa 5b 2f 5e 42 db df aa 0c 63 00 70 70 31 52 73 9c 76 4e 5f 3c ef 91 a4 fa 06 ed f8 7d 6b ae 0d 2b dd f6 fd 40 8a 5e 9f 83 7f 21 50 74 14 57 ab 9e c0 ff 00 8f f8 50 04 17 32 04 0b 91 90 4f f9 ee 3d 3d 7f 0a ce 9f 5f 97 ea 16 d2 fe 6d 7d d6 ff 00 33 f1 7b f6 e4 b5 58 fe 38 e8 97 43 00 4d a0 85 1f 36 73 89 30 40 1b ba 86 07 3c 0e 4e 3b 71 ea 43 77 7d f5 7f 2b 49 7e 29 2f bb cc f9 fc d3 e0 fb bf 26 7c d5 a1 5b f9 b6 57 ba 8c 71 8b d8 ec a4 30 ea 76 8f 9f f4 58 5b cc 30 dd 20 e7 7c 87 13 7d 96 45 da 6d 2f 92 d9 bf 7a 26 6f 26 aa 47 9e d6 57 b3 7a 59 6b b2 69 b7 25 fe 6e da 59 6a fc 6a 55 fd 8a 6f cb ef d5 f9 79 ff 00 c0 b9 d8 e9 17 7a 6c 31 5c f8 5f 5b bc db e1 cd 4a 69 75 0d 3b c4 2c 54 da f8 7f 5c b8 8b c8 d3 75 f8 Data Ascii: f0v)[ug[/^Bcpp1RsvN_<}k+@^!PtWP2O==_m}3{X8CM6s0@<N;qCw}+I~)/&\|[Wq0vX[0 \|}Em/z&o&GWzYki%nYjjUoyzl1\_[Jiu;,T\u
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: c8 73 e7 c4 c7 27 a4 52 98 f0 79 f4 00 9e 99 27 91 55 cf 2e ff 00 82 ff 00 23 e5 f1 f1 b4 da 4d 2b 59 a6 b5 5a db be fb de fd 7c 8e 3b c5 09 6f fd 8b a8 ab 71 24 51 5b ea 98 51 82 5e de 64 b0 96 6d c7 38 55 83 52 41 29 23 01 20 8c 0d a4 16 2a 5e eb df 66 b5 db 7b 6b f2 b9 cf 4d 5d 25 eb fa 9e 60 32 06 4f 60 32 47 4c e3 ff 00 ac 6b a1 49 ad 9e fe 83 23 97 a7 e0 df c8 56 e7 41 47 20 a4 ab ea 7a fe 27 fc 07 f9 ea 01 4c b3 1e 19 4a e3 d7 07 39 fa 33 56 74 fa fc bf 52 e7 d3 46 b7 de de 5d 9b 3f 1c 3f 6f 20 60 f8 a7 e0 5b ad bf f1 f3 a6 ea 11 0e 7e f1 8a e6 27 00 8c 9e 07 da 00 e9 ed 83 ce 3d 28 cd c1 5f 7d 92 5d ae af f3 ed fd 58 f9 dc cf e1 92 fe ed fe eb 7e 67 ca fa 2d d4 d6 32 3d e4 4f 8b 8f 3a 49 2e a2 93 1f d9 77 51 4c 23 8f ca 96 c1 95 84 8b 19 1e 6c bb Data Ascii: s'Ry'U.#M+YZ\|;oq$Q[Q^dm8URA)# *^f{kM]%`2O`2GLkI#VAG z'LJ93VtRF]??o `[~'=(_}]X~g-2=O:I.wQL#l
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 76 fd 08 2f 6e f7 cd 23 05 2b 08 65 58 23 38 26 28 c2 90 17 8c 0c b0 5f 32 43 9f 9a 57 76 e8 40 19 b9 2a 6d e9 7d b6 7e af 67 d1 7a b6 74 d2 77 4d f7 b7 e1 7f cf fa 47 5b f0 f8 87 f1 c7 83 41 1d 3c 65 e0 ee e7 f8 bc 4b a6 8e d8 f4 ae 7a cb 4b f9 5b ee 6b fc cf 5b 2e fe 2a f5 fd 0f f5 d4 ec 3e a7 f9 2d 79 f3 f8 9f cb f2 47 d9 51 f8 17 ab 27 a9 35 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 03 33 57 87 cf d3 af a3 c6 4b d8 df 46 07 a9 92 d6 44 00 72 30 49 23 07 db de 83 2a bb 7c a5 f9 1f c7 05 f6 0c b7 ae 9c 85 b8 9a e5 17 38 22 29 e4 51 ce 7a 10 c3 91 d8 b7 23 a6 2a 1f 12 f9 fe 4c f9 9c 6c 53 7b 5b cf ab 7e eb fb b5 5f 97 a7 3e 6d a2 bd b8 6b 79 e3 df 16 a7 69 7d a3 ba 0e b9 d5 6d 65 b5 Data Ascii: v/n#+eX#8&(_2CWv@m}~gztwMG[A<eKzK[k[.>-yGQ'5((((((3WKFDr0I#\|8")Qz#LlS{[~_>mkyi}me
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 3d cb e7 4f 24 70 ef 8f cc de a1 84 e4 ac d7 df e5 b1 5b 57 d4 3e d9 3c 70 c0 3c 9d 32 c2 35 b3 d3 6d 54 6d 44 8a 22 4c b7 52 0c 9f 32 f2 f2 e1 e5 9e e2 e1 b0 cf b9 14 0c 20 62 df e5 b6 fd fc cc c8 29 1d 06 7d 00 69 ae 30 c0 90 32 31 cf e3 57 1b 5a 49 b4 ae ad af cc 89 de f1 69 37 67 7f c8 aa b6 b3 5c ce 21 b7 c3 48 c1 dc 83 85 55 55 05 99 99 89 e1 50 02 59 8e 02 8e 49 00 12 20 99 b5 74 bb 5e ff 00 81 a1 7e ef 6c 20 b0 b3 b9 32 59 c7 38 9a ea 57 42 93 de cf 1e 56 32 dc 8c 5a c7 12 46 96 2b 80 5a 35 6b a9 07 9f 75 21 0a 5f 0b 5e 97 fb d7 f5 bd 98 a3 1e 6b eb b5 ba 5f fa d8 68 93 cc e7 18 f6 ce 7b 9a 50 5a 7a bb f6 f2 f3 ec 74 52 5c aa 4a f7 d5 33 b0 f8 7a e7 fe 13 7f 07 11 c7 fc 56 5e 0e f4 3d 3c 49 a6 9c f2 3d eb 3a db 7f 5d d1 ec e0 23 cb 55 6a b7 f4 7b Data Ascii: =O$p[W><p<25mTmD"LR2 b)}i021WZIi7g\!HUUPYI t^~l 2Y8WBV2ZF+Z5ku!_^k_h{PZztR\J3zV^=<I=:]#Uj{
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: bb 4f 73 e8 5f 88 30 5a 7e d0 7f 0d af fe 3d 68 3e 5c 9f 15 bc 0d 61 a5 c3 fb 4a 68 36 c8 82 6d 72 da 4b a9 34 6d 03 f6 81 b2 89 18 c8 d6 de 23 71 a3 78 63 e2 be d4 5b 6d 37 e2 45 c5 9f 89 91 ce 99 e3 b9 65 d2 ff 00 3f ca 63 2c 97 38 6a 52 e4 8c ea 49 de 4e d1 77 bb 4d eb 6b 6a df 64 df cc fb b9 54 a5 9a 53 bc 54 53 51 e6 4d 5a f7 f9 59 ea ee bc b4 6f 57 a7 c8 66 30 e4 90 db 73 db 19 e8 07 43 91 9f 5e 95 fa 52 a9 1a cb da 41 a9 46 5a de 2d 35 af 9a d0 f9 4a f4 bd 9d 49 a6 ed 67 6b 5b 6e 9f 9f 6d 3b 15 e8 39 82 80 14 02 7a 02 7e 80 9f e5 40 59 bd 93 65 e2 70 09 f4 a0 e8 51 52 76 7d 7f e1 c5 8a de 6b b9 a0 82 dd 4b cb 71 2a c4 ab 8e 9b b8 2d 93 c7 1e 84 73 8a 76 56 bd fa ed 6f e9 1e 66 3e 7f 55 7d dc ae 93 ec d2 f9 ff 00 76 fe ae d7 3a 5f 10 5c 5b e9 96 8d Data Ascii: Os_0Z~=h>\aJh6mrK4m#qxc[m7Ee?c,8jRINwMkjdTSTSQMZYoWf0sC^RAFZ-5JIgk[nm;9z~@YepQRv}kKq*-svVof>U}v:_\[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	49887	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:05 UTC	652	OUT	GET /liquid/buyer/public/js/lib/event.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66504480-1714" If-Modified-Since: Fri, 24 May 2024 07:40:48 GMT
2024-05-24 22:57:05 UTC	609	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:05 GMT Connection: close last-modified: Fri, 24 May 2024 07:40:48 GMT vary: Accept-Encoding etag: W/"66504480-1714" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54127 Expires: Sat, 25 May 2024 02:57:05 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1f7c845f7e4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	49890	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:05 UTC	618	OUT	GET /uploader/5cca73d2b424042491646a2499b29f93.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:05 UTC	561	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:05 GMT Content-Type: image/jpeg Content-Length: 159767 Connection: close x-oss-request-id: 66511B41342C4830390EFAFF ETag: "17E0F65B449432BB7C36602D6FB8C91C-1" Last-Modified: Tue, 08 Aug 2023 03:14:51 GMT x-oss-object-type: Multipart x-oss-hash-crc64ecma: 15821716016210044006 x-oss-storage-class: Standard x-oss-server-time: 109 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:05 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1f8f8af6a7a-BNA
2024-05-24 22:57:05 UTC	808	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 77 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCCw
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: a4 a8 11 63 83 62 39 ef 8d ee 32 73 d5 4b 00 79 ce 39 23 3d 28 d3 47 64 f4 d7 7b ae 89 27 df 74 95 bc fa b3 aa 8e e6 f2 e2 e3 4e 9a 1d a2 39 e1 36 17 8d df 92 44 6d 8c f2 13 69 5e 47 7c 86 07 92 03 ba be bb 35 da fd fd 75 dd b5 6d 74 b7 6d 2b 37 9e e6 6b 9d 3a e0 10 63 9a 68 ed b9 e0 cd 00 fd d3 e5 c8 21 59 41 51 8e 0e 72 3b 60 17 5e 9a da cf ae be 96 d6 fa eb af 46 da de b0 c8 98 c2 d8 2e a5 d6 4c 1e 8e 99 0c 0f 7e a0 fd 47 23 dc 08 ab ca cf 5d fe 7b fc cc 5d 7c ee b0 9d 00 0d 13 5a 35 d4 2e 0e 71 34 4f 8c 8e fb 97 07 8c 83 9e 31 d6 82 bf c2 f4 de d6 eb ca de af 5b ed aa 3c 4a 19 88 7b 89 98 7c b3 85 07 23 b2 86 0d d0 93 fd 7d 28 13 ba b4 6f ae a9 ff 00 db cd 3d d9 e9 7e 12 bb fb 6d 84 da 4e dc 5c 29 2b 01 e4 af d9 c8 25 17 a9 39 53 90 7a 0c f4 c7 78 9b Data Ascii: cb92sKy9#=(Gd{'tN96Dmi^G\|5umtm+7k:ch!YAQr;`^F.L~G#]{]\|Z5.q4O1[<J{\|#}(o=~mN\)+%9Szx
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 2a 6e 9b ec d7 e3 7b f9 be ff 00 d3 3f 44 72 8b 76 8f c3 1b 24 be 56 df ad da b9 b5 6b 02 8d ab b4 2a 8c f0 31 fe d7 5e 72 7e be bc d7 5d 38 73 b7 26 ff 00 0b de f7 5f 85 bf ab 19 d4 e9 ae ba e9 6d f6 fb 8d 8b 6b 28 10 86 11 28 6e 70 c7 04 f7 fc f8 e3 9a de 6e d6 b7 9e bd 7a 6d d8 e4 ad f0 af 9f e6 8e 8a d6 10 44 7c 02 7e 60 0e 71 8c 92 3a 66 b4 a0 95 9b ef 6b fc 9b 3c f9 fc 4f fa e8 8f 6b f0 a5 9b ac 31 2b 2e 03 8d d9 c8 3d 37 71 f7 b8 22 bd 0a 1b 4b d5 7e 47 ce 66 5e f5 d2 6b 44 ef ad fb 7e 3e 5e 47 a7 5b c7 84 c7 5c 0f bb f4 dd c6 73 db d6 ba e9 f5 f9 7e a7 8b cb a2 eb 6b e9 b5 ef f3 d0 bf a1 c7 15 d7 c6 5f 87 9e 1e bf 94 d9 78 57 e3 bf 87 7c 53 f0 07 c5 73 b4 7e 7c 1a 74 ba ba c1 e2 4f 04 ea 4e e6 48 04 77 36 5a d6 8b 3c 16 53 86 59 23 9e ef 11 a4 82 Data Ascii: n{?Drv$Vk1^r~]8s&_mk((npnzmD\|~`q:fk<Ok1+.=7q"K~Gf^kD~>^G[\s~k_xW\|Ss~\|tONHw6Z<SY#
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 28 cb 5d 1e d1 5b 3e 9c df 99 c6 dd c3 29 b8 71 0a ef 01 46 47 4d be 9d 73 9c 74 cf 7a cf db d1 ff 00 9f 90 ff 00 c0 91 d0 a9 c9 de ea 4b d6 2c e6 a2 d3 35 51 aa ed b5 b5 9a 48 e5 29 e6 c7 14 13 ce a3 77 2d c4 28 f8 27 85 01 82 e7 19 18 aa f6 b4 d2 4d d4 82 4f 67 cf 1b 3f 47 72 2c fb 3f b9 9d 16 9b e0 cf 17 5c 5a ea e6 d3 c3 9a c4 d0 2d db 98 db ec 17 a0 0d c8 b9 50 4d bb 00 1b 19 1c 93 93 93 8c d3 55 e8 2d 5c e9 bb 6a ff 00 79 1d af da e1 cb 2d 34 7e 7a 3d 4d 9d 27 e0 6f c6 1d 56 03 3d 97 c3 0f 1d cf 82 3c c5 83 c2 9a d4 9e 5e fd c5 4b b7 d8 93 1b f0 c4 65 46 76 b7 75 38 c9 67 59 64 53 e6 a8 b4 6f a3 61 18 b4 f9 b9 65 65 ad f9 64 dd ad b6 cd ed a5 91 a5 e2 7f d9 e3 e3 f5 ee a7 67 6f 61 f0 93 e2 24 eb 28 98 5a 9f f8 45 75 58 04 a1 3c 92 f9 59 e0 4c 11 b8 Data Ascii: (][>)qFGMstzK,5QH)w-('MOg?Gr,?\Z-PMU-\jy-4~z=M'oV=<^KeFvu8gYdSoaeedgoa$(ZEuX<YL
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 62 a4 60 31 20 03 33 67 8e b8 3d 0d 77 50 7a 49 79 af ba db fd fa 1e 1e 26 9c a4 a5 64 ef 7b 3d 1b bb 6a 3d 7b dd 37 6b e9 ae c7 65 65 f1 03 c0 b3 4c 91 8f 17 f8 74 97 ce 0c 5a b5 94 b8 23 70 00 8f 3d 31 9f ad 77 50 57 97 f5 d9 9e 72 a5 35 34 ac ff 00 2e 9f d7 5b 16 b5 ef 10 d8 bf 87 af 35 ef 0d eb da 5d ce b9 f0 eb 51 d0 3e 25 e8 b0 da ea ba 7b cf 25 e7 82 35 9b 6d 6e 45 48 1e 72 b2 89 34 d8 75 04 60 77 90 ce a0 46 ec c0 57 93 9c 24 e5 4d 7a 6c af ef 5e 3f 73 df 5d 1f e4 fe 77 3e c3 b9 d1 ab 27 0e 65 c9 2b a6 9b fb 2d 2d 1a bd f5 e9 d9 f5 b1 f1 f7 fc 1c 45 fb 7d d8 6a fe 08 f0 17 ec e3 f0 ab c4 91 be 9b e2 cd 2a d3 c5 df 10 22 b4 95 4a 1b 7b f9 6c ef b4 5f 0d dd 84 0f 14 b1 cc b2 4f 77 ab db 3c 89 34 65 2d 21 0b 08 22 57 fa ec 8a 51 95 2b f2 a4 e5 ab d6 Data Ascii: b`1 3g=wPzIy&d{=j={7keeLtZ#p=1wPWr54.[5]Q>%{%5mnEHr4u`wFW$Mzl^?s]w>'e+--E}j*"J{l_Ow<4e-!"WQ+
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: ef 67 a6 8b ab 93 fd a8 66 3a 96 96 a8 b8 9f 4e b6 bc b8 2c 44 38 3d f0 e2 58 4e d6 92 4d ae fa 75 b6 fd 5f 4d 7c ec d1 c1 0c 9b 17 28 5f d9 d6 53 92 57 fd dc db bf cd 3b 3d f4 d6 fe 67 1b e3 6b 1f d8 a7 44 be 89 65 fd a0 75 8f 19 48 93 69 30 de cf e0 1f 05 ea b7 96 d6 b6 f7 1f 6b 8f 58 bb 59 75 91 63 fd a1 fd 93 71 6c 8b 07 d8 54 5b df db cf 15 d0 bb 83 cd 11 2c cb 3d e6 bb 8d 4b df 6d 76 bf ab 76 57 d1 2d f4 69 34 d9 a4 32 3c d6 2d de 15 a2 bf eb d3 4b ca d7 4f ab ef aa 3d 33 46 87 fe 09 eb 67 6c d7 5a 26 a7 f1 fb c6 37 16 de 4c 72 49 17 83 66 d2 44 97 09 6d 14 77 30 32 bb 8f 2c 0b 88 e7 ba de a6 e4 30 b9 f2 8a c3 f6 75 7b 9e 3c 46 79 8d 70 97 24 93 be d7 71 d2 fb 6f af 65 6d 1b 7a de e7 6e 1b 22 c5 54 9c 12 85 59 3e 65 1b aa 53 77 bb 49 68 95 9b d5 5f Data Ascii: gf:N,D8=XNMu_M\|(_SW;=gkDeuHi0kXYucqlT[,=KmvvW-i42<-KO=3FglZ&7LrIfDmw02,0u{<Fyp$qoemzn"TY>eSwIh_
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 69 6e 9c 95 f5 b7 5d f7 f3 3f 43 c9 b2 1c bb 24 4f 0e b9 b9 20 bd 9c 22 d4 d4 7d dd 14 92 57 51 b7 6e 89 2b da e7 a0 0d 1f c2 47 69 3e 0b f0 e1 fa db 5c 2e 7a 8f f9 63 71 08 fd 3b 7d 69 29 aa 9e f4 5e 8d 27 6f 55 d6 eb f2 3d 87 93 53 94 9b 73 76 76 71 b3 69 d9 dd d9 fa 26 bf e0 6c ad ae 85 e0 b7 c1 97 c0 9e 1a 93 6f 41 b2 ff 00 be 7b 9b b1 8e be 87 3e d8 cd 4c a6 a3 ab 4d 2f eb 6b 5d 7a ea 82 39 35 06 a5 ef b6 f4 b7 c4 9f 9f 5b 7d e9 f9 1a 31 68 5e 04 50 41 f0 07 86 fb 76 bf 1e bd 3f d3 05 52 c5 72 36 9b bf 9a 5a fe 5a 75 f3 30 a9 92 46 ef 92 4a cd 34 ef bd 9a 57 b3 5a bb bb fe 03 db 49 f0 14 45 49 f0 0e 85 8c e0 f9 13 ea 90 9e 41 ef 1d fa fa 73 9c fe a6 9b c6 c5 2d 6f f7 7f c0 f2 39 65 93 aa 69 5a 76 4d bb d9 bb fe 0d 76 d7 53 42 de d7 e1 a0 da a7 e1 c6 Data Ascii: in]?C$O "}WQn+Gi>\.zcq;}i)^'oU=Ssvvqi&loA{>LM/k]z95[}1h^PAv?Rr6ZZu0FJ4WZIEIAs-o9eiZvMvSB
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: d4 2b f6 df 30 9d bb 8a ff 00 a3 9e 8d e4 99 71 f3 97 3b 7f 88 f2 3c 83 88 9f 11 b9 ce 2d af 6e e4 db 8a 6e dc cd bf 93 5a ee ae b6 b1 fd 39 53 35 a3 fd 83 52 ce 9f f0 e6 af 78 b6 9d b9 53 f2 56 d2 fd b5 d3 af f5 a5 f0 43 e3 bf c3 cf 12 fc 0d f0 83 f8 7b 52 97 53 b7 b5 d0 74 f4 b8 9e 08 07 ee 6e 67 b6 4d f6 d3 26 f2 12 e6 dc c5 89 63 dc db 77 a6 58 66 bf a8 61 4b 13 1a 74 d4 a1 2b f2 43 ec f5 e5 57 5b 77 ec 7f 39 54 84 15 6a b2 52 8a e7 9c 9e fa b6 e6 db b5 df 9d fa 74 d3 b7 e0 9f ed 23 e2 ed 37 e2 77 c6 2d 7a 7b 09 5a 7b 4d 25 9e d7 cd 27 87 92 47 91 98 ae d2 00 51 e5 a8 1b 59 b3 c1 ce 38 a8 94 27 1f 8a 2d 7a e8 6f 41 46 4d f2 db a2 e6 5a f4 bb 4b 5b f6 d3 f3 3f cd 4e be f8 f8 50 a9 94 79 e3 28 7f 32 71 fb d3 5f a9 51 7c b2 8c bb 49 3f b9 dc fe af 7f e0 Data Ascii: +0q;<-nnZ9S5RxSVC{RStngM&cwXfaKt+CW[w9TjRt#7w-z{Z{M%'GQY8'-zoAFMZK[?NPy(2q_Q\|I?
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: fa 4d 4a 0d a9 47 97 bf 5f cb 5b 5f aa d0 92 29 14 71 fd df a9 ce 73 df 07 fa d4 39 d4 69 ae 7d fc bf e0 97 94 d0 b4 a6 a5 0d 5d d2 e6 d6 eb 57 e4 b6 de cb 7d 7b 16 a4 5d 3a e4 03 76 40 28 18 a2 90 1b 19 03 a1 21 82 e4 85 07 03 2c 40 27 da 13 9a bf be f6 b6 ab fe 0e e7 e4 9e 24 e1 af 24 d4 1b b4 9e c9 79 5e fd 6d ab d7 cd 6b a9 2c 17 36 5b ca ad c1 25 4e 00 e4 92 32 72 0f 7c 9e e7 3d bf 25 69 7f 3f e0 8f ce 32 0a 51 8e 73 4d c2 29 3e 78 5d c7 dd 77 d3 aa d5 f5 f9 6b 6d 0d 38 ee 22 60 15 5b 1c 0c 1e a0 67 27 1d 01 38 e9 9c 63 d4 e4 1a 5c b3 bd f9 f4 ed ca bf 3b 9f d3 71 a1 29 61 e0 f9 5b fd dc 34 73 7f ca af 65 7b 2e a9 79 e9 a1 79 58 3c 17 50 03 b7 ed 30 4d 08 7d bb b6 f9 90 cd 11 6d b9 00 e3 cc ce 09 19 c6 32 33 9a d2 9a 97 b4 a7 ef 7d b8 fd 95 fc c8 f2 Data Ascii: MJG_[_)qs9i}]W}{]:v@(!,@'$$y^mk,6[%N2r\|=%i?2QsM)>x]wkm8"`[g'8c\;q)a[4se{.yyX<P0M}m23}
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 9d 7c 04 fd ab fc 55 e0 7f 0b 7c 51 bb d3 e5 8f 49 f0 d6 b9 e2 db eb 8f 0d e9 89 b6 26 8e c1 a3 16 8d 72 ca 6d d0 a2 c8 d6 a9 22 af 95 c8 62 03 9d 99 3f ae d4 cb f2 2a 54 66 e4 a3 19 c6 94 9a 4d 5b de 8c 1e 8b 67 f1 7a 6b 6f 53 f1 d8 f1 36 73 5a aa 8c 7d e5 2a 91 d2 32 4d f2 b9 68 9a b3 7b 3d 9d b6 56 77 b9 c8 78 79 ee 35 4b ad 5f c5 97 92 99 2f bc 4f a8 dd ea 57 9c 10 44 f2 b8 72 43 e7 12 7d e0 37 6c 4e 06 30 73 91 f8 16 73 9a 45 d5 92 a7 0e 64 aa 4e 2b 95 db 48 cd a5 7b 2e 9b 6d ae b7 7a 23 f6 7c 9a 15 6a 51 57 52 bb 8c 64 ee 9a b5 d2 6f e2 b7 ae f6 d7 bb 3f cf 25 94 a9 c3 0c 1f 4a fb e3 e2 84 a2 d7 d3 be 9f 78 3d 53 5d cf b9 7f e0 9f 9f 16 07 c3 bf 8e f6 3e 1a d4 2e cc 1e 1d f8 af 67 ff 00 08 36 a7 0b 85 30 9d 46 49 45 ef 87 2e 9c b3 a7 96 63 d4 e0 5d Data Ascii: \|U\|QI&rm"b?TfM[gzkoS6sZ}2Mh{=Vwxy5K_/OWDrC}7lN0ssEdN+H{.mz#\|jQWRdo?%Jx=S]>.g60FIE.c]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	49888	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:05 UTC	627	OUT	GET /uploader/376b6d593a22201f92af324e34509a8bfb1306f0.webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:05 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:05 GMT Content-Type: image/jpeg Content-Length: 30022 Connection: close x-oss-request-id: 66511B41F488A538309CDD8D ETag: "E8879606AB5E311C76F9C443F9EC72DF" Last-Modified: Sat, 18 Nov 2023 03:59:48 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2782800781658508487 x-oss-storage-class: Standard Content-Disposition: inline; filename="221a62638f2ac35ca045de320c5543cb99a92115_221" Content-MD5: 6IeWBqteMRx2+cRD+exy3w== x-oss-server-time: 156 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:05 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1f7d8b7f7cc-BNA
2024-05-24 22:57:05 UTC	690	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 38 63 00 00 e8 03 00 00 38 63 00 00 e8 03 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 58 02 00 00 03 a0 04 00 01 00 00 00 3a 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(if8c8c02100100X:ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 3a 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 09 02 01 ff c4 00 1a 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 dc b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: %'/9339GDG]]}C) )/'%'/9339GDG]]}:X
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 66 c0 da d6 fa b8 36 aa ec b3 0d ad 83 e9 5c e9 0e 8b 48 0d 59 34 b8 90 25 ac f8 4f 51 7a e3 6a bc 36 d3 78 d8 29 80 00 96 39 41 65 fd b4 51 29 38 b3 20 bb ec f4 51 6a ea 79 79 03 e1 c7 ab 45 c9 7a 8b 27 2b 8b f7 4c e6 ed 5a 05 2f b3 b4 be e9 00 72 e4 a8 17 21 67 98 fc f8 46 2e 42 ba 74 f0 03 90 e5 08 f4 7c 3e 1e 8f 87 c2 b0 75 f4 03 5a 0d 0f 5b 32 d9 6d a3 16 d6 2a 72 cb f6 b6 1c a5 73 29 d2 40 0d 40 4e a6 22 96 4a d8 23 c3 22 73 da a5 0d 9e de 36 56 60 00 24 ce 51 59 90 37 ad 17 39 c5 59 48 bc 6c f4 51 2a ea 61 7a 03 e1 c7 79 5c 3a 57 c2 2d 2c ae 2f 4d 33 9a b4 50 f3 be ce 56 db b4 01 cb 32 9c 4d 14 d2 8e 78 3e 95 32 ec 3a 80 01 c8 72 84 7a 3e 1f 0f 47 c3 e1 57 3a fc 01 86 a1 ab 29 bf 93 49 88 b4 c8 d0 be d3 65 23 20 1b 87 78 03 53 93 a9 a8 a0 92 60 98 Data Ascii: f6\HY4%OQzj6x)9AeQ)8 QjyyEz'+LZ/r!gF.Bt\|>uZ[2mrs)@@N"J#"s6V`$QY79YHlQazy\:W-,/M3PV2Mx>2:rz>GW:)Ie# xS`
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 07 6f 4d 71 b8 18 d6 b3 af 59 da f0 3d c3 16 c3 2b ca db ce 64 70 db 25 74 e1 9f fa 68 06 a2 27 54 91 21 4b c9 9e a1 39 59 d9 de 3d 6f 09 ae 61 ec cb 23 eb 50 00 80 6a f7 07 4e 44 a3 ef 2e 95 34 4c a6 2c d6 36 b1 23 78 bc 7d 1e 7a cd a0 0b 3f cd de 56 b6 a5 66 a7 d2 61 42 7e ca f5 9e 61 57 eb ca e2 ee c8 0e 79 18 78 f6 4a 92 e4 33 c9 36 66 c3 a1 80 1a 29 f4 1e 3c 9f b5 e3 56 31 b7 9e 7d a9 18 f4 5b 58 69 6f c6 96 ff 00 3f 55 dd e7 f5 f4 bf 1d 00 b2 22 71 6e 76 ad c2 8b 0c 7f 2b fa b3 53 a5 b0 ef 83 e8 64 5f 73 cf d9 4e dc 40 d4 34 ea 8a 3c f3 eb 47 d6 2a 79 5e ec e2 db 37 c5 6e ad 73 cc 5d 99 64 ad 6a 00 10 cd 5a e1 e8 c8 14 99 2c f7 ab c4 40 8b 7a bd 6b 73 97 c8 8b bb d2 e7 ae 5a 00 b3 bc ae 8a 34 5a 8f 44 a5 27 d9 3d 64 d4 c5 5e b3 5d eb c6 bd e8 64 07 Data Ascii: oMqY=+dp%th'T!K9Y=oa#PjND.4L,6#x}z?VfaB~aWyxJ36f)<V1}[Xio?U"qnv+Sd_sN@4<G*y^7ns]djZ,@zksZ4ZD'=d^]d
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 70 b9 cc 96 65 c3 e8 07 c3 5d 4b 48 91 20 1e 49 e2 b4 67 62 f1 00 96 34 e0 c4 45 ac 49 95 42 fa 33 84 36 8e 5f 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 ff c4 00 5b 10 00 01 02 03 04 03 07 0d 0a 09 0a 06 03 01 00 00 01 02 03 00 04 11 05 06 12 21 13 31 41 07 20 22 32 51 61 71 10 14 30 33 42 72 73 74 81 91 b1 b2 c1 15 23 24 34 35 36 52 62 a1 d1 25 43 55 64 92 93 a2 c2 e1 16 17 26 44 53 63 82 94 b3 d2 45 83 84 a3 e2 f0 54 65 70 f1 ff da 00 08 01 01 00 01 3f 01 ff 00 f6 6b e9 7a ad 5b 1e 75 89 29 04 b6 8c 4c e9 14 f2 86 23 99 22 80 1c b6 43 17 9a Data Ascii: pe]KH Igb4EIB36_@[!1A "2Qaq03Brst#$456Rb%CUd&DScETep?kz[u)L#"C
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 63 ed 1d 86 fd 1a 5d 3b 6b c1 24 79 d6 21 7c 58 6e 37 33 34 bd 14 e5 94 74 7d a3 b0 db 7f 23 5a be 28 f7 aa 62 57 e2 ea ff 00 dd 91 37 db 0c 37 c4 54 4a 2b 1c a4 aa b6 16 50 7c e3 b0 4f 0a 48 ce 78 15 fa 22 47 8b e4 87 f8 ca 83 b6 2c 03 5b 0a c6 f1 26 3d 41 d8 6f 44 ba a6 6f 7d b3 47 50 9c 2f 0c d4 69 a9 22 26 6c c5 87 c8 13 72 e4 ed a2 f5 44 e4 a3 cd 04 a2 a8 5e 10 33 42 81 19 c5 cf 57 f4 5e c3 f1 54 76 0b 47 81 67 ce 2b 91 a5 7a 21 f9 04 cc 3e fa b1 f7 46 25 e4 d2 87 8e 71 20 84 a1 c4 2a a7 25 08 60 d5 96 4f d4 4f a3 b1 df 2a 3d 7b ad 40 ae e7 46 32 f0 62 27 d7 d6 6a 64 35 dd 26 a6 b9 c2 27 e6 17 5e 2f 9a 2e 25 a5 30 2f 4d 98 d9 29 c2 e6 91 0a e0 fd 42 7b 0e e8 3c 1b a5 6a 73 e8 47 9d c4 c3 ad 61 6c 9a ea 89 64 69 0a b3 d5 1b 9e 7b d5 ed 96 4d 78 d2 ef Data Ascii: c];k$y!\|Xn734t}#Z(bW77TJ+P\|OHx"G,[&=AoDo}GP/i"&lrD^3BW^TvGg+z!>F%q %`OO={@F2b'jd5&'^/.%0/M)B{<jsGaldi{Mx
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 64 59 92 8b c3 33 32 92 56 a1 ad b6 be f3 09 93 5a d3 c9 c9 0f a1 4d ab 09 ca 9d 51 d4 dc d2 f4 2a 7e 59 56 3c db 95 7e 5d 15 61 47 5a 9a 19 61 ff 00 0f a3 7b ab 38 bd bb a3 3a 5d 76 46 c3 70 25 09 e0 ae 6c 66 54 7f bb e6 e7 85 ba e2 d4 a5 29 6a 2a 51 aa 89 39 92 76 9e a8 51 11 77 af 5d a9 77 66 31 cb b9 a4 61 47 df 65 d6 78 2b 1e c3 cf 16 15 bb 21 78 64 53 37 26 bc b5 2d 07 8c da b9 0e f5 c7 10 d3 6b 71 6a 09 42 41 2a 27 50 02 2f 85 ea 76 df 9b 2d b2 a2 99 16 8f bd a7 e9 fd 73 ec 8c ce a8 2d ac 6b 49 de 5c 9b d8 bb 0a 6c 4b 4c ae b2 0f 1a 2a bf 8a 51 ee 87 b6 01 0a 00 83 50 76 ef 26 a6 98 91 96 7e 61 f7 02 1a 69 05 6b 51 d8 04 5e bb d9 39 79 66 b5 a9 b9 26 cf bc 31 fb ca e5 51 fb 37 d7 56 f6 4e dd a9 b0 41 53 92 6b 3e fc c5 7f 69 3c 8a f4 c4 9c dc bc fc Data Ascii: dY32VZMQ~YV<~]aGZa{8:]vFp%lfT)jQ9vQw]wf1aGex+!xdS7&-kqjBA'P/v-s-kI\lKLQPv&~aikQ^9yf&1Q7VNASk>i<
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 85 71 5c e8 ea b5 da 1b e8 8d 91 38 7d ed ae 93 1b 91 fc 7e d8 1f dc 37 eb 6f 2f 20 a5 e1 b7 7c 7e 63 d7 31 2e f3 ad b6 30 2c a6 15 37 32 7f 1a 61 6f ba 75 aa 0d 39 23 c9 15 86 56 a2 aa 57 28 ba e2 b7 96 c6 f1 c6 bd 6d e5 a8 29 69 da 23 f3 97 7d 63 d8 2c f1 59 f9 21 fd fb 7e b6 f2 ff 00 59 48 b5 ec d9 26 15 33 a1 a4 d0 55 70 e2 af 04 8a 6c 86 ee 43 29 7f 01 b6 08 52 73 35 97 39 65 5e 58 62 e9 37 2e d3 6e 1b 65 38 36 1d 09 cf cc 62 d4 ba 32 d3 8b 6c aa f0 34 de 1a a6 85 95 6b 84 dc 59 55 64 2f 23 27 5f f5 77 36 42 2e 54 9b 0f b4 af e5 3c b5 52 a0 69 a2 5e c8 9c b9 ce cf 29 6e 22 d9 96 c3 b4 e8 d6 69 e5 11 fc df ad c5 2b 47 6e ca ae 9a e8 85 e5 58 ba d7 36 6a c8 b7 a4 26 dc 9f 61 c4 27 1f 04 25 60 9c 48 23 2a 8d e5 f9 03 dd 6c c7 f5 24 fa e6 26 00 c4 72 85 Data Ascii: q\8}~7o/ \|~c1.0,72aou9#VW(m)i#}c,Y!~YH&3UplC)Rs59e^Xb7.ne86b2l4kYUd/#'_w6B.T<Ri^)n"i+GnX6j&a'%`H#*l$&r
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 25 52 a5 a4 31 a6 5a d9 4a 33 c8 a4 f0 49 3c 95 de 5f af 96 4f 89 23 d6 30 e3 6a 79 f4 34 9a 62 5a b0 8a e4 2a 62 6e 5d d9 47 4b 4f 00 15 ac 50 d4 11 ca 0f 50 33 25 2e db 0a 9a d2 ad 6e a7 1e 16 c8 4e 14 9e 73 5a 98 7e 5c 4a 4e e8 92 bc 69 e0 29 27 51 c2 b1 88 57 9e 2c b6 5d 7f 42 86 d0 54 55 41 cd 9f 29 81 2a a9 47 1b 49 79 0b c4 2b c0 8b 28 fc 36 63 c0 37 e9 3b eb 57 3b 32 d1 1f 9b 3b ea 98 b0 be 22 8e f8 7a 89 86 e1 26 12 4c 57 92 2a 7a 93 1d a1 ee f4 c5 8e 47 b9 92 7e 0f 79 dd 2b be 3d 45 11 07 90 42 4e 70 93 58 10 69 4c a2 47 b6 b9 de 8d e5 f4 14 bc d6 bf 86 31 20 fa a5 5e 95 98 48 a9 69 c4 ac 0e 5c 26 b4 8b cf 22 b9 c9 81 6b 48 a4 bf 2d 34 84 95 16 c6 22 85 01 4a 28 0d 51 66 4b bd 2f 3f 66 be fb 6a 69 b5 4c 04 24 ac 61 af 9f 64 4a 48 4e 4b 4e 3c 87 Data Ascii: %R1ZJ3I<_O#0jy4bZbn]GKOPP3%.nNsZ~\JNi)'QW,]BTUA)GIy+(6c7;W;2;"z&LW*zG~y+=EBNpXiLG1 ^Hi\&"kH-4"J(QfK/?fjiL$adJHNKN<
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 4d cd a9 3c 45 4c af 0e 75 83 4a 45 9f db 5f 3f 54 6f 2f e0 a5 ea b5 3a 51 ea 88 6b 88 20 c1 83 af aa cf 1b c8 62 e1 0a de ab 33 a5 cf 50 ef 2d a4 fe 1f b6 c1 38 41 b4 5f 05 5a e9 c2 d7 0c cc c8 61 90 77 ae dd 08 92 c5 a3 95 52 49 2e 1d 8b 07 50 c5 dd 72 43 7e e2 a9 86 54 a2 ac 6d b7 57 11 9a 4b ab 52 b3 cf ea 8e 48 72 5e c2 ab 89 4b ae 94 d0 39 a4 4a ea 42 35 94 10 7b ad 83 9e 27 66 ac 99 c5 51 6d 96 65 5b e1 36 86 52 74 c4 01 40 d6 25 64 90 3f 8c 4e b3 61 29 01 4d 21 d9 72 b4 22 8b 70 ac a0 15 9e 11 46 5c 3c 03 cf 0e 37 77 b4 89 48 72 63 03 6d b9 8d 59 d5 d5 f7 18 79 8e d8 99 44 ae 97 e0 a5 c2 de 11 db 07 0a b4 cf 54 5d f4 d6 f2 58 63 f3 e6 3d 61 bc bd 6e 06 a5 24 48 46 2a cd 01 d1 44 93 12 93 29 1a 0c 73 05 a5 e2 18 92 9a 54 a5 c3 5c 86 c2 36 c3 88 08 Data Ascii: M<ELuJE_?To/:Qk b3P-8A_ZawRI.PrC~TmWKRHr^K9JB5{'fQme[6Rt@%d?Na)M!r"pF\<7wHrcmYyDT]Xc=an$HF*D)sT\6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	49891	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:05 UTC	618	OUT	GET /uploader/f3e535712b0f9decfe1f620107cfee74.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:05 UTC	593	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:05 GMT Content-Type: image/jpeg Content-Length: 86977 Connection: close x-oss-request-id: 66511B41F488A538300FDE8D ETag: "376B6A24C9B4CA9C6662244AFCF9E012" Last-Modified: Sat, 05 Aug 2023 07:44:48 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 7458696596561061205 x-oss-storage-class: Standard Content-MD5: N2tqJMm0ypxmYiRK/PngEg== x-oss-server-time: 108 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:05 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1f7ed9bf7c4-BNA
2024-05-24 22:57:05 UTC	776	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 5b 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCC[
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 03 20 75 38 a0 02 80 0a 00 28 01 32 3d 47 e7 40 0b 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 01 5e 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 08 de 42 dd 38 fa 71 eb f5 fe 74 01 42 eb 5b d3 b4 d8 5a 7d 42 f6 ce c2 2f f9 eb 7d 73 0d 9c 1c 7a cf 3b ac 49 8c ff 00 13 8c 9f 4c e6 80 3e 7a f1 df ed a7 fb 26 fc 30 82 ea 7f 88 5f b4 8f c0 cf 08 8b 50 4c 91 eb 1f 13 fc 2d 04 c0 2e d2 ff 00 e8 eb Data Ascii: ((((((((((((( u8(2=G@@P@P@^(((((((B8qtB[Z}B/}sz;IL>z&0_PL-.
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 2d fb 05 dc a5 bf d1 14 a8 65 c8 e4 51 cb 2e df 90 1f 1d f8 df fe 0b 5b ff 00 04 cd f0 1f 9a 9a 87 ed 49 e0 dd 7e e2 1d db ad 3c 0f 61 e2 3f 19 5c 1d 9b 73 83 a2 e8 d3 c0 33 b9 76 ef 9d 77 fc db 32 11 c8 ce 52 e5 b6 97 b8 1f 1f f8 d7 fe 0e 4e fd 81 f4 45 b9 4f 06 e8 ff 00 19 fc 7b 71 0a e5 1a df c1 76 be 1d b0 94 e0 f0 6f 35 ed 6a c9 a3 24 82 17 74 39 38 c1 00 90 2a 7d a7 97 e3 ff 00 00 0f 8d bc 71 ff 00 07 41 e8 93 28 5f 87 9f b2 5e b1 76 84 9d b7 7e 32 f8 95 69 a6 c4 c9 f2 e1 85 a6 87 a5 5f dd 03 8d e7 09 73 18 24 29 f3 30 cc 54 f6 9e 5f 8f fc 00 3e 4c f1 7f fc 1c 9f fb 5f 6b b3 93 e0 7f 84 ff 00 05 3c 17 06 1c 24 77 5a 66 bf e2 eb a1 9c 6d 2d 71 a8 6b 16 81 c8 da c4 ee 47 07 72 ed 2a 14 e4 f6 9d d7 e3 ff 00 00 0f 91 fc 63 ff 00 05 b0 ff 00 82 9b 78 ea Data Ascii: -eQ.[I~<a?\s3vw2RNEO{qvo5j$t98}qA(_^v~2i_s$)0T_>L_k<$wZfm-qkGrcx
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: a5 d6 a2 d4 6d a2 d0 f6 4d a8 4c f3 20 46 b6 9e 78 21 55 4d fb 99 86 00 07 f2 97 e3 df f8 39 7f fe 0a 65 e3 40 d0 f8 7b 50 f8 3f f0 c6 d2 40 55 2d 7c 25 f0 ea 3d 4e e2 02 36 85 11 5f 78 af 54 d7 2e 09 4c 70 1f 79 21 ce e2 c4 29 09 c9 47 77 63 a2 9d 3d f5 d7 4e 9f f0 4f 8c 3c 75 ff 00 05 7e ff 00 82 9c 7c 47 59 47 8a 7f 6c 3f 8b 3a 3d ad c0 6f 36 db c3 5a 9e 97 e0 0b 52 0f 03 6b f8 6f 4c b1 9a 2c 05 5c 7d 9e 78 87 24 8c 64 d6 6f 13 08 36 94 d6 d7 7f 8f 93 d7 47 a1 d4 a9 38 ec d3 76 d6 f6 56 6b d7 fe 1f a7 73 e4 6d 7b e3 87 c6 ef 8a 17 b2 9f 14 fc 67 f8 8f e3 ad 56 e3 77 9a fa af c4 ef 1a 78 96 e6 4e 0f 2f a7 45 aa dd 19 32 55 78 36 ce 72 00 01 48 c0 cf eb 94 e2 ed 7d fe ef 2d 5a fc b7 39 e5 1e 5b 6b 7b 9b be 19 f8 0f f1 cb 5d 8b ed 5a 67 c1 6f 8a 3a ca c2 Data Ascii: mML Fx!UM9e@{P?@U-\|%=N6_xT.Lpy!)Gwc=NO<u~\|GYGl?:=o6ZRkoL,\}x$do6G8vVksm{gVwxN/E2Ux6rH}-Z9[k{]Zgo:
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 80 14 f3 9c 7e 19 f7 3d 40 f4 f6 f7 a0 0b 54 01 62 80 0a 00 28 00 a0 02 80 2b d0 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 7f 23 df f0 77 19 23 f6 6f fd 8f b0 48 cf c7 ef 17 67 07 ae 3e 1a ea 64 67 f1 e7 eb 59 d4 e9 f3 fd 0d 29 f5 f9 7e a7 f1 1b 7d ac e8 fe 02 f8 79 e2 7f 8b 5a 9f 87 e1 f1 9f fc 21 13 78 06 01 e0 ed 57 54 d5 b4 cf 0e eb ff 00 f0 96 6b 1a e6 8d a8 ff 00 6c 49 a1 dc 58 ea cc 23 86 c2 33 6d f6 4b eb 7d be 74 e2 5d fb a3 31 f3 55 8c a6 b9 62 ec 9e ef ee d1 ab ab a7 af 75 e5 7b 1d d4 e3 cb cc d4 de 89 6f 1e 9a fb bb e8 ba e8 f6 e9 73 c7 cf fc 14 73 e2 cd a3 22 7c 3f fd 9f 3f 66 2f 0b 94 50 b6 37 56 9f 03 ad 3c 6d ab 59 db c6 ce 23 8a 0d 47 c7 77 be 2e cf 96 77 86 95 e1 f9 c8 1b d7 f7 6b b7 38 e5 ee 4d f3 c9 bd 15 b5 56 5a df 7d 5e Data Ascii: ~=@Tb(+@P@P@#w#oHg>dgY)~}yZ!xWTklIX#3mK}t]1Ubu{oss"\|??f/P7V<mY#Gw.wk8MVZ}^
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: bc 38 3c f4 cd 00 6d db c9 86 5c 2f 5d d9 e7 eb ed ed 5c e7 41 bf 6b 39 0a aa ab ce 1f f8 87 fb 47 a1 1c 50 07 5f a5 4a 64 b6 1b 52 16 98 90 51 65 51 c9 39 c8 0d 90 14 fa 1e 07 5e 83 a0 06 9b db 5c 42 97 72 4d 0c d6 b3 43 3c 90 cd 04 f1 ec 91 26 88 e5 c1 0d d8 64 2f 7c 13 ce 4f 40 0a a6 e4 80 bf 28 e4 7d 7d 3d c6 3f 33 40 0a d7 c3 69 25 38 03 3f 7b 1d 39 eb da 80 20 79 d5 ca ee 93 04 c2 25 55 55 dd 82 dc 14 24 64 8c 11 c9 3c 03 d4 0e c0 18 77 53 aa 11 95 2d c9 f6 39 e7 9e 08 f4 34 01 87 77 72 bb 0a 80 00 da 4e 0f 5c e1 bf da f4 a0 0e 0b 52 b8 cc 83 8e 99 1d 3d 19 bf da a0 0f 3e d5 25 4f 33 39 fb a1 98 fb 02 49 03 af 53 e9 eb 41 ce 79 96 a9 cd c4 84 72 18 0f c8 92 3f 51 40 1e 13 f1 a7 3f f0 80 ea c1 7f 8a 4b 60 7e 9e 7c 4d df fd a0 0d 4c fe 17 f2 fc d1 a5 Data Ascii: 8<m\/]\Ak9GP_JdRQeQ9^\BrMC<&d/\|O@(}}=?3@i%8?{9 y%UU$d<wS-94wrN\R=>%O39ISAyr?Q@?K`~\|ML
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: de da bf 0f f0 f7 8d bf 6b 5f 15 89 75 0f 11 f8 4f e1 c7 c2 1d 2d 80 7b 4d 1a 1d 4b fe 12 cd 5a ce 29 14 ca ad aa 6b 6b 9d 3a 4b d9 91 e2 12 8b 24 44 82 51 2c 6e d3 ed 57 1f 21 8d e2 57 26 e5 4e a5 db e8 9d 97 46 dd bf cf af 65 63 dc c1 e5 49 38 f3 a6 ed ab e6 b7 93 d2 d6 ba bf 5d 57 47 ab 6c a1 f1 07 e2 67 c5 df 86 fe 10 d5 bc 5d 77 e2 bd 0b 56 4d 30 5a 6d b0 b6 b9 b0 b7 96 e4 dd de db d9 00 25 9e cd 96 30 86 e9 5c 91 14 c7 e5 da 55 77 6e 1f 33 8f e3 1a f4 f9 52 9c a3 66 ee 94 9d ba a5 a3 ef ae ba ef ab 4a c7 d2 50 c9 e8 4d 5a 54 a0 f4 df 92 0d 5d 5b 76 e2 e3 bd ef 6e da 2b 23 f1 db f6 85 ff 00 82 f5 2f ec df f1 d3 c6 bf 03 7c 5d e0 4f 1d 6a da a7 81 b5 0b 7b 0d 4b c4 3e 1f be f0 75 ce 97 31 b9 d3 ac 75 08 a5 b7 86 67 82 e5 72 2e e4 88 ac a5 46 21 12 23 Data Ascii: k_uO-{MKZ)kk:K$DQ,nW!W&NFecI8]WGlg]wVM0Zm%0\Uwn3RfJPMZT][vn+#/\|]Oj{K>u1ugr.F!#
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 3f 9f e1 6a d4 94 1b 9d 4b ab db de 6d bd 2f d2 ce fb ea ec f7 bb d6 e7 a5 51 38 ab ad 15 f4 f9 5b cf a5 fb 75 fb be 13 fd b8 3c 41 73 a1 fc 0f f1 ee a3 6d 77 71 0c f6 b6 fa 5c a8 66 72 fb ca 6b ba 66 55 46 38 c8 24 b7 52 72 a7 b1 ce 58 9e 5a 95 62 bd e7 de fa be da 2d 3b 3b df cd 35 a6 be c6 59 77 14 de bb b5 d6 df a7 a5 8f e3 f3 f6 e5 d2 47 8a ff 00 69 9f 8b 5a e7 d8 fe d4 6f fc 41 6d 71 e6 e5 41 22 4d 0b 47 1b 70 48 27 6e de b8 1d 7d 6b d4 85 1a 7e c5 5a 3d 37 76 ba 69 a5 e8 bb a5 6d d5 cf 6e 9f 5f 97 ea 7e 87 fe c7 49 ab c3 f0 77 c3 b6 31 5e 5f 69 21 6c ee 66 79 6c e7 74 17 06 db 66 d4 95 54 a8 dc 04 8d e5 92 d9 4d ef 85 6d d8 1e 7c d3 a1 51 b8 36 9b 6a 49 a6 f6 95 bf 0d f6 ba b5 b5 ba 3d 3c 3d 35 56 13 6e 29 ab 34 97 9a 4f 44 da b2 be 9f 76 c7 f4 13 Data Ascii: ?jKm/Q8[u<Asmwq\frkfUF8$RrXZb-;;5YwGiZoAmqA"MGpH'n}k~Z=7vimn_~Iw1^_i!lfyltfTMm\|Q6jI=<=5Vn)4ODv
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: ad 63 2c e6 ee d9 9a 0b 8b 15 d1 ae 6c ae 04 d0 89 12 27 33 ff 00 a3 5c 79 57 21 1f ca f2 5d c1 29 4d 7b db 5f a3 56 6d 35 f3 db 75 7e fe 47 a9 95 fc 0b cd 37 fa 7f 91 fc bb fc 42 fd a3 34 bb af 19 6b 4b ad 68 b0 2d f5 dd eb 34 b7 37 9e 00 d5 64 9e dc 47 1a 43 b5 f5 28 2c ed 78 7f 2c 30 96 68 26 9d b2 37 4c f8 cd 7a d4 77 8f 47 ef 79 27 bd b4 ea ed f7 75 b6 87 bb 3f 85 fc bf 35 73 f4 b7 f6 6e f8 97 f0 9b 5d f0 2e 84 fa 77 8e 74 2d 36 fe de d6 e1 ee b4 97 b8 1a 3c 29 3c 65 77 5b cb 65 7e 2d ee 31 c9 cb b4 6a 0e df b8 36 f3 e7 e3 a2 e3 28 df 5d 53 ec f9 6e 92 4d de ef af 9e af ce de be 5c 94 e2 d3 f5 4b e4 ee be 6b 4e f6 3f 77 3f e0 93 3a 0c b7 df 18 fe 35 78 93 ce b6 9a df 47 f8 77 f0 d7 41 9e e7 4f 98 4d a7 df b6 ad ad f8 97 5b 65 67 c0 0d 35 bd a4 50 19 Data Ascii: c,l'3\yW!])M{_Vm5u~G7B4kKh-47dGC(,x,0h&7LzwGy'u?5sn].wt-6<)<ew[e~-1j6(]SnM\KkN?w?:5xGwAOM[eg5P
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 8f d5 f2 68 5b 0a a5 77 65 15 a3 bf 7b 6a db df 4d ee f6 7e a7 eb 6a 41 34 96 36 e0 48 96 71 b2 b6 c5 d3 a3 5b 5d a3 8f 93 0a 38 53 93 90 3d 49 e3 3c fc 8e 06 2a 74 f9 6f 67 e9 b7 e3 e5 aa d2 fe 76 56 c2 bb f7 a7 b3 5c d7 f2 7a ff 00 56 dc f9 a7 e3 6d c6 a7 0f 86 b5 05 82 fe e5 40 b6 ba 52 4c ad 96 1e 4c d8 07 e6 c7 6c 13 8e 9c 63 9a d2 30 b4 ed 7e 8a de 7c cb 44 f5 d3 b7 e9 63 d6 cb 3e 18 6a b6 6b 5d db 7d be e6 7f 13 bf 14 35 3f 06 9f 19 78 94 37 87 67 4b d3 ae ea 6e 6f 6d f5 7b af de 2a de 4b 16 d9 6c 37 ad bc 27 11 86 8e 48 8a 92 0b 86 43 95 31 fa 54 56 bf e0 de fd 6f cd db 4d 3b 6d f7 23 da 9d 4f 75 e9 f7 3f 35 e5 fd 79 9f a1 7f b2 5d 9e 9b a9 fc 34 8a cb 4f d2 66 b8 b2 82 fa ee 49 61 f1 24 56 7a 84 d8 2f 8f 2a da e5 ed c6 c8 13 ca 72 13 ca ca 6e d8 Data Ascii: h[we{jM~jA46Hq[]8S=I<togvV\zVm@RLLlc0~\|Dc>jk]}5?x7gKnom{Kl7'HC1TVoM;m#Ou?5y]4OfIa$Vz/*rn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	49893	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:05 UTC	618	OUT	GET /uploader/a433e880ee81352d122e20a49064772e.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:05 UTC	592	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:05 GMT Content-Type: image/jpeg Content-Length: 64330 Connection: close x-oss-request-id: 66511B419979C735312A3058 ETag: "661C541D97FD9F40F1BBE5F641152907" Last-Modified: Sat, 05 Aug 2023 07:55:43 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2786840610619894674 x-oss-storage-class: Standard Content-MD5: ZhxUHZf9n0Dxu+X2QRUpBw== x-oss-server-time: 80 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:05 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e1f80899f7c8-BNA
2024-05-24 22:57:05 UTC	777	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCC
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 2a 79 a3 df f0 7f e4 01 54 01 40 05 26 d2 dd 80 53 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 0f 9e 7e 3e 7e d5 ff 00 b3 b7 ec b9 e1 f8 3c 4f fb 41 fc 5e f0 3f c2 8d 26 f2 66 87 4e ff 00 84 b3 5a 82 cf 55 d5 d9 3c a1 22 68 3a 04 42 7d 77 c4 33 c2 d3 c0 27 b6 d0 b4 ed 46 e2 df ed 36 a2 68 90 dc 44 1a e1 07 3d 16 fd 3c fe 7a 25 d3 7e e0 7e 6b 78 9b fe 0b f7 ff 00 04 f4 d1 27 9e 0d 0f Data Ascii: (((((*yT@&S((((((((((((((~>~<OA^?&fNZU<"h:B}w3'F6hD=<z%~~kx'
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 4c ee 1e a3 d3 b7 f2 eb cf 53 de 83 5b 5b e7 ba 49 f6 b6 b7 fb fc c0 ff 00 4b ef f8 24 eb 5c 7f c3 ba 3f 64 28 a7 6b 87 36 ff 00 05 bc 33 6e ad 3d ac 36 9b 16 de 4b fb 54 b7 89 21 45 13 c1 04 36 f1 0b 7b e9 19 e7 d4 2d 9e 0b cb 83 f6 89 a6 2d f3 b5 55 a6 fc ff 00 e0 3f d5 fd cd f5 3a 0f d1 0a cc 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 03 f8 95 ff 00 83 a2 4d b2 fe d0 df b2 bc 13 a6 f1 1f c2 1f 18 ce 32 c0 09 0b f8 f6 58 b6 90 c3 0a 23 16 ea 77 6e e7 7f 3b 42 92 7d 3c a5 4a d8 c7 a3 5f bb f5 5a cb 6f bb ba f2 b3 Data Ascii: LS[[IK$\?d(k63n=6KT!E6{--U?:((((((((((((((M2X#wn;B}<J_Zo
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 40 93 18 db 5b ce f7 a9 ab da 36 bd de 8d a6 bf 3b eb f9 81 fe 94 1f f0 4c af 88 16 1f 13 ff 00 62 9f d9 f3 c6 ba 45 9e 93 65 a4 6b 5f 0b 7c 14 b6 91 68 93 4e da 7c 37 1a 06 87 6b e0 fd 5a d5 6d 67 2f f6 4b 8b 6d 5f c3 77 c2 ed 12 47 12 5c 3c 92 9c 6e 02 bc fa cb de bf a2 fc 0e 83 ef 9a c4 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 29 3d 53 5d d3 03 f9 9f ff 00 83 8c 7e 1e e8 ba 67 c0 9f 86 7f 19 bc 2b 09 d3 7e 2f e9 7f 13 34 7f 02 26 b7 c5 d4 77 3f 0e fc 4d a4 f8 ab 57 bb d2 b5 3b 29 c8 82 f6 2b 6d 77 43 b2 6d 26 42 Data Ascii: @[6;LbEek_\|hN\|7kZmg/Km_wG\<n((((((((((((()=S]~g+~/4&w?MW;)+mwCm&B
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 5a 68 9b a9 5c 0c b0 1e 81 bb 9c 67 d2 a8 0f f4 02 ff 00 83 73 3e 2e 47 f1 1f fe 09 a9 e0 6f 09 5c 5e 2c da cf c1 8f 1c 78 e3 e1 f5 d5 a9 6f de c1 a4 5f 6a 8d e3 af 0d cc 13 6a 91 6b 36 99 e2 b3 6d 68 e3 78 64 b0 78 83 e6 06 55 e6 be b6 e9 6f c6 e9 7e aa c0 7e f4 56 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 06 5e b7 ac 58 78 7f 49 d4 f5 bd 52 e2 2b 4d 37 48 d3 ef 75 3b fb 99 9c 47 14 16 96 16 ef 75 73 2b b9 c8 01 20 8a 47 e8 49 db c5 00 7f 9b cf ed 39 f1 56 ef e3 0f c7 0f 89 ff 00 12 6e ae 2e 25 7f 1c 78 f3 c4 de 2c Data Ascii: Zh\gs>.Go\^,xo_jjk6mhxdxUo~~VP@P@P@P@P@P@P@P@P@P@P@P@P@P^XxIR+M7Hu;Gus+ GI9Vn.%x,
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 6b 22 84 90 98 55 75 db 6b d7 71 8d 92 59 42 c5 90 66 48 f3 a9 d3 e7 fa 01 fe 9e b5 c6 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 7f 34 df f0 72 57 c5 76 f0 ef c1 af d9 eb e1 6d a5 c9 49 fc 67 f1 07 c4 be 2f d4 ad d4 12 5f 4a f0 4e 85 6f 63 6e f8 d8 50 9f ed 7f 13 db 2f cd 22 61 51 ce 1c 12 50 03 f9 01 b5 d4 b2 41 e4 15 27 38 dc 0f 3b 81 ef f5 ef f5 ae 80 3e 82 f8 47 f1 03 59 f8 6f e2 9d 33 c6 9e 1c 36 cf a8 59 5b 5f 5a 35 bd e4 6d 35 95 f6 9d ab 59 c9 a7 ea 9a 6d f4 48 e8 64 b5 bc b3 9e 68 5d 37 a9 59 3c ab 84 c4 d0 Data Ascii: k"UukqYBfH@P@P@P@P@P@P@P@P@P@P@P@P@P@4rWvmIg/_JNocnP/"aQPA'8;>GYo36Y[_Z5m5YmHdh]7Y<
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: c8 fa e3 ca f8 61 e0 74 f5 eb ff 00 12 36 cf e5 cd 00 6c 47 f0 ab e1 84 44 f9 3f 0c 3e 1a 44 0e 37 01 f0 fb c2 19 6c 6e c6 4c 7a 44 79 db 9e 37 06 c7 38 c6 4d 00 6b 27 82 bc 1b 00 65 83 c1 7e 0b 80 c8 30 c6 df c2 7a 04 1b b6 ee db bb c9 d3 e3 24 ae e6 da 58 92 32 71 8c d0 05 fb 4f 0b 78 72 db 26 1f 0f 68 70 09 31 bc 41 a4 69 b1 6e db bb 6e ed b6 df 36 dd c7 6e 7e ee 4e 31 9a 00 e9 a3 82 38 f6 2a 20 54 4c 00 8a 02 8c 06 dd 80 10 05 19 e9 c2 fb f2 68 03 c6 3f 66 2c ff 00 c2 43 f1 b9 5d 71 9f 1b 5b ca 7a 8f f5 83 55 f7 e0 7c a3 1f 5e f5 9d 4e 9f 3f d0 9a d1 e5 e5 bb de ff 00 a7 9f 99 f5 b8 4c 8c e7 1e d8 ff 00 eb d6 66 22 f9 7e ff 00 a7 ff 00 5e 80 23 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 Data Ascii: at6lGD?>D7lnLzDy78Mk'e~0z$X2qOxr&hp1Ainn6n~N18* TLh?f,C]q[zU\|^N?Lf"~^#(((((
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 33 0c e2 9c a6 e5 80 84 66 b9 1c ae d4 e4 f7 e5 d5 ad 35 d1 5b d6 e7 e9 fe 1a 46 96 27 36 8e 59 51 42 6a b5 9f bc a2 db 8c 95 b4 e6 57 56 d9 da df fa 4d fe 58 f0 c7 c2 6f 11 f8 8f e1 67 84 f5 4f 89 7f 15 7e 3b 3f 8c 6f 34 2b 4b 8d 4e f7 c1 ff 00 b4 1f c7 7f 0b da 06 9a 31 24 7e 5e 9b 3f c4 cd 7a dd 2f 1a 36 59 f5 09 ee 05 c1 9a f2 69 7c 98 ac ad d2 1b 48 bf cb 2e 22 fa 60 f8 99 4b 3a 9a c9 ab 49 65 70 6d 5d ca 17 f7 6e ac d4 b5 56 69 5d 3d fc 8f ec fe 1f f0 9b 87 e6 94 a7 46 9f bc 94 a5 7a 6e f7 92 4e fa a4 de eb aa f3 5d fc 53 59 fd 8f be 1a 78 cb 57 b0 b9 f1 a7 c5 6f db 07 c5 b7 36 12 cb 73 a0 7f 6b 7e d6 7f 16 a1 b7 f0 ed cc d0 cb 15 cd d6 95 6f a7 ea b6 bb 2e 67 0b 6c cd 2c af 26 cf b1 c6 11 40 79 33 e3 53 fa 6b 78 9e 95 48 c7 33 b7 3b 51 97 3e 1b 0d Data Ascii: 3f5[F'6YQBjWVMXogO~;?o4+KN1$~^?z/6Yi\|H."`K:Iepm]nVi]=FznN]SYxWo6sk~o.gl,&@y3SkxH3;Q>
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 6d bb b6 bf 3e 9e a6 49 5e fa a5 65 f7 9e 0d fb 57 de e9 b6 3a 8f ec c6 75 cd 53 4e d1 f4 4d 33 e2 96 a5 e2 9d 46 fb 54 ba fb 2d b4 4d e1 df 0a 5e c7 6a c5 b6 48 46 fb 9d 62 28 77 63 31 99 83 84 93 01 0f f5 6f d1 75 53 5c 45 89 72 e4 49 57 c2 eb 2b 25 6e 68 db 57 a7 9f 4d af d0 fe 7d f1 6d 4d d2 a8 a0 a4 df b3 9b b4 53 6e ea 2f 5d 3a a5 a5 fe 47 f4 ad fb 06 dc 7c 3b 9f f6 42 f8 07 1f c3 0d 7b c3 de 24 f0 b5 a7 c3 bd 12 d2 3d 57 c3 1a 85 ae a7 a5 49 ac 44 26 93 c4 b6 df 6a b2 96 6b 7f b7 5a 78 8a 7d 5a 2d 4e 10 d1 cb 0d f0 9d 65 b7 b7 1b 23 1f ee 76 55 52 15 30 58 4f 65 28 4d 7b 0a 29 f2 4a 32 4b dc 5b f2 dd 27 ad ed cc de b6 6b 6b ff 00 9d 59 d5 2a 90 c6 e2 5c e3 24 dd 57 24 a5 16 a5 6b 28 df 95 fb d6 d1 a6 ed 67 28 b4 a4 da 92 8f d7 15 e8 ab 5d a4 ad 6b Data Ascii: m>I^eW:uSNM3FT-M^jHFb(wc1ouS\ErIW+%nhWM}mMSn/]:G\|;B{$=WID&jkZx}Z-Ne#vUR0XOe(M{)J2K['kkY*\$W$k(g(]k
2024-05-24 22:57:05 UTC	1369	IN	Data Raw: 00 17 ed 0c eb f7 79 72 cb b9 5c a2 dc 5b 92 9a d1 38 a6 95 ac ed 77 f6 6d 1b 5b 5b bf e9 39 46 48 1f fd 7a fd 4c fc 49 2e 69 5a fd f5 b7 e3 6f 31 28 24 b1 41 d0 14 01 5e 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 02 c5 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 4c a5 cb 6d 2f 70 1a 4a e0 92 46 00 e4 e4 60 7e 34 e5 25 14 dc 9a 49 26 db 6d 25 64 ae f5 7a 6c 0b de d1 6b 7d 34 d5 ea 7c c3 f1 a3 f6 83 d0 3e 1d d9 df e9 ba 63 1d 43 c5 76 b0 90 2d e1 0b 21 b1 17 19 55 54 6c 94 92 f6 5d 84 db db b1 01 bc b7 6d d8 5c 37 f3 e7 8b 3e 3b 64 3c 09 42 ad 1c 3d 7a 75 b3 48 a9 41 28 4d 54 8c 64 d5 92 d1 38 dd 3e f7 Data Ascii: yr\[8wm[[9FHzLI.iZo1($A^((((((P@P@P@P@P@P@Lm/pJF`~4%I&m%dzlk}4\|>cCv-!UTl]m\7>;d<B=zuHA(MTd8>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	49894	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:05 UTC	653	OUT	GET /liquid/buyer/public/js/lib/index.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"6650447c-eac61" If-Modified-Since: Fri, 24 May 2024 07:40:44 GMT
2024-05-24 22:57:05 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:05 GMT Connection: close last-modified: Fri, 24 May 2024 07:40:44 GMT vary: Accept-Encoding etag: W/"6650447c-eac61" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54127 Expires: Sat, 25 May 2024 02:57:05 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1fa7ba7f7d4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	49878	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:05 UTC	949	OUT	POST /buyer/user/user-capi HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 512 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=whiskys Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; ga_utm={}; _fbp=fb.1.1716591400298.1601704377
2024-05-24 22:57:05 UTC	512	OUT	Data Raw: 7b 22 66 61 63 65 62 6f 6f 6b 22 3a 7b 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 22 50 61 67 65 56 69 65 77 22 2c 22 65 76 65 6e 74 5f 74 69 6d 65 22 3a 22 31 37 31 36 35 39 31 34 32 33 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 69 7a 76 62 67 36 34 6f 72 38 38 50 61 67 65 56 69 65 77 31 37 31 36 35 39 31 34 32 33 35 32 30 22 2c 22 65 76 65 6e 74 5f 73 6f 75 72 63 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 61 76 6f 62 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 3f 68 61 6e 64 6c 65 72 3d 77 68 69 73 6b 79 73 22 2c 22 63 75 73 74 6f 6d 5f 64 61 74 61 22 3a 7b 7d 2c 22 70 69 78 65 6c 5f 69 64 22 3a 22 32 37 30 30 31 30 34 39 39 34 33 37 30 30 37 22 2c 22 66 62 63 6c 69 64 22 3a 22 22 2c 22 75 73 65 72 5f 64 61 74 61 22 3a 7b 22 63 6f 75 6e 74 Data Ascii: {"facebook":{"event_name":"PageView","event_time":"1716591423","event_id":"izvbg64or88PageView1716591423520","event_source_url":"https://www.cravob.com/products?handler=whiskys","custom_data":{},"pixel_id":"270010499437007","fbclid":"","user_data":{"count
2024-05-24 22:57:06 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:06 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:06 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:06 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 30 36 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:57:06"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	49895	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:06 UTC	693	OUT	GET /liquid/buyer/public/img/default.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66387ef8-1a84" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:06 UTC	585	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:06 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT etag: "66387ef8-1a84" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 221034 Expires: Sat, 25 May 2024 02:57:06 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e1fdf9e4f7e4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	49900	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:06 UTC	626	OUT	GET /uploader/129e8ce2f2da19c63117ea13fc1df76c11cd364b.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:07 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:07 GMT Content-Type: image/webp Content-Length: 24606 Connection: close x-oss-request-id: 66511B433BC7A8393854C61A ETag: "7DC2CA626C17D61ECC9CDE084CEBE168" Last-Modified: Wed, 06 Sep 2023 10:13:41 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 18240186762132226967 x-oss-storage-class: Standard Content-Disposition: inline; filename="221f07788cb8e2594dea5346de08569f12673371_221" Content-MD5: fcLKYmwX1h7MnN4ITOvhaA== x-oss-server-time: 82 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:07 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e203382ff7c4-BNA
2024-05-24 22:57:07 UTC	690	IN	Data Raw: 52 49 46 46 16 60 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 38 00 00 00 cf 02 00 cf 02 00 49 43 43 50 a8 01 00 00 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 5f 63 70 72 74 00 00 01 4c 00 00 00 0c 77 74 70 74 00 00 01 58 00 00 00 14 72 58 59 5a 00 00 01 6c 00 00 00 14 67 58 59 5a 00 00 01 80 00 00 00 14 62 58 59 5a 00 00 01 94 00 00 00 14 72 54 52 43 00 00 01 0c 00 00 00 40 67 Data Ascii: RIFF`WEBPVP8X8ICCPlcmsmntrRGB XYZ )9acspAPPL-lcmsdesc_cprtLwtptXrXYZlgXYZbXYZrTRC@g
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 91 8f 7d e2 0c 72 44 92 dd b9 e5 3b ae 5e 65 ad 13 d6 3b 86 93 6d 30 2a c6 66 6e bb 7b f8 ff fe cf 59 39 1e 29 37 be e3 fb 9a 80 6d 49 58 bc e3 02 59 b2 b0 0d dd 5b 7f a4 f8 db 4f c8 d1 48 79 df 6f 0f 41 46 92 6c 39 f1 ee 0a 84 65 81 73 fb db be e6 1f 3f 2a c7 22 e5 99 df 87 52 05 06 01 e2 bd 28 84 a1 c8 be e7 6b ff ce 5b 72 28 72 fa 6d 32 4d 1b f1 1e 17 76 61 be 31 fd 7f 42 b1 7c f7 1e 48 96 a8 a0 70 2a 3b df fd ff 2f 84 22 f8 76 ca 86 25 2a 2a b8 fd c4 d1 94 e3 90 f2 e6 ab 00 44 45 e5 44 93 55 02 b1 7c a0 43 b2 a8 ae b5 9c 88 c5 a5 1b 54 59 c6 c2 81 28 f3 e2 f2 d5 39 55 08 90 91 e3 10 9a 9f db 46 c5 6d 4c 28 4e 54 7d 55 04 f3 c2 39 18 95 45 d5 1a 5a 95 43 d1 c2 70 b5 44 47 3d 62 f1 b9 f1 6a e1 e1 91 37 83 51 af 2b 57 0a ba bd 60 24 2a 2e 16 88 e5 96 1c Data Ascii: }rD;^e;m0fn{Y9)7mIXY[OHyoAFl9es?"R(k[r(rm2Mva1B\|Hp;/"v%DEDU\|CTY(9UFmL(NT}U9EZCpDG=bj7Q+W`$.
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 0e 6a f7 a9 c7 75 33 15 6c b6 2e d4 c4 32 4b 08 6d 5a a9 09 99 12 f6 d9 c6 58 3d 4c b5 10 17 8a e1 ea 59 20 cd 16 9a e8 53 87 42 fb c7 12 6a 76 73 3d 1c b7 eb 16 ea 1f 6f ee ac 03 fc d1 0d 25 ec 53 8d a9 3a f0 f2 5f e7 b8 83 28 29 ea 80 f1 f1 a0 85 0b 6a 72 eb a1 86 6b 62 f6 50 91 6b 40 d6 7c 52 0d c9 35 60 71 7b 47 0d b7 cb 1a 00 3e d9 90 3b a8 b1 bb 26 5e 59 3e 34 1d dc 99 5c 01 55 4d e6 f2 f2 83 59 42 2a fa 60 55 cc 82 91 a5 7e 10 42 06 51 79 a7 e1 30 d4 6d f7 a9 45 8d f4 62 90 bc 7d 9a 9c ea 80 f1 de 92 1c 80 60 52 d4 a3 f6 94 c7 88 c1 ed e5 3a 90 ad a9 d6 89 10 64 26 e6 eb 00 44 77 fc 84 23 10 c3 bb 7b c8 35 80 37 ed 7b 6e 39 04 6d 1e c3 52 f5 64 d2 c1 d3 a7 e5 00 b4 a3 89 65 55 ce 82 99 f6 f3 04 60 ed ef 83 a8 c7 ed bb bf e4 00 d4 9d 3e 8f ac ea c9 Data Ascii: ju3l.2KmZX=LY SBjvs=o%S:_()jrkbPk@\|R5`q{G>;&^Y>4\UMYB*`U~BQy0mEb}`R:d&Dw#{57{n9mRdeU`>
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 40 79 86 25 a2 15 9b b7 bc 18 29 ce c9 d7 ad e9 13 81 62 b7 8f 47 b6 66 8e 96 81 62 17 8f 05 fb df 9c 93 63 84 bc df 81 b2 91 61 62 79 81 30 79 62 64 45 b3 76 38 f7 e2 c4 e9 24 e1 91 bc 18 27 5e 7d 00 a5 23 c6 3b 27 e5 18 21 bf f1 05 22 de 3c 7a d9 73 26 4a 5e 1d 89 57 86 1d 27 08 92 e6 12 2b 1d 0b c6 66 1d 24 e0 3a 20 d9 1a 9b 25 48 ca 37 01 ad 1d 9b 2b 83 04 ec c9 78 cb ea 39 39 48 8c 88 c4 cb cb 47 b4 e4 c0 8a 47 e6 74 7d 5e 14 72 3c 16 fb e5 8b 92 30 22 60 c1 7e ff bc 24 60 24 04 ec 4f 6e bb cc fb dd 7d 4d 28 a4 71 7e d7 65 70 f2 58 13 31 8f d9 66 45 a9 94 e4 9a 18 29 99 9a bc bb 68 b3 cf 6f e4 88 8a f2 b8 92 f1 6c 09 79 5b 42 72 4b c0 71 0d 69 96 99 ba 42 0e 88 a6 b0 c8 b8 28 e6 08 69 eb 09 ab cb cc 19 60 c5 a3 79 68 09 38 c5 12 f9 36 c5 1c 60 e5 63 Data Ascii: @y%)bGfbcaby0ybdEv8$'^}#;'!"<zs&J^W'+f$: %H7+x99HGGt}^r<0"`~$`$On}M(q~epX1fE)holy[BrKqiB(i`yh86`c
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 57 1c c6 42 ba c7 d1 15 53 8a 67 0a 37 45 9f df ed f6 f1 4c 35 85 f9 ff b3 1b 2b 9c cf 97 a6 80 db f5 8c 74 ff 1f b9 29 26 23 9e 63 59 18 c5 53 97 ce c7 65 b1 b1 54 99 d9 34 ac 22 ab 74 e5 e3 b2 10 28 9d 59 15 b2 06 f1 6e 55 01 22 21 57 05 ca c6 12 13 b9 29 e4 6c 64 00 53 95 73 44 63 c1 44 6e 0a 3b 9b 1f 3d d2 95 9e 8b 15 ce ac 0a 63 0f d2 75 55 80 51 9b 79 c4 33 eb cc 6d 81 e2 e9 73 7f c5 8f 9c 8e b8 2f 0b 94 8d 0c 77 6d 11 ae 05 5b 95 c9 54 a6 95 0b c8 2e 0c 11 ad 8f 6d 31 07 56 34 87 db b2 98 73 25 5a eb f1 53 dc 64 b0 1d e8 ca e9 25 9d ba 9c 52 3c 72 57 7c 19 d7 6d a1 7c ea b2 ce 44 bc 6e 0b ac 74 fa b2 cf e6 48 c7 2a 0b 3b 1f ea cc 65 c1 8c a7 2f ad 74 5c 17 75 ee b9 a4 33 d5 16 c7 5d 99 f1 78 92 0e 6e 8b 87 d3 78 ea b2 cf 8e 6b 3a c2 55 21 5b 5d f6 Data Ascii: WBSg7EL5+t)&#cYSeT4"t(YnU"!W)ldSsDcDn;=cuUQy3ms/wm[T.m1V4s%ZSd%R<rW\|m\|DntH*;e/t\u3]xnxk:U![]
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 35 60 2c d9 e9 95 cd 07 41 66 43 b5 26 f2 a9 68 01 39 21 6b 03 2b 4f 6d ff 6f f7 25 27 33 78 5d 9c 7a fd 47 4a cb da c0 23 3b e6 46 4e 2c 86 8b a5 0e 17 29 0b ae 7a f8 89 5b 8d 2c 6b 70 18 29 37 ce bd f6 93 c6 62 43 99 bd 5b 46 8e bd 10 2c 8c 25 a7 0d 90 e5 e1 9b fe ee f6 bd 65 92 65 59 03 02 94 1b 67 9f f8 0d ec 64 b4 9e 93 d9 7f f5 d3 2f cb c1 a2 df 90 ad 0d 40 f6 de a9 7f 74 cb 36 72 02 30 1a 00 46 ca 8d d9 87 7e 86 9c 64 89 f5 e5 64 26 ca f3 26 54 ca f3 23 20 36 96 93 b9 b3 f7 0f f6 5d d7 06 5b 60 64 d5 99 65 41 6e cc 7d e1 f7 c8 05 4e 5c a4 2c 86 7b 59 0e 15 d0 6f f0 36 9d cc 1d db ff c3 63 b7 4e 74 3a 66 ad 85 11 58 be 08 79 8d 2c 6f 20 cb c8 6b 64 81 65 90 65 19 64 bd 3d cb 20 2c 0b a4 e5 cf fe 2a 4e 38 71 d1 b2 bb c5 02 d1 b2 03 58 17 21 3b 39 ef Data Ascii: 5`,AfC&h9!k+Omo%'3x]zGJ#;FN,)z[,kp)7bC[F,%eeYgd/@t6r0F~dd&&T# 6][`deAn}N\,{Yo6cNt:fXy,o kdeed= ,*N8qX!;9
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: fb 8d ab 9d ad 17 02 b0 74 e4 14 b0 72 ec 25 80 fe b2 31 79 15 81 f9 2b 4d 56 50 38 20 d2 41 00 00 10 53 01 9d 01 2a d0 02 d0 02 3e 6d 36 97 49 24 22 a2 2e a1 f2 09 39 d0 0d 89 67 6e f4 aa a7 41 ea 05 d9 cc 6d 8e 83 42 93 09 29 e8 66 93 7e 97 fc ff b5 cf 80 de 49 f3 33 dd 1e 4a fe d1 f3 53 8f 2f 41 66 4f d7 16 77 fd 35 fe 9e ff 97 ee 33 d0 6f cc ff ee 97 ab 67 fd ef 61 3f dd b7 eb ff af fa b0 f9 cf fa d4 e0 5a ff 55 fc 8c fd 73 f9 ab e6 0f e9 fc 31 f3 85 f1 b9 69 9c d7 db fc ec 7f 77 fb 41 e4 8f cc af f7 7f c6 fb 08 fb 9f d0 56 02 1d 34 ef 0f f9 4f 60 bf 6f 3e ef fb 05 ea b9 fa de 6b 7e f7 fe f3 d8 0b f3 4f d7 bf fc fe 1f 7f 84 ff b1 ec 09 fc f7 fc 37 fd 5f f1 5f 92 5f 35 df fa ff b3 f4 49 a8 5f f3 8f f1 9d 6d bf 7a bd 90 ff 60 3f ff 89 68 66 ec 23 13 f9 Data Ascii: tr%1y+MVP8 AS*>m6I$".9gnAmB)f~I3JS/AfOw53oga?ZUs1iwAV4O`o>k~O7___5I_mz`?hf#
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 12 c1 7e 1f ff f7 0e 3f ff 70 3d 18 df fe 7d 70 90 51 fe 40 60 28 d0 58 8b b9 5c 9f 87 16 df 43 33 bd b0 ae d7 a3 25 5f 03 f2 0a 7b 4c f6 99 ed 33 da 67 b4 cf 69 9e cd 3a ad b1 1e d3 c1 ca 8b 6b bf bf 0f ff f4 a4 d8 65 3f a6 1d ae ec f3 b1 7e b1 c9 73 0f 10 49 07 e6 af 8a e7 61 fa 13 67 aa 51 a1 f7 92 0b 82 82 83 2a 71 a9 c6 60 2f 20 bd 1f c9 5b ff fa 9b bf dd 24 4f e4 14 f6 99 ed 33 da 67 b4 cf 69 9e cd e5 fa e7 9e 24 bb 9b bf fe 78 9a 59 ed d6 bd 44 d7 5a c2 61 85 fb a0 5f b2 c3 db 77 e5 18 62 71 a4 cc 8a 51 07 10 66 b3 61 0b 7d 39 19 97 c7 fe cf 05 8d ff 6c c1 9f 92 d4 95 da 25 ea b5 59 4a f4 b6 d6 49 2d 89 7c 31 b0 1d ce a8 66 ec 23 13 f9 05 3d a6 7b 4c f4 82 2e ff fc a7 13 34 9f ab c0 30 09 9c c2 e7 f2 f4 55 a0 26 1a 2c ef b2 61 05 b5 d1 57 e7 ed 06 Data Ascii: ~?p=}pQ@`(X\C3%_{L3gi:ke?~sIagQ*q`/ [$O3gi$xYDZa_wbqQfa}9l%YJI-\|1f#={L.40U&,aW
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 17 18 1c 50 d2 a5 49 6c 3d a6 7b 4c f6 99 a8 00 00 fe ff df ce 01 f0 d7 5a 93 20 a1 50 b5 94 12 f5 73 ee 57 cd c9 3e b4 d1 c2 72 f2 89 39 fc 5b f0 52 30 c8 2a 0a eb bf ed 5a cf 59 b2 d9 d8 70 58 9b e6 50 24 cb 85 13 cc 46 13 b8 40 fa 24 a1 99 80 1e 71 b4 f0 5c 8a 19 12 de 87 26 aa 5a 96 57 da 2b 1b 7b 86 7c 22 2e f4 ba 06 89 e8 f5 d0 74 73 a1 6d bd dd a5 55 a8 e7 c0 18 9b cd 3e c0 98 07 60 9c d3 fc fc 17 01 21 7b de 3e 14 3d 96 1a 53 b9 4c 31 d4 3f 80 cf 5b 36 70 aa 87 97 ee 9a ca fd e9 73 e2 8b f2 ab ed 80 1a 85 3e 88 46 e2 b5 95 cd 8d 96 8b bb e2 33 a0 0c f5 17 5c 8e 2c 39 a6 70 44 13 5e 22 20 63 19 c2 5e 7f 71 a4 4d aa 6e 2d a4 cc ed 41 fe 95 bf bc f4 b4 f9 65 04 79 5c 1c 7d 10 bc 3a 09 46 b3 96 de 34 92 95 17 d3 d7 ea 73 79 e7 b7 6d f4 a9 95 b1 4a ed Data Ascii: PIl={LZ PsW>r9[R0*ZYpXP$F@$q\&ZW+{\|".tsmU>`!{>=SL1?[6ps>F3\,9pD^" c^qMn-Aey\}:F4symJ
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 11 b4 44 52 eb f3 9e 87 90 63 b9 e9 ef 33 73 8e ef c4 0a 07 ab b0 c7 e0 57 dc cf 07 3f 02 45 87 ae e4 98 38 87 ff fc 90 f3 4f f2 5e 47 b0 00 02 39 ee 31 27 4f 1b d9 d7 df a1 9a 64 2a ab b0 1d af f7 db cb 7a 77 05 28 6a d3 5f 97 3b b9 88 74 81 a1 cf 0d 3d ef f4 fc b9 01 47 3b 47 7c c8 6f 0f b4 f3 a6 9f cb e1 ae ea 58 89 18 51 f6 c5 56 92 0c fa 58 63 63 65 e6 14 84 f2 19 df f7 a4 c3 a5 c7 b9 0d e8 30 a9 5c 6b 30 a4 db 60 bc c5 57 32 52 5a 74 2f 57 48 45 9e 09 ad da 37 16 f8 9f 0a 4c 54 87 2b 50 89 58 1e 8e 08 de d4 59 01 c6 6e 8b 52 f1 cb 9a c8 53 de e6 4b 78 ac 95 a2 5c 38 d8 a7 c4 6e 58 2b 5b 22 d4 d3 05 05 04 b8 bc ff 81 13 dc aa 79 41 16 2d 4f 25 d4 0d 7f 96 e2 3b 74 8d 83 e4 f7 24 71 d3 37 0d d4 07 7c 28 ef e6 25 e8 d0 4d 1e 9d 9c 9c c0 00 11 3e f8 97 Data Ascii: DRc3sW?E8O^G91'Od*zw(j_;t=G;G\|oXQVXcce0\k0`W2RZt/WHE7LT+PXYnRSKx\8nX+["yA-O%;t$q7\|(%M>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	49903	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:06 UTC	393	OUT	GET /uploader/376b6d593a22201f92af324e34509a8bfb1306f0.webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:07 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:07 GMT Content-Type: image/jpeg Content-Length: 30022 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221a62638f2ac35ca045de320c5543cb99a92115_221" Content-MD5: 6IeWBqteMRx2+cRD+exy3w== ETag: "E8879606AB5E311C76F9C443F9EC72DF" Last-Modified: Sat, 18 Nov 2023 03:59:48 GMT x-oss-hash-crc64ecma: 2782800781658508487 x-oss-object-type: Normal x-oss-request-id: 66511B41F488A538309CDD8D x-oss-server-time: 156 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:07 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e20349eaf7e4-BNA
2024-05-24 22:57:07 UTC	668	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 38 63 00 00 e8 03 00 00 38 63 00 00 e8 03 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 58 02 00 00 03 a0 04 00 01 00 00 00 3a 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(if8c8c02100100X:ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 3a 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 09 02 01 ff c4 00 1a 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 dc b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}:X
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: ba 65 03 a1 60 1c b2 31 b9 e8 f2 0f a7 d3 e1 7f 1d 56 00 d7 c3 9f 66 c0 da d6 fa b8 36 aa ec b3 0d ad 83 e9 5c e9 0e 8b 48 0d 59 34 b8 90 25 ac f8 4f 51 7a e3 6a bc 36 d3 78 d8 29 80 00 96 39 41 65 fd b4 51 29 38 b3 20 bb ec f4 51 6a ea 79 79 03 e1 c7 ab 45 c9 7a 8b 27 2b 8b f7 4c e6 ed 5a 05 2f b3 b4 be e9 00 72 e4 a8 17 21 67 98 fc f8 46 2e 42 ba 74 f0 03 90 e5 08 f4 7c 3e 1e 8f 87 c2 b0 75 f4 03 5a 0d 0f 5b 32 d9 6d a3 16 d6 2a 72 cb f6 b6 1c a5 73 29 d2 40 0d 40 4e a6 22 96 4a d8 23 c3 22 73 da a5 0d 9e de 36 56 60 00 24 ce 51 59 90 37 ad 17 39 c5 59 48 bc 6c f4 51 2a ea 61 7a 03 e1 c7 79 5c 3a 57 c2 2d 2c ae 2f 4d 33 9a b4 50 f3 be ce 56 db b4 01 cb 32 9c 4d 14 d2 8e 78 3e 95 32 ec 3a 80 01 c8 72 84 7a 3e 1f 0f 47 c3 e1 57 3a fc 01 86 a1 ab 29 bf 93 Data Ascii: e`1Vf6\HY4%OQzj6x)9AeQ)8 QjyyEz'+LZ/r!gF.Bt\|>uZ[2mrs)@@N"J#"s6V`$QY79YHlQazy\:W-,/M3PV2Mx>2:rz>GW:)
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 77 ca f5 eb 79 33 b5 b4 a7 3e d2 19 6f 43 a4 d0 32 d2 8f 86 f7 3f 07 6f 4d 71 b8 18 d6 b3 af 59 da f0 3d c3 16 c3 2b ca db ce 64 70 db 25 74 e1 9f fa 68 06 a2 27 54 91 21 4b c9 9e a1 39 59 d9 de 3d 6f 09 ae 61 ec cb 23 eb 50 00 80 6a f7 07 4e 44 a3 ef 2e 95 34 4c a6 2c d6 36 b1 23 78 bc 7d 1e 7a cd a0 0b 3f cd de 56 b6 a5 66 a7 d2 61 42 7e ca f5 9e 61 57 eb ca e2 ee c8 0e 79 18 78 f6 4a 92 e4 33 c9 36 66 c3 a1 80 1a 29 f4 1e 3c 9f b5 e3 56 31 b7 9e 7d a9 18 f4 5b 58 69 6f c6 96 ff 00 3f 55 dd e7 f5 f4 bf 1d 00 b2 22 71 6e 76 ad c2 8b 0c 7f 2b fa b3 53 a5 b0 ef 83 e8 64 5f 73 cf d9 4e dc 40 d4 34 ea 8a 3c f3 eb 47 d6 2a 79 5e ec e2 db 37 c5 6e ad 73 cc 5d 99 64 ad 6a 00 10 cd 5a e1 e8 c8 14 99 2c f7 ab c4 40 8b 7a bd 6b 73 97 c8 8b bb d2 e7 ae 5a 00 b3 bc Data Ascii: wy3>oC2?oMqY=+dp%th'T!K9Y=oa#PjND.4L,6#x}z?VfaB~aWyxJ36f)<V1}[Xio?U"qnv+Sd_sN@4<G*y^7ns]djZ,@zksZ
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: be 6a a1 62 14 e2 11 e0 8e 5d c6 de 17 70 07 c3 15 18 dc b3 c9 22 70 b9 cc 96 65 c3 e8 07 c3 5d 4b 48 91 20 1e 49 e2 b4 67 62 f1 00 96 34 e0 c4 45 ac 49 95 42 fa 33 84 36 8e 5f 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 ff c4 00 5b 10 00 01 02 03 04 03 07 0d 0a 09 0a 06 03 01 00 00 01 02 03 00 04 11 05 06 12 21 13 31 41 07 20 22 32 51 61 71 10 14 30 33 42 72 73 74 81 91 b1 b2 c1 15 23 24 34 35 36 52 62 a1 d1 25 43 55 64 92 93 a2 c2 e1 16 17 26 44 53 63 82 94 b3 d2 45 83 84 a3 e2 f0 54 65 70 f1 ff da 00 08 01 01 00 01 3f 01 ff 00 f6 6b e9 7a ad Data Ascii: jb]p"pe]KH Igb4EIB36_@[!1A "2Qaq03Brst#$456Rb%CUd&DScETep?kz
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 45 85 5e 87 40 ee 65 da 1f 65 61 9d 7d 4d cf d7 86 dc 58 af 1a 59 63 ed 1d 86 fd 1a 5d 3b 6b c1 24 79 d6 21 7c 58 6e 37 33 34 bd 14 e5 94 74 7d a3 b0 db 7f 23 5a be 28 f7 aa 62 57 e2 ea ff 00 dd 91 37 db 0c 37 c4 54 4a 2b 1c a4 aa b6 16 50 7c e3 b0 4f 0a 48 ce 78 15 fa 22 47 8b e4 87 f8 ca 83 b6 2c 03 5b 0a c6 f1 26 3d 41 d8 6f 44 ba a6 6f 7d b3 47 50 9c 2f 0c d4 69 a9 22 26 6c c5 87 c8 13 72 e4 ed a2 f5 44 e4 a3 cd 04 a2 a8 5e 10 33 42 81 19 c5 cf 57 f4 5e c3 f1 54 76 0b 47 81 67 ce 2b 91 a5 7a 21 f9 04 cc 3e fa b1 f7 46 25 e4 d2 87 8e 71 20 84 a1 c4 2a a7 25 08 60 d5 96 4f d4 4f a3 b1 df 2a 3d 7b ad 40 ae e7 46 32 f0 62 27 d7 d6 6a 64 35 dd 26 a6 b9 c2 27 e6 17 5e 2f 9a 2e 25 a5 30 2f 4d 98 d9 29 c2 e6 91 0a e0 fd 42 7b 0e e8 3c 1b a5 6a 73 e8 47 9d c4 Data Ascii: E^@eea}MXYc];k$y!\|Xn734t}#Z(bW77TJ+P\|OHx"G,[&=AoDo}GP/i"&lrD^3BW^TvGg+z!>F%q %`OO={@F2b'jd5&'^/.%0/M)B{<jsG
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: ce 22 4a 7a 5a d0 61 2f cb 39 89 07 ce 0f 21 ec 1b a0 de 37 2c e9 64 59 92 8b c3 33 32 92 56 a1 ad b6 be f3 09 93 5a d3 c9 c9 0f a1 4d ab 09 ca 9d 51 d4 dc d2 f4 2a 7e 59 56 3c db 95 7e 5d 15 61 47 5a 9a 19 61 ff 00 0f a3 7b ab 38 bd bb a3 3a 5d 76 46 c3 70 25 09 e0 ae 6c 66 54 7f bb e6 e7 85 ba e2 d4 a5 29 6a 2a 51 aa 89 39 92 76 9e a8 51 11 77 af 5d a9 77 66 31 cb b9 a4 61 47 df 65 d6 78 2b 1e c3 cf 16 15 bb 21 78 64 53 37 26 bc b5 2d 07 8c da b9 0e f5 c7 10 d3 6b 71 6a 09 42 41 2a 27 50 02 2f 85 ea 76 df 9b 2d b2 a2 99 16 8f bd a7 e9 fd 73 ec 8c ce a8 2d ac 6b 49 de 5c 9b d8 bb 0a 6c 4b 4c ae b2 0f 1a 2a bf 8a 51 ee 87 b6 01 0a 00 83 50 76 ef 26 a6 98 91 96 7e 61 f7 02 1a 69 05 6b 51 d8 04 5e bb d9 39 79 66 b5 a9 b9 26 cf bc 31 fb ca e5 51 fb 37 d7 56 Data Ascii: "JzZa/9!7,dY32VZMQ~YV<~]aGZa{8:]vFp%lfT)jQ9vQw]wf1aGex+!xdS7&-kqjBA'P/v-s-kI\lKLQPv&~aikQ^9yf&1Q7V
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 63 5c 77 51 74 7e 6c 58 5e 28 df a3 aa e7 11 7d 06 18 ed a9 f2 c0 85 71 5c e8 ea b5 da 1b e8 8d 91 38 7d ed ae 93 1b 91 fc 7e d8 1f dc 37 eb 6f 2f 20 a5 e1 b7 7c 7e 63 d7 31 2e f3 ad b6 30 2c a6 15 37 32 7f 1a 61 6f ba 75 aa 0d 39 23 c9 15 86 56 a2 aa 57 28 ba e2 b7 96 c6 f1 c6 bd 6d e5 a8 29 69 da 23 f3 97 7d 63 d8 2c f1 59 f9 21 fd fb 7e b6 f2 ff 00 59 48 b5 ec d9 26 15 33 a1 a4 d0 55 70 e2 af 04 8a 6c 86 ee 43 29 7f 01 b6 08 52 73 35 97 39 65 5e 58 62 e9 37 2e d3 6e 1b 65 38 36 1d 09 cf cc 62 d4 ba 32 d3 8b 6c aa f0 34 de 1a a6 85 95 6b 84 dc 59 55 64 2f 23 27 5f f5 77 36 42 2e 54 9b 0f b4 af e5 3c b5 52 a0 69 a2 5e c8 9c b9 ce cf 29 6e 22 d9 96 c3 b4 e8 d6 69 e5 11 fc df ad c5 2b 47 6e ca ae 9a e8 85 e5 58 ba d7 36 6a c8 b7 a4 26 dc 9f 61 c4 27 1f 04 Data Ascii: c\wQt~lX^(}q\8}~7o/ \|~c1.0,72aou9#VW(m)i#}c,Y!~YH&3UplC)Rs59e^Xb7.ne86b2l4kYUd/#'_w6B.T<Ri^)n"i+GnX6j&a'
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: b6 d2 90 10 50 ec c2 85 11 9e 2a 05 e6 70 15 65 9f 3c 58 a1 cf 74 25 52 a5 a4 31 a6 5a d9 4a 33 c8 a4 f0 49 3c 95 de 5f af 96 4f 89 23 d6 30 e3 6a 79 f4 34 9a 62 5a b0 8a e4 2a 62 6e 5d d9 47 4b 4f 00 15 ac 50 d4 11 ca 0f 50 33 25 2e db 0a 9a d2 ad 6e a7 1e 16 c8 4e 14 9e 73 5a 98 7e 5c 4a 4e e8 92 bc 69 e0 29 27 51 c2 b1 88 57 9e 2c b6 5d 7f 42 86 d0 54 55 41 cd 9f 29 81 2a a9 47 1b 49 79 0b c4 2b c0 8b 28 fc 36 63 c0 37 e9 3b eb 57 3b 32 d1 1f 9b 3b ea 98 b0 be 22 8e f8 7a 89 86 e1 26 12 4c 57 92 2a 7a 93 1d a1 ee f4 c5 8e 47 b9 92 7e 0f 79 dd 2b be 3d 45 11 07 90 42 4e 70 93 58 10 69 4c a2 47 b6 b9 de 8d e5 f4 14 bc d6 bf 86 31 20 fa a5 5e 95 98 48 a9 69 c4 ac 0e 5c 26 b4 8b cf 22 b9 c9 81 6b 48 a4 bf 2d 34 84 95 16 c6 22 85 01 4a 28 0d 51 66 4b bd 2f Data Ascii: Ppe<Xt%R1ZJ3I<_O#0jy4bZbn]GKOPP3%.nNsZ~\JNi)'QW,]BTUA)GIy+(6c7;W;2;"z&LWzG~y+=EBNpXiLG1 ^Hi\&"kH-4"J(QfK/
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 65 e7 5a 7e 69 53 2f 63 6d 6a 3a 21 8c ab 08 ae da ea 34 8b 30 a5 4d cd a9 3c 45 4c af 0e 75 83 4a 45 9f db 5f 3f 54 6f 2f e0 a5 ea b5 3a 51 ea 88 6b 88 20 c1 83 af aa cf 1b c8 62 e1 0a de ab 33 a5 cf 50 ef 2d a4 fe 1f b6 c1 38 41 b4 5f 05 5a e9 c2 d7 0c cc c8 61 90 77 ae dd 08 92 c5 a3 95 52 49 2e 1d 8b 07 50 c5 dd 72 43 7e e2 a9 86 54 a2 ac 6d b7 57 11 9a 4b ab 52 b3 cf ea 8e 48 72 5e c2 ab 89 4b ae 94 d0 39 a4 4a ea 42 35 94 10 7b ad 83 9e 27 66 ac 99 c5 51 6d 96 65 5b e1 36 86 52 74 c4 01 40 d6 25 64 90 3f 8c 4e b3 61 29 01 4d 21 d9 72 b4 22 8b 70 ac a0 15 9e 11 46 5c 3c 03 cf 0e 37 77 b4 89 48 72 63 03 6d b9 8d 59 d5 d5 f7 18 79 8e d8 99 44 ae 97 e0 a5 c2 de 11 db 07 0a b4 cf 54 5d f4 d6 f2 58 63 f3 e6 3d 61 bc bd 6e 06 a5 24 48 46 2a cd 01 d1 44 93 Data Ascii: eZ~iS/cmj:!40M<ELuJE_?To/:Qk b3P-8A_ZawRI.PrC~TmWKRHr^K9JB5{'fQme[6Rt@%d?Na)M!r"pF\<7wHrcmYyDT]Xc=an$HF*D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	49908	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:06 UTC	459	OUT	GET /liquid/buyer/public/img/default.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66387ef8-1a84" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:07 UTC	585	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:07 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT etag: "66387ef8-1a84" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 221035 Expires: Sat, 25 May 2024 02:57:07 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2035815f7ec-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	49904	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:06 UTC	384	OUT	GET /uploader/a433e880ee81352d122e20a49064772e.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:07 UTC	614	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:07 GMT Content-Type: image/jpeg Content-Length: 64330 Connection: close Cf-Bgj: h2pri Content-MD5: ZhxUHZf9n0Dxu+X2QRUpBw== ETag: "661C541D97FD9F40F1BBE5F641152907" Last-Modified: Sat, 05 Aug 2023 07:55:43 GMT x-oss-hash-crc64ecma: 2786840610619894674 x-oss-object-type: Normal x-oss-request-id: 66511B419979C735312A3058 x-oss-server-time: 80 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:07 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e20359f6f7e4-BNA
2024-05-24 22:57:07 UTC	755	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCC
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 2a 79 a3 df f0 7f e4 01 54 01 40 05 26 d2 dd 80 53 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 0f 9e 7e 3e 7e d5 ff 00 b3 b7 ec b9 e1 f8 3c 4f fb 41 fc 5e f0 3f c2 8d 26 f2 66 87 4e ff 00 84 b3 5a 82 cf 55 d5 d9 3c a1 22 68 3a 04 42 7d 77 c4 33 c2 d3 c0 27 b6 d0 b4 ed 46 e2 df ed 36 a2 68 90 dc 44 1a e1 07 3d 16 fd 3c Data Ascii: (((((((((*yT@&S((((((((((((((~>~<OA^?&fNZU<"h:B}w3'F6hD=<
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 56 b1 eb f2 ff 00 d2 50 1f 28 f8 d2 02 f7 d6 84 9c ed ba b6 c0 cf 4c ee 1e a3 d3 b7 f2 eb cf 53 de 83 5b 5b e7 ba 49 f6 b6 b7 fb fc c0 ff 00 4b ef f8 24 eb 5c 7f c3 ba 3f 64 28 a7 6b 87 36 ff 00 05 bc 33 6e ad 3d ac 36 9b 16 de 4b fb 54 b7 89 21 45 13 c1 04 36 f1 0b 7b e9 19 e7 d4 2d 9e 0b cb 83 f6 89 a6 2d f3 b5 55 a6 fc ff 00 e0 3f d5 fd cd f5 3a 0f d1 0a cc 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 03 f8 95 ff 00 83 a2 4d b2 fe d0 df b2 bc 13 a6 f1 1f c2 1f 18 ce 32 c0 09 0b f8 f6 58 b6 90 c3 0a 23 16 ea 77 6e Data Ascii: VP(LS[[IK$\?d(k63n=6KT!E6{--U?:((((((((((((((M2X#wn
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: f5 db 74 86 76 d2 fc 3d ad cf 92 d8 08 67 3e 4c 7b 72 37 f9 58 ce 40 93 18 db 5b ce f7 a9 ab da 36 bd de 8d a6 bf 3b eb f9 81 fe 94 1f f0 4c af 88 16 1f 13 ff 00 62 9f d9 f3 c6 ba 45 9e 93 65 a4 6b 5f 0b 7c 14 b6 91 68 93 4e da 7c 37 1a 06 87 6b e0 fd 5a d5 6d 67 2f f6 4b 8b 6d 5f c3 77 c2 ed 12 47 12 5c 3c 92 9c 6e 02 bc fa cb de bf a2 fc 0e 83 ef 9a c4 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 29 3d 53 5d d3 03 f9 9f ff 00 83 8c 7e 1e e8 ba 67 c0 9f 86 7f 19 bc 2b 09 d3 7e 2f e9 7f 13 34 7f 02 26 b7 c5 d4 77 3f 0e Data Ascii: tv=g>L{r7X@[6;LbEek_\|hN\|7kZmg/Km_wG\<n((((((((((((()=S]~g+~/4&w?
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 24 db 9e 3d ff 00 07 fe 40 7e 3a 7c 48 d2 52 fa ca 65 8e 30 d3 c0 5a 68 9b a9 5c 0c b0 1e 81 bb 9c 67 d2 a8 0f f4 02 ff 00 83 73 3e 2e 47 f1 1f fe 09 a9 e0 6f 09 5c 5e 2c da cf c1 8f 1c 78 e3 e1 f5 d5 a9 6f de c1 a4 5f 6a 8d e3 af 0d cc 13 6a 91 6b 36 99 e2 b3 6d 68 e3 78 64 b0 78 83 e6 06 55 e6 be b6 e9 6f c6 e9 7e aa c0 7e f4 56 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 06 5e b7 ac 58 78 7f 49 d4 f5 bd 52 e2 2b 4d 37 48 d3 ef 75 3b fb 99 9c 47 14 16 96 16 ef 75 73 2b b9 c8 01 20 8a 47 e8 49 db c5 00 7f 9b cf ed 39 Data Ascii: $=@~:\|HRe0Zh\gs>.Go\^,xo_jjk6mhxdxUo~~VP@P@P@P@P@P@P@P@P@P@P@P@P@P^XxIR+M7Hu;Gus+ GI9
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 7c ba 5e 8b 2f c5 2d 13 c0 9e 31 bd 24 80 3c 21 f1 26 3b df 02 eb 6b 22 84 90 98 55 75 db 6b d7 71 8d 92 59 42 c5 90 66 48 f3 a9 d3 e7 fa 01 fe 9e b5 c6 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 7f 34 df f0 72 57 c5 76 f0 ef c1 af d9 eb e1 6d a5 c9 49 fc 67 f1 07 c4 be 2f d4 ad d4 12 5f 4a f0 4e 85 6f 63 6e f8 d8 50 9f ed 7f 13 db 2f cd 22 61 51 ce 1c 12 50 03 f9 01 b5 d4 b2 41 e4 15 27 38 dc 0f 3b 81 ef f5 ef f5 ae 80 3e 82 f8 47 f1 03 59 f8 6f e2 9d 33 c6 9e 1c 36 cf a8 59 5b 5f 5a 35 bd e4 6d 35 95 f6 9d ab 59 c9 Data Ascii: \|^/-1$<!&;k"UukqYBfH@P@P@P@P@P@P@P@P@P@P@P@P@P@4rWvmIg/_JNocnP/"aQPA'8;>GYo36Y[_Z5m5Y
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 46 d0 37 37 dc 18 cb 64 64 f3 41 25 78 fe 03 fc 0b 23 27 e0 7f c1 c8 fa e3 ca f8 61 e0 74 f5 eb ff 00 12 36 cf e5 cd 00 6c 47 f0 ab e1 84 44 f9 3f 0c 3e 1a 44 0e 37 01 f0 fb c2 19 6c 6e c6 4c 7a 44 79 db 9e 37 06 c7 38 c6 4d 00 6b 27 82 bc 1b 00 65 83 c1 7e 0b 80 c8 30 c6 df c2 7a 04 1b b6 ee db bb c9 d3 e3 24 ae e6 da 58 92 32 71 8c d0 05 fb 4f 0b 78 72 db 26 1f 0f 68 70 09 31 bc 41 a4 69 b1 6e db bb 6e ed b6 df 36 dd c7 6e 7e ee 4e 31 9a 00 e9 a3 82 38 f6 2a 20 54 4c 00 8a 02 8c 06 dd 80 10 05 19 e9 c2 fb f2 68 03 c6 3f 66 2c ff 00 c2 43 f1 b9 5d 71 9f 1b 5b ca 7a 8f f5 83 55 f7 e0 7c a3 1f 5e f5 9d 4e 9f 3f d0 9a d1 e5 e5 bb de ff 00 a7 9f 99 f5 b8 4c 8c e7 1e d8 ff 00 eb d6 66 22 f9 7e ff 00 a7 ff 00 5e 80 23 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 Data Ascii: F77ddA%x#'at6lGD?>D7lnLzDy78Mk'e~0z$X2qOxr&hp1Ainn6n~N18* TLh?f,C]q[zU\|^N?Lf"~^#((
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: bb 86 de f7 48 97 52 82 e5 a6 b7 96 58 47 e1 fe 33 67 f5 38 47 85 33 0c e2 9c a6 e5 80 84 66 b9 1c ae d4 e4 f7 e5 d5 ad 35 d1 5b d6 e7 e9 fe 1a 46 96 27 36 8e 59 51 42 6a b5 9f bc a2 db 8c 95 b4 e6 57 56 d9 da df fa 4d fe 58 f0 c7 c2 6f 11 f8 8f e1 67 84 f5 4f 89 7f 15 7e 3b 3f 8c 6f 34 2b 4b 8d 4e f7 c1 ff 00 b4 1f c7 7f 0b da 06 9a 31 24 7e 5e 9b 3f c4 cd 7a dd 2f 1a 36 59 f5 09 ee 05 c1 9a f2 69 7c 98 ac ad d2 1b 48 bf cb 2e 22 fa 60 f8 99 4b 3a 9a c9 ab 49 65 70 6d 5d ca 17 f7 6e ac d4 b5 56 69 5d 3d fc 8f ec fe 1f f0 9b 87 e6 94 a7 46 9f bc 94 a5 7a 6e f7 92 4e fa a4 de eb aa f3 5d fc 53 59 fd 8f be 1a 78 cb 57 b0 b9 f1 a7 c5 6f db 07 c5 b7 36 12 cb 73 a0 7f 6b 7e d6 7f 16 a1 b7 f0 ed cc d0 cb 15 cd d6 95 6f a7 ea b6 bb 2e 67 0b 6c cd 2c af 26 cf b1 Data Ascii: HRXG3g8G3f5[F'6YQBjWVMXogO~;?o4+KN1$~^?z/6Yi\|H."`K:Iepm]nVi]=FznN]SYxWo6sk~o.gl,&
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 00 0b 7a e8 73 aa d8 76 5c 7f 10 19 cf ae 7d ab b6 18 78 2b de 49 6d bb b6 bf 3e 9e a6 49 5e fa a5 65 f7 9e 0d fb 57 de e9 b6 3a 8f ec c6 75 cd 53 4e d1 f4 4d 33 e2 96 a5 e2 9d 46 fb 54 ba fb 2d b4 4d e1 df 0a 5e c7 6a c5 b6 48 46 fb 9d 62 28 77 63 31 99 83 84 93 01 0f f5 6f d1 75 53 5c 45 89 72 e4 49 57 c2 eb 2b 25 6e 68 db 57 a7 9f 4d af d0 fe 7d f1 6d 4d d2 a8 a0 a4 df b3 9b b4 53 6e ea 2f 5d 3a a5 a5 fe 47 f4 ad fb 06 dc 7c 3b 9f f6 42 f8 07 1f c3 0d 7b c3 de 24 f0 b5 a7 c3 bd 12 d2 3d 57 c3 1a 85 ae a7 a5 49 ac 44 26 93 c4 b6 df 6a b2 96 6b 7f b7 5a 78 8a 7d 5a 2d 4e 10 d1 cb 0d f0 9d 65 b7 b7 1b 23 1f ee 76 55 52 15 30 58 4f 65 28 4d 7b 0a 29 f2 4a 32 4b dc 5b f2 dd 27 ad ed cc de b6 6b 6b ff 00 9d 59 d5 2a 90 c6 e2 5c e3 24 dd 57 24 a5 16 a5 6b 28 Data Ascii: zsv\}x+Im>I^eW:uSNM3FT-M^jHFb(wc1ouS\ErIW+%nhWM}mMSn/]:G\|;B{$=WID&jkZx}Z-Ne#vUR0XOe(M{)J2K['kkY*\$W$k(
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: d3 bd a5 29 dd c9 6b 36 9c a4 93 9b 73 51 e5 a7 75 08 c1 2f e2 ff 00 17 ed 0c eb f7 79 72 cb b9 5c a2 dc 5b 92 9a d1 38 a6 95 ac ed 77 f6 6d 1b 5b 5b bf e9 39 46 48 1f fd 7a fd 4c fc 49 2e 69 5a fd f5 b7 e3 6f 31 28 24 b1 41 d0 14 01 5e 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 02 c5 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 4c a5 cb 6d 2f 70 1a 4a e0 92 46 00 e4 e4 60 7e 34 e5 25 14 dc 9a 49 26 db 6d 25 64 ae f5 7a 6c 0b de d1 6b 7d 34 d5 ea 7c c3 f1 a3 f6 83 d0 3e 1d d9 df e9 ba 63 1d 43 c5 76 b0 90 2d e1 0b 21 b1 17 19 55 54 6c 94 92 f6 5d 84 db db b1 01 bc b7 6d d8 5c 37 f3 e7 8b 3e 3b 64 3c 09 Data Ascii: )k6sQu/yr\[8wm[[9FHzLI.iZo1($A^((((((P@P@P@P@P@P@Lm/pJF`~4%I&m%dzlk}4\|>cCv-!UTl]m\7>;d<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	49907	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:06 UTC	384	OUT	GET /uploader/035ebc6dc320fc94a1d54b8584520801.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:07 UTC	615	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:07 GMT Content-Type: image/jpeg Content-Length: 92185 Connection: close Cf-Bgj: h2pri Content-MD5: UNoZbR8hkgTGUlAq54NVYQ== ETag: "50DA196D1F219204C652502AE7835561" Last-Modified: Sat, 05 Aug 2023 08:00:34 GMT x-oss-hash-crc64ecma: 12280659794402168421 x-oss-object-type: Normal x-oss-request-id: 66511B41B6DE1D35359F3E2A x-oss-server-time: 51 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:07 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2035b6bf7f8-BNA
2024-05-24 22:57:07 UTC	754	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 00 ff 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCC
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 6e f5 f5 fd 0f f8 50 4f 3c 7b fe 0f fc 87 50 50 99 1f fe b0 47 f3 a0 57 bf 7f 9a 6b f3 00 41 e8 7a 7f 9f f3 fa d6 6e a2 bb 4a ce de 76 fd 3a 14 d3 5a b5 61 69 f3 c3 57 cc b4 df e6 20 a3 da 43 f9 90 0d dc a3 bf e8 7f c2 a9 34 d5 d3 ba 27 9a 2b af e0 ff 00 c8 5c 8e bc f1 ea 0f f8 53 1d d6 fa e9 dd 3f f2 00 41 e8 68 05 25 2d 9d c5 a0 61 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 1c 2f c4 7f 1d e9 5f 0d 7c 0f e2 7f 1d eb 66 05 d2 fc 2f a1 ea 3a d5 d9 ba d4 2c 34 b8 1c 59 42 5a 1b 67 d4 75 39 60 b1 b2 17 73 98 ed c5 cd d4 89 04 26 40 ee c7 0a 8f 9d 5a 8a 94 1d 47 b4 6d d6 d6 d7 7b 9a 50 a4 Data Ascii: (((((nPO<{PPGWkAznJv:ZaiW C4'+\S?Ah%-a@P@P@P@P@P@/_\|f/:,4YBZgu9`s&@ZGm{P
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 56 74 65 25 26 a3 cc da 8f 2f 5b 77 7d 35 ef ad 9a 5d 7d e8 1c 80 7d 6b d8 3c a4 ee 93 ee 2d 03 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 06 bf dd 3f 87 f3 15 33 f8 5f cb f3 44 cf e1 7f 2f cd 1e 2b fb 43 f8 2e cb e2 27 c0 ff 00 8a 3e 0d bf 47 78 35 ef 03 f8 8e d3 11 5a 5e ea 33 79 f1 69 b7 17 b6 66 0d 33 4e d5 b4 0b ed 4e 51 7b 6d 6c cb a6 da 6b 9a 35 c5 f6 d3 6b 06 ab a7 cb 2a 5d c3 c5 98 2b e0 aa 2b a5 78 ad 7a ab 2b d9 6a ac dd ad d7 7b 58 ee ca e6 a3 88 a6 da 6e 3c f1 4e c9 3d 65 25 14 e5 75 a4 62 a6 e4 da d7 dd f5 47 f9 f8 fc 38 d2 bc 43 f0 b7 f6 c4 9a df 58 f0 d6 b7 67 a2 68 de 31 be d6 6c 34 bf 11 6b 3a 6f 85 bc 59 7f 0a 5d dc 6b da 25 b9 f0 74 1a 6d a7 84 3c 3f 65 e2 3d 62 1f 87 fe 0b d6 fc Data Ascii: Vte%&/[w}5]}}k<-(((((?3_D/+C.'>Gx5Z^3yif3NNQ{mlk5k*]++xz+j{Xn<N=e%ubG8CXgh1l4k:oY]k%tm<?e=b
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: f1 ee 18 83 df 04 e3 06 b1 c4 41 54 a3 38 be ab f1 e9 db ae a5 d0 bc 27 0b 3d 9f a7 5b fc 8f e0 5f f6 de f8 07 e1 3f 83 5f b7 c4 ef af f8 6f fe 12 8f 88 7f 12 61 d3 de e3 c4 de 25 d4 b5 2d 6f c4 5a d3 78 e2 2d 33 c2 f7 f7 e7 5a d5 ae af ee 23 5b dd 73 c5 de 0a b4 8d 2d 7c b1 69 a9 78 6e 57 b0 96 dc 09 d4 fe 53 9a 29 4f db d2 e6 f7 69 ca ee 3a a4 da 4e cd de d7 69 37 e7 67 6b 2d 6f fa f6 41 25 52 8c 79 ac 92 8a 5b ae de 69 5b ee d6 cb 6b 33 f7 e0 78 5f c1 77 be 0d d7 24 d7 be 2c fc 0c f0 ae a5 e3 8f 09 fc 78 d4 2c 2d 7c 5f f1 13 c3 fa 6e a1 0d cf c5 5f 8b 9e 0e f1 2e 67 b0 d4 ae f4 eb 88 25 d5 7e 12 e8 cb a5 df 43 b6 49 ec ef d6 39 21 8a fe c0 1b c1 f3 6a 9d 49 45 5b 5d 1b d1 ae fe 5a ad 9f 67 d7 6d 4f 3b 3a 95 3a 78 88 a8 49 3f 7d 29 fb 92 5a 72 39 2e 57 Data Ascii: AT8'=[_?_oa%-oZx-3Z#[s-\|ixnWS)Oi:Ni7gk-oA%Ry[i[k3x_w$,x,-\|_n_.g%~CI9!jIE[]ZgmO;::xI?})Zr9.W
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 3b 92 d7 e1 b6 ed 5a 2e cf 5e bb 5d 59 72 db ad d9 e5 5f b6 9e b1 f1 1a cf e0 da 78 83 41 17 fa fe 97 ae 69 b7 b6 76 de 5f c4 cf da 0f 5b 96 eb c5 37 3e 2c 5f 06 e9 6f 67 a6 df db fc 3a b5 4f 07 f8 92 fb ca bd b4 d5 e3 d1 a2 d4 fc 33 a5 e9 ba e4 d3 d8 f8 86 df 54 f0 e6 bd 17 3d 49 45 d5 ba 7b 37 65 66 d3 ba eb f7 7f 57 d7 d9 c8 6e a8 f2 b5 6b 2d ee b7 b6 d6 5d 7e 6d 76 7d 17 f0 e1 fb 5b c3 ad f8 1e cb 56 f1 8d e7 89 7c 25 a8 f8 ff 00 44 f8 c9 e2 3f 0a 78 93 c2 56 56 36 ba 8e 9d 63 e0 0b 7d 0b c1 5a 97 87 3e 27 f8 73 c4 37 3e 2b bc f1 26 a1 a2 78 f3 54 f1 49 d1 f4 19 23 8e 43 10 d0 6f b5 09 ae 05 b7 9c b6 bf a5 65 51 e7 c9 dd 36 ad 29 42 56 8a 69 36 d5 f9 6d 74 da ef 64 bd e5 ee c5 a7 66 79 b9 b5 74 b1 0b 92 4e ea 50 5a 5d af 89 5e c9 34 d3 e9 cc af 6d 2e Data Ascii: ;Z.^]Yr_xAiv_[7>,_og:O3T=IE{7efWnk-]~mv}[V\|%D?xVV6c}Z>'s7>+&xTI#CoeQ6)BVi6mtdfytNPZ]^4m.
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 7f 4e 5f f0 47 ed 17 f6 38 b8 f8 73 65 06 81 af 6b fe 3f 86 eb fb 22 7b 6d 4f 5c f0 26 b3 e1 4d 45 a3 fe d3 1a 2e a1 76 fe 1e f8 77 71 f1 23 50 87 44 d1 35 1d 5a c5 7c 55 e2 2d 51 e1 f0 f7 84 ed a4 b6 bd d7 35 2d 32 ce f0 4a 7f 37 74 ed 9e 37 7d a7 d5 6a 97 33 be bd 5d d7 54 ad f7 9f 47 99 ca 53 c0 47 95 b6 92 4d 5f 66 ed ad bd 55 bb 69 d8 fd 57 fd a3 7c 3d fb 20 de f8 42 fb c1 7a ff 00 c4 af 10 7c 3c d7 35 0d 35 f5 3d 2e ef fb 13 e2 85 ff 00 83 2f 60 88 c5 e6 1b 4b eb 8f 86 97 5e 12 f1 24 3b 5a 16 92 eb 4d bf d5 2d 2d 2d ee ed 2e de fa d6 df 56 d3 a7 bc db 88 1d a3 7b a4 d4 1b 69 a6 ec f9 5e 9a 2d 7a 6b ae 8b 5e 87 8b 92 d4 c6 c2 a3 6a 12 71 52 5a c5 53 d5 5e ee 4d 73 a7 65 6d 74 e6 d5 28 c5 ea 7e 57 78 67 c2 3f b3 2e 81 a2 78 89 7e 15 fc 70 f1 b6 a3 ae Data Ascii: N_G8sek?"{mO\&ME.vwq#PD5Z\|U-Q5-2J7t7}j3]TGSGM_fUiW\|= Bz\|<55=./`K^$;ZM---.V{i^-zk^jqRZS^Msemt(~Wxg?.x~p
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: ab 78 92 0f 13 c3 a9 78 3d fc 39 0f 8a 6d 3c 15 3e ad a7 78 26 cb c4 df 03 fe 3d 78 7f c6 9e 26 6b 29 bc 0d e2 fb cf 0e 78 5f 58 f0 47 8c e2 f1 07 86 24 be f1 5f 84 2d bc 77 a0 f8 7f c0 1e 24 d6 3c 49 65 f3 39 5d 3e 79 3b ae 92 95 da b2 4e fd 1b bb eb d3 be ac fd 16 18 68 53 d3 91 73 72 bb f2 db 99 5d 5e fd 6e ec b4 da f7 69 a7 a9 fa 8b fb 20 fc 1d d3 fc 4b fb 5f 68 bf f0 8c f8 67 4d d1 f4 8b df 15 43 f1 8a ef c4 5e 0e b6 1e 0f 6f 0e e9 3a ae 98 b2 cb e1 5f 1e 68 0d a3 da 78 b3 c1 be 3e f8 84 f3 f8 8e ff 00 c5 5f 0a f5 a1 6d e1 3d 4a c3 44 b3 f1 55 e7 85 f4 9b cb 8b 49 ee be 87 86 a8 df 3e 8f 2b ba 73 b3 d2 fa 27 ab ba d7 a3 b7 7d fa 34 be 6f 8b 66 96 47 5d ca e9 a8 cb 93 9d 3b 36 da b2 57 71 bc 5b 69 2b 3e ea e9 ad 7f a9 53 8c 9c 74 cd 7f 41 46 3c b1 8a Data Ascii: xx=9m<>x&=x&k)x_XG$_-w$<Ie9]>y;NhSsr]^ni K_hgMC^o:_hx>_m=JDUI>+s'}4ofG];6Wq[i+>StAF<
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 7c 55 95 67 79 24 a3 4e a7 2c af 49 fb ad 73 7b b5 a3 3b a4 dc 55 bd cb b7 ad d5 da 4f e1 7f d8 ef 87 f5 cd 23 c4 fa 2e 97 e2 2d 03 56 d2 f5 dd 0b 5c b0 b4 d5 b4 5d 67 45 d4 6d 35 6d 27 57 d2 75 08 56 eb 4d d5 74 ad 4f 4f 9e e6 c7 50 d3 75 0b 39 21 ba b3 bd b3 9e 7b 5b a8 64 49 ad e6 92 26 47 6f d3 65 cd 4d 46 32 8b e6 b2 bd d3 8f 44 ed 66 93 4e cd 36 bb 34 7e 3a ec ee e2 d3 4e 52 b6 b7 6e ed bb fa 7a 69 db 43 66 b0 11 62 83 a0 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 fc d3 ff 00 82 b8 bf c7 f3 fb 06 7c 76 b6 fd 9a bc 61 77 f0 ff 00 e2 75 ef 86 ae 34 fb 2f 19 d8 41 04 d7 be 1c d3 f5 08 a4 b3 bc d4 62 69 52 59 6c e1 2d 3c 36 57 9a 8d a4 17 13 e9 d6 b7 b2 de 18 5a 18 65 65 f4 72 af 66 f1 b4 94 Data Ascii: \|Ugy$N,Is{;UO#.-V\]gEm5m'WuVMtOOPu9!{[dI&GoeMF2DfN64~:NRnziCfb(((((\|vawu4/AbiRYl-<6WZeerf
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: ca 2e 52 8f f2 c9 a4 ac af 74 f7 b3 d7 97 bd b7 b7 5d 0f 1e 33 d1 5e 4d 49 37 df 46 df ca de 7a fc b7 3f 17 7e 33 58 69 3a 6b 69 e3 4a d3 e0 d3 d2 eb 78 78 2d 03 47 6c 8a 9b 82 24 31 16 61 1a 2e d1 b5 41 20 02 46 4f 5a 25 55 4e 2d bd 12 d5 7a 5f 5e 9d 2d d4 f4 b0 fe fd dc 55 f5 b3 7d 76 bd ee da dd be df 3e ff 00 3f c6 02 a9 c1 24 01 93 c1 43 dc f5 ea 3e a3 a7 5a f2 aa fc 4e f7 d2 dd 2e 9d d2 eb b2 f9 df e7 b1 d1 19 b8 a7 78 bb bb 25 ae 9e 5a fc fb a3 f4 7f e0 6f c0 2f 83 7e 2c f0 e5 85 df 89 b4 dd 53 50 b9 be 86 da 69 da db 5d d4 ac 46 e9 60 49 b0 56 09 d5 5b 61 7c 0c e0 71 90 45 4a 4a cb 47 b7 57 2b 2b 6b ad f7 49 f7 d2 dd 76 47 2b c6 c5 36 ad ae e9 db ab d3 f9 6e ae b5 e9 fa 9e 5b f1 b7 e0 bf c3 ef 0c 6b 82 cf c1 b6 fa de 96 8e 58 ba 6a 37 b1 5f a6 d5 Data Ascii: .Rt]3^MI7Fz?~3Xi:kiJxx-Gl$1a.A FOZ%UN-z_^-U}v>?$C>ZN.x%Zo/~,SPi]F`IV[a\|qEJJGW++kIvG+6n[kXj7_
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: b4 d6 f7 bf ab d1 dc f4 bf d4 1c 7a a7 64 b4 e5 7f 6b 9a 56 de dc b6 77 6b a2 b5 d3 4b aa 3f 77 7f e0 9a 3f b3 ef c7 9f d8 ab f6 b5 fd 9f 3c 49 f1 2f 49 f0 93 78 6f c5 5e 3b bd f8 61 7d ae 78 0b e2 37 83 fc 77 a7 c9 07 c4 cd 03 56 f0 d5 8c 17 87 40 d5 26 bb b5 b5 4f 16 dd 78 4e 58 ee 5e d0 c7 2d dc 76 f1 82 92 04 49 78 a5 c6 98 0c e5 7b 3a 49 c6 f2 db 96 56 ba 69 ad 12 d5 5e d2 b6 b7 5b 77 3c f7 c3 78 fc a6 ee 71 e6 86 ad bb 2d 2d ab 4f cd 2f 2e af 46 da 3f b4 62 c0 67 d4 76 ff 00 eb d5 3a 90 b7 bb 1d fc df f5 a9 9a 8c a4 ee f4 bf a6 8d 5e fd b5 be fa 2f d4 b5 53 ed 3c bf 1f f8 04 85 68 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 03 59 80 07 24 0c 02 79 ed 80 4e 7d 30 30 73 58 d5 8b e5 94 94 ad Data Ascii: zdkVwkK?w?<I/Ixo^;a}x7wV@&OxNX^-vIx{:IVi^[w<xq--O/.F?bgv:^/S<h@P@P@P@P@PY$yN}00sX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	49899	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:06 UTC	626	OUT	GET /uploader/1410d7ced7e16916884730c28d7310a5c2412305.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:07 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:07 GMT Content-Type: image/webp Content-Length: 25678 Connection: close x-oss-request-id: 66511B43E90119393922693F ETag: "88EE7DA569352C1FACF0700A786A9CFD" Last-Modified: Wed, 06 Sep 2023 10:13:36 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 13468999559584570017 x-oss-storage-class: Standard Content-Disposition: inline; filename="221a35c5f72003bd880be08d8926b0f415e83363_221" Content-MD5: iO59pWk1LB+s8HAKeGqc/Q== x-oss-server-time: 62 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:07 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2037885f7cc-BNA
2024-05-24 22:57:07 UTC	690	IN	Data Raw: 52 49 46 46 46 64 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 38 00 00 00 cf 02 00 cf 02 00 49 43 43 50 a8 01 00 00 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 5f 63 70 72 74 00 00 01 4c 00 00 00 0c 77 74 70 74 00 00 01 58 00 00 00 14 72 58 59 5a 00 00 01 6c 00 00 00 14 67 58 59 5a 00 00 01 80 00 00 00 14 62 58 59 5a 00 00 01 94 00 00 00 14 72 54 52 43 00 00 01 0c 00 00 00 40 67 Data Ascii: RIFFFdWEBPVP8X8ICCPlcmsmntrRGB XYZ )9acspAPPL-lcmsdesc_cprtLwtptXrXYZlgXYZbXYZrTRC@g
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 01 f5 5c 05 6d 08 28 7a 01 04 93 e5 59 77 d8 9d 3e fb af bf 47 3f d7 fe 62 1d 92 04 ff bf 93 c6 d8 74 78 61 cf fe f0 7d 19 f5 f0 f2 c3 44 de 03 e0 ff 67 7f 28 0c 6e 3f 18 fd db 8f 51 cf ee bf d9 aa f0 87 0a 01 a1 e4 fc de e7 37 75 bc 63 be f8 73 ea 21 03 01 14 ff bf 13 05 6f f6 39 5e c5 3b 9d 7b f7 2a 2f 23 18 00 c4 ff f7 04 40 b0 53 97 d1 0e fb 7b 09 3c 00 22 94 14 c0 d4 d7 d1 0e 6c e2 40 c8 20 a8 4c 9d 8b 77 5c c5 1c 32 08 6b 62 5d 1d ef 08 32 08 ae b5 3e e2 31 f4 08 af b1 de c5 3b 96 2e 40 a0 10 ef 12 41 8e 7c 14 20 82 3e 2e b3 d6 b9 88 47 08 70 92 d6 55 bc 13 e6 c8 87 0a 90 31 de 47 3b 24 7c 80 48 29 da 41 22 05 28 ee b5 ac 03 44 42 8a 75 48 fa 00 19 23 87 68 d7 22 44 36 a9 23 1e 52 01 32 89 8b 77 48 85 88 80 a2 1d 80 41 a2 62 1e 31 40 d6 3a 17 f1 50 Data Ascii: \m(zYw>G?btxa}Dg(n?Q7ucs!o9^;{*/#@S{<"l@ Lw\2kb]2>1;.@A\| >.GpU1G;$\|H)A"(DBuH#h"D6#R2wHAb1@:P
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 6a 7a d9 02 80 18 28 81 48 86 1a b9 88 c6 0c ed 14 20 42 4d 01 d8 ce 8f cb 88 26 df 72 73 40 0c 15 28 b0 df 5d 8c 23 9a 5e a7 5c 02 44 d0 7b 1d 3f ae a3 19 d3 49 ab 12 81 67 2f af 67 f1 8c 1d e4 a5 0b 9c cc 56 77 35 2d a3 99 a4 5f 94 12 83 06 f4 b6 ca e9 2a 9a b1 bd bc 86 10 fa 6d 3f af a3 19 d3 49 20 32 74 45 be 28 a3 19 5b 78 00 62 e0 92 ee 6a 15 cf f4 57 00 88 80 53 80 ed ba 79 34 93 a7 a7 82 9f 74 cd d8 c7 32 7d ac 87 5e ba 98 45 32 c9 96 66 62 f8 d2 7e b6 1c 2b 8a 61 a7 ef a6 42 f0 95 74 93 72 e1 a3 18 74 0a cd d7 00 6c ce aa 44 1c 9b 65 2a d7 81 49 8d ab 14 c7 24 29 fc 3a 40 61 ea 58 26 4b 3d 82 47 01 45 5e 2e 23 99 3c f7 00 18 36 50 48 7b 6e 1a c9 74 f3 05 00 31 6c 22 4c 1f 53 1f c5 b0 9b ce 11 7e 0a 28 ec 22 92 e9 98 25 00 06 ee 74 92 d4 75 14 63 Data Ascii: jz(H BM&rs@(]#^\D{?Ig/gVw5-_m?I 2tE([xbjWSy4t2}^E2fb~+aBtrtlDeI$):@aX&K=GE^.#<6PH{nt1l"LS~("%tuc
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: ee 20 52 5c 7b 94 60 c4 b3 f7 ce cf 9e 3e ab 63 0d 73 e6 fe b9 89 97 48 19 ac 7f 42 32 d2 f6 57 5f d6 3f 3f 5b c4 19 c9 c5 c7 7b 9f 05 11 32 d8 08 09 19 b1 b8 71 3f 7b f6 f4 73 8c 61 af 3d ee ce 21 19 c1 60 63 94 91 8a 8b 0f 76 5f ff f0 5a f1 c5 b9 bf 6c 79 2f 52 06 9b 23 21 52 ba f8 a7 9d 4f 3f bc 52 6c 91 3e bc e8 04 51 c4 66 49 19 68 f0 e0 c6 fb 7f 37 a1 a2 0a 5e bf 74 02 4f 8a 1b 06 71 5a 83 3b fd e7 af 84 a8 32 fb 33 97 a0 40 6c 9c 04 28 9f df 3a 78 f3 76 14 51 50 67 2e cd 24 52 1b 08 40 91 b8 fa af bb 4f 7e fa 40 28 92 d0 d5 47 ef 20 10 c4 86 4a 75 ef 5c d9 c5 6f 3f be 42 1c d9 bb 76 bf 28 45 88 d8 4c 29 19 d9 c3 fb b7 f4 fb df 7f 9d ba e8 81 da 7a fc 78 5a e2 14 36 55 0a 00 93 dd db 77 86 2f ff eb df 14 3b e8 fc 9f ce 1c 41 32 82 d9 58 00 19 41 18 Data Ascii: R\{`>csHB2W_??[{2q?{sa=!`cv_Zly/R#!RO?Rl>QfIh7^tOqZ;23@l(:xvQPg.$R@O~@(G Ju\o?Bv(EL)zxZ6Uw/;A2XA
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: fb 5c 68 96 61 cc 72 a1 61 e6 b6 39 66 2c 8a 59 be d8 b3 4c eb 6d 33 8c 37 ce 6d 98 09 34 ca fe 77 63 0b 1a 65 f3 dc ed 30 83 9c 65 69 b3 0c 99 66 ef fe 3f 5f 37 ce 32 68 98 b5 68 96 e1 da cd 32 9e 78 1e 67 bb 59 b6 68 9c 6d 66 b9 d6 30 23 86 99 7b 9a 41 c3 cc cd 30 b7 69 86 4d b3 b7 ce a5 61 f6 ee ff 57 d8 d2 30 c3 71 f6 ee ff f3 ad 35 cc e6 b9 ee 69 06 0d b3 f5 cc 2c 5f ee 66 99 c4 30 97 66 99 c4 30 5f 7b 98 09 0d b3 98 e6 f6 06 4c 78 30 c6 34 b7 71 46 c3 6c 9c 0b cd 32 8c 61 9e d3 cc c6 19 0d b3 77 ff bf 99 9e a3 cc 12 1b 64 40 f2 6e c1 2e 9d 1d 8c 17 2e cc 73 b1 0b 07 c9 c1 d0 8d 3b 59 73 9a d9 30 63 4d 33 65 0f 33 68 96 61 cc 72 a1 59 86 d3 4c 62 98 af 1a 66 38 ce ae 7c 38 cc 20 cf 45 ba 72 07 2b 97 ce a6 59 1e cb ad 8f 83 b1 0b 17 c8 2b 6a 1b 66 c6 Data Ascii: \hara9f,YLm37m4wce0eif?_72hh2xgYhmf0#{A0iMaW0q5i,_f0f0_{Lx04qFl2awd@n..s;Ys0cM3e3harYLbf8\|8 Er+Y+jf
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 7c 51 5d 1d 02 6c 00 02 a1 d1 9b 14 ad ff c9 6b 5c ed 4a e0 c6 07 80 cb e7 8a 00 f0 fc f5 f5 8b 68 8a e3 6f 87 26 02 78 f5 eb 95 2f 00 8a 1b 9e 8c a0 df de 64 6c ff 58 be d4 85 3e 44 71 a3 93 11 f1 fb cb 7d 44 80 c2 f8 79 71 23 17 88 4d 5e 14 39 fb 1f 9f f3 18 00 58 fe 57 ff e7 3e 28 70 63 13 08 b0 fa e1 55 17 71 a0 ff e5 dd c1 d5 54 04 c4 cd 4c 46 14 f0 f2 eb 7d c4 82 fa e9 fd cd 2f 3c 29 62 63 17 fd eb ef 85 78 f0 d5 7f eb 3e 3c 84 08 01 dc b4 44 51 a4 fb fd bf af 4c 44 50 fd fc a4 f8 ea 62 06 01 14 b8 49 89 10 41 4d 5f 3c 2f 13 c4 84 d5 7f f9 69 f7 f6 97 85 05 44 0a dc 94 44 88 80 dc e8 d9 b3 2a 41 5c b8 fa e9 fb c9 85 bb 5f 74 01 89 d0 1f 50 e0 46 22 ea 7f 42 91 00 46 cf 7f 1e 9d 47 74 58 3f f9 71 d4 df 39 3c b3 dd 33 38 2d 40 84 36 12 8a a7 88 d3 e5 Data Ascii: \|Q]lk\Jho&x/dlX>Dq}Dyq#M^9XW>(pcUqTLF}/<)bcx><DQLDPbIAM_</iDD*A\_tPF"BFGtX?q9<38-@6
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 71 a5 a4 16 d4 cc d3 ac 69 6a aa aa aa aa aa aa aa a9 32 e2 fc eb 11 53 31 7f 22 06 81 ec 1a 05 37 c7 ce 23 ea bb 64 d0 91 f2 8c 14 7e 4e a9 39 61 9c aa b0 a0 9d af 76 26 1f ce 7e 76 58 39 f9 75 19 99 99 99 99 99 99 99 98 ef df 89 d2 bf f7 45 c3 35 1d 89 a7 be b5 08 ca 97 d5 ee fb 61 13 08 ea 09 6b e2 e3 e9 6b 24 44 50 b8 88 88 8c 85 dd dd dd dd dd dd dd dd dd dc cd 43 b2 85 1c e4 46 ee 65 36 cb bf cf 9c bc 04 60 a3 86 0e 48 b4 63 cf a6 f5 34 3c 36 a2 70 98 f5 c7 5a 33 d3 a4 7e d0 a9 76 bd c0 1e 4f 48 2b 8c 19 a6 86 9d 5e e4 c8 88 88 88 88 88 88 88 81 b5 f5 8f 6a e0 b6 93 16 f6 f5 db d2 a5 6b 97 f8 cb 6a 16 57 72 8f 85 6f fc 6c 89 19 44 16 55 90 3c 65 a8 f1 62 a2 15 64 3e b1 c8 0e bd 8d 3a bd c0 1e 4f 48 2b 8c 19 a6 86 9d db 55 55 55 55 55 55 55 4a 05 db Data Ascii: qij2S1"7#d~N9av&~vX9uE5akk$DPCFe6`Hc4<6pZ3~vOH+^jkjWrolDU<ebd>:OH+UUUUUUUJ
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 66 a1 0d a0 e3 4e af 70 07 93 d2 0a e3 06 69 a4 bb bb bb bb bb bb bb 79 1d d7 90 7f 1d 0f 13 28 f0 0f 29 a1 5e 7e 68 ae 8c bd cc f6 24 24 71 d0 46 a2 6d 9f 0d d0 78 0b 81 af 8b 80 44 a6 c5 73 62 af 2b bd 67 73 8b e8 93 d9 38 de a5 08 0f 4c c0 0d 8c 51 1c 33 df 93 dd 0a 7c ec 69 d5 ee 00 f2 7a 41 5d 77 77 77 77 77 77 77 60 16 21 30 ca 78 de a9 68 65 f9 e1 82 85 da 5e 30 6b b9 36 5c 09 d7 27 1d cb 20 88 ba 97 da 11 ef 45 90 28 dd d0 d3 8b 46 1f b3 e6 87 19 5f 53 b7 73 4b ae a7 41 4a 75 98 76 15 95 ad 4c a9 27 fe 5c 87 ff ff ff ff ff ff ff ff cd dd dd dd dd dd dd d5 3e 31 b0 36 11 8f 1f 25 bb ca fa 4d 2b 52 04 15 86 92 84 0f 7c 90 e0 d5 37 ec d4 1b c5 3c cb 7b f3 50 0f 93 02 8e e9 15 4f 59 54 cf bf 99 4c 6a 9e 90 20 44 47 27 f9 1b f4 3d 75 c8 b6 58 49 52 bb Data Ascii: fNpiy()^~h$$qFmxDsb+gs8LQ3\|izA]wwwwwww`!0xhe^0k6\' E(F_SsKAJuvL'\>16%M+R\|7<{POYTLj DG'=uXIR
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: bb a2 02 07 56 f1 5c 62 b1 81 4e 3b 11 a3 6f 7e 26 e2 bd be f4 57 1e 9d 60 6f 37 d4 75 bf 1a ba 30 05 1c 65 eb e0 78 a9 cc 0f 68 b7 fb 17 01 8f 03 ed fd 58 24 6c 10 e4 14 07 24 04 2f 2f bb 67 45 8e 93 b6 c4 7c ef 3a ab 30 00 02 51 38 a7 dc fd c3 d1 f6 12 9a 25 07 d8 d4 58 06 a9 ec a5 23 b3 e7 34 18 2e 6f 1b ab 51 ca 0c d5 01 3d 35 4d a0 80 53 63 b6 ef 2e c0 60 34 9d 69 6d b3 67 a7 12 4e 77 7d 60 e6 af 45 de 74 ab 76 7d d8 23 30 97 ae d8 ff 87 97 ea ee 5b 17 60 f0 bf ba 1d 20 33 69 49 7a b0 71 ab f0 b8 7e 91 bb d5 e9 93 0b 54 a6 94 e3 9a 45 61 4d c6 91 57 96 6f 25 42 11 ba c8 e1 16 7b 41 05 a4 73 55 13 af 5a 95 26 cc 96 4d bc ed 6b f3 f3 10 00 6b e5 92 4d 5b 82 7c 50 cd 6a 17 0e ab 45 b8 ed 25 ff 20 25 72 97 6c 91 ac 77 2f c7 02 1f f4 e5 4c 7b fa 58 d4 52 Data Ascii: V\bN;o~&W`o7u0exhX$l$//gE\|:0Q8%X#4.oQ=5MSc.`4imgNw}`Etv}#0[` 3iIzq~TEaMWo%B{AsUZ&MkkM[\|PjE% %rlw/L{XR
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: fa ea f9 40 e5 53 9a 78 c2 46 13 da 9a ee 63 b7 e4 0c 2c f7 8b ea 16 7a b4 ef 0e 55 77 5a 53 b2 38 43 81 89 59 3f 22 c3 ed ca 23 e1 df 2e f2 16 c8 3b ca fc 9e ea d4 a5 ce cb bb 77 56 79 4c 58 f0 63 76 ea 40 66 39 34 3d 02 7d b3 3c d3 0c 30 15 39 a1 00 9c 8b c1 94 e1 c7 e8 08 7f 7a d5 dd d4 9c 9d 12 18 96 88 a9 8a 56 bc dc f6 ba 04 86 e4 e1 89 86 5c 01 30 98 6b 81 7a c0 cf 56 82 c0 58 8a 59 05 88 cf 39 9c af a0 eb d1 e8 f9 67 b0 f9 fd d3 0a bd 1b 35 2a 45 61 c7 fd d3 0a bd 1b 35 2a 45 61 c7 fd d3 0a bd 1b 35 2a 45 50 8c e6 83 6e e2 9b c3 69 1f 3d 82 f7 0d 04 b4 f6 fe 97 a4 85 a8 21 62 e7 46 7d 4f b2 e9 04 16 a2 46 cf 73 e8 88 3c 26 26 f4 8c 22 62 da a0 40 66 ca 28 d0 4d 81 c4 56 df 95 d5 19 4f b2 30 29 cb 08 e3 96 05 68 fe 54 43 2b 91 96 e5 fc 59 4c 0f 71 Data Ascii: @SxFc,zUwZS8CY?"#.;wVyLXcv@f94=}<09zV\0kzVXY9g5Ea5Ea5*EPni=!bF}OFs<&&"b@f(MVO0)hTC+YLq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	49901	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:06 UTC	384	OUT	GET /uploader/dbaf20a93b83347c91f7674df9783ada.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:07 UTC	582	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:07 GMT Content-Type: image/jpeg Content-Length: 143686 Connection: close Cf-Bgj: h2pri ETag: "995A0703D4DEDBEF84A0CD0087114249-1" Last-Modified: Sat, 05 Aug 2023 07:50:13 GMT x-oss-hash-crc64ecma: 14096733061716009858 x-oss-object-type: Multipart x-oss-request-id: 66511B41B6DE1D3539F43E2A x-oss-server-time: 91 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:07 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e20388adf7c4-BNA
2024-05-24 22:57:07 UTC	787	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 c4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCC
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 01 bb d7 d7 f4 3f e1 40 0e a0 0c fb bd 52 c6 c9 a2 8e e6 f2 ce da 5b 8d ff 00 66 8e ee ee 1b 53 71 e5 6c f3 3c af 35 83 3f 97 bd 37 ec 56 db bd 37 63 70 aa 51 6f 5d 97 7d ff 00 0d ff 00 ab 98 ba f4 d4 b9 5c 92 7e 6d 25 65 d6 ee cb e5 7b fc f4 2d 2c b9 ce 47 23 19 c1 e3 f3 e7 3f 5e 2a bd 9f 9f e1 ff 00 04 a5 56 93 da 71 7e 8e ff 00 91 26 f5 f5 fd 0f f8 54 59 f6 7f 73 1f b4 87 f3 20 de be bf a1 ff 00 0a 2c fb 3f b9 87 b4 87 f3 20 de be bf a1 ff 00 0a 2c fb 3f b9 87 b4 87 f3 20 de be bf a1 ff 00 0a 2c fb 3f b9 87 b4 87 Data Ascii: ((((((((((((?@R[fSql<5?7V7cpQo]}\~m%e{-,G#?^*Vq~&TYs ,? ,? ,?
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: b5 88 62 ff 00 17 fc 1b 77 bb 6e 7e df f0 9b c0 32 f9 7b 77 e7 61 8b 46 81 b0 d9 1b b7 b3 e0 a8 2b b3 2d bb 2f 67 e7 bf 97 e5 af f5 b1 ac 33 5c 4e 8e 52 97 9a 76 d9 5e d7 e5 df 77 f8 5c d8 4f f8 38 87 fe 0a 53 f2 ee f8 83 f0 b6 f7 18 2e 27 f8 3f e1 10 73 93 c1 f2 a3 8f 23 81 d3 1d b8 ce 72 3a 56 dd bd 7c a4 bf f6 eb 5f ef 5a f7 db aa 19 c5 54 f5 94 76 df 92 09 bd 76 bf 2f 5f d1 58 e8 a1 ff 00 83 8f 3f e0 a3 56 2a 8a 6e fe 07 5e 29 1f 31 ba f8 58 63 3c 64 1c ae 9f e2 1d 3e 13 bb 19 24 42 3a e0 63 07 27 b3 b7 5f bf 5f d7 fa fc 0e 87 9a d5 6b 9a 32 b4 ec b6 d1 2d 3f 95 24 af 7d ef e7 a5 ec 6e 69 bf f0 72 9f fc 14 0a 09 11 ee 34 7f d9 f6 fe 21 fe b6 1f f8 57 1a d5 a1 63 cf 3e 65 bf 8c f2 3b 1e 50 9c 71 c7 06 87 4a da 36 f5 f5 fc 1d ff 00 2f 43 8e 59 be 39 bf Data Ascii: bwn~2{waF+-/g3\NRv^w\O8S.'?s#r:V\|_ZTvv/_X?V*n^)1Xc<d>$B:c'__k2-?$}nir4!Wc>e;PqJ6/CY9
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 6e 6f 35 3b fb bd 4a fa 69 08 e5 ae 2f af e7 b8 bc b8 3e f3 4e e4 70 33 c0 c6 87 2c f1 52 a8 97 2c 9a b6 ea ca cb 4d 92 db ab d6 c9 bd bb a3 2e e9 70 14 f0 76 80 06 48 1d cf a9 f7 fc 31 41 8f 34 a4 f5 6e ed 5a f6 e9 da cb f4 f3 f3 33 ee 65 f3 2d 2e 57 1c 85 38 c9 e4 e4 7b 93 fc eb 4a 7d 7e 5f a8 a5 1b 59 bd f5 b7 91 f8 67 fb 5f db 79 1f 1f e4 81 5b 09 75 a1 58 49 90 33 86 49 98 b8 c0 3c 92 11 90 f3 9c 8f ad 7a 94 f6 7b ab da 29 3d 6d 7b ea b6 d3 63 e7 f3 25 1b 5e ca fa 59 d9 5f ef df b9 e2 3e 1c 8e 5d 36 de ff 00 c4 56 f3 5b ce 9a 75 c8 b6 d5 ec 23 98 4b 73 1d 9d d9 74 b0 92 64 8c 34 26 c3 5a b8 0d a7 c7 3a c9 24 b6 d7 f0 35 a4 d6 eb 35 cd 9a cf 94 da a6 af 29 7c 36 5b 3e bf 65 74 bf 9e b7 f9 1c 8a 9c 65 45 c9 46 e9 25 b6 bb 5f ab d5 59 a4 ad a5 9e b7 3d Data Ascii: no5;Ji/>Np3,R,M.pvH1A4nZ3e-.W8{J}~_Yg_y[uXI3I<z{)=m{c%^Y_>]6V[u#Kstd4&Z:$55)\|6[>eteEF%_Y=
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 77 92 6b c9 2e a2 b8 13 cf 71 34 af 24 f3 cd 24 f7 53 c8 f3 dc 4f 2c ed bc 09 25 7d aa 46 9e cf cf f0 ff 00 82 78 18 8a b3 6d 6b 64 f6 5e 6a dd 5e db e8 ff 00 e0 b7 e6 3a e4 42 ca ed 61 89 54 5b 49 04 17 10 45 b4 90 21 b8 8e 29 23 7c 9f ef 3c 8e 84 67 01 90 e7 9e 85 3e bf 2f d4 f3 a5 37 3b 5e ff 00 36 df f5 bb fb d9 91 24 c2 5b 79 61 55 c1 63 b4 74 20 15 c7 1d 46 3d 3a 71 fc ba a3 1e 5b eb 7b 99 d9 5d be fb fc 8c f5 05 17 93 9c 01 fa 0a ce 51 e5 b6 b7 b9 d0 92 5b 22 bc ee 65 23 19 5d bc 71 df 04 fb fb d4 94 9a 4f 55 72 84 a4 a0 db 8d c1 87 23 81 c7 b8 24 03 f9 fe 15 a5 3e bf 2f d4 72 7c c9 3b 5b 56 bf 23 f1 2b f6 d0 87 c8 f8 f7 62 b8 00 c9 e1 f5 05 89 e3 9b 89 d8 67 93 80 a2 4c 67 d0 7e 5e bd 0f 89 5f 74 ed 6e de e4 bf e1 fe 76 e8 7c f6 67 f0 bf 47 ff 00 Data Ascii: wk.q4$$SO,%}Fxmkd^j^:BaT[IE!)#\|<g>/7;^6$[yaUct F=:q[{]Q["e#]qOUr#$>/r\|;[V#+bgLg~^_tnv\|gG
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: b3 e7 31 2e d3 d7 44 bc db 5d 35 5e 4d be dd fc cf 2b f1 52 2c 7f 66 cb 07 30 dd ea 76 29 91 8c 5b c5 75 67 aa 5b 2f 5e 42 db df aa 0c 63 00 70 70 31 52 73 9c 76 4e 5f 3c ef 91 a4 fa 06 ed f8 7d 6b ae 0d 2b dd f6 fd 40 8a 5e 9f 83 7f 21 50 74 14 57 ab 9e c0 ff 00 8f f8 50 04 17 32 04 0b 91 90 4f f9 ee 3d 3d 7f 0a ce 9f 5f 97 ea 16 d2 fe 6d 7d d6 ff 00 33 f1 7b f6 e4 b5 58 fe 38 e8 97 43 00 4d a0 85 1f 36 73 89 30 40 1b ba 86 07 3c 0e 4e 3b 71 ea 43 77 7d f5 7f 2b 49 7e 29 2f bb cc f9 fc d3 e0 fb bf 26 7c d5 a1 5b f9 b6 57 ba 8c 71 8b d8 ec a4 30 ea 76 8f 9f f4 58 5b cc 30 dd 20 e7 7c 87 13 7d 96 45 da 6d 2f 92 d9 bf 7a 26 6f 26 aa 47 9e d6 57 b3 7a 59 6b b2 69 b7 25 fe 6e da 59 6a fc 6a 55 fd 8a 6f cb ef d5 f9 79 ff 00 c0 b9 d8 e9 17 7a 6c 31 5c f8 5f 5b Data Ascii: 1.D]5^M+R,f0v)[ug[/^Bcpp1RsvN_<}k+@^!PtWP2O==_m}3{X8CM6s0@<N;qCw}+I~)/&\|[Wq0vX[0 \|}Em/z&o&GWzYki%nYjjUoyzl1\_[
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: ca 79 14 7f 5f 79 cc d5 d3 5e 4d fd ca ff 00 a1 fc 72 5c 6e 24 16 c8 73 e7 c4 c7 27 a4 52 98 f0 79 f4 00 9e 99 27 91 55 cf 2e ff 00 82 ff 00 23 e5 f1 f1 b4 da 4d 2b 59 a6 b5 5a db be fb de fd 7c 8e 3b c5 09 6f fd 8b a8 ab 71 24 51 5b ea 98 51 82 5e de 64 b0 96 6d c7 38 55 83 52 41 29 23 01 20 8c 0d a4 16 2a 5e eb df 66 b5 db 7b 6b f2 b9 cf 4d 5d 25 eb fa 9e 60 32 06 4f 60 32 47 4c e3 ff 00 ac 6b a1 49 ad 9e fe 83 23 97 a7 e0 df c8 56 e7 41 47 20 a4 ab ea 7a fe 27 fc 07 f9 ea 01 4c b3 1e 19 4a e3 d7 07 39 fa 33 56 74 fa fc bf 52 e7 d3 46 b7 de de 5d 9b 3f 1c 3f 6f 20 60 f8 a7 e0 5b ad bf f1 f3 a6 ea 11 0e 7e f1 8a e6 27 00 8c 9e 07 da 00 e9 ed 83 ce 3d 28 cd c1 5f 7d 92 5d ae af f3 ed fd 58 f9 dc cf e1 92 fe ed fe eb 7e 67 ca fa 2d d4 d6 32 3d e4 4f 8b 8f Data Ascii: y_y^Mr\n$s'Ry'U.#M+YZ\|;oq$Q[Q^dm8URA)# *^f{kM]%`2O`2GLkI#VAG z'LJ93VtRF]??o `[~'=(_}]X~g-2=O
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 2e 5b 59 59 5f e5 a5 f5 b7 df b7 52 23 bd dd dd be 7a d9 da ff 00 76 fd 08 2f 6e f7 cd 23 05 2b 08 65 58 23 38 26 28 c2 90 17 8c 0c b0 5f 32 43 9f 9a 57 76 e8 40 19 b9 2a 6d e9 7d b6 7e af 67 d1 7a b6 74 d2 77 4d f7 b7 e1 7f cf fa 47 5b f0 f8 87 f1 c7 83 41 1d 3c 65 e0 ee e7 f8 bc 4b a6 8e d8 f4 ae 7a cb 4b f9 5b ee 6b fc cf 5b 2e fe 2a f5 fd 0f f5 d4 ec 3e a7 f9 2d 79 f3 f8 9f cb f2 47 d9 51 f8 17 ab 27 a9 35 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 03 33 57 87 cf d3 af a3 c6 4b d8 df 46 07 a9 92 d6 44 00 72 30 49 23 07 db de 83 2a bb 7c a5 f9 1f c7 05 f6 0c b7 ae 9c 85 b8 9a e5 17 38 22 29 e4 51 ce 7a 10 c3 91 d8 b7 23 a6 2a 1f 12 f9 fe 4c f9 9c 6c 53 7b 5b cf ab 7e eb fb b5 5f 97 Data Ascii: .[YY_R#zv/n#+eX#8&(_2CWv@m}~gztwMG[A<eKzK[k[.>-yGQ'5((((((3WKFDr0I#\|8")Qz#LlS{[~_
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 7e cd 04 5b 26 bd bc 74 2f 05 8d 8a 92 6e 2e e6 f9 93 21 06 c4 86 3d cb e7 4f 24 70 ef 8f cc de a1 84 e4 ac d7 df e5 b1 5b 57 d4 3e d9 3c 70 c0 3c 9d 32 c2 35 b3 d3 6d 54 6d 44 8a 22 4c b7 52 0c 9f 32 f2 f2 e1 e5 9e e2 e1 b0 cf b9 14 0c 20 62 df e5 b6 fd fc cc c8 29 1d 06 7d 00 69 ae 30 c0 90 32 31 cf e3 57 1b 5a 49 b4 ae ad af cc 89 de f1 69 37 67 7f c8 aa b6 b3 5c ce 21 b7 c3 48 c1 dc 83 85 55 55 05 99 99 89 e1 50 02 59 8e 02 8e 49 00 12 20 99 b5 74 bb 5e ff 00 81 a1 7e ef 6c 20 b0 b3 b9 32 59 c7 38 9a ea 57 42 93 de cf 1e 56 32 dc 8c 5a c7 12 46 96 2b 80 5a 35 6b a9 07 9f 75 21 0a 5f 0b 5e 97 fb d7 f5 bd 98 a3 1e 6b eb b5 ba 5f fa d8 68 93 cc e7 18 f6 ce 7b 9a 50 5a 7a bb f6 f2 f3 ec 74 52 5c aa 4a f7 d5 33 b0 f8 7a e7 fe 13 7f 07 11 c7 fc 56 5e 0e f4 Data Ascii: ~[&t/n.!=O$p[W><p<25mTmD"LR2 b)}i021WZIi7g\!HUUPYI t^~l 2Y8WBV2ZF+Z5ku!_^k_h{PZztR\J3zV^
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: b5 a6 f7 d3 63 ea 72 2c eb ea d2 49 a5 15 74 af b6 fa 3b ff 00 c1 bb 4f 73 e8 5f 88 30 5a 7e d0 7f 0d af fe 3d 68 3e 5c 9f 15 bc 0d 61 a5 c3 fb 4a 68 36 c8 82 6d 72 da 4b a9 34 6d 03 f6 81 b2 89 18 c8 d6 de 23 71 a3 78 63 e2 be d4 5b 6d 37 e2 45 c5 9f 89 91 ce 99 e3 b9 65 d2 ff 00 3f ca 63 2c 97 38 6a 52 e4 8c ea 49 de 4e d1 77 bb 4d eb 6b 6a df 64 df cc fb b9 54 a5 9a 53 bc 54 53 51 e6 4d 5a f7 f9 59 ea ee bc b4 6f 57 a7 c8 66 30 e4 90 db 73 db 19 e8 07 43 91 9f 5e 95 fa 52 a9 1a cb da 41 a9 46 5a de 2d 35 af 9a d0 f9 4a f4 bd 9d 49 a6 ed 67 6b 5b 6e 9f 9f 6d 3b 15 e8 39 82 80 14 02 7a 02 7e 80 9f e5 40 59 bd 93 65 e2 70 09 f4 a0 e8 51 52 76 7d 7f e1 c5 8a de 6b b9 a0 82 dd 4b cb 71 2a c4 ab 8e 9b b8 2d 93 c7 1e 84 73 8a 76 56 bd fa ed 6f e9 1e 66 3e 7f Data Ascii: cr,It;Os_0Z~=h>\aJh6mrK4m#qxc[m7Ee?c,8jRINwMkjdTSTSQMZYoWf0sC^RAFZ-5JIgk[nm;9z~@YepQRv}kKq*-svVof>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	49905	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:06 UTC	384	OUT	GET /uploader/f3e535712b0f9decfe1f620107cfee74.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:07 UTC	615	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:07 GMT Content-Type: image/jpeg Content-Length: 86977 Connection: close Cf-Bgj: h2pri Content-MD5: N2tqJMm0ypxmYiRK/PngEg== ETag: "376B6A24C9B4CA9C6662244AFCF9E012" Last-Modified: Sat, 05 Aug 2023 07:44:48 GMT x-oss-hash-crc64ecma: 7458696596561061205 x-oss-object-type: Normal x-oss-request-id: 66511B41F488A538300FDE8D x-oss-server-time: 108 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:07 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2038a3ff7d8-BNA
2024-05-24 22:57:07 UTC	754	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 5b 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCC[
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 03 20 75 38 a0 02 80 0a 00 28 01 32 3d 47 e7 40 0b 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 01 5e 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 08 de 42 dd 38 fa 71 eb f5 fe 74 01 42 eb 5b d3 b4 d8 5a 7d 42 f6 ce c2 2f f9 eb 7d 73 0d 9c 1c 7a cf 3b ac 49 8c ff 00 13 8c 9f 4c e6 80 3e 7a f1 df ed a7 fb 26 fc 30 82 ea 7f 88 5f Data Ascii: (((((((((((((((( u8(2=G@@P@P@^(((((((B8qtB[Z}B/}sz;IL>z&0_
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: c7 af 83 9e 15 11 97 12 c7 ac 7c 4c f0 6d bc e9 b3 6e ec 59 ae b1 2d fb 05 dc a5 bf d1 14 a8 65 c8 e4 51 cb 2e df 90 1f 1d f8 df fe 0b 5b ff 00 04 cd f0 1f 9a 9a 87 ed 49 e0 dd 7e e2 1d db ad 3c 0f 61 e2 3f 19 5c 1d 9b 73 83 a2 e8 d3 c0 33 b9 76 ef 9d 77 fc db 32 11 c8 ce 52 e5 b6 97 b8 1f 1f f8 d7 fe 0e 4e fd 81 f4 45 b9 4f 06 e8 ff 00 19 fc 7b 71 0a e5 1a df c1 76 be 1d b0 94 e0 f0 6f 35 ed 6a c9 a3 24 82 17 74 39 38 c1 00 90 2a 7d a7 97 e3 ff 00 00 0f 8d bc 71 ff 00 07 41 e8 93 28 5f 87 9f b2 5e b1 76 84 9d b7 7e 32 f8 95 69 a6 c4 c9 f2 e1 85 a6 87 a5 5f dd 03 8d e7 09 73 18 24 29 f3 30 cc 54 f6 9e 5f 8f fc 00 3e 4c f1 7f fc 1c 9f fb 5f 6b b3 93 e0 7f 84 ff 00 05 3c 17 06 1c 24 77 5a 66 bf e2 eb a1 9c 6d 2d 71 a8 6b 16 81 c8 da c4 ee 47 07 72 ed 2a 14 Data Ascii: \|LmnY-eQ.[I~<a?\s3vw2RNEO{qvo5j$t98}qA(_^v~2i_s$)0T_>L_k<$wZfm-qkGr
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: e2 7e ad f1 67 e2 0e b5 e0 5b 98 3c 65 ab eb 7a 5d 96 83 05 87 86 a5 d6 a2 d4 6d a2 d0 f6 4d a8 4c f3 20 46 b6 9e 78 21 55 4d fb 99 86 00 07 f2 97 e3 df f8 39 7f fe 0a 65 e3 40 d0 f8 7b 50 f8 3f f0 c6 d2 40 55 2d 7c 25 f0 ea 3d 4e e2 02 36 85 11 5f 78 af 54 d7 2e 09 4c 70 1f 79 21 ce e2 c4 29 09 c9 47 77 63 a2 9d 3d f5 d7 4e 9f f0 4f 8c 3c 75 ff 00 05 7e ff 00 82 9c 7c 47 59 47 8a 7f 6c 3f 8b 3a 3d ad c0 6f 36 db c3 5a 9e 97 e0 0b 52 0f 03 6b f8 6f 4c b1 9a 2c 05 5c 7d 9e 78 87 24 8c 64 d6 6f 13 08 36 94 d6 d7 7f 8f 93 d7 47 a1 d4 a9 38 ec d3 76 d6 f6 56 6b d7 fe 1f a7 73 e4 6d 7b e3 87 c6 ef 8a 17 b2 9f 14 fc 67 f8 8f e3 ad 56 e3 77 9a fa af c4 ef 1a 78 96 e6 4e 0f 2f a7 45 aa dd 19 32 55 78 36 ce 72 00 01 48 c0 cf eb 94 e2 ed 7d fe ef 2d 5a fc b7 39 e5 Data Ascii: ~g[<ez]mML Fx!UM9e@{P?@U-\|%=N6_xT.Lpy!)Gwc=NO<u~\|GYGl?:=o6ZRkoL,\}x$do6G8vVksm{gVwxN/E2Ux6rH}-Z9
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: ea 3a 3b b1 dc 88 92 7d a6 cd 1e 31 74 8a 64 42 c0 1f a2 29 72 1c 80 14 f3 9c 7e 19 f7 3d 40 f4 f6 f7 a0 0b 54 01 62 80 0a 00 28 00 a0 02 80 2b d0 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 7f 23 df f0 77 19 23 f6 6f fd 8f b0 48 cf c7 ef 17 67 07 ae 3e 1a ea 64 67 f1 e7 eb 59 d4 e9 f3 fd 0d 29 f5 f9 7e a7 f1 1b 7d ac e8 fe 02 f8 79 e2 7f 8b 5a 9f 87 e1 f1 9f fc 21 13 78 06 01 e0 ed 57 54 d5 b4 cf 0e eb ff 00 f0 96 6b 1a e6 8d a8 ff 00 6c 49 a1 dc 58 ea cc 23 86 c2 33 6d f6 4b eb 7d be 74 e2 5d fb a3 31 f3 55 8c a6 b9 62 ec 9e ef ee d1 ab ab a7 af 75 e5 7b 1d d4 e3 cb cc d4 de 89 6f 1e 9a fb bb e8 ba e8 f6 e9 73 c7 cf fc 14 73 e2 cd a3 22 7c 3f fd 9f 3f 66 2f 0b 94 50 b6 37 56 9f 03 ad 3c 6d ab 59 db c6 ce 23 8a 0d 47 c7 77 be 2e cf 96 77 86 95 Data Ascii: :;}1tdB)r~=@Tb(+@P@P@#w#oHg>dgY)~}yZ!xWTklIX#3mK}t]1Ubu{oss"\|??f/P7V<mY#Gw.w
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: bf 43 dc 64 9f af e9 c6 0f 7c 55 9a 1b 96 ce 17 0d c1 c6 71 ce 3f bc 38 3c f4 cd 00 6d db c9 86 5c 2f 5d d9 e7 eb ed ed 5c e7 41 bf 6b 39 0a aa ab ce 1f f8 87 fb 47 a1 1c 50 07 5f a5 4a 64 b6 1b 52 16 98 90 51 65 51 c9 39 c8 0d 90 14 fa 1e 07 5e 83 a0 06 9b db 5c 42 97 72 4d 0c d6 b3 43 3c 90 cd 04 f1 ec 91 26 88 e5 c1 0d d8 64 2f 7c 13 ce 4f 40 0a a6 e4 80 bf 28 e4 7d 7d 3d c6 3f 33 40 0a d7 c3 69 25 38 03 3f 7b 1d 39 eb da 80 20 79 d5 ca ee 93 04 c2 25 55 55 dd 82 dc 14 24 64 8c 11 c9 3c 03 d4 0e c0 18 77 53 aa 11 95 2d c9 f6 39 e7 9e 08 f4 34 01 87 77 72 bb 0a 80 00 da 4e 0f 5c e1 bf da f4 a0 0e 0b 52 b8 cc 83 8e 99 1d 3d 19 bf da a0 0f 3e d5 25 4f 33 39 fb a1 98 fb 02 49 03 af 53 e9 eb 41 ce 79 96 a9 cd c4 84 72 18 0f c8 92 3f 51 40 1e 13 f1 a7 3f f0 Data Ascii: Cd\|Uq?8<m\/]\Ak9GP_JdRQeQ9^\BrMC<&d/\|O@(}}=?3@i%8?{9 y%UU$d<wS-94wrN\R=>%O39ISAyr?Q@?
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: ba 6b be bd d2 ed c3 e5 d2 aa d3 8a f5 b6 b6 dd 35 bd af b6 cd ee de da bf 0f f0 f7 8d bf 6b 5f 15 89 75 0f 11 f8 4f e1 c7 c2 1d 2d 80 7b 4d 1a 1d 4b fe 12 cd 5a ce 29 14 ca ad aa 6b 6b 9d 3a 4b d9 91 e2 12 8b 24 44 82 51 2c 6e d3 ed 57 1f 21 8d e2 57 26 e5 4e a5 db e8 9d 97 46 dd bf cf af 65 63 dc c1 e5 49 38 f3 a6 ed ab e6 b7 93 d2 d6 ba bf 5d 57 47 ab 6c a1 f1 07 e2 67 c5 df 86 fe 10 d5 bc 5d 77 e2 bd 0b 56 4d 30 5a 6d b0 b6 b9 b0 b7 96 e4 dd de db d9 00 25 9e cd 96 30 86 e9 5c 91 14 c7 e5 da 55 77 6e 1f 33 8f e3 1a f4 f9 52 9c a3 66 ee 94 9d ba a5 a3 ef ae ba ef ab 4a c7 d2 50 c9 e8 4d 5a 54 a0 f4 df 92 0d 5d 5b 76 e2 e3 bd ef 6e da 2b 23 f1 db f6 85 ff 00 82 f5 2f ec df f1 d3 c6 bf 03 7c 5d e0 4f 1d 6a da a7 81 b5 0b 7b 0d 4b c4 3e 1f be f0 75 ce 97 Data Ascii: k5k_uO-{MKZ)kk:K$DQ,nW!W&NFecI8]WGlg]wVM0Zm%0\Uwn3RfJPMZT][vn+#/\|]Oj{K>u
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: d7 36 f0 47 2d dd f3 88 94 95 6f 3f a8 6c 91 c7 d3 1e dc 80 07 19 3f 9f e1 6a d4 94 1b 9d 4b ab db de 6d bd 2f d2 ce fb ea ec f7 bb d6 e7 a5 51 38 ab ad 15 f4 f9 5b cf a5 fb 75 fb be 13 fd b8 3c 41 73 a1 fc 0f f1 ee a3 6d 77 71 0c f6 b6 fa 5c a8 66 72 fb ca 6b ba 66 55 46 38 c8 24 b7 52 72 a7 b1 ce 58 9e 5a 95 62 bd e7 de fa be da 2d 3b 3b df cd 35 a6 be c6 59 77 14 de bb b5 d6 df a7 a5 8f e3 f3 f6 e5 d2 47 8a ff 00 69 9f 8b 5a e7 d8 fe d4 6f fc 41 6d 71 e6 e5 41 22 4d 0b 47 1b 70 48 27 6e de b8 1d 7d 6b d4 85 1a 7e c5 5a 3d 37 76 ba 69 a5 e8 bb a5 6d d5 cf 6e 9f 5f 97 ea 7e 87 fe c7 49 ab c3 f0 77 c3 b6 31 5e 5f 69 21 6c ee 66 79 6c e7 74 17 06 db 66 d4 95 54 a8 dc 04 8d e5 92 d9 4d ef 85 6d d8 1e 7c d3 a1 51 b8 36 9b 6a 49 a6 f6 95 bf 0d f6 ba b5 b5 ba Data Ascii: 6G-o?l?jKm/Q8[u<Asmwq\frkfUF8$RrXZb-;;5YwGiZoAmqA"MGpH'n}k~Z=7vimn_~Iw1^_i!lfyltfTMm\|Q6jI
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 26 b3 f0 af c6 9a 26 94 7c 51 75 ab 5d e9 c8 9a 7a ea 5e 09 f1 de ad 63 2c e6 ee d9 9a 0b 8b 15 d1 ae 6c ae 04 d0 89 12 27 33 ff 00 a3 5c 79 57 21 1f ca f2 5d c1 29 4d 7b db 5f a3 56 6d 35 f3 db 75 7e fe 47 a9 95 fc 0b cd 37 fa 7f 91 fc bb fc 42 fd a3 34 bb af 19 6b 4b ad 68 b0 2d f5 dd eb 34 b7 37 9e 00 d5 64 9e dc 47 1a 43 b5 f5 28 2c ed 78 7f 2c 30 96 68 26 9d b2 37 4c f8 cd 7a d4 77 8f 47 ef 79 27 bd b4 ea ed f7 75 b6 87 bb 3f 85 fc bf 35 73 f4 b7 f6 6e f8 97 f0 9b 5d f0 2e 84 fa 77 8e 74 2d 36 fe de d6 e1 ee b4 97 b8 1a 3c 29 3c 65 77 5b cb 65 7e 2d ee 31 c9 cb b4 6a 0e df b8 36 f3 e7 e3 a2 e3 28 df 5d 53 ec f9 6e 92 4d de ef af 9e af ce de be 5c 94 e2 d3 f5 4b e4 ee be 6b 4e f6 3f 77 3f e0 93 3a 0c b7 df 18 fe 35 78 93 ce b6 9a df 47 f8 77 f0 d7 41 Data Ascii: &&\|Qu]z^c,l'3\yW!])M{_Vm5u~G7B4kKh-47dGC(,x,0h&7LzwGy'u?5sn].wt-6<)<ew[e~-1j6(]SnM\KkN?w?:5xGwA
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: c5 73 3a 99 e0 91 3f 03 e3 09 49 d4 9d de 9c db 74 5a 27 b6 cb fc 8f d5 f2 68 5b 0a a5 77 65 15 a3 bf 7b 6a db df 4d ee f6 7e a7 eb 6a 41 34 96 36 e0 48 96 71 b2 b6 c5 d3 a3 5b 5d a3 8f 93 0a 38 53 93 90 3d 49 e3 3c fc 8e 06 2a 74 f9 6f 67 e9 b7 e3 e5 aa d2 fe 76 56 c2 bb f7 a7 b3 5c d7 f2 7a ff 00 56 dc f9 a7 e3 6d c6 a7 0f 86 b5 05 82 fe e5 40 b6 ba 52 4c ad 96 1e 4c d8 07 e6 c7 6c 13 8e 9c 63 9a d2 30 b4 ed 7e 8a de 7c cb 44 f5 d3 b7 e9 63 d6 cb 3e 18 6a b6 6b 5d db 7d be e6 7f 13 bf 14 35 3f 06 9f 19 78 94 37 87 67 4b d3 ae ea 6e 6f 6d f5 7b af de 2a de 4b 16 d9 6c 37 ad bc 27 11 86 8e 48 8a 92 0b 86 43 95 31 fa 54 56 bf e0 de fd 6f cd db 4d 3b 6d f7 23 da 9d 4f 75 e9 f7 3f 35 e5 fd 79 9f a1 7f b2 5d 9e 9b a9 fc 34 8a cb 4f d2 66 b8 b2 82 fa ee 49 61 Data Ascii: s:?ItZ'h[we{jM~jA46Hq[]8S=I<togvV\zVm@RLLlc0~\|Dc>jk]}5?x7gKnom{Kl7'HC1TVoM;m#Ou?5y]4OfIa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	49906	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:07 UTC	384	OUT	GET /uploader/5cca73d2b424042491646a2499b29f93.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:07 UTC	583	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:07 GMT Content-Type: image/jpeg Content-Length: 159767 Connection: close Cf-Bgj: h2pri ETag: "17E0F65B449432BB7C36602D6FB8C91C-1" Last-Modified: Tue, 08 Aug 2023 03:14:51 GMT x-oss-hash-crc64ecma: 15821716016210044006 x-oss-object-type: Multipart x-oss-request-id: 66511B41342C4830390EFAFF x-oss-server-time: 109 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:07 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2039afdf7f0-BNA
2024-05-24 22:57:07 UTC	786	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 77 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCCw
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: b2 09 29 4e ef b6 f6 ea fc ef b5 ff 00 0e 87 25 a7 a4 fa 5d bd a5 a4 a8 11 63 83 62 39 ef 8d ee 32 73 d5 4b 00 79 ce 39 23 3d 28 d3 47 64 f4 d7 7b ae 89 27 df 74 95 bc fa b3 aa 8e e6 f2 e2 e3 4e 9a 1d a2 39 e1 36 17 8d df 92 44 6d 8c f2 13 69 5e 47 7c 86 07 92 03 ba be bb 35 da fd fd 75 dd b5 6d 74 b7 6d 2b 37 9e e6 6b 9d 3a e0 10 63 9a 68 ed b9 e0 cd 00 fd d3 e5 c8 21 59 41 51 8e 0e 72 3b 60 17 5e 9a da cf ae be 96 d6 fa eb af 46 da de b0 c8 98 c2 d8 2e a5 d6 4c 1e 8e 99 0c 0f 7e a0 fd 47 23 dc 08 ab ca cf 5d fe 7b fc cc 5d 7c ee b0 9d 00 0d 13 5a 35 d4 2e 0e 71 34 4f 8c 8e fb 97 07 8c 83 9e 31 d6 82 bf c2 f4 de d6 eb ca de af 5b ed aa 3c 4a 19 88 7b 89 98 7c b3 85 07 23 b2 86 0d d0 93 fd 7d 28 13 ba b4 6f ae a9 ff 00 db cd 3d d9 e9 7e 12 bb fb 6d 84 da Data Ascii: )N%]cb92sKy9#=(Gd{'tN96Dmi^G\|5umtm+7k:ch!YAQr;`^F.L~G#]{]\|Z5.q4O1[<J{\|#}(o=~m
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 51 5a f9 b8 f3 14 10 33 b7 07 ae 32 38 f9 8e 00 ed c0 cf e3 5e 95 2a 6e 9b ec d7 e3 7b f9 be ff 00 d3 3f 44 72 8b 76 8f c3 1b 24 be 56 df ad da b9 b5 6b 02 8d ab b4 2a 8c f0 31 fe d7 5e 72 7e be bc d7 5d 38 73 b7 26 ff 00 0b de f7 5f 85 bf ab 19 d4 e9 ae ba e9 6d f6 fb 8d 8b 6b 28 10 86 11 28 6e 70 c7 04 f7 fc f8 e3 9a de 6e d6 b7 9e bd 7a 6d d8 e4 ad f0 af 9f e6 8e 8a d6 10 44 7c 02 7e 60 0e 71 8c 92 3a 66 b4 a0 95 9b ef 6b fc 9b 3c f9 fc 4f fa e8 8f 6b f0 a5 9b ac 31 2b 2e 03 8d d9 c8 3d 37 71 f7 b8 22 bd 0a 1b 4b d5 7e 47 ce 66 5e f5 d2 6b 44 ef ad fb 7e 3e 5e 47 a7 5b c7 84 c7 5c 0f bb f4 dd c6 73 db d6 ba e9 f5 f9 7e a7 8b cb a2 eb 6b e9 b5 ef f3 d0 bf a1 c7 15 d7 c6 5f 87 9e 1e bf 94 d9 78 57 e3 bf 87 7c 53 f0 07 c5 73 b4 7e 7c 1a 74 ba ba c1 e2 4f Data Ascii: QZ328^n{?Drv$Vk1^r~]8s&_mk((npnzmD\|~`q:fk<Ok1+.=7q"K~Gf^kD~>^G[\s~k_xW\|Ss~\|tO
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 39 e3 91 8e 38 c0 3e ff 00 5d 23 25 24 9c 5a 7e 8e fe bf 75 99 ad 28 cb 5d 1e d1 5b 3e 9c df 99 c6 dd c3 29 b8 71 0a ef 01 46 47 4d be 9d 73 9c 74 cf 7a cf db d1 ff 00 9f 90 ff 00 c0 91 d0 a9 c9 de ea 4b d6 2c e6 a2 d3 35 51 aa ed b5 b5 9a 48 e5 29 e6 c7 14 13 ce a3 77 2d c4 28 f8 27 85 01 82 e7 19 18 aa f6 b4 d2 4d d4 82 4f 67 cf 1b 3f 47 72 2c fb 3f b9 9d 16 9b e0 cf 17 5c 5a ea e6 d3 c3 9a c4 d0 2d db 98 db ec 17 a0 0d c8 b9 50 4d bb 00 1b 19 1c 93 93 93 8c d3 55 e8 2d 5c e9 bb 6a ff 00 79 1d af da e1 cb 2d 34 7e 7a 3d 4d 9d 27 e0 6f c6 1d 56 03 3d 97 c3 0f 1d cf 82 3c c5 83 c2 9a d4 9e 5e fd c5 4b b7 d8 93 1b f0 c4 65 46 76 b7 75 38 c9 67 59 64 53 e6 a8 b4 6f a3 61 18 b4 f9 b9 65 65 ad f9 64 dd ad b6 cd ed a5 91 a5 e2 7f d9 e3 e3 f5 ee a7 67 6f 61 f0 Data Ascii: 98>]#%$Z~u(][>)qFGMstzK,5QH)w-('MOg?Gr,?\Z-PMU-\jy-4~z=M'oV=<^KeFvu8gYdSoaeedgoa
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 3d f6 b7 b4 e8 ff 00 11 3e 1d c5 12 c5 0f 8d 3c 2d 29 c7 0d fd b5 62 a4 60 31 20 03 33 67 8e b8 3d 0d 77 50 7a 49 79 af ba db fd fa 1e 1e 26 9c a4 a5 64 ef 7b 3d 1b bb 6a 3d 7b dd 37 6b e9 ae c7 65 65 f1 03 c0 b3 4c 91 8f 17 f8 74 97 ce 0c 5a b5 94 b8 23 70 00 8f 3d 31 9f ad 77 50 57 97 f5 d9 9e 72 a5 35 34 ac ff 00 2e 9f d7 5b 16 b5 ef 10 d8 bf 87 af 35 ef 0d eb da 5d ce b9 f0 eb 51 d0 3e 25 e8 b0 da ea ba 7b cf 25 e7 82 35 9b 6d 6e 45 48 1e 72 b2 89 34 d8 75 04 60 77 90 ce a0 46 ec c0 57 93 9c 24 e5 4d 7a 6c af ef 5e 3f 73 df 5d 1f e4 fe 77 3e c3 b9 d1 ab 27 0e 65 c9 2b a6 9b fb 2d 2d 1a bd f5 e9 d9 f5 b1 f1 f7 fc 1c 45 fb 7d d8 6a fe 08 f0 17 ec e3 f0 ab c4 91 be 9b e2 cd 2a d3 c5 df 10 22 b4 95 4a 1b 7b f9 6c ef b4 5f 0d dd 84 0f 14 b1 cc b2 4f 77 ab Data Ascii: =><-)b`1 3g=wPzIy&d{=j={7keeLtZ#p=1wPWr54.[5]Q>%{%5mnEHr4u`wFW$Mzl^?s]w>'e+--E}j*"J{l_Ow
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: fb 59 fc 2a b5 68 a6 d6 20 98 da da 6b 7a 8d cd b9 d1 b5 78 74 8d ef 67 a6 8b ab 93 fd a8 66 3a 96 96 a8 b8 9f 4e b6 bc b8 2c 44 38 3d f0 e2 58 4e d6 92 4d ae fa 75 b6 fd 5f 4d 7c ec d1 c1 0c 9b 17 28 5f d9 d6 53 92 57 fd dc db bf cd 3b 3d f4 d6 fe 67 1b e3 6b 1f d8 a7 44 be 89 65 fd a0 75 8f 19 48 93 69 30 de cf e0 1f 05 ea b7 96 d6 b6 f7 1f 6b 8f 58 bb 59 75 91 63 fd a1 fd 93 71 6c 8b 07 d8 54 5b df db cf 15 d0 bb 83 cd 11 2c cb 3d e6 bb 8d 4b df 6d 76 bf ab 76 57 d1 2d f4 69 34 d9 a4 32 3c d6 2d de 15 a2 bf eb d3 4b ca d7 4f ab ef aa 3d 33 46 87 fe 09 eb 67 6c d7 5a 26 a7 f1 fb c6 37 16 de 4c 72 49 17 83 66 d2 44 97 09 6d 14 77 30 32 bb 8f 2c 0b 88 e7 ba de a6 e4 30 b9 f2 8a c3 f6 75 7b 9e 3c 46 79 8d 70 97 24 93 be d7 71 d2 fb 6f af 65 6d 1b 7a de e7 Data Ascii: Y*h kzxtgf:N,D8=XNMu_M\|(_SW;=gkDeuHi0kXYucqlT[,=KmvvW-i42<-KO=3FglZ&7LrIfDmw02,0u{<Fyp$qoemz
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: ce 0f 09 f9 95 54 e3 6a f4 53 cf 39 fd 45 66 51 ad 04 de aa 4a 33 69 6e 9c 95 f5 b7 5d f7 f3 3f 43 c9 b2 1c bb 24 4f 0e b9 b9 20 bd 9c 22 d4 d4 7d dd 14 92 57 51 b7 6e 89 2b da e7 a0 0d 1f c2 47 69 3e 0b f0 e1 fa db 5c 2e 7a 8f f9 63 71 08 fd 3b 7d 69 29 aa 9e f4 5e 8d 27 6f 55 d6 eb f2 3d 87 93 53 94 9b 73 76 76 71 b3 69 d9 dd d9 fa 26 bf e0 6c ad ae 85 e0 b7 c1 97 c0 9e 1a 93 6f 41 b2 ff 00 be 7b 9b b1 8e be 87 3e d8 cd 4c a6 a3 ab 4d 2f eb 6b 5d 7a ea 82 39 35 06 a5 ef b6 f4 b7 c4 9f 9f 5b 7d e9 f9 1a 31 68 5e 04 50 41 f0 07 86 fb 76 bf 1e bd 3f d3 05 52 c5 72 36 9b bf 9a 5a fe 5a 75 f3 30 a9 92 46 ef 92 4a cd 34 ef bd 9a 57 b3 5a bb bb fe 03 db 49 f0 14 45 49 f0 0e 85 8c e0 f9 13 ea 90 9e 41 ef 1d fa fa 73 9c fe a6 9b c6 c5 2d 6f f7 7f c0 f2 39 65 93 Data Ascii: TjS9EfQJ3in]?C$O "}WQn+Gi>\.zcq;}i)^'oU=Ssvvqi&loA{>LM/k]z95[}1h^PAv?Rr6ZZu0FJ4WZIEIAs-o9e
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 7c 70 d6 3e 1a c1 fd 95 a9 4a 8c 12 c3 5b 82 e1 a3 77 f3 6c b5 1b d4 2b f6 df 30 9d bb 8a ff 00 a3 9e 8d e4 99 71 f3 97 3b 7f 88 f2 3c 83 88 9f 11 b9 ce 2d af 6e e4 db 8a 6e dc cd bf 93 5a ee ae b6 b1 fd 39 53 35 a3 fd 83 52 ce 9f f0 e6 af 78 b6 9d b9 53 f2 56 d2 fd b5 d3 af f5 a5 f0 43 e3 bf c3 cf 12 fc 0d f0 83 f8 7b 52 97 53 b7 b5 d0 74 f4 b8 9e 08 07 ee 6e 67 b6 4d f6 d3 26 f2 12 e6 dc c5 89 63 dc db 77 a6 58 66 bf a8 61 4b 13 1a 74 d4 a1 2b f2 43 ec f5 e5 57 5b 77 ec 7f 39 54 84 15 6a b2 52 8a e7 9c 9e fa b6 e6 db b5 df 9d fa 74 d3 b7 e0 9f ed 23 e2 ed 37 e2 77 c6 2d 7a 7b 09 5a 7b 4d 25 9e d7 cd 27 87 92 47 91 98 ae d2 00 51 e5 a8 1b 59 b3 c1 ce 38 a8 94 27 1f 8a 2d 7a e8 6f 41 46 4d f2 db a2 e6 5a f4 bb 4b 5b f6 d3 f3 3f cd 4e be f8 f8 50 a9 94 79 Data Ascii: \|p>J[wl+0q;<-nnZ9S5RxSVC{RStngM&cwXfaKt+CW[w9TjRt#7w-z{Z{M%'GQY8'-zoAFMZK[?NPy
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 31 4c 1d 41 03 8f 7e 3b 9f af a5 72 4a 55 15 ad 37 ad f7 5f f0 51 fa 4d 4a 0d a9 47 97 bf 5f cb 5b 5f aa d0 92 29 14 71 fd df a9 ce 73 df 07 fa d4 39 d4 69 ae 7d fc bf e0 97 94 d0 b4 a6 a5 0d 5d d2 e6 d6 eb 57 e4 b6 de cb 7d 7b 16 a4 5d 3a e4 03 76 40 28 18 a2 90 1b 19 03 a1 21 82 e4 85 07 03 2c 40 27 da 13 9a bf be f6 b6 ab fe 0e e7 e4 9e 24 e1 af 24 d4 1b b4 9e c9 79 5e fd 6d ab d7 cd 6b a9 2c 17 36 5b ca ad c1 25 4e 00 e4 92 32 72 0f 7c 9e e7 3d bf 25 69 7f 3f e0 8f ce 32 0a 51 8e 73 4d c2 29 3e 78 5d c7 dd 77 d3 aa d5 f5 f9 6b 6d 0d 38 ee 22 60 15 5b 1c 0c 1e a0 67 27 1d 01 38 e9 9c 63 d4 e4 1a 5c b3 bd f9 f4 ed ca bf 3b 9f d3 71 a1 29 61 e0 f9 5b fd dc 34 73 7f ca af 65 7b 2e a9 79 e9 a1 79 58 3c 17 50 03 b7 ed 30 4d 08 7d bb b6 f9 90 cd 11 6d b9 00 Data Ascii: 1LA~;rJU7_QMJG_[_)qs9i}]W}{]:v@(!,@'$$y^mk,6[%N2r\|=%i?2QsM)>x]wkm8"`[g'8c\;q)a[4se{.yyX<P0M}m
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 33 c9 f2 99 c1 54 94 a5 3e 6d 2e dd 9f 33 d5 fd fb bd 1b 6d 7a fe 9d 7c 04 fd ab fc 55 e0 7f 0b 7c 51 bb d3 e5 8f 49 f0 d6 b9 e2 db eb 8f 0d e9 89 b6 26 8e c1 a3 16 8d 72 ca 6d d0 a2 c8 d6 a9 22 af 95 c8 62 03 9d 99 3f ae d4 cb f2 2a 54 66 e4 a3 19 c6 94 9a 4d 5b de 8c 1e 8b 67 f1 7a 6b 6f 53 f1 d8 f1 36 73 5a aa 8c 7d e5 2a 91 d2 32 4d f2 b9 68 9a b3 7b 3d 9d b6 56 77 b9 c8 78 79 ee 35 4b ad 5f c5 97 92 99 2f bc 4f a8 dd ea 57 9c 10 44 f2 b8 72 43 e7 12 7d e0 37 6c 4e 06 30 73 91 f8 16 73 9a 45 d5 92 a7 0e 64 aa 4e 2b 95 db 48 cd a5 7b 2e 9b 6d ae b7 7a 23 f6 7c 9a 15 6a 51 57 52 bb 8c 64 ee 9a b5 d2 6f e2 b7 ae f6 d7 bb 3f cf 25 94 a9 c3 0c 1f 4a fb e3 e2 84 a2 d7 d3 be 9f 78 3d 53 5d cf b9 7f e0 9f 9f 16 07 c3 bf 8e f6 3e 1a d4 2e cc 1e 1d f8 af 67 ff Data Ascii: 3T>m.3mz\|U\|QI&rm"b?TfM[gzkoS6sZ}2Mh{=Vwxy5K_/OWDrC}7lN0ssEdN+H{.mz#\|jQWRdo?%Jx=S]>.g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	49896	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:07 UTC	971	OUT	POST /buyer/user/select-coupon HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 17 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=whiskys Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:07 UTC	17	OUT	Data Raw: 7b 22 63 61 72 74 5f 74 6f 6b 65 6e 22 3a 22 22 7d Data Ascii: {"cart_token":""}
2024-05-24 22:57:07 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:07 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:07 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:07 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 30 37 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:57:07"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	49909	103.160.204.8	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:07 UTC	384	OUT	GET /uploader/9f39b843564a229065a9a9a6224cc6dd.jpg HTTP/1.1 Host: cdn.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:07 UTC	583	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:07 GMT Content-Type: image/jpeg Content-Length: 276363 Connection: close Cf-Bgj: h2pri ETag: "8F8B3C6B6969EA183F2628FB3AE247B2-1" Last-Modified: Tue, 08 Aug 2023 07:12:40 GMT x-oss-hash-crc64ecma: 16258879044099338313 x-oss-object-type: Multipart x-oss-request-id: 66511B41D31A233239AC67F8 x-oss-server-time: 123 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:07 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e203d923f7cc-BNA
2024-05-24 22:57:07 UTC	786	IN	Data Raw: ff d8 ff e1 0c be 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 06 40 00 00 01 01 00 03 00 00 00 01 01 54 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 38 3a 30 38 20 31 35 3a 31 31 3a 33 36 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*@T(12i ''Adobe Photoshop 23.4 (Windows)2023:08:08 15:11:360
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 eb d2 ff 00 7a 67 bd 95 b0 bd e7 6b 1b c9 f0 54 b2 b0 98 73 69 ea 8d b1 d5 ba 91 b5 ef 64 1d f5 1d 7e ce 41 f6 3e bb 5f ff 00 6d ff 00 38 b8 0c 38 44 c8 e3 91 c7 19 71 46 19 0c 78 b1 cb 2c 47 a7 1c a5 fc b8 1d 79 48 8f 94 71 1d 3d 3d 69 d0 66 d7 6f 6c 1d ec 01 de 50 9a 16 70 6d dd 52 d6 d5 5d 56 10 d6 92 5b 55 9b 0c b5 ec 7c 3b 7f a6 db 28 bb 6f a5 63 1f ff 00 Data Ascii: 5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?zgkTsid~A>_m88DqFx,GyHq==ifolPpmR]V[U\|;(oc
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 5e f6 b0 78 b8 80 16 47 d6 4f 43 27 2a 8b 2b 18 b9 2d a4 b1 ce 36 da fa cb 76 17 b9 f5 ed aa ab bd 56 dd 34 fe 67 d3 a5 5b 36 d7 59 0e b1 ed 68 04 6a e2 07 e5 55 b3 88 73 dc 5b 90 c6 b6 44 80 1a e3 c7 bb dc ef e5 28 3e 1d 9a f1 91 c3 5c 27 7b 97 e9 76 e1 5d 38 7a af 5d 5e 6b ae 51 d2 7a b5 cc fb 56 59 c6 bc 62 55 8d 5d d6 53 77 a4 3d 31 60 b9 ad 7d 37 b5 ce aa db 2e 73 ff 00 5b c3 5d 97 4d ce e9 1f 61 c5 c3 a3 3a ab df 45 2c a4 16 e9 b8 d4 c6 b1 c5 a3 5f 0d cb cf fa e6 36 5d 9d 4d cf af 28 36 97 35 bb 1a 6c 2d 88 1b 5f ed 63 76 b7 75 81 cf f6 ad cf aa 4e b7 1e bc 9a 72 32 d9 60 79 ad d4 d7 bc b8 88 f5 3d 42 3d 40 cf de 67 d1 57 f9 cc dc 3c a9 94 aa 60 00 78 2e 5f ec fd 3f bb c2 b7 da 06 5a 02 35 3a d4 7f 19 70 f1 49 ad fe 32 3a a5 98 94 d5 88 c7 b8 32 e6 Data Ascii: ^xGOC'*+-6vV4g[6YhjUs[D(>\'{v]8z]^kQzVYbU]Sw=1`}7.s[]Ma:E,_6]M(65l-_cvuNr2`y=B=@gW<`x._?Z5:pI2:2
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 00 01 00 00 00 00 42 6c 74 6e 65 6e 75 6d 00 00 00 0c 62 75 69 6c 74 69 6e 50 72 6f 6f 66 00 00 00 09 70 72 6f 6f 66 43 4d 59 4b 00 38 42 49 4d 04 3b 00 00 00 00 02 2d 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 17 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 00 00 00 00 52 67 73 4d 62 6f 6f 6c 00 00 00 00 00 43 72 6e 43 62 6f 6f 6c 00 00 00 00 00 43 6e 74 43 62 6f 6f 6c 00 00 00 00 00 4c 62 6c 73 62 6f 6f 6c 00 00 00 00 00 4e 67 74 76 62 6f 6f 6c 00 00 00 00 00 45 6d 6c 44 62 6f 6f 6c 00 00 00 00 00 49 6e 74 72 62 6f 6f 6c 00 00 00 00 00 42 63 6b 67 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 47 42 43 00 00 00 03 00 00 00 00 52 64 20 20 64 6f 75 62 40 6f e0 00 Data Ascii: BltnenumbuiltinProofproofCMYK8BIM;-printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@o
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 00 00 06 6f 72 69 67 69 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 01 54 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 06 40 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 Data Ascii: originenumESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongTRghtlong@urlTEXTnullTEXTMsgeTEXTaltTagTEXTce
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 38 2c 9f ac 39 19 14 75 1a 6b fd a0 30 2a 1b 3d 06 06 b4 ef 7f b6 d7 be ff 00 51 af fd 13 5c d6 57 fe 05 9f f0 9f a6 4e e4 f9 73 c2 72 10 0d 89 63 e1 e1 94 ef dd 84 a1 2e 18 c3 8b d7 08 7e b2 08 91 e2 3c 37 5f a5 67 4f 95 ad f5 d9 f9 98 df 56 ef 38 4f 75 59 77 3a b6 54 fa df e9 bd b0 e1 6d 8f 6b f7 31 df 42 bf 4f fe b8 b7 2c ab 69 32 23 8d 39 ed e2 b8 af af 9d 48 b3 3b 0d ce 69 63 ed e9 a2 db 85 66 b0 61 cf 7e f6 37 d7 aa f7 7d 2f a1 ff 00 82 ae ab ea fe 2b 68 fa b5 d2 aa 68 20 7d 92 a7 10 79 97 b7 d5 77 fd 27 ab 9c df c3 86 2e 52 04 56 92 32 04 7c d2 f7 63 1e 2e 2f ee fb 71 e0 62 86 50 67 fa 5c 7a 89 03 f2 01 1f 97 87 fe e9 31 08 46 ea c5 e2 83 bb 79 6e e1 a1 22 38 fa 5f 35 60 b4 93 00 6a 78 5c 87 48 ce 6f 52 fa ef 9f 6b 68 a9 cc c2 ad d4 d7 94 c7 3f 7c Data Ascii: 8,9uk0*=Q\WNsrc.~<7_gOV8OuYw:Tmk1BO,i2#9H;icfa~7}/+hh }yw'.RV2\|c./qbPg\z1Fyn"8_5`jx\HoRkh?\|
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: fb 5f 52 a8 b7 1f 11 a0 e2 97 16 4b df e2 ea e9 bb 27 6f a6 ef 7f d3 fc c4 fe 53 9d e4 63 f0 ca 99 c7 c6 21 90 e4 c0 4d 4f 24 e5 29 7a 38 7f ca 71 fa 5a f9 31 e5 f7 8d 03 44 8a 93 dd 91 04 8f 05 9f d6 f0 ed cc c3 65 75 b7 d5 15 dd 55 b6 d0 23 f4 b5 b1 d3 65 23 7c 33 73 be 93 7d 45 7d 57 7b 73 8b e5 8e 63 5b e1 ba 7e 1f 4b 1d df f5 6b 9b e4 f3 4f 06 7c 79 f1 98 f1 e1 90 c9 1f 73 e4 26 2d dc b0 13 84 a1 2b a9 0a 34 e0 bd 83 d5 6b aa e8 b7 b5 a4 c5 85 b4 36 b7 00 5a f1 6d b4 be bb 37 ee b5 ee a3 f4 36 7e 8e 8f b3 7f dd ab 16 67 ec 4e a1 77 ea f4 f4 eb 58 e7 98 6e 45 d2 c0 d1 22 1e fd 7d 2f a3 f4 bf f0 35 d8 7a 7d 40 01 16 34 9e f2 5b 1f 86 32 42 be a1 26 6d 6c 48 82 0b 64 7e ff 00 fd a6 5d 20 ff 00 8d 7c d4 6f 87 1f 2e 0f 42 67 98 eb d3 d3 c4 e6 9f 84 e3 35 Data Ascii: _RK'oSc!MO$)z8qZ1DeuU#e#\|3s}E}W{sc[~KkO\|ys&-+4k6Zm76~gNwXnE"}/5z}@4[2B&mlHd~] \|o.Bg5
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 31 64 33 38 63 64 37 2d 32 33 33 64 2d 32 63 34 38 2d 38 35 39 36 2d 38 31 39 38 35 39 61 62 34 62 63 39 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 31 31 37 32 66 31 39 2d 64 34 62 31 2d 30 31 34 66 2d 39 64 61 34 2d 34 37 34 61 64 36 36 61 38 32 39 32 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 38 33 38 31 35 42 44 38 37 43 33 42 42 31 32 31 42 36 35 42 31 33 42 41 35 45 42 43 46 33 43 30 22 20 64 63 3a 66 6f 72 Data Ascii: 1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="adobe:docid:photoshop:11d38cd7-233d-2c48-8596-819859ab4bc9" xmpMM:InstanceID="xmp.iid:61172f19-d4b1-014f-9da4-474ad66a8292" xmpMM:OriginalDocumentID="83815BD87C3BB121B65B13BA5EBCF3C0" dc:for
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-24 22:57:07 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	49897	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:07 UTC	1303	OUT	GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591424791&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1 Host: www.cravob.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=whiskys Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:07 UTC	147	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:07 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close
2024-05-24 22:57:07 UTC	81	IN	Data Raw: 34 36 0d 0a 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 64 68 41 51 41 42 41 50 41 41 41 4d 50 44 77 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 46data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	49902	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:07 UTC	610	OUT	GET /buyer/user/user-capi HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:07 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:07 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:07 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:07 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 30 37 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:57:07"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	49912	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:07 UTC	626	OUT	GET /uploader/2bab95b957e11a3d1c75b9df75049153b2a3b998.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:08 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:08 GMT Content-Type: image/webp Content-Length: 26936 Connection: close x-oss-request-id: 66511B44342C483734CC0F00 ETag: "59987FD93CFADCCE44F3620C9F10C233" Last-Modified: Wed, 06 Sep 2023 10:13:39 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 18120288386503278278 x-oss-storage-class: Standard Content-Disposition: inline; filename="221d0b7a82bbf7a11c3fb8f5a0c8b6914e285882_221" Content-MD5: WZh/2Tz63M5E82IMnxDCMw== x-oss-server-time: 94 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:08 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2095a64f7e4-BNA
2024-05-24 22:57:08 UTC	690	IN	Data Raw: 52 49 46 46 30 69 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 38 00 00 00 cf 02 00 cf 02 00 49 43 43 50 a8 01 00 00 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 5f 63 70 72 74 00 00 01 4c 00 00 00 0c 77 74 70 74 00 00 01 58 00 00 00 14 72 58 59 5a 00 00 01 6c 00 00 00 14 67 58 59 5a 00 00 01 80 00 00 00 14 62 58 59 5a 00 00 01 94 00 00 00 14 72 54 52 43 00 00 01 0c 00 00 00 40 67 Data Ascii: RIFF0iWEBPVP8X8ICCPlcmsmntrRGB XYZ )9acspAPPL-lcmsdesc_cprtLwtptXrXYZlgXYZbXYZrTRC@g
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 4a 27 22 26 80 72 24 49 8e 24 c9 a2 77 f9 a7 14 5c 77 17 4a 18 71 80 03 93 7b 44 c4 04 c8 a5 d2 00 ef 7d 60 ff fe a7 3e f4 c8 d3 1e 73 df 7e 57 1a c0 90 a1 2d 2f 9c ff d7 bf 3f f3 df ff f4 df 47 e7 ce 1c 03 85 4d 30 9b c6 de 33 1e f7 e0 53 9f f5 82 fb fa 52 99 8c 40 64 6d 92 ac 2e fd f5 9f fd ed bf fc cf 5f fd 4f b5 92 29 4f 7c c3 13 9f f2 f2 27 b1 3e 53 c6 60 d6 c9 fa f3 bf f3 47 9f 71 c9 c1 b4 f7 35 ef 7c 76 07 09 e0 68 5a d6 67 62 32 a3 82 6f fb a9 6f 3a 83 52 e9 13 5f a0 0d a8 a3 b8 ee 9a c6 09 92 e9 f9 cf f9 b4 e2 54 7a 3b cb be c0 20 c8 f5 8f 81 72 c4 3b 6d a1 44 32 6f 7f 35 1d 46 e4 c6 8d 74 be f1 91 72 22 65 ef 73 0f 0c 5d 90 1b 5c 32 5f 74 9e 92 47 d5 de fb 72 2a dc f8 b6 bc f0 ee d4 3c 82 27 dd 3e 14 de 78 02 f3 d6 33 24 f2 8a 9b 54 40 25 94 bd Data Ascii: J'"&r$I$w\wJq{D}`>s~W-/?GM03SR@dm._O)O\|'>S`Gq5\|vhZgb2oo:R_Tz; r;mD2o5Ftr"es]\2_tGr*<'>x3$T@%
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 49 a0 6e 56 fa 51 94 09 2b 82 16 f3 61 40 09 b4 47 e6 42 98 85 04 da 67 56 77 70 f8 18 ee 02 e7 c2 2e df fc 4d 38 7b c4 c3 0f 43 66 e4 77 be 72 aa e8 b1 5e fe b4 47 90 19 79 c9 27 bc 4a 8e 9e f2 07 cf 7c 74 e6 03 ca c1 47 fe 6f f6 54 be ef b5 d5 70 2e 6c f8 9e 3f 24 7a 54 bf f5 75 c8 8c 5a ff f2 65 47 0a 1e 97 bf f8 86 c7 b6 59 a1 3c f8 ca 57 cb c1 c3 8f ff 29 e0 7c d8 95 df fa 51 72 c7 e5 e5 df 42 24 33 22 77 af fd ce aa dc e1 37 fe 5c 01 e7 03 30 7f fc 5b 38 74 ac d7 7d 3f 45 99 57 97 a3 9f 3e e8 42 07 7e f3 df b1 71 56 ac aa 7f f9 1d 1c 3a 2f f8 23 70 98 57 63 f8 c7 57 e3 c0 b1 f8 4b 17 84 f3 f2 70 e1 df ef 11 b9 af 78 15 06 99 59 23 eb ee 8b f3 46 66 c4 c3 66 9e 35 8a 1b 58 1f 3f c1 f1 bd 08 ca 19 c1 e6 e5 45 40 c7 59 ff cc 0d aa 42 46 e6 dc a5 1e 30 Data Ascii: InVQ+a@GBgVwp.M8{Cfwr^Gy'J\|tGoTp.l?$zTuZeGY<W)\|QrB$3"w7\0[8t}?EW>B~qV:/#pWcWKpxY#Fff5X?E@YBF0
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 37 3f ac e6 6a bc fd 90 d3 d5 fc d8 a1 e8 4f 57 95 76 80 fe a0 4c e5 f2 43 25 aa 77 f3 03 c7 55 4e 3d 04 c3 55 a5 1e 60 89 2a d8 53 0f c1 11 45 31 06 25 07 58 a6 60 6c fc 38 80 f2 d4 52 12 e1 e9 6b 88 46 50 96 82 6f 49 42 74 33 c4 d5 45 05 b7 21 c6 40 54 fd 42 90 73 8a 22 4f 3f 14 ef 8b f2 44 fa 01 5e 2f 44 57 33 44 6e 53 a9 88 7d 4c d5 20 fc b0 a6 29 16 82 5c cb 54 36 43 ec 63 aa 04 51 64 52 a2 ba 1f 60 2d 34 17 79 1a 62 7a 2a 18 87 21 96 27 e0 69 86 98 5d 53 c0 98 82 08 9e 9a 0a 8e a5 88 97 26 e0 6b 08 68 a6 5a 29 e2 4d 78 ba 36 65 88 d2 14 fc 35 f1 63 d1 53 13 7c b7 20 e0 9a 78 4e 14 79 ef 94 a6 91 8a b8 26 9e 1f 47 e4 11 35 4b 11 6b 9b 42 91 3d 45 35 47 ac ad 2a 0c 71 8e a8 81 22 c7 16 75 13 86 98 29 a9 88 fd 46 91 73 53 8a 80 75 1a a2 e8 89 e3 28 56 Data Ascii: 7?jOWvLC%wUN=U`SE1%X`l8RkFPoIBt3E!@TBs"O?D^/DW3DnS}L )\T6CcQdR`-4ybz!'i]S&khZ)Mx6e5cS\| xNy&G5KkB=E5G*q"u)FsSu(V
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 5a a3 a4 3c d6 18 0d ab 65 0d c2 4a 6d 67 14 67 6b 19 84 31 a0 35 2d 1b 69 ce 61 85 b2 46 84 95 5a d6 a8 63 25 bb 35 d6 74 52 90 d6 38 e5 04 4a 1b 68 c9 6e 8d bd ad d4 b4 46 a6 15 d2 1a 55 94 93 1c d6 f0 9a b7 35 f6 b6 52 d3 19 c5 4e 2d 58 b3 8e 92 82 d9 ad 41 28 09 e8 8f 35 d6 54 52 b0 d3 1a 99 4a 02 b2 ac 51 a5 a4 a0 a5 35 bc 5e da d8 69 a5 b0 66 4d 2b 69 8d 40 cb b5 29 65 c0 37 2b 4f 61 cd b2 22 ce 6e 25 4b 1a 41 b3 b2 d0 66 01 65 a4 a5 36 fe 37 7c 84 39 12 28 1f ea 9c 48 fd 11 da 18 84 93 51 da d0 fa a4 36 be 59 59 a5 8d b4 22 ce 65 a5 c4 51 e1 24 bd 71 0a a7 ab b4 f1 2d ac a0 cd 53 52 5e de 98 19 4e ca 1a c5 58 38 4d 6b c0 29 29 cb 1b df be 49 49 6f 54 49 11 e7 39 52 c2 1b 69 a5 bc 31 f3 d3 ec 14 a5 64 7b e3 c7 77 42 89 cf c3 1b fb 50 4a c4 99 87 0f Data Ascii: Z<eJmggk15-iaFZc%5tR8JhnFU5RN-XA(5TRJQ5^ifM+i@)e7+Oa"n%KAfe67\|9(HQ6YY"eQ$q-SR^NX8Mk))IIoTI9Ri1d{wBPJ
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 7f fb 62 2f 68 ac 58 82 71 e7 ee bd c3 ff 5f dc 71 f9 f0 8e c5 ce fe 70 72 72 92 0e 0b 2d 4a 14 05 a7 0a 40 99 54 90 d3 06 92 29 68 23 76 7a a8 e3 b3 fb 77 ff df ce 1e c7 87 11 6c b0 c1 96 f1 4b df f4 3d 7e 58 c4 e6 1b fe ea 5f 5b 47 2c 52 a2 4a 09 c9 e2 ee dd 93 56 07 f9 df 76 3b 3b f7 74 c7 c3 6a 15 35 44 95 92 12 15 14 d0 51 46 19 65 4a d6 8b 8b 82 78 7c 74 74 f4 d0 de c5 be 63 b8 9c 82 50 c1 c6 c6 60 73 eb c1 db cd 1c a4 46 0e 9e fb 9b 07 1d a0 50 28 ae 2d 06 ea 60 3f 6d 67 77 71 78 a6 bf a3 2d 77 ef da 1d 96 a1 45 4a 5a a3 45 51 28 80 1a 09 55 aa 38 05 56 d1 08 c4 d5 e1 e0 71 bb 7b 77 68 b5 24 87 8d a2 85 60 3f 09 36 e0 5b 97 76 5e 20 67 06 b7 e5 6c f5 a0 a0 14 4a a1 85 96 b6 54 b7 db b7 6e 7f 67 af 2e 5c cc de de b0 f4 f6 fd 4a 00 2c 31 28 08 08 14 Data Ascii: b/hXq_qprr-J@T)h#vzwlK=~X_[G,RJVv;;tj5DQFeJx\|ttcP`sFP(-`?mgwqx-wEJZEQ(U8Vq{wh$`?6[v^ glJTng.\J,1(
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: be da 5a 7c 15 17 53 23 29 0d f4 50 21 be ca fb 0d 01 c7 29 c2 1a 10 bf 89 5b 68 54 76 a1 d4 ca 86 42 02 54 3a 99 50 c8 40 4a 87 53 2a 10 f2 7b 45 70 7e ad ba 12 61 de 4d 1a 99 a6 26 16 df c2 f7 08 04 0e ec 92 91 e9 22 49 64 83 19 ad 83 a7 a8 f2 a1 d4 ca 86 42 02 54 3a 99 50 c8 40 4a 87 53 2a 18 6b d4 02 0c 83 9e b6 47 ff 09 8d 1f 55 5e e5 ab e6 14 d0 af 5f a7 61 4c e6 e1 17 3c 4d 0f d3 5f 06 2d d7 44 55 6b dd e2 9e 58 f1 7a ce 3b 43 8e 10 12 a1 d4 ca 86 42 02 54 3a 99 50 c8 40 4a 33 6c 04 e3 63 bc 9a 3c 5d f4 40 e6 40 9b 90 79 65 dd 43 d6 5f e6 c0 77 1f 1f 8e ab 05 98 22 48 97 a7 b2 15 79 20 8f 38 15 17 1b 7a 0a f1 3b 27 57 fd 20 f6 f6 eb 6d 04 48 50 da e3 b2 19 e3 82 7c b0 21 f9 d4 a8 75 32 a1 90 80 95 0e a6 54 32 10 12 a1 bb ff cd 2c 3e 7c e2 d3 a2 d4 Data Ascii: Z\|S#)P!)[hTvBT:P@JS{Ep~aM&"IdBT:P@JSkGU^_aL<M_-DUkXz;CBT:P@J3lc<]@@yeC_w"Hy 8z;'W mHP\|!u2T2,>\|
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: de e3 39 b6 22 88 42 60 0c 89 4a 19 08 09 50 ea 65 43 21 01 2a 1d 4c a8 64 1d 82 a6 a7 d8 fb bb fd 12 ab a8 4c 5c 45 29 37 f4 e1 64 a4 e5 ef f8 d3 2d 86 2b a5 14 ab 73 fe 21 0b d3 b1 56 63 17 15 23 54 b0 f9 06 8d de 3e c2 9b 0f 4a 0f 2d 15 07 71 58 30 df c4 97 b8 2f b6 96 9f 05 45 b8 24 07 8d fb 19 76 99 f4 d4 b4 a5 4c 34 1a 82 da 72 74 58 04 27 7a 0b 56 51 e8 b4 ba 74 94 99 6d cf 9a 84 73 60 e4 92 8c 9c 13 a0 fe 48 81 27 c4 97 24 ad 63 87 7a 44 09 3e 24 b9 25 6b 44 da 5a 7c 15 17 53 2a 0f 76 cb 47 41 71 4d a9 8f 57 0c f0 f8 e2 60 0d 55 98 26 87 49 93 6d 77 39 55 c7 f5 50 72 dd 0e 31 79 ee 0a 03 ef 40 de 60 f2 f4 11 6f d0 31 91 09 df f0 76 ce 7e 78 1f 44 38 77 a4 40 93 e2 4b 92 56 b1 c3 bd 22 04 9f 12 9f 41 7d b4 b4 f8 2a 2e 96 db 14 b7 f0 47 eb af af 84 Data Ascii: 9"B`JPeC!LdL\E)7d-+s!Vc#T>J-qX0/E$vL4rtX'zVQtms`H'$czD>$%kDZ\|SvGAqMW`U&Imw9UPr1y@`o1v~xD8w@KV"A}*.G
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 29 42 1c 5c a8 45 a4 ef 09 1d f0 53 78 00 9f 00 81 2b 01 6e f3 60 89 1c 00 a4 2d ad d3 7c 9f 3d 9c e1 7d fd f5 2c 1e 64 69 c5 37 7e a9 b7 9b ee 09 c0 87 63 4f 56 50 c2 e3 62 8a 23 a5 07 61 ad a7 2d 40 b5 45 b3 c3 ac bd 19 53 64 56 78 d0 38 4e ad 9c 50 a9 08 e0 bf a4 06 d7 23 6a 14 87 a6 1b dd 75 c7 e7 e5 91 24 9f a8 05 5d 63 bb 55 64 37 ba eb 8f cf cb 22 49 3f 50 0a ba c7 76 aa c8 6f 75 d7 1f 9f 96 44 92 7e a0 15 75 8e ed 46 04 a9 3c 09 6e 1d 53 4e d2 93 f6 eb 5a ae 90 9b 4f e1 27 66 0e 9b d5 14 94 3e 64 a3 0f a8 d2 b0 21 4c 42 3a 7b da 18 ba 8a f2 38 65 f4 eb 4a ef ab 37 08 59 4d 8a ad 6d 54 45 43 f0 26 31 01 32 b9 48 a7 5e 56 c0 08 a5 44 92 b9 62 3b 68 82 6f 6a 5c 1b 13 01 cc 56 1e 4a 9c 20 20 5a e4 6d e4 1a 10 cd fa 35 08 e6 d0 c7 be e3 3c 0f 7d a7 d7 Data Ascii: )B\ESx+n`-\|=},di7~cOVPb#a-@ESdVx8NP#ju$]cUd7"I?PvouD~uF<nSNZO'f>d!LB:{8eJ7YMmTEC&12H^VDb;hoj\VJ Zm5<}
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 62 7c 9e c3 83 bd cb e3 0d 29 bf 17 8a 8f bc 9f a5 94 d0 26 47 65 52 98 f4 45 e1 af 8c 60 2e 01 67 dc b5 30 0c be 77 95 39 e7 c1 63 e9 ca 25 e7 b9 f8 b5 4d 99 8b 2f 07 52 cc c1 3e e5 e9 e0 c8 43 99 b3 c3 d7 7c f3 40 0f b9 79 61 51 c3 64 99 96 99 be 11 78 c1 22 60 53 67 bc e5 b4 e0 fc 3f e3 d7 aa ee eb c3 7e 43 57 4f 23 b5 a5 14 00 00 02 0b db 10 05 86 27 c6 50 f6 96 16 39 a8 98 cc ad e7 0c 25 61 19 28 c1 e5 9e 7c 79 3b e4 62 29 59 24 57 f0 c0 26 34 1a 9d 63 28 8a cf f2 ab a6 6e df c0 51 fb 94 e6 69 4d 0e 90 be 49 c3 39 05 74 56 55 9d b4 df f9 47 92 22 45 d8 e1 f6 f2 eb 90 5a dc 8d 84 40 e2 94 3e 52 99 06 28 52 9f 4f 8c d4 81 3a 91 9a 32 1d 32 ec 1c 15 3d b7 f3 3b 7f ff b9 fb bf 90 00 00 00 3c 40 cc 2f a6 19 f7 3a 0a 2f ce 5e 50 9f 2b 43 34 b1 c6 02 37 56 Data Ascii: b\|)&GeRE`.g0w9c%M/R>C\|@yaQdx"`Sg?~CWO#'P9%a(\|y;b)Y$W&4c(nQiMI9tVUG"EZ@>R(RO:22=;<@/:/^P+C47V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	49911	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:07 UTC	618	OUT	GET /uploader/0abbbe77281ef379f1a927125224b50c.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:08 UTC	561	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:08 GMT Content-Type: image/jpeg Content-Length: 186640 Connection: close x-oss-request-id: 66511B44F488A53438F0F48D ETag: "393F2BDB1674723EA904395DF266CC85-1" Last-Modified: Tue, 08 Aug 2023 03:23:06 GMT x-oss-object-type: Multipart x-oss-hash-crc64ecma: 16430988450799179516 x-oss-storage-class: Standard x-oss-server-time: 103 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:08 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2094a5ef7d8-BNA
2024-05-24 22:57:08 UTC	808	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 4e 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCCN
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 92 66 bc 9e 62 aa 48 19 e5 ce 29 ca 50 8f 2c 5d 9e 89 c6 f2 7d 23 d2 da ea a5 e9 6e af 57 28 b8 b7 17 ba b5 d6 ba 36 93 6b 5b 6a b6 7d 2e b4 6d 59 bf d4 cf db cf f6 c9 f8 19 e3 bf 1d 7c 18 f0 17 8a 35 1d 22 e6 2d 1f e2 f7 80 fc 76 26 b5 7b 56 9e ce f7 c2 9e 20 d2 f5 8b 19 13 f7 e3 61 33 db ac 52 36 58 c9 6f 2c c9 b5 77 73 e3 4b 24 4e 93 93 8b f8 1c f5 76 bb 49 bd ed 7b df 74 9d c7 0b f3 45 af b3 24 de dd 1d ff 00 43 fa 28 f0 ef ed 31 e0 34 d1 7c 33 a8 3f 88 2c 04 17 3a 54 57 56 bf e9 f6 a3 cf 82 45 f9 58 66 41 b3 ee 9c 0f 9f 39 eb 91 5f 09 38 4f 9a 4b 96 5a 49 ad 9f 47 6e c7 dd 53 cf 29 38 c2 2e 71 5e ec 62 db b2 6b 4e 54 96 b7 6f b5 93 e9 74 8f 9f 7f 6b 4f 16 fc 1b be f8 6f e2 79 3c 7d ab f8 7e cf c1 5a c7 87 ee a7 d4 d7 54 be b7 43 71 a5 9f 28 97 83 cd Data Ascii: fbH)P,]}#nW(6k[j}.mY\|5"-v&{V a3R6Xo,wsK$NvI{tE$C(14\|3?,:TWVEXfA9_8OKZIGnS)8.q^bkNTotkOoy<}~ZTCq(
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 26 9e 8e e9 7b d1 eb e7 ff 00 04 7c 05 c5 95 25 9c d0 50 4f 59 c5 5f 5d 2d a5 97 a7 dc f5 b5 cf ca 99 35 ab bf 0b 78 c6 e6 1d 39 f6 0b 37 51 19 2c c0 85 66 70 c4 0d dd 58 a6 78 3c 67 bf 35 fe 7a ac e9 e4 fc 68 e5 4e 5c cb db a7 78 ae 75 74 db d6 dc c9 5b 4d 7a 5b b3 d3 fb b5 64 b1 ce 32 28 ca ab 93 55 29 73 4f 55 06 f9 a3 19 2f 8b 6d da b2 4a fd af a1 f5 4e 95 f1 fb 50 6b 08 4c d7 13 48 e0 b0 f2 90 39 31 1c 29 62 d8 6e 43 ee 1b 4e 30 4a 31 e3 95 af ec 9e 1f f1 3b 97 0f 49 4e 49 37 4e 11 69 b5 a7 ba 95 b5 ba fb de ad db cc fc 2f 11 e1 8c 23 5e ab 85 da 72 94 b5 bb e6 bb bd f6 d3 5e ed da ef 5b 6a 77 5e 19 f1 30 f1 35 da dc c7 78 d3 90 54 c8 a7 83 19 70 c7 04 76 c8 56 20 e7 e6 da 48 f6 fd 2f 22 cf 23 9d 49 49 49 4a ed 3b 26 9d ac f5 d9 bb 6d 7d da d2 fb 5c Data Ascii: &{\|%POY_]-5x97Q,fpXx<g5zhN\xut[Mz[d2(U)sOU/mJNPkLH91)bnCN0J1;INI7Ni/#^r^[jw^05xTpvV H/"#IIIJ;&m}\
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 8e 3a f3 8a e9 51 f7 25 77 6b 34 df 5d de db e8 f4 4f 5e e6 2d b6 f5 dd ff 00 5f d7 fc 39 d7 95 8a 04 55 91 b6 e0 60 63 9c 9e a7 8c 92 3f cf b5 55 ef aa d7 d6 eb f4 03 fb 27 d7 3f e0 81 1e 17 d2 35 3d 62 fa ed b5 9d 4e e3 45 16 41 f4 c9 2e e6 92 de ef ed d7 26 01 26 b7 2d ad cc 57 37 97 08 43 0b 79 a1 96 cf 10 44 b6 ec 8f e5 89 47 d7 ff 00 6d c5 3b d9 5f 46 db e5 fb df cb 4d 7a 68 ba 9f 82 fb 69 34 96 b6 8f c2 af 7e 5d 5b b4 74 bc 53 6d b6 95 93 6e ed 5c e5 9f fe 08 1d e2 0f 09 ea 3a 9a 68 5e 27 f1 0e 97 ad 6a b7 0d 79 e1 e8 3c 3d ad 6a 56 da 7a db c3 6d 79 71 28 b5 b8 b7 ba 7b 99 ad 86 c8 92 1b 7d 4a 69 b5 1b 41 23 35 cc 8f e6 20 a6 f3 c8 39 27 ca 9d 95 ed 6b c7 5b ad ae fc ed 6b 3f 2b 1b 35 51 ee af 74 b5 69 5e cb 6d 5e bf 8f 91 e6 fe 33 ff 00 82 3d 78 Data Ascii: :Q%wk4]O^-_9U`c?U'?5=bNEA.&&-W7CyDGm;_FMzhi4~][tSmn\:h^'jy<=jVzmyq({}JiA#5 9'k[k?+5Qti^m^3=x
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 00 f5 ff 00 ac 61 5d 54 a5 1a 9c f1 94 65 18 b6 d5 a5 f1 24 ed 78 df 5b bf bb ef 3f 0a 59 62 a5 51 4e 5e e4 a3 3b ab ab 6c ec ed b2 f4 77 7a eb eb e5 b7 ba 54 f7 7a aa ed 4f ba d8 c1 ed b0 91 ed dc 67 9c f1 8f 5c 54 d4 52 a9 24 b9 b5 e5 b3 b2 bd dd f6 5a af 9e 96 d5 eb ba 7f 5d 4f 32 a7 4b 0b 3b be 57 cb 65 6b 2d 23 1b 5d 3f 45 65 6f 92 e8 7d 3f e0 cd 2c 58 5a c3 85 d8 23 88 bc 84 8c 29 ca ae d5 f5 05 06 49 c6 7a 8e 05 7d 3e 50 f9 56 aa d6 83 7d fa 5d f9 36 ed f3 d5 dc fc 43 3f cd 9d 6a d3 51 6e 5c f5 24 92 be af 5d 1d bb 36 b4 7d 6c d1 e1 ff 00 b4 5f 88 7f b3 74 4b df 25 d0 f9 41 f7 65 f1 bc 92 00 00 6d 3b 48 c1 e3 9c e7 b6 2b f2 4f 16 73 68 d3 c9 71 49 da 16 a5 5a fe f5 b5 71 93 da e9 2b 5f 74 fb 3b 5c fd 57 c1 6c 8d e6 79 bd 1a 92 8b b4 67 09 ae 64 ac Data Ascii: a]Te$x[?YbQN^;lwzTzOg\TR$Z]O2K;Wek-#]?Eeo}?,XZ#)Iz}>PV}]6C?jQn\$]6}l_tK%Aem;H+OshqIZq+_t;\Wlygd
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: ca 73 9a 10 d2 55 52 a5 1b 27 cf 25 a4 63 74 d2 ba 5a a5 7b 6e fb 1f 91 7f b5 2f c2 5b 4f 0d c9 a9 59 a5 ba ca 6c c3 ca b2 c6 db 0b 31 c2 ef 50 62 dd 17 96 42 8d a5 e5 dc a5 89 2b e5 9d d1 9d e4 d4 e5 0e 6b 41 b9 45 4a ca c9 bb ae 64 ae 95 af b5 9e bb 3b ad 93 fd 23 c2 ec f7 34 a7 5e 14 eb d4 6a 2a a7 2c f9 da 97 bb 75 16 92 e6 4d f5 be da d9 de fa 2f 89 f4 7d 26 6b 28 0c 52 14 60 d8 e0 67 8c 6e c8 39 e3 f8 bd 79 e8 33 5f 2e f2 5a 09 5d b8 df a2 b4 3b f4 d7 d3 67 e7 73 f7 cc cb 38 53 51 8c 2e af ca da 4d ab 3d 37 b2 dd 77 d5 79 f5 38 3f 1e 69 ad 04 49 71 6f c4 61 98 ce a3 92 be 68 52 08 e7 ee e5 30 73 91 92 33 8e 87 f1 7f 14 72 54 e1 37 45 2f 76 0d be 5e ba 5d fc 2f 75 d5 25 ad db 76 5b 7d 47 0f 55 57 8c 6a 4b 99 d4 51 70 6d ec ed 74 9f 54 f5 76 7a d9 af Data Ascii: sUR'%ctZ{n/[OYl1PbB+kAEJd;#4^j*,uM/}&k(R`gn9y3_.Z];gs8SQ.M=7wy8?iIqoahR0s3rT7E/v^]/u%v[}GUWjKQpmtTvz
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 39 5e 5b b0 19 e9 f5 c7 cd e4 6a af 19 56 bc 63 3a 93 94 fa 5e 4f 56 ed e7 b5 ac ac b6 76 57 bd fe a3 38 54 f2 2c a7 a2 4b 5b 6c b9 62 f5 e9 77 a2 5a 59 f7 3e 2c 7f 00 78 80 ca c3 ec cc 06 e2 33 b4 ff 00 8e 3f 5f c6 bf 5b a5 e0 fe 72 dd 37 cb 51 a7 c8 d6 9b a7 67 66 b7 bb db a3 b9 f9 db e3 cc 9d 26 b9 e3 cc 93 5b b5 aa fc 37 2f 47 f0 db 5d 2a 58 46 dd b3 94 23 07 24 7a e4 7e 5d 7f 3a fa c5 e0 ee 76 e2 9b a3 3b 24 9b bc 1e 9a 75 f7 74 38 7f d7 cc 2c 93 5e d2 2a 3b 3f 7a 2a c9 af f0 fc be 5d 48 24 f0 0f 88 2d dd 1d 33 1b a1 0c 84 0d a4 30 e4 1e 5b 9e 40 ce 0f a7 a9 a5 ff 00 10 8b 38 a7 ef c6 0e 3c 89 c9 69 af bb ad 95 a2 64 b8 9f 2b 9f bb 37 16 a7 75 25 cd d2 fe 9f 96 cd 9d 36 9b e3 bf 18 e8 77 76 d6 d7 d2 48 a1 19 c7 9a 17 00 83 b4 67 69 19 1d 88 f9 b1 d4 Data Ascii: 9^[jVc:^OVvW8T,K[lbwZY>,x3?_[r7Qgf&[7/G]XF#$z~]:v;$ut8,^;?z*]H$-30[@8<id+7u%6wvHgi
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 2f e6 f0 f4 7a 6c ae 26 80 47 66 71 b8 e0 f9 c8 e5 b0 aa 78 1b 94 30 01 b0 5b 19 c8 00 57 f6 77 1c d3 87 d5 60 e5 4e 2f f7 5d 62 9e d1 5d d7 aa ff 00 80 7f 13 78 5d 51 c3 88 73 38 b9 c9 28 d6 82 4a 52 76 ea 96 9a 2d ef f3 bf 73 f6 ce f8 b3 da 39 20 8c aa b0 04 60 f5 04 ff 00 f5 fd 2b f9 f1 34 e5 3f 39 3b 2b 76 6e fe 4a df f0 c7 f5 54 da b4 35 5f 7a fe 53 c6 75 f3 fe 94 55 94 32 b0 60 41 e4 30 f9 72 08 20 82 3d 7f 2a f4 61 56 df 0c 9a bb 76 6a ea f7 96 dd 3c 8f 32 b7 2c ed 6b 4a c9 f3 69 d3 a6 fb ad 1f 7f c4 f8 d7 e3 7c 30 c7 a2 dc 98 61 8e 1d cb 28 7d 88 ab bb 09 19 50 c4 01 9d bc e3 39 ea 7d eb ec 32 19 fb d4 bd a4 97 c5 f6 df f7 96 f7 f3 be e7 c9 e7 50 f7 2a 72 c7 ec ca fc b1 f2 97 64 7f 2e ff 00 b5 da 5d cf af ea 44 db 79 7b 67 51 8f 30 3e 72 64 eb f2 Data Ascii: /zl&Gfqx0[Ww`N/]b]x]Qs8(JRv-s9 `+4?9;+vnJT5_zSuU2`A0r =aVvj<2,kJi\|0a(}P9}2Prd.]Dy{gQ0>rd
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 2e e9 69 77 d5 5b 4d 4d 69 7c 13 63 6d 6e 5d 23 89 c2 00 76 b2 95 cf be e2 cf cf e1 8f 7a ff 00 4f 61 c2 d9 44 21 4d aa 10 72 8a 86 d0 7b a4 b5 d3 cd 76 5f 23 f8 99 f1 24 e5 51 da 73 bc a6 f4 e6 7a 5d ed ba db c9 df af 99 85 35 86 8f 1e 3c db 74 8c f3 8c 9c e4 8c 13 83 c6 71 91 93 db 22 bd 35 96 e1 ec e2 e9 52 b5 ac bf 77 1e d6 ed b7 7d 3d 0f 66 8e 27 13 3f 7a 33 9b d1 3d e5 6d 75 d7 fc bd 74 39 36 d2 b4 cb bb cf 2a 38 cc 6a e4 8c 90 18 75 3c e0 04 38 27 3d f3 8e 9c 8e 7c c9 70 c6 53 51 cd fb 28 a9 4a ef 44 d2 6d b7 d1 ab 5e ef 44 ae b5 77 d9 9d eb 19 8a a7 0e 6f 69 74 ac d7 7d ae d2 f7 9e 89 5d ad 96 8d 75 46 77 8b be 16 5a cd 61 2b c5 6c 63 98 b6 f4 90 6d ca b2 03 b4 16 5e c7 3d 70 3a 1c 86 ce 07 e5 3c 6b e1 fc 14 2a d4 a3 4a 3a 46 72 f7 20 9d 92 5c c9 Data Ascii: .iw[MMi\|cmn]#vzOaD!Mr{v_#$Qsz]5<tq"5Rw}=f'?z3=mut968ju<8'=\|pSQ(JDm^Dwoit}]uFwZa+lcm^=p:<kJ:Fr \
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 32 59 2a 91 a5 45 3e 6e 7e 65 18 26 b5 6e cf 49 35 a5 ba e9 af ce 08 bc 1f fd b9 e3 27 f1 15 d3 1b 78 7e d2 f1 5a c3 b5 a5 f3 4c 0c 0c a4 cd e7 45 b3 93 1f cb e5 37 de e0 9e 95 fa bf d1 ee 7f da d9 bc 33 67 6b 5e 37 69 5e ce ee 3a ae ee fb ab 77 ba d1 9f 97 78 fb 99 4b 2a ca 95 08 de f2 8a a6 92 56 de d1 6f 55 27 64 9d df 45 f7 1f d0 bf fc 13 96 cf 57 d3 9e 2b d6 87 c9 b3 93 ca 8b cf 2c 73 23 c0 88 5d 40 2a 3e e2 cc 8c c4 92 07 9a b8 39 15 fd ab c7 3c b2 c9 a3 18 b8 b9 38 da da 36 9e ca f6 bb d3 4f bf 6d 0f e1 fe 00 75 27 c5 f8 d9 c5 4f d9 ce 70 69 a4 d4 5a 69 cb 56 ac b7 7d 76 f9 1f b2 9e 2d f8 87 6f a7 c3 0c 2f 76 a5 8c 72 74 65 5c 63 cb 03 d4 9e 9d 78 23 ae 2b f9 f1 65 72 bc a4 95 f5 76 4a f7 bb 7b be df e7 74 7f 4d 46 6e 0d 45 cd a4 d2 6d b7 64 fd db Data Ascii: 2YE>n~e&nI5'x~ZLE73gk^7i^:wxKVoU'dEW+,s#]@*>9<86Omu'OpiZiV}v-o/vrte\cx#+ervJ{tMFnEmd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	49913	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:07 UTC	702	OUT	GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-1516" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:08 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:08 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-1516" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183475 Expires: Sat, 25 May 2024 02:57:08 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2096d9af7f4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	49917	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:08 UTC	392	OUT	GET /uploader/1410d7ced7e16916884730c28d7310a5c2412305.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:08 UTC	686	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:08 GMT Content-Type: image/webp Content-Length: 25678 Connection: close x-oss-request-id: 66511B43E90119393922693F ETag: "88EE7DA569352C1FACF0700A786A9CFD" Last-Modified: Wed, 06 Sep 2023 10:13:36 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 13468999559584570017 x-oss-storage-class: Standard Content-Disposition: inline; filename="221a35c5f72003bd880be08d8926b0f415e83363_221" Content-MD5: iO59pWk1LB+s8HAKeGqc/Q== x-oss-server-time: 62 CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:08 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e20c9c2ef7e0-BNA
2024-05-24 22:57:08 UTC	683	IN	Data Raw: 52 49 46 46 46 64 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 38 00 00 00 cf 02 00 cf 02 00 49 43 43 50 a8 01 00 00 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 5f 63 70 72 74 00 00 01 4c 00 00 00 0c 77 74 70 74 00 00 01 58 00 00 00 14 72 58 59 5a 00 00 01 6c 00 00 00 14 67 58 59 5a 00 00 01 80 00 00 00 14 62 58 59 5a 00 00 01 94 00 00 00 14 72 54 52 43 00 00 01 0c 00 00 00 40 67 Data Ascii: RIFFFdWEBPVP8X8ICCPlcmsmntrRGB XYZ )9acspAPPL-lcmsdesc_cprtLwtptXrXYZlgXYZbXYZrTRC@g
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 40 12 04 09 10 04 fe 01 f5 5c 05 6d 08 28 7a 01 04 93 e5 59 77 d8 9d 3e fb af bf 47 3f d7 fe 62 1d 92 04 ff bf 93 c6 d8 74 78 61 cf fe f0 7d 19 f5 f0 f2 c3 44 de 03 e0 ff 67 7f 28 0c 6e 3f 18 fd db 8f 51 cf ee bf d9 aa f0 87 0a 01 a1 e4 fc de e7 37 75 bc 63 be f8 73 ea 21 03 01 14 ff bf 13 05 6f f6 39 5e c5 3b 9d 7b f7 2a 2f 23 18 00 c4 ff f7 04 40 b0 53 97 d1 0e fb 7b 09 3c 00 22 94 14 c0 d4 d7 d1 0e 6c e2 40 c8 20 a8 4c 9d 8b 77 5c c5 1c 32 08 6b 62 5d 1d ef 08 32 08 ae b5 3e e2 31 f4 08 af b1 de c5 3b 96 2e 40 a0 10 ef 12 41 8e 7c 14 20 82 3e 2e b3 d6 b9 88 47 08 70 92 d6 55 bc 13 e6 c8 87 0a 90 31 de 47 3b 24 7c 80 48 29 da 41 22 05 28 ee b5 ac 03 44 42 8a 75 48 fa 00 19 23 87 68 d7 22 44 36 a9 23 1e 52 01 32 89 8b 77 48 85 88 80 a2 1d 80 41 a2 62 1e Data Ascii: @\m(zYw>G?btxa}Dg(n?Q7ucs!o9^;{*/#@S{<"l@ Lw\2kb]2>1;.@A\| >.GpU1G;$\|H)A"(DBuH#h"D6#R2wHAb
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: a1 22 84 5e 67 31 8f 6a 7a d9 02 80 18 28 81 48 86 1a b9 88 c6 0c ed 14 20 42 4d 01 d8 ce 8f cb 88 26 df 72 73 40 0c 15 28 b0 df 5d 8c 23 9a 5e a7 5c 02 44 d0 7b 1d 3f ae a3 19 d3 49 ab 12 81 67 2f af 67 f1 8c 1d e4 a5 0b 9c cc 56 77 35 2d a3 99 a4 5f 94 12 83 06 f4 b6 ca e9 2a 9a b1 bd bc 86 10 fa 6d 3f af a3 19 d3 49 20 32 74 45 be 28 a3 19 5b 78 00 62 e0 92 ee 6a 15 cf f4 57 00 88 80 53 80 ed ba 79 34 93 a7 a7 82 9f 74 cd d8 c7 32 7d ac 87 5e ba 98 45 32 c9 96 66 62 f8 d2 7e b6 1c 2b 8a 61 a7 ef a6 42 f0 95 74 93 72 e1 a3 18 74 0a cd d7 00 6c ce aa 44 1c 9b 65 2a d7 81 49 8d ab 14 c7 24 29 fc 3a 40 61 ea 58 26 4b 3d 82 47 01 45 5e 2e 23 99 3c f7 00 18 36 50 48 7b 6e 1a c9 74 f3 05 00 31 6c 22 4c 1f 53 1f c5 b0 9b ce 11 7e 0a 28 ec 22 92 e9 98 25 00 06 Data Ascii: "^g1jz(H BM&rs@(]#^\D{?Ig/gVw5-_m?I 2tE([xbjWSy4t2}^E2fb~+aBtrtlDeI$):@aX&K=GE^.#<6PH{nt1l"LS~("%
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 79 1d 73 ec 3e f8 62 ee 20 52 5c 7b 94 60 c4 b3 f7 ce cf 9e 3e ab 63 0d 73 e6 fe b9 89 97 48 19 ac 7f 42 32 d2 f6 57 5f d6 3f 3f 5b c4 19 c9 c5 c7 7b 9f 05 11 32 d8 08 09 19 b1 b8 71 3f 7b f6 f4 73 8c 61 af 3d ee ce 21 19 c1 60 63 94 91 8a 8b 0f 76 5f ff f0 5a f1 c5 b9 bf 6c 79 2f 52 06 9b 23 21 52 ba f8 a7 9d 4f 3f bc 52 6c 91 3e bc e8 04 51 c4 66 49 19 68 f0 e0 c6 fb 7f 37 a1 a2 0a 5e bf 74 02 4f 8a 1b 06 71 5a 83 3b fd e7 af 84 a8 32 fb 33 97 a0 40 6c 9c 04 28 9f df 3a 78 f3 76 14 51 50 67 2e cd 24 52 1b 08 40 91 b8 fa af bb 4f 7e fa 40 28 92 d0 d5 47 ef 20 10 c4 86 4a 75 ef 5c d9 c5 6f 3f be 42 1c d9 bb 76 bf 28 45 88 d8 4c 29 19 d9 c3 fb b7 f4 fb df 7f 9d ba e8 81 da 7a fc 78 5a e2 14 36 55 0a 00 93 dd db 77 86 2f ff eb df 14 3b e8 fc 9f ce 1c 41 32 Data Ascii: ys>b R\{`>csHB2W_??[{2q?{sa=!`cv_Zly/R#!RO?Rl>QfIh7^tOqZ;23@l(:xvQPg.$R@O~@(G Ju\o?Bv(EL)zxZ6Uw/;A2
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: de fd 7f be d2 30 7b fb 5c 68 96 61 cc 72 a1 61 e6 b6 39 66 2c 8a 59 be d8 b3 4c eb 6d 33 8c 37 ce 6d 98 09 34 ca fe 77 63 0b 1a 65 f3 dc ed 30 83 9c 65 69 b3 0c 99 66 ef fe 3f 5f 37 ce 32 68 98 b5 68 96 e1 da cd 32 9e 78 1e 67 bb 59 b6 68 9c 6d 66 b9 d6 30 23 86 99 7b 9a 41 c3 cc cd 30 b7 69 86 4d b3 b7 ce a5 61 f6 ee ff 57 d8 d2 30 c3 71 f6 ee ff f3 ad 35 cc e6 b9 ee 69 06 0d b3 f5 cc 2c 5f ee 66 99 c4 30 97 66 99 c4 30 5f 7b 98 09 0d b3 98 e6 f6 06 4c 78 30 c6 34 b7 71 46 c3 6c 9c 0b cd 32 8c 61 9e d3 cc c6 19 0d b3 77 ff bf 99 9e a3 cc 12 1b 64 40 f2 6e c1 2e 9d 1d 8c 17 2e cc 73 b1 0b 07 c9 c1 d0 8d 3b 59 73 9a d9 30 63 4d 33 65 0f 33 68 96 61 cc 72 a1 59 86 d3 4c 62 98 af 1a 66 38 ce ae 7c 38 cc 20 cf 45 ba 72 07 2b 97 ce a6 59 1e cb ad 8f 83 b1 0b Data Ascii: 0{\hara9f,YLm37m4wce0eif?_72hh2xgYhmf0#{A0iMaW0q5i,_f0f0_{Lx04qFl2awd@n..s;Ys0cM3e3harYLbf8\|8 Er+Y
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: f0 cf df e7 ed 1e b0 7c 51 5d 1d 02 6c 00 02 a1 d1 9b 14 ad ff c9 6b 5c ed 4a e0 c6 07 80 cb e7 8a 00 f0 fc f5 f5 8b 68 8a e3 6f 87 26 02 78 f5 eb 95 2f 00 8a 1b 9e 8c a0 df de 64 6c ff 58 be d4 85 3e 44 71 a3 93 11 f1 fb cb 7d 44 80 c2 f8 79 71 23 17 88 4d 5e 14 39 fb 1f 9f f3 18 00 58 fe 57 ff e7 3e 28 70 63 13 08 b0 fa e1 55 17 71 a0 ff e5 dd c1 d5 54 04 c4 cd 4c 46 14 f0 f2 eb 7d c4 82 fa e9 fd cd 2f 3c 29 62 63 17 fd eb ef 85 78 f0 d5 7f eb 3e 3c 84 08 01 dc b4 44 51 a4 fb fd bf af 4c 44 50 fd fc a4 f8 ea 62 06 01 14 b8 49 89 10 41 4d 5f 3c 2f 13 c4 84 d5 7f f9 69 f7 f6 97 85 05 44 0a dc 94 44 88 80 dc e8 d9 b3 2a 41 5c b8 fa e9 fb c9 85 bb 5f 74 01 89 d0 1f 50 e0 46 22 ea 7f 42 91 00 46 cf 7f 1e 9d 47 74 58 3f f9 71 d4 df 39 3c b3 dd 33 38 2d 40 84 Data Ascii: \|Q]lk\Jho&x/dlX>Dq}Dyq#M^9XW>(pcUqTLF}/<)bcx><DQLDPbIAM_</iDD*A\_tPF"BFGtX?q9<38-@
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 84 0d 2b c9 ea 28 05 71 a5 a4 16 d4 cc d3 ac 69 6a aa aa aa aa aa aa aa a9 32 e2 fc eb 11 53 31 7f 22 06 81 ec 1a 05 37 c7 ce 23 ea bb 64 d0 91 f2 8c 14 7e 4e a9 39 61 9c aa b0 a0 9d af 76 26 1f ce 7e 76 58 39 f9 75 19 99 99 99 99 99 99 99 98 ef df 89 d2 bf f7 45 c3 35 1d 89 a7 be b5 08 ca 97 d5 ee fb 61 13 08 ea 09 6b e2 e3 e9 6b 24 44 50 b8 88 88 8c 85 dd dd dd dd dd dd dd dd dd dc cd 43 b2 85 1c e4 46 ee 65 36 cb bf cf 9c bc 04 60 a3 86 0e 48 b4 63 cf a6 f5 34 3c 36 a2 70 98 f5 c7 5a 33 d3 a4 7e d0 a9 76 bd c0 1e 4f 48 2b 8c 19 a6 86 9d 5e e4 c8 88 88 88 88 88 88 88 81 b5 f5 8f 6a e0 b6 93 16 f6 f5 db d2 a5 6b 97 f8 cb 6a 16 57 72 8f 85 6f fc 6c 89 19 44 16 55 90 3c 65 a8 f1 62 a2 15 64 3e b1 c8 0e bd 8d 3a bd c0 1e 4f 48 2b 8c 19 a6 86 9d db 55 55 55 Data Ascii: +(qij2S1"7#d~N9av&~vX9uE5akk$DPCFe6`Hc4<6pZ3~vOH+^jkjWrolDU<ebd>:OH+UUU
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 50 c6 d3 61 67 97 af 66 a1 0d a0 e3 4e af 70 07 93 d2 0a e3 06 69 a4 bb bb bb bb bb bb bb 79 1d d7 90 7f 1d 0f 13 28 f0 0f 29 a1 5e 7e 68 ae 8c bd cc f6 24 24 71 d0 46 a2 6d 9f 0d d0 78 0b 81 af 8b 80 44 a6 c5 73 62 af 2b bd 67 73 8b e8 93 d9 38 de a5 08 0f 4c c0 0d 8c 51 1c 33 df 93 dd 0a 7c ec 69 d5 ee 00 f2 7a 41 5d 77 77 77 77 77 77 77 60 16 21 30 ca 78 de a9 68 65 f9 e1 82 85 da 5e 30 6b b9 36 5c 09 d7 27 1d cb 20 88 ba 97 da 11 ef 45 90 28 dd d0 d3 8b 46 1f b3 e6 87 19 5f 53 b7 73 4b ae a7 41 4a 75 98 76 15 95 ad 4c a9 27 fe 5c 87 ff ff ff ff ff ff ff ff cd dd dd dd dd dd dd d5 3e 31 b0 36 11 8f 1f 25 bb ca fa 4d 2b 52 04 15 86 92 84 0f 7c 90 e0 d5 37 ec d4 1b c5 3c cb 7b f3 50 0f 93 02 8e e9 15 4f 59 54 cf bf 99 4c 6a 9e 90 20 44 47 27 f9 1b f4 3d Data Ascii: PagfNpiy()^~h$$qFmxDsb+gs8LQ3\|izA]wwwwwww`!0xhe^0k6\' E(F_SsKAJuvL'\>16%M+R\|7<{POYTLj DG'=
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: c5 0c 76 ca 86 23 dd bb a2 02 07 56 f1 5c 62 b1 81 4e 3b 11 a3 6f 7e 26 e2 bd be f4 57 1e 9d 60 6f 37 d4 75 bf 1a ba 30 05 1c 65 eb e0 78 a9 cc 0f 68 b7 fb 17 01 8f 03 ed fd 58 24 6c 10 e4 14 07 24 04 2f 2f bb 67 45 8e 93 b6 c4 7c ef 3a ab 30 00 02 51 38 a7 dc fd c3 d1 f6 12 9a 25 07 d8 d4 58 06 a9 ec a5 23 b3 e7 34 18 2e 6f 1b ab 51 ca 0c d5 01 3d 35 4d a0 80 53 63 b6 ef 2e c0 60 34 9d 69 6d b3 67 a7 12 4e 77 7d 60 e6 af 45 de 74 ab 76 7d d8 23 30 97 ae d8 ff 87 97 ea ee 5b 17 60 f0 bf ba 1d 20 33 69 49 7a b0 71 ab f0 b8 7e 91 bb d5 e9 93 0b 54 a6 94 e3 9a 45 61 4d c6 91 57 96 6f 25 42 11 ba c8 e1 16 7b 41 05 a4 73 55 13 af 5a 95 26 cc 96 4d bc ed 6b f3 f3 10 00 6b e5 92 4d 5b 82 7c 50 cd 6a 17 0e ab 45 b8 ed 25 ff 20 25 72 97 6c 91 ac 77 2f c7 02 1f f4 Data Ascii: v#V\bN;o~&W`o7u0exhX$l$//gE\|:0Q8%X#4.oQ=5MSc.`4imgNw}`Etv}#0[` 3iIzq~TEaMWo%B{AsUZ&MkkM[\|PjE% %rlw/
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: f3 82 b1 4b f1 e1 71 fa ea f9 40 e5 53 9a 78 c2 46 13 da 9a ee 63 b7 e4 0c 2c f7 8b ea 16 7a b4 ef 0e 55 77 5a 53 b2 38 43 81 89 59 3f 22 c3 ed ca 23 e1 df 2e f2 16 c8 3b ca fc 9e ea d4 a5 ce cb bb 77 56 79 4c 58 f0 63 76 ea 40 66 39 34 3d 02 7d b3 3c d3 0c 30 15 39 a1 00 9c 8b c1 94 e1 c7 e8 08 7f 7a d5 dd d4 9c 9d 12 18 96 88 a9 8a 56 bc dc f6 ba 04 86 e4 e1 89 86 5c 01 30 98 6b 81 7a c0 cf 56 82 c0 58 8a 59 05 88 cf 39 9c af a0 eb d1 e8 f9 67 b0 f9 fd d3 0a bd 1b 35 2a 45 61 c7 fd d3 0a bd 1b 35 2a 45 61 c7 fd d3 0a bd 1b 35 2a 45 50 8c e6 83 6e e2 9b c3 69 1f 3d 82 f7 0d 04 b4 f6 fe 97 a4 85 a8 21 62 e7 46 7d 4f b2 e9 04 16 a2 46 cf 73 e8 88 3c 26 26 f4 8c 22 62 da a0 40 66 ca 28 d0 4d 81 c4 56 df 95 d5 19 4f b2 30 29 cb 08 e3 96 05 68 fe 54 43 2b 91 Data Ascii: Kq@SxFc,zUwZS8CY?"#.;wVyLXcv@f94=}<09zV\0kzVXY9g5Ea5Ea5*EPni=!bF}OFs<&&"b@f(MVO0)hTC+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	49914	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:08 UTC	700	OUT	GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-e1e" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:08 UTC	609	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:08 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-e1e" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183475 Expires: Sat, 25 May 2024 02:57:08 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e20c9801f7d4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	49910	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:08 UTC	957	OUT	POST /buyer/cart HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 94 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=whiskys Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:08 UTC	94	OUT	Data Raw: 7b 22 63 61 72 74 22 3a 7b 22 63 61 72 74 5f 74 6f 6b 65 6e 22 3a 22 22 7d 2c 22 63 6f 75 70 6f 6e 22 3a 7b 22 63 6f 75 70 6f 6e 5f 63 6f 64 65 22 3a 22 22 7d 2c 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 22 22 2c 22 63 75 72 72 65 6e 74 5f 70 72 6f 64 75 63 74 5f 69 64 22 3a 22 22 7d Data Ascii: {"cart":{"cart_token":""},"coupon":{"coupon_code":""},"country_id":"","current_product_id":""}
2024-05-24 22:57:08 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:08 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:08 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:08 UTC	1213	IN	Data Raw: 34 62 31 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 65 78 70 72 65 73 73 22 3a 7b 22 68 61 73 5f 69 6e 73 75 72 61 6e 63 65 22 3a 22 30 22 2c 22 69 6e 73 75 72 61 6e 63 65 5f 73 65 6c 65 63 74 22 3a 22 30 22 2c 22 69 73 5f 6d 61 74 63 68 22 3a 30 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 73 65 6c 65 63 74 65 64 22 3a 30 2c 22 6c 69 73 74 22 3a 5b 5d 7d 2c 22 63 61 72 74 22 3a 7b 22 74 79 70 65 22 3a 22 22 2c 22 74 6f 6b 65 6e 22 3a 22 37 64 32 31 38 38 39 64 31 39 34 38 64 35 39 61 35 32 34 30 65 63 34 38 38 30 38 33 32 39 64 66 22 2c 22 77 65 69 67 68 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f 61 6d 6f 75 6e 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f Data Ascii: 4b1{"code":0,"msg":"success","data":{"express":{"has_insurance":"0","insurance_select":"0","is_match":0,"error_code":0,"selected":0,"list":[]},"cart":{"type":"","token":"7d21889d1948d59a5240ec48808329df","weight":"0.00","product_amount":"0.00","product_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	49919	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:08 UTC	392	OUT	GET /uploader/129e8ce2f2da19c63117ea13fc1df76c11cd364b.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:08 UTC	686	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:08 GMT Content-Type: image/webp Content-Length: 24606 Connection: close x-oss-request-id: 66511B433BC7A8393854C61A ETag: "7DC2CA626C17D61ECC9CDE084CEBE168" Last-Modified: Wed, 06 Sep 2023 10:13:41 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 18240186762132226967 x-oss-storage-class: Standard Content-Disposition: inline; filename="221f07788cb8e2594dea5346de08569f12673371_221" Content-MD5: fcLKYmwX1h7MnN4ITOvhaA== x-oss-server-time: 82 CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:08 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e20c9d3bf7cc-BNA
2024-05-24 22:57:08 UTC	683	IN	Data Raw: 52 49 46 46 16 60 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 38 00 00 00 cf 02 00 cf 02 00 49 43 43 50 a8 01 00 00 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 5f 63 70 72 74 00 00 01 4c 00 00 00 0c 77 74 70 74 00 00 01 58 00 00 00 14 72 58 59 5a 00 00 01 6c 00 00 00 14 67 58 59 5a 00 00 01 80 00 00 00 14 62 58 59 5a 00 00 01 94 00 00 00 14 72 54 52 43 00 00 01 0c 00 00 00 40 67 Data Ascii: RIFF`WEBPVP8X8ICCPlcmsmntrRGB XYZ )9acspAPPL-lcmsdesc_cprtLwtptXrXYZlgXYZbXYZrTRC@g
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 0f 8c ee ba 66 f3 ca 91 8f 7d e2 0c 72 44 92 dd b9 e5 3b ae 5e 65 ad 13 d6 3b 86 93 6d 30 2a c6 66 6e bb 7b f8 ff fe cf 59 39 1e 29 37 be e3 fb 9a 80 6d 49 58 bc e3 02 59 b2 b0 0d dd 5b 7f a4 f8 db 4f c8 d1 48 79 df 6f 0f 41 46 92 6c 39 f1 ee 0a 84 65 81 73 fb db be e6 1f 3f 2a c7 22 e5 99 df 87 52 05 06 01 e2 bd 28 84 a1 c8 be e7 6b ff ce 5b 72 28 72 fa 6d 32 4d 1b f1 1e 17 76 61 be 31 fd 7f 42 b1 7c f7 1e 48 96 a8 a0 70 2a 3b df fd ff 2f 84 22 f8 76 ca 86 25 2a 2a b8 fd c4 d1 94 e3 90 f2 e6 ab 00 44 45 e5 44 93 55 02 b1 7c a0 43 b2 a8 ae b5 9c 88 c5 a5 1b 54 59 c6 c2 81 28 f3 e2 f2 d5 39 55 08 90 91 e3 10 9a 9f db 46 c5 6d 4c 28 4e 54 7d 55 04 f3 c2 39 18 95 45 d5 1a 5a 95 43 d1 c2 70 b5 44 47 3d 62 f1 b9 f1 6a e1 e1 91 37 83 51 af 2b 57 0a ba bd 60 24 Data Ascii: f}rD;^e;m0fn{Y9)7mIXY[OHyoAFl9es?"R(k[r(rm2Mva1B\|Hp;/"v%*DEDU\|CTY(9UFmL(NT}U9EZCpDG=bj7Q+W`$
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 26 d5 01 5c 3c 1e e5 0e 6a f7 a9 c7 75 33 15 6c b6 2e d4 c4 32 4b 08 6d 5a a9 09 99 12 f6 d9 c6 58 3d 4c b5 10 17 8a e1 ea 59 20 cd 16 9a e8 53 87 42 fb c7 12 6a 76 73 3d 1c b7 eb 16 ea 1f 6f ee ac 03 fc d1 0d 25 ec 53 8d a9 3a f0 f2 5f e7 b8 83 28 29 ea 80 f1 f1 a0 85 0b 6a 72 eb a1 86 6b 62 f6 50 91 6b 40 d6 7c 52 0d c9 35 60 71 7b 47 0d b7 cb 1a 00 3e d9 90 3b a8 b1 bb 26 5e 59 3e 34 1d dc 99 5c 01 55 4d e6 f2 f2 83 59 42 2a fa 60 55 cc 82 91 a5 7e 10 42 06 51 79 a7 e1 30 d4 6d f7 a9 45 8d f4 62 90 bc 7d 9a 9c ea 80 f1 de 92 1c 80 60 52 d4 a3 f6 94 c7 88 c1 ed e5 3a 90 ad a9 d6 89 10 64 26 e6 eb 00 44 77 fc 84 23 10 c3 bb 7b c8 35 80 37 ed 7b 6e 39 04 6d 1e c3 52 f5 64 d2 c1 d3 a7 e5 00 b4 a3 89 65 55 ce 82 99 f6 f3 04 60 ed ef 83 a8 c7 ed bb bf e4 00 Data Ascii: &\<ju3l.2KmZX=LY SBjvs=o%S:_()jrkbPk@\|R5`q{G>;&^Y>4\UMYB*`U~BQy0mEb}`R:d&Dw#{57{n9mRdeU`
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: b0 82 59 bb b5 75 8c 40 79 86 25 a2 15 9b b7 bc 18 29 ce c9 d7 ad e9 13 81 62 b7 8f 47 b6 66 8e 96 81 62 17 8f 05 fb df 9c 93 63 84 bc df 81 b2 91 61 62 79 81 30 79 62 64 45 b3 76 38 f7 e2 c4 e9 24 e1 91 bc 18 27 5e 7d 00 a5 23 c6 3b 27 e5 18 21 bf f1 05 22 de 3c 7a d9 73 26 4a 5e 1d 89 57 86 1d 27 08 92 e6 12 2b 1d 0b c6 66 1d 24 e0 3a 20 d9 1a 9b 25 48 ca 37 01 ad 1d 9b 2b 83 04 ec c9 78 cb ea 39 39 48 8c 88 c4 cb cb 47 b4 e4 c0 8a 47 e6 74 7d 5e 14 72 3c 16 fb e5 8b 92 30 22 60 c1 7e ff bc 24 60 24 04 ec 4f 6e bb cc fb dd 7d 4d 28 a4 71 7e d7 65 70 f2 58 13 31 8f d9 66 45 a9 94 e4 9a 18 29 99 9a bc bb 68 b3 cf 6f e4 88 8a f2 b8 92 f1 6c 09 79 5b 42 72 4b c0 71 0d 69 96 99 ba 42 0e 88 a6 b0 c8 b8 28 e6 08 69 eb 09 ab cb cc 19 60 c5 a3 79 68 09 38 c5 12 Data Ascii: Yu@y%)bGfbcaby0ybdEv8$'^}#;'!"<zs&J^W'+f$: %H7+x99HGGt}^r<0"`~$`$On}M(q~epX1fE)holy[BrKqiB(i`yh8
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: ba 38 8e c5 d9 58 56 57 1c c6 42 ba c7 d1 15 53 8a 67 0a 37 45 9f df ed f6 f1 4c 35 85 f9 ff b3 1b 2b 9c cf 97 a6 80 db f5 8c 74 ff 1f b9 29 26 23 9e 63 59 18 c5 53 97 ce c7 65 b1 b1 54 99 d9 34 ac 22 ab 74 e5 e3 b2 10 28 9d 59 15 b2 06 f1 6e 55 01 22 21 57 05 ca c6 12 13 b9 29 e4 6c 64 00 53 95 73 44 63 c1 44 6e 0a 3b 9b 1f 3d d2 95 9e 8b 15 ce ac 0a 63 0f d2 75 55 80 51 9b 79 c4 33 eb cc 6d 81 e2 e9 73 7f c5 8f 9c 8e b8 2f 0b 94 8d 0c 77 6d 11 ae 05 5b 95 c9 54 a6 95 0b c8 2e 0c 11 ad 8f 6d 31 07 56 34 87 db b2 98 73 25 5a eb f1 53 dc 64 b0 1d e8 ca e9 25 9d ba 9c 52 3c 72 57 7c 19 d7 6d a1 7c ea b2 ce 44 bc 6e 0b ac 74 fa b2 cf e6 48 c7 2a 0b 3b 1f ea cc 65 c1 8c a7 2f ad 74 5c 17 75 ee b9 a4 33 d5 16 c7 5d 99 f1 78 92 0e 6e 8b 87 d3 78 ea b2 cf 8e 6b Data Ascii: 8XVWBSg7EL5+t)&#cYSeT4"t(YnU"!W)ldSsDcDn;=cuUQy3ms/wm[T.m1V4s%ZSd%R<rW\|m\|DntH*;e/t\u3]xnxk
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: dc fe 5f ba db 72 b2 35 60 2c d9 e9 95 cd 07 41 66 43 b5 26 f2 a9 68 01 39 21 6b 03 2b 4f 6d ff 6f f7 25 27 33 78 5d 9c 7a fd 47 4a cb da c0 23 3b e6 46 4e 2c 86 8b a5 0e 17 29 0b ae 7a f8 89 5b 8d 2c 6b 70 18 29 37 ce bd f6 93 c6 62 43 99 bd 5b 46 8e bd 10 2c 8c 25 a7 0d 90 e5 e1 9b fe ee f6 bd 65 92 65 59 03 02 94 1b 67 9f f8 0d ec 64 b4 9e 93 d9 7f f5 d3 2f cb c1 a2 df 90 ad 0d 40 f6 de a9 7f 74 cb 36 72 02 30 1a 00 46 ca 8d d9 87 7e 86 9c 64 89 f5 e5 64 26 ca f3 26 54 ca f3 23 20 36 96 93 b9 b3 f7 0f f6 5d d7 06 5b 60 64 d5 99 65 41 6e cc 7d e1 f7 c8 05 4e 5c a4 2c 86 7b 59 0e 15 d0 6f f0 36 9d cc 1d db ff c3 63 b7 4e 74 3a 66 ad 85 11 58 be 08 79 8d 2c 6f 20 cb c8 6b 64 81 65 90 65 19 64 bd 3d cb 20 2c 0b a4 e5 cf fe 2a 4e 38 71 d1 b2 bb c5 02 d1 b2 Data Ascii: _r5`,AfC&h9!k+Omo%'3x]zGJ#;FN,)z[,kp)7bC[F,%eeYgd/@t6r0F~dd&&T# 6][`deAn}N\,{Yo6cNt:fXy,o kdeed= ,*N8q
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: fb e6 66 a7 eb cf 3e fb 8d ab 9d ad 17 02 b0 74 e4 14 b0 72 ec 25 80 fe b2 31 79 15 81 f9 2b 4d 56 50 38 20 d2 41 00 00 10 53 01 9d 01 2a d0 02 d0 02 3e 6d 36 97 49 24 22 a2 2e a1 f2 09 39 d0 0d 89 67 6e f4 aa a7 41 ea 05 d9 cc 6d 8e 83 42 93 09 29 e8 66 93 7e 97 fc ff b5 cf 80 de 49 f3 33 dd 1e 4a fe d1 f3 53 8f 2f 41 66 4f d7 16 77 fd 35 fe 9e ff 97 ee 33 d0 6f cc ff ee 97 ab 67 fd ef 61 3f dd b7 eb ff af fa b0 f9 cf fa d4 e0 5a ff 55 fc 8c fd 73 f9 ab e6 0f e9 fc 31 f3 85 f1 b9 69 9c d7 db fc ec 7f 77 fb 41 e4 8f cc af f7 7f c6 fb 08 fb 9f d0 56 02 1d 34 ef 0f f9 4f 60 bf 6f 3e ef fb 05 ea b9 fa de 6b 7e f7 fe f3 d8 0b f3 4f d7 bf fc fe 1f 7f 84 ff b1 ec 09 fc f7 fc 37 fd 5f f1 5f 92 5f 35 df fa ff b3 f4 49 a8 5f f3 8f f1 9d 6d bf 7a bd 90 ff 60 3f ff Data Ascii: f>tr%1y+MVP8 AS*>m6I$".9gnAmB)f~I3JS/AfOw53oga?ZUs1iwAV4O`o>k~O7___5I_mz`?
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 7d f9 97 07 a7 fe ae 12 c1 7e 1f ff f7 0e 3f ff 70 3d 18 df fe 7d 70 90 51 fe 40 60 28 d0 58 8b b9 5c 9f 87 16 df 43 33 bd b0 ae d7 a3 25 5f 03 f2 0a 7b 4c f6 99 ed 33 da 67 b4 cf 69 9e cd 3a ad b1 1e d3 c1 ca 8b 6b bf bf 0f ff f4 a4 d8 65 3f a6 1d ae ec f3 b1 7e b1 c9 73 0f 10 49 07 e6 af 8a e7 61 fa 13 67 aa 51 a1 f7 92 0b 82 82 83 2a 71 a9 c6 60 2f 20 bd 1f c9 5b ff fa 9b bf dd 24 4f e4 14 f6 99 ed 33 da 67 b4 cf 69 9e cd e5 fa e7 9e 24 bb 9b bf fe 78 9a 59 ed d6 bd 44 d7 5a c2 61 85 fb a0 5f b2 c3 db 77 e5 18 62 71 a4 cc 8a 51 07 10 66 b3 61 0b 7d 39 19 97 c7 fe cf 05 8d ff 6c c1 9f 92 d4 95 da 25 ea b5 59 4a f4 b6 d6 49 2d 89 7c 31 b0 1d ce a8 66 ec 23 13 f9 05 3d a6 7b 4c f4 82 2e ff fc a7 13 34 9f ab c0 30 09 9c c2 e7 f2 f4 55 a0 26 1a 2c ef b2 61 Data Ascii: }~?p=}pQ@`(X\C3%_{L3gi:ke?~sIagQ*q`/ [$O3gi$xYDZa_wbqQfa}9l%YJI-\|1f#={L.40U&,a
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 9f 26 df 0b 34 5d 46 17 18 1c 50 d2 a5 49 6c 3d a6 7b 4c f6 99 a8 00 00 fe ff df ce 01 f0 d7 5a 93 20 a1 50 b5 94 12 f5 73 ee 57 cd c9 3e b4 d1 c2 72 f2 89 39 fc 5b f0 52 30 c8 2a 0a eb bf ed 5a cf 59 b2 d9 d8 70 58 9b e6 50 24 cb 85 13 cc 46 13 b8 40 fa 24 a1 99 80 1e 71 b4 f0 5c 8a 19 12 de 87 26 aa 5a 96 57 da 2b 1b 7b 86 7c 22 2e f4 ba 06 89 e8 f5 d0 74 73 a1 6d bd dd a5 55 a8 e7 c0 18 9b cd 3e c0 98 07 60 9c d3 fc fc 17 01 21 7b de 3e 14 3d 96 1a 53 b9 4c 31 d4 3f 80 cf 5b 36 70 aa 87 97 ee 9a ca fd e9 73 e2 8b f2 ab ed 80 1a 85 3e 88 46 e2 b5 95 cd 8d 96 8b bb e2 33 a0 0c f5 17 5c 8e 2c 39 a6 70 44 13 5e 22 20 63 19 c2 5e 7f 71 a4 4d aa 6e 2d a4 cc ed 41 fe 95 bf bc f4 b4 f9 65 04 79 5c 1c 7d 10 bc 3a 09 46 b3 96 de 34 92 95 17 d3 d7 ea 73 79 e7 b7 Data Ascii: &4]FPIl={LZ PsW>r9[R0*ZYpXP$F@$q\&ZW+{\|".tsmU>`!{>=SL1?[6ps>F3\,9pD^" c^qMn-Aey\}:F4sy
2024-05-24 22:57:08 UTC	1369	IN	Data Raw: 2d b8 d4 84 a3 3b 55 11 b4 44 52 eb f3 9e 87 90 63 b9 e9 ef 33 73 8e ef c4 0a 07 ab b0 c7 e0 57 dc cf 07 3f 02 45 87 ae e4 98 38 87 ff fc 90 f3 4f f2 5e 47 b0 00 02 39 ee 31 27 4f 1b d9 d7 df a1 9a 64 2a ab b0 1d af f7 db cb 7a 77 05 28 6a d3 5f 97 3b b9 88 74 81 a1 cf 0d 3d ef f4 fc b9 01 47 3b 47 7c c8 6f 0f b4 f3 a6 9f cb e1 ae ea 58 89 18 51 f6 c5 56 92 0c fa 58 63 63 65 e6 14 84 f2 19 df f7 a4 c3 a5 c7 b9 0d e8 30 a9 5c 6b 30 a4 db 60 bc c5 57 32 52 5a 74 2f 57 48 45 9e 09 ad da 37 16 f8 9f 0a 4c 54 87 2b 50 89 58 1e 8e 08 de d4 59 01 c6 6e 8b 52 f1 cb 9a c8 53 de e6 4b 78 ac 95 a2 5c 38 d8 a7 c4 6e 58 2b 5b 22 d4 d3 05 05 04 b8 bc ff 81 13 dc aa 79 41 16 2d 4f 25 d4 0d 7f 96 e2 3b 74 8d 83 e4 f7 24 71 d3 37 0d d4 07 7c 28 ef e6 25 e8 d0 4d 1e 9d 9c Data Ascii: -;UDRc3sW?E8O^G91'Od*zw(j_;t=G;G\|oXQVXcce0\k0`W2RZt/WHE7LT+PXYnRSKx\8nX+["yA-O%;t$q7\|(%M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	49918	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:08 UTC	614	OUT	GET /buyer/user/select-coupon HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:08 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:08 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:08 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:08 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 30 38 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:57:08"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	49915	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:08 UTC	706	OUT	GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-2f86" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:08 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:08 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-2f86" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367909 Expires: Sat, 25 May 2024 02:57:08 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e20c9c38f7e0-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	49916	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:08 UTC	999	OUT	GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591424791&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:08 UTC	147	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:08 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close
2024-05-24 22:57:08 UTC	81	IN	Data Raw: 34 36 0d 0a 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 64 68 41 51 41 42 41 50 41 41 41 4d 50 44 77 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 46data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	49920	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:09 UTC	703	OUT	GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-20a8" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:09 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:09 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-20a8" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 191754 Expires: Sat, 25 May 2024 02:57:09 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2110e946a79-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	49921	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:09 UTC	711	OUT	GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ee8-2905" If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
2024-05-24 22:57:09 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:09 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-2905" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 200931 Expires: Sat, 25 May 2024 02:57:09 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2111ba3f7cc-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	49922	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:09 UTC	627	OUT	GET /uploader/9d6698b796cb382a3cbf76e13f9ae4a0aa1a7746.webp HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:10 UTC	680	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:09 GMT Content-Type: image/jpeg Content-Length: 133944 Connection: close x-oss-request-id: 66511B452CAF363439748A4B ETag: "2046B6755B0FB646E46BFDE59F1CB18D" Last-Modified: Sat, 18 Nov 2023 03:59:48 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 10165031269358773816 x-oss-storage-class: Standard Content-Disposition: inline; filename="22134528c30b73b897c8d62e60ada2db49410847_221" Content-MD5: IEa2dVsPtkbka/3lnxyxjQ== x-oss-server-time: 81 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:09 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2116eb7f7f0-BNA
2024-05-24 22:57:10 UTC	689	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 38 63 00 00 e8 03 00 00 38 63 00 00 e8 03 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 b0 04 00 00 03 a0 04 00 01 00 00 00 b0 04 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(if8c8c02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 04 b0 04 b0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 08 09 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 25 9a 87 37 a7 d6 60 25 cb bd cb a1 cb a0 d3 de ae 7e ad b0 00 00 fc c8 e3 ec f3 9c f6 cf 9d e7 cf 49 39 d4 e9 a9 b6 e6 2c 2f d4 ad ce 77 3f 6e e9 e3 fb 3f bf 90 00 00 b0 fc 89 2c 2d 22 91 8a 92 49 05 08 a7 e8 21 f4 30 00 00 01 f9 72 6e 0d 81 a4 39 d3 54 46 31 13 0c c7 d7 07 d6 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3e 79 3f 3d 5a c9 8e bd 04 ef a5 d7 18 5a e3 59 76 b8 f4 4f 9d 34 b7 91 cb f4 cb 7c fd 5a c0 00 1f 00 f2 f4 f8 77 0f 76 59 bb f3 a9 97 73 52 51 99 46 4d 4c 97 17 39 fd 21 d7 c1 f5 27 6f 38 00 01 cb 1f 94 24 b2 c2 31 1c a9 9c 92 08 a7 d7 47 d9 e0 00 00 34 e7 e5 f1 d0 9b 93 4c 73 86 a0 8c 63 27 19 cf a1 4f b9 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 16 98 8c 06 Data Ascii: %7`%~I9,/w?n?,-"I!0rn9TF1>y?=ZZYvO4\|ZwvYsRQFML9!'o8$1G4Lsc'O@
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 57 36 b1 96 e3 dd 7b 78 3e c0 eb e5 00 00 07 e6 21 e7 71 4a 8c 61 28 49 33 94 22 1f a6 47 ad 00 00 00 e3 0f cd d3 ab 37 e7 3e 72 e6 88 8c 62 36 24 c3 ea 43 eb d0 00 00 f1 ec df 8e 3c be 8f 31 da 2f 4e 51 b5 33 63 5b 7e 1d fa 3e 7a dd 33 d6 cc fb 07 af 8f d4 5d f9 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 7e 48 65 66 9b fe b2 2a 69 b9 6a 14 63 ac 65 01 fa c8 75 20 00 0f 0a 3f 38 f2 91 cf be d1 e9 89 be 3a eb c6 ab d3 e3 e8 4e e7 be 5b af 8e 3f 5f 27 ea fc 9d 68 00 03 f3 97 8f b7 ca 39 7a b3 e7 72 27 49 24 c6 a5 99 14 c5 2b 36 99 58 f6 ae bf 3f ec ae de 40 00 00 7e 5e 9c 19 42 29 80 a1 28 cc 54 86 7e 92 9e ce 00 00 03 8f 3f 36 ce a8 df 9a 03 96 34 44 63 11 b1 26 1f 50 9f 60 00 00 07 9e 67 5f 0f 7c cf 67 9c fa 71 a9 f4 f0 c7 9b b0 e5 d3 a6 f2 fa 36 Data Ascii: W6{x>!qJa(I3"G7>rb6$C<1/NQ3c[~>z3](~Hef*ijceu ?8:N[?_'h9zr'I$+6X?@~^B)(T~?64Dc&P`g_\|gq6
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 05 0f c7 c8 db 6e 74 5d f3 1f 0d 17 3b af ce b0 16 16 95 8f d3 9a f5 30 00 07 cf 47 e7 a6 64 9c fa ba 19 ea d0 df 3c 3d 79 f2 37 bf e7 ed 9b 9e bc ff 00 4f 26 0e 9e 4f d5 36 7b 40 00 39 73 f2 ff 00 87 b7 0e 7b 4b 9d 73 4e b7 ac 84 9a 5e b6 a5 59 bb 4a b3 b1 70 fd 02 ef f3 fa dd 64 00 00 fc 80 2f 04 42 31 52 41 98 ba 22 9f 66 d7 d7 80 00 00 38 d3 f3 78 ea 4e 84 e7 ce 5c d0 11 cc 46 c4 94 7d 50 7d 74 00 00 1e 2b c7 a7 c5 fe 3f 57 09 ec e1 1a e2 26 a6 6c eb b0 f0 fa b7 d8 bb 2b 3a 4d 73 fa a7 db c3 d5 bb 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 3f 21 23 6b b9 d0 f6 c4 73 45 cb 5a fc 6b 09 8c b4 47 e9 bd 7a b0 00 03 e7 63 f3 e6 49 1c fd 7d 34 f6 73 db f2 c1 e9 e6 b9 d7 a6 e1 eb 93 9e bc f7 5f 2c 6d f8 ff 00 55 59 ed Data Ascii: nt];0Gd<=y7O&O6{@9s{KsN^YJpd/B1RA"f8xN\F}P}t+?W&l+:Mss`?!#ksEZkGzcI}4s_,mUY
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 0d f6 95 99 d5 cb ce a8 e8 cd b6 b3 64 6a 66 bd 94 fd 12 00 00 01 e1 87 e7 89 ed 64 d3 9a 38 c3 9d 05 c6 e0 9e 6d 8f d4 40 00 00 f8 ff 00 c5 e8 f0 df 8f f4 b6 ff 00 17 eb 62 ae 6b ea 63 5f e8 e3 b7 e7 e4 d8 5e 72 7a 67 6d d3 9f b0 7d 2f 1f d5 fe be 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 69 f9 15 e7 ef 5c ee d0 2c 17 17 cb 65 8d 67 f4 f7 bf 1f 49 40 00 1f 16 1f 1d 9b a3 e9 83 e6 26 e1 2d 59 f7 1c a2 47 91 18 ec fd 2f d4 f5 a0 00 3e 05 8f 11 9a e8 ba 37 17 32 f4 f1 2e 68 f1 52 85 4d bb 58 d2 32 63 37 ad 7e ba 32 00 03 81 3f 2f 8d ee 86 75 b5 ce 63 43 a2 67 6f d2 25 d5 65 ea 73 5f a4 00 00 00 3e 72 3e 0d 3d c0 c8 73 67 12 68 41 53 6e 6c c8 c7 eb 08 00 00 7c 55 e1 f4 f9 0f c8 fa 5b af 8b f5 21 f5 bc df d0 e7 07 d5 e7 9b 7c 73 9c f2 ee 6d 35 9f 54 Data Ascii: djfd8m@bkc_^rzgm}/ i\,egI@&-YG/>72.hRMX2c7~2?/ucCgo%es_>r>=sghASnl\|U[!\|sm5T
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 8b 2c 45 e4 73 19 15 88 da b6 82 80 a0 00 a0 06 40 5a 50 a9 9c e9 4e 4c a1 50 50 a1 50 54 a9 79 42 87 e8 b1 ef c0 14 3f 3f 0f 07 31 96 94 00 b8 a1 40 00 2a 4c 3f 47 0f 5a 07 04 7e 6a 1a 22 c2 80 a9 69 90 c8 48 27 46 cc e8 1a fb 4e cf 66 40 00 00 00 00 00 00 00 00 00 00 00 00 00 02 87 c0 67 cd 11 4a 00 00 00 00 54 fa 74 fb 58 fc e3 8f 2e a8 e5 0a 00 00 00 1b 13 d1 63 91 ba c9 1b 06 64 da 39 d8 d7 49 13 4b 0b 4a 14 05 40 28 0c 85 4a 16 96 82 f2 4b 59 59 b0 c4 60 28 50 02 e3 21 2c c8 5e 75 a7 dd e7 b2 03 e1 73 e6 e3 11 61 42 80 15 05 00 00 a8 36 47 e9 11 b9 3f 38 0e 44 c2 5a 50 17 16 97 19 4c e4 b8 db 35 b8 e6 e9 f6 fb 23 53 d5 50 00 00 00 00 00 00 00 00 00 00 00 00 00 28 7c 6e 7c 68 50 00 00 00 00 01 38 ec b2 e1 f4 8c 50 a0 00 00 00 3d 66 38 8b a9 e6 d6 cd Data Ascii: ,Es@ZPNLPPPTyB??1@*L?GZ~j"iH'FNf@gJTtX.cd9IKJ@(JKYY`(P!,^usaB6G?8DZPL5#SP(\|n\|hP8P=f8
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: f3 3b 69 9a 92 64 bb 3a f9 df 8e b0 e4 00 00 54 a9 b3 37 ba d6 ea e7 19 aa 20 c4 43 0e 56 02 52 c2 48 45 00 06 5b 3b 3e 98 d8 5c e5 66 5c b7 59 6d 91 d5 1a 9c 76 e1 f1 a0 3d 00 e8 0d 79 a9 39 80 00 00 bc 96 4d 26 92 48 a7 32 54 c4 45 d0 00 2a 67 cb 67 2e e3 8d 94 49 8c 84 82 41 b0 d3 71 bb f4 66 f3 f4 12 00 00 00 00 00 00 00 00 00 01 c8 9f 93 25 00 00 a9 52 85 00 00 02 a6 e6 35 44 7a a9 b8 d3 d1 4e 80 df dd 77 27 66 7c fe cf 80 44 5c 80 02 51 b3 9a 90 ce db 6d 8d 4b 27 ef 3b 1d 27 12 62 fa f9 df 8e a3 64 00 00 54 a9 b4 3a 2d 36 d5 8c d6 cd 6b 52 3a 47 ca d2 84 85 84 41 40 00 b9 3b 0e 98 e9 6e 30 6e 4a 93 26 54 4c 3b b1 5a 99 7a 79 4f 9b 74 07 52 76 c6 bc d3 1c d9 50 00 05 49 64 b2 71 34 1c b1 1c a1 0b 40 18 34 17 c4 e3 7b c7 5b 58 cf 17 d6 42 49 36 b6 db Data Ascii: ;id:T7 CVRHE[;>\f\Ymv=y9M&H2TE*gg.IAqf%R5DzNw'f\|D\QmK';'bdT:-6kR:GA@;n0nJ&TL;ZzyOtRvPIdq4@4{[XBI6
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: d3 20 00 00 00 00 00 00 00 00 00 7c be 7c 16 50 00 0a 95 00 b4 00 01 71 ef 99 7b fe 57 1c e1 d2 b5 bc 37 f5 92 b9 a3 60 57 0d 41 8c c6 5e 49 89 a6 aa df 80 fa e6 75 6d 2c d9 d9 b1 d4 d9 74 6c 09 c4 a3 3e 9f 37 f9 b5 03 20 00 02 a5 c6 c0 ea b4 db dc d8 6b 65 80 b1 08 eb 87 32 d3 3a eb d2 18 00 03 69 67 57 d7 9e 12 86 58 b9 9c 57 58 1a 95 5c 6f 1d c6 81 90 e8 8c 45 85 a6 22 85 00 00 15 2f 32 1b a2 11 a8 2e 23 18 c1 52 80 a9 24 f5 7f 0f ab d0 b1 37 d9 bb 79 36 49 b6 ad e6 f3 d2 75 c4 1f 44 f5 cd e4 00 00 00 00 00 00 00 00 00 0f 9a 0f 80 81 40 01 52 a0 b8 b4 a1 40 01 71 ed 38 7a 54 7a 1c 78 b4 d7 bf d7 20 4e 3a cd 2d 34 c4 3e 6e 4e 2c 3a d8 c7 10 cc 16 e8 4f 94 bd 38 df b5 3e d9 f7 13 f7 36 5d 5b 02 7c 92 ec 92 d7 cd be 7b 03 20 00 00 5c 6c 2b ab ad be f3 4c Data Ascii: \|\|Pq{W7`WA^Ium,tl>7 ke2:igWXWX\oE"/2.#R$7y6IuD@R@q8zTzx N:-4>nN,:O8>6][\|{ \l+L
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 8c e5 eb 89 33 95 32 18 0c d5 7d b8 e4 5b 52 a5 0b 0b 0f 38 9d 75 99 e7 e9 1f 3b a5 4b 62 ed dc ba ce 49 72 74 97 4b 96 e7 2e 8a ac cd e5 da b6 61 77 45 9c f5 83 9d e6 74 fc f4 fd 1f 87 79 e7 df a7 fc cd f8 67 db e1 33 9e bd 4b e5 7a bc 97 eb 71 f4 bf 97 bf 2f fa fe 5d cf 9b 7b cf 37 a2 47 17 53 cd e4 bf 63 cf 0f be 77 26 bc d6 95 21 55 71 af 51 fc ef d2 e3 3e b7 8f 9f f6 f9 fd eb f1 ff 00 63 c6 3f 53 f3 63 f7 e5 e9 7e 3f 47 b7 78 3a 7a 6f 8b 7d 87 3b 07 79 e3 7e a7 1d e7 7c 74 1d 31 aa f4 4f 68 de 40 00 00 00 00 00 00 00 00 00 f1 03 f3 f3 e9 70 dd 7a b8 ec 3a 73 9e e7 9c bf 95 93 cd 4c 74 b3 3a c3 cb 76 61 1f 8e ad 8b 37 bc 33 76 6b 31 ba 4f 4a e1 d7 d7 7c bd 23 9b 42 31 bd 36 a6 a3 72 79 c6 9d c9 a4 cd e0 6f 4b f3 8e 7b 2f 61 3b d3 99 d3 e5 69 7d 03 cb Data Ascii: 32}[R8u;KbIrtK.awEtyg3Kzq/]{7GScw&!UqQ>c?Sc~?Gx:zo};y~\|t1Oh@pz:sLt:va73vk1OJ\|#B16ryoK{/a;i}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	49923	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:09 UTC	618	OUT	GET /uploader/055002e1d0286662d2639006df99f438.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:10 UTC	561	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:09 GMT Content-Type: image/jpeg Content-Length: 197919 Connection: close x-oss-request-id: 66511B45D561043631283740 ETag: "7AF130058A9E0139D5494E8D3E127571-1" Last-Modified: Sat, 05 Aug 2023 08:00:35 GMT x-oss-object-type: Multipart x-oss-hash-crc64ecma: 11792119783580296412 x-oss-storage-class: Standard x-oss-server-time: 119 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:09 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2117a636a7a-BNA
2024-05-24 22:57:10 UTC	808	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 d2 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCC
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: f1 0c 30 47 04 38 06 e6 58 60 8f ec d0 33 dd 4c 8d 05 bc 8d 1f e8 59 56 55 1e 47 53 5b be ba d9 5e fa 5d 36 b5 b5 df 47 e5 ab 3e 7e 56 8b 77 7b 75 f5 31 97 e2 af c5 27 ce 3e 2a 7c 55 f9 70 92 7f c5 cf f1 e7 c9 38 cf 9b 0f fc 8c 03 3e 5e 50 ee e0 fc fe 5c 8b 14 f1 cd 0c 57 5b 28 e4 a8 d4 e3 24 db 6f de 56 eb e6 b6 ed e5 6d c8 75 20 b7 7f 83 ff 00 22 94 df 15 fe 29 71 e6 7c 50 f8 b6 b3 44 09 9e 38 fe 26 78 f5 d1 17 04 ab 47 27 fc 24 51 89 56 60 59 6d d8 a2 79 d3 5b de c5 85 16 bb e4 98 e5 51 7a 28 a7 eb 67 f2 d1 7e 03 e7 8f 7f c1 ff 00 91 5e 7f 8b 3f 14 9d 23 2b f1 47 e2 b1 c6 4a 93 f1 47 c7 99 39 05 ce 00 f1 01 24 22 82 b2 9c e2 39 52 58 fe 61 19 63 35 f2 7f dd c9 f2 db 55 b2 ed f6 76 eb d5 77 1a af 18 7d b4 ad ad ba db f3 d4 a0 ff 00 14 7e 29 4e 40 ff 00 Data Ascii: 0G8X`3LYVUGS[^]6G>~Vw{u1'>*\|Up8>^P\W[($oVmu ")q\|PD8&xG'$QV`Ymy[Qz(g~^?#+GJG9$"9RXac5Uvw}~)N@
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: d3 ce fb 0e b8 f8 cf f1 79 71 9f 8b 5f 16 b1 c2 86 5f 8a bf 11 c1 32 9c 6d 8c aa 78 9c 45 19 60 46 1a 38 8b 2f 0f 22 ac 41 e5 52 fa 74 df 44 d6 9e 6d 7c d6 aa d6 bf 4e 80 bd 35 77 4b 6f c9 ae fd 6e bc b6 01 f1 9f e2 f8 c8 3f 15 fe 2b 83 9c 15 5f 8b 1f 12 90 12 33 b9 a4 f2 7c 5a 82 49 7f bf 2b 95 0e 01 58 c1 90 a4 6f 9d 47 b5 b5 d6 5b ab de f6 d6 cd 59 5e da 2d d6 a0 d5 ad ab 77 5f 77 91 21 f8 d5 f1 99 39 87 e3 1f c5 fb 7f bf bf c9 f8 af f1 1a 20 de 64 13 5a 9d db 3c 4e a4 ff 00 a3 dc 4e 8b b8 2e 77 33 0f 3a fa 6c 5d 71 d7 8f 35 29 79 45 fe 36 ff 00 2d 8d f0 fa 4e fe 9b 6f b3 d3 75 bf e7 6b 6a cf d9 1f f8 35 8b e2 cf c5 4f 16 7f c1 58 fe 29 78 63 c5 5f 13 be 24 f8 b7 41 ba fd 94 3e 31 ea f3 69 1e 31 f8 83 e2 7f 16 e9 63 50 d2 be 2a 7c 20 82 c2 68 2c 75 ed Data Ascii: yq__2mxE`F8/"ARtDm\|N5wKon?+_3\|ZI+XoG[Y^-w_w!9 dZ<NN.w3:l]q5)yE6-Noukj5OX)xc_$A>1i1cP*\| h,u
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: a3 0f 94 ab 87 91 90 ee dd 6c e4 38 03 49 c0 e4 8e 07 52 3a 9c 0e ca 30 31 8c 61 00 dd 8d ee 1e 56 77 60 0a 6f 92 c4 12 46 d1 f7 70 a0 72 07 56 51 e6 7c ca d8 f9 5f 6c 61 f0 c1 2e 50 88 c0 21 96 5d fb 41 50 bb 33 90 1b 38 07 e6 c6 e6 39 3b b3 bc 99 19 b6 96 da a5 62 54 55 00 ae c4 9c b8 1f bb c6 63 94 ee 1c 67 12 31 8e 4f dd 90 91 f9 8b b3 69 9a 52 37 2a 49 69 27 ce 01 5d a5 01 8a 91 c7 1b 58 2e 37 02 06 d2 42 8e a5 42 f0 aa 31 8d a1 46 00 1b 51 76 e6 d3 7b 5b d5 5f fc c0 62 cf 10 13 34 e7 cb 86 08 9e 79 df 82 16 38 c0 2d df 6b 36 08 70 01 21 03 04 93 6c aa e8 bd 11 f7 f7 4a fa 5b 4b af 3b f5 d3 cb f2 dc fb ed eb fd 75 fe ba 98 ff 00 67 95 3e 4b a1 6c 97 00 85 68 a0 94 4e 08 50 7e 77 7d 91 99 26 60 fb 27 91 a3 42 b2 87 b6 8d 12 de de 18 e3 cb f0 e8 fe 5d Data Ascii: l8IR:01aVw`oFprVQ\|_la.P!]AP389;bTUcg1OiR7*Ii']X.7BB1FQv{[_b4y8-k6p!lJ[K;ug>KlhNP~w}&`'B]
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 1f 78 43 58 92 64 f0 f7 8c b4 39 2f 91 6f d2 2b eb 88 df 44 d6 74 4d 4e 71 ab 78 57 c5 5a 56 bd e1 6d 5a 37 f1 1e 99 76 75 2f 12 96 63 0b aa 57 77 8b 71 49 25 7d 1d ae f7 b2 b6 ed f5 b2 df 43 aa 50 72 6e 51 8b 71 7a dd 76 d1 77 6f 4d 6f a6 9d ac 70 ac 7a 7c db b8 f4 db d7 18 f7 e7 f3 15 dc a6 e6 93 7b 74 db fc 90 e2 ad 7f 76 df 3b dc 82 45 00 82 08 24 82 43 f4 24 0f 55 19 38 39 dd c1 7d 9b bc 81 e4 98 45 a5 b5 f6 4f 6d 9a fd 6f b5 de e9 df cb 62 62 b7 7d 77 ef f2 7d fc fe 5b 3d 98 00 39 dd 80 00 05 89 20 ed 1d 46 55 4f 98 e7 a3 66 25 71 1e 76 c8 63 95 5d 14 b3 e9 7d 3b ec df 96 eb 55 6f 5e 97 d0 7c cb 5b a7 f2 5d 17 5e 8f 47 7b 3d 3e fb 88 ec ff 00 7a 17 51 19 04 19 01 5f de 90 72 9f 26 44 91 79 68 11 f2 16 31 33 47 82 66 f3 f1 32 eb 65 7f c1 f6 bd bf 1e Data Ascii: xCXd9/o+DtMNqxWZVmZ7vu/cWwqI%}CPrnQqzvwoMopz\|{tv;E$C$U89}EOmobb}w}[=9 FUOf%qvc]};Uo^\|[]^G{=>zQ_r&Dyh13Gf2e
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 99 6c 23 4d 62 d6 ea e2 28 21 fd a0 74 0b 38 e4 58 5e db 54 d4 6f 22 b0 f8 e3 6f 65 6b 67 67 e1 7f 1d 5f 69 5e 36 d9 6f e1 4f 1a ea 36 de 02 f9 5c 92 55 78 7a ac 94 ee 92 a9 25 ef b6 93 f7 dd 9b 6f 4f e9 eb b5 fb a5 4d 66 34 db 71 d5 25 d1 3b da d6 d3 4e ca dd b4 5a ea cf 0a 24 89 b6 ef 8e 1b 80 99 86 f0 73 0d c5 83 7f a2 5c 25 c0 de 1b cc bb 81 ac ec af f9 7f b4 4c 4d e1 28 5c 43 5f b4 64 d8 f5 8a c3 ba c9 a9 3a 8b de 82 97 a3 4e c9 e9 7e b7 56 6d 68 af bf 85 89 c3 fb 28 49 24 e3 cb 7b a7 7d 2c ef e7 ef 5d 79 6e fc 87 4d 33 98 3e d0 9b 4a 6a 32 c1 0d cc 64 ec 16 ad 6d 34 73 dc c9 34 a3 38 be 83 6c 50 dc 03 e5 0b ad 26 7b 45 02 e2 5b c8 6e 6f ba 67 29 4e 6e 51 56 7d 17 6f 5f ea c7 93 27 17 29 73 a6 a3 74 9d da ec bb db b6 aa cd ec f7 48 a3 e5 c2 64 96 05 Data Ascii: l#Mb(!t8X^To"oekgg_i^6oO6\Uxz%oOMf4q%;NZ$s\%LM(\C_d:N~Vmh(I${},]ynM3>Jj2dm4s48lP&{E[nog)NnQV}o_')stHd
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 45 91 48 97 09 b3 cd 4e 59 b6 a7 34 9f 64 ec af 77 15 6d 37 76 de cf cd 5c d2 9f da f9 7e a3 03 ed ce 54 7c c3 0f 1e e1 bd 78 df 18 62 0e 31 e6 08 e5 52 ac 70 bf 24 85 64 12 20 d5 e9 e5 af 9d d3 b2 76 b5 d6 97 eb bf 9f 7d 0a db f6 e7 70 00 10 59 98 9e 1c 2f cd b1 15 48 95 65 8f 69 65 08 b1 8b 91 09 62 6e 3e d0 4d c2 fb b6 db b7 9f 6f c7 4b f4 b6 81 28 f9 b3 cf cd b4 17 05 4a b1 04 07 8c b2 10 ad 16 d8 bc b6 c6 d8 8c bb 77 48 26 8e 59 1e 57 f7 6d d3 5e f7 7f 77 57 f2 d2 cd 04 24 75 20 80 70 7e 6d a0 e3 70 c1 3b 70 43 6e 07 6e 19 58 00 db e3 0b 28 8d d6 40 a4 ec 40 2a 09 19 19 63 93 98 62 23 e6 93 77 2c fb c7 fa b2 3c c2 b3 49 1d b7 c9 b7 c9 8a 92 6f 54 af 65 d3 f5 ee fa b5 bf 4d 3a 01 e6 88 a2 8d 02 aa aa 92 55 8f c8 b2 63 62 79 8d 13 15 90 4a b0 79 b3 3b Data Ascii: EHNY4dwm7v\~T\|xb1Rp$d v}pY/Heiebn>MoK(JwH&YWm^wW$u p~mp;pCnnX(@@*cb#w,<IoTeM:UcbyJy;
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 1c 79 c5 5f 08 41 11 60 45 0b 8b 75 86 0b 7f a4 a7 28 d4 82 94 67 19 45 a8 ca 4e 36 69 73 24 ed a6 ed 5d 2f bf 45 ef 5b cd a9 0f 65 a3 4d 24 da d5 35 d7 d2 ef 5b a4 fa da eb 42 26 38 29 df 06 41 b7 38 07 74 4e 84 39 e0 a8 e7 e4 2a 41 79 42 44 f9 89 dd 4e d2 dd 69 7d ba ef 7b db f1 b6 b7 f2 ea ee bf 0d ff 00 4d fb 79 77 7a 7a 42 db b8 0a 0f 20 63 e6 89 7c c0 00 47 18 91 94 45 e5 c4 ac 9b a2 10 c9 27 94 76 99 84 ff 00 bf cf d3 6f 3e bf 25 f9 fa eb d0 2f e7 e9 f3 d3 5f 97 e8 9b b2 b2 4f 2e 3e a6 5d a5 49 55 f9 1a 4c 92 0a 6c 65 50 cd ce 72 a5 80 48 64 db 2c cc b1 23 90 f9 7c d7 5d 3a fd d7 f9 bb da dd 41 5b 5b f6 b2 ff 00 3f f2 fd 0a d3 80 42 11 f7 32 a5 18 61 b6 8e 37 1d cb b9 64 f3 24 24 2b 0f 34 41 e6 06 4f 25 60 53 04 fa 6d d0 6f 47 d1 69 ff 00 01 ed a3 Data Ascii: y_A`Eu(gEN6is$]/E[eM$5[B&8)A8tN9*AyBDNi}{MywzzB c\|GE'vo>%/_O.>]IULlePrHd,#\|]:A[[?B2a7d$$+4AO%`SmoGi
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: d6 7a f7 c3 9f 14 4d 61 70 2c 35 bb 73 a3 ea 32 cd e1 9d 7b c4 1a 1e b5 f9 7f 1d f0 fb 5f f0 b1 93 26 f9 55 ea 46 3d d7 bb 2e fa 68 de 97 b3 5b 23 ea 32 3c d2 9d 49 2a 55 22 af 2b c5 73 34 da bf 5b 3f 5e ca c9 de f6 df 13 c7 3e 0b 9b c1 5a c5 84 31 5f c7 e2 2f 0e 6b da 55 a7 8a 7c 11 e2 bb 6b 2b ab 0d 3b c7 de 02 bb bc d4 22 d1 35 bb 4b 6b 90 d2 69 5a 9d ad c5 ad f6 83 e2 1d 0a f5 d9 fc 2b e3 9d 27 59 f0 7e a9 79 7b 61 0c 5a b6 b2 70 37 10 73 27 46 bc fd e5 ee b8 ce 56 9a 6a fa 5a 4d 3b 2b eb f7 e8 95 8a cf 32 45 6f 6b 4d da 2d 37 64 b4 d5 5f a5 ae af e9 f8 5d 70 f1 a5 b4 48 b1 ce 1a 7b 19 ee 63 9e 1b c5 24 2c 33 ae 4c cd 2a 1c fd 9a d0 b1 5b 69 d4 bc df d9 9a bc b2 05 91 60 96 2b ad 1f f4 d7 2a 4e 0e ab 7f ed 32 ff 00 75 97 4d 6d cd 6b 69 b7 fc 0d 4f 87 Data Ascii: zMap,5s2{_&UF=.h[#2<IU"+s4[?^>Z1_/kU\|k+;"5KkiZ+'Y~y{aZp7s'FVjZM;+2EokM-7d_]pH{c$,3L[i`+*N2uMmkiO
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: d9 ff 00 7b f0 ff 00 82 07 8c 0e 84 f4 04 e3 3f 4c 90 4f d7 3f 8f 7a e8 eb b6 fd f4 5f f0 de 77 f9 9a 15 a7 c9 da 41 03 69 05 19 49 5d cc 08 12 a3 95 64 65 8c 37 98 85 55 e2 32 10 1d 8c 91 48 5e 57 75 a5 fa 2e 8f ef 4d ad 2d be dd f5 d5 b0 29 ca 33 8f 98 b9 97 01 54 8f f6 84 62 35 31 0f 25 f6 b1 58 87 96 5a 59 08 5f 34 bc cc cc d7 1a 4e a3 e5 d2 dd 5d b6 f3 7b 36 9b 5a 3b db d3 62 65 f0 bf 97 e6 8b 10 a4 7b 09 36 d8 b8 93 68 26 74 ff 00 48 86 24 25 24 8d 49 0e a3 ce b6 8f cd 59 61 1e 74 31 bc 71 3b c4 62 b8 11 f6 da 38 38 3d 54 af 7d 2f ab f9 7f 5a 6f ad db c1 37 79 76 56 b7 dd a8 8b 18 50 04 6c 16 11 c4 7c e4 28 ee 0b e4 e7 24 e4 9c 9e e7 24 9a f3 a5 2e 76 e4 ba bd bb 74 b6 bd 8d a0 db bd df 6f d4 6b a9 39 05 89 20 7d e1 f3 c5 27 7d aa 49 f9 31 f7 8c 8b Data Ascii: {?LO?z_wAiI]de7U2H^Wu.M-)3Tb51%XZY_4N]{6Z;be{6h&tH$%$IYat1q;b88=T}/Zo7yvVPl\|($$.vtok9 }'}I1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	49924	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:09 UTC	468	OUT	GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-1516" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:09 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:09 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-1516" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183476 Expires: Sat, 25 May 2024 02:57:09 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e211fa6cf7f4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	49926	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:09 UTC	466	OUT	GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-e1e" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:09 UTC	609	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:09 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-e1e" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183476 Expires: Sat, 25 May 2024 02:57:09 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2120fcbf7c4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	49927	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:09 UTC	472	OUT	GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-2f86" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:09 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:09 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-2f86" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367910 Expires: Sat, 25 May 2024 02:57:09 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2123bc9f7f8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	49925	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:09 UTC	392	OUT	GET /uploader/2bab95b957e11a3d1c75b9df75049153b2a3b998.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:09 UTC	686	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:09 GMT Content-Type: image/webp Content-Length: 26936 Connection: close x-oss-request-id: 66511B44342C483734CC0F00 ETag: "59987FD93CFADCCE44F3620C9F10C233" Last-Modified: Wed, 06 Sep 2023 10:13:39 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 18120288386503278278 x-oss-storage-class: Standard Content-Disposition: inline; filename="221d0b7a82bbf7a11c3fb8f5a0c8b6914e285882_221" Content-MD5: WZh/2Tz63M5E82IMnxDCMw== x-oss-server-time: 94 CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:09 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2123f91f7dc-BNA
2024-05-24 22:57:09 UTC	683	IN	Data Raw: 52 49 46 46 30 69 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 38 00 00 00 cf 02 00 cf 02 00 49 43 43 50 a8 01 00 00 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 5f 63 70 72 74 00 00 01 4c 00 00 00 0c 77 74 70 74 00 00 01 58 00 00 00 14 72 58 59 5a 00 00 01 6c 00 00 00 14 67 58 59 5a 00 00 01 80 00 00 00 14 62 58 59 5a 00 00 01 94 00 00 00 14 72 54 52 43 00 00 01 0c 00 00 00 40 67 Data Ascii: RIFF0iWEBPVP8X8ICCPlcmsmntrRGB XYZ )9acspAPPL-lcmsdesc_cprtLwtptXrXYZlgXYZbXYZrTRC@g
2024-05-24 22:57:09 UTC	1369	IN	Data Raw: 7b 2f 51 d5 b6 52 e3 4a 27 22 26 80 72 24 49 8e 24 c9 a2 77 f9 a7 14 5c 77 17 4a 18 71 80 03 93 7b 44 c4 04 c8 a5 d2 00 ef 7d 60 ff fe a7 3e f4 c8 d3 1e 73 df 7e 57 1a c0 90 a1 2d 2f 9c ff d7 bf 3f f3 df ff f4 df 47 e7 ce 1c 03 85 4d 30 9b c6 de 33 1e f7 e0 53 9f f5 82 fb fa 52 99 8c 40 64 6d 92 ac 2e fd f5 9f fd ed bf fc cf 5f fd 4f b5 92 29 4f 7c c3 13 9f f2 f2 27 b1 3e 53 c6 60 d6 c9 fa f3 bf f3 47 9f 71 c9 c1 b4 f7 35 ef 7c 76 07 09 e0 68 5a d6 67 62 32 a3 82 6f fb a9 6f 3a 83 52 e9 13 5f a0 0d a8 a3 b8 ee 9a c6 09 92 e9 f9 cf f9 b4 e2 54 7a 3b cb be c0 20 c8 f5 8f 81 72 c4 3b 6d a1 44 32 6f 7f 35 1d 46 e4 c6 8d 74 be f1 91 72 22 65 ef 73 0f 0c 5d 90 1b 5c 32 5f 74 9e 92 47 d5 de fb 72 2a dc f8 b6 bc f0 ee d4 3c 82 27 dd 3e 14 de 78 02 f3 d6 33 24 f2 Data Ascii: {/QRJ'"&r$I$w\wJq{D}`>s~W-/?GM03SR@dm._O)O\|'>S`Gq5\|vhZgb2oo:R_Tz; r;mD2o5Ftr"es]\2_tGr*<'>x3$
2024-05-24 22:57:09 UTC	1369	IN	Data Raw: 66 36 cf 22 d8 59 51 49 a0 6e 56 fa 51 94 09 2b 82 16 f3 61 40 09 b4 47 e6 42 98 85 04 da 67 56 77 70 f8 18 ee 02 e7 c2 2e df fc 4d 38 7b c4 c3 0f 43 66 e4 77 be 72 aa e8 b1 5e fe b4 47 90 19 79 c9 27 bc 4a 8e 9e f2 07 cf 7c 74 e6 03 ca c1 47 fe 6f f6 54 be ef b5 d5 70 2e 6c f8 9e 3f 24 7a 54 bf f5 75 c8 8c 5a ff f2 65 47 0a 1e 97 bf f8 86 c7 b6 59 a1 3c f8 ca 57 cb c1 c3 8f ff 29 e0 7c d8 95 df fa 51 72 c7 e5 e5 df 42 24 33 22 77 af fd ce aa dc e1 37 fe 5c 01 e7 03 30 7f fc 5b 38 74 ac d7 7d 3f 45 99 57 97 a3 9f 3e e8 42 07 7e f3 df b1 71 56 ac aa 7f f9 1d 1c 3a 2f f8 23 70 98 57 63 f8 c7 57 e3 c0 b1 f8 4b 17 84 f3 f2 70 e1 df ef 11 b9 af 78 15 06 99 59 23 eb ee 8b f3 46 66 c4 c3 66 9e 35 8a 1b 58 1f 3f c1 f1 bd 08 ca 19 c1 e6 e5 45 40 c7 59 ff cc 0d aa Data Ascii: f6"YQInVQ+a@GBgVwp.M8{Cfwr^Gy'J\|tGoTp.l?$zTuZeGY<W)\|QrB$3"w7\0[8t}?EW>B~qV:/#pWcWKpxY#Fff5X?E@Y
2024-05-24 22:57:09 UTC	1369	IN	Data Raw: aa c8 b7 20 1e a6 60 37 3f ac e6 6a bc fd 90 d3 d5 fc d8 a1 e8 4f 57 95 76 80 fe a0 4c e5 f2 43 25 aa 77 f3 03 c7 55 4e 3d 04 c3 55 a5 1e 60 89 2a d8 53 0f c1 11 45 31 06 25 07 58 a6 60 6c fc 38 80 f2 d4 52 12 e1 e9 6b 88 46 50 96 82 6f 49 42 74 33 c4 d5 45 05 b7 21 c6 40 54 fd 42 90 73 8a 22 4f 3f 14 ef 8b f2 44 fa 01 5e 2f 44 57 33 44 6e 53 a9 88 7d 4c d5 20 fc b0 a6 29 16 82 5c cb 54 36 43 ec 63 aa 04 51 64 52 a2 ba 1f 60 2d 34 17 79 1a 62 7a 2a 18 87 21 96 27 e0 69 86 98 5d 53 c0 98 82 08 9e 9a 0a 8e a5 88 97 26 e0 6b 08 68 a6 5a 29 e2 4d 78 ba 36 65 88 d2 14 fc 35 f1 63 d1 53 13 7c b7 20 e0 9a 78 4e 14 79 ef 94 a6 91 8a b8 26 9e 1f 47 e4 11 35 4b 11 6b 9b 42 91 3d 45 35 47 ac ad 2a 0c 71 8e a8 81 22 c7 16 75 13 86 98 29 a9 88 fd 46 91 73 53 8a 80 75 Data Ascii: `7?jOWvLC%wUN=U`SE1%X`l8RkFPoIBt3E!@TBs"O?D^/DW3DnS}L )\T6CcQdR`-4ybz!'i]S&khZ)Mx6e5cS\| xNy&G5KkB=E5G*q"u)FsSu
2024-05-24 22:57:09 UTC	1369	IN	Data Raw: 1a d6 a8 63 25 9b 35 5a a3 a4 3c d6 18 0d ab 65 0d c2 4a 6d 67 14 67 6b 19 84 31 a0 35 2d 1b 69 ce 61 85 b2 46 84 95 5a d6 a8 63 25 bb 35 d6 74 52 90 d6 38 e5 04 4a 1b 68 c9 6e 8d bd ad d4 b4 46 a6 15 d2 1a 55 94 93 1c d6 f0 9a b7 35 f6 b6 52 d3 19 c5 4e 2d 58 b3 8e 92 82 d9 ad 41 28 09 e8 8f 35 d6 54 52 b0 d3 1a 99 4a 02 b2 ac 51 a5 a4 a0 a5 35 bc 5e da d8 69 a5 b0 66 4d 2b 69 8d 40 cb b5 29 65 c0 37 2b 4f 61 cd b2 22 ce 6e 25 4b 1a 41 b3 b2 d0 66 01 65 a4 a5 36 fe 37 7c 84 39 12 28 1f ea 9c 48 fd 11 da 18 84 93 51 da d0 fa a4 36 be 59 59 a5 8d b4 22 ce 65 a5 c4 51 e1 24 bd 71 0a a7 ab b4 f1 2d ac a0 cd 53 52 5e de 98 19 4e ca 1a c5 58 38 4d 6b c0 29 29 cb 1b df be 49 49 6f 54 49 11 e7 39 52 c2 1b 69 a5 bc 31 f3 d3 ec 14 a5 64 7b e3 c7 77 42 89 cf c3 1b Data Ascii: c%5Z<eJmggk15-iaFZc%5tR8JhnFU5RN-XA(5TRJQ5^ifM+i@)e7+Oa"n%KAfe67\|9(HQ6YY"eQ$q-SR^NX8Mk))IIoTI9Ri1d{wB
2024-05-24 22:57:09 UTC	1369	IN	Data Raw: 5f 2d 87 86 79 ea e3 7f fb 62 2f 68 ac 58 82 71 e7 ee bd c3 ff 5f dc 71 f9 f0 8e c5 ce fe 70 72 72 92 0e 0b 2d 4a 14 05 a7 0a 40 99 54 90 d3 06 92 29 68 23 76 7a a8 e3 b3 fb 77 ff df ce 1e c7 87 11 6c b0 c1 96 f1 4b df f4 3d 7e 58 c4 e6 1b fe ea 5f 5b 47 2c 52 a2 4a 09 c9 e2 ee dd 93 56 07 f9 df 76 3b 3b f7 74 c7 c3 6a 15 35 44 95 92 12 15 14 d0 51 46 19 65 4a d6 8b 8b 82 78 7c 74 74 f4 d0 de c5 be 63 b8 9c 82 50 c1 c6 c6 60 73 eb c1 db cd 1c a4 46 0e 9e fb 9b 07 1d a0 50 28 ae 2d 06 ea 60 3f 6d 67 77 71 78 a6 bf a3 2d 77 ef da 1d 96 a1 45 4a 5a a3 45 51 28 80 1a 09 55 aa 38 05 56 d1 08 c4 d5 e1 e0 71 bb 7b 77 68 b5 24 87 8d a2 85 60 3f 09 36 e0 5b 97 76 5e 20 67 06 b7 e5 6c f5 a0 a0 14 4a a1 85 96 b6 54 b7 db b7 6e 7f 67 af 2e 5c cc de de b0 f4 f6 fd 4a Data Ascii: _-yb/hXq_qprr-J@T)h#vzwlK=~X_[G,RJVv;;tj5DQFeJx\|ttcP`sFP(-`?mgwqx-wEJZEQ(U8Vq{wh$`?6[v^ glJTng.\J
2024-05-24 22:57:09 UTC	1369	IN	Data Raw: 9a c1 86 fe 26 b0 e0 be da 5a 7c 15 17 53 23 29 0d f4 50 21 be ca fb 0d 01 c7 29 c2 1a 10 bf 89 5b 68 54 76 a1 d4 ca 86 42 02 54 3a 99 50 c8 40 4a 87 53 2a 10 f2 7b 45 70 7e ad ba 12 61 de 4d 1a 99 a6 26 16 df c2 f7 08 04 0e ec 92 91 e9 22 49 64 83 19 ad 83 a7 a8 f2 a1 d4 ca 86 42 02 54 3a 99 50 c8 40 4a 87 53 2a 18 6b d4 02 0c 83 9e b6 47 ff 09 8d 1f 55 5e e5 ab e6 14 d0 af 5f a7 61 4c e6 e1 17 3c 4d 0f d3 5f 06 2d d7 44 55 6b dd e2 9e 58 f1 7a ce 3b 43 8e 10 12 a1 d4 ca 86 42 02 54 3a 99 50 c8 40 4a 33 6c 04 e3 63 bc 9a 3c 5d f4 40 e6 40 9b 90 79 65 dd 43 d6 5f e6 c0 77 1f 1f 8e ab 05 98 22 48 97 a7 b2 15 79 20 8f 38 15 17 1b 7a 0a f1 3b 27 57 fd 20 f6 f6 eb 6d 04 48 50 da e3 b2 19 e3 82 7c b0 21 f9 d4 a8 75 32 a1 90 80 95 0e a6 54 32 10 12 a1 bb ff cd Data Ascii: &Z\|S#)P!)[hTvBT:P@JS{Ep~aM&"IdBT:P@JSkGU^_aL<M_-DUkXz;CBT:P@J3lc<]@@yeC_w"Hy 8z;'W mHP\|!u2T2
2024-05-24 22:57:09 UTC	1369	IN	Data Raw: 16 44 02 36 42 0e d2 de e3 39 b6 22 88 42 60 0c 89 4a 19 08 09 50 ea 65 43 21 01 2a 1d 4c a8 64 1d 82 a6 a7 d8 fb bb fd 12 ab a8 4c 5c 45 29 37 f4 e1 64 a4 e5 ef f8 d3 2d 86 2b a5 14 ab 73 fe 21 0b d3 b1 56 63 17 15 23 54 b0 f9 06 8d de 3e c2 9b 0f 4a 0f 2d 15 07 71 58 30 df c4 97 b8 2f b6 96 9f 05 45 b8 24 07 8d fb 19 76 99 f4 d4 b4 a5 4c 34 1a 82 da 72 74 58 04 27 7a 0b 56 51 e8 b4 ba 74 94 99 6d cf 9a 84 73 60 e4 92 8c 9c 13 a0 fe 48 81 27 c4 97 24 ad 63 87 7a 44 09 3e 24 b9 25 6b 44 da 5a 7c 15 17 53 2a 0f 76 cb 47 41 71 4d a9 8f 57 0c f0 f8 e2 60 0d 55 98 26 87 49 93 6d 77 39 55 c7 f5 50 72 dd 0e 31 79 ee 0a 03 ef 40 de 60 f2 f4 11 6f d0 31 91 09 df f0 76 ce 7e 78 1f 44 38 77 a4 40 93 e2 4b 92 56 b1 c3 bd 22 04 9f 12 9f 41 7d b4 b4 f8 2a 2e 96 db 14 Data Ascii: D6B9"B`JPeC!LdL\E)7d-+s!Vc#T>J-qX0/E$vL4rtX'zVQtms`H'$czD>$%kDZ\|SvGAqMW`U&Imw9UPr1y@`o1v~xD8w@KV"A}*.
2024-05-24 22:57:09 UTC	1369	IN	Data Raw: d7 e9 2c 0a 32 64 5f 29 42 1c 5c a8 45 a4 ef 09 1d f0 53 78 00 9f 00 81 2b 01 6e f3 60 89 1c 00 a4 2d ad d3 7c 9f 3d 9c e1 7d fd f5 2c 1e 64 69 c5 37 7e a9 b7 9b ee 09 c0 87 63 4f 56 50 c2 e3 62 8a 23 a5 07 61 ad a7 2d 40 b5 45 b3 c3 ac bd 19 53 64 56 78 d0 38 4e ad 9c 50 a9 08 e0 bf a4 06 d7 23 6a 14 87 a6 1b dd 75 c7 e7 e5 91 24 9f a8 05 5d 63 bb 55 64 37 ba eb 8f cf cb 22 49 3f 50 0a ba c7 76 aa c8 6f 75 d7 1f 9f 96 44 92 7e a0 15 75 8e ed 46 04 a9 3c 09 6e 1d 53 4e d2 93 f6 eb 5a ae 90 9b 4f e1 27 66 0e 9b d5 14 94 3e 64 a3 0f a8 d2 b0 21 4c 42 3a 7b da 18 ba 8a f2 38 65 f4 eb 4a ef ab 37 08 59 4d 8a ad 6d 54 45 43 f0 26 31 01 32 b9 48 a7 5e 56 c0 08 a5 44 92 b9 62 3b 68 82 6f 6a 5c 1b 13 01 cc 56 1e 4a 9c 20 20 5a e4 6d e4 1a 10 cd fa 35 08 e6 d0 c7 Data Ascii: ,2d_)B\ESx+n`-\|=},di7~cOVPb#a-@ESdVx8NP#ju$]cUd7"I?PvouD~uF<nSNZO'f>d!LB:{8eJ7YMmTEC&12H^VDb;hoj\VJ Zm5
2024-05-24 22:57:09 UTC	1369	IN	Data Raw: 33 d8 96 da 5a e9 63 62 7c 9e c3 83 bd cb e3 0d 29 bf 17 8a 8f bc 9f a5 94 d0 26 47 65 52 98 f4 45 e1 af 8c 60 2e 01 67 dc b5 30 0c be 77 95 39 e7 c1 63 e9 ca 25 e7 b9 f8 b5 4d 99 8b 2f 07 52 cc c1 3e e5 e9 e0 c8 43 99 b3 c3 d7 7c f3 40 0f b9 79 61 51 c3 64 99 96 99 be 11 78 c1 22 60 53 67 bc e5 b4 e0 fc 3f e3 d7 aa ee eb c3 7e 43 57 4f 23 b5 a5 14 00 00 02 0b db 10 05 86 27 c6 50 f6 96 16 39 a8 98 cc ad e7 0c 25 61 19 28 c1 e5 9e 7c 79 3b e4 62 29 59 24 57 f0 c0 26 34 1a 9d 63 28 8a cf f2 ab a6 6e df c0 51 fb 94 e6 69 4d 0e 90 be 49 c3 39 05 74 56 55 9d b4 df f9 47 92 22 45 d8 e1 f6 f2 eb 90 5a dc 8d 84 40 e2 94 3e 52 99 06 28 52 9f 4f 8c d4 81 3a 91 9a 32 1d 32 ec 1c 15 3d b7 f3 3b 7f ff b9 fb bf 90 00 00 00 3c 40 cc 2f a6 19 f7 3a 0a 2f ce 5e 50 9f 2b Data Ascii: 3Zcb\|)&GeRE`.g0w9c%M/R>C\|@yaQdx"`Sg?~CWO#'P9%a(\|y;b)Y$W&4c(nQiMI9tVUG"EZ@>R(RO:22=;<@/:/^P+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	49930	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:09 UTC	618	OUT	GET /uploader/28a9c5ac9bd24213c80ef0b7a6e549b5.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:10 UTC	594	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:10 GMT Content-Type: image/jpeg Content-Length: 74656 Connection: close x-oss-request-id: 66511B465EDFF639399EADCD ETag: "F0DC0639B62B0C88A89A6800168376C8" Last-Modified: Sat, 05 Aug 2023 07:50:12 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 12161241117646206861 x-oss-storage-class: Standard Content-MD5: 8NwGObYrDIiommgAFoN2yA== x-oss-server-time: 119 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:10 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2142ab9f7f0-BNA
2024-05-24 22:57:10 UTC	775	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCC
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 02 40 e4 d2 6d 2d 58 9b 4b 56 37 7a fa fe 87 fc 29 8b 9e 3d ff 00 07 fe 40 5c 76 e7 db 91 fd 28 13 9a e9 af 96 ab f4 1d 41 61 50 e6 ba 6b e5 aa fd 00 29 7b 4f 2f c7 fe 00 05 54 65 cd 7d 2d 60 0a a0 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 69 60 0e 3f 3e bc 7e 9c e6 84 ef aa 02 0b 8b bb 7b 44 32 dc cd 0d bc 0a 09 79 e7 95 21 89 3a 60 34 92 15 45 dc 09 20 92 07 04 1c 12 33 2e 70 8f c5 28 c7 d6 49 7e 6c Data Ascii: ((((((@m-XKV7z)=@\v(AaPk){O/Te}-`(((((((((((((i`?>~{D2y!:`4E 3.p(I~l
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 0f 08 f8 be 1d 22 7d 5c e9 5f 61 7d 6f c2 f6 5a 85 ec 7a b4 3a 7d df 86 61 fb 70 f1 07 c4 4d 61 64 d0 ee 6e d2 d6 cf c2 1a 0c ba b6 f6 47 4f 30 7c cb 7d 35 56 d3 5b ab 6e 9a dd ff 00 c3 17 2c aa 2a 0f 45 19 59 ea ad ae fe ef f5 a7 a9 f8 b3 f1 1b f6 c9 fd ab fc 4d 6f 1e 9b 77 fb 5b fe d4 9a f5 96 ab 6b a8 78 8a cb 67 c5 fd 7b c3 b6 1a df 80 60 5b 46 d5 f5 39 6d ae 74 5b 58 34 9f 0f e9 71 a9 c0 d7 ed ee bc 6d e2 19 e6 b5 b6 d0 34 db 5b 23 a7 0b cf a5 86 3b 31 6a 2a a5 9c 5c 52 8b 8a 8d d2 69 2b 36 af a2 4f ad 96 f6 b9 e4 54 c0 f2 49 da 4e ed bd 39 9e fa 6f ad ad b6 9b ad ac 7c 25 f1 13 e2 97 8e be 21 45 a6 de 78 e3 e2 7f 8c 35 c6 d1 b4 47 bf b4 bc bc 93 40 d2 af 57 c0 72 08 53 4e d7 2e 1e cb 43 5b ad 2f 49 37 48 2c ad 57 53 9f 5f f1 6e af 3d d4 2a ba 2d a0 Data Ascii: "}\_a}oZz:}apMadnGO0\|}5V[n,EYMow[kxg{`[F9mt[X4qm4[#;1j\Ri+6OTIN9o\|%!Ex5G@WrSN.C[/I7H,WS_n=*-
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 5d f1 23 52 6b 14 f0 4d ba ed f9 b4 4d 1a db 56 83 52 d2 ec f0 3c 8b 9b 2d 54 ed 51 6b bd fb e0 db bd f5 da df 89 e6 54 e9 f3 fd 0a de 18 b5 b9 b1 d7 2d 74 a7 fe db fb 35 9e b7 a8 78 61 b5 4b db 91 1d cd f5 d6 89 a2 37 8e fc 47 af ca be 53 86 d4 63 d3 65 3a 10 3e 69 f2 b4 d9 f9 77 07 cb a3 10 e3 4a 94 a5 27 a7 2c 96 dd 6d b5 af af e1 a2 3a 30 da da fa 7e 9f 17 63 fa 8b fd 9e 7c 29 75 a3 78 53 c1 b6 56 fa 37 83 f5 3d 1b 4d fe d7 d0 75 1b 7b 7d 74 59 ca f6 5e 0b f1 3f 85 ed 9a 60 37 db 7d af 52 f1 65 b7 c7 0b 5f 83 a6 3e 12 cf c0 fa 13 5a 4b 35 ed be a7 26 9e bf 99 cf e2 9a b7 da 96 fb 3b b7 de d7 bd fd 35 b5 cf a0 c3 4b 99 47 4b 5b be b7 76 6b e4 97 de f4 6e d7 d7 f4 27 fe 09 83 a0 b7 8b ff 00 e0 a0 76 fa 95 dd c4 5a 84 df 0e fe 0b f8 d7 c4 77 57 11 39 45 Data Ascii: ]#RkMMVR<-TQkT-t5xaK7GSce:>iwJ',m:0~c\|)uxSV7=Mu{}tY^?`7}Re_>ZK5&;5KGK[vkn'vZwW9E
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 26 b4 5c af a6 ad 37 d7 5d 9a d1 69 e4 ec 7c 3e 7f 5e 4e 4a 2d b4 d4 9c ba f4 8c a0 fb f5 92 d1 d9 d9 69 7b 5a 3f d1 58 43 dc e3 db 19 fe b5 f7 ad dd df 7f 95 8f 99 6d b7 76 1e 5f bf e9 ff 00 d7 a4 22 3a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 b1 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 43 30 24 70 7a 83 db 3d 88 ff 00 d9 ab 8e a4 79 a2 fa d9 3d 3b ff 00 56 2a 2e d2 8b ed 24 ff 00 13 f8 9e f1 67 c2 6d 77 c0 9f b5 97 c7 4b 6b bb 4f 0c e9 b1 da fc 77 f8 a5 36 9d 0e 8d b6 07 1a 28 f1 dd da e8 b0 47 01 d3 75 28 3c 2f 13 69 77 f6 ba b5 be 8f 75 7d 23 c7 a4 5d c7 a9 44 8d 04 f1 34 Data Ascii: &\7]i\|>^NJ-i{Z?XCmv_":((((((@P@P@P@P@P@P@C0$pz=y=;V*.$gmwKkOw6(Gu(</iwu}#]D4
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 56 9f f3 68 7e ea 7e cb 1e 17 f8 d1 a7 78 03 c3 36 9a d7 81 be 22 b1 b6 b0 b6 8e d6 5b 8f 1a f8 26 c2 c2 18 84 02 46 48 ed d3 5e be ba b4 00 c8 a0 2c d6 d1 b4 80 01 18 93 cb 6d b3 91 3c d2 4b 65 cb aa 8b 7c 91 b2 db 59 3d 12 77 de 4d 2d 92 69 c5 a5 79 f4 f2 7a 71 b3 94 63 53 96 12 e5 5c f2 72 52 ba 4d 25 76 ec e2 ef cb aa d1 b4 93 8b 34 3e 2f 5b 78 3f 53 b1 27 c4 5a b5 bd a7 db e1 96 f7 4e 8e 0f 88 da 6f 88 ae a5 b7 6b a9 ed 66 b8 b5 b1 d1 6d 26 ba 96 d9 ee 2d 24 89 2e 44 66 09 cc 2c 2d e5 95 e1 9d 62 f3 b3 a7 35 56 2a 4d 3b b7 7b 4a 33 d7 9e cf 58 b6 ad 7d 9a b2 76 bc 7d db 1c d9 25 48 c6 fc 8b 47 6b b9 42 74 d3 52 5c de ef 32 4a f6 b5 e2 9c 9c 1a e5 97 bd bf f3 dd fb 53 7c 3d fd 8d 84 d3 5c 78 b3 e2 a7 8b 34 63 71 69 e2 6d 42 d9 34 8d 1f c4 9e 20 f3 74 Data Ascii: Vh~~x6"[&FH^,m<Ke\|Y=wM-iyzqcS\rRM%v4>/[x?S'ZNokfm&-$.Df,-b5V*M;{J3X}v}%HGkBtR\2JS\|=\x4cqimB4 t
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 5d f9 95 bf ad 0f 66 bc ed 19 6c f9 92 6b de be dc b6 d2 f7 b3 f5 ee fa a3 f9 6b f8 b3 e3 3d 6f c4 96 f7 71 26 8f e1 a3 73 a8 69 77 1a db 58 eb 1e 18 f0 d6 9d 73 6d a6 c5 73 2c 1a 67 89 fc 1f e2 ef 09 e8 de 1d ba 5d 0d 04 77 9f e9 16 d2 5e 5a db dc 89 2c b5 6b 46 b6 b5 d4 d5 3e bb 0b 38 72 5a ff 00 96 df 2f c6 da 1f 33 88 a8 f9 9e 9d 7b e9 e7 d1 fc bc ee b4 b5 df 33 a6 68 1e 38 f0 c6 81 e1 4f 13 8d 3e ff 00 fb 4a e7 c4 13 58 27 83 bc 54 b7 56 da 8d c6 99 1e 99 60 ba 57 8a e4 97 49 bb d0 e0 b9 b7 d6 75 8b 9b bd 17 c2 31 df 8b 98 35 3d 7b 4d be 9b 4d 5d 46 de c8 99 fd 28 49 da 57 7f 3b 2d b5 32 9a 4e 2d 3d 53 ff 00 34 7e a0 fe c7 3a 66 b7 e2 5f 89 5e 1b 8e ff 00 43 d3 8f 88 a6 f1 ae b7 a0 c0 ba 5c 1a 4f 89 75 1d 57 fb 2b 53 9a c7 46 b5 b6 7d 6a 3d 36 c3 5e Data Ascii: ]flkk=oq&siwXsms,g]w^Z,kF>8rZ/3{3h8O>JX'TV`WIu15={MM]F(IW;-2N-=S4~:f_^C\OuW+SF}j=6^
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: e6 0d 36 cb 4f 9e ff 00 47 b8 96 ea de ea da db 52 b5 d6 ef 35 5d 4b 50 4d 66 14 d6 75 19 6f ae 55 85 c7 83 9c e4 55 aa c5 4e 0a ef 57 a2 db b2 e9 d7 a7 56 d5 cf a2 c9 b8 82 8c 39 7d ab 49 69 ab 93 d5 68 ad 7d b5 bd f5 ba ba 4f 4e bf af 1f 18 3f 6d af d9 4f e3 26 8f af 41 e0 1f 88 df 15 b4 cf 15 78 ab 58 f1 3d bf 82 3c 1f e3 5f 82 be 32 d3 2e a7 d5 3e 21 6b 7a 05 d5 9f 86 ec 35 f8 66 d5 f4 d9 67 ba f1 5c 77 e2 5b ad 5f 53 b0 b7 91 3c 48 8e 5d 2e ac af 2e 75 5f 0f 0f c3 f9 b7 3d 29 28 25 4e 33 8b 7a 2d a2 d3 7d 37 f9 bd ad da ff 00 4d 53 3e ca 1c 2a 2f 69 15 37 19 5a d2 6f de 71 76 bd 9a 5d 77 d5 3d bc 8f ef d3 f6 6a f0 03 7c 29 f8 05 f0 6f e1 9c b7 13 5d dc 78 0f e1 97 81 bc 35 75 73 3c c2 79 26 bb d3 3c 35 a7 5b 5d 30 90 16 0e 9e 74 6e 10 82 41 50 08 24 Data Ascii: 6OGR5]KPMfuoUUNWV9}Iih}ON?mO&AxX=<_2.>!kz5fg\w[_S<H]..u_=)(%N3z-}7MS>*/i7Zoqv]w=j\|)o]x5us<y&<5[]0tnAP$
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 2b 38 0c 50 02 37 04 6c 0f 96 b7 a7 d7 e5 fa 9e 75 18 27 06 e2 af 7b 2b ad 7a b5 d2 ea d6 d7 e6 dd ae d9 e6 7f 19 7e 18 78 96 ce de e9 6e ad 2e 6d 84 c5 82 35 c5 a9 8c 16 8c 64 80 44 af 93 82 32 09 18 e3 19 27 15 a1 d3 28 7b 3e 9b db f1 b7 e5 7f eb a7 e6 17 8c 34 7b cd 3e fe 68 ee a3 f2 d8 c8 ce bc 1e 40 e0 81 f9 83 e8 47 4e f8 0e ea 51 e6 be ab a7 9b ff 00 86 f3 3c e6 f5 d0 7c a0 17 23 a9 07 00 60 f4 eb ce 79 c9 ed 8c 50 76 52 a5 cd cd ef 6d 6e 9b de fe 6b f3 38 4d 48 b3 90 42 91 87 c6 72 39 c8 27 b1 cf 6a 0e 85 7b 3b 3d 74 76 5a 68 af e8 ba ae a6 df 80 f4 67 d6 bc 51 a7 da a8 2d 32 b0 96 35 c9 f9 f6 ba ee 5e 0f a1 ce 33 9e 31 c6 73 41 70 6e 37 e6 57 6e cb 75 b7 bd 7d 6c f4 d3 5b 5a d6 b9 f7 4d ef 87 b5 3d 03 c1 d7 ba 85 82 98 e7 86 cd 62 43 b7 1c 5c dc Data Ascii: +8P7lu'{+z~xn.m5dD2'({>4{>h@GNQ<\|#`yPvRmnk8MHBr9'j{;=tvZhgQ-25^31sApn7Wnu}l[ZM=bC\
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 75 e4 49 6b af 69 36 9a 9d a3 e7 0b 9d d6 f7 31 e3 81 f2 81 c0 ce 28 6e ff 00 af 9b b9 ed 43 af 7e be 77 bb 4f fa f2 3a fa e8 2c 28 00 a0 02 80 2b d0 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 58 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 ff 00 3e 4f f8 2e 8f 8c c7 c4 8f f8 2a 17 c6 5d 3e 3b a5 6b 6f 86 9e 07 f8 47 f0 e5 53 1e 6f d9 ee 6d fc 24 3c 65 a8 da 64 84 c7 d9 f5 2f 18 dc e0 fc db f7 6f f9 77 6c 59 75 29 a7 67 38 27 d9 c9 27 b7 66 fc 9b ff 00 23 e0 33 be 79 e6 2d 72 4a 51 b5 be 16 d4 52 49 25 b5 af 6f c9 df 56 cf b2 7f 61 4d 1f fb 0f e0 7d 8c a2 2f 2f ed f7 ad 20 1d 71 e4 41 0a Data Ascii: uIki61(nC~wO:,(+@P@P@P@P@P@X((((((>O.*]>;koGSom$<ed/owlYu)g8''f#3y-rJQRI%oVaM}// qA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	49929	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:09 UTC	618	OUT	GET /uploader/fc2bcafe3c4c673896b61de343177ec8.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:10 UTC	560	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:10 GMT Content-Type: image/jpeg Content-Length: 197029 Connection: close x-oss-request-id: 66511B46342C4835383F1E00 ETag: "398C6726650844FBC9D692EF1EF2CA3C-1" Last-Modified: Tue, 08 Aug 2023 03:14:51 GMT x-oss-object-type: Multipart x-oss-hash-crc64ecma: 3961430466059128621 x-oss-storage-class: Standard x-oss-server-time: 216 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:10 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2145ec76a7a-BNA
2024-05-24 22:57:10 UTC	809	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 b4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCC
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 29 5d 77 5f 7a 01 0b 00 70 4f e8 69 92 e4 93 b3 7f 83 17 23 20 7a f4 fc 28 28 28 00 24 0e a4 0f ad 02 6d 2d da 5e a2 64 7a 8f cc 50 17 5d d7 de 85 a0 61 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 06 41 e8 73 45 d3 d9 dc 2e 9e ce e2 16 00 e0 9f d0 d4 b9 24 ec df e0 c9 72 49 d9 bf c1 89 bd 7d 7f 43 fe 14 73 c7 bf e0 ff 00 c8 39 e3 df f0 7f e4 1b d7 d7 f4 3f e1 47 3c 7b fe 0f fc 83 9e 3d ff 00 07 fe 42 82 0f 43 47 3c 7b fe 0f fc 86 9a 7b 31 68 e7 8f 7f c1 ff 00 90 c2 8e 78 f7 fc 1f f9 00 85 80 ea 7a 7b 1a 39 e3 df f0 7f e4 27 24 b7 7b 79 31 6a 86 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 Data Ascii: ((((((()]w_zpOi# z((($m-^dzP]a@P@P@AsE.$rI}Cs9?G<{=BCG<{{1hxz{9'${y1jP@P@P@
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: dc c0 fb ca 4a 84 e8 f2 6d 07 6f 2a 4b 6d ca fc fc f0 47 c7 9b ae 67 81 8f bb aa bd 4d da d5 68 f5 69 ff 00 c0 4d d8 3f e2 43 1f fd 14 75 bf f0 4a fd 55 be eb 76 d8 cb ff 00 87 cb f8 f8 81 e4 7c 21 f0 9b 8c 72 3f e1 27 d4 46 0f 39 ff 00 98 36 48 e3 00 90 b9 f4 1d 2a bf e2 60 bd 9d ef 97 d3 97 4b 73 68 bc f4 0f f8 90 c7 ff 00 45 1d 67 ff 00 70 52 fc 92 26 87 fe 0b 1b f1 36 e3 77 93 f0 67 c2 8c 13 1b e4 3e 29 d4 16 18 c3 67 6f 99 27 f6 31 d8 5b 69 d8 36 9d d8 6e 98 35 9d 4f a4 45 92 e5 cb a1 d7 45 3b 37 b7 7b ed af 55 f3 e8 7f c4 86 5f 6e 23 af f2 a4 bf 54 c8 ee 7f e0 b2 7f 11 6d e2 69 5b e0 d7 85 24 29 80 57 fe 12 ad 55 14 92 71 90 d1 e9 6a 4e 3b 12 bc 8c 64 0a e7 9f d2 22 5a 35 97 45 ef b5 49 26 be eb 7c f5 7e 57 17 fc 48 6b d5 2e 24 ae bc fe af 07 f7 73 Data Ascii: JmoKmGgMhiM?CuJUv\|!r?'F96H`KshEgpR&6wg>)go'1[i6n5OEE;7{U_n#Tmi[$)WUqjN;d"Z5EI&\|~WHk.$s
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 3c 98 b6 28 86 1f b2 ec 6f f5 c6 7f dd fe 7f 27 c8 93 93 de fb e9 b3 49 7d f7 bf 4f d1 61 28 41 b4 e4 ae ef a6 ff 00 96 dd 35 ba f5 31 bc 23 e0 dd 59 e7 8f 53 ba b8 d3 ae a1 b5 8e e2 e9 a0 bb 87 4f b1 9d e3 4b 99 ae 96 0b 6b cf 3e df ca 56 9a 5b 77 b8 61 6d 74 54 5a c2 ee 2d ad cd c5 c4 19 54 ab 18 d3 94 af 7b 2b e9 a6 db db ee ee 74 ad 12 57 da da ed 65 e7 f2 56 ff 00 2d d6 3f c6 2f 84 ff 00 0e bc 7c 13 c4 7a af 84 b4 7f 10 78 97 c3 5e 1d d5 2c b4 7d 1f 54 ba d4 2c 2d ed f5 2b 86 b9 6d 27 fb 7e df 49 94 41 aa e8 60 de dd dd ea d6 cd 78 ec c2 de ea e2 3b 84 b8 b9 82 ca 6e dc 93 38 a5 ed 1a 71 bf 2e ce fb 6b 6d 3b 5f 6b 7d ce d7 2b fa fb ff 00 0f eb cc fc d7 f1 c7 ec e3 e3 1f 87 df 0f d7 5b d3 7c 4e fa a7 88 ff 00 b4 74 dd 22 df c3 fe 05 6f 12 db de df 0d Data Ascii: <(o'I}Oa(A51#YSOKk>V[wamtTZ-T{+tWeV-?/\|zx^,}T,-+m'~IA`x;n8q.km;_k}+[\|Nt"o
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: ad c4 f6 d6 f6 be 71 b7 bb ba b9 f2 ad ee 3f b0 38 73 88 a1 9e c6 33 8d 4a 72 4d 5d 4a 2d 38 bb a5 aa bd 9a 4f 4d 34 69 25 a2 4c ff 00 24 7c 44 f0 df 3b e0 4c 45 7a 79 bd 29 c5 2a b5 23 0f dd d9 a8 a9 b5 17 64 9f 4b 68 97 54 ef b9 ce 59 ea 17 66 d2 fe d0 4a 2d 6f ae 26 81 6f e3 0b e6 28 b2 59 e1 9a 3b 68 1d 1d ad a7 b4 95 2d 1a 28 2e e0 b9 93 79 f3 24 78 22 11 a2 4b f6 5e ce 9f 4a a9 fa 38 ff 00 99 f9 3c f0 ea 31 e6 70 6f ae 90 97 37 5d 57 9b be 96 4f b3 df 4e a5 bf b4 f5 27 7b cf b6 79 29 3b ba 39 92 de e6 fe d6 f6 d9 dd da 5b 39 e1 b6 42 19 e1 43 12 34 86 44 08 a5 06 c9 4e 7c bc e5 1a 51 b7 ef 61 6f f1 47 a7 92 7f d3 f9 1e 3d 7a b1 a4 da 74 ea 45 dd dd ca 13 8a 77 ea b9 d5 d6 cd 59 7c 5d 74 56 36 74 af 04 41 14 12 41 a9 ea 3a b4 3f bf 7b 38 2e a5 b5 b0 Data Ascii: q?8s3JrM]J-8OM4i%L$\|D;LEzy)*#dKhTYfJ-o&o(Y;h-(.y$x"K^J8<1po7]WON'{y);9[9BC4DN\|QaoG=ztEwY\|]tV6tAA:?{8.
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: ef 7b df 13 eb 7d ac 7f 59 64 79 15 3c 25 2e 5b 28 c6 11 8a 51 b2 e5 6a 29 5b 45 a7 45 b2 e5 b3 f3 64 b7 9a bd b5 bd c4 90 dc fc 9b 76 95 6c f0 e0 8c 30 00 0e 0c 59 12 bf 24 8b 65 9e 6f f9 61 b2 48 fa bf 3d f5 da db 68 df e3 a5 ad dc f7 e5 3a 30 8b 4e a4 12 8a bb bc e2 ad a2 6e fa e8 d7 6d 3e 46 36 9b e1 3f 10 f8 a2 76 ba d3 34 7d 5a f2 19 60 b8 b8 4b 9b 4d 36 f6 e2 c2 6b 68 e3 69 a3 9e cf 52 78 e0 b2 ba 8e e7 cb 75 88 ac d1 b1 2b c0 73 81 47 d4 25 53 54 df 9f 77 6e ba 3d 95 ba 7c cf 06 5c 67 94 e5 73 b3 92 97 bc a3 d5 a6 db e5 b2 d3 56 db b4 57 59 68 93 35 26 f8 71 e3 4b 0b 1d 25 ae 53 48 d0 e1 9e 0b 78 24 93 5e f1 17 87 74 a9 ad f7 86 2b 35 e5 ad e6 ac b3 43 0c 58 26 4d a2 69 db 72 f9 36 f3 61 f6 e9 4f 2a 94 be da d5 ab 73 4d 26 af d5 de 57 b7 e9 b2 b1 Data Ascii: {}Ydy<%.[(Qj)[EEdvl0Y$eoaH=h:0Nnm>F6?v4}Z`KM6khiRxu+sG%STwn=\|\gsVWYh5&qK%SHx$^t+5CX&Mir6aO*sM&W
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 49 73 5d 49 3b 72 be 8e e9 c5 7f 25 fd 20 7c 29 5c 34 bf 77 83 9c 55 3b c5 4a 95 07 6f 75 46 37 4e 10 6b 75 6f 5f 7a dd fe 60 b4 f1 2d b9 bd d1 f4 cd 16 ea f3 c8 b8 91 6c f4 a9 2d ad 5b ec d2 5d 3f 2f 11 9c ca 8b 70 97 59 1e 6d b9 68 37 ec 41 bc 9c ed fd 9d d4 8c 7d de 75 b4 53 d6 fa ae aa 5d af d5 5b b3 4a c7 f1 dc e1 3a 6f 92 71 94 79 74 d6 2d 68 b4 da 4a fa 2e f7 77 4a cf 5b 9d b5 8d d4 7a 9d bd b5 bd ec 22 ed 1c cf 1c 57 13 48 77 cd ac 25 dc d3 16 bb 8c 02 67 18 9d 56 d8 ef 4f 25 55 88 f3 04 87 6b 8b 52 b3 b5 95 bb f5 4d a5 ab d3 6e 9a 27 6d ba 38 bb b6 97 e8 f4 ba f2 e9 be b6 4f cd 69 7b b3 7f 5a b8 d2 bc 49 63 6f e1 f9 ec d6 f1 a4 17 0c 04 33 cf 16 a5 0c 69 63 0d 85 cc da 7f 90 63 22 2b 3b 81 22 db 5a ca 66 80 d8 ad 97 9a 1f 7a 84 e8 a3 29 47 9a db Data Ascii: Is]I;r% \|)\4wU;JouF7Nkuo_z`-l-[]?/pYmh7A}uS][J:oqyt-hJ.wJ[z"WHw%gVO%UkRMn'm8Oi{ZIco3icc"+;"Zfz)G
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: b4 e5 09 34 a5 6a af a4 94 a6 ee dd 9d d9 cf 37 8a 3e 14 be a1 a9 e9 fa 57 86 f5 a9 9d ae 52 cf 4d d3 6e ad 35 4d 43 50 bb b7 b4 b7 84 69 88 9a a5 b5 cb db 5a 9b ad 42 3b 8d 45 e5 be d2 f5 1b 8b 9d 3e e1 6c 3e d0 d7 f3 1b 78 b0 9d 58 f3 5a 0d a5 d2 fe f3 f9 da 2b 5b f9 1a d3 a7 c5 91 69 49 61 dc 79 ae dc 61 49 25 1e 67 f0 a6 e4 d5 a3 d1 ca 4e ea f7 d4 b1 16 91 69 36 9d e2 c4 d3 bc 0f e2 69 6c f5 a9 f5 19 ac df 52 f0 d4 16 b3 68 1f da 36 d2 c5 66 ab 71 79 39 b8 8e c7 4e 99 16 f2 54 d1 1e ea e2 f2 e3 cc 4b ab 78 e0 b8 10 be 52 ad 39 26 93 7c ba 76 ed 65 d2 cb f5 3d 38 42 ba cc a9 2a b8 c8 42 4d 45 49 c6 92 50 72 e4 5c f1 8a 69 26 9d ec ae a4 d3 b3 b3 69 19 3a 7c 3e 29 d3 ad 7c 21 a5 e9 bf 07 df c4 36 fe 0b d3 35 2d 35 b5 1b c5 d2 ac e7 bd 87 53 44 43 aa c7 Data Ascii: 4j7>WRMn5MCPiZB;E>l>xXZ+[iIayaI%gNi6ilRh6fqy9NTKxR9&\|ve=8B*BMEIPr\i&i:\|>)\|!65-5SDC
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: fc bf c8 8f 1a 3c 1a 87 0d 67 75 f9 23 08 c6 2e 72 e5 8c 62 93 b2 6f 65 be da 2f 3b ad 4f 9f 34 bf 12 6b de 1d d1 ec f4 db 6b 8b 69 ee 2d 6e 2d ee 8e a3 2d a1 0f 24 e8 1d ee 48 87 ed 0c b1 ac d7 12 b9 89 44 8c d6 f6 a9 6d 6a ef 70 d0 1b 89 3f 46 4f 6b 74 d3 7b fc ba 5f ee 57 ec 7f 24 d5 a7 38 54 9c 54 24 f9 65 24 9a 8b d2 d2 69 f4 7b fe 17 d0 f6 db 7b 67 7b 1f b6 10 11 67 b9 96 e4 46 08 62 96 f7 61 5e 39 37 00 01 13 5c 25 d4 c4 01 88 cc 9e 5e 5b 66 f7 ef 82 d1 bf 4d 3b 2d 7a fc 9b b7 4b 3b bb ef c6 ef 04 dc 93 5a 5e f2 5c bb 6f 74 fa 2b af d3 dd b5 bf a8 8f f8 35 75 f6 7e d2 1f b6 46 23 b8 4f 33 e0 47 c2 cb 8f df c2 20 ff 00 5d f1 0b c6 63 62 7c f2 6f d9 b4 92 df 29 e5 7e 51 90 6b bf 08 d3 53 51 d6 f2 56 57 d7 b3 76 76 7f 87 4d cd b2 9a 9c d2 97 bc 9d 95 Data Ascii: <gu#.rboe/;O4kki-n--$HDmjp?FOkt{_W$8TT$e$i{{g{gFba^97\%^[fM;-zK;Z^\ot+5u~F#O3G ]cb\|o)~QkSQVWvvM
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: b7 fa ae 9a a6 4f 2d 0a 5c 6a 8f 36 c9 84 11 4f 71 0c 4c 61 50 45 af da a3 4b 96 c6 07 93 74 70 3e ce a2 69 96 22 4f de 56 e5 6b 7b db 5d 3a db 5d d5 f4 49 79 d9 8e a6 61 85 6d d3 59 3f 32 b5 9f 32 93 69 35 25 16 9a 8d 9a 7c 92 4b ad 92 df 9a 29 ef c7 e2 3f 19 78 77 c2 5a df 87 e5 f1 84 90 e9 ba c0 b0 8f c4 36 2b 32 ea 91 ea 70 58 db 3c 36 70 59 dd bc 11 dc c2 63 9c 9b 89 5e d4 c6 4e e8 a0 91 64 f9 25 8c 8e 22 56 92 e6 e5 52 b5 d6 96 93 8f 56 d4 52 49 36 b5 f4 b5 b6 7f 19 2e 14 c9 65 9d d3 ce e5 92 a7 52 94 a7 2a 69 d4 9d a3 29 c7 92 76 8d ac af de db 5d 5f 57 7f 1f d6 74 3d 4f 53 7b bb f9 f5 9d 26 e1 85 fe a3 2c d7 57 5a 8c b2 cd 75 21 17 5b ae 8d cc e2 6b 8b 85 b8 1a 5a 8b 78 3c cb 8b 96 fb 65 88 82 29 7e d3 2f 93 a5 ea 3f 7a f7 ea df ba db 56 6e ed bd Data Ascii: O-\j6OqLaPEKtp>i"OVk{]:]IyamY?22i5%\|K)?xwZ6+2pX<6pYc^Nd%"VRVRI6.eR*i)v]_Wt=OS{&,WZu![kZx<e)~/?zVn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	49932	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:09 UTC	384	OUT	GET /uploader/0abbbe77281ef379f1a927125224b50c.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:10 UTC	583	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:09 GMT Content-Type: image/jpeg Content-Length: 186640 Connection: close Cf-Bgj: h2pri ETag: "393F2BDB1674723EA904395DF266CC85-1" Last-Modified: Tue, 08 Aug 2023 03:23:06 GMT x-oss-hash-crc64ecma: 16430988450799179516 x-oss-object-type: Multipart x-oss-request-id: 66511B44F488A53438F0F48D x-oss-server-time: 103 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:09 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2146b7e6a79-BNA
2024-05-24 22:57:10 UTC	786	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 4e 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCCN
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 4d 6f e1 cd 33 c2 6b 7b 2e 8b 64 64 02 28 c1 b9 b5 d4 25 bc 99 cf 92 66 bc 9e 62 aa 48 19 e5 ce 29 ca 50 8f 2c 5d 9e 89 c6 f2 7d 23 d2 da ea a5 e9 6e af 57 28 b8 b7 17 ba b5 d6 ba 36 93 6b 5b 6a b6 7d 2e b4 6d 59 bf d4 cf db cf f6 c9 f8 19 e3 bf 1d 7c 18 f0 17 8a 35 1d 22 e6 2d 1f e2 f7 80 fc 76 26 b5 7b 56 9e ce f7 c2 9e 20 d2 f5 8b 19 13 f7 e3 61 33 db ac 52 36 58 c9 6f 2c c9 b5 77 73 e3 4b 24 4e 93 93 8b f8 1c f5 76 bb 49 bd ed 7b df 74 9d c7 0b f3 45 af b3 24 de dd 1d ff 00 43 fa 28 f0 ef ed 31 e0 34 d1 7c 33 a8 3f 88 2c 04 17 3a 54 57 56 bf e9 f6 a3 cf 82 45 f9 58 66 41 b3 ee 9c 0f 9f 39 eb 91 5f 09 38 4f 9a 4b 96 5a 49 ad 9f 47 6e c7 dd 53 cf 29 38 c2 2e 71 5e ec 62 db b2 6b 4e 54 96 b7 6f b5 93 e9 74 8f 9f 7f 6b 4f 16 fc 1b be f8 6f e2 79 3c 7d ab Data Ascii: Mo3k{.dd(%fbH)P,]}#nW(6k[j}.mY\|5"-v&{V a3R6Xo,wsK$NvI{tE$C(14\|3?,:TWVEXfA9_8OKZIGnS)8.q^bkNTotkOoy<}
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: b8 a6 77 71 f7 77 1c 7d de e4 f5 cd 7c bf 1d da 19 1d 68 cb dd b4 26 9e 8e e9 7b d1 eb e7 ff 00 04 7c 05 c5 95 25 9c d0 50 4f 59 c5 5f 5d 2d a5 97 a7 dc f5 b5 cf ca 99 35 ab bf 0b 78 c6 e6 1d 39 f6 0b 37 51 19 2c c0 85 66 70 c4 0d dd 58 a6 78 3c 67 bf 35 fe 7a ac e9 e4 fc 68 e5 4e 5c cb db a7 78 ae 75 74 db d6 dc c9 5b 4d 7a 5b b3 d3 fb b5 64 b1 ce 32 28 ca ab 93 55 29 73 4f 55 06 f9 a3 19 2f 8b 6d da b2 4a fd af a1 f5 4e 95 f1 fb 50 6b 08 4c d7 13 48 e0 b0 f2 90 39 31 1c 29 62 d8 6e 43 ee 1b 4e 30 4a 31 e3 95 af ec 9e 1f f1 3b 97 0f 49 4e 49 37 4e 11 69 b5 a7 ba 95 b5 ba fb de ad db cc fc 2f 11 e1 8c 23 5e ab 85 da 72 94 b5 bb e6 bb bd f6 d3 5e ed da ef 5b 6a 77 5e 19 f1 30 f1 35 da dc c7 78 d3 90 54 c8 a7 83 19 70 c7 04 76 c8 56 20 e7 e6 da 48 f6 fd 2f Data Ascii: wqw}\|h&{\|%POY_]-5x97Q,fpXx<g5zhN\xut[Mz[d2(U)sOU/mJNPkLH91)bnCN0J1;INI7Ni/#^r^[jw^05xTpvV H/
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 4f fc 8e 83 44 d3 e4 9b 32 0c 2a 1e e7 39 0a 37 0c f3 d7 71 3c 63 8e 3a f3 8a e9 51 f7 25 77 6b 34 df 5d de db e8 f4 4f 5e e6 2d b6 f5 dd ff 00 5f d7 fc 39 d7 95 8a 04 55 91 b6 e0 60 63 9c 9e a7 8c 92 3f cf b5 55 ef aa d7 d6 eb f4 03 fb 27 d7 3f e0 81 1e 17 d2 35 3d 62 fa ed b5 9d 4e e3 45 16 41 f4 c9 2e e6 92 de ef ed d7 26 01 26 b7 2d ad cc 57 37 97 08 43 0b 79 a1 96 cf 10 44 b6 ec 8f e5 89 47 d7 ff 00 6d c5 3b d9 5f 46 db e5 fb df cb 4d 7a 68 ba 9f 82 fb 69 34 96 b6 8f c2 af 7e 5d 5b b4 74 bc 53 6d b6 95 93 6e ed 5c e5 9f fe 08 1d e2 0f 09 ea 3a 9a 68 5e 27 f1 0e 97 ad 6a b7 0d 79 e1 e8 3c 3d ad 6a 56 da 7a db c3 6d 79 71 28 b5 b8 b7 ba 7b 99 ad 86 c8 92 1b 7d 4a 69 b5 1b 41 23 35 cc 8f e6 20 a6 f3 c8 39 27 ca 9d 95 ed 6b c7 5b ad ae fc ed 6b 3f 2b 1b Data Ascii: OD2*97q<c:Q%wk4]O^-_9U`c?U'?5=bNEA.&&-W7CyDGm;_FMzhi4~][tSmn\:h^'jy<=jVzmyq({}JiA#5 9'k[k?+
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 4f c3 a9 b6 a3 a7 79 28 4c 99 07 0c 0e 40 19 e9 d8 1c 8f 94 9c ff 00 f5 ff 00 ac 61 5d 54 a5 1a 9c f1 94 65 18 b6 d5 a5 f1 24 ed 78 df 5b bf bb ef 3f 0a 59 62 a5 51 4e 5e e4 a3 3b ab ab 6c ec ed b2 f4 77 7a eb eb e5 b7 ba 54 f7 7a aa ed 4f ba d8 c1 ed b0 91 ed dc 67 9c f1 8f 5c 54 d4 52 a9 24 b9 b5 e5 b3 b2 bd dd f6 5a af 9e 96 d5 eb ba 7f 5d 4f 32 a7 4b 0b 3b be 57 cb 65 6b 2d 23 1b 5d 3f 45 65 6f 92 e8 7d 3f e0 cd 2c 58 5a c3 85 d8 23 88 bc 84 8c 29 ca ae d5 f5 05 06 49 c6 7a 8e 05 7d 3e 50 f9 56 aa d6 83 7d fa 5d f9 36 ed f3 d5 dc fc 43 3f cd 9d 6a d3 51 6e 5c f5 24 92 be af 5d 1d bb 36 b4 7d 6c d1 e1 ff 00 b4 5f 88 7f b3 74 4b df 25 d0 f9 41 f7 65 f1 bc 92 00 00 6d 3b 48 c1 e3 9c e7 b6 2b f2 4f 16 73 68 d3 c9 71 49 da 16 a5 5a fe f5 b5 71 93 da e9 2b Data Ascii: Oy(L@a]Te$x[?YbQN^;lwzTzOg\TR$Z]O2K;Wek-#]?Eeo}?,XZ#)Iz}>PV}]6C?jQn\$]6}l_tK%Aem;H+OshqIZq+
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: c7 39 a5 55 c6 0d c6 7a a8 ec 9d dc ac bb eb d1 be 97 df 56 7c 8b ca 73 9a 10 d2 55 52 a5 1b 27 cf 25 a4 63 74 d2 ba 5a a5 7b 6e fb 1f 91 7f b5 2f c2 5b 4f 0d c9 a9 59 a5 ba ca 6c c3 ca b2 c6 db 0b 31 c2 ef 50 62 dd 17 96 42 8d a5 e5 dc a5 89 2b e5 9d d1 9d e4 d4 e5 0e 6b 41 b9 45 4a ca c9 bb ae 64 ae 95 af b5 9e bb 3b ad 93 fd 23 c2 ec f7 34 a7 5e 14 eb d4 6a 2a a7 2c f9 da 97 bb 75 16 92 e6 4d f5 be da d9 de fa 2f 89 f4 7d 26 6b 28 0c 52 14 60 d8 e0 67 8c 6e c8 39 e3 f8 bd 79 e8 33 5f 2e f2 5a 09 5d b8 df a2 b4 3b f4 d7 d3 67 e7 73 f7 cc cb 38 53 51 8c 2e af ca da 4d ab 3d 37 b2 dd 77 d5 79 f5 38 3f 1e 69 ad 04 49 71 6f c4 61 98 ce a3 92 be 68 52 08 e7 ee e5 30 73 91 92 33 8e 87 f1 7f 14 72 54 e1 37 45 2f 76 0d be 5e ba 5d fc 2f 75 d5 25 ad db 76 5b 7d Data Ascii: 9UzV\|sUR'%ctZ{n/[OYl1PbB+kAEJd;#4^j*,uM/}&k(R`gn9y3_.Z];gs8SQ.M=7wy8?iIqoahR0s3rT7E/v^]/u%v[}
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: de ff 00 4d fc 56 5b ef 13 68 72 91 80 d0 c2 ca 00 f9 c9 38 2c 49 39 5e 5b b0 19 e9 f5 c7 cd e4 6a af 19 56 bc 63 3a 93 94 fa 5e 4f 56 ed e7 b5 ac ac b6 76 57 bd fe a3 38 54 f2 2c a7 a2 4b 5b 6c b9 62 f5 e9 77 a2 5a 59 f7 3e 2c 7f 00 78 80 ca c3 ec cc 06 e2 33 b4 ff 00 8e 3f 5f c6 bf 5b a5 e0 fe 72 dd 37 cb 51 a7 c8 d6 9b a7 67 66 b7 bb db a3 b9 f9 db e3 cc 9d 26 b9 e3 cc 93 5b b5 aa fc 37 2f 47 f0 db 5d 2a 58 46 dd b3 94 23 07 24 7a e4 7e 5d 7f 3a fa c5 e0 ee 76 e2 9b a3 3b 24 9b bc 1e 9a 75 f7 74 38 7f d7 cc 2c 93 5e d2 2a 3b 3f 7a 2a c9 af f0 fc be 5d 48 24 f0 0f 88 2d dd 1d 33 1b a1 0c 84 0d a4 30 e4 1e 5b 9e 40 ce 0f a7 a9 a5 ff 00 10 8b 38 a7 ef c6 0e 3c 89 c9 69 af bb ad 95 a2 64 b8 9f 2b 9f bb 37 16 a7 75 25 cd d2 fe 9f 96 cd 9d 36 9b e3 bf 18 e8 Data Ascii: MV[hr8,I9^[jVc:^OVvW8T,K[lbwZY>,x3?_[r7Qgf&[7/G]XF#$z~]:v;$ut8,^;?z*]H$-30[@8<id+7u%6
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: 6a 17 69 59 49 de 0a d6 76 d2 dd 2c b5 7a 75 3f a6 9f f8 27 1f 89 2f e6 f0 f4 7a 6c ae 26 80 47 66 71 b8 e0 f9 c8 e5 b0 aa 78 1b 94 30 01 b0 5b 19 c8 00 57 f6 77 1c d3 87 d5 60 e5 4e 2f f7 5d 62 9e d1 5d d7 aa ff 00 80 7f 13 78 5d 51 c3 88 73 38 b9 c9 28 d6 82 4a 52 76 ea 96 9a 2d ef f3 bf 73 f6 ce f8 b3 da 39 20 8c aa b0 04 60 f5 04 ff 00 f5 fd 2b f9 f1 34 e5 3f 39 3b 2b 76 6e fe 4a df f0 c7 f5 54 da b4 35 5f 7a fe 53 c6 75 f3 fe 94 55 94 32 b0 60 41 e4 30 f9 72 08 20 82 3d 7f 2a f4 61 56 df 0c 9a bb 76 6a ea f7 96 dd 3c 8f 32 b7 2c ed 6b 4a c9 f3 69 d3 a6 fb ad 1f 7f c4 f8 d7 e3 7c 30 c7 a2 dc 98 61 8e 1d cb 28 7d 88 ab bb 09 19 50 c4 01 9d bc e3 39 ea 7d eb ec 32 19 fb d4 bd a4 97 c5 f6 df f7 96 f7 f3 be e7 c9 e7 50 f7 2a 72 c7 ec ca fc b1 f2 97 64 7f Data Ascii: jiYIv,zu?'/zl&Gfqx0[Ww`N/]b]x]Qs8(JRv-s9 `+4?9;+vnJT5_zSuU2`A0r =aVvj<2,kJi\|0a(}P9}2Prd
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: ba 2e 9e 4b 76 cf ce fc 68 ce a5 94 64 ef de b7 34 2c 9a 6e f6 6d 2e e9 69 77 d5 5b 4d 4d 69 7c 13 63 6d 6e 5d 23 89 c2 00 76 b2 95 cf be e2 cf cf e1 8f 7a ff 00 4f 61 c2 d9 44 21 4d aa 10 72 8a 86 d0 7b a4 b5 d3 cd 76 5f 23 f8 99 f1 24 e5 51 da 73 bc a6 f4 e6 7a 5d ed ba db c9 df af 99 85 35 86 8f 1e 3c db 74 8c f3 8c 9c e4 8c 13 83 c6 71 91 93 db 22 bd 35 96 e1 ec e2 e9 52 b5 ac bf 77 1e d6 ed b7 7d 3d 0f 66 8e 27 13 3f 7a 33 9b d1 3d e5 6d 75 d7 fc bd 74 39 36 d2 b4 cb bb cf 2a 38 cc 6a e4 8c 90 18 75 3c e0 04 38 27 3d f3 8e 9c 8e 7c c9 70 c6 53 51 cd fb 28 a9 4a ef 44 d2 6d b7 d1 ab 5e ef 44 ae b5 77 d9 9d eb 19 8a a7 0e 6f 69 74 ac d7 7d ae d2 f7 9e 89 5d ad 96 8d 75 46 77 8b be 16 5a cd 61 2b c5 6c 63 98 b6 f4 90 6d ca b2 03 b4 16 5e c7 3d 70 3a 1c Data Ascii: .Kvhd4,nm.iw[MMi\|cmn]#vzOaD!Mr{v_#$Qsz]5<tq"5Rw}=f'?z3=mut96*8ju<8'=\|pSQ(JDm^Dwoit}]uFwZa+lcm^=p:
2024-05-24 22:57:10 UTC	1369	IN	Data Raw: ae 69 45 a9 54 97 2d af 6d 35 4a dd 1e 8d 3e 8b 5b 9d 79 17 85 94 32 59 2a 91 a5 45 3e 6e 7e 65 18 26 b5 6e cf 49 35 a5 ba e9 af ce 08 bc 1f fd b9 e3 27 f1 15 d3 1b 78 7e d2 f1 5a c3 b5 a5 f3 4c 0c 0c a4 cd e7 45 b3 93 1f cb e5 37 de e0 9e 95 fa bf d1 ee 7f da d9 bc 33 67 6b 5e 37 69 5e ce ee 3a ae ee fb ab 77 ba d1 9f 97 78 fb 99 4b 2a ca 95 08 de f2 8a a6 92 56 de d1 6f 55 27 64 9d df 45 f7 1f d0 bf fc 13 96 cf 57 d3 9e 2b d6 87 c9 b3 93 ca 8b cf 2c 73 23 c0 88 5d 40 2a 3e e2 cc 8c c4 92 07 9a b8 39 15 fd ab c7 3c b2 c9 a3 18 b8 b9 38 da da 36 9e ca f6 bb d3 4f bf 6d 0f e1 fe 00 75 27 c5 f8 d9 c5 4f d9 ce 70 69 a4 d4 5a 69 cb 56 ac b7 7d 76 f9 1f b2 9e 2d f8 87 6f a7 c3 0c 2f 76 a5 8c 72 74 65 5c 63 cb 03 d4 9e 9d 78 23 ae 2b f9 f1 65 72 bc a4 95 f5 76 Data Ascii: iET-m5J>[y2YE>n~e&nI5'x~ZLE73gk^7i^:wxKVoU'dEW+,s#]@*>9<86Omu'OpiZiV}v-o/vrte\cx#+erv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	49931	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:10 UTC	600	OUT	GET /buyer/cart HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:10 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:10 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:10 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:10 UTC	1213	IN	Data Raw: 34 62 31 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 65 78 70 72 65 73 73 22 3a 7b 22 68 61 73 5f 69 6e 73 75 72 61 6e 63 65 22 3a 22 30 22 2c 22 69 6e 73 75 72 61 6e 63 65 5f 73 65 6c 65 63 74 22 3a 22 30 22 2c 22 69 73 5f 6d 61 74 63 68 22 3a 30 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 73 65 6c 65 63 74 65 64 22 3a 30 2c 22 6c 69 73 74 22 3a 5b 5d 7d 2c 22 63 61 72 74 22 3a 7b 22 74 79 70 65 22 3a 22 22 2c 22 74 6f 6b 65 6e 22 3a 22 37 64 32 31 38 38 39 64 31 39 34 38 64 35 39 61 35 32 34 30 65 63 34 38 38 30 38 33 32 39 64 66 22 2c 22 77 65 69 67 68 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f 61 6d 6f 75 6e 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f Data Ascii: 4b1{"code":0,"msg":"success","data":{"express":{"has_insurance":"0","insurance_select":"0","is_match":0,"error_code":0,"selected":0,"list":[]},"cart":{"type":"","token":"7d21889d1948d59a5240ec48808329df","weight":"0.00","product_amount":"0.00","product_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	49928	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:10 UTC	973	OUT	POST /buyer/express/free-express HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 32 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=whiskys Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:10 UTC	32	OUT	Data Raw: 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 22 22 2c 22 74 6f 74 61 6c 22 3a 22 30 2e 30 30 22 7d Data Ascii: {"country_id":"","total":"0.00"}
2024-05-24 22:57:10 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:10 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:10 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:10 UTC	82	IN	Data Raw: 34 37 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 76 61 6c 22 3a 30 7d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 31 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 47{"code":0,"msg":"success","data":{"val":0},"now":"2024-05-25 06:57:10"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	49933	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:10 UTC	477	OUT	GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ee8-2905" If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
2024-05-24 22:57:10 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:10 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-2905" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 200932 Expires: Sat, 25 May 2024 02:57:10 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2176c9ef7f8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	49934	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:10 UTC	469	OUT	GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-20a8" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:10 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:10 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-20a8" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 191755 Expires: Sat, 25 May 2024 02:57:10 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2177c4ef7cc-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	49935	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:10 UTC	1140	OUT	GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428462&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:10 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:10 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	49936	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:10 UTC	1250	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428462&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:11 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x1e56ca29f3892d0e","source_keys":["1","2"]},{"key_piece":"0x30408da2837dfb7e","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:57:11 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:57:11 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:57:11 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	49938	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:10 UTC	384	OUT	GET /uploader/055002e1d0286662d2639006df99f438.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:11 UTC	583	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:11 GMT Content-Type: image/jpeg Content-Length: 197919 Connection: close Cf-Bgj: h2pri ETag: "7AF130058A9E0139D5494E8D3E127571-1" Last-Modified: Sat, 05 Aug 2023 08:00:35 GMT x-oss-hash-crc64ecma: 11792119783580296412 x-oss-object-type: Multipart x-oss-request-id: 66511B45D561043631283740 x-oss-server-time: 119 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:11 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e21c1f56f7d4-BNA
2024-05-24 22:57:11 UTC	786	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 d2 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCC
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: fc 55 86 0b 6d 63 50 b3 b4 4f f8 59 9e 3a fd dc 16 91 34 aa 5d 23 f1 0c 30 47 04 38 06 e6 58 60 8f ec d0 33 dd 4c 8d 05 bc 8d 1f e8 59 56 55 1e 47 53 5b be ba d9 5e fa 5d 36 b5 b5 df 47 e5 ab 3e 7e 56 8b 77 7b 75 f5 31 97 e2 af c5 27 ce 3e 2a 7c 55 f9 70 92 7f c5 cf f1 e7 c9 38 cf 9b 0f fc 8c 03 3e 5e 50 ee e0 fc fe 5c 8b 14 f1 cd 0c 57 5b 28 e4 a8 d4 e3 24 db 6f de 56 eb e6 b6 ed e5 6d c8 75 20 b7 7f 83 ff 00 22 94 df 15 fe 29 71 e6 7c 50 f8 b6 b3 44 09 9e 38 fe 26 78 f5 d1 17 04 ab 47 27 fc 24 51 89 56 60 59 6d d8 a2 79 d3 5b de c5 85 16 bb e4 98 e5 51 7a 28 a7 eb 67 f2 d1 7e 03 e7 8f 7f c1 ff 00 91 5e 7f 8b 3f 14 9d 23 2b f1 47 e2 b1 c6 4a 93 f1 47 c7 99 39 05 ce 00 f1 01 24 22 82 b2 9c e2 39 52 58 fe 61 19 63 35 f2 7f dd c9 f2 db 55 b2 ed f6 76 eb d5 Data Ascii: UmcPOY:4]#0G8X`3LYVUGS[^]6G>~Vw{u1'>*\|Up8>^P\W[($oVmu ")q\|PD8&xG'$QV`Ymy[Qz(g~^?#+GJG9$"9RXac5Uv
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: b2 b5 95 d7 46 ff 00 1d ac f7 ba d7 e5 60 e8 ef be da f4 b7 e3 f2 d3 ce fb 0e b8 f8 cf f1 79 71 9f 8b 5f 16 b1 c2 86 5f 8a bf 11 c1 32 9c 6d 8c aa 78 9c 45 19 60 46 1a 38 8b 2f 0f 22 ac 41 e5 52 fa 74 df 44 d6 9e 6d 7c d6 aa d6 bf 4e 80 bd 35 77 4b 6f c9 ae fd 6e bc b6 01 f1 9f e2 f8 c8 3f 15 fe 2b 83 9c 15 5f 8b 1f 12 90 12 33 b9 a4 f2 7c 5a 82 49 7f bf 2b 95 0e 01 58 c1 90 a4 6f 9d 47 b5 b5 d6 5b ab de f6 d6 cd 59 5e da 2d d6 a0 d5 ad ab 77 5f 77 91 21 f8 d5 f1 99 39 87 e3 1f c5 fb 7f bf bf c9 f8 af f1 1a 20 de 64 13 5a 9d db 3c 4e a4 ff 00 a3 dc 4e 8b b8 2e 77 33 0f 3a fa 6c 5d 71 d7 8f 35 29 79 45 fe 36 ff 00 2d 8d f0 fa 4e fe 9b 6f b3 d3 75 bf e7 6b 6a cf d9 1f f8 35 8b e2 cf c5 4f 16 7f c1 58 fe 29 78 63 c5 5f 13 be 24 f8 b7 41 ba fd 94 3e 31 ea f3 Data Ascii: F`yq__2mxE`F8/"ARtDm\|N5wKon?+_3\|ZI+XoG[Y^-w_w!9 dZ<NN.w3:l]q5)yE6-Noukj5OX)xc_$A>1
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: b0 21 86 80 2b 39 56 c6 08 07 ee b2 32 4c 19 f0 73 e6 23 04 db e5 a3 0f 94 ab 87 91 90 ee dd 6c e4 38 03 49 c0 e4 8e 07 52 3a 9c 0e ca 30 31 8c 61 00 dd 8d ee 1e 56 77 60 0a 6f 92 c4 12 46 d1 f7 70 a0 72 07 56 51 e6 7c ca d8 f9 5f 6c 61 f0 c1 2e 50 88 c0 21 96 5d fb 41 50 bb 33 90 1b 38 07 e6 c6 e6 39 3b b3 bc 99 19 b6 96 da a5 62 54 55 00 ae c4 9c b8 1f bb c6 63 94 ee 1c 67 12 31 8e 4f dd 90 91 f9 8b b3 69 9a 52 37 2a 49 69 27 ce 01 5d a5 01 8a 91 c7 1b 58 2e 37 02 06 d2 42 8e a5 42 f0 aa 31 8d a1 46 00 1b 51 76 e6 d3 7b 5b d5 5f fc c0 62 cf 10 13 34 e7 cb 86 08 9e 79 df 82 16 38 c0 2d df 6b 36 08 70 01 21 03 04 93 6c aa e8 bd 11 f7 f7 4a fa 5b 4b af 3b f5 d3 cb f2 dc fb ed eb fd 75 fe ba 98 ff 00 67 95 3e 4b a1 6c 97 00 85 68 a0 94 4e 08 50 7e 77 7d 91 Data Ascii: !+9V2Ls#l8IR:01aVw`oFprVQ\|_la.P!]AP389;bTUcg1OiR7*Ii']X.7BB1FQv{[_b4y8-k6p!lJ[K;ug>KlhNP~w}
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: 17 af be 9c d7 90 eb ba 76 a9 6b 07 88 bc 2f e3 2d 3e de e5 34 1f 1f 78 43 58 92 64 f0 f7 8c b4 39 2f 91 6f d2 2b eb 88 df 44 d6 74 4d 4e 71 ab 78 57 c5 5a 56 bd e1 6d 5a 37 f1 1e 99 76 75 2f 12 96 63 0b aa 57 77 8b 71 49 25 7d 1d ae f7 b2 b6 ed f5 b2 df 43 aa 50 72 6e 51 8b 71 7a dd 76 d1 77 6f 4d 6f a6 9d ac 70 ac 7a 7c db b8 f4 db d7 18 f7 e7 f3 15 dc a6 e6 93 7b 74 db fc 90 e2 ad 7f 76 df 3b dc 82 45 00 82 08 24 82 43 f4 24 0f 55 19 38 39 dd c1 7d 9b bc 81 e4 98 45 a5 b5 f6 4f 6d 9a fd 6f b5 de e9 df cb 62 62 b7 7d 77 ef f2 7d fc fe 5b 3d 98 00 39 dd 80 00 05 89 20 ed 1d 46 55 4f 98 e7 a3 66 25 71 1e 76 c8 63 95 5d 14 b3 e9 7d 3b ec df 96 eb 55 6f 5e 97 d0 7c cb 5b a7 f2 5d 17 5e 8f 47 7b 3d 3e fb 88 ec ff 00 7a 17 51 19 04 19 01 5f de 90 72 9f 26 44 Data Ascii: vk/->4xCXd9/o+DtMNqxWZVmZ7vu/cWwqI%}CPrnQqzvwoMopz\|{tv;E$C$U89}EOmobb}w}[=9 FUOf%qvc]};Uo^\|[]^G{=>zQ_r&D
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: a8 78 9d 23 f8 97 a3 6a 9f 13 b4 f8 18 7c 44 d2 92 0b 8f 8e 3a 06 99 6c 23 4d 62 d6 ea e2 28 21 fd a0 74 0b 38 e4 58 5e db 54 d4 6f 22 b0 f8 e3 6f 65 6b 67 67 e1 7f 1d 5f 69 5e 36 d9 6f e1 4f 1a ea 36 de 02 f9 5c 92 55 78 7a ac 94 ee 92 a9 25 ef b6 93 f7 dd 9b 6f 4f e9 eb b5 fb a5 4d 66 34 db 71 d5 25 d1 3b da d6 d3 4e ca dd b4 5a ea cf 0a 24 89 b6 ef 8e 1b 80 99 86 f0 73 0d c5 83 7f a2 5c 25 c0 de 1b cc bb 81 ac ec af f9 7f b4 4c 4d e1 28 5c 43 5f b4 64 d8 f5 8a c3 ba c9 a9 3a 8b de 82 97 a3 4e c9 e9 7e b7 56 6d 68 af bf 85 89 c3 fb 28 49 24 e3 cb 7b a7 7d 2c ef e7 ef 5d 79 6e fc 87 4d 33 98 3e d0 9b 4a 6a 32 c1 0d cc 64 ec 16 ad 6d 34 73 dc c9 34 a3 38 be 83 6c 50 dc 03 e5 0b ad 26 7b 45 02 e2 5b c8 6e 6f ba 67 29 4e 6e 51 56 7d 17 6f 5f ea c7 93 27 17 Data Ascii: x#j\|D:l#Mb(!t8X^To"oekgg_i^6oO6\Uxz%oOMf4q%;NZ$s\%LM(\C_d:N~Vmh(I${},]ynM3>Jj2dm4s48lP&{E[nog)NnQV}o_'
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: dd 5d 15 44 48 24 4c 00 ec 32 3e 50 bf bb c4 52 6d 98 e5 f6 0c 3c 45 91 48 97 09 b3 cd 4e 59 b6 a7 34 9f 64 ec af 77 15 6d 37 76 de cf cd 5c d2 9f da f9 7e a3 03 ed ce 54 7c c3 0f 1e e1 bd 78 df 18 62 0e 31 e6 08 e5 52 ac 70 bf 24 85 64 12 20 d5 e9 e5 af 9d d3 b2 76 b5 d6 97 eb bf 9f 7d 0a db f6 e7 70 00 10 59 98 9e 1c 2f cd b1 15 48 95 65 8f 69 65 08 b1 8b 91 09 62 6e 3e d0 4d c2 fb b6 db b7 9f 6f c7 4b f4 b6 81 28 f9 b3 cf cd b4 17 05 4a b1 04 07 8c b2 10 ad 16 d8 bc b6 c6 d8 8c bb 77 48 26 8e 59 1e 57 f7 6d d3 5e f7 7f 77 57 f2 d2 cd 04 24 75 20 80 70 7e 6d a0 e3 70 c1 3b 70 43 6e 07 6e 19 58 00 db e3 0b 28 8d d6 40 a4 ec 40 2a 09 19 19 63 93 98 62 23 e6 93 77 2c fb c7 fa b2 3c c2 b3 49 1d b7 c9 b7 c9 8a 92 6f 54 af 65 d3 f5 ee fa b5 bf 4d 3a 01 e6 88 Data Ascii: ]DH$L2>PRm<EHNY4dwm7v\~T\|xb1Rp$d v}pY/Heiebn>MoK(JwH&YWm^wW$u p~mp;pCnnX(@@*cb#w,<IoTeM:
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: f4 6b e7 99 e6 82 e4 a0 b7 90 c9 80 d2 8e 31 ba da 42 ab 6f 71 c3 1c 79 c5 5f 08 41 11 60 45 0b 8b 75 86 0b 7f a4 a7 28 d4 82 94 67 19 45 a8 ca 4e 36 69 73 24 ed a6 ed 5d 2f bf 45 ef 5b cd a9 0f 65 a3 4d 24 da d5 35 d7 d2 ef 5b a4 fa da eb 42 26 38 29 df 06 41 b7 38 07 74 4e 84 39 e0 a8 e7 e4 2a 41 79 42 44 f9 89 dd 4e d2 dd 69 7d ba ef 7b db f1 b6 b7 f2 ea ee bf 0d ff 00 4d fb 79 77 7a 7a 42 db b8 0a 0f 20 63 e6 89 7c c0 00 47 18 91 94 45 e5 c4 ac 9b a2 10 c9 27 94 76 99 84 ff 00 bf cf d3 6f 3e bf 25 f9 fa eb d0 2f e7 e9 f3 d3 5f 97 e8 9b b2 b2 4f 2e 3e a6 5d a5 49 55 f9 1a 4c 92 0a 6c 65 50 cd ce 72 a5 80 48 64 db 2c cc b1 23 90 f9 7c d7 5d 3a fd d7 f9 bb da dd 41 5b 5b f6 b2 ff 00 3f f2 fd 0a d3 80 42 11 f7 32 a5 18 61 b6 8e 37 1d cb b9 64 f3 24 24 2b Data Ascii: k1Boqy_A`Eu(gEN6is$]/E[eM$5[B&8)A8tN9*AyBDNi}{MywzzB c\|GE'vo>%/_O.>]IULlePrHd,#\|]:A[[?B2a7d$$+
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: 9f 5b d3 2c ef 23 d5 2c 2e 7c 39 7d 3c 77 56 9a 27 c4 4f 08 6b 36 d6 7a f7 c3 9f 14 4d 61 70 2c 35 bb 73 a3 ea 32 cd e1 9d 7b c4 1a 1e b5 f9 7f 1d f0 fb 5f f0 b1 93 26 f9 55 ea 46 3d d7 bb 2e fa 68 de 97 b3 5b 23 ea 32 3c d2 9d 49 2a 55 22 af 2b c5 73 34 da bf 5b 3f 5e ca c9 de f6 df 13 c7 3e 0b 9b c1 5a c5 84 31 5f c7 e2 2f 0e 6b da 55 a7 8a 7c 11 e2 bb 6b 2b ab 0d 3b c7 de 02 bb bc d4 22 d1 35 bb 4b 6b 90 d2 69 5a 9d ad c5 ad f6 83 e2 1d 0a f5 d9 fc 2b e3 9d 27 59 f0 7e a9 79 7b 61 0c 5a b6 b2 70 37 10 73 27 46 bc fd e5 ee b8 ce 56 9a 6a fa 5a 4d 3b 2b eb f7 e8 95 8a cf 32 45 6f 6b 4d da 2d 37 64 b4 d5 5f a5 ae af e9 f8 5d 70 f1 a5 b4 48 b1 ce 1a 7b 19 ee 63 9e 1b c5 24 2c 33 ae 4c cd 2a 1c fd 9a d0 b1 5b 69 d4 bc df d9 9a bc b2 05 91 60 96 2b ad 1f f4 Data Ascii: [,#,.\|9}<wV'Ok6zMap,5s2{_&UF=.h[#2<IU"+s4[?^>Z1_/kU\|k+;"5KkiZ+'Y~y{aZp7s'FVjZM;+2EokM-7d_]pH{c$,3L[i`+
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: aa c4 92 4b f9 22 52 91 98 65 89 23 84 b7 f4 b5 f4 d3 d7 fa d5 0f d9 ff 00 7b f0 ff 00 82 07 8c 0e 84 f4 04 e3 3f 4c 90 4f d7 3f 8f 7a e8 eb b6 fd f4 5f f0 de 77 f9 9a 15 a7 c9 da 41 03 69 05 19 49 5d cc 08 12 a3 95 64 65 8c 37 98 85 55 e2 32 10 1d 8c 91 48 5e 57 75 a5 fa 2e 8f ef 4d ad 2d be dd f5 d5 b0 29 ca 33 8f 98 b9 97 01 54 8f f6 84 62 35 31 0f 25 f6 b1 58 87 96 5a 59 08 5f 34 bc cc cc d7 1a 4e a3 e5 d2 dd 5d b6 f3 7b 36 9b 5a 3b db d3 62 65 f0 bf 97 e6 8b 10 a4 7b 09 36 d8 b8 93 68 26 74 ff 00 48 86 24 25 24 8d 49 0e a3 ce b6 8f cd 59 61 1e 74 31 bc 71 3b c4 62 b8 11 f6 da 38 38 3d 54 af 7d 2f ab f9 7f 5a 6f ad db c1 37 79 76 56 b7 dd a8 8b 18 50 04 6c 16 11 c4 7c e4 28 ee 0b e4 e7 24 e4 9c 9e e7 24 9a f3 a5 2e 76 e4 ba bd bb 74 b6 bd 8d a0 db bd Data Ascii: K"Re#{?LO?z_wAiI]de7U2H^Wu.M-)3Tb51%XZY_4N]{6Z;be{6h&tH$%$IYat1q;b88=T}/Zo7yvVPl\|($$.vt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	49937	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:11 UTC	1140	OUT	GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428464&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:11 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	49943	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:11 UTC	384	OUT	GET /uploader/28a9c5ac9bd24213c80ef0b7a6e549b5.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:11 UTC	616	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:11 GMT Content-Type: image/jpeg Content-Length: 74656 Connection: close Cf-Bgj: h2pri Content-MD5: 8NwGObYrDIiommgAFoN2yA== ETag: "F0DC0639B62B0C88A89A6800168376C8" Last-Modified: Sat, 05 Aug 2023 07:50:12 GMT x-oss-hash-crc64ecma: 12161241117646206861 x-oss-object-type: Normal x-oss-request-id: 66511B465EDFF639399EADCD x-oss-server-time: 119 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:11 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e21cf903f7c4-BNA
2024-05-24 22:57:11 UTC	753	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCC
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 02 40 e4 d2 6d 2d 58 9b 4b 56 37 7a fa fe 87 fc 29 8b 9e 3d ff 00 07 fe 40 5c 76 e7 db 91 fd 28 13 9a e9 af 96 ab f4 1d 41 61 50 e6 ba 6b e5 aa fd 00 29 7b 4f 2f c7 fe 00 05 54 65 cd 7d 2d 60 0a a0 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 69 60 0e 3f 3e bc 7e 9c e6 84 ef aa 02 0b 8b bb 7b 44 32 dc cd 0d bc 0a 09 79 e7 95 21 89 3a 60 34 Data Ascii: (((((((((@m-XKV7z)=@\v(AaPk){O/Te}-`(((((((((((((i`?>~{D2y!:`4
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: 2d fd a2 bf 6b 4f da 7a da 63 65 a2 fc 75 f8 a7 66 0e b9 a9 68 a2 0f 08 f8 be 1d 22 7d 5c e9 5f 61 7d 6f c2 f6 5a 85 ec 7a b4 3a 7d df 86 61 fb 70 f1 07 c4 4d 61 64 d0 ee 6e d2 d6 cf c2 1a 0c ba b6 f6 47 4f 30 7c cb 7d 35 56 d3 5b ab 6e 9a dd ff 00 c3 17 2c aa 2a 0f 45 19 59 ea ad ae fe ef f5 a7 a9 f8 b3 f1 1b f6 c9 fd ab fc 4d 6f 1e 9b 77 fb 5b fe d4 9a f5 96 ab 6b a8 78 8a cb 67 c5 fd 7b c3 b6 1a df 80 60 5b 46 d5 f5 39 6d ae 74 5b 58 34 9f 0f e9 71 a9 c0 d7 ed ee bc 6d e2 19 e6 b5 b6 d0 34 db 5b 23 a7 0b cf a5 86 3b 31 6a 2a a5 9c 5c 52 8b 8a 8d d2 69 2b 36 af a2 4f ad 96 f6 b9 e4 54 c0 f2 49 da 4e ed bd 39 9e fa 6f ad ad b6 9b ad ac 7c 25 f1 13 e2 97 8e be 21 45 a6 de 78 e3 e2 7f 8c 35 c6 d1 b4 47 bf b4 bc bc 93 40 d2 af 57 c0 72 08 53 4e d7 2e 1e cb Data Ascii: -kOzceufh"}\_a}oZz:}apMadnGO0\|}5V[n,EYMow[kxg{`[F9mt[X4qm4[#;1j\Ri+6OTIN9o\|%!Ex5G@WrSN.
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: ee cd b5 b5 fe b3 3a 79 ba 94 5a 27 85 fe 39 6a 96 53 36 6d ae 3c 5d f1 23 52 6b 14 f0 4d ba ed f9 b4 4d 1a db 56 83 52 d2 ec f0 3c 8b 9b 2d 54 ed 51 6b bd fb e0 db bd f5 da df 89 e6 54 e9 f3 fd 0a de 18 b5 b9 b1 d7 2d 74 a7 fe db fb 35 9e b7 a8 78 61 b5 4b db 91 1d cd f5 d6 89 a2 37 8e fc 47 af ca be 53 86 d4 63 d3 65 3a 10 3e 69 f2 b4 d9 f9 77 07 cb a3 10 e3 4a 94 a5 27 a7 2c 96 dd 6d b5 af af e1 a2 3a 30 da da fa 7e 9f 17 63 fa 8b fd 9e 7c 29 75 a3 78 53 c1 b6 56 fa 37 83 f5 3d 1b 4d fe d7 d0 75 1b 7b 7d 74 59 ca f6 5e 0b f1 3f 85 ed 9a 60 37 db 7d af 52 f1 65 b7 c7 0b 5f 83 a6 3e 12 cf c0 fa 13 5a 4b 35 ed be a7 26 9e bf 99 cf e2 9a b7 da 96 fb 3b b7 de d7 bd fd 35 b5 cf a0 c3 4b 99 47 4b 5b be b7 76 6b e4 97 de f4 6e d7 d7 f4 27 fe 09 83 a0 b7 8b ff Data Ascii: :yZ'9jS6m<]#RkMMVR<-TQkT-t5xaK7GSce:>iwJ',m:0~c\|)uxSV7=Mu{}tY^?`7}Re_>ZK5&;5KGK[vkn'
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: 33 42 49 e3 f2 e4 26 48 ed e4 12 a6 ef 29 bf 5f e0 9a 5c 94 e7 39 26 b4 5c af a6 ad 37 d7 5d 9a d1 69 e4 ec 7c 3e 7f 5e 4e 4a 2d b4 d4 9c ba f4 8c a0 fb f5 92 d1 d9 d9 69 7b 5a 3f d1 58 43 dc e3 db 19 fe b5 f7 ad dd df 7f 95 8f 99 6d b7 76 1e 5f bf e9 ff 00 d7 a4 22 3a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 b1 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 43 30 24 70 7a 83 db 3d 88 ff 00 d9 ab 8e a4 79 a2 fa d9 3d 3b ff 00 56 2a 2e d2 8b ed 24 ff 00 13 f8 9e f1 67 c2 6d 77 c0 9f b5 97 c7 4b 6b bb 4f 0c e9 b1 da fc 77 f8 a5 36 9d 0e 8d b6 07 1a 28 f1 dd da e8 b0 47 01 d3 75 28 3c Data Ascii: 3BI&H)_\9&\7]i\|>^NJ-i{Z?XCmv_":((((((@P@P@P@P@P@P@C0$pz=y=;V*.$gmwKkOw6(Gu(<
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: e7 e9 b9 1b 7f d9 50 bc 79 62 9d 9a dd 5a 33 8a df 57 67 15 78 df 56 9f f3 68 7e ea 7e cb 1e 17 f8 d1 a7 78 03 c3 36 9a d7 81 be 22 b1 b6 b0 b6 8e d6 5b 8f 1a f8 26 c2 c2 18 84 02 46 48 ed d3 5e be ba b4 00 c8 a0 2c d6 d1 b4 80 01 18 93 cb 6d b3 91 3c d2 4b 65 cb aa 8b 7c 91 b2 db 59 3d 12 77 de 4d 2d 92 69 c5 a5 79 f4 f2 7a 71 b3 94 63 53 96 12 e5 5c f2 72 52 ba 4d 25 76 ec e2 ef cb aa d1 b4 93 8b 34 3e 2f 5b 78 3f 53 b1 27 c4 5a b5 bd a7 db e1 96 f7 4e 8e 0f 88 da 6f 88 ae a5 b7 6b a9 ed 66 b8 b5 b1 d1 6d 26 ba 96 d9 ee 2d 24 89 2e 44 66 09 cc 2c 2d e5 95 e1 9d 62 f3 b3 a7 35 56 2a 4d 3b b7 7b 4a 33 d7 9e cf 58 b6 ad 7d 9a b2 76 bc 7d db 1c d9 25 48 c6 fc 8b 47 6b b9 42 74 d3 52 5c de ef 32 4a f6 b5 e2 9c 9c 1a e5 97 bd bf f3 dd fb 53 7c 3d fd 8d 84 d3 Data Ascii: PybZ3WgxVh~~x6"[&FH^,m<Ke\|Y=wM-iyzqcS\rRM%v4>/[x?S'ZNokfm&-$.Df,-b5V*M;{J3X}v}%HGkBtR\2JS\|=
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: 75 9f 14 b6 83 aa 58 ea 5a e5 8e a7 6b a6 2c 23 4a 51 6f 6b da dd 5d f9 95 bf ad 0f 66 bc ed 19 6c f9 92 6b de be dc b6 d2 f7 b3 f5 ee fa a3 f9 6b f8 b3 e3 3d 6f c4 96 f7 71 26 8f e1 a3 73 a8 69 77 1a db 58 eb 1e 18 f0 d6 9d 73 6d a6 c5 73 2c 1a 67 89 fc 1f e2 ef 09 e8 de 1d ba 5d 0d 04 77 9f e9 16 d2 5e 5a db dc 89 2c b5 6b 46 b6 b5 d4 d5 3e bb 0b 38 72 5a ff 00 96 df 2f c6 da 1f 33 88 a8 f9 9e 9d 7b e9 e7 d1 fc bc ee b4 b5 df 33 a6 68 1e 38 f0 c6 81 e1 4f 13 8d 3e ff 00 fb 4a e7 c4 13 58 27 83 bc 54 b7 56 da 8d c6 99 1e 99 60 ba 57 8a e4 97 49 bb d0 e0 b9 b7 d6 75 8b 9b bd 17 c2 31 df 8b 98 35 3d 7b 4d be 9b 4d 5d 46 de c8 99 fd 28 49 da 57 7f 3b 2d b5 32 9a 4e 2d 3d 53 ff 00 34 7e a0 fe c7 3a 66 b7 e2 5f 89 5e 1b 8e ff 00 43 d3 8f 88 a6 f1 ae b7 a0 c0 Data Ascii: uXZk,#JQok]flkk=oq&siwXsms,g]w^Z,kF>8rZ/3{3h8O>JX'TV`WIu15={MM]F(IW;-2N-=S4~:f_^C
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: 1f 8b 7e 18 f0 d6 8e 90 f9 f7 df 0d 74 9b 2d 7b 55 fe cf 86 f6 da e6 0d 36 cb 4f 9e ff 00 47 b8 96 ea de ea da db 52 b5 d6 ef 35 5d 4b 50 4d 66 14 d6 75 19 6f ae 55 85 c7 83 9c e4 55 aa c5 4e 0a ef 57 a2 db b2 e9 d7 a7 56 d5 cf a2 c9 b8 82 8c 39 7d ab 49 69 ab 93 d5 68 ad 7d b5 bd f5 ba ba 4f 4e bf af 1f 18 3f 6d af d9 4f e3 26 8f af 41 e0 1f 88 df 15 b4 cf 15 78 ab 58 f1 3d bf 82 3c 1f e3 5f 82 be 32 d3 2e a7 d5 3e 21 6b 7a 05 d5 9f 86 ec 35 f8 66 d5 f4 d9 67 ba f1 5c 77 e2 5b ad 5f 53 b0 b7 91 3c 48 8e 5d 2e ac af 2e 75 5f 0f 0f c3 f9 b7 3d 29 28 25 4e 33 8b 7a 2d a2 d3 7d 37 f9 bd ad da ff 00 4d 53 3e ca 1c 2a 2f 69 15 37 19 5a d2 6f de 71 76 bd 9a 5d 77 d5 3d bc 8f ef d3 f6 6a f0 03 7c 29 f8 05 f0 6f e1 9c b7 13 5d dc 78 0f e1 97 81 bc 35 75 73 3c c2 Data Ascii: ~t-{U6OGR5]KPMfuoUUNWV9}Iih}ON?mO&AxX=<_2.>!kz5fg\w[_S<H]..u_=)(%N3z-}7MS>*/i7Zoqv]w=j\|)o]x5us<
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: d7 7c 46 92 e9 d6 5a 5d d3 98 fc bf 9e 1f f4 90 83 0c 15 5c 7e e8 2b 38 0c 50 02 37 04 6c 0f 96 b7 a7 d7 e5 fa 9e 75 18 27 06 e2 af 7b 2b ad 7a b5 d2 ea d6 d7 e6 dd ae d9 e6 7f 19 7e 18 78 96 ce de e9 6e ad 2e 6d 84 c5 82 35 c5 a9 8c 16 8c 64 80 44 af 93 82 32 09 18 e3 19 27 15 a1 d3 28 7b 3e 9b db f1 b7 e5 7f eb a7 e6 17 8c 34 7b cd 3e fe 68 ee a3 f2 d8 c8 ce bc 1e 40 e0 81 f9 83 e8 47 4e f8 0e ea 51 e6 be ab a7 9b ff 00 86 f3 3c e6 f5 d0 7c a0 17 23 a9 07 00 60 f4 eb ce 79 c9 ed 8c 50 76 52 a5 cd cd ef 6d 6e 9b de fe 6b f3 38 4d 48 b3 90 42 91 87 c6 72 39 c8 27 b1 cf 6a 0e 85 7b 3b 3d 74 76 5a 68 af e8 ba ae a6 df 80 f4 67 d6 bc 51 a7 da a8 2d 32 b0 96 35 c9 f9 f6 ba ee 5e 0f a1 ce 33 9e 31 c6 73 41 70 6e 37 e6 57 6e cb 75 b7 bd 7d 6c f4 d3 5b 5a d6 b9 Data Ascii: \|FZ]\~+8P7lu'{+z~xn.m5dD2'({>4{>h@GNQ<\|#`yPvRmnk8MHBr9'j{;=tvZhgQ-25^31sApn7Wnu}l[Z
2024-05-24 22:57:11 UTC	1369	IN	Data Raw: 7f 82 bc 49 63 e3 2f 08 78 5b c6 1a 69 0d 67 e2 df 0d e8 3e 27 b5 75 e4 49 6b af 69 36 9a 9d a3 e7 0b 9d d6 f7 31 e3 81 f2 81 c0 ce 28 6e ff 00 af 9b b9 ed 43 af 7e be 77 bb 4f fa f2 3a fa e8 2c 28 00 a0 02 80 2b d0 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 58 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 ff 00 3e 4f f8 2e 8f 8c c7 c4 8f f8 2a 17 c6 5d 3e 3b a5 6b 6f 86 9e 07 f8 47 f0 e5 53 1e 6f d9 ee 6d fc 24 3c 65 a8 da 64 84 c7 d9 f5 2f 18 dc e0 fc db f7 6f f9 77 6c 59 75 29 a7 67 38 27 d9 c9 27 b7 66 fc 9b ff 00 23 e0 33 be 79 e6 2d 72 4a 51 b5 be 16 d4 52 49 25 b5 af 6f c9 df 56 cf Data Ascii: Ic/x[ig>'uIki61(nC~wO:,(+@P@P@P@P@P@X((((((>O.*]>;koGSom$<ed/owlYu)g8''f#3y-rJQRI%oV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	49941	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:11 UTC	1232	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428464&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:11 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0xbb4fa5585ce11ee5","source_keys":["1","2"]},{"key_piece":"0xad62cbaed5dcda6b","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:57:11 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:57:11 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:57:11 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	49940	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:11 UTC	1140	OUT	GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428465&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:11 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	49939	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:11 UTC	1232	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428465&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:11 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x574c259545720cd1","source_keys":["1","2"]},{"key_piece":"0xdb8fa5999d29a54c","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:57:11 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:57:11 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:57:11 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	49945	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:11 UTC	906	OUT	GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428462&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:11 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	49942	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:11 UTC	616	OUT	GET /buyer/express/free-express HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:11 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:11 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:11 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:11 UTC	82	IN	Data Raw: 34 37 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 76 61 6c 22 3a 30 7d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 31 31 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 47{"code":0,"msg":"success","data":{"val":0},"now":"2024-05-25 06:57:11"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	49944	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:11 UTC	1140	OUT	GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428466&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:11 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=92, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	49947	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:11 UTC	384	OUT	GET /uploader/fc2bcafe3c4c673896b61de343177ec8.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:13 UTC	582	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:13 GMT Content-Type: image/jpeg Content-Length: 197029 Connection: close Cf-Bgj: h2pri ETag: "398C6726650844FBC9D692EF1EF2CA3C-1" Last-Modified: Tue, 08 Aug 2023 03:14:51 GMT x-oss-hash-crc64ecma: 3961430466059128621 x-oss-object-type: Multipart x-oss-request-id: 66511B46342C4835383F1E00 x-oss-server-time: 216 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 3 Expires: Sat, 25 May 2024 02:57:13 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e228a9bdf7f0-BNA
2024-05-24 22:57:13 UTC	787	IN	Data Raw: ff d8 ff e1 00 30 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 31 00 02 00 00 00 0e 00 00 00 1a 00 00 00 00 77 77 77 2e 6d 65 69 74 75 2e 63 6f 6d 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 f4 01 b4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 Data Ascii: 0ExifMM*1www.meitu.comCC
2024-05-24 22:57:13 UTC	1369	IN	Data Raw: 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 29 5d 77 5f 7a 01 0b 00 70 4f e8 69 92 e4 93 b3 7f 83 17 23 20 7a f4 fc 28 28 28 00 24 0e a4 0f ad 02 6d 2d da 5e a2 64 7a 8f cc 50 17 5d d7 de 85 a0 61 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 06 41 e8 73 45 d3 d9 dc 2e 9e ce e2 16 00 e0 9f d0 d4 b9 24 ec df e0 c9 72 49 d9 bf c1 89 bd 7d 7f 43 fe 14 73 c7 bf e0 ff 00 c8 39 e3 df f0 7f e4 1b d7 d7 f4 3f e1 47 3c 7b fe 0f fc 83 9e 3d ff 00 07 fe 42 82 0f 43 47 3c 7b fe 0f fc 86 9a 7b 31 68 e7 8f 7f c1 ff 00 90 c2 8e 78 f7 fc 1f f9 00 85 80 ea 7a 7b 1a 39 e3 df f0 7f e4 27 24 b7 7b 79 31 Data Ascii: (((((((((()]w_zpOi# z((($m-^dzP]a@P@P@AsE.$rI}Cs9?G<{=BCG<{{1hxz{9'${y1
2024-05-24 22:57:13 UTC	1369	IN	Data Raw: ff 00 82 c1 78 f8 5c 4b 6e 7e 12 f8 35 a7 5d ad 6a b3 78 a7 51 84 dc c0 fb ca 4a 84 e8 f2 6d 07 6f 2a 4b 6d ca fc fc f0 47 c7 9b ae 67 81 8f bb aa bd 4d da d5 68 f5 69 ff 00 c0 4d d8 3f e2 43 1f fd 14 75 bf f0 4a fd 55 be eb 76 d8 cb ff 00 87 cb f8 f8 81 e4 7c 21 f0 9b 8c 72 3f e1 27 d4 46 0f 39 ff 00 98 36 48 e3 00 90 b9 f4 1d 2a bf e2 60 bd 9d ef 97 d3 97 4b 73 68 bc f4 0f f8 90 c7 ff 00 45 1d 67 ff 00 70 52 fc 92 26 87 fe 0b 1b f1 36 e3 77 93 f0 67 c2 8c 13 1b e4 3e 29 d4 16 18 c3 67 6f 99 27 f6 31 d8 5b 69 d8 36 9d d8 6e 98 35 9d 4f a4 45 92 e5 cb a1 d7 45 3b 37 b7 7b ed af 55 f3 e8 7f c4 86 5f 6e 23 af f2 a4 bf 54 c8 ee 7f e0 b2 7f 11 6d e2 69 5b e0 d7 85 24 29 80 57 fe 12 ad 55 14 92 71 90 d1 e9 6a 4e 3b 12 bc 8c 64 0a e7 9f d2 22 5a 35 97 45 ef b5 Data Ascii: x\Kn~5]jxQJmoKmGgMhiM?CuJUv\|!r?'F96H`KshEgpR&6wg>)go'1[i6n5OEE;7{U_n#Tmi[$)WUqjN;d"Z5E
2024-05-24 22:57:13 UTC	1369	IN	Data Raw: d4 0c 13 35 dd d0 8e 4b 73 65 71 f6 96 16 c2 79 27 ba 32 cf f6 cf 3c 98 b6 28 86 1f b2 ec 6f f5 c6 7f dd fe 7f 27 c8 93 93 de fb e9 b3 49 7d f7 bf 4f d1 61 28 41 b4 e4 ae ef a6 ff 00 96 dd 35 ba f5 31 bc 23 e0 dd 59 e7 8f 53 ba b8 d3 ae a1 b5 8e e2 e9 a0 bb 87 4f b1 9d e3 4b 99 ae 96 0b 6b cf 3e df ca 56 9a 5b 77 b8 61 6d 74 54 5a c2 ee 2d ad cd c5 c4 19 54 ab 18 d3 94 af 7b 2b e9 a6 db db ee ee 74 ad 12 57 da da ed 65 e7 f2 56 ff 00 2d d6 3f c6 2f 84 ff 00 0e bc 7c 13 c4 7a af 84 b4 7f 10 78 97 c3 5e 1d d5 2c b4 7d 1f 54 ba d4 2c 2d ed f5 2b 86 b9 6d 27 fb 7e df 49 94 41 aa e8 60 de dd dd ea d6 cd 78 ec c2 de ea e2 3b 84 b8 b9 82 ca 6e dc 93 38 a5 ed 1a 71 bf 2e ce fb 6b 6d 3b 5f 6b 7d ce d7 2b fa fb ff 00 0f eb cc fc d7 f1 c7 ec e3 e3 1f 87 df 0f d7 5b Data Ascii: 5Kseqy'2<(o'I}Oa(A51#YSOKk>V[wamtTZ-T{+tWeV-?/\|zx^,}T,-+m'~IA`x;n8q.km;_k}+[
2024-05-24 22:57:13 UTC	1369	IN	Data Raw: 19 75 db 5e 26 ba 56 d5 9a e2 3b 26 8d bc 89 2d e0 b6 b4 37 32 a5 ad c4 f6 d6 f6 be 71 b7 bb ba b9 f2 ad ee 3f b0 38 73 88 a1 9e c6 33 8d 4a 72 4d 5d 4a 2d 38 bb a5 aa bd 9a 4f 4d 34 69 25 a2 4c ff 00 24 7c 44 f0 df 3b e0 4c 45 7a 79 bd 29 c5 2a b5 23 0f dd d9 a8 a9 b5 17 64 9f 4b 68 97 54 ef b9 ce 59 ea 17 66 d2 fe d0 4a 2d 6f ae 26 81 6f e3 0b e6 28 b2 59 e1 9a 3b 68 1d 1d ad a7 b4 95 2d 1a 28 2e e0 b9 93 79 f3 24 78 22 11 a2 4b f6 5e ce 9f 4a a9 fa 38 ff 00 99 f9 3c f0 ea 31 e6 70 6f ae 90 97 37 5d 57 9b be 96 4f b3 df 4e a5 bf b4 f5 27 7b cf b6 79 29 3b ba 39 92 de e6 fe d6 f6 d9 dd da 5b 39 e1 b6 42 19 e1 43 12 34 86 44 08 a5 06 c9 4e 7c bc e5 1a 51 b7 ef 61 6f f1 47 a7 92 7f d3 f9 1e 3d 7a b1 a4 da 74 ea 45 dd dd ca 13 8a 77 ea b9 d5 d6 cd 59 7c 5d Data Ascii: u^&V;&-72q?8s3JrM]J-8OM4i%L$\|D;LEzy)*#dKhTYfJ-o&o(Y;h-(.y$x"K^J8<1po7]WON'{y);9[9BC4DN\|QaoG=ztEwY\|]
2024-05-24 22:57:13 UTC	1369	IN	Data Raw: 79 10 35 c4 f3 ca b0 a2 07 91 d8 16 3f 98 37 ed 9a 9c 9f 35 e5 27 ef 7b df 13 eb 7d ac 7f 59 64 79 15 3c 25 2e 5b 28 c6 11 8a 51 b2 e5 6a 29 5b 45 a7 45 b2 e5 b3 f3 64 b7 9a bd b5 bd c4 90 dc fc 9b 76 95 6c f0 e0 8c 30 00 0e 0c 59 12 bf 24 8b 65 9e 6f f9 61 b2 48 fa bf 3d f5 da db 68 df e3 a5 ad dc f7 e5 3a 30 8b 4e a4 12 8a bb bc e2 ad a2 6e fa e8 d7 6d 3e 46 36 9b e1 3f 10 f8 a2 76 ba d3 34 7d 5a f2 19 60 b8 b8 4b 9b 4d 36 f6 e2 c2 6b 68 e3 69 a3 9e cf 52 78 e0 b2 ba 8e e7 cb 75 88 ac d1 b1 2b c0 73 81 47 d4 25 53 54 df 9f 77 6e ba 3d 95 ba 7c cf 06 5c 67 94 e5 73 b3 92 97 bc a3 d5 a6 db e5 b2 d3 56 db b4 57 59 68 93 35 26 f8 71 e3 4b 0b 1d 25 ae 53 48 d0 e1 9e 0b 78 24 93 5e f1 17 87 74 a9 ad f7 86 2b 35 e5 ad e6 ac b3 43 0c 58 26 4d a2 69 db 72 f9 36 Data Ascii: y5?75'{}Ydy<%.[(Qj)[EEdvl0Y$eoaH=h:0Nnm>F6?v4}Z`KM6khiRxu+sG%STwn=\|\gsVWYh5&qK%SHx$^t+5CX&Mir6
2024-05-24 22:57:13 UTC	1369	IN	Data Raw: 12 7d e7 00 71 4c f8 82 4e 72 ae ac e4 fd d9 55 57 4d 3d 79 a3 2b 49 73 5d 49 3b 72 be 8e e9 c5 7f 25 fd 20 7c 29 5c 34 bf 77 83 9c 55 3b c5 4a 95 07 6f 75 46 37 4e 10 6b 75 6f 5f 7a dd fe 60 b4 f1 2d b9 bd d1 f4 cd 16 ea f3 c8 b8 91 6c f4 a9 2d ad 5b ec d2 5d 3f 2f 11 9c ca 8b 70 97 59 1e 6d b9 68 37 ec 41 bc 9c ed fd 9d d4 8c 7d de 75 b4 53 d6 fa ae aa 5d af d5 5b b3 4a c7 f1 dc e1 3a 6f 92 71 94 79 74 d6 2d 68 b4 da 4a fa 2e f7 77 4a cf 5b 9d b5 8d d4 7a 9d bd b5 bd ec 22 ed 1c cf 1c 57 13 48 77 cd ac 25 dc d3 16 bb 8c 02 67 18 9d 56 d8 ef 4f 25 55 88 f3 04 87 6b 8b 52 b3 b5 95 bb f5 4d a5 ab d3 6e 9a 27 6d ba 38 bb b6 97 e8 f4 ba f2 e9 be b6 4f cd 69 7b b3 7f 5a b8 d2 bc 49 63 6f e1 f9 ec d6 f1 a4 17 0c 04 33 cf 16 a5 0c 69 63 0d 85 cc da 7f 90 63 22 Data Ascii: }qLNrUWM=y+Is]I;r% \|)\4wU;JouF7Nkuo_z`-l-[]?/pYmh7A}uS][J:oqyt-hJ.wJ[z"WHw%gVO%UkRMn'm8Oi{ZIco3icc"
2024-05-24 22:57:13 UTC	1369	IN	Data Raw: 6a 9d bf 27 93 4e a4 e3 5a d9 6d 3a 57 8b 96 1e 52 a9 cc a3 39 c1 b4 e5 09 34 a5 6a af a4 94 a6 ee dd 9d d9 cf 37 8a 3e 14 be a1 a9 e9 fa 57 86 f5 a9 9d ae 52 cf 4d d3 6e ad 35 4d 43 50 bb b7 b4 b7 84 69 88 9a a5 b5 cb db 5a 9b ad 42 3b 8d 45 e5 be d2 f5 1b 8b 9d 3e e1 6c 3e d0 d7 f3 1b 78 b0 9d 58 f3 5a 0d a5 d2 fe f3 f9 da 2b 5b f9 1a d3 a7 c5 91 69 49 61 dc 79 ae dc 61 49 25 1e 67 f0 a6 e4 d5 a3 d1 ca 4e ea f7 d4 b1 16 91 69 36 9d e2 c4 d3 bc 0f e2 69 6c f5 a9 f5 19 ac df 52 f0 d4 16 b3 68 1f da 36 d2 c5 66 ab 71 79 39 b8 8e c7 4e 99 16 f2 54 d1 1e ea e2 f2 e3 cc 4b ab 78 e0 b8 10 be 52 ad 39 26 93 7c ba 76 ed 65 d2 cb f5 3d 38 42 ba cc a9 2a b8 c8 42 4d 45 49 c6 92 50 72 e4 5c f1 8a 69 26 9d ec ae a4 d3 b3 b3 69 19 3a 7c 3e 29 d3 ad 7c 21 a5 e9 bf 07 Data Ascii: j'NZm:WR94j7>WRMn5MCPiZB;E>l>xXZ+[iIayaI%gNi6ilRh6fqy9NTKxR9&\|ve=8B*BMEIPr\i&i:\|>)\|!
2024-05-24 22:57:13 UTC	1369	IN	Data Raw: fe b9 e1 5e 23 96 79 0a 52 e6 6f dd 8f 56 ef a2 b3 97 af ab b5 ae fc bf c8 8f 1a 3c 1a 87 0d 67 75 f9 23 08 c6 2e 72 e5 8c 62 93 b2 6f 65 be da 2f 3b ad 4f 9f 34 bf 12 6b de 1d d1 ec f4 db 6b 8b 69 ee 2d 6e 2d ee 8e a3 2d a1 0f 24 e8 1d ee 48 87 ed 0c b1 ac d7 12 b9 89 44 8c d6 f6 a9 6d 6a ef 70 d0 1b 89 3f 46 4f 6b 74 d3 7b fc ba 5f ee 57 ec 7f 24 d5 a7 38 54 9c 54 24 f9 65 24 9a 8b d2 d2 69 f4 7b fe 17 d0 f6 db 7b 67 7b 1f b6 10 11 67 b9 96 e4 46 08 62 96 f7 61 5e 39 37 00 01 13 5c 25 d4 c4 01 88 cc 9e 5e 5b 66 f7 ef 82 d1 bf 4d 3b 2d 7a fc 9b b7 4b 3b bb ef c6 ef 04 dc 93 5a 5e f2 5c bb 6f 74 fa 2b af d3 dd b5 bf a8 8f f8 35 75 f6 7e d2 1f b6 46 23 b8 4f 33 e0 47 c2 cb 8f df c2 20 ff 00 5d f1 0b c6 63 62 7c f2 6f d9 b4 92 df 29 e5 7e 51 90 6b bf 08 d3 Data Ascii: ^#yRoV<gu#.rboe/;O4kki-n--$HDmjp?FOkt{_W$8TT$e$i{{g{gFba^97\%^[fM;-zK;Z^\ot+5u~F#O3G ]cb\|o)~Qk
2024-05-24 22:57:13 UTC	1369	IN	Data Raw: 9c 95 9d fd ab ba 6b 55 6d 3b ad 9b b6 f6 ee 99 a7 78 0b 5f 31 79 b7 fa ae 9a a6 4f 2d 0a 5c 6a 8f 36 c9 84 11 4f 71 0c 4c 61 50 45 af da a3 4b 96 c6 07 93 74 70 3e ce a2 69 96 22 4f de 56 e5 6b 7b db 5d 3a db 5d d5 f4 49 79 d9 8e a6 61 85 6d d3 59 3f 32 b5 9f 32 93 69 35 25 16 9a 8d 9a 7c 92 4b ad 92 df 9a 29 ef c7 e2 3f 19 78 77 c2 5a df 87 e5 f1 84 90 e9 ba c0 b0 8f c4 36 2b 32 ea 91 ea 70 58 db 3c 36 70 59 dd bc 11 dc c2 63 9c 9b 89 5e d4 c6 4e e8 a0 91 64 f9 25 8c 8e 22 56 92 e6 e5 52 b5 d6 96 93 8f 56 d4 52 49 36 b5 f4 b5 b6 7f 19 2e 14 c9 65 9d d3 ce e5 92 a7 52 94 a7 2a 69 d4 9d a3 29 c7 92 76 8d ac af de db 5d 5f 57 7f 1f d6 74 3d 4f 53 7b bb f9 f5 9d 26 e1 85 fe a3 2c d7 57 5a 8c b2 cd 75 21 17 5b ae 8d cc e2 6b 8b 85 b8 1a 5a 8b 78 3c cb 8b 96 Data Ascii: kUm;x_1yO-\j6OqLaPEKtp>i"OVk{]:]IyamY?22i5%\|K)?xwZ6+2pX<6pYc^Nd%"VRVRI6.eR*i)v]_Wt=OS{&,WZu![kZx<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	49950	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:13 UTC	943	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428462&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:13 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:57:13 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	49949	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:13 UTC	906	OUT	GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428464&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:13 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=95, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:13 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.5	49948	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:13 UTC	906	OUT	GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428465&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:13 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=96, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:13 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.5	49946	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:13 UTC	1255	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428466&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:13 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x4172baf88b225bc1","source_keys":["1","2"]},{"key_piece":"0x0200d14e8dc1bf6f","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:57:13 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:57:13 UTC	1788	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:57:13 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.5	49951	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:13 UTC	943	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428465&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:13 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:57:13 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.5	49953	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:13 UTC	943	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428464&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:13 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:57:13 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.5	49952	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:13 UTC	906	OUT	GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428466&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:13 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=95, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:13 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.5	49954	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:14 UTC	943	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dwhiskys&rl=&if=false&ts=1716591428466&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591425322&coo=false&dpo=&eid=izvbg64or88PageView1716591423520&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:15 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:57:15 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.5	49956	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:16 UTC	911	OUT	GET /products?handler=asics HTTP/1.1 Host: www.cravob.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:17 UTC	302	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:16 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:17 UTC	16082	IN	Data Raw: 31 66 66 34 38 0d 0a 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 67 65 6e 65 72 61 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 41 6d 61 7a 6f 6e 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c Data Ascii: 1ff48 <!DOCTYPE html><html lang="en" class="general"><head> <meta charset="UTF-8"> <meta name="keywords" content="Amazon"> <titl
2024-05-24 22:57:17 UTC	16384	IN	Data Raw: 65 64 69 75 6d 2e 74 74 66 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 6d 6f 56 61 72 69 61 62 6c 65 46 6f 6e 74 5f 77 67 68 74 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 73 68 6f 70 79 6d 6e 2e 63 6f 6d 2f 6c 69 71 75 69 64 2f 62 75 79 65 72 2f 70 75 62 6c 69 63 2f 63 73 73 2f 66 6f 6e 74 2f 41 72 69 6d 6f 2d 56 61 72 69 61 62 6c 65 46 6f 6e 74 5f 77 67 68 74 2e 74 74 66 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4c 69 62 72 65 46 72 61 6e 6b 6c 69 6e 56 61 72 69 61 62 6c 65 46 6f 6e 74 5f 77 67 68 74 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 73 68 6f 70 79 6d 6e 2e 63 6f 6d 2f 6c 69 Data Ascii: edium.ttf);font-weight:700}@font-face{font-family:ArimoVariableFont_wght;src:url(https://fonts.shopymn.com/liquid/buyer/public/css/font/Arimo-VariableFont_wght.ttf)}@font-face{font-family:LibreFranklinVariableFont_wght;src:url(https://fonts.shopymn.com/li
2024-05-24 22:57:17 UTC	16384	IN	Data Raw: 6d 61 69 6e 20 2e 72 65 63 65 6e 74 6c 79 2d 6f 72 64 65 72 73 2d 62 6f 78 20 2e 6f 72 64 65 72 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 2e 74 61 62 6c 65 2d 62 6f 64 79 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 7b 77 69 64 74 68 3a 36 70 78 7d 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 6d 79 2d 6f 72 64 65 72 73 2d 63 6f 6e 74 65 6e 74 20 2e 6f 72 64 65 72 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 2e 74 61 62 6c 65 2d 62 6f 64 79 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 72 65 63 65 6e 74 6c 79 2d 6f 72 64 65 72 73 2d 62 6f 78 20 2e 6f 72 64 65 72 2d 62 6f 78 2d 63 6f 6e 74 65 6e Data Ascii: main .recently-orders-box .order-box-content .table-content.table-body::-webkit-scrollbar{width:6px}.account-main .my-orders-content .order-box-content .table-content.table-body::-webkit-scrollbar-thumb,.account-main .recently-orders-box .order-box-conten
2024-05-24 22:57:17 UTC	16384	IN	Data Raw: 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 61 63 63 6f 75 6e 74 2d 73 65 63 75 72 69 74 79 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 69 74 79 2d 65 6d 61 69 6c 20 2e 73 65 63 75 72 69 74 79 2d 62 6f 78 20 2e 73 65 63 75 72 69 74 79 2d 69 6e 70 75 74 2d 62 6f 78 2d 72 6f 77 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 3a 68 6f 76 65 72 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 61 63 63 6f 75 6e 74 2d 73 65 63 75 72 69 74 79 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 69 74 79 2d 65 6d 61 69 6c 20 2e 73 65 63 75 72 69 74 79 2d 62 6f 78 20 2e 73 65 63 75 72 69 74 79 2d 69 6e 70 75 74 2d 62 6f 78 2d 72 6f 77 20 73 65 6c 65 63 74 3a 68 6f 76 65 72 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 61 63 63 6f 75 6e Data Ascii: .account-main .account-security-content .security-email .security-box .security-input-box-row input:not([type=checkbox]):hover,.account-main .account-security-content .security-email .security-box .security-input-box-row select:hover,.account-main .accoun
2024-05-24 22:57:18 UTC	16384	IN	Data Raw: 65 63 74 69 6f 6e 2d 68 65 61 64 65 72 20 2e 6d 6f 72 65 2d 69 6e 66 6f 7b 63 6f 6c 6f 72 3a 23 30 30 38 64 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 73 65 63 74 69 6f 6e 2d 68 65 61 64 65 72 20 2e 6d 6f 72 65 2d 69 6e 66 6f 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 79 2d 63 6f 75 70 6f 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 70 6f 6e 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 2e 6d 79 2d 63 6f 75 70 6f 6e 2d 63 6f Data Ascii: ection-header .more-info{color:#008dff;position:absolute;right:0;top:0;font-size:14px;cursor:pointer}.account-main .section-header .more-info:hover{text-decoration:underline}.my-coupon-content .coupon-item-content{display:flex;flex-wrap:wrap}.my-coupon-co
2024-05-24 22:57:18 UTC	16384	IN	Data Raw: 65 72 7d 2e 6d 79 2d 61 63 63 6f 75 6e 74 2d 6d 6f 62 69 6c 65 20 2e 61 63 63 6f 75 6e 74 2d 6d 65 6e 75 2d 6d 6f 62 69 6c 65 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 30 70 78 7d 2e 6d 79 2d 61 63 63 6f 75 6e 74 2d 6d 6f 62 69 6c 65 20 2e 61 63 63 6f 75 6e 74 2d 6d 65 6e 75 2d 6d 6f 62 69 6c 65 20 2e 61 63 63 6f 75 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 7b 68 65 69 67 68 74 3a 36 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 36 30 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 31 30 32 2c 31 30 32 2c 31 30 32 2c 2e 32 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6d 79 2d 61 63 63 6f 75 6e 74 2d Data Ascii: er}.my-account-mobile .account-menu-mobile{padding:0 16px;margin-bottom:40px}.my-account-mobile .account-menu-mobile .account-menu-item{height:60px;line-height:60px;border-bottom:1px solid rgba(102,102,102,.2);font-size:14px;position:relative}.my-account-
2024-05-24 22:57:18 UTC	16384	IN	Data Raw: 69 7a 65 3a 32 30 70 78 3b 74 6f 70 3a 35 30 25 3b 72 69 67 68 74 3a 35 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 6e 68 65 72 69 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 7d 2e 63 61 72 74 6c 69 73 74 2d 64 69 73 63 6f 75 6e 74 2d 74 69 70 73 7b 77 69 64 74 68 3a 32 34 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 35 70 78 3b 6c 65 66 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 Data Ascii: ize:20px;top:50%;right:5px;cursor:pointer;text-align:center;font-style:inherit;position:absolute;transform:translateY(-50%);line-height:18px}.cartlist-discount-tips{width:240px;position:absolute;top:-5px;left:0;text-align:center;line-height:18px;font-size
2024-05-24 22:57:18 UTC	16384	IN	Data Raw: 72 50 69 65 63 65 4c 69 73 74 20 2e 63 6f 6c 6f 72 50 69 63 65 2d 6c 69 73 74 20 2e 63 6f 6c 6f 72 4e 75 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 36 70 78 7d 2e 63 6f 6c 6f 72 50 69 65 63 65 4c 69 73 74 20 2e 63 6f 6c 6f 72 50 69 63 65 2d 6c 69 73 74 20 2e 68 69 64 64 65 6e 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 35 73 20 65 61 73 65 20 30 73 3b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 63 6f 6c 6f 72 50 69 65 63 65 4c 69 73 74 20 2e 63 6f 6c 6f 72 50 69 63 65 2d 6c 69 73 74 20 2e 73 77 61 74 63 68 2d 65 6c 65 6d 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 3a Data Ascii: rPieceList .colorPice-list .colorNum{font-size:14px;position:relative;top:6px}.colorPieceList .colorPice-list .hiddens{display:none;transition:all .25s ease 0s;backface-visibility:hidden}.colorPieceList .colorPice-list .swatch-element{display:flex;margin:
2024-05-24 22:57:18 UTC	16384	IN	Data Raw: 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 62 6f 64 79 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 63 6f 6e 74 65 6e 74 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 6d 6f 64 61 6c 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 76 69 65 77 0d 0a 31 66 66 66 30 0d 0a 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 63 6f 6e 74 65 6e 74 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 6d 6f 64 61 6c 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 6c 65 66 74 2c 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 63 6f 6e 74 65 6e 74 20 2e 63 75 73 74 6f 6d 69 7a 65 Data Ascii: mize-product-body::-webkit-scrollbar{display:none}.customize-product-content .customize-product-modal .customize-product-view1fff0{flex-wrap:wrap}.customize-product-content .customize-product-modal .customize-left,.customize-product-content .customize
2024-05-24 22:57:18 UTC	16384	IN	Data Raw: 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 62 32 22 7d 2e 69 63 6f 6e 2d 4c 5f 73 68 61 6e 63 68 75 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 62 31 22 7d 2e 69 63 6f 6e 2d 78 75 61 6e 7a 68 6f 6e 67 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 62 30 22 7d 2e 69 63 6f 6e 2d 78 75 61 6e 7a 68 6f 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 61 66 22 7d 2e 69 63 6f 6e 2d 68 75 6f 64 61 6f 66 75 6b 75 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 61 65 22 7d 2e 69 63 6f 6e 2d 66 61 6e 67 64 61 6a 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 61 64 22 7d 2e 69 63 6f 6e 2d 67 65 72 65 6e 7a 68 6f 6e 67 78 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: g:before{content:"\e6b2"}.icon-L_shanchu:before{content:"\e6b1"}.icon-xuanzhong1:before{content:"\e6b0"}.icon-xuanzhong:before{content:"\e6af"}.icon-huodaofukuan:before{content:"\e6ae"}.icon-fangdajing:before{content:"\e6ad"}.icon-gerenzhongxin:before{con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.5	49957	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:25 UTC	638	OUT	GET /liquid/buyer/public/js/plug/Swiper.js HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ee8-1e6ff" If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
2024-05-24 22:57:25 UTC	611	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:25 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-1e6ff" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367926 Expires: Sat, 25 May 2024 02:57:25 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e274ec14f7f0-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.5	49961	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:25 UTC	659	OUT	GET /liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66504476-188b7" If-Modified-Since: Fri, 24 May 2024 07:40:38 GMT
2024-05-24 22:57:25 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:25 GMT Connection: close last-modified: Fri, 24 May 2024 07:40:38 GMT vary: Accept-Encoding etag: W/"66504476-188b7" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54147 Expires: Sat, 25 May 2024 02:57:25 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e278d92bf7f8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.5	49962	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:25 UTC	619	OUT	GET /wp-includes/img/pro-shipping-protection.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:25 UTC	178	IN	HTTP/1.1 403 Forbidden Date: Fri, 24 May 2024 22:57:25 GMT Content-Type: text/html Content-Length: 131 Connection: close Server: cloudflare CF-RAY: 8890e278f9d3f7f0-BNA
2024-05-24 22:57:25 UTC	131	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 70 6c 65 61 73 65 20 64 6f 6e 27 74 20 6d 65 73 73 20 61 72 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <meta charset="UTF-8"> <title>please don't mess around</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.5	49963	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:25 UTC	614	OUT	GET /wp-includes/img/shipping-insurance.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:25 UTC	178	IN	HTTP/1.1 403 Forbidden Date: Fri, 24 May 2024 22:57:25 GMT Content-Type: text/html Content-Length: 131 Connection: close Server: cloudflare CF-RAY: 8890e278fcaa6a7a-BNA
2024-05-24 22:57:25 UTC	131	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 70 6c 65 61 73 65 20 64 6f 6e 27 74 20 6d 65 73 73 20 61 72 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <meta charset="UTF-8"> <title>please don't mess around</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.5	49958	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:26 UTC	626	OUT	GET /uploader/d95cf4e2f5344172719039a44aa47bfcf3fadb64.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:26 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:26 GMT Content-Type: image/jpeg Content-Length: 59104 Connection: close x-oss-request-id: 66511B56F488A538392C8D8E ETag: "3EDD2A498E16B3025FFBD9602894B03F" Last-Modified: Mon, 23 Oct 2023 02:04:38 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 17953471208082269233 x-oss-storage-class: Standard Content-Disposition: inline; filename="221f74b1ef5a3b418d92cc34eda993bc7e282579_221" Content-MD5: Pt0qSY4WswJf+9lgKJSwPw== x-oss-server-time: 73 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:26 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e27aeceaf7f8-BNA
2024-05-24 22:57:26 UTC	690	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:26 UTC	1369	IN	Data Raw: 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 09 ff c4 00 1a 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ec b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 35 d1 83 96 02 f0 6c 23 61 11 00 00 00 00 00 00 00 Data Ascii: %'/9339GDG]]}C) )/'%'/9339GDG]]}!5l#a
2024-05-24 22:57:26 UTC	1369	IN	Data Raw: 00 00 49 38 a4 e6 82 61 54 4d b2 8a af 2c 90 4e 84 b9 4b 2b 0a 63 30 87 61 5a bb 18 a4 b2 86 51 52 64 4c c1 15 ad 5b 1d 86 04 6d a9 57 94 e6 0d 0b 61 54 64 c6 57 2a 53 95 b0 65 e8 ac d8 2a 26 dc 39 8a 6c 76 8b 1a d9 72 bd 09 7a e4 55 b7 53 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 4f 38 f6 c9 07 95 4f 24 11 91 15 00 94 79 64 35 41 65 d6 19 0a 3a b2 d1 b6 56 b0 e5 ad 4d 1e 1e 14 15 78 b4 c8 25 5e 57 13 e1 19 11 2c b2 9c cf a7 9f 6d 6a 66 da 1d 7d 2d 2d 59 e3 d8 89 32 b9 d9 90 43 a7 ed 18 0d 5d bf 13 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 28 e4 59 72 94 a4 13 aa f0 82 ca 52 94 98 4e 27 12 c9 04 47 82 ae 83 3b 06 eb 7d eb 2c ae a2 84 b0 96 b2 e4 5c 56 ab 27 9e 42 5c a4 98 f9 cd 3a 1b 39 77 07 af b9 bd 37 0e f7 9f 1f 0d e2 Data Ascii: I8aTM,NK+c0aZQRdL[mWaTdWSe&9lvrzUSO8O$yd5Ae:VMx%^W,mjf}--Y2C](YrRN'G;},\V'B\:9w7
2024-05-24 22:57:26 UTC	1369	IN	Data Raw: b5 05 e2 75 67 1f dc d7 e9 1e df 33 23 45 0c 23 ad a5 43 8e 6b 36 f4 d0 2b 6c c3 9e e9 a9 b3 b1 f8 fd 6d 81 cc e9 5e 70 e6 ca 36 f4 f2 4f 55 e6 e1 de d3 d0 7c de 8d 3c d7 33 88 d9 db 9a bb d3 2e 19 80 00 00 00 00 00 00 00 00 00 00 00 00 96 63 d6 af 3e 4d b9 16 16 e2 b0 84 84 a0 3c 23 28 4a b3 b9 cd e5 35 d4 6b 70 f5 5d 59 2e 8e 9a cb b5 a4 4d 68 8e 67 d2 d9 c8 78 3d 3a dc f4 91 d9 e7 6e 8d dd 79 46 07 0d 03 a7 b3 7b e2 f4 36 36 1b 6a be 96 ae cf ec 68 50 4b 47 72 37 72 fe 66 fd ca b3 93 42 9e f1 5b de e5 6c 5d 9c 15 b0 e7 aa db 4b 16 7a b3 6e 47 57 69 70 fb 59 1e 9e dd cf 15 af fb da 79 0f a2 e0 da fa 5a 5a d7 5b 67 5e 6a 6c 5b 70 df 7b f7 79 3b cb 26 2a 83 34 a3 d0 00 00 00 00 00 00 00 00 00 00 00 1e 16 f9 ad a6 d6 c6 4b 49 68 30 13 54 d5 a6 e5 19 19 30 Data Ascii: ug3#E#Ck6+lm^p6OU\|<3.c>M<#(J5kp]Y.Mhgx=:nyF{66jhPKGr7rfB[l]KznGWipYyZZ[g^jl[p{y;&*4KIh0T0
2024-05-24 22:57:26 UTC	1369	IN	Data Raw: 76 0a 33 9e 35 b3 e7 5e 73 ab 6e c1 9b 2a d4 cb 8f fa 0e 66 b9 d9 c5 49 c8 e9 6c 8d 1d ca bb 56 eb b5 ad 95 7a ae 05 0c ce 25 55 8a c9 24 e3 23 ab 36 56 fa 42 50 ad 6f b3 ca b1 a8 8e 7c 3a 46 b1 be c0 00 00 00 00 00 00 00 02 86 56 9b 20 b2 30 7b 52 c1 e9 e9 11 e0 22 aa 74 a5 82 08 49 b2 12 22 7d 5e 12 89 36 78 4a 97 85 1c d6 74 a5 42 29 47 09 27 b2 94 78 6b c8 b6 21 e6 7b 34 f8 ed 8f f6 39 fd 29 d3 d2 80 96 52 59 ce 1c 7d fd 8f e6 fb 18 8f a4 e3 dd 78 bd 2d 71 b3 86 f3 83 3e c1 e4 f5 2e 3b 7a b5 db 38 2f fe b3 cf 62 52 b7 02 02 b0 c8 0c 84 b9 d5 20 b5 92 cb c5 62 74 30 04 6e 33 28 00 00 00 00 00 00 00 00 53 ca cd 75 3c a2 22 21 22 3d 22 00 f0 9a 45 57 92 f6 03 d9 79 08 81 0c a9 e5 24 f0 09 40 a9 69 6a c2 b4 ab 56 18 43 29 e4 b8 4a 94 65 19 ce b8 33 5a fc Data Ascii: v35^sn*fIlVz%U$#6VBPo\|:FV 0{R"tI"}^6xJtB)G'xk!{49)RY}x-q>.;z8/bR bt0n3(Su<"!"="EWy$@ijVC)Je3Z
2024-05-24 22:57:26 UTC	1369	IN	Data Raw: b3 75 df d3 cb fd 57 9d c2 ef 5c 6a 1c f1 5a fd 13 32 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 c1 d6 59 d6 b1 12 01 b1 cd ef 92 b0 11 82 a0 aa 2a ca d5 ab 08 95 85 6a c4 13 14 26 cd 7c 5a 25 66 1e 93 ac 8c 96 ac 24 c4 c0 89 8b 5b 62 25 a6 df 0a 28 63 14 b5 e3 1d b6 2e 1b cf c3 96 8e b7 a5 d2 cf 23 5f 35 24 5e cd ab b7 61 d5 db bd ef e8 65 7e a7 cf 48 cb 8b 56 d6 da 22 23 bf 51 9c 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 04 38 aa d6 c2 8b 09 20 88 e9 7b d7 2b ba 1a a0 b2 1a bd 26 15 04 c2 35 aa 15 9e 41 16 9a 78 4e 90 a8 57 c2 51 38 a9 b3 c8 49 25 c2 84 a6 ad ac d4 5d ab 6a fc 56 ce ab 68 35 b3 51 d2 f2 75 33 c1 8e d2 56 b6 e0 d9 c4 79 7d 39 d9 f0 de 3a 7c fc 97 d1 f0 69 72 63 d7 d5 9d 1b 11 de a6 62 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: uW\jZ2Y*j&\|Z%f$[b%(c.#_5$^ae~HV"#Q8 {+&5AxNWQ8I%]jVh5Qu3Vy}9:\|ircb
2024-05-24 22:57:26 UTC	1369	IN	Data Raw: 9b 9c b7 6e ec 22 0b 49 69 5a 4e b2 ea ae 6c 33 02 1c 01 1e 12 4b 1c 2c 2f 93 50 f8 81 ce cc 75 1c e2 e2 49 fe 4b 7d c3 e6 a5 1f 4a ab 42 b2 e3 e6 9c d6 d6 98 58 82 29 7e f7 34 cc 82 27 c8 fd 42 cb ed 4e f9 1d a4 e8 fe 60 0b 36 37 d6 85 9b 63 88 90 03 1f 96 95 a9 40 6d 52 9a 36 e2 26 a7 bb 78 c2 3e a8 18 f4 7c 34 6d 63 cb 11 5e 77 48 c6 37 7b ae 7c 43 0c 5b 9b 5e d5 eb 16 dd ba 6f e5 b3 dc 3e 5a 91 f5 6c 30 26 8c 6d 0a 57 ee d4 0a d1 5f ba ac ad fb de bd 7b 74 82 b3 74 ad 33 cd b8 d8 9c 4d 2d 92 7a 4f 3e 5a 6c 17 09 e3 11 58 90 48 61 73 d8 63 b1 14 87 6c 77 34 98 6d b9 d2 b2 d4 33 53 7f 4e 4c 96 c7 d3 f0 ed e1 d6 91 cd 0c 27 f9 b1 fb be 5d 1e 2f f5 13 ce c6 28 9f d4 b1 3c ab 43 93 16 2f 45 f7 ad 4e fb 69 40 4a a3 4d da 9d 83 b9 8c 6b 1a d6 31 6e 0e e1 1a Data Ascii: n"IiZNl3K,/PuIK}JBX)~4'BN`67c@mR6&x>\|4mc^wH7{\|C[^o>Zl0&mW_{tt3M-zO>ZlXHasclw4m3SNL']/(<C/ENi@JMk1n
2024-05-24 22:57:26 UTC	1369	IN	Data Raw: 5a b9 0c 6e b5 5a 4a 8f 21 d9 5a 65 d8 18 e1 0c fe 4e 24 2a c4 ba 31 84 00 0b 85 9f c6 51 2b 27 1c 98 a3 28 b5 ff 00 4e 56 02 c3 93 b1 f5 0f 70 e1 49 2b 18 d2 f7 c9 a8 c9 69 c6 2a 90 b1 90 44 02 74 86 57 65 d5 2a ba fb f0 3f 4e 26 06 32 79 b6 34 95 72 c7 99 9f 28 13 b7 6a 00 b8 8c 4b 86 86 c2 da 51 75 5e 0a b5 a8 39 bb a1 82 9c 1b 9c 1c 75 59 30 c8 22 14 b8 84 2d 3d d9 8d e3 ed fa 95 06 db b7 1c 93 dc d5 21 a7 0b 63 af 26 e9 5c e7 bb 9c f2 1d dd 06 33 94 ff 00 4b 8b 96 7c 0e 70 b6 ee 5a 40 73 75 2a 99 b7 53 cc 34 ab 55 4c 6e 73 82 d1 2e 89 a0 e8 39 3b 85 95 95 96 f7 44 e7 28 e7 e8 4e 3b 87 17 7b 77 06 fb b3 94 0e 16 ff 00 cb df 80 ac ea ad 69 2c 83 a6 f9 dd d4 b2 07 96 87 01 ac fc 54 81 f7 9c 42 06 26 34 32 37 b9 6b 16 f6 b3 a6 d6 47 c2 db 80 a3 fd 36 99 Data Ascii: ZnZJ!ZeN$1Q+'(NVpI+iDtWe?N&2y4r(jKQu^9uY0"-=!c&\3K\|pZ@suS4ULns.9;D(N;{wi,TB&427kG6
2024-05-24 22:57:26 UTC	1369	IN	Data Raw: fe 6e 3d ec 71 c1 5f 0e 64 c1 63 e4 70 ca 99 b2 69 f6 8c d2 f5 da e0 1c df f2 93 c3 1b 1f 5f 51 74 4e 6c 76 77 0c 04 5d 85 62 dc 50 0c ba 5b 96 ae 13 b2 ae 9d ec 73 5d 04 61 a4 09 b2 f9 cc 34 a9 e9 70 c4 7a 93 dd d3 a8 3c 12 a0 12 bc bd a4 76 f4 86 e5 30 06 00 e1 24 30 3f 2e 51 5b 92 1f 44 e0 87 b7 2c c6 d0 b5 5b 5b 8f 95 61 70 0b 73 9e 70 d8 b4 f9 1f 83 2c 75 a2 8b b6 dc a1 1a 6c 25 35 8d 1d a6 b3 0c 1e f9 35 61 fd 8f b7 35 8e 1d f8 54 ea 97 35 a4 b1 81 81 1f b1 97 fe 32 a5 16 5c 0b 62 1a 74 0e c1 99 fa 2e 9a e2 4a 7f c3 75 0f b2 fe 87 35 46 09 22 f5 37 dc 0f c9 53 4a b3 75 9d 48 cf c3 fa 89 18 5a 5e 9e ed 3a 07 b1 c3 81 e1 a9 e8 de 72 43 34 3a 6d 2f 23 5c 47 f2 b9 ad 73 48 75 cd 39 f5 37 4b 52 0f f3 45 bb 24 64 2e 8f a2 18 f9 74 f7 34 49 66 fc be d8 1c Data Ascii: n=q_dcpi_QtNlvw]bP[s]a4pz<v0$0?.Q[D,[[apsp,ul%55a5T52\bt.Ju5F"7SJuHZ^:rC4:m/#\GsHu97KRE$d.t4If
2024-05-24 22:57:26 UTC	1369	IN	Data Raw: 49 23 6d 8b 1f d4 19 3f 19 27 e5 fc f8 e4 78 ee 5b bc 72 57 a9 72 ba 85 75 16 ec ac f8 e4 2c 05 8f ce d6 78 17 e3 2b 70 2b 69 fa 62 40 bf f5 ed 8d aa 36 19 a6 b7 3a e8 b1 a5 6a 12 3d 9b 2a c7 04 0d ab 04 70 b7 2b 71 45 cb 51 63 ad 58 ab 55 92 9c 34 10 5d 18 7b 42 c3 78 45 ec 82 c1 2e b1 65 d2 95 14 05 fe a5 14 61 3d dc ed 11 47 8c a1 80 9d 28 6a 7d 82 ef 6f ac ad a8 33 29 90 a6 33 1e 25 c8 92 7c 2d 5b af 55 be a7 d8 b5 a8 49 b1 ba 76 8c da fb 65 9f fa 72 f1 f4 24 9e ff 00 2e 17 08 7d 17 65 90 b7 0f 0c e1 6e 0b 2b 80 b7 b5 75 1a b2 d5 ca ca c9 5c ae 56 7c 32 e5 dd 6d 0b b2 ca de d5 dd 7a d7 2a fc 8d 8a bc ae 31 9f 2d 1c 4d 63 ec c6 c7 ec 65 1a dd 4d 47 72 22 45 cf d5 1c a6 c8 e9 35 1b 4e 6b 22 23 bd 88 7c c7 56 41 1d ad f1 34 a9 a5 ea bc 62 08 37 1c bc 34 Data Ascii: I#m?'x[rWru,x+p+ib@6:j=p+qEQcXU4]{BxE.ea=G(j}o3)3%\|-[UIver$.}en+u\V\|2mz1-MceMGr"E5Nk"#\|VA4b74

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.5	49964	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:26 UTC	719	OUT	GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "CAE408692E9DF180175752E8BC159AD1" If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
2024-05-24 22:57:26 UTC	542	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:26 GMT Connection: close x-oss-request-id: 6650748AF488A53436FC7D32 ETag: "CAE408692E9DF180175752E8BC159AD1" Last-Modified: Tue, 31 Oct 2023 09:59:39 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3292476528251743927 x-oss-storage-class: Standard Content-MD5: yuQIaS6d8YAXV1LovBWa0Q== x-oss-server-time: 38 CF-Cache-Status: HIT Age: 42700 Expires: Sat, 25 May 2024 02:57:26 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e27eb9c7f7e0-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.5	49965	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:26 UTC	626	OUT	GET /uploader/42fe369e4f6000c81180a4420f0bd212c0832e7f.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:27 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:27 GMT Content-Type: image/jpeg Content-Length: 63140 Connection: close x-oss-request-id: 66511B57E2741F30354B80D9 ETag: "E180934640BC82AC3DAB5E6DC5F11882" Last-Modified: Mon, 23 Oct 2023 02:04:34 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11834638427808942853 x-oss-storage-class: Standard Content-Disposition: inline; filename="2218d88c4900aa11816c7943d3b58b180b389565_221" Content-MD5: 4YCTRkC8gqw9q15txfEYgg== x-oss-server-time: 59 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:27 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e27ec847f7d8-BNA
2024-05-24 22:57:27 UTC	690	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 08 09 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: %'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: d2 7a d6 3d df 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 7f e5 67 cc de 3c f9 f3 eb b0 33 5d d7 76 0d ed 79 67 a1 77 be 0e f2 2c ef 2f 9b 80 b5 b9 37 20 d4 da 63 32 09 5f 48 44 c2 69 20 e7 8a 03 10 94 a2 1e b2 ea 01 43 11 61 43 21 28 c0 6d b9 4c 6b de 82 b7 54 62 97 45 0e b0 dc d3 8f 23 f3 7d 6d 6f 77 a2 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 78 67 c5 8f 15 f4 3c b7 d1 bc c7 56 d7 8e 73 fe bd df 4d 4e aa f4 d9 8f 14 ad f4 aa 66 c7 27 b5 cc 4e e6 46 32 f3 10 28 5c 45 2f 23 13 f5 13 18 b1 27 57 62 3e a8 44 a5 e5 4b 4c 26 03 d7 4c a7 99 98 4e 8c 8e 54 9b 28 d3 3b 3c ac b6 da 63 61 4d e7 06 93 bb d7 31 eb 58 f4 8b 4f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 52 5f 37 fe 6e 3c 1f eb 6f 1f d5 cd f6 a9 f1 32 48 dd 12 25 da 33 bd cb f2 9e ce 23 Data Ascii: z=@g<3]vygw,/7 c2_HDi CaC!(mLkTbE#}mowxg<VsMNf'NF2(\E/#'Wb>DKL&LNT(;<caM1XOR_7n<o2H%3#
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: b9 55 2a 75 a9 fb 3c f7 b0 00 06 2e 4f 19 fe 23 e5 e3 be 2f 29 7c e2 bd e3 92 fd 7f 4c 1f 52 f3 fa b7 5b ed be 33 d1 5c e7 bb 64 79 73 12 24 79 b8 ef fe 46 6f 7e 5c 7a 17 e7 59 bc ec 75 8d 5f d1 8f a3 1d b4 1f 41 e7 df a5 e9 e7 1f ae f5 e3 f5 77 db 4b 6b d5 b0 d7 9a 15 3d 5a 9c 2c a6 63 d2 4e 5e 9e 79 ae 77 27 78 ae f7 76 4c e6 d0 f1 2d 9e da b6 22 b9 fc d9 32 d5 db d0 19 35 9c bc d6 f4 ec 99 e6 59 b7 10 cc e4 fd 74 fe 69 63 8e ed 5b 6e 11 32 5d 5f 97 7c cb ea 57 73 f3 67 51 ed 72 3d af 7f b9 6b 75 65 c4 02 5e 86 32 94 d7 32 51 a9 65 cd 84 9c 6a c4 66 3b 03 e8 26 7d 8c c0 00 1a 7f 96 f3 cf e4 b9 c1 7c 9f 9f 1f 8e ec 7c cd 87 96 6d a9 89 de 6e c4 88 da 74 cc 1d f7 15 d6 b7 d1 10 fd 0c 55 33 38 5c be 35 95 b0 bd 59 1b d5 1b 0e 0c 5d 66 2f a5 93 72 1e cf 21 Data Ascii: U*u<.O#/)\|LR[3\dys$yFo~\zYu_AwKk=Z,cN^yw'xvL-"25Ytic[n2]_\|WsgQr=kue^22Qejf;&}\|\|mntU38\5Y]f/r!
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: cb 57 e6 c8 33 19 59 72 6a 5e 63 0a b3 58 93 8a 51 3c 39 13 c6 bf ae ce fa ca 96 4a 97 b1 a2 6c fc 8c db e0 31 4f d6 54 9f 5a de 0a 78 77 17 8a 2d f9 f9 5f 99 36 7c d5 be 34 5e 11 af f2 4d dc 33 29 97 19 35 9f d1 59 bd 3b 5a dc 78 cb d7 2f ef ae 6c 7c d8 79 b0 f9 57 74 5a aa 64 d7 6f 4d f5 37 9e fa 39 a3 f4 b6 14 d0 df 48 7e f9 cd d9 ab e9 98 f5 92 db 06 cb 37 76 9f ae 93 92 47 99 d0 fc e9 db f9 da cf 9d 9a df 9d 8f 36 d3 58 f8 b3 5a 4f 6d 93 eb c5 b4 ff 00 2b 61 6d 7c ff 00 fd 06 bc 4f f6 59 d3 d6 fd 06 cf aa 59 92 80 00 3c be ba 5a a9 5a 91 8c c5 53 91 96 97 19 88 66 52 85 85 9a bb 14 31 ea b8 10 f5 28 a6 2e 2a 63 65 4b 1b 93 50 49 8d c6 c8 e6 6e 19 07 c5 3a ff 00 93 cf 5d f0 79 45 fc fc c3 fc ff 00 2a fc f4 ce 55 2a fa 4d f7 25 fb 3a 67 f5 68 0b 5f 6b Data Ascii: W3Yrj^cXQ<9Jl1OTZxw-_6\|4^M3)5Y;Zx/l\|yWtZdoM79H~7vG6XZOm+am\|OYY<ZZSfR1(.ceKPIn:]yEU*M%:gh_k
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: fb 4f 72 b8 ea af da 8b 6f d5 fc 4f 67 4d f6 a6 df f4 cb f6 aa 73 da 29 f9 4e 4e eb 21 b4 27 bb e8 aa 7b 2a b3 28 ac c6 06 a7 73 16 35 96 e3 a9 de 81 c6 59 58 e7 60 d8 3d d2 87 6d 6b d9 58 d6 57 32 0a 76 0c ec 68 9c fb e2 b3 e1 f4 20 77 fa e3 fe 56 a3 51 24 c2 e3 cc 5b 45 28 58 dd 14 04 a1 2c 41 bb 06 f7 15 1a 84 9a 41 57 09 d6 b7 95 4f 1f 14 52 96 4a 8e fb 96 b7 7c 47 67 cf c1 3b f4 67 fe 99 70 fd 38 98 d5 cc 26 e3 a8 a6 41 b4 b8 65 62 9b 2b 6c 0f 72 ac b2 39 d0 30 cc 25 f8 cb 99 da de 5b 28 fc cd 9d cb 11 78 dc 6d c2 fe 35 bc b2 f5 70 d4 76 42 15 f6 5a ef ec 75 8b da 84 70 fd 4c 70 51 8a 2f 7a ed dc 8d 8f 7c 64 76 a0 36 c0 3d 44 fd 26 e2 66 1a be 40 cd 30 f7 a3 dc 82 72 4a e6 83 00 a7 11 84 67 c1 5c 1f 53 65 f0 6b e6 cd 7c be ff 00 4f 0e d4 48 db b2 80 Data Ascii: OroOgMs)NN!'{*(s5YX`=mkXW2vh wVQ$[E(X,AAWORJ\|Gg;gp8&Aeb+lr90%[(xm5pvBZupLpQ/z\|dv6=D&f@0rJg\Sek\|OH
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: e0 e4 fc bf 03 be 3f 23 f0 9c aa d2 d8 5f 44 7d 6e b3 5b a9 07 78 c8 19 ed 5f db 15 6e 4a 3a ba b5 f1 b9 60 67 cd b3 d1 82 d9 97 65 e8 59 e9 d3 1e 42 2e fa fc 36 e3 fd ab 78 1a c2 32 d2 7a 4a 8a 8a d8 4a ec 4d fd db 5d 5c 3c 84 d2 86 6a 5c 7c a8 af 8f 94 88 6e 63 e9 c9 12 5a d9 fa cb c8 18 e6 87 ef 5d 26 8f e7 86 5d 5b 22 f2 c7 cc 49 d6 48 2c 63 b7 56 92 53 82 72 10 87 21 4e db 0f c3 f9 e1 2b 3f d7 26 39 e5 80 27 49 39 9b b4 ec 62 e7 7b 81 2a 73 96 27 e6 5e 4a c5 fd 85 d5 ab 7b 09 63 3e df e9 f9 a5 92 e0 c5 af 52 ee df a7 bc 7c 84 4f d3 59 b6 17 31 60 35 a8 d8 b5 49 6f 5b 49 16 56 87 a7 b9 4f c4 14 c3 04 03 ec a5 94 4a 5d 3d 7b 2a e0 8e c7 2c 06 8d 81 47 73 b0 7d ba 8f 1e cf 1c 3d 77 45 07 04 30 5e 5e e4 00 b5 d5 e1 e7 fc d1 c6 db cd fe 51 f8 db f8 46 24 Data Ascii: ?#_D}n[x_nJ:`geYB.6x2zJJM]\<j\\|ncZ]&]["IH,cVSr!N+?&9'I9b{s'^J{c>R\|OY1`5Io[IVOJ]={,Gs}=wE0^^QF$
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: c4 b1 fa bd eb ca 5b cc 10 43 35 a4 b6 8e 85 d9 d9 87 e2 32 b0 54 94 bc 73 23 c4 a6 49 6e 84 e3 a8 b3 3a 96 23 01 94 63 23 71 bf 6a 24 77 15 d4 6c e6 99 9b 56 14 cd eb cd 7e 93 59 ef 92 7d 87 8d 9f aa 56 03 ec f5 d3 4f 6b 22 3f de 27 00 9a b9 ef 26 de 25 03 0c 17 b3 c1 53 1e 97 0b da 89 73 e8 a6 b7 89 f2 d5 2d 81 d7 f0 3c ad dc 63 b2 5a 5e fb af 93 91 cf af c8 fd 19 38 f8 92 a2 b3 b6 5e f4 8b a8 ec 47 7e fd b3 e1 b6 2b 6c 9a 3a d4 96 e8 f5 37 1f 1f e9 68 25 88 9a 4b 87 fa f5 60 27 d5 6f 66 27 12 c8 2e 6e 34 8f ca db 63 1e fa 1e d4 21 b6 e3 75 96 f2 e8 dd 4d 75 f8 ea 6d a3 60 50 5f 75 57 13 f9 4e 3a f3 fc a5 cd 9d cd a1 d6 7c 54 13 4d 6e db 43 e6 6d 2e 7f cd bf 1b 70 d1 83 6d 7f 9b 4b 75 b3 57 d3 27 5e 3a d9 2e 25 2d 2d dd c3 de 5c c9 29 53 a4 a8 69 1d 06 Data Ascii: [C52Ts#In:#c#qj$wlV~Y}VOk"?'&%Ss-<cZ^8^G~+l:7h%K`'of'.n4c!uMum`P_uWN:\|TMnCm.pmKuW'^:.%--\)Si
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 19 1c c8 ab 28 6a c0 34 56 b1 58 ac 56 3c 3b d7 bd 6a a6 ba 75 d1 15 d0 15 d0 15 e5 eb cb d7 97 6a f2 ef 5e 5e 4a f2 f2 57 97 92 bc bb d7 96 6a f2 a6 bc ad 79 61 5e 5d 68 43 17 d7 a7 10 af 6f 6f 1d 68 a0 ae 9a d1 b5 84 9c 99 38 8b 47 f6 7e 1e 54 cf 4f a7 3d 9d b1 48 9c b6 8a ad 6f 70 f0 cb d6 b6 9e 24 92 1f 33 6b f4 ab 67 8e 45 6b 39 e4 8d e2 95 e3 93 db c7 04 57 6f 6a 56 39 04 72 0b e6 ed e3 e4 17 b8 a1 9a b2 ff 00 19 6f 2d 81 cf 7c d7 d5 6b b1 15 ee e6 81 f5 6d 5e c3 15 f5 ac 9c 86 a3 8d 5a bf 57 a4 6d da b2 35 35 ef 5d be 9f 46 c3 16 db 35 d8 8a c0 db d3 9e e4 37 a6 a1 e3 ef 6e 82 f4 e2 e0 1b de e2 0e 3a c2 df bc 6c 5f b6 ca 8a bd e9 9a a5 95 62 8d a4 92 ea e6 5b c9 8e 20 e3 de e1 82 c3 67 6c b6 76 d1 40 bf 71 9b 5a 3d e8 ad 49 0e f8 ac 4e b4 25 c6 37 Data Ascii: (j4VXV<;juj^^JWjya^]hCooh8G~TO=Hop$3kgEk9WojV9ro-\|km^ZWm55]F57n:l_b[ glv@qZ=IN%7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.5	49966	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:26 UTC	626	OUT	GET /uploader/2a863ed538129c821c4d3cf3ebde582b3adad70a.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:27 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:27 GMT Content-Type: image/jpeg Content-Length: 53886 Connection: close x-oss-request-id: 66511B57B6DE1D3535D7F12A ETag: "FF7E618F7FEE77128AF4DBB45622E951" Last-Modified: Mon, 23 Oct 2023 02:04:33 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 17485826390681994049 x-oss-storage-class: Standard Content-Disposition: inline; filename="2212cba4c771116b4dffb4d9f279b604ead23561_221" Content-MD5: /35hj3/udxKK9Nu0ViLpUQ== x-oss-server-time: 57 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:27 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e27eec226a79-BNA
2024-05-24 22:57:27 UTC	690	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: %'/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 35 e3 fa e6 29 b9 92 d7 4e 7d cc be 95 f3 be 9f be f1 fa fd 2f 2e fb e7 40 00 00 a1 bc 7e 21 fb bf 0e af 1e 9e af d1 e7 e2 6a 69 d7 1f 5a f2 f4 f8 77 6c 7a 9d 63 d7 71 e9 ed f8 77 fa af cb fa dd ee 3e 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 4f 27 e9 f2 7e 7a fa df 1f 4d 72 e9 f4 e7 a4 70 6e f8 f2 f9 3e 1d fa fb e7 72 db b9 d7 46 ae 91 10 9f 2d e7 a8 a5 fb 6e f1 cb db 81 5a 54 38 d6 d2 dd e9 cb b5 be 55 1b d7 3a bd 8e 9d 5e 7d 3b 7c ba f7 39 74 f4 3c ba f6 73 ab b2 d4 b3 e7 be ef 07 cf fd 1e 7e 41 ce de 2b f4 7a de 5a f1 12 f7 7d 5e 4e 3f 8f db f6 4e 57 3d 39 fd 5f e6 7d 6f 67 e2 f7 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 82 be b9 f8 af 7f cc f2 5e bf 0f 81 f4 f0 e0 f1 f4 f0 f5 cb 87 8d d8 d2 9e f7 c5 e5 af 61 78 df d6 6a 59 04 6b 9e Data Ascii: 5)N}/.@~!jiZwlzcqw>O'~zMrpn>rF-nZT8U:^};\|9t<s~A+zZ}^N?NW=9_}og^axjYk
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 92 f3 f9 f5 ec f4 cf 63 a6 37 da ce a4 d6 51 e5 ae bf 5e 72 93 59 24 93 c5 2e 5d 3b 51 ea 79 6b b1 cb af 5b 9f 5e f7 1f 47 b9 f1 7d 0b 79 d0 00 00 00 02 0b 9e 47 5e 3c 0e fe 6e 07 a7 cd c3 ef e5 e1 f4 e7 31 a5 cd 3d 31 26 ed 6f 9b 8a 9f 97 49 6b 69 6b db 26 6f 3f 59 c2 f2 37 89 54 94 16 86 e4 32 d0 22 5f 2d 86 da e3 85 92 55 60 92 04 66 96 56 9a af 9d d8 6a 49 ab 4b c9 63 a3 d3 8e 26 b4 8d 6c cc d6 b3 4b 99 35 35 cb 11 8a 2e 02 66 cd 66 b1 8e 95 31 d7 a1 d3 3d 7e dc 65 d2 c6 a5 ad 66 4b 36 24 8c a6 62 52 28 e6 f2 e9 ea f5 8e af 3d 74 b3 6d e6 f7 f9 f4 f4 9c 7d 3e f3 c3 f4 3a 7c bb 00 00 02 96 b9 f9 ef 47 97 83 df cf c8 ed c7 83 df cb cf e9 cf 4a 9a 2b 2c 56 4d 06 ab 96 f1 6c 67 a6 d1 a2 d6 b2 e6 77 cf de 37 97 0b 43 79 e5 6f 9a 6f 79 9a 36 ac e2 db 24 73 Data Ascii: c7Q^rY$.];Qyk[^G}yG^<n1=1&oIkik&o?Y7T2"_-U`fVjIKc&lK55.ff1=~efK6$bR(=tm}>:\|GJ+,VMlgw7Cyooy6$s
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: ea 6a 61 24 ae 93 ac fa 9a 63 57 79 f4 ec 71 eb eb 78 f4 f5 18 d7 4f 3a 92 84 92 8c ac b1 24 b2 2c b2 ec 13 5a da 5c 58 2a 59 52 c4 74 33 ae 8e 75 2c ba d0 18 b2 33 24 b2 c7 a6 64 e9 67 5d 0c ef 9d ac 58 94 be af 97 49 25 03 c6 77 f3 d7 3c cf 5e 3f 33 f7 f8 38 1e af 34 96 41 2f 35 76 97 9f 2d 36 b1 26 8b 3c 56 97 43 35 42 59 4c 44 f6 62 b4 cd b3 a9 53 37 a1 ac f3 b2 e4 de 7a cd ec 65 35 ad 26 66 74 f4 9a a9 76 a5 9b c7 99 c4 b5 db 86 eb 88 c5 62 25 9b f5 38 ed df e3 d3 a9 cb af 5f 1b bb 1d 6c ea f4 d4 d1 22 e4 da b6 36 5c 58 97 78 92 5c ac 91 93 24 75 ce 66 85 97 25 ea e7 76 49 32 92 5c ae 2c c1 1d 91 69 82 be a6 24 b3 35 b2 4d 9b d3 9b 8c 92 26 5f 4d cb a4 92 81 5a cf 15 df cd bb 54 2c f9 e7 4e 1e 53 d5 e6 f3 1e 8e 3b 76 e7 ad cc a5 35 a5 9d 4a 42 b5 f3 Data Ascii: ja$cWyqxO:$,Z\X*YRt3u,3$dg]XI%w<^?384A/5v-6&<VC5BYLDbS7ze5&ftvb%8_l"6\Xx\$uf%vI2\,i$5M&_MZT,NS;v5JB
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: cb d2 d6 66 36 38 3c f7 e5 a6 fe 93 be 51 d7 9d c6 f8 f3 5f 4f d6 25 8f 91 f2 ef f5 7d e3 ac 5a 4f 0b c7 b7 be dc f4 47 4f 3a f5 12 da 8b 72 cf 2c d1 90 00 06 0c 98 ad 41 5a cd 4a d6 55 d4 ac 95 ea 2b 22 21 b2 0b 28 57 32 38 a7 9a ae 54 70 b3 aa 04 c4 32 f2 0c 92 93 c6 f5 dd b9 fb 06 b9 dc 4d 97 89 35 f3 0e 7d 6e 9e e6 e7 da dc f2 e6 f7 89 96 c9 d4 8e 89 75 64 27 96 24 1b d9 a2 88 62 9d 90 2d 72 95 98 26 8b 12 c9 43 bd 9b 71 77 4d 89 0b 12 ec 60 c9 83 20 c4 28 0c 83 00 c8 00 00 00 00 00 00 00 00 00 00 c0 32 0c 03 26 0c 83 00 19 00 c0 32 23 14 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: f68<Q_O%}ZOGO:r,AZJU+"!(W28Tp2M5}nud'$b-r&CqwM` (2&2#2
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: d7 05 c6 4a f7 31 df 4b 7d 36 7e 52 4e a5 0c 36 f5 67 6f b6 16 b9 4b f4 e3 78 f6 35 c6 46 d0 c2 f3 4f c5 aa ba 0c d8 31 b6 92 27 70 41 ef fd c6 69 e3 81 72 f3 72 ec 01 d2 7b f9 a5 1f 35 96 39 32 6a e5 2f 01 0d 6e 9c ad e4 2f 21 36 5c d4 6a c5 1e 1b e1 71 e9 77 e2 f8 ee 40 1d 6d fc 3d 6f 16 9b 5a 5a 25 be 86 24 8c 2b 0c dc c1 27 4e 6e 9c 8b 3c 1d 42 2e ae 45 bc 59 ae 2f 97 9b cd 05 16 0f 2c f3 92 ae 75 9a 47 ad 24 93 38 b9 e9 ee 05 2c aa 20 0c d6 ee ae d1 f4 52 47 82 77 92 da df c5 5a 6a b7 b6 fc c7 1b 71 8d 23 9a 06 f6 fd 8b a9 d6 da 09 66 6e 4a 66 96 47 ab 2e 01 a5 75 96 fa fe e9 22 5e 9a 24 3e 54 19 a7 82 33 23 92 d0 a4 76 b1 6e f7 17 07 99 e5 0c 82 f2 4e 9c 70 d9 8b 4b 7e 91 c2 fd 19 07 8d 97 ab 6a a4 ff 00 6e 62 00 ae 47 96 b6 b0 8c d5 df 89 6e 24 f9 Data Ascii: J1K}6~RN6goKx5FO1'pAirr{592j/n/!6\jqw@m=oZZ%$+'Nn<B.EY/,uG$8, RGwZjq#fnJfG.u"^$>T3#vnNpK~jnbGn$
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 44 85 04 4c ee da 83 0e e3 35 3b 95 91 40 20 bc 7b 08 50 45 26 59 e5 87 d5 52 df b3 e3 57 9a 43 d9 5f 32 ba 47 1d af 87 6d d4 9b 8b f8 ee 9e e1 62 4b 1b 68 2d ec 53 76 12 5c de 8c 43 15 b4 50 46 12 17 8c 24 d2 46 7c 2d 72 cf c7 bd b4 9f eb e4 96 28 86 64 9f c4 9c 6c 5b 69 c9 78 bb 95 bd 91 5e 04 b8 86 58 56 48 67 e4 86 4a 04 bc 22 53 19 83 90 49 a5 48 5f 97 82 4b 69 63 bb 8f 2b 22 23 ac 91 de f1 8e 6e ac 1b 93 8e f2 38 d6 5b 4b 3b ae ac a2 4d 52 15 6c 31 c1 cb 4b 7d 6e 94 39 12 f7 11 47 4e ea 32 28 32 e2 9e 5e f8 6e bc c5 8c 82 48 fa 32 46 d1 33 64 d0 7d 85 66 b3 f6 2c a3 19 03 a6 c7 e6 7f 97 f7 ad e1 ad a3 a3 a1 c5 66 bb d6 2b 1d c8 ac 9c 51 6a ea be 58 9d cd 2c cc b8 07 ac 47 b0 9a 40 49 ae b8 72 59 84 fd 3f 64 bb 38 d0 f5 9d 89 ae b1 d1 52 8c aa 3b 28 Data Ascii: DL5;@ {PE&YRWC_2GmbKh-Sv\CPF$F\|-r(dl[ix^XVHgJ"SIH_Kic+"#n8[K;MRl1K}n9GN2(2^nH2F3d}f,f+QjX,G@IrY?d8R;(
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 71 ce e3 e7 23 db 40 84 5b 32 4f 3a 81 34 62 08 7b 28 60 7e 39 ac d6 6b 34 f3 47 08 da 4c 4b 78 1b ad 12 f6 55 8a 3c 3a 94 25 94 61 01 6c 2a 32 c5 23 cc c0 aa 36 e0 93 64 c0 c5 a8 fd 89 27 8a 11 99 1f 99 b3 46 c0 93 9e 3a c8 c9 2f 29 7d 22 c7 18 96 59 1e e1 1a 5d c8 86 e1 a9 e4 46 36 89 48 e7 cc 3b 11 d5 f2 d2 9a 76 55 5b 6c eb f3 e9 17 32 4c c5 77 16 d8 73 00 65 4c 38 90 49 13 0d c7 55 d1 7a 61 37 34 85 96 2f 53 47 d6 51 99 a4 d6 58 81 ea 2e 63 8d 16 37 52 65 a5 65 91 cc 4d 23 66 11 5d 5d a1 ef 20 c9 ea 87 91 d1 ca 56 d1 87 98 a2 3b 6d ad 4a 4c e8 aa 0a 32 c4 64 6d e1 24 17 67 0c c6 86 3b 67 24 fc 73 8a fb 53 48 88 29 24 9e 73 e8 16 37 0e 45 2d bc 71 21 06 38 6d fd 44 6c c0 e5 7d 52 46 bb 74 9b 19 69 e5 b6 7d ba b0 65 1e 78 d7 e9 ce 0b 7d ab ed 5d eb 02 Data Ascii: q#@[2O:4b{(`~9k4GLKxU<:%al*2#6d'F:/)}"Y]F6H;vU[l2LwseL8IUza74/SGQX.c7ReeM#f]] V;mJL2dm$g;g$sSH)$s7E-q!8mDl}RFti}ex}]
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 59 a3 96 4d cb 1a ed ef 59 ac fc 33 d8 d3 10 be a6 d1 ee 23 2d 50 3e ea ca e3 38 c1 35 ee 29 31 e9 05 a7 63 95 88 28 53 bb 65 8f b8 ec 3e 38 fe 72 7e d1 c4 59 b1 5d 15 8c 29 a4 97 5c 06 b8 b6 75 6e a4 60 86 5c 81 f1 6c 7d da 5b 8b b9 8d ba ac 69 63 a4 71 ea 91 b1 92 5d e4 92 91 51 3e 9f 7a 6b 75 3f 43 75 13 eb 57 2b de 31 78 07 f5 41 0c 03 2d 3f 1f 6f 23 86 6f d1 93 40 83 52 44 73 94 db 24 8a 8a c6 ee e1 7d 0b c5 f2 f6 52 12 6e 32 ac 85 e2 b8 8c eb 19 13 98 1d 75 68 ee 26 51 d3 4e 32 f1 d2 1a f2 b7 48 36 ab 5c f9 78 73 f1 e5 f6 44 59 44 5d 39 52 36 a6 4c c3 f2 e6 87 0f 00 51 22 35 cb 82 72 c1 c9 3b 87 0c 37 12 ca 43 3c a0 97 52 f2 36 8b 96 95 32 85 15 df aa 4d 47 2c 7d 59 23 3d 45 11 1c 19 9f a1 b5 75 77 45 71 21 c3 a6 8f 21 79 76 09 11 47 64 78 a6 5c ba Data Ascii: YMY3#-P>85)1c(Se>8r~Y])\un`\l}[icq]Q>zku?CuW+1xA-?o#o@RDs$}Rn2uh&QN2H6\xsDYD]9R6LQ"5r;7C<R62MG,}Y#=EuwEq!!yvGdx\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.5	49967	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:26 UTC	693	OUT	GET /liquid/buyer/public/img/default.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66387ef8-1a84" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:26 UTC	585	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:26 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT etag: "66387ef8-1a84" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 221054 Expires: Sat, 25 May 2024 02:57:26 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e27f0b88f7d0-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.5	49969	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:26 UTC	626	OUT	GET /uploader/59421ea514b195d00d8d4faae4128f7a0cc7ea40.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:27 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:27 GMT Content-Type: image/jpeg Content-Length: 53066 Connection: close x-oss-request-id: 66511B571F5247313217306B ETag: "A152CAB58C6A09C097B580E900C01102" Last-Modified: Mon, 23 Oct 2023 02:04:31 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 14806924386931568765 x-oss-storage-class: Standard Content-Disposition: inline; filename="221e2289ba0299cf1fa69769d56c08fbe6316323_221" Content-MD5: oVLKtYxqCcCXtYDpAMARAg== x-oss-server-time: 72 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:27 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e27ee87af7d8-BNA
2024-05-24 22:57:27 UTC	690	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 08 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: %'/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 25 16 50 c9 82 a2 a4 c9 4c 4a d8 c8 b7 06 22 55 81 19 ac 13 24 60 90 48 c6 be 9b 92 f2 a4 a0 ef 5b b2 62 3e 75 db 8f b4 e7 d7 ad 2c 0d 3d 63 b1 8d 6d 4a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 28 f0 59 6e ea 51 bb 3a a9 9e 76 f1 e7 6f 97 d2 e3 d3 d9 97 a9 9e 98 5d 7b 9f 3f ae 7b 29 29 7a 0d 6f e7 a4 49 02 26 41 22 50 a9 46 28 4c 84 98 ad 64 ce 93 97 ce 6f 1a b6 f5 71 7c ff 00 6c fb 6e 3b ea 66 89 99 21 16 13 ab 4e 56 b9 f4 73 bb 12 9b 2c 96 c9 71 66 fe 75 90 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 11 c6 8d 88 d9 db 63 4e 46 e7 c7 bd 18 f7 fc 1e 63 7e 7e 47 49 d5 e7 af a0 73 df a9 e7 de 55 a2 cf 9b df 2f 2f d3 cf ce 4e c6 77 d9 9a 82 d7 2f 55 bd 54 df ce e4 9a ba e7 d0 9d 32 91 5b d2 b9 ab cd e3 a0 e9 e2 75 3b f8 bd dc 5f 2b db 1d 89 7b 58 d4 4a Data Ascii: %PLJ"U$`H[b>u,=cmJ(YnQ:vo]{?{))zoI&A"PF(Ldoq\|ln;f!NVs,qfu<cNFc~~GIsU//Nw/UT2[u;_+{XJ
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 4b 09 92 06 4c 10 20 44 b4 a8 10 2a 32 44 d2 2e 22 73 4b 4a 17 59 68 b1 5a 3e 5f a7 f2 ff 00 cf ff 00 49 fd 79 fa 6f e4 25 00 0d 4b 7e 79 ab b2 4e 67 47 78 ba 2f 2e ca 46 4c 99 5c c4 22 24 48 ae 09 a5 86 4d 49 69 25 6c 89 1c 5d 4f 32 7b ee 76 67 98 de 73 ab e9 b1 73 2a b1 55 ad 73 3c 0d ce 7c 7a 6c 37 e5 cc 57 a7 80 e9 3d f4 b6 99 32 58 55 1c 2b 9d 1b 7d 96 2c e3 cc f4 9d 33 b5 28 b0 b4 81 33 60 ac c1 12 92 46 09 12 2a 2a 30 6a 82 e3 94 56 48 e7 15 ad eb d4 4b d7 ca 7c cf d7 fc d3 c3 fa 0f d7 1f 7b f9 72 80 03 cf 5b e5 35 66 5d 5b 19 9c dd 66 77 30 84 b8 25 11 92 34 06 01 88 c9 61 61 3a 2d 39 45 7c e7 49 a5 9b ee 79 5b 2b c6 f4 9d 63 b1 9b 79 92 b3 05 c6 0a c1 e0 3a 4f 6d ca ee 65 a7 b7 cf 3a 67 e8 f8 d4 aa 06 09 90 22 9c cb 34 4f 63 cf 53 3c 67 49 ea cd Data Ascii: KL D2D."sKJYhZ>_Iyo%K~yNgGx/.FL\"$HMIi%l]O2{vgssUs<\|zl7W=2XU+},3(3`F**0jVHK\|{r[5f][fw0%4aa:-9E\|Iy[+cy:Ome:g"4OcS<gI
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: ac c9 83 06 6a 29 28 ae db 22 15 62 42 b3 9b 1d 10 21 65 92 d4 93 21 2c ad e0 f9 be a7 1b 87 d3 de e9 e2 f4 3d fe 56 ce f9 42 c2 c4 95 82 46 12 0b ac 64 89 34 91 62 58 5d 16 99 26 64 10 30 47 48 c6 09 90 26 64 c2 e1 60 95 73 e9 f2 bf 97 fb 9f 94 fc 6f e9 3e cf a7 ca fd 01 f7 ff 00 94 7a ff 00 5f c3 ca 80 00 00 00 00 03 93 8e df 33 f3 7d 6f 57 ed f8 d1 ac 18 49 98 26 60 9a 45 71 16 55 65 85 55 6a 54 4e 5a ea d8 ab 4b 24 8a e2 15 89 33 51 82 ea 73 f4 fc f3 e5 fe d3 e7 7f 2f f6 de 77 c5 f7 ed bd 33 25 37 3b fd 7e 7f 6f d3 f2 fa fe 8f 95 db f4 7c ae ff 00 ab e1 7a 2f 4f c9 ec 77 f9 d1 16 6c 24 a2 fa a4 a6 28 30 b8 b2 ea b2 24 91 32 05 60 9c 60 c1 9b 71 2c 52 4d 79 8f 27 d8 d3 cf 4f 9d f8 3f 4b c6 f9 7f b8 fb 8f dc fe 5f f4 af a1 f9 3b ec 92 80 00 00 00 00 00 Data Ascii: j)("bB!e!,=VBFd4bX]&d0GH&d`so>z_3}oWI&`EqUeUjTNZK$3Qs/w3%7;~o\|z/Owl$(0$2``q,RMy'O?K_;
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 13 28 72 7c de 6e 59 2d c9 f4 e7 94 de 70 c9 32 b4 ba eb bb 0e dd bf f2 a5 42 9b b7 8c 22 5a dc ca d3 37 20 85 49 f4 4f 72 96 13 b1 ca 4f de f5 a2 1b 50 7e a4 2a 4f 2d e4 bd d2 e1 ea 52 a7 fe 51 a8 65 dc 60 6d 4f a9 8d d6 04 29 74 f9 47 c3 8a 51 82 20 e2 ae 74 53 aa 36 09 6d d7 38 61 9c 27 17 49 e7 73 84 61 3e a4 d3 b0 fb 72 5e 8b 90 74 7f 1e 95 7b fb 8d e0 5d c4 06 b2 9c e2 e3 75 a9 ad 0d 18 71 e6 b2 45 ee 76 8e f3 5c d1 32 60 88 11 d2 4d 75 fd 10 bf 32 6f c3 9b 8c 75 6c 4f a9 46 ce db d5 30 37 af 10 d2 71 29 ba 5a b4 ef 35 cd 6b bd 19 c4 7b 10 bf 72 9b 5f ce 8e 54 64 86 cf d6 d2 81 1f c6 c9 85 3c 79 20 67 e5 8a 6c ce 49 a2 31 29 ce 2f 37 5b da 80 0d 18 71 e5 ad 4c 2a b6 8a 6f ad 75 ac a8 f7 c3 99 0d c8 4f ab 7a 0d 68 05 c0 be 90 02 eb 67 50 da 01 f6 ad Data Ascii: (r\|nY-p2B"Z7 IOrOP~O-RQe`mO)tGQ tS6m8a'Isa>r^t{]uqEv\2`Mu2oulOF07q)Z5k{r_Td<y glI1)/7[qLouOzhgP
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: b9 40 f5 2b f8 78 2d 27 57 f0 7e 10 e5 32 83 36 d5 13 f8 71 4d d6 bd 15 9c 29 83 10 ad 54 9f 5e 85 46 53 a8 58 e3 e9 37 35 60 f8 44 e9 59 53 84 1c 2a b1 df 36 e6 df e4 f4 b1 84 7c b6 64 d2 b3 56 8d f4 dd e3 78 2f de 1a e1 fb 85 40 d6 fd 5d 49 24 75 c1 92 9d 68 a4 05 36 56 6d 6e b1 51 91 fe a0 02 a1 6f b1 87 b7 f7 9a 41 bc d0 22 ec 0d 43 03 0a 95 a8 3c f3 99 1b 45 49 57 b2 d4 af 8e 97 56 79 f7 a7 d2 a7 52 2f 34 18 32 24 4c 1e a4 eb 2b 03 79 17 fe eb 5c 47 82 8a 82 ed f6 bc 86 b6 67 92 61 03 01 bc d6 93 ac 07 53 07 da 50 ae fc 06 90 89 f4 1d 0e 6f 65 dc 53 2d 0f 98 23 b3 10 7b 93 ab 3d df 36 e2 c8 e7 34 b2 63 f2 a1 69 ab ac 34 e1 e8 bb d8 bc ab 9b 7d b7 01 d6 ef e9 ef 4c b4 be f0 69 66 6e 8c 32 4f b5 00 1d 03 94 23 0c 04 f7 a7 5a 2e 97 35 c6 ec 18 c4 6b 3f Data Ascii: @+x-'W~26qM)T^FSX75`DYS*6\|dVx/@]I$uh6VmnQoA"C<EIWVyR/42$L+y\GgaSPoeS-#{=64ci4}Lifn2O#Z.5k?
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: d6 b2 f5 ad 71 22 57 67 eb b1 4a 88 fe 9f d1 3e c7 66 a8 64 d9 e9 97 6d 81 3d ea e5 d2 74 75 2d 34 dc 31 e4 b8 bd bd c6 fa d3 da 5b 1f bd 52 3f f5 59 73 c7 92 85 b2 b7 a7 64 07 ad 95 3f f3 ba bc b6 90 f9 ca 75 a9 f5 9a 64 8e f6 4a 6d aa cc f3 0c b5 53 3f 88 27 b2 5b 0e 68 2d eb 12 15 4e 0e b1 d4 e7 59 68 f6 0b bf e9 85 57 80 6c ee 9d 1d e6 fe 29 f5 84 78 02 d0 c7 02 d7 d2 78 9c b1 6a f2 6b 33 31 ad c1 ef 60 e9 35 a4 81 db 48 95 4f c9 9f 02 9d b9 fb 85 77 fa 89 5e 4d 5a 70 b6 d7 93 90 2e 69 f5 b5 68 ad e0 ff 00 c6 93 d4 69 b3 dc 11 6d b4 67 56 97 6d 23 ec 7a 2e b7 88 86 59 cf e7 1e f5 a7 b5 6b b2 d3 3f 76 b1 1e b6 a3 6a 78 c7 c9 1e 63 38 a8 c3 ed 0a cd 6d 65 a5 9a 46 b1 ec 66 a2 f1 13 b9 69 9b 20 4c ee 42 ab ce 54 f5 eb 4e a8 c9 2d 75 ad b7 ba 2c 70 94 01 Data Ascii: q"WgJ>fdm=tu-41[R?Ysd?udJmS?'[h-NYhWl)xxjk31`5HOw^MZp.ihimgVm#z.Yk?vjxc8meFfi LBTN-u,p
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: d6 34 39 e5 ee d6 e2 22 7b 97 62 c5 61 b5 56 a1 42 bf ce 50 6b f6 12 31 ef cd 68 2b 53 c6 8d ad c3 ec d5 f8 c1 df 9a 77 08 55 a0 4b 2b 52 92 06 6c 37 87 86 2b e1 16 56 b8 ea 55 3b 3d 88 d7 a8 da 82 f7 a0 de 5b 58 2f 9e d0 39 aa 5f 4c 02 20 bd d7 84 72 84 9c bf 09 54 28 9c 5f 78 c3 a3 50 98 de 33 57 07 27 13 84 61 26 30 56 8f de 6b 79 2c 72 39 f5 f7 6a 6f e2 f5 21 b9 3e a3 69 b1 ef 7b a1 ad 12 4f 52 b3 d2 35 05 5a d5 d9 ca ab 9b 5d e8 b7 d1 66 3e 3d 6b c9 aa 51 1f bb 54 2d 1d 03 ca a7 dd ab b1 36 d6 1b 02 bb 34 33 93 a6 58 7f 16 ae de 3a b4 69 57 68 6d 46 c8 06 46 d0 76 83 a9 0a 95 ac 62 2a 7c 65 01 f4 80 72 99 f7 c0 cc 75 a6 b9 af 6b 4b 48 2d 23 02 32 3c 78 ed 94 3f b8 ce d3 c7 82 2e d6 14 9e 8a 95 fe eb 2f 42 02 96 e7 ea 57 a3 20 8a 90 5b bc 42 e0 97 86 Data Ascii: 49"{baVBPk1h+SwUK+Rl7+VU;=[X/9_L rT(_xP3W'a&0Vky,r9jo!>i{OR5Z]f>=kQT-643X:iWhmFFvb*\|erukKH-#2<x?./BW [B
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 95 85 d3 84 19 04 18 20 ed 1d 6a 8d 67 87 e8 2b c6 93 d1 76 42 a0 1e a3 b4 71 d7 a0 e7 96 55 a4 eb b5 d9 cd 3a 88 e8 bb a8 ab 3d 71 5d 97 80 2d 70 37 5e d3 9b 48 d4 54 46 ac 56 2b b5 4a 92 a7 ab 8a 7a f8 a4 ed 5f ad ab f5 b5 65 b0 71 4a c0 e6 27 c5 4c f1 72 70 69 22 73 03 23 bd 4b 67 39 3e c5 38 21 55 af 6d e6 b8 38 7d 83 39 6e 46 a5 db c4 e5 1a a4 bb b4 27 3b 9c 0e 23 23 3e d4 1d 33 96 18 43 75 7b 91 83 37 a3 08 c7 c5 0c 77 a1 4d c7 13 82 ba c1 d7 bd 5b 6a 5c a0 46 d5 c1 34 6a 79 76 92 f9 22 0c c6 40 79 f6 93 c9 03 8c 38 84 5a 1d 8b 70 3e b5 91 82 20 ec e3 95 2a 54 a9 52 a5 4a 95 2a 54 a9 53 c7 2a d1 69 34 87 22 9b 9e f3 90 01 59 ec a6 f0 ad 68 75 fa da a3 9a cd dd 7d 7c 6f ad 52 ab 9d 4a cd 12 0c 3e ae 6d 67 57 5b ba 95 1a 2d a2 d8 6c c9 c5 c4 e2 e7 1d Data Ascii: jg+vBqU:=q]-p7^HTFV+Jz_eqJ'Lrpi"s#Kg9>8!Um8}9nF';##>3Cu{7wM[j\F4jyv"@y8Zp> TRJTS*i4"Yhu}\|oRJ>mgW[-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.5	49968	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:26 UTC	626	OUT	GET /uploader/7f26ad400585781530a3e75f7b0356e48ac6ac55.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:27 UTC	680	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:27 GMT Content-Type: image/jpeg Content-Length: 70652 Connection: close x-oss-request-id: 66511B57C3F24537334C6523 ETag: "506FA6AD832D1A95A5AC1887B0A916B7" Last-Modified: Mon, 23 Oct 2023 02:04:34 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 18133007168720561728 x-oss-storage-class: Standard Content-Disposition: inline; filename="2210e423ec159ac6a33bbca56884713fba431523_221" Content-MD5: UG+mrYMtGpWlrBiHsKkWtw== x-oss-server-time: 128 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:27 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e27ef8adf7dc-BNA
2024-05-24 22:57:27 UTC	689	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 07 02 01 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 a2 cd 07 a6 29 b5 25 a6 e5 cf 7b 86 37 f4 00 00 Data Ascii: '%'/9339GDG]]}C) )/'%'/9339GDG]]})%{7
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 55 d4 e0 9d a5 96 b5 54 57 26 e9 8d e9 39 d7 31 ed e7 a1 e7 bd f7 53 a8 37 e6 29 b5 9e 41 78 de b1 c9 b3 d3 71 bb f3 33 b7 74 e5 8d 23 e7 59 16 4e b1 53 9d 50 6a db ea 6a 9c ba 73 8e 5d 23 1f 14 9f 17 63 b9 fd 21 db 94 ed 4d 93 1b b0 9a a4 d3 9f 4c 6a 0c ec 93 58 2e 36 6c ef 6c ce bf 59 f0 e9 f4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 c3 f3 b7 5d f3 d6 bf 3f 6b 97 4d de 77 92 cf 37 a1 e3 b6 97 73 cb 3a 73 d0 30 dd f7 3a ce 77 f2 29 37 8e 7d bf 2e bb 9d 52 af 43 d6 7e 10 ca 0c 74 b2 9a b2 e9 c7 39 3a 28 9a a9 b2 5e 95 fc f7 4f 9d 4a b3 62 b3 7e d6 71 56 25 bf c6 fc ae 85 73 ac cc 6d 45 74 d6 c6 93 73 af bc 7d 5f b0 73 8b b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 24 d6 f9 c7 4d Data Ascii: UTW&91S7)Axq3t#YNSPjjs]#c!MLjX.6llY]?kMw7s:s0:w)7}.RC~t9:(^OJb~qV%smEts}_s$M
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: d1 af e7 5f aa 66 ba 9f 2b 3a 00 00 00 00 00 00 00 00 00 00 00 01 59 5c 8b b7 2e 75 d3 9e 81 9e 98 33 df 25 9d 3e ac 22 16 a7 d9 79 bc b3 ee 77 f8 ab d7 1a 06 ba 2e 3b 53 6b 1a c5 e3 6c 9a fd 9c cf 3d 7a 4e b9 c8 67 06 3b 7d c7 a6 c2 5d 52 67 cf 93 df b4 f8 fe 85 cf 3e 9e 65 d2 7d bf 3e 83 db f3 e0 f5 e5 9d 65 94 49 b8 79 3d 9b cf 93 df 6f be 3a bf af e7 51 f2 f5 6e de 3f a1 a9 7d 3f 8f af 76 e5 50 56 a6 03 0e b9 ec db e3 30 d1 39 ef 73 de 6d c9 46 7a f2 6b d9 b8 b3 af d3 b9 d6 e7 2d ac 9b 2e 28 00 00 00 00 00 00 00 00 00 00 0a fa d1 f5 bd 2a ee a2 c8 72 c0 b6 2c b9 99 e5 7d 38 75 9b ab 89 62 6a 59 e6 eb b6 50 b8 6c b6 61 8f af 45 3e b3 74 e1 5a 41 b9 89 5f 0a c9 27 f0 fa 15 33 52 2c be 2c 52 86 66 af cd ec bd f2 7b ee 78 f7 f1 8d eb fe 8f 2e b3 ee f9 b6 Data Ascii: _f+:Y\.u3%>"yw.;Skl=zNg;}]Rg>e}>eIy=o:Qn?}?vPV09smFzk-.(*r,}8ubjYPlaE>tZA_'3R,,Rf{x.
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 00 99 ad 6a 69 ab 86 cb 44 a1 23 56 23 14 59 c9 82 d9 45 79 3a be 2f d4 f4 96 fc f3 87 e4 7e 8a cb 9f 48 dd fc 9e eb df 2e fa af d1 f9 35 be cf 14 78 93 cb 7d 6b e7 fd 3a 7f 57 93 99 fa fc 71 ee bc d4 b4 cd 9d 6b 9c 3b d5 f9 7b ed dc fb d8 49 a7 ef 17 5b e7 da 3d de 1d e7 5c ad 62 3d 5c 47 a2 b0 e4 ff 00 3b ee 55 b6 93 16 90 26 a8 38 77 b1 e9 ce db af 0d c7 d9 e0 bc e9 c7 a0 e7 8e ef 88 00 00 00 04 4b 3f 32 7a 38 50 6e 4d e7 e8 9b cf d3 81 70 c4 03 c3 52 4d c8 8b 73 af e7 a1 9d 9e aa d2 7c b5 d6 5c c5 09 bb 15 b6 55 cd 45 66 5b 5a a5 6f b2 d4 5c c7 6a bd 8b d5 d3 12 35 94 e5 9c 79 ac d5 5c 58 c7 d4 8f 53 b3 33 fc 8f bb 73 c7 d3 07 bf 93 4d fa bf 12 36 35 d5 fc 1f 5b 07 2e da 3f d1 f9 15 9d 78 75 af 9d f5 7e fa 3c bc 77 dd e2 f2 7a b7 3c 45 e3 d6 2f 8f d7 Data Ascii: jiD#V#YEy:/~H.5x}k:Wqk;{I[=\b=\G;U&8wK?2z8PnMpRMs\|\UEf[Zo\j5y\XS3sM65[.?xu~<wz<E/
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 3c 76 cb 37 1e 5f ab 1d 32 98 17 22 62 ac a4 c8 f3 52 ca f8 f9 67 98 c9 66 43 19 80 c4 79 e5 d3 76 f9 1f 7e cf 5c b4 bf a3 f2 ac 7d 3e 68 66 22 0c 6a 19 d7 5b f9 df 43 b2 e1 ae ac 0f 47 09 d9 d7 bf 3f 68 de be 33 3d be 4c 7a 9e 17 5a f3 f6 e5 3c f7 ad b1 e6 b6 3e 7d b7 ac 75 d8 2e 6c ae 63 75 e1 a5 fa 3c 7a 57 5e 51 b5 8b 3c 6f 7a c6 fb 46 67 5b c8 00 00 00 00 00 00 00 38 4f 5e 7c 0f ac 82 47 4b 99 75 1b 98 da cf bb 3d 1e cc 95 96 24 12 e2 42 e5 3d c7 a3 dd 64 97 cc d6 4c f5 95 9e 98 33 d7 31 e6 dc 72 4c 30 56 65 f9 26 42 55 9a f9 e4 91 1e aa 6a 43 24 78 7d fb 1f 87 e9 5c 74 e1 cf fe b7 c6 cf a9 5c 6b 72 e9 fc ef 7f f2 f7 eb 5e 6f 4e b1 d7 39 ba f2 b4 e5 d2 1f 3e b1 fd fe 49 3e 8e 11 ad 8d cf 7c 3b cf d3 91 eb 9f a3 d8 4f 3a 92 a3 64 6a d3 7c 64 75 e3 b2 Data Ascii: <v7_2"bRgfCyv~\}>hf"j[CG?h3=LzZ<>}u.lcu<zW^Q<ozFg[8O^\|GKu=$B=dL31rL0Ve&BUjC$x}\t\kr^oN9>I>\|;O:dj\|du
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 59 a4 c9 66 1b 79 0a d9 e9 23 2d 0a b5 9b 35 d2 86 ca cd 49 49 9f 4f 12 6c d9 b9 66 b7 d9 7a 8e 5b d6 6d 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 7b 67 e6 fe 93 58 b3 0b 38 b4 c4 b8 a4 c1 58 23 04 b8 0c 27 83 c2 e2 23 d9 1e 58 d1 81 76 ba d9 62 c6 c8 36 5f d7 89 7e 15 ac d8 4b 88 e5 b9 d6 bf 2d be 9b 26 a4 b6 76 1a 92 6b 71 76 ac db 09 76 78 ea d2 f4 b8 d9 63 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 d7 21 ae 2b bc 6a da 43 48 f5 88 f0 61 4c 72 e3 3c 05 f2 78 31 26 05 8a 90 e5 8c b8 23 09 f0 b3 5b 34 92 48 2e ea 51 4b 5a dc b0 e4 f0 6d 32 d8 19 56 e9 37 d9 7a 64 74 58 da 8c d1 f4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 46 a1 5c b3 53 9d 6f 3a ba 54 d4 69 30 d6 3b 7c 1e 61 1e b4 fb 67 88 c4 b1 96 14 44 Data Ascii: Yfy#-5IIOlfz[m{gX8X#'#Xvb6_~K-&vkqvvxc"!+jCHaLr<x1&#[4H.QKZm2V7zdtXF\So:Ti0;\|agD
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 3b 87 76 8d 15 62 45 9d 2b 5d f2 c8 b2 cc c6 3b f6 23 92 2a 9b 74 47 20 63 18 07 4e 7e 9a 72 7b 60 77 63 aa 7b 94 f4 f9 c7 15 86 45 7b 76 25 f9 e5 63 ac b9 d7 7c e7 44 6b fe e3 41 cf e3 bb cb a9 2c ae ac db 1f 9d 49 36 73 83 d9 9f 59 ff 00 26 cb 0f 96 d9 f6 f5 23 bc 7f 92 31 af 4a 86 39 c6 89 1c 73 ae 2d dc 01 8d 4a e4 29 ec 74 9b 83 d3 96 9c 88 7b c3 2a cf 14 52 a9 ed fd 5a 69 e1 81 39 cd 2a a2 ef 97 1a fd c4 08 4f 97 b9 24 dc 70 88 5b 5b 3d 32 aa 6c 58 45 13 6e 95 9e 39 b9 fd bb 7d 53 66 41 90 70 6b d2 6b 0c 2e ce aa a7 8b d9 58 e7 51 13 4b 66 3f 33 29 34 e4 f3 49 24 92 53 8e 08 ea 74 92 d4 9e 46 1f 2d 0c ec f6 60 4e 03 bf 76 24 00 46 9f 97 65 d3 93 83 8f 66 27 3f a0 27 be aa cd 9f 43 68 90 3d 8e b9 7e 9a ea 0f 63 a3 2a af d4 ea 4b 3d bb 6a 7b 6c 3e fd Data Ascii: ;vbE+];#tG cN~r{`wc{E{v%c\|DkA,I6sY&#1J9s-J)t{RZi9O$p[[=2lXEn9}SfApkk.XQKf?3)4I$StF-`Nv$Fef'?'Ch=~cK=j{l>
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 77 7c 67 eb 91 0b a6 06 8c 84 10 5f da 7b 00 6a f6 e1 d1 5c f2 c9 ab 0b bc 8d 3c bd de 69 3a 10 9c 7c d5 a1 e3 c5 3e b2 10 30 3e 94 2c 08 6e d7 95 86 07 f5 12 75 bb 40 db ce e0 cf 22 16 af e2 ba f5 60 a5 13 ab f4 5e 3d ca 58 93 00 eb 6a df 2d 4f 21 8e 32 75 34 16 28 bc 0d e6 87 28 b7 98 cf 18 51 4a c6 2d 08 84 68 5d 43 ee 7f ba 37 2e 42 c4 2c f2 8d af 6f 5e 6a db 83 b0 dd a8 d7 a5 e5 a4 a5 23 1d 6d 3b d2 da 7e 33 08 d1 ba ed 33 71 5a f1 84 ea 59 48 14 e1 5b 5b 81 66 62 a2 2e 32 33 93 f3 6a cd 75 98 64 7b c3 b6 f2 71 cf e5 51 12 aa a8 5e 23 80 3e c7 27 87 b8 f6 d5 fa 2d 76 38 95 65 0a 6a ed a6 85 7f 53 2b c8 ac e3 db 4a cd f4 18 1c d4 82 0f 75 93 6e 19 cd 67 e9 b1 69 2b b8 12 c7 d3 d3 b4 36 54 2d 88 55 c3 6c 3b 7c c3 30 ce e8 5b c3 52 e7 d1 6d 08 8f c2 f2 Data Ascii: w\|g_{j\<i:\|>0>,nu@"`^=Xj-O!2u4((QJ-h]C7.B,o^j#m;~33qZYH[[fb.23jud{qQ^#>'-v8ejS+Jungi+6T-Ul;\|0[Rm
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: bd 19 39 c5 4f 49 24 71 a7 59 61 cb de 8a dd b6 e8 ad ee 9c 56 fc 1f 7b aa e6 a3 89 85 8d 8f 73 80 e0 d5 66 d1 59 10 f1 20 83 b2 c1 2d b6 21 37 0e 81 8e a6 fb 5c 29 43 1c cd 16 ed 62 09 24 f3 b4 a7 1a 82 dd 5b 21 ba 22 30 ae 71 c9 9a 48 e3 92 d5 c7 98 b3 17 e5 aa d1 19 04 73 37 50 3c 8a cb b9 f5 41 e1 ae bc 76 1a 49 b8 b0 b1 71 15 22 e9 98 80 94 56 60 4f 12 ab a6 5e c0 f6 e9 9e ae 46 b9 48 ac 49 cf 2e b3 77 08 a1 75 cb 29 ed db 29 9f 6c 6b d1 ed a3 c3 e9 ae 21 86 88 07 18 ef a2 8c 3f eb c5 fb 9d 7a bf 1a 27 f2 35 e9 fc f6 ec 31 83 8d 6d 75 a2 b9 23 f5 ed ac 50 da 7a cb 23 8a 51 34 70 cc ca 17 f5 8e 36 7f fa 2a c6 bf 4c eb 11 9f b3 5d 38 8f e7 5e 5d 0f dc 75 e4 f9 76 0f a9 20 8d 7d 3e ec a1 63 5c 0f 65 ad d3 e1 d6 03 93 b3 cf 31 25 b3 a6 9b a5 dc 7b 56 a2 Data Ascii: 9OI$qYaV{sfY -!7\)Cb$[!"0qHs7P<AvIq"V`O^FHI.wu))lk!?z'51mu#Pz#Q4p6*L]8^]uv }>c\e1%{V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.5	49972	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:27 UTC	392	OUT	GET /uploader/d95cf4e2f5344172719039a44aa47bfcf3fadb64.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:27 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:27 GMT Content-Type: image/jpeg Content-Length: 59104 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221f74b1ef5a3b418d92cc34eda993bc7e282579_221" Content-MD5: Pt0qSY4WswJf+9lgKJSwPw== ETag: "3EDD2A498E16B3025FFBD9602894B03F" Last-Modified: Mon, 23 Oct 2023 02:04:38 GMT x-oss-hash-crc64ecma: 17953471208082269233 x-oss-object-type: Normal x-oss-request-id: 66511B56F488A538392C8D8E x-oss-server-time: 73 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:27 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2831805f7dc-BNA
2024-05-24 22:57:27 UTC	668	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 09 ff c4 00 1a 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ec b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 6a f4 a2 77 3d 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 49 38 a4 e6 82 61 54 4d b2 8a af 2c 90 4e 84 b9 4b 2b 0a 63 30 87 61 5a bb 18 a4 b2 86 51 52 64 4c c1 15 ad 5b 1d 86 04 6d a9 57 94 e6 0d 0b 61 54 64 c6 57 2a 53 95 b0 65 e8 ac d8 2a 26 dc 39 8a 6c 76 8b 1a d9 72 bd 09 7a e4 55 b7 53 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 4f 38 f6 c9 07 95 4f 24 11 91 15 00 94 79 64 35 41 65 d6 19 0a 3a b2 d1 b6 56 b0 e5 ad 4d 1e 1e 14 15 78 b4 c8 25 5e 57 13 e1 19 11 2c b2 9c cf a7 9f 6d 6a 66 da 1d 7d 2d 2d 59 e3 d8 89 32 b9 d9 90 43 a7 ed 18 0d 5d bf 13 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 28 e4 59 72 94 a4 13 aa f0 82 ca 52 94 98 4e 27 12 c9 04 47 82 ae 83 3b 06 eb 7d eb 2c ae a2 84 b0 96 b2 e4 5c 56 ab 27 Data Ascii: jw=@I8aTM,NK+c0aZQRdL[mWaTdWSe&9lvrzUSO8O$yd5Ae:VMx%^W,mjf}--Y2C](YrRN'G;},\V'
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: f9 71 cb b2 51 2c b7 9a aa b6 d2 7c dd ba cd 1d c9 35 47 59 bd e3 b5 05 e2 75 67 1f dc d7 e9 1e df 33 23 45 0c 23 ad a5 43 8e 6b 36 f4 d0 2b 6c c3 9e e9 a9 b3 b1 f8 fd 6d 81 cc e9 5e 70 e6 ca 36 f4 f2 4f 55 e6 e1 de d3 d0 7c de 8d 3c d7 33 88 d9 db 9a bb d3 2e 19 80 00 00 00 00 00 00 00 00 00 00 00 00 96 63 d6 af 3e 4d b9 16 16 e2 b0 84 84 a0 3c 23 28 4a b3 b9 cd e5 35 d4 6b 70 f5 5d 59 2e 8e 9a cb b5 a4 4d 68 8e 67 d2 d9 c8 78 3d 3a dc f4 91 d9 e7 6e 8d dd 79 46 07 0d 03 a7 b3 7b e2 f4 36 36 1b 6a be 96 ae cf ec 68 50 4b 47 72 37 72 fe 66 fd ca b3 93 42 9e f1 5b de e5 6c 5d 9c 15 b0 e7 aa db 4b 16 7a b3 6e 47 57 69 70 fb 59 1e 9e dd cf 15 af fb da 79 0f a2 e0 da fa 5a 5a d7 5b 67 5e 6a 6c 5b 70 df 7b f7 79 3b cb 26 2a 83 34 a3 d0 00 00 00 00 00 00 00 00 Data Ascii: qQ,\|5GYug3#E#Ck6+lm^p6OU\|<3.c>M<#(J5kp]Y.Mhgx=:nyF{66jhPKGr7rfB[l]KznGWipYyZZ[g^jl[p{y;&*4
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: b2 61 22 c9 d5 5a 2c e7 4e 2f 47 3e e5 ee 6b bd cd 7e 95 ef 72 ae 76 0a 33 9e 35 b3 e7 5e 73 ab 6e c1 9b 2a d4 cb 8f fa 0e 66 b9 d9 c5 49 c8 e9 6c 8d 1d ca bb 56 eb b5 ad 95 7a ae 05 0c ce 25 55 8a c9 24 e3 23 ab 36 56 fa 42 50 ad 6f b3 ca b1 a8 8e 7c 3a 46 b1 be c0 00 00 00 00 00 00 00 02 86 56 9b 20 b2 30 7b 52 c1 e9 e9 11 e0 22 aa 74 a5 82 08 49 b2 12 22 7d 5e 12 89 36 78 4a 97 85 1c d6 74 a5 42 29 47 09 27 b2 94 78 6b c8 b6 21 e6 7b 34 f8 ed 8f f6 39 fd 29 d3 d2 80 96 52 59 ce 1c 7d fd 8f e6 fb 18 8f a4 e3 dd 78 bd 2d 71 b3 86 f3 83 3e c1 e4 f5 2e 3b 7a b5 db 38 2f fe b3 cf 62 52 b7 02 02 b0 c8 0c 84 b9 d5 20 b5 92 cb c5 62 74 30 04 6e 33 28 00 00 00 00 00 00 00 00 53 ca cd 75 3c a2 22 21 22 3d 22 00 f0 9a 45 57 92 f6 03 d9 79 08 81 0c a9 e5 24 f0 09 Data Ascii: a"Z,N/G>k~rv35^sn*fIlVz%U$#6VBPo\|:FV 0{R"tI"}^6xJtB)G'xk!{49)RY}x-q>.;z8/bR bt0n3(Su<"!"="EWy$
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: f9 5d 0d 9b b7 ab 55 5b db 31 64 a3 e7 6d 53 d3 2d 9b 57 6e cb ab b3 75 df d3 cb fd 57 9d c2 ef 5c 6a 1c f1 5a fd 13 32 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 c1 d6 59 d6 b1 12 01 b1 cd ef 92 b0 11 82 a0 aa 2a ca d5 ab 08 95 85 6a c4 13 14 26 cd 7c 5a 25 66 1e 93 ac 8c 96 ac 24 c4 c0 89 8b 5b 62 25 a6 df 0a 28 63 14 b5 e3 1d b6 2e 1b cf c3 96 8e b7 a5 d2 cf 23 5f 35 24 5e cd ab b7 61 d5 db bd ef e8 65 7e a7 cf 48 cb 8b 56 d6 da 22 23 bf 51 9c 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 04 38 aa d6 c2 8b 09 20 88 e9 7b d7 2b ba 1a a0 b2 1a bd 26 15 04 c2 35 aa 15 9e 41 16 9a 78 4e 90 a8 57 c2 51 38 a9 b3 c8 49 25 c2 84 a6 ad ac d4 5d ab 6a fc 56 ce ab 68 35 b3 51 d2 f2 75 33 c1 8e d2 56 b6 e0 d9 c4 79 7d 39 d9 f0 de 3a 7c fc 97 d1 f0 69 72 Data Ascii: ]U[1dmS-WnuW\jZ2Y*j&\|Z%f$[b%(c.#_5$^ae~HV"#Q8 {+&5AxNWQ8I%]jVh5Qu3Vy}9:\|ir
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: a5 bb 85 6e ec 96 bf cb d2 a3 a7 b2 a0 dc 56 b9 ff 00 c7 48 06 d8 9b 9c b7 6e ec 22 0b 49 69 5a 4e b2 ea ae 6c 33 02 1c 01 1e 12 4b 1c 2c 2f 93 50 f8 81 ce cc 75 1c e2 e2 49 fe 4b 7d c3 e6 a5 1f 4a ab 42 b2 e3 e6 9c d6 d6 98 58 82 29 7e f7 34 cc 82 27 c8 fd 42 cb ed 4e f9 1d a4 e8 fe 60 0b 36 37 d6 85 9b 63 88 90 03 1f 96 95 a9 40 6d 52 9a 36 e2 26 a7 bb 78 c2 3e a8 18 f4 7c 34 6d 63 cb 11 5e 77 48 c6 37 7b ae 7c 43 0c 5b 9b 5e d5 eb 16 dd ba 6f e5 b3 dc 3e 5a 91 f5 6c 30 26 8c 6d 0a 57 ee d4 0a d1 5f ba ac ad fb de bd 7b 74 82 b3 74 ad 33 cd b8 d8 9c 4d 2d 92 7a 4f 3e 5a 6c 17 09 e3 11 58 90 48 61 73 d8 63 b1 14 87 6c 77 34 98 6d b9 d2 b2 d4 33 53 7f 4e 4c 96 c7 d3 f0 ed e1 d6 91 cd 0c 27 f9 b1 fb be 5d 1e 2f f5 13 ce c6 28 9f d4 b1 3c ab 43 93 16 2f 45 Data Ascii: nVHn"IiZNl3K,/PuIK}JBX)~4'BN`67c@mR6&x>\|4mc^wH7{\|C[^o>Zl0&mW_{tt3M-zO>ZlXHasclw4m3SNL']/(<C/E
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 14 4d 69 29 cc db ee c7 fb 41 fc 14 58 1d 84 e6 bd ab 7f e6 95 76 5a b9 0c 6e b5 5a 4a 8f 21 d9 5a 65 d8 18 e1 0c fe 4e 24 2a c4 ba 31 84 00 0b 85 9f c6 51 2b 27 1c 98 a3 28 b5 ff 00 4e 56 02 c3 93 b1 f5 0f 70 e1 49 2b 18 d2 f7 c9 a8 c9 69 c6 2a 90 b1 90 44 02 74 86 57 65 d5 2a ba fb f0 3f 4e 26 06 32 79 b6 34 95 72 c7 99 9f 28 13 b7 6a 00 b8 8c 4b 86 86 c2 da 51 75 5e 0a b5 a8 39 bb a1 82 9c 1b 9c 1c 75 59 30 c8 22 14 b8 84 2d 3d d9 8d e3 ed fa 95 06 db b7 1c 93 dc d5 21 a7 0b 63 af 26 e9 5c e7 bb 9c f2 1d dd 06 33 94 ff 00 4b 8b 96 7c 0e 70 b6 ee 5a 40 73 75 2a 99 b7 53 cc 34 ab 55 4c 6e 73 82 d1 2e 89 a0 e8 39 3b 85 95 95 96 f7 44 e7 28 e7 e8 4e 3b 87 17 7b 77 06 fb b3 94 0e 16 ff 00 cb df 80 ac ea ad 69 2c 83 a6 f9 dd d4 b2 07 96 87 01 ac fc 54 81 f7 Data Ascii: Mi)AXvZnZJ!ZeN$1Q+'(NVpI+iDtWe?N&2y4r(jKQu^9uY0"-=!c&\3K\|pZ@suS4ULns.9;D(N;{wi,T
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 10 cd fe 25 74 d7 4d 6c 6a f5 02 83 96 83 2f 52 8e d4 3b 05 ab 69 fe 6e 3d ec 71 c1 5f 0e 64 c1 63 e4 70 ca 99 b2 69 f6 8c d2 f5 da e0 1c df f2 93 c3 1b 1f 5f 51 74 4e 6c 76 77 0c 04 5d 85 62 dc 50 0c ba 5b 96 ae 13 b2 ae 9d ec 73 5d 04 61 a4 09 b2 f9 cc 34 a9 e9 70 c4 7a 93 dd d3 a8 3c 12 a0 12 bc bd a4 76 f4 86 e5 30 06 00 e1 24 30 3f 2e 51 5b 92 1f 44 e0 87 b7 2c c6 d0 b5 5b 5b 8f 95 61 70 0b 73 9e 70 d8 b4 f9 1f 83 2c 75 a2 8b b6 dc a1 1a 6c 25 35 8d 1d a6 b3 0c 1e f9 35 61 fd 8f b7 35 8e 1d f8 54 ea 97 35 a4 b1 81 81 1f b1 97 fe 32 a5 16 5c 0b 62 1a 74 0e c1 99 fa 2e 9a e2 4a 7f c3 75 0f b2 fe 87 35 46 09 22 f5 37 dc 0f c9 53 4a b3 75 9d 48 cf c3 fa 89 18 5a 5e 9e ed 3a 07 b1 c3 81 e1 a9 e8 de 72 43 34 3a 6d 2f 23 5c 47 f2 b9 ad 73 48 75 cd 39 f5 37 Data Ascii: %tMlj/R;in=q_dcpi_QtNlvw]bP[s]a4pz<v0$0?.Q[D,[[apsp,ul%55a5T52\bt.Ju5F"7SJuHZ^:rC4:m/#\GsHu97
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 4b b8 51 d0 86 31 cf 4c 0e db 56 e5 92 57 1d cd cd 4c 73 1d 7d 27 49 23 6d 8b 1f d4 19 3f 19 27 e5 fc f8 e4 78 ee 5b bc 72 57 a9 72 ba 85 75 16 ec ac f8 e4 2c 05 8f ce d6 78 17 e3 2b 70 2b 69 fa 62 40 bf f5 ed 8d aa 36 19 a6 b7 3a e8 b1 a5 6a 12 3d 9b 2a c7 04 0d ab 04 70 b7 2b 71 45 cb 51 63 ad 58 ab 55 92 9c 34 10 5d 18 7b 42 c3 78 45 ec 82 c1 2e b1 65 d2 95 14 05 fe a5 14 61 3d dc ed 11 47 8c a1 80 9d 28 6a 7d 82 ef 6f ac ad a8 33 29 90 a6 33 1e 25 c8 92 7c 2d 5b af 55 be a7 d8 b5 a8 49 b1 ba 76 8c da fb 65 9f fa 72 f1 f4 24 9e ff 00 2e 17 08 7d 17 65 90 b7 0f 0c e1 6e 0b 2b 80 b7 b5 75 1a b2 d5 ca ca c9 5c ae 56 7c 32 e5 dd 6d 0b b2 ca de d5 dd 7a d7 2a fc 8d 8a bc ae 31 9f 2d 1c 4d 63 ec c6 c7 ec 65 1a dd 4d 47 72 22 45 cf d5 1c a6 c8 e9 35 1b 4e 6b Data Ascii: KQ1LVWLs}'I#m?'x[rWru,x+p+ib@6:j=p+qEQcXU4]{BxE.ea=G(j}o3)3%\|-[UIver$.}en+u\V\|2mz1-MceMGr"E5Nk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.5	49970	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:27 UTC	652	OUT	GET /liquid/buyer/public/js/lib/event.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66504480-1714" If-Modified-Since: Fri, 24 May 2024 07:40:48 GMT
2024-05-24 22:57:27 UTC	609	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:27 GMT Connection: close last-modified: Fri, 24 May 2024 07:40:48 GMT vary: Accept-Encoding etag: W/"66504480-1714" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54149 Expires: Sat, 25 May 2024 02:57:27 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e282eb016a7a-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.5	49971	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:27 UTC	626	OUT	GET /uploader/c09b8a2b191088075ea5307b7fbbda245c3c811d.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:27 UTC	678	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:27 GMT Content-Type: image/jpeg Content-Length: 77679 Connection: close x-oss-request-id: 66511B57F488A53336CF978E ETag: "7AEEBA66166EBF0055697DAB7093193E" Last-Modified: Mon, 23 Oct 2023 02:04:32 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2595504741290980049 x-oss-storage-class: Standard Content-Disposition: inline; filename="2212d5cfc6f3bf23e4f1a53ffa78a38fba644940_221" Content-MD5: eu66ZhZuvwBVaX2rcJMZPg== x-oss-server-time: 82 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:27 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e28309c5f7d4-BNA
2024-05-24 22:57:27 UTC	691	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 01 08 ff c4 00 1a 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 22 52 41 30 89 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 a2 34 8e 8e 7d 2b af 97 c9 8d d7 9f a3 76 Data Ascii: '/9339GDG]]}C) )/'%'/9339GDG]]},"RA0H4}+v
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 62 3e 5a eb 99 6d 62 b3 1d 30 eb 6c 34 5b 11 96 b8 fc 76 85 8f 44 4c f5 a6 26 92 ec d7 e9 3f 77 c0 d8 3a b9 36 1c e6 cc 5b 1a b6 22 ba 74 ef 1f d5 dd 30 e8 cd 55 9d 8b eb 6a ee 35 d3 3f 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 c0 5f 3f 97 fd ef 07 8a 72 77 73 ef 3f d6 de 3a f9 3a 4e 5a f5 0f 33 dd d6 e6 72 fb f9 bd 4b 2e b9 b8 75 d3 37 93 b7 9f 27 a3 ca 8d 11 32 57 a1 cc f7 cb 8b 7a 1c 18 ae ef 3b 23 0d 5b 9f ab 9d f2 f5 44 a5 f1 f9 eb 0b 3d a3 52 f6 a9 7f 21 e4 cf b0 ee de c7 8d be 7a 7e 56 7f 2b e4 a9 7c 35 e3 0f 5b e4 3c cf 4b b9 f0 f6 e3 8d f6 97 c7 4c e1 15 df e9 a6 66 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 28 97 cc 7d 55 e5 9d fc 1b 57 97 ee 74 9f 13 ea 75 6b 5b 8d fb 1f 37 f4 cd 39 77 fe 5f 47 42 eb f2 fe 42 ee Data Ascii: b>Zmb0l4[vDL&?w:6["t0Uj5?_?rws?::NZ3rK.u7'2Wz;#[D=R!z~V+\|5[<KLf,(}UWtuk[79w_GBB
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 10 f2 62 c4 5b 80 65 ea f2 8c bd 17 57 85 b5 df 1e 89 17 da f2 ec 97 9e d1 ab 7a b6 e1 b7 b7 9f cf ad 3d 0f 1e bc d6 3d 38 3d f8 b5 7a 74 6e 1d 1e 6d 67 2c 6d ab f2 7b 5f 41 75 fc fd a8 8b 65 13 15 c6 90 e9 d9 5c e2 ad a8 8b a5 61 14 e9 85 9b 65 6d 16 6d 58 a6 bb ae 5a ec ba 16 77 56 6c 9e c2 e2 15 5c 45 d9 b5 65 93 c2 24 d6 3d 95 43 2b 17 c7 22 d1 60 87 78 d2 2f 1b 87 5f 17 d2 9e 47 ae 00 00 00 00 00 00 00 00 00 00 00 0a 41 ae d3 7e 0d e7 7d ae 6a fc 9b 57 a7 f2 7e 5b 0d 7a b3 83 9d 66 73 7a 99 4b e1 bb 15 63 d7 6a 26 27 47 95 8b be 1b 97 37 aa df 9f 84 65 d1 d9 ba 3c ac 94 e5 6a 58 b8 d3 32 ce 34 c4 72 2d 3a a2 c5 eb 56 88 d6 98 bd 11 6a 66 72 76 e4 a4 b7 2b 73 96 16 f9 e8 3d bc 7b 4d 67 3f 96 ba dd 90 62 35 1b 57 37 49 cc c4 e4 2a ba Data Ascii: b[eWz==8=ztnmg,m{_Aue\aemmXZwVl\Ee$=C+"`x/_GA~}jW~[zfszKcj&'G7e<jX24r-:Vjfrv+s={Mg?b5W7I*
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: db c8 af 8d 3c ac d8 94 a9 ce fd b2 ca 69 c2 8b ad 59 56 c7 95 5a 98 7c 7d 0e 8d cf ea 4f bf 24 be 8f 2f d5 26 ca 84 79 16 aa 62 94 44 ae f8 d6 fe c6 1a ce d8 e9 1d bc 9d 97 8b a2 74 4f 36 ea cb 5f e7 f4 b6 ee 7e 9b 15 b6 b7 d3 cb 6f ab cd ea 9c f7 ac e5 5d 38 f9 cd e8 e7 71 e9 e3 1d be 67 75 8c a6 d2 f6 e1 22 23 15 ab 97 69 4d 5f 2d f6 5c 3a 72 59 f4 d3 37 95 a7 2e 4a fe 7e b9 58 d8 ae be ae b5 67 19 9a 42 f5 3c dd b7 b7 86 dc c4 44 e3 79 fa 6c 67 ae 7f 6c 25 ed cf 66 b3 03 83 d3 d6 7e 67 ee 77 0a b2 98 f6 fd 37 d5 e2 f5 1d 7c f0 00 00 00 00 00 42 94 18 9a 13 0e bb c3 a6 f8 98 e9 a6 b7 a2 34 c9 5f 8f 1b 4e cc a5 f9 f0 34 ea d8 34 e0 c9 69 c5 ec 5a ee 98 dc b6 50 d1 c8 8a f1 f4 f6 8e 6f 53 35 d9 e1 6d 56 e6 b6 50 7b 33 6e 96 c5 46 f1 65 e5 54 45 b5 fc bd Data Ascii: <iYVZ\|}O$/&ybDtO6_~o]8qgu"#iM_-\:rY7.J~XgB<Dylgl%f~gw7\|B4_N44iZPoS5mVP{3nFeTE
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: e8 f9 f4 67 a5 9c 3a 36 6d 33 85 c5 e8 eb bc fd 70 39 fb 31 9e 7f ab 90 e6 ef c9 b4 93 56 47 2d f3 14 d3 23 33 9d 8d 33 d3 4c ef 5f 97 b6 7a ff 00 39 36 b6 c4 f9 bf 49 0e 72 ee bd 5f 34 48 00 61 26 ba cd ab 32 66 ec 5e aa 69 ea f4 a2 dc 5e 35 7a 20 d7 69 b3 9e 2f 2e e9 9a f1 d3 5d f2 d6 e3 d4 a9 df b4 5f 8b 5f cb d0 91 6e 3c 75 7b 33 f7 e4 d6 e3 b7 6c 9f 2f 53 cf d3 99 af 3e 23 2e dd 8f 5e 1c 64 6d 9e bf 9f a9 67 ea 64 a7 cf c4 53 bf 66 db c6 f7 4a c0 8e 8f 61 4c 2a 9a d3 13 44 d2 86 98 2d f8 30 5d 9c 1d 77 9b a2 05 9c 4b 5a f5 1e 0f 4a 14 4f 92 e4 bd 7e 67 48 d6 9b 16 77 b5 0e 21 b4 67 7c ff 00 5e e4 5e dd b2 c5 6b c3 d0 2d cf 9e d3 3d 56 d5 c6 1d 02 b3 b0 52 74 9b c7 0e f4 38 75 ee ce 4a 32 da fc 24 67 d3 ad 78 5f 4f 6b 97 ba 54 56 3e 7b e2 33 db 2c 6c Data Ascii: g:6m3p91VG-#33L_z96Ir_4Ha&2f^i^5z i/.]__n<u{3l/S>#.^dmgdSfJaL*D-0]wKZJO~gHw!g\|^^k-=VRt8uJ2$gx_OkTV>{3,l
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: ab 69 a9 54 59 38 c5 be 5a 67 a3 e5 76 5e 4e 9b 09 e4 3a ce f7 c1 e8 f9 13 1a 51 a2 31 3a 56 cf 57 99 be c6 73 e9 6d 1f 4a 60 af 19 84 66 f3 b5 86 99 aa 6c b6 98 e3 de 6f 4b 8a f9 df 43 c5 a7 28 57 c2 51 76 ba 65 73 ed e9 9c be be fb 5e 8c cd a9 7a 22 aa b1 08 c3 af 8b d3 1b 1d de 07 d2 9d 9f 2d b7 ce 36 61 7d 15 9e 1e cc 12 00 00 00 07 25 d2 9c a7 6c e1 26 35 5d 43 0d 34 3d f3 9b 35 95 13 28 93 54 b2 51 7c 95 0b eb 5f 4d 71 17 91 75 37 16 b3 16 b1 1a 51 59 f2 2f 72 54 b4 a6 22 a9 d6 a5 2d 45 2d d8 ae b6 ed cf 66 ba 51 68 a2 b6 4c 53 1a 55 13 a2 f7 79 bb f4 e1 b0 d2 f8 fb 57 99 57 a3 70 e5 f4 23 ad 06 b3 ad ed 96 f0 e7 df ad c3 a6 da 34 9d 33 8f 78 cc d2 77 5a db 5e 69 b1 d7 68 33 64 5f 58 f3 fe 8b e7 3e 5e fc 7e 98 e6 d1 9c 57 2b 33 32 15 a7 da cd 2b 53 Data Ascii: iTY8Zgv^N:Q1:VWsmJ`floKC(WQves^z"-6a}%l&5]C4=5(TQ\|_Mqu7QY/rT"-E-fQhLSUyWWp#43xwZ^ih3d_X>^~W+32+S
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 44 86 b7 68 d1 6d 1a 65 a3 58 57 06 62 25 8c 31 c6 3c 80 88 73 37 e9 3d 26 b6 d9 a9 18 fb d3 07 d3 8e 97 df c7 8a a5 e6 da 97 75 ca 45 ab 76 6b e5 95 42 da 2d 57 4b 73 5f 22 f7 66 be 56 6b bd 7d a6 92 d3 42 28 89 5e 92 26 b4 a2 e6 95 f1 49 16 89 68 9d 9e 9b 27 27 65 3c db f0 da ed 6b 0b ed d1 a7 d3 19 db b0 c4 ed 11 3e 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 c2 c1 8b 96 bf 2d 6a 6b ac cb 5d 57 5f 30 d2 c4 4b 14 8c 61 8f 20 19 ba db 7f ce 74 bd 2b cf 2d 16 e1 3e d1 d6 6d 96 76 96 8d ae 76 af 48 fb e3 67 5c ac 6d 4c 75 f2 aa d5 b5 33 7a 69 6a 63 da da 2e 3d 54 5b 2a ef 59 48 97 59 c8 52 67 63 d3 95 ca f9 0c f7 cb f3 e9 3b 1d e5 2d a8 56 ba f6 d5 fa 3b 3b 75 1a 5e ea 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: DhmeXWb%1<s7=&uEvkB-WKs_"fVk}B(^&Ih''e<k>-jk]W_0Ka t+->mvvHg\mLu3zijc.=T[*YHYRgc;-V;;u^@
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 6e 6e 91 e7 9f 4e 2f 6d 6b 12 cb 1c 71 58 8d 34 45 32 1b 8c c5 a6 19 5b cc b9 b7 48 d2 ff 00 53 56 43 6f 6d e9 8a 69 7d 80 c5 33 16 ff 00 4d c3 3d eb 44 d5 a4 d3 2f 63 97 24 a2 3a ba ab a9 ca e6 9e e2 18 be 79 51 6a e3 c4 5a 6c 00 81 2f 51 ae fc 53 73 27 10 20 88 4f 75 2d c3 16 96 52 e5 ab eb 4c 03 0a 97 b6 7d da 40 07 7a 96 65 6a 95 ce 4d 33 7e cd 22 03 73 a9 59 c4 2a 63 eb 66 26 a0 c8 3b 82 f0 ec 55 7e d2 65 a8 8e 09 2d 8a 29 8e 77 56 9a a7 ca ef 3d ed 4f 0e 2a 26 dc bf 7f cd 8d 5c 5c 7f 22 1a b9 b6 17 56 cf 11 ef 75 33 db b3 c2 b9 dd 68 b1 d9 3c 13 dc c2 d3 cd 7c 75 1b ab cd d6 ea f1 36 dd 3e e5 e3 84 5c c9 d3 ba b7 8a 68 62 bf bd 55 57 b2 8e c7 c9 8b 8e 89 8c 5f 6a 0f 75 e8 8f e1 db cb 26 e1 b7 34 ee 3d a8 9e 7e b5 9f bd 23 63 bf 6b 6d 7f 52 82 da 38 Data Ascii: nnN/mkqX4E2[HSVComi}3M=D/c$:yQjZl/QSs' Ou-RL}@zejM3~"sYcf&;U~e-)wV=O&\\"Vu3h<\|u6>\hbUW_ju&4=~#ckmR8
2024-05-24 22:57:27 UTC	1369	IN	Data Raw: 65 4c 63 24 4a ea 79 a8 6d e6 bd b8 58 61 1c c1 04 76 50 24 31 f6 72 5d 82 8a b7 84 5b 47 8f e6 66 da b9 af 98 96 3d 98 e5 8e 2b 4f 96 39 ac e0 92 33 95 fc bc 9c 72 7b 4b 7a 39 11 d3 c8 64 f9 9b 34 cc 17 92 6a 6b 86 6e 3d b9 ef 4a cd ee 2a 4b c2 25 58 20 4e a4 f7 5a 46 af 78 92 2c f7 c8 f1 69 13 49 e1 ed 6d 63 96 46 8e 0d c1 d4 32 b0 20 1c 12 71 53 f8 5b 4a bd bd 7b c9 15 8d 4d e0 ed 31 97 e1 3b c4 cf a0 6a d6 0d 9b 69 04 eb 1e a7 3c 0c 56 e6 ce 44 37 3a 76 a3 af 08 25 b4 8f cb 0b 3b 15 d3 ed a3 b7 4c b5 7f b5 6e f7 26 b5 7d 76 df 49 55 ea 3a 86 d2 f5 58 f5 18 b7 e0 29 0d da 83 1a d4 b4 2d 3b 53 05 de 3e 9c d7 fa 06 a5 a7 6e 76 8b ad 14 73 30 19 56 e3 cc 43 28 c4 b1 86 0f a6 e8 f3 77 85 45 1d 13 49 23 f8 74 ba 3e 90 9f e0 64 40 96 36 df c3 b7 55 26 e7 83 Data Ascii: eLc$JymXavP$1r][Gf=+O93r{Kz9d4jkn=J*K%X NZFx,iImcF2 qS[J{M1;ji<VD7:v%;Ln&}vIU:X)-;S>nvs0VC(wEI#t>d@6U&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.5	49973	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:27 UTC	626	OUT	GET /uploader/2d1d59f9ff7fa74ef8db576722eb77f20bd40ba0.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:28 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:28 GMT Content-Type: image/jpeg Content-Length: 70881 Connection: close x-oss-request-id: 66511B57342C48383584B400 ETag: "E80C6B906C6D2EDEC0B0531B88A90E90" Last-Modified: Mon, 23 Oct 2023 02:04:37 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 4153714797406459080 x-oss-storage-class: Standard Content-Disposition: inline; filename="221b203d613cf268033f14628043af6f84321129_221" Content-MD5: 6AxrkGxtLt7AsFMbiKkOkA== x-oss-server-time: 134 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:28 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2843f4df7d8-BNA
2024-05-24 22:57:28 UTC	690	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 08 09 ff c4 00 1b 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: %'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: b4 ac 4c 26 0d be 89 ab d2 fb 1f 9f d4 98 ae 44 80 00 00 05 28 8c 8a fc 25 d9 f3 dc bb 1e ef d1 7a 7b bb 55 55 2d 90 ae 2d a6 fd a3 26 27 62 c7 97 06 d8 b8 ed f1 f1 be 6f b6 e9 5d 1f 15 dc 2b 71 ac e6 c3 a3 61 ea ca 5b 16 5e 0e b6 26 1c f1 7b be 7f e8 5a 5f b0 61 80 10 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 5d 5e 11 97 07 29 89 e4 5b 1a db 46 ef 17 73 d8 d2 84 b4 54 bc 84 34 0d 2e 9c bd 72 fd af a5 d3 ea 38 76 88 2c 00 00 79 54 0e 7c 1f 22 f4 38 dc 0b 16 df d2 9a db 9b 04 29 57 d9 b5 f8 8a e6 6f a1 13 b5 57 2c 35 f1 e2 4d 79 fc 4e d5 92 26 e9 34 23 5b bb 9d e9 7b 4c ac bc 3e a7 9b 93 c9 e5 e6 6d 6e 8d a3 ea bb 53 95 bc d7 0d c8 84 df d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 2d 6a 72 69 c3 97 29 59 8e 63 33 cb 33 eb 6c 3b fc 79 5c da Data Ascii: L&D(%z{UU--&'bo]+qa[^&{Z_aH]^)[FsT4.r8v,yT\|"8)WoW,5MyN&4#[{L>mnS-jri)Yc33l;y\
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: a3 54 9a 43 26 e4 c5 f9 6c 88 bf 6a c4 ca e1 1f 38 b2 a5 e4 4c 54 cf 6d a5 bb 02 63 e6 92 26 26 b7 62 1f 9b e9 74 8a 61 8b da d0 d5 fa 9e 5e 3f 67 97 55 6f 66 d1 31 ad d3 cf d7 ec 5a a6 3c 7b 5e ac ba d6 72 ea d8 9d 0a 72 e2 aa 32 66 60 da cd a5 e3 76 f9 b6 6f 87 75 d4 ed ef 7a db f8 78 a6 eb 61 6a e5 e1 da dc 99 75 cb ea eb 5d 8f 1d d7 7c ef d1 64 3b 1e 4a 98 5e 98 8d 98 56 73 65 0d 11 4c a6 e5 0e 6c 90 d4 93 b5 43 58 56 7a cb 49 86 84 b2 31 65 76 d1 7a 66 ec 46 14 2f a6 cc d7 35 36 ac b9 15 f1 35 4c e0 42 b9 8c a5 63 e6 64 66 72 6a a9 39 55 6e 78 ed bd e2 c8 48 00 59 3f 2c 2d 1b 95 b1 eb b1 3a 29 1d 36 c9 9a e6 4c 6c c8 cd 88 d6 ec 87 4e 55 ab 2a c3 e5 32 62 d9 db 93 b6 e3 9c 9c 95 c9 5b 2a d4 c1 a6 7b 1c cf 49 a9 61 e8 44 5b 5f 5f d9 e4 62 ef 72 f6 4a Data Ascii: TC&lj8LTmc&&bta^?gUof1Z<{^rr2f`vouzxaju]\|d;J^VseLlCXVzI1evzfF/565LBcdfrj9UnxHY?,-:)6LlNU2b[{IaD[__brJ
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: bd 68 7a 0b fb 9c 2a 93 4c ab 4d e4 66 97 61 61 36 8c c9 44 ca 2e a9 0b 44 41 7e 16 91 4c a7 25 6e b6 c4 8a da 99 8f 96 24 c5 29 c1 4e 14 30 65 82 8c 53 16 22 ad 3e ff 00 7e e2 fd 07 e8 de ff 00 c9 3d 00 b2 7c 5f 6c 5c 96 f1 c9 eb 6c 6b 5a a5 50 1e 15 22 b4 4a cc ca cc 4a c5 33 8f 65 52 6d 4c db 21 55 c2 88 aa 4b 58 c6 98 c8 c9 83 aa 62 d9 d8 6b 7c 3e 27 bc d1 fa 5e 5f 5f de f3 fb b7 27 db 6f d9 b4 fc d9 e1 57 92 73 65 87 59 ae d5 ca 4e 34 4e c9 13 7e d1 cf fc e7 d1 78 7f ab f8 ea 6d 35 ad bd df 78 de ea 73 af e4 b2 eb 19 f3 17 62 f1 93 19 55 bf b4 b7 2c d2 ee f2 8e f7 82 ad 1b 46 97 a1 ef da dd 0c ad 8e 67 a9 b9 31 4c ae c2 d9 95 08 32 d4 c4 44 a5 22 20 13 9f 2c 9a ae da 6a 56 f2 70 c8 a4 5a 4d 53 36 a6 22 e1 4a 63 93 82 88 f4 61 42 3a 1b 3f 2f d6 f7 fd Data Ascii: hz*LMfaa6D.DA~L%n$)N0eS">~=\|_l\lkZP"JJ3eRmL!UKXbk\|>'^__'oWseYN4N~xm5xsbU,Fg1L2D" ,jVpZMS6"JcaB:?/
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 4a e9 93 3a 29 95 55 53 6a ad 6c a8 5c a5 a6 f0 ec 69 98 f3 e0 ef 72 31 71 e6 dd 75 3b 19 5b dc 68 3a db 22 71 42 ce 3a 27 25 0a e0 a2 ca 24 6d 5d 96 97 92 9b 4b 2d 95 54 74 db 12 b3 ca 65 ac a3 56 53 db 46 13 1f 92 9a d6 ee 77 4f 31 f5 de 95 19 be 82 ee 7c 92 5b 36 88 00 08 d8 69 c8 bd 79 e5 95 c5 f2 d6 7d 19 14 ef 38 f6 ba 23 24 6c 4f cd 99 74 ed df 5e fc e3 ce 99 c3 b5 2d a2 de 2c bb 7d 76 ad a9 07 93 52 56 58 ac 4b 44 21 62 32 d9 8b 63 d6 f9 15 d9 eb d5 cd b7 c6 7d ad 7d be 89 39 9c 64 47 45 f4 eb 47 3c c9 ab a9 5f 1e b3 6c 77 a7 1e 1c 5f 3a 99 3a 55 72 49 cd 72 91 ad 5e 2e ce 2b 92 cc 8b 60 cc 40 31 c2 2d b3 db 1e bf 8f 2e 1c db 68 b6 18 c8 98 5a de 76 f4 8a 45 35 c9 b9 5f 1e af 19 b6 25 24 a1 ce ab 97 a6 df 1e ad 5c f8 75 a7 46 98 94 2d 53 24 8c c4 Data Ascii: J:)USjl\ir1qu;[h:"qB:'%$m]K-TteVSFwO1\|[6iy}8#$lOt^-,}vRVXKD!b2c}}9dGEG<_lw_::UrIr^.+`@1-.hZvE5_%$\uF-S$
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: b9 be e6 e7 57 34 ad 5a d1 52 d7 93 7a 22 f4 b2 65 99 09 09 49 92 10 91 25 09 82 40 94 33 8f 4f 0f 40 07 86 09 00 41 10 c4 19 04 45 90 a9 89 23 27 1c 5d 36 2a a6 7c fa ef e6 6b 74 bc 91 7c 19 d7 c0 d9 e3 fb 93 05 76 d6 9d c7 b5 27 1b 59 da fb f9 f8 f6 b3 eb 9f 29 17 6f 8e 33 67 8b 73 2f 36 4a f8 ef 56 72 cc d8 5d b1 0c f8 89 b4 df 95 65 45 a3 07 16 c6 bf ce f6 f7 22 b7 a7 06 34 cd ab 5b 12 f8 f1 d8 f5 96 4d 83 3f 3a 47 0e ef 96 8c 68 b5 55 c1 ae ee 70 e3 72 68 7b 0b 96 64 d7 3d c8 cb 97 38 73 ad ad 95 17 c8 98 ce 5a 52 12 70 bb 31 92 65 19 c5 d3 24 19 65 d2 b3 c3 d0 00 00 00 00 00 00 00 3c 3d 3c 00 1e 42 a3 c9 8f 52 82 40 02 4a 92 89 20 85 ac 47 82 03 d0 78 7a 00 00 43 c9 8f 0a 93 e4 c7 88 f5 3e d6 52 f2 23 d9 b7 88 f5 04 81 e1 ec bc 87 a0 00 00 00 00 00 Data Ascii: W4ZRz"eI%@3O@AE#']6*\|kt\|v'Y)o3gs/6JVr]eE"4[M?:GhUprh{d=8sZRp1e$e<=<BR@J GxzC>R#
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 18 e6 8a 55 0d 1c 8a c3 fe b1 3d ca d5 87 de cc 8b a9 3a 9f 13 1e e3 ba 4e a3 ea 8c 4c c7 6e f9 53 14 f1 4a 81 a3 90 30 ff 00 5f ae 2a b5 5c e4 ce 3c 6b 1b 71 16 35 95 20 5e ec f9 a1 03 29 68 da d5 ab 36 7d 6f 6a 1b 55 e5 96 45 c5 52 71 13 dd 29 da b9 91 8d 55 96 0d a2 8e f6 51 e4 6e c5 75 dc 63 ba 46 e5 a4 13 5d 9b b0 8b d2 f8 b8 d7 88 88 b1 b3 81 c4 d1 87 d4 49 5d 9b 44 c9 76 78 e3 dd 51 73 39 29 92 57 ab 1c dc e3 0d 2d 7d f9 46 c8 52 fc 8a ca 04 87 54 65 04 3a 26 cd 66 6b c1 60 b0 1e 56 2d 4e 5e f2 54 9a 7e c9 96 4a f4 ec 90 2c 56 89 96 76 a5 89 94 cd 8e c8 cf 04 bd 25 d5 51 67 ab 14 90 85 b4 0f fd 55 dd 55 4b 31 d8 66 ba b0 47 ca 1a 64 6a c6 46 59 dd 9a 49 19 88 98 f8 fc 83 fc 6b 1d 96 b5 4a 4e 51 ca c0 62 b3 f5 af f0 89 98 2c db ff 00 ad fe 20 e2 1a Data Ascii: U=:NLnSJ0_*\<kq5 ^)h6}ojUERq)UQnucF]I]DvxQs9)W-}FRTe:&fk`V-N^T~J,Vv%QgUUK1fGdjFYIkJNQb,
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 69 6c ec ab d7 f4 61 75 8e 65 62 68 64 a9 e4 e0 13 d5 99 5d 7f e9 2e 78 a3 b6 ac df 98 5c 9c f2 3a f5 68 ff 00 8e 2d 2c 71 48 77 8a c6 cd 1d 7b 29 bf 23 c8 45 2b fd 57 42 51 22 f0 65 0c b9 5e 92 a5 6f 79 a8 b7 62 59 1b 21 88 9b b7 3c 64 18 32 11 ce c7 b9 e1 83 6f a4 b0 eb b1 07 6d 4a 28 de 1b 5a 87 dc d8 2b 20 33 d6 94 4a a9 35 aa 72 79 e7 13 62 ba d7 23 4f 8a 3c 9d d8 f1 bd 65 8c bc 00 91 bb 2d 15 88 66 1c a3 90 30 d4 f7 2b 57 fd ec ea ba c8 f5 85 0a 6a dc 3d e7 2b d5 f7 6f 3b ec e4 2a 7a ec 9c a1 21 47 95 f1 5d 21 5e 0d a6 c8 bf 71 fd 88 a1 63 50 aa 4e 8e be 3c fc 68 ba ef cb b1 10 7b 56 d6 03 b7 e2 92 b5 79 99 bb f6 09 69 23 88 05 f7 79 30 c6 bf bc 71 ed 9a d4 f2 24 62 15 52 b1 d6 06 54 ae a4 c5 08 31 78 d9 bc cd 7b 88 7e 11 2c b1 d5 77 78 1e 48 65 e4 Data Ascii: ilauebhd].x\:h-,qHw{)#E+WBQ"e^oybY!<d2omJ(Z+ 3J5ryb#O<e-f0+Wj=+o;*z!G]!^qcPN<h{Vyi#y0q$bRT1x{~,wxHe
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 91 88 49 7e cc 43 32 c5 3d b8 74 12 66 8b 7a d9 58 e5 30 a7 66 30 d2 11 dc 94 b1 8d 9d df c2 f0 5d b8 a9 3a f8 d5 ca 75 32 10 76 2d d7 12 47 43 0d 8b c6 49 dc a5 53 8c 83 c6 8c 8a 47 9d 2f 05 00 28 f1 d4 1d cf b3 1d a3 1b ea b5 ca 92 c6 3d 3b 00 d8 b9 22 bb 9d fd 9e 53 c6 de 2f 1d 7d 10 5d 83 9c d8 ea 19 ec 4b 9a f1 e4 a2 b5 58 5b 75 fe 3d 8f af b2 9f 2d cb 43 31 b6 c1 d3 49 92 ae c3 c9 db 42 d4 0d f0 e3 4b 24 67 e1 c7 fe 6b fc 45 b9 c2 1a d5 41 d3 fc eb f3 d4 20 65 30 d2 57 3e 6c 85 fa 9d 01 b9 d2 ba ed c1 93 7d 76 47 20 04 81 b4 57 61 b1 1b ea 19 ad 56 f3 5e 73 ac 6e 7a 39 37 59 58 c7 2c 56 56 4f 8d 6f fd fc 03 ad 92 40 55 c8 e2 72 76 6b 72 ad 3d 38 fb 8f 99 c3 77 04 77 f1 0f 04 89 f6 1c c7 f6 3c dc b0 30 ab 98 40 1a ae 56 b5 95 32 66 23 fd ee 15 64 0d Data Ascii: I~C2=tfzX0f0]:u2v-GCISG/(=;"S/}]KX[u=-C1IBK$gkEA e0W>l}vG WaV^snz97YX,VVOo@Urvkr=8ww<0@V2f#d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.5	49975	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:27 UTC	459	OUT	GET /liquid/buyer/public/img/default.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66387ef8-1a84" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:27 UTC	585	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:27 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT etag: "66387ef8-1a84" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 221055 Expires: Sat, 25 May 2024 02:57:27 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2854d08f7d4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.5	49974	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:27 UTC	485	OUT	GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "CAE408692E9DF180175752E8BC159AD1" If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
2024-05-24 22:57:27 UTC	542	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:27 GMT Connection: close x-oss-request-id: 6650748AF488A53436FC7D32 ETag: "CAE408692E9DF180175752E8BC159AD1" Last-Modified: Tue, 31 Oct 2023 09:59:39 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3292476528251743927 x-oss-storage-class: Standard Content-MD5: yuQIaS6d8YAXV1LovBWa0Q== x-oss-server-time: 38 CF-Cache-Status: HIT Age: 42701 Expires: Sat, 25 May 2024 02:57:27 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2854d0ff7d4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.5	49977	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:28 UTC	626	OUT	GET /uploader/48ac98525a67096a6efeb2f1d638268475124fdf.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:28 UTC	677	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:28 GMT Content-Type: image/jpeg Content-Length: 63722 Connection: close x-oss-request-id: 66511B585EDFF63939EE46CE ETag: "60BF34084533870CF7D0689034B58325" Last-Modified: Mon, 23 Oct 2023 02:04:35 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 125009833446997527 x-oss-storage-class: Standard Content-Disposition: inline; filename="221d6f1bddfde9b56a1dadcce6bce41c29874021_221" Content-MD5: YL80CEUzhwz30GiQNLWDJQ== x-oss-server-time: 62 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:28 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e286de1bf7e8-BNA
2024-05-24 22:57:28 UTC	692	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 08 09 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: /9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 2b 99 de b9 a2 4d 7f 8f 49 4d e6 5b 79 f0 ad 72 93 b3 62 f3 fd cd 7c 88 ce b2 52 4b 79 be 6a 3c 7a d8 c6 e4 77 89 fd 67 47 e5 d2 e9 de a3 e9 b9 73 8d e8 b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 0f 53 95 ea 71 5b 35 2b 9e 7f ab 7b 59 ba cf 91 44 d4 4f 3e 9b 5e a6 ec 95 ea 49 d4 5c 41 c6 2d 9b 14 bb bc bb c2 6c 11 05 6f 06 b3 41 9a 88 96 53 78 90 d6 68 4f 0b b3 5e d9 8b 9b 5d 4b d9 be 47 57 e5 d3 4e dc d6 77 8d 48 df 33 76 99 78 be f1 af 63 7a 87 2e bb 8f 5e 5b 96 b3 09 9d eb b9 d5 cc d9 2b 9c 2c ac b7 f7 7e 5d 98 ac 00 00 00 00 00 00 00 00 00 00 00 00 00 00 35 fa f9 4f 59 cf 5e 5d 27 2b c6 fe 80 d6 62 3a 4e 4d 73 81 be 79 15 72 23 33 ac 7c 74 95 b3 67 b2 7f 52 57 52 f2 c7 c9 75 62 e3 58 35 ac 5c 36 b3 b7 89 3d 64 52 b4 84 b7 18 4b 9e 49 59 d3 b1 Data Ascii: +MIM[yrb\|RKyj<zwgGsSq[5+{YDO>^I\A-loASxhO^]KGWNwH3vxcz.^[+,~]5OY^]'+b:NMsyr#3\|tgRWRubX5\6=dRKIY
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 56 e7 28 a4 a2 34 f5 86 d6 70 f7 88 d5 17 8a ec 9b b3 e9 26 b4 fc a2 25 d7 a5 90 97 68 5c 24 c7 48 dd 4c 99 71 a5 d5 b5 3b 36 b3 91 2e 93 9b 8e 95 d6 b6 47 56 c9 73 d0 f5 9c bc 69 64 6a e1 d9 0f 9d 6d 35 2d 9b 72 5b 36 47 44 f5 b0 a9 34 6b ab b2 24 61 87 13 55 05 12 55 1d 12 f5 09 55 99 b6 42 46 51 91 2d be 99 b7 ce e6 d5 9d 2c 98 d5 66 4b 56 5b b7 01 88 2b 66 f8 ef ed 9e 5d 36 30 00 34 93 e2 bb 39 ee 93 d1 b9 9a 7d 41 ef 10 71 5d ad 62 d7 3e 9d 37 28 d6 a1 4e 9c 97 e5 96 4e 2d a4 86 55 1a fd b1 89 37 d3 18 15 1b 1e 97 97 6c 4e a5 d2 64 a6 4e 6f b2 ea d9 ba 1a cc 4b 3f 24 c2 c5 d9 85 56 92 dd 93 c6 ce 58 97 16 5c 5d e3 5b b2 6b 53 52 e7 b9 89 77 9a a3 58 c2 a8 f8 c7 97 77 2e 67 51 d2 e7 d9 66 59 cb 98 15 cf 8a 08 2a 9b 48 a5 cd 31 cb a6 3a 5e 5a 35 9c 39 Data Ascii: V(4p&%h\$HLq;6.GVsidjm5-r[6GD4k$aUUUBFQ-,fKV[+f]6049}Aq]b>7(NN-U7lNdNoK?$VX\][kSRwXw.gQfY*H1:^Z59
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 96 b9 9b 90 b3 96 75 9e b9 25 2a 8a 4d 33 1a c2 89 6b 37 7d cf 0f 41 51 7c ba b5 45 e5 cc 4c 63 5e d4 82 d6 70 93 75 c7 4d d7 17 06 b4 f3 52 3a 81 1f 1f 22 f5 e7 35 59 96 69 1c f7 b5 2e 21 03 ac 75 5a 89 ce a6 2e 6d 2d e9 71 65 94 4e 6f ac f4 2a d6 f3 74 38 dc ab 70 35 cc eb 08 da b5 31 ac 88 cd d7 e2 7f a6 61 e2 c5 b8 b9 b3 a6 d9 1b 76 75 bb 9b 84 58 d4 d7 0c 5d 4c 49 63 4b 91 f2 de 75 af 65 fa 7a 66 00 08 3d 4d 1f 49 14 e7 38 d7 24 8b d7 38 55 03 2c 4c b1 d8 b9 3d 24 ac 44 c6 cb 5b 21 19 64 54 a3 b8 f5 c6 64 68 d3 5c db 9d c9 cb 3e a2 65 dd ba 4e d3 d3 37 53 d0 54 5d 5b e5 e2 b2 82 f4 65 ae 3d ce b7 66 b3 b9 b3 e2 ed fc f7 92 5c 4c 95 c1 4d 2a b5 bb 35 b5 e8 12 cc 26 88 71 0e bc e6 6c a6 ea e4 b9 79 97 e5 8a 5c 32 22 5d 9e 24 63 4d de 6f 4b 93 59 e9 1a Data Ascii: u%M3k7}AQ\|ELc^puMR:"5Yi.!uZ.m-qeNot8p51avuX]LIcKuezf=MI8$8U,L=$D[!dTdh\>eN7ST][e=f\LM*5&qly\2"]$cMoKY
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 51 68 ac f0 c7 2d d5 b8 a0 f4 b8 5d 32 8c e2 6c ce 33 0c f2 e9 78 ce 26 89 92 5c 96 25 c9 72 64 92 33 c9 12 4c cd 32 cc 92 e0 00 00 00 3c 3d 3c 3c 05 27 85 27 80 1e 82 a2 92 92 93 c0 78 78 52 0f 0f 0f 40 3d 3d 2b 2a 3d 3d 00 14 14 9e 82 a2 82 d9 6c b4 62 18 c5 82 c9 49 9a 5c 2d 98 26 09 40 2e 94 15 95 95 19 e4 b1 90 56 7a 54 5c 2b 2a 3d 3d 2a 2a 3d 3d 3d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Qh-]2l3x&\%rd3L2<=<<''xxR@==+==lbI\-&@.VzT\+==**===
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 6c b7 76 c6 41 9b 11 49 4a 2b 90 07 8f c3 10 80 11 98 58 78 f1 cb 68 f3 17 db c1 3f 3a ae 2d 71 c2 83 7d 8d aa 10 60 80 17 28 5b 5a 5f 13 32 38 c6 f0 de 0e 20 93 db 2d d4 43 12 72 c1 e2 66 d2 93 3a 95 42 c5 6e 6b b5 c5 b9 2a f7 2b 70 83 1d 91 8d 65 ec 7d a0 bb 42 cc 8b 7a 77 a8 2b 67 a9 c1 8e c1 67 fe 26 53 b4 4c cc ed 1d 55 94 8c ce 59 ee 03 dd 2d 48 16 a2 5b 5e 7c 7c 2f 21 05 b6 ab 5c 89 19 8d e3 61 74 18 ce c5 13 25 05 31 bf 0f 31 e3 cf d1 88 1b 6a 34 32 76 1e 9e ea cb dd 3a e2 a1 78 65 95 e8 64 29 e4 90 0f a8 f1 62 ff 00 bb eb ac 39 65 30 2d 25 07 27 a8 86 64 93 3a c5 e0 98 51 bd c9 fc 3c 86 55 75 d7 e9 eb 6d a8 ee 59 64 ed e7 49 52 6b 7e 58 e6 65 3e 77 29 df 5f 4f 3a f3 dc 8d 3a b2 6c 6d 06 52 32 da 36 17 1e c2 12 1c 06 0a 2f bd b3 64 a4 47 27 59 55 Data Ascii: lvAIJ+Xxh?:-q}`([Z_28 -Crf:Bnk*+pe}Bzw+gg&SLUY-H[^\|\|/!\at%11j42v:xed)b9e0-%'d:Q<UumYdIRk~Xe>w)_O::lmR26/dG'YU
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 00 20 6f a1 ad f1 2c 2e 53 11 03 f1 af f3 d4 eb e9 e7 e3 c6 a6 7c 6a 66 4f e3 e0 13 03 13 12 33 1a 1f 1c 40 47 54 b1 2a 47 6d 99 20 39 b0 ce f5 8d eb 19 8b a3 d3 c9 b5 4d 6b bb 91 33 1f 30 50 30 db a4 f1 32 a7 71 6a 4a 62 79 db b0 89 b5 13 02 51 c3 b8 51 3a ef 21 0b ef 3b 73 87 01 2d ef 03 19 12 f9 f9 8f 0b c7 d4 5b 85 92 24 71 f1 f1 11 a4 e1 af d8 58 90 00 c0 9a 65 2c 62 d8 b9 16 64 17 ce ac cf d5 2c 28 ed cc 96 ab 70 17 08 6f 3c f8 45 9a f0 a0 aa 11 ab 55 c5 5b 1a a3 ca 5a 4e dc 1a 33 cb 15 d4 99 7c 47 9a 76 48 a1 7f 69 59 45 48 fa 9c 42 c8 68 7d a6 57 6b c4 2f 51 ec a6 b5 9a d6 d4 2e ae f0 6a ff 00 e0 9d 42 d8 04 25 7a ca 24 83 25 51 c7 31 24 f9 da 79 7f 15 77 ab 3b 8a a5 7e 16 31 0c c7 24 4b 90 84 6e cf 60 fe 9a 3c c5 ba 73 25 59 c4 05 4f ac ea d9 44 Data Ascii: o,.S\|jfO3@GT*Gm 9Mk30P02qjJbyQQ:!;s-[$qXe,bd,(po<EU[ZN3\|GvHiYEHBh}Wk/Q.jB%z$%Q1$yw;~1$Kn`<s%YOD
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 73 21 9d 88 5c 9d e4 16 b8 8d 62 da b9 7d b6 b1 12 cd 4a ec 07 64 a9 3c 25 94 b3 d7 05 3c a2 c5 8a f3 4f ab f2 95 98 35 ef b1 53 aa fd 51 48 b6 ef ec 1a 45 fa 56 a3 74 5a 59 ff 00 e6 fa 82 c9 29 35 2b 8c ec 59 4b ea bd 90 65 86 1c c5 3b c3 17 ab 73 a5 50 a5 47 2e 89 90 66 fb e2 32 76 2b 84 89 52 f5 28 1f 4e f6 fa ac 0d a2 4d dc 5f 5b 9d 26 7a 5c ad 62 ae 75 ed e3 b2 4a 86 09 07 1c fe 22 45 0c 23 40 be bf ae 62 1c e2 25 c5 b5 a3 2b 89 1a 45 df be 6f 99 ad 43 34 c1 de b7 a1 b7 6b 19 90 a0 53 16 2a 98 6b 11 9e c9 61 9f 0d a6 f9 0d 6f d3 dd 63 1f c3 8d cb e5 70 f9 0c 33 fb 17 eb ca e7 72 5c c4 8c cc 4c 17 23 16 43 3b 4e 8b 91 dc e4 cd eb da 5e 4f 2a be 41 37 37 8f 54 5e 65 f8 ba fa 28 c5 ba 23 9a 1d 13 38 7c 3b bf 77 74 17 3f d5 6b 2c 89 9a b6 c5 b0 fc 0e 61 Data Ascii: s!\b}Jd<%<O5SQHEVtZY)5+YKe;sPG.f2v+R(NM_[&z\buJ"E#@b%+EoC4kSkaocp3r\L#C;N^OA77T^e(#8\|;wt?k,a
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 5c 04 9c 19 24 cf e2 d2 81 5a 6c 87 19 da 47 41 28 32 03 7d 7e 63 e8 d4 41 bd 64 d0 61 32 d6 4e 90 88 b3 19 6c 05 7d 40 e8 8d 81 4c e2 1d 50 d8 f9 69 84 c7 57 4f 20 fc 60 88 1e ac 06 6f ee af 30 ae a5 ae 7f bc ae 3b 96 46 99 40 fe ca 5a 2b 49 98 38 8d b7 0e dc 97 19 29 08 75 6e d0 0b 0c fb d0 35 2c cd 7a eb e2 a3 37 d6 80 6c 8b 12 27 a1 1a 93 be d8 b1 5c ae ad 46 92 c1 4a ba 13 20 85 f3 98 cb 1c 69 7e ba 4b 70 bd 5c b5 2e c9 0a 0c 67 72 d4 e4 4a 1b 62 1c 6d e0 11 ea 2e 8b 2c 44 fa 5c 69 ac 47 b9 3e e2 ea 2b 2e ca 64 eb e2 93 3e 37 54 f6 85 63 30 88 99 f1 03 e0 87 68 1d e2 64 44 00 ec 28 c1 55 9b 23 6d 13 61 10 b4 5b 15 26 9d 4a 8b ed 57 45 61 15 93 f8 ae 06 1a 0d 7d 77 b3 22 c0 7d 54 30 ab f7 a6 c3 38 0b e3 97 ad ef 7e 16 30 02 12 1d ee d8 a7 97 23 85 b1 Data Ascii: \$ZlGA(2}~cAda2Nl}@LPiWO `o0;F@Z+I8)un5,z7l'\FJ i~Kp\.grJbm.,D\iG>+.d>7Tc0hdD(U#ma[&JWEa}w"}T08~0#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.5	49978	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:28 UTC	392	OUT	GET /uploader/42fe369e4f6000c81180a4420f0bd212c0832e7f.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:28 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:28 GMT Content-Type: image/jpeg Content-Length: 63140 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2218d88c4900aa11816c7943d3b58b180b389565_221" Content-MD5: 4YCTRkC8gqw9q15txfEYgg== ETag: "E180934640BC82AC3DAB5E6DC5F11882" Last-Modified: Mon, 23 Oct 2023 02:04:34 GMT x-oss-hash-crc64ecma: 11834638427808942853 x-oss-object-type: Normal x-oss-request-id: 66511B57E2741F30354B80D9 x-oss-server-time: 59 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:28 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e286ee7cf7e0-BNA
2024-05-24 22:57:28 UTC	668	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 08 09 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 33 21 8c c6 65 3a ee 6e df 9b 87 ec db 53 6d 2d 64 ba b9 70 dd 9e d2 7a d6 3d df 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 7f e5 67 cc de 3c f9 f3 eb b0 33 5d d7 76 0d ed 79 67 a1 77 be 0e f2 2c ef 2f 9b 80 b5 b9 37 20 d4 da 63 32 09 5f 48 44 c2 69 20 e7 8a 03 10 94 a2 1e b2 ea 01 43 11 61 43 21 28 c0 6d b9 4c 6b de 82 b7 54 62 97 45 0e b0 dc d3 8f 23 f3 7d 6d 6f 77 a2 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 78 67 c5 8f 15 f4 3c b7 d1 bc c7 56 d7 8e 73 fe bd df 4d 4e aa f4 d9 8f 14 ad f4 aa 66 c7 27 b5 cc 4e e6 46 32 f3 10 28 5c 45 2f 23 13 f5 13 18 b1 27 57 62 3e a8 44 a5 e5 4b 4c 26 03 d7 4c a7 99 98 4e 8c 8e 54 9b 28 d3 3b 3c ac b6 da 63 61 4d e7 06 93 bb d7 31 eb 58 f4 8b 4f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 52 5f 37 fe 6e 3c Data Ascii: 3!e:nSm-dpz=@g<3]vygw,/7 c2_HDi CaC!(mLkTbE#}mowxg<VsMNf'NF2(\E/#'Wb>DKL&LNT(;<caM1XOR_7n<
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 73 de 9d 9c cb f7 64 1a f3 54 49 d6 03 25 32 cb 5e 46 35 55 94 4e b9 55 2a 75 a9 fb 3c f7 b0 00 06 2e 4f 19 fe 23 e5 e3 be 2f 29 7c e2 bd e3 92 fd 7f 4c 1f 52 f3 fa b7 5b ed be 33 d1 5c e7 bb 64 79 73 12 24 79 b8 ef fe 46 6f 7e 5c 7a 17 e7 59 bc ec 75 8d 5f d1 8f a3 1d b4 1f 41 e7 df a5 e9 e7 1f ae f5 e3 f5 77 db 4b 6b d5 b0 d7 9a 15 3d 5a 9c 2c a6 63 d2 4e 5e 9e 79 ae 77 27 78 ae f7 76 4c e6 d0 f1 2d 9e da b6 22 b9 fc d9 32 d5 db d0 19 35 9c bc d6 f4 ec 99 e6 59 b7 10 cc e4 fd 74 fe 69 63 8e ed 5b 6e 11 32 5d 5f 97 7c cb ea 57 73 f3 67 51 ed 72 3d af 7f b9 6b 75 65 c4 02 5e 86 32 94 d7 32 51 a9 65 cd 84 9c 6a c4 66 3b 03 e8 26 7d 8c c0 00 1a 7f 96 f3 cf e4 b9 c1 7c 9f 9f 1f 8e ec 7c cd 87 96 6d a9 89 de 6e c4 88 da 74 cc 1d f7 15 d6 b7 d1 10 fd 0c 55 33 Data Ascii: sdTI%2^F5UNU*u<.O#/)\|LR[3\dys$yFo~\zYu_AwKk=Z,cN^yw'xvL-"25Ytic[n2]_\|WsgQr=kue^22Qejf;&}\|\|mntU3
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: f8 6f 0d f7 fa 7c 87 fd 39 a1 f5 be a7 67 da 4c 50 01 43 ca 2b ae cb 57 e6 c8 33 19 59 72 6a 5e 63 0a b3 58 93 8a 51 3c 39 13 c6 bf ae ce fa ca 96 4a 97 b1 a2 6c fc 8c db e0 31 4f d6 54 9f 5a de 0a 78 77 17 8a 2d f9 f9 5f 99 36 7c d5 be 34 5e 11 af f2 4d dc 33 29 97 19 35 9f d1 59 bd 3b 5a dc 78 cb d7 2f ef ae 6c 7c d8 79 b0 f9 57 74 5a aa 64 d7 6f 4d f5 37 9e fa 39 a3 f4 b6 14 d0 df 48 7e f9 cd d9 ab e9 98 f5 92 db 06 cb 37 76 9f ae 93 92 47 99 d0 fc e9 db f9 da cf 9d 9a df 9d 8f 36 d3 58 f8 b3 5a 4f 6d 93 eb c5 b4 ff 00 2b 61 6d 7c ff 00 fd 06 bc 4f f6 59 d3 d6 fd 06 cf aa 59 92 80 00 3c be ba 5a a9 5a 91 8c c5 53 91 96 97 19 88 66 52 85 85 9a bb 14 31 ea b8 10 f5 28 a6 2e 2a 63 65 4b 1b 93 50 49 8d c6 c8 e6 6e 19 07 c5 3a ff 00 93 cf 5d f0 79 45 fc fc Data Ascii: o\|9gLPC+W3Yrj^cXQ<9Jl1OTZxw-_6\|4^M3)5Y;Zx/l\|yWtZdoM79H~7vG6XZOm+am\|OYY<ZZSfR1(.*ceKPIn:]yE
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 48 9a dd 94 ca 0e 22 34 63 84 d7 45 c7 b6 25 ab 7e 4a ea d7 f2 e2 fb 4f 72 b8 ea af da 8b 6f d5 fc 4f 67 4d f6 a6 df f4 cb f6 aa 73 da 29 f9 4e 4e eb 21 b4 27 bb e8 aa 7b 2a b3 28 ac c6 06 a7 73 16 35 96 e3 a9 de 81 c6 59 58 e7 60 d8 3d d2 87 6d 6b d9 58 d6 57 32 0a 76 0c ec 68 9c fb e2 b3 e1 f4 20 77 fa e3 fe 56 a3 51 24 c2 e3 cc 5b 45 28 58 dd 14 04 a1 2c 41 bb 06 f7 15 1a 84 9a 41 57 09 d6 b7 95 4f 1f 14 52 96 4a 8e fb 96 b7 7c 47 67 cf c1 3b f4 67 fe 99 70 fd 38 98 d5 cc 26 e3 a8 a6 41 b4 b8 65 62 9b 2b 6c 0f 72 ac b2 39 d0 30 cc 25 f8 cb 99 da de 5b 28 fc cd 9d cb 11 78 dc 6d c2 fe 35 bc b2 f5 70 d4 76 42 15 f6 5a ef ec 75 8b da 84 70 fd 4c 70 51 8a 2f 7a ed dc 8d 8f 7c 64 76 a0 36 c0 3d 44 fd 26 e2 66 1a be 40 cd 30 f7 a3 dc 82 72 4a e6 83 00 a7 11 Data Ascii: H"4cE%~JOroOgMs)NN!'{*(s5YX`=mkXW2vh wVQ$[E(X,AAWORJ\|Gg;gp8&Aeb+lr90%[(xm5pvBZupLpQ/z\|dv6=D&f@0rJ
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: f6 72 e0 f6 9b 88 b3 4f 52 18 b8 70 58 1f 2b c5 9f 93 c8 5a 9f 93 e0 e4 fc bf 03 be 3f 23 f0 9c aa d2 d8 5f 44 7d 6e b3 5b a9 07 78 c8 19 ed 5f db 15 6e 4a 3a ba b5 f1 b9 60 67 cd b3 d1 82 d9 97 65 e8 59 e9 d3 1e 42 2e fa fc 36 e3 fd ab 78 1a c2 32 d2 7a 4a 8a 8a d8 4a ec 4d fd db 5d 5c 3c 84 d2 86 6a 5c 7c a8 af 8f 94 88 6e 63 e9 c9 12 5a d9 fa cb c8 18 e6 87 ef 5d 26 8f e7 86 5d 5b 22 f2 c7 cc 49 d6 48 2c 63 b7 56 92 53 82 72 10 87 21 4e db 0f c3 f9 e1 2b 3f d7 26 39 e5 80 27 49 39 9b b4 ec 62 e7 7b 81 2a 73 96 27 e6 5e 4a c5 fd 85 d5 ab 7b 09 63 3e df e9 f9 a5 92 e0 c5 af 52 ee df a7 bc 7c 84 4f d3 59 b6 17 31 60 35 a8 d8 b5 49 6f 5b 49 16 56 87 a7 b9 4f c4 14 c3 04 03 ec a5 94 4a 5d 3d 7b 2a e0 8e c7 2c 06 8d 81 47 73 b0 7d ba 8f 1e cf 1c 3d 77 45 07 Data Ascii: rORpX+Z?#_D}n[x_nJ:`geYB.6x2zJJM]\<j\\|ncZ]&]["IH,cVSr!N+?&9'I9b{s'^J{c>R\|OY1`5Io[IVOJ]={,Gs}=wE
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: ee ec c6 6e 26 ea 22 8c da 76 d3 ca dc 32 ab 44 1a e2 d5 c3 19 2e c4 b1 fa bd eb ca 5b cc 10 43 35 a4 b6 8e 85 d9 d9 87 e2 32 b0 54 94 bc 73 23 c4 a6 49 6e 84 e3 a8 b3 3a 96 23 01 94 63 23 71 bf 6a 24 77 15 d4 6c e6 99 9b 56 14 cd eb cd 7e 93 59 ef 92 7d 87 8d 9f aa 56 03 ec f5 d3 4f 6b 22 3f de 27 00 9a b9 ef 26 de 25 03 0c 17 b3 c1 53 1e 97 0b da 89 73 e8 a6 b7 89 f2 d5 2d 81 d7 f0 3c ad dc 63 b2 5a 5e fb af 93 91 cf af c8 fd 19 38 f8 92 a2 b3 b6 5e f4 8b a8 ec 47 7e fd b3 e1 b6 2b 6c 9a 3a d4 96 e8 f5 37 1f 1f e9 68 25 88 9a 4b 87 fa f5 60 27 d5 6f 66 27 12 c8 2e 6e 34 8f ca db 63 1e fa 1e d4 21 b6 e3 75 96 f2 e8 dd 4d 75 f8 ea 6d a3 60 50 5f 75 57 13 f9 4e 3a f3 fc a5 cd 9d cd a1 d6 7c 54 13 4d 6e db 43 e6 6d 2e 7f cd bf 1b 70 d1 83 6d 7f 9b 4b 75 b3 Data Ascii: n&"v2D.[C52Ts#In:#c#qj$wlV~Y}VOk"?'&%Ss-<cZ^8^G~+l:7h%K`'of'.n4c!uMum`P_uWN:\|TMnCm.pmKu
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 3e e6 f2 e3 a3 1e 6a 57 ea 49 9a fb 2f 6d de e2 e4 fd d7 6c 0a 91 19 1c c8 ab 28 6a c0 34 56 b1 58 ac 56 3c 3b d7 bd 6a a6 ba 75 d1 15 d0 15 d0 15 e5 eb cb d7 97 6a f2 ef 5e 5e 4a f2 f2 57 97 92 bc bb d7 96 6a f2 a6 bc ad 79 61 5e 5d 68 43 17 d7 a7 10 af 6f 6f 1d 68 a0 ae 9a d1 b5 84 9c 99 38 8b 47 f6 7e 1e 54 cf 4f a7 3d 9d b1 48 9c b6 8a ad 6f 70 f0 cb d6 b6 9e 24 92 1f 33 6b f4 ab 67 8e 45 6b 39 e4 8d e2 95 e3 93 db c7 04 57 6f 6a 56 39 04 72 0b e6 ed e3 e4 17 b8 a1 9a b2 ff 00 19 6f 2d 81 cf 7c d7 d5 6b b1 15 ee e6 81 f5 6d 5e c3 15 f5 ac 9c 86 a3 8d 5a bf 57 a4 6d da b2 35 35 ef 5d be 9f 46 c3 16 db 35 d8 8a c0 db d3 9e e4 37 a6 a1 e3 ef 6e 82 f4 e2 e0 1b de e2 0e 3a c2 df bc 6c 5f b6 ca 8a bd e9 9a a5 95 62 8d a4 92 ea e6 5b c9 8e 20 e3 de e1 82 c3 Data Ascii: >jWI/ml(j4VXV<;juj^^JWjya^]hCooh8G~TO=Hop$3kgEk9WojV9ro-\|km^ZWm55]F57n:l_b[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.5	49979	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:28 UTC	392	OUT	GET /uploader/59421ea514b195d00d8d4faae4128f7a0cc7ea40.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:28 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:28 GMT Content-Type: image/jpeg Content-Length: 53066 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221e2289ba0299cf1fa69769d56c08fbe6316323_221" Content-MD5: oVLKtYxqCcCXtYDpAMARAg== ETag: "A152CAB58C6A09C097B580E900C01102" Last-Modified: Mon, 23 Oct 2023 02:04:31 GMT x-oss-hash-crc64ecma: 14806924386931568765 x-oss-object-type: Normal x-oss-request-id: 66511B571F5247313217306B x-oss-server-time: 72 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:28 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e286fbeef7f4-BNA
2024-05-24 22:57:28 UTC	668	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 08 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 00 0f 98 1b 15 2a d0 d6 3c de fc fe 96 74 f4 3c fb dc 4a 2c a9 93 25 16 50 c9 82 a2 a4 c9 4c 4a d8 c8 b7 06 22 55 81 19 ac 13 24 60 90 48 c6 be 9b 92 f2 a4 a0 ef 5b b2 62 3e 75 db 8f b4 e7 d7 ad 2c 0d 3d 63 b1 8d 6d 4a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 28 f0 59 6e ea 51 bb 3a a9 9e 76 f1 e7 6f 97 d2 e3 d3 d9 97 a9 9e 98 5d 7b 9f 3f ae 7b 29 29 7a 0d 6f e7 a4 49 02 26 41 22 50 a9 46 28 4c 84 98 ad 64 ce 93 97 ce 6f 1a b6 f5 71 7c ff 00 6c fb 6e 3b ea 66 89 99 21 16 13 ab 4e 56 b9 f4 73 bb 12 9b 2c 96 c9 71 66 fe 75 90 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 11 c6 8d 88 d9 db 63 4e 46 e7 c7 bd 18 f7 fc 1e 63 7e 7e 47 49 d5 e7 af a0 73 df a9 e7 de 55 a2 cf 9b df 2f 2f d3 cf ce 4e c6 77 d9 9a 82 d7 2f 55 bd 54 df ce e4 9a ba e7 d0 9d 32 91 5b Data Ascii: *<t<J,%PLJ"U$`H[b>u,=cmJ(YnQ:vo]{?{))zoI&A"PF(Ldoq\|ln;f!NVs,qfu<cNFc~~GIsU//Nw/UT2[
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: cd 5a 5a 95 2f 97 d6 6d c6 bd 76 52 af 2b b9 d1 af 47 9b 12 c3 26 4b 09 92 06 4c 10 20 44 b4 a8 10 2a 32 44 d2 2e 22 73 4b 4a 17 59 68 b1 5a 3e 5f a7 f2 ff 00 cf ff 00 49 fd 79 fa 6f e4 25 00 0d 4b 7e 79 ab b2 4e 67 47 78 ba 2f 2e ca 46 4c 99 5c c4 22 24 48 ae 09 a5 86 4d 49 69 25 6c 89 1c 5d 4f 32 7b ee 76 67 98 de 73 ab e9 b1 73 2a b1 55 ad 73 3c 0d ce 7c 7a 6c 37 e5 cc 57 a7 80 e9 3d f4 b6 99 32 58 55 1c 2b 9d 1b 7d 96 2c e3 cc f4 9d 33 b5 28 b0 b4 81 33 60 ac c1 12 92 46 09 12 2a 2a 30 6a 82 e3 94 56 48 e7 15 ad eb d4 4b d7 ca 7c cf d7 fc d3 c3 fa 0f d7 1f 7b f9 72 80 03 cf 5b e5 35 66 5d 5b 19 9c dd 66 77 30 84 b8 25 11 92 34 06 01 88 c9 61 61 3a 2d 39 45 7c e7 49 a5 9b ee 79 5b 2b c6 f4 9d 63 b1 9b 79 92 b3 05 c6 0a c1 e0 3a 4f 6d ca ee 65 a7 b7 cf Data Ascii: ZZ/mvR+G&KL D2D."sKJYhZ>_Iyo%K~yNgGx/.FL\"$HMIi%l]O2{vgssUs<\|zl7W=2XU+},3(3`F**0jVHK\|{r[5f][fw0%4aa:-9E\|Iy[+cy:Ome
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 94 5a 00 00 00 00 1e 62 eb 99 6c 44 ce 6a f5 a8 d9 35 8d c3 58 b8 ac c9 83 06 6a 29 28 ae db 22 15 62 42 b3 9b 1d 10 21 65 92 d4 93 21 2c ad e0 f9 be a7 1b 87 d3 de e9 e2 f4 3d fe 56 ce f9 42 c2 c4 95 82 46 12 0b ac 64 89 34 91 62 58 5d 16 99 26 64 10 30 47 48 c6 09 90 26 64 c2 e1 60 95 73 e9 f2 bf 97 fb 9f 94 fc 6f e9 3e cf a7 ca fd 01 f7 ff 00 94 7a ff 00 5f c3 ca 80 00 00 00 00 03 93 8e df 33 f3 7d 6f 57 ed f8 d1 ac 18 49 98 26 60 9a 45 71 16 55 65 85 55 6a 54 4e 5a ea d8 ab 4b 24 8a e2 15 89 33 51 82 ea 73 f4 fc f3 e5 fe d3 e7 7f 2f f6 de 77 c5 f7 ed bd 33 25 37 3b fd 7e 7f 6f d3 f2 fa fe 8f 95 db f4 7c ae ff 00 ab e1 7a 2f 4f c9 ec 77 f9 d1 16 6c 24 a2 fa a4 a6 28 30 b8 b2 ea b2 24 91 32 05 60 9c 60 c1 9b 71 2c 52 4d 79 8f 27 d8 d3 cf 4f 9d f8 3f 4b Data Ascii: ZblDj5Xj)("bB!e!,=VBFd4bX]&d0GH&d`so>z_3}oWI&`EqUeUjTNZK$3Qs/w3%7;~o\|z/Owl$(0$2``q,RMy'O?K
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 00 e3 b4 66 9d a4 a7 8b 62 3c 15 2a 82 a6 a2 36 83 ff 00 2a 93 01 13 28 72 7c de 6e 59 2d c9 f4 e7 94 de 70 c9 32 b4 ba eb bb 0e dd bf f2 a5 42 9b b7 8c 22 5a dc ca d3 37 20 85 49 f4 4f 72 96 13 b1 ca 4f de f5 a2 1b 50 7e a4 2a 4f 2d e4 bd d2 e1 ea 52 a7 fe 51 a8 65 dc 60 6d 4f a9 8d d6 04 29 74 f9 47 c3 8a 51 82 20 e2 ae 74 53 aa 36 09 6d d7 38 61 9c 27 17 49 e7 73 84 61 3e a4 d3 b0 fb 72 5e 8b 90 74 7f 1e 95 7b fb 8d e0 5d c4 06 b2 9c e2 e3 75 a9 ad 0d 18 71 e6 b2 45 ee 76 8e f3 5c d1 32 60 88 11 d2 4d 75 fd 10 bf 32 6f c3 9b 8c 75 6c 4f a9 46 ce db d5 30 37 af 10 d2 71 29 ba 5a b4 ef 35 cd 6b bd 19 c4 7b 10 bf 72 9b 5f ce 8e 54 64 86 cf d6 d2 81 1f c6 c9 85 3c 79 20 67 e5 8a 6c ce 49 a2 31 29 ce 2f 37 5b da 80 0d 18 71 e5 ad 4c 2a b6 8a 6f ad 75 ac a8 Data Ascii: fb<6(r\|nY-p2B"Z7 IOrOP~O-RQe`mO)tGQ tS6m8a'Isa>r^t{]uqEv\2`Mu2oulOF07q)Z5k{r_Td<y glI1)/7[qLou
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 74 61 e2 b0 f9 07 7a 78 ed 9d bb 70 4d c0 65 18 94 67 51 42 f8 d6 b9 40 f5 2b f8 78 2d 27 57 f0 7e 10 e5 32 83 36 d5 13 f8 71 4d d6 bd 15 9c 29 83 10 ad 54 9f 5e 85 46 53 a8 58 e3 e9 37 35 60 f8 44 e9 59 53 84 1c 2a b1 df 36 e6 df e4 f4 b1 84 7c b6 64 d2 b3 56 8d f4 dd e3 78 2f de 1a e1 fb 85 40 d6 fd 5d 49 24 75 c1 92 9d 68 a4 05 36 56 6d 6e b1 51 91 fe a0 02 a1 6f b1 87 b7 f7 9a 41 bc d0 22 ec 0d 43 03 0a 95 a8 3c f3 99 1b 45 49 57 b2 d4 af 8e 97 56 79 f7 a7 d2 a7 52 2f 34 18 32 24 4c 1e a4 eb 2b 03 79 17 fe eb 5c 47 82 8a 82 ed f6 bc 86 b6 67 92 61 03 01 bc d6 93 ac 07 53 07 da 50 ae fc 06 90 89 f4 1d 0e 6f 65 dc 53 2d 0f 98 23 b3 10 7b 93 ab 3d df 36 e2 c8 e7 34 b2 63 f2 a1 69 ab ac 34 e1 e8 bb d8 bc ab 9b 7d b7 01 d6 ef e9 ef 4c b4 be f0 69 66 6e 8c Data Ascii: tazxpMegQB@+x-'W~26qM)T^FSX75`DYS*6\|dVx/@]I$uh6VmnQoA"C<EIWVyR/42$L+y\GgaSPoeS-#{=64ci4}Lifn
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 0c a7 8f a5 87 7a e8 ac 9c 16 b7 71 13 18 a0 b3 fd 66 85 d1 23 21 d6 b2 f5 ad 71 22 57 67 eb b1 4a 88 fe 9f d1 3e c7 66 a8 64 d9 e9 97 6d 81 3d ea e5 d2 74 75 2d 34 dc 31 e4 b8 bd bd c6 fa d3 da 5b 1f bd 52 3f f5 59 73 c7 92 85 b2 b7 a7 64 07 ad 95 3f f3 ba bc b6 90 f9 ca 75 a9 f5 9a 64 8e f6 4a 6d aa cc f3 0c b5 53 3f 88 27 b2 5b 0e 68 2d eb 12 15 4e 0e b1 d4 e7 59 68 f6 0b bf e9 85 57 80 6c ee 9d 1d e6 fe 29 f5 84 78 02 d0 c7 02 d7 d2 78 9c b1 6a f2 6b 33 31 ad c1 ef 60 e9 35 a4 81 db 48 95 4f c9 9f 02 9d b9 fb 85 77 fa 89 5e 4d 5a 70 b6 d7 93 90 2e 69 f5 b5 68 ad e0 ff 00 c6 93 d4 69 b3 dc 11 6d b4 67 56 97 6d 23 ec 7a 2e b7 88 86 59 cf e7 1e f5 a7 b5 6b b2 d3 3f 76 b1 1e b6 a3 6a 78 c7 c9 1e 63 38 a8 c3 ed 0a cd 6d 65 a5 9a 46 b1 ec 66 a2 f1 13 b9 69 Data Ascii: zqf#!q"WgJ>fdm=tu-41[R?Ysd?udJmS?'[h-NYhWl)xxjk31`5HOw^MZp.ihimgVm#z.Yk?vjxc8meFfi
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 38 6f 55 e8 31 b5 34 56 3f 8b ac ec 49 a6 6e b5 a3 6b 80 c1 53 6d d6 34 39 e5 ee d6 e2 22 7b 97 62 c5 61 b5 56 a1 42 bf ce 50 6b f6 12 31 ef cd 68 2b 53 c6 8d ad c3 ec d5 f8 c1 df 9a 77 08 55 a0 4b 2b 52 92 06 6c 37 87 86 2b e1 16 56 b8 ea 55 3b 3d 88 d7 a8 da 82 f7 a0 de 5b 58 2f 9e d0 39 aa 5f 4c 02 20 bd d7 84 72 84 9c bf 09 54 28 9c 5f 78 c3 a3 50 98 de 33 57 07 27 13 84 61 26 30 56 8f de 6b 79 2c 72 39 f5 f7 6a 6f e2 f5 21 b9 3e a3 69 b1 ef 7b a1 ad 12 4f 52 b3 d2 35 05 5a d5 d9 ca ab 9b 5d e8 b7 d1 66 3e 3d 6b c9 aa 51 1f bb 54 2d 1d 03 ca a7 dd ab b1 36 d6 1b 02 bb 34 33 93 a6 58 7f 16 ae de 3a b4 69 57 68 6d 46 c8 06 46 d0 76 83 a9 0a 95 ac 62 2a 7c 65 01 f4 80 72 99 f7 c0 cc 75 a6 b9 af 6b 4b 48 2d 23 02 32 3c 78 ed 94 3f b8 ce d3 c7 82 2e d6 14 Data Ascii: 8oU14V?InkSm49"{baVBPk1h+SwUK+Rl7+VU;=[X/9_L rT(_xP3W'a&0Vky,r9jo!>i{OR5Z]f>=kQT-643X:iWhmFFvb*\|erukKH-#2<x?.
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 55 0d a7 1d 1c 16 d1 fb ba df 8f 4b d4 bb 57 7f 99 97 57 82 ad 45 95 85 d3 84 19 04 18 20 ed 1d 6a 8d 67 87 e8 2b c6 93 d1 76 42 a0 1e a3 b4 71 d7 a0 e7 96 55 a4 eb b5 d9 cd 3a 88 e8 bb a8 ab 3d 71 5d 97 80 2d 70 37 5e d3 9b 48 d4 54 46 ac 56 2b b5 4a 92 a7 ab 8a 7a f8 a4 ed 5f ad ab f5 b5 65 b0 71 4a c0 e6 27 c5 4c f1 72 70 69 22 73 03 23 bd 4b 67 39 3e c5 38 21 55 af 6d e6 b8 38 7d 83 39 6e 46 a5 db c4 e5 1a a4 bb b4 27 3b 9c 0e 23 23 3e d4 1d 33 96 18 43 75 7b 91 83 37 a3 08 c7 c5 0c 77 a1 4d c7 13 82 ba c1 d7 bd 5b 6a 5c a0 46 d5 c1 34 6a 79 76 92 f9 22 0c c6 40 79 f6 93 c9 03 8c 38 84 5a 1d 8b 70 3e b5 91 82 20 ec e3 95 2a 54 a9 52 a5 4a 95 2a 54 a9 53 c7 2a d1 69 34 87 22 9b 9e f3 90 01 59 ec a6 f0 ad 68 75 fa da a3 9a cd dd 7d 7c 6f ad 52 ab 9d 4a Data Ascii: UKWWE jg+vBqU:=q]-p7^HTFV+Jz_eqJ'Lrpi"s#Kg9>8!Um8}9nF';##>3Cu{7wM[j\F4jyv"@y8Zp> TRJTS*i4"Yhu}\|oRJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.5	49980	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:28 UTC	392	OUT	GET /uploader/2a863ed538129c821c4d3cf3ebde582b3adad70a.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:28 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:28 GMT Content-Type: image/jpeg Content-Length: 53886 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2212cba4c771116b4dffb4d9f279b604ead23561_221" Content-MD5: /35hj3/udxKK9Nu0ViLpUQ== ETag: "FF7E618F7FEE77128AF4DBB45622E951" Last-Modified: Mon, 23 Oct 2023 02:04:33 GMT x-oss-hash-crc64ecma: 17485826390681994049 x-oss-object-type: Normal x-oss-request-id: 66511B57B6DE1D3535D7F12A x-oss-server-time: 57 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:28 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e286fcc5f7cc-BNA
2024-05-24 22:57:28 UTC	668	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: e7 ca 31 e8 f7 ca eb 7c 55 f0 6d 79 2c 4e 6f 2e df 63 f4 f9 bd 6e 35 e3 fa e6 29 b9 92 d7 4e 7d cc be 95 f3 be 9f be f1 fa fd 2f 2e fb e7 40 00 00 a1 bc 7e 21 fb bf 0e af 1e 9e af d1 e7 e2 6a 69 d7 1f 5a f2 f4 f8 77 6c 7a 9d 63 d7 71 e9 ed f8 77 fa af cb fa dd ee 3e 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 4f 27 e9 f2 7e 7a fa df 1f 4d 72 e9 f4 e7 a4 70 6e f8 f2 f9 3e 1d fa fb e7 72 db b9 d7 46 ae 91 10 9f 2d e7 a8 a5 fb 6e f1 cb db 81 5a 54 38 d6 d2 dd e9 cb b5 be 55 1b d7 3a bd 8e 9d 5e 7d 3b 7c ba f7 39 74 f4 3c ba f6 73 ab b2 d4 b3 e7 be ef 07 cf fd 1e 7e 41 ce de 2b f4 7a de 5a f1 12 f7 7d 5e 4e 3f 8f db f6 4e 57 3d 39 fd 5f e6 7d 6f 67 e2 f7 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 82 be b9 f8 af 7f cc f2 5e bf 0f 81 f4 f0 e0 f1 Data Ascii: 1\|Umy,No.cn5)N}/.@~!jiZwlzcqw>O'~zMrpn>rF-nZT8U:^};\|9t<s~A+zZ}^N?NW=9_}og^
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 46 57 24 66 98 eb 6a d4 43 15 ec b7 be 51 cb 1b 5b 21 70 64 d8 d9 92 f3 f9 f5 ec f4 cf 63 a6 37 da ce a4 d6 51 e5 ae bf 5e 72 93 59 24 93 c5 2e 5d 3b 51 ea 79 6b b1 cb af 5b 9f 5e f7 1f 47 b9 f1 7d 0b 79 d0 00 00 00 02 0b 9e 47 5e 3c 0e fe 6e 07 a7 cd c3 ef e5 e1 f4 e7 31 a5 cd 3d 31 26 ed 6f 9b 8a 9f 97 49 6b 69 6b db 26 6f 3f 59 c2 f2 37 89 54 94 16 86 e4 32 d0 22 5f 2d 86 da e3 85 92 55 60 92 04 66 96 56 9a af 9d d8 6a 49 ab 4b c9 63 a3 d3 8e 26 b4 8d 6c cc d6 b3 4b 99 35 35 cb 11 8a 2e 02 66 cd 66 b1 8e 95 31 d7 a1 d3 3d 7e dc 65 d2 c6 a5 ad 66 4b 36 24 8c a6 62 52 28 e6 f2 e9 ea f5 8e af 3d 74 b3 6d e6 f7 f9 f4 f4 9c 7d 3e f3 c3 f4 3a 7c bb 00 00 02 96 b9 f9 ef 47 97 83 df cf c8 ed c7 83 df cb cf e9 cf 4a 9a 2b 2c 56 4d 06 ab 96 f1 6c 67 a6 d1 a2 d6 Data Ascii: FW$fjCQ[!pdc7Q^rY$.];Qyk[^G}yG^<n1=1&oIkik&o?Y7T2"_-U`fVjIKc&lK55.ff1=~efK6$bR(=tm}>:\|GJ+,VMlg
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 53 68 18 30 6b ac da cf 6e da ef 64 85 69 79 59 d4 bd 7c 91 35 2a ea 6a 61 24 ae 93 ac fa 9a 63 57 79 f4 ec 71 eb eb 78 f4 f5 18 d7 4f 3a 92 84 92 8c ac b1 24 b2 2c b2 ec 13 5a da 5c 58 2a 59 52 c4 74 33 ae 8e 75 2c ba d0 18 b2 33 24 b2 c7 a6 64 e9 67 5d 0c ef 9d ac 58 94 be af 97 49 25 03 c6 77 f3 d7 3c cf 5e 3f 33 f7 f8 38 1e af 34 96 41 2f 35 76 97 9f 2d 36 b1 26 8b 3c 56 97 43 35 42 59 4c 44 f6 62 b4 cd b3 a9 53 37 a1 ac f3 b2 e4 de 7a cd ec 65 35 ad 26 66 74 f4 9a a9 76 a5 9b c7 99 c4 b5 db 86 eb 88 c5 62 25 9b f5 38 ed df e3 d3 a9 cb af 5f 1b bb 1d 6c ea f4 d4 d1 22 e4 da b6 36 5c 58 97 78 92 5c ac 91 93 24 75 ce 66 85 97 25 ea e7 76 49 32 92 5c ae 2c c1 1d 91 69 82 be a6 24 b3 35 b2 4d 9b d3 9b 8c 92 26 5f 4d cb a4 92 81 5a cf 15 df cd bb 54 2c f9 Data Ascii: Sh0kndiyY\|5ja$cWyqxO:$,Z\XYRt3u,3$dg]XI%w<^?384A/5v-6&<VC5BYLDbS7ze5&ftvb%8_l"6\Xx\$uf%vI2\,i$5M&_MZT,
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 4b 09 cc 5e 85 59 4d a2 4b 23 5a 71 c3 9a c1 14 7a 1d 67 f4 87 a7 cb d2 d6 66 36 38 3c f7 e5 a6 fe 93 be 51 d7 9d c6 f8 f3 5f 4f d6 25 8f 91 f2 ef f5 7d e3 ac 5a 4f 0b c7 b7 be dc f4 47 4f 3a f5 12 da 8b 72 cf 2c d1 90 00 06 0c 98 ad 41 5a cd 4a d6 55 d4 ac 95 ea 2b 22 21 b2 0b 28 57 32 38 a7 9a ae 54 70 b3 aa 04 c4 32 f2 0c 92 93 c6 f5 dd b9 fb 06 b9 dc 4d 97 89 35 f3 0e 7d 6e 9e e6 e7 da dc f2 e6 f7 89 96 c9 d4 8e 89 75 64 27 96 24 1b d9 a2 88 62 9d 90 2d 72 95 98 26 8b 12 c9 43 bd 9b 71 77 4d 89 0b 12 ec 60 c9 83 20 c4 28 0c 83 00 c8 00 00 00 00 00 00 00 00 00 00 c0 32 0c 03 26 0c 83 00 19 00 c0 32 23 14 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: K^YMK#Zqzgf68<Q_O%}ZOGO:r,AZJU+"!(W28Tp2M5}nud'$b-r&CqwM` (2&2#2
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 9e 62 1b 0e 42 0e 42 20 f1 fe d9 f7 af 14 de 09 af 64 41 79 2e 58 d7 05 c6 4a f7 31 df 4b 7d 36 7e 52 4e a5 0c 36 f5 67 6f b6 16 b9 4b f4 e3 78 f6 35 c6 46 d0 c2 f3 4f c5 aa ba 0c d8 31 b6 92 27 70 41 ef fd c6 69 e3 81 72 f3 72 ec 01 d2 7b f9 a5 1f 35 96 39 32 6a e5 2f 01 0d 6e 9c ad e4 2f 21 36 5c d4 6a c5 1e 1b e1 71 e9 77 e2 f8 ee 40 1d 6d fc 3d 6f 16 9b 5a 5a 25 be 86 24 8c 2b 0c dc c1 27 4e 6e 9c 8b 3c 1d 42 2e ae 45 bc 59 ae 2f 97 9b cd 05 16 0f 2c f3 92 ae 75 9a 47 ad 24 93 38 b9 e9 ee 05 2c aa 20 0c d6 ee ae d1 f4 52 47 82 77 92 da df c5 5a 6a b7 b6 fc c7 1b 71 8d 23 9a 06 f6 fd 8b a9 d6 da 09 66 6e 4a 66 96 47 ab 2e 01 a5 75 96 fa fe e9 22 5e 9a 24 3e 54 19 a7 82 33 23 92 d0 a4 76 b1 6e f7 17 07 99 e5 0c 82 f2 4e 9c 70 d9 8b 4b 7e 91 c2 fd 19 07 Data Ascii: bBB dAy.XJ1K}6~RN6goKx5FO1'pAirr{592j/n/!6\jqw@m=oZZ%$+'Nn<B.EY/,uG$8, RGwZjq#fnJfG.u"^$>T3#vnNpK~
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 59 a2 90 bb 52 b2 47 13 25 46 22 3b b0 49 a4 0e b4 ec b9 54 2f 22 44 85 04 4c ee da 83 0e e3 35 3b 95 91 40 20 bc 7b 08 50 45 26 59 e5 87 d5 52 df b3 e3 57 9a 43 d9 5f 32 ba 47 1d af 87 6d d4 9b 8b f8 ee 9e e1 62 4b 1b 68 2d ec 53 76 12 5c de 8c 43 15 b4 50 46 12 17 8c 24 d2 46 7c 2d 72 cf c7 bd b4 9f eb e4 96 28 86 64 9f c4 9c 6c 5b 69 c9 78 bb 95 bd 91 5e 04 b8 86 58 56 48 67 e4 86 4a 04 bc 22 53 19 83 90 49 a5 48 5f 97 82 4b 69 63 bb 8f 2b 22 23 ac 91 de f1 8e 6e ac 1b 93 8e f2 38 d6 5b 4b 3b ae ac a2 4d 52 15 6c 31 c1 cb 4b 7d 6e 94 39 12 f7 11 47 4e ea 32 28 32 e2 9e 5e f8 6e bc c5 8c 82 48 fa 32 46 d1 33 64 d0 7d 85 66 b3 f6 2c a3 19 03 a6 c7 e6 7f 97 f7 ad e1 ad a3 a3 a1 c5 66 bb d6 2b 1d c8 ac 9c 51 6a ea be 58 9d cd 2c cc b8 07 ac 47 b0 9a 40 49 Data Ascii: YRG%F";IT/"DL5;@ {PE&YRWC_2GmbKh-Sv\CPF$F\|-r(dl[ix^XVHgJ"SIH_Kic+"#n8[K;MRl1K}n9GN2(2^nH2F3d}f,f+QjX,G@I
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: d5 7b 8c 9a ff 00 9f 86 2b b5 7b fc 33 86 c5 01 29 c0 0e c7 b0 31 71 ce e3 e7 23 db 40 84 5b 32 4f 3a 81 34 62 08 7b 28 60 7e 39 ac d6 6b 34 f3 47 08 da 4c 4b 78 1b ad 12 f6 55 8a 3c 3a 94 25 94 61 01 6c 2a 32 c5 23 cc c0 aa 36 e0 93 64 c0 c5 a8 fd 89 27 8a 11 99 1f 99 b3 46 c0 93 9e 3a c8 c9 2f 29 7d 22 c7 18 96 59 1e e1 1a 5d c8 86 e1 a9 e4 46 36 89 48 e7 cc 3b 11 d5 f2 d2 9a 76 55 5b 6c eb f3 e9 17 32 4c c5 77 16 d8 73 00 65 4c 38 90 49 13 0d c7 55 d1 7a 61 37 34 85 96 2f 53 47 d6 51 99 a4 d6 58 81 ea 2e 63 8d 16 37 52 65 a5 65 91 cc 4d 23 66 11 5d 5d a1 ef 20 c9 ea 87 91 d1 ca 56 d1 87 98 a2 3b 6d ad 4a 4c e8 aa 0a 32 c4 64 6d e1 24 17 67 0c c6 86 3b 67 24 fc 73 8a fb 53 48 88 29 24 9e 73 e8 16 37 0e 45 2d bc 71 21 06 38 6d fd 44 6c c0 e5 7d 52 46 bb Data Ascii: {+{3)1q#@[2O:4b{(`~9k4GLKxU<:%al*2#6d'F:/)}"Y]F6H;vU[l2LwseL8IUza74/SGQX.c7ReeM#f]] V;mJL2dm$g;g$sSH)$s7E-q!8mDl}RF
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 2b 18 29 42 47 13 31 59 36 88 ab 4e 1d ca bd 48 7a 5d 3d a4 5b 70 59 a3 96 4d cb 1a ed ef 59 ac fc 33 d8 d3 10 be a6 d1 ee 23 2d 50 3e ea ca e3 38 c1 35 ee 29 31 e9 05 a7 63 95 88 28 53 bb 65 8f b8 ec 3e 38 fe 72 7e d1 c4 59 b1 5d 15 8c 29 a4 97 5c 06 b8 b6 75 6e a4 60 86 5c 81 f1 6c 7d da 5b 8b b9 8d ba ac 69 63 a4 71 ea 91 b1 92 5d e4 92 91 51 3e 9f 7a 6b 75 3f 43 75 13 eb 57 2b de 31 78 07 f5 41 0c 03 2d 3f 1f 6f 23 86 6f d1 93 40 83 52 44 73 94 db 24 8a 8a c6 ee e1 7d 0b c5 f2 f6 52 12 6e 32 ac 85 e2 b8 8c eb 19 13 98 1d 75 68 ee 26 51 d3 4e 32 f1 d2 1a f2 b7 48 36 ab 5c f9 78 73 f1 e5 f6 44 59 44 5d 39 52 36 a6 4c c3 f2 e6 87 0f 00 51 22 35 cb 82 72 c1 c9 3b 87 0c 37 12 ca 43 3c a0 97 52 f2 36 8b 96 95 32 85 15 df aa 4d 47 2c 7d 59 23 3d 45 11 1c 19 Data Ascii: +)BG1Y6NHz]=[pYMY3#-P>85)1c(Se>8r~Y])\un`\l}[icq]Q>zku?CuW+1xA-?o#o@RDs$}Rn2uh&QN2H6\xsDYD]9R6LQ"5r;7C<R62MG,}Y#=E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.5	49982	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:28 UTC	392	OUT	GET /uploader/7f26ad400585781530a3e75f7b0356e48ac6ac55.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:28 UTC	702	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:28 GMT Content-Type: image/jpeg Content-Length: 70652 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2210e423ec159ac6a33bbca56884713fba431523_221" Content-MD5: UG+mrYMtGpWlrBiHsKkWtw== ETag: "506FA6AD832D1A95A5AC1887B0A916B7" Last-Modified: Mon, 23 Oct 2023 02:04:34 GMT x-oss-hash-crc64ecma: 18133007168720561728 x-oss-object-type: Normal x-oss-request-id: 66511B57C3F24537334C6523 x-oss-server-time: 128 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:28 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e287eed8f7d0-BNA
2024-05-24 22:57:28 UTC	667	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 07 02 01 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: db f1 bc 6b 41 5c ca 67 0d ce 2c dd b2 e3 6f cf 4f d6 9e 7e a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 55 d4 e0 9d a5 96 b5 54 57 26 e9 8d e9 39 d7 31 ed e7 a1 e7 bd f7 53 a8 37 e6 29 b5 9e 41 78 de b1 c9 b3 d3 71 bb f3 33 b7 74 e5 8d 23 e7 59 16 4e b1 53 9d 50 6a db ea 6a 9c ba 73 8e 5d 23 1f 14 9f 17 63 b9 fd 21 db 94 ed 4d 93 1b b0 9a a4 d3 9f 4c 6a 0c ec 93 58 2e 36 6c ef 6c ce bf 59 f0 e9 f4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 c3 f3 b7 5d f3 d6 bf 3f 6b 97 4d de 77 92 cf 37 a1 e3 b6 97 73 cb 3a 73 d0 30 dd f7 3a ce 77 f2 29 37 8e 7d bf 2e bb 9d 52 af 43 d6 7e 10 ca 0c 74 b2 9a b2 e9 c7 39 3a 28 9a a9 b2 5e 95 fc f7 4f 9d 4a b3 62 b3 7e d6 71 56 25 bf c6 fc ae 85 73 ac cc 6d 45 74 d6 c6 93 73 af bc 7d 5f b0 73 8b b4 00 Data Ascii: kA\g,oO~UTW&91S7)Axq3t#YNSPjjs]#c!MLjX.6llY]?kMw7s:s0:w)7}.RC~t9:(^OJb~qV%smEts}_s
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: fa 3c d6 3b e5 9b 78 f6 62 26 a7 d9 76 2b 63 cb 91 33 a4 e6 a6 15 d1 af e7 5f aa 66 ba 9f 2b 3a 00 00 00 00 00 00 00 00 00 00 00 01 59 5c 8b b7 2e 75 d3 9e 81 9e 98 33 df 25 9d 3e ac 22 16 a7 d9 79 bc b3 ee 77 f8 ab d7 1a 06 ba 2e 3b 53 6b 1a c5 e3 6c 9a fd 9c cf 3d 7a 4e b9 c8 67 06 3b 7d c7 a6 c2 5d 52 67 cf 93 df b4 f8 fe 85 cf 3e 9e 65 d2 7d bf 3e 83 db f3 e0 f5 e5 9d 65 94 49 b8 79 3d 9b cf 93 df 6f be 3a bf af e7 51 f2 f5 6e de 3f a1 a9 7d 3f 8f af 76 e5 50 56 a6 03 0e b9 ec db e3 30 d1 39 ef 73 de 6d c9 46 7a f2 6b d9 b8 b3 af d3 b9 d6 e7 2d ac 9b 2e 28 00 00 00 00 00 00 00 00 00 00 0a fa d1 f5 bd 2a ee a2 c8 72 c0 b6 2c b9 99 e5 7d 38 75 9b ab 89 62 6a 59 e6 eb b6 50 b8 6c b6 61 8f af 45 3e b3 74 e1 5a 41 b9 89 5f 0a c9 27 f0 fa 15 33 52 2c be 2c Data Ascii: <;xb&v+c3_f+:Y\.u3%>"yw.;Skl=zNg;}]Rg>e}>eIy=o:Qn?}?vPV09smFzk-.(*r,}8ubjYPlaE>tZA_'3R,,
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: f7 16 eb 58 66 27 33 21 68 e5 dc 2c 85 25 3b 5f 6e 66 4d 50 56 ff 00 99 ad 6a 69 ab 86 cb 44 a1 23 56 23 14 59 c9 82 d9 45 79 3a be 2f d4 f4 96 fc f3 87 e4 7e 8a cb 9f 48 dd fc 9e eb df 2e fa af d1 f9 35 be cf 14 78 93 cb 7d 6b e7 fd 3a 7f 57 93 99 fa fc 71 ee bc d4 b4 cd 9d 6b 9c 3b d5 f9 7b ed dc fb d8 49 a7 ef 17 5b e7 da 3d de 1d e7 5c ad 62 3d 5c 47 a2 b0 e4 ff 00 3b ee 55 b6 93 16 90 26 a8 38 77 b1 e9 ce db af 0d c7 d9 e0 bc e9 c7 a0 e7 8e ef 88 00 00 00 04 4b 3f 32 7a 38 50 6e 4d e7 e8 9b cf d3 81 70 c4 03 c3 52 4d c8 8b 73 af e7 a1 9d 9e aa d2 7c b5 d6 5c c5 09 bb 15 b6 55 cd 45 66 5b 5a a5 6f b2 d4 5c c7 6a bd 8b d5 d3 12 35 94 e5 9c 79 ac d5 5c 58 c7 d4 8f 53 b3 33 fc 8f bb 73 c7 d3 07 bf 93 4d fa bf 12 36 35 d5 fc 1f 5b 07 2e da 3f d1 f9 15 9d Data Ascii: Xf'3!h,%;_nfMPVjiD#V#YEy:/~H.5x}k:Wqk;{I[=\b=\G;U&8wK?2z8PnMpRMs\|\UEf[Zo\j5y\XS3sM65[.?
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 97 67 3f de 24 59 98 ca 66 a9 31 2e 2c 09 2b 26 5f 67 d9 a8 73 a6 3c 76 cb 37 1e 5f ab 1d 32 98 17 22 62 ac a4 c8 f3 52 ca f8 f9 67 98 c9 66 43 19 80 c4 79 e5 d3 76 f9 1f 7e cf 5c b4 bf a3 f2 ac 7d 3e 68 66 22 0c 6a 19 d7 5b f9 df 43 b2 e1 ae ac 0f 47 09 d9 d7 bf 3f 68 de be 33 3d be 4c 7a 9e 17 5a f3 f6 e5 3c f7 ad b1 e6 b6 3e 7d b7 ac 75 d8 2e 6c ae 63 75 e1 a5 fa 3c 7a 57 5e 51 b5 8b 3c 6f 7a c6 fb 46 67 5b c8 00 00 00 00 00 00 00 38 4f 5e 7c 0f ac 82 47 4b 99 75 1b 98 da cf bb 3d 1e cc 95 96 24 12 e2 42 e5 3d c7 a3 dd 64 97 cc d6 4c f5 95 9e 98 33 d7 31 e6 dc 72 4c 30 56 65 f9 26 42 55 9a f9 e4 91 1e aa 6a 43 24 78 7d fb 1f 87 e9 5c 74 e1 cf fe b7 c6 cf a9 5c 6b 72 e9 fc ef 7f f2 f7 eb 5e 6f 4e b1 d7 39 ba f2 b4 e5 d2 1f 3e b1 fd fe 49 3e 8e 11 ad 8d Data Ascii: g?$Yf1.,+&_gs<v7_2"bRgfCyv~\}>hf"j[CG?h3=LzZ<>}u.lcu<zW^Q<ozFg[8O^\|GKu=$B=dL31rL0Ve&BUjC$x}\t\kr^oN9>I>
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 56 32 47 30 b5 1d 31 4b 84 ce 6d 5a 9b 7d 99 a3 10 96 d9 6d 62 c6 59 a4 c9 66 1b 79 0a d9 e9 23 2d 0a b5 9b 35 d2 86 ca cd 49 49 9f 4f 12 6c d9 b9 66 b7 d9 7a 8e 5b d6 6d 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 7b 67 e6 fe 93 58 b3 0b 38 b4 c4 b8 a4 c1 58 23 04 b8 0c 27 83 c2 e2 23 d9 1e 58 d1 81 76 ba d9 62 c6 c8 36 5f d7 89 7e 15 ac d8 4b 88 e5 b9 d6 bf 2d be 9b 26 a4 b6 76 1a 92 6b 71 76 ac db 09 76 78 ea d2 f4 b8 d9 63 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 d7 21 ae 2b bc 6a da 43 48 f5 88 f0 61 4c 72 e3 3c 05 f2 78 31 26 05 8a 90 e5 8c b8 23 09 f0 b3 5b 34 92 48 2e ea 51 4b 5a dc b0 e4 f0 6d 32 d8 19 56 e9 37 d9 7a 64 74 58 da 8c d1 f4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 46 a1 5c b3 53 9d Data Ascii: V2G01KmZ}mbYfy#-5IIOlfz[m{gX8X#'#Xvb6_~K-&vkqvvxc"!+jCHaLr<x1&#[4H.QKZm2V7zdtXF\S
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: da a9 83 34 4d 2b aa 68 df 8a b5 a6 78 ea f5 d6 79 cd 59 a5 47 43 3b 87 76 8d 15 62 45 9d 2b 5d f2 c8 b2 cc c6 3b f6 23 92 2a 9b 74 47 20 63 18 07 4e 7e 9a 72 7b 60 77 63 aa 7b 94 f4 f9 c7 15 86 45 7b 76 25 f9 e5 63 ac b9 d7 7c e7 44 6b fe e3 41 cf e3 bb cb a9 2c ae ac db 1f 9d 49 36 73 83 d9 9f 59 ff 00 26 cb 0f 96 d9 f6 f5 23 bc 7f 92 31 af 4a 86 39 c6 89 1c 73 ae 2d dc 01 8d 4a e4 29 ec 74 9b 83 d3 96 9c 88 7b c3 2a cf 14 52 a9 ed fd 5a 69 e1 81 39 cd 2a a2 ef 97 1a fd c4 08 4f 97 b9 24 dc 70 88 5b 5b 3d 32 aa 6c 58 45 13 6e 95 9e 39 b9 fd bb 7d 53 66 41 90 70 6b d2 6b 0c 2e ce aa a7 8b d9 58 e7 51 13 4b 66 3f 33 29 34 e4 f3 49 24 92 53 8e 08 ea 74 92 d4 9e 46 1f 2d 0c ec f6 60 4e 03 bf 76 24 00 46 9f 97 65 d3 93 83 8f 66 27 3f a0 27 be aa cd 9f 43 68 Data Ascii: 4M+hxyYGC;vbE+];#tG cN~r{`wc{E{v%c\|DkA,I6sY&#1J9s-J)t{RZi9*O$p[[=2lXEn9}SfApkk.XQKf?3)4I$StF-`Nv$Fef'?'Ch
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 72 92 21 56 ff 00 26 dd b6 5a dc e5 e1 02 7a 69 6d f5 b6 98 7a 71 77 7c 67 eb 91 0b a6 06 8c 84 10 5f da 7b 00 6a f6 e1 d1 5c f2 c9 ab 0b bc 8d 3c bd de 69 3a 10 9c 7c d5 a1 e3 c5 3e b2 10 30 3e 94 2c 08 6e d7 95 86 07 f5 12 75 bb 40 db ce e0 cf 22 16 af e2 ba f5 60 a5 13 ab f4 5e 3d ca 58 93 00 eb 6a df 2d 4f 21 8e 32 75 34 16 28 bc 0d e6 87 28 b7 98 cf 18 51 4a c6 2d 08 84 68 5d 43 ee 7f ba 37 2e 42 c4 2c f2 8d af 6f 5e 6a db 83 b0 dd a8 d7 a5 e5 a4 a5 23 1d 6d 3b d2 da 7e 33 08 d1 ba ed 33 71 5a f1 84 ea 59 48 14 e1 5b 5b 81 66 62 a2 2e 32 33 93 f3 6a cd 75 98 64 7b c3 b6 f2 71 cf e5 51 12 aa a8 5e 23 80 3e c7 27 87 b8 f6 d5 fa 2d 76 38 95 65 0a 6a ed a6 85 7f 53 2b c8 ac e3 db 4a cd f4 18 1c d4 82 0f 75 93 6e 19 cd 67 e9 b1 69 2b b8 12 c7 d3 d3 b4 36 Data Ascii: r!V&Zzimzqw\|g_{j\<i:\|>0>,nu@"`^=Xj-O!2u4((QJ-h]C7.B,o^j#m;~33qZYH[[fb.23jud{qQ^#>'-v8ejS+Jungi+6
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: d0 f8 7d cb 72 6d 8e 4e 52 59 5c f6 fe 95 24 f1 42 33 24 aa ba b9 bd 19 39 c5 4f 49 24 71 a7 59 61 cb de 8a dd b6 e8 ad ee 9c 56 fc 1f 7b aa e6 a3 89 85 8d 8f 73 80 e0 d5 66 d1 59 10 f1 20 83 b2 c1 2d b6 21 37 0e 81 8e a6 fb 5c 29 43 1c cd 16 ed 62 09 24 f3 b4 a7 1a 82 dd 5b 21 ba 22 30 ae 71 c9 9a 48 e3 92 d5 c7 98 b3 17 e5 aa d1 19 04 73 37 50 3c 8a cb b9 f5 41 e1 ae bc 76 1a 49 b8 b0 b1 71 15 22 e9 98 80 94 56 60 4f 12 ab a6 5e c0 f6 e9 9e ae 46 b9 48 ac 49 cf 2e b3 77 08 a1 75 cb 29 ed db 29 9f 6c 6b d1 ed a3 c3 e9 ae 21 86 88 07 18 ef a2 8c 3f eb c5 fb 9d 7a bf 1a 27 f2 35 e9 fc f6 ec 31 83 8d 6d 75 a2 b9 23 f5 ed ac 50 da 7a cb 23 8a 51 34 70 cc ca 17 f5 8e 36 7f fa 2a c6 bf 4c eb 11 9f b3 5d 38 8f e7 5e 5d 0f dc 75 e4 f9 76 0f a9 20 8d 7d 3e ec a1 Data Ascii: }rmNRY\$B3$9OI$qYaV{sfY -!7\)Cb$[!"0qHs7P<AvIq"V`O^FHI.wu))lk!?z'51mu#Pz#Q4p6*L]8^]uv }>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.5	49981	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:28 UTC	653	OUT	GET /liquid/buyer/public/js/lib/index.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"6650447c-eac61" If-Modified-Since: Fri, 24 May 2024 07:40:44 GMT
2024-05-24 22:57:28 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:28 GMT Connection: close last-modified: Fri, 24 May 2024 07:40:44 GMT vary: Accept-Encoding etag: W/"6650447c-eac61" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54150 Expires: Sat, 25 May 2024 02:57:28 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e287f90df7c4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.5	49955	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:28 UTC	966	OUT	POST /buyer/user/user-capi HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 510 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=asics Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:28 UTC	510	OUT	Data Raw: 7b 22 66 61 63 65 62 6f 6f 6b 22 3a 7b 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 22 50 61 67 65 56 69 65 77 22 2c 22 65 76 65 6e 74 5f 74 69 6d 65 22 3a 22 31 37 31 36 35 39 31 34 34 34 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 62 6d 73 66 75 75 39 38 30 38 62 50 61 67 65 56 69 65 77 31 37 31 36 35 39 31 34 34 34 39 39 34 22 2c 22 65 76 65 6e 74 5f 73 6f 75 72 63 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 61 76 6f 62 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 3f 68 61 6e 64 6c 65 72 3d 61 73 69 63 73 22 2c 22 63 75 73 74 6f 6d 5f 64 61 74 61 22 3a 7b 7d 2c 22 70 69 78 65 6c 5f 69 64 22 3a 22 32 37 30 30 31 30 34 39 39 34 33 37 30 30 37 22 2c 22 66 62 63 6c 69 64 22 3a 22 22 2c 22 75 73 65 72 5f 64 61 74 61 22 3a 7b 22 63 6f 75 6e 74 72 79 Data Ascii: {"facebook":{"event_name":"PageView","event_time":"1716591444","event_id":"bmsfuu9808bPageView1716591444994","event_source_url":"https://www.cravob.com/products?handler=asics","custom_data":{},"pixel_id":"270010499437007","fbclid":"","user_data":{"country
2024-05-24 22:57:28 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:28 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:28 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:28 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 32 38 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:57:28"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.5	49983	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:28 UTC	392	OUT	GET /uploader/c09b8a2b191088075ea5307b7fbbda245c3c811d.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:28 UTC	700	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:28 GMT Content-Type: image/jpeg Content-Length: 77679 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2212d5cfc6f3bf23e4f1a53ffa78a38fba644940_221" Content-MD5: eu66ZhZuvwBVaX2rcJMZPg== ETag: "7AEEBA66166EBF0055697DAB7093193E" Last-Modified: Mon, 23 Oct 2023 02:04:32 GMT x-oss-hash-crc64ecma: 2595504741290980049 x-oss-object-type: Normal x-oss-request-id: 66511B57F488A53336CF978E x-oss-server-time: 82 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:28 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e28b5fb8f7f8-BNA
2024-05-24 22:57:28 UTC	669	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 01 08 ff c4 00 1a 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 22 52 41 30 89 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},"RA0H
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 1e 9b e9 78 5c 53 ab 85 96 d9 9c ef 8a d7 3d 1b a3 97 29 d3 cd 2e 62 3e 5a eb 99 6d 62 b3 1d 30 eb 6c 34 5b 11 96 b8 fc 76 85 8f 44 4c f5 a6 26 92 ec d7 e9 3f 77 c0 d8 3a b9 36 1c e6 cc 5b 1a b6 22 ba 74 ef 1f d5 dd 30 e8 cd 55 9d 8b eb 6a ee 35 d3 3f 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 c0 5f 3f 97 fd ef 07 8a 72 77 73 ef 3f d6 de 3a f9 3a 4e 5a f5 0f 33 dd d6 e6 72 fb f9 bd 4b 2e b9 b8 75 d3 37 93 b7 9f 27 a3 ca 8d 11 32 57 a1 cc f7 cb 8b 7a 1c 18 ae ef 3b 23 0d 5b 9f ab 9d f2 f5 44 a5 f1 f9 eb 0b 3d a3 52 f6 a9 7f 21 e4 cf b0 ee de c7 8d be 7a 7e 56 7f 2b e4 a9 7c 35 e3 0f 5b e4 3c cf 4b b9 f0 f6 e3 8d f6 97 c7 4c e1 15 df e9 a6 66 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 28 97 cc 7d 55 e5 9d fc 1b 57 97 ee 74 9f Data Ascii: x\S=).b>Zmb0l4[vDL&?w:6["t0Uj5?_?rws?::NZ3rK.u7'2Wz;#[D=R!z~V+\|5[<KLf,(}UWt
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 12 55 c8 d6 f0 2c b6 46 45 9d 1d df 9b 6c 85 6e 90 00 00 00 00 00 00 00 00 00 00 00 10 f2 62 c4 5b 80 65 ea f2 8c bd 17 57 85 b5 df 1e 89 17 da f2 ec 97 9e d1 ab 7a b6 e1 b7 b7 9f cf ad 3d 0f 1e bc d6 3d 38 3d f8 b5 7a 74 6e 1d 1e 6d 67 2c 6d ab f2 7b 5f 41 75 fc fd a8 8b 65 13 15 c6 90 e9 d9 5c e2 ad a8 8b a5 61 14 e9 85 9b 65 6d 16 6d 58 a6 bb ae 5a ec ba 16 77 56 6c 9e c2 e2 15 5c 45 d9 b5 65 93 c2 24 d6 3d 95 43 2b 17 c7 22 d1 60 87 78 d2 2f 1b 87 5f 17 d2 9e 47 ae 00 00 00 00 00 00 00 00 00 00 00 0a 41 ae d3 7e 0d e7 7d ae 6a fc 9b 57 a7 f2 7e 5b 0d 7a b3 83 9d 66 73 7a 99 4b e1 bb 15 63 d7 6a 26 27 47 95 8b be 1b 97 37 aa df 9f 84 65 d1 d9 ba 3c ac 94 e5 6a 58 b8 d3 32 ce 34 c4 72 2d 3a a2 c5 eb 56 88 d6 98 bd 11 6a 66 72 76 e4 a4 b7 2b 73 96 16 f9 Data Ascii: U,FElnb[eWz==8=ztnmg,m{_Aue\aemmXZwVl\Ee$=C+"`x/_GA~}jW~[zfszKcj&'G7e<jX24r-:Vjfrv+s
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: fa f9 9b 8d b9 c0 00 00 00 00 00 3c 2c 90 2d 38 ea 6f 8c a7 4c 58 db c8 af 8d 3c ac d8 94 a9 ce fd b2 ca 69 c2 8b ad 59 56 c7 95 5a 98 7c 7d 0e 8d cf ea 4f bf 24 be 8f 2f d5 26 ca 84 79 16 aa 62 94 44 ae f8 d6 fe c6 1a ce d8 e9 1d bc 9d 97 8b a2 74 4f 36 ea cb 5f e7 f4 b6 ee 7e 9b 15 b6 b7 d3 cb 6f ab cd ea 9c f7 ac e5 5d 38 f9 cd e8 e7 71 e9 e3 1d be 67 75 8c a6 d2 f6 e1 22 23 15 ab 97 69 4d 5f 2d f6 5c 3a 72 59 f4 d3 37 95 a7 2e 4a fe 7e b9 58 d8 ae be ae b5 67 19 9a 42 f5 3c dd b7 b7 86 dc c4 44 e3 79 fa 6c 67 ae 7f 6c 25 ed cf 66 b3 03 83 d3 d6 7e 67 ee 77 0a b2 98 f6 fd 37 d5 e2 f5 1d 7c f0 00 00 00 00 00 42 94 18 9a 13 0e bb c3 a6 f8 98 e9 a6 b7 a2 34 c9 5f 8f 1b 4e cc a5 f9 f0 34 ea d8 34 e0 c9 69 c5 ec 5a ee 98 dc b6 50 d1 c8 8a f1 f4 f6 8e 6f 53 Data Ascii: <,-8oLX<iYVZ\|}O$/&ybDtO6_~o]8qgu"#iM_-\:rY7.J~XgB<Dylgl%f~gw7\|B4_N44iZPoS
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: e2 b3 b7 9f d4 ed cf 66 ed 5e cd 9a ae 89 95 f0 09 e0 be 97 06 97 e8 f9 f4 67 a5 9c 3a 36 6d 33 85 c5 e8 eb bc fd 70 39 fb 31 9e 7f ab 90 e6 ef c9 b4 93 56 47 2d f3 14 d3 23 33 9d 8d 33 d3 4c ef 5f 97 b6 7a ff 00 39 36 b6 c4 f9 bf 49 0e 72 ee bd 5f 34 48 00 61 26 ba cd ab 32 66 ec 5e aa 69 ea f4 a2 dc 5e 35 7a 20 d7 69 b3 9e 2f 2e e9 9a f1 d3 5d f2 d6 e3 d4 a9 df b4 5f 8b 5f cb d0 91 6e 3c 75 7b 33 f7 e4 d6 e3 b7 6c 9f 2f 53 cf d3 99 af 3e 23 2e dd 8f 5e 1c 64 6d 9e bf 9f a9 67 ea 64 a7 cf c4 53 bf 66 db c6 f7 4a c0 8e 8f 61 4c 2a 9a d3 13 44 d2 86 98 2d f8 30 5d 9c 1d 77 9b a2 05 9c 4b 5a f5 1e 0f 4a 14 4f 92 e4 bd 7e 67 48 d6 9b 16 77 b5 0e 21 b4 67 7c ff 00 5e e4 5e dd b2 c5 6b c3 d0 2d cf 9e d3 3d 56 d5 c6 1d 02 b3 b0 52 74 9b c7 0e f4 38 75 ee ce 4a Data Ascii: f^g:6m3p91VG-#33L_z96Ir_4Ha&2f^i^5z i/.]__n<u{3l/S>#.^dmgdSfJaL*D-0]wKZJO~gHw!g\|^^k-=VRt8uJ
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 15 aa 25 2a e6 50 a1 1e 42 a9 5b 4d 28 a6 14 5a 69 5a 88 8a 21 45 ab 69 a9 54 59 38 c5 be 5a 67 a3 e5 76 5e 4e 9b 09 e4 3a ce f7 c1 e8 f9 13 1a 51 a2 31 3a 56 cf 57 99 be c6 73 e9 6d 1f 4a 60 af 19 84 66 f3 b5 86 99 aa 6c b6 98 e3 de 6f 4b 8a f9 df 43 c5 a7 28 57 c2 51 76 ba 65 73 ed e9 9c be be fb 5e 8c cd a9 7a 22 aa b1 08 c3 af 8b d3 1b 1d de 07 d2 9d 9f 2d b7 ce 36 61 7d 15 9e 1e cc 12 00 00 00 07 25 d2 9c a7 6c e1 26 35 5d 43 0d 34 3d f3 9b 35 95 13 28 93 54 b2 51 7c 95 0b eb 5f 4d 71 17 91 75 37 16 b3 16 b1 1a 51 59 f2 2f 72 54 b4 a6 22 a9 d6 a5 2d 45 2d d8 ae b6 ed cf 66 ba 51 68 a2 b6 4c 53 1a 55 13 a2 f7 79 bb f4 e1 b0 d2 f8 fb 57 99 57 a3 70 e5 f4 23 ad 06 b3 ad ed 96 f0 e7 df ad c3 a6 da 34 9d 33 8f 78 cc d2 77 5a db 5e 69 b1 d7 68 33 64 5f 58 Data Ascii: %*PB[M(ZiZ!EiTY8Zgv^N:Q1:VWsmJ`floKC(WQves^z"-6a}%l&5]C4=5(TQ\|_Mqu7QY/rT"-E-fQhLSUyWWp#43xwZ^ih3d_X
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: a4 f9 9e ae e3 85 fb 3f 3f 45 55 bc f8 b7 54 89 de 8a c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 86 b7 68 d1 6d 1a 65 a3 58 57 06 62 25 8c 31 c6 3c 80 88 73 37 e9 3d 26 b6 d9 a9 18 fb d3 07 d3 8e 97 df c7 8a a5 e6 da 97 75 ca 45 ab 76 6b e5 95 42 da 2d 57 4b 73 5f 22 f7 66 be 56 6b bd 7d a6 92 d3 42 28 89 5e 92 26 b4 a2 e6 95 f1 49 16 89 68 9d 9e 9b 27 27 65 3c db f0 da ed 6b 0b ed d1 a7 d3 19 db b0 c4 ed 11 3e 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 c2 c1 8b 96 bf 2d 6a 6b ac cb 5d 57 5f 30 d2 c4 4b 14 8c 61 8f 20 19 ba db 7f ce 74 bd 2b cf 2d 16 e1 3e d1 d6 6d 96 76 96 8d ae 76 af 48 fb e3 67 5c ac 6d 4c 75 f2 aa d5 b5 33 7a 69 6a 63 da da 2e 3d 54 5b 2a ef 59 48 97 59 c8 52 67 63 d3 95 ca f9 0c f7 cb f3 e9 3b 1d e5 2d a8 56 ba f6 d5 fa 3b Data Ascii: ??EUTDhmeXWb%1<s7=&uEvkB-WKs_"fVk}B(^&Ih''e<k>-jk]W_0Ka t+->mvvHg\mLu3zijc.=T[*YHYRgc;-V;
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 58 2e ae 23 5f 42 2e e6 82 d2 78 42 3a c4 65 bd be 4b 9b cb 88 ad 6e 6e 91 e7 9f 4e 2f 6d 6b 12 cb 1c 71 58 8d 34 45 32 1b 8c c5 a6 19 5b cc b9 b7 48 d2 ff 00 53 56 43 6f 6d e9 8a 69 7d 80 c5 33 16 ff 00 4d c3 3d eb 44 d5 a4 d3 2f 63 97 24 a2 3a ba ab a9 ca e6 9e e2 18 be 79 51 6a e3 c4 5a 6c 00 81 2f 51 ae fc 53 73 27 10 20 88 4f 75 2d c3 16 96 52 e5 ab eb 4c 03 0a 97 b6 7d da 40 07 7a 96 65 6a 95 ce 4d 33 7e cd 22 03 73 a9 59 c4 2a 63 eb 66 26 a0 c8 3b 82 f0 ec 55 7e d2 65 a8 8e 09 2d 8a 29 8e 77 56 9a a7 ca ef 3d ed 4f 0e 2a 26 dc bf 7f cd 8d 5c 5c 7f 22 1a b9 b6 17 56 cf 11 ef 75 33 db b3 c2 b9 dd 68 b1 d9 3c 13 dc c2 d3 cd 7c 75 1b ab cd d6 ea f1 36 dd 3e e5 e3 84 5c c9 d3 ba b7 8a 68 62 bf bd 55 57 b2 8e c7 c9 8b 8e 89 8c 5f 6a 0f 75 e8 8f e1 db cb Data Ascii: X.#_B.xB:eKnnN/mkqX4E2[HSVComi}3M=D/c$:yQjZl/QSs' Ou-RL}@zejM3~"sYcf&;U~e-)wV=O&\\"Vu3h<\|u6>\hbUW_ju
2024-05-24 22:57:28 UTC	1369	IN	Data Raw: 5b 1d 12 cf 4f 01 c8 ea 4c 1f d4 4e 79 8a 55 3d cf 39 0c a7 3c 51 65 4c 63 24 4a ea 79 a8 6d e6 bd b8 58 61 1c c1 04 76 50 24 31 f6 72 5d 82 8a b7 84 5b 47 8f e6 66 da b9 af 98 96 3d 98 e5 8e 2b 4f 96 39 ac e0 92 33 95 fc bc 9c 72 7b 4b 7a 39 11 d3 c8 64 f9 9b 34 cc 17 92 6a 6b 86 6e 3d b9 ef 4a cd ee 2a 4b c2 25 58 20 4e a4 f7 5a 46 af 78 92 2c f7 c8 f1 69 13 49 e1 ed 6d 63 96 46 8e 0d c1 d4 32 b0 20 1c 12 71 53 f8 5b 4a bd bd 7b c9 15 8d 4d e0 ed 31 97 e1 3b c4 cf a0 6a d6 0d 9b 69 04 eb 1e a7 3c 0c 56 e6 ce 44 37 3a 76 a3 af 08 25 b4 8f cb 0b 3b 15 d3 ed a3 b7 4c b5 7f b5 6e f7 26 b5 7d 76 df 49 55 ea 3a 86 d2 f5 58 f5 18 b7 e0 29 0d da 83 1a d4 b4 2d 3b 53 05 de 3e 9c d7 fa 06 a5 a7 6e 76 8b ad 14 73 30 19 56 e3 cc 43 28 c4 b1 86 0f a6 e8 f3 77 85 45 Data Ascii: [OLNyU=9<QeLc$JymXavP$1r][Gf=+O93r{Kz9d4jkn=J*K%X NZFx,iImcF2 qS[J{M1;ji<VD7:v%;Ln&}vIU:X)-;S>nvs0VC(wE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.5	49984	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:28 UTC	626	OUT	GET /uploader/eb7e365a40aa434f35f25fe86a7cae4068969509.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:29 UTC	680	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:29 GMT Content-Type: image/jpeg Content-Length: 43030 Connection: close x-oss-request-id: 66511B59C3F24531308A7723 ETag: "957B45A167BE2D53141BF5E647203093" Last-Modified: Mon, 23 Oct 2023 02:04:30 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 12109533235391726366 x-oss-storage-class: Standard Content-Disposition: inline; filename="22156e6dd051dee7314ebe488d73221472731023_221" Content-MD5: lXtFoWe+LVMUG/XmRyAwkw== x-oss-server-time: 124 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:29 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e28cdfeff7e0-BNA
2024-05-24 22:57:29 UTC	689	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '%'/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 08 b3 6d 9b 05 d4 d1 70 d1 79 f0 49 5a c9 9b 97 5d db a4 f4 6c 3d 18 32 50 50 6a 17 16 1c 83 6c dd 2c 26 01 90 99 95 97 1a 8f 3e ab 8e fc f6 ec 57 79 2f 26 e1 34 d8 af 97 bc 5e d6 7b f6 5d 26 5b 5c e0 8e ac f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 0f 84 2b 92 77 0d f2 46 b9 69 72 44 cd ca 48 e1 38 70 5e 5d b2 95 60 d6 72 33 0d db 7a ba ed bd db 69 77 ab 4c b8 d9 2c 24 48 1a e5 c4 d3 80 8e 1b c7 62 b6 95 be de ab d1 b4 e9 69 7a 4a c2 65 32 56 0b 69 24 cd 26 ce 76 f5 5c 99 2b 20 00 00 00 00 00 00 00 00 00 00 00 00 1e 7c f9 32 b7 4e 71 bc 5c 6e 9a e6 4c 13 2c 96 c7 4d 4e 66 9a 0e 3a 0f 37 9b 70 b9 72 5d a5 cd c3 32 e7 5a 67 37 8a 6e 1b 4b b9 73 55 eb c2 f7 57 b0 aa d3 ce 79 78 2e 1b ce db 49 ef ba f7 1d ec 5e c1 34 d0 70 9e 4d b7 4e 8b a5 cb c1 71 94 Data Ascii: mpyIZ]l=2PPjl,&>Wy/&4^{]&[\+wFirDH8p^]`r3ziwL,$HbizJe2Vi$&v\+ \|2Nq\nL,MNf:7pr]2Zg7nKsUWyx.I^4pMNq
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 11 c9 a8 8e a1 4d 6c 56 55 ac 48 01 66 e5 b8 99 69 6e 2d 96 f1 b9 6b 33 6e 35 a5 a2 bc ba 75 17 37 1a 5c b6 dd 6b 32 dd 67 9f a4 f6 5d 37 23 34 d6 a4 8d 89 9e 1b c3 2a f4 4a 72 15 c7 d4 cf aa c7 51 cc 07 56 92 32 60 c8 30 02 6b 55 64 53 12 b3 04 4a c8 98 4d 4a a8 a1 96 4c 73 13 f3 7e ff 00 94 f9 42 3f 77 71 fd 87 6b 3a 00 3e 4f 5e 0e 1e 74 f5 7b 7a ca b5 39 4e 15 12 b4 e1 99 32 4c 12 06 65 9a 67 53 a4 a5 23 06 01 20 44 c1 80 30 00 c8 30 60 a8 e6 eb 85 93 15 e2 5d e7 39 3a 5e eb ae e3 d4 9f 54 d7 2a 49 36 18 39 d5 cf 9e e3 b8 e8 20 e1 d9 7b f6 cc 99 2c 20 58 0c 02 04 4a c8 15 a6 04 4c 10 2b 2a 65 c9 30 8c 32 46 ac bc ed 79 be 1b ec fc 1f 6b c9 fa af d9 f1 fa 30 07 96 df 27 96 af 07 97 d8 e5 55 f6 23 d7 e9 9d 6d c6 42 a0 9c 30 01 93 26 49 19 d6 4c 99 00 00 Data Ascii: MlVUHfin-k3n5u7\k2g]7#4JrQV2`0kUdSJMJLs~B?wqk:>O^t{z9N2LegS# D00`]9:^TI69 {, XJL+*e02Fyk0'U#mB0&IL
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: fc 4f a0 c7 d5 fa 34 7d 5d b5 80 00 00 00 00 00 01 ae 9f 8b 5f c6 f8 1f 4f 85 c5 ae 1f 4e 9f ad f4 ac ed 63 32 c3 66 98 02 2c e7 b8 5a db cc 11 65 85 8d 3b ea b9 eb 2b 6e b6 a9 41 30 4c 5b 92 04 5b 79 5b 9e 92 f6 d9 94 8d 35 f4 d9 40 32 58 db d7 b8 e9 61 2c 98 0c ba 72 95 34 64 d7 af 2f 7c 3b f1 df 95 97 34 eb 2b dd c7 d3 e9 53 e2 dd 3f 3d 45 79 a9 de 7a c9 f5 dc 7f 49 e5 d1 e7 bd 9f 89 de 9c 8e 76 e6 f2 fa fd 3e 1f ac f6 f9 eb eb 1b 85 e6 c9 b4 6d 1b 46 d1 b0 5e 6d 9b 06 c1 b8 5e 6d 92 32 0c 1c a3 8e 71 0e 41 c0 73 f9 17 4f 8f e2 29 e9 a3 ea 75 e3 c9 d2 eb f1 bd 4b a7 46 7a 6e eb 72 a6 e6 5e 63 77 9d 99 79 0d cc 27 54 a3 32 86 ea 2e a7 3c 2b 51 5c ad 8e 7b 9e b5 f3 a5 75 23 5a 77 d0 c7 79 e7 ab 5e 9c a6 d7 37 1c 44 c3 6a d6 a6 6d 4d d7 bf 36 87 5f 93 9a Data Ascii: O4}]_ONc2f,Ze;+nA0L[[y[5@2Xa,r4d/\|;4+S?=EyzIv>mF^m^m2qAsO)uKFznr^cwy'T2.<+Q\{u#Zwy^7DjmM6_
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: e5 6c d1 6f 2c 10 64 1d 5f 71 09 65 22 ea f7 2a 4a c1 a5 5e 5b 3e 6a 0b 4b 5b a8 8c 4c 89 15 bc 6b 0c 58 07 bb 10 bc 52 0d aa 07 f7 6b c0 1a f5 a4 57 ea 04 fd 98 ee 23 56 75 78 dc 60 90 6c 53 78 92 08 ae 98 3f 4a 50 d9 f8 32 86 18 a8 d8 91 83 fc c6 60 b5 2c ea a3 96 b8 b8 b9 3b 6d a2 b0 89 1f a9 2f 00 50 20 2b 3d 3f ac b2 fb a3 b6 b8 8a f2 da 2b 94 25 85 16 cf 2d 25 a4 33 3a b3 f4 c7 62 17 b6 63 8b 35 fb 71 70 9c e6 a5 98 47 b1 6a ee 6b eb 0b e8 e6 a1 f3 a5 73 4b 3b 07 d8 ea 41 19 1f dc ae ee 05 b4 2d 25 75 22 ea 15 75 09 1a 2f 44 33 36 32 6d 6d 8c dd 67 84 cc bc 3b c6 93 a6 1b 64 f6 dc 88 a7 49 00 20 1c d7 63 9a 07 3f ca 2c 05 3c ca b5 25 d1 73 b2 35 b2 69 36 b5 c0 0a a0 05 24 79 e7 c2 30 39 43 77 e9 76 9a 46 e8 c3 04 36 56 b0 db 47 ca 8a c8 a2 3e f8 a4 Data Ascii: lo,d_qe"*J^[>jK[LkXRkW#Vux`lSx?JP2`,;m/P +=?+%-%3:bc5qpGjksK;A-%u"u/D362mmg;dI c?,<%s5i6$y09CwvF6VG>
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: a8 e3 48 91 54 4d 72 14 1d bb fa cf 82 33 0d 2e c7 fd ca 8a 27 90 0d c1 15 57 da 39 19 a0 2b c5 16 f3 46 47 91 f7 05 9d bb 15 70 6b cf c0 56 7e bc 82 2b cf c3 00 1c 8a 04 d7 54 f9 0c 0f f6 2b fb 9c 5f 38 a9 2d a5 82 77 01 ae c6 6d cd f2 dc 48 19 01 92 78 9b 6c 97 12 a5 bd fc 4d 1c 8b be d7 d8 9d 3d 87 a8 41 f9 cf 72 2c bd 33 d3 1d 31 6f cd 02 6e 79 1d 54 8b da 40 60 77 36 44 a7 14 e1 3b 48 b6 d1 a4 a2 75 91 12 75 22 43 64 31 85 36 12 44 7d 99 93 1b 64 4c 2f 0a 76 ca 76 b3 a1 41 b8 ed b2 91 ab a2 b1 37 b7 7c 92 f7 08 17 e9 2c 49 1b c3 2e 38 91 83 f6 72 91 80 1d 0b 39 ca 3a e7 eb 41 71 8c a1 9c e0 a9 58 db 3b 89 91 5b d8 42 f4 c5 45 b3 a9 be 44 9c 97 60 52 e9 24 66 5a 0e 0d 6e a2 d5 71 29 6f 60 5d 8d d8 1c 0e 62 04 2e 4e ec 9a 19 ef 43 8a 72 15 37 d2 de 06 Data Ascii: HTMr3.'W9+FGpkV~+T+_8-wmHxlM=Ar,31onyT@`w6D;Huu"Cd16D}dL/vvA7\|,I.8r9:AqX;[BED`R$fZnq)o`]b.NCr7
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 68 f8 29 b7 c3 10 c3 96 88 0e 68 4a e9 c1 47 57 1e d6 74 41 97 92 76 8d 19 94 47 bf 2d 5b f1 c5 6d c1 18 8a 10 a9 82 d6 dc 6e 8d d0 b3 e2 51 be 23 c0 02 5f 78 27 18 35 1d cb b6 04 99 c5 64 1e ff 00 f3 79 67 a9 b4 81 ec 6c 06 b2 ae e2 ef 78 5e 4f cc c4 48 14 42 3f 06 6d 10 4a 55 82 06 41 83 73 79 1d aa 87 9a 0d 5e ca 76 c2 95 89 f6 12 58 79 ba b5 37 29 fb 56 56 77 d0 13 d6 cd 6e 07 b0 48 d4 9a 08 aa 0d 2a ed 15 9a cd 66 b7 56 ea 2d 44 d1 34 4d 12 68 f6 ad c7 3c 69 97 06 3d 68 c7 fa f5 69 08 85 22 54 20 ee 34 08 2b 83 73 a7 34 7b a4 b7 07 c8 59 08 a5 96 84 94 1e ba 86 84 b5 d4 ae a5 6f 15 9f d1 8a c7 c7 35 9a dd 5b ab 7d 07 a2 41 a9 e2 13 ed de b1 94 3b a9 64 6c 9a 32 16 19 a4 8f 20 74 e5 48 cb c4 65 02 70 50 26 c0 40 cb db ab 0e 31 2c 7c 32 b0 ce 41 fb 33 Data Ascii: h)hJGWtAvG-[mnQ#_x'5dyglx^OHB?mJUAsy^vXy7)VVwnH*fV-D4Mh<i=hi"T 4+s4{Yo5[}A;dl2 tHepP&@1,\|2A3
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: c8 23 6c 13 df e3 93 59 ac d4 a0 c6 d9 01 42 d7 2d c5 48 02 8c d4 6e 24 55 35 9c 56 e3 45 ab 77 8a dc 45 6e 35 ba b7 56 ef be f2 6b 3e 28 b0 1d f7 51 91 73 8a 09 2b 76 16 f7 07 bf cb 0f eb 30 5b 0e ff 00 b2 bd 8c ad 45 9c f6 39 5f ab 0a 7b 8c 03 c3 bf ff 00 6b 8b 98 6d e2 92 e2 e2 f6 fe 6d 42 6e a3 da fa 6f 54 bd 81 1d 74 5d 22 1d 1e cc 42 9f 1d 42 e8 5b 46 2b ac a6 b7 a0 39 23 19 c1 31 0f 2d 68 c3 e9 36 00 b1 71 6b 79 2c d2 4d 6f 36 4d 06 6a 92 e8 47 90 1e f2 f4 28 d9 fc 4a e5 7e b3 ad c2 9f 5c 7a f6 95 23 ac 75 d8 e0 e6 b8 f8 04 7a da c3 bf 1f ed b3 f1 c5 63 15 96 f3 2d a5 9c ff 00 f7 4e 97 16 7f 6a 3b 7b d8 93 69 2c ea 7d c2 41 40 8f 19 ac d3 0d c3 14 8c 10 ed 3f 57 72 d8 a8 98 c6 fe ec d6 6b 35 9e 39 dc 2b a8 b4 19 89 e0 24 c7 b7 cb dc 9a f9 49 ce 32 Data Ascii: #lYB-Hn$U5VEwEn5Vk>(Qs+v0[E9_{kmmBnoTt]"BB[F+9#1-h6qky,Mo6MjG(J~\z#uzc-Nj;{i,}A@?Wrk59+$I2
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 71 45 0f 9c 1a 06 b7 37 6a c8 3d f0 95 c9 18 12 59 5a c9 cb c9 a3 da 37 d3 26 88 d8 cc 4f a5 ea a9 ca 34 5a bc 3c b7 f1 4b ab 6f ae 3f 53 cc 38 a4 f5 39 e0 3d be bd a7 4e 55 0f 20 f2 b3 38 a1 72 7c f5 d4 d7 59 2b ae b5 f3 0b 5d 74 ae aa 57 5d 05 7c cc 74 6e d3 c1 ba a3 72 68 cf 25 75 1c f7 39 3d fe 20 16 ed 77 ac 69 96 47 6c b7 1e a5 bb 90 91 68 da 86 b8 f2 ab a8 d6 b5 6b a6 8a de 21 a5 da 35 ac 56 f7 11 fa 5b 48 46 dd 50 5b 5b db 2e d8 7f 9b ac 41 77 e9 db c9 67 b2 b1 d6 2d 6f db 0c 55 d4 e0 87 1c 50 22 b7 01 c1 0e 3b d1 1e ec 8d cd 5b de 84 92 0e cc a3 b8 07 ee 71 5b e3 a3 d3 ec 48 4a c4 54 7a 44 64 a9 8c e4 29 1c d0 58 ab 64 75 85 ac 0c 71 c8 2d 90 46 2b 75 02 68 80 79 af 78 c0 4e a8 fe a3 3c 59 ae bc 42 ba b1 35 12 bd eb 73 0a ea 50 76 26 83 b9 1c ee Data Ascii: qE7j=YZ7&O4Z<Ko?S89=NU 8r\|Y+]tW]\|tnrh%u9= wiGlhk!5V[HFP[[.Awg-oUP";[q[HJTzDd)Xduq-F+uhyxN<YB5sPv&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.5	49985	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:28 UTC	626	OUT	GET /uploader/c45a50fb64006f61f8cc79f72832f2fa6b14335b.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:29 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:29 GMT Content-Type: image/jpeg Content-Length: 93748 Connection: close x-oss-request-id: 66511B599EAA1A39359FA3A2 ETag: "BB0378B9B926C36659C410108092B471" Last-Modified: Mon, 23 Oct 2023 02:04:29 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2305225945679552844 x-oss-storage-class: Standard Content-Disposition: inline; filename="2214321179160a87c9e6e3e1fb2ba71d7da51150_221" Content-MD5: uwN4ubkmw2ZZxBAQgJK0cQ== x-oss-server-time: 160 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:29 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e28cfec2f7d4-BNA
2024-05-24 22:57:29 UTC	690	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 08 09 ff c4 00 1c 01 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: %'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 00 03 91 b5 7f 35 3d 4e 08 11 3d 7f a3 cd d3 74 e1 2e d5 ba 62 44 d6 5c c5 d9 5b ca 78 7b 7e a3 e4 e8 fa 8b c9 ef b8 00 00 00 d1 ed 9f c9 fe e7 99 e0 34 b7 47 76 c4 d2 22 e8 45 86 cb 44 58 ac 7a c5 2b ad d5 99 d6 44 b6 79 f5 cb 55 87 46 c6 d4 b2 ac 5c 7d 70 7a f1 f4 cf 53 cd ef 7c ce df 78 f3 3d 0d 55 f3 c3 13 eb 3c 5d 32 62 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e6 3e cc 3e 45 f4 78 f0 44 c4 c6 76 9b c7 55 d9 c9 b9 da 97 a9 22 f1 3a e9 34 af 9d f2 76 7b 27 36 bf 60 78 7e 9c fa d8 00 06 b3 4c fc 33 d6 e1 f9 83 ab 18 14 9e 87 48 ad 34 d1 b3 8f 0c d1 38 cd 7c c6 2c 36 91 97 44 b9 89 d6 9c 6a db 11 1f 48 b6 73 c5 a6 71 b9 fa 97 c7 63 64 ee ce 6d f6 3b 6f 79 f4 be d1 c4 6b 9f 7d d1 cb f4 d7 cf fb 1e 8f cb bd 52 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 5=N=t.bD\[x{~4Gv"EDXz+DyUF\}pzS\|x=U<]2b@>>ExDvU":4v{'6`x~L3H48\|,6DjHsqcdm;oyk}R
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 79 76 ea f9 b7 d8 52 e0 00 00 00 00 00 02 87 e7 2f 6e 7e f7 f8 67 e9 b1 67 a3 96 f6 b8 7c 6b f4 4f 83 d2 fd 27 87 37 4c a8 9a 4c 5d 13 54 26 72 a3 55 4d 97 8c d1 49 71 5a a6 b1 14 95 62 77 15 be 4e 3e 8f 45 f8 1f 4b bd f9 ce 89 75 bd 34 8e d7 83 49 1d 39 79 df d8 f1 e2 98 8b 69 8f d0 cb 9a fe 1b cd f3 35 97 e6 f4 e9 3a a9 cf 7b 58 f6 fe 17 74 3e 8d 35 de 8f 36 cb 0e 8c 99 e9 a5 d2 ba de fc f7 3c fd 12 70 d7 3f 46 3e 05 fa 2f cb 53 a7 28 56 c7 b6 db 8f 41 4d 60 b6 56 b3 b1 d7 61 4d 69 5d 32 5e 32 51 02 f9 6a ba 31 42 b7 ce 42 6b a6 5d 2c d5 13 b2 a5 f9 bd 73 cf 35 c5 4d 26 5e 99 26 37 b9 df b4 e5 df a9 e7 db af e6 df b1 e7 db 75 96 99 22 40 00 00 00 18 13 f9 a7 ec 70 7b 87 e5 5f a3 f6 7f 19 bc 7b 74 c4 b6 9e 7b f5 be 67 98 7d ef c0 ea fd ef 3f 2e b8 13 2e Data Ascii: yvR/n~gg\|kO'7LL]T&rUMIqZbwN>EKu4I9yi5:{Xt>56<p?F>/S(VAM`VaMi]2^2Qj1BBk],s5M&^&7u"@p{_{t{g}?..
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: f6 f3 f8 47 a1 c9 a0 9c ed ad b3 cd 31 cd b2 4c 5b 0b a5 74 4d e6 39 8c d0 b6 57 cc 58 43 9b 69 a9 7c 33 6c b3 1b 49 ae 3e 5d b3 65 a6 5a da e4 59 6a ed 75 e7 c5 68 9e 42 89 a6 37 ed 7e 7f bb df ff 00 27 fa 1e 53 d4 ce 17 a9 8f ce 9f a9 fc f6 6e be 7a 29 59 d2 ea c5 73 d7 ad f0 bd 2f 69 fc b3 eb 75 bb 2c bc 5b 69 dc 72 74 7c dd fb 6f e7 99 66 91 29 ae 78 95 a3 26 fc d9 6d 4b f0 d7 d3 be 33 ea 3d 43 e0 7e 8f 87 f7 38 fd 03 c7 eb f1 2f d4 3e 3f cf 3e 83 c6 c9 bf 2e 68 d2 3d b3 df 44 6a 26 69 13 ae ce fb 0d 62 26 b5 9f 9c 6b a2 ea da 26 1a e7 a5 e5 a6 88 49 28 91 10 aa 8a 88 f3 38 51 8e 18 cc 75 9a 56 7b 2e de 2f b3 fc 4f 5b db f2 d0 0d 57 83 af 82 7c f6 bf 32 7d ef 95 a1 f5 f0 ba d0 b5 68 5f 68 ba 22 b3 39 a5 8a b3 7a 2f 2d ad b2 5a 2e 8a d6 56 5a ba ab 69 Data Ascii: G1L[tM9WXCi\|3lI>]eZYjuhB7~'Snz)Ys/iu,[irt\|of)x&mK3=C~8/>?>.h=Dj&ib&k&I(8QuV{./O[W\|2}h_h"9z/-Z.VZi
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: b1 15 4d 93 5b d6 a2 06 18 43 c9 93 82 f1 bc dd b2 f9 b6 bb cf bd 7c 9d 6e f2 36 c9 c7 7a 49 55 66 15 9c b6 9c dd 35 be ec 3c 1a 5d bd 70 72 5a 47 a3 9c cf 6f 2c dd 71 a9 e2 e9 e6 38 bd 1e 66 97 d3 74 df c6 7e eb e4 6e f5 f8 f4 1e ce 19 3a 70 cb 6b 5b bd 65 e3 6e 7b 8f b3 e8 af c5 3f 4e d7 f4 e3 3b 87 b2 0f a5 c5 e0 ff 00 aa fe 7d bb 9e 5b f9 ef b9 e3 df 61 95 b7 d8 69 d2 d2 7a ee 4b f5 1e 6e 9d 2f 97 ae 4c 2f 0f 82 f1 b8 a6 37 1c e3 ce 73 75 56 45 66 dd 23 4d e5 da 36 b5 f3 bf b7 f3 7c 27 f6 9f 9f ec 78 bd 1f b3 fc fe ae 8e b2 00 a1 c6 6f 37 16 4c 5d 66 58 47 89 93 11 0e c9 89 80 89 44 28 99 10 a4 c6 19 89 13 30 95 ac d7 0d 96 45 60 da 37 71 7d 5a bb 25 b1 c4 6b 25 b6 ac 62 b4 eb a2 36 07 23 54 14 df 59 e7 e1 d1 5e 22 70 df 79 e7 5f a1 c2 73 7c d7 4c 6f Data Ascii: M[C\|n6zIUf5<]prZGo,q8ft~n:pk[en{?N;}[aizKn/L/7suVEf#M6\|'xo7L]fXGD(0E`7q}Z%k%b6#TY^"py_s\|Lo
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 2f 43 73 69 f3 7e ff 00 3e 07 45 7b 3f 37 b3 a1 89 dc 65 ad 0b c9 26 62 49 24 92 67 25 12 89 84 c2 41 98 a8 05 0d 41 a2 89 d0 78 1b 73 1f 31 d5 e3 5d d9 ea 3d de 7f a0 7f 3f ef 95 95 b2 5a 6e de b5 99 aa 2c b2 b4 43 98 d3 67 6d d7 9b 6c 95 b5 26 2d 28 63 bc 42 d9 ca 7a 9c da 6f 57 1d 6f a5 86 bb ba 91 7b 32 c7 6a b9 ed 76 36 c5 0a 75 4f a3 7b 59 f7 19 eb bf a5 85 a4 73 50 71 27 97 9e 4e 6b 08 e5 b6 8d a7 4f 3f 51 df c9 2b 4c d6 ad f6 a6 d7 af 9e 95 6a 39 fa 36 9b e3 12 b3 83 3d 77 7d 3c dc b7 9d db e7 7e 3f af 0a b3 d4 76 72 76 1e 97 9d 64 cc 6a df 59 cf b6 af 83 b3 d0 ef 5f 5e e5 e8 f2 58 9e 4c eb cf 52 37 66 e0 d8 19 0c c6 53 21 94 c8 64 33 92 89 a4 e3 6a 6c c9 c4 b0 00 30 91 21 a4 39 c9 73 c4 af 2b 4d 8f 8f b5 f8 ce 0b 2d 46 6c ad 49 71 be 9e 7c 3f d1 Data Ascii: /Csi~>E{?7e&bI$g%AAxs1]=?Zn,Cgml&-(cBzoWo{2jv6uO{YsPq'NkO?Q+Lj96=w}<~?vrvdjY_^XLR7fS!d3jl0!9s+M-FlIq\|?
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: f8 a5 93 53 4c 93 e1 ec 47 12 8f 89 64 8b 14 f1 e7 41 9f 30 e3 cc 7f fd 6f 5b 33 1a 1c fa ab 73 50 d9 3f d5 f6 96 d0 f5 71 ba 8c fb c3 44 96 24 93 42 85 76 a6 51 22 b2 5e d7 eb 06 22 7c 24 ba 70 3a 9a c0 ed 08 f1 8b da 4e ab fb 7d b2 37 3b 43 13 e7 66 a2 a1 b9 35 ee 2f 68 20 77 cb 9b 44 ee 64 8e 15 b2 f2 a2 f2 e2 1b 2a d4 58 58 b0 b7 2e 54 c9 6e 66 52 f9 79 f7 25 99 9b 2d c1 23 5a 16 6b 00 6f 53 a8 78 58 5d 15 86 aa b1 60 f1 0c 0c 46 c9 d4 88 b0 d0 42 bf fa d6 f3 2f 25 03 b5 6f 3a 7f 7a 31 47 bc 32 af 0d 81 a5 71 a9 bf 9d 61 f1 af 84 7c aa 75 4e 98 7d ae b2 e8 63 37 b5 ea 29 e2 98 70 3d ff 00 d5 66 97 34 b2 33 1d 73 1a cd e5 57 ab fa 2f 53 42 27 00 83 67 03 43 1c b2 41 27 55 75 35 b3 76 a2 62 c0 49 34 97 f6 ff 00 a4 f8 63 78 71 0a 34 3c 0d 50 61 44 36 69 Data Ascii: SLGdA0o[3sP?qD$BvQ"^"\|$p:N}7;Cf5/h wDd*XX.TnfRy%-#ZkoSxX]`FB/%o:z1G2qa\|uN}c7)p=f43sW/SB'gCA'Uu5vbI4cxq4<PaD6i
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 2b 0b 46 d9 3c 3c 8d f4 0d ab 83 cf 99 ae 52 11 dc d6 41 62 01 61 56 92 c0 90 32 66 cb 99 f0 e8 e5 a4 67 b1 24 d4 12 12 96 bd 99 47 3c 26 d6 c8 32 62 2e 7f aa 19 e2 c4 20 78 9c 32 9a bf fa 26 dc 9b 75 82 2b d6 46 b7 a1 24 78 cd d4 da 91 e2 7e 4d b9 73 52 61 85 ec e0 42 e7 95 49 1c 90 b6 59 10 a9 f6 6c 1b 98 ad d9 e8 ff 00 97 bd 1d 2f 5b d7 f8 90 d6 fc 56 fc 7c d5 be 1a 75 35 79 3a 46 68 44 e7 c4 6d 49 14 7c c6 a6 b3 64 d0 dc 76 ad 47 12 8d 6b 36 6e 7a 9a e5 f4 f4 5c 75 35 98 f4 36 f4 75 ef e9 ed 5f ed 42 d5 11 42 f1 e7 27 76 4e b5 2c 3b ac 9a 01 9f 8d 2b 83 17 a3 30 df 12 59 e4 8c 80 e0 95 ce a5 b8 c3 9c c5 8e 5b 66 37 b1 92 36 8d 83 a6 69 58 8b 3c 52 64 25 5d 88 8e 4f bc 1b b6 8c ab 5b 2a b7 1a 15 8c 91 a5 fe 62 53 5b 6b a7 3a b1 5b 1c a2 fc ea c4 f8 77 Data Ascii: +F<<RAbaV2fg$G<&2b. x2&u+F$x~MsRaBIYl/[V\|u5y:FhDmI\|dvGk6nz\u56u_BB'vN,;+0Y[f76iX<Rd%]O[*bS[k:[w
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 32 90 6f c9 31 58 77 d1 66 5b ff 00 99 da 12 6f 36 df 92 8c 95 34 40 e5 ce 33 29 a9 b0 32 45 c5 1f 12 d6 6f 6b 95 66 07 98 a1 99 0d d1 88 ad f3 7c 4a 8d 59 e2 eb 87 5a 32 27 f2 eb 5b d6 e8 00 ab b3 73 24 d0 4e f4 05 bd 85 52 d5 0c 2c ed 92 31 76 a4 d9 f8 c8 9f 79 14 f1 5f a0 12 6d 95 d0 c7 86 92 8c fb 4b e3 d8 f1 b8 a6 64 fd ef e8 fb fd 73 ec ab 71 60 31 11 d2 be c0 17 f1 55 b6 23 b5 d3 1c d1 d7 a9 ec d7 6b 8d a4 86 97 66 e0 74 ff 00 ea 14 36 44 4d f7 78 98 de 8e c4 62 3e f8 5e 9f 62 e2 17 36 57 8c 8e 94 db 2b 17 c5 92 3b d0 d9 78 bc d9 4c 5a 72 ba 47 87 d9 d0 3b 12 00 00 67 74 8d f6 83 2c d8 85 b4 03 ee e0 c7 6d 01 06 68 a3 61 bd 00 03 44 49 c4 d9 4e 9c db 2f 50 2f de 8d b5 0e 4e 9c aa c5 6d cc 58 50 16 e5 d2 a2 8f 39 ca 00 63 db 83 07 86 e2 6e 08 92 b0 Data Ascii: 2o1Xwf[o64@3)2Eokf\|JYZ2'[s$NR,1vy_mKdsq`1U#kft6DMxb>^b6W+;xLZrG;gt,mhaDIN/P/NmXP9cn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.5	49986	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:28 UTC	392	OUT	GET /uploader/2d1d59f9ff7fa74ef8db576722eb77f20bd40ba0.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:29 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:29 GMT Content-Type: image/jpeg Content-Length: 70881 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221b203d613cf268033f14628043af6f84321129_221" Content-MD5: 6AxrkGxtLt7AsFMbiKkOkA== ETag: "E80C6B906C6D2EDEC0B0531B88A90E90" Last-Modified: Mon, 23 Oct 2023 02:04:37 GMT x-oss-hash-crc64ecma: 4153714797406459080 x-oss-object-type: Normal x-oss-request-id: 66511B57342C48383584B400 x-oss-server-time: 134 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:29 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e28cfffa6a79-BNA
2024-05-24 22:57:29 UTC	668	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 08 09 ff c4 00 1b 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 24 00 00 00 07 90 f8 1f 6f 47 50 e8 f1 76 5d 8d 38 76 2c 49 9c 98 b4 ac 4c 26 0d be 89 ab d2 fb 1f 9f d4 98 ae 44 80 00 00 05 28 8c 8a fc 25 d9 f3 dc bb 1e ef d1 7a 7b bb 55 55 2d 90 ae 2d a6 fd a3 26 27 62 c7 97 06 d8 b8 ed f1 f1 be 6f b6 e9 5d 1f 15 dc 2b 71 ac e6 c3 a3 61 ea ca 5b 16 5e 0e b6 26 1c f1 7b be 7f e8 5a 5f b0 61 80 10 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 5d 5e 11 97 07 29 89 e4 5b 1a db 46 ef 17 73 d8 d2 84 b4 54 bc 84 34 0d 2e 9c bd 72 fd af a5 d3 ea 38 76 88 2c 00 00 79 54 0e 7c 1f 22 f4 38 dc 0b 16 df d2 9a db 9b 04 29 57 d9 b5 f8 8a e6 6f a1 13 b5 57 2c 35 f1 e2 4d 79 fc 4e d5 92 26 e9 34 23 5b bb 9d e9 7b 4c ac bc 3e a7 9b 93 c9 e5 e6 6d 6e 8d a3 ea bb 53 95 bc d7 0d c8 84 df d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: $oGPv]8v,IL&D(%z{UU--&'bo]+qa[^&{Z_aH]^)[FsT4.r8v,yT\|"8)WoW,5MyN&4#[{L>mnS
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: f5 19 90 c8 99 90 89 cd ac c9 d1 99 59 b9 13 e8 12 00 0b 47 e6 0d a3 54 9a 43 26 e4 c5 f9 6c 88 bf 6a c4 ca e1 1f 38 b2 a5 e4 4c 54 cf 6d a5 bb 02 63 e6 92 26 26 b7 62 1f 9b e9 74 8a 61 8b da d0 d5 fa 9e 5e 3f 67 97 55 6f 66 d1 31 ad d3 cf d7 ec 5a a6 3c 7b 5e ac ba d6 72 ea d8 9d 0a 72 e2 aa 32 66 60 da cd a5 e3 76 f9 b6 6f 87 75 d4 ed ef 7a db f8 78 a6 eb 61 6a e5 e1 da dc 99 75 cb ea eb 5d 8f 1d d7 7c ef d1 64 3b 1e 4a 98 5e 98 8d 98 56 73 65 0d 11 4c a6 e5 0e 6c 90 d4 93 b5 43 58 56 7a cb 49 86 84 b2 31 65 76 d1 7a 66 ec 46 14 2f a6 cc d7 35 36 ac b9 15 f1 35 4c e0 42 b9 8c a5 63 e6 64 66 72 6a a9 39 55 6e 78 ed bd e2 c8 48 00 59 3f 2c 2d 1b 95 b1 eb b1 3a 29 1d 36 c9 9a e6 4c 6c c8 cd 88 d6 ec 87 4e 55 ab 2a c3 e5 32 62 d9 db 93 b6 e3 9c 9c 95 c9 5b Data Ascii: YGTC&lj8LTmc&&bta^?gUof1Z<{^rr2f`vouzxaju]\|d;J^VseLlCXVzI1evzfF/565LBcdfrj9UnxHY?,-:)6LlNU*2b[
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: c3 86 c1 0f 15 ba 59 a6 7e 5f a7 d6 e3 bd 7f 1b 5e 4c 1b 0e af 6b bd 68 7a 0b fb 9c 2a 93 4c ab 4d e4 66 97 61 61 36 8c c9 44 ca 2e a9 0b 44 41 7e 16 91 4c a7 25 6e b6 c4 8a da 99 8f 96 24 c5 29 c1 4e 14 30 65 82 8c 53 16 22 ad 3e ff 00 7e e2 fd 07 e8 de ff 00 c9 3d 00 b2 7c 5f 6c 5c 96 f1 c9 eb 6c 6b 5a a5 50 1e 15 22 b4 4a cc ca cc 4a c5 33 8f 65 52 6d 4c db 21 55 c2 88 aa 4b 58 c6 98 c8 c9 83 aa 62 d9 d8 6b 7c 3e 27 bc d1 fa 5e 5f 5f de f3 fb b7 27 db 6f d9 b4 fc d9 e1 57 92 73 65 87 59 ae d5 ca 4e 34 4e c9 13 7e d1 cf fc e7 d1 78 7f ab f8 ea 6d 35 ad bd df 78 de ea 73 af e4 b2 eb 19 f3 17 62 f1 93 19 55 bf b4 b7 2c d2 ee f2 8e f7 82 ad 1b 46 97 a1 ef da dd 0c ad 8e 67 a9 b9 31 4c ae c2 d9 95 08 32 d4 c4 44 a5 22 20 13 9f 2c 9a ae da 6a 56 f2 70 c8 a4 Data Ascii: Y~_^Lkhz*LMfaa6D.DA~L%n$)N0eS">~=\|_l\lkZP"JJ3eRmL!UKXbk\|>'^__'oWseYN4N~xm5xsbU,Fg1L2D" ,jVp
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 6d a5 9b d3 4c bd 76 1a a4 51 9f 6c 78 92 80 b5 75 18 2c 9e 45 c6 4a e9 93 3a 29 95 55 53 6a ad 6c a8 5c a5 a6 f0 ec 69 98 f3 e0 ef 72 31 71 e6 dd 75 3b 19 5b dc 68 3a db 22 71 42 ce 3a 27 25 0a e0 a2 ca 24 6d 5d 96 97 92 9b 4b 2d 95 54 74 db 12 b3 ca 65 ac a3 56 53 db 46 13 1f 92 9a d6 ee 77 4f 31 f5 de 95 19 be 82 ee 7c 92 5b 36 88 00 08 d8 69 c8 bd 79 e5 95 c5 f2 d6 7d 19 14 ef 38 f6 ba 23 24 6c 4f cd 99 74 ed df 5e fc e3 ce 99 c3 b5 2d a2 de 2c bb 7d 76 ad a9 07 93 52 56 58 ac 4b 44 21 62 32 d9 8b 63 d6 f9 15 d9 eb d5 cd b7 c6 7d ad 7d be 89 39 9c 64 47 45 f4 eb 47 3c c9 ab a9 5f 1e b3 6c 77 a7 1e 1c 5f 3a 99 3a 55 72 49 cd 72 91 ad 5e 2e ce 2b 92 cc 8b 60 cc 40 31 c2 2d b3 db 1e bf 8f 2e 1c db 68 b6 18 c8 98 5a de 76 f4 8a 45 35 c9 b9 5f 1e af 19 b6 Data Ascii: mLvQlxu,EJ:)USjl\ir1qu;[h:"qB:'%$m]K-TteVSFwO1\|[6iy}8#$lOt^-,}vRVXKD!b2c}}9dGEG<_lw_::UrIr^.+`@1-.hZvE5_
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 5e e3 d9 b1 93 5b 4a be 7c 5d af 19 3b 87 a5 63 3f 2a e6 4d 1b 79 b9 be e6 e7 57 34 ad 5a d1 52 d7 93 7a 22 f4 b2 65 99 09 09 49 92 10 91 25 09 82 40 94 33 8f 4f 0f 40 07 86 09 00 41 10 c4 19 04 45 90 a9 89 23 27 1c 5d 36 2a a6 7c fa ef e6 6b 74 bc 91 7c 19 d7 c0 d9 e3 fb 93 05 76 d6 9d c7 b5 27 1b 59 da fb f9 f8 f6 b3 eb 9f 29 17 6f 8e 33 67 8b 73 2f 36 4a f8 ef 56 72 cc d8 5d b1 0c f8 89 b4 df 95 65 45 a3 07 16 c6 bf ce f6 f7 22 b7 a7 06 34 cd ab 5b 12 f8 f1 d8 f5 96 4d 83 3f 3a 47 0e ef 96 8c 68 b5 55 c1 ae ee 70 e3 72 68 7b 0b 96 64 d7 3d c8 cb 97 38 73 ad ad 95 17 c8 98 ce 5a 52 12 70 bb 31 92 65 19 c5 d3 24 19 65 d2 b3 c3 d0 00 00 00 00 00 00 00 3c 3d 3c 00 1e 42 a3 c9 8f 52 82 40 02 4a 92 89 20 85 ac 47 82 03 d0 78 7a 00 00 43 c9 8f 0a 93 e4 c7 88 Data Ascii: ^[J\|];c?MyW4ZRz"eI%@3O@AE#']6\|kt\|v'Y)o3gs/6JVr]eE"4[M?:GhUprh{d=8sZRp1e$e<=<BR@J GxzC
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 7e 30 c1 97 a5 f3 f4 b0 d2 64 2a da b4 a1 22 ea 3c 2c a4 01 90 88 18 e6 8a 55 0d 1c 8a c3 fe b1 3d ca d5 87 de cc 8b a9 3a 9f 13 1e e3 ba 4e a3 ea 8c 4c c7 6e f9 53 14 f1 4a 81 a3 90 30 ff 00 5f ae 2a b5 5c e4 ce 3c 6b 1b 71 16 35 95 20 5e ec f9 a1 03 29 68 da d5 ab 36 7d 6f 6a 1b 55 e5 96 45 c5 52 71 13 dd 29 da b9 91 8d 55 96 0d a2 8e f6 51 e4 6e c5 75 dc 63 ba 46 e5 a4 13 5d 9b b0 8b d2 f8 b8 d7 88 88 b1 b3 81 c4 d1 87 d4 49 5d 9b 44 c9 76 78 e3 dd 51 73 39 29 92 57 ab 1c dc e3 0d 2d 7d f9 46 c8 52 fc 8a ca 04 87 54 65 04 3a 26 cd 66 6b c1 60 b0 1e 56 2d 4e 5e f2 54 9a 7e c9 96 4a f4 ec 90 2c 56 89 96 76 a5 89 94 cd 8e c8 cf 04 bd 25 d5 51 67 ab 14 90 85 b4 0f fd 55 dd 55 4b 31 d8 66 ba b0 47 ca 1a 64 6a c6 46 59 dd 9a 49 19 88 98 f8 fc 83 fc 6b 1d 96 Data Ascii: ~0d"<,U=:NLnSJ0_\<kq5 ^)h6}ojUERq)UQnucF]I]DvxQs9)W-}FRTe:&fk`V-N^T~J,Vv%QgUUK1fGdjFYIk
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 80 97 8c 84 09 23 ab 13 37 6c 28 cb 61 55 f9 4d 27 66 3c cd f8 c1 69 6c ec ab d7 f4 61 75 8e 65 62 68 64 a9 e4 e0 13 d5 99 5d 7f e9 2e 78 a3 b6 ac df 98 5c 9c f2 3a f5 68 ff 00 8e 2d 2c 71 48 77 8a c6 cd 1d 7b 29 bf 23 c8 45 2b fd 57 42 51 22 f0 65 0c b9 5e 92 a5 6f 79 a8 b7 62 59 1b 21 88 9b b7 3c 64 18 32 11 ce c7 b9 e1 83 6f a4 b0 eb b1 07 6d 4a 28 de 1b 5a 87 dc d8 2b 20 33 d6 94 4a a9 35 aa 72 79 e7 13 62 ba d7 23 4f 8a 3c 9d d8 f1 bd 65 8c bc 00 91 bb 2d 15 88 66 1c a3 90 30 d4 f7 2b 57 fd ec ea ba c8 f5 85 0a 6a dc 3d e7 2b d5 f7 6f 3b ec e4 2a 7a ec 9c a1 21 47 95 f1 5d 21 5e 0d a6 c8 bf 71 fd 88 a1 63 50 aa 4e 8e be 3c fc 68 ba ef cb b1 10 7b 56 d6 03 b7 e2 92 b5 79 99 bb f6 09 69 23 88 05 f7 79 30 c6 bf bc 71 ed 9a d4 f2 24 62 15 52 b1 d6 06 54 Data Ascii: #7l(aUM'f<ilauebhd].x\:h-,qHw{)#E+WBQ"e^oybY!<d2omJ(Z+ 3J5ryb#O<e-f0+Wj=+o;*z!G]!^qcPN<h{Vyi#y0q$bRT
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: ae 55 24 58 e0 92 a5 7f 4d d9 44 06 21 db 4d 93 6d b5 e9 4d af ba 91 88 49 7e cc 43 32 c5 3d b8 74 12 66 8b 7a d9 58 e5 30 a7 66 30 d2 11 dc 94 b1 8d 9d df c2 f0 5d b8 a9 3a f8 d5 ca 75 32 10 76 2d d7 12 47 43 0d 8b c6 49 dc a5 53 8c 83 c6 8c 8a 47 9d 2f 05 00 28 f1 d4 1d cf b3 1d a3 1b ea b5 ca 92 c6 3d 3b 00 d8 b9 22 bb 9d fd 9e 53 c6 de 2f 1d 7d 10 5d 83 9c d8 ea 19 ec 4b 9a f1 e4 a2 b5 58 5b 75 fe 3d 8f af b2 9f 2d cb 43 31 b6 c1 d3 49 92 ae c3 c9 db 42 d4 0d f0 e3 4b 24 67 e1 c7 fe 6b fc 45 b9 c2 1a d5 41 d3 fc eb f3 d4 20 65 30 d2 57 3e 6c 85 fa 9d 01 b9 d2 ba ed c1 93 7d 76 47 20 04 81 b4 57 61 b1 1b ea 19 ad 56 f3 5e 73 ac 6e 7a 39 37 59 58 c7 2c 56 56 4f 8d 6f fd fc 03 ad 92 40 55 c8 e2 72 76 6b 72 ad 3d 38 fb 8f 99 c3 77 04 77 f1 0f 04 89 f6 1c Data Ascii: U$XMD!MmMI~C2=tfzX0f0]:u2v-GCISG/(=;"S/}]KX[u=-C1IBK$gkEA e0W>l}vG WaV^snz97YX,VVOo@Urvkr=8ww

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.5	49987	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:29 UTC	969	OUT	POST /buyer/user/select-coupon HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 17 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=asics Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:29 UTC	17	OUT	Data Raw: 7b 22 63 61 72 74 5f 74 6f 6b 65 6e 22 3a 22 22 7d Data Ascii: {"cart_token":""}
2024-05-24 22:57:29 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:29 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:29 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:29 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 32 39 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:57:29"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.5	49988	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:29 UTC	1297	OUT	GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591447418&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1 Host: www.cravob.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=asics Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:29 UTC	147	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:29 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close
2024-05-24 22:57:29 UTC	81	IN	Data Raw: 34 36 0d 0a 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 64 68 41 51 41 42 41 50 41 41 41 4d 50 44 77 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 46data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.5	49990	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:29 UTC	392	OUT	GET /uploader/48ac98525a67096a6efeb2f1d638268475124fdf.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:29 UTC	699	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:29 GMT Content-Type: image/jpeg Content-Length: 63722 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221d6f1bddfde9b56a1dadcce6bce41c29874021_221" Content-MD5: YL80CEUzhwz30GiQNLWDJQ== ETag: "60BF34084533870CF7D0689034B58325" Last-Modified: Mon, 23 Oct 2023 02:04:35 GMT x-oss-hash-crc64ecma: 125009833446997527 x-oss-object-type: Normal x-oss-request-id: 66511B585EDFF63939EE46CE x-oss-server-time: 62 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:29 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e28f4f4df7c8-BNA
2024-05-24 22:57:29 UTC	670	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 08 09 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 97 62 93 b7 67 5d db 37 7e ce af 80 08 e3 88 74 c7 ce 5b 72 fc dc 2b 99 de b9 a2 4d 7f 8f 49 4d e6 5b 79 f0 ad 72 93 b3 62 f3 fd cd 7c 88 ce b2 52 4b 79 be 6a 3c 7a d8 c6 e4 77 89 fd 67 47 e5 d2 e9 de a3 e9 b9 73 8d e8 b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 0f 53 95 ea 71 5b 35 2b 9e 7f ab 7b 59 ba cf 91 44 d4 4f 3e 9b 5e a6 ec 95 ea 49 d4 5c 41 c6 2d 9b 14 bb bc bb c2 6c 11 05 6f 06 b3 41 9a 88 96 53 78 90 d6 68 4f 0b b3 5e d9 8b 9b 5d 4b d9 be 47 57 e5 d3 4e dc d6 77 8d 48 df 33 76 99 78 be f1 af 63 7a 87 2e bb 8f 5e 5b 96 b3 09 9d eb b9 d5 cc d9 2b 9c 2c ac b7 f7 7e 5d 98 ac 00 00 00 00 00 00 00 00 00 00 00 00 00 00 35 fa f9 4f 59 cf 5e 5d 27 2b c6 fe 80 d6 62 3a 4e 4d 73 81 be 79 15 72 23 33 ac 7c 74 95 b3 67 b2 7f 52 57 52 f2 c7 c9 75 62 Data Ascii: bg]7~t[r+MIM[yrb\|RKyj<zwgGsSq[5+{YDO>^I\A-loASxhO^]KGWNwH3vxcz.^[+,~]5OY^]'+b:NMsyr#3\|tgRWRub
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: e6 6e 50 57 9b ee f3 63 97 4d bf 3a cc ce b5 3b 9d 8c db cd a2 dd 56 e7 28 a4 a2 34 f5 86 d6 70 f7 88 d5 17 8a ec 9b b3 e9 26 b4 fc a2 25 d7 a5 90 97 68 5c 24 c7 48 dd 4c 99 71 a5 d5 b5 3b 36 b3 91 2e 93 9b 8e 95 d6 b6 47 56 c9 73 d0 f5 9c bc 69 64 6a e1 d9 0f 9d 6d 35 2d 9b 72 5b 36 47 44 f5 b0 a9 34 6b ab b2 24 61 87 13 55 05 12 55 1d 12 f5 09 55 99 b6 42 46 51 91 2d be 99 b7 ce e6 d5 9d 2c 98 d5 66 4b 56 5b b7 01 88 2b 66 f8 ef ed 9e 5d 36 30 00 34 93 e2 bb 39 ee 93 d1 b9 9a 7d 41 ef 10 71 5d ad 62 d7 3e 9d 37 28 d6 a1 4e 9c 97 e5 96 4e 2d a4 86 55 1a fd b1 89 37 d3 18 15 1b 1e 97 97 6c 4e a5 d2 64 a6 4e 6f b2 ea d9 ba 1a cc 4b 3f 24 c2 c5 d9 85 56 92 dd 93 c6 ce 58 97 16 5c 5d e3 5b b2 6b 53 52 e7 b9 89 77 9a a3 58 c2 a8 f8 c7 97 77 2e 67 51 d2 e7 d9 Data Ascii: nPWcM:;V(4p&%h\$HLq;6.GVsidjm5-r[6GD4k$aUUUBFQ-,fKV[+f]6049}Aq]b>7(NN-U7lNdNoK?$VX\][kSRwXw.gQ
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 7c 59 2e 87 a6 3c 96 c9 24 9b 32 92 19 a9 ea ec 5d 31 e1 15 2e 93 96 b9 9b 90 b3 96 75 9e b9 25 2a 8a 4d 33 1a c2 89 6b 37 7d cf 0f 41 51 7c ba b5 45 e5 cc 4c 63 5e d4 82 d6 70 93 75 c7 4d d7 17 06 b4 f3 52 3a 81 1f 1f 22 f5 e7 35 59 96 69 1c f7 b5 2e 21 03 ac 75 5a 89 ce a6 2e 6d 2d e9 71 65 94 4e 6f ac f4 2a d6 f3 74 38 dc ab 70 35 cc eb 08 da b5 31 ac 88 cd d7 e2 7f a6 61 e2 c5 b8 b9 b3 a6 d9 1b 76 75 bb 9b 84 58 d4 d7 0c 5d 4c 49 63 4b 91 f2 de 75 af 65 fa 7a 66 00 08 3d 4d 1f 49 14 e7 38 d7 24 8b d7 38 55 03 2c 4c b1 d8 b9 3d 24 ac 44 c6 cb 5b 21 19 64 54 a3 b8 f5 c6 64 68 d3 5c db 9d c9 cb 3e a2 65 dd ba 4e d3 d3 37 53 d0 54 5d 5b e5 e2 b2 82 f4 65 ae 3d ce b7 66 b3 b9 b3 e2 ed fc f7 92 5c 4c 95 c1 4d 2a b5 bb 35 b5 e8 12 cc 26 88 71 0e bc e6 6c a6 Data Ascii: \|Y.<$2]1.u%M3k7}AQ\|ELc^puMR:"5Yi.!uZ.m-qeNot8p51avuX]LIcKuezf=MI8$8U,L=$D[!dTdh\>eN7ST][e=f\LM*5&ql
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 7c be 0c 73 18 c0 39 d9 cd 88 e3 0c b4 62 94 16 4c 72 f1 41 51 51 51 68 ac f0 c7 2d d5 b8 a0 f4 b8 5d 32 8c e2 6c ce 33 0c f2 e9 78 ce 26 89 92 5c 96 25 c9 72 64 92 33 c9 12 4c cd 32 cc 92 e0 00 00 00 3c 3d 3c 3c 05 27 85 27 80 1e 82 a2 92 92 93 c0 78 78 52 0f 0f 0f 40 3d 3d 2b 2a 3d 3d 00 14 14 9e 82 a2 82 d9 6c b4 62 18 c5 82 c9 49 9a 5c 2d 98 26 09 40 2e 94 15 95 95 19 e4 b1 90 56 7a 54 5c 2b 2a 3d 3d 2a 2a 3d 3d 3d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \|s9bLrAQQQh-]2l3x&\%rd3L2<=<<''xxR@==+==lbI\-&@.VzT\+==**===
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 72 49 f3 22 02 58 11 d3 c7 b3 22 7d e6 49 14 d8 bb 4f 18 27 03 02 6c b7 76 c6 41 9b 11 49 4a 2b 90 07 8f c3 10 80 11 98 58 78 f1 cb 68 f3 17 db c1 3f 3a ae 2d 71 c2 83 7d 8d aa 10 60 80 17 28 5b 5a 5f 13 32 38 c6 f0 de 0e 20 93 db 2d d4 43 12 72 c1 e2 66 d2 93 3a 95 42 c5 6e 6b b5 c5 b9 2a f7 2b 70 83 1d 91 8d 65 ec 7d a0 bb 42 cc 8b 7a 77 a8 2b 67 a9 c1 8e c1 67 fe 26 53 b4 4c cc ed 1d 55 94 8c ce 59 ee 03 dd 2d 48 16 a2 5b 5e 7c 7c 2f 21 05 b6 ab 5c 89 19 8d e3 61 74 18 ce c5 13 25 05 31 bf 0f 31 e3 cf d1 88 1b 6a 34 32 76 1e 9e ea cb dd 3a e2 a1 78 65 95 e8 64 29 e4 90 0f a8 f1 62 ff 00 bb eb ac 39 65 30 2d 25 07 27 a8 86 64 93 3a c5 e0 98 51 bd c9 fc 3c 86 55 75 d7 e9 eb 6d a8 ee 59 64 ed e7 49 52 6b 7e 58 e6 65 3e 77 29 df 5f 4f 3a f3 dc 8d 3a b2 6c Data Ascii: rI"X"}IO'lvAIJ+Xxh?:-q}`([Z_28 -Crf:Bnk*+pe}Bzw+gg&SLUY-H[^\|\|/!\at%11j42v:xed)b9e0-%'d:Q<UumYdIRk~Xe>w)_O::l
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: f1 80 8d 37 2c 03 1f 3b e9 b9 56 cf 88 db 4d b0 45 e4 cf 51 c8 ff 00 20 6f a1 ad f1 2c 2e 53 11 03 f1 af f3 d4 eb e9 e7 e3 c6 a6 7c 6a 66 4f e3 e0 13 03 13 12 33 1a 1f 1c 40 47 54 b1 2a 47 6d 99 20 39 b0 ce f5 8d eb 19 8b a3 d3 c9 b5 4d 6b bb 91 33 1f 30 50 30 db a4 f1 32 a7 71 6a 4a 62 79 db b0 89 b5 13 02 51 c3 b8 51 3a ef 21 0b ef 3b 73 87 01 2d ef 03 19 12 f9 f9 8f 0b c7 d4 5b 85 92 24 71 f1 f1 11 a4 e1 af d8 58 90 00 c0 9a 65 2c 62 d8 b9 16 64 17 ce ac cf d5 2c 28 ed cc 96 ab 70 17 08 6f 3c f8 45 9a f0 a0 aa 11 ab 55 c5 5b 1a a3 ca 5a 4e dc 1a 33 cb 15 d4 99 7c 47 9a 76 48 a1 7f 69 59 45 48 fa 9c 42 c8 68 7d a6 57 6b c4 2f 51 ec a6 b5 9a d6 d4 2e ae f0 6a ff 00 e0 9d 42 d8 04 25 7a ca 24 83 25 51 c7 31 24 f9 da 79 7f 15 77 ab 3b 8a a5 7e 16 31 0c c7 Data Ascii: 7,;VMEQ o,.S\|jfO3@GT*Gm 9Mk30P02qjJbyQQ:!;s-[$qXe,bd,(po<EU[ZN3\|GvHiYEHBh}Wk/Q.jB%z$%Q1$yw;~1
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: 52 b5 79 92 aa c8 93 92 c2 59 81 74 aa d5 77 eb 71 f1 b6 ae 89 cd 73 21 9d 88 5c 9d e4 16 b8 8d 62 da b9 7d b6 b1 12 cd 4a ec 07 64 a9 3c 25 94 b3 d7 05 3c a2 c5 8a f3 4f ab f2 95 98 35 ef b1 53 aa fd 51 48 b6 ef ec 1a 45 fa 56 a3 74 5a 59 ff 00 e6 fa 82 c9 29 35 2b 8c ec 59 4b ea bd 90 65 86 1c c5 3b c3 17 ab 73 a5 50 a5 47 2e 89 90 66 fb e2 32 76 2b 84 89 52 f5 28 1f 4e f6 fa ac 0d a2 4d dc 5f 5b 9d 26 7a 5c ad 62 ae 75 ed e3 b2 4a 86 09 07 1c fe 22 45 0c 23 40 be bf ae 62 1c e2 25 c5 b5 a3 2b 89 1a 45 df be 6f 99 ad 43 34 c1 de b7 a1 b7 6b 19 90 a0 53 16 2a 98 6b 11 9e c9 61 9f 0d a6 f9 0d 6f d3 dd 63 1f c3 8d cb e5 70 f9 0c 33 fb 17 eb ca e7 72 5c c4 8c cc 4c 17 23 16 43 3b 4e 8b 91 dc e4 cd eb da 5e 4f 2a be 41 37 37 8f 54 5e 65 f8 ba fa 28 c5 ba 23 Data Ascii: RyYtwqs!\b}Jd<%<O5SQHEVtZY)5+YKe;sPG.f2v+R(NM_[&z\buJ"E#@b%+EoC4kSkaocp3r\L#C;N^OA77T^e(#
2024-05-24 22:57:29 UTC	1369	IN	Data Raw: ea be 4b 26 91 e0 bb 90 d5 fd e3 50 f6 f5 38 de d4 af b2 53 fb 16 5c 04 9c 19 24 cf e2 d2 81 5a 6c 87 19 da 47 41 28 32 03 7d 7e 63 e8 d4 41 bd 64 d0 61 32 d6 4e 90 88 b3 19 6c 05 7d 40 e8 8d 81 4c e2 1d 50 d8 f9 69 84 c7 57 4f 20 fc 60 88 1e ac 06 6f ee af 30 ae a5 ae 7f bc ae 3b 96 46 99 40 fe ca 5a 2b 49 98 38 8d b7 0e dc 97 19 29 08 75 6e d0 0b 0c fb d0 35 2c cd 7a eb e2 a3 37 d6 80 6c 8b 12 27 a1 1a 93 be d8 b1 5c ae ad 46 92 c1 4a ba 13 20 85 f3 98 cb 1c 69 7e ba 4b 70 bd 5c b5 2e c9 0a 0c 67 72 d4 e4 4a 1b 62 1c 6d e0 11 ea 2e 8b 2c 44 fa 5c 69 ac 47 b9 3e e2 ea 2b 2e ca 64 eb e2 93 3e 37 54 f6 85 63 30 88 99 f1 03 e0 87 68 1d e2 64 44 00 ec 28 c1 55 9b 23 6d 13 61 10 b4 5b 15 26 9d 4a 8b ed 57 45 61 15 93 f8 ae 06 1a 0d 7d 77 b3 22 c0 7d 54 30 ab Data Ascii: K&P8S\$ZlGA(2}~cAda2Nl}@LPiWO `o0;F@Z+I8)un5,z7l'\FJ i~Kp\.grJbm.,D\iG>+.d>7Tc0hdD(U#ma[&JWEa}w"}T0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.5	49989	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:29 UTC	610	OUT	GET /buyer/user/user-capi HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:29 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:29 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:29 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:29 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 32 39 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:57:29"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.5	49997	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:30 UTC	702	OUT	GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-1516" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:30 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:30 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-1516" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183497 Expires: Sat, 25 May 2024 02:57:30 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2951903f7cc-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.5	49992	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:30 UTC	626	OUT	GET /uploader/456a5aa4d010296d9e4e2a5ae84678acf1e7f8a6.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:30 UTC	680	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:30 GMT Content-Type: image/jpeg Content-Length: 83359 Connection: close x-oss-request-id: 66511B5A91795F3235005BD4 ETag: "7F05F9E98664B4BB2877167881A4E0B8" Last-Modified: Mon, 23 Oct 2023 02:04:28 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 17467275436928063297 x-oss-storage-class: Standard Content-Disposition: inline; filename="2214a34805491216f2891c3c805114f2b9683657_221" Content-MD5: fwX56YZktLsodxZ4gaTguA== x-oss-server-time: 107 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:30 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2952876f7f4-BNA
2024-05-24 22:57:30 UTC	689	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 01 08 09 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 50 7e 77 7b 1c c9 9c bd b1 64 a0 89 d2 65 ab 26 52 b9 7d 2e 6f 1b 8e 9d 37 94 e8 9e 7d ee 1c ec fc 59 91 8c d4 c6 69 ce 35 78 4f 6c f3 2e b2 07 56 45 9b 5c ee d1 e3 e9 9d e1 70 55 ee da 9f 7c e3 12 3e a7 96 ed de 75 3e 89 ec 94 ea c5 b9 8b c7 a5 c9 2c 66 ef bd 24 96 74 66 f6 fc cf 2d fa 1f 9b e8 ff 00 3e 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 71 2e 8f 82 bd 12 ee 64 fa c9 1e 25 0b ad af 52 c3 4a eb 23 f4 99 44 bf d9 e6 cb 1a 5e ca 98 89 1e 69 6e ae 4c c5 69 93 93 6d f0 f4 c4 18 0e b2 0e a5 3d 9e c5 5a cd be 77 71 e7 a8 f2 dd b2 05 cd 7a b0 32 c4 15 62 ed 19 66 fb cc 7f 2b ac f2 b9 bd a3 c7 41 f4 e7 e8 5f 1e f2 1c dd 7c 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 f0 17 aa 71 94 57 b6 66 4b f8 64 35 6d 4b d0 f8 6a Data Ascii: P~w{de&R}.o7}Yi5xOl.VE\pU\|>u>,f$tf->q.d%RJ#D^inLim=Zwqz2bf+A_\|qWfKd5mKj
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: cf 3a e7 cd 46 95 15 db 9a cc dc fc fb a7 4d 2b ae 6e 1e c7 46 e5 ac 7f 5c f3 8e aa ac bb a5 9a 92 5c d2 e6 64 4c 6a f6 96 2c 91 57 77 25 cb 1b 8b 2d d6 5a da d7 5c e4 38 ea ae d9 87 8b 27 b4 c8 59 51 17 52 9c 55 4a 93 2b 2f 42 e1 77 fe 3a e9 1e 6b d1 38 ea 4e 68 00 00 00 8a 7e 5d 6b 5a 8e 73 04 e8 0b b3 74 9a f7 59 86 ac 69 71 2f e6 e7 a2 9d a7 a6 53 36 ff 00 2b 02 58 e6 b9 75 ae 66 4c aa 0b 2d 6d 19 98 04 87 bc d7 a4 ab 9b 1a b1 8f 73 3c db 76 e5 ac ce 1a 36 d4 93 19 81 75 b7 66 64 73 75 7e d9 d6 76 b9 ac de 9a ae 4e 91 c7 7a 7e a4 2d 3a 66 2e 9d bc c1 d2 6f 3b bd db a2 f6 ce 02 e7 db 7c d2 f9 e6 15 17 25 87 bc c9 b7 21 d1 47 24 af 42 c7 39 2b 73 cd 59 96 7b 8b 7f aa 36 e4 8e 4a 23 c5 89 b9 e6 65 5b b4 a5 ab 32 35 1f 0b f9 76 ff 00 27 4f ae 7c 3b c9 40 Data Ascii: :FM+nF\\dLj,Ww%-Z\8'YQRUJ+/Bw:k8Nh~]kZstYiq/S6+XufL-ms<v6ufdsu~vNz~-:f.o;\|%!G$B9+sY{6J#e[25v'O\|;@
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 2f db 7f 73 dc 96 8b 57 35 ad 45 bd 2f 65 64 a2 2c e5 1e 4b 32 f9 8b 56 a5 11 4e 53 74 c9 d6 43 49 fa 5b b2 89 6f 66 fd 29 f9 af e9 b3 bc 9f a3 fa 87 f4 7f c5 6f 6b 98 1f 30 fb 39 7c 89 f4 bc f1 b3 a8 5c 7a c8 e6 c3 72 65 31 b9 64 2d 2b d6 72 3c f7 8e 2d 27 a9 11 76 ee 77 5d eb 33 19 b8 cb 2f 4b 99 ca 25 95 5b 14 b2 b2 2b 23 c9 8a ea 99 15 15 1e 12 22 f4 59 ac 8e 6d 8d 31 5a 45 36 3c b1 e9 6b a4 85 95 ac dc 96 51 32 b1 50 f4 8b 15 cb b4 61 a1 e8 d4 f6 c5 78 55 1d 2f 9e b5 ba b7 6c d8 c8 9a 47 6c 5c 3c d3 d8 a3 2a aa 95 f0 a5 29 4f 12 89 aa 24 55 f8 dd f3 67 75 c4 da c9 5d 6f dc 6f 1a eb 9c 37 4c ee 5c b5 ab fa 79 e3 fc fd 3a 77 c7 fd 8f 7e f9 1f b6 dc 7d 5f 99 ec bf 67 f0 40 72 be f8 fc f9 fb 1e 38 d3 75 65 22 b2 18 d6 4f 16 7f 3e 92 f9 39 ff 00 2d 4d d3 Data Ascii: /sW5E/ed,K2VNStCI[of)ok09\|\zre1d-+r<-'vw]3/K%[+#"Ym1ZE6<kQ2PaxU/lGl\<*)O$Ugu]oo7L\y:w~}_g@r8ue"O>9-M
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: ac 59 95 49 5c ae 6f 9e f4 9d 4f 6c 9d 2c 72 7d b9 ce 7a ca c9 cd 7b 67 30 90 32 b1 ab 54 bd 1f cd e8 c9 5e 78 49 d7 a8 fc 4f e8 fb 3f 8f f4 35 f2 ef 91 f4 7c fd cb d7 f9 ae c9 f5 ff 00 01 7e e0 00 00 00 00 00 83 8f 47 1c f9 5f d0 74 4f 1f e9 34 2f 5f c4 d4 bd ff 00 0b 97 7d 3f c6 57 ac d7 a5 9b 9f 6c b1 21 6b ab 7c db 7d e7 94 de 29 c4 f7 76 ce 6d c6 d1 a5 6b 51 a5 92 5b 8a 42 c5 ca a5 bb ac d1 2d 2b 44 cd 2d f8 c2 6b d8 a7 59 a4 a6 2a 5a b4 55 72 4a ca d6 af 8b ed 12 9c db ba be ef 9d d6 a4 27 95 2a ee ef 9f d1 b2 78 7e 8d f7 7c 35 f3 c5 f6 7c 99 7e 4f af b4 f9 be b4 8e 7d 64 67 ae bb e8 f9 da ef d2 fc e7 43 f8 9f bd d9 bc 9f 63 37 cf d7 99 e5 eb d0 f5 c7 6d fb bf cb ba c7 93 ed 79 cf d9 b7 fb 3f 3b b8 fa be 25 cb 90 00 00 00 00 00 0a 0c 55 ba 3f 9b ea Data Ascii: YI\oOl,r}z{g02T^xIO?5\|~G_tO4/_}?Wl!k\|})vmkQ[B-+D-kYZUrJ'x~\|5\|~O}dgCc7my?;%U?
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: b0 e4 fb 61 b3 10 b2 ac d2 1d c0 12 33 06 72 a5 66 ee 11 8b 2b df 4b 3b 2d 03 91 9f f8 87 59 b8 f4 f6 4f 89 8e d1 c5 50 74 dc 46 25 bc 93 a8 88 d4 c3 66 5e 62 7d cd b1 e6 bb b2 a9 a8 25 b8 23 de 64 82 22 fa 09 36 26 2a 92 43 12 04 69 66 69 70 b5 68 bd 88 1a 6a 50 63 52 82 dd d5 e1 8c 8f eb 13 de 43 06 73 37 53 94 92 10 cb 23 1c d4 37 32 2f 22 da e0 4c 3f d1 fe d2 ca cf 34 16 eb 1a c3 d3 92 27 b9 9a e2 5b 97 62 d9 51 9c 45 04 b2 e4 8d 2d 40 d9 93 d3 6e 72 27 96 54 ed d3 a4 30 b0 8e f5 ef 1c a8 48 e3 b5 ee af 1e 92 61 26 8e f8 8f da f7 0e f0 6d b0 ba 96 3c 76 ed 3f 68 6e ed 9f b7 77 69 7d 6d 78 b9 8b fa a3 38 45 2c d7 5d 46 46 3a c3 96 e3 0b f6 09 9f 14 1f 1e 60 9b 0c a4 47 20 75 0c 3f d0 12 07 9e a3 77 6f 04 d3 4c 8c f2 4c 76 63 fe 21 44 7f 73 88 8c 8c bd Data Ascii: a3rf+K;-YOPtF%f^b}%#d"6&*CifiphjPcRCs7S#72/"L?4'[bQE-@nr'T0Ha&m<v?hnwi}mx8E,]FF:`G u?woLLvc!Ds
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 98 e5 01 63 32 cf 23 fb ca c5 23 e6 a1 c8 d4 1b 7b fb 88 10 08 ec 7a bd bd db 76 cf f4 8f da 29 f1 12 c4 31 9a 6e 47 2c 4a 93 48 eb 41 14 d7 70 c2 bc e2 39 32 55 22 30 8d e3 ee 2c a2 84 1a 03 24 62 ed 64 c0 92 5b 48 5c a9 49 6c ee 21 f3 dc 20 f2 a1 87 31 8e a5 73 ff 00 d3 bd 65 37 d4 20 b5 97 f4 5f a7 cf 90 52 48 25 4f 2c 18 70 7d b8 ac f0 d9 22 3c 57 b9 68 9f f7 6c 0e 75 d8 6b 8a 07 c5 64 d1 ae 2b 15 ed c7 38 e2 bc 66 85 5b db 49 70 70 86 68 6d 7d b6 e5 fb 8c 59 ac 5a ec 38 48 af 45 b1 7f cb 2f c5 33 e7 8a 45 dc 84 05 b0 b8 0f 1f 7a 0f 6e 84 be a2 15 74 51 ba cb e6 a4 7c c4 59 04 91 3b b9 59 63 63 24 2f 17 7a e1 b5 ab 4e ad 73 1f b5 e0 ea 6a c7 49 9a 58 a3 19 75 be b2 27 00 10 7c 7f 42 eb 57 22 6b b9 2b d9 8a c0 6e 28 47 f4 95 59 0a 9c 36 a9 26 35 58 e4 Data Ascii: c2##{zv)1nG,JHAp92U"0,$bd[H\Il! 1se7 _RH%O,p}"<Whlukd+8f[Ipphm}YZ8HE/3EzntQ\|Y;Ycc$/zNsjIXu'\|BW"k+n(GY6&5X
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: de e9 cf fa 82 de d1 b3 e9 e6 b1 ba 8f 97 dc 56 07 24 1f 76 33 92 bc 1e 98 a4 2d cc 90 3a 3c 64 a4 84 72 d4 59 78 0a 59 9c 00 cb e0 56 af ab 35 7f 81 c9 22 97 44 18 66 97 b6 bd ba 47 d4 fb 16 ee 65 5a 37 32 33 6c 49 62 c4 9c 9c f2 1f 0a 0d 16 0a c4 39 45 f2 83 70 be e0 71 a8 03 07 c1 52 41 07 63 b1 34 2e 19 79 09 d4 2e a3 e5 53 ae 5d 03 c4 5d 7c ff 00 f5 8f ad 59 b7 d5 1d d5 b4 98 d7 3f e8 3f 69 2e 83 ce 90 d4 43 92 e6 cb a9 5c 58 cb 24 91 5f 84 bc 3e b2 21 c7 2a 47 9c f1 5c e3 95 ed 73 ba 4e c8 ba 2e 18 fd 4a f0 60 a8 ec e4 30 0a c6 1f c9 6d 0c be 7b 9d a2 22 a2 bb 9f 70 94 b7 b2 36 b5 93 5f cd 74 b5 89 b5 96 0f 93 a8 57 66 93 a3 4a c5 9a 43 d3 c1 5e d3 40 84 16 0d 10 14 54 af 93 e4 8f 80 1e 68 6c 9c aa df cf ae 25 1e 86 62 30 dd 3e e7 1b 27 c3 c5 59 db Data Ascii: V$v3-:<drYxYV5"DfGeZ723lIb9EpqRAc4.y.S]]\|Y??i.C\X$_>!*G\sN.J`0m{"p6_tWfJC^@Thl%b0>'Y
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: b2 a0 8e f6 5b 4d 13 bd 1e 2a 39 24 81 d5 e3 91 de 77 69 24 22 8a fa 1b 5d 8f c3 fc 7c 12 47 89 d5 d2 40 97 c9 de 88 2d 79 f1 04 eb 1a b5 bc f7 10 cb 69 21 89 cd 29 00 d1 f4 da 64 ff 00 8a f7 fb e9 25 fb 10 fc 7b 99 47 20 7b 59 8d 76 67 0d b2 8a e3 1c 7f 7a 3a 05 0d 5a f8 cf 14 32 39 a3 9f 75 7d da b9 3c 57 fd 7c 3c d7 da 8d 67 e1 c5 59 48 f1 dd db 11 61 21 de 54 fc 7d 66 5e f5 ec ac 10 85 57 05 4e 2b 3e c0 2a 36 d1 c1 a6 9b 7f a9 a1 4d 77 5b 41 73 03 7a 98 1d ce 91 44 f7 d6 2b 6c b1 4b 1f e0 95 ac 3d 0c 41 0f 15 62 f6 c9 70 ad 73 33 c7 dd 9b b3 47 e0 ae 46 c1 6a e1 7a 74 36 58 83 e3 b2 e9 8a dc 7b 29 b5 db db 9a b6 82 5b a9 3b 71 cc 93 da b4 d6 d2 4c 15 9b 65 f1 59 18 c7 c3 ef 5c 0a c7 90 3c 0a b7 b9 9e d5 c4 90 b4 70 dd 5b 4b 74 9f 0b 15 80 dc 46 27 be Data Ascii: [M9$wi$"]\|G@-yi!)d%{G {Yvgz:Z29u}<W\|<gYHa!T}f^WN+>6Mw[AszD+lK=Abps3GFjzt6X{)[;qLeY\<p[KtF'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.5	49994	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:30 UTC	626	OUT	GET /uploader/7b95f33ca58a398ea9d3a76edd90ff18b746a398.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:30 UTC	678	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:30 GMT Content-Type: image/jpeg Content-Length: 84178 Connection: close x-oss-request-id: 66511B5AC3F2453733078123 ETag: "D859EF183B0920CF6F169AD4FEA25481" Last-Modified: Mon, 23 Oct 2023 02:04:27 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9067685359227191941 x-oss-storage-class: Standard Content-Disposition: inline; filename="221b99bf90538c24fbd3966ffe6240885c599033_221" Content-MD5: 2FnvGDsJIM9vFprU/qJUgQ== x-oss-server-time: 66 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:30 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2952fe5f7c8-BNA
2024-05-24 22:57:30 UTC	691	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 01 02 03 04 06 07 08 09 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 7a 3c 99 b2 c3 7b 8d af d9 8f 43 c9 d5 dd 78 fe 87 94 f4 d2 dd f1 fa 0f e3 fd dd 6a db cf be ab cb f4 6f 33 d2 eb f9 e7 9b f1 fd 0f 7a f2 fa b6 69 7d bc b4 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 31 d1 cd f0 47 e8 bf 01 17 af 54 df 66 3b 0b cb e7 34 f9 df 57 8b f2 bd ce 4b 97 69 0b 5b d0 96 fa 1f 8e de c9 c7 69 bc a6 eb 29 0a c0 00 29 64 0d a3 c0 7b 73 f9 57 d0 c3 b4 f7 bc 2f 41 e9 a7 09 ef f9 30 7d 6c f1 5c 24 9f 3e 7a 17 a7 43 e0 fa 1d 97 0f 6e f6 b1 2d cd a4 97 27 4c 45 9b f4 8e 1b d8 e3 b3 d5 e1 ed fc 5e fe c3 93 7f 33 e8 b5 35 8f 41 e3 d7 d5 fe 73 d4 eb 7c ae d4 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 c4 bd 9f 17 e3 1f af f9 e9 4e cc eb ae 9b 35 a6 e5 e6 7f 09 9a c7 4d de 6e a8 bf 3f ab 99 e3 ec e6 30 e8 8b cb 79 6c 74 ed a8 Data Ascii: z<{Cxjo3zi}H1GTf;4WKi[i))d{sW/A0}l\$>zCn-'LE^35As\|N5Mn?0ylt
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 45 f4 e1 dc f8 fe af 0d e9 f9 fe 93 e1 fa 37 55 07 d1 94 47 a7 95 db 52 b8 ce 8f 46 73 39 6b cc 5b 0d a6 37 72 f4 fd 21 f1 9f 4b 29 8e d2 b9 69 58 52 55 90 00 00 00 00 00 00 00 00 00 18 55 f8 0b f4 cf 81 f3 9f 5f d0 c7 95 a7 f1 e6 e8 bc eb ca 72 de 56 96 c9 67 9e cc f7 7c 3b 7a 0f 1f 4e de 91 07 e8 61 c9 fa 7c 9c 47 a3 e7 e8 f4 f3 26 b6 d2 51 22 ca 5b 15 75 90 84 af 26 b3 58 eb b5 9d e5 31 ea db 8a 52 9b 62 cf 5c 36 bd 22 71 45 e9 74 96 59 f9 87 d2 fc dd bb 73 fa 27 87 ef 7a 07 ce fb be 45 f4 9e 45 d1 9c 76 bc 9a ee 58 6e be bf 4d f1 bd 5b bb 7c 78 9e de 3f 44 f9 ff 00 6f 82 f5 b9 3d 17 c0 f5 af cf 5d f9 8b 29 11 fa d3 07 6e 1b 78 da ca cc 2f b1 c9 c3 73 5f 8c 9b 75 5b 73 7a 67 2f 46 96 f1 e8 fe 47 a5 d7 79 7b f6 3e 5f 6c ae 3b 12 82 55 41 28 04 80 00 00 Data Ascii: E7UGRFs9k[7r!K)iXRUU_rVg\|;zNa\|G&Q"[u&X1Rb\6"qEtYs'zEEvXnM[\|x?Do=])nx/s_u[szg/FGy{>_l;UA(
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 97 e6 de ec f4 da ca f6 6d 4c 77 a6 c7 17 4e 9f a7 c3 a5 a6 7b 38 ed 3f c1 d7 a5 6a 5f 5b e6 d7 9f 57 a7 2e 6b d1 e3 d2 e8 e6 9d e0 ea e8 bc bf 53 1e 73 23 96 dc c7 7f 9d bf 8f 56 5a df d7 7c 3f 47 b1 e0 ee 58 00 10 bb 63 f9 fd fa 5f e7 b2 5e 3f a5 27 cf 7b d1 99 ae 78 9c 56 b7 9f fd 0d 22 f7 e7 91 d7 8a fb 63 9a 6b 9e 29 b1 93 1b 4d aa 5b 0e 7d 5a fe 76 d1 3d 99 cf 51 d4 f0 76 ef e2 d1 db 2e 7b b7 08 8d f2 84 d7 d0 f7 3f 95 f5 f9 1f a6 f9 2e 7b b7 82 43 97 b3 d3 3e 7b ea bc 4f dd f3 74 f6 c7 d2 3c 2f 63 a5 e7 a4 57 a9 e3 f0 be cf 91 58 ca 4b 9b bf d0 fe 77 e8 6f c7 4f 1e fb 2f 92 cb 4e af 4e f9 1f ac f3 bf 77 c6 89 ac eb 77 f1 fb 17 ce 7b 9c ff 00 af e4 72 fe c7 8f b3 97 4f 47 c5 d3 da 78 3f 47 e6 5f 45 f3 f1 7b f2 6d e7 32 9c 1d 32 59 6b 2f e7 fa 19 f4 Data Ascii: mLwN{8?j_[W.kSs#VZ\|?GXc_^?'{xV"ck)M[}Zv=Qv.{?.{C>{Ot</cWXKwoO/NNww{rOGx?G_E{m22Yk/
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: ff 00 89 db 71 6b 7d 5c c7 a7 c7 eb 7e 17 bd e3 ff 00 57 f1 95 d1 d2 f9 be ae 2e 2f 7f 8c f6 7c 1b 99 f4 7e 67 7c 3f a7 e6 e5 cf 6e eb cb ec 9c f3 7a b6 f8 3a b6 e9 7e 7f af 0b 3a f9 22 fa 39 a1 3d 1e 58 9e dc 70 a6 63 0b f4 3e 6f 7f 43 e5 f6 eb 6d cf c9 77 72 6d c5 a1 f5 8c 76 ac 24 cc a6 3a e1 57 52 95 b3 1d e7 32 eb f3 2f 17 d6 d5 f3 7d 4f d0 de 29 f5 28 0a 51 f3 d7 75 bd 1b c8 f6 32 53 5b a2 2a 9d 78 8b ad 6c b3 5c 31 7c 49 ac 37 6d 95 50 56 f4 d1 18 22 f5 5b 0d 1b 36 ad b6 ad e9 c7 5b 62 5a c4 e6 9a e1 bd 23 ed 3a 14 89 9a cc 54 df 4e 6b 7e 99 e5 65 bb d1 cb 3f af 2a 62 f2 f4 8b d1 44 db 0c 25 93 14 2e 2f 98 b9 34 aa cd 23 9a 9c f5 ba 70 f3 cf 53 cd e2 3b 6b ab ed f8 7c 7f b3 e1 ad 6f 59 f8 ff 00 ad f0 af a9 e0 dc a7 15 51 7e 99 65 5f 63 8f a7 d5 fe Data Ascii: qk}\~W./\|~g\|?nz:~:"9=Xpc>oCmwrmv$:WR2/}O)(Qu2S[xl\1\|I7mPV"[6[bZ#:TNk~e?bD%./4#pS;k\|oYQ~e_c
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 77 78 f3 bb d7 cd ec e3 b5 c7 ea 6e 4d fe a5 c2 67 22 60 ec 9d 85 40 00 00 00 31 9e 0b 77 cc 7d 0e 1e f4 d7 cf 6e e3 9b a7 b6 e5 e8 fa 4b 9b b7 4e cd 93 66 cb a9 39 22 6f 99 c9 31 62 00 22 a8 aa d4 05 4f 32 e8 e5 80 ea f3 a5 6f 4a 2b 1e 98 c3 52 96 d8 4f 35 4b 72 34 4a a9 e8 76 8e e1 1d a5 ab d0 95 44 3c 4c 44 23 16 f0 14 f8 7c 4d b1 7e 99 6e ed 1d f1 d1 de 99 b5 a7 1f 17 cd 86 fe ef c7 e8 6e 34 ac d6 23 bb cb e9 b5 e4 a4 ad 86 cc 28 5b 33 82 26 3e 62 0d 10 84 0c a1 6c e9 6a f5 68 7c a3 67 83 74 67 a9 7a cd c4 e2 a5 be b0 e7 bc da 9f 45 e5 7b 80 00 00 00 00 18 8e 7c e6 08 33 c4 f4 9f 3a 87 21 13 a5 0b 29 6b 3b 69 ab 2c 53 1a d9 cc 8e 93 7d 59 e1 bd 0b 8b 4a 4c 5e 6a d2 db b7 8c 33 3a 91 55 b3 a5 ad 8a 18 a2 ba f3 3a d5 9d ea db 76 8c f4 9f 6a cd ec ea d6 Data Ascii: wxnMg"`@1w}nKNf9"o1b"O2oJ+RO5Kr4JvD<LD#\|M~nn4#([3&>bljh\|gtgzE{\|3:!)k;i,S}YJL^j3:U:vj
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: c1 3a 48 ee c8 29 1d 0a 3b 2c d0 46 33 40 c0 d8 77 43 35 4a 23 65 79 53 e2 da 32 2a d2 bc 9c ea ef be b4 2c 82 2d 20 8d b9 44 88 8b 2d 82 4e 7c e9 d7 91 be 64 5a bb 8f 47 5d a2 d4 a7 a1 88 37 1e 76 ac 36 57 63 4a 6a 4a 2e 3f b9 ea 92 76 c5 1b 45 3c bb bd 11 79 9b 42 ed b9 56 5d bc 2f 49 d4 2a 2b a2 ce 53 1e 11 df d7 d4 45 c6 f5 67 89 1c 70 1b 55 54 62 33 b2 ce f4 2d 8c 71 44 13 90 1c b3 75 f1 c7 1a 47 ac 94 da 2b 9d 54 61 1d 2f 49 b0 94 9b 9d db 43 b7 22 6b a0 96 fb a1 53 92 44 8f 96 c6 46 cb 96 72 1d 9e 03 2a 6c f3 11 24 34 2f a8 11 64 84 a6 01 d0 fd cb 51 7d 5d 90 6a 99 50 bf df 13 8a dc 8b 99 2b 12 1a bd 21 a2 d5 e9 16 9b 35 13 02 18 72 86 5b 28 69 fa b3 75 06 61 8f 39 b3 8e 43 8a 45 1e 13 8f ae 4a 7f 2c 1b 69 b5 37 3b 54 81 90 8e ad 87 75 a1 0c b2 55 Data Ascii: :H);,F3@wC5J#eyS2,- D-N\|dZG]7v6WcJjJ.?vE<yBV]/I+SEgpUTb3-qDuG+Ta/IC"kSDFr*l$4/dQ}]jP+!5r[(iua9CEJ,i7;TuU
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 4e 5d 4d 55 a6 de 92 e6 0d 08 c5 d2 fb bb 25 d7 89 49 c1 ea 55 16 9b 88 d8 37 bb 29 e9 db c9 b4 1c 2b 22 6c ad 02 a6 e8 0a 5a 6b 1c c4 a7 81 db 77 fa 62 42 56 f9 8d d0 97 0e 55 82 da 85 e2 2e 85 7b 1c 7a 06 6f a5 53 8b 05 54 05 49 0e 89 63 40 e3 a3 6a 6a 58 29 60 57 fd 93 5b 50 59 2d 22 7b d2 59 17 9a 70 cb ea 16 62 f2 db 61 bd 41 83 6c c3 51 86 ad 1a be dd 03 ae 37 e8 0d 52 60 57 99 b0 5f 55 24 69 87 49 1e 13 bd 8b 46 68 ab ca 1d 0f a6 b1 b5 36 fb 6f 6a 21 eb 29 71 95 7e 72 2e 96 75 e5 ec 3b f4 8f 4a 2f 62 d3 9e 4a e1 1e 4a 26 9c 6f d6 de f7 d8 0e ea 0d da bc c1 9f f3 24 c8 6e 25 48 72 18 f2 4e 4a 57 50 e1 d7 a6 9b 8d 1d cb 51 ec 36 6a a2 ae 9a d9 16 f5 97 24 a8 7a 73 b2 53 70 dc 9a db 0d ab 10 6f 4d 32 e3 c7 80 93 ad 69 81 f3 55 e3 92 ea 1c a2 58 6d 8e Data Ascii: N]MU%IU7)+"lZkwbBVU.{zoSTIc@jjX)`W[PY-"{YpbaAlQ7R`W_U$iIFh6oj!)q~r.u;J/bJJ&o$n%HrNJWPQ6j$zsSpoM2iUXm
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 0f 9a 2b 34 39 02 f2 19 2f 8d e9 26 dd 2c 7b b1 1c a5 8f 18 bb 14 25 e7 81 b1 24 2f 44 2e 0f aa ac 34 d4 c9 6c fa 13 56 71 79 3d b9 a4 bd df cb 59 77 9c 77 34 e9 ad 77 5b a7 25 42 21 f4 b7 a9 4c 6f 95 26 aa 9e b2 79 d7 5f 35 37 2a 24 37 65 9d 85 d9 8c 45 12 8f 08 23 6f 65 65 80 fa 2a d9 11 ef 61 93 39 bf 48 eb 13 c7 bf 9b 0b 9f f9 08 7a 33 f5 36 07 08 82 49 e3 7a 62 5b f1 97 e5 29 c0 d4 79 3b 26 24 a8 45 63 8e db 2f 36 96 38 86 3c e9 a9 6d d9 1a 7f 87 61 e1 f9 6a c1 b5 9e 0d cd 92 3d f8 96 5f 1b 51 44 cf 3b 23 53 23 62 8d 8c dd cb 09 ac 68 ce 67 82 0c e6 2d 62 76 33 bd 32 04 5f 6c 48 a3 92 b0 5c 9d 0c d5 72 64 c4 d5 15 1c c6 d9 5d 0d 2e b6 ba 9f a5 c6 af 96 4a 2d f5 a8 a0 a8 e4 68 58 a2 96 3b 2e 22 de 80 cd a4 11 51 9f 21 6c 42 3a 85 ae 8e a4 f8 eb dc 5d Data Ascii: +49/&,{%$/D.4lVqy=Yww4w[%B!Lo&y_57$7eE#oeea9Hz36Izb[)y;&$Ec/68<maj=_QD;#S#bhg-bv32_lH\rd].J-hX;."Q!lB:]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.5	49996	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:30 UTC	626	OUT	GET /uploader/622fada3a90cdea20584e58943f97e18bc42b336.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:30 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:30 GMT Content-Type: image/jpeg Content-Length: 86272 Connection: close x-oss-request-id: 66511B5AF488A5383942AE8E ETag: "D83098E0AE02ABC6076A3F796F119422" Last-Modified: Mon, 23 Oct 2023 02:04:26 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 1976336759529045189 x-oss-storage-class: Standard Content-Disposition: inline; filename="221f4806121530f16efd628a98d45bb158729568_221" Content-MD5: 2DCY4K4Cq8YHaj95bxGUIg== x-oss-server-time: 147 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:30 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2953933f7dc-BNA
2024-05-24 22:57:30 UTC	690	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 08 09 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: %'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 0f 91 6f 5f 93 ba f1 a5 6d b3 bd 2d 88 8d ad 7a 6f 7b c5 e8 fd cf 03 a6 f4 bc 3d ce 17 fa 6f f3 ef d1 3d 03 c8 f6 6a 94 80 00 82 50 e4 bb fc cf 8f 3e af e7 3c 83 cc f6 ba 7f 1f d2 cd cf be b1 30 e5 b6 ab 36 99 f3 fd dc 70 ea 8b c9 d7 07 2d 61 c4 67 33 5a 77 46 ed 1b af 77 e7 f6 5f 55 f2 bd 5f 9f be fb 97 d1 c5 ac 7a 67 93 d9 ed bf 3d f4 d2 6b a5 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 29 f9 89 d1 8e 87 a3 3b 69 69 11 5c 96 a5 f9 e9 b5 eb e5 d9 f1 f6 c0 f5 bc ed cf bd e0 ed 7d 0f 2f d9 3c bf 47 d2 7c 7f 4f be f2 3d 6e 8b 9b b2 ab 21 49 ae ab 7e 7e 2f d1 e0 f0 4f 53 cd f0 cd af 83 c9 f4 73 f0 f7 6c f0 db 5f 59 d3 10 34 a4 be 9e 7d c7 46 3a 6e 3d b5 1c fd 56 c4 e2 17 ac dd 73 d8 ed cf 6c 69 Data Ascii: o_m-zo{=o=jP><06p-ag3ZwFw_U_zg=kd);ii\}/<G\|O=n!I~~/OSsl_Y4}F:n=Vsli
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 17 67 36 f2 6b 07 8b 7c 51 39 e6 29 66 da 8e ea 67 b9 db 1b 73 b4 48 b2 d1 ca de 9c 85 f3 e8 d3 e8 d8 ed db 56 7a 9a cd b0 f3 eb 34 7a e7 54 45 89 be 2d 86 27 b5 88 f9 5b a7 1c 53 1d 85 2d e9 d4 b5 d1 3a 3b d7 90 d2 bc f6 94 b6 b3 9d 39 eb 1b 45 e7 df 3f 7b e5 e8 f3 de 9e 7e 0b b7 93 59 cf d1 b5 e8 e5 c9 a4 40 e6 e9 c3 09 73 9d 9b 45 32 d2 4e d9 eb f0 4a d6 26 ca 3a 15 bc cd 39 ed 9d b2 31 89 5b 59 17 ca 99 9a e7 8f 2b cd b6 55 cf 56 b9 f3 fe 7f 7c db 67 91 11 e9 7c d6 9c 53 1a bc a7 4d 4d a2 cc 4c d6 9f 6b 71 74 fd 0d 95 ea 9a 80 01 cd 1f 95 36 48 eb e6 a6 77 ee 32 d7 96 f6 f8 37 5d 19 c2 d3 3a 71 6f 1b 2b 47 a5 dd 19 da 60 45 2a b3 1d 65 76 61 b0 ed e7 d3 fc f7 a3 6f 2f 46 4d a9 d7 43 d0 33 bc b9 aa d5 a4 4f 36 8e 13 4a 7a 14 b7 d9 eb 8a 17 da bc bc 5f Data Ascii: g6k\|Q9)fgsHVz4zTE-'[S-:;9E?{~Y@sE2NJ&:91[Y+UV\|g\|SMMLkqt6Hw27]:qo+G`E*evao/FMC3O6Jz_
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 2b 8e f6 91 44 5a 4d b4 b6 c3 7c b5 f1 6d 95 eb 86 b5 93 76 bf 2d 60 e5 a5 6d 59 9a 53 59 8e b6 67 6c 9a 52 9a 53 19 83 2d a4 db 1c 51 a6 ea b6 f6 6a 5f d8 e2 7b 39 e5 e1 3d ef ca 39 e8 df eb cf 9d fd 66 e4 81 61 c8 cc ea ad 38 91 90 92 8f 0b 3c 12 63 cc 26 26 ef 96 bb 9f 69 16 89 56 a6 f3 d8 f2 6d a6 99 7b 79 32 6f 9e 7d 71 b5 35 89 93 96 be 8d e6 f7 fa df 07 77 a9 f2 f4 5d 0a 49 13 12 d1 e7 f1 59 b1 3e 1d a5 38 19 8f 46 ce de 75 0e 5e 18 93 83 48 c9 4b 59 6a ea ef 4c f6 ad 54 db cc fd 01 8e be 3f be 56 c4 4b ad fd 0e b7 f0 4e 9e 7a c4 c2 cb 5a c3 69 d3 8c 7e 6d 7d 0b 2d 23 eb 4f 3f d7 39 55 9f 7a e7 df c5 3a 30 89 7a c7 cb 49 7b 67 49 89 15 6a f1 d6 46 d4 b3 2b d6 27 35 eb 93 4a e1 ca d8 ad 37 45 64 f4 65 87 3d 75 99 5e 56 d9 45 c3 4c ba 51 5b 45 cb 4f Data Ascii: +DZM\|mv-`mYSYglRS-Qj_{9=9fa8<c&&iVm{y2o}q5w]IY>8Fu^HKYjLT?VKNzZi~m}-#O?9Uz:0zI{gIjF+'5J7Ede=u^VELQ[EO
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 03 f3 ff 00 a8 77 5c fe c0 00 00 00 00 0b 4f 3d b3 5f 6b 4c 88 cc 9b 8b 8b 8c e6 33 39 1a 12 c8 c4 82 c2 86 43 19 90 c6 8a a6 d2 a0 14 05 a5 c8 21 2b 52 ac 68 75 e5 d0 74 78 7a fd 79 b3 46 93 71 ef 9f 87 a3 d0 d7 a3 3b 4b 65 48 8b 8b 0a 94 28 5e 51 24 d4 19 0c 46 32 c4 e4 32 a3 10 2a 64 30 82 a5 51 69 92 54 45 4a a6 e8 41 b7 37 91 7d 1f e3 f1 2f c9 eb de 2f e8 9e 8f c1 f5 12 eb b5 52 00 00 00 00 02 87 90 74 f8 92 73 f5 27 47 44 88 56 59 21 78 4e 53 12 32 c4 e2 32 14 32 98 cb ca 01 31 4a ce 64 62 4d 26 09 b4 c9 11 ab 36 32 b2 22 c9 8d 16 dc 1e 7f ec 7c 17 21 e8 fc a4 3d 79 6a a0 19 e1 0a 9d b3 f9 bb 77 59 7a 5b 6e 5f 67 6d 8f a9 b6 e6 f5 b6 79 77 6f e9 bd 93 36 17 96 c3 22 6a 55 37 a2 d2 2c 2c 4e 79 8b d3 88 17 15 28 81 72 29 13 4a 46 b3 af c9 d0 75 7c f7 Data Ascii: w\O=_kL39C!+RhutxzyFq;KeH(^Q$F22*d0QiTEJA7}//Rts'GDVY!xNS2221JdbM&62"\|!=yjwYz[n_gmywo6"jU7,,Ny(r)JFu\|
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 5f c9 a4 b4 90 77 5b 10 e3 ba a8 50 cd 91 25 fc dd 14 cb 64 ba 31 5b 22 9a e6 b8 4c 19 ff 00 a5 ad 51 b5 2c a7 58 dc 8b 9c ee aa d1 8a ba 63 05 a4 83 90 72 0e a4 b0 cb 05 06 36 a8 cc 77 89 d1 43 8c d8 94 b9 d8 b7 fd 2b 68 89 ae 8a e3 ea e0 ae 53 4d d2 79 90 44 41 65 f5 2b 48 19 68 c1 9f 72 25 bd 92 14 8e f4 1e 99 12 5e 7c 14 0b 4b 62 74 49 e9 7f 1e 73 d8 db dc 17 3a 83 9a 6c 68 6f b9 df 83 b4 3b 42 0c 43 b1 0e 46 b3 4e a7 aa a2 45 0d e8 b1 35 81 93 2e 13 23 ac 31 1b 42 2e bc 1a e7 2c 7f 56 f5 ac 71 1f 1d ff 00 35 26 ba 5a 3d 12 8c 39 f5 87 7c d6 ac 4f ef 3d c9 b3 6d 5a e7 70 42 d6 f1 2e 96 f9 a8 36 96 c4 a1 a1 fe 34 e7 06 82 49 a2 8b 6a 73 a8 da 05 39 df cb 06 d1 73 5e 69 9f e0 be 90 74 a0 81 99 e4 6b 27 53 72 89 16 e6 b5 31 ba 33 98 34 a3 c6 cc c2 37 81 Data Ascii: _w[P%d1["LQ,Xcr6wC+hSMyDAe+Hhr%^\|KbtIs:lho;BCFNE5.#1B.,Vq5&Z=9\|O=mZpB.64Ijs9s^itk'Sr1347
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: f5 d3 1d 10 a1 da 98 f3 23 43 fc 16 23 b4 18 e7 64 14 e6 e9 9b c9 5a 24 56 54 d8 ae e4 9c c5 55 e3 a3 3a a8 76 68 af 60 74 84 8e d9 23 65 b4 0f ca 77 8f 82 20 8b c2 d2 b8 ca 42 e2 a7 d1 91 92 24 3a ea 10 84 a4 e9 8a 1f 14 6b 94 fe 2b 0d 92 5a 65 c0 8b ab a4 3c 94 7a 58 d3 e2 b0 53 39 d5 4c 2a 65 49 d4 2c b6 2b 91 28 04 2e 28 d4 2f 87 24 af e4 68 a8 43 29 2a 7b 94 cc e6 ae 97 15 75 67 8e f5 0e cc 00 d6 da 09 6b 69 4c 54 4b 49 3d 06 8d 06 65 9e f5 b3 00 a1 41 31 3a 44 e8 b0 62 53 ad 01 a3 42 07 45 98 bf d6 57 01 7d f5 47 4a b3 37 c8 94 5c e3 3f d5 2e f4 cd 6c 57 86 b6 f7 57 fb a7 d9 df a4 74 23 30 90 e9 ca 72 33 4e 85 12 1f 59 8e a4 fc d1 08 79 e6 07 f9 47 a3 59 6c ff 00 3b 96 9d 65 39 2b fc 17 9f f3 c9 9c e9 44 5d 51 54 1d 2e 90 ce 8b 9f 46 6f 59 8d 21 42 Data Ascii: #C#dZ$VTU:vh`t#ew B$:k+Ze<zXS9LeI,+(.(/$hC){ugkiLTKI=eA1:DbSBEW}GJ7\?.lWWt#0r3NYyGYl;e9+D]QT.FoY!B
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: f7 4e e5 02 da c8 87 45 d4 77 bb ec a2 3a 71 62 11 8b 8a c6 4a 1d e5 b8 38 68 a7 7a a7 b4 3c 15 70 fe 64 6e bb 19 85 56 fc 15 32 52 9e 2a 4b 78 54 55 0a 68 12 cd 2e b3 4e c3 24 2d 76 86 dd 17 8d 57 3e 88 ee bc 36 39 6b 6c 4f eb 59 8b 49 c9 6a ac 4f ea da 4b 0f ea 5c c1 ee fb b8 ac 7a 36 5b 43 6f 82 7b aa 8b 4b 68 e0 46 f5 0e 34 48 5d 47 6f 08 5b e2 0e b4 36 9f 72 16 f8 58 b1 c3 de b9 c3 1e 3e aa d6 19 bc 7c d1 75 bc 09 b4 c3 88 33 4e b5 5a 61 f5 ec e3 bc 14 2d da 46 46 cd 0c ae 75 0a 9f b9 43 f3 dc b5 f6 5b b9 a0 e2 b5 b6 29 d6 c8 7b 8a d3 fa 3a 9f 53 10 79 de b9 bd 90 c2 d6 74 da dc cf 2c 18 2f 8e e9 34 77 e4 b9 a4 2a ca d9 0f bd 7e cf 89 4d 17 b1 db 8a 36 1b 50 f5 27 de 8d 9e 33 67 38 2e e0 8c c5 0d 17 bb 35 df 72 96 cb d0 77 72 d3 38 a7 45 81 1d ad 69 Data Ascii: NEw:qbJ8hz<pdnV2RKxTUh.N$-vW>69klOYIjOK\z6[Co{KhF4H]Go[6rX>\|u3NZa-FFuC[){:Syt,/4w~M6P'3g8.5rwr8Ei
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: f1 e4 f2 17 81 5e 4a f2 17 c5 79 28 a9 72 6d 47 3e 46 82 e7 37 40 12 72 5d 0b 10 c1 d1 cf 06 a2 4b 89 71 a9 c7 92 0c 16 96 eb 63 52 10 f7 a8 96 c8 c5 f3 86 74 5a 2e 6a e7 8c 89 ff 00 91 00 3b f5 0b d6 a2 0c 5f b8 8f 5e cb d3 e1 44 85 d7 69 1c 8c 88 f8 7d 47 96 a3 1a 0c 6f bf 85 5e db 2f 46 c7 30 5d 01 e2 23 7f ec 9b 0d cf 88 d8 72 93 a6 ad 6e 1d 18 0c ea b3 c7 92 c9 0c 69 3a 2b fa 90 fc 53 e2 6b 1e e7 1b ca 20 5e 9b 47 20 4b 08 2d 32 70 5d 0b 73 70 6c 71 ff 00 64 44 8b 81 6c 8f 82 a6 dd aa 14 57 c1 70 7b 4e f0 ad 10 da f6 6b e1 75 3d 66 e4 53 e7 4a d3 25 42 69 39 a9 f4 69 e0 b2 53 71 bc ac 25 2f 72 01 a4 29 d5 5e a7 eb 4e b8 ab ae ee f0 57 9a 9b f3 aa 3b 8e dc 11 a9 dd f0 53 06 a5 35 f2 a7 0f 25 1f 22 e5 33 29 0b ca a1 5b 11 a1 9a 32 ba 74 ce 4b 4a 92 e4 Data Ascii: ^Jy(rmG>F7@r]KqcRtZ.j;_^Di}Go^/F0]#rni:+Sk ^G K-2p]splqdDlWp{Nku=fSJ%Bi9iSq%/r)^NW;S5%"3)[2tKJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.5	49999	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:30 UTC	392	OUT	GET /uploader/eb7e365a40aa434f35f25fe86a7cae4068969509.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:30 UTC	702	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:30 GMT Content-Type: image/jpeg Content-Length: 43030 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="22156e6dd051dee7314ebe488d73221472731023_221" Content-MD5: lXtFoWe+LVMUG/XmRyAwkw== ETag: "957B45A167BE2D53141BF5E647203093" Last-Modified: Mon, 23 Oct 2023 02:04:30 GMT x-oss-hash-crc64ecma: 12109533235391726366 x-oss-object-type: Normal x-oss-request-id: 66511B59C3F24531308A7723 x-oss-server-time: 124 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:30 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2953bbd6a7a-BNA
2024-05-24 22:57:30 UTC	667	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 9d 37 c4 37 5c dd 3a 46 08 b3 6d 9b 05 d4 d1 70 d1 79 f0 49 5a c9 9b 97 5d db a4 f4 6c 3d 18 32 50 50 6a 17 16 1c 83 6c dd 2c 26 01 90 99 95 97 1a 8f 3e ab 8e fc f6 ec 57 79 2f 26 e1 34 d8 af 97 bc 5e d6 7b f6 5d 26 5b 5c e0 8e ac f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 0f 84 2b 92 77 0d f2 46 b9 69 72 44 cd ca 48 e1 38 70 5e 5d b2 95 60 d6 72 33 0d db 7a ba ed bd db 69 77 ab 4c b8 d9 2c 24 48 1a e5 c4 d3 80 8e 1b c7 62 b6 95 be de ab d1 b4 e9 69 7a 4a c2 65 32 56 0b 69 24 cd 26 ce 76 f5 5c 99 2b 20 00 00 00 00 00 00 00 00 00 00 00 00 1e 7c f9 32 b7 4e 71 bc 5c 6e 9a e6 4c 13 2c 96 c7 4d 4e 66 9a 0e 3a 0f 37 9b 70 b9 72 5d a5 cd c3 32 e7 5a 67 37 8a 6e 1b 4b b9 73 55 eb c2 f7 57 b0 aa d3 ce 79 78 2e 1b ce Data Ascii: 77\:FmpyIZ]l=2PPjl,&>Wy/&4^{]&[\+wFirDH8p^]`r3ziwL,$HbizJe2Vi$&v\+ \|2Nq\nL,MNf:7pr]2Zg7nKsUWyx.
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 00 e1 23 c7 d4 69 16 92 73 2a 24 53 12 4c 8b 75 55 af b3 ae aa 88 11 c9 a8 8e a1 4d 6c 56 55 ac 48 01 66 e5 b8 99 69 6e 2d 96 f1 b9 6b 33 6e 35 a5 a2 bc ba 75 17 37 1a 5c b6 dd 6b 32 dd 67 9f a4 f6 5d 37 23 34 d6 a4 8d 89 9e 1b c3 2a f4 4a 72 15 c7 d4 cf aa c7 51 cc 07 56 92 32 60 c8 30 02 6b 55 64 53 12 b3 04 4a c8 98 4d 4a a8 a1 96 4c 73 13 f3 7e ff 00 94 f9 42 3f 77 71 fd 87 6b 3a 00 3e 4f 5e 0e 1e 74 f5 7b 7a ca b5 39 4e 15 12 b4 e1 99 32 4c 12 06 65 9a 67 53 a4 a5 23 06 01 20 44 c1 80 30 00 c8 30 60 a8 e6 eb 85 93 15 e2 5d e7 39 3a 5e eb ae e3 d4 9f 54 d7 2a 49 36 18 39 d5 cf 9e e3 b8 e8 20 e1 d9 7b f6 cc 99 2c 20 58 0c 02 04 4a c8 15 a6 04 4c 10 2b 2a 65 c9 30 8c 32 46 ac bc ed 79 be 1b ec fc 1f 6b c9 fa af d9 f1 fa 30 07 96 df 27 96 af 07 97 d8 e5 Data Ascii: #is$SLuUMlVUHfin-k3n5u7\k2g]7#4JrQV2`0kUdSJMJLs~B?wqk:>O^t{z9N2LegS# D00`]9:^TI69 {, XJL+e02Fyk0'
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: ac 91 c6 de 3e 55 e0 f3 9d 3c 1e 7f 7c de c7 8f df fa 5e f7 f9 e5 fc 4f a0 c7 d5 fa 34 7d 5d b5 80 00 00 00 00 00 01 ae 9f 8b 5f c6 f8 1f 4f 85 c5 ae 1f 4e 9f ad f4 ac ed 63 32 c3 66 98 02 2c e7 b8 5a db cc 11 65 85 8d 3b ea b9 eb 2b 6e b6 a9 41 30 4c 5b 92 04 5b 79 5b 9e 92 f6 d9 94 8d 35 f4 d9 40 32 58 db d7 b8 e9 61 2c 98 0c ba 72 95 34 64 d7 af 2f 7c 3b f1 df 95 97 34 eb 2b dd c7 d3 e9 53 e2 dd 3f 3d 45 79 a9 de 7a c9 f5 dc 7f 49 e5 d1 e7 bd 9f 89 de 9c 8e 76 e6 f2 fa fd 3e 1f ac f6 f9 eb eb 1b 85 e6 c9 b4 6d 1b 46 d1 b0 5e 6d 9b 06 c1 b8 5e 6d 92 32 0c 1c a3 8e 71 0e 41 c0 73 f9 17 4f 8f e2 29 e9 a3 ea 75 e3 c9 d2 eb f1 bd 4b a7 46 7a 6e eb 72 a6 e6 5e 63 77 9d 99 79 0d cc 27 54 a3 32 86 ea 2e a7 3c 2b 51 5c ad 8e 7b 9e b5 f3 a5 75 23 5a 77 d0 c7 79 Data Ascii: >U<\|^O4}]_ONc2f,Ze;+nA0L[[y[5@2Xa,r4d/\|;4+S?=EyzIv>mF^m^m2qAsO)uKFznr^cwy'T2.<+Q\{u#Zwy
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: bf d8 63 82 da 1b 7d db 07 f8 25 c0 ab a5 6b ab 4b 98 53 e6 5e ee e5 6c d1 6f 2c 10 64 1d 5f 71 09 65 22 ea f7 2a 4a c1 a5 5e 5b 3e 6a 0b 4b 5b a8 8c 4c 89 15 bc 6b 0c 58 07 bb 10 bc 52 0d aa 07 f7 6b c0 1a f5 a4 57 ea 04 fd 98 ee 23 56 75 78 dc 60 90 6c 53 78 92 08 ae 98 3f 4a 50 d9 f8 32 86 18 a8 d8 91 83 fc c6 60 b5 2c ea a3 96 b8 b8 b9 3b 6d a2 b0 89 1f a9 2f 00 50 20 2b 3d 3f ac b2 fb a3 b6 b8 8a f2 da 2b 94 25 85 16 cf 2d 25 a4 33 3a b3 f4 c7 62 17 b6 63 8b 35 fb 71 70 9c e6 a5 98 47 b1 6a ee 6b eb 0b e8 e6 a1 f3 a5 73 4b 3b 07 d8 ea 41 19 1f dc ae ee 05 b4 2d 25 75 22 ea 15 75 09 1a 2f 44 33 36 32 6d 6d 8c dd 67 84 cc bc 3b c6 93 a6 1b 64 f6 dc 88 a7 49 00 20 1c d7 63 9a 07 3f ca 2c 05 3c ca b5 25 d1 73 b2 35 b2 69 36 b5 c0 0a a0 05 24 79 e7 c2 30 Data Ascii: c}%kKS^lo,d_qe"*J^[>jK[LkXRkW#Vux`lSx?JP2`,;m/P +=?+%-%3:bc5qpGjksK;A-%u"u/D362mmg;dI c?,<%s5i6$y0
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 72 cb f5 25 e4 6f db e6 e3 c6 42 de 28 4d f3 0b 88 1f 76 09 0c b8 a8 e3 48 91 54 4d 72 14 1d bb fa cf 82 33 0d 2e c7 fd ca 8a 27 90 0d c1 15 57 da 39 19 a0 2b c5 16 f3 46 47 91 f7 05 9d bb 15 70 6b cf c0 56 7e bc 82 2b cf c3 00 1c 8a 04 d7 54 f9 0c 0f f6 2b fb 9c 5f 38 a9 2d a5 82 77 01 ae c6 6d cd f2 dc 48 19 01 92 78 9b 6c 97 12 a5 bd fc 4d 1c 8b be d7 d8 9d 3d 87 a8 41 f9 cf 72 2c bd 33 d3 1d 31 6f cd 02 6e 79 1d 54 8b da 40 60 77 36 44 a7 14 e1 3b 48 b6 d1 a4 a2 75 91 12 75 22 43 64 31 85 36 12 44 7d 99 93 1b 64 4c 2f 0a 76 ca 76 b3 a1 41 b8 ed b2 91 ab a2 b1 37 b7 7c 92 f7 08 17 e9 2c 49 1b c3 2e 38 91 83 f6 72 91 80 1d 0b 39 ca 3a e7 eb 41 71 8c a1 9c e0 a9 58 db 3b 89 91 5b d8 42 f4 c5 45 b3 a9 be 44 9c 97 60 52 e9 24 66 5a 0e 0d 6e a2 d5 71 29 6f Data Ascii: r%oB(MvHTMr3.'W9+FGpkV~+T+_8-wmHxlM=Ar,31onyT@`w6D;Huu"Cd16D}dL/vvA7\|,I.8r9:AqX;[BED`R$fZnq)o
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 16 b8 3f b8 06 c1 9a 38 27 87 97 6e 16 91 1a 5c 94 92 18 cb 72 a2 68 f8 29 b7 c3 10 c3 96 88 0e 68 4a e9 c1 47 57 1e d6 74 41 97 92 76 8d 19 94 47 bf 2d 5b f1 c5 6d c1 18 8a 10 a9 82 d6 dc 6e 8d d0 b3 e2 51 be 23 c0 02 5f 78 27 18 35 1d cb b6 04 99 c5 64 1e ff 00 f3 79 67 a9 b4 81 ec 6c 06 b2 ae e2 ef 78 5e 4f cc c4 48 14 42 3f 06 6d 10 4a 55 82 06 41 83 73 79 1d aa 87 9a 0d 5e ca 76 c2 95 89 f6 12 58 79 ba b5 37 29 fb 56 56 77 d0 13 d6 cd 6e 07 b0 48 d4 9a 08 aa 0d 2a ed 15 9a cd 66 b7 56 ea 2d 44 d1 34 4d 12 68 f6 ad c7 3c 69 97 06 3d 68 c7 fa f5 69 08 85 22 54 20 ee 34 08 2b 83 73 a7 34 7b a4 b7 07 c8 59 08 a5 96 84 94 1e ba 86 84 b5 d4 ae a5 6f 15 9f d1 8a c7 c7 35 9a dd 5b ab 7d 07 a2 41 a9 e2 13 ed de b1 94 3b a9 64 6c 9a 32 16 19 a4 8f 20 74 e5 48 Data Ascii: ?8'n\rh)hJGWtAvG-[mnQ#_x'5dyglx^OHB?mJUAsy^vXy7)VVwnH*fV-D4Mh<i=hi"T 4+s4{Yo5[}A;dl2 tH
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 23 69 b2 47 ff 00 85 20 d6 d1 97 7a 6a 0c a3 17 31 dd 41 3e 44 71 c8 23 6c 13 df e3 93 59 ac d4 a0 c6 d9 01 42 d7 2d c5 48 02 8c d4 6e 24 55 35 9c 56 e3 45 ab 77 8a dc 45 6e 35 ba b7 56 ef be f2 6b 3e 28 b0 1d f7 51 91 73 8a 09 2b 76 16 f7 07 bf cb 0f eb 30 5b 0e ff 00 b2 bd 8c ad 45 9c f6 39 5f ab 0a 7b 8c 03 c3 bf ff 00 6b 8b 98 6d e2 92 e2 e2 f6 fe 6d 42 6e a3 da fa 6f 54 bd 81 1d 74 5d 22 1d 1e cc 42 9f 1d 42 e8 5b 46 2b ac a6 b7 a0 39 23 19 c1 31 0f 2d 68 c3 e9 36 00 b1 71 6b 79 2c d2 4d 6f 36 4d 06 6a 92 e8 47 90 1e f2 f4 28 d9 fc 4a e5 7e b3 ad c2 9f 5c 7a f6 95 23 ac 75 d8 e0 e6 b8 f8 04 7a da c3 bf 1f ed b3 f1 c5 63 15 96 f3 2d a5 9c ff 00 f7 4e 97 16 7f 6a 3b 7b d8 93 69 2c ea 7d c2 41 40 8f 19 ac d3 0d c3 14 8c 10 ed 3f 57 72 d8 a8 98 c6 fe ec Data Ascii: #iG zj1A>Dq#lYB-Hn$U5VEwEn5Vk>(Qs+v0[E9_{kmmBnoTt]"BB[F+9#1-h6qky,Mo6MjG(J~\z#uzc-Nj;{i,}A@?Wr
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 3b 57 51 4d 65 33 5b 8f 9d ed 41 de b6 93 db 6b 79 cb e2 80 73 58 71 45 0f 9c 1a 06 b7 37 6a c8 3d f0 95 c9 18 12 59 5a c9 cb c9 a3 da 37 d3 26 88 d8 cc 4f a5 ea a9 ca 34 5a bc 3c b7 f1 4b ab 6f ae 3f 53 cc 38 a4 f5 39 e0 3d be bd a7 4e 55 0f 20 f2 b3 38 a1 72 7c f5 d4 d7 59 2b ae b5 f3 0b 5d 74 ae aa 57 5d 05 7c cc 74 6e d3 c1 ba a3 72 68 cf 25 75 1c f7 39 3d fe 20 16 ed 77 ac 69 96 47 6c b7 1e a5 bb 90 91 68 da 86 b8 f2 ab a8 d6 b5 6b a6 8a de 21 a5 da 35 ac 56 f7 11 fa 5b 48 46 dd 50 5b 5b db 2e d8 7f 9b ac 41 77 e9 db c9 67 b2 b1 d6 2d 6f db 0c 55 d4 e0 87 1c 50 22 b7 01 c1 0e 3b d1 1e ec 8d cd 5b de 84 92 0e cc a3 b8 07 ee 71 5b e3 a3 d3 ec 48 4a c4 54 7a 44 64 a9 8c e4 29 1c d0 58 ab 64 75 85 ac 0c 71 c8 2d 90 46 2b 75 02 68 80 79 af 78 c0 4e a8 fe Data Ascii: ;WQMe3[AkysXqE7j=YZ7&O4Z<Ko?S89=NU 8r\|Y+]tW]\|tnrh%u9= wiGlhk!5V[HFP[[.Awg-oUP";[q[HJTzDd)Xduq-F+uhyxN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.5	49991	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:30 UTC	626	OUT	GET /uploader/19bbf7767618883b3fc56e493991a5bca17afdc6.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:30 UTC	678	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:30 GMT Content-Type: image/jpeg Content-Length: 86419 Connection: close x-oss-request-id: 66511B5AC3F2453431528223 ETag: "6899D9A1FFB0BD43EA36F5E6D44DE5D0" Last-Modified: Mon, 23 Oct 2023 02:04:25 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 5758243692379581958 x-oss-storage-class: Standard Content-Disposition: inline; filename="221c9f40a2bccd958143d542a0ee12f52bb68929_221" Content-MD5: aJnZof+wvUPqNvXm1E3l0A== x-oss-server-time: 70 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:30 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e29509cff7f0-BNA
2024-05-24 22:57:30 UTC	691	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 01 08 09 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 79 df 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8d 1f 9a 3d 3a 73 8e 98 8b 03 39 ea e7 b3 fa 19 8e d2 4b 37 f7 68 b2 f4 6d de 4b f5 4f ce e9 d0 f9 0a 00 16 4e 47 e8 9f 2a f7 72 7e 6d d1 73 b9 47 cd c3 a4 7b 61 56 b7 10 71 72 18 4d 92 5a cb a9 47 92 2d bc 53 65 a5 8f 24 1d 28 b3 64 cf 2d f3 c7 39 cf d3 e9 be f1 bf 58 f9 38 ec 9b e9 b5 74 dd 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 65 fc d5 e9 75 2d a3 59 55 57 25 ed 4c cf 7c ec 1e 86 6f 72 4e e3 57 c9 8b e7 4a f3 6b b7 f9 77 bc f0 b6 ac d4 7a b9 27 69 c1 34 d2 f8 dc ee 2e d5 6e 2a 31 d8 63 d6 1d 62 4b 78 b7 31 32 91 20 c9 97 ea e4 be d6 5d 25 ea 55 9d 43 22 a4 15 8e 52 63 3c dc b3 39 e7 4f b3 d1 9f f5 73 d6 38 e3 b8 7c fc 6c 3e ae bd 82 74 e8 46 70 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: y@=:s9K7hmKONGr~msG{aVqrMZG-Se$(d-9X8t@eu-YUW%L\|orNWJkwz'i4.n1cbKx12 ]%UC"Rc<9Os8\|l>tFp
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: e1 d7 1b 8d ca de 72 1a c5 ed 3c 6a de 6c 8d 45 89 69 24 c5 ce 5b c4 e2 d7 8b 9c 5b d2 4e a9 de fe 32 fd 1c fa 77 9b 56 3c 7d 39 ff 00 67 35 ea d8 e4 ec dc 57 f0 d6 7d 13 77 e1 ae 23 e9 ce 8b a9 b5 f3 d7 55 23 71 b6 fa 34 fb 60 26 d0 62 75 60 eb 3d 3b 2c a6 37 c3 3a 73 fa fb cd bf 92 bd bc b3 5e 5e 10 37 ae 81 f3 91 7d 57 15 e6 c6 c8 b0 fd 3b e4 de c9 6b ab 3d e5 dc 2e d2 22 e6 f9 e6 4f 3b 93 f3 f3 e8 5e 3b 80 c4 d8 79 4d 33 d8 d8 7c ec 5e ee 47 9b 50 fa 37 70 f3 67 47 f5 6a fc c5 d5 c7 7a 37 95 c4 b3 ea de ce bd 0b 8e f7 ef 2d df 1d 37 b8 f4 00 00 3e 78 f4 73 f8 e3 db c6 ad 4b 04 73 d2 26 75 8f c5 97 c3 ae bb 2f 89 72 26 69 2b a4 bb 21 64 46 57 3a b5 8b af f3 d4 fc d9 a5 e3 37 ac 43 f7 70 31 77 8a a4 d8 33 9c d6 7a 66 bd 1b c7 f0 d7 2c d5 d3 7a 4d 9a 31 Data Ascii: r<jlEi$[[N2wV<}9g5W}w#U#q4`&bu`=;,7:s^^7}W;k=."O;^;yM3\|^GP7pgGjz7-7>xsKs&u/r&i+!dFW:7Cp1w3zf,zM1
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: db 9a 85 78 b4 4b 16 2d 18 fc 2e f3 d4 98 bf d6 77 ed 4d 72 d9 b6 60 e5 dc 30 e4 f8 e5 2f 9a ee 33 8f e9 36 6e 17 1f ac 61 bb ef 3b c5 1a e6 17 5b b8 e2 e4 bd 1d 78 67 59 51 14 fa 67 85 e4 5e 8e 5a e7 66 63 96 b1 da ce e3 e6 68 3e 96 c5 e7 6e b3 59 a6 b8 2f a6 67 a5 ea d9 bd 07 0e 01 df 96 b7 da 67 fc cd 7f ad 6e e4 bc d1 ad 62 bd 19 ab 33 37 ca e4 fc f9 b7 6d ae 1d 70 19 ed 08 8e 91 d6 d9 68 b6 b4 33 e2 d1 1e a7 8b ec 56 6c 9d b1 f6 3e 2f d4 b8 01 a0 2e bb ab 22 ae c5 d2 f9 78 92 5e ab f1 21 2e 2c 54 c5 98 24 c1 9a e5 69 fa 9a 85 6b 3a 91 ed c0 7a 65 fd 26 62 e5 e3 70 e7 71 47 2c d9 65 35 31 72 31 3e b5 9c e7 09 e7 ce 63 cb 88 9b d4 dd 62 e3 56 b1 ce 4f 6d ec 3e 5c e0 7b ba 9e fb f0 9f 4c bd 1d 07 9b 9a 75 62 72 fa 6f 8d e1 9e ae 78 fe b3 3f c6 7b 8b af Data Ascii: xK-.wMr`0/36na;[xgYQg^Zfch>nY/ggnb37mph3Vl>/."x^!.,T$ik:ze&bpqG,e51r1>cbVOm>\{Lubrox?{
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 12 93 25 17 0a 2d c5 67 3c 4e cd 0b 4c dc d7 28 b9 db 6c fa d3 0e 9b 80 00 0e 7e b4 5b 51 70 f4 95 5a e7 e4 ba 6b df 82 f5 e1 be 65 b9 f4 39 65 be 9e 2e d9 23 a2 b9 6f 77 92 7e 9e 64 fd 39 8a f9 5a c1 fe 2b be 3e dc 97 d5 e7 99 fb 5c f2 5f 42 5a c2 36 2f be 8c e6 7e e6 67 7d 49 16 d4 95 d5 1f 9d 5a fc 86 69 fc 8c a3 e4 6a bf 5c b9 fa 27 bf 7d 57 e8 6d df d1 d7 65 c6 6b b6 dc 59 8a 6c aa 5c 56 9a df 79 a8 10 c8 5a 9a df 66 b9 de 60 35 75 fe f9 8d ab b2 62 63 3b 5c f6 64 ae d7 60 c3 2d 96 53 0c ae 2e 5f 95 cf 73 99 2e 3a 9d c9 27 9a f4 b7 33 6b 49 59 5c 24 15 94 18 89 38 8e e7 1e e9 8e 53 ac dd eb cb 2c d7 de 3f 3f d1 d7 d2 f8 00 00 0d 1b e6 ac 7d 3b 5d b5 a7 b2 d7 57 4c 07 e5 3b 6b bf 92 ed 9c fb 1c 67 7b b3 5f a6 4b f7 4b ff 00 4a 3d 32 cb 5e a7 91 af fe Data Ascii: %-g<NL(l~[QpZke9e.#ow~d9Z+>\_BZ6/~g}IZij\'}WmekYl\VyZf`5ubc;\d`-S._s.:'3kIY\$8S,??};]WL;kg{_KKJ=2^
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 05 04 07 06 05 01 08 01 05 00 01 02 03 00 04 11 12 13 05 21 31 14 22 32 41 51 23 42 52 61 06 10 15 33 53 71 81 16 20 24 43 54 62 30 34 40 50 91 44 25 60 64 72 82 92 a1 d1 63 83 90 a0 b1 c1 ff da 00 08 01 01 00 01 12 02 ff 00 f8 16 33 aa 29 66 60 00 ea 4f 17 e1 e0 e3 7e a1 9e 09 c6 63 95 5b fe ee 71 9b bd d9 f6 43 77 16 8f 9f c9 aa 37 64 7c ab 15 3c 8e 60 bf 43 6f 6b 23 9d 5b 80 02 ff 00 f7 67 89 dd 76 4b 47 60 7b cd dd 5a ce ac ff 00 c5 11 9c 7e 45 a9 b2 72 7e 22 4d 47 3c b6 e5 da 27 23 aa e2 d3 8c c6 8c c2 45 d0 73 e2 8a 74 95 43 29 1c ff 00 ee c7 1e b8 dc b8 11 2f 86 31 59 ac f5 f9 9a e9 cf e1 c0 a5 46 ee 67 a0 c6 68 00 02 e6 4e 79 04 d5 bd cb db 1f 65 71 8f 51 67 c6 63 94 84 9b 08 d5 90 7c e8 30 39 c1 cf fd d4 e2 37 82 c6 dc bf 57 3d d8 d6 67 cb 9c b6 Data Ascii: !1"2AQ#BRa3Sq $CTb04@PD%`drc3)f`O~c[qCw7d\|<`Cok#[gvKG`{Z~Er~"MG<'#EstC)/1YFghNyeqQgc\|097W=g
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 65 a1 26 71 5a bd 28 1a cf d5 9f 77 aa 9f 2b 4b db 9b 2c 6c b6 b8 ff 00 0a cf 8a da 5d f7 43 68 97 e0 fd e6 65 51 96 20 0a b9 e3 76 90 f2 43 b8 d5 7d c6 a7 b8 ca 96 ee fc 21 65 9b 99 e4 a2 a2 86 34 e8 01 cd 16 d2 32 4b 7c eb bc 43 69 8d 48 f5 27 53 73 eb 8a 1b 60 67 50 02 bb 48 8b fc b8 d3 fd e5 d8 9c 9e b5 9a 04 0e 89 ff 00 a8 6a 6e 75 a4 7a 8a ca 28 c7 33 e9 59 93 1c bb a2 82 1c 67 95 10 83 91 ef 11 59 23 c8 0a f6 8f cf 9e 28 a1 c7 36 1f 3a 22 3e 59 34 54 1f 5e 74 00 1f f1 56 7a c4 af b1 28 52 91 4a d9 79 20 54 c4 57 1b 51 e9 95 e2 8a 31 dd c8 38 eb 56 37 b7 36 c0 ed 4d 9e bc ad b8 83 34 7f c5 43 b3 27 a7 6e b4 f3 97 1c f1 40 82 32 0f fb 5f 12 38 b1 b9 39 c7 76 a5 6e b4 7e ac d7 2a 04 8a 59 a8 4b 40 d6 7e ac d6 a0 7c 40 1c 55 b7 15 b8 b7 c0 dc d6 bf 0c Data Ascii: e&qZ(w+K,l]CheQ vC}!e42K\|CiH'Ss`gPHjnuz(3YgY#(6:">Y4T^tVz(RJy TWQ18V76M4C'n@2_89vn~*YK@~\|@U
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: cc 77 37 43 db c8 90 db 28 e7 15 c7 14 8a 25 31 d9 47 8e 58 dd b2 b5 bf bd 71 b3 ab 03 df 7b c8 6c ad 9a d5 ae da ea 46 ee 13 a9 24 8f 70 ca aa ab a5 0c 4d 35 b2 f6 85 5d 52 74 da 7e d6 39 fb 3c 56 1d bb c3 56 92 fc 8a 28 e4 75 0c 16 07 29 1c 40 ab e3 9e 7a e7 92 9c 0e 46 82 b6 3a 79 d1 89 7d 3a f5 a6 81 0a 60 0a b5 bc 9a d9 d9 42 e7 71 74 d1 da 37 0d 1a a1 d2 17 04 1c 0c b0 f4 ab 39 76 6e 52 6d 66 3c 72 ab ae 3b 7d 22 7f 0d 12 c6 00 ef 55 8f 1b bb 69 11 1a 4d 7a c8 00 a7 13 6d 1a d9 3b bc c9 a0 43 00 41 e4 7a 7f ae e3 d6 57 22 e2 4b 90 9a a2 38 e6 7e b5 3e a9 91 5c b1 9c d6 31 d4 52 48 e9 cd 58 8a ed cc e3 4d c4 4b 2a d6 d5 84 9c e2 99 e0 7f 49 6c ee 80 2c 62 5b 84 f8 f4 c4 7d e2 b5 d9 e4 f7 70 e2 b9 27 97 3a cf 4a f5 04 d6 18 82 76 ff 00 56 75 fc e8 6b Data Ascii: w7C(%1GXq{lF$pM5]Rt~9<VV(u)@zF:y}:`Bqt79vnRmf<r;}"UiMzm;CAzW"K8~>\1RHXMK*Il,b[}p':JvVuk
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 0b 6b 26 52 12 da 3d 16 f2 4b 72 36 9d 8a 93 61 63 6d 79 26 da eb 76 59 7b ed 28 6b b9 11 22 4d 36 b0 72 8e b8 94 c7 70 c1 9e ea 1e f5 70 8b 34 62 f7 93 fd cc 3c eb 89 dc bd dd c1 76 6e ee 06 8a 84 70 c6 4c 4e d7 01 e9 e3 8a 49 b6 e2 9f 21 8f 26 8b 84 dd 4f bc 23 d9 25 58 a9 12 ad d5 93 ce 8d ae 23 82 18 36 3b dd e1 81 c8 56 61 d3 38 78 d8 bf 2d 0c d7 79 33 ed c3 12 2c 81 41 09 da a4 c1 09 94 32 05 d4 c0 46 1f 71 d5 5d 66 d2 c9 ae 3c af 7c 75 ae 9a 33 d3 bd de dd 88 6d b6 a0 41 c8 a8 e5 2d b9 ae df 75 76 f1 57 4d 71 a9 4c b2 a3 9d ae eb c9 3c d2 b4 ac f2 b3 13 a7 51 8d 5d db 42 a3 96 d5 d0 c0 c2 07 2f 6b 20 68 db 0c f6 47 45 c0 2e 63 5e 58 a9 fe ea 25 d4 9a a1 25 2a c2 f6 ed 77 22 5b 82 3b ba 96 9b 8e 5d c2 51 f2 af 1b 8c e9 b6 e3 90 4d 0e b9 06 d9 56 c3 Data Ascii: k&R=Kr6acmy&vY{(k"M6rpp4b<vnpLNI!&O#%X#6;Va8x-y3,A2Fq]f<\|u3mA-uvWMqL<Q]B/k hGE.c^X%%*w"[;]QMV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.5	49993	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:30 UTC	995	OUT	GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591447418&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:30 UTC	147	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:30 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close
2024-05-24 22:57:30 UTC	81	IN	Data Raw: 34 36 0d 0a 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 64 68 41 51 41 42 41 50 41 41 41 4d 50 44 77 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 46data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.5	50000	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:30 UTC	392	OUT	GET /uploader/c45a50fb64006f61f8cc79f72832f2fa6b14335b.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:30 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:30 GMT Content-Type: image/jpeg Content-Length: 93748 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2214321179160a87c9e6e3e1fb2ba71d7da51150_221" Content-MD5: uwN4ubkmw2ZZxBAQgJK0cQ== ETag: "BB0378B9B926C36659C410108092B471" Last-Modified: Mon, 23 Oct 2023 02:04:29 GMT x-oss-hash-crc64ecma: 2305225945679552844 x-oss-object-type: Normal x-oss-request-id: 66511B599EAA1A39359FA3A2 x-oss-server-time: 160 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:30 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2967ae2f7dc-BNA
2024-05-24 22:57:30 UTC	668	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 08 09 ff c4 00 1c 01 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: ac 7e 73 d8 df 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 91 b5 7f 35 3d 4e 08 11 3d 7f a3 cd d3 74 e1 2e d5 ba 62 44 d6 5c c5 d9 5b ca 78 7b 7e a3 e4 e8 fa 8b c9 ef b8 00 00 00 d1 ed 9f c9 fe e7 99 e0 34 b7 47 76 c4 d2 22 e8 45 86 cb 44 58 ac 7a c5 2b ad d5 99 d6 44 b6 79 f5 cb 55 87 46 c6 d4 b2 ac 5c 7d 70 7a f1 f4 cf 53 cd ef 7c ce df 78 f3 3d 0d 55 f3 c3 13 eb 3c 5d 32 62 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e6 3e cc 3e 45 f4 78 f0 44 c4 c6 76 9b c7 55 d9 c9 b9 da 97 a9 22 f1 3a e9 34 af 9d f2 76 7b 27 36 bf 60 78 7e 9c fa d8 00 06 b3 4c fc 33 d6 e1 f9 83 ab 18 14 9e 87 48 ad 34 d1 b3 8f 0c d1 38 cd 7c c6 2c 36 91 97 44 b9 89 d6 9c 6a db 11 1f 48 b6 73 c5 a6 71 b9 fa 97 c7 63 64 ee ce 6d f6 3b 6f 79 f4 be d1 c4 6b 9f 7d d1 Data Ascii: ~s$5=N=t.bD\[x{~4Gv"EDXz+DyUF\}pzS\|x=U<]2b@>>ExDvU":4v{'6`x~L3H48\|,6DjHsqcdm;oyk}
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 3c fb e5 b2 ad ae b5 32 69 4d 7e 94 eb f9 b6 e9 f0 d7 b6 e7 e9 ec 79 76 ea f9 b7 d8 52 e0 00 00 00 00 00 02 87 e7 2f 6e 7e f7 f8 67 e9 b1 67 a3 96 f6 b8 7c 6b f4 4f 83 d2 fd 27 87 37 4c a8 9a 4c 5d 13 54 26 72 a3 55 4d 97 8c d1 49 71 5a a6 b1 14 95 62 77 15 be 4e 3e 8f 45 f8 1f 4b bd f9 ce 89 75 bd 34 8e d7 83 49 1d 39 79 df d8 f1 e2 98 8b 69 8f d0 cb 9a fe 1b cd f3 35 97 e6 f4 e9 3a a9 cf 7b 58 f6 fe 17 74 3e 8d 35 de 8f 36 cb 0e 8c 99 e9 a5 d2 ba de fc f7 3c fd 12 70 d7 3f 46 3e 05 fa 2f cb 53 a7 28 56 c7 b6 db 8f 41 4d 60 b6 56 b3 b1 d7 61 4d 69 5d 32 5e 32 51 02 f9 6a ba 31 42 b7 ce 42 6b a6 5d 2c d5 13 b2 a5 f9 bd 73 cf 35 c5 4d 26 5e 99 26 37 b9 df b4 e5 df a9 e7 db af e6 df b1 e7 db 75 96 99 22 40 00 00 00 18 13 f9 a7 ec 70 7b 87 e5 5f a3 f6 7f 19 Data Ascii: <2iM~yvR/n~gg\|kO'7LL]T&rUMIqZbwN>EKu4I9yi5:{Xt>56<p?F>/S(VAM`VaMi]2^2Qj1BBk],s5M&^&7u"@p{_
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 11 e5 8e 2b 86 26 d8 2b 6e cb ab 93 f4 7b c1 f6 37 51 20 51 1f 28 f6 f3 f8 47 a1 c9 a0 9c ed ad b3 cd 31 cd b2 4c 5b 0b a5 74 4d e6 39 8c d0 b6 57 cc 58 43 9b 69 a9 7c 33 6c b3 1b 49 ae 3e 5d b3 65 a6 5a da e4 59 6a ed 75 e7 c5 68 9e 42 89 a6 37 ed 7e 7f bb df ff 00 27 fa 1e 53 d4 ce 17 a9 8f ce 9f a9 fc f6 6e be 7a 29 59 d2 ea c5 73 d7 ad f0 bd 2f 69 fc b3 eb 75 bb 2c bc 5b 69 dc 72 74 7c dd fb 6f e7 99 66 91 29 ae 78 95 a3 26 fc d9 6d 4b f0 d7 d3 be 33 ea 3d 43 e0 7e 8f 87 f7 38 fd 03 c7 eb f1 2f d4 3e 3f cf 3e 83 c6 c9 bf 2e 68 d2 3d b3 df 44 6a 26 69 13 ae ce fb 0d 62 26 b5 9f 9c 6b a2 ea da 26 1a e7 a5 e5 a6 88 49 28 91 10 aa 8a 88 f3 38 51 8e 18 cc 75 9a 56 7b 2e de 2f b3 fc 4f 5b db f2 d0 0d 57 83 af 82 7c f6 bf 32 7d ef 95 a1 f5 f0 ba d0 b5 68 5f Data Ascii: +&+n{7Q Q(G1L[tM9WXCi\|3lI>]eZYjuhB7~'Snz)Ys/iu,[irt\|of)x&mK3=C~8/>?>.h=Dj&ib&k&I(8QuV{./O[W\|2}h_
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 29 8c f0 8c 67 30 96 c2 f4 e0 44 99 60 96 68 8c 13 09 ae 14 49 99 b1 15 4d 93 5b d6 a2 06 18 43 c9 93 82 f1 bc dd b2 f9 b6 bb cf bd 7c 9d 6e f2 36 c9 c7 7a 49 55 66 15 9c b6 9c dd 35 be ec 3c 1a 5d bd 70 72 5a 47 a3 9c cf 6f 2c dd 71 a9 e2 e9 e6 38 bd 1e 66 97 d3 74 df c6 7e eb e4 6e f5 f8 f4 1e ce 19 3a 70 cb 6b 5b bd 65 e3 6e 7b 8f b3 e8 af c5 3f 4e d7 f4 e3 3b 87 b2 0f a5 c5 e0 ff 00 aa fe 7d bb 9e 5b f9 ef b9 e3 df 61 95 b7 d8 69 d2 d2 7a ee 4b f5 1e 6e 9d 2f 97 ae 4c 2f 0f 82 f1 b8 a6 37 1c e3 ce 73 75 56 45 66 dd 23 4d e5 da 36 b5 f3 bf b7 f3 7c 27 f6 9f 9f ec 78 bd 1f b3 fc fe ae 8e b2 00 a1 c6 6f 37 16 4c 5d 66 58 47 89 93 11 0e c9 89 80 89 44 28 99 10 a4 c6 19 89 13 30 95 ac d7 0d 96 45 60 da 37 71 7d 5a bb 25 b1 c4 6b 25 b6 ac 62 b4 eb a2 36 07 Data Ascii: )g0D`hIM[C\|n6zIUf5<]prZGo,q8ft~n:pk[en{?N;}[aizKn/L/7suVEf#M6\|'xo7L]fXGD(0E`7q}Z%k%b6
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 5f 3f af f4 70 d4 fa 39 6b 37 ac 1e a8 c3 9c c9 86 cb c5 ef f7 de 2f 43 73 69 f3 7e ff 00 3e 07 45 7b 3f 37 b3 a1 89 dc 65 ad 0b c9 26 62 49 24 92 67 25 12 89 84 c2 41 98 a8 05 0d 41 a2 89 d0 78 1b 73 1f 31 d5 e3 5d d9 ea 3d de 7f a0 7f 3f ef 95 95 b2 5a 6e de b5 99 aa 2c b2 b4 43 98 d3 67 6d d7 9b 6c 95 b5 26 2d 28 63 bc 42 d9 ca 7a 9c da 6f 57 1d 6f a5 86 bb ba 91 7b 32 c7 6a b9 ed 76 36 c5 0a 75 4f a3 7b 59 f7 19 eb bf a5 85 a4 73 50 71 27 97 9e 4e 6b 08 e5 b6 8d a7 4f 3f 51 df c9 2b 4c d6 ad f6 a6 d7 af 9e 95 6a 39 fa 36 9b e3 12 b3 83 3d 77 7d 3c dc b7 9d db e7 7e 3f af 0a b3 d4 76 72 76 1e 97 9d 64 cc 6a df 59 cf b6 af 83 b3 d0 ef 5f 5e e5 e8 f2 58 9e 4c eb cf 52 37 66 e0 d8 19 0c c6 53 21 94 c8 64 33 92 89 a4 e3 6a 6c c9 c4 b0 00 30 91 21 a4 39 c9 Data Ascii: _?p9k7/Csi~>E{?7e&bI$g%AAxs1]=?Zn,Cgml&-(cBzoWo{2jv6uO{YsPq'NkO?Q+Lj96=w}<~?vrvdjY_^XLR7fS!d3jl0!9
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: dd 5b 36 81 97 f2 14 af bc 90 5b 90 b5 49 88 23 dd a0 24 d2 e0 9d f8 a5 93 53 4c 93 e1 ec 47 12 8f 89 64 8b 14 f1 e7 41 9f 30 e3 cc 7f fd 6f 5b 33 1a 1c fa ab 73 50 d9 3f d5 f6 96 d0 f5 71 ba 8c fb c3 44 96 24 93 42 85 76 a6 51 22 b2 5e d7 eb 06 22 7c 24 ba 70 3a 9a c0 ed 08 f1 8b da 4e ab fb 7d b2 37 3b 43 13 e7 66 a2 a1 b9 35 ee 2f 68 20 77 cb 9b 44 ee 64 8e 15 b2 f2 a2 f2 e2 1b 2a d4 58 58 b0 b7 2e 54 c9 6e 66 52 f9 79 f7 25 99 9b 2d c1 23 5a 16 6b 00 6f 53 a8 78 58 5d 15 86 aa b1 60 f1 0c 0c 46 c9 d4 88 b0 d0 42 bf fa d6 f3 2f 25 03 b5 6f 3a 7f 7a 31 47 bc 32 af 0d 81 a5 71 a9 bf 9d 61 f1 af 84 7c aa 75 4e 98 7d ae b2 e8 63 37 b5 ea 29 e2 98 70 3d ff 00 d5 66 97 34 b2 33 1d 73 1a cd e5 57 ab fa 2f 53 42 27 00 83 67 03 43 1c b2 41 27 55 75 35 b3 76 a2 Data Ascii: [6[I#$SLGdA0o[3sP?qD$BvQ"^"\|$p:N}7;Cf5/h wDd*XX.TnfRy%-#ZkoSxX]`FB/%o:z1G2qa\|uN}c7)p=f43sW/SB'gCA'Uu5v
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 33 2e 59 75 17 e6 aa 22 51 18 1e ed 28 9d 09 ba da f4 e7 ef 2f 7e 2b 0b 46 d9 3c 3c 8d f4 0d ab 83 cf 99 ae 52 11 dc d6 41 62 01 61 56 92 c0 90 32 66 cb 99 f0 e8 e5 a4 67 b1 24 d4 12 12 96 bd 99 47 3c 26 d6 c8 32 62 2e 7f aa 19 e2 c4 20 78 9c 32 9a bf fa 26 dc 9b 75 82 2b d6 46 b7 a1 24 78 cd d4 da 91 e2 7e 4d b9 73 52 61 85 ec e0 42 e7 95 49 1c 90 b6 59 10 a9 f6 6c 1b 98 ad d9 e8 ff 00 97 bd 1d 2f 5b d7 f8 90 d6 fc 56 fc 7c d5 be 1a 75 35 79 3a 46 68 44 e7 c4 6d 49 14 7c c6 a6 b3 64 d0 dc 76 ad 47 12 8d 6b 36 6e 7a 9a e5 f4 f4 5c 75 35 98 f4 36 f4 75 ef e9 ed 5f ed 42 d5 11 42 f1 e7 27 76 4e b5 2c 3b ac 9a 01 9f 8d 2b 83 17 a3 30 df 12 59 e4 8c 80 e0 95 ce a5 b8 c3 9c c5 8e 5b 66 37 b1 92 36 8d 83 a6 69 58 8b 3c 52 64 25 5d 88 8e 4f bc 1b b6 8c ab 5b 2a Data Ascii: 3.Yu"Q(/~+F<<RAbaV2fg$G<&2b. x2&u+F$x~MsRaBIYl/[V\|u5y:FhDmI\|dvGk6nz\u56u_BB'vN,;+0Y[f76iX<Rd%]O[*
2024-05-24 22:57:30 UTC	1369	IN	Data Raw: 46 53 16 2f 10 3c 13 9b db 45 4d b1 32 90 1d 54 f7 a8 b6 ac 2e a3 32 90 6f c9 31 58 77 d1 66 5b ff 00 99 da 12 6f 36 df 92 8c 95 34 40 e5 ce 33 29 a9 b0 32 45 c5 1f 12 d6 6f 6b 95 66 07 98 a1 99 0d d1 88 ad f3 7c 4a 8d 59 e2 eb 87 5a 32 27 f2 eb 5b d6 e8 00 ab b3 73 24 d0 4e f4 05 bd 85 52 d5 0c 2c ed 92 31 76 a4 d9 f8 c8 9f 79 14 f1 5f a0 12 6d 95 d0 c7 86 92 8c fb 4b e3 d8 f1 b8 a6 64 fd ef e8 fb fd 73 ec ab 71 60 31 11 d2 be c0 17 f1 55 b6 23 b5 d3 1c d1 d7 a9 ec d7 6b 8d a4 86 97 66 e0 74 ff 00 ea 14 36 44 4d f7 78 98 de 8e c4 62 3e f8 5e 9f 62 e2 17 36 57 8c 8e 94 db 2b 17 c5 92 3b d0 d9 78 bc d9 4c 5a 72 ba 47 87 d9 d0 3b 12 00 00 67 74 8d f6 83 2c d8 85 b4 03 ee e0 c7 6d 01 06 68 a3 61 bd 00 03 44 49 c4 d9 4e 9c db 2f 50 2f de 8d b5 0e 4e 9c aa c5 Data Ascii: FS/<EM2T.2o1Xwf[o64@3)2Eokf\|JYZ2'[s$NR,1vy_mKdsq`1U#kft6DMxb>^b6W+;xLZrG;gt,mhaDIN/P/N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.5	49998	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:30 UTC	614	OUT	GET /buyer/user/select-coupon HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:30 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:30 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:30 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:30 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 33 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:57:30"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.5	49995	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:30 UTC	955	OUT	POST /buyer/cart HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 94 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=asics Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:30 UTC	94	OUT	Data Raw: 7b 22 63 61 72 74 22 3a 7b 22 63 61 72 74 5f 74 6f 6b 65 6e 22 3a 22 22 7d 2c 22 63 6f 75 70 6f 6e 22 3a 7b 22 63 6f 75 70 6f 6e 5f 63 6f 64 65 22 3a 22 22 7d 2c 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 22 22 2c 22 63 75 72 72 65 6e 74 5f 70 72 6f 64 75 63 74 5f 69 64 22 3a 22 22 7d Data Ascii: {"cart":{"cart_token":""},"coupon":{"coupon_code":""},"country_id":"","current_product_id":""}
2024-05-24 22:57:30 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:30 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:30 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:30 UTC	1213	IN	Data Raw: 34 62 31 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 65 78 70 72 65 73 73 22 3a 7b 22 68 61 73 5f 69 6e 73 75 72 61 6e 63 65 22 3a 22 30 22 2c 22 69 6e 73 75 72 61 6e 63 65 5f 73 65 6c 65 63 74 22 3a 22 30 22 2c 22 69 73 5f 6d 61 74 63 68 22 3a 30 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 73 65 6c 65 63 74 65 64 22 3a 30 2c 22 6c 69 73 74 22 3a 5b 5d 7d 2c 22 63 61 72 74 22 3a 7b 22 74 79 70 65 22 3a 22 22 2c 22 74 6f 6b 65 6e 22 3a 22 37 64 32 31 38 38 39 64 31 39 34 38 64 35 39 61 35 32 34 30 65 63 34 38 38 30 38 33 32 39 64 66 22 2c 22 77 65 69 67 68 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f 61 6d 6f 75 6e 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f Data Ascii: 4b1{"code":0,"msg":"success","data":{"express":{"has_insurance":"0","insurance_select":"0","is_match":0,"error_code":0,"selected":0,"list":[]},"cart":{"type":"","token":"7d21889d1948d59a5240ec48808329df","weight":"0.00","product_amount":"0.00","product_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.5	50001	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:31 UTC	626	OUT	GET /uploader/e11eff5309c535edce9d8cc35f9d4811c576d79d.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:31 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:31 GMT Content-Type: image/jpeg Content-Length: 52027 Connection: close x-oss-request-id: 66511B5BE2741F3435AEA4D9 ETag: "F36814FEA8ED6CBF7ED14BD52CF8E771" Last-Modified: Mon, 23 Oct 2023 02:04:24 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 7217132901493936357 x-oss-storage-class: Standard Content-Disposition: inline; filename="22180b859b900e39ba66021b7480607d30670150_221" Content-MD5: 82gU/qjtbL9+0UvVLPjncQ== x-oss-server-time: 108 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:31 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e29a1923f7e4-BNA
2024-05-24 22:57:31 UTC	690	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 1b 01 01 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: %'/9339GDG]]}C) )/'%'/9339GDG]]}X
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 67 67 96 fa bd 7a 35 52 a0 40 13 95 93 a8 6b 1b 62 f2 e9 af 41 cb db b2 e9 c5 f8 00 d3 d7 cd 27 9f ec f4 46 f1 ea 49 62 51 31 f5 64 59 79 1d cb 0f 9d f4 63 d0 e7 bd ef f5 6f 7e 8b ce 9b d7 ea e1 35 8c 75 c5 8e b3 b8 63 97 3d 9e 49 3c 7e d6 8b f9 6f d4 67 ff 00 47 f0 32 5f 47 e5 d7 97 47 5b d4 c9 a6 62 dc a4 b7 b9 b2 d5 a9 7b 25 d2 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e4 1d 69 f3 d3 93 78 9e 5c ca 50 26 27 ab 9b 9e f7 be 3d cb 1b b6 ae 9e 78 df 3c 98 ad e2 79 6e 23 64 97 62 22 6b 2b ab 59 95 4f 7a 27 41 b6 9a 50 a9 0c 65 60 8d 52 f1 ec 99 de ce b6 dd 3e 7c 57 ca 7a b2 f8 bd ab 89 9c c7 d1 79 f7 9f 51 e7 c7 9f 8e 97 9f d8 d1 3f 29 fa ad a3 f5 5f 96 bc f4 ba ba fe 77 e4 64 26 5a 36 ca ee 87 42 5b a5 c5 dc d3 2e 4a b2 d1 2e 0c a6 68 00 00 00 00 00 00 Data Ascii: ggz5R@kbA'FIbQ1dYyco~5uc=I<~ogG2_GG[b{%ix\P&'=x<yn#db"k+YOz'APe`R>\|WzyQ?)_wd&Z6B[.J.h
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 3a 44 5a 2e e1 37 d1 56 74 a9 42 a1 18 69 34 59 26 98 b8 53 03 9b a3 cb b3 59 e8 55 bc 8b e8 88 00 00 0e 35 e4 f7 79 77 b7 e6 f6 dc ef 97 1d 02 cd 8a 5a a5 c1 85 cb e7 fc d6 92 5e e9 02 91 4a 3a a1 db 6c ec f6 5e 13 97 60 ae 48 50 24 2d 0b 84 b4 b3 47 cd e3 ff 00 21 ed ec df 9f 7d 07 27 fd 67 e4 bd 4d ec f4 37 2b 70 49 aa f2 70 d4 2c a3 7c cf 36 cf 9d 71 3e 1d f2 5f 93 f5 3a 4f 7f 83 b9 fd 0f 42 1b c6 91 c9 c3 b9 f1 f3 67 66 bc d3 e3 f6 b6 de 79 d5 7d 1e ac 53 83 f4 3b 36 df 98 7b f9 cf aa f3 7a af d8 79 db 27 26 34 ed f1 6a 3b e2 bb 4c 43 5e 76 c6 f8 e6 39 e9 4a 4d c9 3d 62 77 08 b9 b6 09 44 89 1a 9c 8d 46 05 45 84 45 63 02 42 91 4a b3 d9 55 80 00 03 ce 1d 0e cd cf ab d0 dd f1 be 40 bb 82 6f 65 c1 5d 6d 0d 58 e1 d9 62 2d c9 9b a5 9d 45 6f d2 b8 2f 89 c1 Data Ascii: :DZ.7VtBi4Y&SYU5ywZ^J:l^`HP$-G!}'gM7+pIp,\|6q>_:OBgfy}S;6{zy'&4j;LC^v9JM=bwDFEEcBJU@oe]mXb-Eo/
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 98 89 10 53 2d ca fa bc d3 33 94 7e 59 f5 18 ef 4f a7 e8 ef d0 3c 5c e6 b3 5e 27 96 a1 50 8c 2a 4a 4a 20 4a 49 54 ca 60 a5 56 85 29 2c ad b4 35 44 f1 a7 16 be 90 c6 e7 60 81 cf f9 24 b6 55 27 2a 13 95 22 a1 39 34 44 98 11 26 25 22 49 52 d4 08 10 21 16 f6 d9 d9 76 48 6b dc 9c 70 48 2d 46 6b 4d 65 78 f7 7d 34 b2 d4 ba 23 12 d0 14 cb 98 ab 11 15 12 12 cc b2 9a 41 ae fe 4f f4 fc 3f e8 fc ef 53 fd b7 8f 92 4a b0 22 b1 00 a2 42 a7 d3 cd 3d 3d ed bf 88 fd 8e 1b f6 9f 93 f4 87 7f 82 69 6a 92 14 48 54 84 84 84 a4 a4 84 49 2a 99 4c a2 52 2d 8c 71 85 4f 1e e2 fa 07 1b f5 fd c0 03 9e f1 72 50 e6 c6 17 cb ee 57 4c e7 a9 d3 ab bc cd 6c f2 cd 9b 3d 95 2c a8 4c 46 16 44 94 94 c3 ed 52 b2 5c 68 d4 09 48 ad ad 94 ca 91 ae ef 8e 5d 66 15 31 56 5b 99 72 58 dd cc b8 ea ab 6e Data Ascii: S-3~YO<\^'PJJ JIT`V),5D`$U'"94D&%"IR!vHkpH-FkMex}4#AO?SJ"B==ijHTI*LR-qOrPWLl=,LFDR\hH]f1V[rXn
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 7a b5 92 ec aa 5c 17 85 f9 99 36 23 32 64 4b 92 ec bd 2e cc d9 7c 5d 97 46 60 a8 57 2a 10 26 22 00 00 00 00 04 01 02 60 40 11 20 40 98 81 12 00 02 20 81 10 00 00 00 00 00 00 00 04 08 80 40 88 04 08 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: z\6#2dK.\|]F`W*&"`@ @ @
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 5c 73 4f 23 59 de b7 ae 74 31 5a 77 c8 00 9d c5 8a e1 d9 9e e0 b9 e9 a9 49 42 4a 95 72 bd 17 01 6a 33 4d bf 29 c0 db 30 2c cd b0 d7 d6 72 cd 01 cc e5 de 8e c5 c6 50 f7 47 e7 23 ed bd 1a 44 7f bb e8 58 5f 2d cd 43 55 cb 39 2a 2a d9 21 38 c5 15 27 95 72 c0 1c b9 d2 dc d7 b2 5b f2 56 ba 43 c8 2b 2d ff 00 18 f9 c3 75 c5 41 79 d7 d7 26 4a e4 b9 a9 5c b7 ad cd 0e a0 7a 92 68 29 2a c6 79 d5 96 e7 c7 48 8e ef a3 32 7c 78 49 cb 93 ee 6f 4d 3b c0 b6 3f 70 5e aa 8b 11 88 6d f0 d9 ac d6 68 a9 a2 ac 12 33 c9 fb 64 37 8f 9d de 8f 21 59 ec ea b2 dc 82 b4 84 59 9f e4 b4 d9 58 48 cb a8 b7 5b fe 3b 24 26 f6 a1 1a 3f c2 20 32 db ad bd 41 25 44 13 e5 4d 3b 20 0d 82 1b 39 d4 e1 5e 2b 46 77 54 99 43 d8 db 6e ab e0 48 fc a1 6b 73 da 98 49 6e 4f 69 45 67 f8 ab 9a f4 34 6a 7b a5 Data Ascii: \sO#Yt1ZwIBJrj3M)0,rPG#DX_-CU9*!8'r[VC+-uAy&J\zh)yH2\|xIoM;?p^mh3d7!YYXH[;$&? 2A%DM; 9^+FwTCnHksInOiEg4j{
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 29 e1 22 b5 65 41 34 e2 92 eb 81 90 34 80 3c 6a 70 24 80 75 e6 94 fa 73 80 a9 3a 69 73 6e 8a 56 18 55 de 63 1f 75 9b fc 25 7d d6 66 c4 7f 66 ff 00 4f ce 9b 90 cb e5 dd 14 48 03 75 5e 23 36 ad 22 34 e8 d3 3c a8 de b1 9a e1 ec 02 4a 55 c4 da f2 b6 9b b6 ad 2a ac 72 a5 ee 7a 99 7d d6 09 2d 47 bc 96 23 70 e9 d8 e1 5a dc 7d f6 38 5a 16 9f 08 51 1c 99 b9 ba d8 09 54 7b 8b 2f 1c 27 88 9d f3 be 92 6b 58 a4 36 e2 f1 48 6d b6 c8 21 4c ea de a4 dd fb 29 d2 88 d3 99 91 ef c1 a5 b4 95 d2 b5 b3 cf be 08 5e ed 48 62 40 cb 0b 8c d9 d4 42 da 5b 79 a5 6c 70 b4 b2 a0 78 8c a2 e0 51 b3 e9 28 5a 72 df f6 2f da a3 b8 75 b4 eb 33 63 7f 99 69 c6 4e 0c 56 ee 32 d8 d3 da 99 9b 1a 46 34 14 fe 0d 4b 90 a8 91 f2 94 df a4 31 e5 50 e9 20 3f 71 1d 21 86 ac 6b 4d f2 de ba 17 28 6a c1 1d Data Ascii: )"eA44<jp$us:isnVUcu%}ffOHu^#6"4<JU*rz}-G#pZ}8ZQT{/'kX6Hm!L)^Hb@B[ylpxQ(Zr/u3ciNV2F4K1P ?q!kM(j
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 0e 3a c6 d8 22 df 78 5b 07 4b 8d 3c 1e 40 52 33 9a ff 00 9c 60 6d 8d b7 f9 ad eb 7a df 7a f8 ea da 94 e2 50 3c ce dd e1 b7 91 4b be b8 76 64 dd 2e 4b e4 dd c2 e2 4f 99 97 b8 a8 0a 08 5e a1 e3 e9 1b 7a a1 21 74 84 e1 a6 87 56 77 db 9f bb ab 35 ce 86 b0 14 46 9d c6 40 09 25 21 23 00 d7 d4 d2 31 a7 24 1a c2 79 fa fa 46 73 40 28 67 3c 82 b5 02 a2 06 97 5a 65 f1 a1 d7 6c 30 5d cf 09 ee 8f ca 46 ed 3d 16 63 04 f1 02 f0 72 1b 9b 25 be 49 bb 3d c9 4d dc d9 49 4a 93 1e 53 52 86 42 b4 ac 29 0a 93 05 eb 7a fb 44 5c 47 b9 37 94 43 b8 b9 1d 42 3c cf c1 44 88 a8 6b 8f 21 9b 34 4c 23 b6 3a 48 1c e5 38 5a 47 0d 02 39 6f cc 86 a6 0c 84 3c 3f 34 a4 a1 c4 94 a9 eb 5b b1 d5 c5 82 d4 e6 9e d4 d3 cb 8c f4 75 f1 61 c4 b8 a5 ff 00 a4 f7 2e 4b 67 19 28 73 18 39 ba b8 95 ba 8c 1e Data Ascii: :"x[K<@R3`mzzP<Kvd.KO^z!tVw5F@%!#1$yFs@(g<Zel0]F=cr%I=MIJSRB)zD\G7CB<Dk!4L#:H8ZG9o<?4[ua.Kg(s9
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 59 ac d6 6b 35 9a cd 67 c6 4d 13 4e 38 86 d0 a5 ae 6c c5 4d 77 35 d1 eb 72 b8 82 5b 9e 07 16 8e 31 48 ce 28 c9 68 52 64 b2 6b 39 f0 e6 b3 e8 17 0e 70 84 87 b3 e7 f0 94 83 c8 28 8d 94 a4 85 0a dc 1c 1f 00 24 50 58 ae 74 41 14 17 f9 f5 8f e0 a1 0d 20 61 3a 53 9c d6 9a d0 6b 07 c1 a4 d6 8e 75 a4 52 da 69 c4 94 2d 08 43 43 0d f9 eb cf 59 5d 65 75 e7 ac aa b2 aa ca ab 26 b5 56 aa cd 67 d0 91 21 a8 c8 d6 ec c9 ce ce 5d 5a 2c 65 d2 97 e4 00 12 00 1d 6f b9 c2 69 4a a5 2c 95 e6 94 e2 d4 3c c4 e6 b3 4d ba a6 fd bd b8 d1 98 e9 ae 33 86 b5 aa 83 8b ae d0 e8 a4 4b 07 de 14 08 c8 f0 2f 95 27 0d a6 82 c2 b9 67 15 f5 1c e4 96 ca 33 95 2b 4d 24 e4 67 ab 9d 72 a5 27 50 f1 83 8a 0b fc e0 2a b4 a8 72 0b fc f3 e5 ea 62 8e 45 6a ac d6 6b 35 9a cd 67 c3 9a cd 66 b3 59 ac d6 6b Data Ascii: Yk5gMN8lMw5r[1H(hRdk9p($PXtA a:SkuRi-CCY]eu&Vg!]Z,eoiJ,<M3K/'g3+M$gr'P*rbEjk5gfYk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.5	50002	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:31 UTC	468	OUT	GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-1516" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:31 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:31 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-1516" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183498 Expires: Sat, 25 May 2024 02:57:31 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e29a4acbf7ec-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.5	50004	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:31 UTC	626	OUT	GET /uploader/3c12228191e810dc3648fb860aea6101fc6a54ad.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:31 UTC	678	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:31 GMT Content-Type: image/jpeg Content-Length: 59732 Connection: close x-oss-request-id: 66511B5B90AF513232341FF2 ETag: "82275CDA9258A0BCE6E339F5824614B2" Last-Modified: Mon, 23 Oct 2023 02:04:23 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2151470066793196021 x-oss-storage-class: Standard Content-Disposition: inline; filename="22117083c34899e71e783c16e1df229daae64369_221" Content-MD5: gidc2pJYoLzm4zn1gkYUsg== x-oss-server-time: 39 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:31 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e29c2d3ff7d0-BNA
2024-05-24 22:57:31 UTC	691	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 07 08 09 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: af 1f b0 73 92 92 46 b9 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 d7 e2 0e f3 9d d7 3a ca de 4a d4 e6 78 a8 e6 fa 1b 7e 93 5f 43 4b d2 56 ae 26 cc cb 79 3b 0c 6b a3 c5 b0 cd 10 35 39 ad ce 06 be 57 73 ca 27 59 db 3b 6b 72 f0 be 7b df f4 6f d6 61 57 ba bb 12 d7 3b d1 bc c2 e7 7e 7b e1 fa 51 ba 79 bb 4f 67 93 a4 b2 c7 9f 4f b0 fc ff 00 a5 82 f2 bb c7 4d cf 5b 27 5b 47 19 1d 38 74 1d 38 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 1f 94 3a 4f cf 1d 20 eb 35 ce ef 56 1d 6a b8 dc d4 2c 5a 5c 58 d3 5d 11 dd 57 5a 5f d4 8d cd f2 6d 97 6c 56 a7 2e cf 11 ad 46 4e 96 e6 72 e8 8b 75 88 7c 57 96 be cf a9 97 4c 41 da 54 b2 a2 df 8f 48 7d a5 7e f8 a4 f6 6a 6b 7a ae 3a 8f 27 b7 a2 f1 fb f6 5c fc cf e8 7c db 2f 9d f5 63 f7 e1 f6 8e 72 73 17 dd 3c d6 36 Data Ascii: sF :Jx~_CKV&y;k59Ws'Y;kr{oaW;~{QyOgOM['[G8t8 :O 5Vj,Z\X]WZ_mlV.FNru\|WLATH}~jkz:'\\|/crs<6
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 56 65 ba 2d 7a ce a0 ea 35 9d a6 da b2 d4 f2 a1 73 bc d4 b9 5b 20 fa 81 6a 62 52 47 57 1c c3 7f 21 3b 0d 63 a2 de 30 ce fe 73 8b d0 6b 36 92 7d 9d 33 d4 b5 97 9f 3e 38 d4 25 eb 96 62 ef 8e 9b 9b 5a 5b eb 5b b2 b0 96 45 9a 57 62 57 6f 37 6b b9 6b 6b 03 c3 9f c3 a5 d6 75 15 84 da ca b7 4d 0f 53 6a 62 92 8d a2 d2 e0 b3 13 cc 3a 0e 6e cb 16 64 28 00 31 3f 96 fa 71 fb cd 8d 51 61 39 7a 0a e9 7a cb 18 8c 51 65 c8 61 14 c0 c2 ad 6a cb 6d 19 4d aa ac aa 63 39 66 e9 d6 74 c7 47 52 6c 9a 9e 13 2d 98 60 b1 97 9b ca 29 f6 53 b3 cb 59 ca 9f 36 22 6a f4 57 13 37 20 4b ea f3 7c 35 fa 0c e6 2c 85 5d ed b0 6a 95 3e 3a bd f1 d0 46 8c 59 fb 89 67 e6 ed 21 54 ec ac cd 7b cd 92 c8 58 91 07 2b 1d b0 c2 c3 72 39 3a 20 d6 da d1 8b 4f 16 6b cf 9d 2a 73 c5 95 6b 58 75 7c 95 29 3a Data Ascii: Ve-z5s[ jbRGW!;c0sk6}3>8%bZ[[EWbWo7kkkuMSjb:nd(1?qQa9zzQeajmMc9ftGRl-`)SY6"jW7 K\|5,]j>:FYg!T{X+r9: Ok*skXu\|):
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 70 ce ff 00 2f e7 f4 bc e5 d7 c9 a9 6b 21 24 5d ce 24 46 e4 91 33 8d ce f4 56 61 36 5c 6b b3 63 7e 26 32 e3 26 2d 7a 6b 93 15 c7 2c f4 d2 be 2e 26 b9 af 4d 49 95 b8 cd 6b 51 ac 2e 2d 66 c6 6c 6a aa 46 78 bb cf 8d e9 8a 5e bc 38 0b e5 e9 f7 9e 8f 6f 1a 91 94 96 22 66 7e 90 a8 35 f9 52 f3 e8 35 32 d2 59 ee 93 4d 09 62 cd 56 77 0c ce 31 d6 a2 63 78 e7 53 ad 85 3a 49 e7 ab c5 e9 b3 3b 18 ed 31 be b9 ad 6d 68 cd 93 9c 56 b7 41 9f 5c 49 7e 1b e9 f9 df 14 f4 fc fd 78 77 f9 d7 ef ac a4 80 55 e9 f3 9e fa c6 e7 74 6f d6 b5 67 51 a3 dc b0 31 b7 d9 59 d6 7a 9e d6 e8 c9 52 13 19 bf 4f 59 c2 6f 23 09 76 1e e5 a6 dc 2e b5 c6 51 a9 70 5c b3 9f 2d f6 6e 4c db 97 6d d9 de 19 d6 bb 7d 45 e8 99 f5 3d b2 53 3e 2f 9a c4 49 aa 23 88 b8 e2 37 c7 8e d7 9e 93 a7 1b cd 30 af b6 cb Data Ascii: p/k!$]$F3Va6\kc~&2&-zk,.&MIkQ.-fljFx^8o"f~5R52YMbVw1cxS:I;1mhVA\I~xwUtogQ1YzROYo#v.Qp\-nLm}E=S>/I#70
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 64 72 19 f3 f3 f1 e6 5b ba 3a cd ce da ba 4d f3 ce 5a 19 ae 4a 34 84 d5 8e ba 35 98 f9 4b 33 4c 0c ad 89 9e 93 a6 e6 f4 e1 ec 6c 39 cc cb 1b 7c 31 28 a3 b1 cb e8 05 d9 b8 9e 58 96 25 91 68 49 26 12 89 64 a2 79 3c b0 26 13 0d 80 00 73 e7 10 72 65 22 72 4b cc d5 0c 73 e7 2f db 39 ae 4b 85 c9 11 ec 7b 75 95 89 72 33 19 b5 71 e1 69 d2 4a b3 03 18 f6 d8 3c ec 54 98 37 35 c6 a9 6d 73 7e d5 86 ec bd ad 55 1c 82 55 1c f1 c7 10 48 32 c4 a9 3a cd 8a ed 89 3a 48 d3 38 cf 28 84 52 48 23 24 65 e5 f2 d9 57 71 a2 a0 10 e4 9e b6 e4 a2 b4 da 4a 2d 8d 84 92 71 6e 75 67 42 6c 33 2c 8b 12 e8 bf 3a 03 a0 2e 4b 33 20 00 06 b2 98 a7 28 4a 92 94 a4 39 46 6b 2d 89 ab a6 cd 69 e4 2b 18 1b 4d c7 a6 79 d6 b8 9e 59 ed 3a e6 44 4f 59 ab 23 2b 02 c0 95 99 63 56 96 dc 45 99 28 18 9b 88 Data Ascii: dr[:MZJ45K3Ll9\|1(X%hI&dy<&sre"rKs/9K{ur3qiJ<T75ms~UUH2::H8(RH#$eWqJ-qnugBl3,:.K3 (J9Fk-i+MyY:DOY#+cVE(
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 89 a5 ea 17 c4 73 32 8d 3f 45 ac aa 9a a7 51 4b 29 60 b1 e9 76 2e 11 2d d8 2a 76 62 ed c4 06 de 0d 36 a7 17 3b 16 a0 be 35 0b 20 af 16 58 f6 1a 96 a7 a7 e9 db 58 9f 54 ea b9 f5 27 92 24 e9 d9 c2 c9 05 7a 7b 76 e2 ec 2f 31 b2 b1 d6 35 27 85 ab d3 af 4f a5 f4 ea 6d 0d 98 34 ee 9e b7 2e b9 a8 5c d5 ad 52 96 8a 34 95 b4 7d 69 19 a3 4f ee 7a 8d b4 a3 4e cd 86 bf 02 db 96 59 0a 4d 77 4e 61 94 7a 91 4e ca f0 6a b0 4b 8b 20 95 01 54 f0 06 c3 6f 19 b6 6e 46 45 31 46 04 54 d4 c3 6c b3 06 56 1b 8f f6 89 00 12 4f 4d 69 a9 aa 5d b8 d7 b5 78 2b 02 a9 25 bb da bc ac 90 50 d2 21 a5 b4 92 72 0a 36 4e 5f 38 e7 dd 8b 55 4f ac 6b 29 7b 44 af 48 45 16 ad d6 28 39 57 a0 f4 f5 5d 51 fd 45 9a 7d 3d 0a 6c 65 e9 cd 02 86 9f 24 da 8c 6f 22 6c 93 e6 ab ab c1 a5 d6 b1 21 d3 65 85 a6 Data Ascii: s2?EQK)`v.-*vb6;5 XXT'$z{v/15'Om4.\R4}iOzNYMwNazNjK TonFE1FTlVOMi]x+%P!r6N_8UOk){DHE(9W]QE}=le$o"l!e
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 51 35 5b 3e 2c 49 42 40 0b 40 1b 63 8b 36 d9 15 d9 15 78 e4 37 50 e2 cd b2 07 3d d7 f1 82 c4 a7 3d 4c 87 04 ad b9 ce 67 1a 5f f3 cd c6 09 db ec 65 fa 59 84 d1 44 48 0b 22 fb a1 62 c6 55 11 b7 3d f6 7c 12 10 0c 88 0c 61 8a 61 fd 35 31 48 77 73 cc 9d ec 49 80 8f 9c 8e 3e 7e 4b c8 c2 49 37 2e a0 b2 92 19 63 97 1b 76 4e 71 c5 fa 13 43 50 2c 81 77 60 1e 37 3b b5 ad 41 e4 0b 0c 30 e8 fa f4 06 39 66 37 f8 4b 32 4d 02 77 dc 05 10 a8 86 45 20 91 30 67 fd 51 fc df 90 41 d4 b5 8d 6e 07 ed 59 3a b6 ab 1c 2c 0c 48 52 05 89 c7 6d 9e 36 cb 36 ac 1a cf 2a c5 28 b1 5e 19 52 59 63 35 e5 95 a9 db 08 a9 c9 2c c6 d8 18 1f ec 92 cb 1c 31 bc 8f aa 59 3a 8e af 7e d6 7a 85 0c 41 f6 bf c1 5c e3 9b 7e c8 a7 78 ce eb df af 6f 61 66 5a 12 c6 a6 48 83 60 90 8c ab a8 d9 aa fc a1 af a8 Data Ascii: Q5[>,IB@@c6x7P==Lg_eYDH"bU=\|aa51HwsI>~KI7.cvNqCP,w`7;A09f7K2MwE 0gQAnY:,HRm66*(^RYc5,1Y:~zA\~xoafZH`
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 3a ab 41 42 3d 6e ac fc de bd 61 0c 92 4d 23 09 37 42 b6 15 26 b2 26 78 cb 32 c4 c3 dc bf 4d 69 23 9e 06 46 f4 93 68 e6 49 69 c1 69 27 8d 66 86 3d 42 da f8 64 d5 c7 dc 6a 75 9b 71 89 72 b3 fc 09 10 fc 6f ff 00 13 af 21 ef 74 d5 bc f8 d8 63 8e e4 39 a4 ea 06 b7 a8 43 1c aa 0f 12 36 61 92 55 8d fe 5e 8b 46 79 46 f1 2b 12 25 6a 6c 41 31 6c e8 7c 2d af b4 83 84 83 da 57 36 c8 a7 92 26 0c b2 2d 7b de 4c b1 49 03 94 93 96 2b f9 c8 6c b2 1f 10 5b 1f 75 95 36 c0 c9 8d 14 13 ed ce 4d 22 a3 0f 64 ba 6c d1 1e 49 fb d3 5a a9 1b 47 27 e6 5e e7 23 9a 55 8a 56 64 96 48 4c 76 69 c2 ca b6 e8 e9 6d 2a 3b fe 55 9b b7 b8 7d 33 52 a7 23 a9 17 eb c9 c9 5e 58 e8 18 1a 68 f4 bd 18 de 1d fb 09 23 44 db 64 4f bb cd 24 f2 75 25 e9 6c 22 d7 5e a6 b1 1a c4 6c d4 ea 4a 3c 99 66 8b 54 Data Ascii: :AB=naM#7B&&x2Mi#FhIii'f=Bdjuqro!tc9C6aU^FyF+%jlA1l\|-W6&-{LI+l[u6M"dlIZG'^#UVdHLvim*;U}3R#^Xh#DdO$u%l"^lJ<fT
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 65 d4 ad ed 17 69 34 5a 49 a5 e9 c6 49 54 b0 9a 41 96 ec 0d 57 54 50 b3 69 d0 95 b0 5a bd dd 43 42 7e cc 95 af 44 f0 06 86 34 10 05 5c bb 04 17 90 56 b4 f0 59 d0 ee 0e e5 3b 21 a2 8d 00 63 19 64 48 e6 aa 8c 95 b1 59 ac 28 e3 35 c6 82 e3 90 b3 99 56 2c 41 28 b1 3f 27 9c 80 eb 88 b2 43 34 82 3f 53 04 cd 32 46 b6 38 3a ca dc b8 73 81 6d 77 7d 54 73 d6 e4 f3 4d 22 4b 59 e3 66 87 79 08 84 bc 8a ca 22 0e 63 69 23 95 66 e6 67 8f 76 52 fc ee c5 22 e2 4b 13 11 03 41 6c ce 3d 3c f6 0b 95 32 e4 77 12 bc a5 04 e1 cb 99 a2 85 52 bc 9c 98 2f 39 5e 2c 81 82 2c 61 a6 b4 cd 1c f2 19 2f f0 16 11 52 79 38 55 85 cc ab dc 84 16 b1 b6 c8 61 9e 3b 09 2b 91 3b c7 5a 69 8d 1e a0 bf 56 fc 2c 47 f0 f5 26 a2 da 6e 9a ef 1e b3 a6 58 27 d5 26 fb ef 83 14 ed 93 45 c0 f2 5f da 37 3f 0b Data Ascii: ei4ZIITAWTPiZCB~D4\VY;!cdHY(5V,A(?'C4?S2F8:smw}TsM"KYfy"ci#fgvR"KAl=<2wR/9^,,a/Ry8Ua;+;ZiV,G&nX'&E_7?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.5	50006	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:31 UTC	700	OUT	GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-e1e" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:31 UTC	609	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:31 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-e1e" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183498 Expires: Sat, 25 May 2024 02:57:31 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e29c2b48f7f4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.5	50005	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:31 UTC	706	OUT	GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-2f86" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:31 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:31 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-2f86" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367932 Expires: Sat, 25 May 2024 02:57:31 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e29c3c276a79-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.5	50008	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:31 UTC	392	OUT	GET /uploader/7b95f33ca58a398ea9d3a76edd90ff18b746a398.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:31 UTC	700	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:31 GMT Content-Type: image/jpeg Content-Length: 84178 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221b99bf90538c24fbd3966ffe6240885c599033_221" Content-MD5: 2FnvGDsJIM9vFprU/qJUgQ== ETag: "D859EF183B0920CF6F169AD4FEA25481" Last-Modified: Mon, 23 Oct 2023 02:04:27 GMT x-oss-hash-crc64ecma: 9067685359227191941 x-oss-object-type: Normal x-oss-request-id: 66511B5AC3F2453733078123 x-oss-server-time: 66 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:31 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e29ccc6bf7cc-BNA
2024-05-24 22:57:31 UTC	669	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 01 02 03 04 06 07 08 09 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 4f 28 ef 5f cc f5 9f a9 f0 39 0f 67 93 87 fc e3 ea ba 6f b4 f0 73 7a 3c 99 b2 c3 7b 8d af d9 8f 43 c9 d5 dd 78 fe 87 94 f4 d2 dd f1 fa 0f e3 fd dd 6a db cf be ab cb f4 6f 33 d2 eb f9 e7 9b f1 fd 0f 7a f2 fa b6 69 7d bc b4 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 31 d1 cd f0 47 e8 bf 01 17 af 54 df 66 3b 0b cb e7 34 f9 df 57 8b f2 bd ce 4b 97 69 0b 5b d0 96 fa 1f 8e de c9 c7 69 bc a6 eb 29 0a c0 00 29 64 0d a3 c0 7b 73 f9 57 d0 c3 b4 f7 bc 2f 41 e9 a7 09 ef f9 30 7d 6c f1 5c 24 9f 3e 7a 17 a7 43 e0 fa 1d 97 0f 6e f6 b1 2d cd a4 97 27 4c 45 9b f4 8e 1b d8 e3 b3 d5 e1 ed fc 5e fe c3 93 7f 33 e8 b5 35 8f 41 e3 d7 d5 fe 73 d4 eb 7c ae d4 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 c4 bd 9f 17 e3 1f af f9 e9 4e cc eb ae 9b 35 a6 e5 e6 7f 09 Data Ascii: O(_9gosz<{Cxjo3zi}H1GTf;4WKi[i))d{sW/A0}l\$>zCn-'LE^35As\|N5
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 37 f7 3c df 42 f2 76 91 ae b5 a4 72 de 9f 1f a2 79 5e cc 6f a3 e7 45 f4 e1 dc f8 fe af 0d e9 f9 fe 93 e1 fa 37 55 07 d1 94 47 a7 95 db 52 b8 ce 8f 46 73 39 6b cc 5b 0d a6 37 72 f4 fd 21 f1 9f 4b 29 8e d2 b9 69 58 52 55 90 00 00 00 00 00 00 00 00 00 18 55 f8 0b f4 cf 81 f3 9f 5f d0 c7 95 a7 f1 e6 e8 bc eb ca 72 de 56 96 c9 67 9e cc f7 7c 3b 7a 0f 1f 4e de 91 07 e8 61 c9 fa 7c 9c 47 a3 e7 e8 f4 f3 26 b6 d2 51 22 ca 5b 15 75 90 84 af 26 b3 58 eb b5 9d e5 31 ea db 8a 52 9b 62 cf 5c 36 bd 22 71 45 e9 74 96 59 f9 87 d2 fc dd bb 73 fa 27 87 ef 7a 07 ce fb be 45 f4 9e 45 d1 9c 76 bc 9a ee 58 6e be bf 4d f1 bd 5b bb 7c 78 9e de 3f 44 f9 ff 00 6f 82 f5 b9 3d 17 c0 f5 af cf 5d f9 8b 29 11 fa d3 07 6e 1b 78 da ca cc 2f b1 c9 c3 73 5f 8c 9b 75 5b 73 7a 67 2f 46 96 f1 Data Ascii: 7<Bvry^oE7UGRFs9k[7r!K)iXRUU_rVg\|;zNa\|G&Q"[u&X1Rb\6"qEtYs'zEEvXnM[\|x?Do=])nx/s_u[szg/F
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: ab 81 fa 1f 2f 2f 2f 4d bd 1e 7e b7 65 7a ff 00 0b d6 c7 7a df 68 97 e6 de ec f4 da ca f6 6d 4c 77 a6 c7 17 4e 9f a7 c3 a5 a6 7b 38 ed 3f c1 d7 a5 6a 5f 5b e6 d7 9f 57 a7 2e 6b d1 e3 d2 e8 e6 9d e0 ea e8 bc bf 53 1e 73 23 96 dc c7 7f 9d bf 8f 56 5a df d7 7c 3f 47 b1 e0 ee 58 00 10 bb 63 f9 fd fa 5f e7 b2 5e 3f a5 27 cf 7b d1 99 ae 78 9c 56 b7 9f fd 0d 22 f7 e7 91 d7 8a fb 63 9a 6b 9e 29 b1 93 1b 4d aa 5b 0e 7d 5a fe 76 d1 3d 99 cf 51 d4 f0 76 ef e2 d1 db 2e 7b b7 08 8d f2 84 d7 d0 f7 3f 95 f5 f9 1f a6 f9 2e 7b b7 82 43 97 b3 d3 3e 7b ea bc 4f dd f3 74 f6 c7 d2 3c 2f 63 a5 e7 a4 57 a9 e3 f0 be cf 91 58 ca 4b 9b bf d0 fe 77 e8 6f c7 4f 1e fb 2f 92 cb 4e af 4e f9 1f ac f3 bf 77 c6 89 ac eb 77 f1 fb 17 ce 7b 9c ff 00 af e4 72 fe c7 8f b3 97 4f 47 c5 d3 da 78 Data Ascii: ///M~ezzhmLwN{8?j_[W.kSs#VZ\|?GXc_^?'{xV"ck)M[}Zv=Qv.{?.{C>{Ot</cWXKwoO/NNww{rOGx
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 11 72 29 16 bd 19 66 28 82 dc 7f 46 7e 63 e9 79 dc 9f a5 c5 e6 9e ff 00 89 db 71 6b 7d 5c c7 a7 c7 eb 7e 17 bd e3 ff 00 57 f1 95 d1 d2 f9 be ae 2e 2f 7f 8c f6 7c 1b 99 f4 7e 67 7c 3f a7 e6 e5 cf 6e eb cb ec 9c f3 7a b6 f8 3a b6 e9 7e 7f af 0b 3a f9 22 fa 39 a1 3d 1e 58 9e dc 70 a6 63 0b f4 3e 6f 7f 43 e5 f6 eb 6d cf c9 77 72 6d c5 a1 f5 8c 76 ac 24 cc a6 3a e1 57 52 95 b3 1d e7 32 eb f3 2f 17 d6 d5 f3 7d 4f d0 de 29 f5 28 0a 51 f3 d7 75 bd 1b c8 f6 32 53 5b a2 2a 9d 78 8b ad 6c b3 5c 31 7c 49 ac 37 6d 95 50 56 f4 d1 18 22 f5 5b 0d 1b 36 ad b6 ad e9 c7 5b 62 5a c4 e6 9a e1 bd 23 ed 3a 14 89 9a cc 54 df 4e 6b 7e 99 e5 65 bb d1 cb 3f af 2a 62 f2 f4 8b d1 44 db 0c 25 93 14 2e 2f 98 b9 34 aa cd 23 9a 9c f5 ba 70 f3 cf 53 cd e2 3b 6b ab ed f8 7c 7f b3 e1 ad 6f Data Ascii: r)f(F~cyqk}\~W./\|~g\|?nz:~:"9=Xpc>oCmwrmv$:WR2/}O)(Qu2S[xl\1\|I7mPV"[6[bZ#:TNk~e?bD%./4#pS;k\|o
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: c8 8a 4a 90 a9 42 f9 5d 2c 31 16 c3 2d a5 0a 15 33 4a a4 79 c9 1e 77 78 f3 bb d7 cd ec e3 b5 c7 ea 6e 4d fe a5 c2 67 22 60 ec 9d 85 40 00 00 00 31 9e 0b 77 cc 7d 0e 1e f4 d7 cf 6e e3 9b a7 b6 e5 e8 fa 4b 9b b7 4e cd 93 66 cb a9 39 22 6f 99 c9 31 62 00 22 a8 aa d4 05 4f 32 e8 e5 80 ea f3 a5 6f 4a 2b 1e 98 c3 52 96 d8 4f 35 4b 72 34 4a a9 e8 76 8e e1 1d a5 ab d0 95 44 3c 4c 44 23 16 f0 14 f8 7c 4d b1 7e 99 6e ed 1d f1 d1 de 99 b5 a7 1f 17 cd 86 fe ef c7 e8 6e 34 ac d6 23 bb cb e9 b5 e4 a4 ad 86 cc 28 5b 33 82 26 3e 62 0d 10 84 0c a1 6c e9 6a f5 68 7c a3 67 83 74 67 a9 7a cd c4 e2 a5 be b0 e7 bc da 9f 45 e5 7b 80 00 00 00 00 18 8e 7c e6 08 33 c4 f4 9f 3a 87 21 13 a5 0b 29 6b 3b 69 ab 2c 53 1a d9 cc 8e 93 7d 59 e1 bd 0b 8b 4a 4c 5e 6a d2 db b7 8c 33 3a 91 55 Data Ascii: JB],1-3JywxnMg"`@1w}nKNf9"o1b"O2oJ+RO5Kr4JvD<LD#\|M~nn4#([3&>bljh\|gtgzE{\|3:!)k;i,S}YJL^j3:U
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: dc c9 2a f4 be 02 5d ab 4e 9f c2 3d 89 7f 61 3f 17 64 3e cb a0 d6 c1 3a 48 ee c8 29 1d 0a 3b 2c d0 46 33 40 c0 d8 77 43 35 4a 23 65 79 53 e2 da 32 2a d2 bc 9c ea ef be b4 2c 82 2d 20 8d b9 44 88 8b 2d 82 4e 7c e9 d7 91 be 64 5a bb 8f 47 5d a2 d4 a7 a1 88 37 1e 76 ac 36 57 63 4a 6a 4a 2e 3f b9 ea 92 76 c5 1b 45 3c bb bd 11 79 9b 42 ed b9 56 5d bc 2f 49 d4 2a 2b a2 ce 53 1e 11 df d7 d4 45 c6 f5 67 89 1c 70 1b 55 54 62 33 b2 ce f4 2d 8c 71 44 13 90 1c b3 75 f1 c7 1a 47 ac 94 da 2b 9d 54 61 1d 2f 49 b0 94 9b 9d db 43 b7 22 6b a0 96 fb a1 53 92 44 8f 96 c6 46 cb 96 72 1d 9e 03 2a 6c f3 11 24 34 2f a8 11 64 84 a6 01 d0 fd cb 51 7d 5d 90 6a 99 50 bf df 13 8a dc 8b 99 2b 12 1a bd 21 a2 d5 e9 16 9b 35 13 02 18 72 86 5b 28 69 fa b3 75 06 61 8f 39 b3 8e 43 8a 45 1e Data Ascii: ]N=a?d>:H);,F3@wC5J#eyS2,- D-N\|dZG]7v6WcJjJ.?vE<yBV]/I+SEgpUTb3-qDuG+Ta/IC"kSDFrl$4/dQ}]jP+!5r[(iua9CE
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 83 90 e4 a4 4d f4 62 3a a7 42 69 ce 27 3a e2 9e 05 2b 79 8b fd 54 4e 5d 4d 55 a6 de 92 e6 0d 08 c5 d2 fb bb 25 d7 89 49 c1 ea 55 16 9b 88 d8 37 bb 29 e9 db c9 b4 1c 2b 22 6c ad 02 a6 e8 0a 5a 6b 1c c4 a7 81 db 77 fa 62 42 56 f9 8d d0 97 0e 55 82 da 85 e2 2e 85 7b 1c 7a 06 6f a5 53 8b 05 54 05 49 0e 89 63 40 e3 a3 6a 6a 58 29 60 57 fd 93 5b 50 59 2d 22 7b d2 59 17 9a 70 cb ea 16 62 f2 db 61 bd 41 83 6c c3 51 86 ad 1a be dd 03 ae 37 e8 0d 52 60 57 99 b0 5f 55 24 69 87 49 1e 13 bd 8b 46 68 ab ca 1d 0f a6 b1 b5 36 fb 6f 6a 21 eb 29 71 95 7e 72 2e 96 75 e5 ec 3b f4 8f 4a 2f 62 d3 9e 4a e1 1e 4a 26 9c 6f d6 de f7 d8 0e ea 0d da bc c1 9f f3 24 c8 6e 25 48 72 18 f2 4e 4a 57 50 e1 d7 a6 9b 8d 1d cb 51 ec 36 6a a2 ae 9a d9 16 f5 97 24 a8 7a 73 b2 53 70 dc 9a db 0d Data Ascii: Mb:Bi':+yTN]MU%IU7)+"lZkwbBVU.{zoSTIc@jjX)`W[PY-"{YpbaAlQ7R`W_U$iIFh6oj!)q~r.u;J/bJJ&o$n%HrNJWPQ6j$zsSp
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 5a ef 5c 96 9e 63 3e a0 a4 2a cf f9 12 6e 84 d5 3d 28 67 ce 9d 64 0f 9a 2b 34 39 02 f2 19 2f 8d e9 26 dd 2c 7b b1 1c a5 8f 18 bb 14 25 e7 81 b1 24 2f 44 2e 0f aa ac 34 d4 c9 6c fa 13 56 71 79 3d b9 a4 bd df cb 59 77 9c 77 34 e9 ad 77 5b a7 25 42 21 f4 b7 a9 4c 6f 95 26 aa 9e b2 79 d7 5f 35 37 2a 24 37 65 9d 85 d9 8c 45 12 8f 08 23 6f 65 65 80 fa 2a d9 11 ef 61 93 39 bf 48 eb 13 c7 bf 9b 0b 9f f9 08 7a 33 f5 36 07 08 82 49 e3 7a 62 5b f1 97 e5 29 c0 d4 79 3b 26 24 a8 45 63 8e db 2f 36 96 38 86 3c e9 a9 6d d9 1a 7f 87 61 e1 f9 6a c1 b5 9e 0d cd 92 3d f8 96 5f 1b 51 44 cf 3b 23 53 23 62 8d 8c dd cb 09 ac 68 ce 67 82 0c e6 2d 62 76 33 bd 32 04 5f 6c 48 a3 92 b0 5c 9d 0c d5 72 64 c4 d5 15 1c c6 d9 5d 0d 2e b6 ba 9f a5 c6 af 96 4a 2d f5 a8 a0 a8 e4 68 58 a2 96 Data Ascii: Z\c>n=(gd+49/&,{%$/D.4lVqy=Yww4w[%B!Lo&y_57$7eE#oee*a9Hz36Izb[)y;&$Ec/68<maj=_QD;#S#bhg-bv32_lH\rd].J-hX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.5	50009	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:31 UTC	392	OUT	GET /uploader/622fada3a90cdea20584e58943f97e18bc42b336.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:31 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:31 GMT Content-Type: image/jpeg Content-Length: 86272 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221f4806121530f16efd628a98d45bb158729568_221" Content-MD5: 2DCY4K4Cq8YHaj95bxGUIg== ETag: "D83098E0AE02ABC6076A3F796F119422" Last-Modified: Mon, 23 Oct 2023 02:04:26 GMT x-oss-hash-crc64ecma: 1976336759529045189 x-oss-object-type: Normal x-oss-request-id: 66511B5AF488A5383942AE8E x-oss-server-time: 147 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:31 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e29d9a67f7d8-BNA
2024-05-24 22:57:31 UTC	668	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 08 09 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: f7 9f 3b ed 6c fe ab e4 7b 5f 7b e5 fe 95 fc eb f5 0f 57 e7 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 0f 91 6f 5f 93 ba f1 a5 6d b3 bd 2d 88 8d ad 7a 6f 7b c5 e8 fd cf 03 a6 f4 bc 3d ce 17 fa 6f f3 ef d1 3d 03 c8 f6 6a 94 80 00 82 50 e4 bb fc cf 8f 3e af e7 3c 83 cc f6 ba 7f 1f d2 cd cf be b1 30 e5 b6 ab 36 99 f3 fd dc 70 ea 8b c9 d7 07 2d 61 c4 67 33 5a 77 46 ed 1b af 77 e7 f6 5f 55 f2 bd 5f 9f be fb 97 d1 c5 ac 7a 67 93 d9 ed bf 3d f4 d2 6b a5 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 29 f9 89 d1 8e 87 a3 3b 69 69 11 5c 96 a5 f9 e9 b5 eb e5 d9 f1 f6 c0 f5 bc ed cf bd e0 ed 7d 0f 2f d9 3c bf 47 d2 7c 7f 4f be f2 3d 6e 8b 9b b2 ab 21 49 ae ab 7e 7e 2f d1 e0 f0 4f 53 cd f0 cd af 83 c9 f4 73 f0 f7 6c f0 db 5f 59 d3 10 34 a4 be Data Ascii: ;l{_{Wo_m-zo{=o=jP><06p-ag3ZwFw_U_zg=kd);ii\}/<G\|O=n!I~~/OSsl_Y4
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 80 00 01 f9 4d b4 6a 74 cf 69 9d ac 46 5f 6b 8a ce 7d a2 4d 22 ef 17 67 36 f2 6b 07 8b 7c 51 39 e6 29 66 da 8e ea 67 b9 db 1b 73 b4 48 b2 d1 ca de 9c 85 f3 e8 d3 e8 d8 ed db 56 7a 9a cd b0 f3 eb 34 7a e7 54 45 89 be 2d 86 27 b5 88 f9 5b a7 1c 53 1d 85 2d e9 d4 b5 d1 3a 3b d7 90 d2 bc f6 94 b6 b3 9d 39 eb 1b 45 e7 df 3f 7b e5 e8 f3 de 9e 7e 0b b7 93 59 cf d1 b5 e8 e5 c9 a4 40 e6 e9 c3 09 73 9d 9b 45 32 d2 4e d9 eb f0 4a d6 26 ca 3a 15 bc cd 39 ed 9d b2 31 89 5b 59 17 ca 99 9a e7 8f 2b cd b6 55 cf 56 b9 f3 fe 7f 7c db 67 91 11 e9 7c d6 9c 53 1a bc a7 4d 4d a2 cc 4c d6 9f 6b 71 74 fd 0d 95 ea 9a 80 01 cd 1f 95 36 48 eb e6 a6 77 ee 32 d7 96 f6 f8 37 5d 19 c2 d3 3a 71 6f 1b 2b 47 a5 dd 19 da 60 45 2a b3 1d 65 76 61 b0 ed e7 d3 fc f7 a3 6f 2f 46 4d a9 d7 43 d0 Data Ascii: MjtiF_k}M"g6k\|Q9)fgsHVz4zTE-'[S-:;9E?{~Y@sE2NJ&:91[Y+UV\|g\|SMMLkqt6Hw27]:qo+G`E*evao/FMC
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: c2 fe 1f d7 cf 86 27 d9 b9 7a 3c f2 f1 cd cd 37 bd 7c da ac 3a 33 2b 8e f6 91 44 5a 4d b4 b6 c3 7c b5 f1 6d 95 eb 86 b5 93 76 bf 2d 60 e5 a5 6d 59 9a 53 59 8e b6 67 6c 9a 52 9a 53 19 83 2d a4 db 1c 51 a6 ea b6 f6 6a 5f d8 e2 7b 39 e5 e1 3d ef ca 39 e8 df eb cf 9d fd 66 e4 81 61 c8 cc ea ad 38 91 90 92 8f 0b 3c 12 63 cc 26 26 ef 96 bb 9f 69 16 89 56 a6 f3 d8 f2 6d a6 99 7b 79 32 6f 9e 7d 71 b5 35 89 93 96 be 8d e6 f7 fa df 07 77 a9 f2 f4 5d 0a 49 13 12 d1 e7 f1 59 b1 3e 1d a5 38 19 8f 46 ce de 75 0e 5e 18 93 83 48 c9 4b 59 6a ea ef 4c f6 ad 54 db cc fd 01 8e be 3f be 56 c4 4b ad fd 0e b7 f0 4e 9e 7a c4 c2 cb 5a c3 69 d3 8c 7e 6d 7d 0b 2d 23 eb 4f 3f d7 39 55 9f 7a e7 df c5 3a 30 89 7a c7 cb 49 7b 67 49 89 15 6a f1 d6 46 d4 b3 2b d6 27 35 eb 93 4a e1 ca d8 Data Ascii: 'z<7\|:3+DZM\|mv-`mYSYglRS-Qj_{9=9fa8<c&&iVm{y2o}q5w]IY>8Fu^HKYjLT?VKNzZi~m}-#O?9Uz:0zI{gIjF+'5J
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 8b 01 7a 23 a2 d2 a5 4c a9 b2 5c ef 5f ce f0 fe af c2 73 9a 71 fd 03 f3 ff 00 a8 77 5c fe c0 00 00 00 00 0b 4f 3d b3 5f 6b 4c 88 cc 9b 8b 8b 8c e6 33 39 1a 12 c8 c4 82 c2 86 43 19 90 c6 8a a6 d2 a0 14 05 a5 c8 21 2b 52 ac 68 75 e5 d0 74 78 7a fd 79 b3 46 93 71 ef 9f 87 a3 d0 d7 a3 3b 4b 65 48 8b 8b 0a 94 28 5e 51 24 d4 19 0c 46 32 c4 e4 32 a3 10 2a 64 30 82 a5 51 69 92 54 45 4a a6 e8 41 b7 37 91 7d 1f e3 f1 2f c9 eb de 2f e8 9e 8f c1 f5 12 eb b5 52 00 00 00 00 02 87 90 74 f8 92 73 f5 27 47 44 88 56 59 21 78 4e 53 12 32 c4 e2 32 14 32 98 cb ca 01 31 4a ce 64 62 4d 26 09 b4 c9 11 ab 36 32 b2 22 c9 8d 16 dc 1e 7f ec 7c 17 21 e8 fc a4 3d 79 6a a0 19 e1 0a 9d b3 f9 bb 77 59 7a 5b 6e 5f 67 6d 8f a9 b6 e6 f5 b6 79 77 6f e9 bd 93 36 17 96 c3 22 6a 55 37 a2 d2 2c Data Ascii: z#L\_sqw\O=_kL39C!+RhutxzyFq;KeH(^Q$F22*d0QiTEJA7}//Rts'GDVY!xNS2221JdbM&62"\|!=yjwYz[n_gmywo6"jU7,
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: c1 8e f8 70 ce 42 24 bd ca 14 66 45 ba fc bf d3 36 d8 ba 44 43 18 5f c9 a4 b4 90 77 5b 10 e3 ba a8 50 cd 91 25 fc dd 14 cb 64 ba 31 5b 22 9a e6 b8 4c 19 ff 00 a5 ad 51 b5 2c a7 58 dc 8b 9c ee aa d1 8a ba 63 05 a4 83 90 72 0e a4 b0 cb 05 06 36 a8 cc 77 89 d1 43 8c d8 94 b9 d8 b7 fd 2b 68 89 ae 8a e3 ea e0 ae 53 4d d2 79 90 44 41 65 f5 2b 48 19 68 c1 9f 72 25 bd 92 14 8e f4 1e 99 12 5e 7c 14 0b 4b 62 74 49 e9 7f 1e 73 d8 db dc 17 3a 83 9a 6c 68 6f b9 df 83 b4 3b 42 0c 43 b1 0e 46 b3 4e a7 aa a2 45 0d e8 b1 35 81 93 2e 13 23 ac 31 1b 42 2e bc 1a e7 2c 7f 56 f5 ac 71 1f 1d ff 00 35 26 ba 5a 3d 12 8c 39 f5 87 7c d6 ac 4f ef 3d c9 b3 6d 5a e7 70 42 d6 f1 2e 96 f9 a8 36 96 c4 a1 a1 fe 34 e7 06 82 49 a2 8b 6a 73 a8 da 05 39 df cb 06 d1 73 5e 69 9f e0 be 90 74 a0 Data Ascii: pB$fE6DC_w[P%d1["LQ,Xcr6wC+hSMyDAe+Hhr%^\|KbtIs:lho;BCFNE5.#1B.,Vq5&Z=9\|O=mZpB.64Ijs9s^it
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: cf 30 8d aa 10 68 3e e4 2d d0 cf aa e0 b9 d4 0e da 36 a8 03 d7 5c f5 d3 1d 10 a1 da 98 f3 23 43 fc 16 23 b4 18 e7 64 14 e6 e9 9b c9 5a 24 56 54 d8 ae e4 9c c5 55 e3 a3 3a a8 76 68 af 60 74 84 8e d9 23 65 b4 0f ca 77 8f 82 20 8b c2 d2 b8 ca 42 e2 a7 d1 91 92 24 3a ea 10 84 a4 e9 8a 1f 14 6b 94 fe 2b 0d 92 5a 65 c0 8b ab a4 3c 94 7a 58 d3 e2 b0 53 39 d5 4c 2a 65 49 d4 2c b6 2b 91 28 04 2e 28 d4 2f 87 24 af e4 68 a8 43 29 2a 7b 94 cc e6 ae 97 15 75 67 8e f5 0e cc 00 d6 da 09 6b 69 4c 54 4b 49 3d 06 8d 06 65 9e f5 b3 00 a1 41 31 3a 44 e8 b0 62 53 ad 01 a3 42 07 45 98 bf d6 57 01 7d f5 47 4a b3 37 c8 94 5c e3 3f d5 2e f4 cd 6c 57 86 b6 f7 57 fb a7 d9 df a4 74 23 30 90 e9 ca 72 33 4e 85 12 1f 59 8e a4 fc d1 08 79 e6 07 f9 47 a3 59 6c ff 00 3b 96 9d 65 39 2b fc Data Ascii: 0h>-6\#C#dZ$VTU:vh`t#ew B$:k+Ze<zXS9LeI,+(.(/$hC){ugkiLTKI=eA1:DbSBEW}GJ7\?.lWWt#0r3NYyGYl;e9+
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: b8 e7 44 1f 12 fd 29 ff 00 74 08 db 3c 0a 2e d9 de a1 da a2 c3 f5 f7 4e e5 02 da c8 87 45 d4 77 bb ec a2 3a 71 62 11 8b 8a c6 4a 1d e5 b8 38 68 a7 7a a7 b4 3c 15 70 fe 64 6e bb 19 85 56 fc 15 32 52 9e 2a 4b 78 54 55 0a 68 12 cd 2e b3 4e c3 24 2d 76 86 dd 17 8d 57 3e 88 ee bc 36 39 6b 6c 4f eb 59 8b 49 c9 6a ac 4f ea da 4b 0f ea 5c c1 ee fb b8 ac 7a 36 5b 43 6f 82 7b aa 8b 4b 68 e0 46 f5 0e 34 48 5d 47 6f 08 5b e2 0e b4 36 9f 72 16 f8 58 b1 c3 de b9 c3 1e 3e aa d6 19 bc 7c d1 75 bc 09 b4 c3 88 33 4e b5 5a 61 f5 ec e3 bc 14 2d da 46 46 cd 0c ae 75 0a 9f b9 43 f3 dc b5 f6 5b b9 a0 e2 b5 b6 29 d6 c8 7b 8a d3 fa 3a 9f 53 10 79 de b9 bd 90 c2 d6 74 da dc cf 2c 18 2f 8e e9 34 77 e4 b9 a4 2a ca d9 0f bd 7e cf 89 4d 17 b1 db 8a 36 1b 50 f5 27 de 8d 9e 33 67 38 2e Data Ascii: D)t<.NEw:qbJ8hz<pdnV2RKxTUh.N$-vW>69klOYIjOK\z6[Co{KhF4H]Go[6rX>\|u3NZa-FFuC[){:Syt,/4w~M6P'3g8.
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: aa 70 73 7a 87 90 ab c2 19 af 10 81 92 bb 77 2f c5 79 2b e0 bc 85 f1 e4 f2 17 81 5e 4a f2 17 c5 79 28 a9 72 6d 47 3e 46 82 e7 37 40 12 72 5d 0b 10 c1 d1 cf 06 a2 4b 89 71 a9 c7 92 0c 16 96 eb 63 52 10 f7 a8 96 c8 c5 f3 86 74 5a 2e 6a e7 8c 89 ff 00 91 00 3b f5 0b d6 a2 0c 5f b8 8f 5e cb d3 e1 44 85 d7 69 1c 8c 88 f8 7d 47 96 a3 1a 0c 6f bf 85 5e db 2f 46 c7 30 5d 01 e2 23 7f ec 9b 0d cf 88 d8 72 93 a6 ad 6e 1d 18 0c ea b3 c7 92 c9 0c 69 3a 2b fa 90 fc 53 e2 6b 1e e7 1b ca 20 5e 9b 47 20 4b 08 2d 32 70 5d 0b 73 70 6c 71 ff 00 64 44 8b 81 6c 8f 82 a6 dd aa 14 57 c1 70 7b 4e f0 ad 10 da f6 6b e1 75 3d 66 e4 53 e7 4a d3 25 42 69 39 a9 f4 69 e0 b2 53 71 bc ac 25 2f 72 01 a4 29 d5 5e a7 eb 4e b8 ab ae ee f0 57 9a 9b f3 aa 3b 8e dc 11 a9 dd f0 53 06 a5 35 f2 a7 Data Ascii: pszw/y+^Jy(rmG>F7@r]KqcRtZ.j;_^Di}Go^/F0]#rni:+Sk ^G K-2p]splqdDlWp{Nku=fSJ%Bi9iSq%/r)^NW;S5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.5	50010	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:31 UTC	626	OUT	GET /uploader/2a5cbac9076abe2e5d22faf36a87f5248a3168ee.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:32 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:32 GMT Content-Type: image/jpeg Content-Length: 69252 Connection: close x-oss-request-id: 66511B5B9979C73335D00F59 ETag: "7531EFBDEEB7AB71F8ED241D24CC3664" Last-Modified: Mon, 23 Oct 2023 02:04:22 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 16987515514608295040 x-oss-storage-class: Standard Content-Disposition: inline; filename="2218c5f51758f50e4f345f063afc885803838650_221" Content-MD5: dTHvve63q3H47SQdJMw2ZA== x-oss-server-time: 52 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:32 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e29d9cc2f7c8-BNA
2024-05-24 22:57:32 UTC	690	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 02 05 06 01 07 08 09 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: %'/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 00 00 04 52 7c 2f db c7 8e b6 7e 3a e8 b9 6a 86 75 56 5d 86 90 c9 a4 ae 7f 72 e3 16 25 e9 26 be 74 bf 02 f4 e3 ee 3e 6d 6d 63 6d ac fc fb ea f2 d4 75 cf 69 e1 e9 ce 77 bc 77 66 d7 59 eb 63 f6 ef c3 ef b1 8f 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 31 f9 f3 77 8b d5 f9 ef 5e 1c 2d f6 f5 b3 f4 39 7d 5f c6 fd f3 c5 ec e9 3e 6f dc dc 67 c7 a8 8f af ef e6 da b9 28 00 13 c8 1a 1d cf c9 ff 00 5b 87 23 e6 7d fb cb da a6 6d ac eb 55 2e c6 66 85 71 5a 9b 9d 67 2d 26 ce b5 bc f5 d0 91 e9 46 4e 68 e8 eb 5a 7c 3f ec f0 b2 7d 57 e7 f5 d5 ee 6b bb 66 81 2f b3 97 5f f3 bd 9b 5f 36 fe bd c5 f5 99 ca 4b 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 cd cf 87 f5 47 12 a6 f2 e7 51 3a 71 57 db a0 f4 f2 fb ef 83 ed f6 bd 3c 96 73 ca 0e 2e ff 00 a7 cf d8 b9 78 d6 16 Data Ascii: R\|/~:juV]r%&t>mmcmuiwwfYc@1w^-9}_>og([#}mU.fqZg-&FNhZ\|?}Wkf/__6K@GQ:qW<s.x
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 33 24 5a 69 b2 6b 9a 5e 9d 9b 8b 76 2e 14 0d 81 74 d8 44 c6 44 c4 a6 64 e7 91 94 7b 43 d0 00 00 00 0f cc d8 d5 3d f3 e2 77 bd ad 93 c9 bb ce b2 93 63 2e e2 b0 b7 cc b2 aa e9 2d 95 65 98 af 18 d9 34 51 ad 1d 68 75 9b 16 57 49 65 bb 6e 93 2e 89 bd 7c ce 17 3c e6 ee b5 95 47 a9 f4 3e 5d 27 ca 8e f3 35 93 37 14 ce 2b 92 50 9a d1 6e 73 7b 9d 5f 3b cd eb 32 31 86 b7 f4 0e 5b df e5 a2 d4 b2 6f 2a e1 6d a9 73 8e 6a eb 77 26 de b1 5e 11 7a 88 96 5e b5 9d 75 b2 c5 b5 8e 4b 36 ea b2 bf 65 fa bf 53 d9 50 c6 26 30 27 24 8c 89 96 78 db c5 f0 00 00 14 0f c8 3c b7 da f4 e5 c8 ee c3 a6 d9 52 f4 33 5b 7c ca 69 b8 35 75 ec 78 4e 95 97 28 9e 35 56 58 a8 8a a6 c5 35 52 d1 ae 6b 52 62 e1 af 2f 44 11 e6 a7 1b d3 16 b3 bb e5 4d 4d 8c de d2 4d de 5a 9b 9c ed 90 d7 4b 34 7c fb ae Data Ascii: 3$Zik^v.tDDd{C=wc.-e4QhuWIen.\|<G>]'57+Pns{_;21[o*msjw&^z^uK6eSP&0'$x<R3[\|i5uxN(5VX5RkRb/DMMMZK4\|
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: e3 5b 38 a5 9e 93 79 f7 fa 4b cb e9 fb 0f 0e f2 5c e8 53 9e de 6f 16 ab 6f 86 c2 51 ee b5 96 33 3d be 18 ae 29 0a 65 6e 32 64 b9 ae 17 30 98 19 c6 07 8a 3d 3d 49 23 dd 5f 4f 42 c4 98 19 12 a4 67 8b 16 a1 7c c3 9b 4d 61 50 a5 96 9d 2a d5 a8 db dc f3 5b 62 76 d8 ba 7b 2c 50 96 cf 66 e2 49 42 d7 3d 4f 24 8d 6b 55 14 db e7 5b f3 6e 6d ed db 1b 11 6d 13 d2 c2 6b e3 42 df 3b d7 e4 dd d7 1f d1 7e 3f b5 7e e4 01 11 fc cd fb 1e 2d 46 b3 2f 4c e5 75 99 97 3d 75 fc ba e7 27 1d d2 7b bc d6 cd c6 22 c5 fa ff 00 0e bd 2f 2d 7b 8d 7c df af 3e 23 b6 27 22 ab 99 bd e7 2e 9f 4f e7 ac 97 9e b3 e2 dd f8 d8 d5 b6 96 22 e4 bd 44 bd 87 1d f6 3c f7 d0 e5 c3 e3 e8 55 e5 ef b0 5f 96 c4 e5 6f 7e 4b dd bc db 1d f0 f5 72 92 62 65 cf 52 0b 60 8c 49 d1 6c 69 6c a3 25 03 cc d8 56 12 5c Data Ascii: [8yK\SooQ3=)en2d0==I#_OBg\|MaP*[bv{,PfIB=O$kU[nmmkB;~?~-F/Lu=u'{"/-{\|>#'".O"D<U_o~KrbeR`Ilil%V\
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: c0 e7 4e 44 e5 4e 7c d2 14 0a 07 c6 fd 18 e6 fb f2 f7 77 2b 11 92 78 d7 a7 99 99 ac 76 2b 13 d0 45 99 14 b1 72 eb 8f 36 ef cb f5 7b bf 9b fa aa bd 7c 75 bb 78 a2 e9 e2 cf a7 8e 3d f9 bd 4f 0c 8f 0c 8c c9 0c ca e6 b8 f0 cc f4 88 88 aa 56 29 94 ca 65 72 33 ca c0 f4 f6 b3 3c cb 2d 46 a2 49 5a bc b7 70 9c b2 5c 36 06 cc d9 97 cb e6 c8 dd 1b d3 6c 6c 4b e6 cc da 1b 32 f9 b3 36 64 c0 00 00 07 87 84 45 33 5c 6a cd 5d 6b 2c ab 6c 55 0b 3e 13 cb 3e 13 d4 e2 db 44 e4 c5 8c ac 97 22 d6 93 25 a5 93 34 28 9e 9e 1e 03 33 02 43 12 43 d3 13 d3 d0 00 07 a0 c0 80 ac 57 22 2a 10 96 08 8a 65 42 4a 9e 2e 97 8c 4b 26 25 c2 62 53 d3 23 c3 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: NDN\|w+xv+Er6{\|ux=OV)er3<-FIZp\6llK26dE3\j]k,lU>>D"%4(3CCW"*eBJ.K&%bS#
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: a8 73 ed 1a eb 23 3a 45 b4 b1 48 2c a5 f1 08 ae 7a 93 eb 95 16 81 ef 5d 37 88 a5 6a 54 86 65 3b 93 f5 66 83 71 56 0e b7 36 b2 25 86 e6 09 d7 e9 ff 00 4f eb 09 2c 90 ae cc b3 17 40 08 94 37 35 ce 32 33 56 d3 89 90 9a 4b 87 92 3c b9 82 de 42 4a c3 7b 1f 96 81 fe 61 35 7f d6 23 80 69 86 5e a0 97 09 8b 68 6d 19 9f 5c ce c6 2c 83 01 87 75 19 7a af 4b 92 f2 48 a4 8f a7 d8 c7 d3 56 79 1f 6f 5b 3c 91 c9 34 83 28 db 43 dd f1 ef 12 19 7d 29 30 85 b1 37 52 e9 32 5c 4a 65 85 ad e4 8d 8a 4b 65 04 90 80 f1 be 99 1b ea c6 bb 63 0f 76 df 55 be 16 ce 12 17 35 71 78 5f 2a 80 13 51 8c 3f 11 ca d1 32 ba c4 fb 88 8e 3f a6 b1 c0 cd 4d 75 ba e7 4c d6 d6 f2 b6 1e 6e 8e e3 2f 0e 6e ec db ce 1e 09 d4 bc 48 ed 1b 8a b6 92 dc a1 c2 8d 47 cb f4 e4 ce e4 57 6f 0b 85 b8 53 90 0f f2 a7 Data Ascii: s#:EH,z]7jTe;fqV6%O,@7523VK<BJ{a5#i^hm\,uzKHVyo[<4(C})07R2\JeKecvU5qx_*Q?2?MuLn/nHGWoS
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: a1 96 00 b4 d1 f3 53 bf 86 d2 8a bd 42 23 85 2f 14 26 35 98 06 62 ba 69 63 54 39 50 3b 0a 79 02 26 59 18 50 6d 5d 84 f8 38 3b de 6d 34 fb 32 1c 3b d9 da bd 48 bb 0f 24 75 65 d4 24 b7 35 14 8b 32 2b af f4 1b b7 2f 3b e3 07 82 17 5a a2 e9 05 64 c8 ad 96 5e 43 4a c3 86 5b 71 9d 69 b9 24 59 a1 fe e3 be ad 9c 02 92 ee e5 4b 5a cd 11 d7 6e c7 9f af b5 1c 9f 97 25 9c f1 0c b6 45 68 56 a2 9a 69 67 95 3f 2c 75 0b e1 4d d4 a5 6e 24 17 89 5b d6 47 d4 1e c7 db 4d 9d 6e 40 32 02 a0 63 a9 76 26 35 e1 ae 73 46 d6 f7 14 d1 5d a8 a1 bc 0e 6b 73 49 19 d3 6e 1d 8d 46 8d 3f e5 bd f4 70 8d ab 35 8c 8e 56 de 29 ae 5b 6e 38 d4 47 a9 2c f6 02 c5 a2 1d 33 80 a1 79 c2 e7 ea 77 56 97 3e 40 86 2b 48 da ea 87 d4 25 aa 04 92 69 44 75 f4 ee 0e ba d5 c7 3d f8 a3 e4 02 47 b4 c4 8f 21 17 Data Ascii: SB#/&5bicT9P;y&YPm]8;m42;H$ue$52+/;Zd^CJ[qi$YKZn%EhVig?,uMn$[GMn@2cv&5sF]ksInF?p5V)[n8G,3ywV>@+H%iDu=G!
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 1b 11 bf 34 24 29 e8 d5 bb ea 1a 63 ec 67 70 3c da 20 9c e4 3d b5 c2 73 47 c3 b1 1b a2 31 95 71 f5 b9 69 75 e8 52 5c 39 22 96 3d f6 29 1c d7 23 68 5b c5 a0 1a 0a fa 95 56 68 25 83 f3 b4 f1 51 dd cd 07 08 26 82 4e 64 d9 93 d7 08 65 3e 5a 34 13 b5 48 80 85 d7 72 c2 da 3f 0c 31 aa ad 61 0c ec ee 55 a7 67 96 4d d6 c6 99 e5 b4 f2 19 62 d5 a4 57 ab 91 05 d3 5b e5 49 54 11 89 20 1c d0 c8 1f 02 1f fe bf 15 7d 13 62 74 98 8e 68 c8 33 e6 92 2d f1 84 30 cb 6e 32 12 4e 05 05 88 6a 65 6d 60 31 48 ef 7c fa 24 68 a1 93 d6 a8 b1 e0 2c 8f 32 a8 64 8a ef 51 d0 e6 da db bd 0c 0a e6 b7 24 d4 41 33 5b ca bb 92 ae c4 8c 24 50 1b 26 94 c8 05 1e 48 ad 64 0c d6 aa 2f 4d 26 05 19 b9 c5 19 fd 4c 05 c9 5d 35 6b 74 2e 06 3f 91 d5 1b 16 a7 15 1c 94 18 15 2a 5e 01 9c 8f 33 ae 23 0f a4 Data Ascii: 4$)cgp< =sG1qiuR\9"=)#h[Vh%Q&Nde>Z4Hr?1aUgMbW[IT }bth3-0n2Njem`1H\|$h,2dQ$A3[$P&Hd/M&L]5kt.?*^3#
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: e2 b5 e3 9a fb e9 2d 9a cd 1c e7 9e 6b 02 88 ac 51 c7 bf 4d b6 dd 9f 71 ed 27 92 e3 a8 c8 d4 3f 0f 55 be 5b 69 6c e3 3c 37 7c 11 f0 fd c8 af d8 92 46 18 db db 3d 1b 25 fd 1e 0e 6f 6f 0f 71 5b 33 d6 8d 35 cd 1c d6 7e 38 ac 56 93 58 35 a5 ab 43 9a d9 9a 85 b4 e6 bc 24 d4 2c e4 af 0a d4 2c a1 fd 42 d2 d8 50 48 d3 d3 cf c0 8a 68 54 d3 db 21 ee 6d 94 1c aa 24 81 94 96 6b dd 45 9b 7a 4f d7 1d d4 10 20 72 24 8c 81 88 f6 f4 98 0b 06 56 65 74 66 8c ab a3 69 01 65 8f 18 ae d8 3f 0c fd bb 35 02 08 c5 4d e6 81 25 ae 0f 9a bd 54 87 72 d9 0d 06 1c 90 4b 73 9c 13 c5 03 e9 ae ca 71 ef 5f e6 b1 fa 68 05 fd 3c f9 73 fb 56 a0 be 6a 24 01 59 63 59 c8 c9 24 67 15 af 9c d6 a3 8a 38 19 03 27 b9 e3 df 9e 6b ed 47 ee 23 56 97 f2 96 c2 e0 fa d6 c6 05 f5 f9 21 c9 48 62 da 80 a9 b0 Data Ascii: -kQMq'?U[il<7\|F=%ooq[35~8VX5C$,,BPHhT!m$kEzO r$Vetfie?5M%TrKsq_h<sVj$YcY$g8'kG#V!Hb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.5	50003	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:31 UTC	971	OUT	POST /buyer/express/free-express HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 32 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=asics Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:31 UTC	32	OUT	Data Raw: 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 22 22 2c 22 74 6f 74 61 6c 22 3a 22 30 2e 30 30 22 7d Data Ascii: {"country_id":"","total":"0.00"}
2024-05-24 22:57:31 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:31 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:31 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:31 UTC	82	IN	Data Raw: 34 37 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 76 61 6c 22 3a 30 7d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 33 31 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 47{"code":0,"msg":"success","data":{"val":0},"now":"2024-05-25 06:57:31"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.5	50011	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:31 UTC	392	OUT	GET /uploader/19bbf7767618883b3fc56e493991a5bca17afdc6.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:31 UTC	700	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:31 GMT Content-Type: image/jpeg Content-Length: 86419 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221c9f40a2bccd958143d542a0ee12f52bb68929_221" Content-MD5: aJnZof+wvUPqNvXm1E3l0A== ETag: "6899D9A1FFB0BD43EA36F5E6D44DE5D0" Last-Modified: Mon, 23 Oct 2023 02:04:25 GMT x-oss-hash-crc64ecma: 5758243692379581958 x-oss-object-type: Normal x-oss-request-id: 66511B5AC3F2453431528223 x-oss-server-time: 70 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:31 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e29e1cfef7c4-BNA
2024-05-24 22:57:31 UTC	669	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 01 08 09 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: ab cb 66 4b 76 c6 31 91 7b 5c af 6d 98 de 3a 4f cb 7d 03 ee eb da 79 df 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8d 1f 9a 3d 3a 73 8e 98 8b 03 39 ea e7 b3 fa 19 8e d2 4b 37 f7 68 b2 f4 6d de 4b f5 4f ce e9 d0 f9 0a 00 16 4e 47 e8 9f 2a f7 72 7e 6d d1 73 b9 47 cd c3 a4 7b 61 56 b7 10 71 72 18 4d 92 5a cb a9 47 92 2d bc 53 65 a5 8f 24 1d 28 b3 64 cf 2d f3 c7 39 cf d3 e9 be f1 bf 58 f9 38 ec 9b e9 b5 74 dd 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 65 fc d5 e9 75 2d a3 59 55 57 25 ed 4c cf 7c ec 1e 86 6f 72 4e e3 57 c9 8b e7 4a f3 6b b7 f9 77 bc f0 b6 ac d4 7a b9 27 69 c1 34 d2 f8 dc ee 2e d5 6e 2a 31 d8 63 d6 1d 62 4b 78 b7 31 32 91 20 c9 97 ea e4 be d6 5d 25 ea 55 9d 43 22 a4 15 8e 52 63 3c dc b3 39 e7 4f b3 d1 9f f5 73 d6 38 e3 b8 7c fc Data Ascii: fKv1{\m:O}y@=:s9K7hmKONGr~msG{aVqrMZG-Se$(d-9X8t@eu-YUW%L\|orNWJkwz'i4.n1cbKx12 ]%UC"Rc<9Os8\|
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 2d 40 00 00 00 03 84 76 c7 c5 de ee 31 f5 88 b2 fb 51 a2 1f 3d 41 e1 d7 1b 8d ca de 72 1a c5 ed 3c 6a de 6c 8d 45 89 69 24 c5 ce 5b c4 e2 d7 8b 9c 5b d2 4e a9 de fe 32 fd 1c fa 77 9b 56 3c 7d 39 ff 00 67 35 ea d8 e4 ec dc 57 f0 d6 7d 13 77 e1 ae 23 e9 ce 8b a9 b5 f3 d7 55 23 71 b6 fa 34 fb 60 26 d0 62 75 60 eb 3d 3b 2c a6 37 c3 3a 73 fa fb cd bf 92 bd bc b3 5e 5e 10 37 ae 81 f3 91 7d 57 15 e6 c6 c8 b0 fd 3b e4 de c9 6b ab 3d e5 dc 2e d2 22 e6 f9 e6 4f 3b 93 f3 f3 e8 5e 3b 80 c4 d8 79 4d 33 d8 d8 7c ec 5e ee 47 9b 50 fa 37 70 f3 67 47 f5 6a fc c5 d5 c7 7a 37 95 c4 b3 ea de ce bd 0b 8e f7 ef 2d df 1d 37 b8 f4 00 00 3e 78 f4 73 f8 e3 db c6 ad 4b 04 73 d2 26 75 8f c5 97 c3 ae bb 2f 89 72 26 69 2b a4 bb 21 64 46 57 3a b5 8b af f3 d4 fc d9 a5 e3 37 ac 43 f7 70 Data Ascii: -@v1Q=Ar<jlEi$[[N2wV<}9g5W}w#U#q4`&bu`=;,7:s^^7}W;k=."O;^;yM3\|^GP7pgGjz7-7>xsKs&u/r&i+!dFW:7Cp
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 56 ac 9a a5 ba e5 9a d5 98 1d 4c 1d 60 2b 0e b1 ac a9 6e d8 5f 53 db 9a 85 78 b4 4b 16 2d 18 fc 2e f3 d4 98 bf d6 77 ed 4d 72 d9 b6 60 e5 dc 30 e4 f8 e5 2f 9a ee 33 8f e9 36 6e 17 1f ac 61 bb ef 3b c5 1a e6 17 5b b8 e2 e4 bd 1d 78 67 59 51 14 fa 67 85 e4 5e 8e 5a e7 66 63 96 b1 da ce e3 e6 68 3e 96 c5 e7 6e b3 59 a6 b8 2f a6 67 a5 ea d9 bd 07 0e 01 df 96 b7 da 67 fc cd 7f ad 6e e4 bc d1 ad 62 bd 19 ab 33 37 ca e4 fc f9 b7 6d ae 1d 70 19 ed 08 8e 91 d6 d9 68 b6 b4 33 e2 d1 1e a7 8b ec 56 6c 9d b1 f6 3e 2f d4 b8 01 a0 2e bb ab 22 ae c5 d2 f9 78 92 5e ab f1 21 2e 2c 54 c5 98 24 c1 9a e5 69 fa 9a 85 6b 3a 91 ed c0 7a 65 fd 26 62 e5 e3 70 e7 71 47 2c d9 65 35 31 72 31 3e b5 9c e7 09 e7 ce 63 cb 88 9b d4 dd 62 e3 56 b1 ce 4f 6d ec 3e 5c e0 7b ba 9e fb f0 9f 4c Data Ascii: VL`+n_SxK-.wMr`0/36na;[xgYQg^Zfch>nY/ggnb37mph3Vl>/."x^!.,T$ik:ze&bpqG,e51r1>cbVOm>\{L
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: db 92 c5 c3 fa ae cf e4 66 78 db f9 b7 39 2e e6 dc ca 56 51 a0 b2 12 93 25 17 0a 2d c5 67 3c 4e cd 0b 4c dc d7 28 b9 db 6c fa d3 0e 9b 80 00 0e 7e b4 5b 51 70 f4 95 5a e7 e4 ba 6b df 82 f5 e1 be 65 b9 f4 39 65 be 9e 2e d9 23 a2 b9 6f 77 92 7e 9e 64 fd 39 8a f9 5a c1 fe 2b be 3e dc 97 d5 e7 99 fb 5c f2 5f 42 5a c2 36 2f be 8c e6 7e e6 67 7d 49 16 d4 95 d5 1f 9d 5a fc 86 69 fc 8c a3 e4 6a bf 5c b9 fa 27 bf 7d 57 e8 6d df d1 d7 65 c6 6b b6 dc 59 8a 6c aa 5c 56 9a df 79 a8 10 c8 5a 9a df 66 b9 de 60 35 75 fe f9 8d ab b2 62 63 3b 5c f6 64 ae d7 60 c3 2d 96 53 0c ae 2e 5f 95 cf 73 99 2e 3a 9d c9 27 9a f4 b7 33 6b 49 59 5c 24 15 94 18 89 38 8e e7 1e e9 8e 53 ac dd eb cb 2c d7 de 3f 3f d1 d7 d2 f8 00 00 0d 1b e6 ac 7d 3b 5d b5 a7 b2 d7 57 4c 07 e5 3b 6b bf 92 ed Data Ascii: fx9.VQ%-g<NL(l~[QpZke9e.#ow~d9Z+>\_BZ6/~g}IZij\'}WmekYl\VyZf`5ubc;\d`-S._s.:'3kIY\$8S,??};]WL;k
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 48 10 00 02 01 03 02 03 05 04 07 06 05 01 08 01 05 00 01 02 03 00 04 11 12 13 05 21 31 14 22 32 41 51 23 42 52 61 06 10 15 33 53 71 81 16 20 24 43 54 62 30 34 40 50 91 44 25 60 64 72 82 92 a1 d1 63 83 90 a0 b1 c1 ff da 00 08 01 01 00 01 12 02 ff 00 f8 16 33 aa 29 66 60 00 ea 4f 17 e1 e0 e3 7e a1 9e 09 c6 63 95 5b fe ee 71 9b bd d9 f6 43 77 16 8f 9f c9 aa 37 64 7c ab 15 3c 8e 60 bf 43 6f 6b 23 9d 5b 80 02 ff 00 f7 67 89 dd 76 4b 47 60 7b cd dd 5a ce ac ff 00 c5 11 9c 7e 45 a9 b2 72 7e 22 4d 47 3c b6 e5 da 27 23 aa e2 d3 8c c6 8c c2 45 d0 73 e2 8a 74 95 43 29 1c ff 00 ee c7 1e b8 dc b8 11 2f 86 31 59 ac f5 f9 9a e9 cf e1 c0 a5 46 ee 67 a0 c6 68 00 02 e6 4e 79 04 d5 bd cb db 1f 65 71 8f 51 67 c6 63 94 84 9b 08 d5 90 Data Ascii: H!1"2AQ#BRa3Sq $CTb04@PD%`drc3)f`O~c[qCw7d\|<`Cok#[gvKG`{Z~Er~"MG<'#EstC)/1YFghNyeqQgc
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 10 7a 7f b7 48 db 68 ec 7d d5 26 ae 64 2e ec 4f 52 68 d6 2b 25 69 65 a1 26 71 5a bd 28 1a cf d5 9f 77 aa 9f 2b 4b db 9b 2c 6c b6 b8 ff 00 0a cf 8a da 5d f7 43 68 97 e0 fd e6 65 51 96 20 0a b9 e3 76 90 f2 43 b8 d5 7d c6 a7 b8 ca 96 ee fc 21 65 9b 99 e4 a2 a2 86 34 e8 01 cd 16 d2 32 4b 7c eb bc 43 69 8d 48 f5 27 53 73 eb 8a 1b 60 67 50 02 bb 48 8b fc b8 d3 fd e5 d8 9c 9e b5 9a 04 0e 89 ff 00 a8 6a 6e 75 a4 7a 8a ca 28 c7 33 e9 59 93 1c bb a2 82 1c 67 95 10 83 91 ef 11 59 23 c8 0a f6 8f cf 9e 28 a1 c7 36 1f 3a 22 3e 59 34 54 1f 5e 74 00 1f f1 56 7a c4 af b1 28 52 91 4a d9 79 20 54 c4 57 1b 51 e9 95 e2 8a 31 dd c8 38 eb 56 37 b7 36 c0 ed 4d 9e bc ad b8 83 34 7f c5 43 b3 27 a7 6e b4 f3 97 1c f1 40 82 32 0f fb 5f 12 38 b1 b9 39 c7 76 a5 6e b4 7e ac d7 2a 04 8a Data Ascii: zHh}&d.ORh+%ie&qZ(w+K,l]CheQ vC}!e42K\|CiH'Ss`gPHjnuz(3YgY#(6:">Y4T^tVz(RJy TWQ18V76M4C'n@2_89vn~*
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: e4 21 2c f1 0b 55 6d ed 79 4a 4b 4e cf cf 88 4e d2 c9 2b ee 2d ad cc 77 37 43 db c8 90 db 28 e7 15 c7 14 8a 25 31 d9 47 8e 58 dd b2 b5 bf bd 71 b3 ab 03 df 7b c8 6c ad 9a d5 ae da ea 46 ee 13 a9 24 8f 70 ca aa ab a5 0c 4d 35 b2 f6 85 5d 52 74 da 7e d6 39 fb 3c 56 1d bb c3 56 92 fc 8a 28 e4 75 0c 16 07 29 1c 40 ab e3 9e 7a e7 92 9c 0e 46 82 b6 3a 79 d1 89 7d 3a f5 a6 81 0a 60 0a b5 bc 9a d9 d9 42 e7 71 74 d1 da 37 0d 1a a1 d2 17 04 1c 0c b0 f4 ab 39 76 6e 52 6d 66 3c 72 ab ae 3b 7d 22 7f 0d 12 c6 00 ef 55 8f 1b bb 69 11 1a 4d 7a c8 00 a7 13 6d 1a d9 3b bc c9 a0 43 00 41 e4 7a 7f ae e3 d6 57 22 e2 4b 90 9a a2 38 e6 7e b5 3e a9 91 5c b1 9c d6 31 d4 52 48 e9 cd 58 8a ed cc e3 4d c4 4b 2a d6 d5 84 9c e2 99 e0 7f 49 6c ee 80 2c 62 5b 84 f8 f4 c4 7d e2 b5 d9 e4 Data Ascii: !,UmyJKNN+-w7C(%1GXq{lF$pM5]Rt~9<VV(u)@zF:y}:`Bqt79vnRmf<r;}"UiMzm;CAzW"K8~>\1RHXMK*Il,b[}
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: aa cd 70 5d 19 33 95 b9 28 90 18 a2 54 92 37 2d b8 05 e5 eb c8 a8 0b 6b 26 52 12 da 3d 16 f2 4b 72 36 9d 8a 93 61 63 6d 79 26 da eb 76 59 7b ed 28 6b b9 11 22 4d 36 b0 72 8e b8 94 c7 70 c1 9e ea 1e f5 70 8b 34 62 f7 93 fd cc 3c eb 89 dc bd dd c1 76 6e ee 06 8a 84 70 c6 4c 4e d7 01 e9 e3 8a 49 b6 e2 9f 21 8f 26 8b 84 dd 4f bc 23 d9 25 58 a9 12 ad d5 93 ce 8d ae 23 82 18 36 3b dd e1 81 c8 56 61 d3 38 78 d8 bf 2d 0c d7 79 33 ed c3 12 2c 81 41 09 da a4 c1 09 94 32 05 d4 c0 46 1f 71 d5 5d 66 d2 c9 ae 3c af 7c 75 ae 9a 33 d3 bd de dd 88 6d b6 a0 41 c8 a8 e5 2d b9 ae df 75 76 f1 57 4d 71 a9 4c b2 a3 9d ae eb c9 3c d2 b4 ac f2 b3 13 a7 51 8d 5d db 42 a3 96 d5 d0 c0 c2 07 2f 6b 20 68 db 0c f6 47 45 c0 2e 63 5e 58 a9 fe ea 25 d4 9a a1 25 2a c2 f6 ed 77 22 5b 82 3b Data Ascii: p]3(T7-k&R=Kr6acmy&vY{(k"M6rpp4b<vnpLNI!&O#%X#6;Va8x-y3,A2Fq]f<\|u3mA-uvWMqL<Q]B/k hGE.c^X%%*w"[;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.5	50012	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:31 UTC	392	OUT	GET /uploader/456a5aa4d010296d9e4e2a5ae84678acf1e7f8a6.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:31 UTC	702	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:31 GMT Content-Type: image/jpeg Content-Length: 83359 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2214a34805491216f2891c3c805114f2b9683657_221" Content-MD5: fwX56YZktLsodxZ4gaTguA== ETag: "7F05F9E98664B4BB2877167881A4E0B8" Last-Modified: Mon, 23 Oct 2023 02:04:28 GMT x-oss-hash-crc64ecma: 17467275436928063297 x-oss-object-type: Normal x-oss-request-id: 66511B5A91795F3235005BD4 x-oss-server-time: 107 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:31 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e29e4f0ef7e4-BNA
2024-05-24 22:57:31 UTC	667	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 01 08 09 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: e8 65 f9 dd 3e 3b 7e 1f 4f 70 d6 e5 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 7e 77 7b 1c c9 9c bd b1 64 a0 89 d2 65 ab 26 52 b9 7d 2e 6f 1b 8e 9d 37 94 e8 9e 7d ee 1c ec fc 59 91 8c d4 c6 69 ce 35 78 4f 6c f3 2e b2 07 56 45 9b 5c ee d1 e3 e9 9d e1 70 55 ee da 9f 7c e3 12 3e a7 96 ed de 75 3e 89 ec 94 ea c5 b9 8b c7 a5 c9 2c 66 ef bd 24 96 74 66 f6 fc cf 2d fa 1f 9b e8 ff 00 3e 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 71 2e 8f 82 bd 12 ee 64 fa c9 1e 25 0b ad af 52 c3 4a eb 23 f4 99 44 bf d9 e6 cb 1a 5e ca 98 89 1e 69 6e ae 4c c5 69 93 93 6d f0 f4 c4 18 0e b2 0e a5 3d 9e c5 5a cd be 77 71 e7 a8 f2 dd b2 05 cd 7a b0 32 c4 15 62 ed 19 66 fb cc 7f 2b ac f2 b9 bd a3 c7 41 f4 e7 e8 5f 1e f2 1c dd 7c 9c 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: e>;~OpP~w{de&R}.o7}Yi5xOl.VE\pU\|>u>,f$tf->q.d%RJ#D^inLim=Zwqz2bf+A_\|
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: aa 59 89 86 9e d4 b2 ac dd c7 96 ae c5 b3 4d b1 65 cb 37 1c ea 49 cf 3a e7 cd 46 95 15 db 9a cc dc fc fb a7 4d 2b ae 6e 1e c7 46 e5 ac 7f 5c f3 8e aa ac bb a5 9a 92 5c d2 e6 64 4c 6a f6 96 2c 91 57 77 25 cb 1b 8b 2d d6 5a da d7 5c e4 38 ea ae d9 87 8b 27 b4 c8 59 51 17 52 9c 55 4a 93 2b 2f 42 e1 77 fe 3a e9 1e 6b d1 38 ea 4e 68 00 00 00 8a 7e 5d 6b 5a 8e 73 04 e8 0b b3 74 9a f7 59 86 ac 69 71 2f e6 e7 a2 9d a7 a6 53 36 ff 00 2b 02 58 e6 b9 75 ae 66 4c aa 0b 2d 6d 19 98 04 87 bc d7 a4 ab 9b 1a b1 8f 73 3c db 76 e5 ac ce 1a 36 d4 93 19 81 75 b7 66 64 73 75 7e d9 d6 76 b9 ac de 9a ae 4e 91 c7 7a 7e a4 2d 3a 66 2e 9d bc c1 d2 6f 3b bd db a2 f6 ce 02 e7 db 7c d2 f9 e6 15 17 25 87 bc c9 b7 21 d1 47 24 af 42 c7 39 2b 73 cd 59 96 7b 8b 7f aa 36 e4 8e 4a 23 c5 89 Data Ascii: YMe7I:FM+nF\\dLj,Ww%-Z\8'YQRUJ+/Bw:k8Nh~]kZstYiq/S6+XufL-ms<v6ufdsu~vNz~-:f.o;\|%!G$B9+sY{6J#
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 97 35 73 a2 76 33 3c 14 a9 58 74 ee 5a d0 6c ab 77 a1 f3 72 ef 4e 2f db 7f 73 dc 96 8b 57 35 ad 45 bd 2f 65 64 a2 2c e5 1e 4b 32 f9 8b 56 a5 11 4e 53 74 c9 d6 43 49 fa 5b b2 89 6f 66 fd 29 f9 af e9 b3 bc 9f a3 fa 87 f4 7f c5 6f 6b 98 1f 30 fb 39 7c 89 f4 bc f1 b3 a8 5c 7a c8 e6 c3 72 65 31 b9 64 2d 2b d6 72 3c f7 8e 2d 27 a9 11 76 ee 77 5d eb 33 19 b8 cb 2f 4b 99 ca 25 95 5b 14 b2 b2 2b 23 c9 8a ea 99 15 15 1e 12 22 f4 59 ac 8e 6d 8d 31 5a 45 36 3c b1 e9 6b a4 85 95 ac dc 96 51 32 b1 50 f4 8b 15 cb b4 61 a1 e8 d4 f6 c5 78 55 1d 2f 9e b5 ba b7 6c d8 c8 9a 47 6c 5c 3c d3 d8 a3 2a aa 95 f0 a5 29 4f 12 89 aa 24 55 f8 dd f3 67 75 c4 da c9 5d 6f dc 6f 1a eb 9c 37 4c ee 5c b5 ab fa 79 e3 fc fd 3a 77 c7 fd 8f 7e f9 1f b6 dc 7d 5f 99 ec bf 67 f0 40 72 be f8 fc f9 Data Ascii: 5sv3<XtZlwrN/sW5E/ed,K2VNStCI[of)ok09\|\zre1d-+r<-'vw]3/K%[+#"Ym1ZE6<kQ2PaxU/lGl\<*)O$Ugu]oo7L\y:w~}_g@r
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 28 29 2e 1e e9 54 78 13 c8 a5 6b 69 66 46 aa b6 e8 d6 6e 67 30 2e ac 59 95 49 5c ae 6f 9e f4 9d 4f 6c 9d 2c 72 7d b9 ce 7a ca c9 cd 7b 67 30 90 32 b1 ab 54 bd 1f cd e8 c9 5e 78 49 d7 a8 fc 4f e8 fb 3f 8f f4 35 f2 ef 91 f4 7c fd cb d7 f9 ae c9 f5 ff 00 01 7e e0 00 00 00 00 00 83 8f 47 1c f9 5f d0 74 4f 1f e9 34 2f 5f c4 d4 bd ff 00 0b 97 7d 3f c6 57 ac d7 a5 9b 9f 6c b1 21 6b ab 7c db 7d e7 94 de 29 c4 f7 76 ce 6d c6 d1 a5 6b 51 a5 92 5b 8a 42 c5 ca a5 bb ac d1 2d 2b 44 cd 2d f8 c2 6b d8 a7 59 a4 a6 2a 5a b4 55 72 4a ca d6 af 8b ed 12 9c db ba be ef 9d d6 a4 27 95 2a ee ef 9f d1 b2 78 7e 8d f7 7c 35 f3 c5 f6 7c 99 7e 4f af b4 f9 be b4 8e 7d 64 67 ae bb e8 f9 da ef d2 fc e7 43 f8 9f bd d9 bc 9f 63 37 cf d7 99 e5 eb d0 f5 c7 6d fb bf cb ba c7 93 ed 79 cf d9 Data Ascii: ().TxkifFng0.YI\oOl,r}z{g02T^xIO?5\|~G_tO4/_}?Wl!k\|})vmkQ[B-+D-kYZUrJ'x~\|5\|~O}dgCc7my
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 51 ac b2 30 8d 57 a4 5d 9c 77 3e 57 af 86 e9 77 03 f4 e4 8e 58 b1 b0 e4 fb 61 b3 10 b2 ac d2 1d c0 12 33 06 72 a5 66 ee 11 8b 2b df 4b 3b 2d 03 91 9f f8 87 59 b8 f4 f6 4f 89 8e d1 c5 50 74 dc 46 25 bc 93 a8 88 d4 c3 66 5e 62 7d cd b1 e6 bb b2 a9 a8 25 b8 23 de 64 82 22 fa 09 36 26 2a 92 43 12 04 69 66 69 70 b5 68 bd 88 1a 6a 50 63 52 82 dd d5 e1 8c 8f eb 13 de 43 06 73 37 53 94 92 10 cb 23 1c d4 37 32 2f 22 da e0 4c 3f d1 fe d2 ca cf 34 16 eb 1a c3 d3 92 27 b9 9a e2 5b 97 62 d9 51 9c 45 04 b2 e4 8d 2d 40 d9 93 d3 6e 72 27 96 54 ed d3 a4 30 b0 8e f5 ef 1c a8 48 e3 b5 ee af 1e 92 61 26 8e f8 8f da f7 0e f0 6d b0 ba 96 3c 76 ed 3f 68 6e ed 9f b7 77 69 7d 6d 78 b9 8b fa a3 38 45 2c d7 5d 46 46 3a c3 96 e3 0b f6 09 9f 14 1f 1e 60 9b 0c a4 47 20 75 0c 3f d0 12 Data Ascii: Q0W]w>WwXa3rf+K;-YOPtF%f^b}%#d"6&*CifiphjPcRCs7S#72/"L?4'[bQE-@nr'T0Ha&m<v?hnwi}mx8E,]FF:`G u?
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: fe d9 0a f7 63 e7 b0 c9 48 3e ca c7 9a 86 3e e1 6c 90 91 32 bc 90 98 e5 01 63 32 cf 23 fb ca c5 23 e6 a1 c8 d4 1b 7b fb 88 10 08 ec 7a bd bd db 76 cf f4 8f da 29 f1 12 c4 31 9a 6e 47 2c 4a 93 48 eb 41 14 d7 70 c2 bc e2 39 32 55 22 30 8d e3 ee 2c a2 84 1a 03 24 62 ed 64 c0 92 5b 48 5c a9 49 6c ee 21 f3 dc 20 f2 a1 87 31 8e a5 73 ff 00 d3 bd 65 37 d4 20 b5 97 f4 5f a7 cf 90 52 48 25 4f 2c 18 70 7d b8 ac f0 d9 22 3c 57 b9 68 9f f7 6c 0e 75 d8 6b 8a 07 c5 64 d1 ae 2b 15 ed c7 38 e2 bc 66 85 5b db 49 70 70 86 68 6d 7d b6 e5 fb 8c 59 ac 5a ec 38 48 af 45 b1 7f cb 2f c5 33 e7 8a 45 dc 84 05 b0 b8 0f 1f 7a 0f 6e 84 be a2 15 74 51 ba cb e6 a4 7c c4 59 04 91 3b b9 59 63 63 24 2f 17 7a e1 b5 ab 4e ad 73 1f b5 e0 ea 6a c7 49 9a 58 a3 19 75 be b2 27 00 10 7c 7f 42 eb Data Ascii: cH>>l2c2##{zv)1nG,JHAp92U"0,$bd[H\Il! 1se7 _RH%O,p}"<Whlukd+8f[Ipphm}YZ8HE/3EzntQ\|Y;Ycc$/zNsjIXu'\|B
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 97 f3 56 f6 ef 3e 40 92 e6 34 4e c5 a2 5f dd c6 7d 83 a9 4a df ab de e9 cf fa 82 de d1 b3 e9 e6 b1 ba 8f 97 dc 56 07 24 1f 76 33 92 bc 1e 98 a4 2d cc 90 3a 3c 64 a4 84 72 d4 59 78 0a 59 9c 00 cb e0 56 af ab 35 7f 81 c9 22 97 44 18 66 97 b6 bd ba 47 d4 fb 16 ee 65 5a 37 32 33 6c 49 62 c4 9c 9c f2 1f 0a 0d 16 0a c4 39 45 f2 83 70 be e0 71 a8 03 07 c1 52 41 07 63 b1 34 2e 19 79 09 d4 2e a3 e5 53 ae 5d 03 c4 5d 7c ff 00 f5 8f ad 59 b7 d5 1d d5 b4 98 d7 3f e8 3f 69 2e 83 ce 90 d4 43 92 e6 cb a9 5c 58 cb 24 91 5f 84 bc 3e b2 21 c7 2a 47 9c f1 5c e3 95 ed 73 ba 4e c8 ba 2e 18 fd 4a f0 60 a8 ec e4 30 0a c6 1f c9 6d 0c be 7b 9d a2 22 a2 bb 9f 70 94 b7 b2 36 b5 93 5f cd 74 b5 89 b5 96 0f 93 a8 57 66 93 a3 4a c5 9a 43 d3 c1 5e d3 40 84 16 0d 10 14 54 af 93 e4 8f 80 Data Ascii: V>@4N_}JV$v3-:<drYxYV5"DfGeZ723lIb9EpqRAc4.y.S]]\|Y??i.C\X$_>!*G\sN.J`0m{"p6_tWfJC^@T
2024-05-24 22:57:31 UTC	1369	IN	Data Raw: 5b 58 cd 6b 72 f2 98 f5 d4 d0 77 1e 66 bb 79 94 27 e2 1e 45 47 7c b2 a0 8e f6 5b 4d 13 bd 1e 2a 39 24 81 d5 e3 91 de 77 69 24 22 8a fa 1b 5d 8f c3 fc 7c 12 47 89 d5 d2 40 97 c9 de 88 2d 79 f1 04 eb 1a b5 bc f7 10 cb 69 21 89 cd 29 00 d1 f4 da 64 ff 00 8a f7 fb e9 25 fb 10 fc 7b 99 47 20 7b 59 8d 76 67 0d b2 8a e3 1c 7f 7a 3a 05 0d 5a f8 cf 14 32 39 a3 9f 75 7d da b9 3c 57 fd 7c 3c d7 da 8d 67 e1 c5 59 48 f1 dd db 11 61 21 de 54 fc 7d 66 5e f5 ec ac 10 85 57 05 4e 2b 3e c0 2a 36 d1 c1 a6 9b 7f a9 a1 4d 77 5b 41 73 03 7a 98 1d ce 91 44 f7 d6 2b 6c b1 4b 1f e0 95 ac 3d 0c 41 0f 15 62 f6 c9 70 ad 73 33 c7 dd 9b b3 47 e0 ae 46 c1 6a e1 7a 74 36 58 83 e3 b2 e9 8a dc 7b 29 b5 db db 9a b6 82 5b a9 3b 71 cc 93 da b4 d6 d2 4c 15 9b 65 f1 59 18 c7 c3 ef 5c 0a c7 90 Data Ascii: [Xkrwfy'EG\|[M9$wi$"]\|G@-yi!)d%{G {Yvgz:Z29u}<W\|<gYHa!T}f^WN+>6Mw[AszD+lK=Abps3GFjzt6X{)[;qLeY\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.5	50007	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:31 UTC	600	OUT	GET /buyer/cart HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:31 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:31 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:31 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:31 UTC	1213	IN	Data Raw: 34 62 31 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 65 78 70 72 65 73 73 22 3a 7b 22 68 61 73 5f 69 6e 73 75 72 61 6e 63 65 22 3a 22 30 22 2c 22 69 6e 73 75 72 61 6e 63 65 5f 73 65 6c 65 63 74 22 3a 22 30 22 2c 22 69 73 5f 6d 61 74 63 68 22 3a 30 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 73 65 6c 65 63 74 65 64 22 3a 30 2c 22 6c 69 73 74 22 3a 5b 5d 7d 2c 22 63 61 72 74 22 3a 7b 22 74 79 70 65 22 3a 22 22 2c 22 74 6f 6b 65 6e 22 3a 22 37 64 32 31 38 38 39 64 31 39 34 38 64 35 39 61 35 32 34 30 65 63 34 38 38 30 38 33 32 39 64 66 22 2c 22 77 65 69 67 68 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f 61 6d 6f 75 6e 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f Data Ascii: 4b1{"code":0,"msg":"success","data":{"express":{"has_insurance":"0","insurance_select":"0","is_match":0,"error_code":0,"selected":0,"list":[]},"cart":{"type":"","token":"7d21889d1948d59a5240ec48808329df","weight":"0.00","product_amount":"0.00","product_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.5	50015	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:32 UTC	472	OUT	GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-2f86" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:32 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:32 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-2f86" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367933 Expires: Sat, 25 May 2024 02:57:32 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2a11bbdf7dc-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.5	50013	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:32 UTC	626	OUT	GET /uploader/d366d0c225e24136fa296c2234a0370b45369592.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:32 UTC	678	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:32 GMT Content-Type: image/jpeg Content-Length: 64887 Connection: close x-oss-request-id: 66511B5CCB42C437376D9E47 ETag: "0608A8539B3D9DA1C2CD17E41E564175" Last-Modified: Mon, 23 Oct 2023 02:04:20 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 5727388435986984569 x-oss-storage-class: Standard Content-Disposition: inline; filename="221dea075dd1ba173bbd85312ffdcb6429176228_221" Content-MD5: BgioU5s9naHCzRfkHlZBdQ== x-oss-server-time: 55 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:32 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a11fbcf7e0-BNA
2024-05-24 22:57:32 UTC	691	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 08 09 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 83 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 6a 5a 9a 76 b3 69 2f a2 67 59 a5 00 00 00 00 00 Data Ascii: '/9339GDG]]}C) )/'%'/9339GDG]]},jZvi/gY
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: db ec a6 36 1d 3d 8b 5a 94 4a 59 09 e6 9a e3 9a 67 5e 9d 36 b6 e2 31 23 5c 71 d9 d8 ed 52 25 a3 cd ac 6b 36 a5 9e a5 1f 3d 55 67 50 e5 db 75 9f 46 de 6b cc cb 36 6b 09 e7 ec c9 92 d4 b6 97 29 27 9f 5f af 38 f4 db 75 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1f 0b f4 d7 93 6f 9c 0c df 4e cf 6a 4b 34 d9 29 ee 3d 83 6f 44 9b 8d 5a a6 b8 f6 bc 75 19 75 b9 d3 6b b9 ed 79 ad a8 c6 cd 5b ef 97 26 74 85 35 56 b8 ea cb 53 bd 9d d3 a2 f6 96 5e 6c 89 ad 46 2c 98 b8 96 c0 98 bd a3 3f 9b dd f4 b6 2f ab 75 f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 2b c6 b6 f1 3e b6 46 55 11 d9 77 ec ee 34 d7 cd ee 30 35 3d 5f 4f 49 9d 2b ae 74 fd f0 ab bc bb a7 63 aa e3 39 c6 e7 5d d7 6b 97 74 e5 72 a4 83 99 69 5a c5 2e 0a c5 18 d3 b9 da cb db 33 Data Ascii: 6=ZJYg^61#\qR%k6=UgPuFk6k)'_8uoNjK4)=oDZuuky[&t5VS^lF,?/u(+>FUw405=_OI+tc9]ktriZ.3
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 4a f4 a8 92 46 b3 63 79 6b d2 c9 36 4b 24 6a 77 96 a3 2f 63 9b fa 36 6b a1 ae 59 b0 c6 eb ce cc 00 00 00 00 00 00 00 00 00 00 00 00 38 3c df 78 f0 6e dc f4 0a d6 71 d2 44 df a3 dd d9 4b a5 5c eb 84 c9 79 8d eb 4a e7 3a b5 f4 27 4a 9b ce aa f3 e2 c9 52 56 26 23 be b3 03 3b d9 39 fb 35 f6 ac 92 71 5b 9c d2 f9 fd 7b 17 8b df b1 70 f6 43 e7 b8 1d 39 d4 7a 7c 3b 17 0f 6d bf 5f 2e a1 f4 3e 45 0f 5c 6e bf 37 ec 4e e7 d3 45 fa bf 0e ab 6a c6 6b 96 2a 61 8b 9d 72 ac 67 b1 b0 d9 26 ab 4c b9 d7 d3 b3 5e a5 2c 43 5d d2 eb 29 99 de 3c 6f d0 6f 10 00 00 00 00 00 00 00 00 00 00 03 82 bc f2 6d f4 f2 6e b9 87 2e 49 d6 cf 3a d6 2e 7c bd cb d3 b4 b0 6a 91 98 f6 5c e7 5a d3 36 9b f3 eb d3 7b 66 7a d7 ee 5f b8 f6 66 0d 91 0a f2 7f 3d f6 f2 fd 0d 57 d3 c3 66 6f 22 e6 31 47 7a Data Ascii: JFcyk6K$jw/c6kY8<xnqDK\yJ:'JRV&#;95q[{pC9z\|;m_.>E\n7NEjk*arg&L^,C])<oomn.I:.\|j\Z6{fz_f=Wfo"1Gz
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 5e ab 24 94 53 4d ca 59 32 2c a5 5d 8a 4c 29 8f 56 f7 33 b9 ac 2f 72 42 57 ac d3 35 cd 4c d5 1d 96 29 53 64 34 ca b5 a4 f2 98 ef 25 49 26 dc 89 94 bc 6a 33 3d bc be 9b 6f 8b fa 49 7b e3 e7 5f 6b f3 78 fb 71 dd fe 67 d9 9d e4 fa 14 9d 3c f1 fb 71 d8 fc fe 9f 3c fa ff 00 9f ac ed ca 04 63 ac 1c fa 65 f1 fa bd 3f c7 f4 2d 77 8c 71 b9 72 eb 3b d5 e5 f5 af a7 f1 a3 ea 57 d9 67 cb a6 81 8f 46 bf 9e ba a7 97 d9 8f 1e 99 ba c5 17 1e f3 f9 ee 6e b3 6b ae 73 fa 72 89 ec f1 d2 7a fc 9a 8c e1 e8 53 8f d6 bc f6 00 00 00 00 00 79 d6 b3 f2 df a3 95 f7 3f 6c c9 b8 67 04 99 bd aa 6b b3 3a d2 ac b8 97 b2 55 99 4b a8 81 a9 3e 5e f6 69 93 52 59 96 b5 c6 cc 41 67 5b 6f 2a 4f b3 5a b2 39 8c ee 42 48 49 dc ce d6 46 7a 19 d6 26 66 c1 f0 ff 00 4b 65 cf a6 91 f4 fe 2c ef 7f ce cc Data Ascii: ^$SMY2,]L)V3/rBW5L)Sd4%I&j3=oI{_kxqg<q<ce?-wqr;WgFnksrzSy?lgk:UK>^iRYAg[o*OZ9BHIFz&fKe,
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 07 c7 7d 71 e3 d5 58 42 2f e3 4d d6 79 b3 25 99 6a 54 99 a2 61 2d 64 92 8c e2 ce ed 73 35 86 6f 3c e9 61 9d c5 ba 9d 35 8e a4 26 69 30 55 39 21 70 24 b5 c8 44 4c a5 29 70 54 91 e6 6d be 1f e9 6e 79 7a 68 fd bf 2a 77 d4 f8 f8 16 21 4f 1b 17 83 d5 ee 7f 2f eb d6 ac 4f 77 8a f3 97 48 bc 3b d7 7d 7f 95 83 d9 c3 2e 75 e7 de 6e 9e 17 af 3c 99 27 35 31 24 af 74 ea 4e d7 3f 46 de 3d 36 e3 d5 e3 d0 0e 61 40 00 00 00 00 00 00 00 00 1e 65 a9 f2 17 5c d2 49 54 46 2c ac d6 4e 75 3b 1d d9 c8 66 8c a6 53 31 96 eb b4 64 4e c6 5b 06 58 ec a9 b9 33 b6 49 d2 c5 a9 52 f1 65 6a e1 67 22 e1 07 43 a1 76 98 8a 1e 7a d9 fe 17 ea ac 2e 75 6f a7 f0 ac bd 9e 3c 11 17 97 4f 59 f9 1f 53 6e f1 7d 1d 6f d7 e4 cd eb f2 59 72 de 0f 2f ae 9b ec 7c b9 3e bf 3c a6 bc f3 c7 d7 c3 b5 e7 b0 5b Data Ascii: }qXB/My%jTa-ds5o<a5&i0U9!p$DL)pTmnyzh*w!O/OwH;}.un<'51$tN?F=6a@e\ITF,Nu;fS1dN[X3IRejg"Cvz.uo<OYSn}oYr/\|><[
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 8d 4b 4d 38 d5 ec d7 ca 4a ac 2b d2 1d 43 30 18 cc 69 ca f0 75 8c 66 12 2a e1 25 24 93 b9 78 4c 48 c5 85 2b 88 c2 ba fe 6c 54 8f 17 ba 5e 4b 84 c5 1e 86 be a9 97 b2 17 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 46 2b 2a a4 a6 aa 82 9a aa 52 a5 2b 6a 01 14 8e 63 5e 0e 50 70 47 88 e4 52 29 8c e5 7b 99 8e e6 43 31 2e a6 92 62 c5 2c 16 d6 36 49 7d 02 37 33 b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3a 98 88 e4 72 31 16 a1 54 42 21 16 30 56 33 a8 40 5e 86 13 01 80 c6 0c 86 43 29 9c 9b 13 4b 72 fe 2e 8e 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 0e 41 d0 e8 74 3a 9d 0e a7 07 51 5d 8e c0 1d 0e e7 06 53 20 8c a7 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff c4 00 Data Ascii: KM8J+C0iuf%$xLH+lT^K@pF+R+jc^PpGR){C1.b,6I}73:r1TB!0V3@^C)Kr.@At:Q]S `
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 72 80 e9 f0 2f 41 49 29 4b 92 9e 53 9a 5e 98 cb a5 25 b6 cb 4b ab ac dd 02 82 3b 20 24 64 4b 0d 9b 15 13 d0 ba 09 aa 98 b0 7a f6 a0 32 7f 87 57 28 e9 2a 3b f7 c5 0f bc 6d 8b 18 88 89 df b1 10 c4 6c 5e d6 9d 03 13 df b9 3b f7 c8 b5 05 b0 33 be 31 dc 67 69 2c 6d a9 fa 4e 1b a4 bd e7 08 e6 72 67 fc 7a 3d 09 d4 6f 29 5b 7c 36 1f 33 fb 0e fb 6d 84 5b ef e9 c2 ef de 27 3d fb 47 bf 53 93 98 7f 95 7f d2 19 fa e9 c7 28 62 4e 27 ba ca 0c 00 a3 db f5 69 cd 77 5e 7b 18 e5 55 71 02 6c b1 f6 dd 0a b3 61 a7 0d 40 b1 30 44 71 bd 7d 27 cb 5a 60 a8 f9 9b 11 ca 1c 04 ad c4 74 a3 17 48 0c ee b4 9d 60 16 31 ee 20 81 91 60 f3 94 72 5c 53 ae 97 ad 57 24 e1 7a 8d a5 e8 d5 b8 23 68 b8 a5 49 7b 44 cc d4 d2 e3 93 39 30 0e 26 a7 96 10 23 89 c2 b1 50 43 e4 ee 7a 8a e3 7f 82 38 6e a0 Data Ascii: r/AI)KS^%K; $dKz2W(*;ml^;31gi,mNrgz=o)[\|63m['=GS(bN'iw^{Uqla@0Dq}'Z`tH`1 `r\SW$z#hI{D90&#PCz8n
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 6b 97 a6 bd 48 40 6f 9b c6 72 c8 2c 83 8f be 18 29 b1 b3 00 4a 0b 4c 44 ff 00 49 86 ac f2 b7 83 fa 76 44 f2 67 50 5f cf 4e 0b 3c cd 9e df c8 9e 79 8b 73 1d a9 96 73 d4 99 1d 94 23 91 44 8e 60 9e d9 39 11 10 8d 84 76 88 f7 ca fd b9 d8 98 c5 7d 59 39 eb df 9c 44 e1 98 91 49 cf 6c ac 92 77 4c cc f6 8f 0d bc 15 70 57 b7 01 fd 4f 5c d6 6b e8 94 e5 ed ee 56 b5 4d 4f 57 b0 6c 18 36 cb 75 1b 40 cf 5f a4 86 ed 8b 0d 1d a6 65 b4 c3 9d 90 4b 37 80 87 d0 56 a0 4d ac 98 cb a9 7f e2 20 56 9a 19 aa ea 0a b0 48 a7 a7 51 e7 61 3a b1 54 18 ab 08 35 8b ce b6 a9 57 83 3a 67 0f b8 a4 2a 12 81 81 16 33 a2 d2 94 cf af 4c d6 48 01 db 33 d2 ce 1e 56 a4 92 78 03 d8 a1 96 b6 1f 33 11 cb f8 77 fb 67 b7 d3 3b 7d bf 86 f9 bc 7d b3 b7 d3 f8 76 c8 cd f3 96 72 db 39 67 3f df 24 b3 97 f1 Data Ascii: kH@or,)JLDIvDgP_N<yss#D`9v}Y9DIlwLpWO\kVMOWl6u@_eK7VM VHQa:T5W:g*3LH3Vx3wg;}}vr9g?$
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: c6 cf 4c 5f d4 19 6f 79 8d f6 2d d3 b4 8e f1 31 e8 99 ed db 24 02 62 36 9e de 5f 7d e0 62 72 6a 40 44 ef 3d d0 c0 4b 96 d5 57 89 19 b5 1d 35 84 57 02 c6 39 3f cc 31 b5 02 5a 75 ab f5 06 7a 44 02 c4 9c ca ce 37 9c d8 b6 df 6e dd f3 bf f0 95 f2 8f 7d b2 bf f3 6a ea 2a 79 44 aa 46 7b c6 74 e0 bd f7 df a3 f6 98 c9 59 47 e5 cd b3 ff 00 3b 64 44 46 ff 00 c4 62 17 ea 98 f5 19 f1 8d fe bb c0 fc 3d a6 4b a9 be f3 03 e9 f8 b2 31 ed 04 91 ef 19 a0 da 28 d5 00 97 ec 33 bc 44 fe 95 a8 6a 74 f4 c4 f5 6c b3 8e 6b 7e 35 d5 88 0b a7 59 b5 12 ff 00 10 93 8c 18 c6 b0 cf f1 ee 2d 96 8b 4b a8 8d 6b 91 1a d4 47 81 a8 36 14 4b e9 1c 02 f5 85 1c aa 3a 9f 14 4e b4 4c 32 00 63 3a 27 20 55 b6 3d a6 b8 f4 3a c2 89 86 59 d3 5b dd a2 62 71 a7 f9 8a d6 d9 5d 81 00 a5 8c b9 02 10 5d 46 Data Ascii: L_oy-1$b6_}brj@D=KW5W9?1ZuzD7n}j*yDF{tYG;dDFb=K1(3Djtlk~5Y-KkG6K:NL2c:' U=:Y[bq]]F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.5	50014	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:32 UTC	626	OUT	GET /uploader/f4b9a830a3be50c7333eaf1836144b26d8b2ee68.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:32 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:32 GMT Content-Type: image/jpeg Content-Length: 72885 Connection: close x-oss-request-id: 66511B5C9EAA1A38333BBFA2 ETag: "C1B74E46A3E15C510AF3371600E08AB2" Last-Modified: Mon, 23 Oct 2023 02:04:20 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11470177824361976529 x-oss-storage-class: Standard Content-Disposition: inline; filename="221fe833b52ac99ff46fef9f7d09d01ee3c24243_221" Content-MD5: wbdORqPhXFEK8zcWAOCKsg== x-oss-server-time: 87 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:32 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a12a1cf7f4-BNA
2024-05-24 22:57:32 UTC	690	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 07 08 09 ff c4 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: %'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 75 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 d8 b7 c8 fe 47 ed f8 78 f6 f3 94 ca b6 bd 93 5e 5f 63 4f 85 cf a5 99 4c b9 d8 b6 73 eb 9b 63 4c d9 f1 6c 98 9c 95 24 ad a6 ac 52 66 c4 c2 60 5e 61 9a eb 94 d4 6c 69 d3 d1 fc ef af f5 1f 2f db 79 ef 6b cf c6 7d 46 2d 8d c7 2b d4 e7 69 f6 6e c7 9b 0e d8 fc ff 00 af e2 f5 d9 39 fc c6 6c 1d 56 4c 5c c5 63 ad ae 6d 04 d3 65 ab bf 06 de 8e 3e 39 fa 03 67 5f 9e f0 9b 9b 3d ab f8 97 a4 c7 91 96 be f7 b7 a7 d4 51 e6 58 33 fb 9c d7 d4 af 8f 22 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 56 7c a3 e7 be 9f 8f cd f5 b3 a3 32 71 4b 38 ab 68 f3 bd ae 57 13 b9 c8 9a 2f 35 72 66 e3 d8 d8 53 6f 3f 1e 6c ec 79 e4 a5 b2 21 62 d6 cd 71 6d 8f 07 2e 2c 0b ea e2 e5 c3 aa cb a3 95 de f0 be 81 de f1 cf 3f ec b5 ba 1d be cb Data Ascii: u@Gx^_cOLscLl$Rf`^ali/yk}F-+in9lVL\cme>9g_=QX3"`V\|2qK8hW/5rfSo?ly!bqm.,?
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 00 00 1a 28 9f cf c4 f7 7b 18 23 9c 79 06 7c 36 73 39 14 c9 c5 52 f6 a7 35 78 6b 95 cb f5 5b 5e 4f b2 d8 6b 74 ee 95 ea de c7 32 d0 c5 6c ad ac bb 4b d1 f3 3a be df 86 cd d8 e6 da 44 8a a2 a0 16 17 92 97 14 4d 62 6f 45 26 6e 05 e5 08 4c 28 4e 65 ca 73 06 93 e3 15 c9 bc a6 4f 50 d8 d4 09 79 d6 0d 8d 14 5b d0 b2 e0 e8 6d 18 b3 5f 39 c3 b3 db cd ba 1b e1 f2 7d 6d 8d b6 6c 1e c1 93 0e 49 96 8e 96 62 03 66 6b cc 33 58 67 18 68 c8 4f 5b 0e b2 27 a4 4e e2 00 00 00 00 00 07 9c d2 df 2f dd cc 5a 9d 26 5c 57 4d 25 86 71 b8 37 15 9e 66 b9 39 88 c9 94 b6 6c 4c 11 68 f4 fb d2 e8 fa 0c 9d 0e ee 6e 1d c8 6f 8f 17 63 93 66 ef 0b 17 a5 e6 72 73 e9 d1 10 42 e2 d9 8b 51 52 42 d2 c2 a4 e5 d0 26 49 98 d1 72 67 36 26 61 21 19 64 2c 96 09 8e 59 0d 01 48 74 36 ad a4 70 e4 70 ed Data Ascii: ({#y\|6s9R5xk[^Okt2lK:DMboE&nL(NesOPy[m_9}mlIbfk3XghO['N/Z&\WM%q7f9lLhnocfrsBQRB&Irg6&a!d,YHt6pp
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: a5 53 1a 50 ca b0 c9 98 99 02 48 5f 59 80 a2 72 25 49 8a 22 91 16 98 d1 6d 35 73 6d a2 fb 04 f7 85 0b 01 b7 34 c6 ec e7 0e 94 e4 8e c6 1c 7c ba 8a b4 06 dc c3 2c 84 d6 60 43 6f 2d 51 b7 c3 33 ea 4e af 7a bb 1a ce 06 0b 6c f6 23 4f 11 3c b1 f2 44 f2 cc 34 84 e4 c6 c4 c0 30 89 4c 38 74 85 96 63 c3 31 12 23 69 82 70 6b 92 99 b1 e6 c4 e2 e0 b6 3e cd 72 ea 87 1c c3 b1 5b 71 5a dc 91 af 34 e7 38 62 90 4b 18 89 11 a6 c6 3d df bf f8 8f d5 5e 33 eb 5d a6 8f 58 0d 2e 3c 9e 33 cd e8 71 6a f1 bd 5e 74 f9 70 45 75 54 be 22 eb 32 eb 68 c8 13 3c 31 89 91 52 32 a9 b9 16 ab 09 8f 39 35 f4 be c2 32 74 49 df 1b 93 40 74 67 38 76 07 2f 0e a0 e4 4e ba 1c 6c bb 28 71 87 66 71 c7 63 0e 42 ce ae 1c f9 b9 94 7c fc 93 6d 53 1f 0d f2 33 56 2d 5b 4b b3 5e 77 24 74 79 23 56 62 1d 29 Data Ascii: SPH_Yr%I"m5sm4\|,`Co-Q3Nzl#O<D40L8tc1#ipk>r[qZ48bK=^3]X.<3qj^tpEuT"2h<1R2952tI@tg8v/Nl(qfqcB\|mS3V-[K^w$ty#Vb)
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 89 a4 c5 0a 16 42 93 37 8a ab 11 59 9a 42 d4 41 59 44 8b ad 12 a2 e9 88 e6 6f 84 88 c0 b5 70 72 d3 1a f5 c3 c9 48 26 30 ef 15 45 4c 84 e0 96 99 14 9b eb 6b b1 db 79 4b f4 78 f2 4d 0b 55 a2 6e 4d 89 b9 10 44 c5 33 6c 45 61 64 b9 be ff 00 96 f3 cf 7b f1 ff 00 a1 3c af d1 3d 3f 89 ec 40 00 01 e2 dd 2f 3d 8f e6 bd ac f4 b5 e4 c5 4a a2 52 44 88 91 52 e2 88 ba 5a 7c 98 f5 32 e8 29 6d 7d eb 14 ac ac e4 90 cb 3e b3 af 86 d0 cd 4d d2 b2 25 59 a4 c4 73 12 9a 5b 47 21 7c 7c f6 4c 7a 94 43 0d a5 6f b9 ad ba a5 fa 5a de 94 0b 65 6c 2e 2e a2 38 91 79 72 05 a4 d6 5c 48 46 8b 91 31 72 6e b4 56 55 2a 5a 5a 5d 08 ea c7 4d 4b d1 44 c8 42 63 ad 79 44 46 90 57 03 6b 9f e7 de d3 e6 ba 2f 43 e2 fe 9d f0 ff 00 5c ed f9 dd f0 00 00 11 a0 d8 d1 f9 cb af e5 bb 8f 17 f4 cc 88 b5 c4 Data Ascii: B7YBAYDoprH&0ELkyKxMUnMD3lEad{<=?@/=JRDRZ\|2)m}>M%Ys[G!\|\|LzCoZel..8yr\HF1rnVU*ZZ]MKDBcyDFWk/C\
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f ff c4 00 35 10 00 02 02 01 02 04 04 05 02 05 05 01 01 00 00 00 01 02 00 03 11 04 12 10 13 21 31 05 22 32 41 14 20 30 42 51 23 33 15 40 50 60 71 06 24 34 52 61 43 90 ff da 00 08 01 01 00 01 08 02 ff 00 f2 c9 dd 6b 52 cc de 2a bb bc a9 ad ad 80 68 ac ac 32 bf db 2e eb 5a b3 36 b3 5a da 87 8b d8 19 47 4a cc 4b 5e b6 c8 aa f4 b8 74 fe d8 f1 3d 6f 35 f9 69 d5 c8 58 7a 09 82 02 a4 ff 00 d9 6d c6 82 96 2e 87 c6 52 dc d5 7e 73 fd ad e2 7a 8e 46 9c e1 8c d3 2f 98 bc d3 f9 ad cc 63 ef 3a 67 ae ab cc 69 59 49 5b b5 2c 46 9f 57 76 94 Data Ascii: 5!1"2A 0BQ#3@P`q$4RaCkR*h2.Z6ZGJK^t=o5iXzm.R~szF/c:giYI[,FWv
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 5a 6a 15 91 49 02 2d 70 07 1d af b5 f9 6c a6 db d6 ea 90 b6 8d b6 a2 c1 60 e8 48 6c db b4 6b 6c c5 56 2c ac d3 72 2d 35 68 ac 29 5b a9 be db 1d 54 c1 5b d9 e5 15 16 af 19 d4 d9 45 e8 58 50 db e9 a9 e3 76 9a b3 b8 4d 22 b0 62 f5 e9 91 6f be b4 7a b4 d5 69 ce ed 3d be 25 76 9b 06 ea fc 75 91 d7 9d 46 bb 4b a8 25 2b af 51 4d 87 0b fd 0f c6 2c 2b 5d 68 0f 51 03 76 80 94 3b 82 b0 60 08 e3 d2 7e 26 a3 46 97 f9 96 da ec a1 b6 d9 99 ba 6e 9b a6 e9 ba 6f 9b a6 e9 99 99 9e 15 a3 da e1 13 4f a7 14 81 bb 3f 96 b0 bf 45 00 0e 39 dd 93 05 23 6a 18 a9 02 cc 4d 43 92 ae 05 3b 4d d5 07 4a 8e 00 9b ee 48 8c 7e 21 2c af 50 4d bb 2b 05 8d 85 9c d9 bd 6b ad 9a c6 a9 f4 8b 8d 35 56 6a 5c 35 9a fa 54 82 d3 da 69 ad 0d 55 6e 2e b0 54 af 05 4f a8 37 67 a8 b1 b7 54 f5 2c dc 0f 66 Data Ascii: ZjI-pl`HlklV,r-5h)[T[EXPvM"bozi=%vuFK%+QM,+]hQv;`~&FnoO?E9#jMC;MJH~!,PM+k5Vj\5TiUn.TO7gT,f
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: b7 ed f4 fc 66 c0 ab 48 16 6e d1 d8 ce b7 d6 9e ba f4 f7 ad 80 55 6b 02 87 07 86 60 31 6d 85 6b b0 47 d3 77 33 16 27 7d f3 74 cc e9 36 d7 d6 00 b3 3f 36 7e 5e 9f 30 ad da 2d 39 0b 02 af b7 70 48 3d 73 2f b1 2a a9 ec 76 04 33 45 75 63 66 de 88 6a 11 7b 09 db 19 70 08 b2 59 4a f9 88 7a 99 73 f2 ea aa 2e 87 6f 37 4c 81 f9 7a 54 2b 58 c8 dd 82 21 4e 66 41 26 c7 73 6c b3 1d 65 de 43 a6 b5 bf 56 e2 f8 af 24 2e 3d c9 80 16 c2 ae 36 14 ad 7a 12 25 8a 4a 5b 8c 6e 5e b9 e8 25 6c 2d 56 65 14 55 5b e5 49 96 16 55 3b 58 03 90 7f f2 1c 4c 75 9d 61 52 41 c6 d4 61 b5 b3 b6 25 f6 ed 05 57 5d a8 59 57 88 54 c7 6d 80 e7 e8 6b 9c 37 8a 5f 4d 97 3b ad 2f a6 b7 f3 c2 8d 48 61 ca bd 91 ab 83 e4 07 10 58 66 54 c6 a6 b3 39 07 ba 9a ed 58 4b 0e fc c9 cc 9c c1 37 40 49 33 66 3d 5b Data Ascii: fHnUk`1mkGw3'}t6?6~^0-9pH=s/*v3Eucfj{pYJzs.o7LzT+X!NfA&sleCV$.=6z%J[n^%l-VeU[IU;XLuaRAa%W]YWTmk7_M;/HaXfT9XK7@I3f=[
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 4c af 4f 83 e6 c8 51 48 3e cd 28 af 65 34 d6 51 8b dd 6c 03 a2 ca f0 f6 5b c1 c2 d9 ce 56 96 af 34 bd 01 4e e5 56 9a 80 6c cd 42 b2 19 11 86 a0 6e 46 51 5e dd 83 1a 93 fa 36 e2 b1 b5 50 4b ce da 6c 32 91 fb 6d 0f a4 c1 f6 08 c7 0a 49 ac 79 83 46 e8 a6 56 bb 33 18 85 dc c7 02 c4 d3 93 7b 15 aa c3 11 76 aa 2c a1 8b b6 ad e6 47 3b 94 0f ff 00 38 ee 2a 5b 2c 6d 98 20 4a 8f 35 0b 85 60 75 2e b2 c2 33 55 65 f3 07 45 ea 83 bc db 96 cc 60 71 85 38 ea 62 ae 00 27 1d 00 e1 d7 ae 4e e3 e9 38 eb 9f 36 32 71 f8 f4 cd a5 47 5e e7 74 ce 3a 4f f2 6c da b2 cb 4b 93 33 09 f9 0e 39 69 b7 c2 7f e1 af c8 e7 6a b1 97 79 b3 29 b7 96 4d 4f 62 8c ce d3 13 68 9b 04 c7 c9 99 ba 64 fc de e6 76 73 91 d6 22 06 62 0a a0 53 80 3b 46 5d cf a7 99 57 e7 85 1f 99 4a 6d 14 89 ef 01 60 fa 2e Data Ascii: LOQH>(e4Ql[V4NVlBnFQ^6PKl2mIyFV3{v,G;8*[,m J5`u.3UeE`q8b'N862qG^t:OlK39ijy)MObhdvs"bS;F]WJm`.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.5	50016	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:32 UTC	466	OUT	GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-e1e" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:32 UTC	609	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:32 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-e1e" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183499 Expires: Sat, 25 May 2024 02:57:32 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2a12c786a7a-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.5	50018	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:32 UTC	392	OUT	GET /uploader/e11eff5309c535edce9d8cc35f9d4811c576d79d.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:32 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:32 GMT Content-Type: image/jpeg Content-Length: 52027 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="22180b859b900e39ba66021b7480607d30670150_221" Content-MD5: 82gU/qjtbL9+0UvVLPjncQ== ETag: "F36814FEA8ED6CBF7ED14BD52CF8E771" Last-Modified: Mon, 23 Oct 2023 02:04:24 GMT x-oss-hash-crc64ecma: 7217132901493936357 x-oss-object-type: Normal x-oss-request-id: 66511B5BE2741F3435AEA4D9 x-oss-server-time: 108 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:32 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a21d1cf7f0-BNA
2024-05-24 22:57:32 UTC	668	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 1b 01 01 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}X
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 4f 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c d7 33 c3 be 67 67 96 fa bd 7a 35 52 a0 40 13 95 93 a8 6b 1b 62 f2 e9 af 41 cb db b2 e9 c5 f8 00 d3 d7 cd 27 9f ec f4 46 f1 ea 49 62 51 31 f5 64 59 79 1d cb 0f 9d f4 63 d0 e7 bd ef f5 6f 7e 8b ce 9b d7 ea e1 35 8c 75 c5 8e b3 b8 63 97 3d 9e 49 3c 7e d6 8b f9 6f d4 67 ff 00 47 f0 32 5f 47 e5 d7 97 47 5b d4 c9 a6 62 dc a4 b7 b9 b2 d5 a9 7b 25 d2 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e4 1d 69 f3 d3 93 78 9e 5c ca 50 26 27 ab 9b 9e f7 be 3d cb 1b b6 ae 9e 78 df 3c 98 ad e2 79 6e 23 64 97 62 22 6b 2b ab 59 95 4f 7a 27 41 b6 9a 50 a9 0c 65 60 8d 52 f1 ec 99 de ce b6 dd 3e 7c 57 ca 7a b2 f8 bd ab 89 9c c7 d1 79 f7 9f 51 e7 c7 9f 8e 97 9f d8 d1 3f 29 fa ad a3 f5 5f 96 bc f4 ba ba fe 77 e4 64 26 5a 36 ca Data Ascii: O3ggz5R@kbA'FIbQ1dYyco~5uc=I<~ogG2_GG[b{%ix\P&'=x<yn#db"k+YOz'APe`R>\|WzyQ?)_wd&Z6
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 71 a9 f2 70 d9 ea 72 19 79 27 1f 36 85 9d d2 9a bb b9 e8 d6 74 c6 3a 44 5a 2e e1 37 d1 56 74 a9 42 a1 18 69 34 59 26 98 b8 53 03 9b a3 cb b3 59 e8 55 bc 8b e8 88 00 00 0e 35 e4 f7 79 77 b7 e6 f6 dc ef 97 1d 02 cd 8a 5a a5 c1 85 cb e7 fc d6 92 5e e9 02 91 4a 3a a1 db 6c ec f6 5e 13 97 60 ae 48 50 24 2d 0b 84 b4 b3 47 cd e3 ff 00 21 ed ec df 9f 7d 07 27 fd 67 e4 bd 4d ec f4 37 2b 70 49 aa f2 70 d4 2c a3 7c cf 36 cf 9d 71 3e 1d f2 5f 93 f5 3a 4f 7f 83 b9 fd 0f 42 1b c6 91 c9 c3 b9 f1 f3 67 66 bc d3 e3 f6 b6 de 79 d5 7d 1e ac 53 83 f4 3b 36 df 98 7b f9 cf aa f3 7a af d8 79 db 27 26 34 ed f1 6a 3b e2 bb 4c 43 5e 76 c6 f8 e6 39 e9 4a 4d c9 3d 62 77 08 b9 b6 09 44 89 1a 9c 8d 46 05 45 84 45 63 02 42 91 4a b3 d9 55 80 00 03 ce 1d 0e cd cf ab d0 dd f1 be 40 bb 82 Data Ascii: qpry'6t:DZ.7VtBi4Y&SYU5ywZ^J:l^`HP$-G!}'gM7+pIp,\|6q>_:OBgfy}S;6{zy'&4j;LC^v9JM=bwDFEEcBJU@
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 28 d9 42 bc a9 e1 7a 1b f7 e3 7f 55 81 fd e7 e2 fd 21 cf c3 73 28 98 89 10 53 2d ca fa bc d3 33 94 7e 59 f5 18 ef 4f a7 e8 ef d0 3c 5c e6 b3 5e 27 96 a1 50 8c 2a 4a 4a 20 4a 49 54 ca 60 a5 56 85 29 2c ad b4 35 44 f1 a7 16 be 90 c6 e7 60 81 cf f9 24 b6 55 27 2a 13 95 22 a1 39 34 44 98 11 26 25 22 49 52 d4 08 10 21 16 f6 d9 d9 76 48 6b dc 9c 70 48 2d 46 6b 4d 65 78 f7 7d 34 b2 d4 ba 23 12 d0 14 cb 98 ab 11 15 12 12 cc b2 9a 41 ae fe 4f f4 fc 3f e8 fc ef 53 fd b7 8f 92 4a b0 22 b1 00 a2 42 a7 d3 cd 3d 3d ed bf 88 fd 8e 1b f6 9f 93 f4 87 7f 82 69 6a 92 14 48 54 84 84 84 a4 a4 84 49 2a 99 4c a2 52 2d 8c 71 85 4f 1e e2 fa 07 1b f5 fd c0 03 9e f1 72 50 e6 c6 17 cb ee 57 4c e7 a9 d3 ab bc cd 6c f2 cd 9b 3d 95 2c a8 4c 46 16 44 94 94 c3 ed 52 b2 5c 68 d4 09 48 ad Data Ascii: (BzU!s(S-3~YO<\^'PJJ JIT`V),5D`$U'"94D&%"IR!vHkpH-FkMex}4#AO?SJ"B==ijHTI*LR-qOrPWLl=,LFDR\hH
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 46 b7 58 53 16 5b 99 12 72 a9 5c a4 40 ac 50 2a f1 ea f3 46 b3 31 7a b5 92 ec aa 5c 17 85 f9 99 36 23 32 64 4b 92 ec bd 2e cc d9 7c 5d 97 46 60 a8 57 2a 10 26 22 00 00 00 00 04 01 02 60 40 11 20 40 98 81 12 00 02 20 81 10 00 00 00 00 00 00 00 04 08 80 40 88 04 08 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: FXS[r\@PF1z\6#2dK.\|]F`W&"`@ @ @
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: b1 78 68 fe 35 ef b6 aa b8 3a 7c 8c a5 d7 5b 80 c0 2a 79 e7 24 38 5c 73 4f 23 59 de b7 ae 74 31 5a 77 c8 00 9d c5 8a e1 d9 9e e0 b9 e9 a9 49 42 4a 95 72 bd 17 01 6a 33 4d bf 29 c0 db 30 2c cd b0 d7 d6 72 cd 01 cc e5 de 8e c5 c6 50 f7 47 e7 23 ed bd 1a 44 7f bb e8 58 5f 2d cd 43 55 cb 39 2a 2a d9 21 38 c5 15 27 95 72 c0 1c b9 d2 dc d7 b2 5b f2 56 ba 43 c8 2b 2d ff 00 18 f9 c3 75 c5 41 79 d7 d7 26 4a e4 b9 a9 5c b7 ad cd 0e a0 7a 92 68 29 2a c6 79 d5 96 e7 c7 48 8e ef a3 32 7c 78 49 cb 93 ee 6f 4d 3b c0 b6 3f 70 5e aa 8b 11 88 6d f0 d9 ac d6 68 a9 a2 ac 12 33 c9 fb 64 37 8f 9d de 8f 21 59 ec ea b2 dc 82 b4 84 59 9f e4 b4 d9 58 48 cb a8 b7 5b fe 3b 24 26 f6 a1 1a 3f c2 20 32 db ad bd 41 25 44 13 e5 4d 3b 20 0d 82 1b 39 d4 e1 5e 2b 46 77 54 99 43 d8 db 6e ab Data Ascii: xh5:\|[y$8\sO#Yt1ZwIBJrj3M)0,rPG#DX_-CU9!8'r[VC+-uAy&J\zh)yH2\|xIoM;?p^mh3d7!YYXH[;$&? 2A%DM; 9^+FwTCn
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: a7 76 99 ba c6 74 e9 58 d2 bd d3 c1 6f 8b c5 03 48 26 a4 39 a4 53 29 e1 22 b5 65 41 34 e2 92 eb 81 90 34 80 3c 6a 70 24 80 75 e6 94 fa 73 80 a9 3a 69 73 6e 8a 56 18 55 de 63 1f 75 9b fc 25 7d d6 66 c4 7f 66 ff 00 4f ce 9b 90 cb e5 dd 14 48 03 75 5e 23 36 ad 22 34 e8 d3 3c a8 de b1 9a e1 ec 02 4a 55 c4 da f2 b6 9b b6 ad 2a ac 72 a5 ee 7a 99 7d d6 09 2d 47 bc 96 23 70 e9 d8 e1 5a dc 7d f6 38 5a 16 9f 08 51 1c 99 b9 ba d8 09 54 7b 8b 2f 1c 27 88 9d f3 be 92 6b 58 a4 36 e2 f1 48 6d b6 c8 21 4c ea de a4 dd fb 29 d2 88 d3 99 91 ef c1 a5 b4 95 d2 b5 b3 cf be 08 5e ed 48 62 40 cb 0b 8c d9 d4 42 da 5b 79 a5 6c 70 b4 b2 a0 78 8c a2 e0 51 b3 e9 28 5a 72 df f6 2f da a3 b8 75 b4 eb 33 63 7f 99 69 c6 4e 0c 56 ee 32 d8 d3 da 99 9b 1a 46 34 14 fe 0d 4b 90 a8 91 f2 94 df Data Ascii: vtXoH&9S)"eA44<jp$us:isnVUcu%}ffOHu^#6"4<JU*rz}-G#pZ}8ZQT{/'kX6Hm!L)^Hb@B[ylpxQ(Zr/u3ciNV2F4K
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 13 10 a6 de 48 5a 16 d8 73 9a d9 2d d6 c9 ac 67 38 b8 30 19 92 a0 0e 3a c6 d8 22 df 78 5b 07 4b 8d 3c 1e 40 52 33 9a ff 00 9c 60 6d 8d b7 f9 ad eb 7a df 7a f8 ea da 94 e2 50 3c ce dd e1 b7 91 4b be b8 76 64 dd 2e 4b e4 dd c2 e2 4f 99 97 b8 a8 0a 08 5e a1 e3 e9 1b 7a a1 21 74 84 e1 a6 87 56 77 db 9f bb ab 35 ce 86 b0 14 46 9d c6 40 09 25 21 23 00 d7 d4 d2 31 a7 24 1a c2 79 fa fa 46 73 40 28 67 3c 82 b5 02 a2 06 97 5a 65 f1 a1 d7 6c 30 5d cf 09 ee 8f ca 46 ed 3d 16 63 04 f1 02 f0 72 1b 9b 25 be 49 bb 3d c9 4d dc d9 49 4a 93 1e 53 52 86 42 b4 ac 29 0a 93 05 eb 7a fb 44 5c 47 b9 37 94 43 b8 b9 1d 42 3c cf c1 44 88 a8 6b 8f 21 9b 34 4c 23 b6 3a 48 1c e5 38 5a 47 0d 02 39 6f cc 86 a6 0c 84 3c 3f 34 a4 a1 c4 94 a9 eb 5b b1 d5 c5 82 d4 e6 9e d4 d3 cb 8c f4 75 f1 Data Ascii: HZs-g80:"x[K<@R3`mzzP<Kvd.KO^z!tVw5F@%!#1$yFs@(g<Zel0]F=cr%I=MIJSRB)zD\G7CB<Dk!4L#:H8ZG9o<?4[u
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 1d d4 4c 6d a5 a2 63 0a ab 63 17 08 92 16 dd 69 ac 24 56 45 66 b3 59 ac d6 6b 35 9a cd 67 c6 4d 13 4e 38 86 d0 a5 ae 6c c5 4d 77 35 d1 eb 72 b8 82 5b 9e 07 16 8e 31 48 ce 28 c9 68 52 64 b2 6b 39 f0 e6 b3 e8 17 0e 70 84 87 b3 e7 f0 94 83 c8 28 8d 94 a4 85 0a dc 1c 1f 00 24 50 58 ae 74 41 14 17 f9 f5 8f e0 a1 0d 20 61 3a 53 9c d6 9a d0 6b 07 c1 a4 d6 8e 75 a4 52 da 69 c4 94 2d 08 43 43 0d f9 eb cf 59 5d 65 75 e7 ac aa b2 aa ca ab 26 b5 56 aa cd 67 d0 91 21 a8 c8 d6 ec c9 ce ce 5d 5a 2c 65 d2 97 e4 00 12 00 1d 6f b9 c2 69 4a a5 2c 95 e6 94 e2 d4 3c c4 e6 b3 4d ba a6 fd bd b8 d1 98 e9 ae 33 86 b5 aa 83 8b ae d0 e8 a4 4b 07 de 14 08 c8 f0 2f 95 27 0d a6 82 c2 b9 67 15 f5 1c e4 96 ca 33 95 2b 4d 24 e4 67 ab 9d 72 a5 27 50 f1 83 8a 0b fc e0 2a b4 a8 72 0b fc f3 Data Ascii: Lmcci$VEfYk5gMN8lMw5r[1H(hRdk9p($PXtA a:SkuRi-CCY]eu&Vg!]Z,eoiJ,<M3K/'g3+M$gr'P*r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.5	50017	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:32 UTC	626	OUT	GET /uploader/26147a601f2cfd6a9748078bd341aff2565eb7c2.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:32 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:32 GMT Content-Type: image/jpeg Content-Length: 81599 Connection: close x-oss-request-id: 66511B5C1F52473235F25D6B ETag: "CD00B0EABDC2864825FE568250E2CDBD" Last-Modified: Mon, 23 Oct 2023 02:04:19 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8713742630048121293 x-oss-storage-class: Standard Content-Disposition: inline; filename="221f8bfd9ec3d8b1611b1c9a46e4db59fee19657_221" Content-MD5: zQCw6r3Chkgl/laCUOLNvQ== x-oss-server-time: 102 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:32 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a208f0f7e8-BNA
2024-05-24 22:57:32 UTC	690	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 01 08 09 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: %'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: f3 1f a7 e6 48 df 97 d8 9c 4e 3d 79 dd b9 fa c6 99 6e b5 d6 b9 a5 8d b3 93 2d ff 00 cb f4 3a 6f 93 e9 e4 2b af a0 00 01 69 5e 59 e9 79 df 26 7a be 54 cc b4 dc e2 f2 a5 88 11 35 de 26 cd 31 29 85 9e 96 33 bd a8 b6 5e 69 12 67 2f 31 4c 4e 72 6d 81 88 b9 6a 69 f8 eb 0b 5a fd 1b 86 9a c7 47 3c 0c 75 91 b6 5d c7 cd f4 f7 7e 3e 99 75 b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 a6 bf 2b 7a 1c 3f 34 74 f3 62 63 3c ae f8 6c dd 1c f2 ab be 23 9f a6 f7 46 3b e5 f2 db d5 cd de d7 6d 8c cc 34 e8 3e 7f a5 bc f0 77 66 b9 fa 2b ab d4 d9 b5 71 1b 65 a4 77 71 fc fb e8 f9 3c 9e ee 93 5b e5 22 d8 e8 88 36 b4 d5 21 45 93 4c 26 57 9f 9e d4 ad 30 ad 39 29 89 49 c7 52 67 90 af 4b f0 c4 5a b6 e6 2f 4c 4e cb 69 97 ad 33 8f b4 eb dd 34 e7 e9 9c 1d fd 1b 83 b3 23 9e a1 20 00 Data Ascii: HN=yn-:o+i^Yy&zT5&1)3^ig/1LNrmjiZG<u]~>u+z?4tbc<l#F;m4>wf+qewq<["6!EL&W09)IRgKZ/LNi34#
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: 42 d7 0c f7 3d ba 4f 9f ea 6d b9 df e5 4f 6f c8 e5 bc fd 38 fc 6f 3e f6 b7 7a e4 e9 5b 53 6d 89 1b 47 57 26 e3 a4 60 e3 3c e5 e2 34 b5 cc af 77 3d b3 b9 df 72 ca dd 3f 9f ab 75 e7 da fd 6d ec 80 00 00 00 00 00 00 00 21 f2 c7 67 2f ca be cf cf 65 ba 39 e1 f0 7b 14 c4 78 9a a1 14 85 9d e2 ad 44 57 2f d3 c9 93 b4 ca d7 86 77 4f 0c 5a 5e d4 da 98 94 5d 19 d4 9c 8d 77 ab 2e bd 57 8f b3 2b ae 3d 76 bb 6f 19 ce 63 9f b2 5f 3f 44 a9 6a 76 e7 c5 75 f3 e5 b4 c7 9e 6b 95 9b 56 f6 1b 4f 8d b7 6a 47 53 f2 fd 5d 17 6c b6 1d 33 8a 9c 5d 27 31 36 89 85 eb be 57 4a 6d 6f 2b 18 fd 23 72 a5 f9 37 a7 e4 73 9e bc f0 bc db 6b 7c fd 94 52 d7 76 cb 68 d7 3d ee f8 cf 98 c7 cc 64 a5 a5 e5 b4 2a 69 af d5 8f 8b 5b ce db 26 91 45 e3 78 ad 73 f5 8e a1 87 4e f3 86 99 cc 76 c8 27 da cf Data Ascii: B=OmOo8o>z[SmGW&`<4w=r?um!g/e9{xDW/wOZ^]w.W+=voc_?DjvukVOjGS]l3]'16WJmo+#r7sk\|Rvh=d*i[&ExsNv'
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: d6 9c f5 5f 3a a6 95 d9 54 ae 20 7a a1 35 22 e4 a9 89 f6 d5 ae 14 26 bb 47 93 35 45 6b 9c eb bf 36 2e db e3 b0 e8 f6 55 44 fb 87 4c de 7e bc ba d5 55 7f 7a f6 6e 5d 7a b7 99 ea eb d7 a4 cd 39 be 4e f4 39 35 1e 6e cc c6 99 c6 9b d6 cf 1f 5d 32 b6 cb 2d d1 c9 df f8 fa 7a e7 9f e9 73 0e 8c 90 da 91 f2 5f b1 e3 d9 af 45 6c ab 45 e6 9a a7 1f 6c aa 5b 31 d3 cd ba 6f c1 f5 47 87 ef 6b d6 49 c9 92 da 9f 32 7b 5e 27 2a e6 ef b5 cd d5 42 99 fb c5 8a de 35 e9 36 d5 b1 49 aa b3 97 d6 71 35 b6 52 33 d8 fa 39 f6 2e 8e 6f 6d 10 d3 6e 69 12 26 d2 22 ab 6e 27 16 8f 55 5e 6d c4 53 9d eb a6 dd 1b e4 7e 9f ec ee ec 65 de a3 c3 e5 7e ce 2f 9c 7d 0e 0b 33 8a d9 af 4f 6f 15 17 66 3d 47 b2 f0 aa 2b 5c bc 97 b1 5f 4f 64 80 5e 11 3e ab 72 f4 b3 14 c4 57 4c b5 75 d8 1d 18 cc d8 2c Data Ascii: _:T z5"&G5Ek6.UDL~Uzn]z9N95n]2-zs_ElEl[1oGkI2{^'*B56Iq5R39.omni&"n'U^mS~e~/}3Oof=G+\_Od^>rWLu,
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: db 3e 17 db 69 7d 8a 6f 62 b1 0a b3 6e b6 8c b5 c5 25 cc c4 99 83 59 e3 bf 27 ec 68 1e 7f 46 e1 f4 fe 57 d6 7e f7 97 54 89 f0 e6 79 ed 1f 19 96 99 5a 22 d5 90 aa 31 72 53 e5 8a ab 2d 74 40 ac eb 46 0e ac 9c b1 f0 94 46 24 11 91 2a 62 32 d2 61 16 13 88 10 bc 51 0d 42 f1 ac 99 7b 35 94 ec 15 64 0d 8e b3 91 24 15 45 ae 42 93 d0 51 2a e1 6c ae cb 05 f8 5d 29 21 cb 11 5a f1 fe 9c 39 d2 71 36 b6 2f 5c e3 69 4c 5d 2d 2a f5 cf ce 5b d7 77 9f f4 cf 85 ee 68 5a e5 bb 61 7b 77 af 0b f4 f8 a3 79 fd bb b1 9c 96 db 4b 6e b3 37 69 36 13 65 36 a9 30 4a e8 b0 52 4c 2f cc ca ba cd 50 e2 d1 6a e2 1f 21 ec e1 bc 6e d9 3f 5f e5 7d 43 ef f9 39 9d a8 05 a8 9e 73 96 d7 6b 35 d5 4c a7 59 8e 84 d2 d4 29 b4 64 2d 38 7c d9 2b 44 28 ac db ae 98 ca a6 90 49 d2 c5 55 94 86 36 63 25 69 Data Ascii: >i}obn%Y'hFW~TyZ"1rS-t@FF$b2aQB{5d$EBQl])!Z9q6/\iL]-*[whZa{wyKn7i6e60JRL/Pj!n?_}C9sk5LY)d-8\|+D(IU6c%i
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: ed c3 df 77 87 7a f4 79 69 d6 bb df a5 c7 b2 a7 32 8b 85 e2 e1 78 bf 2f 40 3c 3d 00 00 00 00 1a b9 c8 b3 bf 20 f2 fb 30 9e 5f 77 30 ee e6 d6 7d 8e 4e 9b e1 f7 ed 5e 1f a7 ed 6b 72 0a bc 69 72 22 b5 70 1e 86 0d a2 fe 31 97 e1 eb a6 49 ad bb d7 dc ec b2 e2 6d 5f 18 7d f8 5a aa ff 00 2e d6 62 f6 2f 49 1d 5c f8 bd ab 6b a3 1b dd dc dd 9f d1 e4 cc 59 1a a8 84 32 c1 8e 35 63 99 18 53 c2 93 19 16 a2 b3 23 39 cc 72 f4 66 b8 b6 cb 73 e9 ac fa 5c bb 7f 91 d9 6f d1 e7 cc eb 4d 57 0d 35 1f 4f 8f 37 c9 bc 7b 46 a7 e8 f2 53 32 44 94 df a5 b3 d7 a7 47 96 d7 44 9b 22 16 c9 44 82 59 7c 94 48 26 13 89 c4 f2 61 34 94 4c 26 19 03 22 4f 27 9e 80 00 29 2c 4b 18 8c 74 4e 34 c6 73 eb 6a 66 d4 4d 9d 2b 22 8a 92 94 6d 73 f6 6b e4 d6 4f 3e e2 a9 ad eb 45 ca da 98 0a 37 af b1 5b 92 Data Ascii: wzyi2x/@<= 0_w0}N^krir"p1Im_}Z.b/I\kY25cS#9rfs\oMW5O7{FS2DGD"DY\|H&a4L&"O'),KtN4sjfM+"mskO>E7[
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: a3 f7 4e cc 1c 9b 73 23 72 70 a2 19 74 48 fb 5a de b2 36 e4 d2 c7 66 4b 6e d2 75 89 08 21 ee ed 58 09 41 08 97 9b c9 b6 74 81 65 72 ba c2 db f2 ab 7b 85 b8 4c 80 55 bf a8 f1 48 22 9a d2 42 fc aa 1b d6 46 d2 e7 94 73 c4 f8 ef 50 c1 ac 03 8a e5 58 f2 ae 95 1c a6 33 90 6a 19 96 55 fa ff 00 18 90 06 49 ab ab f4 5e 41 f4 8b 9e 25 ab d9 c0 ad 56 b6 6b 83 2c 92 69 9b 71 a7 19 8a 17 dd 95 1e 75 dc 9a 70 ad bc da 0b 58 c1 28 a8 a2 9e 69 fd ae ba 06 7b 84 5d 98 36 89 58 7b ae ce cf 71 9b 9b 81 a9 74 45 5b 90 2f 38 c3 c9 27 ef 12 80 c4 aa 21 ec a0 9e 45 da 79 de da 69 06 de 95 17 11 2c 49 a6 25 cd 93 49 2a 6b d0 aa 6e 1a dd bd f9 b5 2b 70 dd 47 54 69 28 5e 17 2a c5 39 8d b9 94 7d 2c 1b 1c d5 83 00 47 f5 1e 35 26 8b 32 b4 f1 ab 56 89 63 e6 39 d4 37 cc 30 a6 a1 bc 8d Data Ascii: Ns#rptHZ6fKnu!XAter{LUH"BFsPX3jUI^A%Vk,iqupX(i{]6X{qtE[/8'!Eyi,I%Ikn+pGTi(^9},G5&2Vc970
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: e9 4f 0d ce 53 7e 06 36 71 ca da a2 e2 31 1a 36 97 50 10 cb 06 43 6b 3a 5d bd dd cd b6 cc 1a 85 37 3c 4a f2 07 ad cd 0c 1e da 32 94 e8 ab a2 76 9a 39 09 8e 59 06 fd b5 be d4 6f 35 ad be d4 d0 34 85 ae 1e e6 e1 bb 4f 31 11 09 1c 91 95 6d 74 c1 8f ef 0d 21 50 f2 c7 14 ab 25 9b b5 3f 7d d6 69 9c b5 2d cc 76 d2 ee db 29 60 89 8b 89 0c aa 51 37 b9 1d b8 40 53 04 b9 3d a2 65 88 20 83 4b 2c 30 19 08 17 12 f3 c2 44 3f 76 00 33 b1 91 f5 cb ce 48 ad 34 ab 45 26 15 66 ba d0 36 e0 d0 a7 51 73 69 37 75 ad ca 36 1a 68 73 de 78 cb cc 90 36 ad 51 33 56 64 9a 54 8f 94 6f c3 ee a5 40 d1 b4 ba e9 6e 50 f5 e5 40 e7 fa 2f da 09 70 90 45 f7 d6 77 5e 5d 45 bf 14 78 f0 35 10 18 f0 fb c1 aa 68 46 66 b3 45 f7 27 c0 91 66 b7 c6 ec 65 46 f3 15 4e 59 54 72 58 ab 33 69 59 8c aa 51 07 Data Ascii: OS~6q16PCk:]7<J2v9Yo54O1mt!P%?}i-v)`Q7@S=e K,0D?v3H4E&f6Qsi7u6hsx6Q3VdTo@nP@/pEw^]Ex5hFfE'feFNYTrX3iYQ
2024-05-24 22:57:32 UTC	1369	IN	Data Raw: a3 d6 e6 a3 49 f4 46 bb 82 18 ac 2d a1 b6 8f 50 c9 36 ad 25 dd c4 97 05 74 c7 c4 e7 85 40 89 9b 2d 3c f1 de 88 96 08 e4 de 65 6b 85 92 e2 49 80 61 71 6d 1b 24 b6 f6 e7 22 6b a1 10 91 5b 44 27 88 5b 47 23 8d b7 94 6a 64 8a 23 34 9b 71 a3 c7 83 b6 01 a3 91 81 31 d1 59 c0 1a 22 ef be bc 48 4b 2a d4 90 15 71 25 bd ca e6 19 6e 84 a1 b6 63 06 2e 26 87 df 4a 4b 88 5f a4 82 b3 fc e7 da 03 ed 31 43 98 a6 0e 79 8e 80 78 1c 8a d0 d4 53 3f f7 a0 f9 62 b9 8f 0a 59 08 fa d0 91 4f dd dc 1d 14 6a 3b 4e dc e4 6c 50 d0 9e ea d1 39 fb a0 56 02 8c b5 43 60 f3 05 78 6e 63 25 7d 6d 0c 9d fb 68 ee 07 ad 6d d0 e8 b9 8e 68 0a 4b 67 73 c9 5e 07 a6 e1 f6 2d ca 5b 34 a3 c3 ec cc 66 36 8f 6d 13 86 58 28 d2 ac e6 bd 59 e1 eb 0b 95 a1 67 74 06 84 e2 72 d2 59 df a7 bf c4 98 d6 d7 18 56 Data Ascii: IF-P6%t@-<ekIaqm$"k[D'[G#jd#4q1Y"HK*q%nc.&JK_1CyxS?bYOj;NlP9VC`xnc%}mhmhKgs^-[4f6mX(YgtrYV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.5	50021	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:32 UTC	703	OUT	GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-20a8" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:32 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:32 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-20a8" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 191777 Expires: Sat, 25 May 2024 02:57:32 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2a33aacf7e8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.5	50020	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:32 UTC	711	OUT	GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ee8-2905" If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
2024-05-24 22:57:32 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:32 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-2905" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 200954 Expires: Sat, 25 May 2024 02:57:32 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2a34ea8f7e4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.5	50022	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:32 UTC	626	OUT	GET /uploader/1a7f38ab8f1d89cd6c3628bf38e1b67fcbf9c171.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:33 UTC	680	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:33 GMT Content-Type: image/jpeg Content-Length: 42925 Connection: close x-oss-request-id: 66511B5DCB42C43133C0A447 ETag: "961E819A375171A345EF1B884DF22D68" Last-Modified: Mon, 23 Oct 2023 02:04:18 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 15488331121114168107 x-oss-storage-class: Standard Content-Disposition: inline; filename="221e0c57e3ade92db3efbd3b414a04aab9629478_221" Content-MD5: lh6BmjdRcaNF7xuITfItaA== x-oss-server-time: 106 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a47902f7f8-BNA
2024-05-24 22:57:33 UTC	689	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 08 09 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '%'/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 3f b6 ac d8 db 95 cf ae be bc 9d 72 d0 de 7f 7d ed e1 fa af a3 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 03 05 25 c5 67 1e ee ba 5e 99 ec 51 c7 d1 9d e5 a9 d2 37 49 1c fc ae 86 cd 45 1a 89 22 aa 5b cd 1a 4f 13 20 56 40 af 55 93 3f 9e 7e 4f 67 d5 f8 fa fe 97 b3 e9 b3 a7 26 3a a6 f7 2a 6e 95 f7 cb a5 df cd d2 eb ca fa e3 b3 8a b3 a7 4f 9e 68 47 a3 cb 72 f5 68 65 d3 b3 a3 cb b6 c5 65 18 e3 74 e1 e2 27 a7 5b 97 af ec 1e af 95 f6 3f 57 cd 00 00 00 00 00 00 00 00 00 00 00 00 02 93 c9 f3 f4 70 b6 fd 17 7f 3f 53 17 d4 55 15 8c dd 3e bc b6 31 4c df 1b 3b 76 7a f9 76 b9 ec 29 8c 6b e5 66 75 0d 0e b9 65 cc c0 2f 20 4c ce 22 56 53 ac 15 1e 12 3b 7c 8b 87 5f 69 cf b5 d1 ea 47 4c cd 61 7b 05 89 db 6d 93 8d 6e 5f 2e df 6f 37 23 8f 6d 3c e9 af d2 31 cf b6 a9 b5 93 29 be Data Ascii: ?r}%g^Q7IE"[O V@U?~Og&:*nOhGrheet'[?Wp?SU>1L;vzv)kfue/ L"VS;\|_iGLa{mn_.o7#m<1)
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 39 ba f9 5e 6b c9 f4 fd 27 ab e6 6c d4 f8 bf 1f d3 f4 9f 43 e5 cc 89 aa af 39 e1 fa 7d 4a e5 e8 7d 3f 3f 4e 7a f9 cf 3f ba 68 f4 9e cf 04 a7 74 b9 f7 e1 72 f4 76 3d 9e 0d ad 9c ea 32 02 24 71 a7 b5 f2 0e 3e 8f cc fe 7e fe d3 33 f4 f7 1f 57 a7 a9 c6 1b 99 c9 c3 31 bb 86 d7 95 49 4e 5d 59 5a d1 d3 42 3a eb 4b de fd 0f 93 f4 1f 47 84 00 00 00 0f 9f 6b 99 e9 8d 89 9d cc ab b3 6f 36 29 33 32 b0 95 30 31 82 bc 08 98 64 1a ac 66 cf 13 d4 f1 0d 59 81 12 3a 6b 5f 9d 79 ef 1f d3 f5 5e 8f 9f 6d 73 86 57 9c f3 fb ae e9 c3 ad db cf e3 3c 3f 57 da fb be 4e bf 3e be 67 97 ab d0 fb 3c 1e 63 cb ef df 87 a3 f4 78 6b a7 94 f2 7d 4b 3a 70 f4 3e af 15 7b 3c af 2f b7 b1 d7 cf b7 7c a3 3b e7 bc de fc f7 e1 d4 ef e6 94 a2 62 94 e3 e6 1c fb 7e 62 e1 e9 f4 5e 6f 6f e9 48 7b aa e7 Data Ascii: 9^k'lC9}J}??Nz?htrv=2$q>~3W1IN]YZB:KGko6)3201dfY:k_y^msW<?WN>g<cxk}K:p>{</\|;b~b^ooH{
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 6d 4c 9b 39 ae 5f 0f 47 a0 ef c2 59 98 38 5c 3d 1b de af 3d 92 ce 18 d9 2f b9 d4 d5 14 ab 11 c4 a9 82 f9 5a 63 0c 55 4c 18 24 56 47 58 c4 34 c6 70 28 6f cc 7c de ef 92 73 f6 c5 69 cd 6c bd 46 f5 37 2b 4f 9a 8b e4 63 ad 3d fd ff 00 5f 3d 9b 39 56 ab 75 8d 4a ce 5c c5 35 ce 7d 23 9d e6 f5 fa db cd 8a 9d 79 d4 56 29 d0 8c f6 9d 3c df a9 3d 5f 27 64 00 00 00 1a c7 9d a7 93 d9 db bc b4 93 75 88 05 6c 6a e4 dd 95 32 09 ab 52 2d c4 89 69 8b b1 6c dc 62 f0 4a f2 66 31 54 da e6 bc 1c ed b9 b4 15 6b 38 c8 1a a7 51 c6 09 4a 36 af 10 22 4f 50 cd e5 f1 f4 68 f3 ee d6 c7 4f 3f 63 af 18 62 69 be 6b ca 73 ef e0 b9 7b 7c d4 f5 e9 ef 3d 2c ed c4 8e 9c 7d df 29 cf ad f3 bf 54 af 37 aa e9 e7 e0 e7 7d 37 4a 36 b4 d3 ab 91 e5 0f 38 ce db a7 a0 d8 fa 7d 79 fd b7 a3 c9 3c 6c 33 Data Ascii: mL9_GY8\==/ZcUL$VGX4p(o\|silF7+Oc=_=9VuJ\5}#yV)<=_'dulj2R-ilbJf1Tk8QJ6"OPhO?cbiks{\|=,})T7}7J68}y<l3
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f ff c4 00 3b 10 00 02 01 03 03 02 05 02 05 02 05 03 04 03 00 00 01 02 03 00 04 11 05 12 21 13 31 06 10 14 22 41 32 51 15 23 30 33 42 50 61 16 20 24 40 71 34 43 52 07 25 53 60 72 90 a0 ff da 00 08 01 01 00 01 08 01 ff 00 f7 0a f2 aa 77 13 af ff 00 5c 9e 71 Data Ascii: ;!1"A2Q#03BPa $@q4CR%S`rw\q
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 7b 56 e5 ce 2b 0f 83 b7 b7 04 12 dc 8c fd c8 14 40 ac 56 7c 86 03 2e 65 57 6d 6a e3 f1 55 f1 bc 40 4b d6 d1 75 7b 4d 5e cd ee 49 bd d9 fb 0d 2c 8e 49 71 2b 8a 13 ff 00 e4 7a 33 7d 48 6e 20 18 85 35 2b a5 fd c1 aa 40 76 86 3a 8d a0 ef d7 5c 13 5e a2 2c 8c c5 1c af ee 47 b9 b2 b4 66 31 5c 5d 4f 73 fb 8a a5 98 0a 4b 88 89 06 21 99 06 6b ff 00 1a 23 2c 14 5c 4f 1c 52 3d bd 34 77 17 53 24 b3 46 04 45 88 f0 ee d2 e8 cb fd 0d 9d 50 65 af 35 36 b6 85 a6 13 eb 52 da cd 66 0a 5d f5 64 64 7c 50 27 14 cd 8a 24 22 b3 34 6e ef ee 3d 8d 49 28 8d 58 93 2c 9b f6 85 f7 be ea 39 f3 2c df 02 27 7e 59 ed b0 33 1e 4f 35 96 23 db ff 00 e6 18 37 2a 42 71 9f cc fe 1b 86 79 0d 91 9a c8 ac 56 39 ac d6 45 1c 1e 2b 52 d2 2c ef d7 17 57 5e 07 49 cb 7e 1f a6 78 5c 58 58 5b ac 52 ad cd Data Ascii: {V+@V\|.eWmjU@Ku{M^I,Iq+z3}Hn 5+@v:\^,Gf1\]OsK!k#,\OR=4wS$FEPe56Rf]dd\|P'$"4n=I(X,9,'~Y3O5#7*BqyV9E+R,W^I~x\XX[R
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 3c 61 b8 a2 92 c3 cc 42 58 2e ad b7 cd a5 5e 0b 9b 68 da be 69 69 04 10 f3 28 95 ef 26 d8 f1 e2 29 de 68 ee 56 7e a2 86 bc b9 84 8c 89 6d e2 92 c9 5d f7 ce f0 94 4b 73 17 49 da ee 06 4b c3 2e d9 88 20 8a 84 74 ae 25 03 42 d5 af e2 96 00 b1 9d c8 a4 fe 9c b3 2c 4b ce f2 e7 27 3f 34 0d 7d e8 e4 d6 00 ed cf 7a c9 3d 86 ef e5 ef 3d 80 6e ec 77 f6 a0 31 cb 10 4e 68 18 85 60 37 24 48 83 80 4f c9 dc c7 e9 cf df ef 5f 7f 2e 3c bf e4 1e 30 09 5f e6 00 fe 24 3f 73 d4 00 f0 18 91 5e c0 d5 74 90 cf 6e f1 cd a7 49 70 d1 ec 94 1c 71 4f 14 32 15 69 37 00 28 bd 17 34 f7 b6 e8 76 d1 bc 95 fe 8f 4f 7f 39 f7 a6 93 6d 11 dd 23 da c1 2a 34 74 05 de 98 70 62 9a 29 e3 12 42 1a a6 b6 b6 b9 64 69 b7 71 81 73 77 05 a8 06 61 3d fd e1 c4 70 58 c1 0e 18 82 06 00 38 35 b8 8e c7 9f a8 Data Ascii: <aBX.^hii(&)hV~m]KsIK. t%B,K'?4}z==nw1Nh`7$HO_.<0_$?s^tnIpqO2i7(4vO9m#*4tpb)Bdiqswa=pX85
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 94 d1 d1 20 6f a9 74 4b 01 de 3d 2b 4e 8d fa 80 22 a0 c2 60 56 2a de 6e 8b 0c fe 8d f7 fd 34 95 76 0f 44 11 e5 9a 06 83 50 6a 0c 28 1a cd 66 b2 2b 34 0f 96 71 e4 70 33 59 ac d0 ac f1 5c 8e c4 83 40 f1 59 cf 35 fd cf 6e d7 17 09 02 e5 a0 b5 6d fe a2 e7 ca e6 e5 60 f6 88 6d 09 6e b5 c8 c7 c7 3d cf 19 a3 d5 3d 89 45 ab f8 64 8d d2 fa 28 65 4b 88 d2 58 f3 e4 ee 91 2e e9 24 7b 8b cf 6c 71 5a 24 08 15 17 0a 30 a0 b7 76 18 26 b3 f1 5c 0e c5 b1 52 dc c3 18 cc 8f 76 67 18 8a de c7 51 52 d4 b6 91 e0 6f e8 43 d8 1b 5b 67 18 61 04 03 b0 86 2a f4 36 7b fa 94 2d 55 33 d2 96 db 50 23 d8 6d 3c 42 cc 54 ae 89 ab 48 73 32 78 71 08 22 64 f0 f6 8e 9d e3 d3 ac 21 fd a5 05 46 17 2f 45 47 ce 06 3c b8 ff 00 26 6b 35 9f 23 59 a2 6a 21 b1 14 7e 8c f1 89 21 75 a9 60 69 21 74 6e a8 Data Ascii: otK=+N"`Vn4vDPj(f+4qp3Y\@Y5nm`mn==Ed(eKX.${lqZ$0v&\RvgQRoC[ga6{-U3P#m<BTHs2xq"d!F/EG<&k5#Yj!~!u`i!tn
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: a5 c9 7a c1 a2 ad dc b8 c9 e2 18 cf c7 86 75 3f 4e 16 de 5f d2 91 04 8a 54 c9 19 46 2a 66 89 e3 6e a4 28 d1 4c 32 1a 3d a7 27 dd f2 1f 69 e1 64 23 92 0c 67 8a e9 12 7d bb e5 04 aa 89 67 03 24 4f 91 96 22 c2 63 93 e9 2d 1f b1 d3 87 f1 f4 33 8e de 8e eb 39 1e 8e f0 8a 16 57 5f cd 6d 6f 07 15 e8 a4 c8 2a 2c a5 3c b4 ba 65 cc af 01 3e 9e 5a 16 f2 7c f4 1e a6 d3 6e e5 98 4a a9 65 71 fc c5 94 bf 3e 80 7c 8d 3a db f9 0b 4b 48 c7 b7 aa 54 71 ea 1d bb 75 59 f3 5c 9e f9 c0 e7 9c 57 ce 14 23 31 a1 19 fe 40 22 1c d6 e5 1d b7 33 76 c7 df 68 ac d6 e1 f1 93 5c f9 73 5b 8d 12 8e 30 c2 25 07 29 75 e1 97 b8 b9 b9 b9 ab 8b 3b ab 37 db 30 92 56 18 a6 37 18 1b 9a 57 23 00 b4 bb c9 a5 2f da 8c 8f 8a 9a 1d c7 7a bc 4a 02 11 07 26 ad 82 1e 09 41 f5 33 42 e0 9d c6 22 3b ba f0 70 Data Ascii: zu?N_TFfn(L2='id#g}g$O"c-39W_mo,<e>Z\|nJeq>\|:KHTquY\W#1@"3vh\s[0%)u;70V7W#/zJ&A3B";p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.5	50019	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:32 UTC	626	OUT	GET /uploader/8903fb7b820c454c2185671cc5f2599ffe15cbdb.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:33 UTC	680	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:33 GMT Content-Type: image/jpeg Content-Length: 61444 Connection: close x-oss-request-id: 66511B5D9979C73636F41A59 ETag: "0747BAAC18119E1A0DCFF42887DEC064" Last-Modified: Mon, 23 Oct 2023 02:04:17 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 14939356345109512039 x-oss-storage-class: Standard Content-Disposition: inline; filename="221c847462e7ce3b78fbf0cb683ad41c48d38169_221" Content-MD5: B0e6rBgRnhoNz/Qoh97AZA== x-oss-server-time: 115 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a51916f7d0-BNA
2024-05-24 22:57:33 UTC	689	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 08 09 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 04 03 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 51 e5 35 14 c3 17 04 83 0a f5 ad fd 34 58 fa 83 4f 5f d4 d3 8d 60 bc 8f 64 30 56 b0 6b 79 7c b3 9b a2 11 8c a4 42 41 94 ea 74 32 13 8f ad 75 3d ce a3 db a5 47 85 e6 42 37 7c df 34 aa 03 88 d4 6a 90 c0 42 31 9c 1c 03 63 27 1d c9 25 41 20 fa 8f 58 fb 0b 3b ef 0a 00 00 00 00 00 00 00 00 00 00 00 00 88 79 e1 f2 fa 78 1a f7 a9 84 72 61 54 4d 97 25 91 23 f4 17 73 e0 5c d8 72 fe 95 ee 63 67 9d 31 af 49 64 83 e1 cc 3c a2 24 19 cc 07 53 31 38 f5 8d 35 92 94 82 6b 32 fb 3a 7d 8b a5 39 a1 cc eb 52 f8 39 e9 a4 58 eb 6f 95 c4 f3 47 22 90 4c 60 94 6d 46 03 b1 84 c5 25 f5 be f3 ed e3 f4 cf 9f a7 a1 67 40 00 00 00 00 00 00 00 00 00 00 00 d7 2b e3 13 c1 62 19 c2 e2 4b 42 41 14 98 7d 79 5f 2d 59 65 8b f7 af aa c2 4f 24 af 9a 71 7e d5 ac fa 9d 6b b9 8b 37 e6 5c bc d0 f2 5a Data Ascii: Q54XO_`d0Vky\|BAt2u=GB7\|4jB1c'%A X;yxraTM%#s\rcg1Id<$S185k2:}9R9XoG"L`mF%g@+bKBA}y_-YeO$q~k7\Z
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 7d ca ce 8b 02 cd 93 36 b2 6b 43 e6 e9 e8 bb 27 bf 3f d2 89 9c 00 01 d4 a3 aa d2 36 98 0c 66 55 92 98 6a c0 ec 67 3b c7 53 b0 3a 40 e9 51 e2 d2 b5 a8 d8 6a 29 d2 2c 08 55 94 ea 76 31 11 4e 85 99 8c 18 8a a3 09 3c 9a 49 39 38 31 9d 12 19 d1 6b b4 c2 64 aa 83 b9 66 88 a5 e6 ea ef c1 d5 b2 f7 70 f9 c7 0f 6d b6 75 67 7c ed fa 7c 72 f4 f3 47 d2 9b cf 79 b7 8a 5f 2f 4f 32 f9 ff 00 4f a2 df b1 b9 f7 fc ed 57 3e b5 fb 5a f5 72 42 92 bd 74 54 f4 69 6f ee 70 11 ac d8 56 31 a8 72 f4 c1 bb 9b 71 e8 bd 5c be d3 e3 e9 dc 00 0e a7 8d ed 19 6c 53 8b 20 57 36 a4 98 b3 cb a8 ae 97 64 29 12 de 21 55 99 d4 e4 ec 76 ca 1e 99 0e c7 43 39 dc 80 72 72 76 3b d7 10 2a 0c 87 73 11 62 60 38 33 1c 03 0d 42 30 db 0a 2c 52 9f 49 09 49 56 11 4e 75 b2 59 93 9f a7 17 c3 fa 9b cf d9 f8 dc Data Ascii: }6kC'?6fUjg;S:@Qj),Uv1N<I981kdfpmug\|\|rGy_/O2OW>ZrBtTiopV1rq\lS W6d)!UvC9rrv;*sb`83B0,RIIVNuY
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 24 1f 56 7a 67 60 d4 8c b8 4c b1 1c c8 9d d4 58 92 8b 32 45 67 32 92 4c 87 54 c8 92 0e c7 07 70 61 ac b5 84 e8 64 3a 11 31 ab 9f 93 dd 61 f4 38 b5 4e 4e b8 ff 00 43 96 47 a7 9c 73 b4 42 e6 f7 ef cb d1 c7 4f 1d 3f 1f 64 de be 7d 2f db 37 96 69 be 7b d4 f8 fa f5 5e 3e 9c bc 5d 3e 8f e5 e9 c5 6b 5e fe 3b 47 7f 17 a3 77 f2 ec 3d 3e 12 ae 7b 44 46 a9 72 b9 d4 e3 59 e9 35 a3 78 eb 49 ce a9 12 c2 a8 e5 bf df 9e de 7a 0e 9e d9 99 30 03 e5 13 e5 3a 9c 52 4b dc c8 71 64 29 ad 89 3d 76 eb d7 6a c7 52 e6 af 97 cb 58 f8 f3 ce ce 8a a2 3a e2 37 fd 4f a5 7d 26 54 10 e5 4b 18 ed 67 53 09 22 3b d5 95 4c 30 96 24 b2 69 cd 91 ac af 26 e6 f2 b0 d2 de ba 12 c9 47 43 31 17 8b a6 d3 cf 53 3a b8 f4 0e 2f a3 7f f5 7e 6c 36 a0 25 24 44 f9 5f 47 6b ed e1 d6 fc bd b0 72 f5 5d 75 72 Data Ascii: $Vzg`LX2Eg2LTpad:1a8NNCGsBO?d}/7i{^>]>k^;Gw=>{DFrY5xIz0:RKqd)=vjRX:7O}&TKgS";L0$i&GC1S:/~l6%$D_Gkr]ur
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: d4 f6 f2 6c 3f 47 8b 5f b2 4a 51 11 4d 58 d8 8d f1 3d 58 db a3 72 37 52 ec ca 70 6a e7 98 1a 75 53 15 75 5e 57 45 61 52 54 c5 71 14 c6 45 20 10 cc 06 03 a1 d4 e0 ee 70 75 3b 19 4e 0e e7 26 73 31 b9 d7 a9 e9 ea b6 d9 d5 b6 5e 7e 5a 16 b1 86 a4 52 c2 e6 c6 f8 e6 f5 e7 97 a2 17 2f 44 3f 1f 5c 5e 5b 8f e5 e9 d3 3b c1 e5 e8 f3 f4 e3 17 1e 7d 39 8e 6d cf d3 cb 3f af 9e ff 00 eb 7c cc df 57 82 ba e6 b0 aa 2f b3 af 3b f8 ff 00 5b 4e e6 f7 f0 df b3 f2 20 7a 79 76 cd cb 9d f7 ce f3 79 ea 4e 75 29 22 7b f8 71 eb e7 dd 9b 7a de 4d e8 dc 4d 8c da 8d 80 b6 2e 89 44 b3 20 00 10 4d 6c d7 8d 78 a0 28 6a a6 2b 4a 92 b0 82 47 31 11 4a f2 b0 ae 23 1d 00 38 31 91 08 04 73 a0 39 3b 1d cb 53 6c d3 63 b6 c0 f3 2c 29 6c c6 b6 ab be 9b c9 bd d6 e3 65 a5 42 3a cb c5 cf 4a c8 bc 49 Data Ascii: l?G_JQMX=Xr7RpjuSu^WEaRTqE pu;N&s1^~ZR/D?\^[;}9m?\|W/;[N zyvyNu)"{qzMM.D Mlx(j+JG1J#81s9;Slc,)leB:JI
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 2b 39 3c f1 e9 69 a9 de da 11 b3 4f d5 20 be 5c 0f f1 f2 48 91 46 d2 49 a8 dd 1b cb c9 a6 ac e3 ce 6b 35 c7 a6 78 a0 8c de 77 a2 78 32 d7 53 35 b8 fa 64 8a f8 73 53 24 fc 94 be b7 17 31 5b 26 f9 35 0d 52 5b b3 80 4b 1f 21 dc 62 95 d3 76 e2 f2 e1 9f 07 2c 73 43 00 51 ac d6 6b cd 66 99 bf 15 f0 d4 fd 39 24 81 bf 45 dd ed bd 8c 7b e6 d4 35 ab 9b dc a2 fa 0f 34 3d 51 9e 36 57 4d 27 52 17 d1 10 ff 00 e3 09 00 64 df fc 44 23 63 1d a5 ee ab 75 7e a8 92 bb 74 f8 a8 d4 3e 77 34 38 38 a3 11 fc 10 e3 cf 7d 2a 6c e5 99 c9 ab 6d 3a e6 e8 f6 b6 8f 72 91 99 9e e3 4d 5b 62 a2 86 9c ad 6d 2c f4 d0 ba d0 6c 54 32 08 de 39 52 37 57 8e 36 12 48 91 23 48 f3 eb 77 73 31 16 77 57 4f 33 66 5d f5 d5 35 d7 fe 64 7e 28 f3 e9 b4 9a c7 f3 95 af fa df 8a dd 90 6a 31 9e 4d 94 9d 3b 98 Data Ascii: +9<iO \HFIk5xwx2S5dsS$1[&5R[K!bv,sCQkf9$E{54=Q6WM'RdD#cu~t>w488}*lm:rM[bm,lT29R7W6H#Hws1wWO3f]5d~(j1M;
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 12 90 16 a3 da 40 3b 7a 6d 5f ee 84 6f 29 50 9a 70 91 75 1b 55 73 e6 b5 e8 ba 57 dd 4a 0c 77 ad 73 b5 6b 93 47 f1 59 c7 9f c5 66 80 2d db 52 de 59 db 10 d2 de dd 47 76 ce ed d3 15 3d dd d5 ca 84 98 74 c6 01 64 fc c6 ad 9a c5 08 95 b8 1b 4c 66 ac 1f a9 61 6a f5 ad 69 bf 2e c6 e6 1c 8a d0 6e 99 6e ba 14 6b 1f 8a c6 d1 9a 2c 38 ad ea 1a 82 e7 dd 21 24 0d 9b 3a 62 42 ee 2e 5e e2 6b 9b 1b 57 b8 94 b1 a9 2d c7 55 a5 16 56 72 d9 87 94 da a9 bd 64 b9 9e e4 db 5e 5d 44 86 ce fe 5b 67 99 61 8a 25 bd bd 54 92 f6 d1 60 b9 9e 38 fa 72 67 07 d3 35 9a 92 d2 58 e4 55 68 e2 6e fe 9a a3 48 e1 00 55 82 30 81 64 35 64 fb 31 25 0f f9 6e e9 1a 96 7b bf 88 ac e1 e2 1f fe a8 93 69 a3 ae 6a 45 cb d3 96 67 69 1b 9a f1 5f ee ba 84 f9 49 02 9a 89 4c f3 2c 6b 6d a1 da c2 a0 dd 5c 46 Data Ascii: @;zm_o)PpuUsWJwskGYf-RYGv=tdLfaji.nnk,8!$:bB.^kW-UVrd^]D[ga%T`8rg5XUhnHU0d5d1%n{ijEgi_IL,km\F
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 4d 6a f6 5f 39 68 76 c3 67 2c d3 c7 0d 5e e8 53 d9 a0 74 39 1c 1c 8a d1 6e 8d d5 82 ee fc e4 b3 ed 19 a3 d2 90 32 34 36 f6 f6 c0 88 7d 4f 35 1c cc 1b 64 8c a1 c6 09 1f b5 c8 c8 c1 ce 38 1f bb 35 2c 11 4a 28 4f 2d b1 db 38 60 c0 15 9e 08 e7 1d ce b3 5b b7 dd 59 e2 8d 79 9e f2 26 da 62 4b 8b f6 fe d8 83 51 93 df f4 b8 7c c9 1d b5 b4 5e dc ed a1 3a 33 6d 5a 27 02 a4 bb 27 b6 2b 55 92 e6 49 7a d2 b9 b4 ba 90 5a 5a db c5 34 f7 02 e2 cf 4d 8a 12 64 6c 66 8e 14 52 a9 63 5e 38 a2 72 68 ca dd 7c 35 9b 74 2e 40 fe 99 75 1e 4c de 68 bb 1a e4 f3 58 6a 55 c1 c9 ee 38 ae 16 bd db 81 dc b8 c5 46 84 9e a3 bb 95 1d be da ec 62 52 b7 54 1b a5 95 e5 2c 76 f2 78 5c 9a 90 3b 0d a3 85 00 0c 99 24 2b 4d da 33 40 e3 f4 84 35 b0 56 2b 8a dc 95 bd 2b de 2b b7 f3 f6 eb c8 ae 6b 6f Data Ascii: Mj_9hvg,^St9n246}O5d85,J(O-8`[Yy&bKQ\|^:3mZ''+UIzZZ4MdlfRc^8rh\|5t.@uLhXjU8FbRT,vx\;$+M3@5V+++ko
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 38 35 6d 2a ba 86 ae d0 4d 63 0e c6 98 12 79 3c 31 c0 3d e7 21 b7 e4 a8 24 3d 6f dd 8a e7 72 52 9d d8 c5 f6 a6 03 f4 a3 8f 53 cf 12 25 ec 2c 77 52 b8 2a 6b 3d bc ee 39 5d f9 cb 0a c9 15 bf 91 41 b9 c5 67 c6 72 1b 6e 41 23 14 0f a7 1e 6b 03 39 ac 2b 9a 58 a4 8f 3d 35 77 e5 5f 0a cb b5 fa 4c b9 28 bd 42 32 4c 93 46 5b 31 c9 14 cc c5 43 15 cd 0f 94 99 b2 39 c8 a0 b0 48 4b 47 46 04 dd be 1c cd e1 9e 25 7e 6b ee a7 f7 59 64 1d d1 89 83 b0 47 2e a1 82 9e 98 56 fb 68 9b 46 7d 24 91 62 42 ec 91 9b f7 2f 2f dc 84 1d af 10 9c 6e 16 93 15 26 de 47 50 ea 55 8a ca 5f a3 49 0a 43 8f 47 90 25 16 92 6a 11 e5 40 32 09 bc 98 5c fb 24 02 a6 8b 78 c8 8f f3 2b af dc cb 1f f5 4c df 81 59 ac fa 66 b3 5b a8 b8 14 d7 28 29 ee 5e 4e d4 8a c1 db ba 68 60 0a 05 31 54 19 36 c0 e1 a4 Data Ascii: 85mMcy<1=!$=orRS%,wRk=9]AgrnA#k9+X=5w_L(B2LF[1C9HKGF%~kYdG.VhF}$bB//n&GPU_ICG%j@2\$x+LYf[()^Nh`1T6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.5	50025	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	626	OUT	GET /uploader/e84e22097951cec3381ed92b3c1d03ca67cc1716.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:33 UTC	678	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:33 GMT Content-Type: image/jpeg Content-Length: 45662 Connection: close x-oss-request-id: 66511B5D91795F37376D72D4 ETag: "820C68E472BAFA0CAE86734D8C011EA5" Last-Modified: Mon, 23 Oct 2023 02:04:16 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2483028614894176826 x-oss-storage-class: Standard Content-Disposition: inline; filename="2216125818afe22324fc2e131e380e979cd86271_221" Content-MD5: ggxo5HK6+gyuhnNNjAEepQ== x-oss-server-time: 36 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a65bb9f7e4-BNA
2024-05-24 22:57:33 UTC	691	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 49 19 01 00 e8 03 00 00 49 19 01 00 e8 03 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifII02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 08 09 ff c4 00 17 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: c3 95 db 99 a3 74 9c d1 ad 2e 15 69 96 32 91 85 63 28 6f 0e a2 37 26 94 d1 14 cb 29 22 25 12 0f 56 3e ca 00 00 00 00 00 00 00 00 00 00 00 00 00 03 93 21 1f 35 1e 08 5c 7a 5e 9c ad 79 f4 75 19 76 a6 e1 63 9c f2 73 26 a1 6f 5b d4 cd 85 cb 20 c2 0b 2a 65 6c 2a 71 94 d6 9a 73 26 52 f0 8f d2 5f 6e e4 df 17 10 93 58 6b ca 25 0a db b9 32 46 43 5c 6a 17 02 51 2f 32 e1 9a 25 54 92 55 77 a7 db 91 20 00 00 00 00 00 00 00 00 00 00 00 05 0e 60 e1 cd 59 f3 49 a2 39 33 09 db 57 4d a4 9a d4 f3 54 d3 9a 53 ba 3b 7a 54 b3 81 cd f2 00 99 8b 56 f3 00 2d 31 54 ad 0b 98 dd 11 ec d0 66 d3 9a 69 2f 6a 6a 61 2d 41 b1 8c a5 49 59 b7 cd 6a e5 c1 10 ba 73 b7 52 f9 6a 5d 59 0c f8 67 26 8a e8 2b 7d 1f 4b c7 af 00 00 00 00 00 00 00 00 00 00 00 07 8e 9f 1e 9b 32 71 79 30 e6 4e 74 ed 0d Data Ascii: t.i2c(o7&)"%V>!5\z^yuvcs&o[ elqs&R_nXk%2FC\jQ/2%TUw `YI93WMTS;zTV-1Tfi/jja-AIYjsRj]Yg&+}K2qy0Nt
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 3e 95 3b fc 80 00 0f 95 4f 0f 20 11 b6 c6 63 8c 66 42 f3 3c 5c 69 cd 6c 5e 34 c9 57 46 13 0c 50 b2 a3 65 71 97 4c 70 8b 63 dc 74 d1 d7 9a 18 49 87 d0 d1 e0 f5 cd 16 15 8c 58 67 3d 5f 49 1d 1e 4f 15 25 12 8f 6e 34 67 89 18 b9 ae da c8 46 4d 2a 4e 3e 8c 3c 90 d6 19 0e f0 9e 78 91 36 3a 73 0d 54 b0 a0 2a 5a 5c 5c 63 28 5a 5a 50 a1 6e d3 0d a9 b6 37 51 de 69 d2 d7 ad 1d 6f 26 5c aa 00 07 cc 27 ce 00 c1 a5 86 23 09 8c b4 b8 b8 bc b2 35 d1 83 6b 2b 24 50 b6 31 96 14 8c 46 4a c7 17 47 b6 56 b7 4f 29 31 c4 a3 e8 68 f0 2a d4 16 14 2d 8a c6 73 e9 bd 3c 94 e3 eb 21 d7 9e 80 78 26 5a ec aa 54 bf 41 58 68 2e 32 1e fe 73 27 14 6b 6a 69 d3 e5 83 4d 9d 74 15 b4 37 7a 6d 62 79 9e a5 93 62 b5 24 92 4a 36 46 c7 49 86 6d 27 19 4a c6 22 e2 e2 b9 49 e6 d9 f3 54 00 0f 99 8f 11 Data Ascii: >;O cfB<\il^4WFPeqLpctIXg=_IO%n4gFMN><x6:sTZ\\c(ZZPn7Qio&\'#5k+$P1FJGVO)1h*-s<!x&ZTAXh.2s'kjiMt7zmbyb$J6FIm'J"IT
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 2a fb 0c 7a 12 e3 2c 2e 2f d5 88 4d 2d 8c 65 0a 15 2e 32 14 04 a5 b0 17 ea 65 32 94 34 c7 8d 27 99 2f a1 a7 d9 92 6c 20 00 00 02 91 69 65 bc 19 f3 5d 72 27 99 d9 16 b6 8b e8 d6 f7 c7 a8 5d 76 c7 3f 26 aa b5 2b a7 23 dc c9 4e 46 ba 13 4a 68 8d a9 b6 2a 48 8e af 6e c2 de 8a c8 d9 ba 6e 12 44 b4 c2 da d5 d9 e6 55 c8 9a 08 f3 53 52 99 56 c5 d6 9e bd 1e 8d 2e c4 d2 9a 43 89 af 37 48 36 5c 93 12 49 b0 2c 4e 89 7d f4 f4 c5 a9 6a f3 35 96 3a 05 b8 b8 a8 05 4e 60 9a 55 77 44 04 e6 2b 50 68 4e 1a 38 7a d8 69 f4 65 9f 45 65 b9 cc a8 00 00 61 31 98 c8 eb 19 a8 64 23 5a 79 bd 97 a7 83 db c6 59 a3 32 4b eb fc 92 75 66 ee 40 ad d9 b4 b9 db 13 b4 97 19 0c e4 ea eb 0d 59 d1 1e 74 be 79 1a a8 d2 65 bc ca 4c 6b c8 e7 99 59 c9 95 2e 31 97 97 19 5a f4 0c 4e cf 36 35 dc 28 d4 Data Ascii: z,./M-e.2e24'/l ie]r']v?&+#NFJhHnnDUSRV.C7H6\I,N}j5:N`UwD+PhN8zieEea1d#ZyY2Kuf@YtyeLkY.1ZN65(
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: aa 3f 74 8c 6c 6d 8e a6 37 69 e7 b7 5f 5a 8b 1a c3 25 fe 2d ad 3c 1d cd 58 86 2f e3 17 8e 21 68 46 fd 85 ca 72 c7 f5 1d ca ea ea ea c5 5c 84 d9 5c 13 65 0e 16 2b 91 1b 63 36 3c 0a 0e 75 3b da eb 16 90 b0 ea d1 5b 4c 1f e7 0d 1c 3f d1 3e 46 46 d2 e7 b8 00 37 aa ec 60 be ec 83 46 ef 3c 51 79 25 5f de 52 54 ba 9a 66 bd bb 94 52 36 58 d9 23 76 38 7f ba 63 b5 6f 85 b1 c2 d3 6c e2 e5 5d 3d 9e 8f a9 31 af 7e cd 9c 4a bb 19 f6 8f 12 9f 29 e2 a3 86 49 b6 0b 0e 29 f4 b9 5b a7 49 5a d7 f0 53 8c dd 97 42 3d ba 68 53 a9 9a e3 c3 4d a8 c5 23 37 26 4a 46 d4 d9 5a f1 63 af 52 c2 ea 5b 45 51 72 4f 26 e1 67 0f dd 47 2c 72 b7 33 1e 1c 3a bf d0 55 d7 c3 48 35 e7 3f d1 0a ae b6 6a a7 5d ee d3 70 57 57 f0 dd 5d 02 b0 70 e6 d1 33 37 1d 3f dd 31 3c 38 57 b0 59 d9 64 6e ce 0a 50 Data Ascii: ?tlm7i_Z%-<X/!hFr\\e+c6<u;[L?>FF7`F<Qy%_RTfR6X#v8col]=1~J)I)[IZSB=hSM#7&JFZcR[EQrO&gG,r3:UH5?j]pWW]p37?1<8WYdnP
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: a7 bc b8 42 9a 67 0b e5 ca 38 bb 44 da 38 f6 bd e5 ff 00 c8 df ea b9 68 21 0e 6c 6d ea e6 e8 9f 55 23 b4 16 6b 78 05 7e bf 7d 86 53 99 6a 18 49 b0 07 fd 99 f8 85 1c 66 ce 9d b7 f5 a6 e2 94 27 e7 fd 61 62 58 ac b2 ca f6 45 25 a2 06 da 6f 4f 72 a7 7b 44 ec eb de b2 b7 97 66 60 0f 34 aa e2 46 4e 0b 94 51 41 ca 74 b6 23 1b 88 f9 67 69 b1 46 d6 c6 d0 07 7f 5a 74 f1 b6 e3 32 35 36 68 b3 7d 69 f5 6e bf 4e dd 8b 94 cd d6 b3 6c 5b 8a 07 40 af 67 1e 16 4e e8 90 0a 07 61 2a e7 3f 51 0b 8a b8 75 8a d8 9b 23 bb 53 64 69 3a d8 22 d0 e1 a6 a1 38 1e f5 9b 2c 8d 23 4f d9 5d ed 75 fb f8 ac d9 b5 26 fe 16 d4 4a df 9c d3 81 d4 28 eb 1c c1 6e 51 cd 1e 88 d5 9f 95 ca f4 72 ea f8 23 bf fe b3 c9 fb 0d c2 34 30 3c 92 c9 9e d1 c1 cd cd ed 6a 38 7b fc da 98 9d eb 1f aa f1 29 c6 f8 Data Ascii: Bg8D8h!lmU#kx~}SjIf'abXE%oOr{Df`4FNQAt#giFZt256h}inNl[@gNa*?Qu#Sdi:"8,#O]u&J(nQr#40<j8{)
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 64 7c 06 07 b0 da 46 16 90 55 66 5a ea 16 d7 40 39 cd 1c e1 d9 b7 d4 8f 46 37 0d 6e d0 e0 55 1c e6 07 c8 f7 0c d1 bb 9b 20 e2 16 29 42 29 24 6f 26 73 41 27 3a 27 75 70 4d d8 13 6e 24 7a 93 9d 97 b5 37 31 d1 ad 2e b7 a2 09 51 d2 d4 c8 e0 d6 52 4a 5d f7 6c 2d de a8 a0 c6 e8 dd 78 e9 b9 9b e3 73 c5 95 7d 2d 1c d1 67 7c 91 d3 4d 6b 91 9b 4e f4 73 e5 70 26 f6 19 81 e2 d5 19 e6 4c 6f 67 0b 5b ac 1d a9 b5 33 52 c9 9a 39 32 f1 e1 de a6 c4 6b 20 71 60 86 08 5c 2c 6e c6 0d 73 6b 74 fc 4e bd cd 25 d5 8f 09 d2 4a f3 ce 99 e7 b5 c5 1b f6 f5 95 67 6d 59 9a 3c e0 87 56 b7 e1 aa e4 26 70 b8 a6 94 f6 30 a6 d0 57 49 6b 51 cd ea 43 0c c4 f6 78 8b fd 8b c8 f8 a1 fe 17 f9 82 18 1e 28 7e 69 83 b5 e1 1f 73 f8 80 17 74 90 b4 75 b9 4f 01 a7 95 d1 97 b1 f6 de c3 71 e0 6b f7 1d 88 Data Ascii: d\|FUfZ@9F7nU )B)$o&sA':'upMn$z71.QRJ]l-xs}-g\|MkNsp&Log[3R92k q`\,nsktN%JgmY<V&p0WIkQCx(~istuOqk
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 43 1a 4b ce 81 a0 26 61 1c 93 43 f1 0a a6 c0 0e c8 c6 af 2b c7 62 a4 e6 d0 53 35 9f fb 5f ab 8a 9a a2 7a 81 69 a5 73 b4 d1 34 e8 fb 6d 1b 1b c5 4a 6d 97 51 a8 f5 76 ac d9 0e 87 fb 2a 5c 2a 69 23 64 d3 48 c8 61 22 f7 26 e6 c8 c9 81 53 7c db ea 5d e9 1d 42 76 3b 2f 46 9a 06 42 df 5f e8 a6 c5 6b dc 08 35 2e d7 86 8b 36 6d a6 e7 7a 69 d5 48 76 2c ca 09 e5 a7 7b 24 8d d9 5f c7 8f 6a 12 52 e3 71 f2 72 5a 2a b6 8d 0f 1f ea 14 d0 cb 49 29 86 66 d9 df af 58 47 6a 8a 49 21 78 96 29 0b 5e 3c e5 2e 37 88 ca 2c 25 0c fb 82 c9 cf 74 8e 2e 91 c5 ce e2 75 45 c0 2a 6c 3e b2 ab e4 a9 dc 47 a4 74 0b c9 14 d4 ba d7 d7 b5 9f 61 9b 57 94 30 ba 5f fb 3a 2c d2 7d 24 aa 7c 66 be 5d 39 7c 8d e0 c1 65 7b ea 75 77 13 aa ba ba ba ba ba 05 15 b1 38 dd 36 42 36 ea 16 8e 1c d3 ef 1d a3 Data Ascii: CK&aC+bS5_zis4mJmQv\i#dHa"&S\|]Bv;/FB_k5.6mziHv,{$_jRqrZI)fXGjI!x)^<.7,%t.uEl>GtaW0_:,}$\|f]9\|e{uw86B6
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 95 99 5e 3f e6 9e 10 10 6f 80 95 74 01 28 47 c5 72 68 36 ca cb 2a cb d4 b2 05 c9 26 dd bb d5 ca cc 56 67 2c c5 67 3d 6a ee eb 40 5f 69 59 1b f4 9e c5 94 f6 a8 d8 f7 38 0b 58 71 58 7c 77 7b 7a be 23 1d 70 2d a5 84 ec 2e ce 7f 0a 71 b9 28 9f 0d d6 64 1e 9d cf 16 36 ea 3c 11 87 7b 7b af fa a7 36 cd 37 3f 83 79 eb 57 eb ef 5c 47 14 77 78 36 39 82 db 6e 9f d1 29 bd 10 9b a6 6b 27 ee 5b 93 0e d4 ee 92 3b 13 37 a7 ed 0b a9 0d 01 58 7e 1d 9e 33 55 59 cc a4 6e ba ed 7f f6 55 d8 93 eb 2c c6 0e 4e 99 bd 18 86 9e b4 4d ca 28 13 6d 97 50 d2 53 e1 91 b2 a2 bf 9f 36 d8 e0 1f ba ab af 9a b6 5e 56 5f c2 d1 b1 a9 db 51 40 a1 b4 eb bd 1f fa ce 14 1d fc 4c 3e d2 3f aa 71 47 50 14 18 ad 1f 8b c4 6a e9 b9 6a 98 79 b1 93 bd bd 6a af 15 ad ad b8 92 4c b1 fd 1b 34 0b b9 0d ea 08 Data Ascii: ^?ot(Grh6*&Vg,g=j@_iY8XqX\|w{z#p-.q(d6<{{67?yW\Gwx69n)k'[;7X~3UYnU,NM(mPS6^V_Q@L>?qGPjjyjL4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.5	50023	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	392	OUT	GET /uploader/3c12228191e810dc3648fb860aea6101fc6a54ad.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:33 UTC	700	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:33 GMT Content-Type: image/jpeg Content-Length: 59732 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="22117083c34899e71e783c16e1df229daae64369_221" Content-MD5: gidc2pJYoLzm4zn1gkYUsg== ETag: "82275CDA9258A0BCE6E339F5824614B2" Last-Modified: Mon, 23 Oct 2023 02:04:23 GMT x-oss-hash-crc64ecma: 2151470066793196021 x-oss-object-type: Normal x-oss-request-id: 66511B5B90AF513232341FF2 x-oss-server-time: 39 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a65a89f7c4-BNA
2024-05-24 22:57:33 UTC	669	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 07 08 09 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 30 77 9f ca de 9f 0e be de 6f b0 cd fe 87 f1 fa fd 9b f9 d6 f3 33 af 1f b0 73 92 92 46 b9 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 d7 e2 0e f3 9d d7 3a ca de 4a d4 e6 78 a8 e6 fa 1b 7e 93 5f 43 4b d2 56 ae 26 cc cb 79 3b 0c 6b a3 c5 b0 cd 10 35 39 ad ce 06 be 57 73 ca 27 59 db 3b 6b 72 f0 be 7b df f4 6f d6 61 57 ba bb 12 d7 3b d1 bc c2 e7 7e 7b e1 fa 51 ba 79 bb 4f 67 93 a4 b2 c7 9f 4f b0 fc ff 00 a5 82 f2 bb c7 4d cf 5b 27 5b 47 19 1d 38 74 1d 38 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 1f 94 3a 4f cf 1d 20 eb 35 ce ef 56 1d 6a b8 dc d4 2c 5a 5c 58 d3 5d 11 dd 57 5a 5f d4 8d cd f2 6d 97 6c 56 a7 2e cf 11 ad 46 4e 96 e6 72 e8 8b 75 88 7c 57 96 be cf a9 97 4c 41 da 54 b2 a2 df 8f 48 7d a5 7e f8 a4 f6 6a 6b 7a ae 3a 8f 27 b7 a2 f1 fb Data Ascii: 0wo3sF :Jx~_CKV&y;k59Ws'Y;kr{oaW;~{QyOgOM['[G8t8 :O 5Vj,Z\X]WZ_mlV.FNru\|WLATH}~jkz:'
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 2f 8b 1d 5c 0e 7e 4a bc b9 7c 2b 6a c8 b1 df 3d 57 5e 35 6f 54 18 56 65 ba 2d 7a ce a0 ea 35 9d a6 da b2 d4 f2 a1 73 bc d4 b9 5b 20 fa 81 6a 62 52 47 57 1c c3 7f 21 3b 0d 63 a2 de 30 ce fe 73 8b d0 6b 36 92 7d 9d 33 d4 b5 97 9f 3e 38 d4 25 eb 96 62 ef 8e 9b 9b 5a 5b eb 5b b2 b0 96 45 9a 57 62 57 6f 37 6b b9 6b 6b 03 c3 9f c3 a5 d6 75 15 84 da ca b7 4d 0f 53 6a 62 92 8d a2 d2 e0 b3 13 cc 3a 0e 6e cb 16 64 28 00 31 3f 96 fa 71 fb cd 8d 51 61 39 7a 0a e9 7a cb 18 8c 51 65 c8 61 14 c0 c2 ad 6a cb 6d 19 4d aa ac aa 63 39 66 e9 d6 74 c7 47 52 6c 9a 9e 13 2d 98 60 b1 97 9b ca 29 f6 53 b3 cb 59 ca 9f 36 22 6a f4 57 13 37 20 4b ea f3 7c 35 fa 0c e6 2c 85 5d ed b0 6a 95 3e 3a bd f1 d0 46 8c 59 fb 89 67 e6 ed 21 54 ec ac cd 7b cd 92 c8 58 91 07 2b 1d b0 c2 c3 72 39 Data Ascii: /\~J\|+j=W^5oTVe-z5s[ jbRGW!;c0sk6}3>8%bZ[[EWbWo7kkkuMSjb:nd(1?qQa9zzQeajmMc9ftGRl-`)SY6"jW7 K\|5,]j>:FYg!T{X+r9
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 56 de b5 18 eb f2 de fc 7f 3c 7a 7e 37 3d 35 fa d3 17 f4 ce 40 78 70 ce ff 00 2f e7 f4 bc e5 d7 c9 a9 6b 21 24 5d ce 24 46 e4 91 33 8d ce f4 56 61 36 5c 6b b3 63 7e 26 32 e3 26 2d 7a 6b 93 15 c7 2c f4 d2 be 2e 26 b9 af 4d 49 95 b8 cd 6b 51 ac 2e 2d 66 c6 6c 6a aa 46 78 bb cf 8d e9 8a 5e bc 38 0b e5 e9 f7 9e 8f 6f 1a 91 94 96 22 66 7e 90 a8 35 f9 52 f3 e8 35 32 d2 59 ee 93 4d 09 62 cd 56 77 0c ce 31 d6 a2 63 78 e7 53 ad 85 3a 49 e7 ab c5 e9 b3 3b 18 ed 31 be b9 ad 6d 68 cd 93 9c 56 b7 41 9f 5c 49 7e 1b e9 f9 df 14 f4 fc fd 78 77 f9 d7 ef ac a4 80 55 e9 f3 9e fa c6 e7 74 6f d6 b5 67 51 a3 dc b0 31 b7 d9 59 d6 7a 9e d6 e8 c9 52 13 19 bf 4f 59 c2 6f 23 09 76 1e e5 a6 dc 2e b5 c6 51 a9 70 5c b3 9f 2d f6 6e 4c db 97 6d d9 de 19 d6 bb 7d 45 e8 99 f5 3d b2 53 3e Data Ascii: V<z~7=5@xp/k!$]$F3Va6\kc~&2&-zk,.&MIkQ.-fljFx^8o"f~5R52YMbVw1cxS:I;1mhVA\I~xwUtogQ1YzROYo#v.Qp\-nLm}E=S>
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: aa d5 5a 93 26 70 5f 52 11 12 a3 ae 79 b6 38 bd d7 3d 7d e2 3d 8d 64 72 19 f3 f3 f1 e6 5b ba 3a cd ce da ba 4d f3 ce 5a 19 ae 4a 34 84 d5 8e ba 35 98 f9 4b 33 4c 0c ad 89 9e 93 a6 e6 f4 e1 ec 6c 39 cc cb 1b 7c 31 28 a3 b1 cb e8 05 d9 b8 9e 58 96 25 91 68 49 26 12 89 64 a2 79 3c b0 26 13 0d 80 00 73 e7 10 72 65 22 72 4b cc d5 0c 73 e7 2f db 39 ae 4b 85 c9 11 ec 7b 75 95 89 72 33 19 b5 71 e1 69 d2 4a b3 03 18 f6 d8 3c ec 54 98 37 35 c6 a9 6d 73 7e d5 86 ec bd ad 55 1c 82 55 1c f1 c7 10 48 32 c4 a9 3a cd 8a ed 89 3a 48 d3 38 cf 28 84 52 48 23 24 65 e5 f2 d9 57 71 a2 a0 10 e4 9e b6 e4 a2 b4 da 4a 2d 8d 84 92 71 6e 75 67 42 6c 33 2c 8b 12 e8 bf 3a 03 a0 2e 4b 33 20 00 06 b2 98 a7 28 4a 92 94 a4 39 46 6b 2d 89 ab a6 cd 69 e4 2b 18 1b 4d c7 a6 79 d6 b8 9e 59 ed Data Ascii: Z&p_Ry8=}=dr[:MZJ45K3Ll9\|1(X%hI&dy<&sre"rKs/9K{ur3qiJ<T75ms~UUH2::H8(RH#$eWqJ-qnugBl3,:.K3 (J9Fk-i+MyY
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 63 cd 64 15 6d 2d 85 1f ee eb 35 a4 b7 a6 5e 86 3b 96 b9 8a f3 3e 89 a5 ea 17 c4 73 32 8d 3f 45 ac aa 9a a7 51 4b 29 60 b1 e9 76 2e 11 2d d8 2a 76 62 ed c4 06 de 0d 36 a7 17 3b 16 a0 be 35 0b 20 af 16 58 f6 1a 96 a7 a7 e9 db 58 9f 54 ea b9 f5 27 92 24 e9 d9 c2 c9 05 7a 7b 76 e2 ec 2f 31 b2 b1 d6 35 27 85 ab d3 af 4f a5 f4 ea 6d 0d 98 34 ee 9e b7 2e b9 a8 5c d5 ad 52 96 8a 34 95 b4 7d 69 19 a3 4f ee 7a 8d b4 a3 4e cd 86 bf 02 db 96 59 0a 4d 77 4e 61 94 7a 91 4e ca f0 6a b0 4b 8b 20 95 01 54 f0 06 c3 6f 19 b6 6e 46 45 31 46 04 54 d4 c3 6c b3 06 56 1b 8f f6 89 00 12 4f 4d 69 a9 aa 5d b8 d7 b5 78 2b 02 a9 25 bb da bc ac 90 50 d2 21 a5 b4 92 72 0a 36 4e 5f 38 e7 dd 8b 55 4f ac 6b 29 7b 44 af 48 45 16 ad d6 28 39 57 a0 f4 f5 5d 51 fd 45 9a 7d 3d 0a 6c 65 e9 cd Data Ascii: cdm-5^;>s2?EQK)`v.-*vb6;5 XXT'$z{v/15'Om4.\R4}iOzNYMwNazNjK TonFE1FTlVOMi]x+%P!r6N_8UOk){DHE(9W]QE}=le
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 13 fd 98 e7 e2 1d ff 00 55 ab ad 50 c9 be 15 fd 9b e4 76 24 89 81 51 35 5b 3e 2c 49 42 40 0b 40 1b 63 8b 36 d9 15 d9 15 78 e4 37 50 e2 cd b2 07 3d d7 f1 82 c4 a7 3d 4c 87 04 ad b9 ce 67 1a 5f f3 cd c6 09 db ec 65 fa 59 84 d1 44 48 0b 22 fb a1 62 c6 55 11 b7 3d f6 7c 12 10 0c 88 0c 61 8a 61 fd 35 31 48 77 73 cc 9d ec 49 80 8f 9c 8e 3e 7e 4b c8 c2 49 37 2e a0 b2 92 19 63 97 1b 76 4e 71 c5 fa 13 43 50 2c 81 77 60 1e 37 3b b5 ad 41 e4 0b 0c 30 e8 fa f4 06 39 66 37 f8 4b 32 4d 02 77 dc 05 10 a8 86 45 20 91 30 67 fd 51 fc df 90 41 d4 b5 8d 6e 07 ed 59 3a b6 ab 1c 2c 0c 48 52 05 89 c7 6d 9e 36 cb 36 ac 1a cf 2a c5 28 b1 5e 19 52 59 63 35 e5 95 a9 db 08 a9 c9 2c c6 d8 18 1f ec 92 cb 1c 31 bc 8f aa 59 3a 8e af 7e d6 7a 85 0c 41 f6 bf c1 5c e3 9b 7e c8 a7 78 ce eb Data Ascii: UPv$Q5[>,IB@@c6x7P==Lg_eYDH"bU=\|aa51HwsI>~KI7.cvNqCP,w`7;A09f7K2MwE 0gQAnY:,HRm66*(^RYc5,1Y:~zA\~x
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: a3 63 50 5b 76 61 9a 59 20 75 30 c9 0a ce 2a fa 79 7c 83 96 eb cf 3a ab 41 42 3d 6e ac fc de bd 61 0c 92 4d 23 09 37 42 b6 15 26 b2 26 78 cb 32 c4 c3 dc bf 4d 69 23 9e 06 46 f4 93 68 e6 49 69 c1 69 27 8d 66 86 3d 42 da f8 64 d5 c7 dc 6a 75 9b 71 89 72 b3 fc 09 10 fc 6f ff 00 13 af 21 ef 74 d5 bc f8 d8 63 8e e4 39 a4 ea 06 b7 a8 43 1c aa 0f 12 36 61 92 55 8d fe 5e 8b 46 79 46 f1 2b 12 25 6a 6c 41 31 6c e8 7c 2d af b4 83 84 83 da 57 36 c8 a7 92 26 0c b2 2d 7b de 4c b1 49 03 94 93 96 2b f9 c8 6c b2 1f 10 5b 1f 75 95 36 c0 c9 8d 14 13 ed ce 4d 22 a3 0f 64 ba 6c d1 1e 49 fb d3 5a a9 1b 47 27 e6 5e e7 23 9a 55 8a 56 64 96 48 4c 76 69 c2 ca b6 e8 e9 6d 2a 3b fe 55 9b b7 b8 7d 33 52 a7 23 a9 17 eb c9 c9 5e 58 e8 18 1a 68 f4 bd 18 de 1d fb 09 23 44 db 64 4f bb cd Data Ascii: cP[vaY u0y\|:AB=naM#7B&&x2Mi#FhIii'f=Bdjuqro!tc9C6aU^FyF+%jlA1l\|-W6&-{LI+l[u6M"dlIZG'^#UVdHLvim;U}3R#^Xh#DdO
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: e6 9d 43 51 84 3d 8b 7d 2d 6a af 2b 1a 60 be e0 bc 17 6b cd 0c 83 65 d4 ad ed 17 69 34 5a 49 a5 e9 c6 49 54 b0 9a 41 96 ec 0d 57 54 50 b3 69 d0 95 b0 5a bd dd 43 42 7e cc 95 af 44 f0 06 86 34 10 05 5c bb 04 17 90 56 b4 f0 59 d0 ee 0e e5 3b 21 a2 8d 00 63 19 64 48 e6 aa 8c 95 b1 59 ac 28 e3 35 c6 82 e3 90 b3 99 56 2c 41 28 b1 3f 27 9c 80 eb 88 b2 43 34 82 3f 53 04 cd 32 46 b6 38 3a ca dc b8 73 81 6d 77 7d 54 73 d6 e4 f3 4d 22 4b 59 e3 66 87 79 08 84 bc 8a ca 22 0e 63 69 23 95 66 e6 67 8f 76 52 fc ee c5 22 e2 4b 13 11 03 41 6c ce 3d 3c f6 0b 95 32 e4 77 12 bc a5 04 e1 cb 99 a2 85 52 bc 9c 98 2f 39 5e 2c 81 82 2c 61 a6 b4 cd 1c f2 19 2f f0 16 11 52 79 38 55 85 cc ab dc 84 16 b1 b6 c8 61 9e 3b 09 2b 91 3b c7 5a 69 8d 1e a0 bf 56 fc 2c 47 f0 f5 26 a2 da 6e 9a Data Ascii: CQ=}-j+`kei4ZIITAWTPiZCB~D4\VY;!cdHY(5V,A(?'C4?S2F8:smw}TsM"KYfy"ci#fgvR"KAl=<2wR/9^,,a/Ry8Ua;+;ZiV,G&n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.5	50026	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	392	OUT	GET /uploader/2a5cbac9076abe2e5d22faf36a87f5248a3168ee.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:33 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:33 GMT Content-Type: image/jpeg Content-Length: 69252 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2218c5f51758f50e4f345f063afc885803838650_221" Content-MD5: dTHvve63q3H47SQdJMw2ZA== ETag: "7531EFBDEEB7AB71F8ED241D24CC3664" Last-Modified: Mon, 23 Oct 2023 02:04:22 GMT x-oss-hash-crc64ecma: 16987515514608295040 x-oss-object-type: Normal x-oss-request-id: 66511B5B9979C73335D00F59 x-oss-server-time: 52 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a66aa1f7c4-BNA
2024-05-24 22:57:33 UTC	668	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 02 05 06 01 07 08 09 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: ad 9e bc be fb f1 3f 4d f4 3f 35 d3 e7 17 fb 7c ef a9 f3 c6 6a 00 00 00 04 52 7c 2f db c7 8e b6 7e 3a e8 b9 6a 86 75 56 5d 86 90 c9 a4 ae 7f 72 e3 16 25 e9 26 be 74 bf 02 f4 e3 ee 3e 6d 6d 63 6d ac fc fb ea f2 d4 75 cf 69 e1 e9 ce 77 bc 77 66 d7 59 eb 63 f6 ef c3 ef b1 8f 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 31 f9 f3 77 8b d5 f9 ef 5e 1c 2d f6 f5 b3 f4 39 7d 5f c6 fd f3 c5 ec e9 3e 6f dc dc 67 c7 a8 8f af ef e6 da b9 28 00 13 c8 1a 1d cf c9 ff 00 5b 87 23 e6 7d fb cb da a6 6d ac eb 55 2e c6 66 85 71 5a 9b 9d 67 2d 26 ce b5 bc f5 d0 91 e9 46 4e 68 e8 eb 5a 7c 3f ec f0 b2 7d 57 e7 f5 d5 ee 6b bb 66 81 2f b3 97 5f f3 bd 9b 5f 36 fe bd c5 f5 99 ca 4b 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 cd cf 87 f5 47 12 a6 f2 e7 51 3a 71 57 db a0 f4 Data Ascii: ?M?5\|jR\|/~:juV]r%&t>mmcmuiwwfYc@1w^-9}_>og([#}mU.fqZg-&FNhZ\|?}Wkf/__6K@GQ:qW
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 6a 34 c0 8e 3b cc 6b a5 95 79 d3 ad f4 d6 24 a6 c8 45 33 6e 7a 59 33 24 5a 69 b2 6b 9a 5e 9d 9b 8b 76 2e 14 0d 81 74 d8 44 c6 44 c4 a6 64 e7 91 94 7b 43 d0 00 00 00 0f cc d8 d5 3d f3 e2 77 bd ad 93 c9 bb ce b2 93 63 2e e2 b0 b7 cc b2 aa e9 2d 95 65 98 af 18 d9 34 51 ad 1d 68 75 9b 16 57 49 65 bb 6e 93 2e 89 bd 7c ce 17 3c e6 ee b5 95 47 a9 f4 3e 5d 27 ca 8e f3 35 93 37 14 ce 2b 92 50 9a d1 6e 73 7b 9d 5f 3b cd eb 32 31 86 b7 f4 0e 5b df e5 a2 d4 b2 6f 2a e1 6d a9 73 8e 6a eb 77 26 de b1 5e 11 7a 88 96 5e b5 9d 75 b2 c5 b5 8e 4b 36 ea b2 bf 65 fa bf 53 d9 50 c6 26 30 27 24 8c 89 96 78 db c5 f0 00 00 14 0f c8 3c b7 da f4 e5 c8 ee c3 a6 d9 52 f4 33 5b 7c ca 69 b8 35 75 ec 78 4e 95 97 28 9e 35 56 58 a8 8a a6 c5 35 52 d1 ae 6b 52 62 e1 af 2f 44 11 e6 a7 1b d3 Data Ascii: j4;ky$E3nzY3$Zik^v.tDDd{C=wc.-e4QhuWIen.\|<G>]'57+Pns{_;21[o*msjw&^z^uK6eSP&0'$x<R3[\|i5uxN(5VX5RkRb/D
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 66 6e b3 af cd ed bc bf 4b e9 27 41 ac 81 e1 f8 87 e9 79 be 29 ee e3 5b 38 a5 9e 93 79 f7 fa 4b cb e9 fb 0f 0e f2 5c e8 53 9e de 6f 16 ab 6f 86 c2 51 ee b5 96 33 3d be 18 ae 29 0a 65 6e 32 64 b9 ae 17 30 98 19 c6 07 8a 3d 3d 49 23 dd 5f 4f 42 c4 98 19 12 a4 67 8b 16 a1 7c c3 9b 4d 61 50 a5 96 9d 2a d5 a8 db dc f3 5b 62 76 d8 ba 7b 2c 50 96 cf 66 e2 49 42 d7 3d 4f 24 8d 6b 55 14 db e7 5b f3 6e 6d ed db 1b 11 6d 13 d2 c2 6b e3 42 df 3b d7 e4 dd d7 1f d1 7e 3f b5 7e e4 01 11 fc cd fb 1e 2d 46 b3 2f 4c e5 75 99 97 3d 75 fc ba e7 27 1d d2 7b bc d6 cd c6 22 c5 fa ff 00 0e bd 2f 2d 7b 8d 7c df af 3e 23 b6 27 22 ab 99 bd e7 2e 9f 4f e7 ac 97 9e b3 e2 dd f8 d8 d5 b6 96 22 e4 bd 44 bd 87 1d f6 3c f7 d0 e5 c3 e3 e8 55 e5 ef b0 5f 96 c4 e5 6f 7e 4b dd bc db 1d f0 f5 Data Ascii: fnK'Ay)[8yK\SooQ3=)en2d0==I#_OBg\|MaP*[bv{,PfIB=O$kU[nmmkB;~?~-F/Lu=u'{"/-{\|>#'".O"D<U_o~K
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 9b 94 bc b3 16 4d 81 7c b8 4e 58 2c 96 8b c6 d4 db 9b d2 f9 e8 00 c0 e7 4e 44 e5 4e 7c d2 14 0a 07 c6 fd 18 e6 fb f2 f7 77 2b 11 92 78 d7 a7 99 99 ac 76 2b 13 d0 45 99 14 b1 72 eb 8f 36 ef cb f5 7b bf 9b fa aa bd 7c 75 bb 78 a2 e9 e2 cf a7 8e 3d f9 bd 4f 0c 8f 0c 8c c9 0c ca e6 b8 f0 cc f4 88 88 aa 56 29 94 ca 65 72 33 ca c0 f4 f6 b3 3c cb 2d 46 a2 49 5a bc b7 70 9c b2 5c 36 06 cc d9 97 cb e6 c8 dd 1b d3 6c 6c 4b e6 cc da 1b 32 f9 b3 36 64 c0 00 00 07 87 84 45 33 5c 6a cd 5d 6b 2c ab 6c 55 0b 3e 13 cb 3e 13 d4 e2 db 44 e4 c5 8c ac 97 22 d6 93 25 a5 93 34 28 9e 9e 1e 03 33 02 43 12 43 d3 13 d3 d0 00 07 a0 c0 80 ac 57 22 2a 10 96 08 8a 65 42 4a 9e 2e 97 8c 4b 26 25 c2 62 53 d3 23 c3 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: M\|NX,NDN\|w+xv+Er6{\|ux=OV)er3<-FIZp\6llK26dE3\j]k,lU>>D"%4(3CCW"*eBJ.K&%bS#
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: c0 93 64 77 4d e2 c0 8a 56 89 48 22 25 17 8e 52 e7 ad 5c 36 fa db a8 73 ed 1a eb 23 3a 45 b4 b1 48 2c a5 f1 08 ae 7a 93 eb 95 16 81 ef 5d 37 88 a5 6a 54 86 65 3b 93 f5 66 83 71 56 0e b7 36 b2 25 86 e6 09 d7 e9 ff 00 4f eb 09 2c 90 ae cc b3 17 40 08 94 37 35 ce 32 33 56 d3 89 90 9a 4b 87 92 3c b9 82 de 42 4a c3 7b 1f 96 81 fe 61 35 7f d6 23 80 69 86 5e a0 97 09 8b 68 6d 19 9f 5c ce c6 2c 83 01 87 75 19 7a af 4b 92 f2 48 a4 8f a7 d8 c7 d3 56 79 1f 6f 5b 3c 91 c9 34 83 28 db 43 dd f1 ef 12 19 7d 29 30 85 b1 37 52 e9 32 5c 4a 65 85 ad e4 8d 8a 4b 65 04 90 80 f1 be 99 1b ea c6 bb 63 0f 76 df 55 be 16 ce 12 17 35 71 78 5f 2a 80 13 51 8c 3f 11 ca d1 32 ba c4 fb 88 8e 3f a6 b1 c0 cd 4d 75 ba e7 4c d6 d6 f2 b6 1e 6e 8e e3 2f 0e 6e ec db ce 1e 09 d4 bc 48 ed 1b 8a Data Ascii: dwMVH"%R\6s#:EH,z]7jTe;fqV6%O,@7523VK<BJ{a5#i^hm\,uzKHVyo[<4(C})07R2\JeKecvU5qx_*Q?2?MuLn/nH
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 64 6b 87 d5 2a 24 9c 60 28 85 f4 1d bd cc b4 d1 43 1a 8f 21 f2 d6 a1 96 00 b4 d1 f3 53 bf 86 d2 8a bd 42 23 85 2f 14 26 35 98 06 62 ba 69 63 54 39 50 3b 0a 79 02 26 59 18 50 6d 5d 84 f8 38 3b de 6d 34 fb 32 1c 3b d9 da bd 48 bb 0f 24 75 65 d4 24 b7 35 14 8b 32 2b af f4 1b b7 2f 3b e3 07 82 17 5a a2 e9 05 64 c8 ad 96 5e 43 4a c3 86 5b 71 9d 69 b9 24 59 a1 fe e3 be ad 9c 02 92 ee e5 4b 5a cd 11 d7 6e c7 9f af b5 1c 9f 97 25 9c f1 0c b6 45 68 56 a2 9a 69 67 95 3f 2c 75 0b e1 4d d4 a5 6e 24 17 89 5b d6 47 d4 1e c7 db 4d 9d 6e 40 32 02 a0 63 a9 76 26 35 e1 ae 73 46 d6 f7 14 d1 5d a8 a1 bc 0e 6b 73 49 19 d3 6e 1d 8d 46 8d 3f e5 bd f4 70 8d ab 35 8c 8e 56 de 29 ae 5b 6e 38 d4 47 a9 2c f6 02 c5 a2 1d 33 80 a1 79 c2 e7 ea 77 56 97 3e 40 86 2b 48 da ea 87 d4 25 aa Data Ascii: dk*$`(C!SB#/&5bicT9P;y&YPm]8;m42;H$ue$52+/;Zd^CJ[qi$YKZn%EhVig?,uMn$[GMn@2cv&5sF]ksInF?p5V)[n8G,3ywV>@+H%
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: e2 e2 b4 6e 9d 55 a8 c5 5f 9d 58 31 f6 de 57 f2 91 0e 39 a3 21 5e 1b 11 bf 34 24 29 e8 d5 bb ea 1a 63 ec 67 70 3c da 20 9c e4 3d b5 c2 73 47 c3 b1 1b a2 31 95 71 f5 b9 69 75 e8 52 5c 39 22 96 3d f6 29 1c d7 23 68 5b c5 a0 1a 0a fa 95 56 68 25 83 f3 b4 f1 51 dd cd 07 08 26 82 4e 64 d9 93 d7 08 65 3e 5a 34 13 b5 48 80 85 d7 72 c2 da 3f 0c 31 aa ad 61 0c ec ee 55 a7 67 96 4d d6 c6 99 e5 b4 f2 19 62 d5 a4 57 ab 91 05 d3 5b e5 49 54 11 89 20 1c d0 c8 1f 02 1f fe bf 15 7d 13 62 74 98 8e 68 c8 33 e6 92 2d f1 84 30 cb 6e 32 12 4e 05 05 88 6a 65 6d 60 31 48 ef 7c fa 24 68 a1 93 d6 a8 b1 e0 2c 8f 32 a8 64 8a ef 51 d0 e6 da db bd 0c 0a e6 b7 24 d4 41 33 5b ca bb 92 ae c4 8c 24 50 1b 26 94 c8 05 1e 48 ad 64 0c d6 aa 2f 4d 26 05 19 b9 c5 19 fd 4c 05 c9 5d 35 6b 74 2e Data Ascii: nU_X1W9!^4$)cgp< =sG1qiuR\9"=)#h[Vh%Q&Nde>Z4Hr?1aUgMbW[IT }bth3-0n2Njem`1H\|$h,2dQ$A3[$P&Hd/M&L]5kt.
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 2c 3b f6 c8 1c d6 6b 4d 67 95 27 23 06 bb f9 68 b6 79 3a b0 28 9e e2 b5 e3 9a fb e9 2d 9a cd 1c e7 9e 6b 02 88 ac 51 c7 bf 4d b6 dd 9f 71 ed 27 92 e3 a8 c8 d4 3f 0f 55 be 5b 69 6c e3 3c 37 7c 11 f0 fd c8 af d8 92 46 18 db db 3d 1b 25 fd 1e 0e 6f 6f 0f 71 5b 33 d6 8d 35 cd 1c d6 7e 38 ac 56 93 58 35 a5 ab 43 9a d9 9a 85 b4 e6 bc 24 d4 2c e4 af 0a d4 2c a1 fd 42 d2 d8 50 48 d3 d3 cf c0 8a 68 54 d3 db 21 ee 6d 94 1c aa 24 81 94 96 6b dd 45 9b 7a 4f d7 1d d4 10 20 72 24 8c 81 88 f6 f4 98 0b 06 56 65 74 66 8c ab a3 69 01 65 8f 18 ae d8 3f 0c fd bb 35 02 08 c5 4d e6 81 25 ae 0f 9a bd 54 87 72 d9 0d 06 1c 90 4b 73 9c 13 c5 03 e9 ae ca 71 ef 5f e6 b1 fa 68 05 fd 3c f9 73 fb 56 a0 be 6a 24 01 59 63 59 c8 c9 24 67 15 af 9c d6 a3 8a 38 19 03 27 b9 e3 df 9e 6b ed 47 Data Ascii: ,;kMg'#hy:(-kQMq'?U[il<7\|F=%ooq[35~8VX5C$,,BPHhT!m$kEzO r$Vetfie?5M%TrKsq_h<sVj$YcY$g8'kG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.5	50024	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	616	OUT	GET /buyer/express/free-express HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:33 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:33 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:33 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:33 UTC	82	IN	Data Raw: 34 37 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 76 61 6c 22 3a 30 7d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 33 33 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 47{"code":0,"msg":"success","data":{"val":0},"now":"2024-05-25 06:57:33"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.5	50027	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	626	OUT	GET /uploader/d5a40373b44ea8111500c4289464d55d9c0516d3.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:33 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:33 GMT Content-Type: image/jpeg Content-Length: 60478 Connection: close x-oss-request-id: 66511B5DD31A2338304152F9 ETag: "B8FC9C63DBEBA462E6EBA1B32D1EA6EA" Last-Modified: Mon, 23 Oct 2023 02:04:15 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 17612475099152235917 x-oss-storage-class: Standard Content-Disposition: inline; filename="221641963c26c0fad4ceb7ac0284569e81928788_221" Content-MD5: uPycY9vrpGLm66GzLR6m6g== x-oss-server-time: 91 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a7fce4f7c4-BNA
2024-05-24 22:57:33 UTC	690	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 07 08 09 ff c4 00 17 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: %'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: d8 9c ee f3 99 11 99 87 61 cf 5c cf 5c 69 b3 70 76 e7 71 60 67 14 8e 5b 97 67 a5 d6 67 56 3e 1a b8 c5 b6 22 62 f2 e4 d8 2e 1c 93 cd 7a 34 d7 2a ce 4e a7 34 d7 71 9b b5 2c cb dd 23 e9 12 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 14 fc db db 09 9d c9 c9 68 b9 c7 b7 de b9 eb ad c5 e5 34 b5 3c e6 b4 5b c6 4b 54 99 ce d3 06 5b 0d 9d 9a e9 66 b3 6d a9 ce 73 b8 76 e3 9a e8 ad 96 12 1b 05 92 b6 46 b2 30 63 1e 48 b5 65 25 a9 63 22 cc c4 c1 96 75 d6 cb 97 8b 06 a7 52 cc 56 6c 27 59 e3 35 8c 3b bf 5d c3 ec 38 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 01 3e 28 dc eb 19 d1 8b 61 26 30 8f 7b ce be 7d d3 1a 4f 45 3b 99 65 92 4d ce 12 ce 2f 4c 79 3a bb 39 dc ea 96 67 47 39 6e 09 88 65 99 26 c2 e3 05 ad 89 74 b8 29 8d 2c 64 d2 57 56 6a ea f7 8c 74 c4 ce b0 31 Data Ascii: a\\ipvq`g[ggV>"b.z4*N4q,#Ph4<[KT[fmsvF0cHe%c"uRVl'Y5;]8>(a&0{}OE;eM/Ly:9gG9ne&t),dWVjt1
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 26 c7 53 55 2e 7e 4d 30 cc 84 c2 96 8b 87 8b 35 97 26 83 37 13 4c 0c d9 f5 2c 93 07 36 5e 96 99 77 7c f7 fa 57 96 40 00 d7 1c 2b 58 49 91 5f 02 5c f3 35 0a 0c 84 bf 4b c9 84 b0 89 6f 2e 32 01 21 21 68 48 d6 53 60 61 a5 fa 9a 99 73 a2 cd 4c f3 e8 2e 7b f2 d3 97 aa 46 49 8b 5e c5 19 35 e3 77 3a 8d ca 17 18 f2 e6 d7 bc 73 d7 ce e6 b2 be 9c cb c5 f4 e5 2a f3 dd b0 d7 74 cf 17 d3 1a f9 bc 86 77 55 ae 8c 8a b6 4a 4d 65 d9 ae b2 64 c8 b6 69 22 9a c0 d6 77 46 1e 75 01 0d 95 96 69 75 a9 92 60 4b 83 18 ba 12 29 32 4d 23 54 63 2e ee 3c 3b cc 6f ef 08 f4 10 08 23 45 75 43 48 5a 60 9f 15 eb 3e 63 73 6d 54 d9 93 d9 91 2d f1 8a 42 d5 d5 74 48 4a 42 5e 5c 5d 1d 32 61 ae 9a a7 48 6a e9 2b 5d b4 be 8f 9b e3 15 8b 1d 91 e8 26 89 36 6b e3 76 c2 9e b2 6e 63 e7 fd 4b b7 9c 7b Data Ascii: &SU.~M05&7L,6^w\|W@+XI_\5Ko.2!!hHS`asL.{FI^5w:s*twUJMedi"wFuiu`K)2M#Tc.<;o#EuCHZ`>csmT-BtHJB^\]2aHj+]&6kvncK{
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: a8 8b 49 e2 1a 15 8b c8 8b 8b 88 e2 33 10 c6 2a 5a 9c 3d 7c b0 9c 55 7b c4 7d 8d 1b c0 00 00 02 87 9c 6b 55 32 0a 94 25 2d 25 2f ca 85 01 29 8a 67 18 04 c4 65 a5 e4 45 e4 65 f5 14 5e 46 48 45 57 c4 45 c5 85 c2 91 4a ac 5b 57 16 17 45 d5 4a a6 50 54 75 6c 4f 52 93 19 51 42 6a b8 93 2a 00 5d 51 55 e5 91 39 5a c7 89 aa 02 58 8a 2e 22 22 20 21 2d 2e 25 8f 9e ec f9 b7 53 a0 8f b4 72 f6 5a 00 00 00 00 70 56 e3 db 29 21 42 f2 f2 91 24 42 4e 90 2d f1 5a 80 c9 31 c9 48 8a 94 28 01 69 68 2c d2 b9 59 48 a1 41 55 96 88 00 a1 5a 14 a9 32 a5 54 ba a9 95 a4 45 0b 0c a3 24 c8 2f 2e 28 50 a1 7e 94 29 16 c5 e0 b0 a1 01 11 69 61 21 8e 4a 6b 13 c6 2a d8 e7 93 dc 0f 69 32 00 00 00 00 00 f9 3e df 49 ae 8d 64 26 2a 5a 4b 11 c4 d5 8f 13 10 a4 8a 2c 24 22 24 21 24 ab 62 95 69 58 Data Ascii: I3Z=\|U{}kU2%-%/)geEe^FHEWEJ[WEJPTulORQBj]QU9ZX."" !-.%SrZpV)!B$BN-Z1H(ih,YHAUZ2TE$/.(P~)ia!Jki2>Id&ZK,$"$!$biX
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 00 6c 92 00 92 ad 15 b4 f5 2f 7a a3 25 78 2b ca f2 a7 68 ca f1 82 3d 61 f3 54 ab 87 45 ef 31 91 ff 00 6c 7d 21 68 c7 42 32 f5 94 4e 65 43 79 ab bc d6 21 07 26 55 73 0e a9 56 6b 53 5d 0d 26 39 7f 6f f6 b1 30 09 e0 89 2f 73 9e 77 9f 42 54 0d cb 10 83 95 9a db 10 ca a7 0e 2b 3f f6 a5 b9 f7 2c ee e2 ed 5f 47 13 92 d1 bf 82 ba 46 f0 ae f8 2c 42 b3 5a dd 4b 0c db c1 52 af 4e a8 d5 38 f0 ff 00 69 fd 22 fd 6a 6c e0 27 d0 65 39 c5 d8 05 a4 6b 70 01 69 15 e5 2a 54 70 c3 92 65 47 30 f0 2a cf 57 4d 49 ae f3 ff 00 69 5a 9f a4 af 50 f3 8f 2e 96 30 0d 67 f8 04 f7 cf a4 db dc 30 58 64 75 95 0a b5 c0 bb 44 61 3e f4 2d 76 a6 b7 5a 93 4c 67 8a a1 5d b5 db 23 3d e3 f9 cb de d6 09 71 80 aa 5b fb 0c f3 5d 72 b9 f5 d3 2d b5 46 70 55 2a cc ac 24 79 7f 04 72 2a 51 4d 65 dc 5d 9a Data Ascii: l/z%x+h=aTE1l}!hB2NeCy!&UsVkS]&9o0/swBT+?,_GF,BZKRN8i"jl'e9kpiTpeG0WMIiZP.0g0XduDa>-vZLg]#=q[]r-FpU$yrQMe]
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: c6 06 e4 d3 e7 e6 ac 75 9b 4d e5 8e 38 3f 19 e6 ab da 2e 3c b2 bd 9c 3c 6e 3c 91 ea 15 ff 00 31 cc 3c d1 b0 bc 8f b3 a8 d7 8f 24 ea 15 d9 9d 13 87 8a 6e 38 08 bc 31 c5 19 0e 04 e7 bf 0c 94 41 73 6f 77 42 99 6b 2e e7 f1 57 f1 32 3f 65 6a e5 90 07 7a 17 b0 fb 30 e1 92 2e 06 37 78 23 0c cb 8e 6b 07 b2 66 31 c6 78 a8 dc 0f f4 94 0c 29 f4 47 bd 47 92 c4 11 0d 44 e3 b8 af 1f 46 09 51 9e 09 a3 39 1f fa b7 ad f8 e2 a4 b6 a5 ee 06 53 8b 20 63 2f 38 b8 fc 93 54 ff 00 84 71 09 8f 75 da ed 02 6f 37 1e 50 9e 3e c6 8b ef cc c8 8e 10 aa 32 fc 39 b1 31 92 63 a7 54 ff 00 c6 77 39 50 ab d5 9f 1a da 23 c7 d5 3b ff 00 95 7d 21 52 ed 2b 9b dc bf 7c 13 22 18 09 39 b8 79 85 ea e7 ea ff 00 fc a3 be 04 7a c1 62 26 ef f5 05 7e 2f c1 22 71 47 73 73 de a9 39 b6 ca 7a 17 bb 5c 6c 39 Data Ascii: uM8?.<<n<1<$n81AsowBk.W2?ejz0.7x#kf1x)GGDFQ9S c/8Tquo7P>291cTw9P#;}!R+\|"9yzb&~/"qGss9z\l9
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 97 64 ab 44 36 b3 80 1d c9 a5 ef a6 05 df b3 a6 6f 9f 15 f8 f5 5c e2 33 ce 11 a4 fb a5 c0 4b 66 39 aa 35 4b 5d 1c 50 27 02 27 fc a1 6a ac d7 11 79 0b 66 77 9b e4 85 a6 91 de 83 9a 72 70 3f c5 db cc da 48 e0 17 ef 9a cd 4e 68 fa de 68 93 27 9a f9 a9 cb a7 35 c1 62 a4 f6 54 9e 1d 12 50 74 19 cb bb 05 4e db 68 67 ad 78 7e a5 a5 b1 57 fc 4a 7a 37 71 08 d8 2f 63 42 ab 5e 13 e8 d5 a7 b6 c2 16 6a 8d b8 31 8d 65 46 9c 04 48 fe c8 75 4b 46 ea 6e f7 14 eb 0d 9c ee 73 7b 8a 77 d1 fd 9a e2 78 39 3a c3 69 6e 4c 0e ee 29 f4 9e cd ba 64 77 84 da 95 19 b1 51 c3 c5 36 dd 69 6f ae 0f 78 5d 7d af fc 5b 33 5c b4 9f 47 bf 3a 6e 67 72 d0 d9 5f f8 76 c8 ef 46 c2 e7 6c d7 a6 51 b0 da 78 34 f7 15 d5 ad 03 3a 2e e5 84 aa 76 37 99 75 4f b3 60 e2 9f 6b 65 26 e8 ec cd 81 da 44 97 12 Data Ascii: dD6o\3Kf95K]P''jyfwrp?HNhh'5bTPtNhgx~WJz7q/cB^j1eFHuKFns{wx9:inL)dwQ6iox]}[3\G:ngr_vFlQx4:.v7uO`ke&D
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 71 e8 3f 73 c1 71 58 48 e0 56 43 b8 ae 23 8a 9c 94 6e 5c 39 a2 98 fa 94 cf d9 bc 84 2d cd a8 2e d7 a2 1c 38 85 d5 6c f5 ff 00 fc 7a d8 f6 4a a9 46 ad 1d b6 61 c7 72 a7 56 a5 2d 8a 84 7c 17 5a a7 53 0b 45 00 ee 61 75 5b 3d 5f c0 b4 41 ec b9 68 e8 58 e0 d4 3a 4a bb 9a ab 56 a9 5c eb 1e e1 bb a1 94 df 51 d7 5a dc 54 50 b0 ed 43 eb 7c 17 5c b5 5e 24 55 f0 8c 10 fa 42 ae 4f 6d 37 7b 91 af 63 77 e2 59 23 b9 68 fe 8f a9 b3 5d cc ef 5f 57 97 7e 15 76 39 3e c9 68 66 74 8f 86 3d 38 63 d1 65 d1 8a c3 4b 80 dd 3c 55 ae 95 6d 23 aa e6 c3 91 1b 82 c4 c0 81 1c 90 90 49 38 98 9e fe f4 45 cb c1 30 99 99 c0 09 84 7d d9 62 9b 9e 19 0c 70 58 0c d8 10 8d f1 07 04 ed 57 49 69 bb 9f 0c 16 0e 6e ae 63 e6 a0 4d c0 70 38 7f 90 80 99 6d d0 3d ea 18 d7 0d 5c 3d 5f f2 b0 df 24 2f b4 Data Ascii: q?sqXHVC#n\9-.8lzJFarV-\|ZSEau[=_AhX:JV\QZTPC\|\^$UBOm7{cwY#h]_W~v9>hft=8ceK<Um#I8E0}bpXWIincMp8m=\=_$/
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 73 0f ab 7b d6 00 60 b2 3c 51 8b bc ca be e2 31 38 01 80 43 03 30 bb 87 82 cd bb 39 e3 d0 70 29 db 91 cb 05 e0 8e 61 36 9b 9a 45 e1 09 d8 95 63 61 65 9d 80 e7 e8 54 c1 85 5e e2 a7 d1 a9 63 a1 53 18 b8 ee 21 3e c3 59 bb 30 f4 e6 b9 98 39 a4 77 a9 5f 07 7c 57 cb 35 bf e0 b7 f2 72 f8 8c d4 6e f1 0b 9f 1c d0 a7 54 e5 4d c4 84 2c 95 cc ea 40 e6 85 85 f8 13 50 04 2c 34 b7 b9 c5 0b 3d 06 fe 58 f1 42 06 40 0e 92 03 b3 68 29 d6 5a 0e f5 23 b9 3a c2 e1 17 2a 65 c5 3a cd 58 4b 74 58 1d fc 10 a5 67 b3 eb 57 76 91 fd 80 ab 5a 2a 56 c0 e0 de c8 cb a5 96 66 b1 ba 4b 49 ba de ce f2 ab da dd 57 51 ba 94 f8 04 30 83 bb 7a c8 f7 20 4b 5f 79 8f 8e 68 5a d9 50 5d b5 53 91 db 09 d6 49 6d fa 0f d2 37 de b9 6f e8 65 a8 c5 ca cd d2 33 de 9d 64 6b c1 7d 95 d7 87 64 e6 15 2a 75 2a Data Ascii: s{`<Q18C09p)a6EcaeT^cS!>Y09w_\|W5rnTM,@P,4=XB@h)Z#:e:XKtXgWvZVfKIWQ0z K_yhZP]SIm7oe3dk}du

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.5	50028	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	392	OUT	GET /uploader/d366d0c225e24136fa296c2234a0370b45369592.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:33 UTC	700	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:33 GMT Content-Type: image/jpeg Content-Length: 64887 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221dea075dd1ba173bbd85312ffdcb6429176228_221" Content-MD5: BgioU5s9naHCzRfkHlZBdQ== ETag: "0608A8539B3D9DA1C2CD17E41E564175" Last-Modified: Mon, 23 Oct 2023 02:04:20 GMT x-oss-hash-crc64ecma: 5727388435986984569 x-oss-object-type: Normal x-oss-request-id: 66511B5CCB42C437376D9E47 x-oss-server-time: 55 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a7fde8f7dc-BNA
2024-05-24 22:57:33 UTC	669	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 08 09 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 83 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 03 83 c4 f7 9f 98 7b 63 c0 f8 f5 db ec a6 36 1d 3d 8b 5a 94 4a 59 09 e6 9a e3 9a 67 5e 9d 36 b6 e2 31 23 5c 71 d9 d8 ed 52 25 a3 cd ac 6b 36 a5 9e a5 1f 3d 55 67 50 e5 db 75 9f 46 de 6b cc cb 36 6b 09 e7 ec c9 92 d4 b6 97 29 27 9f 5f af 38 f4 db 75 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1f 0b f4 d7 93 6f 9c 0c df 4e cf 6a 4b 34 d9 29 ee 3d 83 6f 44 9b 8d 5a a6 b8 f6 bc 75 19 75 b9 d3 6b b9 ed 79 ad a8 c6 cd 5b ef 97 26 74 85 35 56 b8 ea cb 53 bd 9d d3 a2 f6 96 5e 6c 89 ad 46 2c 98 b8 96 c0 98 bd a3 3f 9b dd f4 b6 2f ab 75 f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 2b c6 b6 f1 3e b6 46 55 11 d9 77 ec ee 34 d7 cd ee 30 35 3d 5f 4f 49 9d 2b ae 74 fd f0 ab bc bb a7 63 aa e3 39 c6 e7 5d Data Ascii: {c6=ZJYg^61#\qR%k6=UgPuFk6k)'_8uoNjK4)=oDZuuky[&t5VS^lF,?/u(+>FUw405=_OI+tc9]
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 5e fe be bf 9d ad fb be 6e c1 f3 be cf 3c ba e8 bf 5f e0 64 dd a4 4a f4 a8 92 46 b3 63 79 6b d2 c9 36 4b 24 6a 77 96 a3 2f 63 9b fa 36 6b a1 ae 59 b0 c6 eb ce cc 00 00 00 00 00 00 00 00 00 00 00 00 38 3c df 78 f0 6e dc f4 0a d6 71 d2 44 df a3 dd d9 4b a5 5c eb 84 c9 79 8d eb 4a e7 3a b5 f4 27 4a 9b ce aa f3 e2 c9 52 56 26 23 be b3 03 3b d9 39 fb 35 f6 ac 92 71 5b 9c d2 f9 fd 7b 17 8b df b1 70 f6 43 e7 b8 1d 39 d4 7a 7c 3b 17 0f 6d bf 5f 2e a1 f4 3e 45 0f 5c 6e bf 37 ec 4e e7 d3 45 fa bf 0e ab 6a c6 6b 96 2a 61 8b 9d 72 ac 67 b1 b0 d9 26 ab 4c b9 d7 d3 b3 5e a5 2c 43 5d d2 eb 29 99 de 3c 6f d0 6f 10 00 00 00 00 00 00 00 00 00 00 03 82 bc f2 6d f4 f2 6e b9 87 2e 49 d6 cf 3a d6 2e 7c bd cb d3 b4 b0 6a 91 98 f6 5c e7 5a d3 36 9b f3 eb d3 7b 66 7a d7 ee 5f b8 Data Ascii: ^n<_dJFcyk6K$jw/c6kY8<xnqDK\yJ:'JRV&#;95q[{pC9z\|;m_.>E\n7NEjk*arg&L^,C])<oomn.I:.\|j\Z6{fz_
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: bc d7 2c f3 c9 f4 f7 3a 00 00 00 00 00 0d 76 cf 24 d7 6d 5b 5b af 5e ab 24 94 53 4d ca 59 32 2c a5 5d 8a 4c 29 8f 56 f7 33 b9 ac 2f 72 42 57 ac d3 35 cd 4c d5 1d 96 29 53 64 34 ca b5 a4 f2 98 ef 25 49 26 dc 89 94 bc 6a 33 3d bc be 9b 6f 8b fa 49 7b e3 e7 5f 6b f3 78 fb 71 dd fe 67 d9 9d e4 fa 14 9d 3c f1 fb 71 d8 fc fe 9f 3c fa ff 00 9f ac ed ca 04 63 ac 1c fa 65 f1 fa bd 3f c7 f4 2d 77 8c 71 b9 72 eb 3b d5 e5 f5 af a7 f1 a3 ea 57 d9 67 cb a6 81 8f 46 bf 9e ba a7 97 d9 8f 1e 99 ba c5 17 1e f3 f9 ee 6e b3 6b ae 73 fa 72 89 ec f1 d2 7a fc 9a 8c e1 e8 53 8f d6 bc f6 00 00 00 00 00 79 d6 b3 f2 df a3 95 f7 3f 6c c9 b8 67 04 99 bd aa 6b b3 3a d2 ac b8 97 b2 55 99 4b a8 81 a9 3e 5e f6 69 93 52 59 96 b5 c6 cc 41 67 5b 6f 2a 4f b3 5a b2 39 8c ee 42 48 49 dc ce d6 Data Ascii: ,:v$m[[^$SMY2,]L)V3/rBW5L)Sd4%I&j3=oI{_kxqg<q<ce?-wqr;WgFnksrzSy?lgk:UK>^iRYAg[o*OZ9BHI
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 76 f3 d5 f4 e1 22 5f 69 8f 6f 8f 63 97 b4 05 00 00 00 00 00 00 00 07 c7 7d 71 e3 d5 58 42 2f e3 4d d6 79 b3 25 99 6a 54 99 a2 61 2d 64 92 8c e2 ce ed 73 35 86 6f 3c e9 61 9d c5 ba 9d 35 8e a4 26 69 30 55 39 21 70 24 b5 c8 44 4c a5 29 70 54 91 e6 6d be 1f e9 6e 79 7a 68 fd bf 2a 77 d4 f8 f8 16 21 4f 1b 17 83 d5 ee 7f 2f eb d6 ac 4f 77 8a f3 97 48 bc 3b d7 7d 7f 95 83 d9 c3 2e 75 e7 de 6e 9e 17 af 3c 99 27 35 31 24 af 74 ea 4e d7 3f 46 de 3d 36 e3 d5 e3 d0 0e 61 40 00 00 00 00 00 00 00 00 1e 65 a9 f2 17 5c d2 49 54 46 2c ac d6 4e 75 3b 1d d9 c8 66 8c a6 53 31 96 eb b4 64 4e c6 5b 06 58 ec a9 b9 33 b6 49 d2 c5 a9 52 f1 65 6a e1 67 22 e1 07 43 a1 76 98 8a 1e 7a d9 fe 17 ea ac 2e 75 6f a7 f0 ac bd 9e 3c 11 17 97 4f 59 f9 1f 53 6e f1 7d 1d 6f d7 e4 cd eb f2 59 Data Ascii: v"_ioc}qXB/My%jTa-ds5o<a5&i0U9!p$DL)pTmnyzh*w!O/OwH;}.un<'51$tN?F=6a@e\ITF,Nu;fS1dN[X3IRejg"Cvz.uo<OYSn}oY
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 30 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 45 28 8d 4b 4d 38 d5 ec d7 ca 4a ac 2b d2 1d 43 30 18 cc 69 ca f0 75 8c 66 12 2a e1 25 24 93 b9 78 4c 48 c5 85 2b 88 c2 ba fe 6c 54 8f 17 ba 5e 4b 84 c5 1e 86 be a9 97 b2 17 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 46 2b 2a a4 a6 aa 82 9a aa 52 a5 2b 6a 01 14 8e 63 5e 0e 50 70 47 88 e4 52 29 8c e5 7b 99 8e e6 43 31 2e a6 92 62 c5 2c 16 d6 36 49 7d 02 37 33 b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3a 98 88 e4 72 31 16 a1 54 42 21 16 30 56 33 a8 40 5e 86 13 01 80 c6 0c 86 43 29 9c 9b 13 4b 72 fe 2e 8e 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 0e 41 d0 e8 74 3a 9d 0e a7 07 51 5d 8e c0 1d 0e e7 06 53 20 8c a7 60 00 00 00 Data Ascii: 0pE(KM8J+C0iuf%$xLH+lT^K@pF+R+jc^PpGR){C1.b,6I}73:r1TB!0V3@^C)Kr.@At:Q]S `
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 36 a7 f8 66 94 f3 1f ea aa 7c b5 79 29 99 e6 c0 f3 d6 7a 43 33 01 72 80 e9 f0 2f 41 49 29 4b 92 9e 53 9a 5e 98 cb a5 25 b6 cb 4b ab ac dd 02 82 3b 20 24 64 4b 0d 9b 15 13 d0 ba 09 aa 98 b0 7a f6 a0 32 7f 87 57 28 e9 2a 3b f7 c5 0f bc 6d 8b 18 88 89 df b1 10 c4 6c 5e d6 9d 03 13 df b9 3b f7 c8 b5 05 b0 33 be 31 dc 67 69 2c 6d a9 fa 4e 1b a4 bd e7 08 e6 72 67 fc 7a 3d 09 d4 6f 29 5b 7c 36 1f 33 fb 0e fb 6d 84 5b ef e9 c2 ef de 27 3d fb 47 bf 53 93 98 7f 95 7f d2 19 fa e9 c7 28 62 4e 27 ba ca 0c 00 a3 db f5 69 cd 77 5e 7b 18 e5 55 71 02 6c b1 f6 dd 0a b3 61 a7 0d 40 b1 30 44 71 bd 7d 27 cb 5a 60 a8 f9 9b 11 ca 1c 04 ad c4 74 a3 17 48 0c ee b4 9d 60 16 31 ee 20 81 91 60 f3 94 72 5c 53 ae 97 ad 57 24 e1 7a 8d a5 e8 d5 b8 23 68 b8 a5 49 7b 44 cc d4 d2 e3 93 39 Data Ascii: 6f\|y)zC3r/AI)KS^%K; $dKz2W(*;ml^;31gi,mNrgz=o)[\|63m['=GS(bN'iw^{Uqla@0Dq}'Z`tH`1 `r\SW$z#hI{D9
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 7e d3 9b ce 73 38 df 69 c2 39 9f 78 89 fe 11 0a 3d a1 c8 86 aa c3 6b 97 a6 bd 48 40 6f 9b c6 72 c8 2c 83 8f be 18 29 b1 b3 00 4a 0b 4c 44 ff 00 49 86 ac f2 b7 83 fa 76 44 f2 67 50 5f cf 4e 0b 3c cd 9e df c8 9e 79 8b 73 1d a9 96 73 d4 99 1d 94 23 91 44 8e 60 9e d9 39 11 10 8d 84 76 88 f7 ca fd b9 d8 98 c5 7d 59 39 eb df 9c 44 e1 98 91 49 cf 6c ac 92 77 4c cc f6 8f 0d bc 15 70 57 b7 01 fd 4f 5c d6 6b e8 94 e5 ed ee 56 b5 4d 4f 57 b0 6c 18 36 cb 75 1b 40 cf 5f a4 86 ed 8b 0d 1d a6 65 b4 c3 9d 90 4b 37 80 87 d0 56 a0 4d ac 98 cb a9 7f e2 20 56 9a 19 aa ea 0a b0 48 a7 a7 51 e7 61 3a b1 54 18 ab 08 35 8b ce b6 a9 57 83 3a 67 0f b8 a4 2a 12 81 81 16 33 a2 d2 94 cf af 4c d6 48 01 db 33 d2 ce 1e 56 a4 92 78 03 d8 a1 96 b6 1f 33 11 cb f8 77 fb 67 b7 d3 3b 7d bf 86 Data Ascii: ~s8i9x=kH@or,)JLDIvDgP_N<yss#D`9v}Y9DIlwLpWO\kVMOWl6u@_eK7VM VHQa:T5W:g*3LH3Vx3wg;}
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: e7 01 c0 b0 95 f4 f5 55 4a 3a 7a 8a b7 88 eb 00 d5 5c c0 70 c0 6a c6 cf 4c 5f d4 19 6f 79 8d f6 2d d3 b4 8e f1 31 e8 99 ed db 24 02 62 36 9e de 5f 7d e0 62 72 6a 40 44 ef 3d d0 c0 4b 96 d5 57 89 19 b5 1d 35 84 57 02 c6 39 3f cc 31 b5 02 5a 75 ab f5 06 7a 44 02 c4 9c ca ce 37 9c d8 b6 df 6e dd f3 bf f0 95 f2 8f 7d b2 bf f3 6a ea 2a 79 44 aa 46 7b c6 74 e0 bd f7 df a3 f6 98 c9 59 47 e5 cd b3 ff 00 3b 64 44 46 ff 00 c4 62 17 ea 98 f5 19 f1 8d fe bb c0 fc 3d a6 4b a9 be f3 03 e9 f8 b2 31 ed 04 91 ef 19 a0 da 28 d5 00 97 ec 33 bc 44 fe 95 a8 6a 74 f4 c4 f5 6c b3 8e 6b 7e 35 d5 88 0b a7 59 b5 12 ff 00 10 93 8c 18 c6 b0 cf f1 ee 2d 96 8b 4b a8 8d 6b 91 1a d4 47 81 a8 36 14 4b e9 1c 02 f5 85 1c aa 3a 9f 14 4e b4 4c 32 00 63 3a 27 20 55 b6 3d a6 b8 f4 3a c2 89 86 Data Ascii: UJ:z\pjL_oy-1$b6_}brj@D=KW5W9?1ZuzD7n}j*yDF{tYG;dDFb=K1(3Djtlk~5Y-KkG6K:NL2c:' U=:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.5	50032	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	392	OUT	GET /uploader/26147a601f2cfd6a9748078bd341aff2565eb7c2.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:33 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:33 GMT Content-Type: image/jpeg Content-Length: 81599 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221f8bfd9ec3d8b1611b1c9a46e4db59fee19657_221" Content-MD5: zQCw6r3Chkgl/laCUOLNvQ== ETag: "CD00B0EABDC2864825FE568250E2CDBD" Last-Modified: Mon, 23 Oct 2023 02:04:19 GMT x-oss-hash-crc64ecma: 8713742630048121293 x-oss-object-type: Normal x-oss-request-id: 66511B5C1F52473235F25D6B x-oss-server-time: 102 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a99f42f7c4-BNA
2024-05-24 22:57:33 UTC	668	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 01 08 09 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 82 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 7c b9 d5 cf f3 1f a7 e6 48 df 97 d8 9c 4e 3d 79 dd b9 fa c6 99 6e b5 d6 b9 a5 8d b3 93 2d ff 00 cb f4 3a 6f 93 e9 e4 2b af a0 00 01 69 5e 59 e9 79 df 26 7a be 54 cc b4 dc e2 f2 a5 88 11 35 de 26 cd 31 29 85 9e 96 33 bd a8 b6 5e 69 12 67 2f 31 4c 4e 72 6d 81 88 b9 6a 69 f8 eb 0b 5a fd 1b 86 9a c7 47 3c 0c 75 91 b6 5d c7 cd f4 f7 7e 3e 99 75 b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 a6 bf 2b 7a 1c 3f 34 74 f3 62 63 3c ae f8 6c dd 1c f2 ab be 23 9f a6 f7 46 3b e5 f2 db d5 cd de d7 6d 8c cc 34 e8 3e 7f a5 bc f0 77 66 b9 fa 2b ab d4 d9 b5 71 1b 65 a4 77 71 fc fb e8 f9 3c 9e ee 93 5b e5 22 d8 e8 88 36 b4 d5 21 45 93 4c 26 57 9f 9e d4 ad 30 ad 39 29 89 49 c7 52 67 90 af 4b f0 c4 5a b6 e6 2f 4c 4e cb Data Ascii: @\|HN=yn-:o+i^Yy&zT5&1)3^ig/1LNrmjiZG<u]~>u+z?4tbc<l#F;m4>wf+qewq<["6!EL&W09)IRgKZ/LN
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 9a 45 99 b6 9b 7a f6 4e 5d f5 6e de 09 15 d3 03 a6 16 af 4d 77 4b 42 d7 0c f7 3d ba 4f 9f ea 6d b9 df e5 4f 6f c8 e5 bc fd 38 fc 6f 3e f6 b7 7a e4 e9 5b 53 6d 89 1b 47 57 26 e3 a4 60 e3 3c e5 e2 34 b5 cc af 77 3d b3 b9 df 72 ca dd 3f 9f ab 75 e7 da fd 6d ec 80 00 00 00 00 00 00 00 21 f2 c7 67 2f ca be cf cf 65 ba 39 e1 f0 7b 14 c4 78 9a a1 14 85 9d e2 ad 44 57 2f d3 c9 93 b4 ca d7 86 77 4f 0c 5a 5e d4 da 98 94 5d 19 d4 9c 8d 77 ab 2e bd 57 8f b3 2b ae 3d 76 bb 6f 19 ce 63 9f b2 5f 3f 44 a9 6a 76 e7 c5 75 f3 e5 b4 c7 9e 6b 95 9b 56 f6 1b 4f 8d b7 6a 47 53 f2 fd 5d 17 6c b6 1d 33 8a 9c 5d 27 31 36 89 85 eb be 57 4a 6d 6f 2b 18 fd 23 72 a5 f9 37 a7 e4 73 9e bc f0 bc db 6b 7c fd 94 52 d7 76 cb 68 d7 3d ee f8 cf 98 c7 cc 64 a5 a5 e5 b4 2a 69 af d5 8f 8b 5b ce Data Ascii: EzN]nMwKB=OmOo8o>z[SmGW&`<4w=r?um!g/e9{xDW/wOZ^]w.W+=voc_?DjvukVOjGS]l3]'16WJmo+#r7sk\|Rvh=d*i[
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 6c f6 5b 7d 65 f3 5f 47 d1 ba 72 f5 22 1c c7 e7 37 ab e4 60 76 c6 d6 9c f5 5f 3a a6 95 d9 54 ae 20 7a a1 35 22 e4 a9 89 f6 d5 ae 14 26 bb 47 93 35 45 6b 9c eb bf 36 2e db e3 b0 e8 f6 55 44 fb 87 4c de 7e bc ba d5 55 7f 7a f6 6e 5d 7a b7 99 ea eb d7 a4 cd 39 be 4e f4 39 35 1e 6e cc c6 99 c6 9b d6 cf 1f 5d 32 b6 cb 2d d1 c9 df f8 fa 7a e7 9f e9 73 0e 8c 90 da 91 f2 5f b1 e3 d9 af 45 6c ab 45 e6 9a a7 1f 6c aa 5b 31 d3 cd ba 6f c1 f5 47 87 ef 6b d6 49 c9 92 da 9f 32 7b 5e 27 2a e6 ef b5 cd d5 42 99 fb c5 8a de 35 e9 36 d5 b1 49 aa b3 97 d6 71 35 b6 52 33 d8 fa 39 f6 2e 8e 6f 6d 10 d3 6e 69 12 26 d2 22 ab 6e 27 16 8f 55 5e 6d c4 53 9d eb a6 dd 1b e4 7e 9f ec ee ec 65 de a3 c3 e5 7e ce 2f 9c 7d 0e 0b 33 8a d9 af 4f 6f 15 17 66 3d 47 b2 f0 aa 2b 5c bc 97 b1 5f Data Ascii: l[}e_Gr"7`v_:T z5"&G5Ek6.UDL~Uzn]z9N95n]2-zs_ElEl[1oGkI2{^'*B56Iq5R39.omni&"n'U^mS~e~/}3Oof=G+\_
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: bb cb 5e ab c6 7f 4e 5a 33 9b 75 d3 63 cb 4d 96 b7 d9 b3 be d1 96 db 3e 17 db 69 7d 8a 6f 62 b1 0a b3 6e b6 8c b5 c5 25 cc c4 99 83 59 e3 bf 27 ec 68 1e 7f 46 e1 f4 fe 57 d6 7e f7 97 54 89 f0 e6 79 ed 1f 19 96 99 5a 22 d5 90 aa 31 72 53 e5 8a ab 2d 74 40 ac eb 46 0e ac 9c b1 f0 94 46 24 11 91 2a 62 32 d2 61 16 13 88 10 bc 51 0d 42 f1 ac 99 7b 35 94 ec 15 64 0d 8e b3 91 24 15 45 ae 42 93 d0 51 2a e1 6c ae cb 05 f8 5d 29 21 cb 11 5a f1 fe 9c 39 d2 71 36 b6 2f 5c e3 69 4c 5d 2d 2a f5 cf ce 5b d7 77 9f f4 cf 85 ee 68 5a e5 bb 61 7b 77 af 0b f4 f8 a3 79 fd bb b1 9c 96 db 4b 6e b3 37 69 36 13 65 36 a9 30 4a e8 b0 52 4c 2f cc ca ba cd 50 e2 d1 6a e2 1f 21 ec e1 bc 6e d9 3f 5f e5 7d 43 ef f9 39 9d a8 05 a8 9e 73 96 d7 6b 35 d5 4c a7 59 8e 84 d2 d4 29 b4 64 2d 38 Data Ascii: ^NZ3ucM>i}obn%Y'hFW~TyZ"1rS-t@FF$b2aQB{5d$EBQl])!Z9q6/\iL]-*[whZa{wyKn7i6e60JRL/Pj!n?_}C9sk5LY)d-8
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: ce 7e bf c5 c0 fd 4f 93 88 d5 d3 ff 00 3a fa 2c b7 9d d5 7b 4a cf ed c3 df 77 87 7a f4 79 69 d6 bb df a5 c7 b2 a7 32 8b 85 e2 e1 78 bf 2f 40 3c 3d 00 00 00 00 1a b9 c8 b3 bf 20 f2 fb 30 9e 5f 77 30 ee e6 d6 7d 8e 4e 9b e1 f7 ed 5e 1f a7 ed 6b 72 0a bc 69 72 22 b5 70 1e 86 0d a2 fe 31 97 e1 eb a6 49 ad bb d7 dc ec b2 e2 6d 5f 18 7d f8 5a aa ff 00 2e d6 62 f6 2f 49 1d 5c f8 bd ab 6b a3 1b dd dc dd 9f d1 e4 cc 59 1a a8 84 32 c1 8e 35 63 99 18 53 c2 93 19 16 a2 b3 23 39 cc 72 f4 66 b8 b6 cb 73 e9 ac fa 5c bb 7f 91 d9 6f d1 e7 cc eb 4d 57 0d 35 1f 4f 8f 37 c9 bc 7b 46 a7 e8 f2 53 32 44 94 df a5 b3 d7 a7 47 96 d7 44 9b 22 16 c9 44 82 59 7c 94 48 26 13 89 c4 f2 61 34 94 4c 26 19 03 22 4f 27 9e 80 00 29 2c 4b 18 8c 74 4e 34 c6 73 eb 6a 66 d4 4d 9d 2b 22 8a 92 94 Data Ascii: ~O:,{Jwzyi2x/@<= 0_w0}N^krir"p1Im_}Z.b/I\kY25cS#9rfs\oMW5O7{FS2DGD"DY\|H&a4L&"O'),KtN4sjfM+"
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 55 c6 66 91 19 a6 9f 6e 9a 38 2e f4 62 cf 72 a3 b6 82 df bd dd 8c a3 f7 4e cc 1c 9b 73 23 72 70 a2 19 74 48 fb 5a de b2 36 e4 d2 c7 66 4b 6e d2 75 89 08 21 ee ed 58 09 41 08 97 9b c9 b6 74 81 65 72 ba c2 db f2 ab 7b 85 b8 4c 80 55 bf a8 f1 48 22 9a d2 42 fc aa 1b d6 46 d2 e7 94 73 c4 f8 ef 50 c1 ac 03 8a e5 58 f2 ae 95 1c a6 33 90 6a 19 96 55 fa ff 00 18 90 06 49 ab ab f4 5e 41 f4 8b 9e 25 ab d9 c0 ad 56 b6 6b 83 2c 92 69 9b 71 a7 19 8a 17 dd 95 1e 75 dc 9a 70 ad bc da 0b 58 c1 28 a8 a2 9e 69 fd ae ba 06 7b 84 5d 98 36 89 58 7b ae ce cf 71 9b 9b 81 a9 74 45 5b 90 2f 38 c3 c9 27 ef 12 80 c4 aa 21 ec a0 9e 45 da 79 de da 69 06 de 95 17 11 2c 49 a6 25 cd 93 49 2a 6b d0 aa 6e 1a dd bd f9 b5 2b 70 dd 47 54 69 28 5e 17 2a c5 39 8d b9 94 7d 2c 1b 1c d5 83 00 47 Data Ascii: Ufn8.brNs#rptHZ6fKnu!XAter{LUH"BFsPX3jUI^A%Vk,iqupX(i{]6X{qtE[/8'!Eyi,I%Ikn+pGTi(^9},G
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 67 56 8c ab 5c 49 af 5d ba 15 50 22 82 65 95 98 4a fb d6 59 63 d8 e9 4f 0d ce 53 7e 06 36 71 ca da a2 e2 31 1a 36 97 50 10 cb 06 43 6b 3a 5d bd dd cd b6 cc 1a 85 37 3c 4a f2 07 ad cd 0c 1e da 32 94 e8 ab a2 76 9a 39 09 8e 59 06 fd b5 be d4 6f 35 ad be d4 d0 34 85 ae 1e e6 e1 bb 4f 31 11 09 1c 91 95 6d 74 c1 8f ef 0d 21 50 f2 c7 14 ab 25 9b b5 3f 7d d6 69 9c b5 2d cc 76 d2 ee db 29 60 89 8b 89 0c aa 51 37 b9 1d b8 40 53 04 b9 3d a2 65 88 20 83 4b 2c 30 19 08 17 12 f3 c2 44 3f 76 00 33 b1 91 f5 cb ce 48 ad 34 ab 45 26 15 66 ba d0 36 e0 d0 a7 51 73 69 37 75 ad ca 36 1a 68 73 de 78 cb cc 90 36 ad 51 33 56 64 9a 54 8f 94 6f c3 ee a5 40 d1 b4 ba e9 6e 50 f5 e5 40 e7 fa 2f da 09 70 90 45 f7 d6 77 5e 5d 45 bf 14 78 f0 35 10 18 f0 fb c1 aa 68 46 66 b3 45 f7 27 c0 Data Ascii: gV\I]P"eJYcOS~6q16PCk:]7<J2v9Yo54O1mt!P%?}i-v)`Q7@S=e K,0D?v3H4E&f6Qsi7u6hsx6Q3VdTo@nP@/pEw^]Ex5hFfE'
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 71 11 2e 9e cf d9 e1 87 f5 77 58 47 7f 0c 06 33 1c 6d 00 86 15 69 a3 d6 e6 a3 49 f4 46 bb 82 18 ac 2d a1 b6 8f 50 c9 36 ad 25 dd c4 97 05 74 c7 c4 e7 85 40 89 9b 2d 3c f1 de 88 96 08 e4 de 65 6b 85 92 e2 49 80 61 71 6d 1b 24 b6 f6 e7 22 6b a1 10 91 5b 44 27 88 5b 47 23 8d b7 94 6a 64 8a 23 34 9b 71 a3 c7 83 b6 01 a3 91 81 31 d1 59 c0 1a 22 ef be bc 48 4b 2a d4 90 15 71 25 bd ca e6 19 6e 84 a1 b6 63 06 2e 26 87 df 4a 4b 88 5f a4 82 b3 fc e7 da 03 ed 31 43 98 a6 0e 79 8e 80 78 1c 8a d0 d4 53 3f f7 a0 f9 62 b9 8f 0a 59 08 fa d0 91 4f dd dc 1d 14 6a 3b 4e dc e4 6c 50 d0 9e ea d1 39 fb a0 56 02 8c b5 43 60 f3 05 78 6e 63 25 7d 6d 0c 9d fb 68 ee 07 ad 6d d0 e8 b9 8e 68 0a 4b 67 73 c9 5e 07 a6 e1 f6 2d ca 5b 34 a3 c3 ec cc 66 36 8f 6d 13 86 58 28 d2 ac e6 bd 59 Data Ascii: q.wXG3miIF-P6%t@-<ekIaqm$"k[D'[G#jd#4q1Y"HK*q%nc.&JK_1CyxS?bYOj;NlP9VC`xnc%}mhmhKgs^-[4f6mX(Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.5	50035	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	626	OUT	GET /uploader/969b7ca635d13f2e9a2380510ac5f5a238ef64ef.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:34 UTC	678	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:34 GMT Content-Type: image/jpeg Content-Length: 46629 Connection: close x-oss-request-id: 66511B5D1F52473733216A6B ETag: "381211CBE6B0A35F1767C0EAB2A67D71" Last-Modified: Mon, 23 Oct 2023 02:04:37 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 1188580957162776857 x-oss-storage-class: Standard Content-Disposition: inline; filename="2210af93adb367da86e97773aec2d15f69c91737_221" Content-MD5: OBIRy+awo18XZ8DqsqZ9cQ== x-oss-server-time: 68 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:34 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a9b938f7c8-BNA
2024-05-24 22:57:34 UTC	691	IN	Data Raw: ff d8 ff e1 00 2c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 3c 01 02 00 09 00 00 00 1a 00 00 00 00 00 00 00 69 6d 61 67 65 72 79 34 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 02 f0 02 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 08 09 ff c4 00 4c 10 00 01 03 03 02 03 06 03 05 05 07 02 04 04 Data Ascii: ,ExifII<imagery4C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("L
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 Data Ascii:
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 Data Ascii:
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 18 5d f8 85 cf 92 e1 55 a6 0c fc ba b0 02 da 98 2d 6e ae 6c ba aa d3 94 73 75 0e d0 fb 63 c8 96 87 87 41 e4 43 a5 38 fd 17 11 aa 9a aa e5 3b ea ee 13 b9 cf 79 c9 73 8e ea 2e 7b bd be 8d 99 73 db 23 ba 12 54 25 47 12 49 5f 33 69 e8 23 2e 9a 47 68 6c 6d ea ba a3 83 0c 38 a6 32 ea 27 9f 46 cd 3d 65 35 2c 1f 3b 5c ff 00 2c a8 2b 87 10 74 6e 03 71 ff 00 de ca 53 86 3b 32 e3 0e 2b 7c ee 8a 98 50 c5 0b b4 ba 4a af 00 cf a6 79 ad 9e e5 d8 d5 b2 c1 3d 0b 2e f7 e3 59 56 41 9e a6 9e 9c 64 77 4d dc ef cd 67 6c fe 8d f1 e8 e2 23 9b 95 4b 76 9e 69 00 a7 0f 2f 3b 00 d1 92 4f b2 9b a1 e0 de 24 ae 9a 07 56 42 2d f4 f3 46 e9 4c d5 0e 00 06 01 9c 90 37 0b b8 f6 65 49 62 b7 f0 ef ed 3b 77 0f 52 ba 29 e6 71 82 7a a0 25 71 68 3b 63 56 e3 f4 51 d7 5a ca da 8e d0 6f 66 e7 4e e6 Data Ascii: ]U-nlsucAC8;ys.{s#T%GI_3i#.Ghlm82'F=e5,;\,+tnqS;2+\|PJy=.YVAdwMgl#Kvi/;O$VB-FL7eIb;wR)qz%qh;cVQZofN
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 14 02 bc ca 39 d8 03 6c ad 1b 8e 78 df f6 2b 8d 25 aa 99 d5 b5 e0 65 c1 b8 d1 18 ff 00 33 b9 04 da 67 94 0d e3 52 c1 b9 dc 21 a2 a6 7c b2 ca c6 e0 6c 0b 80 c9 f4 5f 31 dd 7b 4b e3 bb b5 f0 5b 61 ae a3 a2 a6 c1 33 49 4d 8c c6 3c b3 c8 9f 65 15 59 6c 1f b5 e9 6e d2 f1 0d 65 c4 46 f0 1c da 99 48 77 fb 36 fe 0a f1 4f 8b 69 47 c5 c1 e6 d6 37 ab a6 de 2a 66 b9 dd 65 99 e5 e5 ae 04 0d b3 80 b9 84 7d 98 d4 76 85 70 ae 7d 1d 7b 68 e7 a2 69 3a 5c d2 75 9c ed 9d c6 16 d7 55 76 8a 7a cc 45 a4 91 97 3a 39 5a e8 dc 1a 07 31 9c 65 73 fe 26 e2 db ad 9e df 5e 38 70 54 51 09 dd a6 Data Ascii: """ """ """ """ """ """ """ """ """ """ """ """ """9lx+%e3gR!\|l_1{K[a3IM<eYlneFHw6OiG7*fe}vp}{hi:\uUvzE:9Z1es&^8pTQ
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: e1 ba e1 75 e1 ba 1a b2 fe f1 da 7b b2 71 8d c2 bd 33 73 97 3b 7c 72 c1 c2 be cf 36 39 75 fd 5f 34 dc a8 ab 78 62 e8 21 a8 cb 63 d7 b8 f3 1e eb 64 b8 dc 2d d5 f4 15 12 53 9a bd 2c 60 74 51 b7 70 1d d7 52 ea 3c 61 c3 d0 5d ed a2 37 30 39 e7 72 f2 3a fb f3 5c 9a 92 c7 7f b1 5d 26 8e d7 00 a8 8e 66 96 38 38 64 10 b3 c9 59 eb 0e ed 26 78 a4 f0 5b a4 a4 3b 29 be 16 71 14 11 4b 33 03 6a 06 97 6b 1f a2 ed 55 91 b1 ae 70 1a 40 ca e2 5d 9f 70 4d c5 dc 4d 15 55 ea 11 49 4b 4c f2 f0 09 c9 71 e7 81 85 da 27 91 93 9c 31 ae 0c 07 63 e6 b5 e2 9b 6d 2e 3b 56 29 33 11 d1 4c d6 a8 2b 69 4c 55 8e 63 e3 77 28 dc 32 0a e3 1d a2 76 72 fb 53 df 5d 68 6b be 1c e5 ce 8b 39 c1 f4 5d c1 cd f0 81 b8 23 90 5e 35 c0 c2 f8 aa 1a d9 63 77 47 74 55 dd 10 f9 c3 85 b8 92 4b 7c ad 82 a0 38 Data Ascii: u{q3s;\|r69u_4xb!cd-S,`tQpR<a]709r:\]&f88dY&x[;)qK3jkUp@]pMMUIKLq'1cm.;V)3L+iLUcw(2vrS]hk9]#^5cwGtUK\|8
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 0d 5c 9a 0f 9a b7 18 23 4b 5f 28 96 62 32 f0 46 03 02 a2 b9 de 38 40 00 bb 39 c9 e8 b1 e6 d0 5c 43 1c 43 73 99 1d 9f 98 f9 2a a5 9b 1d 43 25 0e 31 12 77 d2 5a 37 0e 1e ab 94 f6 97 c0 7a cc 97 6b 14 5a 5e 77 9a 9c 7f 10 ba 6b a3 d5 10 99 cd 11 e8 f0 c6 d6 9c 17 7b 85 79 bd e6 5a d9 f4 b6 52 33 81 ba 9d cf ab e7 5e 18 e2 27 5b 9e 61 ac 89 d2 c7 9c 16 93 82 df 45 b3 5f 6c 36 ee 20 80 3e 9a 46 45 55 80 59 23 79 7b 39 6c 1d a4 70 0c 77 08 9d 72 b4 31 91 d6 b7 77 c6 dd 83 c7 9f ba e6 9c 39 7c 75 9a a6 4a 4a c8 9c 23 7b be d0 11 e2 69 5d 14 c9 13 1c 36 71 e6 c3 35 9e 3c 7d 5f 5e 7f d3 ef 00 52 70 9f 0b 47 54 fe ea 5b 85 40 cb a4 66 e1 be 81 75 c0 be 54 ec ff 00 b4 79 ec 32 b4 d2 c8 ea 9a 09 37 74 65 c4 96 af a2 b8 57 8a ed 7c 47 4a d9 68 a7 6e b3 ce 37 1c 39 a7 Data Ascii: \#K_(b2F8@9\CCs*C%1wZ7zkZ^wk{yZR3^'[aE_l6 >FEUY#y{9lpwr1w9\|uJJ#{i]6q5<}_^RpGT[@fuTy27teW\|GJhn79
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 17 34 6c d1 e9 ea 7a fa 2c ba 81 1b a9 73 0e 3b c6 ee 4f 30 7e aa 50 c3 92 a0 b3 3a 70 dc 75 2a 3d 95 bd e5 c2 48 4e 75 35 a0 e7 cd 26 d5 34 85 b8 27 6f 13 b9 0f a2 c6 bb c5 2c 51 c3 5f 11 3a a1 d9 d1 8e ac e5 9c a2 ac ba c7 b8 69 23 48 61 18 71 f2 0a 3a ef 34 ed b5 d4 fc 23 35 ba 38 c9 8b 03 77 1c 6c a4 a2 7c 75 90 87 b4 87 32 46 e4 10 ad 42 d7 89 31 3b 83 0c 7f b9 68 1c fc 95 65 2f 9d 2d bc 45 c4 32 71 24 1a 2a 2b 1d 5f de 63 43 9d b6 73 cb 4a fa 26 39 e7 8e 26 b6 42 0d 4c ac 06 60 07 ca 7a ab 62 8a 96 9e b9 f5 22 dd 4a 2e 8f e7 33 59 e3 1f 55 7e 30 ee f5 f0 45 9e f5 de 29 5e 3f af 55 55 a6 62 57 a9 89 73 08 d0 65 81 9f 7f 9e 0a d3 78 e7 80 e9 f8 86 23 59 40 19 05 7b 77 cb 46 cf f7 5b 95 33 63 6b b0 e7 77 74 ec 3d 36 2f 2b 28 60 8d 64 3a 32 e3 86 37 a2 Data Ascii: 4lz,s;O0~P:pu=HNu5&4'o,Q_:i#Haq:4#58wl\|u2FB1;he/-E2q$+_cCsJ&9&BL`zb"J.3YU~0E)^?UUbWsex#Y@{wF[3ckwt=6/+(`d:27
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: f8 7b 54 71 4a 21 60 89 ad 90 8e 5c b2 70 a0 6d ed 8a 9c 3e 38 69 61 10 cc 0c 92 10 dd 3e 33 cf 92 a3 e1 60 85 ce d0 c0 32 72 40 e4 56 5f c3 48 d6 07 16 69 61 dd 46 d0 e2 df 77 32 ed 6d f5 54 95 56 ca a8 3b d6 d1 b3 c0 f7 c4 dc b9 9e ab 9d 5e 78 9d 94 77 5a c9 23 9c dc df 3c 2d 8a 17 3c 02 37 eb ee be 8b 2d 69 71 71 60 91 9c 8b 5c 32 0f d1 6b 8c e0 6e 15 65 d4 dc 59 67 67 c5 67 5e 97 13 a1 ae f3 01 56 d5 99 98 97 5e 9f 53 18 71 da 38 79 cf 75 de ce ad b3 da b8 3a 91 95 45 a6 6a 8f b6 20 7d dc f4 53 b2 3b 03 24 e0 0e 6a a7 48 5c 72 72 3a 60 72 56 5c f6 b3 0e 90 80 dc f5 1b 2d 37 df 9b 92 27 76 63 a0 6d 40 67 74 08 90 b3 c2 33 80 47 aa c3 9e 26 d2 8e ed cd d2 e6 8f a0 3e eb ca 47 c8 2e 13 c8 e8 e4 6c 6d 03 49 27 6f a2 cf 75 64 32 d2 b6 36 31 d3 4f 23 fc 0c Data Ascii: {TqJ!`\pm>8ia>3`2r@V_HiaFw2mTV;^xwZ#<-<7-iqq`\2kneYggg^V^Sq8yu:Ej }S;$jH\rr:`rV\-7'vcm@gt3G&>G.lmI'oud261O#
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 4d 4c ec 89 9e 40 ea 3f a2 c1 ab bb 59 ad 4d 73 9c 1a 5d d0 ca ee 6a bc e5 6d f6 5e 92 4a 8a 97 eb 85 af 93 3b 10 d2 a9 14 13 b9 ce 35 4f ee 7d 32 0a d2 af 5d a9 50 51 92 c8 e7 85 84 74 8b 7f e0 b9 ad ff 00 b4 ba fa f7 48 da 5d 6d 89 db 07 b8 e0 fd 30 a4 e2 f4 e6 ee 33 d7 58 6d 45 d3 c9 1c 72 4a 06 3b c9 e4 e4 7d 02 d5 af 5d a4 db 22 61 02 a9 a4 fe 08 86 c3 f2 5c 06 a6 e1 51 39 26 49 e4 7f 5f 13 b2 b1 9c f3 8c 9c 0f 5e 8a 76 84 6f 69 74 eb 9f 69 ed 73 88 a4 a3 32 0f c5 21 20 7e 4b 5e a8 e3 db 84 84 1e e2 16 ef d0 1f ea b5 7a 7a 3a ba c7 06 d3 41 23 fd 74 9c 7e 6a 5e 2b 0d 3d 23 83 af 97 08 e0 69 df bb 84 eb 79 fe 43 ea 9b ad 10 ea bc 23 7e 99 e2 9e 66 c9 90 ec 1f 09 ea be 96 e0 8e 2f a2 ab a1 a7 a6 ac a9 8d 95 58 c0 6b 8e 09 5f 13 b3 8b 59 6e a5 14 5c 37 Data Ascii: ML@?YMs]jm^J;5O}2]PQtH]m03XmErJ;}]"a\Q9&I_^voitis2! ~K^zz:A#t~j^+=#iyC#~f/Xk_Yn\7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.5	50029	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	626	OUT	GET /uploader/48e1ea064ee564bf1e9113d74ef81304f299ac8e.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:34 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:34 GMT Content-Type: image/jpeg Content-Length: 56897 Connection: close x-oss-request-id: 66511B5D76EC4B3131FE682D ETag: "E0357D837C72590FBEF5A005CE33770C" Last-Modified: Mon, 23 Oct 2023 02:04:35 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 13263312270314295939 x-oss-storage-class: Standard Content-Disposition: inline; filename="221b96721f80a92a70749f1e0d01c64706917838_221" Content-MD5: 4DV9g3xyWQ++9aAFzjN3DA== x-oss-server-time: 79 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:34 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a9b9a2f7f8-BNA
2024-05-24 22:57:34 UTC	690	IN	Data Raw: ff d8 ff e1 00 2c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 3c 01 02 00 09 00 00 00 1a 00 00 00 00 00 00 00 69 6d 61 67 65 72 79 34 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 02 eb 02 eb 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 01 08 09 ff c4 00 55 10 00 01 03 02 04 04 03 05 04 06 06 06 07 06 Data Ascii: ,ExifII<imagery4C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("U
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 Data Ascii:
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 Data Ascii:
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 51 4e 23 14 74 e5 bc d0 63 89 c0 10 d2 1c 41 b7 f9 17 ee a0 d4 63 f0 f9 fc ec 0e 2e 2e be fa 76 bf 55 af 11 9a 90 f2 da 00 7b 75 71 7b 5a 5b ef 0b 5b fe 6a 0b 9e ce 68 01 c0 92 48 73 ad e5 03 ef 01 dc 76 58 2a de 21 a5 8a 4f b6 99 d2 bf e2 04 dc 37 b5 bb 74 fc 16 02 af 8a 9a c8 f9 71 5e 4b ee e3 a9 0a 51 b9 b8 b6 40 e6 b5 f6 26 f9 6c 0d 89 1a 2b 22 3b 3f 35 ae 59 e5 de d6 ea 7f 8a d2 5d c5 f3 5c 93 1e b6 20 02 7d db ef fc 15 11 f1 75 47 31 b9 db 11 68 d3 6d 48 f9 f7 f5 4a 47 d8 de 05 f1 c3 71 5c 3d b8 16 23 2d eb a9 9b f6 0f 76 9c d8 c7 41 dc b4 7e 56 5d 6c 1f 45 f9 ed 83 71 bc d4 55 f4 f3 31 ae a4 a9 89 f9 d9 2b 34 20 e9 62 47 e5 6f 92 fb 5f c2 ae 32 87 8d b8 5a 1c 41 b9 1b 57 19 e5 54 c6 d3 7b 3c 0d fe 47 42 17 3d c6 b1 b9 a2 22 8a 22 22 02 22 20 22 22 Data Ascii: QN#tcAc..vU{uq{Z[[jhHsvX*!O7tq^KQ@&l+";?5Y]\ }uG1hmHJGq\=#-vA~V]lEqU1+4 bGo_2ZAWT{<GB="""" ""
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 70 d1 bb 1d 56 a7 16 23 2b aa 85 55 49 ab 95 93 12 da 9a 89 09 7f 35 c4 dc 9b 9d 0b ac 3f 10 83 25 57 0b ea 21 73 e3 61 6c ac bc a1 80 6c 2e 04 8d b0 1a 65 77 98 fa 15 ad 54 d5 d4 47 33 a2 81 ee c8 f6 98 da 00 d4 87 6f 6e ab 65 74 cf 33 b6 3b 30 55 ca 0c 8e 0f 1c a7 64 68 d8 11 bf 35 bb 9e a4 28 94 78 a8 c2 6b 65 9e 92 9e 30 1e cb c3 cd 8e ee 8d 97 b8 b1 3d 7a 15 46 2a 4a ea fa 6e 6b 2b 61 2c 7c f0 88 fe d1 85 a7 28 d8 05 3e 2a e6 54 d5 c4 60 9e a0 b9 d0 08 5c 22 60 0e b8 1b 5b 67 0f 9e ab 1d 8b 62 f3 e2 4e fe b2 f7 4a ed 6c ed c9 2b 14 c9 1d 1b 9a e6 dd ae 1d 42 6a 63 60 63 73 53 d0 b9 d4 73 c9 03 24 31 39 85 e4 32 47 13 6b 34 ee c3 b6 9b 5c 2b 73 c3 39 7d 58 a6 6c b1 c5 4e e0 1d cc 00 ba 21 d3 37 a7 aa 83 4f 58 c3 4d 3c 73 73 5c f9 0b 5c 1e 1e 6c 08 fb Data Ascii: pV#+UI5?%W!sall.ewTG3onet3;0Udh5(xke0=zFJnk+a,\|(>T`\"`[gbNJl+Bjc`csSs$192Gk4\+s9}XlN!7OXM<ss\\l
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: d2 c0 ec 7a ac 7f 12 e3 8c 9a 86 a2 82 1a c6 d5 52 b6 dc 89 1b 18 8c 10 0f 95 d6 e8 6d b8 ef d5 4b c7 78 7a 5c 42 a3 9c 2a 9a c9 1c 3e d0 35 b6 04 8b db 41 d8 68 14 28 b8 4e 00 09 a8 9a 49 24 70 f9 6a b7 d7 73 e3 37 18 ca 69 65 ab a0 0d 6b 9b 34 a4 c7 4c c8 9c 7c ec d6 ec 21 c7 6d 6e 2d d8 aa 2b 6d 33 5d c8 04 53 52 b4 33 93 2b fc f1 e6 3a 8f 50 1c 0e be a1 47 11 33 0c c5 79 55 b1 bd d0 87 5c 80 72 e9 b6 6b fa 1b 1f a2 ae 79 63 74 50 b5 d5 52 16 3c bb 9a fc 96 2d 71 bd fe 6d f7 4f cd 63 7c 6b 3d 6d 18 56 1b 42 cc 36 27 c1 13 1c 64 65 dc f3 ab 89 be c4 fd 0a 8b 88 60 74 d3 37 36 40 d0 35 36 eb e8 bd e0 da 81 2d 05 43 5f 96 cc 92 e2 db 6a 2e 6d f5 fd eb 2f 51 67 31 fd 49 69 16 b5 ec 7a 7c d7 6c 9b 8e 7b e6 a2 f1 57 86 b5 58 7e 15 fa 46 92 66 be 16 c0 c9 9c Data Ascii: zRmKxz\B*>5Ah(NI$pjs7iek4L\|!mn-+m3]SR3+:PG3yU\rkyctPR<-qmOc\|k=mVB6'de`t76@56-C_j.m/Qg1Iiz\|l{WX~Ff
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 65 e1 de 1d ac 23 0c 88 06 d5 d4 52 bf 59 9f 7b 18 c3 87 41 70 3e 77 ec b4 1e 22 e3 ea be 28 15 d8 a6 21 59 59 20 86 13 2d 3d 2c c1 cc 8d 85 d6 c8 f0 06 84 0f ae 8b 46 0f c8 7c b1 4a f2 c0 ef d8 99 ae 6c 77 25 c0 7c 21 ce 2e f5 b2 d4 11 b1 89 e3 82 11 1c 39 4b 9d 77 9b 6b 7d 48 1e b7 bd cf e0 b0 b4 95 a2 99 8f 8e a2 96 ee 0d 73 03 9b 70 43 ce 85 ce f5 dd 67 a0 a7 8b 17 e2 ca 7a 27 54 7b 44 52 3c 00 e7 b8 45 9d 8d 6e 80 9f 84 69 f9 5d 6d 47 00 c3 2b 20 fb 46 65 a6 73 c9 8d cf 04 46 c2 06 a1 ae 6f bc eb 9e a9 99 59 b1 a6 47 14 55 cf 9b d8 64 2f 89 d2 41 10 70 60 b8 d8 6c 4e c3 5e eb 65 af a5 a6 c3 f0 1a c8 1f 4d 2b df 51 4e f7 b2 68 da 18 d9 5e 1c 01 71 27 e1 06 fa 0e a1 5a c2 b8 72 9f 0c c5 63 ad 6b dc da 67 3f 95 1b de 09 c9 73 a9 e9 e6 03 35 87 55 90 c4 Data Ascii: e#RY{Ap>w"(!YY -=,F\|Jlw%\|!.9Kwk}HspCgz'T{DR<Eni]mG+ FesFoYGUd/Ap`lN^eM+QNh^q'Zrckg?s5U
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 1d 52 74 ca 00 d6 f6 b6 da 7e 4b 59 c3 f6 95 25 d4 b4 4e af 96 b3 10 92 5c 57 10 95 c6 59 2a 2a f5 6e 7e a4 37 af d5 5d aa af 73 da c7 3d ee 03 b3 45 83 47 ec 81 b7 d2 cb 19 cc 76 6d 5c 40 77 41 dd 55 13 db 66 e9 61 be 8b 7f 19 49 7c a5 e4 db cc 05 f4 6e 96 24 68 35 fc 55 a2 f7 ba 2b b5 ce 20 0c b9 8e 9f 8a a1 e4 38 96 93 7b 1d 0b 8e ad f5 51 aa ea 99 03 5a 03 83 b2 5e ed de ca 55 89 50 c8 5a 1a 01 04 db 46 76 ef 65 54 95 81 91 b9 d7 05 b1 e9 e6 d1 cd d3 f8 d9 6b 35 b8 e3 21 8d c5 af 0d 90 eb 63 ad 96 ab 89 63 32 d5 1b 66 39 46 d9 8a 9b b0 8d b3 18 e2 66 34 38 44 dc a1 d7 b9 24 97 5c eb fb d6 9f 88 62 d3 d6 38 5d c6 f6 b5 ef bf a9 fc bf 00 a1 c7 1c d5 04 9d 6d d4 a9 d0 51 86 82 e2 d2 e0 3d 2e a6 7a d2 1c 34 ee 79 bb cd 87 cd 64 61 85 8c b0 d7 41 73 6f de Data Ascii: Rt~KY%N\WY**n~7]s=EGvm\@wAUfaI\|n$h5U+ 8{QZ^UPZFveTk5!cc2f9Ff48D$\b8]mQ=.z4ydaAso
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: ad a3 ef 9b 66 df 6f 90 37 f7 15 a9 9e b6 58 70 7c 3a 53 14 f5 b0 e4 9a 76 38 65 a7 a7 31 90 26 70 dd a0 d8 8f ee fa bd 6c 54 af 6e 0d 87 ba 86 9b 91 25 81 e6 07 de 16 d4 da 36 b5 d3 4a 47 70 dd 7b 36 c0 1c c5 4d 55 8a 2e 0a e1 9a 07 07 55 be 7c 6e a8 79 8c 51 bf 2b 6c e7 16 46 c6 91 60 f7 17 1d 3b 90 e7 1d 02 c8 49 55 4d 45 40 69 e8 62 a0 a6 a3 89 ae 70 22 22 1a 03 6e 5f 99 c3 cc f6 46 5c 3b 73 24 b0 1a 0b 2c 45 35 4c 6f 9e 9e 8e 27 4c fa a6 46 66 a8 7d 3b 4e 4a 5c e1 a0 86 1d f9 d2 34 36 38 da 7d c6 fa dd 57 21 94 98 a0 11 53 42 e8 5c eb 32 e4 b6 9b 95 6f 3c 87 ac 34 ed d8 6c e9 5d f5 59 58 96 6b a4 7d 4b a5 95 f5 8e 7c 39 1b 20 85 9f d6 a2 2f 2e 0c 85 96 f7 aa a6 1e f9 da 36 58 69 a9 51 31 5c 3d f8 dd 33 e8 f1 09 68 60 2e 84 b2 90 41 18 e5 d3 b9 80 07 Data Ascii: fo7Xp\|:Sv8e1&plTn%6JGp{6MU.U\|nyQ+lF`;IUME@ibp""n_F\;s$,E5Lo'LFf};NJ\468}W!SB\2o<4l]YXk}K\|9 /.6XiQ1\=3h`.A
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: b5 2e c4 ab 9b 57 25 7f 2f da 21 80 de 28 2d 7b 16 9f 88 eb a9 5f 30 d6 71 4e 2f 8d 39 82 a2 b4 d2 d2 c6 dc 91 d3 52 1e 44 2c 17 e8 c6 e9 fb ca ef be 0d e3 13 f1 1f 0c 08 5a e7 4b 2e 1d f6 13 4c 5a 43 4b 77 6b 8b 8e 9b 5f aa 9f 5a 8f a9 63 7b 64 6b 5c c3 76 b8 5c 11 d4 2a 97 3c e0 1c 79 ee c4 99 83 73 5b 51 1b 5a f2 d9 1a 6e 19 6f 84 1e bf 4d 17 43 59 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 45 e5 d2 e8 3d 45 6a 79 e3 81 8e 7c cf 6b 18 d1 72 e7 38 00 07 72 b1 12 71 35 00 79 64 26 49 dc 0e 5f b3 69 22 fd af d4 a4 a3 37 75 e1 77 f9 0b 89 f1 cf 8c d2 e1 f5 ee a1 c0 29 a0 9a 48 74 9e 79 89 2d 6b fe e8 b6 fe ab 4c c6 fc 4b e2 aa ec 20 ba 7c 42 18 2f 0c 93 ca ca 76 f2 cc 50 b4 68 e7 1d ee eb 8c a3 ad c1 Data Ascii: .W%/!(-{_0qN/9RD,ZK.LZCKwk_Zc{dk\v\*<ys[QZnoMCYD@DDD@DDD@DDD@DDD@DDD@DDD@E=Ejy\|kr8rq5yd&I_i"7uw)Hty-kLK \|B/vPh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.5	50034	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	477	OUT	GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ee8-2905" If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
2024-05-24 22:57:33 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:33 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-2905" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 200955 Expires: Sat, 25 May 2024 02:57:33 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2a9cf75f7c4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.5	50036	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	392	OUT	GET /uploader/f4b9a830a3be50c7333eaf1836144b26d8b2ee68.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:33 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:33 GMT Content-Type: image/jpeg Content-Length: 72885 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221fe833b52ac99ff46fef9f7d09d01ee3c24243_221" Content-MD5: wbdORqPhXFEK8zcWAOCKsg== ETag: "C1B74E46A3E15C510AF3371600E08AB2" Last-Modified: Mon, 23 Oct 2023 02:04:20 GMT x-oss-hash-crc64ecma: 11470177824361976529 x-oss-object-type: Normal x-oss-request-id: 66511B5C9EAA1A38333BBFA2 x-oss-server-time: 87 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2a9ceedf7f4-BNA
2024-05-24 22:57:33 UTC	668	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 07 08 09 ff c4 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 8f 07 d3 5f 10 e9 78 ef d9 35 38 7e ae 0d 8d 36 bd 07 26 bf dc 39 75 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 d8 b7 c8 fe 47 ed f8 78 f6 f3 94 ca b6 bd 93 5e 5f 63 4f 85 cf a5 99 4c b9 d8 b6 73 eb 9b 63 4c d9 f1 6c 98 9c 95 24 ad a6 ac 52 66 c4 c2 60 5e 61 9a eb 94 d4 6c 69 d3 d1 fc ef af f5 1f 2f db 79 ef 6b cf c6 7d 46 2d 8d c7 2b d4 e7 69 f6 6e c7 9b 0e d8 fc ff 00 af e2 f5 d9 39 fc c6 6c 1d 56 4c 5c c5 63 ad ae 6d 04 d3 65 ab bf 06 de 8e 3e 39 fa 03 67 5f 9e f0 9b 9b 3d ab f8 97 a4 c7 91 96 be f7 b7 a7 d4 51 e6 58 33 fb 9c d7 d4 af 8f 22 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 56 7c a3 e7 be 9f 8f cd f5 b3 a3 32 71 4b 38 ab 68 f3 bd ae 57 13 b9 c8 9a 2f 35 72 66 e3 d8 d8 53 6f 3f 1e 6c ec 79 e4 a5 b2 21 62 d6 cd 71 6d 8f 07 2e 2c 0b Data Ascii: _x58~6&9u@Gx^_cOLscLl$Rf`^ali/yk}F-+in9lVL\cme>9g_=QX3"`V\|2qK8hW/5rfSo?ly!bqm.,
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 64 c7 51 35 b0 d7 94 33 d3 d1 c5 ba 38 8e a2 1b 34 d4 00 00 00 00 00 00 1a 28 9f cf c4 f7 7b 18 23 9c 79 06 7c 36 73 39 14 c9 c5 52 f6 a7 35 78 6b 95 cb f5 5b 5e 4f b2 d8 6b 74 ee 95 ea de c7 32 d0 c5 6c ad ac bb 4b d1 f3 3a be df 86 cd d8 e6 da 44 8a a2 a0 16 17 92 97 14 4d 62 6f 45 26 6e 05 e5 08 4c 28 4e 65 ca 73 06 93 e3 15 c9 bc a6 4f 50 d8 d4 09 79 d6 0d 8d 14 5b d0 b2 e0 e8 6d 18 b3 5f 39 c3 b3 db cd ba 1b e1 f2 7d 6d 8d b6 6c 1e c1 93 0e 49 96 8e 96 62 03 66 6b cc 33 58 67 18 68 c8 4f 5b 0e b2 27 a4 4e e2 00 00 00 00 00 07 9c d2 df 2f dd cc 5a 9d 26 5c 57 4d 25 86 71 b8 37 15 9e 66 b9 39 88 c9 94 b6 6c 4c 11 68 f4 fb d2 e8 fa 0c 9d 0e ee 6e 1d c8 6f 8f 17 63 93 66 ef 0b 17 a5 e6 72 73 e9 d1 10 42 e2 d9 8b 51 52 42 d2 c2 a4 e5 d0 26 49 98 d1 72 67 Data Ascii: dQ5384({#y\|6s9R5xk[^Okt2lK:DMboE&nL(NesOPy[m_9}mlIbfk3XghO['N/Z&\WM%q7f9lLhnocfrsBQRB&Irg
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 27 f5 0f 92 fa 77 a1 73 3b e0 43 13 f3 af 2f a3 c8 ef ea c5 b9 a7 a5 53 1a 50 ca b0 c9 98 99 02 48 5f 59 80 a2 72 25 49 8a 22 91 16 98 d1 6d 35 73 6d a2 fb 04 f7 85 0b 01 b7 34 c6 ec e7 0e 94 e4 8e c6 1c 7c ba 8a b4 06 dc c3 2c 84 d6 60 43 6f 2d 51 b7 c3 33 ea 4e af 7a bb 1a ce 06 0b 6c f6 23 4f 11 3c b1 f2 44 f2 cc 34 84 e4 c6 c4 c0 30 89 4c 38 74 85 96 63 c3 31 12 23 69 82 70 6b 92 99 b1 e6 c4 e2 e0 b6 3e cd 72 ea 87 1c c3 b1 5b 71 5a dc 91 af 34 e7 38 62 90 4b 18 89 11 a6 c6 3d df bf f8 8f d5 5e 33 eb 5d a6 8f 58 0d 2e 3c 9e 33 cd e8 71 6a f1 bd 5e 74 f9 70 45 75 54 be 22 eb 32 eb 68 c8 13 3c 31 89 91 52 32 a9 b9 16 ab 09 8f 39 35 f4 be c2 32 74 49 df 1b 93 40 74 67 38 76 07 2f 0e a0 e4 4e ba 1c 6c bb 28 71 87 66 71 c7 63 0e 42 ce ae 1c f9 b9 94 7c fc Data Ascii: 'ws;C/SPH_Yr%I"m5sm4\|,`Co-Q3Nzl#O<D40L8tc1#ipk>r[qZ48bK=^3]X.<3qj^tpEuT"2h<1R2952tI@tg8v/Nl(qfqcB\|
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: a1 61 6a 6a 0a cc 52 26 81 02 93 36 c4 54 a4 4d 26 2a 9a 42 93 15 89 a4 c5 0a 16 42 93 37 8a ab 11 59 9a 42 d4 41 59 44 8b ad 12 a2 e9 88 e6 6f 84 88 c0 b5 70 72 d3 1a f5 c3 c9 48 26 30 ef 15 45 4c 84 e0 96 99 14 9b eb 6b b1 db 79 4b f4 78 f2 4d 0b 55 a2 6e 4d 89 b9 10 44 c5 33 6c 45 61 64 b9 be ff 00 96 f3 cf 7b f1 ff 00 a1 3c af d1 3d 3f 89 ec 40 00 01 e2 dd 2f 3d 8f e6 bd ac f4 b5 e4 c5 4a a2 52 44 88 91 52 e2 88 ba 5a 7c 98 f5 32 e8 29 6d 7d eb 14 ac ac e4 90 cb 3e b3 af 86 d0 cd 4d d2 b2 25 59 a4 c4 73 12 9a 5b 47 21 7c 7c f6 4c 7a 94 43 0d a5 6f b9 ad ba a5 fa 5a de 94 0b 65 6c 2e 2e a2 38 91 79 72 05 a4 d6 5c 48 46 8b 91 31 72 6e b4 56 55 2a 5a 5a 5d 08 ea c7 4d 4b d1 44 c8 42 63 ad 79 44 46 90 57 03 6b 9f e7 de d3 e6 ba 2f 43 e2 fe 9d f0 ff 00 5c Data Ascii: ajjR&6TM&BB7YBAYDoprH&0ELkyKxMUnMD3lEad{<=?@/=JRDRZ\|2)m}>M%Ys[G!\|\|LzCoZel..8yr\HF1rnVUZZ]MKDBcyDFWk/C\
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f ff c4 00 35 10 00 02 02 01 02 04 04 05 02 05 05 01 01 00 00 00 01 02 00 03 11 04 12 10 13 21 31 05 22 32 41 14 20 30 42 51 23 33 15 40 50 60 71 06 24 34 52 61 43 90 ff da 00 08 01 01 00 01 08 02 ff 00 f2 c9 dd 6b 52 cc de 2a bb bc a9 ad ad 80 68 ac ac 32 bf db 2e eb 5a b3 36 b3 5a da 87 8b d8 19 47 4a cc 4b 5e b6 c8 aa f4 b8 74 fe d8 f1 3d 6f 35 f9 69 d5 c8 58 7a 09 82 02 a4 ff 00 d9 6d c6 82 96 2e 87 c6 52 dc d5 7e 73 fd ad e2 7a 8e 46 9c e1 8c d3 2f 98 bc Data Ascii: 5!1"2A 0BQ#3@P`q$4RaCkR*h2.Z6ZGJK^t=o5iXzm.R~szF/
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: fd 16 a6 7c 9b b3 d0 4b 2d f6 40 b9 39 24 00 25 d6 a9 1d 34 7a 8e 5a 6a 15 91 49 02 2d 70 07 1d af b5 f9 6c a6 db d6 ea 90 b6 8d b6 a2 c1 60 e8 48 6c db b4 6b 6c c5 56 2c ac d3 72 2d 35 68 ac 29 5b a9 be db 1d 54 c1 5b d9 e5 15 16 af 19 d4 d9 45 e8 58 50 db e9 a9 e3 76 9a b3 b8 4d 22 b0 62 f5 e9 91 6f be b4 7a b4 d5 69 ce ed 3d be 25 76 9b 06 ea fc 75 91 d7 9d 46 bb 4b a8 25 2b af 51 4d 87 0b fd 0f c6 2c 2b 5d 68 0f 51 03 76 80 94 3b 82 b0 60 08 e3 d2 7e 26 a3 46 97 f9 96 da ec a1 b6 d9 99 ba 6e 9b a6 e9 ba 6f 9b a6 e9 99 99 9e 15 a3 da e1 13 4f a7 14 81 bb 3f 96 b0 bf 45 00 0e 39 dd 93 05 23 6a 18 a9 02 cc 4d 43 92 ae 05 3b 4d d5 07 4a 8e 00 9b ee 48 8c 7e 21 2c af 50 4d bb 2b 05 8d 85 9c d9 bd 6b ad 9a c6 a9 f4 8b 8d 35 56 6a 5c 35 9a fa 54 82 d3 da 69 Data Ascii: \|K-@9$%4zZjI-pl`HlklV,r-5h)[T[EXPvM"bozi=%vuFK%+QM,+]hQv;`~&FnoO?E9#jMC;MJH~!,PM+k5Vj\5Ti
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 5b 20 06 55 78 d8 c7 9f 7d c8 07 2d 75 d7 80 0c af c4 6a 3e a4 b6 b7 ed f4 fc 66 c0 ab 48 16 6e d1 d8 ce b7 d6 9e ba f4 f7 ad 80 55 6b 02 87 07 86 60 31 6d 85 6b b0 47 d3 77 33 16 27 7d f3 74 cc e9 36 d7 d6 00 b3 3f 36 7e 5e 9f 30 ad da 2d 39 0b 02 af b7 70 48 3d 73 2f b1 2a a9 ec 76 04 33 45 75 63 66 de 88 6a 11 7b 09 db 19 70 08 b2 59 4a f9 88 7a 99 73 f2 ea aa 2e 87 6f 37 4c 81 f9 7a 54 2b 58 c8 dd 82 21 4e 66 41 26 c7 73 6c b3 1d 65 de 43 a6 b5 bf 56 e2 f8 af 24 2e 3d c9 80 16 c2 ae 36 14 ad 7a 12 25 8a 4a 5b 8c 6e 5e b9 e8 25 6c 2d 56 65 14 55 5b e5 49 96 16 55 3b 58 03 90 7f f2 1c 4c 75 9d 61 52 41 c6 d4 61 b5 b3 b6 25 f6 ed 05 57 5d a8 59 57 88 54 c7 6d 80 e7 e8 6b 9c 37 8a 5f 4d 97 3b ad 2f a6 b7 f3 c2 8d 48 61 ca bd 91 ab 83 e4 07 10 58 66 54 c6 Data Ascii: [ Ux}-uj>fHnUk`1mkGw3'}t6?6~^0-9pH=s/*v3Eucfj{pYJzs.o7LzT+X!NfA&sleCV$.=6z%J[n^%l-VeU[IU;XLuaRAa%W]YWTmk7_M;/HaXfT
2024-05-24 22:57:33 UTC	1369	IN	Data Raw: 7a 81 d2 55 d4 36 a9 9b f6 f6 f5 dc 78 01 31 f4 1a c3 9c 2c c4 0a 4c af 4f 83 e6 c8 51 48 3e cd 28 af 65 34 d6 51 8b dd 6c 03 a2 ca f0 f6 5b c1 c2 d9 ce 56 96 af 34 bd 01 4e e5 56 9a 80 6c cd 42 b2 19 11 86 a0 6e 46 51 5e dd 83 1a 93 fa 36 e2 b1 b5 50 4b ce da 6c 32 91 fb 6d 0f a4 c1 f6 08 c7 0a 49 ac 79 83 46 e8 a6 56 bb 33 18 85 dc c7 02 c4 d3 93 7b 15 aa c3 11 76 aa 2c a1 8b b6 ad e6 47 3b 94 0f ff 00 38 ee 2a 5b 2c 6d 98 20 4a 8f 35 0b 85 60 75 2e b2 c2 33 55 65 f3 07 45 ea 83 bc db 96 cc 60 71 85 38 ea 62 ae 00 27 1d 00 e1 d7 ae 4e e3 e9 38 eb 9f 36 32 71 f8 f4 cd a5 47 5e e7 74 ce 3a 4f f2 6c da b2 cb 4b 93 33 09 f9 0e 39 69 b7 c2 7f e1 af c8 e7 6a b1 97 79 b3 29 b7 96 4d 4f 62 8c ce d3 13 68 9b 04 c7 c9 99 ba 64 fc de e6 76 73 91 d6 22 06 62 0a a0 Data Ascii: zU6x1,LOQH>(e4Ql[V4NVlBnFQ^6PKl2mIyFV3{v,G;8*[,m J5`u.3UeE`q8b'N862qG^t:OlK39ijy)MObhdvs"b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.5	50033	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	469	OUT	GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-20a8" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:33 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:33 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-20a8" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 191778 Expires: Sat, 25 May 2024 02:57:33 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2a9cfeef7f0-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.5	50031	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	1138	OUT	GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451974&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:33 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.5	50030	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	1253	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451974&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:34 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x1e56ca29f3892d0e","source_keys":["1","2"]},{"key_piece":"0x30408da2837dfb7e","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:57:34 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:57:34 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:57:34 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.5	50037	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:33 UTC	626	OUT	GET /uploader/9adc39b5052122d6f03b60858a956876cea2f3e2.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:34 UTC	678	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:34 GMT Content-Type: image/jpeg Content-Length: 68003 Connection: close x-oss-request-id: 66511B5EE2741F363216BDD9 ETag: "63A9BDC5A0FAFE06120BB78D18B3761A" Last-Modified: Mon, 23 Oct 2023 02:04:34 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 4196488442501836240 x-oss-storage-class: Standard Content-Disposition: inline; filename="22198082de0134a990d683e5928011ccd8328456_221" Content-MD5: Y6m9xaD6/gYSC7eNGLN2Gg== x-oss-server-time: 54 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:34 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2ac4c0df7ec-BNA
2024-05-24 22:57:34 UTC	691	IN	Data Raw: ff d8 ff e1 00 2c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 3c 01 02 00 09 00 00 00 1a 00 00 00 00 00 00 00 69 6d 61 67 65 72 79 34 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 02 ec 02 ec 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 08 09 ff c4 00 52 10 00 01 03 03 03 02 04 04 03 04 06 07 05 05 Data Ascii: ,ExifII<imagery4C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("R
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 Data Ascii:
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 Data Ascii:
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 f1 c7 03 94 1e e4 2c 7a aa a8 a1 6e 1e ef 51 e8 d1 cb 8f d8 2d 6b 5f eb ab 46 89 b6 0a ab ab e4 92 69 32 21 a5 84 6e 96 5c 75 c0 f6 19 e4 9e 00 5f 31 6b 8f 1c b5 4d fd f2 43 6b 91 b6 2a 27 02 d6 b6 94 89 27 78 ff 00 de f0 08 fa 33 07 ee b3 3b ed 03 b9 f8 91 e2 c5 af 48 3c 53 ce f7 54 dc 5e 33 1d b6 99 cd 33 1e 3f de 38 e5 b1 8f a7 53 ec be 65 d7 3e 22 ea 1d 68 e7 32 e7 57 b2 dc e0 5f 1d 15 1b 88 a7 01 a7 bb 4f 32 ff 00 68 3b d4 30 48 01 69 92 ca c8 cc b2 48 f6 17 48 e3 bf cc 26 40 f2 7b 12 4e 4e 0f 5d de a1 95 e4 82 6a 88 98 f0 d3 4f 4d 20 0e 64 ef e1 f2 01 c1 da df e3 c7 bf 18 1d 54 8a 6b b8 bb 33 e2 a7 24 bc b9 9c 02 00 70 f4 81 c0 c1 c7 51 9c 83 ce 46 41 58 46 b8 Data Ascii: """ """ """ """ """ """,znQ-k_Fi2!n\u_1kMCk*''x3;H<ST^33?8Se>"h2W_O2h;0HiHH&@{NN]jOM dTk3$pQFAXF
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 6b fd 92 2e 82 8f c4 6a 9a 01 28 73 2b e8 9d d0 7a 4b d8 ed dc 7e 45 df a2 e2 8f 0d 30 ba 58 58 5d e9 0c 13 bc 60 64 f1 9d cf fa e7 a0 0b 7e fd 9e ea fe 0f c5 bd 34 d0 1d 1e f9 5d 13 40 39 dc 1c c7 02 5c 7b f3 d3 84 1f 78 f7 44 1d 51 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 13 23 dd 01 32 0f 42 b5 ad 5b ae 34 f6 94 63 7f 1b b9 c3 04 af 00 b2 16 e5 f2 38 1e e1 a3 9c 7d 7a 2e 7d 51 fb 42 e9 46 1f dc 52 dd 26 67 b8 89 ad f6 ec 5c 0f 70 83 b3 65 17 22 a1 f1 ff 00 47 54 90 26 fc 42 94 7f 59 f0 6e 68 eb d4 b4 9f 62 ba 0e 9d d5 76 2d 47 1e fb 25 d2 96 ac 7f 56 37 fa c7 dd a7 9f e4 82 71 17 99 19 5e a0 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 Data Ascii: k.j(s+zK~E0XX]`d~4]@9\{xDQ#2B[4c8}z.}QBFR&g\pe"GT&BYnhbv-G%V7q^""" """ """ """ """ """ """ """ """ """
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: bb cc ea 9a b7 38 83 23 9b d6 47 74 fc 80 e8 3b 70 82 4a f3 72 ac b9 57 4b 51 5f 34 95 35 12 3d ce 74 ee 77 a9 ef 23 9c f7 c6 47 1d 82 c4 32 12 e2 00 70 8c 38 b8 64 f3 d4 67 ff 00 93 f9 ab 45 e5 a7 2c 3e a0 7a 1e 80 0e 4f e6 70 a9 73 1d b5 ad 3e ae d8 71 c6 07 4f f1 28 2f e5 ef 83 63 c3 83 40 0d e8 3a e0 0e 9d fe 62 af 51 d5 c9 05 53 2a 29 a7 96 9e 43 ea 64 91 38 b5 ed 20 38 8e 9f 52 16 01 79 79 fd d8 00 9e 5b 93 9c 8d db b3 8f b9 01 56 e7 f5 da e6 0c 3f 20 82 47 4e a3 f4 68 41 dc 7c 39 f1 e2 e3 6d 31 51 ea d0 eb 85 1e ed 82 a9 a0 09 a3 1c f2 ee ce 1c 0f af dd 7d 2d 63 bb d0 de ed b0 5c 2d 55 11 d4 d1 ce 37 32 46 74 3f 75 f9 f2 5a 63 69 73 bd 26 36 e4 7d 76 80 4e 33 d4 f0 07 d5 77 ef d9 0a ed 53 3d 7e a5 b7 07 b9 f4 31 b2 19 f1 82 1a c9 09 70 38 1d b7 01 Data Ascii: 8#Gt;pJrWKQ_45=tw#G2p8dgE,>zOps>qO(/c@:bQS*)Cd8 8Ryy[V? GNhA\|9m1Q}-c\-U72Ft?uZcis&6}vN3wS=~1p8
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 76 2b 62 c8 5f 9e be 1e 6b 7b c7 87 7a 8e 3a 9a 39 8b a2 91 ad 12 53 b8 9f 2e 66 3b 18 69 f6 3d c3 b9 c7 d5 7d bd e1 f6 b7 b4 eb 6b 33 2b ed 32 e1 e0 7e fa 9d e4 07 c2 ee e0 8f 6f af 74 1b 62 2f 33 ce 02 f5 01 11 10 11 11 01 11 10 11 11 01 10 f0 a9 73 80 69 28 3d 73 86 0f ba d0 bc 5c f1 1e dd e1 ee 9f 75 55 46 d9 ee 33 02 da 4a 3c f3 2b b1 d4 fb 34 1e a7 fc 70 bd f1 5f c4 9b 57 87 96 47 54 d6 38 54 5c 25 69 f8 4a 36 3b d7 29 fe b1 f6 68 3d 4a f8 63 5b 6a 7b 96 ac bf 55 5d 6f 95 02 7a 99 1d 80 07 cb 1b 7b 31 a0 f4 68 e7 f3 f7 ca 0b 5a aa ff 00 75 d5 97 fa 8a eb a4 f2 55 d7 d5 48 3a 9c 60 9f 95 80 76 68 e9 8f a2 95 92 9b e0 23 8e 88 72 d8 89 de f0 30 4c 87 19 ff 00 2f b2 8d b0 52 9a 68 85 6c e7 13 4a d2 20 2f e7 0d e8 5f f4 27 a0 59 6f 73 a5 2f 69 73 da f2 Data Ascii: v+b_k{z:9S.f;i=}k3+2~otb/3si(=s\uUF3J<+4p_WGT8T\%iJ6;)h=Jc[j{U]oz{1hZuUH:`vh#r0L/RhlJ /_'Yos/is
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 36 66 97 c6 4b cb b3 87 6d 70 ce d3 8e 79 38 2b 38 b5 f3 ee 10 4d 23 a3 70 70 2c f2 4b 23 87 1c b7 39 3e 91 ec 33 d4 9f 75 85 43 53 3d 13 67 f8 7b 89 c4 ec 02 61 0c 66 42 ee 73 b4 92 3a 8c 1e 8b 2e 97 cc 9a ac 3a ac 12 f2 df 5c b5 d5 bb 1a 46 06 0b 80 c1 77 b6 32 55 5d 31 9f 29 86 16 7c 3b 69 c3 8b 1a e7 4b 24 78 78 3d da 77 76 ef 9c 2b 8e 99 80 b2 2b 80 9e b3 a7 97 1e fd 91 96 91 c6 38 24 f5 cf 41 d3 2b 2e de d8 2b 26 c8 6c 71 b0 b9 d1 3a 3a 77 38 90 0f 76 e7 a8 e7 a1 71 58 90 b0 c7 4e 63 63 8b 77 34 8c 01 b7 6b 9b c0 23 bf 3c e4 13 dd 0d 2e 35 bf 03 10 64 f3 d1 51 b5 ed 38 6c 51 b2 a6 5c 67 3b 4f 61 f9 e1 5f 63 64 ab 1e 65 3c 37 5a a8 d8 1c 7f da 67 11 44 5b ef f4 1d 72 07 65 8c cf 32 36 97 d2 ba 41 b8 fa 9e 1a d2 77 81 d1 a4 67 9c e3 ba 1a 5f 3e a4 f9 Data Ascii: 6fKmpy8+8M#pp,K#9>3uCS=g{afBs:.:\Fw2U]1)\|;iK$xx=wv++8$A+.+&lq::w8vqXNccw4k#<.5dQ8lQ\g;Oa_cde<7ZgD[re26Awg_>
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 37 1f a8 04 13 f5 0b 5f af d4 34 b4 3a 82 6a 0a 6b 55 96 c0 69 bf 71 51 59 74 93 e3 aa a2 73 41 6e d6 bf 92 e2 dc 8f 90 80 07 1c e1 60 d9 6f 77 dd 53 a9 9a 2a eb ee 7a 85 94 50 99 dd 05 3b 8d 14 72 ed 27 6b 5c ff 00 49 d8 39 fe d1 07 e8 b3 15 99 8f a3 2e fd e1 fb 24 d3 75 34 f0 54 4d 15 b2 9a 78 a3 8e 82 d1 53 3b 5e fa 51 18 77 98 c6 c8 0e 25 ce 77 93 d4 71 d5 75 e8 de 1d 82 de 85 7c bf e1 fd 5d c2 a6 7b 6d c2 f5 55 04 42 df 45 5e 5b 11 ab 6c 92 53 97 61 ac de d1 d1 81 80 86 f3 93 c6 4e 3a fd 07 a3 ae 0f ad b5 c5 f1 32 b6 4a a6 b4 19 08 68 03 24 02 7a 12 38 cf 62 a6 0b 72 64 9a fa ac 36 14 44 5e f8 68 44 45 41 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 17 9b 87 b8 Data Ascii: 7_4:jkUiqQYtsAn`owS*zP;r'k\I9.$u4TMxS;^Qw%wqu\|]{mUBE^[lSaN:2Jh$z8brd6D^hDEA
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: c4 e6 3f 21 a1 a4 63 a8 27 a7 5f a6 39 58 b5 10 37 63 a5 7d 33 43 58 d0 e1 e6 c9 bb 3e c0 03 cf 4e bc 64 2b 9e 71 ae 7b 4e f9 9f 23 83 b1 b2 30 c8 9d ef 86 93 81 80 0f 04 61 51 e7 ee f5 be 36 d4 38 b8 3d d2 b1 c0 e7 9c 91 9e 00 e7 1d 47 62 4e 7b 11 99 57 41 71 b6 db 2d 55 ef ab a7 8e 9a b4 48 fa 39 58 f6 39 cf 2c 3e ad c0 0c b4 07 70 09 c1 38 e1 47 49 f0 45 ad 02 92 ba b1 f8 05 cf ab a9 0d 6e 31 c9 d8 d1 93 8c 1e 49 e9 95 9d 35 7b 9e 4b 65 95 cf 92 20 63 6b 9a e2 ec 34 1c 8c 10 38 1c 9c ff 00 72 f6 96 a2 86 6a f6 1a a6 d4 79 20 e2 69 a1 8d af 95 a4 e0 e7 0e 38 2e 23 a9 cf 55 37 ea 28 74 ce 86 36 37 e2 6d 54 31 bf 87 0b 7c 06 67 8c 74 0e ed 9e fc 15 28 68 dd 24 47 e2 2d d7 29 18 c6 b4 39 d7 8a d1 49 4e 30 78 71 6e 5a 79 3d b3 d4 70 a3 a9 2a 29 69 9d 5d 1b Data Ascii: ?!c'_9X7c}3CX>Nd+q{N#0aQ68=GbN{WAq-UH9X9,>p8GIEn1I5{Ke ck48rjy i8.#U7(t67mT1\|gt(h$G-)9IN0xqnZy=p*)i]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.5	50038	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:34 UTC	626	OUT	GET /uploader/c77099a56e06f49a357d51fc42f38086ac36cac1.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:34 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:34 GMT Content-Type: image/jpeg Content-Length: 50048 Connection: close x-oss-request-id: 66511B5E90AF513931B137F2 ETag: "B81A424D3A0FA539E4E5FCB85E1C48B8" Last-Modified: Mon, 23 Oct 2023 02:04:38 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 6355597395792919344 x-oss-storage-class: Standard Content-Disposition: inline; filename="22106935d8aaf5e558feceb5362d18a536b12466_221" Content-MD5: uBpCTToPpTnk5fy4XhxIuA== x-oss-server-time: 108 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:34 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2ad8e1ef7d4-BNA
2024-05-24 22:57:34 UTC	690	IN	Data Raw: ff d8 ff e1 00 2c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 3c 01 02 00 09 00 00 00 1a 00 00 00 00 00 00 00 69 6d 61 67 65 72 79 34 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 02 f6 02 f6 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 08 01 09 ff c4 00 53 10 00 01 03 03 02 03 06 03 04 08 02 06 08 03 Data Ascii: ,ExifII<imagery4C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("S
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 Data Ascii: " """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ ""
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 Data Ascii: " """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ ""
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 5a 84 b8 ee 83 da d0 1a f7 64 80 3c 2d 1d 71 d7 19 e4 a3 b2 46 c6 d6 31 80 32 38 f6 6b 89 cb 40 e8 47 a9 ce 0f 45 43 dc 5f 33 58 72 e6 e9 05 af 3e 2c 7b 0e 8b 24 48 95 c1 ce 7e 1c 5a e7 bb 41 1b 1c ed cc 7d 02 ae 39 b1 81 b3 01 f1 39 da b7 00 8d f1 ea a1 bc e1 80 e8 1a 5c 01 0e 07 c4 40 e6 31 ea be 42 64 23 21 8d 05 c4 e9 69 19 fa 94 1e ea ec d2 ed 25 ef 81 6c b5 f3 bc 3e a2 5a 76 89 5d e6 f0 30 7f 30 56 ce bc f7 fa 33 f1 93 5a d9 b8 56 be 50 1d 93 3d 0b 8e da 9a 77 73 07 ff 00 57 cc af 41 87 65 44 7d 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 Data Ascii: Zd<-qF128k@GEC_3Xr>,{$H~ZA}99\@1Bd#!i%l>Zv]00V3ZVP=wsWAeD}DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@D
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: d9 aa ba 47 41 18 ff 00 26 31 97 05 e8 bb 17 64 91 d3 b6 23 5b 24 50 47 9f f0 a1 6e 3e bd 57 44 b5 f0 bd 9a dd 10 6d 2d 14 40 01 8d 4e 1a b2 7c f2 83 cd 1c 3b d9 3d 2c d3 35 a6 92 79 de 48 c3 9e 48 01 74 da 2e c4 b8 6d f1 81 70 89 a3 50 f1 b6 11 8c fc fc d7 5c ee e2 85 bf 76 c6 b5 b8 e8 30 a0 56 4e d8 ce 1c 08 cf 98 41 c5 78 af f4 72 a6 7c 66 ab 81 ef 12 53 cc c0 4b 69 6a ce 01 3e 41 e3 fa ae 31 77 fd 6b 61 b8 3a c7 c6 f6 c7 b5 ec 3c a6 6e 4e 31 b9 63 ba 8f 50 bd 93 1d c8 b1 fa bc 47 03 62 79 e3 df fa 2a 78 a3 87 ac fc 6f 64 75 07 11 db fb f8 08 c4 55 01 b8 92 13 fb 4d 77 31 ed b8 49 57 85 2f 76 01 4f 03 6b 2d ae 75 45 0b b9 e0 65 f1 7a 3b d3 d5 7c b0 57 4c 1b 25 3c 6e 70 f0 6a 63 9b ce 39 1b b8 78 3d 08 2b a5 76 8d d9 a5 f7 b3 29 7f 59 5b ea 3f 5a 70 f3 Data Ascii: GA&1d#[$PGn>WDm-@N\|;=,5yHHt.mpP\v0VNAxr\|fSKij>A1wka:<nN1cPGby*xoduUMw1IW/vOk-uEez;\|WL%<npjc9x=+v)Y[?Zp
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 99 cf 07 53 80 1c b1 d0 2a aa 19 a9 a4 9d b0 72 af 88 c1 68 db a2 0f b2 7d 9e b6 96 6a 5a e8 22 96 9e a1 85 93 44 e6 e5 8f 69 18 d2 42 f3 07 6b fd 90 57 f0 6c b2 5f f8 44 cb 35 8f 58 73 e2 66 5d 2d 21 f9 6e e6 7a f4 5e 9e d2 5b f0 ec af c2 e2 dc b0 e1 d1 b8 16 b9 ae 19 0e 07 a1 1d 42 8a f0 f5 ba e1 0d ce b6 9a e1 09 65 17 10 51 3d 93 c7 2b 0e 04 ae 69 07 71 d7 24 2f d0 0b 65 5c 75 b4 14 d5 51 3d af 64 d1 b5 e0 b7 91 c8 5e 60 ed 8f b1 52 c3 37 11 70 33 4b 0b 41 9a a2 dc 0e 08 cf 39 21 f3 f5 6a c2 76 39 db 45 cb 87 e4 8a d3 78 26 a6 99 af d1 dd bb 62 d0 39 e9 3e 7e 8a 0f 62 a2 c5 70 ed fa df c4 36 d8 ab 6d 93 b6 58 9e 37 1f 89 87 c9 c3 98 3e eb 29 91 e6 88 fa 88 88 08 88 80 88 88 08 88 80 88 88 08 88 48 03 39 d9 01 7c c8 50 ee d7 4a 2b 45 0c b5 97 3a a8 69 Data Ascii: S*rh}jZ"DiBkWl_D5Xsf]-!nz^[BeQ=+iq$/e\uQ=d^`R7p3KA9!jv9Ex&b9>~bp6mX7>)H9\|PJ+E:i
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 39 2a b9 f9 fb f3 2a 86 cc d1 a0 bd da 0b 8e 98 dd ab 2d 77 b3 ba 7b 15 45 97 37 62 0f 2e 84 74 f7 54 38 63 1c 80 e5 9c ec a6 16 68 71 0f 05 b8 df 7e 9f d0 aa 5d 0b 4e 70 e6 b7 3c c1 f8 4a a2 2b d8 34 9e 79 c2 ae 2d e3 6e eb e4 8c d2 40 63 f7 fd 87 ff 00 42 a2 d3 cf bb 98 f1 87 34 ee 0a 82 59 f5 21 19 92 70 03 be 41 58 73 f2 32 3e 1e b8 5e 6f ed d7 88 fb 41 e1 fe 33 96 4a 59 aa e9 2c 51 16 be 92 68 22 26 17 34 f5 7b bc f3 d1 41 e9 d8 5e 5a ef 0e c7 63 80 79 79 7b 2e 21 db 4f 62 d1 de be d3 7e e1 26 b6 2b 8b bc 75 14 59 f0 ca 46 fa 99 e4 7d 3a ad db b2 fb ad e6 e7 c1 f4 35 d7 b6 64 4a d0 60 99 c3 4b a6 6f 57 69 3b b7 7c e3 cc 2d d6 19 8e 41 6e ca 90 f1 57 06 71 bd eb 83 2f 4d 63 27 9e 8e 78 c9 8d e2 4d ce dd 1e d3 cc fa 9c fa 2f 52 76 6f db 25 a3 88 69 e2 Data Ascii: 9**-w{E7b.tT8chq~]Np<J+4y-n@cB4Y!pAXs2>^oA3JY,Qh"&4{A^Zcyy{.!Ob~&+uYF}:5dJ`KoWi;\|-AnWq/Mc'xM/Rvo%i
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 16 7a 81 f1 63 d0 2f 5c c2 d3 2b 98 f9 a3 68 90 1c f2 e5 bf f2 c2 c0 f0 4f 07 5a f8 3a c2 db 3d 99 95 0c a6 d6 67 7c b3 bf 54 92 bc f3 2e 70 eb c8 2d 8c 3b 49 6e a2 30 3a 9f 24 1e 1b e3 c7 b6 1e 31 bf bd ae 0d d5 5d 2e 4b ce 18 df 11 c7 3e aa d7 08 36 3a de 31 b1 52 b3 c5 ae be 23 bc 9a b1 e3 df 1f 45 1b b5 c8 ea 28 3b 42 e2 1a 49 99 23 5f 1d 5b a5 6f 78 72 5c d7 6e d3 ed 8c ad 9b f4 71 b0 d4 de fb 48 a6 ad 74 64 51 da b3 51 34 9a 76 2f 23 0d 6f a1 df 38 41 ec 39 d8 c7 bd f9 1c 9d b6 db ed c9 52 40 07 70 1a e7 6f b7 32 ae 01 96 e4 f3 d8 fc fa a8 f5 18 cb b5 74 e7 93 8c 7b 9f c2 a8 8b 72 a5 8e b6 86 4a 69 40 2c 90 60 e1 79 df b4 be ca ae 97 aa 96 bf 87 e9 a3 7d c2 13 81 a8 86 f7 cc f2 24 ed 90 bd 26 e1 b0 d4 7e 7a 71 f5 1f d5 59 73 03 5c 48 c0 3e 60 a0 e3 Data Ascii: zc/\+hOZ:=g\|T.p-;In0:$1].K>6:1R#E(;BI#_[oxr\nqHtdQQ4v/#o8A9R@po2t{rJi@,`y}$&~zqYs\H>`
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: eb a9 9e 35 3a b6 ad 91 83 b0 8d 87 53 80 50 df 35 ba 9d e5 d1 42 6a 25 c6 cf 9d db 7d 16 32 b2 b1 ac 39 91 f8 df 9e 7f aa d2 78 ab 8e ed 36 18 9c 2b 2a 40 7e 36 8c 6e e3 f2 4e c3 7d ac bc cc 63 c6 be ed 9d 03 46 80 b5 8b c5 fe 8e 82 39 1f 59 52 d6 e9 1a 89 2e c9 c2 e0 bc 49 db 0d ce a6 62 2c ed 6d 3c 4d ce 1e f6 e4 ae 6f 72 ba d5 5c aa 1d 3d 65 4c b3 48 e3 9c b9 c7 6f 97 25 3a 96 1d c7 88 bb 63 a1 84 ba 2b 54 4f a9 78 38 d6 ed 9a b4 da be 3b bb de cb 9a fa c3 04 44 7c 10 ed b7 ba e6 5a 8f 2c 6c 3c 96 5f 85 ad d7 0b b5 ea 1a 5b 50 02 70 0b cb de 74 b6 26 8e 6e 71 e4 00 53 6a d8 2a a9 db 74 a1 96 00 e2 2b 60 69 9e 09 81 c1 90 0e 60 9f 35 e8 1f d1 af b5 2a 53 c3 df aa b8 8e b0 53 49 0b 83 62 96 53 86 bb c8 65 79 f6 7a da 4a 39 de da 5f f5 c9 5a 4b 4c ee f0 Data Ascii: 5:SP5Bj%}29x6+@~6nN}cF9YR.Ib,m<Mor\=eLHo%:c+TOx8;D\|Z,l<_[Ppt&nqSjt+`i`5*SSIbSeyzJ9_ZKL
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 17 1f 36 67 76 3b c8 8e aa 25 14 b2 d3 54 b6 94 52 d4 40 fc 17 1a 19 4e a0 ff 00 de 86 5e 44 7e e9 52 e9 2a 23 94 ba 28 f5 c3 3b 72 e7 41 33 4b 5f ff 00 3e c8 2c d3 4c 23 99 9f 7f 34 ba 5b ac d2 54 00 c9 f1 fb b9 c0 78 53 21 a8 6c cd 76 89 43 a2 c6 a9 5d 23 f2 e1 fb b8 db 1f 3c 2f b3 36 2a bf ba a9 85 93 07 10 f0 d9 0e 0c 78 1b 10 ee 9b f5 05 44 aa a3 ee e4 6b 9b 4c fa b6 87 61 b3 d3 b8 32 a5 83 e7 b3 80 f6 41 26 a6 9a 2a de ee 56 ba 58 a7 c6 23 92 27 fd f3 47 99 1c 88 f4 2a 00 82 ae 0d 22 e1 33 2b 1b 9c 0a b8 22 d2 f6 1e 81 ed eb ea 42 b9 15 63 bb 99 24 d3 34 a1 ae d2 e9 a3 88 b5 cc 6f 93 d9 cd a7 d4 6c a7 d2 d5 07 b0 4b 07 89 bf 0c 6d 67 9f ed 39 06 3d a1 ba 4c 91 3d 93 c3 c8 bd 8e dc 7b 84 9a 18 6b 20 0c 90 b7 4f 47 33 98 3e ea 73 69 61 d7 ae 18 e2 61 Data Ascii: 6gv;%TR@N^D~R#(;rA3K_>,L#4[TxS!lvC]#</6xDkLa2A&VX#'G"3+"Bc$4olKmg9=L={k OG3>siaa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.5	50039	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:34 UTC	1138	OUT	GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451977&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:34 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.5	50042	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:34 UTC	392	OUT	GET /uploader/1a7f38ab8f1d89cd6c3628bf38e1b67fcbf9c171.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:34 UTC	702	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:34 GMT Content-Type: image/jpeg Content-Length: 42925 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221e0c57e3ade92db3efbd3b414a04aab9629478_221" Content-MD5: lh6BmjdRcaNF7xuITfItaA== ETag: "961E819A375171A345EF1B884DF22D68" Last-Modified: Mon, 23 Oct 2023 02:04:18 GMT x-oss-hash-crc64ecma: 15488331121114168107 x-oss-object-type: Normal x-oss-request-id: 66511B5DCB42C43133C0A447 x-oss-server-time: 106 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:34 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2aef8346a7a-BNA
2024-05-24 22:57:34 UTC	667	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 08 09 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: cf 7f 4f 3e ae 2b aa ba 56 a7 74 d6 35 23 b4 39 77 a2 3a 78 ff 00 3f b6 ac d8 db 95 cf ae be bc 9d 72 d0 de 7f 7d ed e1 fa af a3 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 03 05 25 c5 67 1e ee ba 5e 99 ec 51 c7 d1 9d e5 a9 d2 37 49 1c fc ae 86 cd 45 1a 89 22 aa 5b cd 1a 4f 13 20 56 40 af 55 93 3f 9e 7e 4f 67 d5 f8 fa fe 97 b3 e9 b3 a7 26 3a a6 f7 2a 6e 95 f7 cb a5 df cd d2 eb ca fa e3 b3 8a b3 a7 4f 9e 68 47 a3 cb 72 f5 68 65 d3 b3 a3 cb b6 c5 65 18 e3 74 e1 e2 27 a7 5b 97 af ec 1e af 95 f6 3f 57 cd 00 00 00 00 00 00 00 00 00 00 00 00 02 93 c9 f3 f4 70 b6 fd 17 7f 3f 53 17 d4 55 15 8c dd 3e bc b6 31 4c df 1b 3b 76 7a f9 76 b9 ec 29 8c 6b e5 66 75 0d 0e b9 65 cc c0 2f 20 4c ce 22 56 53 ac 15 1e 12 3b 7c 8b 87 5f 69 cf b5 d1 ea 47 4c cd 61 7b 05 89 db 6d 93 Data Ascii: O>+Vt5#9w:x?r}%g^Q7IE"[O V@U?~Og&:*nOhGrheet'[?Wp?SU>1L;vzv)kfue/ L"VS;\|_iGLa{m
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 24 29 99 50 64 c3 2e 6e 71 0d 48 c1 23 ce 79 bd fd 0c 8e df 7f 1d 39 ba f9 5e 6b c9 f4 fd 27 ab e6 6c d4 f8 bf 1f d3 f4 9f 43 e5 cc 89 aa af 39 e1 fa 7d 4a e5 e8 7d 3f 3f 4e 7a f9 cf 3f ba 68 f4 9e cf 04 a7 74 b9 f7 e1 72 f4 76 3d 9e 0d ad 9c ea 32 02 24 71 a7 b5 f2 0e 3e 8f cc fe 7e fe d3 33 f4 f7 1f 57 a7 a9 c6 1b 99 c9 c3 31 bb 86 d7 95 49 4e 5d 59 5a d1 d3 42 3a eb 4b de fd 0f 93 f4 1f 47 84 00 00 00 0f 9f 6b 99 e9 8d 89 9d cc ab b3 6f 36 29 33 32 b0 95 30 31 82 bc 08 98 64 1a ac 66 cf 13 d4 f1 0d 59 81 12 3a 6b 5f 9d 79 ef 1f d3 f5 5e 8f 9f 6d 73 86 57 9c f3 fb ae e9 c3 ad db cf e3 3c 3f 57 da fb be 4e bf 3e be 67 97 ab d0 fb 3c 1e 63 cb ef df 87 a3 f4 78 6b a7 94 f2 7d 4b 3a 70 f4 3e af 15 7b 3c af 2f b7 b1 d7 cf b7 7c a3 3b e7 bc de fc f7 e1 d4 ef Data Ascii: $)Pd.nqH#y9^k'lC9}J}??Nz?htrv=2$q>~3W1IN]YZB:KGko6)3201dfY:k_y^msW<?WN>g<cxk}K:p>{</\|;
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: c3 4d 99 63 6f 36 d2 b5 4b 27 6d 93 dd d6 2c d5 78 a8 c6 ee 0b a1 6d 4c 9b 39 ae 5f 0f 47 a0 ef c2 59 98 38 5c 3d 1b de af 3d 92 ce 18 d9 2f b9 d4 d5 14 ab 11 c4 a9 82 f9 5a 63 0c 55 4c 18 24 56 47 58 c4 34 c6 70 28 6f cc 7c de ef 92 73 f6 c5 69 cd 6c bd 46 f5 37 2b 4f 9a 8b e4 63 ad 3d fd ff 00 5f 3d 9b 39 56 ab 75 8d 4a ce 5c c5 35 ce 7d 23 9d e6 f5 fa db cd 8a 9d 79 d4 56 29 d0 8c f6 9d 3c df a9 3d 5f 27 64 00 00 00 1a c7 9d a7 93 d9 db bc b4 93 75 88 05 6c 6a e4 dd 95 32 09 ab 52 2d c4 89 69 8b b1 6c dc 62 f0 4a f2 66 31 54 da e6 bc 1c ed b9 b4 15 6b 38 c8 1a a7 51 c6 09 4a 36 af 10 22 4f 50 cd e5 f1 f4 68 f3 ee d6 c7 4f 3f 63 af 18 62 69 be 6b ca 73 ef e0 b9 7b 7c d4 f5 e9 ef 3d 2c ed c4 8e 9c 7d df 29 cf ad f3 bf 54 af 37 aa e9 e7 e0 e7 7d 37 4a 36 Data Ascii: Mco6K'm,xmL9_GY8\==/ZcUL$VGX4p(o\|silF7+Oc=_=9VuJ\5}#yV)<=_'dulj2R-ilbJf1Tk8QJ6"OPhO?cbiks{\|=,})T7}7J6
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f ff c4 00 3b 10 00 02 01 03 03 02 05 02 05 02 05 03 04 03 00 00 01 02 03 00 04 11 05 12 21 13 31 06 10 14 22 41 32 51 15 23 30 33 42 50 61 16 20 24 40 71 34 43 52 07 25 53 60 72 90 a0 ff da Data Ascii: ;!1"A2Q#03BPa $@q4CR%S`r
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 4d c2 28 12 26 67 ae 6b 8a 8e d6 d6 39 7a a9 9a c8 f8 c9 ac 9a dc 7b 56 e5 ce 2b 0f 83 b7 b7 04 12 dc 8c fd c8 14 40 ac 56 7c 86 03 2e 65 57 6d 6a e3 f1 55 f1 bc 40 4b d6 d1 75 7b 4d 5e cd ee 49 bd d9 fb 0d 2c 8e 49 71 2b 8a 13 ff 00 e4 7a 33 7d 48 6e 20 18 85 35 2b a5 fd c1 aa 40 76 86 3a 8d a0 ef d7 5c 13 5e a2 2c 8c c5 1c af ee 47 b9 b2 b4 66 31 5c 5d 4f 73 fb 8a a5 98 0a 4b 88 89 06 21 99 06 6b ff 00 1a 23 2c 14 5c 4f 1c 52 3d bd 34 77 17 53 24 b3 46 04 45 88 f0 ee d2 e8 cb fd 0d 9d 50 65 af 35 36 b6 85 a6 13 eb 52 da cd 66 0a 5d f5 64 64 7c 50 27 14 cd 8a 24 22 b3 34 6e ef ee 3d 8d 49 28 8d 58 93 2c 9b f6 85 f7 be ea 39 f3 2c df 02 27 7e 59 ed b0 33 1e 4f 35 96 23 db ff 00 e6 18 37 2a 42 71 9f cc fe 1b 86 79 0d 91 9a c8 ac 56 39 ac d6 45 1c 1e 2b 52 Data Ascii: M(&gk9z{V+@V\|.eWmjU@Ku{M^I,Iq+z3}Hn 5+@v:\^,Gf1\]OsK!k#,\OR=4wS$FEPe56Rf]dd\|P'$"4n=I(X,9,'~Y3O5#7*BqyV9E+R
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 17 19 e8 c7 69 27 39 0b 0c 7c 0d c4 8e 0a e0 e5 b0 2b 15 f3 e4 45 3c 61 b8 a2 92 c3 cc 42 58 2e ad b7 cd a5 5e 0b 9b 68 da be 69 69 04 10 f3 28 95 ef 26 d8 f1 e2 29 de 68 ee 56 7e a2 86 bc b9 84 8c 89 6d e2 92 c9 5d f7 ce f0 94 4b 73 17 49 da ee 06 4b c3 2e d9 88 20 8a 84 74 ae 25 03 42 d5 af e2 96 00 b1 9d c8 a4 fe 9c b3 2c 4b ce f2 e7 27 3f 34 0d 7d e8 e4 d6 00 ed cf 7a c9 3d 86 ef e5 ef 3d 80 6e ec 77 f6 a0 31 cb 10 4e 68 18 85 60 37 24 48 83 80 4f c9 dc c7 e9 cf df ef 5f 7f 2e 3c bf e4 1e 30 09 5f e6 00 fe 24 3f 73 d4 00 f0 18 91 5e c0 d5 74 90 cf 6e f1 cd a7 49 70 d1 ec 94 1c 71 4f 14 32 15 69 37 00 28 bd 17 34 f7 b6 e8 76 d1 bc 95 fe 8f 4f 7f 39 f7 a6 93 6d 11 dd 23 da c1 2a 34 74 05 de 98 70 62 9a 29 e3 12 42 1a a6 b6 b6 b9 64 69 b7 71 81 73 77 05 Data Ascii: i'9\|+E<aBX.^hii(&)hV~m]KsIK. t%B,K'?4}z==nw1Nh`7$HO_.<0_$?s^tnIpqO2i7(4vO9m#*4tpb)Bdiqsw
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 8d 65 ab ff 00 7b 39 c6 cd 7c 8a 5b 5d 75 b7 6f fc 37 53 cf 07 4a 94 d1 d1 20 6f a9 74 4b 01 de 3d 2b 4e 8d fa 80 22 a0 c2 60 56 2a de 6e 8b 0c fe 8d f7 fd 34 95 76 0f 44 11 e5 9a 06 83 50 6a 0c 28 1a cd 66 b2 2b 34 0f 96 71 e4 70 33 59 ac d0 ac f1 5c 8e c4 83 40 f1 59 cf 35 fd cf 6e d7 17 09 02 e5 a0 b5 6d fe a2 e7 ca e6 e5 60 f6 88 6d 09 6e b5 c8 c7 c7 3d cf 19 a3 d5 3d 89 45 ab f8 64 8d d2 fa 28 65 4b 88 d2 58 f3 e4 ee 91 2e e9 24 7b 8b cf 6c 71 5a 24 08 15 17 0a 30 a0 b7 76 18 26 b3 f1 5c 0e c5 b1 52 dc c3 18 cc 8f 76 67 18 8a de c7 51 52 d4 b6 91 e0 6f e8 43 d8 1b 5b 67 18 61 04 03 b0 86 2a f4 36 7b fa 94 2d 55 33 d2 96 db 50 23 d8 6d 3c 42 cc 54 ae 89 ab 48 73 32 78 71 08 22 64 f0 f6 8e 9d e3 d3 ac 21 fd a5 05 46 17 2f 45 47 ce 06 3c b8 ff 00 26 6b Data Ascii: e{9\|[]uo7SJ otK=+N"`Vn4vDPj(f+4qp3Y\@Y5nm`mn==Ed(eKX.${lqZ$0v&\RvgQRoC[ga6{-U3P#m<BTHs2xq"d!F/EG<&k
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 24 86 62 b6 fa 81 3b 4f 3b 89 20 0f 10 ea c2 ea 71 61 0c 67 da c2 a5 c9 7a c1 a2 ad dc b8 c9 e2 18 cf c7 86 75 3f 4e 16 de 5f d2 91 04 8a 54 c9 19 46 2a 66 89 e3 6e a4 28 d1 4c 32 1a 3d a7 27 dd f2 1f 69 e1 64 23 92 0c 67 8a e9 12 7d bb e5 04 aa 89 67 03 24 4f 91 96 22 c2 63 93 e9 2d 1f b1 d3 87 f1 f4 33 8e de 8e eb 39 1e 8e f0 8a 16 57 5f cd 6d 6f 07 15 e8 a4 c8 2a 2c a5 3c b4 ba 65 cc af 01 3e 9e 5a 16 f2 7c f4 1e a6 d3 6e e5 98 4a a9 65 71 fc c5 94 bf 3e 80 7c 8d 3a db f9 0b 4b 48 c7 b7 aa 54 71 ea 1d bb 75 59 f3 5c 9e f9 c0 e7 9c 57 ce 14 23 31 a1 19 fe 40 22 1c d6 e5 1d b7 33 76 c7 df 68 ac d6 e1 f1 93 5c f9 73 5b 8d 12 8e 30 c2 25 07 29 75 e1 97 b8 b9 b9 b9 ab 8b 3b ab 37 db 30 92 56 18 a6 37 18 1b 9a 57 23 00 b4 bb c9 a5 2f da 8c 8f 8a 9a 1d c7 7a Data Ascii: $b;O; qagzu?N_TFfn(L2='id#g}g$O"c-39W_mo,<e>Z\|nJeq>\|:KHTquY\W#1@"3vh\s[0%)u;70V7W#/z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.5	50041	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:34 UTC	392	OUT	GET /uploader/8903fb7b820c454c2185671cc5f2599ffe15cbdb.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:34 UTC	702	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:34 GMT Content-Type: image/jpeg Content-Length: 61444 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221c847462e7ce3b78fbf0cb683ad41c48d38169_221" Content-MD5: B0e6rBgRnhoNz/Qoh97AZA== ETag: "0747BAAC18119E1A0DCFF42887DEC064" Last-Modified: Mon, 23 Oct 2023 02:04:17 GMT x-oss-hash-crc64ecma: 14939356345109512039 x-oss-object-type: Normal x-oss-request-id: 66511B5D9979C73636F41A59 x-oss-server-time: 115 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:34 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2aefbfcf7e8-BNA
2024-05-24 22:57:34 UTC	667	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 08 09 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 04 03 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: fb dd 3d d9 40 00 00 00 00 00 00 00 00 00 00 00 00 03 a1 f3 c1 f3 51 e5 35 14 c3 17 04 83 0a f5 ad fd 34 58 fa 83 4f 5f d4 d3 8d 60 bc 8f 64 30 56 b0 6b 79 7c b3 9b a2 11 8c a4 42 41 94 ea 74 32 13 8f ad 75 3d ce a3 db a5 47 85 e6 42 37 7c df 34 aa 03 88 d4 6a 90 c0 42 31 9c 1c 03 63 27 1d c9 25 41 20 fa 8f 58 fb 0b 3b ef 0a 00 00 00 00 00 00 00 00 00 00 00 00 88 79 e1 f2 fa 78 1a f7 a9 84 72 61 54 4d 97 25 91 23 f4 17 73 e0 5c d8 72 fe 95 ee 63 67 9d 31 af 49 64 83 e1 cc 3c a2 24 19 cc 07 53 31 38 f5 8d 35 92 94 82 6b 32 fb 3a 7d 8b a5 39 a1 cc eb 52 f8 39 e9 a4 58 eb 6f 95 c4 f3 47 22 90 4c 60 94 6d 46 03 b1 84 c5 25 f5 be f3 ed e3 f4 cf 9f a7 a1 67 40 00 00 00 00 00 00 00 00 00 00 00 d7 2b e3 13 c1 62 19 c2 e2 4b 42 41 14 98 7d 79 5f 2d 59 65 8b f7 af Data Ascii: =@Q54XO_`d0Vky\|BAt2u=GB7\|4jB1c'%A X;yxraTM%#s\rcg1Id<$S185k2:}9R9XoG"L`mF%g@+bKBA}y_-Ye
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: ec 5d 5c bb 7f 6f 1e a1 e1 ef ad 7a 79 d4 f6 f1 e3 8d 07 3a dc ee 7d ca ce 8b 02 cd 93 36 b2 6b 43 e6 e9 e8 bb 27 bf 3f d2 89 9c 00 01 d4 a3 aa d2 36 98 0c 66 55 92 98 6a c0 ec 67 3b c7 53 b0 3a 40 e9 51 e2 d2 b5 a8 d8 6a 29 d2 2c 08 55 94 ea 76 31 11 4e 85 99 8c 18 8a a3 09 3c 9a 49 39 38 31 9d 12 19 d1 6b b4 c2 64 aa 83 b9 66 88 a5 e6 ea ef c1 d5 b2 f7 70 f9 c7 0f 6d b6 75 67 7c ed fa 7c 72 f4 f3 47 d2 9b cf 79 b7 8a 5f 2f 4f 32 f9 ff 00 4f a2 df b1 b9 f7 fc ed 57 3e b5 fb 5a f5 72 42 92 bd 74 54 f4 69 6f ee 70 11 ac d8 56 31 a8 72 f4 c1 bb 9b 71 e8 bd 5c be d3 e3 e9 dc 00 0e a7 8d ed 19 6c 53 8b 20 57 36 a4 98 b3 cb a8 ae 97 64 29 12 de 21 55 99 d4 e4 ec 76 ca 1e 99 0e c7 43 39 dc 80 72 72 76 3b d7 10 2a 0c 87 73 11 62 60 38 33 1c 03 0d 42 30 db 0a 2c Data Ascii: ]\ozy:}6kC'?6fUjg;S:@Qj),Uv1N<I981kdfpmug\|\|rGy_/O2OW>ZrBtTiopV1rq\lS W6d)!UvC9rrv;*sb`83B0,
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: d1 ec 27 ad ea ec 3a 5f 45 bd 99 d3 a9 e1 33 3f 2c 67 5c cb 58 75 24 1f 56 7a 67 60 d4 8c b8 4c b1 1c c8 9d d4 58 92 8b 32 45 67 32 92 4c 87 54 c8 92 0e c7 07 70 61 ac b5 84 e8 64 3a 11 31 ab 9f 93 dd 61 f4 38 b5 4e 4e b8 ff 00 43 96 47 a7 9c 73 b4 42 e6 f7 ef cb d1 c7 4f 1d 3f 1f 64 de be 7d 2f db 37 96 69 be 7b d4 f8 fa f5 5e 3e 9c bc 5d 3e 8f e5 e9 c5 6b 5e fe 3b 47 7f 17 a3 77 f2 ec 3d 3e 12 ae 7b 44 46 a9 72 b9 d4 e3 59 e9 35 a3 78 eb 49 ce a9 12 c2 a8 e5 bf df 9e de 7a 0e 9e d9 99 30 03 e5 13 e5 3a 9c 52 4b dc c8 71 64 29 ad 89 3d 76 eb d7 6a c7 52 e6 af 97 cb 58 f8 f3 ce ce 8a a2 3a e2 37 fd 4f a5 7d 26 54 10 e5 4b 18 ed 67 53 09 22 3b d5 95 4c 30 96 24 b2 69 cd 91 ac af 26 e6 f2 b0 d2 de ba 12 c9 47 43 31 17 8b a6 d3 cf 53 3a b8 f4 0e 2f a3 7f f5 Data Ascii: ':_E3?,g\Xu$Vzg`LX2Eg2LTpad:1a8NNCGsBO?d}/7i{^>]>k^;Gw=>{DFrY5xIz0:RKqd)=vjRX:7O}&TKgS";L0$i&GC1S:/
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: bf 3f 6a b3 8c 6b 34 b3 31 6e 7c f7 b0 e2 71 ac 55 75 f3 d5 7b 78 d4 f6 f2 6c 3f 47 8b 5f b2 4a 51 11 4d 58 d8 8d f1 3d 58 db a3 72 37 52 ec ca 70 6a e7 98 1a 75 53 15 75 5e 57 45 61 52 54 c5 71 14 c6 45 20 10 cc 06 03 a1 d4 e0 ee 70 75 3b 19 4e 0e e7 26 73 31 b9 d7 a9 e9 ea b6 d9 d5 b6 5e 7e 5a 16 b1 86 a4 52 c2 e6 c6 f8 e6 f5 e7 97 a2 17 2f 44 3f 1f 5c 5e 5b 8f e5 e9 d3 3b c1 e5 e8 f3 f4 e3 17 1e 7d 39 8e 6d cf d3 cb 3f af 9e ff 00 eb 7c cc df 57 82 ba e6 b0 aa 2f b3 af 3b f8 ff 00 5b 4e e6 f7 f0 df b3 f2 20 7a 79 76 cd cb 9d f7 ce f3 79 ea 4e 75 29 22 7b f8 71 eb e7 dd 9b 7a de 4d e8 dc 4d 8c da 8d 80 b6 2e 89 44 b3 20 00 10 4d 6c d7 8d 78 a0 28 6a a6 2b 4a 92 b0 82 47 31 11 4a f2 b0 ae 23 1d 00 38 31 91 08 04 73 a0 39 3b 1d cb 53 6c d3 63 b6 c0 f3 2c Data Ascii: ?jk41n\|qUu{xl?G_JQMX=Xr7RpjuSu^WEaRTqE pu;N&s1^~ZR/D?\^[;}9m?\|W/;[N zyvyNu)"{qzMM.D Mlx(j+JG1J#81s9;Slc,
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 3d 31 ea 2b 43 91 1f 4e 87 6f ea bd d7 ad 2d 32 a9 77 ad 5f dd 12 2b 39 3c f1 e9 69 a9 de da 11 b3 4f d5 20 be 5c 0f f1 f2 48 91 46 d2 49 a8 dd 1b cb c9 a6 ac e3 ce 6b 35 c7 a6 78 a0 8c de 77 a2 78 32 d7 53 35 b8 fa 64 8a f8 73 53 24 fc 94 be b7 17 31 5b 26 f9 35 0d 52 5b b3 80 4b 1f 21 dc 62 95 d3 76 e2 f2 e1 9f 07 2c 73 43 00 51 ac d6 6b cd 66 99 bf 15 f0 d4 fd 39 24 81 bf 45 dd ed bd 8c 7b e6 d4 35 ab 9b dc a2 fa 0f 34 3d 51 9e 36 57 4d 27 52 17 d1 10 ff 00 e3 09 00 64 df fc 44 23 63 1d a5 ee ab 75 7e a8 92 bb 74 f8 a8 d4 3e 77 34 38 38 a3 11 fc 10 e3 cf 7d 2a 6c e5 99 c9 ab 6d 3a e6 e8 f6 b6 8f 72 91 99 9e e3 4d 5b 62 a2 86 9c ad 6d 2c f4 d0 ba d0 6c 54 32 08 de 39 52 37 57 8e 36 12 48 91 23 48 f3 eb 77 73 31 16 77 57 4f 33 66 5d f5 d5 35 d7 fe 64 7e Data Ascii: =1+CNo-2w_+9<iO \HFIk5xwx2S5dsS$1[&5R[K!bv,sCQkf9$E{54=Q6WM'RdD#cu~t>w488}*lm:rM[bm,lT29R7W6H#Hws1wWO3f]5d~
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 3f c0 6a 3a bd be 9e a4 55 c6 b5 a8 5c 1c d6 e2 ef b9 e4 3c f0 46 12 90 16 a3 da 40 3b 7a 6d 5f ee 84 6f 29 50 9a 70 91 75 1b 55 73 e6 b5 e8 ba 57 dd 4a 0c 77 ad 73 b5 6b 93 47 f1 59 c7 9f c5 66 80 2d db 52 de 59 db 10 d2 de dd 47 76 ce ed d3 15 3d dd d5 ca 84 98 74 c6 01 64 fc c6 ad 9a c5 08 95 b8 1b 4c 66 ac 1f a9 61 6a f5 ad 69 bf 2e c6 e6 1c 8a d0 6e 99 6e ba 14 6b 1f 8a c6 d1 9a 2c 38 ad ea 1a 82 e7 dd 21 24 0d 9b 3a 62 42 ee 2e 5e e2 6b 9b 1b 57 b8 94 b1 a9 2d c7 55 a5 16 56 72 d9 87 94 da a9 bd 64 b9 9e e4 db 5e 5d 44 86 ce fe 5b 67 99 61 8a 25 bd bd 54 92 f6 d1 60 b9 9e 38 fa 72 67 07 d3 35 9a 92 d2 58 e4 55 68 e2 6e fe 9a a3 48 e1 00 55 82 30 81 64 35 64 fb 31 25 0f f9 6e e9 1a 96 7b bf 88 ac e1 e2 1f fe a8 93 69 a3 ae 6a 45 cb d3 96 67 69 1b 9a Data Ascii: ?j:U\<F@;zm_o)PpuUsWJwskGYf-RYGv=tdLfaji.nnk,8!$:bB.^kW-UVrd^]D[ga%T`8rg5XUhnHU0d5d1%n{ijEgi
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 01 2d b3 7d 5b 7f 6f 79 23 39 15 c2 ed 07 34 06 79 3b 71 cd 77 7e 4d 6a f6 5f 39 68 76 c3 67 2c d3 c7 0d 5e e8 53 d9 a0 74 39 1c 1c 8a d1 6e 8d d5 82 ee fc e4 b3 ed 19 a3 d2 90 32 34 36 f6 f6 c0 88 7d 4f 35 1c cc 1b 64 8c a1 c6 09 1f b5 c8 c8 c1 ce 38 1f bb 35 2c 11 4a 28 4f 2d b1 db 38 60 c0 15 9e 08 e7 1d ce b3 5b b7 dd 59 e2 8d 79 9e f2 26 da 62 4b 8b f6 fe d8 83 51 93 df f4 b8 7c c9 1d b5 b4 5e dc ed a1 3a 33 6d 5a 27 02 a4 bb 27 b6 2b 55 92 e6 49 7a d2 b9 b4 ba 90 5a 5a db c5 34 f7 02 e2 cf 4d 8a 12 64 6c 66 8e 14 52 a9 63 5e 38 a2 72 68 ca dd 7c 35 9b 74 2e 40 fe 99 75 1e 4c de 68 bb 1a e4 f3 58 6a 55 c1 c9 ee 38 ae 16 bd db 81 dc b8 c5 46 84 9e a3 bb 95 1d be da ec 62 52 b7 54 1b a5 95 e5 2c 76 f2 78 5c 9a 90 3b 0d a3 85 00 0c 99 24 2b 4d da 33 40 Data Ascii: -}[oy#94y;qw~Mj_9hvg,^St9n246}O5d85,J(O-8`[Yy&bKQ\|^:3mZ''+UIzZZ4MdlfRc^8rh\|5t.@uLhXjU8FbRT,vx\;$+M3@
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 8a 27 b9 93 26 18 f6 8a 84 e0 e3 f4 fc 4a 7f fc 41 47 c5 7e 7d 23 38 35 6d 2a ba 86 ae d0 4d 63 0e c6 98 12 79 3c 31 c0 3d e7 21 b7 e4 a8 24 3d 6f dd 8a e7 72 52 9d d8 c5 f6 a6 03 f4 a3 8f 53 cf 12 25 ec 2c 77 52 b8 2a 6b 3d bc ee 39 5d f9 cb 0a c9 15 bf 91 41 b9 c5 67 c6 72 1b 6e 41 23 14 0f a7 1e 6b 03 39 ac 2b 9a 58 a4 8f 3d 35 77 e5 5f 0a cb b5 fa 4c b9 28 bd 42 32 4c 93 46 5b 31 c9 14 cc c5 43 15 cd 0f 94 99 b2 39 c8 a0 b0 48 4b 47 46 04 dd be 1c cd e1 9e 25 7e 6b ee a7 f7 59 64 1d d1 89 83 b0 47 2e a1 82 9e 98 56 fb 68 9b 46 7d 24 91 62 42 ec 91 9b f7 2f 2f dc 84 1d af 10 9c 6e 16 93 15 26 de 47 50 ea 55 8a ca 5f a3 49 0a 43 8f 47 90 25 16 92 6a 11 e5 40 32 09 bc 98 5c fb 24 02 a6 8b 78 c8 8f f3 2b af dc cb 1f f5 4c df 81 59 ac fa 66 b3 5b a8 b8 14 Data Ascii: '&JAG~}#85mMcy<1=!$=orRS%,wRk=9]AgrnA#k9+X=5w_L(B2LF[1C9HKGF%~kYdG.VhF}$bB//n&GPU_ICG%j@2\$x+LYf[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.5	50040	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:34 UTC	392	OUT	GET /uploader/e84e22097951cec3381ed92b3c1d03ca67cc1716.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:34 UTC	700	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:34 GMT Content-Type: image/jpeg Content-Length: 45662 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2216125818afe22324fc2e131e380e979cd86271_221" Content-MD5: ggxo5HK6+gyuhnNNjAEepQ== ETag: "820C68E472BAFA0CAE86734D8C011EA5" Last-Modified: Mon, 23 Oct 2023 02:04:16 GMT x-oss-hash-crc64ecma: 2483028614894176826 x-oss-object-type: Normal x-oss-request-id: 66511B5D91795F37376D72D4 x-oss-server-time: 36 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:34 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2af0ad5f7d8-BNA
2024-05-24 22:57:34 UTC	669	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 49 19 01 00 e8 03 00 00 49 19 01 00 e8 03 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifII02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 08 09 ff c4 00 17 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: ab 5c ad 6a 96 11 a8 2a c5 ab 52 a4 c3 2e 95 ac 20 d7 91 cd 61 98 c3 95 db 99 a3 74 9c d1 ad 2e 15 69 96 32 91 85 63 28 6f 0e a2 37 26 94 d1 14 cb 29 22 25 12 0f 56 3e ca 00 00 00 00 00 00 00 00 00 00 00 00 00 03 93 21 1f 35 1e 08 5c 7a 5e 9c ad 79 f4 75 19 76 a6 e1 63 9c f2 73 26 a1 6f 5b d4 cd 85 cb 20 c2 0b 2a 65 6c 2a 71 94 d6 9a 73 26 52 f0 8f d2 5f 6e e4 df 17 10 93 58 6b ca 25 0a db b9 32 46 43 5c 6a 17 02 51 2f 32 e1 9a 25 54 92 55 77 a7 db 91 20 00 00 00 00 00 00 00 00 00 00 00 05 0e 60 e1 cd 59 f3 49 a2 39 33 09 db 57 4d a4 9a d4 f3 54 d3 9a 53 ba 3b 7a 54 b3 81 cd f2 00 99 8b 56 f3 00 2d 31 54 ad 0b 98 dd 11 ec d0 66 d3 9a 69 2f 6a 6a 61 2d 41 b1 8c a5 49 59 b7 cd 6a e5 c1 10 ba 73 b7 52 f9 6a 5d 59 0c f8 67 26 8a e8 2b 7d 1f 4b c7 af 00 00 00 Data Ascii: \jR. at.i2c(o7&)"%V>!5\z^yuvcs&o[ el*qs&R_nXk%2FC\jQ/2%TUw `YI93WMTS;zTV-1Tfi/jja-AIYjsRj]Yg&+}K
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 6e c9 45 a0 a9 69 52 85 0a 98 ca 97 97 99 0c e5 e6 72 4c 6d eb b1 3e 95 3b fc 80 00 0f 95 4f 0f 20 11 b6 c6 63 8c 66 42 f3 3c 5c 69 cd 6c 5e 34 c9 57 46 13 0c 50 b2 a3 65 71 97 4c 70 8b 63 dc 74 d1 d7 9a 18 49 87 d0 d1 e0 f5 cd 16 15 8c 58 67 3d 5f 49 1d 1e 4f 15 25 12 8f 6e 34 67 89 18 b9 ae da c8 46 4d 2a 4e 3e 8c 3c 90 d6 19 0e f0 9e 78 91 36 3a 73 0d 54 b0 a0 2a 5a 5c 5c 63 28 5a 5a 50 a1 6e d3 0d a9 b6 37 51 de 69 d2 d7 ad 1d 6f 26 5c aa 00 07 cc 27 ce 00 c1 a5 86 23 09 8c b4 b8 b8 bc b2 35 d1 83 6b 2b 24 50 b6 31 96 14 8c 46 4a c7 17 47 b6 56 b7 4f 29 31 c4 a3 e8 68 f0 2a d4 16 14 2d 8a c6 73 e9 bd 3c 94 e3 eb 21 d7 9e 80 78 26 5a ec aa 54 bf 41 58 68 2e 32 1e fe 73 27 14 6b 6a 69 d3 e5 83 4d 9d 74 15 b4 37 7a 6d 62 79 9e a5 93 62 b5 24 92 4a 36 46 Data Ascii: nEiRrLm>;O cfB<\il^4WFPeqLpctIXg=_IO%n4gFMN><x6:sTZ\\c(ZZPn7Qio&\'#5k+$P1FJGVO)1h*-s<!x&ZTAXh.2s'kjiMt7zmbyb$J6F
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 96 c7 9d 1c 21 c3 1c 51 04 b2 ac 88 e5 2a 91 69 20 90 ce 54 9e 7a 2a fb 0c 7a 12 e3 2c 2e 2f d5 88 4d 2d 8c 65 0a 15 2e 32 14 04 a5 b0 17 ea 65 32 94 34 c7 8d 27 99 2f a1 a7 d9 92 6c 20 00 00 02 91 69 65 bc 19 f3 5d 72 27 99 d9 16 b6 8b e8 d6 f7 c7 a8 5d 76 c7 3f 26 aa b5 2b a7 23 dc c9 4e 46 ba 13 4a 68 8d a9 b6 2a 48 8e af 6e c2 de 8a c8 d9 ba 6e 12 44 b4 c2 da d5 d9 e6 55 c8 9a 08 f3 53 52 99 56 c5 d6 9e bd 1e 8d 2e c4 d2 9a 43 89 af 37 48 36 5c 93 12 49 b0 2c 4e 89 7d f4 f4 c5 a9 6a f3 35 96 3a 05 b8 b8 a8 05 4e 60 9a 55 77 44 04 e6 2b 50 68 4e 1a 38 7a d8 69 f4 65 9f 45 65 b9 cc a8 00 00 61 31 98 c8 eb 19 a8 64 23 5a 79 bd 97 a7 83 db c6 59 a3 32 4b eb fc 92 75 66 ee 40 ad d9 b4 b9 db 13 b4 97 19 0c e4 ea eb 0d 59 d1 1e 74 be 79 1a a8 d2 65 bc ca 4c Data Ascii: !Qi Tzz,./M-e.2e24'/l ie]r']v?&+#NFJh*HnnDUSRV.C7H6\I,N}j5:N`UwD+PhN8zieEea1d#ZyY2Kuf@YtyeL
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: c1 e3 68 ff 00 76 c6 ab 1d 2c ee 8e 39 6f 13 40 d9 b2 e8 4c e6 9b aa 3f 74 8c 6c 6d 8e a6 37 69 e7 b7 5f 5a 8b 1a c3 25 fe 2d ad 3c 1d cd 58 86 2f e3 17 8e 21 68 46 fd 85 ca 72 c7 f5 1d ca ea ea ea c5 5c 84 d9 5c 13 65 0e 16 2b 91 1b 63 36 3c 0a 0e 75 3b da eb 16 90 b0 ea d1 5b 4c 1f e7 0d 1c 3f d1 3e 46 46 d2 e7 b8 00 37 aa ec 60 be ec 83 46 ef 3c 51 79 25 5f de 52 54 ba 9a 66 bd bb 94 52 36 58 d9 23 76 38 7f ba 63 b5 6f 85 b1 c2 d3 6c e2 e5 5d 3d 9e 8f a9 31 af 7e cd 9c 4a bb 19 f6 8f 12 9f 29 e2 a3 86 49 b6 0b 0e 29 f4 b9 5b a7 49 5a d7 f0 53 8c dd 97 42 3d ba 68 53 a9 9a e3 c3 4d a8 c5 23 37 26 4a 46 d4 d9 5a f1 63 af 52 c2 ea 5b 45 51 72 4f 26 e1 67 0f dd 47 2c 72 b7 33 1e 1c 3a bf d0 55 d7 c3 48 35 e7 3f d1 0a ae b6 6a a7 5d ee d3 70 57 57 f0 dd 5d Data Ascii: hv,9o@L?tlm7i_Z%-<X/!hFr\\e+c6<u;[L?>FF7`F<Qy%_RTfR6X#v8col]=1~J)I)[IZSB=hSM#7&JFZcR[EQrO&gG,r3:UH5?j]pWW]
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 6e ee be d5 34 53 53 9b 4f 0b e3 fb c1 66 59 96 64 3a d6 b7 56 e3 a7 bc b8 42 9a 67 0b e5 ca 38 bb 44 da 38 f6 bd e5 ff 00 c8 df ea b9 68 21 0e 6c 6d ea e6 e8 9f 55 23 b4 16 6b 78 05 7e bf 7d 86 53 99 6a 18 49 b0 07 fd 99 f8 85 1c 66 ce 9d b7 f5 a6 e2 94 27 e7 fd 61 62 58 ac b2 ca f6 45 25 a2 06 da 6f 4f 72 a7 7b 44 ec eb de b2 b7 97 66 60 0f 34 aa e2 46 4e 0b 94 51 41 ca 74 b6 23 1b 88 f9 67 69 b1 46 d6 c6 d0 07 7f 5a 74 f1 b6 e3 32 35 36 68 b3 7d 69 f5 6e bf 4e dd 8b 94 cd d6 b3 6c 5b 8a 07 40 af 67 1e 16 4e e8 90 0a 07 61 2a e7 3f 51 0b 8a b8 75 8a d8 9b 23 bb 53 64 69 3a d8 22 d0 e1 a6 a1 38 1e f5 9b 2c 8d 23 4f d9 5d ed 75 fb f8 ac d9 b5 26 fe 16 d4 4a df 9c d3 81 d4 28 eb 1c c1 6e 51 cd 1e 88 d5 9f 95 ca f4 72 ea f8 23 bf fe b3 c9 fb 0d c2 34 30 3c Data Ascii: n4SSOfYd:VBg8D8h!lmU#kx~}SjIf'abXE%oOr{Df`4FNQAt#giFZt256h}inNl[@gNa*?Qu#Sdi:"8,#O]u&J(nQr#40<
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: d2 75 94 95 5b 72 8e 3a 95 23 dc ee 93 b8 a7 3b 2b 9a 38 a3 e7 28 64 7c 06 07 b0 da 46 16 90 55 66 5a ea 16 d7 40 39 cd 1c e1 d9 b7 d4 8f 46 37 0d 6e d0 e0 55 1c e6 07 c8 f7 0c d1 bb 9b 20 e2 16 29 42 29 24 6f 26 73 41 27 3a 27 75 70 4d d8 13 6e 24 7a 93 9d 97 b5 37 31 d1 ad 2e b7 a2 09 51 d2 d4 c8 e0 d6 52 4a 5d f7 6c 2d de a8 a0 c6 e8 dd 78 e9 b9 9b e3 73 c5 95 7d 2d 1c d1 67 7c 91 d3 4d 6b 91 9b 4e f4 73 e5 70 26 f6 19 81 e2 d5 19 e6 4c 6f 67 0b 5b ac 1d a9 b5 33 52 c9 9a 39 32 f1 e1 de a6 c4 6b 20 71 60 86 08 5c 2c 6e c6 0d 73 6b 74 fc 4e bd cd 25 d5 8f 09 d2 4a f3 ce 99 e7 b5 c5 1b f6 f5 95 67 6d 59 9a 3c e0 87 56 b7 e1 aa e4 26 70 b8 a6 94 f6 30 a6 d0 57 49 6b 51 cd ea 43 0c c4 f6 78 8b fd 8b c8 f8 a1 fe 17 f9 82 18 1e 28 7e 69 83 b5 e1 1f 73 f8 80 Data Ascii: u[r:#;+8(d\|FUfZ@9F7nU )B)$o&sA':'upMn$z71.QRJ]l-xs}-g\|MkNsp&Log[3R92k q`\,nsktN%JgmY<V&p0WIkQCx(~is
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 23 a0 eb 56 d7 36 f2 13 86 66 96 ae 09 da 05 b5 44 6c 0a b3 9f 23 43 1a 4b ce 81 a0 26 61 1c 93 43 f1 0a a6 c0 0e c8 c6 af 2b c7 62 a4 e6 d0 53 35 9f fb 5f ab 8a 9a a2 7a 81 69 a5 73 b4 d1 34 e8 fb 6d 1b 1b c5 4a 6d 97 51 a8 f5 76 ac d9 0e 87 fb 2a 5c 2a 69 23 64 d3 48 c8 61 22 f7 26 e6 c8 c9 81 53 7c db ea 5d e9 1d 42 76 3b 2f 46 9a 06 42 df 5f e8 a6 c5 6b dc 08 35 2e d7 86 8b 36 6d a6 e7 7a 69 d5 48 76 2c ca 09 e5 a7 7b 24 8d d9 5f c7 8f 6a 12 52 e3 71 f2 72 5a 2a b6 8d 0f 1f ea 14 d0 cb 49 29 86 66 d9 df af 58 47 6a 8a 49 21 78 96 29 0b 5e 3c e5 2e 37 88 ca 2c 25 0c fb 82 c9 cf 74 8e 2e 91 c5 ce e2 75 45 c0 2a 6c 3e b2 ab e4 a9 dc 47 a4 74 0b c9 14 d4 ba d7 d7 b5 9f 61 9b 57 94 30 ba 5f fb 3a 2c d2 7d 24 aa 7c 66 be 5d 39 7c 8d e0 c1 65 7b ea 75 77 13 Data Ascii: #V6fDl#CK&aC+bS5_zis4mJmQv\i#dHa"&S\|]Bv;/FB_k5.6mziHv,{$_jRqrZI)fXGjI!x)^<.7,%t.uEl>GtaW0_:,}$\|f]9\|e{uw
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: c4 f2 c7 0d e1 1f 16 c6 c0 0f cb 0d 70 f3 bc d9 14 f0 4b 4f 2b a2 95 99 5e 3f e6 9e 10 10 6f 80 95 74 01 28 47 c5 72 68 36 ca cb 2a cb d4 b2 05 c9 26 dd bb d5 ca cc 56 67 2c c5 67 3d 6a ee eb 40 5f 69 59 1b f4 9e c5 94 f6 a8 d8 f7 38 0b 58 71 58 7c 77 7b 7a be 23 1d 70 2d a5 84 ec 2e ce 7f 0a 71 b9 28 9f 0d d6 64 1e 9d cf 16 36 ea 3c 11 87 7b 7b af fa a7 36 cd 37 3f 83 79 eb 57 eb ef 5c 47 14 77 78 36 39 82 db 6e 9f d1 29 bd 10 9b a6 6b 27 ee 5b 93 0e d4 ee 92 3b 13 37 a7 ed 0b a9 0d 01 58 7e 1d 9e 33 55 59 cc a4 6e ba ed 7f f6 55 d8 93 eb 2c c6 0e 4e 99 bd 18 86 9e b4 4d ca 28 13 6d 97 50 d2 53 e1 91 b2 a2 bf 9f 36 d8 e0 1f ba ab af 9a b6 5e 56 5f c2 d1 b1 a9 db 51 40 a1 b4 eb bd 1f fa ce 14 1d fc 4c 3e d2 3f aa 71 47 50 14 18 ad 1f 8b c4 6a e9 b9 6a 98 Data Ascii: pKO+^?ot(Grh6*&Vg,g=j@_iY8XqX\|w{z#p-.q(d6<{{67?yW\Gwx69n)k'[;7X~3UYnU,NM(mPS6^V_Q@L>?qGPjj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.5	50048	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:34 UTC	392	OUT	GET /uploader/d5a40373b44ea8111500c4289464d55d9c0516d3.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:34 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:34 GMT Content-Type: image/jpeg Content-Length: 60478 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221641963c26c0fad4ceb7ac0284569e81928788_221" Content-MD5: uPycY9vrpGLm66GzLR6m6g== ETag: "B8FC9C63DBEBA462E6EBA1B32D1EA6EA" Last-Modified: Mon, 23 Oct 2023 02:04:15 GMT x-oss-hash-crc64ecma: 17612475099152235917 x-oss-object-type: Normal x-oss-request-id: 66511B5DD31A2338304152F9 x-oss-server-time: 91 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:34 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2b02987f7ec-BNA
2024-05-24 22:57:34 UTC	668	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 ee 02 00 00 03 a0 04 00 01 00 00 00 e0 01 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 e0 02 ee 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 07 08 09 ff c4 00 17 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: b9 cb b3 22 6a 09 68 93 54 f5 84 74 5a 9a ce 77 7b ac e3 cb b2 9a d8 9c ee f3 99 11 99 87 61 cf 5c cf 5c 69 b3 70 76 e7 71 60 67 14 8e 5b 97 67 a5 d6 67 56 3e 1a b8 c5 b6 22 62 f2 e4 d8 2e 1c 93 cd 7a 34 d7 2a ce 4e a7 34 d7 71 9b b5 2c cb dd 23 e9 12 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 14 fc db db 09 9d c9 c9 68 b9 c7 b7 de b9 eb ad c5 e5 34 b5 3c e6 b4 5b c6 4b 54 99 ce d3 06 5b 0d 9d 9a e9 66 b3 6d a9 ce 73 b8 76 e3 9a e8 ad 96 12 1b 05 92 b6 46 b2 30 63 1e 48 b5 65 25 a9 63 22 cc c4 c1 96 75 d6 cb 97 8b 06 a7 52 cc 56 6c 27 59 e3 35 8c 3b bf 5d c3 ec 38 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 01 3e 28 dc eb 19 d1 8b 61 26 30 8f 7b ce be 7d d3 1a 4f 45 3b 99 65 92 4d ce 12 ce 2f 4c 79 3a bb 39 dc ea 96 67 47 39 6e 09 88 65 99 26 c2 Data Ascii: "jhTtZw{a\\ipvq`g[ggV>"b.z4*N4q,#Ph4<[KT[fmsvF0cHe%c"uRVl'Y5;]8>(a&0{}OE;eM/Ly:9gG9ne&
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 5b 96 ca cd 6c b9 39 b9 3b 94 96 db 3a 09 34 9a 5f 9b 76 e5 b2 e4 26 c7 53 55 2e 7e 4d 30 cc 84 c2 96 8b 87 8b 35 97 26 83 37 13 4c 0c d9 f5 2c 93 07 36 5e 96 99 77 7c f7 fa 57 96 40 00 d7 1c 2b 58 49 91 5f 02 5c f3 35 0a 0c 84 bf 4b c9 84 b0 89 6f 2e 32 01 21 21 68 48 d6 53 60 61 a5 fa 9a 99 73 a2 cd 4c f3 e8 2e 7b f2 d3 97 aa 46 49 8b 5e c5 19 35 e3 77 3a 8d ca 17 18 f2 e6 d7 bc 73 d7 ce e6 b2 be 9c cb c5 f4 e5 2a f3 dd b0 d7 74 cf 17 d3 1a f9 bc 86 77 55 ae 8c 8a b6 4a 4d 65 d9 ae b2 64 c8 b6 69 22 9a c0 d6 77 46 1e 75 01 0d 95 96 69 75 a9 92 60 4b 83 18 ba 12 29 32 4d 23 54 63 2e ee 3c 3b cc 6f ef 08 f4 10 08 23 45 75 43 48 5a 60 9f 15 eb 3e 63 73 6d 54 d9 93 d9 91 2d f1 8a 42 d5 d5 74 48 4a 42 5e 5c 5d 1d 32 61 ae 9a a7 48 6a e9 2b 5d b4 be 8f 9b e3 Data Ascii: [l9;:4_v&SU.~M05&7L,6^w\|W@+XI_\5Ko.2!!hHS`asL.{FI^5w:s*twUJMedi"wFuiu`K)2M#Tc.<;o#EuCHZ`>csmT-BtHJB^\]2aHj+]
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: a5 5f 12 55 85 b1 4a 8c 90 bc 98 c8 32 4c ec af 21 09 45 82 ae 26 a8 8b 49 e2 1a 15 8b c8 8b 8b 88 e2 33 10 c6 2a 5a 9c 3d 7c b0 9c 55 7b c4 7d 8d 1b c0 00 00 02 87 9c 6b 55 32 0a 94 25 2d 25 2f ca 85 01 29 8a 67 18 04 c4 65 a5 e4 45 e4 65 f5 14 5e 46 48 45 57 c4 45 c5 85 c2 91 4a ac 5b 57 16 17 45 d5 4a a6 50 54 75 6c 4f 52 93 19 51 42 6a b8 93 2a 00 5d 51 55 e5 91 39 5a c7 89 aa 02 58 8a 2e 22 22 20 21 2d 2e 25 8f 9e ec f9 b7 53 a0 8f b4 72 f6 5a 00 00 00 00 70 56 e3 db 29 21 42 f2 f2 91 24 42 4e 90 2d f1 5a 80 c9 31 c9 48 8a 94 28 01 69 68 2c d2 b9 59 48 a1 41 55 96 88 00 a1 5a 14 a9 32 a5 54 ba a9 95 a4 45 0b 0c a3 24 c8 2f 2e 28 50 a1 7e 94 29 16 c5 e0 b0 a1 01 11 69 61 21 8e 4a 6b 13 c6 2a d8 e7 93 dc 0f 69 32 00 00 00 00 00 f9 3e df 49 ae 8d 64 26 Data Ascii: _UJ2L!E&I3Z=\|U{}kU2%-%/)geEe^FHEWEJ[WEJPTulORQBj]QU9ZX."" !-.%SrZpV)!B$BN-Z1H(ih,YHAUZ2TE$/.(P~)ia!Jk*i2>Id&
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 9f 00 9f 6c ac fd f7 47 25 a5 7f 68 aa 16 c2 30 a9 88 41 c0 ef ff 00 6c 92 00 92 ad 15 b4 f5 2f 7a a3 25 78 2b ca f2 a7 68 ca f1 82 3d 61 f3 54 ab 87 45 ef 31 91 ff 00 6c 7d 21 68 c7 42 32 f5 94 4e 65 43 79 ab bc d6 21 07 26 55 73 0e a9 56 6b 53 5d 0d 26 39 7f 6f f6 b1 30 09 e0 89 2f 73 9e 77 9f 42 54 0d cb 10 83 95 9a db 10 ca a7 0e 2b 3f f6 a5 b9 f7 2c ee e2 ed 5f 47 13 92 d1 bf 82 ba 46 f0 ae f8 2c 42 b3 5a dd 4b 0c db c1 52 af 4e a8 d5 38 f0 ff 00 69 fd 22 fd 6a 6c e0 27 d0 65 39 c5 d8 05 a4 6b 70 01 69 15 e5 2a 54 70 c3 92 65 47 30 f0 2a cf 57 4d 49 ae f3 ff 00 69 5a 9f a4 af 50 f3 8f 2e 96 30 0d 67 f8 04 f7 cf a4 db dc 30 58 64 75 95 0a b5 c0 bb 44 61 3e f4 2d 76 a6 b7 5a 93 4c 67 8a a1 5d b5 db 23 3d e3 f9 cb de d6 09 71 80 aa 5b fb 0c f3 5d 72 b9 Data Ascii: lG%h0Al/z%x+h=aTE1l}!hB2NeCy!&UsVkS]&9o0/swBT+?,_GF,BZKRN8i"jl'e9kpiTpeG0WMIiZP.0g0XduDa>-vZLg]#=q[]r
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 7b f8 94 00 b8 48 de d3 ee 47 07 7f cb dc f0 a3 01 87 fe a3 25 ba c6 06 e4 d3 e7 e6 ac 75 9b 4d e5 8e 38 3f 19 e6 ab da 2e 3c b2 bd 9c 3c 6e 3c 91 ea 15 ff 00 31 cc 3c d1 b0 bc 8f b3 a8 d7 8f 24 ea 15 d9 9d 13 87 8a 6e 38 08 bc 31 c5 19 0e 04 e7 bf 0c 94 41 73 6f 77 42 99 6b 2e e7 f1 57 f1 32 3f 65 6a e5 90 07 7a 17 b0 fb 30 e1 92 2e 06 37 78 23 0c cb 8e 6b 07 b2 66 31 c6 78 a8 dc 0f f4 94 0c 29 f4 47 bd 47 92 c4 11 0d 44 e3 b8 af 1f 46 09 51 9e 09 a3 39 1f fa b7 ad f8 e2 a4 b6 a5 ee 06 53 8b 20 63 2f 38 b8 fc 93 54 ff 00 84 71 09 8f 75 da ed 02 6f 37 1e 50 9e 3e c6 8b ef cc c8 8e 10 aa 32 fc 39 b1 31 92 63 a7 54 ff 00 c6 77 39 50 ab d5 9f 1a da 23 c7 d5 3b ff 00 95 7d 21 52 ed 2b 9b dc bf 7c 13 22 18 09 39 b8 79 85 ea e7 ea ff 00 fc a3 be 04 7a c1 62 26 Data Ascii: {HG%uM8?.<<n<1<$n81AsowBk.W2?ejz0.7x#kf1x)GGDFQ9S c/8Tquo7P>291cTw9P#;}!R+\|"9yzb&
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 55 1c 38 39 5e b8 49 38 d4 60 87 8e db 38 a1 1a ad 63 a6 35 a8 3b 97 64 ab 44 36 b3 80 1d c9 a5 ef a6 05 df b3 a6 6f 9f 15 f8 f5 5c e2 33 ce 11 a4 fb a5 c0 4b 66 39 aa 35 4b 5d 1c 50 27 02 27 fc a1 6a ac d7 11 79 0b 66 77 9b e4 85 a6 91 de 83 9a 72 70 3f c5 db cc da 48 e0 17 ef 9a cd 4e 68 fa de 68 93 27 9a f9 a9 cb a7 35 c1 62 a4 f6 54 9e 1d 12 50 74 19 cb bb 05 4e db 68 67 ad 78 7e a5 a5 b1 57 fc 4a 7a 37 71 08 d8 2f 63 42 ab 5e 13 e8 d5 a7 b6 c2 16 6a 8d b8 31 8d 65 46 9c 04 48 fe c8 75 4b 46 ea 6e f7 14 eb 0d 9c ee 73 7b 8a 77 d1 fd 9a e2 78 39 3a c3 69 6e 4c 0e ee 29 f4 9e cd ba 64 77 84 da 95 19 b1 51 c3 c5 36 dd 69 6f ae 0f 78 5d 7d af fc 5b 33 5c b4 9f 47 bf 3a 6e 67 72 d0 d9 5f f8 76 c8 ef 46 c2 e7 6c d7 a6 51 b0 da 78 34 f7 15 d5 ad 03 3a 2e e5 Data Ascii: U89^I8`8c5;dD6o\3Kf95K]P''jyfwrp?HNhh'5bTPtNhgx~WJz7q/cB^j1eFHuKFns{wx9:inL)dwQ6iox]}[3\G:ngr_vFlQx4:.
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 56 3a 85 f4 a0 fa a6 3d 37 3b 59 5a e9 69 a8 c8 da 6e 23 d0 19 f4 71 e8 3f 73 c1 71 58 48 e0 56 43 b8 ae 23 8a 9c 94 6e 5c 39 a2 98 fa 94 cf d9 bc 84 2d cd a8 2e d7 a2 1c 38 85 d5 6c f5 ff 00 fc 7a d8 f6 4a a9 46 ad 1d b6 61 c7 72 a7 56 a5 2d 8a 84 7c 17 5a a7 53 0b 45 00 ee 61 75 5b 3d 5f c0 b4 41 ec b9 68 e8 58 e0 d4 3a 4a bb 9a ab 56 a9 5c eb 1e e1 bb a1 94 df 51 d7 5a dc 54 50 b0 ed 43 eb 7c 17 5c b5 5e 24 55 f0 8c 10 fa 42 ae 4f 6d 37 7b 91 af 63 77 e2 59 23 b9 68 fe 8f a9 b3 5d cc ef 5f 57 97 7e 15 76 39 3e c9 68 66 74 8f 86 3d 38 63 d1 65 d1 8a c3 4b 80 dd 3c 55 ae 95 6d 23 aa e6 c3 91 1b 82 c4 c0 81 1c 90 90 49 38 98 9e fe f4 45 cb c1 30 99 99 c0 09 84 7d d9 62 9b 9e 19 0c 70 58 0c d8 10 8d f1 07 04 ed 57 49 69 bb 9f 0c 16 0e 6e ae 63 e6 a0 4d c0 Data Ascii: V:=7;YZin#q?sqXHVC#n\9-.8lzJFarV-\|ZSEau[=_AhX:JV\QZTPC\|\^$UBOm7{cwY#h]_W~v9>hft=8ceK<Um#I8E0}bpXWIincM
2024-05-24 22:57:34 UTC	1369	IN	Data Raw: 33 33 9b 90 8d a8 6e 3b 8e 2a 5d 27 36 ff 00 62 8c 06 e4 0c ca 2f 73 0f ab 7b d6 00 60 b2 3c 51 8b bc ca be e2 31 38 01 80 43 03 30 bb 87 82 cd bb 39 e3 d0 70 29 db 91 cb 05 e0 8e 61 36 9b 9a 45 e1 09 d8 95 63 61 65 9d 80 e7 e8 54 c1 85 5e e2 a7 d1 a9 63 a1 53 18 b8 ee 21 3e c3 59 bb 30 f4 e6 b9 98 39 a4 77 a9 5f 07 7c 57 cb 35 bf e0 b7 f2 72 f8 8c d4 6e f1 0b 9f 1c d0 a7 54 e5 4d c4 84 2c 95 cc ea 40 e6 85 85 f8 13 50 04 2c 34 b7 b9 c5 0b 3d 06 fe 58 f1 42 06 40 0e 92 03 b3 68 29 d6 5a 0e f5 23 b9 3a c2 e1 17 2a 65 c5 3a cd 58 4b 74 58 1d fc 10 a5 67 b3 eb 57 76 91 fd 80 ab 5a 2a 56 c0 e0 de c8 cb a5 96 66 b1 ba 4b 49 ba de ce f2 ab da dd 57 51 ba 94 f8 04 30 83 bb 7a c8 f7 20 4b 5f 79 8f 8e 68 5a d9 50 5d b5 53 91 db 09 d6 49 6d fa 0f d2 37 de b9 6f e8 Data Ascii: 33n;]'6b/s{`<Q18C09p)a6EcaeT^cS!>Y09w_\|W5rnTM,@P,4=XB@h)Z#:e:XKtXgWvZ*VfKIWQ0z K_yhZP]SIm7o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.5	50043	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:34 UTC	1253	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451977&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:35 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0xbb4fa5585ce11ee5","source_keys":["1","2"]},{"key_piece":"0xad62cbaed5dcda6b","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:57:35 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:57:35 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:57:35 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.5	50044	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:34 UTC	904	OUT	GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451974&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:35 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.5	50045	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:34 UTC	1138	OUT	GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451980&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:35 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=90, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.5	50046	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:34 UTC	1253	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451980&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:35 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x574c259545720cd1","source_keys":["1","2"]},{"key_piece":"0xdb8fa5999d29a54c","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:57:35 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:57:35 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:57:35 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.5	50047	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:34 UTC	941	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451974&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:35 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:57:35 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.5	50050	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:34 UTC	392	OUT	GET /uploader/969b7ca635d13f2e9a2380510ac5f5a238ef64ef.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:35 UTC	700	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:35 GMT Content-Type: image/jpeg Content-Length: 46629 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2210af93adb367da86e97773aec2d15f69c91737_221" Content-MD5: OBIRy+awo18XZ8DqsqZ9cQ== ETag: "381211CBE6B0A35F1767C0EAB2A67D71" Last-Modified: Mon, 23 Oct 2023 02:04:37 GMT x-oss-hash-crc64ecma: 1188580957162776857 x-oss-object-type: Normal x-oss-request-id: 66511B5D1F52473733216A6B x-oss-server-time: 68 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:35 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2b1cedff7d8-BNA
2024-05-24 22:57:35 UTC	669	IN	Data Raw: ff d8 ff e1 00 2c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 3c 01 02 00 09 00 00 00 1a 00 00 00 00 00 00 00 69 6d 61 67 65 72 79 34 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 02 f0 02 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 08 09 ff c4 00 4c 10 00 01 03 03 02 03 06 03 05 05 07 02 04 04 Data Ascii: ,ExifII<imagery4C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("L
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 Data Ascii:
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 Data Ascii:
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: d8 5c b7 8b 3b 68 b5 d1 07 41 64 6f c6 4d cb bc 3f 28 2b 89 71 67 18 5d f8 85 cf 92 e1 55 a6 0c fc ba b0 02 da 98 2d 6e ae 6c ba aa d3 94 73 75 0e d0 fb 63 c8 96 87 87 41 e4 43 a5 38 fd 17 11 aa 9a aa e5 3b ea ee 13 b9 cf 79 c9 73 8e ea 2e 7b bd be 8d 99 73 db 23 ba 12 54 25 47 12 49 5f 33 69 e8 23 2e 9a 47 68 6c 6d ea ba a3 83 0c 38 a6 32 ea 27 9f 46 cd 3d 65 35 2c 1f 3b 5c ff 00 2c a8 2b 87 10 74 6e 03 71 ff 00 de ca 53 86 3b 32 e3 0e 2b 7c ee 8a 98 50 c5 0b b4 ba 4a af 00 cf a6 79 ad 9e e5 d8 d5 b2 c1 3d 0b 2e f7 e3 59 56 41 9e a6 9e 9c 64 77 4d dc ef cd 67 6c fe 8d f1 e8 e2 23 9b 95 4b 76 9e 69 00 a7 0f 2f 3b 00 d1 92 4f b2 9b a1 e0 de 24 ae 9a 07 56 42 2d f4 f3 46 e9 4c d5 0e 00 06 01 9c 90 37 0b b8 f6 65 49 62 b7 f0 ef ed 3b 77 0f 52 ba 29 e6 71 82 Data Ascii: \;hAdoM?(+qg]U-nlsucAC8;ys.{s#T%GI_3i#.Ghlm82'F=e5,;\,+tnqS;2+\|PJy=.YVAdwMgl#Kvi/;O$VB-FL7eIb;wR)q
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 22 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 14 02 bc ca 39 d8 03 6c ad 1b 8e 78 df f6 2b 8d 25 aa 99 d5 b5 e0 65 c1 b8 d1 18 ff 00 33 b9 04 da 67 94 0d e3 52 c1 b9 dc 21 a2 a6 7c b2 ca c6 e0 6c 0b 80 c9 f4 5f 31 dd 7b 4b e3 bb b5 f0 5b 61 ae a3 a2 a6 c1 33 49 4d 8c c6 3c b3 c8 9f 65 15 59 6c 1f b5 e9 6e d2 f1 0d 65 c4 46 f0 1c da 99 48 77 fb 36 fe 0a f1 4f 8b 69 47 c5 c1 e6 d6 37 ab a6 de 2a 66 b9 dd 65 99 e5 e5 ae 04 0d b3 80 b9 84 7d 98 d4 76 85 70 ae 7d 1d 7b 68 e7 a2 69 3a 5c d2 75 9c ed 9d c6 16 d7 55 76 8a 7a cc 45 a4 91 97 3a 39 5a e8 Data Ascii: "" """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """9lx+%e3gR!\|l_1{K[a3IM<eYlneFHw6OiG7*fe}vp}{hi:\uUvzE:9Z
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 70 0e 3e 11 9f 45 5f 13 70 3d 2d 60 0d a5 a7 6b 5d c9 a1 a3 0b 78 e1 ba e1 75 e1 ba 1a b2 fe f1 da 7b b2 71 8d c2 bd 33 73 97 3b 7c 72 c1 c2 be cf 36 39 75 fd 5f 34 dc a8 ab 78 62 e8 21 a8 cb 63 d7 b8 f3 1e eb 64 b8 dc 2d d5 f4 15 12 53 9a bd 2c 60 74 51 b7 70 1d d7 52 ea 3c 61 c3 d0 5d ed a2 37 30 39 e7 72 f2 3a fb f3 5c 9a 92 c7 7f b1 5d 26 8e d7 00 a8 8e 66 96 38 38 64 10 b3 c9 59 eb 0e ed 26 78 a4 f0 5b a4 a4 3b 29 be 16 71 14 11 4b 33 03 6a 06 97 6b 1f a2 ed 55 91 b1 ae 70 1a 40 ca e2 5d 9f 70 4d c5 dc 4d 15 55 ea 11 49 4b 4c f2 f0 09 c9 71 e7 81 85 da 27 91 93 9c 31 ae 0c 07 63 e6 b5 e2 9b 6d 2e 3b 56 29 33 11 d1 4c d6 a8 2b 69 4c 55 8e 63 e3 77 28 dc 32 0a e3 1d a2 76 72 fb 53 df 5d 68 6b be 1c e5 ce 8b 39 c1 f4 5d c1 cd f0 81 b8 23 90 5e 35 c0 c2 Data Ascii: p>E_p=-`k]xu{q3s;\|r69u_4xb!cd-S,`tQpR<a]709r:\]&f88dY&x[;)qK3jkUp@]pMMUIKLq'1cm.;V)3L+iLUcw(2vrS]hk9]#^5
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 40 19 2d 03 1b f3 2b d2 c0 d9 89 07 00 05 12 85 ba 99 3b b6 38 97 0d 5c 9a 0f 9a b7 18 23 4b 5f 28 96 62 32 f0 46 03 02 a2 b9 de 38 40 00 bb 39 c9 e8 b1 e6 d0 5c 43 1c 43 73 99 1d 9f 98 f9 2a a5 9b 1d 43 25 0e 31 12 77 d2 5a 37 0e 1e ab 94 f6 97 c0 7a cc 97 6b 14 5a 5e 77 9a 9c 7f 10 ba 6b a3 d5 10 99 cd 11 e8 f0 c6 d6 9c 17 7b 85 79 bd e6 5a d9 f4 b6 52 33 81 ba 9d cf ab e7 5e 18 e2 27 5b 9e 61 ac 89 d2 c7 9c 16 93 82 df 45 b3 5f 6c 36 ee 20 80 3e 9a 46 45 55 80 59 23 79 7b 39 6c 1d a4 70 0c 77 08 9d 72 b4 31 91 d6 b7 77 c6 dd 83 c7 9f ba e6 9c 39 7c 75 9a a6 4a 4a c8 9c 23 7b be d0 11 e2 69 5d 14 c9 13 1c 36 71 e6 c3 35 9e 3c 7d 5f 5e 7f d3 ef 00 52 70 9f 0b 47 54 fe ea 5b 85 40 cb a4 66 e1 be 81 75 c0 be 54 ec ff 00 b4 79 ec 32 b4 d2 c8 ea 9a 09 37 74 Data Ascii: @-+;8\#K_(b2F8@9\CCs*C%1wZ7zkZ^wk{yZR3^'[aE_l6 >FEUY#y{9lpwr1w9\|uJJ#{i]6q5<}_^RpGT[@fuTy27t
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: cb 4f 24 8d 7b 58 d9 09 f1 9c e4 8f 65 65 b2 cb 23 da 07 86 41 97 17 34 6c d1 e9 ea 7a fa 2c ba 81 1b a9 73 0e 3b c6 ee 4f 30 7e aa 50 c3 92 a0 b3 3a 70 dc 75 2a 3d 95 bd e5 c2 48 4e 75 35 a0 e7 cd 26 d5 34 85 b8 27 6f 13 b9 0f a2 c6 bb c5 2c 51 c3 5f 11 3a a1 d9 d1 8e ac e5 9c a2 ac ba c7 b8 69 23 48 61 18 71 f2 0a 3a ef 34 ed b5 d4 fc 23 35 ba 38 c9 8b 03 77 1c 6c a4 a2 7c 75 90 87 b4 87 32 46 e4 10 ad 42 d7 89 31 3b 83 0c 7f b9 68 1c fc 95 65 2f 9d 2d bc 45 c4 32 71 24 1a 2a 2b 1d 5f de 63 43 9d b6 73 cb 4a fa 26 39 e7 8e 26 b6 42 0d 4c ac 06 60 07 ca 7a ab 62 8a 96 9e b9 f5 22 dd 4a 2e 8f e7 33 59 e3 1f 55 7e 30 ee f5 f0 45 9e f5 de 29 5e 3f af 55 55 a6 62 57 a9 89 73 08 d0 65 81 9f 7f 9e 0a d3 78 e7 80 e9 f8 86 23 59 40 19 05 7b 77 cb 46 cf f7 5b 95 Data Ascii: O${Xee#A4lz,s;O0~P:pu=HNu5&4'o,Q_:i#Haq:4#58wl\|u2FB1;he/-E2q$+_cCsJ&9&BL`zb"J.3YU~0E)^?UUbWsex#Y@{wF[
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 0c 63 6e ec 9c e9 56 c5 11 cd be be 38 2b 5a 3a b4 5c 46 da 3e 1f f8 7b 54 71 4a 21 60 89 ad 90 8e 5c b2 70 a0 6d ed 8a 9c 3e 38 69 61 10 cc 0c 92 10 dd 3e 33 cf 92 a3 e1 60 85 ce d0 c0 32 72 40 e4 56 5f c3 48 d6 07 16 69 61 dd 46 d0 e2 df 77 32 ed 6d f5 54 95 56 ca a8 3b d6 d1 b3 c0 f7 c4 dc b9 9e ab 9d 5e 78 9d 94 77 5a c9 23 9c dc df 3c 2d 8a 17 3c 02 37 eb ee be 8b 2d 69 71 71 60 91 9c 8b 5c 32 0f d1 6b 8c e0 6e 15 65 d4 dc 59 67 67 c5 67 5e 97 13 a1 ae f3 01 56 d5 99 98 97 5e 9f 53 18 71 da 38 79 cf 75 de ce ad b3 da b8 3a 91 95 45 a6 6a 8f b6 20 7d dc f4 53 b2 3b 03 24 e0 0e 6a a7 48 5c 72 72 3a 60 72 56 5c f6 b3 0e 90 80 dc f5 1b 2d 37 df 9b 92 27 76 63 a0 6d 40 67 74 08 90 b3 c2 33 80 47 aa c3 9e 26 d2 8e ed cd d2 e6 8f a0 3e eb ca 47 c8 2e 13 c8 Data Ascii: cnV8+Z:\F>{TqJ!`\pm>8ia>3`2r@V_HiaFw2mTV;^xwZ#<-<7-iqq`\2kneYggg^V^Sq8yu:Ej }S;$jH\rr:`rV\-7'vcm@gt3G&>G.
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 5b 5d b2 cb c3 90 08 6c 74 31 40 d0 30 5e 40 2e 3e e5 65 36 17 00 4d 4c ec 89 9e 40 ea 3f a2 c1 ab bb 59 ad 4d 73 9c 1a 5d d0 ca ee 6a bc e5 6d f6 5e 92 4a 8a 97 eb 85 af 93 3b 10 d2 a9 14 13 b9 ce 35 4f ee 7d 32 0a d2 af 5d a9 50 51 92 c8 e7 85 84 74 8b 7f e0 b9 ad ff 00 b4 ba fa f7 48 da 5d 6d 89 db 07 b8 e0 fd 30 a4 e2 f4 e6 ee 33 d7 58 6d 45 d3 c9 1c 72 4a 06 3b c9 e4 e4 7d 02 d5 af 5d a4 db 22 61 02 a9 a4 fe 08 86 c3 f2 5c 06 a6 e1 51 39 26 49 e4 7f 5f 13 b2 b1 9c f3 8c 9c 0f 5e 8a 76 84 6f 69 74 eb 9f 69 ed 73 88 a4 a3 32 0f c5 21 20 7e 4b 5e a8 e3 db 84 84 1e e2 16 ef d0 1f ea b5 7a 7a 3a ba c7 06 d3 41 23 fd 74 9c 7e 6a 5e 2b 0d 3d 23 83 af 97 08 e0 69 df bb 84 eb 79 fe 43 ea 9b ad 10 ea bc 23 7e 99 e2 9e 66 c9 90 ec 1f 09 ea be 96 e0 8e 2f a2 ab Data Ascii: []lt1@0^@.>e6ML@?YMs]jm^J;5O}2]PQtH]m03XmErJ;}]"a\Q9&I_^voitis2! ~K^zz:A#t~j^+=#iyC#~f/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.5	50052	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:34 UTC	392	OUT	GET /uploader/48e1ea064ee564bf1e9113d74ef81304f299ac8e.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:35 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:35 GMT Content-Type: image/jpeg Content-Length: 56897 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221b96721f80a92a70749f1e0d01c64706917838_221" Content-MD5: 4DV9g3xyWQ++9aAFzjN3DA== ETag: "E0357D837C72590FBEF5A005CE33770C" Last-Modified: Mon, 23 Oct 2023 02:04:35 GMT x-oss-hash-crc64ecma: 13263312270314295939 x-oss-object-type: Normal x-oss-request-id: 66511B5D76EC4B3131FE682D x-oss-server-time: 79 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:35 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2b1ee6df7c8-BNA
2024-05-24 22:57:35 UTC	668	IN	Data Raw: ff d8 ff e1 00 2c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 3c 01 02 00 09 00 00 00 1a 00 00 00 00 00 00 00 69 6d 61 67 65 72 79 34 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 02 eb 02 eb 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 01 08 09 ff c4 00 55 10 00 01 03 02 04 04 03 05 04 06 06 06 07 06 Data Ascii: ,ExifII<imagery4C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("U
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 Data Ascii:
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 Data Ascii:
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 19 05 80 d8 58 76 f5 59 18 61 64 73 34 72 c3 cb 01 23 cb 63 b5 f5 51 4e 23 14 74 e5 bc d0 63 89 c0 10 d2 1c 41 b7 f9 17 ee a0 d4 63 f0 f9 fc ec 0e 2e 2e be fa 76 bf 55 af 11 9a 90 f2 da 00 7b 75 71 7b 5a 5b ef 0b 5b fe 6a 0b 9e ce 68 01 c0 92 48 73 ad e5 03 ef 01 dc 76 58 2a de 21 a5 8a 4f b6 99 d2 bf e2 04 dc 37 b5 bb 74 fc 16 02 af 8a 9a c8 f9 71 5e 4b ee e3 a9 0a 51 b9 b8 b6 40 e6 b5 f6 26 f9 6c 0d 89 1a 2b 22 3b 3f 35 ae 59 e5 de d6 ea 7f 8a d2 5d c5 f3 5c 93 1e b6 20 02 7d db ef fc 15 11 f1 75 47 31 b9 db 11 68 d3 6d 48 f9 f7 f5 4a 47 d8 de 05 f1 c3 71 5c 3d b8 16 23 2d eb a9 9b f6 0f 76 9c d8 c7 41 dc b4 7e 56 5d 6c 1f 45 f9 ed 83 71 bc d4 55 f4 f3 31 ae a4 a9 89 f9 d9 2b 34 20 e9 62 47 e5 6f 92 fb 5f c2 ae 32 87 8d b8 5a 1c 41 b9 1b 57 19 e5 54 c6 Data Ascii: XvYads4r#cQN#tcAc..vU{uq{Z[[jhHsvX*!O7tq^KQ@&l+";?5Y]\ }uG1hmHJGq\=#-vA~V]lEqU1+4 bGo_2ZAWT
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 99 bc 4d e3 fc 5a 98 7b 67 14 d7 44 1e d0 d0 c8 5c 23 6d 89 b0 2e 70 d1 bb 1d 56 a7 16 23 2b aa 85 55 49 ab 95 93 12 da 9a 89 09 7f 35 c4 dc 9b 9d 0b ac 3f 10 83 25 57 0b ea 21 73 e3 61 6c ac bc a1 80 6c 2e 04 8d b0 1a 65 77 98 fa 15 ad 54 d5 d4 47 33 a2 81 ee c8 f6 98 da 00 d4 87 6f 6e ab 65 74 cf 33 b6 3b 30 55 ca 0c 8e 0f 1c a7 64 68 d8 11 bf 35 bb 9e a4 28 94 78 a8 c2 6b 65 9e 92 9e 30 1e cb c3 cd 8e ee 8d 97 b8 b1 3d 7a 15 46 2a 4a ea fa 6e 6b 2b 61 2c 7c f0 88 fe d1 85 a7 28 d8 05 3e 2a e6 54 d5 c4 60 9e a0 b9 d0 08 5c 22 60 0e b8 1b 5b 67 0f 9e ab 1d 8b 62 f3 e2 4e fe b2 f7 4a ed 6c ed c9 2b 14 c9 1d 1b 9a e6 dd ae 1d 42 6a 63 60 63 73 53 d0 b9 d4 73 c9 03 24 31 39 85 e4 32 47 13 6b 34 ee c3 b6 9b 5c 2b 73 c3 39 7d 58 a6 6c b1 c5 4e e0 1d cc 00 ba Data Ascii: MZ{gD\#m.pV#+UI5?%W!sall.ewTG3onet3;0Udh5(xke0=zFJnk+a,\|(>T`\"`[gbNJl+Bjc`csSs$192Gk4\+s9}XlN
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: c6 e0 94 90 e1 f2 56 52 36 6a 97 c3 1c 92 b8 cc 64 8c 5d b7 69 cb d2 c0 ec 7a ac 7f 12 e3 8c 9a 86 a2 82 1a c6 d5 52 b6 dc 89 1b 18 8c 10 0f 95 d6 e8 6d b8 ef d5 4b c7 78 7a 5c 42 a3 9c 2a 9a c9 1c 3e d0 35 b6 04 8b db 41 d8 68 14 28 b8 4e 00 09 a8 9a 49 24 70 f9 6a b7 d7 73 e3 37 18 ca 69 65 ab a0 0d 6b 9b 34 a4 c7 4c c8 9c 7c ec d6 ec 21 c7 6d 6e 2d d8 aa 2b 6d 33 5d c8 04 53 52 b4 33 93 2b fc f1 e6 3a 8f 50 1c 0e be a1 47 11 33 0c c5 79 55 b1 bd d0 87 5c 80 72 e9 b6 6b fa 1b 1f a2 ae 79 63 74 50 b5 d5 52 16 3c bb 9a fc 96 2d 71 bd fe 6d f7 4f cd 63 7c 6b 3d 6d 18 56 1b 42 cc 36 27 c1 13 1c 64 65 dc f3 ab 89 be c4 fd 0a 8b 88 60 74 d3 37 36 40 d0 35 36 eb e8 bd e0 da 81 2d 05 43 5f 96 cc 92 e2 db 6a 2e 6d f5 fd eb 2f 51 67 31 fd 49 69 16 b5 ec 7a 7c d7 Data Ascii: VR6jd]izRmKxz\B*>5Ah(NI$pjs7iek4L\|!mn-+m3]SR3+:PG3yU\rkyctPR<-qmOc\|k=mVB6'de`t76@56-C_j.m/Qg1Iiz\|
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 79 e2 86 32 f9 9e c8 e3 ea e7 ba c3 f1 2b e6 4f 1f fc 4d 9f 11 c4 65 e1 de 1d ac 23 0c 88 06 d5 d4 52 bf 59 9f 7b 18 c3 87 41 70 3e 77 ec b4 1e 22 e3 ea be 28 15 d8 a6 21 59 59 20 86 13 2d 3d 2c c1 cc 8d 85 d6 c8 f0 06 84 0f ae 8b 46 0f c8 7c b1 4a f2 c0 ef d8 99 ae 6c 77 25 c0 7c 21 ce 2e f5 b2 d4 11 b1 89 e3 82 11 1c 39 4b 9d 77 9b 6b 7d 48 1e b7 bd cf e0 b0 b4 95 a2 99 8f 8e a2 96 ee 0d 73 03 9b 70 43 ce 85 ce f5 dd 67 a0 a7 8b 17 e2 ca 7a 27 54 7b 44 52 3c 00 e7 b8 45 9d 8d 6e 80 9f 84 69 f9 5d 6d 47 00 c3 2b 20 fb 46 65 a6 73 c9 8d cf 04 46 c2 06 a1 ae 6f bc eb 9e a9 99 59 b1 a6 47 14 55 cf 9b d8 64 2f 89 d2 41 10 70 60 b8 d8 6c 4e c3 5e eb 65 af a5 a6 c3 f0 1a c8 1f 4d 2b df 51 4e f7 b2 68 da 18 d9 5e 1c 01 71 27 e1 06 fa 0e a1 5a c2 b8 72 9f 0c c5 Data Ascii: y2+OMe#RY{Ap>w"(!YY -=,F\|Jlw%\|!.9Kwk}HspCgz'T{DR<Eni]mG+ FesFoYGUd/Ap`lN^eM+QNh^q'Zr
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 88 38 df 1d c6 9c e3 88 62 53 ba 36 ff 00 66 d3 91 ba fa 0d c2 d6 1d 52 74 ca 00 d6 f6 b6 da 7e 4b 59 c3 f6 95 25 d4 b4 4e af 96 b3 10 92 5c 57 10 95 c6 59 2a 2a f5 6e 7e a4 37 af d5 5d aa af 73 da c7 3d ee 03 b3 45 83 47 ec 81 b7 d2 cb 19 cc 76 6d 5c 40 77 41 dd 55 13 db 66 e9 61 be 8b 7f 19 49 7c a5 e4 db cc 05 f4 6e 96 24 68 35 fc 55 a2 f7 ba 2b b5 ce 20 0c b9 8e 9f 8a a1 e4 38 96 93 7b 1d 0b 8e ad f5 51 aa ea 99 03 5a 03 83 b2 5e ed de ca 55 89 50 c8 5a 1a 01 04 db 46 76 ef 65 54 95 81 91 b9 d7 05 b1 e9 e6 d1 cd d3 f8 d9 6b 35 b8 e3 21 8d c5 af 0d 90 eb 63 ad 96 ab 89 63 32 d5 1b 66 39 46 d9 8a 9b b0 8d b3 18 e2 66 34 38 44 dc a1 d7 b9 24 97 5c eb fb d6 9f 88 62 d3 d6 38 5d c6 f6 b5 ef bf a9 fc bf 00 a1 c7 1c d5 04 9d 6d d4 a9 d0 51 86 82 e2 d2 e0 3d Data Ascii: 8bS6fRt~KY%N\WY**n~7]s=EGvm\@wAUfaI\|n$h5U+ 8{QZ^UPZFveTk5!cc2f9Ff48D$\b8]mQ=
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 8c df 0f c6 31 8a c2 de 1c c4 5c ec 24 4c 59 88 54 c8 03 9f 4e e1 ad a3 ef 9b 66 df 6f 90 37 f7 15 a9 9e b6 58 70 7c 3a 53 14 f5 b0 e4 9a 76 38 65 a7 a7 31 90 26 70 dd a0 d8 8f ee fa bd 6c 54 af 6e 0d 87 ba 86 9b 91 25 81 e6 07 de 16 d4 da 36 b5 d3 4a 47 70 dd 7b 36 c0 1c c5 4d 55 8a 2e 0a e1 9a 07 07 55 be 7c 6e a8 79 8c 51 bf 2b 6c e7 16 46 c6 91 60 f7 17 1d 3b 90 e7 1d 02 c8 49 55 4d 45 40 69 e8 62 a0 a6 a3 89 ae 70 22 22 1a 03 6e 5f 99 c3 cc f6 46 5c 3b 73 24 b0 1a 0b 2c 45 35 4c 6f 9e 9e 8e 27 4c fa a6 46 66 a8 7d 3b 4e 4a 5c e1 a0 86 1d f9 d2 34 36 38 da 7d c6 fa dd 57 21 94 98 a0 11 53 42 e8 5c eb 32 e4 b6 9b 95 6f 3c 87 ac 34 ed d8 6c e9 5d f5 59 58 96 6b a4 7d 4b a5 95 f5 8e 7c 39 1b 20 85 9f d6 a2 2f 2e 0c 85 96 f7 aa a6 1e f9 da 36 58 69 a9 51 Data Ascii: 1\$LYTNfo7Xp\|:Sv8e1&plTn%6JGp{6MU.U\|nyQ+lF`;IUME@ibp""n_F\;s$,E5Lo'LFf};NJ\468}W!SB\2o<4l]YXk}K\|9 /.6XiQ
2024-05-24 22:57:35 UTC	1369	IN	Data Raw: 61 f3 d6 38 79 9c f0 03 58 c1 dd cf 3a 00 be 9c f0 3b 04 a8 f0 e5 b5 2e c4 ab 9b 57 25 7f 2f da 21 80 de 28 2d 7b 16 9f 88 eb a9 5f 30 d6 71 4e 2f 8d 39 82 a2 b4 d2 d2 c6 dc 91 d3 52 1e 44 2c 17 e8 c6 e9 fb ca ef be 0d e3 13 f1 1f 0c 08 5a e7 4b 2e 1d f6 13 4c 5a 43 4b 77 6b 8b 8e 9b 5f aa 9f 5a 8f a9 63 7b 64 6b 5c c3 76 b8 5c 11 d4 2a 97 3c e0 1c 79 ee c4 99 83 73 5b 51 1b 5a f2 d9 1a 6e 19 6f 84 1e bf 4d 17 43 59 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 45 e5 d2 e8 3d 45 6a 79 e3 81 8e 7c cf 6b 18 d1 72 e7 38 00 07 72 b1 12 71 35 00 79 64 26 49 dc 0e 5f b3 69 22 fd af d4 a4 a3 37 75 e1 77 f9 0b 89 f1 cf 8c d2 e1 f5 ee a1 c0 29 a0 9a 48 74 9e 79 89 2d 6b fe e8 b6 fe ab 4c c6 fc 4b e2 aa ec 20 ba Data Ascii: a8yX:;.W%/!(-{_0qN/9RD,ZK.LZCKwk_Zc{dk\v\*<ys[QZnoMCYD@DDD@DDD@DDD@DDD@DDD@DDD@E=Ejy\|kr8rq5yd&I_i"7uw)Hty-kLK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.5	50049	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:34 UTC	1138	OUT	GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451982&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:35 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:35 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.5	50051	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:35 UTC	1248	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451982&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:35 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x4172baf88b225bc1","source_keys":["1","2"]},{"key_piece":"0x0200d14e8dc1bf6f","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:57:35 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:57:35 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:57:35 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.5	50053	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:35 UTC	904	OUT	GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451977&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:35 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:35 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.5	50054	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:36 UTC	392	OUT	GET /uploader/9adc39b5052122d6f03b60858a956876cea2f3e2.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:36 UTC	700	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:36 GMT Content-Type: image/jpeg Content-Length: 68003 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="22198082de0134a990d683e5928011ccd8328456_221" Content-MD5: Y6m9xaD6/gYSC7eNGLN2Gg== ETag: "63A9BDC5A0FAFE06120BB78D18B3761A" Last-Modified: Mon, 23 Oct 2023 02:04:34 GMT x-oss-hash-crc64ecma: 4196488442501836240 x-oss-object-type: Normal x-oss-request-id: 66511B5EE2741F363216BDD9 x-oss-server-time: 54 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:36 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2b8bd3df7ec-BNA
2024-05-24 22:57:36 UTC	669	IN	Data Raw: ff d8 ff e1 00 2c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 3c 01 02 00 09 00 00 00 1a 00 00 00 00 00 00 00 69 6d 61 67 65 72 79 34 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 02 ec 02 ec 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 08 09 ff c4 00 52 10 00 01 03 03 03 02 04 04 03 04 06 07 05 05 Data Ascii: ,ExifII<imagery4C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("R
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 Data Ascii:
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 Data Ascii:
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 f1 c7 03 94 1e e4 2c 7a aa a8 a1 6e 1e ef 51 e8 d1 cb 8f d8 2d 6b 5f eb ab 46 89 b6 0a ab ab e4 92 69 32 21 a5 84 6e 96 5c 75 c0 f6 19 e4 9e 00 5f 31 6b 8f 1c b5 4d fd f2 43 6b 91 b6 2a 27 02 d6 b6 94 89 27 78 ff 00 de f0 08 fa 33 07 ee b3 3b ed 03 b9 f8 91 e2 c5 af 48 3c 53 ce f7 54 dc 5e 33 1d b6 99 cd 33 1e 3f de 38 e5 b1 8f a7 53 ec be 65 d7 3e 22 ea 1d 68 e7 32 e7 57 b2 dc e0 5f 1d 15 1b 88 a7 01 a7 bb 4f 32 ff 00 68 3b d4 30 48 01 69 92 ca c8 cc b2 48 f6 17 48 e3 bf cc 26 40 f2 7b 12 4e 4e 0f 5d de a1 95 e4 82 6a 88 98 f0 d3 4f 4d 20 0e 64 ef e1 f2 01 c1 da df e3 c7 bf 18 1d 54 8a 6b b8 bb 33 e2 Data Ascii: " """ """ """ """ """ """ """ """ """ """,znQ-k_Fi2!n\u_1kMCk*''x3;H<ST^33?8Se>"h2W_O2h;0HiHH&@{NN]jOM dTk3
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: 76 cc e6 b6 69 4b 5f 23 df b8 e7 73 cf 18 20 17 b8 fd 7a 01 8e 17 6b fd 92 2e 82 8f c4 6a 9a 01 28 73 2b e8 9d d0 7a 4b d8 ed dc 7e 45 df a2 e2 8f 0d 30 ba 58 58 5d e9 0c 13 bc 60 64 f1 9d cf fa e7 a0 0b 7e fd 9e ea fe 0f c5 bd 34 d0 1d 1e f9 5d 13 40 39 dc 1c c7 02 5c 7b f3 d3 84 1f 78 f7 44 1d 51 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 13 23 dd 01 32 0f 42 b5 ad 5b ae 34 f6 94 63 7f 1b b9 c3 04 af 00 b2 16 e5 f2 38 1e e1 a3 9c 7d 7a 2e 7d 51 fb 42 e9 46 1f dc 52 dd 26 67 b8 89 ad f6 ec 5c 0f 70 83 b3 65 17 22 a1 f1 ff 00 47 54 90 26 fc 42 94 7f 59 f0 6e 68 eb d4 b4 9f 62 ba 0e 9d d5 76 2d 47 1e fb 25 d2 96 ac 7f 56 37 fa c7 dd a7 9f e4 82 71 17 99 19 5e a0 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 Data Ascii: viK_#s zk.j(s+zK~E0XX]`d~4]@9\{xDQ#2B[4c8}z.}QBFR&g\pe"GT&BYnhbv-G%V7q^""" """ """ """ """ ""
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: 0b 48 1d c9 fe db bb 86 8f e7 83 8e eb e2 d8 ee 95 fa 82 f9 5d 7f bb cc ea 9a b7 38 83 23 9b d6 47 74 fc 80 e8 3b 70 82 4a f3 72 ac b9 57 4b 51 5f 34 95 35 12 3d ce 74 ee 77 a9 ef 23 9c f7 c6 47 1d 82 c4 32 12 e2 00 70 8c 38 b8 64 f3 d4 67 ff 00 93 f9 ab 45 e5 a7 2c 3e a0 7a 1e 80 0e 4f e6 70 a9 73 1d b5 ad 3e ae d8 71 c6 07 4f f1 28 2f e5 ef 83 63 c3 83 40 0d e8 3a e0 0e 9d fe 62 af 51 d5 c9 05 53 2a 29 a7 96 9e 43 ea 64 91 38 b5 ed 20 38 8e 9f 52 16 01 79 79 fd d8 00 9e 5b 93 9c 8d db b3 8f b9 01 56 e7 f5 da e6 0c 3f 20 82 47 4e a3 f4 68 41 dc 7c 39 f1 e2 e3 6d 31 51 ea d0 eb 85 1e ed 82 a9 a0 09 a3 1c f2 ee ce 1c 0f af dd 7d 2d 63 bb d0 de ed b0 5c 2d 55 11 d4 d1 ce 37 32 46 74 3f 75 f9 f2 5a 63 69 73 bd 26 36 e4 7d 76 80 4e 33 d4 f0 07 d5 77 ef d9 0a Data Ascii: H]8#Gt;pJrWKQ_45=tw#G2p8dgE,>zOps>qO(/c@:bQS*)Cd8 8Ryy[V? GNhA\|9m1Q}-c\-U72Ft?uZcis&6}vN3w
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: 40 34 4e ab b5 eb 0b 24 57 3b 3d 40 92 37 71 24 44 fa e1 77 76 b8 76 2b 62 c8 5f 9e be 1e 6b 7b c7 87 7a 8e 3a 9a 39 8b a2 91 ad 12 53 b8 9f 2e 66 3b 18 69 f6 3d c3 b9 c7 d5 7d bd e1 f6 b7 b4 eb 6b 33 2b ed 32 e1 e0 7e fa 9d e4 07 c2 ee e0 8f 6f af 74 1b 62 2f 33 ce 02 f5 01 11 10 11 11 01 11 10 11 11 01 10 f0 a9 73 80 69 28 3d 73 86 0f ba d0 bc 5c f1 1e dd e1 ee 9f 75 55 46 d9 ee 33 02 da 4a 3c f3 2b b1 d4 fb 34 1e a7 fc 70 bd f1 5f c4 9b 57 87 96 47 54 d6 38 54 5c 25 69 f8 4a 36 3b d7 29 fe b1 f6 68 3d 4a f8 63 5b 6a 7b 96 ac bf 55 5d 6f 95 02 7a 99 1d 80 07 cb 1b 7b 31 a0 f4 68 e7 f3 f7 ca 0b 5a aa ff 00 75 d5 97 fa 8a eb a4 f2 55 d7 d5 48 3a 9c 60 9f 95 80 76 68 e9 8f a2 95 92 9b e0 23 8e 88 72 d8 89 de f0 30 4c 87 19 ff 00 2f b2 8d b0 52 9a 68 85 6c Data Ascii: @4N$W;=@7q$Dwvv+b_k{z:9S.f;i=}k3+2~otb/3si(=s\uUF3J<+4p_WGT8T\%iJ6;)h=Jc[j{U]oz{1hZuUH:`vh#r0L/Rhl
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: 3c 1e 80 11 df 9f ef 52 23 4c e9 29 65 a9 81 86 48 aa 9f 03 22 12 36 66 97 c6 4b cb b3 87 6d 70 ce d3 8e 79 38 2b 38 b5 f3 ee 10 4d 23 a3 70 70 2c f2 4b 23 87 1c b7 39 3e 91 ec 33 d4 9f 75 85 43 53 3d 13 67 f8 7b 89 c4 ec 02 61 0c 66 42 ee 73 b4 92 3a 8c 1e 8b 2e 97 cc 9a ac 3a ac 12 f2 df 5c b5 d5 bb 1a 46 06 0b 80 c1 77 b6 32 55 5d 31 9f 29 86 16 7c 3b 69 c3 8b 1a e7 4b 24 78 78 3d da 77 76 ef 9c 2b 8e 99 80 b2 2b 80 9e b3 a7 97 1e fd 91 96 91 c6 38 24 f5 cf 41 d3 2b 2e de d8 2b 26 c8 6c 71 b0 b9 d1 3a 3a 77 38 90 0f 76 e7 a8 e7 a1 71 58 90 b0 c7 4e 63 63 8b 77 34 8c 01 b7 6b 9b c0 23 bf 3c e4 13 dd 0d 2e 35 bf 03 10 64 f3 d1 51 b5 ed 38 6c 51 b2 a6 5c 67 3b 4f 61 f9 e1 5f 63 64 ab 1e 65 3c 37 5a a8 d8 1c 7f da 67 11 44 5b ef f4 1d 72 07 65 8c cf 32 36 Data Ascii: <R#L)eH"6fKmpy8+8M#pp,K#9>3uCS=g{afBs:.:\Fw2U]1)\|;iK$xx=wv++8$A+.+&lq::w8vqXNccw4k#<.5dQ8lQ\g;Oa_cde<7ZgD[re26
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: 1c fa 6a df 72 2f 66 f8 7c e8 ed 56 56 b2 9e 68 77 f2 f8 e5 69 cb 37 1f a8 04 13 f5 0b 5f af d4 34 b4 3a 82 6a 0a 6b 55 96 c0 69 bf 71 51 59 74 93 e3 aa a2 73 41 6e d6 bf 92 e2 dc 8f 90 80 07 1c e1 60 d9 6f 77 dd 53 a9 9a 2a eb ee 7a 85 94 50 99 dd 05 3b 8d 14 72 ed 27 6b 5c ff 00 49 d8 39 fe d1 07 e8 b3 15 99 8f a3 2e fd e1 fb 24 d3 75 34 f0 54 4d 15 b2 9a 78 a3 8e 82 d1 53 3b 5e fa 51 18 77 98 c6 c8 0e 25 ce 77 93 d4 71 d5 75 e8 de 1d 82 de 85 7c bf e1 fd 5d c2 a6 7b 6d c2 f5 55 04 42 df 45 5e 5b 11 ab 6c 92 53 97 61 ac de d1 d1 81 80 86 f3 93 c6 4e 3a fd 07 a3 ae 0f ad b5 c5 f1 32 b6 4a a6 b4 19 08 68 03 24 02 7a 12 38 cf 62 a6 0b 72 64 9a fa ac 36 14 44 5e f8 68 44 45 41 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 Data Ascii: jr/f\|VVhwi7_4:jkUiqQYtsAn`owS*zP;r'k\I9.$u4TMxS;^Qw%wqu\|]{mUBE^[lSaN:2Jh$z8brd6D^hDEA
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: b4 38 30 96 b0 c9 26 1d ee 39 dc 38 e8 82 52 3d 8d 7c 63 9a 83 b0 c4 e6 3f 21 a1 a4 63 a8 27 a7 5f a6 39 58 b5 10 37 63 a5 7d 33 43 58 d0 e1 e6 c9 bb 3e c0 03 cf 4e bc 64 2b 9e 71 ae 7b 4e f9 9f 23 83 b1 b2 30 c8 9d ef 86 93 81 80 0f 04 61 51 e7 ee f5 be 36 d4 38 b8 3d d2 b1 c0 e7 9c 91 9e 00 e7 1d 47 62 4e 7b 11 99 57 41 71 b6 db 2d 55 ef ab a7 8e 9a b4 48 fa 39 58 f6 39 cf 2c 3e ad c0 0c b4 07 70 09 c1 38 e1 47 49 f0 45 ad 02 92 ba b1 f8 05 cf ab a9 0d 6e 31 c9 d8 d1 93 8c 1e 49 e9 95 9d 35 7b 9e 4b 65 95 cf 92 20 63 6b 9a e2 ec 34 1c 8c 10 38 1c 9c ff 00 72 f6 96 a2 86 6a f6 1a a6 d4 79 20 e2 69 a1 8d af 95 a4 e0 e7 0e 38 2e 23 a9 cf 55 37 ea 28 74 ce 86 36 37 e2 6d 54 31 bf 87 0b 7c 06 67 8c 74 0e ed 9e fc 15 28 68 dd 24 47 e2 2d d7 29 18 c6 b4 39 d7 Data Ascii: 80&98R=\|c?!c'_9X7c}3CX>Nd+q{N#0aQ68=GbN{WAq-UH9X9,>p8GIEn1I5{Ke ck48rjy i8.#U7(t67mT1\|gt(h$G-)9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.5	50060	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:36 UTC	941	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451977&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:36 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:57:36 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.5	50057	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:36 UTC	904	OUT	GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451980&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:36 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:36 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.5	50058	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:36 UTC	941	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451980&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:36 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:57:36 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.5	50056	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:36 UTC	904	OUT	GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451982&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:36 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:36 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.5	50055	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:36 UTC	392	OUT	GET /uploader/c77099a56e06f49a357d51fc42f38086ac36cac1.jpg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:36 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:36 GMT Content-Type: image/jpeg Content-Length: 50048 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="22106935d8aaf5e558feceb5362d18a536b12466_221" Content-MD5: uBpCTToPpTnk5fy4XhxIuA== ETag: "B81A424D3A0FA539E4E5FCB85E1C48B8" Last-Modified: Mon, 23 Oct 2023 02:04:38 GMT x-oss-hash-crc64ecma: 6355597395792919344 x-oss-object-type: Normal x-oss-request-id: 66511B5E90AF513931B137F2 x-oss-server-time: 108 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:36 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2bb2fcbf7f0-BNA
2024-05-24 22:57:36 UTC	668	IN	Data Raw: ff d8 ff e1 00 2c 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 3c 01 02 00 09 00 00 00 1a 00 00 00 00 00 00 00 69 6d 61 67 65 72 79 34 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 02 f6 02 f6 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 08 01 09 ff c4 00 53 10 00 01 03 03 02 03 06 03 04 08 02 06 08 03 Data Ascii: ,ExifII<imagery4C%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("S
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 Data Ascii: "" """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ "
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 Data Ascii: """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """ """
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: 47 25 ea ff 00 5e c7 c4 65 ee e3 85 8f c9 9c fa 0e 42 31 d7 1c f6 5a 84 b8 ee 83 da d0 1a f7 64 80 3c 2d 1d 71 d7 19 e4 a3 b2 46 c6 d6 31 80 32 38 f6 6b 89 cb 40 e8 47 a9 ce 0f 45 43 dc 5f 33 58 72 e6 e9 05 af 3e 2c 7b 0e 8b 24 48 95 c1 ce 7e 1c 5a e7 bb 41 1b 1c ed cc 7d 02 ae 39 b1 81 b3 01 f1 39 da b7 00 8d f1 ea a1 bc e1 80 e8 1a 5c 01 0e 07 c4 40 e6 31 ea be 42 64 23 21 8d 05 c4 e9 69 19 fa 94 1e ea ec d2 ed 25 ef 81 6c b5 f3 bc 3e a2 5a 76 89 5d e6 f0 30 7f 30 56 ce bc f7 fa 33 f1 93 5a d9 b8 56 be 50 1d 93 3d 0b 8e da 9a 77 73 07 ff 00 57 cc af 41 87 65 44 7d 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 Data Ascii: G%^eB1Zd<-qF128k@GEC_3Xr>,{$H~ZA}99\@1Bd#!i%l>Zv]00V3ZVP=wsWAeD}DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: 2a 6b a6 11 c1 1c 95 12 1d bb b8 db 91 8f e7 f3 5b 55 8f 81 eb 6b d9 aa ba 47 41 18 ff 00 26 31 97 05 e8 bb 17 64 91 d3 b6 23 5b 24 50 47 9f f0 a1 6e 3e bd 57 44 b5 f0 bd 9a dd 10 6d 2d 14 40 01 8d 4e 1a b2 7c f2 83 cd 1c 3b d9 3d 2c d3 35 a6 92 79 de 48 c3 9e 48 01 74 da 2e c4 b8 6d f1 81 70 89 a3 50 f1 b6 11 8c fc fc d7 5c ee e2 85 bf 76 c6 b5 b8 e8 30 a0 56 4e d8 ce 1c 08 cf 98 41 c5 78 af f4 72 a6 7c 66 ab 81 ef 12 53 cc c0 4b 69 6a ce 01 3e 41 e3 fa ae 31 77 fd 6b 61 b8 3a c7 c6 f6 c7 b5 ec 3c a6 6e 4e 31 b9 63 ba 8f 50 bd 93 1d c8 b1 fa bc 47 03 62 79 e3 df fa 2a 78 a3 87 ac fc 6f 64 75 07 11 db fb f8 08 c4 55 01 b8 92 13 fb 4d 77 31 ed b8 49 57 85 2f 76 01 4f 03 6b 2d ae 75 45 0b b9 e0 65 f1 7a 3b d3 d5 7c b0 57 4c 1b 25 3c 6e 70 f0 6a 63 9b ce 39 Data Ascii: k[UkGA&1d#[$PGn>WDm-@N\|;=,5yHHt.mpP\v0VNAxr\|fSKij>A1wka:<nN1cPGbyxoduUMw1IW/vOk-uEez;\|WL%<npjc9
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: 1a 64 3e 67 1d 50 61 dd 4f dd 4e d3 8d 4c 63 f7 07 ae 36 0b 24 27 99 cf 07 53 80 1c b1 d0 2a aa 19 a9 a4 9d b0 72 af 88 c1 68 db a2 0f b2 7d 9e b6 96 6a 5a e8 22 96 9e a1 85 93 44 e6 e5 8f 69 18 d2 42 f3 07 6b fd 90 57 f0 6c b2 5f f8 44 cb 35 8f 58 73 e2 66 5d 2d 21 f9 6e e6 7a f4 5e 9e d2 5b f0 ec af c2 e2 dc b0 e1 d1 b8 16 b9 ae 19 0e 07 a1 1d 42 8a f0 f5 ba e1 0d ce b6 9a e1 09 65 17 10 51 3d 93 c7 2b 0e 04 ae 69 07 71 d7 24 2f d0 0b 65 5c 75 b4 14 d5 51 3d af 64 d1 b5 e0 b7 91 c8 5e 60 ed 8f b1 52 c3 37 11 70 33 4b 0b 41 9a a2 dc 0e 08 cf 39 21 f3 f5 6a c2 76 39 db 45 cb 87 e4 8a d3 78 26 a6 99 af d1 dd bb 62 d0 39 e9 3e 7e 8a 0f 62 a2 c5 70 ed fa df c4 36 d8 ab 6d 93 b6 58 9e 37 1f 89 87 c9 c3 98 3e eb 29 91 e6 88 fa 88 88 08 88 80 88 88 08 88 80 88 Data Ascii: d>gPaONLc6$'S*rh}jZ"DiBkWl_D5Xsf]-!nz^[BeQ=+iq$/e\uQ=d^`R7p3KA9!jv9Ex&b9>~bp6mX7>)
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: de 44 0d 82 9a 07 0c aa 1e d0 e0 33 ab 6d 9a e1 90 41 f2 07 9e 3d 39 2a b9 f9 fb f3 2a 86 cc d1 a0 bd da 0b 8e 98 dd ab 2d 77 b3 ba 7b 15 45 97 37 62 0f 2e 84 74 f7 54 38 63 1c 80 e5 9c ec a6 16 68 71 0f 05 b8 df 7e 9f d0 aa 5d 0b 4e 70 e6 b7 3c c1 f8 4a a2 2b d8 34 9e 79 c2 ae 2d e3 6e eb e4 8c d2 40 63 f7 fd 87 ff 00 42 a2 d3 cf bb 98 f1 87 34 ee 0a 82 59 f5 21 19 92 70 03 be 41 58 73 f2 32 3e 1e b8 5e 6f ed d7 88 fb 41 e1 fe 33 96 4a 59 aa e9 2c 51 16 be 92 68 22 26 17 34 f5 7b bc f3 d1 41 e9 d8 5e 5a ef 0e c7 63 80 79 79 7b 2e 21 db 4f 62 d1 de be d3 7e e1 26 b6 2b 8b bc 75 14 59 f0 ca 46 fa 99 e4 7d 3a ad db b2 fb ad e6 e7 c1 f4 35 d7 b6 64 4a d0 60 99 c3 4b a6 6f 57 69 3b b7 7c e3 cc 2d d6 19 8e 41 6e ca 90 f1 57 06 71 bd eb 83 2f 4d 63 27 9e 8e 78 Data Ascii: D3mA=9**-w{E7b.tT8chq~]Np<J+4y-n@cB4Y!pAXs2>^oA3JY,Qh"&4{A^Zcyy{.!Ob~&+uYF}:5dJ`KoWi;\|-AnWq/Mc'x
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: ff 00 47 1e 03 9e f9 c6 26 e5 73 63 45 a2 da e1 2b e2 23 21 f3 fe 16 7a 81 f1 63 d0 2f 5c c2 d3 2b 98 f9 a3 68 90 1c f2 e5 bf f2 c2 c0 f0 4f 07 5a f8 3a c2 db 3d 99 95 0c a6 d6 67 7c b3 bf 54 92 bc f3 2e 70 eb c8 2d 8c 3b 49 6e a2 30 3a 9f 24 1e 1b e3 c7 b6 1e 31 bf bd ae 0d d5 5d 2e 4b ce 18 df 11 c7 3e aa d7 08 36 3a de 31 b1 52 b3 c5 ae be 23 bc 9a b1 e3 df 1f 45 1b b5 c8 ea 28 3b 42 e2 1a 49 99 23 5f 1d 5b a5 6f 78 72 5c d7 6e d3 ed 8c ad 9b f4 71 b0 d4 de fb 48 a6 ad 74 64 51 da b3 51 34 9a 76 2f 23 0d 6f a1 df 38 41 ec 39 d8 c7 bd f9 1c 9d b6 db ed c9 52 40 07 70 1a e7 6f b7 32 ae 01 96 e4 f3 d8 fc fa a8 f5 18 cb b5 74 e7 93 8c 7b 9f c2 a8 8b 72 a5 8e b6 86 4a 69 40 2c 90 60 e1 79 df b4 be ca ae 97 aa 96 bf 87 e9 a3 7d c2 13 81 a8 86 f7 cc f2 24 ed Data Ascii: G&scE+#!zc/\+hOZ:=g\|T.p-;In0:$1].K>6:1R#E(;BI#_[oxr\nqHtdQQ4v/#o8A9R@po2t{rJi@,`y}$
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: d6 e1 c9 d2 1d 47 e8 a3 55 dc a6 7b 48 6b ce 07 e1 6e c0 7d 13 42 eb a9 9e 35 3a b6 ad 91 83 b0 8d 87 53 80 50 df 35 ba 9d e5 d1 42 6a 25 c6 cf 9d db 7d 16 32 b2 b1 ac 39 91 f8 df 9e 7f aa d2 78 ab 8e ed 36 18 9c 2b 2a 40 7e 36 8c 6e e3 f2 4e c3 7d ac bc cc 63 c6 be ed 9d 03 46 80 b5 8b c5 fe 8e 82 39 1f 59 52 d6 e9 1a 89 2e c9 c2 e0 bc 49 db 0d ce a6 62 2c ed 6d 3c 4d ce 1e f6 e4 ae 6f 72 ba d5 5c aa 1d 3d 65 4c b3 48 e3 9c b9 c7 6f 97 25 3a 96 1d c7 88 bb 63 a1 84 ba 2b 54 4f a9 78 38 d6 ed 9a b4 da be 3b bb de cb 9a fa c3 04 44 7c 10 ed b7 ba e6 5a 8f 2c 6c 3c 96 5f 85 ad d7 0b b5 ea 1a 5b 50 02 70 0b cb de 74 b6 26 8e 6e 71 e4 00 53 6a d8 2a a9 db 74 a1 96 00 e2 2b 60 69 9e 09 81 c1 90 0e 60 9f 35 e8 1f d1 af b5 2a 53 c3 df aa b8 8e b0 53 49 0b 83 62 Data Ascii: GU{Hkn}B5:SP5Bj%}29x6+@~6nN}cF9YR.Ib,m<Mor\=eLHo%:c+TOx8;D\|Z,l<_[Ppt&nqSjt+`i`5*SSIb
2024-05-24 22:57:36 UTC	1369	IN	Data Raw: b6 07 46 a6 b8 f9 6e a3 7e af 6c 65 df 64 ef 1a c7 78 a4 a3 d5 aa 17 1f 36 67 76 3b c8 8e aa 25 14 b2 d3 54 b6 94 52 d4 40 fc 17 1a 19 4e a0 ff 00 de 86 5e 44 7e e9 52 e9 2a 23 94 ba 28 f5 c3 3b 72 e7 41 33 4b 5f ff 00 3e c8 2c d3 4c 23 99 9f 7f 34 ba 5b ac d2 54 00 c9 f1 fb b9 c0 78 53 21 a8 6c cd 76 89 43 a2 c6 a9 5d 23 f2 e1 fb b8 db 1f 3c 2f b3 36 2a bf ba a9 85 93 07 10 f0 d9 0e 0c 78 1b 10 ee 9b f5 05 44 aa a3 ee e4 6b 9b 4c fa b6 87 61 b3 d3 b8 32 a5 83 e7 b3 80 f6 41 26 a6 9a 2a de ee 56 ba 58 a7 c6 23 92 27 fd f3 47 99 1c 88 f4 2a 00 82 ae 0d 22 e1 33 2b 1b 9c 0a b8 22 d2 f6 1e 81 ed eb ea 42 b9 15 63 bb 99 24 d3 34 a1 ae d2 e9 a3 88 b5 cc 6f 93 d9 cd a7 d4 6c a7 d2 d5 07 b0 4b 07 89 bf 0c 6d 67 9f ed 39 06 3d a1 ba 4c 91 3d 93 c3 c8 bd 8e dc 7b Data Ascii: Fn~ledx6gv;%TR@N^D~R#(;rA3K_>,L#4[TxS!lvC]#</6xDkLa2A&VX#'G"3+"Bc$4olKmg9=L={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.5	50059	157.240.252.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:36 UTC	941	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dasics&rl=&if=false&ts=1716591451982&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591448615&coo=false&dpo=&eid=bmsfuu9808bPageView1716591444994&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:36 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:57:36 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.5	50062	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:38 UTC	910	OUT	GET /products?handler=lego HTTP/1.1 Host: www.cravob.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:38 UTC	302	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:38 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:38 UTC	16082	IN	Data Raw: 31 66 66 34 38 0d 0a 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 67 65 6e 65 72 61 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 41 6d 61 7a 6f 6e 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c Data Ascii: 1ff48 <!DOCTYPE html><html lang="en" class="general"><head> <meta charset="UTF-8"> <meta name="keywords" content="Amazon"> <titl
2024-05-24 22:57:38 UTC	16384	IN	Data Raw: 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 61 72 64 6f 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 73 68 6f 70 79 6d 6e 2e 63 6f 6d 2f 6c 69 71 75 69 64 2f 62 75 79 65 72 2f 70 75 62 6c 69 63 2f 63 73 73 2f 66 6f 6e 74 2f 43 61 72 64 6f 2d 42 6f 6c 64 2e 74 74 66 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 76 65 6e 69 72 4e 65 78 74 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 73 68 6f 70 79 6d 6e 2e 63 6f 6d 2f 6c 69 71 75 69 64 2f 62 75 79 65 72 2f 70 75 62 6c 69 63 2f 63 73 73 2f 66 6f 6e 74 2f 41 76 65 6e 69 72 4e 65 78 74 2d 52 65 67 75 6c 61 72 2e 74 74 66 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: font-family:Cardo;src:url(https://fonts.shopymn.com/liquid/buyer/public/css/font/Cardo-Bold.ttf);font-weight:700}@font-face{font-family:AvenirNext;src:url(https://fonts.shopymn.com/liquid/buyer/public/css/font/AvenirNext-Regular.ttf)}@font-face{font-famil
2024-05-24 22:57:38 UTC	16384	IN	Data Raw: 33 2c 2e 31 29 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 36 36 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 6d 79 2d 6f 72 64 65 72 73 2d 63 6f 6e 74 65 6e 74 20 2e 6f 72 64 65 72 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 2e 74 61 62 6c 65 2d 62 6f 64 79 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 72 65 63 65 6e 74 6c 79 2d 6f 72 64 65 72 73 2d 62 6f 78 20 2e 6f 72 64 65 72 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 2e 74 61 62 6c 65 2d 62 6f 64 79 7b 6d 61 78 2d 68 65 69 67 68 74 3a 36 30 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 7d 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 6d 79 Data Ascii: 3,.1);border:none;color:#666;border-radius:4px}.account-main .my-orders-content .order-box-content .table-content.table-body,.account-main .recently-orders-box .order-box-content .table-content.table-body{max-height:600px;overflow-y:auto}.account-main .my
2024-05-24 22:57:39 UTC	16384	IN	Data Raw: 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 77 69 64 74 68 3a 32 36 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 70 78 20 38 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 32 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 61 63 63 6f 75 6e 74 2d 73 65 63 75 72 69 74 79 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 75 72 69 74 79 2d 65 6d 61 69 6c 20 2e 73 65 63 75 72 69 74 79 2d 62 6f 78 20 2e 73 65 63 75 72 69 74 79 2d 69 6e 70 75 74 2d 62 6f 78 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 3a 68 6f 76 65 72 2c 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 Data Ascii: -radius:4px;border:1px solid #ccc;width:264px;padding:1px 8px;box-sizing:content-box;margin-right:12px;cursor:pointer}.account-main .account-security-content .security-email .security-box .security-input-box input:not([type=checkbox]):hover,.account-main
2024-05-24 22:57:39 UTC	16384	IN	Data Raw: 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 33 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 70 61 67 65 2d 62 6f 78 20 2e 72 65 63 6f 72 64 73 7b 63 6f 6c 6f 72 3a 23 36 36 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 73 65 63 74 69 6f 6e 2d 68 65 61 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 6e 20 2e 73 65 63 74 69 6f 6e 2d 68 65 61 64 65 72 20 2e 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 2e 61 63 63 6f 75 6e 74 2d 6d 61 69 Data Ascii: olor:#fff;background-color:#333;border-radius:4px;cursor:pointer}.account-main .page-box .records{color:#666;font-size:14px}.account-main .section-header{position:relative;margin-bottom:20px}.account-main .section-header .title{font-size:18px}.account-mai
2024-05-24 22:57:39 UTC	16384	IN	Data Raw: 63 6f 6e 2d 69 6d 67 2d 6d 6f 62 69 6c 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 6d 79 2d 61 63 63 6f 75 6e 74 2d 6d 6f 62 69 6c 65 20 2e 72 65 63 65 6e 74 2d 6f 72 64 65 72 73 2d 6d 6f 62 69 6c 65 20 2e 69 63 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 6d 6f 62 69 6c 65 20 2e 69 63 6f 6e 2d 62 6f 78 2d 6d 6f 62 69 6c 65 20 2e 69 63 6f 6e 2d 69 6d 67 2d 6d 6f 62 69 6c 65 20 2e 69 63 6f 6e 66 6f 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 7d 2e 6d 79 2d 61 63 63 6f 75 6e 74 2d 6d 6f 62 69 6c 65 20 2e 72 65 63 Data Ascii: con-img-mobile{display:flex;flex-direction:column;justify-content:center;align-items:center;margin-bottom:10px}.my-account-mobile .recent-orders-mobile .icon-content-mobile .icon-box-mobile .icon-img-mobile .iconfont{font-size:32px}.my-account-mobile .rec
2024-05-24 22:57:39 UTC	16384	IN	Data Raw: 78 20 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 2e 63 61 72 74 2d 63 6f 75 70 6f 6e 2d 6d 61 69 6e 20 2e 63 61 72 74 2d 63 6f 75 70 6f 6e 2d 69 74 65 6d 3e 73 70 61 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 63 61 72 74 2d 63 6f 75 70 6f 6e 2d 6d 61 69 6e 20 2e 63 61 72 74 2d 63 6f 75 70 6f 6e 2d 69 74 65 6d 3e 73 70 61 6e 3a 3a 62 65 66 6f 72 65 7b 6d 61 72 67 69 6e 2d Data Ascii: x 10px;padding-right:30px;position:relative;vertical-align:top;display:inline-block;margin-top:10px}.cart-coupon-main .cart-coupon-item>span{display:inline-block;vertical-align:middle;font-size:14px}.cart-coupon-main .cart-coupon-item>span::before{margin-
2024-05-24 22:57:39 UTC	16384	IN	Data Raw: 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 74 6f 6f 6c 5f 74 69 70 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 0a 2e 63 6f 6c 6f 72 50 69 65 63 65 4c 69 73 74 20 2e 70 72 6f 64 75 63 74 2d 74 79 70 65 73 2d 69 74 65 6d 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 63 6f 6c 6f 72 50 69 65 63 65 4c 69 73 74 20 2e 70 72 6f 64 75 63 74 2d 74 79 70 65 73 2d 69 74 65 6d 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 6e 6f 6e 65 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 63 6f 6c 6f 72 50 69 65 63 65 4c 69 73 74 20 2e 63 6f 6c 6f 72 50 69 63 65 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a Data Ascii: media screen and (max-width:768px){.tool_tip{display:none}}.colorPieceList .product-types-item::before{border:none}.colorPieceList .product-types-item::after{content:none;pointer-events:none;position:none}.colorPieceList .colorPice-content{margin-bottom:
2024-05-24 22:57:39 UTC	16384	IN	Data Raw: 74 65 72 7d 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 63 6f 6e 74 65 6e 74 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 6d 6f 64 61 6c 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 68 65 61 64 65 72 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 63 6c 6f 73 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 2e 63 75 0d 0a 66 66 66 38 0d 0a 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 63 6f 6e 74 65 6e 74 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 6d 6f 64 61 6c 20 2e 63 75 73 74 6f 6d 69 7a 65 2d 70 72 6f 64 75 63 74 2d 62 6f 64 79 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 35 30 70 78 29 3b 73 63 72 6f 6c 6c Data Ascii: ter}.customize-product-content .customize-product-modal .customize-product-header .customize-product-close{font-size:18px}.cufff8stomize-product-content .customize-product-modal .customize-product-body{overflow-y:scroll;height:calc(100% - 50px);scroll
2024-05-24 22:57:39 UTC	16384	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 65 36 62 63 22 7d 2e 69 63 6f 6e 2d 49 6d 70 75 6c 73 65 6d 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 62 64 22 7d 2e 69 63 6f 6e 2d 6c 75 6e 61 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 63 31 22 7d 2e 69 63 6f 6e 2d 4d 6f 64 75 6c 61 72 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 63 32 22 7d 2e 69 63 6f 6e 2d 6c 75 6e 61 6d 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 63 33 22 7d 2e 69 63 6f 6e 2d 73 70 6c 69 74 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 63 35 22 7d 2e 69 63 6f 6e 2d 53 70 6c 69 74 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 63 36 22 7d 2e 69 63 6f 6e 2d Data Ascii: ontent:"\e6bc"}.icon-Impulsemy:before{content:"\e6bd"}.icon-lunacart:before{content:"\e6c1"}.icon-Modularcart:before{content:"\e6c2"}.icon-lunamy:before{content:"\e6c3"}.icon-splitsearch:before{content:"\e6c5"}.icon-Splitcart:before{content:"\e6c6"}.icon-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.5	50063	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:42 UTC	619	OUT	GET /wp-includes/img/pro-shipping-protection.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:42 UTC	178	IN	HTTP/1.1 403 Forbidden Date: Fri, 24 May 2024 22:57:42 GMT Content-Type: text/html Content-Length: 131 Connection: close Server: cloudflare CF-RAY: 8890e2e0facdf7ec-BNA
2024-05-24 22:57:42 UTC	131	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 70 6c 65 61 73 65 20 64 6f 6e 27 74 20 6d 65 73 73 20 61 72 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <meta charset="UTF-8"> <title>please don't mess around</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.5	50064	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:43 UTC	719	OUT	GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "CAE408692E9DF180175752E8BC159AD1" If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
2024-05-24 22:57:43 UTC	542	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:43 GMT Connection: close x-oss-request-id: 6650748AF488A53436FC7D32 ETag: "CAE408692E9DF180175752E8BC159AD1" Last-Modified: Tue, 31 Oct 2023 09:59:39 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3292476528251743927 x-oss-storage-class: Standard Content-MD5: yuQIaS6d8YAXV1LovBWa0Q== x-oss-server-time: 38 CF-Cache-Status: HIT Age: 42717 Expires: Sat, 25 May 2024 02:57:43 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2e47fa6f7f4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.5	50067	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:43 UTC	638	OUT	GET /liquid/buyer/public/js/plug/Swiper.js HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ee8-1e6ff" If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
2024-05-24 22:57:43 UTC	611	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:43 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-1e6ff" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367944 Expires: Sat, 25 May 2024 02:57:43 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2e50c4cf7dc-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.5	50066	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:43 UTC	659	OUT	GET /liquid/buyer/public/js/plug/vendor.min.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66504476-188b7" If-Modified-Since: Fri, 24 May 2024 07:40:38 GMT
2024-05-24 22:57:43 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:43 GMT Connection: close last-modified: Fri, 24 May 2024 07:40:38 GMT vary: Accept-Encoding etag: W/"66504476-188b7" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54165 Expires: Sat, 25 May 2024 02:57:43 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2e50d75f7c4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.5	50068	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:43 UTC	614	OUT	GET /wp-includes/img/shipping-insurance.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:43 UTC	178	IN	HTTP/1.1 403 Forbidden Date: Fri, 24 May 2024 22:57:43 GMT Content-Type: text/html Content-Length: 131 Connection: close Server: cloudflare CF-RAY: 8890e2e52829f7cc-BNA
2024-05-24 22:57:43 UTC	131	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 70 6c 65 61 73 65 20 64 6f 6e 27 74 20 6d 65 73 73 20 61 72 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <meta charset="UTF-8"> <title>please don't mess around</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.5	50070	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:43 UTC	485	OUT	GET /uploader/89557b743d4c86744472d7204813d2ba.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "CAE408692E9DF180175752E8BC159AD1" If-Modified-Since: Tue, 31 Oct 2023 09:59:39 GMT
2024-05-24 22:57:44 UTC	542	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:43 GMT Connection: close x-oss-request-id: 6650748AF488A53436FC7D32 ETag: "CAE408692E9DF180175752E8BC159AD1" Last-Modified: Tue, 31 Oct 2023 09:59:39 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3292476528251743927 x-oss-storage-class: Standard Content-MD5: yuQIaS6d8YAXV1LovBWa0Q== x-oss-server-time: 38 CF-Cache-Status: HIT Age: 42717 Expires: Sat, 25 May 2024 02:57:43 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2e9cf6cf7f4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.5	50069	103.160.204.8	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:43 UTC	618	OUT	GET /uploader/742c6cba7453f3353fdda67f621a72a5.png HTTP/1.1 Host: cdn.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:44 UTC	560	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:44 GMT Content-Type: image/png Content-Length: 5714636 Connection: close x-oss-request-id: 66511B689979C73232D07859 ETag: "5B94723B734D6B15095CB4AB722866EE-6" Last-Modified: Sun, 08 Oct 2023 02:44:04 GMT x-oss-object-type: Multipart x-oss-hash-crc64ecma: 5069630925033496847 x-oss-storage-class: Standard x-oss-server-time: 295 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:44 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2ea09d6f7d4-BNA
2024-05-24 22:57:44 UTC	809	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 00 00 00 06 00 08 06 00 00 00 e2 98 a8 6d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e 7c fd 65 9f 2d c7 91 fd 8f 7a 66 0c e2 23 66 b6 2c cb 16 b3 74 98 9a 99 99 99 99 b9 0f 0b ec f9 fd ef 0b 8e bb be 91 15 7b 67 b7 e4 79 b0 3e 91 54 99 59 59 b0 ab 7b ad 88 fc c3 76 73 9f ed b4 f4 db 56 6b af 6d b6 f4 d8 66 6b 67 42 7b 87 6d 75 c8 76 75 d8 46 67 bb 6c bb 6d 75 77 d8 7a 47 ab 2d 34 d6 d9 62 53 bd a7 d7 3a 9b 1d 1b dd ed b6 d2 d6 62 0b 4d 0d b6 d4 d2 62 ab ed ed b6 d1 d5 25 74 28 4d bb 56 5b 57 3f ab 9d 6d b6 d2 d1 6e eb 5d 3d b6 dd 37 60 9b dd dd 2a d7 38 b2 b4 a7 0d Data Ascii: PNGIHDRmsRGBgAMAapHYsodIDATx^\|e-zf#f,t{gy>TYY{vsVkmfkgB{muvuFglmuwzG-4bS:bMb%t(MV[W?mn]=7`*8
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: bb d6 70 4b eb b0 a6 75 58 a9 aa b3 a5 8a 1a 5b bc 5d ed 76 59 e7 9e 63 b5 a6 c1 d6 74 3f ac 6a 2d 16 2b ab 6c 49 eb b3 a6 39 6f 34 a8 bc ae ce b1 a2 fe 97 34 fe b2 c6 c5 2e 68 1e 0b 9a eb a2 e6 ba 52 7b cb b1 54 7d c3 56 eb 6e db 6a fd 2d 5b 6f ac b0 95 ba eb 8e c5 9a 1f 6d b9 ee 92 ad 36 5c 71 bb 54 73 d9 b1 58 7d c5 16 aa 2e da 42 f5 0f 8e a5 da 8b b6 5c 7b c5 8f 59 ae bd a6 36 57 dd 2e d7 5f b5 85 9a 4b 36 57 25 54 5e b1 b9 ea 9b b6 50 5b 6d 8b 5a ef c5 da 7a 9b d5 f3 3b af e7 16 90 9e 51 5d 42 95 63 56 d7 0d 90 9e d6 75 c3 ce 6b fd 79 07 2e e8 be 5b d4 fb 6e 41 f7 ef 5c 7d 8d 63 51 cf e5 42 7d 85 cd e8 7c a6 75 7e f3 0d d5 de 96 fe e7 74 bf ce 68 8c 59 ac fa 00 b3 ba 9f a7 35 17 ca e7 d5 df 9c 9e db 79 3d ff 1c c3 b8 53 ba 96 f4 b1 d4 58 e5 fd 82 79 Data Ascii: pKuX[]vYct?j-+lI9o44.hR{T}Vnj-[om6\qTsX}.B\{Y6W._K6W%T^P[mZz;Q]BcVuky.[nA\}cQB}\|u~thY5y=SXy
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 50 7f 8b 3a 9e 79 31 9f f9 31 5d 97 f1 01 6f 3b a3 7b 63 5a f7 22 63 32 a7 98 a7 cf 6f 52 ed d5 3f eb 35 a9 67 66 72 b0 c5 af df ec 48 ba 76 33 c3 7a a6 46 f5 ac 8e eb 79 12 e6 c6 55 3e aa e7 4d 76 61 52 6b 38 a5 39 4e aa fd 78 7b 01 5d 43 cd 7f 4a e7 39 ad f3 9c d4 da 86 f5 b4 e6 31 a9 fb 10 a4 39 f5 39 e6 c7 06 d5 ff 90 5b 30 ab 67 6e 46 cf dc ec 50 c2 fc 88 9e c7 f1 41 9b d3 33 30 3b a4 f3 19 d0 fc 55 c6 b9 4d e8 bd 82 e5 9c a7 f4 8c 83 e9 11 ce 59 d7 a5 e8 9f 75 a6 7c 5c e7 3d c9 f5 9a 18 b2 69 3d 57 33 ba 36 b3 ba 2f 26 59 17 d9 29 ad 9f 43 cf 22 98 64 ee c2 94 ee d5 19 e5 a7 27 b8 86 9a fb 68 bb 63 4a ef 2c cf d3 46 e7 5c c2 78 87 83 f6 29 ad 67 62 b4 55 ed b5 a6 b2 b3 63 ac a5 d6 ab 58 e7 79 bd ff 96 d4 0f ef 31 40 7e 41 7d 2f aa ed 82 8e 99 1d d1 Data Ascii: P:y11]o;{cZ"c2oR?5gfrHv3zFyU>MvaRk89Nx{]CJ9199[0gnFPA30;UMYu\|\=i=W36/&Y)C"d'hcJ,F\x)gbUcXy1@~A}/
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 4f e1 54 f3 01 b4 f7 f5 d1 31 0e 95 81 fb 4a 83 7b aa 07 77 0f 75 bc e6 ce bc 1f 9c 68 dc c3 79 bb 7b 30 67 f7 8f 16 0a 3b 6f 0f 4f 74 ae 3a 07 70 ff a4 8c 07 a7 8b 6e ef 1c ce 96 ce 93 b5 3c da d7 39 16 eb 7a 7a bc 62 47 5c 1b c1 d3 c7 ab 76 a0 31 f7 b5 56 8e c3 15 c7 ae d6 f4 f0 78 cd 0e b4 a6 3b 5a db 95 b5 c9 84 95 29 5b 5a 9a b2 e5 e5 69 9b 9d 99 b0 b9 d9 49 9b 9f 9b d1 6f f3 a4 cd cd cc da fc c2 b4 cd cc 4e d8 e4 e4 b8 63 6a 6a a2 84 99 99 29 9b 9d 9b 28 30 66 73 f3 e3 8e 99 d9 51 9b 15 16 16 26 6c 61 7e ca 16 d5 07 98 9f 9b d4 18 e3 8e 39 f5 09 e2 f8 b9 79 8d 27 cc cc 4f d8 f4 9c fa 90 9d 5b 9c b2 f9 55 cd 6b 79 d2 c6 e6 86 6d 62 41 fd ae 68 6e 8b 93 36 ae 36 73 ab 73 36 bd 34 ed 98 5b 9e b1 05 e5 17 64 39 6e 61 71 da 56 96 e7 6c 55 75 eb 4b 33 b6 Data Ascii: OT1J{wuhy{0g;oOt:pn<9zzbG\v1Vx;Z)[ZiIoNcjj)(0fsQ&la~9y'O[UkymbAhn66ss64[d9naqVlUuK3
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 04 40 f8 83 35 3d 30 6b 8c 21 20 34 48 d0 7c d4 17 62 03 00 f1 1f d8 ea 6c 71 f2 3f 04 00 7b 1a 77 af bd 29 91 ff 4e fa b7 3a 0e 34 f6 41 47 87 ed b5 b5 39 c1 5f 22 ff 85 9d d6 0e db 6e 69 b7 ad 66 9d 4f 53 ab 6d 35 35 27 11 40 73 ab 1d b6 77 da 41 9b ea 1b 9b 9d 74 05 07 4d 09 c7 ad ad 76 d4 d2 62 c7 cd 8d 76 d4 d4 60 fb f5 d5 4e f4 3a e9 df 58 ef 42 00 b0 5b 5b ed 65 90 d9 41 fa 93 46 40 c0 b1 d1 f6 48 7d 92 86 e8 3f 6c 22 5f e7 7d 7a be b1 b6 34 ce 6e 43 ad 63 bf 49 c7 35 d6 d9 ae da 82 6d 04 03 8d d5 4e f2 6f eb 58 08 7f b0 db d2 e0 f9 0d f5 05 a8 a7 6c b7 45 eb a4 3e c1 a6 e6 b7 5e ab 63 1a b4 86 8d 2d 4e f4 ef 35 b6 39 b6 eb 10 00 b4 38 e9 0f f9 1f 02 00 27 ff b5 66 47 8d 4a d7 e9 b8 da 46 3b a8 6f d6 5c 39 27 a5 1b 1a 52 ba 5e 6b a3 be 83 fc 27 8d Data Ascii: @5=0k! 4H\|blq?{w)N:4AG9_"nifOSm55'@swAtMvbv`N:XB[[eAF@H}?l"_}z4nCcI5mNoXlE>^c-N598'fGJF;o\9'R^k'
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 93 ef 81 20 f6 83 60 9f 1b e9 70 d2 3d d6 e3 2c d9 9f c8 6e 50 ce 77 96 e0 ed 35 ae 93 e8 ba 96 e4 59 a3 58 af 72 9f e5 74 09 c5 5c 01 c7 73 4c b4 75 f1 80 d6 23 10 44 7a 88 37 82 5c cf 11 f3 00 ac 0f 60 1d e8 d3 e7 1a eb 52 94 07 62 2d e3 fa 97 05 00 67 01 e1 ea 28 d6 26 ad a5 e6 c4 18 ea 1b 52 3f a1 e8 5f c7 e4 a0 3c cd 8f 7a 8d a7 71 20 7e 73 01 00 fd 20 46 70 41 82 e6 1c 63 a4 35 4b eb 0f 41 1d 24 f5 fc 84 e6 51 10 ff b3 63 2d ea 4b ef 39 a5 01 a4 f6 8c da 05 20 82 41 89 28 1e 4b 42 80 20 84 39 77 48 69 e6 c3 f9 06 39 0f e1 3f 37 3a a0 f9 95 05 00 d3 43 e5 f2 d2 f9 e8 39 04 d3 7a 36 23 3d a5 e7 36 88 ed 49 3d e7 b9 08 80 fe 11 58 40 f4 4f 6b 6d 26 74 ee 08 00 48 e7 80 f4 0f 01 00 62 00 48 ff 09 cd b3 8c 4e 1b d7 ba 04 a1 1f a4 3b e7 c4 f9 b9 38 40 b6 Data Ascii: `p=,nPw5YXrt\sLu#Dz7\`Rb-g(&R?_<zq ~s FpAc5KA$Qc-K9 A(KB 9wHi9?7:C9z6#=6I=X@Okm&tHbHN;8@
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: b5 15 a5 11 36 6c ac aa 6c 69 d2 36 54 bf a9 34 d8 51 fd b6 ea 21 fc 77 55 be a7 32 b0 bf 9e 00 b9 0e c9 7e a8 67 6c 7f 63 c2 0e 78 de 84 dd 8d 51 db db 1c 73 d2 1f 82 1f 8b 08 60 6f 73 34 11 fe 5b 88 04 52 39 42 00 04 00 7b eb a3 2e 02 d8 5d 1b 71 4b 19 64 3f 22 80 1c b9 18 00 f2 3f 04 00 88 01 42 00 c0 9c 42 00 e0 22 80 8d 84 78 de 79 a6 79 c6 79 56 20 ff c9 a7 e7 9d 7b 0f c1 0c 6d 78 0f a4 77 0a f7 22 cf 51 59 00 a0 77 91 d2 77 75 af e6 a0 ec 9e ee e1 78 26 79 3e d3 33 ba aa bc ec 9e 9e a3 7d 3d 2f 7b 1b 4e e8 81 47 87 db f6 d3 d1 9e 97 dd db 53 7b cd 27 84 03 41 84 53 86 85 f4 7f 78 b8 5e 22 b5 21 a1 ef ec ea b9 51 bf 88 01 72 72 0f 21 40 89 c4 3e 39 74 32 2f 91 8f 1a 2b 23 30 83 94 4c 44 e6 ae f2 fb f6 50 c7 60 21 f6 11 01 3c 38 de 74 92 1c 0b c9 88 Data Ascii: 6lli6T4Q!wU2~glcxQs`os4[R9B{.]qKd?"?BB"xyyyV {mxw"QYwwux&y>3}=/{NGS{'ASx^"!Qrr!@>9t2/+#0LDP`!<8t
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 01 90 f8 88 01 c2 9b 1f e4 de fd 4b 35 89 e8 47 10 00 f9 4f 79 99 fc 47 38 50 40 3f f2 00 0f f9 a5 5a 88 71 3c e7 f1 56 af f4 48 00 f3 9a 27 36 80 20 20 47 4e f6 07 f9 8f 30 80 ba 19 9d db f9 ba 52 7d 03 9e d8 0d ee b5 3d a7 fb 77 46 f7 ef b4 ee df 29 dd d7 d3 f5 75 b2 d5 8e 49 ad 11 e4 ff b4 e6 34 a3 fb 1e f2 1f 11 c0 74 5d 85 03 01 00 42 00 3c f6 c1 b4 ce 01 f2 1e 2f ee 24 08 d0 1a 15 a4 37 e2 86 39 ad 8b 43 e7 0b f0 fc 87 f0 5f 52 3d f9 10 03 24 f2 ff 76 b1 0e 89 fc 87 8c 0f f2 1d 5b 22 fb 21 b4 0b a2 3e 8e 83 f8 77 f2 bf 20 e5 83 a0 8f fc ac ae b5 8b 0b 98 7f 26 2e 88 31 a2 ff 3c 1d ed 48 e7 c7 a5 76 ba 9f 9a 38 9e 7e d2 78 49 0c 71 5b 65 e4 99 4b 85 ad 20 06 50 3e ce 9b 73 5d 6d a9 76 78 1b 3c fe 1b 75 0f 94 44 01 5a 1b 81 48 00 60 a9 45 63 09 0b cd Data Ascii: K5GOyG8P@?Zq<VH'6 GN0R}=wF)uI4t]B</$79C_R=$v["!>w &.1<Hv8~xIq[eK P>s]mvx<uDZH`Ec
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: f9 03 51 4e fa 02 44 3e e5 85 b7 ff 79 c4 38 e5 b2 32 f9 9f 23 48 7e 6c 80 fc 85 e7 9e 71 84 e7 7e 10 f8 41 f4 e7 e5 90 e3 2f bd f2 a2 e3 c5 97 c9 d3 f6 59 47 a4 b1 90 e9 25 bc f2 bc bd 22 1b 84 7f 78 f6 e7 c8 89 fe 5c 08 10 64 3f 36 da 85 7d 0d cf 7f 88 ff b7 d4 4e c0 6b 3f ca 92 17 bf c6 7c f5 f9 44 ee 0b af be f1 a2 bd f2 7a 9a d3 2b aa 0f e1 02 de fd 9c 0f a4 7e 78 fb bf fb fe 3b f6 f6 bb ef 28 4d d9 9b f6 de 5f df b7 0f 3e fc ab e3 1f ff f8 bb 7d f4 d1 87 8e 8f 3f fe 87 7d fe f9 a7 f6 e9 a7 1f db d7 5f 7d 61 df 7e f3 95 7b ef 03 48 fe 26 fd ad 0b 20 f9 bb f5 f7 00 80 e8 0f 8c f4 77 3b c1 0f b9 8f 27 ff c4 70 af 4d 8d ea b7 6a 62 c8 3d fa 03 10 fc 6b f3 93 b6 ee 44 3f c4 3e 04 ff b4 13 68 07 9b 8b 0e 08 b5 dd b5 39 db 5b 9f 2f 30 9b b0 a1 36 85 f7 79 Data Ascii: QND>y82#H~lq~A/YG%"x\d?6}Nk?\|Dz+~x;(M_>}?}_}a~{H& w;'pMjb=kD?>h9[/06y
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: c9 2e 9e fd ba c6 08 41 55 7e b2 bf 5d c2 9d c3 5d fd fe 12 b1 60 cf 0e 11 8b aa 9e 76 07 db ab ca 6f d8 f1 de 96 ca 76 54 b6 a5 ef 2d d5 ed 28 9d e1 70 7b db cb c1 de d6 a6 7e 57 74 ec 8e ca b6 77 6c 63 65 55 ef ff 4d 7d 3b af b9 3d dc dd d3 bb 63 2b 61 63 c7 d6 97 36 54 be 6d 3b 5b bb fa bd da d2 6f df b2 7e c3 56 6d 6a 66 52 bf a1 d3 36 bd 38 6f 33 4b 0b 36 39 3f 6f 43 13 13 f6 87 cd ce 1e 5b 6f c7 13 bf d3 ed 46 07 b6 c3 f0 e2 4f 9e fc ad 4e ee ef 74 b7 39 76 7b da 6d af b7 c3 2d 79 c8 79 48 fa c8 43 de 43 e4 e7 36 4f 43 f0 6f aa 5f 48 ff dd ee 2e 27 fe 77 bb 3b cb f5 ad 8d 25 82 7f ab bd d9 71 36 4f 5a 73 e8 d0 78 6d ad b2 09 bb ed 9a 5b 81 ed d6 16 db 86 f0 6f 53 3b c2 fd 43 f2 37 69 fe 84 bb 6f eb b2 83 f6 6e db d7 39 3a e1 5f 58 04 00 21 12 88 88 Data Ascii: .AU~]]`vovT-(p{~WtwlceUM};=c+ac6Tm;[o~VmjfR68o3K69?oC[oFONt9v{m-yyHCC6OCo_H.'w;%q6OZsxm[oS;C7ion9:_X!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.5	50071	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:44 UTC	652	OUT	GET /liquid/buyer/public/js/lib/event.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66504480-1714" If-Modified-Since: Fri, 24 May 2024 07:40:48 GMT
2024-05-24 22:57:44 UTC	609	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:44 GMT Connection: close last-modified: Fri, 24 May 2024 07:40:48 GMT vary: Accept-Encoding etag: W/"66504480-1714" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54166 Expires: Sat, 25 May 2024 02:57:44 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2ebfad6f7c8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.5	50076	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:44 UTC	466	OUT	GET /uploader/cc9848adf3ffcc99024436d9b23c022632da987e.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=392441-392441 If-Range: "4EC9AF0735BF453A0F4ED6D93EEB0CE7"
2024-05-24 22:57:44 UTC	714	IN	HTTP/1.1 206 Partial Content Date: Fri, 24 May 2024 22:57:44 GMT Content-Type: image/png Content-Length: 1 Connection: close x-oss-request-id: 665076C391795F303908A586 ETag: "4EC9AF0735BF453A0F4ED6D93EEB0CE7" Last-Modified: Wed, 09 Aug 2023 07:26:24 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2204139187792885320 x-oss-storage-class: Standard Content-Disposition: inline; filename="221ce9078c31255d863db04605624e334f585678_221" Content-MD5: TsmvBzW/RToPTtbZPusM5w== x-oss-server-time: 6 CF-Cache-Status: HIT Age: 73 Expires: Sat, 25 May 2024 02:57:44 GMT Cache-Control: public, max-age=14400 Content-Range: bytes 392441-392441/415868 Server: cloudflare CF-RAY: 8890e2ebfa53f7cc-BNA
2024-05-24 22:57:44 UTC	1	IN	Data Raw: be Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.5	50072	104.19.234.103	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:44 UTC	610	OUT	GET /a650298a61e168fecaaa1d14adf1ee63.png HTTP/1.1 Host: img.staticdj.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:44 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:44 GMT Content-Type: image/webp Content-Length: 292594 Connection: close Cache-Control: public, max-age=31557600 Cf-Bgj: imgq:100,h2pri Cf-Polished: origFmt=png, origSize=550193 Content-Disposition: inline; filename="a650298a61e168fecaaa1d14adf1ee63.webp" request-id: 152cfcc3-af86-4ace-b08b-85d10e1b58b4 strict-transport-security: max-age=315360000; includeSubdomains vary: Accept x-content-type-options: nosniff x-download-options: noopen x-powered-by: ASP.NET x-xss-protection: 1; mode=block Last-Modified: Fri, 24 May 2024 12:09:10 GMT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LK7gHf5fnRYJhrJEevLzvSW2ygxuld9rHaUTF9cLFRyuIrMCIvFutBRA6%2BIFv31FN8lqlERFozySPnWQvQrAAVEKzUD6Oy7XZRQ5z4r6t%2FFJh03YGdPFPr3PT6tg2MpHzEs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server-Timing: cfRequestDuration;dur=111.999989 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8890e2ebeec38c17-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 22:57:44 UTC	234	IN	Data Raw: 52 49 46 46 ea 76 04 00 57 45 42 50 56 50 38 4c dd 76 04 00 2f 1f c3 c7 00 8d 48 6c db 48 90 24 58 dd 37 bf 7b f2 e4 1f 70 d7 cc 7d 08 11 fd 9f 80 8c 8e 3f fe 31 61 8e 63 93 df df df df 6a d2 5b bd 93 4b 4d 72 fd 3b 56 92 ad b2 92 a8 2b c9 fe 68 db 44 d4 6f dd 58 35 7b 72 7f 3c 5b b1 2b f6 df 47 ad 02 0a 26 28 36 e2 7b 54 21 89 88 26 a2 80 f8 fd 82 46 15 40 46 cf 0f c9 02 a6 71 5f 6b ad e5 67 eb 92 ec 9d b8 80 bd 35 ca de 71 09 49 c2 a0 66 2d 1b a3 84 2b 0e ce 48 54 27 7a 40 92 54 3c 12 79 00 4f 64 ad f5 f0 78 44 98 78 a9 9d ce e3 9e 7c 38 0f 5f a0 bc 3c 78 fe 0b cf aa ad fa 04 f8 37 93 88 13 4c 3c 35 f6 71 62 58 32 3b 82 79 53 db da 38 a9 24 26 43 da 32 ec 17 55 80 54 8d 6a 25 a2 7a 78 b4 35 Data Ascii: RIFFvWEBPVP8Lv/HlH$X7{p}?1acj[KMr;V+hDoX5{r<[+G&(6{T!&F@Fq_kg5qIf-+HT'z@T<yOdxDx\|8_<x7L<5qbX2;yS8$&C2UTj%zx5
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 9d da 56 c1 b6 aa dc b7 9a 90 30 70 a8 ed 5d 0f 07 e9 c3 89 f1 df 0f 8f ad 6a ab c3 6a 5b 14 9b 1b fd 2a 37 8e 43 29 1f 80 b6 83 f5 b6 6a 7d 09 70 08 78 b4 96 d6 49 13 cf 28 7a 6b ee 17 0b da c1 d6 b6 4e 1d 1e 63 29 a2 02 68 db aa 65 30 da 16 b4 a9 1a a3 c6 17 68 8b 6a 9b 7a 34 8e 75 c8 e1 e4 f4 d7 48 a7 c7 78 02 2b cf ff 81 24 1a 4d a2 79 84 17 19 72 be f9 e3 fa 0f d7 75 5d 03 10 31 77 12 62 ae e3 9b 30 18 8e 15 b3 f7 de 59 49 b6 d3 b5 13 97 d9 3b 89 66 93 60 b2 77 92 af 09 24 a2 d9 10 be 64 43 00 43 82 3a a0 c1 08 89 26 8e 07 04 3c 70 88 3a 10 48 80 48 02 82 12 36 ac b5 f2 d9 57 d6 4a 18 13 b6 7a ec 9d 2c c9 de 71 2d 0d fb ce 91 ad 2b c9 de aa c4 44 17 49 e2 99 5c c1 25 01 59 59 49 d0 24 11 8e c4 f3 80 21 ea 5a 47 11 0e 18 c4 9c 2a 0c 3e 01 c7 f8 ce 41 Data Ascii: V0p]jj[7C)j}pxI(zkNc)he0hjz4uHx+$Myru]1wb0YI;f`w$dCC:&<p:HH6WJz,q-+DI\%YYI$!ZG>A
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: eb 3b 02 40 0e 1c 45 14 01 f0 e6 70 90 02 00 01 68 c0 83 a1 fc 11 01 70 72 53 44 27 7a 98 88 2f 8a 0e 0e 9c 05 4a 0d e5 cd bb 93 72 e0 06 53 44 30 45 1c 0e a7 41 06 92 52 c3 07 3a d1 03 d2 c9 65 7d 77 f0 c9 c5 a1 46 72 41 52 74 c0 d9 cd 01 52 80 2b 87 8b 93 1a be 38 30 93 4f 2e 2e 34 00 2c 29 05 80 7c c0 da 86 9b c3 01 10 89 99 b9 7d e4 22 00 89 8b 83 94 82 72 8e f8 c1 c5 46 c3 c7 7c 08 a5 14 20 9e 1c 0a 80 cd cd 30 86 9b 07 0f 70 91 94 96 cb e3 32 dc dc 92 82 82 c7 1c b0 52 02 c4 c5 82 52 04 88 78 19 04 ff e3 4f 7e 11 45 ca 9f 0c 03 4b 29 e9 ad 7b 6e 6e 96 22 90 19 0c 58 6b 23 c0 f0 64 b1 bf 4d 29 c0 64 78 a4 08 80 72 71 31 6c 36 45 66 86 c1 01 92 de fb e0 62 48 4a 29 b9 b9 19 2e 66 6f 4f 4e c3 93 91 af 88 00 0f 1e 38 29 01 80 cb 77 0c cb 82 32 9c 63 e6 Data Ascii: ;@EphprSD'z/JrSD0EAR:e}wFrARtR+80O..4,)\|}"rF\| 0p2RRxO~EK){nn"Xk#dM)dxrq1l6EfbHJ).foON8)w2c
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: e3 0e 6c db ec 56 75 ed b5 38 e7 14 43 f0 63 db b6 6a db 96 6c e5 5a fb 5c 9b ae 31 33 33 68 a8 5b 40 48 37 d5 02 c0 9a 59 88 38 08 37 99 c4 cc cc b6 d7 9a bd b5 98 00 6f cc b6 3d bb 25 c7 cd fd 3c ef fb a5 15 77 8e b5 2b e7 aa ae ee 0a 9d 13 d9 cd 4e 6c e6 9c 33 d9 93 87 c3 c9 c3 c9 33 9c 3c 1c 92 c3 d4 cd cc e1 30 35 73 68 76 b3 bb d9 39 57 ce b9 f6 ae 9d e3 ca 6b 7d df f7 be cf 73 ff d8 bb 9a a1 77 ff bf 04 51 00 37 30 12 64 0e 3c 82 55 76 8f ed 69 7b 9a ce e5 40 a3 14 0d 82 b0 42 97 01 a5 e5 bc 14 68 a8 96 b3 cb 41 c6 72 50 98 fa 41 e7 e6 00 6d a0 69 05 60 1c 14 9a 0a 03 57 3b 2f 5a 28 1b 5d 0e 03 af 76 e4 eb ec fe 94 e0 1e e7 cf 49 a1 8c 76 76 39 34 ec d5 ca a4 73 d9 98 31 fc d1 79 8f f3 72 76 b5 e3 2c 87 91 55 ce 1e 42 24 c0 6d 8b 34 3c 74 0e 33 10 Data Ascii: lVu8CcjlZ\133h[@H7Y87o=%<w+Nl33<05shv9Wk}swQ70d<Uvi{@BhArPAmi`W;/Z(]vIvv94s1yrv,UB$m4<t3
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 07 61 23 7c 83 a1 32 c7 41 db 88 0a 88 06 1e 26 47 49 74 a2 59 58 d9 a3 20 ea c4 51 70 04 84 c9 f4 09 a6 fe b0 b2 ca ca 5e 42 44 83 26 32 9c 7d ea 8f 26 32 72 60 22 28 40 44 c0 c6 a4 03 30 cb ac 30 4f 00 2a 19 21 e9 2c fc a3 46 90 12 1c 26 66 00 6a e0 0e 78 92 b4 02 4f 67 15 05 94 1c 1d 1b 32 30 45 c0 31 c2 00 54 e0 10 39 49 a4 89 2b c1 29 20 cc e2 84 51 56 1e 43 74 60 12 21 83 33 cb 49 d0 74 76 66 69 c0 9e 64 db 96 6d 47 92 a4 39 f7 b9 f7 03 10 16 cd cd 3c eb 7f 87 bc 11 79 a6 89 08 33 03 ef de 73 a6 27 49 92 24 d9 b6 2d 89 48 c4 f7 be d5 af a2 98 42 8c 23 20 e6 3f 8e df 8b 3a e2 de 77 ee 59 ae 42 31 01 56 a6 ed 5f 2e c9 a9 ed 9d dd 30 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 43 57 96 79 fb f5 8f 0b f5 17 48 bd 55 23 c3 74 3e 40 38 aa 55 Data Ascii: a#\|2A&GItYX Qp^BD&2}&2r`"(@D00O*!,F&fjxOg20E1T9I+) QVCt`!3ItvfidmG9<y3s'I$-HB# ?:wYB1V_.03333333333333333333CWyHU#t>@8U
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: cb 08 7a 54 88 ba 9d e2 cc 23 56 8a 99 3d 87 9b 79 2e ff c0 5b d0 1b f3 86 5c 7e f4 f2 a3 97 6f a4 8f 42 cd 04 54 23 d6 02 45 f9 c1 c0 08 16 a0 07 04 88 3b 09 0b a0 9c 39 73 86 22 eb cf 9c 39 c9 23 8f 60 40 b1 62 67 cc 8a 51 1f cb d8 a7 01 0c b4 df 3a 88 44 40 2d 2a 3b 77 72 36 ec 91 33 a5 00 97 b9 ac 1f c4 a3 06 c8 a8 1b 56 8c df e1 b6 b7 b6 d5 ad e7 da d1 58 46 d0 37 80 e7 61 00 ca 8b 61 14 0c ac 41 a0 5a 3f 33 01 ba d3 cb 99 72 e6 8c 0a a2 ef 75 b9 17 62 d2 47 8c 42 5f 45 6e cb 9b 2d b1 54 71 c4 63 1c 06 40 31 03 94 11 93 19 05 c3 68 2b 40 40 3f 23 10 68 6a d6 a0 db 89 28 d5 53 4a 79 d5 36 bd f8 5a 20 44 ca 67 e9 83 42 c6 64 9c 8a d3 eb b7 cf 71 c6 f4 be 0b 17 b7 e0 a7 90 80 61 bf 59 4e ec 4c 79 a4 80 d4 ab 6e 92 4d 04 08 00 50 24 5f c7 b2 d7 37 fc 29 Data Ascii: zT#V=y.[\~oBT#E;9s"9#`@bgQ:D@-*;wr63VXF7aaAZ?3rubGB_En-Tqc@1h+@@?#hj(SJy6Z DgBdqaYNLynMP$_7)
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 96 0f a7 d1 18 b5 b7 05 bb 81 f3 ae be c3 39 03 69 b8 2a 9f ce 06 d6 30 70 55 cd e6 ba fb 83 95 8f 01 9f 1d c4 68 01 00 4a d3 72 06 06 66 f4 34 e9 0c 6d bf b2 a4 ff d8 12 7d 38 b9 c5 13 2c ca 60 02 1b 2e 34 92 88 c7 90 2c b6 de 38 e8 79 89 2b cb 4d 5a c5 2a 38 af 3f ef 82 16 8b e3 4f ba 33 2d 00 b6 aa 59 54 12 27 94 72 78 8a a2 20 b4 2c 03 88 40 83 e7 0d c6 20 64 73 d4 55 e7 04 27 87 1d 00 6d 10 02 b0 68 b7 00 8c 6e 4b 60 20 61 5d 9d 38 3d 39 4c 28 50 50 79 71 14 78 64 9b d1 06 95 cd ab 8e 2b 65 28 ae ae d5 43 f3 36 6e b8 2a 41 a4 03 1d 11 eb 65 cc ec 5e 97 1a 00 e1 70 ed 18 87 9f d4 c1 8e 6e f1 71 cf fb 9c 9b 66 36 04 cb 83 0c a0 ee b8 00 0d 2c 0e a3 c2 46 73 a0 e9 7b 0e 10 b8 67 f7 5c 60 1e 59 6f 50 c1 e2 e9 c7 9f 57 46 c1 d1 69 60 c5 aa 23 2b 0e 3f 4c Data Ascii: 9i0pUhJrf4m}8,`.4,8y+MZ8?O3-YT'rx ,@ dsU'mhnK` a]8=9L(PPyqxd+e(C6n*Ae^pnqf6,Fs{g\`YoPWFi`#+?L
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 86 03 81 bc 3f db 37 36 de f4 84 cb fa e1 63 39 6f 1e 60 f1 21 f2 f7 7d 97 71 57 86 ab 23 ec 42 3d 75 3e 50 51 00 c0 6f d1 f1 90 f0 40 59 56 0e 4c b7 0d 1d 2b 42 99 84 c3 61 5e 6f 60 d5 c5 e9 3d 04 f6 30 c6 b1 68 9b 14 54 e0 cc 28 ed 09 01 7f 50 86 cb dd b8 5b 1e df f9 69 5e 15 71 5d 82 20 6c c8 84 6e 0d a5 8d 53 08 49 6e c0 ee 3e d7 75 fc 70 ee 80 ed 56 5b b1 58 3c 46 02 96 75 21 83 ae 0a 80 a0 db 8f 75 6b 8f 1f 68 bd f5 fd 75 06 98 d2 da f2 b8 0d 07 c4 44 c2 bc 31 a6 58 0f 5a b2 c5 ee 48 b5 67 0c a4 9b 39 f7 05 44 a2 10 23 a2 ff 22 fa 5b 2e 3c 48 9f d1 fb 3a 03 ab c6 12 55 c4 52 0c d4 e0 11 85 c4 33 3e dd 62 cf 57 47 cc 16 48 d1 83 71 78 35 e8 aa b2 23 17 dd 01 d5 ec 6b 7a c1 ea 5b 7d b5 6d 96 af 2b 66 0e ad ad ed 04 00 25 b6 35 ac 31 31 96 db 45 e2 15 Data Ascii: ?76c9o`!}qW#B=u>PQo@YVL+Ba^o`=0hT(P[i^q] lnSIn>upV[X<Fu!ukhuD1XZHg9D#"[.<H:UR3>bWGHqx5#kz[}m+f%511E
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 2a 88 14 42 90 ed 5e ff a4 8b 4a 39 91 29 80 3c 0e 01 c0 06 02 c0 76 a1 5f e3 ff be 53 49 b4 be 0e 64 ed 40 61 e9 21 48 10 1f e8 60 a7 8e 74 ac 93 e9 d1 41 84 a6 cf 69 5b 58 8b 2a 4a 69 7a d3 f7 fb 19 1c 74 4b 8f fa 7a 40 a3 d4 7e fd 62 74 35 02 50 b7 2c 78 cd fe 57 1b a0 86 37 ff a7 4e 99 e7 b8 6c d4 49 a2 2c 48 53 a0 00 30 d4 07 c0 67 1c 96 4a 0b de 3a 10 e3 93 b3 1b 79 a8 34 f6 fb 7c 92 22 66 73 1f b8 d8 3e ce 0c 9f cf e3 05 a4 09 46 07 d0 17 f0 a6 8a f6 d0 83 8d 52 41 1c 11 8a f5 ec 71 4e 91 cf 69 ff f0 ef 76 3b 21 6c 49 10 81 4d 15 d0 d4 a3 28 90 e1 c0 38 05 32 42 2b 32 22 04 4a bf 3b 38 92 bc f5 50 02 07 08 5e f2 8d 3e 97 4f 8e 63 2e 1b fb 08 71 75 bb 4d 65 8d 6b 10 a4 93 d0 16 a1 31 2b 4e 35 9b 19 96 80 0b 36 76 19 3b d6 02 20 70 dd da a2 28 b0 18 Data Ascii: B^J9)<v_SId@a!H`tAi[XJiztKz@~bt5P,xW7NlI,HS0gJ:y4\|"fs>FRAqNiv;!lIM(82B+2"J;8P^>Oc.quMek1+N56v; p(
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 9f 4d bc c4 2a 9b 62 41 00 62 65 d3 49 2e dd bd 17 27 5c d5 c1 13 22 18 d9 2a 51 64 34 b0 02 64 8e 8a a4 68 7e 85 2b b1 a8 c2 61 20 96 c7 fb 9a 78 d7 d8 bf be 58 b9 88 0b db 34 9a 09 02 44 81 59 0c 03 00 ab 50 c5 04 c2 f2 7a 50 80 2b 0c 07 1c 5c c1 67 f1 51 80 a1 c6 43 d4 ed a1 7a af b1 42 b7 12 76 6d 65 2d 71 c6 1a 1f 40 ed 01 f3 66 3e a8 c6 db dd b9 93 07 ab 58 56 0f 3e ae d5 79 a5 a0 03 58 f4 f3 cd b8 c1 92 98 9d e9 00 57 75 b0 0a 08 40 4c 68 56 81 66 c3 d6 5b ed 21 c7 3e 01 7f d4 fa 5c 25 2b 64 50 14 73 f4 1f f0 be e1 e7 ff 30 d3 4f 13 57 91 fe b6 32 16 2d c5 de ce 4e d9 b5 1a ef 1a 59 12 16 c6 53 54 1f 97 f8 97 3a c5 ab fa 04 79 ce 62 34 e0 86 d3 82 1b 4e 4c 98 01 ea c4 66 bb 91 bf 52 d9 0d fa 6d 02 62 da 54 51 ea 03 e7 0a 9c 8d 6c 93 5c 3d 7a dc 34 Data Ascii: MbAbeI.'\"Qd4dh~+a xX4DYPzP+\gQCzBvme-q@f>XV>yXWu@LhVf[!>\%+dPs0OW2-NYST:yb4NLfRmbTQl\=z4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.5	50075	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:44 UTC	728	OUT	GET /uploader/75bb66d9a11a9ab16f2c075001ef48e9978f6a9b.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "DA7F025E7ABBCC869729C6B497B32A66" If-Modified-Since: Wed, 09 Aug 2023 07:26:50 GMT
2024-05-24 22:57:44 UTC	643	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:44 GMT Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221d1f4e30e49d095b9095e9dca995b966881575_221" Content-MD5: 2n8CXnq7zIaXKca0l7MqZg== ETag: "DA7F025E7ABBCC869729C6B497B32A66" Last-Modified: Wed, 09 Aug 2023 07:26:50 GMT x-oss-hash-crc64ecma: 1784269405410895423 x-oss-object-type: Normal x-oss-request-id: 665074458BAF67343020E0CC x-oss-server-time: 77 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42787 Expires: Sat, 25 May 2024 02:57:44 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2ec0ed0f7e4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.5	50073	104.19.234.103	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:44 UTC	610	OUT	GET /94f923b3025c1d1141c24cba82c39f5f.png HTTP/1.1 Host: img.staticdj.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:44 UTC	1140	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:44 GMT Content-Type: image/webp Content-Length: 439934 Connection: close Cache-Control: public, max-age=31557600 Cf-Bgj: imgq:100,h2pri Cf-Polished: origFmt=png, origSize=1032420 Content-Disposition: inline; filename="94f923b3025c1d1141c24cba82c39f5f.webp" request-id: 703a1ef6-aeff-44ac-9ecc-d7b97857d54b strict-transport-security: max-age=315360000; includeSubdomains vary: Accept x-content-type-options: nosniff x-download-options: noopen x-powered-by: ASP.NET x-xss-protection: 1; mode=block Last-Modified: Fri, 24 May 2024 12:09:10 GMT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u4CA2q7gWPl%2FQ2Gd1GppKfbG%2BARQKzTLdJHTtiZBYJGBurHOz7lR1SMlzri0gcA0wyPRdAZPp6DFSBllXMh96QmPj171ZWVg2%2FHCR9Pa6ld6zj1OsJEBi8Rmy7D%2Fom5M4kg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server-Timing: cfRequestDuration;dur=157.999992 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8890e2ebea07177c-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 22:57:44 UTC	229	IN	Data Raw: 52 49 46 46 76 b6 06 00 57 45 42 50 56 50 38 4c 6a b6 06 00 2f 1f 43 70 00 8d 40 6c db 48 92 04 1b d8 bd 47 aa fc 03 ee 9e 99 de 8d 20 a2 ff 13 e0 f3 08 de ac 4f c1 b3 55 f0 b5 7c 6d d1 f8 f1 aa d5 f6 ea e0 cc 93 f5 cc eb 86 ce a3 ca 2d 0e c4 7d 6e 50 d5 0b 2e 5e 53 2e 2e cb 0d 6b a2 51 05 1d ab 2f f7 73 20 51 4d 62 62 e2 27 4b 92 a8 29 10 64 20 40 2f 02 b0 4b 16 15 f7 a0 0e 41 1d 94 8d 82 3a a2 a3 83 8e 7b e8 32 ee ab 52 b5 06 47 eb b6 6e c7 97 45 8d a5 1a ab 82 9a ea e8 b3 b5 fc 0a 82 3a ae 1b 1d 25 09 64 95 6c 67 a6 f0 a3 12 d4 80 a2 42 c5 e3 90 24 00 26 ee 2b 78 1a 34 5b c2 ea 8f 4a 82 9c 52 0b 86 55 c5 01 90 9e aa b6 e5 4f 07 50 a7 da 82 96 7b b9 5a 5b 54 5f 54 b5 55 00 45 Data Ascii: RIFFvWEBPVP8Lj/Cp@lHG OU\|m-}nP.^S..kQ/s QMbb'K)d @/KA:{2RGnE:%dlgB$&+x4[JRUOP{Z[T_TUE
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: cd d5 c3 82 89 5d 92 aa 14 57 7c 9e 64 94 fe cc 28 30 13 37 c2 a9 51 67 84 51 08 49 e2 8a 9d 85 67 eb 8c 26 09 c6 5d 54 50 c1 93 33 6a 62 92 c5 a7 39 f2 8d 51 b3 7e 91 31 31 f0 4d d7 48 72 35 3a 9f c8 a6 c2 44 72 23 49 8e 24 d9 ee 51 fd e5 3b 11 e8 6b c0 12 01 54 47 8e 0e b4 14 49 72 64 5b 41 10 14 41 91 34 7e ef 53 57 df 7a 7a be de 1a de fe 57 71 97 a0 f5 61 90 e4 c8 91 23 49 36 e2 ff ef 9b a3 3c ad 6c 51 e8 ee 09 04 1c fd 77 e0 36 92 22 2d 1c 0c 56 77 a7 e6 11 8c 09 65 80 0d 2c d0 1b 8b 51 4a 02 40 4a 11 66 00 08 2c 01 a6 22 84 71 cc c3 92 7c 45 22 8c 79 4b 80 dc 98 61 28 21 d9 40 c1 5d 69 16 75 1b 20 84 70 b8 36 17 65 28 e2 02 00 82 33 98 22 14 63 cc 9d 85 31 c5 94 a0 65 8c 31 45 22 36 41 60 94 85 d9 0c 30 84 f0 96 cb 5f 19 18 06 b1 00 63 c0 5c 88 aa Data Ascii: ]W\|d(07QgQIg&]TP3jb9Q~11MHr5:Dr#I$Q;kTGIrd[AA4~SWzzWqa#I6<lQw6"-Vwe,QJ@Jf,"q\|E"yKa(!@]iu p6e(3"c1e1E"6A`0_c\
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 71 cf e3 bd 70 f7 e0 55 15 60 26 3f 2f fe 06 7f 5d fe ce a3 ee 9e a4 d3 7d 9f 74 92 ea ee 8a a8 e7 92 2c 7e dd 23 c2 a2 43 ef 65 b3 9e 1c b3 21 dd 87 0c c9 75 3a ef 09 49 3d 6d 8a 19 eb 76 c3 7b f1 3c eb a4 cb 64 3c b9 91 8c d3 fb ce df 8c 33 7c da cc cd 7a ac dd 3a 72 86 6b 2e 55 6e ed d3 61 73 7f e4 52 38 c9 1d c0 9c 98 81 39 99 9c 21 b9 7a b5 77 21 f9 17 1e 91 0c 49 ef 89 ef d1 5c 5e 7e ee ee 56 7e cf dd 8d f5 74 c9 f0 bb bb 72 97 fb 1f 52 b9 b3 a3 8c 6c b2 bb 99 45 d2 ea ee 49 d2 53 95 ee 9d 22 fe 90 64 1e 98 c1 6f 0f 88 df 69 d4 5d b8 74 fa cf 30 97 e4 12 65 c4 7f 7e 04 17 20 c3 4a d2 55 3d 49 57 f5 e4 71 fa 75 3b 5a f7 0c b0 33 db fd 0d b0 7b 51 2e 5d 66 52 3a 24 e3 b9 9f f4 9e 42 22 8c 24 8d 66 16 66 bd db 4b 96 9f 8e 99 19 ef 72 b3 de b9 cb 25 99 Data Ascii: qpU`&?/]}t,~#Ce!u:I=mv{<d<3\|z:rk.UnasR89!zw!I\^~V~trRlEIS"doi]t0e~ JU=IWqu;Z3{Q.]fR:$B"$ffKr%
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 6d 2d 93 24 49 da fb 9c ef fb 41 44 14 8c dc dc 3d 28 c3 2b 32 92 b3 19 ae fb ae ef fb 3d fa 11 fa 99 fa 8e 99 99 39 21 d0 d1 40 49 44 fe ff ff be 73 f6 18 a6 e2 f5 0c be 25 49 b2 24 49 b2 2d 64 11 8f aa 9a db d3 fa ff 9f 9c 59 b7 ce 70 15 f6 76 db b6 6d bb 6d 64 d5 3e c6 3e 07 20 25 c5 fb f1 ff ff 5c e4 3b d3 4e 89 24 80 b3 57 1f e1 0a b2 ad a6 79 76 4d a1 be 26 3c 84 e4 8b 93 00 40 8a 24 db 76 0c 1c 02 12 8b 9a 0e 9f 73 cf 7f 17 3e 33 f3 5f 84 f6 a0 b9 d6 a2 11 4d 35 d5 4c b3 cf 4c 7a 74 e9 50 53 71 42 90 83 99 09 36 e1 51 00 24 45 92 24 db 12 11 55 73 8f c8 82 c6 99 a5 cb cc f0 ff 7f c1 8c ef 2d 0d 76 77 55 65 44 b8 a9 aa 78 96 24 c9 91 6c db b6 44 d5 dc 23 b3 c6 18 73 2e 70 31 c6 f7 ff 3f e2 b6 6f fb b4 31 5e 70 80 ca 0c 37 d3 50 90 b6 01 23 a2 dd 91 Data Ascii: m-$IAD=(+2=9!@IDs%I$I-dYpvmmd>> %\;N$WyvM&<@$vs>3_M5LLztPSqB6Q$E$Us-vwUeDx$lD#s.p1?o1^p7P#
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: d7 7f f5 74 7f 1c fe 78 3d fc fb 4a ff a8 f8 43 f5 9b e2 e1 f9 7a ff 63 d9 bf dd be fc f0 bf c3 8f ff b8 bf ce 7a 12 ec 73 76 58 d8 3b d0 69 2f ff 5f fc df bb 74 bc ab 22 fa cf f5 fd bf df ff f7 e3 fe b9 f5 a9 60 b9 15 d8 67 2a ad ec 30 d9 03 fe 8d fd 3f e0 af b5 97 9c fd 79 14 99 fc a8 fb d1 f5 ef 23 3e fc de f1 df 19 2b 3d 6c a9 d8 28 7b 76 df 5f f3 be f3 0d f7 53 f6 82 ef 8e ef b0 9f fe d7 ef f8 5f e3 c8 0e 7e f5 c5 17 b3 4f 7f e3 f6 bc ef 4e e7 7a b7 36 f7 2e 86 78 9e ee be 6a 9e a2 7f f3 33 03 cd db 5d 64 99 b9 20 7e fa 86 fd 50 2d bd 5b 7b ea c7 99 ec 3a ba 57 c0 2e 60 0a b0 3e 9d df 0f 27 90 bd 40 9e d1 1e f0 c2 a4 85 01 8e 21 73 6e e4 7b fe 7a fa eb ae fb d9 fd ec fe 39 e4 7c ac 3b e6 35 5f f3 da ba e6 55 2e a5 ec 87 e3 77 03 f6 da b8 d2 9f f4 f9 Data Ascii: tx=JCzczsvX;i/_t"`g*0?y#>+=l({v_S_~ONz6.xj3]d ~P-[{:W.`>'@!sn{z9\|;5_U.w
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 74 bd 1d 6e d7 ff 70 f8 d3 ad 25 1f 69 b7 9a f9 ae d3 ec 1f bb 69 de cd 6e 6e 9a 72 ac 0e 51 3f f3 0d 9b de b3 be 00 12 60 6f d0 20 cd 6e a4 db 4d 9f 06 05 00 0c e2 6d 66 91 b3 39 b2 e0 49 5b 63 80 76 07 00 40 a3 95 00 56 cf ae b5 d0 9e be dc 85 d1 4c a0 02 00 02 00 8a 63 3c 4f c1 92 7d 4f 81 65 55 c8 41 f0 6e 06 00 52 5a 00 04 e0 13 94 70 9d 50 84 15 58 a7 86 80 07 24 51 8a 42 10 22 3b e5 68 cb 2c cc 41 02 38 e0 32 aa 7e 6c ce 85 3e 2f 5d 7f 1f 5d 09 65 a5 2f a4 9f e3 5d 21 3f b5 dc 13 6c d1 04 35 0c 7d bf ef 27 e7 c7 4c e5 f5 cb fe 56 fd 79 45 57 d8 b9 21 29 68 9e b4 c5 d4 1a 62 2c b0 70 0b 45 2a 42 5c c5 39 1e 74 4c fd 78 09 17 e1 8f 07 4f eb c5 b9 16 7f 9c 18 58 17 2f 4f 01 92 2d ab c9 30 b2 c5 58 df 89 5c 9c f8 16 d2 a8 08 e6 43 f3 84 da 61 ae 82 9e Data Ascii: tnp%iinnrQ?`o nMmf9I[cv@VLc<O}OeUAnRZpPX$QB";h,A82~l>/]]e/]!?l5}'LVyEW!)hb,pE*B\9tLxOX/O-0X\Ca
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 89 bc 73 7a 46 7a e8 72 67 b0 dd d4 d1 1b 51 4c 17 24 df 37 0a b6 92 01 11 0b a0 48 c8 45 e1 60 5a 22 80 74 3d 04 0a 73 28 70 43 ce 04 30 55 01 64 19 bd 69 55 77 ee 20 48 b5 3f e4 8d d1 52 d0 bc 51 be 41 de 99 28 5d f4 c2 17 10 a0 04 00 5a a7 c9 49 5e c1 f0 5a 16 78 b8 20 0a 61 09 27 c2 96 30 40 07 54 21 37 e9 1a 16 03 2f 65 fa eb 23 0c 0f 1a 7a a7 87 c6 e9 20 cb 22 09 04 06 6c a1 46 1a 09 e9 8c 9c 00 f1 6f f8 3f d0 b2 c4 a6 3d 49 53 20 9a 86 be 52 66 97 21 07 80 a4 cf a2 ca f7 c0 8b 39 62 d2 55 7c fb f0 bd 7d 23 74 6c b9 b9 68 e2 a2 e4 a0 07 ba c9 31 27 8e b0 03 6e 44 8a 21 64 1e 47 d7 0f c3 9e 5d 93 77 d9 5b d3 bf d8 d9 2c c3 12 e0 30 65 04 46 db cc 10 af 4e ba 80 6a 31 87 57 87 5b fb b2 5d 4b e3 7d 5a 9f f0 a6 2c 00 55 8d 40 5a fb b1 1b 3b 26 f4 5e 04 Data Ascii: szFzrgQL$7HE`Z"t=s(pC0UdiUw H?RQA(]ZI^Zx a'0@T!7/e#z "lFo?=IS Rf!9bU\|}#tlh1'nD!dG]w[,0eFNj1W[]K}Z,U@Z;&^
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 87 fe de 0c 17 63 e3 92 e4 a4 b1 df ce 05 39 36 27 36 65 0d f3 24 80 d0 6b 52 50 d3 c0 05 09 dd d7 46 30 a4 91 d2 17 fb e1 6b 0a 01 d2 34 49 77 65 f0 60 1a 42 13 4a 1c 53 0e 8e a3 57 83 de 72 a0 a1 d5 d0 aa 9b 3a a1 b5 8c da 6a e3 bc 10 4d 0e 00 de f7 c0 4d 29 34 69 e2 d6 64 ba 30 4c 33 3a 84 79 86 21 90 37 0c d3 39 66 77 7d b5 d0 76 2a ba e3 ef b6 db 4b 95 5f eb 74 9f ca cc 2d 8d 3a 90 40 de 35 37 17 fa d6 15 62 19 b9 23 6c 52 16 ea 38 f4 b4 cd 77 76 a3 4b de e0 5a a6 05 22 a0 5a 18 63 ec b8 ab a8 8a 6f 15 a6 57 d0 00 cf 36 59 24 55 b9 10 4c 8c 45 4c e2 e7 04 af c2 6f 69 20 5f 1c cf ac 6e 23 a6 5a 17 cb 77 c9 72 13 26 0f 14 75 02 4b 4f 2a 1a 54 56 49 c0 de a9 82 05 a8 cb 2a 5d b8 30 83 21 f3 0e 28 11 0d 0b 80 e0 7d eb 9b 17 af 5c f3 6e 96 8c 86 95 c1 62 Data Ascii: c96'6e$kRPF0k4Iwe`BJSWr:jMM)4id0L3:y!79fw}vK_t-:@57b#lR8wvKZ"ZcoW6Y$ULELoi _n#Zwr&uKOTVI*]0!(}\nb
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: eb db 21 1a 60 42 8e 79 00 0a 35 c5 8c 54 9e d1 72 70 e2 b8 b1 8b 19 e1 04 ca 5c 08 4b 95 0a 10 d4 0e e4 54 84 02 cd e5 0a 27 42 d2 8a e3 00 d1 35 3d 82 a2 05 51 18 37 3a 16 11 05 26 c8 e6 5a e1 bc 86 e7 12 d7 af 7d 85 fd 21 f2 7f f8 76 09 5d 52 5b da 6b db 30 3b eb ec 87 b3 e6 be d9 e3 eb 7f 92 cf ca fc e5 44 fa cb 37 fe fb ad 9a ad 7a ba 24 78 20 75 e8 96 42 a2 b4 e4 0c 62 88 ac bc 42 a9 97 a9 1a d1 a7 3b bf 0c 93 5e 6f 78 be d2 d7 2f 0e 88 0e fa 81 f6 86 e6 ad f8 0c ac f6 89 e7 44 2d aa 2d ac 62 1c 84 0b 14 03 21 58 dc 2d 71 aa 22 15 86 10 86 8c f6 2a 03 d5 51 ae 0a 15 2e c4 dd 70 e6 38 a0 84 19 9a 71 15 b4 d3 dd 6c d3 08 65 bc 80 31 4c f1 60 12 45 40 46 47 21 98 32 3c 99 b0 2a 3d 6e c8 1d 3e ff 8c 0c ca 38 47 61 18 d9 de 06 b3 f1 69 c2 68 18 43 94 31 Data Ascii: !`By5Trp\KT'B5=Q7:&Z}!v]R[k0;D7z$x uBbB;^ox/D--b!X-q"Q.p8qle1L`E@FG!2<=n>8GaihC1
2024-05-24 22:57:44 UTC	1369	IN	Data Raw: 77 de f3 a0 d9 41 b1 75 c2 64 3c 40 80 01 00 58 96 25 00 c8 20 67 2a 85 a6 52 41 c8 09 a5 03 d5 40 de 23 cb c2 c3 d4 13 d2 a6 40 e0 3f 9e aa 6e 68 53 49 27 cf 16 51 14 cc b2 9f c3 9e 05 8d ed da 8e b3 80 9b 4c bc b8 ab 9b b0 86 83 81 49 04 6b c7 cd 6a a4 d2 d9 46 ce a5 3b f1 3f 11 91 93 4f ca 2a 26 19 db 09 55 33 31 01 57 8e 68 ba 67 32 d9 4c de 99 de 6d 6e 30 9d d5 a3 31 15 a6 70 eb 89 10 c1 44 12 a8 b5 84 65 a3 ef 05 46 d3 43 e7 1f 09 87 cb c8 95 23 31 67 4b 93 85 e1 1e b2 8d 9d e8 88 56 07 ce 30 ad 50 57 cb b5 d2 52 c1 9d ec 4c e4 a8 8f da de 05 ed 64 49 dc ab 66 bc 96 68 00 04 6f 80 40 20 80 01 35 c0 f5 bc dd a2 25 00 9a 6e 50 31 c1 00 cf e6 de 3a ef b4 1a 84 bc 14 12 54 18 a9 22 30 8d 21 81 2a a3 92 21 50 58 02 f7 19 a3 88 bb cb 85 23 5b 05 50 13 28 Data Ascii: wAud<@X% gRA@#@?nhSI'QLIkjF;?O&U31Whg2Lmn01pDeFC#1gKV0PWRLdIfho@ 5%nP1:T"0!*!PX#[P(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.5	50074	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:44 UTC	728	OUT	GET /uploader/8e02e850002eb3ce0a0be48daf2693336403eb86.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "5521FF8608C8B926CD70B0204FADB2F5" If-Modified-Since: Wed, 09 Aug 2023 07:26:16 GMT
2024-05-24 22:57:44 UTC	642	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:44 GMT Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221cfd17a9d7dddde6172b2f0a611a29e3228316_221" Content-MD5: VSH/hgjIuSbNcLAgT62y9Q== ETag: "5521FF8608C8B926CD70B0204FADB2F5" Last-Modified: Wed, 09 Aug 2023 07:26:16 GMT x-oss-hash-crc64ecma: 8998513415771323797 x-oss-object-type: Normal x-oss-request-id: 665074451F5247373259390A x-oss-server-time: 1 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42787 Expires: Sat, 25 May 2024 02:57:44 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2ec0cd6f7d4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.5	50077	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:44 UTC	653	OUT	GET /liquid/buyer/public/js/lib/index.js?t=20240524155330 HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"6650447c-eac61" If-Modified-Since: Fri, 24 May 2024 07:40:44 GMT
2024-05-24 22:57:44 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:44 GMT Connection: close last-modified: Fri, 24 May 2024 07:40:44 GMT vary: Accept-Encoding etag: W/"6650447c-eac61" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 54166 Expires: Sat, 25 May 2024 02:57:44 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2ee3dc7f7cc-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.5	50061	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:44 UTC	965	OUT	POST /buyer/user/user-capi HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 509 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=lego Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:44 UTC	509	OUT	Data Raw: 7b 22 66 61 63 65 62 6f 6f 6b 22 3a 7b 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 22 50 61 67 65 56 69 65 77 22 2c 22 65 76 65 6e 74 5f 74 69 6d 65 22 3a 22 31 37 31 36 35 39 31 34 36 32 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 6a 6c 38 61 37 75 33 75 31 6b 65 50 61 67 65 56 69 65 77 31 37 31 36 35 39 31 34 36 32 33 33 37 22 2c 22 65 76 65 6e 74 5f 73 6f 75 72 63 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 61 76 6f 62 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 3f 68 61 6e 64 6c 65 72 3d 6c 65 67 6f 22 2c 22 63 75 73 74 6f 6d 5f 64 61 74 61 22 3a 7b 7d 2c 22 70 69 78 65 6c 5f 69 64 22 3a 22 32 37 30 30 31 30 34 39 39 34 33 37 30 30 37 22 2c 22 66 62 63 6c 69 64 22 3a 22 22 2c 22 75 73 65 72 5f 64 61 74 61 22 3a 7b 22 63 6f 75 6e 74 72 79 22 Data Ascii: {"facebook":{"event_name":"PageView","event_time":"1716591462","event_id":"jl8a7u3u1kePageView1716591462337","event_source_url":"https://www.cravob.com/products?handler=lego","custom_data":{},"pixel_id":"270010499437007","fbclid":"","user_data":{"country"
2024-05-24 22:57:45 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:45 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:45 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:45 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 34 35 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:57:45"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.5	50079	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:44 UTC	693	OUT	GET /liquid/buyer/public/img/default.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66387ef8-1a84" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:45 UTC	585	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:45 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT etag: "66387ef8-1a84" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 221073 Expires: Sat, 25 May 2024 02:57:45 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2f0c909f7f4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.5	50078	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:44 UTC	466	OUT	GET /uploader/cc9848adf3ffcc99024436d9b23c022632da987e.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=392441-415867 If-Range: "4EC9AF0735BF453A0F4ED6D93EEB0CE7"
2024-05-24 22:57:45 UTC	718	IN	HTTP/1.1 206 Partial Content Date: Fri, 24 May 2024 22:57:45 GMT Content-Type: image/png Content-Length: 23427 Connection: close x-oss-request-id: 665076C391795F303908A586 ETag: "4EC9AF0735BF453A0F4ED6D93EEB0CE7" Last-Modified: Wed, 09 Aug 2023 07:26:24 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2204139187792885320 x-oss-storage-class: Standard Content-Disposition: inline; filename="221ce9078c31255d863db04605624e334f585678_221" Content-MD5: TsmvBzW/RToPTtbZPusM5w== x-oss-server-time: 6 CF-Cache-Status: HIT Age: 74 Expires: Sat, 25 May 2024 02:57:45 GMT Cache-Control: public, max-age=14400 Content-Range: bytes 392441-415867/415868 Server: cloudflare CF-RAY: 8890e2f0dca96a7a-BNA
2024-05-24 22:57:45 UTC	651	IN	Data Raw: be de 71 2d 33 23 d2 4a 4e 36 aa 98 9e ac 71 a7 3b 20 e7 be a1 d4 f5 ef ae 27 af 7f fe 3a 66 e6 38 8e df 5c b4 29 94 f5 88 ec 1c db 46 bd ae 37 36 37 fe 6c e9 fc d2 bf 03 20 9f e6 60 23 10 08 04 02 81 40 20 10 04 7a 20 f0 2c 91 3a c5 f4 98 c4 53 4b 49 02 90 66 b9 75 8e e5 a7 fe f1 a1 9f bf 62 ff f6 7d af 7f c5 73 bf bf 3f c8 8c 10 42 3d b9 85 1a 00 24 08 cd 3c c3 ff b2 67 3f d6 d3 14 7f 7c e8 20 26 e3 d8 0b ee 85 06 a2 b9 06 f2 41 86 94 44 51 57 26 46 d3 f3 e2 b5 12 02 6b d9 00 3f be ff 72 3c 6f 61 2b 5a 59 0a 41 84 24 49 d0 ed 4a 38 63 8a c9 3f c1 11 a3 5a ad 60 73 53 22 4f fb 5e 84 5b 87 3c 37 c5 04 dd 0d 85 b8 73 80 35 76 4c 9c 97 62 dd db db 85 10 88 e3 08 49 92 f8 97 4a 05 71 9c 40 47 1a 44 82 89 04 67 b9 61 25 05 aa 95 48 2a 29 d4 a7 ee 38 f0 e9 47 Data Ascii: q-3#JN6q; ':f8\)F767l `#@ z ,:SKIfub}s?B=$<g?\| &ADQW&Fk?r<oa+ZYA$IJ8c?Z`sS"O^[<7s5vLbIJq@GDga%H*)8G
2024-05-24 22:57:45 UTC	1369	IN	Data Raw: de 6d bb f0 4b d7 bf 10 ae ec 34 1f db 4f 8f 93 04 bd 5e a7 cc 0b 83 10 02 d6 31 1a 13 0d ac 2c 2f 23 cf 53 58 3b 26 cc 8b 69 79 29 cc 8d b1 60 66 c4 71 8c 28 8e 11 c7 09 94 d6 20 21 d8 3b eb 99 ad 83 d0 4a 0a 29 84 14 82 e0 d8 a1 37 c8 78 69 bd 7d 64 79 a3 7b c7 ea e6 e0 e6 43 27 56 3f c9 06 cd a9 5a 15 cc 4c 41 9c ff b3 4f a1 67 5c f1 77 bb dd 5f 91 4a be 40 0a 35 cf cc c8 4d 7e 7f af df fb e5 3c cd 3e 0e 90 40 10 e7 81 40 20 10 08 04 02 41 a0 07 02 cf 7a 0a 3d de eb 67 e8 0f cc 97 a5 b8 3f 9d 9e 97 52 c8 87 1e 3b 77 e4 97 de fd d7 3f fc 7f fd ca bf fa cc c2 dc 74 94 e7 96 a5 14 04 8c 92 ee 47 07 00 0e 86 05 fe c3 35 d7 23 16 12 7f 7d e2 08 ea 51 04 0d 01 47 7e 2c 6f f3 1c 5a 4a 74 ad 85 64 c6 8f 5f 7c 05 7e fc b2 ab 61 98 61 d9 41 0a 51 74 92 fb cf a9 Data Ascii: mK4O^1,/#SX;&iy)`fq( !;J)7xi}dy{C'V?ZLAOg\w_J@5M~<>@@ Az=g?R;w?tG5#}QG~,oZJtd_\|~aaAQt
2024-05-24 22:57:45 UTC	1369	IN	Data Raw: bb ef ce 87 97 5e b3 b2 9a bf 27 96 c9 a3 8d 4a 42 91 12 8a c1 c2 3a 47 c5 94 dc 86 f4 f5 40 20 10 08 04 02 81 40 20 08 f4 40 e0 db 27 d0 0b 81 ec dc 33 a3 4d 8d b1 96 d9 a9 8d f5 fe c1 77 fd e1 cd 6f 39 b7 bc 66 e2 48 c3 31 b3 0f 4c 1f d3 e1 c5 09 01 3b 06 c6 1b aa 8b d7 b9 c9 61 4c 0e e7 78 4c 39 d3 e8 bf ec 7b d1 cb 4f a6 b5 86 a0 c2 06 4f 02 44 24 32 63 71 d9 9e 2d cf 67 6b f7 10 a0 06 69 a6 18 cc 5a 49 03 f6 37 2b 3c 0b 02 81 40 20 10 08 04 02 81 20 d0 03 81 6f ab 30 67 66 24 b1 c6 60 90 a3 d3 ed a3 92 28 44 4a 20 d6 f2 eb 7e 99 9b ae 63 c7 e2 94 99 99 aa e9 87 1e 3b 77 cb 6f fd de c7 fe 4d b3 dd 21 25 a5 5f 24 1f 0a ea 91 2e e6 27 29 f3 f2 4f ce 39 e4 c6 f7 96 b3 f3 b7 77 34 4d 1f 09 76 86 17 ea 52 0a 28 1d 0d ef 1b 11 51 6e ac 5d 98 9b aa cd 4c 57 Data Ascii: ^'JB:G@ @ @'3Mwo9fH1L;aLxL9{OOD$2cq-gkiZI7+<@ o0gf$`(DJ ~c;woM!%_$.')O9w4MvR(Qn]LW
2024-05-24 22:57:45 UTC	1369	IN	Data Raw: b3 75 0e 64 09 ce b2 2b 5b de f8 69 05 3a c1 c2 01 00 5a 6d 83 2f de f3 04 4e 9f 5d c7 c2 dc e4 f0 c0 e0 c9 87 21 5f fe 19 3c b9 b1 c8 72 8b 5a 35 c2 ae d9 09 2c ce 4e a0 92 68 cc 4d d7 71 ea fc 06 0e 1e 5d c2 bd 07 4e e0 c8 c9 2a b6 2d 4c 62 66 aa 86 85 b9 09 04 8d 1e 08 04 02 81 40 20 10 08 02 3d 10 f8 ce 96 e7 10 52 20 cd 72 2c ad 6c 22 cd 0c 26 ea 49 21 24 2f ac 26 7b a6 a0 42 3e 47 b1 ab ff d0 ab ae fa d3 c5 b9 49 a5 95 72 49 92 50 14 69 68 ad 21 95 82 14 12 52 29 28 29 21 85 c4 e4 44 15 44 12 ab eb 9b d0 5a 23 d6 da 4f c0 81 62 bb 7c 18 ea 5e 36 b2 81 19 70 96 e1 c8 81 44 b9 c0 0d 38 76 c5 ae b9 df 53 b7 ec e0 d8 f9 f4 77 6b 87 9f b7 db cb b0 67 c7 96 d6 b6 85 45 08 41 5f f5 59 05 11 21 cb 0d 22 ad e0 9c 83 22 82 10 fe 45 49 3f f1 a6 b1 f7 65 f6 41 Data Ascii: ud+[i:Zm/N]!_<rZ5,NhMq]N*-Lbf@ =R r,l"&I!$/&{B>GIrIPih!R)()!DDZ#Ob\|^6pD8vSwkgEA_Y!""EI?eA
2024-05-24 22:57:45 UTC	1369	IN	Data Raw: 5e 83 8e 63 08 12 e0 31 d1 5d 4e c8 7d c7 37 46 fd e5 ae b4 71 73 a9 44 87 a3 60 e2 b1 d1 f0 b0 b6 dd bf a7 63 1e 0a 72 66 6f 71 37 c6 c0 18 03 67 1d fa fd 01 9a ad 0e 06 69 86 2c cb 41 60 d4 ab 51 74 d3 f3 f7 fd de ff f3 d7 77 5e af 49 a4 a0 51 9b 5b 79 5d ad 63 5c bc 67 8b 9f dc 17 36 f5 af b4 37 fe ed 7a fc 97 56 5b 58 5a 6d 5d f0 77 e5 ee 7c bd a2 bd 1b a1 08 d0 0b 04 02 81 40 20 10 08 04 82 40 0f 04 9e 41 4a 5b b5 14 02 0f 1d 3c 89 f5 66 d7 ff 59 12 d2 dc 7c ab 6f 8e 70 8e 6d 14 8b 8b 6e 7c ce de 7f 5f ad 56 5c b5 52 11 f5 7a 15 51 1c f9 40 37 f0 48 60 b3 b7 68 83 a9 d8 25 a7 b1 3d 6f 7e 52 a9 78 29 8c 4b 41 ea d5 27 0f 85 28 79 eb bb 73 c8 8c f1 13 f4 a2 5a cd e4 06 c6 f8 a0 b6 8d 66 1b cd 56 07 c6 58 44 9a 10 29 21 d2 2c b3 57 5c b4 78 e9 4d 2f dc Data Ascii: ^c1]N}7FqsD`crfoq7gi,A`Qtw^IQ[y]c\g67zV[XZm]w\|@ @AJ[<fY\|opmn\|_V\RzQ@7H`h%=o~Rx)KA'(ysZfVXD)!,W\xM/
2024-05-24 22:57:45 UTC	1369	IN	Data Raw: 2e 49 5d 08 21 84 10 42 48 40 17 67 b8 c8 68 80 80 07 1e 3b 84 c3 c7 4f c3 68 85 28 d2 df fa 01 70 cf 4e 31 c8 6d df 3a 72 e5 3b be eb 9a cf 4f 4f 8e 34 d3 2c 77 a5 38 d2 e5 92 01 73 a8 cc 7a c7 20 f2 80 52 20 3f a8 da 7a 80 c3 db 8d e7 ba 43 08 f7 1b 6e 00 84 7d e8 34 08 f9 45 a0 74 d6 a2 df 4f d1 4f 53 30 c3 13 11 39 ef 29 cb 1d 96 16 16 70 fa d4 2c ba 6b 4b f0 0c 74 1b 4d 68 53 83 ed a7 f0 ce a1 5a ab 61 75 65 05 a4 14 14 54 51 39 5f 5f d5 e6 99 a1 48 69 52 70 57 5f b8 ed 9a 66 ad 7c c7 97 be ba ef 87 57 db d9 df a8 10 e0 4d b1 dc cd 9f 41 b7 8a 9e e3 7d 21 84 10 42 08 21 24 a0 8b 17 b9 41 68 5d 58 6e 61 75 b5 8b c5 a5 16 a2 c8 84 00 e9 fe f9 03 52 e8 54 67 36 91 1a fd de d7 5d f6 e7 5b a6 46 9b b9 b5 2e 49 22 5d 8a 23 44 5a 87 30 ed 19 ce 7b c0 15 7b Data Ascii: .I]!BH@gh;Oh(pN1m:r;OO4,w8sz R ?zCn}4EtOOS09)p,kKtMhSZaueTQ9__HiRpW_f\|WMA}!B!$Ah]XnauRTg6][F.I"]#DZ0{{
2024-05-24 22:57:45 UTC	1369	IN	Data Raw: c5 9f 8a f5 6b aa 98 28 4f 84 38 56 14 47 15 dd cf 72 74 bb a9 87 82 1f 6d 56 cd e4 58 e3 15 2f 39 77 e6 15 4b ab ed 5f 3b 34 bb 70 db 81 a3 73 9f 9a 3d b5 f2 f9 6e 37 9b 33 ca a0 9c 44 83 ca ba 62 69 83 17 42 08 21 84 10 42 02 ba 78 9e 25 5d 30 94 22 3c 79 f0 24 f2 dc c2 3a f7 42 f8 b2 bd 22 45 dd 34 3b 76 ec d4 d2 9e 4b ce db f2 d2 dc 93 d7 8a 74 28 96 73 31 d4 6e 98 d0 11 e6 c4 f9 62 d7 38 23 b7 c5 4e 73 06 bc f7 60 0e 59 95 40 70 ce 21 4b 73 f4 d3 3e d8 7b 94 62 83 b8 5a 83 b5 0e e5 52 8c 58 ab 6d 0f 3c fa 94 af 96 13 2a c7 46 ad 76 fb 4b 87 4f 2e 3f 7c e9 79 97 be 66 65 b5 e5 bd cb 75 14 45 60 06 ba bd 3e d6 da 5d 28 93 20 32 0a 44 8c 56 ab 85 7a a3 8e 66 b3 89 c5 c5 c5 0d 83 eb 54 68 cd 57 14 be 33 cc 80 52 4f 1b d0 47 83 ff b4 42 bd 16 a1 54 f2 aa Data Ascii: k(O8VGrtmVX/9wK_;4ps=n73DbiB!Bx%]0"<y$:B"E4;vKt(s1nb8#Ns`Y@p!Ks>{bZRXm<*FvKO.?\|yfeuE`>]( 2DVzfThW3ROGBT
2024-05-24 22:57:45 UTC	1369	IN	Data Raw: 85 79 2c d7 13 91 ce ad 7b e4 ae 87 0e 7d e2 cd af b9 fc 9d 2e 73 ae 18 7c 06 a5 00 a5 09 5a 6b 00 83 b7 3c 3c 86 3c 58 65 a6 b4 c2 60 fa bb a2 22 98 17 15 78 14 e1 99 07 ed ff cc b0 ce a2 56 ad f1 0f bf e5 fa f7 ff d4 fb 6e fa 9b 4e 37 cb 47 47 2b 6e 71 ad f3 b5 34 b7 97 38 eb 7d 6c a0 7c 31 ac ce db d0 5a ef 9c 0b eb db 98 a1 b5 47 e4 d7 73 6e b9 5c c1 e6 cd d3 50 04 ec 9b 23 ec 9b d3 58 5e 6b 22 8e 22 28 f2 38 de e9 63 ac 9c 62 aa 9e 63 bc 49 30 ca c0 31 c3 59 07 ad 15 08 a1 e5 5d 6b 05 cf 04 6b 19 5a 69 6c 9a 1c c7 e8 48 13 cb 2b 2d ac ae ad a1 db ed a1 5a 29 a3 5a 2d 93 51 5a 9b 28 fc 93 64 9d 65 eb 9d 77 36 77 b5 52 1c bf ed f5 d7 7c e4 e0 f1 db 7f 66 ad d5 be d7 65 f6 04 18 76 fd c6 8e 22 10 14 33 cb da 36 21 84 10 42 08 21 01 5d 88 ff 33 0c a5 14 Data Ascii: y,{}.s\|Zk<<<Xe`"xVnN7GG+nq48}l\|1ZGsn\P#X^k""(8cbcI01Y]kkZilH+-Z)Z-QZ(dew6wR\|fev"36!B!]3
2024-05-24 22:57:45 UTC	1369	IN	Data Raw: 5e 8a 24 36 61 6a 39 d3 8b e1 e9 b9 72 a2 f5 e9 a5 de 43 37 dd f2 d0 af fe e8 db 5f f5 ab d6 c1 c6 6c cc 70 42 3b 8a 90 be 21 6c d3 a0 a2 4e 83 21 72 21 bc 12 11 a8 98 e2 4e a0 22 24 af 07 5e f6 0e 9e 3d 62 22 dd cf ad 7b e7 f7 de f0 d6 03 47 4f 3d 79 72 61 ed 89 89 73 36 bf a2 dd 25 ce 72 47 de 31 9c 1b 4c 71 0f b9 75 d0 aa ee 9c c7 dc fc 22 ae bb ee 3a 7c db b5 e7 e3 13 9f 7b 08 a5 24 42 9a e5 70 de c3 e4 39 74 d1 e2 3e b8 85 12 f6 b1 53 18 66 57 fc 5c b3 5e c6 a3 07 97 f1 81 ff 7e 27 7e f4 2d 57 e1 fc 5d 9b d1 ed e7 80 0b 9b d2 8d a6 61 97 c4 a0 a2 4e 4a c1 bb 10 f6 6b b5 3a aa b5 1a da ad 16 e6 e7 4e 62 e1 d4 71 dc 77 df fd c8 2c a0 a3 08 71 9c 60 64 a4 89 a9 e9 69 4c 4f 6f a6 f3 cf bf 40 cf cd cd e1 f8 f1 e3 9c a6 a9 8b 54 f2 ea b1 f1 c9 db 97 96 4e Data Ascii: ^$6aj9rC7_lpB;!lN!r!N"$^=b"{GO=yras6%rG1Lqu":\|{$Bp9t>SfW\^~'~-W]aNJk:Nbqw,q`diLOo@TN
2024-05-24 22:57:45 UTC	1369	IN	Data Raw: 04 44 c6 e4 9f fb f2 de 1f dd 7d f6 96 bb 26 c6 47 55 6e 2d 6b 9d 93 b5 16 3a 09 03 f2 06 d3 d0 87 8f c1 6e f4 41 43 b8 d2 21 55 53 b8 bb c6 14 d6 b1 29 0f b0 62 28 de 38 72 2e 84 69 6b 33 8c 8c 8e e1 86 57 5e 85 fb 1e 78 14 8f 3e 7e 08 cc 80 d2 0a ec 43 45 9c 3d c1 73 d8 5d ee 8c c7 ca ca 0a 0e 1f 3d 8e 57 bf f4 62 dc 78 fd 13 b8 f9 b6 27 51 ad 97 c1 00 7a fd 1c 9c f7 31 b5 69 0c ef fc ee d7 e1 ca 97 9c 8d 27 f7 1f c6 4d b7 3c 88 95 95 55 ec da 79 16 1a 8d 06 ba dd 0e fa bd 1e ba bd 3e 34 79 3c 76 60 1e 1f fe f8 6d 78 f7 5b ae 45 a9 d2 04 8c 01 6f d8 ef 1e 86 06 12 c0 0c e7 2c 98 5d b1 17 3e 1c 92 27 82 cf 73 a7 ae bd 6c fb 62 52 e6 d7 65 69 b6 5d c7 fa 2a 30 ae 21 a6 eb c1 54 25 02 2b a5 b1 b4 bc 4c cd 66 93 93 b8 c4 49 5c ba ae 8b f6 47 41 ea 99 db e4 Data Ascii: D}&GUn-k:nAC!US)b(8r.ik3W^x>~CE=s]=Wbx'Qz1i'M<Uy>4y<v`mx[Eo,]>'slbRei]*0!T%+LfI\GA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.5	50080	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:44 UTC	701	OUT	GET /uploader/dd0bf6a7277d7e58ec2c01e3627a45275be16a24.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=326812-326812 If-Range: "11E06A8B4521847F5923C5113E685D99"
2024-05-24 22:57:45 UTC	734	IN	HTTP/1.1 206 Partial Content Date: Fri, 24 May 2024 22:57:45 GMT Content-Type: image/jpeg Content-Length: 1 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221be9433a3a9b6409bf0725ac15c628cc578032_221" Content-MD5: EeBqi0UhhH9ZI8URPmhdmQ== ETag: "11E06A8B4521847F5923C5113E685D99" Last-Modified: Wed, 09 Aug 2023 07:26:10 GMT x-oss-hash-crc64ecma: 1411745452719722105 x-oss-object-type: Normal x-oss-request-id: 6650744576EC4B38309557CB x-oss-server-time: 27 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42788 Expires: Sat, 25 May 2024 02:57:45 GMT Cache-Control: public, max-age=14400 Content-Range: bytes 326812-326812/331016 Server: cloudflare CF-RAY: 8890e2f13ddaf7e4-BNA
2024-05-24 22:57:45 UTC	1	IN	Data Raw: f5 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.5	50081	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:45 UTC	728	OUT	GET /uploader/7393e7b9c4c1cf5cc9c8284ee1b106479bbea8cc.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "408C2DE2404A48F5A406E06AE3A287F6" If-Modified-Since: Wed, 09 Aug 2023 07:24:34 GMT
2024-05-24 22:57:45 UTC	644	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:45 GMT Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221cf54b7f0fc6c337a34b6dddaa3af022c76312_221" Content-MD5: QIwt4kBKSPWkBuBq46KH9g== ETag: "408C2DE2404A48F5A406E06AE3A287F6" Last-Modified: Wed, 09 Aug 2023 07:24:34 GMT x-oss-hash-crc64ecma: 16809768636961184375 x-oss-object-type: Normal x-oss-request-id: 6650744590AF5139327C9B91 x-oss-server-time: 44 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42788 Expires: Sat, 25 May 2024 02:57:45 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2f31c14f7d0-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.5	50090	104.19.234.103	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:45 UTC	376	OUT	GET /a650298a61e168fecaaa1d14adf1ee63.png HTTP/1.1 Host: img.staticdj.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:46 UTC	1046	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:46 GMT Content-Type: image/png Content-Length: 403355 Connection: close Cache-Control: public, max-age=31557600 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=550193 request-id: 152cfcc3-af86-4ace-b08b-85d10e1b58b4 strict-transport-security: max-age=315360000; includeSubdomains vary: Accept x-content-type-options: nosniff x-download-options: noopen x-powered-by: ASP.NET x-xss-protection: 1; mode=block Last-Modified: Fri, 24 May 2024 12:09:10 GMT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tg%2BDX9zH4VzrpUuKGeKglIZSqX1mAvpI1AcoeXDaWKkuKDWf3LtQ68EhMgjvCA0sH1fVRMEqNBG3spghq9YC%2BG6hs6QgpRCGrijnOLdiQirMCM1TmfCYf%2BseUpT%2FMwrAeC0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server-Timing: cfRequestDuration;dur=177.999973 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8890e2f5881cc325-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 22:57:46 UTC	323	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 20 08 02 00 00 00 54 12 91 3f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 06 27 45 49 44 41 54 78 da ec dc cd 8e b2 30 18 05 e0 96 a2 c1 18 5d b8 71 e3 7d 78 11 de 94 17 ac 2e 08 a6 d8 bf f7 4b ca c7 3b 0a 3a 3a ea 38 01 ce b3 20 40 4c 08 c4 a4 27 a7 05 41 00 00 00 70 43 18 18 82 37 11 04 00 00 00 c3 0e 58 04 ef 26 e8 05 e1 8c 7f 58 f8 23 04 00 00 70 01 01 eb 3f ba a6 1a dc ad b5 a6 66 ad f5 de 63 48 7d 84 da 6e b7 e2 59 b2 53 04 00 00 00 5c d3 18 25 5d cd 47 44 c4 bf 49 22 01 f7 a4 02 00 00 00 86 8d 22 21 44 a8 55 27 b9 4c 49 92 44 4a 99 a6 88 0d 8f 92 44 24 9e 42 44 8d 9d 10 82 b8 ad 1d 78 3f dc 2a 7d f8 72 00 00 d0 03 44 24 7a 8d 73 15 d5 Data Ascii: PNGIHDR T?sRGBgAMAa'EIDATx0]q}x.K;::8 @L'ApC7X&X#p?fcH}nYS\%]GDI""!DU'LIDJD$BDx?*}rD$zs
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: 42 22 6a 54 8b 7c 78 77 86 2e 49 92 3f 99 b9 fb d8 85 00 00 a0 1f 88 48 4a d9 fb 59 c2 ef c7 4a 22 f2 91 73 ae da 9e 47 a2 a2 28 b4 d6 c7 e3 51 6b 6d 8c 91 52 ce e7 f3 e9 74 aa 94 4a d3 94 b7 e3 f1 38 cb b2 46 00 a8 0e 47 a3 91 52 aa 7d d1 ae bf a0 f6 ce 35 58 8c 23 57 3b 51 49 29 91 78 00 00 a0 13 06 15 b0 1a 83 72 08 e1 3c 57 59 6b 39 5d 59 6b 9d 73 d6 5a 17 35 92 40 08 81 7b 29 9e 64 0c 21 38 e7 b4 d6 45 51 38 e7 26 93 c9 72 b9 5c ad 56 8b c5 22 cb 32 21 84 52 4a 4a d9 ae 60 ba 9b 16 86 f2 bf 01 00 00 b8 80 80 75 e3 96 b9 a9 e2 50 55 7d fb 8a d3 52 bb 5e b9 fa 94 78 bd 3c 47 ae b2 2c f3 3c df ef f7 bb dd ee 70 38 e4 79 7e 3a 9d 36 9b cd 7a bd 9e cd 66 22 0a 11 17 34 dd 8d 59 2f 4d 11 f2 fc e0 dd 42 8b 1f 0d ef b0 df 7e 31 01 9d 19 00 00 5c 83 80 f5 85 Data Ascii: B"jT\|xw.I?HJYJ"sG(QkmRtJ8FGR}5X#W;QI)xr<WYk9]YksZ5@{)d!8EQ8&r\V"2!RJJ`uPU}R^x<G,<p8y~:6zf"4Y/MB~1\
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: 29 07 91 86 e6 28 a5 c4 95 e6 14 ff 34 ab ed 0e c0 52 66 f9 15 5b 57 ad 1a d7 67 40 47 62 39 c4 33 14 06 cd 70 19 3c b3 28 33 b4 7d c7 63 e6 11 52 45 58 a5 15 39 ed e6 eb 6e fc d5 ad 94 5a 4c 11 ce 6d 06 53 8c 71 d6 c0 c7 50 e1 cf b6 ef b8 0b 55 e3 ef 50 a6 47 9d 31 ca f1 5f a3 14 97 19 9c bb cc 7c 16 00 68 ca ea e1 36 95 95 f7 a7 d5 4c 85 4e e8 ce 71 64 b3 76 b3 ff e6 7b 1e 36 e9 f7 61 6a 91 b0 55 27 52 ff fe f7 bf 5f 7c f1 45 cc ec e5 5b b6 c4 f2 f2 7a f5 ec d9 bb 4f 9f 6e 25 dd f2 f2 62 f8 d6 b6 2c cd 97 b8 7a b5 f6 18 e3 fa 8b 51 6d e1 4d 23 e7 2c 48 ff 83 33 c7 f6 85 58 4a 29 b0 59 e5 e5 5b cb ca 4a e7 cd 9f 2f 3c af 57 ef de 13 c6 8f 07 d8 c2 fa c1 38 73 53 ae 59 36 98 c5 76 ff 49 ed d7 63 4a 91 10 18 4a cc 9e 33 67 f5 aa 55 38 67 9c 8f 1a 39 12 0b Data Ascii: )(4Rf[Wg@Gb93p<(3}cREX9nZLmSqPUPG1_\|h6LNqdv{6ajU'R_\|E[zOn%b,zQmM#,H3XJ)Y[J/<W8sSY6vIcJJ3gU8g9
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: 17 15 61 4b 30 74 e8 50 43 6b 01 a4 82 0b c4 3d c1 fd c7 a3 31 aa 79 dc 73 43 d9 6e dd 5a 8e 9b 8c 71 84 e8 90 e5 2b 56 e0 7a d7 2e 5d a0 47 3c ea a8 a3 10 23 02 a2 6b dd ba 75 90 d0 01 a1 e1 21 06 18 8b 52 6a 58 e0 1c 6d cf 3c f3 cc 77 bf ff dd 7b ff 74 ef 8d df bb 51 ba 3e 5c c6 c5 f0 64 98 be f3 d9 e4 cc dd 5d 80 e5 f9 00 6b f1 a2 b3 0e 3c f4 a6 a1 c3 fa 56 78 85 d5 29 46 3c fd 0b 4c 49 15 10 1b fb 52 74 ab 62 09 db da 14 cb 79 70 f9 a2 a1 3f ba fc ca bb ee 54 c2 b6 84 c3 08 e7 84 5a f8 0a 86 8d 0c a3 b2 16 98 4d 5a c8 f6 e6 5d 49 a2 77 83 29 21 64 40 5c e1 7c e7 fe c1 60 cb 1e 56 89 9a fd 50 78 7b a7 fd 20 fb da 82 d1 5c a6 6a a1 2b b3 f1 0d e6 08 37 e5 c6 e3 98 df 7d 96 03 37 df 4c 7f 98 eb b1 0c 57 54 54 12 42 f2 f3 f3 b0 77 c7 5c 86 19 ad 5d bb f6 Data Ascii: aK0tPCk=1ysCnZq+Vz.]G<#ku!RjXm<w{tQ>\d]k<Vx)F<LIRtbyp?TZMZ]Iw)!d@\\|`VPx{ \j+7}7LWTTBw\]
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: c7 1f 7f 8c fb 03 1f c7 90 21 43 7a f7 ee 63 59 1c 4b 66 a5 76 64 50 4a 03 68 95 26 9f 64 3a d7 68 20 cb e5 0c c6 f1 af c2 1b 8c 40 1d ac a4 3f 28 84 94 e6 dc 48 52 d0 4c d0 96 09 38 b7 f5 73 31 4b 1d d3 b9 2e 8d 2a 05 0f 71 d5 aa d5 ab d7 ac 81 fe 7d d0 e0 c1 05 05 f9 ff 75 fe 74 45 0c ba 05 e4 85 63 88 31 0e 84 84 d5 14 84 2e d8 26 48 aa f1 23 10 48 f0 dc e1 76 01 ea 40 b1 0e 74 05 1f 6e 97 2e 9d b1 47 01 cc 82 2b 0a 2b 74 ff fe fd 47 8e 1c 75 d0 d0 83 20 b3 b6 1d 9b 50 a2 44 4d a4 b4 65 71 a5 18 74 6f 70 6f 81 0f 76 1c 1b bb 17 8b 73 bc 14 22 13 2d cb 06 d7 05 85 dc d2 a5 4b d1 49 c6 4f 18 bf 65 f3 16 ac fd eb b4 8d 18 31 a2 4f ef de f0 6a c1 b3 3c 78 c8 10 9f da d4 62 ac 36 91 00 69 4c 13 40 ab 46 7c ac 32 40 57 fe 94 63 dc 82 8c 1a 63 01 cf 0a 82 1c Data Ascii: !CzcYKfvdPJh&d:h @?(HRL8s1K.*q}utEc1.&H#Hv@tn.G++tGu PDMeqtopovs"-KIOe1Oj<xb6iL@F\|2@Wcc
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: b9 09 21 0c ba a2 8c 1a 8d ac 81 26 dc b2 18 a5 97 5d 76 f9 ec 39 b3 27 1d 3b e9 82 0b ce 1f 73 d8 18 42 48 bc 02 c9 2f e2 36 cc 71 8c 2c 84 c0 6a cd e4 02 27 01 d5 14 de 4b 07 f3 7f 58 4d 45 59 03 ce 13 c4 66 ba 29 f7 e7 bf f8 f9 35 d7 5e 7b df 5f fe f2 cb 5f fc 12 13 dd ed bf bd 7d c9 c2 25 16 e7 81 28 c5 1c 85 f0 80 71 ef bc f3 4e 42 08 7c 97 c0 58 81 af 50 29 c1 18 57 32 5b 76 92 4d 01 58 c1 bb 64 ba 91 6a cf 53 84 a4 3c a9 17 67 46 28 63 54 2a c9 88 52 5c 3f d4 10 9a e1 94 5b 38 a7 ad 3e 11 34 56 d6 db 53 6e c8 e7 67 bc 84 30 9d ef 4a a3 2d 1c 95 a4 68 44 e8 c5 90 2a 45 04 be a3 94 49 21 03 a5 91 d4 18 ab cd 9f 5f 53 8c 59 fe a7 53 92 34 9c 31 4f 11 cf f3 f9 2a 2c 01 66 f8 85 a4 bb f5 0a 44 04 03 49 a9 3a 23 a7 5e c6 5e 66 08 5b 98 d2 48 8b d5 fe 05 Data Ascii: !&]v9';sBH/6q,j'KXMEYf)5^{__}%(qNB\|XP)W2[vMXdjS<gF(cTR\?[8>4VSng0J-hDEI!_SYS41O*,fDI:#^^f[H
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: 92 26 f4 b8 a4 75 02 09 14 6d 0c eb 69 87 1d 6d e8 ba 6a e4 5f 51 46 d5 ae 5f d9 3c 3c 99 96 de 33 92 5e d7 d1 32 28 cd 64 16 c5 45 69 31 62 d9 8a 70 c9 88 d0 aa 39 a6 70 d9 14 5f b4 34 71 c3 08 c7 7f 54 7f ba 1a 12 6b 9f 58 a8 68 dd 28 68 8c 3d e3 9b d8 39 ba 32 b9 7c 8c ac 07 b9 74 63 f9 31 42 49 b2 ca 8f f1 c1 e6 32 3c 62 79 46 9b 85 df d4 64 be ef ef 20 da 02 0d 8a f0 5f 4f 99 df 0c 60 96 ab 5d 63 f8 15 ac 7c b6 65 b5 6a 46 99 96 30 5a 43 83 57 55 54 81 b8 02 96 02 c4 c1 8e 1c fb 41 b8 8b f0 2d 38 0c 4a 19 f6 8e 70 67 e0 fe a3 28 04 26 f1 a0 78 85 11 4c 18 5d aa c5 39 b2 18 43 13 6a 88 53 58 71 a7 62 34 9c 0c 1f 31 02 d5 f2 70 ab e7 cc 9e 3d 79 f2 14 bc 08 52 04 41 9b 65 14 57 d8 cd 63 63 87 cc 3d 00 73 8c 73 ac 0a f8 d3 c6 f9 8b 03 1e 8d 65 d9 fb 3d Data Ascii: &umimj_QF_<<3^2(dEi1bp9p_4qTkXh(h=92\|tc1BI2<byFd _O`]c\|ejF0ZCWUTA-8Jpg(&xL]9CjSXqb41p=yRAeWcc=sse=
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: 44 09 00 61 88 03 7a eb ad b7 a0 2e c2 56 0f 95 d7 90 28 19 0b 86 d0 05 59 6b c1 2c 83 b1 b4 01 b7 81 7a 31 f4 35 67 bc 6d b7 20 bb 6b c1 5b ad ae 4e 21 9c 18 38 09 db 5c 25 15 22 ba b1 11 c7 1c 8d 40 27 38 fb 00 89 40 2c 21 cc 18 6b 2a e6 65 28 0f e0 33 42 f8 37 6e 0b a5 14 b7 14 69 90 90 99 c9 a4 15 d8 e5 1d 88 15 c4 7e 7e eb ad cf ff fd ef c8 d6 03 1f d3 67 9f 7f 8e 35 09 c9 a6 09 21 60 19 91 49 19 6a 1e e8 57 92 ed da 61 dd f2 84 c0 03 12 02 ff 97 da 22 fb ad 24 4b 91 47 1f 7d 04 dd 0f 1a 1d e4 bb 6a 8c bb 72 3d 57 33 b8 2e a8 91 9e 1a 5a a5 a3 f6 24 11 9e a8 5f 13 3a 40 57 06 d3 ec 6e ff 0c 60 96 1d b1 3b 46 3a 20 bf 19 bc 21 9c fb 82 1e 93 82 4b 78 1e 78 2c ce 58 46 3f c7 d0 2b ba 74 e9 b2 6a d5 aa cf 3e fb 14 80 b8 04 d6 a3 84 90 1a 09 73 eb 94 cc Data Ascii: Daz.V(Yk,z15gm k[N!8\%"@'8@,!k*e(3B7ni~~g5!`IjWa"$KG}jr=W3.Z$_:@Wn`;F: !Kxx,XF?+tj>s
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: cd 64 2c 54 fd 66 17 1f 5f ba 12 3c 07 b6 fe 10 cb 83 11 c1 e3 f3 3c 77 d0 a0 c1 d0 47 53 46 51 ee be 6f df 3e 35 31 1f 52 3a b6 03 d8 01 8d 30 96 ae 7d 5b 92 15 ea e7 81 5d 73 d5 35 48 d4 19 a0 ab 60 81 31 f4 55 d0 ff f1 c1 01 ad 7c 79 5c 5e ae 3f 4c dc 3a 0e 41 56 9f 39 68 e6 9d b1 4e 44 87 88 51 3c 32 88 78 e0 0d 84 bc 44 27 86 88 9a 4c 45 52 4a 20 e3 a2 a2 22 5c 5f ba 74 09 f8 ad d3 4e 3b 6d f0 81 83 eb a8 dd b3 51 b6 d8 04 4f 93 70 c5 8c 19 33 b0 3a ea 18 8e 03 80 ae b0 21 c1 a0 80 77 1b 2e 75 8c 23 53 cf 8e 32 7a e1 05 17 00 19 00 2e 84 67 aa e6 81 56 6a a7 3c 8a 24 c4 93 c4 66 38 df 52 b6 79 f2 e4 c9 c0 4f c9 64 12 a5 8e 4f 3a f1 c4 48 34 8a c4 ee 38 41 82 2c e0 63 cc b1 60 b6 70 04 5d 7d d6 d9 67 37 27 e6 0b 4c d5 3e 91 b2 4e 94 b7 d1 00 98 bd b4 Data Ascii: d,Tf_<<wGSFQo>51R:0}[]s5H`1U\|y\^?L:AV9hNDQ<2xD'LERJ "\_tN;mQOp3:!w.u#S2z.gVj<$f8RyOdO:H48A,c`p]}g7'L>N
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: 08 fc 4a f1 78 15 68 00 24 26 85 b4 0b 6f 09 29 13 21 f0 92 52 00 de 62 19 80 2f 03 d5 6d e1 05 46 e4 39 d6 0c c7 76 6a 25 24 53 0d 7e f0 16 be ff 7b 64 ca 23 26 89 ee eb af fc d3 b6 6d dc 01 dc 76 ce ad 00 50 d6 59 1b f0 f1 c1 5d 41 ac 46 2d bd 8f 54 aa 76 5d b3 c6 f2 20 34 eb de 37 f3 6a ba 98 95 1f 3c d5 ad 9b cb 38 03 ec 80 d8 51 08 69 38 09 38 75 b0 78 a3 53 51 4a e1 61 c7 20 85 cf 77 fc e1 e3 c3 42 56 ca da 3e 6c aa 89 52 e8 e0 06 26 aa 12 18 0b b8 ed 98 6a 4c f8 85 eb ba 46 66 00 7e 02 0b 27 a6 05 70 7b d7 7d e7 5a 33 cf 28 25 6b a5 0e 67 a4 39 ac 11 48 a1 17 29 16 da a6 db 11 07 0d a7 67 9d 73 0e e4 7d 18 53 fd 06 f4 9f 39 77 76 61 87 22 3c b8 d5 6b d7 62 04 59 39 4e 45 55 a5 15 af ea d3 af ef e2 a5 4b ba 94 74 ed dd a7 77 cb 0d 0d bd 94 31 b3 63 Data Ascii: Jxh$&o)!Rb/mF9vj%$S~{d#&mvPY]AF-Tv] 47j<8Qi88uxSQJa wBV>lR&jLFf~'p{}Z3(%kg9H)gs}S9wva"<kbY9NEUKtw1c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.5	50089	104.19.234.103	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:45 UTC	376	OUT	GET /94f923b3025c1d1141c24cba82c39f5f.png HTTP/1.1 Host: img.staticdj.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:46 UTC	1052	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:45 GMT Content-Type: image/png Content-Length: 602955 Connection: close Cache-Control: public, max-age=31557600 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=1032420 request-id: 703a1ef6-aeff-44ac-9ecc-d7b97857d54b strict-transport-security: max-age=315360000; includeSubdomains vary: Accept x-content-type-options: nosniff x-download-options: noopen x-powered-by: ASP.NET x-xss-protection: 1; mode=block Last-Modified: Fri, 24 May 2024 12:09:10 GMT CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YVbw81Sf70aOjs5uIOdUe9lGipqKVcJijx4vvzFD6iKelmx3Pr4EenGDlg6%2FYOL%2Bzy1iT6D%2B%2Bw3VTNeIb%2FXNhPcqoaQciSERZV7rL%2F0EAutN%2FW5Nl3XokLtU8hyyyOonFy4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server-Timing: cfRequestDuration;dur=95.000029 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8890e2f5ad3d5e80-EWR alt-svc: h3=":443"; ma=86400
2024-05-24 22:57:46 UTC	317	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 01 c2 08 02 00 00 00 98 01 3a 9f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 09 32 f5 49 44 41 54 78 da 5c 7a 59 8f 25 c9 75 5e ac b9 de a5 ee ad bd aa f7 9e 99 e6 90 33 e2 48 5c 60 4a 22 0c d2 b6 60 58 f0 9b 0d 43 b6 df 2c c0 ff c2 7a 34 60 3f d9 04 0c 58 8f 32 e4 45 e0 83 5f 0c c1 96 21 c8 16 c8 21 09 0e c7 3d 0b 39 9c 9e 66 6f d5 dd d5 b5 dd 35 d7 58 d2 df 89 ec 2e ce 28 fa de ec bc 99 11 91 27 ce f2 9d ef 44 16 7f f2 97 df 57 52 44 ce 6b ee 85 ef ca b2 68 b9 88 86 c3 7c 73 2f db 3f 60 5c 31 c6 bd 67 a6 69 35 67 ce 37 8d af 9e 9f 1c 0d 92 6c ba b1 71 76 72 b2 5e 2e 07 09 b5 c9 e6 56 59 57 de 75 e9 68 a0 b3 7c 5d 95 47 4f 8e 4f 5f 3c bf 73 fd Data Ascii: PNGIHDR :sRGBgAMAa2IDATx\zY%u^3H\`J"`XC,z4`?X2E_!!=9fo5X.('DWRDkh\|s/?`\1gi5g7lqvr^.VYWuh\|]GOO_<s
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: 53 29 34 57 72 38 da 78 eb ad b7 9c 73 eb 62 f9 f8 e1 a3 e7 cf 9f 8e 87 f9 de de 6e b1 5e 3f f8 ec de 3f f9 c7 7f 70 ed da b5 0f 3f fe 88 29 f9 d5 af fe 86 8c f4 78 3c de d9 dc 6a ea f2 70 6f ff e8 e8 68 b1 5e 59 ef ae de bc 91 0f 07 cf 1e 1f 9d 7c 76 c4 9d 5b b6 2b a6 3a a7 ad ed 8c ef 78 55 35 9b a3 9d 34 19 de be f6 3a e7 72 b1 2c a3 24 49 b3 98 c7 71 dd f9 9f 7d 70 b7 ae aa 77 de 79 7b 3a 1a 47 5a 1e 1f 9d 7c ff cf be 7f f7 67 1f 46 3a 31 8d e1 82 35 4d c5 b8 e5 9c fd e6 d7 de d9 3e d8 59 16 6b c1 15 d6 a5 e3 a4 aa aa ce b3 3c cf 65 27 ae 1e 5e f1 a6 cd d2 d4 35 4d 9a a6 c2 3b cf 58 61 ec 7c bd 2a cb d2 38 53 9b d6 db 3a 4f b3 ad 8d e1 8d 83 2b 6d b5 5e 2f 17 4d 55 d8 ce 31 c1 5b db 94 75 7b f5 ea eb 4d d3 2c 97 cb a2 5c 30 e6 e3 24 c2 3c 6d 5d e5 59 Data Ascii: S)4Wr8xsbn^??p?)x<jpoh^Y\|v[+:xU54:r,$Iq}pwy{:GZ\|gF:15M>Yk<e'^5M;Xa\|*8S:O+m^/MU1[u{M,\0$<m]Y
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: c7 42 b0 d2 1b 97 8e 66 c0 b5 74 e8 62 75 ba 9c a7 59 14 eb 8e 75 56 09 26 93 c8 09 5d 38 bf 32 5e 38 be 2b 47 dc 74 82 4b a1 b4 37 08 c2 42 f9 16 4b cb 73 5d 14 8b 64 30 3c 59 ae a2 c9 1e 4c b3 6a 65 9c 64 bc aa a5 b7 40 c0 08 d8 c8 ad 92 2c d5 2a 49 95 96 50 6a 94 e9 18 30 15 7b 05 70 8b 39 61 b5 90 60 07 d1 30 ee 14 af 63 d6 46 ca 28 01 49 4c ac 15 e1 ad 8a 67 67 e7 1f fd bf bb 1f be 7f 17 c0 75 f6 fc 71 64 aa d6 54 c3 f1 74 65 5c b6 b5 f7 5b bf fd 3b e3 e9 76 6d dd 7c 35 9f 9d 9d 2e cf 4f 7d b3 96 ce 4a 57 47 9d c7 62 39 66 e3 fc 65 ce 12 e1 18 b2 9b f7 9e 8e 8c 93 cf b0 ae 6f 2c 74 62 d4 fa 4b 7d 1e a1 ce ce b9 3e 43 e1 fb f9 0e 42 5c 9e 87 94 72 d9 3a 81 9e 9e 33 42 69 6b 29 bb 84 a6 9a 0e ce 66 d7 75 2d 9c 91 9d 6f 5b b2 a0 b4 4d bc b9 cd 48 56 6f Data Ascii: BftbuYuV&]82^8+GtK7BKs]d0<YLjed@,*IPj0{p9a`0cF(ILgguqdTte\[;vm\|5.O}JWGb9feo,tbK}>CB\r:3Bik)fu-o[MHVo
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: 28 1f 8e 76 b6 f6 76 c7 23 28 63 c5 22 ab c8 04 3a 4a 62 c4 44 e7 73 c6 81 2d b0 82 b2 58 b9 02 37 c3 8a 79 bf 6b 20 7c 28 2c ad 20 6c 63 11 9e 4f e6 86 ad 23 cb 63 86 ae 3a d6 22 d6 4c 3a ab 45 13 05 d0 10 0a 8c d8 ca 5a c3 fa 54 28 06 45 67 da 72 66 3c 86 5b c6 9d 77 75 db 94 5e 77 60 50 78 88 63 15 e5 73 ce 14 57 da 01 69 5a c5 d3 b1 34 99 94 d0 ec 60 30 80 0d b1 e4 2e 8e 12 9d 13 b2 38 5f c2 82 0e 9e ea 74 a0 ee 9a b2 12 e3 98 bf 31 19 41 65 a7 55 ec 1d 44 8f e2 28 c3 79 94 6b e9 b1 70 5c 67 8a f9 48 60 32 85 a0 8c 22 15 6b 90 37 cc 1c a5 02 14 55 46 e4 8c 0a 29 0f 3d 23 de a8 ce 67 5a 82 52 6b 01 a8 a6 7d 8a 80 6f e6 b3 cf ee dd 7d ff fd c7 8f 1e 4c 47 43 83 04 bf 3c 8d 35 6f 1a 88 23 b1 20 f4 d2 9a 23 f2 61 fd b0 0f 40 57 29 9a 84 64 d6 51 84 f4 e0 Data Ascii: (vv#(c":JbDs-X7yk \|(, lcO#c:"L:EZT(Egrf<[wu^w`PxcsWiZ4`0.8_t1AeUD(ykp\gH`2"k7UF)=#gZRk}o}LGC<5o# #a@W)dQ
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: be 72 fb e2 e2 6c 30 c8 8b d5 1c 0b dc dc df 3f 9d cd a2 2c 27 82 ec ab 68 48 3c 9b 39 02 0f 28 8f 77 a6 5c cf aa 72 3e 9d 1c 0e 37 52 a6 2c 42 51 a5 72 e7 70 27 81 53 6c e7 42 97 ac 6b 29 16 9c 25 5b 0a 62 48 cc 6b 6b 84 f4 22 06 26 80 30 75 89 64 31 21 19 81 0f b3 c2 4b 18 54 76 0e 8f e8 21 8f 98 39 60 bc b6 a6 e1 42 19 d6 b6 42 55 da 9b 41 6a c6 a9 e6 a9 48 95 66 75 b7 3a d5 e4 00 89 6b bd 01 dc a6 1a ec 79 d5 96 5e 24 5d 57 e7 a9 1a 8f a7 3b bb e3 c9 64 dc ae 6c 07 df 6d 57 de db 68 90 56 36 ae ac 75 0c 04 b7 69 aa f2 ca c6 70 3c da 5e 95 dd c9 45 d9 f9 81 e4 d3 b4 93 95 f2 46 5b 2f 68 a7 54 7a 97 83 03 65 52 1a ee da 66 9a 0f 36 b6 37 97 8d 8d 8c 98 19 64 f5 b1 56 63 c6 79 24 1a e1 2d 2c a0 24 57 81 f2 61 b1 61 3b 2b 14 10 0a be 4e 45 52 c2 55 c4 c8 Data Ascii: rl0?,'hH<9(w\r>7R,BQrp'SlBk)%[bHkk"&0ud1!KTv!9`BBUAjHfu:ky^$]W;dlmWhV6uip<^EF[/hTzeRf67dVcy$-,$Waa;+NERU
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: 24 3f de b9 7e 6b 1b 29 a7 9e 5f 0c 45 a2 c4 a0 b5 59 db 0d 8b 2e 4f 92 31 1f ed 16 27 65 05 80 e7 ac 61 54 31 54 42 b9 b0 5a d2 0b 05 08 6d c7 93 ef 3b 0f 0f f4 b1 04 2c f2 70 19 80 22 85 f2 1e e6 b3 bf fc f4 33 59 ec bc 7d eb da cd 5b d7 91 41 9e 1e 3f 3f 3e 3b f7 4d 87 37 07 9b 5b e3 24 da 6e cd 3e 8c 18 27 09 d7 31 3e 30 60 a4 75 e7 a5 03 70 59 c0 17 63 44 0f 98 73 56 09 0f 10 d8 da 9a e2 6f 51 90 e0 bc ad 3a 6b 90 41 3a 7e c0 c5 4a 44 00 b9 8a 71 05 e5 00 23 88 bf 97 85 6b 10 48 8e 5b 1f 31 c5 65 dc 59 4e b1 4d 21 8c 8f 6f 3d 13 74 c9 d4 9c 6c e2 3a 7a 54 47 11 4a b0 05 fa 03 95 c7 93 b8 62 ae 16 9d c9 13 b1 b3 15 65 52 e6 11 17 6d ee c6 11 16 eb 13 c4 66 24 79 17 a7 f1 d9 52 d4 c7 6e 46 f0 b1 bf bd fd fa 57 ee 5c bb bd 0b 5a 39 3b 5b c0 d5 b7 a7 83 Data Ascii: $?~k)_EY.O1'eaT1TBZm;,p"3Y}[A??>;M7[$n>'1>0`upYcDsVoQ:kA:~JDq#kH[1eYNM!o=tl:zTGJbeRmf$yRnFW\Z9;[
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: 43 e5 3e 34 22 82 61 a7 14 6f 45 ad b5 11 98 b1 85 ed 29 2a e9 2e 2c 14 1a d9 9d 29 9a 4e 60 16 25 54 d4 ff 65 25 26 13 5a 73 78 4d 60 cb 4c 2a 4c 22 ac cf 3b 9e 7a 91 5b ae 57 6d 75 ff 78 e1 d7 c6 ad 52 09 4f 6b bc 70 3c 8e 1d e7 8d e7 08 96 a1 97 be 12 da 22 d5 d6 8b 4e 3c 3f bd 7f f1 91 fd 92 7d ed 8d dd 9d a1 8e 44 8c 5d 2b b6 34 a2 e0 f1 8c eb d1 30 7b 5a 30 3b dc 5d a9 a1 b0 ac 94 79 c5 8b f3 d2 b0 6c c3 09 4d 31 22 64 a0 b3 0d 6f 5b 4e 84 9c 31 09 b6 1d 71 42 08 83 08 e4 12 31 1b de 2f 0f 52 df 59 7c 26 1b 7a 77 9a 0f 93 43 e4 65 e8 f9 ca fe 54 31 9f 67 49 d3 b0 c5 7c 9e e7 e9 c6 74 63 be aa 28 b9 60 81 5c 37 4d 0b 00 b3 2d 41 1b 8b 18 f9 8f ad 84 88 f2 5c 44 49 0a 05 b7 96 25 49 d6 79 40 d6 06 eb 40 aa 8a 8e c1 1f 58 c0 8d d6 b6 00 da aa 33 45 9c Data Ascii: C>4"aoE).,)N`%Te%&ZsxM`LL";z[WmuxROkp<"N<?}D]+40{Z0;]ylM1"do[N1qB1/RY\|&zwCeT1gI\|tc(`\7M-A\DI%Iy@@X3E
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: ea 18 ab e9 78 2a 25 bf be bd ba bc bc 38 be 7f cf b5 6d 0f ab b0 bb 03 9a 85 18 6d 45 03 cf 71 b1 1a ec d3 5a 1b e1 16 4d fb e5 67 9f c3 5d 36 75 f5 8f fe 83 7f bf 29 b7 b7 97 e7 a8 fc 38 83 05 7a ef e2 e2 02 4c 70 94 46 bd 6d 97 b7 6b 37 ca 00 1a c6 50 ec 1e 7e 9a 64 54 bc 34 4d f1 ae b1 b9 40 50 de 0f 2f 26 38 6d c2 19 92 30 4f 4b a8 9a e0 7f 94 95 06 c9 c6 2b a0 70 03 67 b9 62 b9 64 91 0c ac 1f c3 97 a3 1b 04 09 b1 84 98 f9 6b 0d f0 ae 1d 91 cc ce 05 d2 09 d1 3b 23 83 4e f2 16 b8 47 59 a8 c0 0d 06 83 79 63 e6 39 1c b6 21 4b 2f d1 9c 51 e4 63 15 e6 ad d9 b0 16 e8 4e e3 d3 c2 34 e1 dc 67 27 85 c0 4e c1 94 d1 6e 18 6a 38 f8 f4 5e c9 06 89 e7 0e ef d0 7b ea 75 d1 07 c2 40 10 8d c3 a0 a8 90 b3 71 02 a0 66 21 57 a1 e3 7a db 34 6d ad 6c 1b 53 04 ab 65 4c 07 Data Ascii: x*%8mmEqZMg]6u)8zLpFmk7P~dT4M@P/&8m0OK+pgbdk;#NGYyc9!K/QcN4g'Nnj8^{u@qf!Wz4mlSeL
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: 94 11 b7 b8 8a f3 77 0a 38 65 ba 24 14 1c 66 30 8f 13 7c b2 bd c9 62 c5 80 bf 4d 1b 18 c8 07 31 10 8e fe a3 f0 81 25 8b 03 c9 ee 3a a8 3f ea 0e d2 83 3a a6 69 ae e4 52 01 a4 89 ad a9 5e 09 f4 39 3e a0 61 2e 2f ce 5e 9f be 7c e7 fd 77 23 44 8a 27 b3 20 4d fa b6 40 f8 6a 53 d7 eb a2 74 ba 9b cc 45 12 a5 91 0a 51 06 0c 9e 7d 7e 79 61 9b aa ab ab 9b b3 d7 dc 76 c9 38 0c ba 26 9f 8f 42 66 45 6f 4c 53 04 56 f3 de ae 6e ae a8 8c 12 f7 b4 fe 5e 32 0c c3 38 a4 d8 a8 ea a5 f5 66 b2 46 bb 53 57 7d 8f 1b f7 78 39 cf c6 78 44 e6 a4 57 50 4e 49 69 91 98 bb 69 24 13 0f 5d 01 79 f0 2c 14 44 b0 82 de 28 21 86 20 ea 80 d1 3a b0 96 0a d3 ab 50 e1 77 2d fb 5a ba ba 0f 5a cb 3a dc c0 2b 96 a7 63 5e f4 bd 9c 73 12 07 02 77 af 1d 5e ef 9c 77 2f d0 09 fe b1 1b 8c 54 1b ef cc 02 Data Ascii: w8e$f0\|bM1%:?:iR^9>a./^\|w#D' M@jStEQ}~yav8&BfEoLSVn^28fFSW}x9xDWPNIii$]y,D(! :Pw-ZZ:+c^sw^w/T
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: ed aa 28 22 21 e2 30 e6 38 db 19 9f e2 a0 ea 3b 32 08 a8 fe 00 03 8e 0d e2 c4 ee 98 b5 a5 40 63 10 2b 49 23 00 89 d5 09 c3 ac a1 70 86 b6 06 ba 59 39 31 0d a3 88 ba c6 47 1a 41 71 f2 1c a5 e3 a6 6d 75 a3 b5 6d 93 6c 94 a6 49 6d c3 d4 c7 f4 4c d0 b4 1d c3 d9 4d 63 44 50 99 ce ea 56 2b d2 8c c0 1a d3 75 ad ae 1b c0 1f cc 73 18 b1 8e 90 57 f5 14 78 6b fa ae 63 5c f6 38 46 1b 49 ac 5c 48 c9 f1 46 5c cd e7 1b f0 03 ee 0e 2f 68 33 59 ed ed ed 91 4c 74 8d 2e d6 ae eb 38 b3 28 3a dc b1 97 2f 9f 47 91 ca 8f 8e 86 27 4d 51 55 34 c2 8b 97 af b8 50 43 1b e2 6a d7 d7 d7 49 1a 1d 1f ec 5f 9f be ae db ea e5 b7 5f bb b6 38 98 4d 43 de e7 89 4c 41 1b 54 1f 2b 34 95 86 5e 8e d3 e8 f2 f2 32 e6 9c 94 98 46 fb 4a 9f db a5 5b 0b 15 01 db 9d e0 2d 09 ad b0 8c a3 25 51 73 a6 99 Data Ascii: ("!08;2@c+I#pY91GAqmumlImLMcDPV+usWxkc\8FI\HF\/h3YLt.8(:/G'MQU4PCjI__8MCLAT+4^2FJ[-%Qs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.5	50087	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:45 UTC	459	OUT	GET /liquid/buyer/public/img/default.png HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "66387ef8-1a84" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:46 UTC	585	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:45 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT etag: "66387ef8-1a84" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 221073 Expires: Sat, 25 May 2024 02:57:45 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2f61f2bf7e8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.5	50086	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:45 UTC	494	OUT	GET /uploader/8e02e850002eb3ce0a0be48daf2693336403eb86.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "5521FF8608C8B926CD70B0204FADB2F5" If-Modified-Since: Wed, 09 Aug 2023 07:26:16 GMT
2024-05-24 22:57:46 UTC	642	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:45 GMT Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221cfd17a9d7dddde6172b2f0a611a29e3228316_221" Content-MD5: VSH/hgjIuSbNcLAgT62y9Q== ETag: "5521FF8608C8B926CD70B0204FADB2F5" Last-Modified: Wed, 09 Aug 2023 07:26:16 GMT x-oss-hash-crc64ecma: 8998513415771323797 x-oss-object-type: Normal x-oss-request-id: 665074451F5247373259390A x-oss-server-time: 1 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42788 Expires: Sat, 25 May 2024 02:57:45 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2f60bc36a7a-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.5	50085	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:45 UTC	701	OUT	GET /uploader/dd0bf6a7277d7e58ec2c01e3627a45275be16a24.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=326812-331015 If-Range: "11E06A8B4521847F5923C5113E685D99"
2024-05-24 22:57:46 UTC	737	IN	HTTP/1.1 206 Partial Content Date: Fri, 24 May 2024 22:57:45 GMT Content-Type: image/jpeg Content-Length: 4204 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221be9433a3a9b6409bf0725ac15c628cc578032_221" Content-MD5: EeBqi0UhhH9ZI8URPmhdmQ== ETag: "11E06A8B4521847F5923C5113E685D99" Last-Modified: Wed, 09 Aug 2023 07:26:10 GMT x-oss-hash-crc64ecma: 1411745452719722105 x-oss-object-type: Normal x-oss-request-id: 6650744576EC4B38309557CB x-oss-server-time: 27 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42788 Expires: Sat, 25 May 2024 02:57:45 GMT Cache-Control: public, max-age=14400 Content-Range: bytes 326812-331015/331016 Server: cloudflare CF-RAY: 8890e2f61f3bf7e8-BNA
2024-05-24 22:57:46 UTC	632	IN	Data Raw: f5 32 d4 f1 33 d4 7e c9 f6 8f d9 46 54 8d 38 a7 ba 03 ee 6e 5c bf 06 53 28 90 8c b6 33 58 63 e1 b6 fb 10 d0 7a 8a 49 41 a3 67 d4 ec ea 5d f8 98 75 0a 98 09 3a 4d 46 72 6b 2c b9 e5 31 38 7c 37 98 d5 9d 69 27 36 b5 97 2c c4 9e 12 95 ec d1 88 9d 1a 8f d1 ef ec 58 b1 6f ce f2 99 7b d4 22 c9 0e 76 e3 6f 29 08 67 d4 ab 55 35 64 26 dd f5 e1 bb e1 bb ee 27 ba 03 2c fb 9b 97 2f bf 31 98 69 1c 8c d7 32 dc 68 6b 7d 8b 8d 21 88 48 7a 32 3a 8d 6b 63 d4 d5 18 1d ad 53 07 28 f6 6e d1 77 cd 1e 77 31 db 47 11 8f c9 29 cd b8 eb 68 2d 2c 64 8c b9 b2 d4 61 cf ee 36 2d de dc bf 0d cb fe 4f 98 cd de a1 0e 77 1e bc 74 e1 da 33 4a 48 69 b3 97 dc a7 c8 ea 21 09 2c a5 bd 27 be 24 b7 be e1 0b 96 f9 11 2c 58 63 42 59 49 48 82 1b 10 b9 32 3c d9 22 c6 a3 1a fb fa 59 85 41 b1 d2 71 32 Data Ascii: 23~FT8n\S(3XczIAg]u:MFrk,18\|7i'6,Xo{"vo)gU5d&',/1i2hk}!Hz2:kcS(nww1G)h-,da6-Owt3JHi!,'$,XcBYIH2<"YAq2
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: bf e6 56 14 5b e8 2a 4b 99 29 5b 91 eb 7d da 44 79 f0 5a fb ac 33 ae f6 c6 cb 16 12 12 2c 58 b1 61 c6 a5 3e 5e 90 a9 ba ba c9 e5 1b 57 b4 de 4f a9 47 07 56 b5 bb 19 67 fa 11 d8 98 fa 92 5f 61 93 df 7b 91 f2 76 59 57 6b 8c 51 f7 5a e4 36 76 ca c1 d9 db 3b 21 88 aa d5 b0 b8 44 95 b4 76 23 87 da 15 97 da e2 54 57 5e 49 95 a3 b2 30 d7 f3 9a f9 a5 f1 bf f6 27 e5 46 0f 0a ad 87 c3 a9 5b 91 89 f2 9b 1d 8b ba 85 5e c9 3e 96 25 52 a4 9b 6e a4 9b f8 9c f9 97 2e 5c b8 de ec c6 62 6c 5a 8d 0d 11 24 31 8a 25 6a 77 13 b1 15 7e fd 09 99 cc fe f1 d5 b8 dd fa 88 4c 75 12 3b 64 76 88 ed 10 a6 2a 88 ce 8c e8 ba 2e 85 51 31 3b 97 7e 05 df 81 72 c5 cb fd cf 41 bf ba 24 28 d8 53 48 75 db e8 3a 92 7f 78 91 1e 7b e4 53 49 a1 73 12 56 18 f7 b6 36 58 d0 b0 91 a7 89 62 c2 8b 7c 93 Data Ascii: V[K)[}DyZ3,Xa>^WOGVg_a{vYWkQZ6v;!Dv#TW^I0'F[^>%Rn.\blZ$1%jw~Lu;dv.Q1;~rA$(SHu:x{SIsV6Xb\|
2024-05-24 22:57:46 UTC	1369	IN	Data Raw: 1b 98 69 ea e2 ca f4 72 de e7 2b 91 6e e3 10 b8 6c 5b b8 b6 fb 3e 2b 3f 03 2c bf 4b fd 88 e1 f1 0c 8e 0a b3 e6 c5 b3 e1 1d 5e 23 e8 2a 14 23 ce b7 d0 cb 85 8f 42 f8 5f 03 3c 57 43 b7 8f 80 db 33 48 72 63 cd e3 ba e5 f7 dc b9 72 e5 cb 97 2e 5f 75 f7 dc bf e4 9d 08 7a dc 34 e9 76 84 e9 f6 64 e9 d8 5a 12 29 56 71 d2 e6 cd db 91 c0 c1 a7 63 68 6d f9 e2 64 dc 62 be 45 5c 75 4a 9a 09 39 ea db 2d b9 31 3d f3 8e 82 80 ce a6 1a 94 52 b8 a1 1d 75 2a 75 b9 68 78 8e 12 5c a6 87 db ae 52 2f 51 bd 51 85 a6 9c 75 23 2c ca c8 c4 d3 d4 f3 69 7e b3 cd a5 d6 a2 15 0c 32 e7 23 26 15 75 3b 48 ae 88 8d 55 75 a2 e6 4a 0e 78 88 cf a1 8b d1 df a5 86 da 6c cc df 57 ba cd b4 2a 52 a5 84 f4 a9 a7 a7 89 82 8b 70 6d 41 2f 99 3a 0e a3 7a 18 bc 3b a6 b9 11 1a be e7 c9 9d 94 53 77 15 38 Data Ascii: ir+nl[>+?,K^##B_<WC3Hrcr._uz4vdZ)VqchmdbE\uJ9-1=Ruuhx\R/QQu#,i~2#&u;HUuJxlW*RpmA/:z;Sw8
2024-05-24 22:57:46 UTC	834	IN	Data Raw: 34 34 2a 46 9c f4 b1 e6 99 b9 22 8e 06 8d 38 dd d4 64 61 85 94 ac e6 54 c3 42 b4 1b a7 d1 09 ce 84 ed 21 3b 97 28 e1 e7 5b a3 2a 61 dd 2e a5 ee 58 51 68 4a ec 94 6c d1 37 e8 8e 45 38 66 b0 a2 b2 3b 73 ea 3a 15 25 27 66 52 c2 d4 93 f4 98 e2 a8 d9 3d 4c 5f 23 ab 2e 21 b9 55 52 8d f9 12 8c e1 83 9c af c8 a7 5f b4 4d e4 b3 45 1a d3 55 12 cf 6d 7c 07 1b 41 7c 0a ce cf 72 e6 88 4e b7 60 89 57 ad 1a 26 1e b4 a6 b9 8a 2d b3 68 45 42 7a 12 d2 09 8c 89 61 8c 7c 37 e0 a7 2e ce 5d a1 5e 3d a4 55 6e bf d3 cc 64 74 64 1a b1 62 c3 6a 28 a8 f3 3d 06 b4 1a e0 b9 1a 5d ac d1 4f 0b 92 1c ba 15 d5 4a 77 ba 17 a7 7b e8 60 5b ca d1 8f 85 e4 cc 35 54 a3 66 53 8d e6 be 26 1b 0b 1a 78 67 a2 e4 62 e2 e3 5e 42 10 a2 c4 89 ab 8b 42 5c ca 52 49 10 aa e4 dd 8b 48 79 88 27 d4 c6 dd bb Data Ascii: 44F"8daTB!;([a.XQhJl7E8f;s:%'fR=L_#.!UR_MEUm\|A\|rN`W&-hEBza\|7.]^=Undtdbj(=]OJw{`[5TfS&xgb^BB\RIHy'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.5	50082	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:45 UTC	968	OUT	POST /buyer/user/select-coupon HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 17 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=lego Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:45 UTC	17	OUT	Data Raw: 7b 22 63 61 72 74 5f 74 6f 6b 65 6e 22 3a 22 22 7d Data Ascii: {"cart_token":""}
2024-05-24 22:57:46 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:46 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:46 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:46 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 34 36 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:57:46"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.5	50084	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:45 UTC	494	OUT	GET /uploader/75bb66d9a11a9ab16f2c075001ef48e9978f6a9b.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "DA7F025E7ABBCC869729C6B497B32A66" If-Modified-Since: Wed, 09 Aug 2023 07:26:50 GMT
2024-05-24 22:57:46 UTC	643	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:45 GMT Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221d1f4e30e49d095b9095e9dca995b966881575_221" Content-MD5: 2n8CXnq7zIaXKca0l7MqZg== ETag: "DA7F025E7ABBCC869729C6B497B32A66" Last-Modified: Wed, 09 Aug 2023 07:26:50 GMT x-oss-hash-crc64ecma: 1784269405410895423 x-oss-object-type: Normal x-oss-request-id: 665074458BAF67343020E0CC x-oss-server-time: 77 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42788 Expires: Sat, 25 May 2024 02:57:45 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2f62959f7f8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.5	50083	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:46 UTC	1294	OUT	GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591463905&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1 Host: www.cravob.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=lego Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:46 UTC	147	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:46 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close
2024-05-24 22:57:46 UTC	81	IN	Data Raw: 34 36 0d 0a 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 64 68 41 51 41 42 41 50 41 41 41 4d 50 44 77 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 46data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.5	50088	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:46 UTC	610	OUT	GET /buyer/user/user-capi HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:46 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:46 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:46 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:46 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 34 36 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:57:46"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.5	50091	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:46 UTC	494	OUT	GET /uploader/7393e7b9c4c1cf5cc9c8284ee1b106479bbea8cc.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "408C2DE2404A48F5A406E06AE3A287F6" If-Modified-Since: Wed, 09 Aug 2023 07:24:34 GMT
2024-05-24 22:57:46 UTC	644	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:46 GMT Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221cf54b7f0fc6c337a34b6dddaa3af022c76312_221" Content-MD5: QIwt4kBKSPWkBuBq46KH9g== ETag: "408C2DE2404A48F5A406E06AE3A287F6" Last-Modified: Wed, 09 Aug 2023 07:24:34 GMT x-oss-hash-crc64ecma: 16809768636961184375 x-oss-object-type: Normal x-oss-request-id: 6650744590AF5139327C9B91 x-oss-server-time: 44 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42789 Expires: Sat, 25 May 2024 02:57:46 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2f7fbb8f7d0-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.5	50093	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:46 UTC	728	OUT	GET /uploader/35ba491724c524231c180060c6634fbcb3366865.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "2BF63D8311FF49E15CCA56A593F1E064" If-Modified-Since: Wed, 09 Aug 2023 07:22:31 GMT
2024-05-24 22:57:46 UTC	644	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:46 GMT Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2214d6bfc29077121919605a7bfa5f434ca66808_221" Content-MD5: K/Y9gxH/SeFcylalk/HgZA== ETag: "2BF63D8311FF49E15CCA56A593F1E064" Last-Modified: Wed, 09 Aug 2023 07:22:31 GMT x-oss-hash-crc64ecma: 13441064737030444594 x-oss-object-type: Normal x-oss-request-id: 66507445342C4831336B56A2 x-oss-server-time: 31 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42789 Expires: Sat, 25 May 2024 02:57:46 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2fc2b21f7cc-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.5	50092	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:46 UTC	728	OUT	GET /uploader/3474c0a0e52dc1984476bef3a986c4b06b9ce11e.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6F383755A7DD9EA0DF138871D81DAD2A" If-Modified-Since: Wed, 09 Aug 2023 07:22:25 GMT
2024-05-24 22:57:46 UTC	644	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:46 GMT Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="22100b1940199bdf78d7e3c1bdb91b7d88877806_221" Content-MD5: bzg3VafdnqDfE4hx2B2tKg== ETag: "6F383755A7DD9EA0DF138871D81DAD2A" Last-Modified: Wed, 09 Aug 2023 07:22:25 GMT x-oss-hash-crc64ecma: 11964597626529005413 x-oss-object-type: Normal x-oss-request-id: 66507445D561043631474AE2 x-oss-server-time: 32 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42789 Expires: Sat, 25 May 2024 02:57:46 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e2fc3d40f7ec-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.5	50096	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:46 UTC	627	OUT	GET /uploader/bae3b8c20de926b7be25fbf7285b22e3d630f6fa.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:47 UTC	680	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:47 GMT Content-Type: image/jpeg Content-Length: 203822 Connection: close x-oss-request-id: 66511B6B1F5247393147DD6B ETag: "FAE37E5AF3DA89FCE1D0119088253FB5" Last-Modified: Wed, 09 Aug 2023 07:22:16 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2874139532559993356 x-oss-storage-class: Standard Content-Disposition: inline; filename="221adb4795f8ee4d7ca8411886d4a975c1495724_221" Content-MD5: +uN+WvPaifzh0BGQiCU/tQ== x-oss-server-time: 124 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:47 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2fcdfbcf7e4-BNA
2024-05-24 22:57:47 UTC	689	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 22 56 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0a 01 00 00 03 00 00 00 01 0d 88 00 00 01 01 00 03 00 00 00 01 0d 88 00 00 01 02 00 03 00 00 00 03 00 00 00 86 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 8c 01 1b 00 05 00 00 00 01 00 00 00 94 01 28 00 03 00 00 00 01 00 02 00 00 01 3c 00 02 00 00 00 09 00 00 00 9c 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 dc 00 08 00 08 00 08 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 69 6d 61 67 65 72 79 34 00 00 00 04 90 00 00 07 00 00 00 04 30 32 32 31 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 1a 18 a0 03 00 04 00 00 00 01 00 00 14 80 00 00 00 00 00 06 01 03 00 Data Ascii: JFIF,,"VExifMM*(<i-'-'imagery40221
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 73 1c f6 e9 3b 71 bb ca 0c c5 7e 62 07 a8 eb ee 2a f6 87 7b 15 ad ce 9a 4a c4 1e 39 45 d3 b6 06 ec 2a 8d aa 4b 74 ce 18 9e 70 43 0a 8a 3d 55 e5 48 53 51 95 8f 96 cc 0c 8c a5 89 46 54 40 38 e3 e5 0a 4f d4 f7 24 d5 ce b5 57 2e 68 2d 2d fa bf f2 32 85 2a 29 72 c9 eb 7f d1 7f 99 46 fb c3 f7 71 4c d1 c4 16 50 a2 56 ca 90 38 8d 99 4f 5e ff 00 29 c0 ea 7b 56 65 d5 ac d6 13 ac 73 80 1c a8 62 a0 e7 19 ec 7d eb a1 92 6b 4b a5 96 de 29 a7 96 5b 92 ea 36 b6 0a b1 91 88 ce 7a a9 04 13 f9 77 e3 1f 55 f3 75 2d 52 79 a1 89 8b 4a d9 01 45 3a 55 2a 4a 5e f6 ca e3 ab 0a 6a 3e ee ee c5 19 0e f1 d3 9a 7c 16 b3 5c 48 12 08 99 db d1 46 6b b6 f0 97 c3 9b fd 45 d6 e7 59 91 34 cd 3d 7e 66 96 e0 ed c8 ff 00 64 75 3f 85 77 92 6b 9e 1d f0 f5 ab 69 be 17 b5 12 ca 3e 77 bd 90 02 4e cf Data Ascii: s;q~b{J9EKtpC=UHSQFT@8O$W.h--2)rFqLPV8O^){Vesb}kK)[6zwUu-RyJE:UJ^j>\|\HFkEY4=~fdu?wki>wN
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 07 3b 41 52 4f 27 1c 76 ae 77 5f f1 47 88 2d bc 4f a8 e8 70 6b 17 f1 e9 b6 8e f1 45 15 8e 11 c6 14 9c 7c a3 24 67 ae 7b 66 a7 f8 19 77 7b a9 f8 db 51 9f 52 d4 ae 6e 5a de 06 95 1e e2 77 62 8f f7 43 64 9e 0e 30 33 e9 c5 7c cd 47 5d 7b fc cb a3 fb cf 76 14 69 47 ec 9e d1 e2 7f 15 58 7c 2a b4 d3 74 7d 2a d0 36 e9 92 e5 e3 81 42 46 d0 e1 90 ae 7f bd 95 1d bb 75 af 9e f5 7d 62 7d 4e f6 ea e6 ea 42 f3 5c 4e d3 33 67 bb 67 35 e9 5e 24 d1 f4 69 bc 2d e1 68 ee 75 2d d2 49 21 43 78 33 b4 41 e6 3e e1 82 07 25 db 8f c6 bc df c4 1a 75 a5 b5 fd df f6 4d c8 b9 b0 81 d5 52 43 8c b0 23 db ae 08 20 9a fa 3c 05 4a 71 8a 8a f8 ad af df 63 c2 c7 d2 aa a5 79 7c 3d 3f af 91 e8 9e 15 d3 ad ac 60 26 fe 68 9e 69 11 1c 29 5c ed 07 38 39 f7 c5 57 f1 74 96 e7 6a c5 29 72 32 70 a7 00 Data Ascii: ;ARO'vw_G-OpkE\|$g{fw{QRnZwbCd03\|G]{viGX\|t}6BFu}b}NB\N3gg5^$i-hu-I!Cx3A>%uMRC# <Jqcy\|=?`&hi)\89Wtj)r2p
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: ee 8e e7 02 b6 7c 77 f6 ad 4b c5 da b5 e9 86 45 f3 67 67 20 03 85 27 04 8f c0 f1 58 d3 e9 93 b5 93 45 35 cc 31 2b 30 60 1d f9 3f 80 cf f9 35 f5 5c aa 74 a2 bc 91 f3 de d1 53 a8 db 66 86 99 ac dc ff 00 6e e9 77 3e 63 49 2a 4d 1e 0b 1c e4 0c 60 57 a8 c1 67 35 cf ed 07 a5 ea 10 c2 cf 62 d7 a1 4c ca 32 a1 c4 64 91 fa 57 96 f8 47 46 9e ef c4 16 cb 69 79 09 68 d5 a4 8a 59 7e 55 de a3 e5 03 39 cf 38 af 71 f8 7b f6 05 d5 fc 20 d6 6c fe 75 d5 dc ca 4c f3 e6 49 15 21 90 92 53 bf 21 4e 7b 6e eb 5e 5e 26 b4 a3 5d 28 5b 6b 33 d1 c3 d3 8d 6a 0e 4e fa 3b a3 e7 7f 88 ff 00 2f 8a b5 51 e9 77 2f fe 86 6b 98 d2 af 66 d3 ee 67 78 23 b7 73 28 0a 7c f8 56 50 3f 06 04 57 5b f1 4d 36 78 bf 56 3d be d7 2f fe 86 6b 2b 47 d0 cd ed bc 2f 0c c3 cc 7c 92 a5 7a 00 71 5e 84 d7 bf a9 e7 Data Ascii: \|wKEgg 'XE51+0`?5\tSfnw>cI*M`Wg5bL2dWGFiyhY~U98q{ luLI!S!N{n^^&]([k3jN;/Qw/kfgx#s(\|VP?W[M6xV=/k+G/\|zq^
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: c8 73 ba 43 b4 85 5d db 42 fe 3d eb bc ba d5 b5 08 7c 41 14 9a 7d 95 a5 e5 ea 5b a5 b4 57 33 48 cc 50 00 46 d1 93 80 70 08 27 d2 bc 8e cf 5c b8 9a 40 97 21 51 58 fc a5 72 3d f1 5d e7 f6 84 f0 6a 17 f2 da 4b 1c 73 a8 5d a7 19 60 0b 75 e9 c0 eb 93 5c 95 1a 9a b1 df 4e 9b 8b 36 b5 9d 77 c5 22 e0 c1 7f 70 96 e1 23 13 33 c7 00 f2 d5 3d 77 83 8f c6 a4 d0 35 37 87 59 d3 6e 35 09 67 bb 92 1b c5 66 91 94 ec 53 b4 9d a0 0e 33 ce 73 56 b5 b5 87 fb 11 6c 22 92 66 89 a0 3e 71 41 b9 e4 8f 3f 74 93 ea 41 c7 4a e6 66 d4 45 ab 41 35 a5 c6 cf 2e fb 0b 0b 0c 0c 79 67 e6 c9 e3 da b9 55 9c 9c 7f ad 4e 8a 94 f9 21 19 2e bf a1 eb 3e 26 f1 a1 37 f6 03 c3 e5 1a ce 30 ab 70 f2 c3 86 2a 18 70 99 ef 8c fe 95 89 af 78 b6 fe ef 5b b6 b9 b0 92 6b 6b 08 76 f9 96 ed 8f df 10 c4 9c 91 d0 Data Ascii: sC]B=\|A}[W3HPFp'\@!QXr=]jKs]`u\N6w"p#3=w57Yn5gfS3sVl"f>qA?tAJfEA5.ygUN!.>&70p*px[kkv
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: ec d5 d6 7c 41 f0 54 d7 3e 28 36 51 dc 8b cb 9b 58 15 66 36 d1 05 00 64 9d cc 01 38 27 3e d5 81 27 80 75 78 f4 d8 fe c8 8f 1d a2 48 cc 92 4d 2a 8c 1d 98 6c 28 cb 72 07 a6 2b 4e 64 a2 94 da b8 42 ed de 29 d8 e3 2e bc 8b bb d9 22 b2 b5 49 5b 07 cb 64 c2 6e 00 e0 1d a0 e0 1e 9c 7a d6 ae b4 f2 5b f8 5f 44 59 b7 4b 1d b9 70 d1 b3 ee d8 72 36 fb 9e 87 9a e9 ef 7c 24 96 fa 4e 9f 0d d6 a9 65 6d 35 93 15 31 46 49 79 0b 7c c4 82 40 c7 43 ce 0f 4e bc 55 1b dd 2e cb ec 70 3f da 22 b9 3b b2 f3 a2 96 c0 24 fd e3 83 c8 c6 3a 9a 51 c5 53 6e d7 1c a8 b5 1e 6b 18 f3 4b a5 cd a4 58 24 52 cd 0d c7 ef 0d c3 f9 65 b0 42 e5 11 54 7d 71 9f 53 93 58 50 c4 97 d7 f6 f6 72 48 22 96 43 b5 dd 98 0d b9 23 8f c0 67 f9 57 b4 7c 2f 87 48 93 c5 03 51 bf 48 2d ec 61 53 1a 22 45 b1 5b 18 c1 Data Ascii: \|AT>(6QXf6d8'>'uxHM*l(r+NdB)."I[dnz[_DYKpr6\|$Nem51FIy\|@CNU.p?";$:QSnkKX$ReBT}qSXPrH"C#gW\|/HQH-aS"E[
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 58 59 5a 00 00 01 f4 00 00 00 14 67 58 59 5a 00 00 02 08 00 00 00 14 62 58 59 5a 00 00 02 1c 00 00 00 14 74 65 78 74 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 31 39 39 39 20 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 00 00 00 64 65 73 63 00 00 00 00 00 00 00 11 41 64 6f 62 65 20 52 47 42 20 28 31 Data Ascii: -ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCrXYZgXYZbXYZtextCopyright 1999 Adobe Systems IncorporateddescAdobe RGB (1
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 01 2c 00 00 00 01 00 02 01 2c 00 00 00 01 00 02 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 04 0a 00 00 00 00 00 01 00 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff ff ff ff ff ff ff ff ff Data Ascii: 8BIM,,8BIM&?8BIM8BIM8BIM8BIM8BIM'8BIMH/fflff/ff2Z5-8BIMp
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 7e 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 Data Ascii: ~"?3!1AQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.5	50095	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:46 UTC	627	OUT	GET /uploader/0e49afad7eb17f349716ea63c83297492e32d294.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:47 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:47 GMT Content-Type: image/jpeg Content-Length: 221916 Connection: close x-oss-request-id: 66511B6B2CAF36313198CB4C ETag: "55D0DFD5C2C7FB8D7CC18DC1398F966E" Last-Modified: Wed, 09 Aug 2023 07:21:26 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 7586228565154429484 x-oss-storage-class: Standard Content-Disposition: inline; filename="221f8cb1c21117eb4f4a4f41dff0bbef2f983927_221" Content-MD5: VdDf1cLH+418wY3BOY+Wbg== x-oss-server-time: 78 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:47 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2fcec45f7cc-BNA
2024-05-24 22:57:47 UTC	690	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 00 77 01 00 e8 03 00 00 00 77 01 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 14 05 00 00 03 a0 04 00 01 00 00 00 14 05 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipwwimagery40210ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 05 14 05 14 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 08 09 ff c4 00 1c 01 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: C) )/'%'/9339GDG]]},
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 50 a8 10 04 8a 42 92 ac c0 c3 98 d2 dd a1 b6 7a 6b 34 b7 a6 92 c4 bd bb 8f 5e 93 3d 2b 24 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PBzk4^=+$
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: ab 2b a7 9f d3 4f 2d c3 7d 1d 2f 2b 53 de 3e b3 e3 37 5d 3c bb 23 43 c7 db cb f0 7a 70 e7 e9 ed b7 e6 b1 a6 3c a6 b8 5b a6 dd 35 ab bd d3 2c fc b6 b5 bf 3c 48 91 2d 91 23 65 b2 da 60 5b 4c 08 44 c0 b6 98 96 e6 62 5b 4c 4b 72 89 0a cc 13 66 b6 22 cc c6 d3 9b 7d 15 f7 c1 f9 ff 00 d0 3a 1f 9a fa 1e e3 b3 ca b7 19 65 a8 8a f3 91 3e 79 ee e7 5f 67 e2 fd 4f 3c 3d ef 83 b3 db b9 3a b3 62 40 00 00 00 00 00 00 00 20 08 24 00 11 29 8a 41 68 a2 2c 59 a9 9c f4 77 a6 96 f1 a4 b5 74 ba 67 a6 bd 74 7a e7 a5 bd 74 9a 53 49 7a e9 6c d2 de 98 68 56 c9 bc 48 67 7b 64 69 68 42 de 77 b7 5b 46 2d 42 91 68 94 55 0b 34 d3 27 5c a1 09 d9 2b e7 5a 5a ed ab 74 ca ad f2 f5 e7 cb bd 6e ab 7e 73 82 73 b5 e6 bb 35 cf d3 1c cd 72 d6 45 b5 5c dd 58 f8 f4 66 b2 ca eb e6 de fa 1e 6d fb 51 Data Ascii: +O-}/+S>7]<#Czp<[5,<H-#e`[LDb[LKrf"}:e>y_gO<=:b@ $)Ah,YwtgtztSIzlhVHg{dihBw[F-BhU4'\+ZZtn~ss5rE\XfmQ
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 4c 0c 7a 70 b3 d3 07 3d 3b be ee 2f 41 ec e1 d5 70 76 ea b9 7a ae 61 b6 e3 d9 f2 6f f6 f0 da ad f2 22 d4 ad f4 98 f4 53 2d 2c de 2c de 36 7b 63 8d bf 3e 4d a9 99 39 46 e8 96 d3 12 04 53 08 88 10 28 46 50 22 50 81 42 85 08 c8 50 02 80 12 b4 50 02 49 00 2a 00 00 5c 11 10 02 d4 00 a1 22 20 24 52 14 0b 50 14 28 91 4a 89 dc e7 ac c2 2c 9a 4d 29 ec 5c 1d 7f 73 78 7e a8 00 78 3f 46 1f 0b 7a bc 24 aa 5e 2f da 99 3b 52 e3 29 c2 52 9a b3 67 3b de 71 9d c5 67 7b 5d 56 e9 74 b3 4b 61 f3 f4 5f a5 f7 9a e7 81 6a f3 58 74 eb 73 d2 ee 95 d7 e1 be 26 3a c6 aa e5 6b d5 be c9 13 a5 f1 b5 ac cd 84 4e 09 72 c9 55 af a5 f1 6d 5b f4 a3 b3 0d d7 46 3d 17 46 33 9b 5b a4 da ce fe 6d c3 dd 6e 8d 87 46 1b 1e ae 2c ae 9c 23 4d 30 b9 b7 bf b6 52 e0 ed d9 e7 a7 31 cf d1 70 8d 53 b4 66 Data Ascii: Lzp=;/Apvzao"S-,,6{c>M9FS(FP"PBPPI*\" $RP(J,M)\sx~x?Fz$^/;R)Rg;qg{]VtKa_jXts&:kNrUm[F=F3[mnF,#M0R1pSf
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 48 a8 54 0a 89 80 04 8a 05 6a 2d 02 48 00 12 11 02 b2 42 b6 a0 ac 01 05 a5 68 a0 00 12 90 20 01 22 85 52 00 28 00 a8 00 90 00 02 b6 00 2a 00 05 40 00 00 54 00 b0 54 00 a2 45 01 40 55 6a 04 c4 ac 09 8a 45 22 c1 55 0a 48 52 aa 09 7d 7b f3 fe cf bc 70 76 80 07 8d 6f 87 c0 7e bf 0d 50 26 8b aa e4 e9 9e 5d b2 cc b3 25 5b 96 88 98 e5 82 cc 5f 07 e5 7f 56 f4 bf 1b 2e 46 fe 8f 33 ee f8 30 f7 3e 17 2f 6a 5c bd 69 9e b1 e0 f6 a5 87 75 72 ef 96 1d d5 cb b6 5c dd ec bb a5 87 6c a9 db 73 0e c9 d7 aa 55 d7 07 ed bf 03 b9 ed 7c 78 92 a2 a4 8a 5a 24 54 a8 54 00 98 92 12 a1 58 92 25 30 82 d5 00 0a a4 a8 a9 58 59 ce d2 94 61 8d cb d5 66 9a 47 2d 76 59 5f 1f bf 8f 3b bf 86 40 15 05 64 28 81 50 10 2a 81 20 01 50 54 00 0a 80 00 b2 a0 15 00 00 09 00 00 00 05 85 2a 15 01 22 25 Data Ascii: HTj-HBh "R(@TTE@UjE"UHR}{pvo~P&]%[_V.F30>/j\iur\lsU\|xZ$TTX%0XYafG-vY_;@d(P PT*"%
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: b1 78 ba bf 48 f8 fa fe 59 be 7e 37 ef f8 fe ff 00 e0 7b 5f 4c 67 6e 68 d0 9a 23 cf aa f4 13 c7 f7 8f 3c ec e0 dd 52 fb 8c b5 e4 73 b7 d9 d8 ed f2 47 4f 37 1d ec f9 0a db e9 df 9f f7 b8 74 7d 54 9f cf df 5f cb 87 a7 e7 7b 77 cc 7d 1f aa 52 df 16 69 9f d2 35 b7 cd be 8f 9b e8 fc dd 39 53 3a 8d 69 a7 db 1d 56 99 6c 7d 6f 3a e4 e5 7f 5c ea 0a 95 05 4a 95 80 94 aa 0a 95 94 84 2a 12 2a 0a d8 2b 20 40 92 41 00 08 a4 00 ac 00 04 80 00 11 00 14 0b 01 40 50 a4 58 08 94 28 52 aa 04 c4 88 22 b4 4a 15 20 50 a2 68 46 b3 f7 ef ca 7d 1f 5d 8e c0 01 e5 3b 63 f9 eb ec f9 a8 0b b3 19 16 a6 66 99 e7 43 69 39 e6 da 97 e6 22 63 a3 19 7c 74 ea f8 3d 7b 5f 3d f7 3d bf 91 6f 38 f4 fd b7 d7 7e 37 97 bd 65 64 3c cf a2 f4 af c9 7f 6b f6 0f ae fc 4f 6b ea 57 79 11 d0 d9 e5 f0 da 99 Data Ascii: xHY~7{_Lgnh#<RsGO7t}T_{w}Ri59S:iVl}o:\J**+ @A@PX(R"J PhF}];cfCi9"c\|t={_==o8~7ed<kOkWy
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 6a 89 1b 22 42 aa 19 35 d3 f4 5b e3 be a2 49 00 0f 33 db 2f ce df 6b cd 85 26 a8 56 6f ab a3 f1 fd 6d a5 67 36 66 91 3b 0e 2f ae e8 3a 3c 9e 7f db f9 1e b3 d0 f3 71 66 71 4e 87 c8 f5 b0 a9 7e 3b d9 f2 ec d6 db 2d eb 29 8b 1e 1f d8 df f8 af e8 2a 40 9a 94 05 4a 15 10 22 53 49 7e 93 fc b7 97 df e5 89 2b 22 4a d4 a9 52 aa cc 91 52 73 5a 95 95 49 4a a4 96 a9 24 54 a8 2a 8a a2 56 ad 4a a6 a5 4a 92 45 41 22 4a d4 ad 95 2a 48 aa 2a 0a 95 26 22 2a 62 5a da ba ed 7b 9b aa b4 be ae cd 5d d2 cf 4d ce 56 dc 52 75 17 8d 0c b9 ef 37 b3 5f 0d cf a1 cd dc 56 76 d4 59 b5 79 6e 8c b0 ef 5b 75 bf 5d cd aa 93 81 be 78 fa 57 71 cd af 9f f2 74 e9 39 7a 25 7a 6a 39 b5 87 45 ba de ee 2f 61 ee f3 fd 05 5d 0e 94 d4 69 1a 9d 6b ad da 9a be 7d 74 5c 7d 9b ad 79 f7 16 e7 da 6b 8a 22 Data Ascii: j"B5[I3/k&Vomg6f;/:<qfqN~;-)@J"SI~+"JRRsZIJ$TVJJEA"JH&"*bZ{]MVRu7_VvYyn[u]xWqt9z%zj9E/a]ik}t\}yk"
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: a2 9d 79 43 58 dc df 08 53 5c 1e 0e 9c 5a 4f 4d 5b ea 7a 31 f7 cf 7b c8 a5 2f e0 9e 77 7f 7b e6 f5 7a 3d a3 e6 42 93 17 8b 15 5f d5 db 5e 9c 1f 2e 9d bd 9b 48 9e cd 36 74 a7 86 e9 11 98 eb bd cf 37 d8 26 92 57 cc b1 da ec 4e de f9 67 cc ee a8 e8 fa 39 b5 bd 5c 5a bb 5a 0a 46 d5 45 e0 88 94 22 41 78 90 44 08 42 07 7f c3 d7 f6 df cb fd 1a 40 01 c0 6b 9f e6 f7 b9 e5 d7 2b c3 9f a3 4f c7 be 16 1a fb 1d 9e 78 8c f8 6a 22 76 74 d3 b8 af a9 e5 7b 78 de 91 ed f8 9b 4e be 5c 55 b6 7e 47 a9 8f 7a f2 7e 97 9f 66 6d ba df 19 0b cd 49 4d 6a 56 69 52 aa 54 9a 6a 5c 44 8a ab 22 64 ca d9 22 4a cc 94 a6 54 91 24 4c aa b3 94 a6 2a 56 52 25 2a 93 56 a5 54 91 34 8a a2 a5 49 12 52 a5 53 32 a5 44 5f 03 97 bb 99 e5 ec e3 fc 7f 5b 51 c3 d5 24 72 b3 1b 1d 73 ca f4 39 b1 6d 9c bc Data Ascii: yCXS\ZOM[z1{/w{z=B_^.H6t7&WNg9\ZZFE"AxDB@k+Oxj"vt{xN\U~Gz~fmIMjViRTj\D"d"JT$LVR%VT4IRS2D_[Q$rs9m
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 35 b3 96 be 8e af 1c 75 0b 77 c7 13 13 b8 cb dc e3 37 f9 fc 8e ee 4e ef d7 f1 70 d7 ec 3c 1f 6f cc 7d 6f 32 1d 18 59 5b 77 d7 84 d1 54 48 9a b2 26 8a 95 b2 45 c5 64 4e 6b 22 65 c0 5c 24 4c 9d a2 65 55 91 34 54 95 97 09 ab 52 a4 89 ab 52 45 49 95 24 48 a9 52 a5 49 22 a4 ab 6b 3c bd fa 5e 3f 43 ce 3c be fc 3e 2e a8 75 f2 7a b7 bf f3 fd 57 6f 12 55 98 ad 40 0a 92 13 3a fe 4e bf 25 f8 bf af bd c5 d7 9b 13 70 96 7a f2 7b e3 e7 fd fc 9d b7 37 4f 33 d1 8e 97 5c 88 94 4f a8 79 dd 75 bd bc bb bb 89 31 ed db e7 e3 18 69 b9 da be 8d e6 f6 e4 70 ef e4 3e a7 16 b7 6a 0d 86 56 ef b0 df 37 a3 97 07 b3 1f 58 f7 bc 9a 55 e0 de 57 a1 dd 79 3e 8e c3 6c 7c 97 0d f6 35 6b f5 ae 97 4c af cb ea 6a db cd ce 32 d5 e7 e5 48 8d ae b5 de 6b 4e b3 4c f9 9a 69 e6 fc 7b f6 f0 fa ef b3 Data Ascii: 5uw7Np<o}o2Y[wTH&EdNk"e\$LeU4TRREI$HRI"k<^?C<>.uzWoU@:N%pz{7O3\Oyu1ip>jV7XUWy>l\|5kLj2HkNLi{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.5	50094	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:46 UTC	627	OUT	GET /uploader/30453ddd6ce60322fd6ce23b29a6e5e27db4b75b.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:47 UTC	680	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:47 GMT Content-Type: image/jpeg Content-Length: 103948 Connection: close x-oss-request-id: 66511B6BF488A53531BF3D8F ETag: "09DAD94E65244978B89C9F3BFF6A6089" Last-Modified: Wed, 09 Aug 2023 07:20:51 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 10161221965962228872 x-oss-storage-class: Standard Content-Disposition: inline; filename="22186fd374c962382afa842d51c4de0be8468456_221" Content-MD5: CdrZTmUkSXi4nJ87/2pgiQ== x-oss-server-time: 78 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:47 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e2fcdcb5f7f8-BNA
2024-05-24 22:57:47 UTC	689	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 e0 93 04 00 e8 03 00 00 e0 93 04 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 1b 02 00 00 03 a0 04 00 01 00 00 00 20 03 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipimagery40210 ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 03 20 02 1b 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 1c 01 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 19 ca 8e 64 72 02 9e b6 09 b0 b4 2e a7 56 6d 9c 59 6d 4d ac ba 58 e9 0c 94 38 64 8d 81 00 7c a2 34 06 7c bf 1a 25 0d 06 57 13 c6 89 83 04 12 48 b1 04 a0 c4 99 f2 ec 64 9e 57 91 49 25 79 56 2c 8e 3c 47 36 04 81 c2 a0 cf 92 c6 c8 c3 06 b4 9e 6e 0d 19 4e 73 d3 cd c7 9f 8a bc Data Ascii: C) )/'%'/9339GDG]]} dr.VmYmMX8d\|4\|%WHdWI%yV,<G6nNs
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: d3 50 d5 54 06 c6 ca 33 65 0f 2e fe 77 fa 77 a4 bf 40 f8 8e a7 af 8f e7 d8 9e 3b 0e de 71 c2 21 e8 d3 87 59 a5 3a 05 5c 1c b3 36 e7 6d 39 81 cb 0a 21 26 f8 ef f6 2c e0 15 73 f0 85 1e b8 b3 46 46 28 c6 8b 33 95 27 c2 11 a5 4c 00 02 91 c0 00 00 00 00 00 00 00 00 00 04 fa f2 d9 fa e6 23 9b 65 e8 f9 ff 00 e1 3d df 4c fe 83 f2 1c 97 1d 7a b5 b1 e4 58 e9 d1 b7 af 0c f1 f6 f4 1f b1 8f 20 f0 7a f9 17 ce ff 00 43 7a 7b ef 3f 05 e8 bb 79 1c 86 23 c2 46 f0 c1 80 df 18 13 d2 c3 47 9b 80 6e 4f a2 96 79 24 f3 45 5a 71 d3 26 7a f8 74 f1 e0 00 19 f4 96 cd d0 92 ac c3 a3 1e b7 86 e2 f5 71 20 03 d3 56 03 8b 00 00 00 00 00 00 00 00 00 02 98 f6 8c e7 e9 a4 e0 72 f4 7c 97 f0 9f d0 b6 58 7c b4 ae 7f 42 3e de 7b 94 f4 51 6e 28 b3 f4 0e db e6 a3 e9 f4 b9 bf 4b da f5 bf d5 7f 35 Data Ascii: PT3e.ww@;q!Y:\6m9!&,sFF(3'L#e=LzX zCz{?y#FGnOy$EZq&ztq Vr\|X\|B>{Qn(K5
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: d8 f9 ef 72 c7 a7 93 9a 7b 7f 3a 53 16 b6 d3 cc fb 77 73 9b 6d f4 ee 73 f0 cd 67 9e c4 9c 93 05 02 45 05 48 e2 e0 48 a0 84 86 18 70 73 3b c9 c3 7b 5e 0e db 1e 6d 60 75 61 9f f5 bc e8 b7 cc a6 8a 0c 31 52 31 c1 42 e2 e4 18 b0 0a 0c 58 a9 1c 8a 04 18 83 b4 a9 47 cd bf 42 e2 eb ca 14 14 8e 6b dd cb 7f af 27 73 cb 93 0b 5e 1c 55 af 9f 75 59 ba ba 1c f1 74 6a e6 bb 2a e9 a4 ad 29 31 29 8a f2 0d fd 0e 3d a7 4f d4 19 cf c2 69 da 25 2a b8 1a ca 0c 30 d5 00 08 21 01 2c f9 c5 73 b5 65 34 72 9a 2e 65 14 86 f4 cd bd 68 00 01 41 80 31 d1 60 a8 06 18 a0 c7 2c 34 bc 85 09 09 26 86 93 d9 6d 84 1e 1e ee d5 96 91 ea c0 f3 ef 42 be bb d5 f2 b2 d1 1c f3 96 b5 31 a6 c6 6d a6 c7 ab 6f 18 dc f5 79 55 33 cd 59 6b be bd 27 44 c7 b6 de 76 db a0 a8 fa 6d 39 f8 65 3a e4 e5 15 9e 4e Data Ascii: r{:SwsmsgEHHps;{^m`ua1R1BXGBk's^UuYtj)1)=Oi%0!,se4r.ehA1`,4&mB1moyU3Yk'Dvm9e:N
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 47 68 53 55 9f 3d 5c 4f 9a 7b 7d 88 d6 bf a5 6f 4c 6e 76 7b 93 cf db d7 9a d8 d0 23 6f af 4f 36 9b 78 c3 7e 8e d4 b6 6c e9 7c dc 1b dc 79 ba 56 bd 3c ce bc cc c5 f1 f6 d1 ab 6c b6 b8 ad 7a a1 11 a6 e4 00 04 18 60 1b 88 fa 63 a6 7e 0c ac f1 14 f6 5b 43 68 8c b4 c2 42 af f1 f5 27 87 a2 60 e5 6f 14 b3 95 15 96 34 ab 09 bb eb c2 36 fc fc 33 75 70 2b 24 a1 da d7 65 a4 61 da f1 e4 62 99 33 39 e6 30 ed e2 7d b6 d4 67 48 37 76 ea e3 b3 cb 39 5a df ca 7b 7a 99 6b ce c7 5c 2f 72 df 1d 9f 3f 4d c3 83 ad 52 93 6e 8b 6d 7c b5 b7 a5 95 da be eb 57 9a 67 dd c6 63 cd f4 77 1f 9d d0 e6 fc 69 5b da f4 73 9e 7e eb 2d 7c ed 06 bc ef ce b2 e7 a3 0d af 4e 62 dd 15 01 5e 0a b6 50 60 1a 47 d2 e9 cf c2 eb 70 e0 e6 dd 60 b4 9a 98 15 5c 5c 56 55 05 45 23 8e d8 c0 fc 58 83 b4 5a 1c Data Ascii: GhSU=\O{}oLnv{#oO6x~l\|yV<lz`c~[ChB'`o463up+$eab390}gH7v9Z{zk\/r?MRnm\|Wgcwi[s~-\|Nb^P`Gp`\\VUE#XZ
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 00 00 01 26 97 ed fe 7f 6d b5 27 a6 ed 9e 56 9a f3 7a 2e 15 89 75 9e 57 8f 8d ed ec e8 37 af 07 ad f6 59 46 d3 7a eb 66 98 aa 74 59 51 95 b3 8e 5e 9d 4a 97 b1 b5 37 f3 02 a5 45 bc df e9 70 67 77 c7 4a 33 59 e6 f6 26 68 62 c5 25 c1 d4 18 64 a9 8f a9 1a 67 e2 5a ce 45 3a 2f 1f d5 e0 7d 38 fb c7 19 e5 78 ed d3 bd cf 1b ca d9 6b 03 0f 1e ca 8b f5 35 fb f4 16 7b 6e 3c bf 5b 43 dd 97 0d f4 b1 a5 9a cb 39 5d 35 cf 80 30 04 18 02 0c 34 f4 3e 3e ae 8d cd bf 49 d9 9a c2 f8 b8 4b 8a 57 6a b3 e7 96 6b 7b 29 8e 81 7c f8 3c 69 bb a6 9a bd 31 d3 98 0c f6 41 9f bd 6d ce 93 15 21 77 cd 14 d2 ba 1c 9a da 31 35 e9 1a 61 aa 98 99 7a 64 75 cb 84 f4 53 9f df 33 1d 99 76 92 26 aa 25 cb ea 2e 99 78 96 b3 91 89 d0 f9 1e af 04 e8 cb d4 1e 77 56 71 18 8f 5f cf c7 61 17 17 f1 b7 99 Data Ascii: &m'Vz.uW7YFzftYQ^J7EpgwJ3Y&hb%dgZE:/}8xk5{n<[C9]504>>IKWjk{)\|<i1Am!w15azduS3v&%.xwVq_a
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 18 61 80 01 a4 90 00 00 00 96 4a 01 18 86 46 2b 4b d0 a2 75 dc fb 75 6f 3f be c6 d9 cd 8b 55 65 a6 b5 33 0b 83 39 7a 64 6b 6f 3d f7 71 6a f9 bb 36 38 5f a3 49 45 0d 89 ab 65 35 c5 c5 f9 25 e3 d5 19 c5 8e b9 1d 6f 80 a6 bc 2a 5d b0 d0 23 c5 3e 9f 9f 7b 8e db ec 36 d5 d3 47 ed 95 d5 2f 6b ae 1c df af 9a a6 d9 a9 2a b4 3b 05 cc 19 7b 33 ef 7d b0 f2 0a de 50 0c 50 00 28 50 4a 82 7a 74 29 9c ad 81 0e 50 ea af 94 22 b6 11 ae 8f 59 83 32 98 a5 a2 d6 54 bb d4 d3 67 cb a6 8f 1b df 53 71 4d 36 31 32 cb 64 62 2f 9d 15 75 f3 f7 6f 3e d7 97 6d 6e 76 eb 72 e6 d1 3d 15 5e 6a 76 35 71 2b f3 bb bb 47 3d 9f 9a c7 bb 20 bf 33 3b 0d a6 f2 b1 e5 9f 43 cf e9 34 b1 a6 d0 7e b4 2d b1 83 78 6d 0c 04 26 e0 26 48 2f 15 f7 56 d9 f9 19 6f 26 a4 0a 14 80 6b 4e a0 59 2b 66 59 a3 9f 0e Data Ascii: aJF+Kuuo?Ue39zdko=qj68_IEe5%o]#>{6G/k;{3}PP(PJzt)P"Y2TgSqM612db/uo>mnvr=^jv5q+G= 3;C4~-xm&&H/Vo&kNY+fY
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 18 ec f5 2e f6 76 cb 74 d2 65 2d a0 3a 9e 16 e0 f7 9e b9 48 d3 15 f6 56 a7 9f ad b2 8c eb 6e 99 9e 9d 34 8e 73 a5 36 c4 c4 43 2d 6b 7c 07 a3 e7 65 76 aa 02 b5 52 12 52 94 84 22 45 22 0c dc b2 f6 fe d8 f9 86 2d e2 ea 68 56 a6 af 2e 6d df 2c ea 2b 4e 37 d7 d1 8f d7 5d 7d f3 d1 99 6a c8 34 53 0e c2 0d 94 65 64 ab c6 2b 0e 15 f3 29 05 2f 2e 1a 04 5a 12 40 95 c4 ab 97 ae fb 9f 7b 42 a7 3d 2d 2d 30 62 2d 66 97 9c fa c2 ba de 23 7a be 79 3c 86 ce a0 cf 50 8a c9 b6 22 ba 75 3a 56 a6 ce 49 6a f5 58 85 44 59 4a 2c 4e 0b d1 f3 e8 7a 31 02 aa 50 24 01 5b 81 13 54 0d 5a cd c3 75 7c fd bb a6 7e 6b 87 8d 29 a3 b3 67 4f 40 70 51 ec bd 1e 73 db e4 72 2e ad 23 23 46 42 b4 57 41 29 9a 45 82 89 35 4f 24 56 64 12 6b 79 30 79 2e 04 30 34 32 22 2f 37 93 ae 4e 5a 1d a2 c7 2d 33 Data Ascii: .vte-:HVn4s6C-k\|evRR"E"-hV.m,+N7]}j4Sed+)/.Z@{B=--0b-f#zy<P"u:VIjXDYJ,Nz1P$[TZu\|~k)gO@pQsr.##FBWA)E5O$Vdky0y.042"/7NZ-3
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 39 98 20 62 80 02 c0 e9 5b 63 96 37 f8 f2 dc 67 cf 69 11 1e 73 e7 75 a6 cd 4d 0d b4 dc 4d a0 d5 89 57 49 37 6f 5e 8e 67 af 76 50 be cf 5e 6b 4b f5 6d 33 e7 56 a6 9e 67 7d 87 02 b0 d0 a9 bb bd 5c 2e 67 cd 25 58 b6 bb b2 84 ea 91 97 52 f7 c2 aa f3 8d d3 ad 51 2e 63 7a 44 90 40 00 04 8d 89 12 20 48 80 a4 88 36 35 24 1d 86 6b ed 9d 33 e2 55 b7 81 69 a3 91 a1 8e 28 20 76 85 8b 80 16 4e 3a 86 d8 e5 cb 0a ad 32 c3 45 9f 15 7c e7 91 a5 b4 73 9e 88 e8 8b 44 99 cb 6b bc cb 74 d6 69 bd 51 95 2e f3 d3 9d d2 fd 4e f4 e6 57 a6 aa 57 75 e7 d8 73 f3 df f3 b0 fd 3c d9 4b f6 5c 53 9a 24 e8 53 1a 3a 67 b7 a7 5e 47 a5 93 bf 4c 08 b8 b4 b1 85 ea 26 48 40 42 04 49 22 42 12 35 00 24 30 84 48 0d 9d 92 6b ed 6d 33 e2 75 78 0b 3e 85 ae e2 14 28 5c e6 a0 0e 41 64 c3 a8 ed 9e 5c 9f Data Ascii: 9 b[c7gisuMMWI7o^gvP^kKm3Vg}\.g%XRQ.czD@ H65$k3Ui( vN:2E\|sDktiQ.NWWus<K\S$S:g^GL&H@BI"B5$0Hkm3ux>(\Ad\
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: a2 02 c0 20 04 10 90 80 36 36 24 29 cd 42 63 42 09 99 1e 8b b5 7d 8d a6 7c be 27 e6 2e 3d 0a b5 8c 72 21 42 c7 52 63 88 70 50 b6 73 ce c7 a5 23 21 69 54 17 23 88 39 28 01 a4 90 62 52 84 56 d3 4c 08 23 45 23 73 7c ae a4 a5 54 1a e0 35 00 40 12 b9 00 4a 2d 14 e4 b9 ee ca c9 00 40 12 10 90 80 24 31 00 0a 73 20 04 7a 32 6b ec 5d 33 e6 71 3f 2f b2 dd 53 2a 4a 92 b8 1a 1c 16 97 05 8b 43 8c d6 28 5c 95 05 80 54 94 28 30 0b 0c 31 50 50 a0 34 31 4a 98 26 c6 1a a0 11 65 00 30 2a a1 22 81 50 b4 25 74 0a 0c 40 06 c5 00 48 02 08 20 a7 34 80 23 d2 33 5f 61 e9 9f 36 89 f9 77 96 ea 4b e2 12 b1 c8 2e 0a 9c d6 2e 4a 1c 92 c5 8a 16 00 0b 0c 58 b0 c5 06 01 61 80 50 a0 d6 58 05 00 01 80 30 06 18 90 80 24 54 00 42 c2 08 00 00 00 36 09 a9 40 86 83 92 0f 4a 4d 7d 81 a6 7c e6 27 Data Ascii: 66$)BcB}\|'.=r!BRcpPs#!iT#9(bRVL#E#s\|T5@J-@$1s z2k]3q?/SJC(\T(01PP41J&e0"P%t@H 4#3_a6wK..JXaPX0$TB6@JM}\|'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.5	50097	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:47 UTC	954	OUT	POST /buyer/cart HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 94 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=lego Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:47 UTC	94	OUT	Data Raw: 7b 22 63 61 72 74 22 3a 7b 22 63 61 72 74 5f 74 6f 6b 65 6e 22 3a 22 22 7d 2c 22 63 6f 75 70 6f 6e 22 3a 7b 22 63 6f 75 70 6f 6e 5f 63 6f 64 65 22 3a 22 22 7d 2c 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 22 22 2c 22 63 75 72 72 65 6e 74 5f 70 72 6f 64 75 63 74 5f 69 64 22 3a 22 22 7d Data Ascii: {"cart":{"cart_token":""},"coupon":{"coupon_code":""},"country_id":"","current_product_id":""}
2024-05-24 22:57:47 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:47 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:47 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:47 UTC	1213	IN	Data Raw: 34 62 31 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 65 78 70 72 65 73 73 22 3a 7b 22 68 61 73 5f 69 6e 73 75 72 61 6e 63 65 22 3a 22 30 22 2c 22 69 6e 73 75 72 61 6e 63 65 5f 73 65 6c 65 63 74 22 3a 22 30 22 2c 22 69 73 5f 6d 61 74 63 68 22 3a 30 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 73 65 6c 65 63 74 65 64 22 3a 30 2c 22 6c 69 73 74 22 3a 5b 5d 7d 2c 22 63 61 72 74 22 3a 7b 22 74 79 70 65 22 3a 22 22 2c 22 74 6f 6b 65 6e 22 3a 22 37 64 32 31 38 38 39 64 31 39 34 38 64 35 39 61 35 32 34 30 65 63 34 38 38 30 38 33 32 39 64 66 22 2c 22 77 65 69 67 68 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f 61 6d 6f 75 6e 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f Data Ascii: 4b1{"code":0,"msg":"success","data":{"express":{"has_insurance":"0","insurance_select":"0","is_match":0,"error_code":0,"selected":0,"list":[]},"cart":{"type":"","token":"7d21889d1948d59a5240ec48808329df","weight":"0.00","product_amount":"0.00","product_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.5	50098	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:47 UTC	393	OUT	GET /uploader/dd0bf6a7277d7e58ec2c01e3627a45275be16a24.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:47 UTC	705	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:47 GMT Content-Type: image/jpeg Content-Length: 331016 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221be9433a3a9b6409bf0725ac15c628cc578032_221" Content-MD5: EeBqi0UhhH9ZI8URPmhdmQ== ETag: "11E06A8B4521847F5923C5113E685D99" Last-Modified: Wed, 09 Aug 2023 07:26:10 GMT x-oss-hash-crc64ecma: 1411745452719722105 x-oss-object-type: Normal x-oss-request-id: 6650744576EC4B38309557CB x-oss-server-time: 27 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42790 Expires: Sat, 25 May 2024 02:57:47 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e300cff0f7f4-BNA
2024-05-24 22:57:47 UTC	664	IN	Data Raw: ff d8 ff e1 00 22 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 12 01 03 00 01 00 00 00 01 00 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 5f 63 70 72 74 00 00 01 4c 00 00 00 0c 77 74 70 74 00 00 01 58 00 00 00 14 72 58 59 5a 00 00 01 6c 00 00 00 14 67 58 59 5a 00 00 01 80 00 00 00 14 62 58 59 5a 00 00 01 Data Ascii: "ExifII*ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc_cprtLwtptXrXYZlgXYZbXYZ
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: X
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 81 02 56 ca e9 5d 2b 44 41 de 8e 9e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 31 2b 44 01 59 85 7a 96 af a2 b3 5b 57 4a b9 5d 20 a0 9c b1 0c 8a cc 26 3c 88 6d a4 f4 e9 af a6 ec ef 02 e0 00 00 00 00 00 00 Data Ascii: V]+DA1+DYz[WJ] &<m
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 02 c6 a2 a6 c2 06 e6 a6 a3 c1 11 b9 a9 b9 91 e0 88 98 dc d4 7e 36 36 01 71 98 e0 48 72 36 37 37 30 28 6c 6a 68 68 60 d4 c0 b0 b9 83 41 41 53 53 51 c0 e4 62 04 b9 02 24 60 c8 f6 d5 29 a5 bf ca fb 46 93 d9 da 36 f2 ad dd ff 00 34 e7 0e ca 36 b8 72 c8 ca bc bb c6 96 ac b5 5f 5e 7b 2e 1e 9f 3a df cc a4 d3 a5 0c 3d db 47 0f d1 c2 e3 e3 c8 f2 fa bd 36 fd 5e 9f ea f8 6e 8d dd f3 fc 8b ce fa df 17 57 eb dd 4c fa c7 6f 98 ee 5d df 1a bf 4e 0b ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 82 2b 84 01 59 20 4a c1 08 56 ca b1 0e 31 ab 06 4d c0 40 50 70 24 22 64 dc d0 5c c8 cc 0c 9b 89 8a 9b 80 d0 05 c5 4c 19 03 61 b8 b0 09 0e 0d 06 c6 a0 6c 6c 22 24 2e 39 35 30 64 d0 dc d4 d8 c0 1b 1b 9b 09 1b 00 98 ec d0 74 24 64 c0 e8 4c 40 48 54 76 33 13 14 10 Data Ascii: ~66qHr6770(ljhh`AASSQb$`)F646r_^{.:=G6^nWLo]N@+Y JV1M@Pp$"d\Lall"$.950dt$dL@HTv3
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 0c 98 01 1b d5 6a db 63 58 6c 28 2c 26 60 00 72 6e 64 88 1f 0b 0d cd 07 c6 82 26 a2 63 93 71 62 3c 58 c1 91 03 06 45 84 cd 4d c4 06 84 90 a0 f0 68 38 34 13 32 6a 64 6e 3c 19 18 12 1d 99 03 61 b9 91 d0 00 98 e0 6c 2c 26 6f 63 1a 5d 6c 76 88 cf be eb 4f 52 d5 cb f5 2d 7a 3e 7f a2 f7 fc 7d 65 b5 e5 9b 93 9a 14 34 35 1d 41 dc ee 45 66 e9 d5 15 cf ee 58 b0 f7 22 fc ff 00 ab f4 6e bf 0f e8 0f 4f e1 b5 99 e4 7e 7f d2 dc 27 ca a4 7a 3d fe 69 cf e9 f6 db e6 8c 3d bf 67 f6 fc 17 cd 69 c1 33 44 ef 8f a7 d5 3c bf 42 cd d1 d4 8e 3d 75 fa f5 ef 4e 9a ce 5d cd ef 0c 75 bb 6d b9 99 f6 fc 53 6d fc 00 79 49 ca 73 56 b6 17 aa 72 d6 b1 ad 8e c0 8a 89 05 ed 55 53 b5 67 51 63 23 51 41 50 35 14 11 1a 0b 98 37 37 01 21 51 41 39 2d 06 e6 c6 86 45 40 d8 c9 a9 88 6b 59 75 cf 6b 0e Data Ascii: jcXl(,&`rnd&cqb<XEMh842jdn<al,&oc]lvOR-z>}e45AEfX"nO~'z=i=gi3D<B=uN]umSmyIsVrUSgQc#QAP577!QA9-E@kYuk
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 0c 89 0e 8c 89 0e c6 06 e2 a0 06 a6 a6 c6 e3 31 e0 cc d8 54 d4 d8 04 85 4c 8a 11 83 91 d8 18 03 23 51 31 f0 b8 80 0d 05 4d 4d 06 c3 61 c0 ec 07 02 43 81 90 d4 b4 15 a5 95 12 8b 33 c3 77 fa e4 c3 5c 76 1d 92 2d 24 52 dd 1a 63 dc b6 1e bd 5f b3 e6 ec 5c bf 45 61 e6 ee 74 a4 56 9c f1 5d 7e 43 5a 6c cb 9f dd 75 cb ec bc cb db dd b5 4f d0 f8 34 3a 3c 95 76 f3 7a 4d 75 a9 bb 55 8e 3b 84 73 33 ab b1 73 cc 97 2d bd 65 ec 71 fc ae 84 61 76 95 5b cd fd 3b a9 4f c9 48 e5 7e 39 3f 5e cf d5 fc b5 59 85 85 6a 04 a2 c8 ae ad 76 de 9e 89 9f 6a d4 ee 56 9d ca 65 e9 29 4e fd f2 ee 5a bd aa 67 dd b4 6e 2d 85 81 a6 ff 00 31 0d ef 7e 19 88 28 32 35 00 15 9a f4 6f 9c ee e2 df 45 c6 4a d9 c3 a5 e7 ca df 2b 2f 04 91 c5 fe 93 89 e6 53 e9 3f 93 ef a1 fb 18 40 f4 e5 a2 c6 13 cf 7d Data Ascii: 1TL#Q1MMaC3w\v-$Rc_\EatV]~CZluO4:<vzMuU;s3s-eqav[;OH~9?^YjvjVe)NZgn-1~(25oEJ+/S?@}
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: fa 6f 9b 6d ea 7e 58 2b a9 78 f0 fa 5e f3 5f 5b 10 89 4e 61 3b 22 37 cf 99 fb 38 13 45 23 4e cd e2 6f ce fd ce 6e 85 f3 fd 7c 5f de e1 94 c7 7e 9d e7 da 83 ed e3 6e f2 75 a9 f4 45 67 b3 3e eb f2 fd b0 9e 8f 3d 73 aa 97 ff 00 1b ae 9d df 94 bf 36 96 0c 34 92 e5 9a d7 7e 32 99 5f 9f fd 17 14 16 95 bb 78 dd 1d 03 c7 e9 8a da ac b6 23 68 91 cd c9 fe 9f 89 51 d0 99 a9 83 71 d1 91 23 51 33 41 31 33 61 43 71 c0 a1 91 43 b4 14 b3 95 8f 05 4d cd c5 08 72 6c 6e 3b 93 09 39 a1 b1 1d 69 4e b1 29 27 71 09 56 e9 56 27 79 ef 31 cd ac b6 04 22 5b c1 0d 21 31 3b d7 4d 51 7b d2 bb d7 9c 07 6e 29 ef 57 06 92 d4 d5 65 13 b1 a1 b9 ba cf 04 33 97 66 8b 29 56 d4 b1 51 17 50 79 16 46 b6 77 16 5a 96 61 35 d4 d9 66 f4 64 55 6d ab 74 4d 6b 65 eb a2 d1 7c 50 a2 fd 02 b1 f4 47 bf c2 Data Ascii: om~X+x^_[Na;"78E#Non\|_~nuEg>=s64~2_x#hQq#Q3A13aCqCMrln;9iN)'qVV'y1"[!1;MQ{n)We3f)VQPyFwZa5fdUmtMke\|PG
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 1c b7 0e 0e 8a bf 6e 0d e6 3b 67 ce f5 73 cf a3 e5 39 ad 69 f2 f7 e5 be e7 37 49 f1 f7 6b b5 58 74 d6 e9 e5 f4 f1 bf 77 8b ae fc ff 00 65 5b e8 39 a5 b8 34 65 8d a8 5e a7 39 77 60 f0 3a e0 3d 0c 60 bb b2 5a 19 14 36 16 14 88 29 ac c7 15 e7 f9 12 79 59 84 9a cc 4b eb 56 93 9c 4d ae cf 4a 41 75 e7 5c ee ce 2f 6c 95 b4 a5 68 2b 3b 99 99 c8 20 03 06 26 01 5b 1b 85 67 06 16 dc d6 4a 5c 98 e8 64 b0 08 d8 00 0c 99 55 43 4a ce a0 a8 62 a0 cc 58 b3 7b b6 59 54 b9 25 b4 88 9c ad 98 b3 81 4a 59 d5 2f 8a df 35 b6 69 60 29 70 d1 19 1c d6 c8 db 36 b3 3a d0 45 81 4a eb b5 4a d6 ec a6 bb 45 de 63 bd bf 8f be 0f a2 b3 9c 9d bd a3 6e 3f 61 7b 1f 29 f3 36 aa 91 a0 e7 0d 76 ca 31 ac c5 74 e2 ba 54 a9 c8 a0 d0 9a f2 3f 64 ed 9f 01 f2 9d cb f5 6f 87 95 47 96 ac f7 99 ca aa e5 Data Ascii: n;gs9i7IkXtwe[94e^9w`:=`Z6)yYKVMJAu\/lh+; &[gJ\dUCJbX{YT%JY/5i`)p6:EJJEcn?a{)6v1tT?doG
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 49 cc 6f 6b e1 d6 d7 c9 a5 0b db c1 de 45 7b f2 ee 09 ef 76 2c 24 41 2b 5e 1d ad 5a 2a 75 75 e2 2c 8a 1b 17 f1 b1 59 1b 17 63 cd 83 f2 e0 9a de b5 60 af 42 c9 d8 57 b7 14 43 52 58 60 34 1a 09 9a 14 0d 23 98 6b 4a c5 eb 0a 96 53 0d a6 9a de 1b 52 58 89 9a 2a 99 89 60 21 80 88 c1 94 ea 87 12 da 08 27 36 ba b3 2e 17 5c d9 6c 8a 9a 56 d9 24 a6 f1 f5 66 96 7a 86 74 b2 ab 27 52 81 5b 68 3a ae 9b 54 b5 6d 15 39 66 2e 55 89 9c d2 fa d2 cb 52 ee 69 a3 ac b5 7f cf d4 d6 d5 4a 91 e8 df 43 cb f5 ef 77 99 f3 6a aa 18 85 db 73 5f 7a 4e a3 3d 2a b6 95 56 4f 49 01 90 ff 00 c6 fd 8b a2 7c bf af 79 f0 3c 3a ff 00 a3 e9 d0 fe 83 dc b0 79 bc 55 af 5b d1 69 a7 56 2d 42 b6 cc c6 26 72 62 58 48 36 df e7 20 3d ef c2 71 10 b8 a9 9c a6 cf e4 74 72 6f 77 98 ac 49 53 5f 4d fc 57 7f Data Ascii: IokE{v,$A+^Zuu,Yc`BWCRX`4#kJSRX`!'6.\lV$fzt'R[h:Tm9f.URiJCwjs_zN=*VOI\|y<:yU[iV-B&rbXH6 =qtrowIS_MW
2024-05-24 22:57:47 UTC	1369	IN	Data Raw: 9a cc 80 65 5c ab a3 14 ef c0 96 bc 29 69 e6 a7 af 0a 5a 79 ba eb c0 9d f8 13 bf 9f 8b 71 27 ae 2e 68 c8 b8 dc 71 05 64 de c6 f5 26 38 36 03 26 06 64 89 b1 b0 0c 88 e3 78 48 c4 b9 c5 65 e6 d1 7e 6d 65 b2 b2 53 5e c7 d7 4b 8f 66 57 be ac e9 d7 5d ea 6e 2b 5b 73 13 97 5b 6a 1f 3f 55 c3 c4 b3 cb e3 09 f4 7c b5 cc 3a a6 af c5 24 39 ae b1 cb 58 e7 18 a3 42 0c e3 f6 ab 43 bd 56 dc 60 62 af 58 1e 58 f0 72 49 0b 55 63 3b 1a cd a2 79 16 7a 74 cd 72 8a 2d 20 51 48 02 9e 2a 31 3a 49 c9 ce 92 28 55 56 44 95 aa 38 92 2f 87 3f 59 c5 a9 1d 64 0f 57 3b 2b e6 8e d9 6d ae 31 43 15 e2 a9 68 fc f4 64 ba 15 b2 71 6d a2 db 2d b4 b7 15 8d 5f 67 6c 52 d8 18 8b 5c d6 90 55 b4 58 33 4b 83 bc ec ce d5 2b 6d aa 42 48 8d aa 6d 2c 56 75 a5 f6 2d 59 77 27 4a b9 cb 79 8e 7e ad ab 7d eb Data Ascii: e\)iZyq'.hqd&86&dxHe~meS^KfW]n+[s[j?U\|:$9XBCV`bXXrIUc;yztr- QH*1:I(UVD8/?YdW;+m1Chdqm-_glR\UX3K+mBHm,Vu-Yw'Jy~}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.5	50099	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:47 UTC	614	OUT	GET /buyer/user/select-coupon HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:47 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:47 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:47 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:47 UTC	75	IN	Data Raw: 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 5d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 34 37 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 40{"code":0,"msg":"success","data":[],"now":"2024-05-25 06:57:47"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.5	50100	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:47 UTC	993	OUT	GET /sl.png?ul=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&ht=www.cravob.com&lp=true&sr=direct&rl=&s=221&u=114475774&ev=PageView&fu=41d14489ce547fde8815419e21e7c50a&p=products&ts=1716591463905&cd=%7B%7D&utmso=&utmmd=&utmcp=&utmct=&utmtm=&lib=JS&latest_ref=&latest_url=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&customer_id=&is_login=false&session_id=s.1.1716591392528.85fc60524ff17 HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:48 UTC	147	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:47 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close
2024-05-24 22:57:48 UTC	81	IN	Data Raw: 34 36 0d 0a 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 64 68 41 51 41 42 41 50 41 41 41 4d 50 44 77 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 46data:image/png;base64,R0lGODdhAQABAPAAAMPDwwAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.5	50101	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:48 UTC	494	OUT	GET /uploader/35ba491724c524231c180060c6634fbcb3366865.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "2BF63D8311FF49E15CCA56A593F1E064" If-Modified-Since: Wed, 09 Aug 2023 07:22:31 GMT
2024-05-24 22:57:48 UTC	644	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:48 GMT Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2214d6bfc29077121919605a7bfa5f434ca66808_221" Content-MD5: K/Y9gxH/SeFcylalk/HgZA== ETag: "2BF63D8311FF49E15CCA56A593F1E064" Last-Modified: Wed, 09 Aug 2023 07:22:31 GMT x-oss-hash-crc64ecma: 13441064737030444594 x-oss-object-type: Normal x-oss-request-id: 66507445342C4831336B56A2 x-oss-server-time: 31 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42791 Expires: Sat, 25 May 2024 02:57:48 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e304ce986a7a-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.5	50102	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:48 UTC	494	OUT	GET /uploader/3474c0a0e52dc1984476bef3a986c4b06b9ce11e.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6F383755A7DD9EA0DF138871D81DAD2A" If-Modified-Since: Wed, 09 Aug 2023 07:22:25 GMT
2024-05-24 22:57:48 UTC	644	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:48 GMT Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="22100b1940199bdf78d7e3c1bdb91b7d88877806_221" Content-MD5: bzg3VafdnqDfE4hx2B2tKg== ETag: "6F383755A7DD9EA0DF138871D81DAD2A" Last-Modified: Wed, 09 Aug 2023 07:22:25 GMT x-oss-hash-crc64ecma: 11964597626529005413 x-oss-object-type: Normal x-oss-request-id: 66507445D561043631474AE2 x-oss-server-time: 32 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 42791 Expires: Sat, 25 May 2024 02:57:48 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e304dc55f7d8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.5	50104	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:48 UTC	627	OUT	GET /uploader/b8ad5401dfbf111b38bcfd098e58a9a0044e7e9d.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:48 UTC	680	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:48 GMT Content-Type: image/jpeg Content-Length: 179764 Connection: close x-oss-request-id: 66511B6CCB42C43730B62A48 ETag: "3252950140BCA038F61E0FE12629D175" Last-Modified: Wed, 09 Aug 2023 07:20:49 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9297115210901135626 x-oss-storage-class: Standard Content-Disposition: inline; filename="22149727484c93476f90b52d455437bc68095382_221" Content-MD5: MlKVAUC8oDj2Hg/hJinRdQ== x-oss-server-time: 158 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:48 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e3058edbf7e0-BNA
2024-05-24 22:57:48 UTC	689	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 00 77 01 00 e8 03 00 00 00 77 01 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 e8 03 00 00 03 a0 04 00 01 00 00 00 11 03 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipwwimagery40210ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 03 11 03 e8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 01 08 09 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c1 b0 d0 8a 2b e5 74 af 95 99 d1 59 2e 2a dd 31 97 42 58 00 00 00 00 00 00 00 Data Ascii: C) )/'%'/9339GDG]]}X+tY.*1BX
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 1b 9e 0b be f8 bf 2e 92 cd 71 15 65 e5 ea a9 d7 27 37 e2 25 2f 33 da da 98 bd cc e1 0d 95 23 cb db 1e f5 33 5d ee fc bf 4a fa fc 80 13 4d c4 33 50 dd 8d 9e b5 e8 f4 41 cf 6b 2f 5f 99 0f b8 f5 98 d4 b1 72 ce 46 0c cd 24 c7 0b 69 55 0c 48 17 33 11 2d a7 b0 28 b8 a0 98 c8 54 8e 1f 0f 03 8d 86 22 e3 a1 30 c3 31 b8 60 e3 c1 30 a7 47 01 02 0e 02 8f 85 c6 62 e4 80 f8 44 44 b1 8b 0b 8d ce 87 00 50 c7 06 c2 24 80 06 43 c3 a4 78 f4 e9 5c 2c 62 03 32 44 6c 56 88 f2 d2 4d 90 83 61 c1 c2 74 29 55 27 87 a4 16 6f 4a ea 67 94 ad 4f 87 3d 3c 31 6f 3f a5 ab 9e 87 1e c9 cf 1f d3 a8 79 be f2 9e cf cf 3c af 1d 2f ac 36 ae 47 54 97 3e b3 0b 79 1e 94 67 db 1c ec b4 75 d4 ab cd ea 3f 5f e6 10 21 f9 7b b0 0f 9f fb e5 bc dc 1a 75 e4 ab 9b ab f3 cb df 92 4f 8f 1d 13 e9 fc ea 87 6f Data Ascii: .qe'7%/3#3]JM3PAk/_rF$iUH3-(T"01`0GbDDP$Cx\,b2DlVMat)U'oJgO=<1o?y</6GT>ygu?_!{uOo
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 4f a3 a0 9a de 3e bf f2 5f 56 fd 0f c2 a4 45 13 c1 48 83 e6 00 25 69 36 52 c4 63 c6 60 7a 1c f5 99 36 78 54 c5 0f 53 1e 73 21 4f 78 d2 ae 78 da 40 00 2d 07 ae 48 6a 03 d0 87 03 8b 00 01 43 09 8a 00 6c 66 24 41 4f 4c 81 4d 33 23 5b 2d a1 4c 5c d2 45 c8 62 c8 45 86 30 a5 7a 7c bf 16 b1 e1 c1 c1 1e 24 34 32 e2 da 66 45 20 8b 4d 98 f4 02 91 22 ca 99 04 9c dc b3 0f 06 5b 5a c7 d1 f2 b3 f5 71 2d 0e a2 24 d2 26 06 e1 02 04 09 52 40 9b 80 e3 38 68 fe 0f 5d 5f e7 fa a2 4f 3a 7c bf e8 f7 fe bf 88 ca bc 3f bc f5 1f dc fe 74 ff 00 78 5d 09 8d dc 63 cb fa 2f 30 fc 4f ee 23 34 00 00 00 00 00 00 de 3e b7 f2 1f 4e 7b ff 00 0e 83 64 07 64 68 63 e6 99 0b 25 8f 78 53 50 3c 7d 2f 3d 1e a3 a7 a8 86 d2 f9 a8 47 1a 31 4e 22 8f 46 17 b3 c7 03 c2 54 af 00 00 34 03 e8 8d 13 15 3a Data Ascii: O>_VEH%i6Rc`z6xTSs!Oxx@-HjClf$AOLM3#[-L\EbE0z\|$42fE M"[Zq-$&R@8h]_O:\|?tx]c/0O#4>N{ddhc%xSP<}/=G1N"FT4:
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: cd 24 7a 2e 14 50 68 79 ec c2 c9 50 a3 a3 41 34 d6 be 6c 09 96 25 c9 b9 94 42 19 54 42 d8 98 82 ba 45 0c 14 42 6d 32 26 8e 6d c6 50 ab 50 eb 16 ef a3 e7 75 e9 e2 98 5e 92 53 87 02 24 ad 2a 52 00 04 f7 48 cd 9f e5 7b 72 6f 37 67 27 99 0a 19 ea 82 d2 10 bb 9a 0b 30 5f 3f e8 71 9f c1 7e a3 d6 5f d0 bf 9b 79 06 f7 dc 27 92 cd 64 cc f1 e9 b2 91 88 5a 29 c7 70 8f e7 5f d7 2d 9f bc fc f7 ac bd ff 00 82 85 6f 9f 4f 22 c8 e4 b1 0c 00 e1 0d c8 db 4f 10 17 12 c0 65 c7 ad 0f 4b d3 e5 94 0d a0 00 1e c7 36 72 a2 78 7c af 9d 3e a2 d1 e9 c1 99 e7 92 3c 96 25 47 02 83 f2 40 76 2c 2e 28 28 67 45 08 90 22 13 71 29 a5 f8 7c 48 95 e3 3c 2f 46 2c 60 27 4b 08 f0 6a 4b 12 45 dc 6c 4b 0c c9 01 fa b5 e2 30 80 33 82 8c 50 12 e4 78 4b 9a 72 b0 73 62 95 d4 b4 ea cf e8 e4 eb e9 79 50 Data Ascii: $z.PhyPA4l%BTBEBm2&mPPu^S$*RH{ro7g'0_?q~_y'dZ)p_-oO"OeK6rx\|><%G@v,.((gE"q)\|H</F,`'KjKElK03PxKrsbyP
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 5a cd 80 95 34 62 c6 cc 8f 8f de f2 5f c0 fe e9 ca e0 8d f9 5d d7 cf b0 74 f9 d6 0e 9e 19 fe bf 3e c3 d7 e7 cf 74 f0 58 3a 78 67 ef c5 68 71 94 d1 99 1e 18 94 23 07 03 12 44 70 20 2d a5 70 9a 79 35 56 b0 4b 2b 38 e9 09 56 34 e9 11 bd 62 3a e1 bf 59 6d 52 8f 58 1b 8b c5 d1 be 07 d2 86 c5 94 8d 20 09 a2 cc 79 58 5c 06 e0 5c cb 32 af e3 c1 d0 63 2a 3c da 9b 41 97 ab dd 22 46 18 27 29 72 85 39 58 5e 71 72 47 54 73 93 ad 5f 76 66 05 4c 64 8f 57 b1 ba c4 b5 e7 8f 38 54 54 d7 63 da 5e 9e 52 24 31 22 cd 26 cb 2e e3 0a 94 f0 f8 77 8d c8 ce 69 44 96 96 5c bb 47 a2 fd 9c 79 b8 5a ce 60 24 05 a1 0e 50 a1 58 30 5a 14 e3 0a dd bb e4 fb 71 f9 d8 83 31 1e 14 23 58 26 cd 18 98 6b 17 4a 77 2f 54 f5 f9 ec ee 4f 6c e4 60 97 6d 29 dc 98 71 c3 5d 94 d2 e4 47 89 8f 46 a7 37 12 Data Ascii: Z4b_]t>tX:xghq#Dp -py5VK+8V4b:YmRX yX\\2c*<A"F')r9X^qrGTs_vfLdW8TTc^R$1"&.wiD\GyZ`$PX0Zq1#X&kJw/TOl`m)q]GF7
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: c9 56 be e7 c9 81 fa df 2e 67 cd e8 f4 1f c0 fb 79 47 d4 f9 fa cf cb f7 e3 ff 00 5f c1 b5 7c 6f a3 e6 9f d2 fc 25 57 b0 7c 4f a5 9d 7d 1f 1b 2e f0 ac d1 c5 a7 5c cd 2b 05 f2 d6 8a 54 33 54 0f 94 a0 ac 52 f0 51 46 3b 34 61 4c a5 85 20 60 1d 14 cd 01 77 08 57 3c fd 31 4e 17 1f b9 6a 11 55 e8 f3 32 60 5b b8 b3 11 15 2f a3 21 22 54 9b 25 48 93 cd aa 6a 48 d6 69 fc ba ea f3 bb d7 5e 54 56 63 ac a8 0e 4c d0 4c 48 d9 0c e4 aa 84 ca dc 69 eb 9f 47 25 f5 c3 87 00 17 45 38 70 2d 67 02 80 26 88 26 70 2d 49 04 a8 51 34 94 4c 20 46 70 2e 80 40 a2 15 3d 09 a4 04 2b 14 1b b1 f4 df a1 7e 4f b3 0a 23 04 0c 18 ad 1e 92 27 0a 97 d9 f9 70 bf 5b e6 3c e3 db 6b f8 7f 56 2f bf 19 7e 5d f1 8f b9 f2 7d 05 f9 df b5 87 7d cf 93 77 f1 7a b4 ef 93 f4 59 f6 e5 8d 7d 9f 9d 1b d2 14 cd Data Ascii: V.gyG_\|o%W\|O}.\+T3TRQF;4aL `wW<1NjU2`[/!"T%HjHi^TVcLLHiG%E8p-g&&p-IQ4L Fp.@=+~O#'p[<kV/~]}}wzY}
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 62 65 8a 57 68 ab 3b 55 11 d7 0e 54 a6 75 89 0d 75 77 f3 5e c1 f3 fd 78 e9 58 00 b1 14 18 72 32 fa 9e 06 3f 53 c2 cf 37 44 f9 9e b6 5d a6 77 cd da 4e 50 7d e5 e6 54 7d 42 ca 46 a4 c1 a4 7c 71 44 a2 ad 56 07 8a 50 33 54 15 9a 50 34 d1 c5 33 4c 09 1c ee 3a 18 e8 00 14 02 20 15 9a ae 70 bf 3c e4 b7 2b a6 64 20 a2 86 4c 81 ac 17 a2 38 50 c3 0a 79 e8 1d 44 cb 35 d5 90 f6 9f 79 54 97 e9 90 1c aa a9 c6 fc c6 6c c9 b8 9e 3c 3d 04 7a 0f b3 c4 7c d4 69 36 2f 86 7c 58 b1 e8 3b 6c 7f 47 81 37 38 c2 05 d7 02 63 86 61 ac c6 92 93 ac a9 b0 72 db d4 e9 2a 5c cd f3 54 cb 9c 87 a4 a2 48 44 c8 97 1c b8 2b 56 10 d6 8f 47 46 c3 ca 94 a2 69 e0 8e 9a 54 a3 b8 34 8e ed ff 00 c5 d7 62 f0 7a b2 12 a0 2c 2c 33 3a 20 33 fa 9e 06 7f 53 c2 c8 7b ce 94 ca 90 9a 75 3a fb 95 3f 9a 81 ef Data Ascii: beWh;UTuuw^xXr2?S7D]wNP}T}BF\|qDVP3TP43L: p<+d L8PyD5yTl<=z\|i6/\|X;lG78car*\THD+VGFiT4bz,,3: 3S{u:?
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 2b e7 9d 4f 62 e9 e7 d2 f3 d6 29 17 9b 7f 6c 6f 83 af 9a 39 5c 61 5f 4e e8 7a 6b d3 0c 7b 4c 5f 4e 75 6e e8 6e d3 2f ca a7 f8 eb 18 49 e5 33 a2 7e 4e 8c 78 5d 6b 32 34 b8 9e 65 3d 4d db 1f fb 78 a3 c6 b1 ff 00 1f 5a 2e 0c 52 89 13 6b dc dc bd fc 8d b4 a1 1f b3 9a 97 b8 df 32 f7 95 e7 64 c9 02 1f ac 3d 91 f0 e3 35 52 3a f1 03 b2 78 a6 b5 2a 1c 38 17 0d e9 23 b0 94 d4 6d 62 e4 b3 35 40 db 20 e5 0a 14 d7 be 5f aa f7 e6 ed 92 15 32 30 95 16 0a 40 10 bf 43 c8 cf e8 f8 ae 53 6b 45 a8 1a 75 50 65 00 cc 38 e3 28 e7 67 5d c9 69 a4 86 96 6a 0d 38 94 7d 6f 34 bc ec a4 53 f9 d7 47 2a 40 a4 6a 83 6d 96 1d 4d 76 4e 39 e7 68 58 66 13 07 c9 8c f2 fa 3c dd e7 ad cd 99 01 43 3d 91 d1 44 fa 3e 74 08 c2 26 aa e9 e0 eb 87 f9 ee a2 43 a7 7e 36 8f a1 cb 9d a6 47 8e b7 ac 86 e9 Data Ascii: +Ob)lo9\a_Nzk{L_Nunn/I3~Nx]k24e=MxZ.Rk2d=5R:x8#mb5@ _20@CSkEuPe8(g]ij8}o4SG@jmMvN9hXf<C=D>t&C~6G
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: e5 44 9a b4 ee b9 7d eb 03 75 ce 0d 0a 27 37 95 39 5d 70 e1 70 2b 86 8b f5 39 23 50 61 20 c0 16 1f 8f 87 c9 84 05 52 23 96 26 29 84 75 25 25 62 ef 9c 2a a3 de 60 bb f2 21 10 a9 c9 5c 38 de 84 c9 66 74 15 89 d1 be c3 4a 44 54 6e 7f 1f df 37 15 99 94 31 90 a8 e0 6e 21 a1 ec f3 af f4 bc 6e 22 d4 ac e8 e3 95 c9 79 7b 89 d3 ad e4 e4 8c a2 66 9d 0c b2 f1 88 6d 74 8d 2b 2d b2 a6 bf d5 68 f5 f9 53 53 40 d5 3c 91 94 e2 0b 61 4a 3a 9a 30 6d 38 8e ad 58 d6 f8 31 c9 65 74 8e 9b 8e f8 54 97 87 d1 58 4e 2e 58 cd 77 e8 f2 af 74 87 42 c7 02 e6 c4 70 e9 80 78 ae b6 48 9e b5 b4 c7 b7 9f 75 d9 2d 98 b6 2a 3f 0f e9 66 7d 38 4a 7e 6f f4 f9 5f 1f b1 eb 4f d8 fe 22 e7 e9 f0 56 39 d6 77 93 4a 29 b5 8f 15 b2 de 69 7d 61 56 9c 36 32 6e 6f 22 72 b9 02 2c ba 0c 69 61 fa 9c 9c 20 a2 Data Ascii: D}u'79]pp+9#Pa R#&)u%%b`!\8ftJDTn71n!n"y{fmt+-hSS@<aJ:0m8X1etTXN.XwtBpxHu-?f}8J~o_O"V9wJ)i}aV62no"r,ia

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.5	50103	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:48 UTC	626	OUT	GET /uploader/a70350d2dda8813e43ac84a691f0a381847dfb75.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:49 UTC	681	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:49 GMT Content-Type: image/png Content-Length: 1089898 Connection: close x-oss-request-id: 66511B6CD5610430390D8141 ETag: "4613FD07C2164988EF0C8084FF5AD630" Last-Modified: Wed, 09 Aug 2023 07:26:37 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 17443365684541304603 x-oss-storage-class: Standard Content-Disposition: inline; filename="22117681052e222d9ca330eed2735d1274c27593_221" Content-MD5: RhP9B8IWSYjvDICE/1rWMA== x-oss-server-time: 230 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:48 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e3059ccaf7ec-BNA
2024-05-24 22:57:49 UTC	688	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 03 12 08 06 00 00 00 f9 aa ee 9b 00 00 01 0b 69 43 43 50 69 63 63 00 00 18 95 63 60 60 5c 91 93 9c 5b cc 24 c0 c0 90 9b 57 52 14 e4 ee a4 10 11 19 a5 c0 7e 87 81 91 41 92 81 99 41 93 c1 32 31 b9 b8 c0 31 20 c0 87 01 27 f8 76 8d 81 11 44 5f d6 05 99 c5 40 1a e0 4c 49 2d 4e 66 60 60 f8 c0 c0 c0 10 9f 5c 50 54 c2 c0 c0 08 b2 8b a7 bc a4 00 c4 8e 60 60 60 10 29 8a 88 8c 62 60 60 cc 01 b1 d3 21 ec 06 10 3b 09 c2 9e 02 56 13 12 e4 cc c0 c0 c8 c3 c0 c0 e0 90 8e c4 4e 42 62 43 ed 02 01 d6 64 a3 e4 4c 64 87 24 97 16 95 41 99 52 0c 0c 0c a7 19 4f 32 27 b3 4e e2 c8 e6 fe 26 60 2f 1a 28 6d a2 f8 51 73 82 91 84 f5 24 37 d6 c0 f2 d8 b7 d9 05 55 ac 9d 1b 67 d5 ac c9 dc 5f 7b f9 f0 4b 83 ff ff 4b 52 2b 4a Data Ascii: PNGIHDRiCCPiccc``\[$WR~AA211 'vD_@LI-Nf``\PT```)b``!;VNBbCdLd$ARO2'N&`/(mQs$7Ug_{KKR+J
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: fd 0c 93 e7 e7 81 df a8 6f df 01 fe 0f e0 0f 81 ac 5e 56 4f 7d be 2f 1d 4e a0 3b 1c 0e 87 c3 e1 70 38 1c 0e c7 a7 8f dc e0 fe 83 84 f7 ad 44 92 e3 3a da 3d 11 de cb 53 11 ef c9 ef 8b 75 c4 bb 57 0b ef 0f d4 80 22 fb 6f 6b 45 ec 11 a1 2c 58 8b 18 ab c4 94 22 c6 08 c6 28 31 46 89 a9 04 39 00 9e 2e 09 c3 0c 11 8b 31 8a 23 9f 77 f2 9a 1a f8 a5 fa f6 7a 1d 51 ff 5d e0 7a bd fc 97 d2 fe ee 04 ba c3 e1 70 38 1c 0e 87 c3 e1 70 7c 74 3e c8 66 ce 47 88 76 03 b4 6a e1 3d 5b 47 b5 17 6b d1 7d 6c 2a f2 3d 3f 25 bc 5b b5 a0 bd f9 4a d6 c2 5b c0 22 f6 90 e8 ad a2 dd 82 31 22 65 25 b8 31 46 c4 18 25 d6 8a b2 b6 8a 98 2b 65 f0 74 89 ef 15 84 71 46 23 4e 69 c4 63 1a 8d 31 9d d6 80 46 9c 31 1c 37 b8 be 36 c7 c5 cb cb 64 b9 4f 1c a5 78 ba c4 54 51 f5 c9 b6 99 58 e2 cb fa ef Data Ascii: o^VO}/N;p8D:=SuW"okE,X"(1F9.1#wzQ]zp8p\|t>fGvj=[Gk}l*=?%[J["1"e%1F%+etqF#Nic1F176dOxTQX
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: df bc 8b 6b d7 85 af 3d f7 04 ad 4e 93 b5 6b 17 d9 be 7a 81 99 a5 13 0c 77 b7 e8 ce cc 20 da 27 cb 33 56 af 5e 43 8b 21 8c 42 c6 49 89 b6 25 56 2b bc 46 8b a2 f4 b9 bc ba c5 e9 93 3e 67 1f bc ce a9 c5 3e 77 9d b4 2c cc 42 5c 9b f6 ad 3d b8 7d 5c 26 e2 3b 0c 2c 41 00 9b 3b 11 2f be fc 10 df 7f fe 2c 97 ae 2e 03 10 85 59 65 7f 37 ea e8 c1 72 23 fb fb 4a dd a2 ed 77 80 37 8e 1c 3f 9f 7b fb bb b3 b8 3b 1c 0e 87 c3 e1 70 7c 0c 9c 40 77 7c 09 b9 dd c2 6a 1f 86 5f 47 bc a7 0b ab 2d 1f 89 78 2f d6 82 bc 57 47 c6 c3 db 58 df 4f 5d 78 df f6 75 c3 0a 4a 19 1e bc f7 22 df 78 e6 15 1e ba ff 3c a1 6f 19 27 42 51 2a 94 b2 a8 83 1e e4 d3 fd c8 6f bc 43 04 ae ae 06 fc de 1f 9d e0 c7 6f 8f 29 46 d0 9b eb 31 eb 17 48 51 62 44 18 f7 fb d8 d2 12 c6 3e ad 76 87 b2 2c 09 c3 80 Data Ascii: k=Nkzw '3V^C!BI%V+F>g>w,B\=}\&;,A;/,.Ye7r#Jw7?{;p\|@w\|j_G-x/WGXO]xuJ"x<o'BQ*oCo)F1HQbD>v,
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: 58 60 3c b6 ac 5e bd c4 d9 93 01 73 b3 33 e4 cd 1d 66 17 c7 1c 9f 17 66 8f cd d2 69 28 02 29 d1 7a 84 d8 1c cf 03 25 39 e8 02 4f 2a fb bb 92 03 c1 3e 91 9e d6 7e 34 d1 6e 4c f5 d9 c3 c0 e2 79 70 7d bd cd f3 3f 7e 98 1f be f8 08 2b ab f3 68 6d 88 c2 0c 11 7b ab f6 f7 f3 53 f6 f7 f3 53 c7 f9 4f d5 fe ee 04 ba c3 e1 70 38 1c 0e c7 c7 c0 09 f4 2f 35 9f 86 f0 6e d4 51 ec 99 29 4b f9 12 70 62 aa c8 da d2 54 ff ee ce c7 cc ef e6 4e 2b ac f6 65 63 92 7b 9e a6 3e 79 ee b1 30 bf cd 33 4f bd ce d7 9f 7e 95 63 8b 3b 55 9e 7a 5a 45 a8 3f 2c 4f dd d8 83 fe e4 9e ae 2a b0 9b a9 e7 f2 02 8a 12 d2 04 06 49 93 c1 66 83 f5 6b 29 bb ab 6d f2 b4 a4 14 41 2b e8 cc cd 62 c4 a7 db cc d1 6b 43 f2 33 7f 93 63 ff ce d7 31 3b 39 e5 77 7f 44 bb ff 12 3b fe 1a c3 7c 07 5f e7 f8 cd 3e Data Ascii: X`<^s3ffi()z%9O>~4nLyp}?~+hm{SSOp8/5nQ)KpbTN+ec{>y03O~c;UzZE?,OIfk)mA+bkC3c1;9wD;\|_>
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: 4b 58 9e 57 c4 41 c4 c6 fa 29 f4 5e 9b c1 f8 32 fa f8 75 e6 ba 96 c5 19 68 35 eb bc fa 1b 5d a7 8f d8 df d3 0c de 3a 77 9a ef 3e ff 18 af bd 75 2f e3 71 54 e5 a9 7b c5 ed d8 df ff a4 ae fe fe 07 40 5a 3f f6 b1 ed ef 4e a0 3b 1c 0e 87 c3 e1 70 7c 0c 9c 40 bf 6d 3e e9 fc 6e a6 f2 bb 67 a7 da 88 2d dd a0 7f f7 5c 2d bc 5b 1f b3 b0 9a 58 20 4d 95 58 63 44 7b 82 52 22 81 6f 69 35 0d a1 67 08 bc 92 a0 5c c7 57 63 94 f6 10 6d 08 3c 98 5b 6c 71 f2 58 44 d4 0c 49 f6 d6 d8 5e b9 c4 5e 7f 1b eb 29 82 b8 41 a3 dd 26 8e 5b 5c 3b f7 26 83 5c 33 33 33 43 bb e9 61 54 c0 38 31 f8 94 bc 75 79 96 73 ab f7 61 ac c6 d3 f9 4d 1c ee d5 63 d6 0a c6 d8 7d 8b b0 13 f4 5f f0 93 ab b6 b4 17 85 c7 38 09 68 35 c7 3c f6 f0 bb 3c f7 ec 4b dc 77 f7 15 b4 9a ca 53 bf 89 fd 5d 80 dc c0 f6 Data Ascii: KXWA)^2uh5]:w>u/qT{@Z?N;p\|@m>ng-\-[X MXcD{R"oi5g\Wcm<[lqXDI^^)A&[\;&\333CaT81uysaMc}_8h5<<KwS]
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: 81 31 55 9e 7a 9a c6 0c d6 5a 5c bb 16 71 65 3d 47 75 87 9c 38 d9 67 ae 0b bd 36 94 c3 90 ed 15 8d 99 4d d0 ca d0 8c 84 56 d3 a2 43 c8 d6 db a4 17 1e c7 6e 3c 8c f2 7a 58 af 20 4f 0c be 1d 53 64 19 45 3f 63 40 8b ed a7 1f c5 3e 7a 1a bd 3d c0 3f 77 95 f6 b5 55 fc cd 4d 94 31 44 73 0d 74 3b c2 6b cd 20 56 93 0f 77 e8 97 5b ec c9 bb 64 cd 73 84 33 d7 e9 ce 96 74 5b d0 f4 41 8b 60 ac 60 ac bd ad fe e9 ef bb 96 03 d6 28 94 aa 84 ba 05 2e 5e 99 e7 fb 2f 9c e5 c5 97 1f 62 67 b7 83 ef 17 84 41 65 da 9f 44 e0 8f bc c4 51 fb fb eb 75 41 b9 7f 08 5c 9f ec 8a 0f b2 bf bb 08 ba c3 e1 70 38 1c 0e c7 27 c0 fa f5 1d fe c3 9f ff 1f 3e eb d5 b8 15 9b f9 ed 0a ef c6 91 fc ee 85 a9 6a e6 c7 a6 fa 77 4f 0a ab b5 8f 0c 50 3f 88 3b be 7f b7 b1 8a a2 ac 02 63 cd 28 e3 d4 c2 80 Data Ascii: 1UzZ\qe=Gu8g6MVCn<zX OSdE?c@>z=?wUM1Dst;k Vw[ds3t[A``(.^/bgAeDQuA\p8'>jwOP?;c(
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: e6 a1 75 be fa d0 36 cd 76 83 b8 3d c3 1b 2f bd ca 9f fe 9b 97 d8 4b 0a de 5d 87 f9 9e c7 99 e3 f3 9c 3a 76 8c a5 85 39 e2 50 51 e4 09 d9 70 44 7f 6b 9b 22 cb 91 c0 a3 37 37 47 1c 37 d0 cd 2e a2 14 a3 c1 88 f1 78 cc ee ee 2e d6 94 1c 5b 5e 24 6e 75 f0 82 80 30 28 29 93 11 2b d7 15 6f 5e e8 71 65 a3 43 56 44 88 9a d8 dd ed 97 67 b7 ee 1f d1 76 5f a8 49 bd 9f a4 be 26 c8 e4 f9 fd e8 b0 dc de 14 d9 9d be 89 6a fb 7b 96 f9 a4 99 cf 4c b7 cf 57 1f 7f 8b 6f 7c ed 15 4e 9f 5c 03 5b b5 69 b3 b6 ca d5 fe f0 93 a2 da a6 c6 b3 a4 5b 5d b2 b7 bf 85 0c 1e 80 c8 42 18 61 e2 16 7a f7 2a e9 2b ab 6c 2c df 4b f4 eb cf 12 e5 19 a5 15 0a 6b f1 26 df 6e be 42 bc ca fd 51 66 25 65 7f 8c ec 0e 90 bd 01 d2 1f e2 65 25 11 96 a0 b4 a8 52 91 17 63 06 b2 ca 20 38 4f da 78 97 78 7e Data Ascii: u6v=/K]:v9PQpDk"77G7.x.[^$nu0()+o^qeCVDgv_I&j{LWo\|N\[i[]Baz*+l,Kk&nBQf%ee%Rc 8Oxx~
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: 92 14 19 b6 b0 f8 45 40 90 85 78 a3 90 c6 30 62 69 34 83 bf 17 92 6c 1b 92 41 81 c1 a2 42 8b d4 51 d8 9b b9 6a 84 43 f3 06 88 95 c3 9f ed 0e 41 00 51 55 9e 7a 92 04 88 b2 dc 7d 7a 85 e7 9e 7d 85 27 1e 79 8b 76 3b 23 4d 21 cf a5 fe 0e f9 80 0f 38 1d 4d df ee 90 bd f7 1c 6c 3f 84 88 8f 44 1e e9 1b 5b 6c cc 1e 67 fe 6f 3c c5 f6 c6 98 d8 64 78 59 ca ce 68 4c 94 0f b0 69 9f 34 d9 a5 2c 76 50 e5 16 c6 6e 63 d9 c6 f3 76 f1 82 01 2a 1a 12 44 05 5e 0c 7e 04 3a 00 cf 03 4f 81 2a 35 79 1e 32 4e 2a 61 3d 18 34 2b c1 dd 6f b2 d7 6f d2 1f 36 18 0c 1a 0c c7 11 e3 71 48 92 06 e4 85 47 51 68 cc d4 8e 54 ca a0 94 9d ba 99 c3 22 bc 9e 70 ae ae d2 16 ac c1 96 86 5a 80 d7 8f d9 c9 86 45 3c 8d 04 9e 95 d0 2f 55 23 f2 54 33 c6 ef 34 c9 1a d1 0b 4f 3f 79 fa 37 bf 14 02 dd 5a 43 Data Ascii: E@x0bi4lABQjCAQUz}z}'yv;#M!8Ml?D[lgo<dxYhLi4,vPncvD^~:O5y2N*a=4+oo6qHGQhT"pZE</U#T34O?y7ZC
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: 0e 8f 4b af ef b1 d7 2f 78 e3 4a 9f 57 d7 4a 1a a1 e1 db 5f 5b a5 1b 6f b1 b3 b5 c1 a8 bf 43 1c 7a b4 42 85 56 0a ab 35 69 9a 53 94 96 41 56 b2 b7 37 20 c9 52 94 f6 08 3c 4d e8 29 3c a5 6a 57 8b a2 d4 01 56 02 42 c9 f1 3d 8f d2 0b 11 51 28 29 f1 42 1f 44 d3 99 9b 43 47 1d d2 74 4c 9a 2a 56 d7 1a 5c be 1a b2 b1 1d 92 a4 1a df 13 02 5f ea 6b 01 9f 9c 60 17 b0 39 f8 c6 43 35 a0 ec 66 94 bd 9c ce 62 c4 86 1e 60 bd 1c 2f 30 24 79 ce 38 cb 31 29 78 e3 80 39 33 cb b5 fb 2e 71 71 fe 2a 43 95 51 da 02 ca 4a 24 1d 3a 9d 44 0e 2c 41 aa 3a ef 95 40 91 65 50 68 b0 93 49 80 a9 59 bd a9 53 6f 12 00 3d f8 a5 04 29 c1 53 74 c2 98 33 d1 22 f3 7b f3 d8 f3 1e b3 7e 8f 6b 6a 8b 54 25 f8 81 65 6c 33 52 93 93 e4 39 91 09 f1 33 8f 30 89 d0 23 9f d9 71 87 e6 30 26 df 85 74 50 52 Data Ascii: K/xJWJ_[oCzBV5iSAV7 R<M)<jWVB=Q()BDCGtLV\_k`9C5fb`/0$y81)x93.qqCQJ$:D,A:@ePhIYSo=)St3"{~kjT%el3R930#q0&tPR
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: fe 37 b1 41 83 e1 5f 5c 44 e7 03 a2 f6 35 46 7b 17 d8 5d bb c6 ea ea 1a d7 77 86 8c 32 4b 69 aa 02 65 69 26 64 85 21 cd 4b ca 62 8b 38 30 2c cf cf d1 8a 22 22 df a7 d7 6b e0 f9 3e 79 51 22 58 3c 4f 93 e7 f9 7e fd 87 bc 28 28 b2 82 3c 4d 2b 8b 7b 0e 39 1e 5a 09 a1 ae 84 4b 61 35 7e 10 12 37 9a 58 a5 d9 ec 0f b9 b8 ba c1 fa 76 1f 5f 09 67 96 ba 3c 7c ff 09 4e 9e 3c 85 d1 8b 5c 5c 6d 73 ee a2 70 ed 5a ce ee 4e 46 96 66 68 65 f1 7c 55 57 bb ae ec e0 d3 f5 20 6f 18 6d 17 30 ca 10 a4 01 57 7e f9 3c af 3c f8 43 d8 6e 82 d5 b5 c2 96 43 45 b4 64 da e2 5e 7b c5 45 e9 29 91 cd fb df 60 ff 14 ae 5c 19 96 e9 e8 ba 7d 7f e1 cb a9 89 80 83 c7 4a 7c e5 a3 51 14 94 14 b6 ca 23 ae 0a 57 d6 cb 29 55 05 e2 2d 88 e1 c8 6c c5 d4 14 c0 a1 70 7c 7d 59 51 16 2f f0 99 09 9b 2c db Data Ascii: 7A_\D5F{]w2Kiei&d!Kb80,""k>yQ"X<O~((<M+{9ZKa5~7Xv_g<\|N<\\mspZNFfhe\|UW om0W~<<CnCEd^{E)`\}J\|Q#W)U-lp\|}YQ/,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.5	50106	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:48 UTC	627	OUT	GET /uploader/d1efd62da517b9a9cbcc66739a2f58236cb27f19.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:48 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:48 GMT Content-Type: image/jpeg Content-Length: 151629 Connection: close x-oss-request-id: 66511B6C342C483832C36401 ETag: "EBACFD846CFED80CDD0FD3AB340A24ED" Last-Modified: Wed, 09 Aug 2023 07:26:32 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 4073619334956959631 x-oss-storage-class: Standard Content-Disposition: inline; filename="221fbb59ecd61aaeca1810709d68d0288d596586_221" Content-MD5: 66z9hGz+2AzdD9OrNAok7Q== x-oss-server-time: 53 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:48 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e305cdcff7e4-BNA
2024-05-24 22:57:48 UTC	690	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 00 77 01 00 e8 03 00 00 00 77 01 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 0c 03 00 00 03 a0 04 00 01 00 00 00 20 03 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipwwimagery40210 ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 03 20 03 0c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 01 08 09 ff c4 00 1c 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 02 bf 2f 3d cb 1b c4 9b 66 73 ad 82 f9 58 73 67 2a 67 59 3b 5b 39 9b 3e 97 14 0c 36 50 06 00 00 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 af 1e 7e e4 c5 Data Ascii: C) )/'%'/9339GDG]]} X/=fsXsg*gY;[9>6P~
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: d5 39 75 65 cf be 85 93 25 b1 35 d5 0c da 8f 59 52 b9 12 7a da a3 b5 43 95 cf 67 2b 18 c2 72 86 ba 4d 44 97 7e 13 f7 11 ec ad d4 a6 0a cf 75 af c8 5b 99 7d 72 96 f0 fe da c7 f1 bf b3 0d 90 ae e6 f1 9d 6f 18 33 05 60 d8 e5 70 2f d1 fe 61 33 ec fc 3f 58 a3 4c 18 50 54 5f 0e 07 02 c2 a1 c3 8a 82 70 c1 83 83 74 a1 ce 0f 36 52 1c 74 68 7d 39 51 ba f1 6b e8 e0 39 74 e7 97 af 39 f5 07 5b d1 c6 3a 06 74 45 5d 17 d1 80 c2 08 66 94 4c 30 32 93 06 91 09 84 86 f8 1a e6 6d 6f 97 4a cf 2e d7 4c 4f d4 ca 75 89 ae 91 1a 2b 5b 31 b3 01 14 e2 d3 59 14 7f 2f 75 b2 eb 46 73 ba 3a f0 b2 f4 e4 6b 9a e3 22 47 9a 40 6e cf 78 2f c9 9b b9 45 72 94 f1 fe be c7 f1 3f b5 f4 e6 c8 9d 09 1b 63 5c 00 00 ce fd 1f e6 12 fe ff 00 e7 66 69 c0 28 2a 2c 2f 85 87 32 58 38 70 f4 30 79 1c e9 d3 Data Ascii: 9ue%5YRzCg+rMD~u[}ro3`p/a3?XLPT_pt6Rth}9Qk9t9[:tE]fL02moJ.LOu+[1Y/uFs:k"G@nx/Er?c\fi(*,/2X8p0y
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: cf c5 ec d1 fe 77 aa 4a 3b 51 23 74 f9 39 5a ec 82 0b 52 c4 c5 76 61 f8 d0 f3 f6 66 24 22 22 24 37 ac 6a 37 c3 5b 37 c9 44 4b 4d 68 cb a7 29 9e b1 63 e7 57 f8 23 86 e6 79 f3 3f a8 34 e3 fa 0e 37 98 9d f2 7c 8e 5f e7 60 fe ff 00 e3 39 b8 19 ee 9b bc 4f 37 ce b7 c9 6e 3f 6b 60 fc 0f ef f4 af a3 fc f2 b3 c2 ee ff 00 a7 f9 d5 0f 17 4d 43 ec 71 7b 6c 2b e7 5f af 7e 9f 2a f6 6f 97 ff 00 9d 7e eb 31 fd 6f de b3 7d 5f e4 ca 4d 7b 53 ae 79 2b 96 fb 37 b3 c4 7c 0b 9e dd ef 3e 79 e6 df ed 0a 79 47 95 2a 7b 03 ac d3 65 44 9a cf 65 eb 5e d9 e5 2e 7b 2d 0a fe 15 14 24 ba 4b 5c d8 df dc 7e 45 b7 6e 6c fe 1f d7 27 dc f8 ed f6 53 8b 4a 75 12 4f e6 fd 2f 45 7c 7f af e6 7f d0 7c 39 2f 37 7a b7 d0 f2 15 65 9c e1 cc 1b 3a 7a 3f f3 bf 63 9c 7b 4f 69 50 9a 82 44 5e e4 39 56 cd Data Ascii: wJ;Q#t9ZRvaf$""$7j7[7DKMh)cW#y?47\|_`9O7n?k`MCq{l+_~o~1o}_M{Sy+7\|>yyG{eDe^.{-$K\~Enl'SJuO/E\|\|9/7ze:z?c{OiPD^9V
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 1d 5d 0c 92 80 01 68 53 95 27 1d d1 d8 e2 e3 83 d8 d5 38 74 58 e9 23 66 19 94 7f d8 fe 65 97 a7 8b ff 00 8d f4 e2 3e b7 cf 26 93 ca 4e 45 59 70 41 e7 0e d3 1c ba d6 3d 7e 75 f8 de cb f0 7e be 97 cf b3 f4 5b 66 ab 5b 99 f7 ab 85 4a 66 db c7 d1 60 6a a2 ac 85 34 2c bc ae 22 a1 ce a1 e2 a3 b3 63 c8 f6 b5 10 63 51 a8 d2 8d ea 7a 35 94 5f 68 71 70 f2 e6 f3 39 6a e5 4c b2 89 a8 cf 93 f6 65 38 c5 63 c1 fb 2a cf af f4 48 f7 ee 5e 9f 1d df d3 fe 54 d5 9d 67 ba ee ea 92 f1 98 df a7 33 57 29 ed d9 72 7f 32 8b 27 17 ae 10 e4 58 9b f2 fa de f3 a3 eb a7 23 58 f5 3a e9 0e b4 f2 b3 a3 9a 95 ce 34 e4 8f 49 78 28 c9 13 b5 87 1a 66 aa 54 38 db bf 17 45 f4 62 4a d1 f9 94 4f d7 fe 71 8f a7 8c 8f c8 fa 50 ff 00 5b e7 a7 22 ad 30 ab 24 38 3c e5 76 7f 2f aa a3 ed f2 af ca b5 af Data Ascii: ]hS'8tX#fe>&NEYpA=~u~[f[Jf`j4,"ccQz5_hqp9jLe8c*H^Tg3W)r2'X#X:4Ix(fT8EbJOqP["0$8<v/
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: d2 16 ee e0 e5 50 bc f4 8d ab f4 c6 de 3e 8e a7 4e 4a f4 98 f9 dc eb f4 9f 26 0f d7 e7 9e f0 fa 60 bd fc 09 ae 05 04 b9 bb c1 ff 00 1e 92 dc 95 af 67 22 9c 6c 7f c8 f6 bf fa 7e 53 d4 58 3e 57 a9 d4 54 b7 0e b6 6c a9 3a 2e 27 26 e4 6b 0d e5 eb c9 a8 e0 a7 4e e9 b0 cb 72 15 51 93 b1 9b 9e d7 f4 4f 94 39 d6 75 90 db a4 cf f4 8e 26 d9 13 3f cb d1 33 9b 14 54 13 a3 2b 2f 4a 0c 6e 26 37 5b 63 8c f6 bd dd 8a 73 c2 d3 90 7d a7 d4 d5 19 aa 61 b5 a6 cd c7 11 4c 68 52 af 83 a5 d8 7c dd dd f9 fd 06 dc 28 5d d8 6a 99 6f 5f 2d 1e e5 d7 3a 54 35 4b a1 4d 28 25 a5 48 f8 a3 59 2c c4 84 92 81 0b 14 8f 8f aa f3 47 24 ba 63 19 cc e3 f4 3f 32 13 df e7 98 f9 fe 88 8f 77 14 ef 38 0c de 63 9a 03 9e 37 2f c9 5d f6 47 01 28 ef 99 ee 7f ee f2 9f b4 4d fc 9f 41 e3 65 f8 77 9d cd 98 Data Ascii: P>NJ&`g"l~SX>WTl:.'&kNrQO9u&?3T+/Jn&7[cs}aLhR\|(]jo_-:T5KM(%HY,G$c?2w8c7/]G(MAew
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 7d 94 12 69 be 8f 26 b3 7c 9e 98 fd 95 25 8a aa 99 b6 84 94 1d 60 a1 94 d0 f4 25 f1 9b 62 63 51 0d 74 3e ad 9e 5e a5 d2 41 70 88 cc 62 32 d3 31 b2 53 0d 58 99 5e eb 33 3d 5b 74 f4 78 8c 5f 39 cd f2 a8 99 d6 4a d3 ae e2 e1 91 64 2a 5a b7 6a c9 41 a9 89 eb da cb d6 69 f3 7e 15 6b 92 5c 9a b9 ba 26 26 5c 39 24 ea b0 ee f1 d0 f7 87 59 8f 2f a8 cc 30 0e 86 0e 03 a7 4e 9d 0c 18 e1 d3 a0 ac d8 7e 8f 06 73 ba 34 55 00 c6 06 b8 f5 e6 33 2a 50 cf 46 65 59 4a cb 72 ba 9c 26 32 cb 3b 7e e8 d7 c9 93 25 c8 cf 19 d2 2e 6b 18 6d 01 a6 55 83 e7 7b ee bf 32 da f3 a9 fe f1 df a5 ce c9 f4 7e 74 de 62 a3 6c 33 a3 42 c9 c2 c9 38 99 da 70 20 cc 66 a8 f1 9a 10 13 a2 64 15 e2 bd 62 e6 e9 2f 2a ab 94 ec 54 3c 5d c5 79 31 3c 88 d4 94 38 d0 45 4d c4 cf 6b dd ec 27 cd 68 56 ee 52 b9 Data Ascii: }i&\|%`%bcQt>^Apb21SX^3=[tx_9JdZjAi~k\&&\9$Y/0N~s4U3PFeYJr&2;~%.kmU{2~tbl3B8p fdb/*T<]y1<8EMk'hVR
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 92 f2 2e ca ad ce 79 dd b9 b1 8c ef a1 b9 75 f0 77 0e af 38 56 c1 ef e0 87 5e 5a 27 49 d4 b9 75 80 e7 8c e3 52 ca 53 e7 7a 22 66 af de ff 00 3c d7 b7 8c f6 b3 fe 5b e6 ff 00 2f 7b f7 8b a5 9b bc e3 3e ce 3a 07 af 86 a8 dc 1e 12 98 b5 53 4d c6 1b d6 66 23 6b 19 b4 a6 5b 69 97 d6 20 e2 f2 2e c7 ca db 66 43 94 1d e8 e1 b3 19 96 4f 9d ea a1 f7 ed 3b e6 ef 3d e7 eb 57 fb 1f 1d 3b e3 eb 3b bf 46 1f 36 e1 46 a3 1a 87 5d 38 f0 b0 49 71 05 39 4d fa b9 c5 88 e5 fb 3e 3d 59 5f 2a c7 b8 bb ba a6 15 d7 4e 9c 39 22 9c 0a 14 29 33 ef e5 4c 66 97 9b e8 93 c9 c6 ba 6b b2 94 d5 0f 08 9e 51 f5 73 b0 78 3d 59 af 8b d1 66 f5 70 dd 3d 5e 7f 48 45 d3 a5 e5 fe 43 e6 96 d4 2f 4e 3b 45 86 2b 4f e5 d7 11 ad 83 e4 42 e2 dd d6 6f 35 3b 5b 65 f3 22 c4 f2 88 4c b1 d6 e6 0c 5e cb 55 14 Data Ascii: .yuw8V^Z'IuRSz"f<[/{>:SMf#k[i .fCO;=W;;F6F]8Iq9M>=Y_*N9")3LfkQsx=Yfp=^HEC/N;E+OBo5;[e"L^U
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: ac f8 c3 77 32 2a 6e 2d a6 91 15 14 2a c9 6b 95 4d 33 9f 4d ff 00 95 4c 15 46 f9 ab 33 6b 2a ba a9 1a b6 1d 8e 0c 54 a4 1e c1 2c 8a 78 42 8e 0b 14 b2 4f 47 2c 5b bf 1e 9c cd ad c5 93 30 a2 8a 68 36 93 56 58 ae 53 1b c6 b3 17 8b b2 f9 cc 84 46 59 ba dd 50 aa 9d c3 0e 7b 43 a9 ca 92 88 5d 7a 69 7e ab a7 86 cc 37 26 06 a4 54 c9 89 26 61 0f 56 a9 39 50 b2 b5 0c e9 be cf 5c 87 8b 36 e5 48 00 18 01 b5 c0 9a 48 6d 46 e3 4d 34 0c 18 51 9d a7 30 7b 06 5c 2c b5 c6 d8 5f 79 dc d1 5b ac f1 a7 5e 55 6b cd ba 2e f9 cf 7c ff 00 df 94 65 0e 2d 39 64 a9 b0 70 ed 28 5f e6 fc e3 cf a3 fb 8f 4c 33 05 2d c5 86 5b 21 8e f5 e7 92 f7 e7 a5 79 fa ed 5c ba ab 4a e1 4a d9 dc 21 9d 74 61 7e 8f 3d 5f 28 82 59 32 76 4a 69 81 cc 3b a2 52 86 19 13 07 5b 16 d1 c9 6e f3 dc 7c ca 94 8d 6e Data Ascii: w2n-kM3MLF3k*T,xBOG,[0h6VXSFYP{C]zi~7&T&aV9P\6HHmFM4Q0{\,_y[^Uk.\|e-9dp(_L3-[!y\JJ!ta~=_(Y2vJi;R[n\|n
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: cd ce 69 62 c5 c8 8c 12 24 55 13 51 49 4e 0f d6 62 2e 65 ea 53 1b 49 1d ab 05 4b 9b c1 a8 2e 5a ca 69 fd cc ad 62 85 4f 85 2d 47 43 9a 4c 5c ca c5 6e 5c 3a 4f 73 e9 8f 60 c4 47 ab 86 7d 89 5f 3f 7d 01 99 c6 34 16 fa 62 19 bf 49 f3 27 a7 99 34 c6 4a e9 60 4b a3 cd 45 c8 a4 f3 7d 57 c3 b6 74 d9 54 a0 50 3a 73 a4 f5 96 18 6a 47 72 a9 3f 2d db 76 d9 58 d3 50 64 a6 ce 63 8d 38 a2 14 4a 2f 07 88 de 17 ed 0a 79 3a a3 c7 77 2c 45 b7 16 4b a2 40 5f 29 d4 a5 92 bd 16 dc 64 e9 ea 6b db 4c d5 a6 17 18 11 b4 db 9f 3c 79 fa 59 3e 17 d1 a8 fd 5f 23 9f 7f 9e 77 1e 81 d4 46 e2 e4 3e 1e 8f 34 d6 90 19 94 de b3 82 75 e5 61 b9 36 8e 24 56 b9 53 dd c5 ec eb 51 53 45 9c 5d 2b ea c3 d4 d8 69 22 e6 c8 d4 2d ba a6 6c 4f 3d 46 2b 48 9b cc ba f2 78 44 79 7d 16 1e 92 95 45 4b 95 7a Data Ascii: ib$UQINb.eSIK.ZibO-GCL\n\:Os`G}_?}4bI'4J`KE}WtTP:sjGr?-vXPdc8J/y:w,EK@_)dkL<yY>_#wF>4ua6$VSQSE]+i"-lO=F+HxDy}EKz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.5	50107	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:48 UTC	393	OUT	GET /uploader/30453ddd6ce60322fd6ce23b29a6e5e27db4b75b.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:48 UTC	702	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:48 GMT Content-Type: image/jpeg Content-Length: 103948 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="22186fd374c962382afa842d51c4de0be8468456_221" Content-MD5: CdrZTmUkSXi4nJ87/2pgiQ== ETag: "09DAD94E65244978B89C9F3BFF6A6089" Last-Modified: Wed, 09 Aug 2023 07:20:51 GMT x-oss-hash-crc64ecma: 10161221965962228872 x-oss-object-type: Normal x-oss-request-id: 66511B6BF488A53531BF3D8F x-oss-server-time: 78 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:48 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e3069f82f7f4-BNA
2024-05-24 22:57:48 UTC	667	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 e0 93 04 00 e8 03 00 00 e0 93 04 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 1b 02 00 00 03 a0 04 00 01 00 00 00 20 03 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipimagery40210 ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 03 20 02 1b 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 1c 01 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 19 ca 8e 64 72 02 9e b6 09 b0 b4 2e a7 56 6d 9c 59 6d 4d ac ba 58 e9 0c 94 38 64 8d 81 00 7c a2 34 06 7c bf 1a 25 0d 06 57 13 c6 89 83 04 12 48 b1 04 a0 c4 99 f2 ec 64 9e 57 91 49 25 79 56 2c 8e 3c 47 36 04 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]} dr.VmYmMX8d\|4\|%WHdWI%yV,<G6
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 27 d4 96 cf d7 6a 61 b2 f6 3c db f0 3f 61 eb 5f d0 7f 37 f3 dd ad d3 50 d5 54 06 c6 ca 33 65 0f 2e fe 77 fa 77 a4 bf 40 f8 8e a7 af 8f e7 d8 9e 3b 0e de 71 c2 21 e8 d3 87 59 a5 3a 05 5c 1c b3 36 e7 6d 39 81 cb 0a 21 26 f8 ef f6 2c e0 15 73 f0 85 1e b8 b3 46 46 28 c6 8b 33 95 27 c2 11 a5 4c 00 02 91 c0 00 00 00 00 00 00 00 00 00 04 fa f2 d9 fa e6 23 9b 65 e8 f9 ff 00 e1 3d df 4c fe 83 f2 1c 97 1d 7a b5 b1 e4 58 e9 d1 b7 af 0c f1 f6 f4 1f b1 8f 20 f0 7a f9 17 ce ff 00 43 7a 7b ef 3f 05 e8 bb 79 1c 86 23 c2 46 f0 c1 80 df 18 13 d2 c3 47 9b 80 6e 4f a2 96 79 24 f3 45 5a 71 d3 26 7a f8 74 f1 e0 00 19 f4 96 cd d0 92 ac c3 a3 1e b7 86 e2 f5 71 20 03 d3 56 03 8b 00 00 00 00 00 00 00 00 00 02 98 f6 8c e7 e9 a4 e0 72 f4 7c 97 f0 9f d0 b6 58 7c b4 ae 7f 42 3e de 7b Data Ascii: 'ja<?a_7PT3e.ww@;q!Y:\6m9!&,sFF(3'L#e=LzX zCz{?y#FGnOy$EZq&ztq Vr\|X\|B>{
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: d5 77 f1 b6 0e 7c 9b 49 34 e3 e7 37 be 35 d0 ad 74 95 92 b6 9d 9e d8 f9 ef 72 c7 a7 93 9a 7b 7f 3a 53 16 b6 d3 cc fb 77 73 9b 6d f4 ee 73 f0 cd 67 9e c4 9c 93 05 02 45 05 48 e2 e0 48 a0 84 86 18 70 73 3b c9 c3 7b 5e 0e db 1e 6d 60 75 61 9f f5 bc e8 b7 cc a6 8a 0c 31 52 31 c1 42 e2 e4 18 b0 0a 0c 58 a9 1c 8a 04 18 83 b4 a9 47 cd bf 42 e2 eb ca 14 14 8e 6b dd cb 7f af 27 73 cb 93 0b 5e 1c 55 af 9f 75 59 ba ba 1c f1 74 6a e6 bb 2a e9 a4 ad 29 31 29 8a f2 0d fd 0e 3d a7 4f d4 19 cf c2 69 da 25 2a b8 1a ca 0c 30 d5 00 08 21 01 2c f9 c5 73 b5 65 34 72 9a 2e 65 14 86 f4 cd bd 68 00 01 41 80 31 d1 60 a8 06 18 a0 c7 2c 34 bc 85 09 09 26 86 93 d9 6d 84 1e 1e ee d5 96 91 ea c0 f3 ef 42 be bb d5 f2 b2 d1 1c f3 96 b5 31 a6 c6 6d a6 c7 ab 6f 18 dc f5 79 55 33 cd 59 6b Data Ascii: w\|I475tr{:SwsmsgEHHps;{^m`ua1R1BXGBk's^UuYtj)1)=Oi%0!,se4r.ehA1`,4&mB1moyU3Yk
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 5e 0e da 08 a0 82 00 76 12 35 75 cb 71 9f 3a 72 cb 09 aa 1c da 34 47 68 53 55 9f 3d 5c 4f 9a 7b 7d 88 d6 bf a5 6f 4c 6e 76 7b 93 cf db d7 9a d8 d0 23 6f af 4f 36 9b 78 c3 7e 8e d4 b6 6c e9 7c dc 1b dc 79 ba 56 bd 3c ce bc cc c5 f1 f6 d1 ab 6c b6 b8 ad 7a a1 11 a6 e4 00 04 18 60 1b 88 fa 63 a6 7e 0c ac f1 14 f6 5b 43 68 8c b4 c2 42 af f1 f5 27 87 a2 60 e5 6f 14 b3 95 15 96 34 ab 09 bb eb c2 36 fc fc 33 75 70 2b 24 a1 da d7 65 a4 61 da f1 e4 62 99 33 39 e6 30 ed e2 7d b6 d4 67 48 37 76 ea e3 b3 cb 39 5a df ca 7b 7a 99 6b ce c7 5c 2f 72 df 1d 9f 3f 4d c3 83 ad 52 93 6e 8b 6d 7c b5 b7 a5 95 da be eb 57 9a 67 dd c6 63 cd f4 77 1f 9d d0 e6 fc 69 5b da f4 73 9e 7e eb 2d 7c ed 06 bc ef ce b2 e7 a3 0d af 4e 62 dd 15 01 5e 0a b6 50 60 1a 47 d2 e9 cf c2 eb 70 e0 e6 Data Ascii: ^v5uq:r4GhSU=\O{}oLnv{#oO6x~l\|yV<lz`c~[ChB'`o463up+$eab390}gH7v9Z{zk\/r?MRnm\|Wgcwi[s~-\|Nb^P`Gp
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 1b a7 b7 92 d7 c7 d5 5b 5a ae 9f 42 b2 54 c4 d3 93 53 5a 20 00 01 00 00 01 26 97 ed fe 7f 6d b5 27 a6 ed 9e 56 9a f3 7a 2e 15 89 75 9e 57 8f 8d ed ec e8 37 af 07 ad f6 59 46 d3 7a eb 66 98 aa 74 59 51 95 b3 8e 5e 9d 4a 97 b1 b5 37 f3 02 a5 45 bc df e9 70 67 77 c7 4a 33 59 e6 f6 26 68 62 c5 25 c1 d4 18 64 a9 8f a9 1a 67 e2 5a ce 45 3a 2f 1f d5 e0 7d 38 fb c7 19 e5 78 ed d3 bd cf 1b ca d9 6b 03 0f 1e ca 8b f5 35 fb f4 16 7b 6e 3c bf 5b 43 dd 97 0d f4 b1 a5 9a cb 39 5d 35 cf 80 30 04 18 02 0c 34 f4 3e 3e ae 8d cd bf 49 d9 9a c2 f8 b8 4b 8a 57 6a b3 e7 96 6b 7b 29 8e 81 7c f8 3c 69 bb a6 9a bd 31 d3 98 0c f6 41 9f bd 6d ce 93 15 21 77 cd 14 d2 ba 1c 9a da 31 35 e9 1a 61 aa 98 99 7a 64 75 cb 84 f4 53 9f df 33 1d 99 76 92 26 aa 25 cb ea 2e 99 78 96 b3 91 89 d0 Data Ascii: [ZBTSZ &m'Vz.uW7YFzftYQ^J7EpgwJ3Y&hb%dgZE:/}8xk5{n<[C9]504>>IKWjk{)\|<i1Am!w15azduS3v&%.x
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 9e ff 00 12 99 b0 be ea 05 20 8b 4d 2d ed 2d b0 f1 da 7c a6 92 14 18 61 80 01 a4 90 00 00 00 96 4a 01 18 86 46 2b 4b d0 a2 75 dc fb 75 6f 3f be c6 d9 cd 8b 55 65 a6 b5 33 0b 83 39 7a 64 6b 6f 3d f7 71 6a f9 bb 36 38 5f a3 49 45 0d 89 ab 65 35 c5 c5 f9 25 e3 d5 19 c5 8e b9 1d 6f 80 a6 bc 2a 5d b0 d0 23 c5 3e 9f 9f 7b 8e db ec 36 d5 d3 47 ed 95 d5 2f 6b ae 1c df af 9a a6 d9 a9 2a b4 3b 05 cc 19 7b 33 ef 7d b0 f2 0a de 50 0c 50 00 28 50 4a 82 7a 74 29 9c ad 81 0e 50 ea af 94 22 b6 11 ae 8f 59 83 32 98 a5 a2 d6 54 bb d4 d3 67 cb a6 8f 1b df 53 71 4d 36 31 32 cb 64 62 2f 9d 15 75 f3 f7 6f 3e d7 97 6d 6e 76 eb 72 e6 d1 3d 15 5e 6a 76 35 71 2b f3 bb bb 47 3d 9f 9a c7 bb 20 bf 33 3b 0d a6 f2 b1 e5 9f 43 cf e9 34 b1 a6 d0 7e b4 2d b1 83 78 6d 0c 04 26 e0 26 48 2f Data Ascii: M--\|aJF+Kuuo?Ue39zdko=qj68_IEe5%o]#>{6G/k;{3}PP(PJzt)P"Y2TgSqM612db/uo>mnvr=^jv5q+G= 3;C4~-xm&&H/
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 9f d3 2c f9 5d 36 ce ca bc 40 93 b9 63 a6 bf 3b 80 a6 95 9c fd 74 18 ec f5 2e f6 76 cb 74 d2 65 2d a0 3a 9e 16 e0 f7 9e b9 48 d3 15 f6 56 a7 9f ad b2 8c eb 6e 99 9e 9d 34 8e 73 a5 36 c4 c4 43 2d 6b 7c 07 a3 e7 65 76 aa 02 b5 52 12 52 94 84 22 45 22 0c dc b2 f6 fe d8 f9 86 2d e2 ea 68 56 a6 af 2e 6d df 2c ea 2b 4e 37 d7 d1 8f d7 5d 7d f3 d1 99 6a c8 34 53 0e c2 0d 94 65 64 ab c6 2b 0e 15 f3 29 05 2f 2e 1a 04 5a 12 40 95 c4 ab 97 ae fb 9f 7b 42 a7 3d 2d 2d 30 62 2d 66 97 9c fa c2 ba de 23 7a be 79 3c 86 ce a0 cf 50 8a c9 b6 22 ba 75 3a 56 a6 ce 49 6a f5 58 85 44 59 4a 2c 4e 0b d1 f3 e8 7a 31 02 aa 50 24 01 5b 81 13 54 0d 5a cd c3 75 7c fd bb a6 7e 6b 87 8d 29 a3 b3 67 4f 40 70 51 ec bd 1e 73 db e4 72 2e ad 23 23 46 42 b4 57 41 29 9a 45 82 89 35 4f 24 56 64 Data Ascii: ,]6@c;t.vte-:HVn4s6C-k\|evRR"E"-hV.m,+N7]}j4Sed+)/.Z@{B=--0b-f#zy<P"u:VIjXDYJ,Nz1P$[TZu\|~k)gO@pQsr.##FBWA)E5O$Vd
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 83 23 43 32 6a 06 28 ea 96 af b6 34 cf 86 d6 de 11 a6 8e c6 8b 17 39 98 20 62 80 02 c0 e9 5b 63 96 37 f8 f2 dc 67 cf 69 11 1e 73 e7 75 a6 cd 4d 0d b4 dc 4d a0 d5 89 57 49 37 6f 5e 8e 67 af 76 50 be cf 5e 6b 4b f5 6d 33 e7 56 a6 9e 67 7d 87 02 b0 d0 a9 bb bd 5c 2e 67 cd 25 58 b6 bb b2 84 ea 91 97 52 f7 c2 aa f3 8d d3 ad 51 2e 63 7a 44 90 40 00 04 8d 89 12 20 48 80 a4 88 36 35 24 1d 86 6b ed 9d 33 e2 55 b7 81 69 a3 91 a1 8e 28 20 76 85 8b 80 16 4e 3a 86 d8 e5 cb 0a ad 32 c3 45 9f 15 7c e7 91 a5 b4 73 9e 88 e8 8b 44 99 cb 6b bc cb 74 d6 69 bd 51 95 2e f3 d3 9d d2 fd 4e f4 e6 57 a6 aa 57 75 e7 d8 73 f3 df f3 b0 fd 3c d9 4b f6 5c 53 9a 24 e8 53 1a 3a 67 b7 a7 5e 47 a5 93 bf 4c 08 b8 b4 b1 85 ea 26 48 40 42 04 49 22 42 12 35 00 24 30 84 48 0d 9d 92 6b ed 6d 33 Data Ascii: #C2j(49 b[c7gisuMMWI7o^gvP^kKm3Vg}\.g%XRQ.czD@ H65$k3Ui( vN:2E\|sDktiQ.NWWus<K\S$S:g^GL&H@BI"B5$0Hkm3
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: a9 24 d8 99 b6 a0 49 07 31 5b 1a 45 9c e3 10 d6 a8 46 9e b1 8d cf a2 02 c0 20 04 10 90 80 36 36 24 29 cd 42 63 42 09 99 1e 8b b5 7d 8d a6 7c be 27 e6 2e 3d 0a b5 8c 72 21 42 c7 52 63 88 70 50 b6 73 ce c7 a5 23 21 69 54 17 23 88 39 28 01 a4 90 62 52 84 56 d3 4c 08 23 45 23 73 7c ae a4 a5 54 1a e0 35 00 40 12 b9 00 4a 2d 14 e4 b9 ee ca c9 00 40 12 10 90 80 24 31 00 0a 73 20 04 7a 32 6b ec 5d 33 e6 71 3f 2f b2 dd 53 2a 4a 92 b8 1a 1c 16 97 05 8b 43 8c d6 28 5c 95 05 80 54 94 28 30 0b 0c 31 50 50 a0 34 31 4a 98 26 c6 1a a0 11 65 00 30 2a a1 22 81 50 b4 25 74 0a 0c 40 06 c5 00 48 02 08 20 a7 34 80 23 d2 33 5f 61 e9 9f 36 89 f9 77 96 ea 4b e2 12 b1 c8 2e 0a 9c d6 2e 4a 1c 92 c5 8a 16 00 0b 0c 58 b0 c5 06 01 61 80 50 a0 d6 58 05 00 01 80 30 06 18 90 80 24 54 00 Data Ascii: $I1[EF 66$)BcB}\|'.=r!BRcpPs#!iT#9(bRVL#E#s\|T5@J-@$1s z2k]3q?/SJC(\T(01PP41J&e0"P%t@H 4#3_a6wK..JXaPX0$T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.5	50109	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:48 UTC	393	OUT	GET /uploader/0e49afad7eb17f349716ea63c83297492e32d294.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:48 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:48 GMT Content-Type: image/jpeg Content-Length: 221916 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221f8cb1c21117eb4f4a4f41dff0bbef2f983927_221" Content-MD5: VdDf1cLH+418wY3BOY+Wbg== ETag: "55D0DFD5C2C7FB8D7CC18DC1398F966E" Last-Modified: Wed, 09 Aug 2023 07:21:26 GMT x-oss-hash-crc64ecma: 7586228565154429484 x-oss-object-type: Normal x-oss-request-id: 66511B6B2CAF36313198CB4C x-oss-server-time: 78 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:48 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e306a89ff7e0-BNA
2024-05-24 22:57:48 UTC	668	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 00 77 01 00 e8 03 00 00 00 77 01 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 14 05 00 00 03 a0 04 00 01 00 00 00 14 05 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipwwimagery40210ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 05 14 05 14 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 08 09 ff c4 00 1c 01 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]},
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 50 a8 10 04 8a 42 92 ac c0 c3 98 d2 dd a1 b6 7a 6b 34 b7 a6 92 c4 bd bb 8f 5e 93 3d 2b 24 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PBzk4^=+$
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 06 69 d0 df 0d d6 d8 70 55 de de 3d 5b 24 eb 14 e9 f2 bd 30 df 81 ab 2b a7 9f d3 4f 2d c3 7d 1d 2f 2b 53 de 3e b3 e3 37 5d 3c bb 23 43 c7 db cb f0 7a 70 e7 e9 ed b7 e6 b1 a6 3c a6 b8 5b a6 dd 35 ab bd d3 2c fc b6 b5 bf 3c 48 91 2d 91 23 65 b2 da 60 5b 4c 08 44 c0 b6 98 96 e6 62 5b 4c 4b 72 89 0a cc 13 66 b6 22 cc c6 d3 9b 7d 15 f7 c1 f9 ff 00 d0 3a 1f 9a fa 1e e3 b3 ca b7 19 65 a8 8a f3 91 3e 79 ee e7 5f 67 e2 fd 4f 3c 3d ef 83 b3 db b9 3a b3 62 40 00 00 00 00 00 00 00 20 08 24 00 11 29 8a 41 68 a2 2c 59 a9 9c f4 77 a6 96 f1 a4 b5 74 ba 67 a6 bd 74 7a e7 a5 bd 74 9a 53 49 7a e9 6c d2 de 98 68 56 c9 bc 48 67 7b 64 69 68 42 de 77 b7 5b 46 2d 42 91 68 94 55 0b 34 d3 27 5c a1 09 d9 2b e7 5a 5a ed ab 74 ca ad f2 f5 e7 cb bd 6e ab 7e 73 82 73 b5 e6 bb 35 cf d3 Data Ascii: ipU=[$0+O-}/+S>7]<#Czp<[5,<H-#e`[LDb[LKrf"}:e>y_gO<=:b@ $)Ah,YwtgtztSIzlhVHg{dihBw[F-BhU4'\+ZZtn~ss5
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 24 47 11 cd d3 a3 cb 6e 7f 0e ae 9b af 8b b1 ec f3 f5 b9 6b a7 cf 4c 0c 7a 70 b3 d3 07 3d 3b be ee 2f 41 ec e1 d5 70 76 ea b9 7a ae 61 b6 e3 d9 f2 6f f6 f0 da ad f2 22 d4 ad f4 98 f4 53 2d 2c de 2c de 36 7b 63 8d bf 3e 4d a9 99 39 46 e8 96 d3 12 04 53 08 88 10 28 46 50 22 50 81 42 85 08 c8 50 02 80 12 b4 50 02 49 00 2a 00 00 5c 11 10 02 d4 00 a1 22 20 24 52 14 0b 50 14 28 91 4a 89 dc e7 ac c2 2c 9a 4d 29 ec 5c 1d 7f 73 78 7e a8 00 78 3f 46 1f 0b 7a bc 24 aa 5e 2f da 99 3b 52 e3 29 c2 52 9a b3 67 3b de 71 9d c5 67 7b 5d 56 e9 74 b3 4b 61 f3 f4 5f a5 f7 9a e7 81 6a f3 58 74 eb 73 d2 ee 95 d7 e1 be 26 3a c6 aa e5 6b d5 be c9 13 a5 f1 b5 ac cd 84 4e 09 72 c9 55 af a5 f1 6d 5b f4 a3 b3 0d d7 46 3d 17 46 33 9b 5b a4 da ce fe 6d c3 dd 6e 8d 87 46 1b 1e ae 2c ae Data Ascii: $GnkLzp=;/Apvzao"S-,,6{c>M9FS(FP"PBPPI*\" $RP(J,M)\sx~x?Fz$^/;R)Rg;qg{]VtKa_jXts&:kNrUm[F=F3[mnF,
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: d5 52 d5 98 52 d4 89 8d 34 a6 3b dd df 0b 9b f3 02 b5 2a 0a da 2a 48 a8 54 0a 89 80 04 8a 05 6a 2d 02 48 00 12 11 02 b2 42 b6 a0 ac 01 05 a5 68 a0 00 12 90 20 01 22 85 52 00 28 00 a8 00 90 00 02 b6 00 2a 00 05 40 00 00 54 00 b0 54 00 a2 45 01 40 55 6a 04 c4 ac 09 8a 45 22 c1 55 0a 48 52 aa 09 7d 7b f3 fe cf bc 70 76 80 07 8d 6f 87 c0 7e bf 0d 50 26 8b aa e4 e9 9e 5d b2 cc b3 25 5b 96 88 98 e5 82 cc 5f 07 e5 7f 56 f4 bf 1b 2e 46 fe 8f 33 ee f8 30 f7 3e 17 2f 6a 5c bd 69 9e b1 e0 f6 a5 87 75 72 ef 96 1d d5 cb b6 5c dd ec bb a5 87 6c a9 db 73 0e c9 d7 aa 55 d7 07 ed bf 03 b9 ed 7c 78 92 a2 a4 8a 5a 24 54 a8 54 00 98 92 12 a1 58 92 25 30 82 d5 00 0a a4 a8 a9 58 59 ce d2 94 61 8d cb d5 66 9a 47 2d 76 59 5f 1f bf 8f 3b bf 86 40 15 05 64 28 81 50 10 2a 81 20 01 Data Ascii: RR4;*HTj-HBh "R(@TTE@UjE"UHR}{pvo~P&]%[_V.F30>/j\iur\lsU\|xZ$TTX%0XYafG-vY_;@d(P*
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 9d 01 db 9f 2d 7c 0f d3 f8 ff 00 ea bf 31 91 ea fc e5 21 ac f3 bb b1 78 ba bf 48 f8 fa fe 59 be 7e 37 ef f8 fe ff 00 e0 7b 5f 4c 67 6e 68 d0 9a 23 cf aa f4 13 c7 f7 8f 3c ec e0 dd 52 fb 8c b5 e4 73 b7 d9 d8 ed f2 47 4f 37 1d ec f9 0a db e9 df 9f f7 b8 74 7d 54 9f cf df 5f cb 87 a7 e7 7b 77 cc 7d 1f aa 52 df 16 69 9f d2 35 b7 cd be 8f 9b e8 fc dd 39 53 3a 8d 69 a7 db 1d 56 99 6c 7d 6f 3a e4 e5 7f 5c ea 0a 95 05 4a 95 80 94 aa 0a 95 94 84 2a 12 2a 0a d8 2b 20 40 92 41 00 08 a4 00 ac 00 04 80 00 11 00 14 0b 01 40 50 a4 58 08 94 28 52 aa 04 c4 88 22 b4 4a 15 20 50 a2 68 46 b3 f7 ef ca 7d 1f 5d 8e c0 01 e5 3b 63 f9 eb ec f9 a8 0b b3 19 16 a6 66 99 e7 43 69 39 e6 da 97 e6 22 63 a3 19 7c 74 ea f8 3d 7b 5f 3d f7 3d bf 91 6f 38 f4 fd b7 d7 7e 37 97 bd 65 64 3c cf Data Ascii: -\|1!xHY~7{_Lgnh#<RsGO7t}T_{w}Ri59S:iVl}o:\J**+ @A@PX(R"J PhF}];cfCi9"c\|t={_==o8~7ed<
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: a1 40 50 a0 28 50 89 45 a8 0a 02 05 16 a1 42 25 21 12 09 a1 12 84 6a 89 1b 22 42 aa 19 35 d3 f4 5b e3 be a2 49 00 0f 33 db 2f ce df 6b cd 85 26 a8 56 6f ab a3 f1 fd 6d a5 67 36 66 91 3b 0e 2f ae e8 3a 3c 9e 7f db f9 1e b3 d0 f3 71 66 71 4e 87 c8 f5 b0 a9 7e 3b d9 f2 ec d6 db 2d eb 29 8b 1e 1f d8 df f8 af e8 2a 40 9a 94 05 4a 15 10 22 53 49 7e 93 fc b7 97 df e5 89 2b 22 4a d4 a9 52 aa cc 91 52 73 5a 95 95 49 4a a4 96 a9 24 54 a8 2a 8a a2 56 ad 4a a6 a5 4a 92 45 41 22 4a d4 ad 95 2a 48 aa 2a 0a 95 26 22 2a 62 5a da ba ed 7b 9b aa b4 be ae cd 5d d2 cf 4d ce 56 dc 52 75 17 8d 0c b9 ef 37 b3 5f 0d cf a1 cd dc 56 76 d4 59 b5 79 6e 8c b0 ef 5b 75 bf 5d cd aa 93 81 be 78 fa 57 71 cd af 9f f2 74 e9 39 7a 25 7a 6a 39 b5 87 45 ba de ee 2f 61 ee f3 fd 05 5d 0e 94 d4 Data Ascii: @P(PEB%!j"B5[I3/k&Vomg6f;/:<qfqN~;-)@J"SI~+"JRRsZIJ$TVJJEA"JH&"*bZ{]MVRu7_VvYyn[u]xWqt9z%zj9E/a]
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 63 a6 26 b4 c6 5a 36 8c 6c ed 5b 52 d5 6f 72 d5 84 da ec e7 7b 87 a2 9d 79 43 58 dc df 08 53 5c 1e 0e 9c 5a 4f 4d 5b ea 7a 31 f7 cf 7b c8 a5 2f e0 9e 77 7f 7b e6 f5 7a 3d a3 e6 42 93 17 8b 15 5f d5 db 5e 9c 1f 2e 9d bd 9b 48 9e cd 36 74 a7 86 e9 11 98 eb bd cf 37 d8 26 92 57 cc b1 da ec 4e de f9 67 cc ee a8 e8 fa 39 b5 bd 5c 5a bb 5a 0a 46 d5 45 e0 88 94 22 41 78 90 44 08 42 07 7f c3 d7 f6 df cb fd 1a 40 01 c0 6b 9f e6 f7 b9 e5 d7 2b c3 9f a3 4f c7 be 16 1a fb 1d 9e 78 8c f8 6a 22 76 74 d3 b8 af a9 e5 7b 78 de 91 ed f8 9b 4e be 5c 55 b6 7e 47 a9 8f 7a f2 7e 97 9f 66 6d ba df 19 0b cd 49 4d 6a 56 69 52 aa 54 9a 6a 5c 44 8a ab 22 64 ca d9 22 4a cc 94 a6 54 91 24 4c aa b3 94 a6 2a 56 52 25 2a 93 56 a5 54 91 34 8a a2 a5 49 12 52 a5 53 32 a5 44 5f 03 97 bb 99 Data Ascii: c&Z6l[Ror{yCXS\ZOM[z1{/w{z=B_^.H6t7&WNg9\ZZFE"AxDB@k+Oxj"vt{xN\U~Gz~fmIMjViRTj\D"d"JT$LVR%VT4IRS2D_
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 9f 57 78 5e e0 00 0e 2f 4c ff 00 34 fd cf 2e e6 3b 63 73 f4 69 79 35 b3 96 be 8e af 1c 75 0b 77 c7 13 13 b8 cb dc e3 37 f9 fc 8e ee 4e ef d7 f1 70 d7 ec 3c 1f 6f cc 7d 6f 32 1d 18 59 5b 77 d7 84 d1 54 48 9a b2 26 8a 95 b2 45 c5 64 4e 6b 22 65 c0 5c 24 4c 9d a2 65 55 91 34 54 95 97 09 ab 52 a4 89 ab 52 45 49 95 24 48 a9 52 a5 49 22 a4 ab 6b 3c bd fa 5e 3f 43 ce 3c be fc 3e 2e a8 75 f2 7a b7 bf f3 fd 57 6f 12 55 98 ad 40 0a 92 13 3a fe 4e bf 25 f8 bf af bd c5 d7 9b 13 70 96 7a f2 7b e3 e7 fd fc 9d b7 37 4f 33 d1 8e 97 5c 88 94 4f a8 79 dd 75 bd bc bb bb 89 31 ed db e7 e3 18 69 b9 da be 8d e6 f6 e4 70 ef e4 3e a7 16 b7 6a 0d 86 56 ef b0 df 37 a3 97 07 b3 1f 58 f7 bc 9a 55 e0 de 57 a1 dd 79 3e 8e c3 6c 7c 97 0d f6 35 6b f5 ae 97 4c af cb ea 6a db cd ce 32 d5 Data Ascii: Wx^/L4.;csiy5uw7Np<o}o2Y[wTH&EdNk"e\$LeU4TRREI$HRI"k<^?C<>.uzWoU@:N%pz{7O3\Oyu1ip>jV7XUWy>l\|5kLj2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.5	50110	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:48 UTC	393	OUT	GET /uploader/bae3b8c20de926b7be25fbf7285b22e3d630f6fa.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:48 UTC	702	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:48 GMT Content-Type: image/jpeg Content-Length: 203822 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221adb4795f8ee4d7ca8411886d4a975c1495724_221" Content-MD5: +uN+WvPaifzh0BGQiCU/tQ== ETag: "FAE37E5AF3DA89FCE1D0119088253FB5" Last-Modified: Wed, 09 Aug 2023 07:22:16 GMT x-oss-hash-crc64ecma: 2874139532559993356 x-oss-object-type: Normal x-oss-request-id: 66511B6B1F5247393147DD6B x-oss-server-time: 124 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:48 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e306d9276a7a-BNA
2024-05-24 22:57:48 UTC	667	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 22 56 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0a 01 00 00 03 00 00 00 01 0d 88 00 00 01 01 00 03 00 00 00 01 0d 88 00 00 01 02 00 03 00 00 00 03 00 00 00 86 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 8c 01 1b 00 05 00 00 00 01 00 00 00 94 01 28 00 03 00 00 00 01 00 02 00 00 01 3c 00 02 00 00 00 09 00 00 00 9c 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 dc 00 08 00 08 00 08 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 69 6d 61 67 65 72 79 34 00 00 00 04 90 00 00 07 00 00 00 04 30 32 32 31 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 1a 18 a0 03 00 04 00 00 00 01 00 00 14 80 00 00 00 00 00 06 01 03 00 Data Ascii: JFIF,,"VExifMM*(<i-'-'imagery40221
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: e3 7a 79 d3 a4 2d b4 65 97 71 03 23 d7 ae 69 97 da 5b 44 2d 5e 34 73 1c f6 e9 3b 71 bb ca 0c c5 7e 62 07 a8 eb ee 2a f6 87 7b 15 ad ce 9a 4a c4 1e 39 45 d3 b6 06 ec 2a 8d aa 4b 74 ce 18 9e 70 43 0a 8a 3d 55 e5 48 53 51 95 8f 96 cc 0c 8c a5 89 46 54 40 38 e3 e5 0a 4f d4 f7 24 d5 ce b5 57 2e 68 2d 2d fa bf f2 32 85 2a 29 72 c9 eb 7f d1 7f 99 46 fb c3 f7 71 4c d1 c4 16 50 a2 56 ca 90 38 8d 99 4f 5e ff 00 29 c0 ea 7b 56 65 d5 ac d6 13 ac 73 80 1c a8 62 a0 e7 19 ec 7d eb a1 92 6b 4b a5 96 de 29 a7 96 5b 92 ea 36 b6 0a b1 91 88 ce 7a a9 04 13 f9 77 e3 1f 55 f3 75 2d 52 79 a1 89 8b 4a d9 01 45 3a 55 2a 4a 5e f6 ca e3 ab 0a 6a 3e ee ee c5 19 0e f1 d3 9a 7c 16 b3 5c 48 12 08 99 db d1 46 6b b6 f0 97 c3 9b fd 45 d6 e7 59 91 34 cd 3d 7e 66 96 e0 ed c8 ff 00 64 75 3f Data Ascii: zy-eq#i[D-^4s;q~b{J9EKtpC=UHSQFT@8O$W.h--2)rFqLPV8O^){Vesb}kK)[6zwUu-RyJE:UJ^j>\|\HFkEY4=~fdu?
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: fc ab 7e 1f 02 78 82 3b f8 f4 cb e8 a7 d4 2c e7 63 1b 81 b1 21 c6 07 3b 41 52 4f 27 1c 76 ae 77 5f f1 47 88 2d bc 4f a8 e8 70 6b 17 f1 e9 b6 8e f1 45 15 8e 11 c6 14 9c 7c a3 24 67 ae 7b 66 a7 f8 19 77 7b a9 f8 db 51 9f 52 d4 ae 6e 5a de 06 95 1e e2 77 62 8f f7 43 64 9e 0e 30 33 e9 c5 7c cd 47 5d 7b fc cb a3 fb cf 76 14 69 47 ec 9e d1 e2 7f 15 58 7c 2a b4 d3 74 7d 2a d0 36 e9 92 e5 e3 81 42 46 d0 e1 90 ae 7f bd 95 1d bb 75 af 9e f5 7d 62 7d 4e f6 ea e6 ea 42 f3 5c 4e d3 33 67 bb 67 35 e9 5e 24 d1 f4 69 bc 2d e1 68 ee 75 2d d2 49 21 43 78 33 b4 41 e6 3e e1 82 07 25 db 8f c6 bc df c4 1a 75 a5 b5 fd df f6 4d c8 b9 b0 81 d5 52 43 8c b0 23 db ae 08 20 9a fa 3c 05 4a 71 8a 8a f8 ad af df 63 c2 c7 d2 aa a5 79 7c 3d 3f af 91 e8 9e 15 d3 ad ac 60 26 fe 68 9e 69 11 Data Ascii: ~x;,c!;ARO'vw_G-OpkE\|$g{fw{QRnZwbCd03\|G]{viGX\|t}6BFu}b}NB\N3gg5^$i-hu-I!Cx3A>%uMRC# <Jqcy\|=?`&hi
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 14 02 47 d2 b0 b5 d9 af de e1 2e d1 b6 5a 45 02 c3 95 20 64 00 17 ee 8e e7 02 b6 7c 77 f6 ad 4b c5 da b5 e9 86 45 f3 67 67 20 03 85 27 04 8f c0 f1 58 d3 e9 93 b5 93 45 35 cc 31 2b 30 60 1d f9 3f 80 cf f9 35 f5 5c aa 74 a2 bc 91 f3 de d1 53 a8 db 66 86 99 ac dc ff 00 6e e9 77 3e 63 49 2a 4d 1e 0b 1c e4 0c 60 57 a8 c1 67 35 cf ed 07 a5 ea 10 c2 cf 62 d7 a1 4c ca 32 a1 c4 64 91 fa 57 96 f8 47 46 9e ef c4 16 cb 69 79 09 68 d5 a4 8a 59 7e 55 de a3 e5 03 39 cf 38 af 71 f8 7b f6 05 d5 fc 20 d6 6c fe 75 d5 dc ca 4c f3 e6 49 15 21 90 92 53 bf 21 4e 7b 6e eb 5e 5e 26 b4 a3 5d 28 5b 6b 33 d1 c3 d3 8d 6a 0e 4e fa 3b a3 e7 7f 88 ff 00 2f 8a b5 51 e9 77 2f fe 86 6b 98 d2 af 66 d3 ee 67 78 23 b7 73 28 0a 7c f8 56 50 3f 06 04 57 5b f1 4d 36 78 bf 56 3d be d7 2f fe 86 6b Data Ascii: G.ZE d\|wKEgg 'XE51+0`?5\tSfnw>cI*M`Wg5bL2dWGFiyhY~U98q{ luLI!S!N{n^^&]([k3jN;/Qw/kfgx#s(\|VP?W[M6xV=/k
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: c5 1a b6 c5 38 3f 89 af 76 bb b4 ae 7c e6 1a 2e 50 b7 99 b4 7e ce c8 73 ba 43 b4 85 5d db 42 fe 3d eb bc ba d5 b5 08 7c 41 14 9a 7d 95 a5 e5 ea 5b a5 b4 57 33 48 cc 50 00 46 d1 93 80 70 08 27 d2 bc 8e cf 5c b8 9a 40 97 21 51 58 fc a5 72 3d f1 5d e7 f6 84 f0 6a 17 f2 da 4b 1c 73 a8 5d a7 19 60 0b 75 e9 c0 eb 93 5c 95 1a 9a b1 df 4e 9b 8b 36 b5 9d 77 c5 22 e0 c1 7f 70 96 e1 23 13 33 c7 00 f2 d5 3d 77 83 8f c6 a4 d0 35 37 87 59 d3 6e 35 09 67 bb 92 1b c5 66 91 94 ec 53 b4 9d a0 0e 33 ce 73 56 b5 b5 87 fb 11 6c 22 92 66 89 a0 3e 71 41 b9 e4 8f 3f 74 93 ea 41 c7 4a e6 66 d4 45 ab 41 35 a5 c6 cf 2e fb 0b 0b 0c 0c 79 67 e6 c9 e3 da b9 55 9c 9c 7f ad 4e 8a 94 f9 21 19 2e bf a1 eb 3e 26 f1 a1 37 f6 03 c3 e5 1a ce 30 ab 70 f2 c3 86 2a 18 70 99 ef 8c fe 95 89 af 78 Data Ascii: 8?v\|.P~sC]B=\|A}[W3HPFp'\@!QXr=]jKs]`u\N6w"p#3=w57Yn5gfS3sVl"f>qA?tAJfEA5.ygUN!.>&70p*px
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 5f 5f e9 6d 73 3b c7 a2 6a 32 79 ce b1 a8 de 1d 57 6c 9c 1f 7c 91 ec d5 d6 7c 41 f0 54 d7 3e 28 36 51 dc 8b cb 9b 58 15 66 36 d1 05 00 64 9d cc 01 38 27 3e d5 81 27 80 75 78 f4 d8 fe c8 8f 1d a2 48 cc 92 4d 2a 8c 1d 98 6c 28 cb 72 07 a6 2b 4e 64 a2 94 da b8 42 ed de 29 d8 e3 2e bc 8b bb d9 22 b2 b5 49 5b 07 cb 64 c2 6e 00 e0 1d a0 e0 1e 9c 7a d6 ae b4 f2 5b f8 5f 44 59 b7 4b 1d b9 70 d1 b3 ee d8 72 36 fb 9e 87 9a e9 ef 7c 24 96 fa 4e 9f 0d d6 a9 65 6d 35 93 15 31 46 49 79 0b 7c c4 82 40 c7 43 ce 0f 4e bc 55 1b dd 2e cb ec 70 3f da 22 b9 3b b2 f3 a2 96 c0 24 fd e3 83 c8 c6 3a 9a 51 c5 53 6e d7 1c a8 b5 1e 6b 18 f3 4b a5 cd a4 58 24 52 cd 0d c7 ef 0d c3 f9 65 b0 42 e5 11 54 7d 71 9f 53 93 58 50 c4 97 d7 f6 f6 72 48 22 96 43 b5 dd 98 0d b9 23 8f c0 67 f9 57 Data Ascii: __ms;j2yWl\|\|AT>(6QXf6d8'>'uxHM*l(r+NdB)."I[dnz[_DYKpr6\|$Nem51FIy\|@CNU.p?";$:QSnkKX$ReBT}qSXPrH"C#gW
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 58 59 5a 00 00 01 f4 00 00 00 14 67 58 59 5a 00 00 02 08 00 00 00 14 62 58 59 5a 00 00 02 1c 00 00 00 14 74 65 78 74 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 31 39 39 39 20 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 00 00 00 64 65 Data Ascii: e-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCrXYZgXYZbXYZtextCopyright 1999 Adobe Systems Incorporatedde
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 01 2c 00 00 00 01 00 02 01 2c 00 00 00 01 00 02 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 04 0a 00 00 00 00 00 01 00 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 Data Ascii: cropRectToplong8BIM,,8BIM&?8BIM8BIM8BIM8BIM8BIM'8BIMH/fflff/ff2Z5-8
2024-05-24 22:57:48 UTC	1369	IN	Data Raw: 0c 41 64 6f 62 65 5f 43 4d 00 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 7e 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 Data Ascii: Adobe_CMAdobed~"?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.5	50105	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:48 UTC	970	OUT	POST /buyer/express/free-express HTTP/1.1 Host: www.cravob.com Connection: keep-alive Content-Length: 32 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.cravob.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cravob.com/products?handler=lego Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:48 UTC	32	OUT	Data Raw: 7b 22 63 6f 75 6e 74 72 79 5f 69 64 22 3a 22 22 2c 22 74 6f 74 61 6c 22 3a 22 30 2e 30 30 22 7d Data Ascii: {"country_id":"","total":"0.00"}
2024-05-24 22:57:48 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:48 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:48 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:48 UTC	82	IN	Data Raw: 34 37 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 76 61 6c 22 3a 30 7d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 34 38 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 47{"code":0,"msg":"success","data":{"val":0},"now":"2024-05-25 06:57:48"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.5	50108	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:48 UTC	600	OUT	GET /buyer/cart HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:48 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:48 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:48 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:48 UTC	1213	IN	Data Raw: 34 62 31 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 65 78 70 72 65 73 73 22 3a 7b 22 68 61 73 5f 69 6e 73 75 72 61 6e 63 65 22 3a 22 30 22 2c 22 69 6e 73 75 72 61 6e 63 65 5f 73 65 6c 65 63 74 22 3a 22 30 22 2c 22 69 73 5f 6d 61 74 63 68 22 3a 30 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 73 65 6c 65 63 74 65 64 22 3a 30 2c 22 6c 69 73 74 22 3a 5b 5d 7d 2c 22 63 61 72 74 22 3a 7b 22 74 79 70 65 22 3a 22 22 2c 22 74 6f 6b 65 6e 22 3a 22 37 64 32 31 38 38 39 64 31 39 34 38 64 35 39 61 35 32 34 30 65 63 34 38 38 30 38 33 32 39 64 66 22 2c 22 77 65 69 67 68 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f 61 6d 6f 75 6e 74 22 3a 22 30 2e 30 30 22 2c 22 70 72 6f 64 75 63 74 5f Data Ascii: 4b1{"code":0,"msg":"success","data":{"express":{"has_insurance":"0","insurance_select":"0","is_match":0,"error_code":0,"selected":0,"list":[]},"cart":{"type":"","token":"7d21889d1948d59a5240ec48808329df","weight":"0.00","product_amount":"0.00","product_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.5	50115	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:49 UTC	702	OUT	GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-1516" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:49 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:49 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-1516" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183516 Expires: Sat, 25 May 2024 02:57:49 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e30d8ce1f7d0-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.5	50113	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:49 UTC	627	OUT	GET /uploader/1abfc652cc0f3e8037cae0f5dec3c53ff766f022.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:50 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:50 GMT Content-Type: image/jpeg Content-Length: 367680 Connection: close x-oss-request-id: 66511B6D5EDFF630318CFCCE ETag: "460BDFDA7EF21014C819C3571EA71E4A" Last-Modified: Wed, 09 Aug 2023 07:26:36 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 4349740679372277402 x-oss-storage-class: Standard Content-Disposition: inline; filename="2218b461ff1f224019104ac8404120c0fbb90828_221" Content-MD5: Rgvf2n7yEBTIGcNXHqceSg== x-oss-server-time: 75 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e30d9feef7f8-BNA
2024-05-24 22:57:50 UTC	690	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 00 77 01 00 e8 03 00 00 00 77 01 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 14 05 00 00 03 a0 04 00 01 00 00 00 14 05 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipwwimagery40210ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 05 14 05 14 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 02 03 08 01 09 ff c4 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: C) )/'%'/9339GDG]]}X
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: e4 69 84 46 90 19 c6 1b 10 d3 ae 2a da 31 6c ab 85 b0 e8 95 7d 73 c7 56 61 81 19 45 66 3c 65 8a fe b6 ff 00 76 ae dc 74 33 9f 56 33 b5 af b1 62 73 73 97 4f 5b 8d 5a ef f8 7e ae 9f 97 e4 8f 2d 2e 84 6f 3f bb 05 a3 dc e7 cd ed 4c f5 7c 84 ee d7 17 bf 57 7e 27 89 ee b5 bd 3d 4a ef 42 8c 19 63 2e fd 49 ea b5 76 85 1c 8b 06 95 7c a3 35 78 8c 8e fe af 9f 73 2d 64 9c aa 99 46 c9 8d 59 46 53 b7 9c e5 cf 67 3d b7 c3 8e c5 1f 2f d4 cf 94 73 6c 87 6e 63 7b e1 76 2a 35 ef c9 6e f2 3b bb 5c 08 0e 8f 36 0f 63 89 50 da e7 64 a5 91 54 7a a1 65 83 53 ad 68 f1 9f 46 a6 78 7f ac 55 f7 34 eb d7 5f 5f b6 9d b9 e9 7c 25 5b d4 fc fe 89 e6 3d b7 be a1 65 d6 bd 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e1 86 46 98 04 6e 51 a6 11 1e 47 91 b9 Data Ascii: iF1l}sVaEf<evt3V3bssO[Z~-.o?L\|W~'=JBc.Iv\|5xs-dFYFSg=/slnc{v5n;\6cPdTzeShFxU4__\|%[=eFnQG
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 9f 43 f3 3d a7 e3 3d d7 cc 74 e9 fd 6e 1e ab e8 f1 e2 2b b6 26 3b 70 90 db 8a a7 a5 19 9d dc 56 6e 3a 5b 11 1b 5c ef 55 68 57 be 78 5d bd 1d da d3 d1 bb 19 be f3 f7 fd 0f 5e 7c 95 b5 b3 d5 d7 f3 bb 7b 43 7a 95 75 75 7d 0e c6 c7 d8 f3 d2 7b 1a 3e b2 ab a3 dd 89 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 79 f4 f2 71 d4 77 96 b8 46 cb 3b 30 f3 8e 58 c6 4b 12 ec 4a 26 43 29 21 da 0c 69 47 91 8e 96 51 f1 1f a7 d0 70 39 1d a9 7d 07 13 99 94 66 83 3c ee 3b 4e 66 71 d8 46 23 5b 2c 27 79 d2 7c 3e 65 84 75 9d c7 79 d2 61 98 65 80 fa 74 98 64 71 c8 94 3a 8e 67 23 e9 f4 c1 33 0e 47 49 82 72 31 ce 93 a4 fa 4c 91 c7 41 d6 7c 3e 18 a7 03 11 8c 42 1e 74 e7 74 be 77 b5 7c e7 b0 8e e6 7a 5f 3e fa af 3f 0f 3c 75 53 b1 61 a3 6b be 16 6b 2d a9 c5 ec 67 9d 39 bc 73 Data Ascii: C==tn+&;pVn:[\UhWx]^\|{Czuu}{>yqwF;0XKJ&C)!iGQp9}f<;NfqF#[,'y\|>euyaetdq:g#3GIr1LA\|>Bttw\|z_>?<uSakk-g9s
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 86 61 d2 cd 7e 9e 65 1b 43 e7 19 13 d6 b3 df e8 f3 65 e8 a7 6d eb 2c bc 66 25 f0 cb 8e 23 a4 cb c3 ae 59 86 8c 60 64 e7 3c 77 1c ec 86 54 dd 92 86 45 b1 4e 12 76 d5 37 66 32 8f b8 cf 33 96 63 db 19 f6 c2 7d c7 74 2c ef 8b 26 ac f4 78 ae df 92 2f d9 86 ec 72 a3 2f a6 a9 a5 bf db 2c 7b 2b 93 b5 a4 7b 7a da a2 dd 5d d3 2b 75 1e 35 b6 35 73 89 d7 77 55 d0 89 dd d0 ed 8e 70 68 da 8c af 62 7e d8 d7 b7 b9 09 d7 8b 87 da ad cd c6 3b 53 b3 e7 1f a0 b1 c1 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 28 79 7c cc 3b 08 98 e2 36 8f 47 2d ca ed e4 dd af 5e d9 d1 bb f4 3c c5 52 1b 38 3e 2f f5 37 15 ac e1 89 00 00 0c c3 68 7a ff 00 cc 9b 52 fe 3e 7e 73 22 76 45 e6 93 53 42 5b 9a c7 a4 65 19 83 a4 f2 54 1b c7 2c 03 ce 50 7a 1a 4d b6 60 18 b2 51 4b 09 f0 c4 39 Data Ascii: a~eCem,f%#Y`d<wTENv7f23c}t,&x/r/,{+{z]+u55swUphb~;S(y\|;6G-^<R8>/7hzR>~s"vESB[eT,PzM`QK9
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: bb 08 dc 3b ca 1c 90 64 1c 5b 44 d8 f2 53 4b 09 19 86 bf ef 72 6c 9b 14 49 46 4e 4f 3a 9b cd f2 7c b5 d5 5d 7d 38 ba 6d e8 8e ee 7d d3 dd 9d 8f 59 6c bf 67 c9 fe 73 5b 3b 1e 57 e4 b9 b5 a9 f6 f8 4b a5 1e 8d 85 0c 7c eb d8 76 36 60 35 ea d8 7d 0e 84 ce d5 bb 0b d0 5b 0f 7d 5c 63 0e a9 c3 e6 16 8d 3d fb d6 af 47 e9 c4 f8 7c 90 64 54 f9 86 04 73 db 37 54 ab fb 54 b0 76 2b e9 b2 ac ea ec af d5 18 2d 7b ba a1 99 78 d5 89 b3 54 e7 3b 6e c3 c9 e9 eb 9d fd 4c dd ad 2f b9 77 e6 50 da ea ce ae b5 6f 56 18 b5 55 59 96 dd db 4f 47 86 bc b0 1a d8 99 aa 93 d1 ba 06 fb ba d8 db 17 ed fe 80 6e 76 7e e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a4 8f 24 19 24 81 61 25 0e c3 a5 98 8c d9 d5 9a 6a 90 dd b2 fc ef e8 7e d1 fa 1f cc 3c 8f 97 a5 b3 9f 3d 45 e8 86 23 Data Ascii: ;d[DSKrlIFNO:\|]}8m}Ylgs[;WK\|v6`5}[}\c=G\|dTs7TTv+-{xT;nL/wPoVUYOGnv~$$a%j~<=E#
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 01 a5 8f 27 18 85 90 f9 24 b9 34 7d 3a 4a f1 56 ab 77 1f c6 7e a4 25 f2 33 22 3e e6 44 58 c7 c3 94 b1 d7 66 8d ef d6 fe 67 b7 dd ab 26 8e 5e 52 86 41 24 76 91 18 74 92 38 4c 9d e9 62 98 46 39 12 8f d2 29 2d 73 b1 a1 83 d8 f3 d3 58 d9 e5 3c 4a 6b cb 2a 73 4d 95 89 a4 94 c6 6e fc ed de 8e 75 d8 f1 67 f4 2a 6a d9 e2 3e 27 ad 9f da f9 ad c6 bf 2f 8e e7 d4 21 dd d8 17 7a 1b 0c 77 24 b6 76 b1 32 ea 84 65 b4 ed 8f b6 39 7a 96 71 d5 c6 3f 46 38 3b 50 b5 e9 ca 3b 69 1f b3 47 63 1d 98 94 d6 bc a0 77 f5 bb 8b 16 95 f1 7b 95 73 ba 76 8d a9 64 c5 03 09 4e 62 c9 13 1a ae 6f 9c 3c df 2f 1f a1 af ca 9c 53 2f ee c6 d1 1c 0b 31 e9 4a 3a fb 2e cc 63 e7 a1 25 56 d6 67 27 5f 3e aa e1 7a d0 ac ee 2b 3b f0 b0 58 8a d2 e3 eb fd 2e 55 22 ce 6a ac 73 Data Ascii: '$4}:JVw~%3">DXfg&^RA$vt8LbF9)-sX<JksMnugj>'/!zw$v2e9zq?F8;P;iGcw{svdNbo</S/1J:.c%Vg'_>z+;X.U"js
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 74 f1 b9 2d 26 61 d4 4e 13 07 79 c0 d5 78 76 18 e6 2c 30 b6 b9 1a a3 c6 a7 62 12 ba 78 e7 3c 71 b6 a8 de 96 8a 70 ce a6 53 1a 9b 1d 91 b3 ae ca e4 2d ad b5 ab 89 a3 6d 8e ad 89 8f 3b d1 87 da a2 3f 62 bb 0f 32 e8 9d 9a f2 eb 77 6a 4f e5 6a ef 67 5b 9b 30 7d 4d 18 fd a8 f7 46 cd 8b e6 f7 f1 b3 89 08 dd d3 64 66 35 36 a4 b5 eb 8f dc 8b 76 18 57 c6 d3 ad 7a 4e 8d aa e4 ea b7 42 72 3d e6 17 4b 93 e9 dc 79 ce ca d8 b5 2b d6 d5 5c d8 d6 c7 8c a1 79 95 45 42 52 f8 9f 09 a7 a5 b1 62 9c bb af 62 5b 56 54 6c 95 d7 b7 be a6 54 b1 5f ba b8 4b 50 e5 bb 2d 87 d5 d8 d7 fa bd af 33 57 d2 f6 1f 67 ca 55 f3 88 96 32 0f a7 dc bb 99 ce 86 32 99 88 84 ba b2 d7 12 8d 56 b9 e2 73 36 ee bb b4 6f 9b eb f2 59 48 cc 6c e6 d5 b2 3f 65 98 ec Data Ascii: t-&aNyxv,0bx<qpS-m;?b2wjOjg[0}MFdf56vWzNBr=Ky+\yEBRbb[VTlT_KP-3WgU22Vs6oYHl?e
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: d8 d8 f7 f2 b7 f5 1a 13 34 c5 73 bf b1 4d 2f 8b 66 9b e7 7a 4f 36 77 29 f7 77 0b 81 0d 5e 2a d6 57 54 d8 94 75 b8 cc 5b 6a d6 9d 8b 5d 8b 89 c8 46 77 1d 4b 24 53 8e b3 19 b1 74 c1 57 be 11 b7 57 23 54 22 2c c5 27 63 56 87 b9 ad 56 d9 da eb a7 d8 e7 5b f3 89 3b 39 1b 3b b7 eb b3 59 ad 31 25 89 6c a8 b5 84 73 7d 36 4c f1 ce 0e ac ca 27 0d 2f 66 27 e3 8f 45 e7 30 d1 c5 17 13 f2 84 55 f9 2f 48 6c 1b 63 99 26 16 23 a3 b9 be 5b a6 3a b9 cd 18 28 f6 20 67 d2 c8 8d 78 d3 dd f7 9e d6 f6 fc b6 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a7 4f 21 9c 24 ee 33 49 b2 70 ee 23 f1 5f 9e b4 b4 f2 f1 1f 64 db b5 a5 39 fa b4 58 6b df f6 76 35 e5 5a f8 f0 cc c4 ed ec 93 0e c6 5c f1 6d e8 72 eb fb bc fa d6 cd 52 5a c9 0a 6d 84 df a3 24 ec 85 bb 03 85 d3 ab ed e9 Data Ascii: 4sM/fzO6w)w^*WTu[j]FwK$StWW#T",'cVV[;9;Y1%ls}6L'/f'E0U/Hlc&#[:( gxO!$3Ip#_d9Xkv5Z\mrRZm$
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 49 8b a8 db 3a ea 6f 3d bb ba f9 d3 52 84 54 a5 62 43 b9 9e 4c e3 c5 af b4 f7 20 b3 1a d4 de a1 e0 77 60 b1 ad 1f bf ce b6 76 b4 f7 b4 57 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 69 a3 c7 a7 74 92 04 a9 9a 4f 0c 23 31 5e 8a e7 68 66 ce 33 93 d8 92 d2 c3 1a 59 58 86 22 d9 1c 63 11 a7 0c e7 c2 df bd 99 5e d4 f5 51 e1 73 13 bd c7 bd 75 2c e7 c9 df 85 8e a6 14 f5 e6 b5 fa 35 2d be 5f cb 67 d7 8a 79 e7 56 57 57 6b 76 e7 d4 44 df 8d 49 ad c9 ee d5 bb 8a 9b e6 af 4e fd 6e fd 07 a3 1b ec 6f cb e4 d5 b0 2d d9 ea d1 8e 3d 29 ae 95 ba df 62 74 ad 3d af 33 db d0 f4 96 87 3f 64 43 42 3e 59 a6 c9 cd a7 db 7f 47 1b c7 fb 48 3c ca 3a ea 3b fa 1e 6e dc d5 bd 6a 5b 37 55 f7 03 5a fa 4e c7 9f b7 bb 57 9e 1f ce f2 fa 3a 19 5e 43 d8 4f f0 fa 7f 7b 11 d4 bd fa Data Ascii: I:o=RTbCL w`vW itO#1^hf3YX"c^Qsu,5-_gyVWWkvDINno-=)bt=3?dCB>YGH<:;nj[7UZNW:^CO{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.5	50114	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:49 UTC	700	OUT	GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-e1e" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:49 UTC	609	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:49 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-e1e" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183516 Expires: Sat, 25 May 2024 02:57:49 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e30d9f31f7d4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.5	50111	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:49 UTC	627	OUT	GET /uploader/d0c5abae35b7b6102f6bd1205ec204e28371aba7.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:50 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:50 GMT Content-Type: image/jpeg Content-Length: 237429 Connection: close x-oss-request-id: 66511B6DE90119363313DB40 ETag: "5FE0C2A3A41EB01442554B277163AB10" Last-Modified: Wed, 09 Aug 2023 07:26:46 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 7636939035025013675 x-oss-storage-class: Standard Content-Disposition: inline; filename="22181e4ceb4617965770861201794e0e90275585_221" Content-MD5: X+DCo6QesBRCVUsncWOrEA== x-oss-server-time: 87 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e30d9930f7e8-BNA
2024-05-24 22:57:50 UTC	690	IN	Data Raw: ff d8 ff e1 00 22 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 12 01 03 00 01 00 00 00 01 00 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 5f 63 70 72 74 00 00 01 4c 00 00 00 0c 77 74 70 74 00 00 01 58 00 00 00 14 72 58 59 5a 00 00 01 6c 00 00 00 14 67 58 59 5a 00 00 01 80 00 00 00 14 62 58 59 5a 00 00 01 Data Ascii: "ExifII*ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc_cprtLwtptXrXYZlgXYZbXYZ
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 0f 50 00 00 05 4f 05 e4 41 55 b2 be 0d d2 c1 3a 68 37 3e bd 31 06 f9 62 a3 9a 1d 25 af cb 25 76 c3 35 58 e8 fd 09 42 85 d2 18 7c 6a fa e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 15 58 27 be be e7 41 cb 24 33 df 12 59 88 7c d1 45 88 17 5a ab a1 15 5e b2 ef 97 bb b6 95 a6 aa c6 0d 3a 8d 1b cb 12 b4 e2 42 48 60 fa Data Ascii: ,<POAU:h7>1b%%v5XB\|jX'A$3Y\|EZ^:BH`
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: c1 5d 8d 99 37 2e b9 e2 3c 1a 0a 29 37 9b 0e 89 ca d3 b3 63 c5 f3 d7 a9 eb 0e 04 04 3c 04 e8 89 71 b2 a9 91 61 25 7a 32 b5 76 3b c6 b5 2d 78 1e 76 70 f7 6d 05 3d 09 b6 47 f7 6f 2b ce 80 00 00 00 00 00 00 00 00 00 00 00 00 00 02 20 28 02 a0 8a 29 e3 50 55 49 c4 5a 2c 63 ca 84 f3 c0 3e 58 19 5d 5d 1e c3 32 16 19 cd 4f 25 9c d2 44 6f 4b 07 d2 db ae 74 d6 23 a8 41 b2 f9 be 75 ef a6 ad 5f c6 9f 27 ec 34 e1 f6 ac 0a 00 de a2 35 a2 14 9c fe 37 d9 ef e8 da a2 cb f2 7e 65 ad dc b8 04 e9 ca fa 9a 16 2d 5a 5e 9d d4 ec ab 37 eb 2f 4e b7 51 45 c5 ab 28 cf 30 8b db 51 29 16 0f 3f 35 ce 3d 68 c4 67 76 66 93 b0 f4 fa 15 f0 4e e3 44 e6 4b a4 79 b2 d1 c5 44 b7 7a 35 d2 58 eb d7 bb d7 8e 32 57 44 d9 8a 36 67 05 c6 ef 97 c5 50 01 44 07 20 8a 08 38 1a 2b 03 6c 59 b1 5c f9 b8 Data Ascii: ]7.<)7c<qa%z2v;-xvpm=Go+ ()PUIZ,c>X]]2O%DoKt#Au_'457~e-Z^7/NQE(0Q)?5=hgvfNDKyDz5X2WD6gPD 8+lY\
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 65 17 73 de b5 6d b5 58 e2 b2 46 55 58 ab bc f3 ad 6e 5d 5b 14 e5 31 3a b8 1e 77 ab b3 eb 15 dd 28 aa 76 98 8a b5 d0 37 47 7a e5 f2 32 6b 0a 3b 06 11 25 3c 4e 68 bf c8 ad 7b db 56 af 5a 7d 16 bc 88 61 39 eb de e2 41 6d 44 eb 4c e5 24 51 c4 b4 6d 1e ee 5c c4 1d 2f 6e 3a 1c a2 af aa 02 80 00 02 00 0e 00 11 00 b2 41 0d 85 b5 ef 35 ab d8 e8 57 70 c4 66 31 2b 72 54 ed 4f 41 b3 7e a3 35 80 00 14 10 00 00 00 00 00 00 00 0d b3 1f 1b 63 c7 c6 ab 23 73 fb bd 7c 7a 8e 9f 9d 9f 6c e8 c0 cd 36 d9 c1 e4 49 cd 42 ad 61 94 09 f3 74 fa 1a 99 11 72 29 d1 3f 54 da 33 ad 5b 26 4c bf 43 97 db e3 d8 b4 92 66 d8 8e d2 77 59 eb 95 06 55 66 c6 04 8a 12 f5 9f 27 c8 dd 8e f4 0e 9c a9 31 b9 df 1f 0c 55 14 b5 d7 76 89 46 cc fc ec 8c b3 0f cf 7a b9 7b ee 4e be 83 97 6b 2a b2 b9 c5 ca Data Ascii: esmXFUXn][1:w(v7Gz2k;%<Nh{VZ}a9AmDL$Qm\/n:A5Wpf1+rTOA~5c#s\|zl6IBatr)?T3[&LCfwYUf'1UvFz{Nk*
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: da 55 6f a7 5a e2 35 6e a7 05 ae a3 bc a4 57 7d 24 f1 d0 58 7d 2f c4 9f d8 70 12 f1 36 d5 5e 95 ee b5 29 08 e2 f4 31 dd 5b 16 9a 7a 55 89 c7 85 69 68 a7 cd ee da 41 41 50 50 45 00 12 e5 4e 2d a3 37 11 46 33 e6 4e 86 e7 d2 d8 56 2a d3 c9 87 ea dc 14 bb d7 a9 b3 70 55 af ba b9 8d da 26 11 63 71 3b 78 52 ec b2 b5 29 d4 65 45 47 48 4b a7 77 7c aa da 93 e7 2d fd 7a 94 96 6f 9c ed 7a c6 94 90 fa 32 db b1 20 a7 6f 59 f4 4f 43 6b c5 c6 bb e5 f3 fc 3e 3c be ef a5 44 58 d5 d2 28 71 d2 91 f3 df 37 f4 bd 72 32 38 00 01 66 b3 22 fa 2f 89 e7 e2 f5 1c 90 b0 52 b6 bc 91 d1 35 61 a8 66 3f e9 6f 3b e8 ab 5b ae ad 75 7c 7c f5 79 f4 6a 7a 11 94 75 a8 f1 3d a7 59 c2 37 e1 fa 7b 16 86 8c 0d ec f5 10 79 19 ee bd dc d3 aa ba 2b 1d e7 52 af 63 53 c9 20 7c ac 66 87 95 ab 3d 4a d4 Data Ascii: UoZ5nW}$X}/p6^)1[zUihAAPPEN-7F3NV*pU&cq;xR)eEGHKw\|-zoz2 oYOCk><DX(q7r28f"/R5af?o;[u\|\|yjzu=Y7{y+RcS \|f=J
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 57 e6 6d d9 7e c7 e7 20 f9 4f 6a 7b 84 2c d9 33 9b f1 2f 5b 37 d8 3c b4 58 0e bb 97 42 2a cb af 94 8e 51 29 56 d3 ea 0c 18 fe 13 eb 27 fb 83 94 87 e3 1e aa 5d 9f 22 3d 16 a1 96 e8 e8 66 b6 74 92 91 76 aa 19 7a 96 06 6f 6c 3a 72 51 e9 5a 67 92 b6 79 99 f3 67 75 c3 54 ea 4f 23 99 ad b3 ba d7 d0 31 dc a2 d8 83 30 db d9 cc ee 69 20 aa a8 76 c5 e5 c6 a5 95 95 a8 63 73 eb 91 b0 9e b3 39 21 b0 55 d1 86 b9 9b 64 a3 a3 94 6a ec 63 1b 9b e3 4f 00 72 83 26 53 2e 3c b8 d1 b6 7e 80 f3 2c 0c cf 25 bf 35 f7 55 6e 34 3b 2d 77 a2 f3 75 a1 f5 7d 0f 9c e6 be 58 86 fd e4 cd b1 c1 35 f6 f5 38 66 2a db 5b 7f 37 65 54 ba 3f 52 e5 87 77 48 e3 b8 39 4a f1 46 da 46 dd 2d a9 4d 3b 39 8f 7f a3 58 ac db 26 44 fa 56 8c c9 0d 44 ba ce 46 57 dd 9c 9c de 7c de af b6 bc e5 ab 71 81 4e c9 Data Ascii: Wm~ Oj{,3/[7<XBQ)V']"=ftvzol:rQZgyguTO#10i vcs9!UdjcOr&S.<~,%5Un4;-wu}X58f[7eT?RwH9JFF-M;9X&DVDFW\|qN
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: d0 03 c0 e8 00 f0 3c 09 e8 a1 d2 e9 e7 d8 ea d2 b3 c1 5d b4 30 c4 4b 5e bf 79 d1 0e dc 81 9e fe a7 9f 4a d9 52 9b c8 e2 e1 89 e0 91 cd 8d 24 67 a4 8e 55 fd 0a 92 39 d0 39 72 ba 05 91 c9 87 03 7c 1f 9c db b5 96 6b ed ae a3 f3 11 16 eb fa 4a a3 12 e1 ca 50 77 42 05 dc 33 52 b0 f2 35 cd f5 9d 1d 1a 7d 4d 7f 43 ce e8 cc 7d 8a 85 a7 75 67 f9 e6 4d 0a 45 88 be a9 ad 43 40 ae ab d6 6a b1 b1 88 fe 5f 67 99 4a bf 5a fa c3 26 69 72 eb 80 e4 62 02 43 d5 ac c2 54 ee 57 35 b8 23 24 6c 65 67 40 a5 77 bc 49 1e 92 7d 5d 9d 85 f2 65 ae 95 9c 98 8d 95 60 6c 4a 2b a4 ab c3 1f 23 e6 9e f7 f7 ad a7 13 67 3c 3b a8 b5 f7 3e 6b 3d 52 4a b6 15 ab 2c d1 51 b1 3a 62 dd 14 69 f4 2c dd d7 38 4c 36 b3 6e d0 37 ba 3e 5f 5e cb e9 9e 28 f2 c3 80 b6 c0 d9 1a b8 ff 00 56 e2 55 f8 83 a9 bb Data Ascii: <]0K^yJR$gU99r\|kJPwB3R5}MC}ugMEC@j_gJZ&irbCTW5#$leg@wI}]e`lJ+#g<;>k=RJ,Q:bi,8L6n7>_^(VU
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: d0 51 d2 f3 b1 94 57 22 11 e2 d3 25 d4 a4 cb b1 98 c6 e9 05 56 d6 b4 6c b2 e7 5c 62 a2 c2 42 69 b1 47 35 6f 50 50 b3 56 a8 c6 96 a6 68 9a 2d f7 ea b4 92 59 0c 66 c9 f9 bc f1 8d bd ec 4e eb 3c 43 ae ac bd 54 f2 b3 fb e7 6c 88 a8 74 d1 27 d0 40 d7 b6 aa 48 80 24 e3 c4 3b 42 bc 67 6f dc d2 e7 6c bb 80 67 68 71 65 3e a6 9b 09 86 85 bb 0d 4c fc da 37 7c bb 9d ab dc 65 d3 6b 17 7f c9 d6 88 a7 7b bb 15 f5 8d 1c 8f 1a ef 92 3b f7 b4 97 43 ed de 67 9e f8 b2 ef 4b 4d 34 13 c2 a5 ad 72 9c f4 9d ca b0 4c b1 5d da b1 5d ed 6e 58 2d 58 f1 16 03 0e fa f6 23 52 5a ce ad 42 ea 57 f4 1e 28 2a 80 20 00 20 28 02 9e b1 93 b0 c5 79 a1 4a e3 4a b6 29 b5 ad 05 6e c0 13 fc a4 d0 1d 64 02 24 df 3b 3c 36 f4 7d bc b5 27 2c d5 96 e2 17 5d 07 cd d3 15 40 e9 13 a0 e8 39 09 ba f0 d9 a0 Data Ascii: QW"%Vl\bBiG5oPPVh-YfN<CTlt'@H$;Bgolghqe>L7\|ek{;CgKM4rL]]nX-X#RZBW(* (yJJ)nd$;<6}',]@9
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 46 ee e9 81 91 a7 51 a3 e0 26 1e 07 ae 3c 04 c3 80 f4 17 05 da d8 bb 16 b1 1d 7d d1 aa e5 11 55 24 e1 64 cc 70 be cd 64 d6 04 90 d4 ad bc ca 6b 9d 6a b6 db 19 b0 5b f9 b9 ed dc db b4 17 74 08 ae 24 91 c3 91 e7 b1 57 80 64 4d 51 65 49 ea 71 df a7 cb af f4 09 95 26 11 96 2c 53 37 36 c5 41 88 08 0e 14 00 00 00 00 10 14 56 8c 50 21 a6 f3 88 9b bc dc c9 3c 93 ab c8 52 e9 a3 59 e8 c2 35 64 91 5e 76 54 b9 e9 b5 77 61 5b 7a ac 87 6e 5f 54 e0 12 56 d4 d9 af 80 c1 d0 e5 ce e5 69 ad 8d 7a 10 4c e6 cd a5 c9 d2 d6 6d cd a1 f4 1a 30 6f 8b 40 f2 98 96 b6 c6 5e b1 9f 42 b5 4b eb 3e 36 af b0 bb e7 5c 0d 78 ef 5b f1 f9 1f 2d f4 3b 41 bf a5 59 c0 93 99 1b 31 ef 6f 3e b9 5e d6 61 cf ba 93 df f1 da 3f 11 da e9 db 94 14 43 28 dd 5c 07 a6 d1 73 1c bf a0 9c b7 35 f9 e3 b9 6f 3e Data Ascii: FQ&<}U$dpdkj[t$WdMQeIq&,S76AVP!<RY5d^vTwa[zn_TVizLm0o@^BK>6\x[-;AY1o>^a?C(\s5o>
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: c1 db dc 99 d4 82 80 03 9e 1e d9 e6 34 18 6c e0 f4 87 21 d0 29 61 ee ba 8d ec 01 a4 4c 07 d0 dc 06 8d 2b 67 2b 15 f5 4e 7e f7 1d a9 4d bd d9 4b 9c fd 22 9f 3f f4 47 3b d0 97 b1 7a ab a3 cf 29 d3 36 b5 69 1e eb 9e de 39 f4 54 8e 8f 5e ef cf f5 f4 26 a9 db fa 37 4f 9a cd bc a6 04 6e 25 ff 00 d4 e5 96 73 b1 5e f7 ce aa bb 38 72 5c 5f 6f a2 79 3f 4e af 40 fb 1e 9c bf 17 77 b6 9e 17 6c 70 c1 f7 2f 31 cf fe 7c 6d 5f ac 56 8f 41 c9 a7 69 21 7e c8 61 6b dc b1 22 a1 b3 63 2b e9 b7 80 00 00 3d 07 71 a7 d2 bc fe 25 de bd 57 20 a8 2c 0f 03 b0 68 a3 20 6e 87 20 98 30 0a b4 96 a9 57 f5 19 4d 37 21 c0 bb f7 23 8f 98 79 af 53 ad 7a c7 15 9b 46 fb 13 b3 f2 18 2b 4e be d3 14 b8 c0 b1 e2 24 3c 12 dc 27 8a dc f8 ac 01 59 b4 e9 49 ae 67 4d dd d8 d7 98 65 04 33 cd 56 c8 91 0c Data Ascii: 4l!)aL+g+N~MK"?G;z)6i9T^&7On%s^8r\_oy?N@wlp/1\|m_VAi!~ak"c+=q%W ,h n 0WM7!#ySzF+N$<'YIgMe3V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.5	50112	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:49 UTC	627	OUT	GET /uploader/a55bc9c6ad3e71405e43f15c29ddf78dca8e80df.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:50 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:50 GMT Content-Type: image/jpeg Content-Length: 216450 Connection: close x-oss-request-id: 66511B6D91795F35360EFDD4 ETag: "E05E49254256FD202FB5D8259C2FC3CE" Last-Modified: Wed, 09 Aug 2023 07:26:47 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 6460293378104763383 x-oss-storage-class: Standard Content-Disposition: inline; filename="221af8b8c0d5ea22664f6e7d34fd90dcecc63233_221" Content-MD5: 4F5JJUJW/SAvtdglnC/Dzg== x-oss-server-time: 73 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e30db9b3f7e4-BNA
2024-05-24 22:57:50 UTC	690	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 23 74 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0a 01 00 00 03 00 00 00 01 0d c8 00 00 01 01 00 03 00 00 00 01 0d c8 00 00 01 02 00 03 00 00 00 03 00 00 00 86 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 8c 01 1b 00 05 00 00 00 01 00 00 00 94 01 28 00 03 00 00 00 01 00 02 00 00 01 3c 00 02 00 00 00 09 00 00 00 9c 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 dc 00 08 00 08 00 08 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 69 6d 61 67 65 72 79 34 00 00 00 04 90 00 00 07 00 00 00 04 30 32 32 31 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 1a b4 a0 03 00 04 00 00 00 01 00 00 14 e0 00 00 00 00 00 06 01 03 00 Data Ascii: JFIF,,#tExifMM*(<i-'-'imagery40221
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 8e ff 00 85 74 de 1c d3 74 49 f5 3d 0e 35 d0 ed 1a 2d 52 da 59 c7 9f 23 dc f9 5b 4b 30 18 6c 06 e0 a8 ce 47 4c d7 b9 5f 1b 4e 9b 71 e4 bd b4 f2 d0 f8 cc 3e 06 ad 44 a5 cf 66 f5 f3 d4 f3 23 24 ea 87 37 0e 17 b8 c9 03 f9 d4 33 4a b1 95 05 19 c9 e4 6d 5c d7 a0 dd 5e 69 cd e0 a5 f1 15 86 93 65 61 a9 5e b7 f6 69 8e da 00 b1 43 c1 72 e8 09 3f 31 40 06 ec 02 0e 3d 39 e1 00 0b c2 8c 01 c6 05 6b 85 9f b5 4d c6 3c b6 d3 fc cc b1 70 f6 4e 2a 53 e6 be bd bd 0e b3 c0 fa 75 e3 5d 47 79 04 d0 ad be 71 2a 6f cb 15 fa 76 ae f9 d1 3d 4f e5 54 bc 13 e1 e1 a4 e9 a6 e2 eb 2b 75 3a e5 c6 ec 80 bd 45 6b dd aa a3 c6 bc 6d 7e f5 cb 52 a7 b4 9b 68 f4 b0 f4 bd 95 24 99 4a d5 37 dc 81 f3 63 04 f0 70 4e 01 38 ae 8a ce 15 5b 59 2d ed 67 36 a6 4c 48 24 d8 ac 57 77 cc 78 3c 1e b8 cd 63 Data Ascii: ttI=5-RY#[K0lGL_Nq>Df#$73Jm\^iea^iCr?1@=9kM<pNSu]Gyqov=OT+u:Ekm~Rh$J7cpN8[Y-g6LH$Wwx<c
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: a0 b7 8c 81 18 8c 30 e3 25 78 21 8d 54 d2 fc 35 a4 ea 7e 24 82 da f3 54 9a 70 6c e4 96 48 d2 7c 08 ca b2 0f 9b 04 9f e2 e3 a6 6a a7 86 3c 09 61 af f8 8b c4 26 da ee 25 d3 6c a7 11 c4 8c 64 6c a9 ce 08 23 07 9c 8e 49 e3 1d 0e 78 f2 a7 39 55 93 52 6a fe 9a fe a7 ad 4a 95 3a 49 b4 dd 97 f5 e4 76 7a 2f 8b ed 6f a7 6b 2b 2b 81 73 72 ab b9 95 fe 62 13 81 96 c7 19 e7 d7 bd 6e ac fa 76 99 31 36 f6 f0 da 4f 3a 83 20 88 60 39 c7 f7 47 19 f7 c5 78 4f c3 56 7d 33 e2 2e ad e4 9f 34 41 6f 2a 00 c7 39 da eb cd 7a de 89 aa 9d 55 c3 6a 33 7d 9a 29 63 7d de 59 20 81 e8 31 c8 3f ca ba fe b9 1a 54 79 ea 6a d1 c9 88 c2 f2 d6 e4 83 d0 9f 57 d7 22 b4 b1 bc be 7b 7b 86 10 9c 28 0a ac d2 15 3c ed 52 7e 9d 71 d7 15 c6 bf 8f b5 1b b3 1c 56 7a 4e a0 7c c6 2a ab 2c d0 c2 09 5e bc 00 Data Ascii: 0%x!T5~$TplH\|j<a&%ldl#Ix9URjJ:Ivz/ok++srbnv16O: `9GxOV}3.4Ao9zUj3})c}Y 1?TyjW"{{(<R~qVzN\|,^
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 89 b7 fd 9d 23 24 31 50 48 ce 01 e3 8c 9f 61 57 56 e2 c6 ca 6b 8b 9d 5e ee 38 09 1b 23 f3 06 58 b1 e3 21 7a f1 83 55 3f e1 2b d2 63 b6 57 fb 49 67 0e e3 f7 c9 2e 30 36 ed 21 63 ec 72 dd 4d 69 8b c4 53 a5 07 17 bb ed ab fb 8c b0 d8 1c 45 7b 54 84 1b 8f e0 3f 5b f1 ae b9 a9 f8 94 46 3c 29 35 ad ae 5e 36 69 83 6d 0b c8 27 90 bd 3d 7d 47 4e d5 c6 6b 99 37 2e c1 40 45 fe 2c 71 f8 62 ba 8d 5b e2 26 9e 2f d9 6d 52 17 b1 52 00 02 dd fc c6 5e 32 09 63 d4 9d df a5 71 4b ad b6 ad 21 48 b4 99 a6 0a 77 31 57 ce c1 ee 71 81 f8 d7 95 87 71 9b f7 53 5e a8 eb c4 e5 d8 99 24 e5 1b 5b be 9f 9d 8d db 44 87 50 bf 96 ed 51 fe c9 1a 07 6c 9e 78 50 00 cf fb d5 b5 f0 d2 4f 3b e2 5e 91 90 a4 c9 73 93 b8 65 81 08 c7 83 53 e9 d0 40 fe 1a ba 88 c1 e5 dc 5c 60 96 71 8f 28 81 81 8f 5c Data Ascii: #$1PHaWVk^8#X!zU?+cWIg.06!crMiSE{T?[F<)5^6im'=}GNk7.@E,qb[&/mRR^2cqK!Hw1WqqS^$[DPQlxPO;^seS@\`q(\
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: f3 af 15 c6 4f 8a 75 95 41 97 6b c9 80 19 ef bd a9 f1 db 4c ba 7c 46 e5 5a 39 23 8e 66 55 3d 4b 05 6c 0f c6 9d e2 b6 f2 fc 63 ac 31 04 85 bf 98 f1 ff 00 5d 0d 74 fe 6d ad ce 97 14 f1 05 66 94 3a 42 e7 8d ac d1 48 07 71 8e 71 9f cb 07 a5 7a 59 86 9c 9e 87 99 97 6b cf ea 66 fc 3f ba 3a 9e a7 6f 0e af 3a fd 89 3c c1 0c 28 8b 1e e6 42 a3 6b 3a 8c 9e bc 6f 20 77 cf 4c f7 92 c1 6b 75 aa c1 7a 74 f8 2c 23 1a 66 f5 56 91 59 d4 99 1c 76 c8 3c 0c 9e 9d 2b ca bc 23 75 3e 8f 71 34 97 76 22 ea da e6 07 8c f3 b4 02 ec 8c ad f4 f9 06 7b f3 f9 de d4 e2 d7 f5 e6 b0 1a 9c ad a4 47 16 eb 6f 35 89 87 e4 62 5b 6f 38 2e 38 3f 2a 83 d2 bc 99 e2 29 c3 49 4a de 9b fc 8f 5a 58 5a 92 8e d6 f5 d8 e9 34 ed 27 5d bc d3 f5 88 3c 34 c2 78 37 e2 55 91 84 0b 2b 14 52 5f 69 3d 38 1c e7 3c Data Ascii: OuAkL\|FZ9#fU=Klc1]tmf:BHqqzYkf?:o:<(Bk:o wLkuzt,#fVYv<+#u>q4v"{Go5b[o8.8?*)IJZXZ4']<4x7U+R_i=8<
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 50 fa 37 8c 9e 22 5a 59 7a 22 4d 6e d6 58 bc 1b ad ea 17 d2 21 9a 48 5c 2c 50 ba 92 cc dc 16 3b 73 90 32 49 eb de b9 6f 89 2f 6b ad ae 99 7a 9a 90 82 58 20 41 1d b7 90 ec 58 3a 82 4e ef ba 38 1e bc e2 bb ab 97 5f 15 69 d6 ba 47 87 6e 21 36 17 56 b2 fd b2 fe 54 3e 5d be 7e 5c 05 38 25 fe 6c 7a 72 2b 2e df c2 9f d8 36 37 bf da 37 1a 7d f5 e4 09 1a 44 04 4b 1a ed 00 9d ca 4e 32 71 8e 4f 3c 9a e5 a9 5e 34 14 a2 b7 4f 45 e5 a2 37 c2 c5 f3 de 5b 79 98 56 5a ad ad ee a9 e1 f1 06 9d ff 00 20 78 c8 79 37 0c c9 91 92 dd 3d 41 6f a9 ae c2 fe e1 2d f4 ad 42 fd ec ee 4d bc e6 1b 66 57 53 fb c5 23 2c 72 48 fa 7b e2 a1 f0 9c 3a 6e 91 69 77 2d eb c9 73 01 80 40 e4 3e 1f e7 6f 99 b7 1e a4 7c a3 e8 0f d2 9b a9 58 b5 b5 b3 2d 86 a8 e6 2b c7 33 36 02 60 f0 42 ff 00 09 e9 90 Data Ascii: P7"ZYz"MnX!H\,P;s2Io/kzX AX:N8_iGn!6VT>]~\8%lzr+.677}DKN2qO<^4OE7[yVZ xy7=Ao-BMfWS#,rH{:niw-s@>o\|X-+36`B
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 0c 18 7d 9e d9 9c 36 3a 0c 8e 9d 4d 6d d8 78 17 c5 77 b0 c0 b2 69 b2 a0 8d 02 03 33 aa 70 3d 89 15 f4 6d 15 d6 ea 49 c1 53 7b 23 9d 42 2a 6e a2 5a b3 c3 6d fe 13 6b 77 08 cb 75 35 84 51 b0 da ca cc 58 e0 f5 18 03 1f ad 6b 69 9f 05 ac ed ed bc 8b 8b f5 68 4f 0d 12 c1 90 46 08 c6 59 8f 18 27 8c 77 35 eb 94 56 76 45 f3 33 cd 6d 7e 0b f8 52 0b b5 b8 54 bb 52 02 86 8a 29 44 51 b6 d3 90 4a a0 1c 8c d7 51 69 e0 9f 0e da e3 cb d2 a0 62 3f e7 a9 32 7f e8 44 d7 45 45 3b 0a e5 6b 6b 0b 3b 5c 7d 96 d2 de 1c 7f cf 38 c2 ff 00 21 56 68 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 3f ff d9 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 Data Ascii: }6:Mmxwi3p=mIS{#B*nZmkwu5QXkihOFY'w5VvE3m~RTR)DQJQib?2DEE;kk;\}8!Vh(((?@ICC_PROFILE0ADBEmntrRGB XYZ acspAPP
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 00 00 42 6c 64 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 52 73 6c 74 55 6e 74 46 23 50 78 6c 40 72 c0 00 00 00 00 00 00 00 00 0a 76 65 63 74 6f 72 44 61 74 61 62 6f 6f 6c 01 00 00 00 00 50 67 50 73 65 6e 75 6d 00 00 00 00 50 67 50 73 00 00 00 00 50 67 50 43 00 00 00 00 4c 65 66 74 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 54 6f 70 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 53 63 6c 20 55 6e 74 46 23 50 72 63 40 59 00 00 00 00 00 00 00 00 00 10 63 72 6f 70 57 68 65 6e 50 72 69 6e 74 69 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 Data Ascii: Bld UntF#RltRsltUntF#Pxl@rvectorDataboolPgPsenumPgPsPgPCLeftUntF#RltTop UntF#RltScl UntF#Prc@YcropWhenPrintingboolcropRectBottomlongcropRectLeftlongcropRectRig
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 48 6f 72 7a 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 09 76 65 72 74 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 56 65 72 74 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 0b 62 67 43 6f 6c 6f 72 54 79 70 65 65 6e 75 6d 00 00 00 11 45 53 6c 69 63 65 42 47 43 6f 6c 6f 72 54 79 70 65 00 00 00 00 4e 6f 6e 65 00 00 00 09 74 6f 70 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0a 6c Data Ascii: MsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenumESliceVertAligndefaultbgColorTypeenumESliceBGColorTypeNonetopOutsetlongl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.5	50117	103.160.204.8	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:49 UTC	384	OUT	GET /uploader/742c6cba7453f3353fdda67f621a72a5.png HTTP/1.1 Host: cdn.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:49 UTC	567	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:49 GMT Content-Type: image/png Content-Length: 5714636 Connection: close x-oss-request-id: 66511B689979C73232D07859 ETag: "5B94723B734D6B15095CB4AB722866EE-6" Last-Modified: Sun, 08 Oct 2023 02:44:04 GMT x-oss-object-type: Multipart x-oss-hash-crc64ecma: 5069630925033496847 x-oss-storage-class: Standard x-oss-server-time: 295 CF-Cache-Status: HIT Age: 5 Expires: Sat, 25 May 2024 02:57:49 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e30dd9ecf7f4-BNA
2024-05-24 22:57:49 UTC	802	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 00 00 00 06 00 08 06 00 00 00 e2 98 a8 6d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e 7c fd 65 9f 2d c7 91 fd 8f 7a 66 0c e2 23 66 b6 2c cb 16 b3 74 98 9a 99 99 99 99 b9 0f 0b ec f9 fd ef 0b 8e bb be 91 15 7b 67 b7 e4 79 b0 3e 91 54 99 59 59 b0 ab 7b ad 88 fc c3 76 73 9f ed b4 f4 db 56 6b af 6d b6 f4 d8 66 6b 67 42 7b 87 6d 75 c8 76 75 d8 46 67 bb 6c bb 6d 75 77 d8 7a 47 ab 2d 34 d6 d9 62 53 bd a7 d7 3a 9b 1d 1b dd ed b6 d2 d6 62 0b 4d 0d b6 d4 d2 62 ab ed ed b6 d1 d5 25 74 28 4d bb 56 5b 57 3f ab 9d 6d b6 d2 d1 6e eb 5d 3d b6 dd 37 60 9b dd dd 2a d7 38 b2 b4 a7 0d Data Ascii: PNGIHDRmsRGBgAMAapHYsodIDATx^\|e-zf#f,t{gy>TYY{vsVkmfkgB{muvuFglmuwzG-4bS:bMb%t(MV[W?mn]=7`*8
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: ae df aa b4 d5 db 9a bb d6 70 4b eb b0 a6 75 58 a9 aa b3 a5 8a 1a 5b bc 5d ed 76 59 e7 9e 63 b5 a6 c1 d6 74 3f ac 6a 2d 16 2b ab 6c 49 eb b3 a6 39 6f 34 a8 bc ae ce b1 a2 fe 97 34 fe b2 c6 c5 2e 68 1e 0b 9a eb a2 e6 ba 52 7b cb b1 54 7d c3 56 eb 6e db 6a fd 2d 5b 6f ac b0 95 ba eb 8e c5 9a 1f 6d b9 ee 92 ad 36 5c 71 bb 54 73 d9 b1 58 7d c5 16 aa 2e da 42 f5 0f 8e a5 da 8b b6 5c 7b c5 8f 59 ae bd a6 36 57 dd 2e d7 5f b5 85 9a 4b 36 57 25 54 5e b1 b9 ea 9b b6 50 5b 6d 8b 5a ef c5 da 7a 9b d5 f3 3b af e7 16 90 9e 51 5d 42 95 63 56 d7 0d 90 9e d6 75 c3 ce 6b fd 79 07 2e e8 be 5b d4 fb 6e 41 f7 ef 5c 7d 8d 63 51 cf e5 42 7d 85 cd e8 7c a6 75 7e f3 0d d5 de 96 fe e7 74 bf ce 68 8c 59 ac fa 00 b3 ba 9f a7 35 17 ca e7 d5 df 9c 9e db 79 3d ff 1c c3 b8 53 ba 96 f4 Data Ascii: pKuX[]vYct?j-+lI9o44.hR{T}Vnj-[om6\qTsX}.B\{Y6W._K6W%T^P[mZz;Q]BcVuky.[nA\}cQB}\|u~thY5y=S
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: fd 0b ca 63 ab 5e 58 50 7f 8b 3a 9e 79 31 9f f9 31 5d 97 f1 01 6f 3b a3 7b 63 5a f7 22 63 32 a7 98 a7 cf 6f 52 ed d5 3f eb 35 a9 67 66 72 b0 c5 af df ec 48 ba 76 33 c3 7a a6 46 f5 ac 8e eb 79 12 e6 c6 55 3e aa e7 4d 76 61 52 6b 38 a5 39 4e aa fd 78 7b 01 5d 43 cd 7f 4a e7 39 ad f3 9c d4 da 86 f5 b4 e6 31 a9 fb 10 a4 39 f5 39 e6 c7 06 d5 ff 90 5b 30 ab 67 6e 46 cf dc ec 50 c2 fc 88 9e c7 f1 41 9b d3 33 30 3b a4 f3 19 d0 fc 55 c6 b9 4d e8 bd 82 e5 9c a7 f4 8c 83 e9 11 ce 59 d7 a5 e8 9f 75 a6 7c 5c e7 3d c9 f5 9a 18 b2 69 3d 57 33 ba 36 b3 ba 2f 26 59 17 d9 29 ad 9f 43 cf 22 98 64 ee c2 94 ee d5 19 e5 a7 27 b8 86 9a fb 68 bb 63 4a ef 2c cf d3 46 e7 5c c2 78 87 83 f6 29 ad 67 62 b4 55 ed b5 a6 b2 b3 63 ac a5 d6 ab 58 e7 79 bd ff 96 d4 0f ef 31 40 7e 41 7d 2f Data Ascii: c^XP:y11]o;{cZ"c2oR?5gfrHv3zFyU>MvaRk89Nx{]CJ9199[0gnFPA30;UMYu\|\=i=W36/&Y)C"d'hcJ,F\x)gbUcXy1@~A}/
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: b8 e6 e7 0e 4e 0e 35 4f e1 54 f3 01 b4 f7 f5 d1 31 0e 95 81 fb 4a 83 7b aa 07 77 0f 75 bc e6 ce bc 1f 9c 68 dc c3 79 bb 7b 30 67 f7 8f 16 0a 3b 6f 0f 4f 74 ae 3a 07 70 ff a4 8c 07 a7 8b 6e ef 1c ce 96 ce 93 b5 3c da d7 39 16 eb 7a 7a bc 62 47 5c 1b c1 d3 c7 ab 76 a0 31 f7 b5 56 8e c3 15 c7 ae d6 f4 f0 78 cd 0e b4 a6 3b 5a db 95 b5 c9 84 95 29 5b 5a 9a b2 e5 e5 69 9b 9d 99 b0 b9 d9 49 9b 9f 9b d1 6f f3 a4 cd cd cc da fc c2 b4 cd cc 4e d8 e4 e4 b8 63 6a 6a a2 84 99 99 29 9b 9d 9b 28 30 66 73 f3 e3 8e 99 d9 51 9b 15 16 16 26 6c 61 7e ca 16 d5 07 98 9f 9b d4 18 e3 8e 39 f5 09 e2 f8 b9 79 8d 27 cc cc 4f d8 f4 9c fa 90 9d 5b 9c b2 f9 55 cd 6b 79 d2 c6 e6 86 6d 62 41 fd ae 68 6e 8b 93 36 ae 36 73 ab 73 36 bd 34 ed 98 5b 9e b1 05 e5 17 64 39 6e 61 71 da 56 96 e7 Data Ascii: N5OT1J{wuhy{0g;oOt:pn<9zzbG\v1Vx;Z)[ZiIoNcjj)(0fsQ&la~9y'O[UkymbAhn66ss64[d9naqV
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: 39 02 80 cd 9e 0e 17 04 40 f8 83 35 3d 30 6b 8c 21 20 34 48 d0 7c d4 17 62 03 00 f1 1f d8 ea 6c 71 f2 3f 04 00 7b 1a 77 af bd 29 91 ff 4e fa b7 3a 0e 34 f6 41 47 87 ed b5 b5 39 c1 5f 22 ff 85 9d d6 0e db 6e 69 b7 ad 66 9d 4f 53 ab 6d 35 35 27 11 40 73 ab 1d b6 77 da 41 9b ea 1b 9b 9d 74 05 07 4d 09 c7 ad ad 76 d4 d2 62 c7 cd 8d 76 d4 d4 60 fb f5 d5 4e f4 3a e9 df 58 ef 42 00 b0 5b 5b ed 65 90 d9 41 fa 93 46 40 c0 b1 d1 f6 48 7d 92 86 e8 3f 6c 22 5f e7 7d 7a be b1 b6 34 ce 6e 43 ad 63 bf 49 c7 35 d6 d9 ae da 82 6d 04 03 8d d5 4e f2 6f eb 58 08 7f b0 db d2 e0 f9 0d f5 05 a8 a7 6c b7 45 eb a4 3e c1 a6 e6 b7 5e ab 63 1a b4 86 8d 2d 4e f4 ef 35 b6 39 b6 eb 10 00 b4 38 e9 0f f9 1f 02 00 27 ff b5 66 47 8d 4a d7 e9 b8 da 46 3b a8 6f d6 5c 39 27 a5 1b 1a 52 ba 5e Data Ascii: 9@5=0k! 4H\|blq?{w)N:4AG9_"nifOSm55'@swAtMvbv`N:XB[[eAF@H}?l"_}z4nCcI5mNoXlE>^c-N598'fGJF;o\9'R^
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: 23 00 50 3a 27 d5 cf 93 ef 81 20 f6 83 60 9f 1b e9 70 d2 3d d6 e3 2c d9 9f c8 6e 50 ce 77 96 e0 ed 35 ae 93 e8 ba 96 e4 59 a3 58 af 72 9f e5 74 09 c5 5c 01 c7 73 4c b4 75 f1 80 d6 23 10 44 7a 88 37 82 5c cf 11 f3 00 ac 0f 60 1d e8 d3 e7 1a eb 52 94 07 62 2d e3 fa 97 05 00 67 01 e1 ea 28 d6 26 ad a5 e6 c4 18 ea 1b 52 3f a1 e8 5f c7 e4 a0 3c cd 8f 7a 8d a7 71 20 7e 73 01 00 fd 20 46 70 41 82 e6 1c 63 a4 35 4b eb 0f 41 1d 24 f5 fc 84 e6 51 10 ff b3 63 2d ea 4b ef 39 a5 01 a4 f6 8c da 05 20 82 41 89 28 1e 4b 42 80 20 84 39 77 48 69 e6 c3 f9 06 39 0f e1 3f 37 3a a0 f9 95 05 00 d3 43 e5 f2 d2 f9 e8 39 04 d3 7a 36 23 3d a5 e7 36 88 ed 49 3d e7 b9 08 80 fe 11 58 40 f4 4f 6b 6d 26 74 ee 08 00 48 e7 80 f4 0f 01 00 62 00 48 ff 09 cd b3 8c 4e 1b d7 ba 04 a1 1f a4 3b Data Ascii: #P:' `p=,nPw5YXrt\sLu#Dz7\`Rb-g(&R?_<zq ~s FpAc5KA$Qc-K9 A(KB 9wHi9?7:C9z6#=6I=X@Okm&tHbHN;
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: 33 3a ef 39 5b 5d 9d b5 15 a5 11 36 6c ac aa 6c 69 d2 36 54 bf a9 34 d8 51 fd b6 ea 21 fc 77 55 be a7 32 b0 bf 9e 00 b9 0e c9 7e a8 67 6c 7f 63 c2 0e 78 de 84 dd 8d 51 db db 1c 73 d2 1f 82 1f 8b 08 60 6f 73 34 11 fe 5b 88 04 52 39 42 00 04 00 7b eb a3 2e 02 d8 5d 1b 71 4b 19 64 3f 22 80 1c b9 18 00 f2 3f 04 00 88 01 42 00 c0 9c 42 00 e0 22 80 8d 84 78 de 79 a6 79 c6 79 56 20 ff c9 a7 e7 9d 7b 0f c1 0c 6d 78 0f a4 77 0a f7 22 cf 51 59 00 a0 77 91 d2 77 75 af e6 a0 ec 9e ee e1 78 26 79 3e d3 33 ba aa bc ec 9e 9e a3 7d 3d 2f 7b 1b 4e e8 81 47 87 db f6 d3 d1 9e 97 dd db 53 7b cd 27 84 03 41 84 53 86 85 f4 7f 78 b8 5e 22 b5 21 a1 ef ec ea b9 51 bf 88 01 72 72 0f 21 40 89 c4 3e 39 74 32 2f 91 8f 1a 2b 23 30 83 94 4c 44 e6 ae f2 fb f6 50 c7 60 21 f6 11 01 3c 38 Data Ascii: 3:9[]6lli6T4Q!wU2~glcxQs`os4[R9B{.]qKd?"?BB"xyyyV {mxw"QYwwux&y>3}=/{NGS{'ASx^"!Qrr!@>9t2/+#0LDP`!<8
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: e6 22 00 04 00 01 04 01 90 f8 88 01 c2 9b 1f e4 de fd 4b 35 89 e8 47 10 00 f9 4f 79 99 fc 47 38 50 40 3f f2 00 0f f9 a5 5a 88 71 3c e7 f1 56 af f4 48 00 f3 9a 27 36 80 20 20 47 4e f6 07 f9 8f 30 80 ba 19 9d db f9 ba 52 7d 03 9e d8 0d ee b5 3d a7 fb 77 46 f7 ef b4 ee df 29 dd d7 d3 f5 75 b2 d5 8e 49 ad 11 e4 ff b4 e6 34 a3 fb 1e f2 1f 11 c0 74 5d 85 03 01 00 42 00 3c f6 c1 b4 ce 01 f2 1e 2f ee 24 08 d0 1a 15 a4 37 e2 86 39 ad 8b 43 e7 0b f0 fc 87 f0 5f 52 3d f9 10 03 24 f2 ff 76 b1 0e 89 fc 87 8c 0f f2 1d 5b 22 fb 21 b4 0b a2 3e 8e 83 f8 77 f2 bf 20 e5 83 a0 8f fc ac ae b5 8b 0b 98 7f 26 2e 88 31 a2 ff 3c 1d ed 48 e7 c7 a5 76 ba 9f 9a 38 9e 7e d2 78 49 0c 71 5b 65 e4 99 4b 85 ad 20 06 50 3e ce 9b 73 5d 6d a9 76 78 1b 3c fe 1b 75 0f 94 44 01 5a 1b 81 48 00 Data Ascii: "K5GOyG8P@?Zq<VH'6 GN0R}=wF)uI4t]B</$79C_R=$v["!>w &.1<Hv8~xIq[eK P>s]mvx<uDZH
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: 80 f0 fa cf 49 ff 20 f9 03 51 4e fa 02 44 3e e5 85 b7 ff 79 c4 38 e5 b2 32 f9 9f 23 48 7e 6c 80 fc 85 e7 9e 71 84 e7 7e 10 f8 41 f4 e7 e5 90 e3 2f bd f2 a2 e3 c5 97 c9 d3 f6 59 47 a4 b1 90 e9 25 bc f2 bc bd 22 1b 84 7f 78 f6 e7 c8 89 fe 5c 08 10 64 3f 36 da 85 7d 0d cf 7f 88 ff b7 d4 4e c0 6b 3f ca 92 17 bf c6 7c f5 f9 44 ee 0b af be f1 a2 bd f2 7a 9a d3 2b aa 0f e1 02 de fd 9c 0f a4 7e 78 fb bf fb fe 3b f6 f6 bb ef 28 4d d9 9b f6 de 5f df b7 0f 3e fc ab e3 1f ff f8 bb 7d f4 d1 87 8e 8f 3f fe 87 7d fe f9 a7 f6 e9 a7 1f db d7 5f 7d 61 df 7e f3 95 7b ef 03 48 fe 26 fd ad 0b 20 f9 bb f5 f7 00 80 e8 0f 8c f4 77 3b c1 0f b9 8f 27 ff c4 70 af 4d 8d ea b7 6a 62 c8 3d fa 03 10 fc 6b f3 93 b6 ee 44 3f c4 3e 04 ff b4 13 68 07 9b 8b 0e 08 b5 dd b5 39 db 5b 9f 2f 30 Data Ascii: I QND>y82#H~lq~A/YG%"x\d?6}Nk?\|Dz+~x;(M_>}?}_}a~{H& w;'pMjb=kD?>h9[/0
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: bb bf 44 fe 27 41 c0 c9 2e 9e fd ba c6 08 41 55 7e b2 bf 5d c2 9d c3 5d fd fe 12 b1 60 cf 0e 11 8b aa 9e 76 07 db ab ca 6f d8 f1 de 96 ca 76 54 b6 a5 ef 2d d5 ed 28 9d e1 70 7b db cb c1 de d6 a6 7e 57 74 ec 8e ca b6 77 6c 63 65 55 ef ff 4d 7d 3b af b9 3d dc dd d3 bb 63 2b 61 63 c7 d6 97 36 54 be 6d 3b 5b bb fa bd da d2 6f df b2 7e c3 56 6d 6a 66 52 bf a1 d3 36 bd 38 6f 33 4b 0b 36 39 3f 6f 43 13 13 f6 87 cd ce 1e 5b 6f c7 13 bf d3 ed 46 07 b6 c3 f0 e2 4f 9e fc ad 4e ee ef 74 b7 39 76 7b da 6d af b7 c3 2d 79 c8 79 48 fa c8 43 de 43 e4 e7 36 4f 43 f0 6f aa 5f 48 ff dd ee 2e 27 fe 77 bb 3b cb f5 ad 8d 25 82 7f ab bd d9 71 36 4f 5a 73 e8 d0 78 6d ad b2 09 bb ed 9a 5b 81 ed d6 16 db 86 f0 6f 53 3b c2 fd 43 f2 37 69 fe 84 bb 6f eb b2 83 f6 6e db d7 39 3a e1 5f Data Ascii: D'A.AU~]]`vovT-(p{~WtwlceUM};=c+ac6Tm;[o~VmjfR68o3K69?oC[oFONt9v{m-yyHCC6OCo_H.'w;%q6OZsxm[oS;C7ion9:_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.5	50118	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:49 UTC	627	OUT	GET /uploader/feae09372641271a3f25a17a07c8bfbfe7b23d33.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:50 UTC	680	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:50 GMT Content-Type: image/jpeg Content-Length: 251943 Connection: close x-oss-request-id: 66511B6E1F5247373618F56B ETag: "DA6640F8D0D1A025E06561D88FF046F4" Last-Modified: Wed, 09 Aug 2023 07:26:49 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 7566989407924119849 x-oss-storage-class: Standard Content-Disposition: inline; filename="22106fcad4d85d2bbeed63895f89641ef5e75354_221" Content-MD5: 2mZA+NDRoCXgZWHYj/BG9A== x-oss-server-time: 136 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e30eec396a7a-BNA
2024-05-24 22:57:50 UTC	689	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 e0 93 04 00 e8 03 00 00 e0 93 04 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 14 05 00 00 03 a0 04 00 01 00 00 00 14 05 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipimagery40210ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 05 14 05 14 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: C) )/'%'/9339GDG]]}X
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: b0 6b 11 18 70 06 ec a4 48 00 1a 26 66 c4 67 ca bb bb 2e 66 44 b1 55 52 c1 ba 09 91 d9 cf 66 64 97 bb 1a a9 d2 8e 1a 6a 06 29 36 cc 2a bd 46 ea 6c 1d 26 cf 72 79 ac 34 74 c1 95 0e d5 71 b2 d4 f2 73 0d 17 76 64 f6 75 f2 bb 31 a5 9e 56 d5 53 3d 4a 6f a0 f3 e9 a9 1c ac d8 4c 45 66 d9 d7 94 cc b7 2a 73 d8 2b a4 c7 4f 41 9d cc 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 48 61 8d 60 d6 0d 5a 73 5a 35 9d 6b 38 d6 4d 65 9a c1 8f 00 12 91 20 00 00 00 00 65 46 e4 77 64 c6 e0 dc dd 31 25 73 12 59 15 65 d1 88 16 3a cf e6 6e aa e8 19 55 6f 96 ae a9 63 79 ea f9 15 c5 a4 ce ae ca 60 13 1b ae e6 c5 d6 71 bb 96 f3 56 8a a2 5c 45 0c 8e 36 53 25 73 6b b9 ae 6c eb b1 56 53 71 27 ac c1 95 f7 6f 21 57 55 6a 76 bd 9d a4 c9 c5 64 e7 77 Data Ascii: kpH&fg.fDURfdj)6Fl&ry4tqsvdu1VS=JoLEfs+OAHa`ZsZ5k8Me eFwd1%sYe:nUocy`qV\E6S%sklVSq'o!WUjvdw
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 08 d1 8c 91 ac 93 26 cc d3 cb 12 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 35 00 64 35 b0 99 eb 9c f9 9f ae 79 f3 3f d3 36 03 61 e9 3b 01 7f 93 2b 21 a8 0d 04 e8 32 24 e4 eb 8e 27 23 28 e2 15 b1 2a 4d 4c 46 6a 62 20 4d 44 66 04 5c 04 0d 8e 6c d0 82 90 83 60 43 9d 40 96 35 35 1e 56 9b 46 a1 0c b4 26 9a 84 a1 bb 24 25 8b 94 86 5c 15 08 c9 a5 2f 2a 92 6a 93 6c ed 75 cd 05 61 3d 73 6f d6 6b f1 ba dc af 68 fa de 0e 87 fa 0f 90 68 00 00 00 f9 a4 72 12 25 58 ef b0 78 3f 75 b6 7c df d5 74 ce ff 00 83 c4 77 f1 75 4f 4f 8f 0d 9e 5c ef 6f 3e 1f 9f 5b fc bc 07 ca fa 7c 03 d1 fb 5d 5f e9 7e 0a c7 af c7 9b 5b be b4 ec cb 72 04 c4 00 00 00 00 00 00 00 00 00 00 00 00 1a 09 06 81 02 ef 59 73 34 cc dd 33 b4 ce 19 64 64 6e 76 3d 6e 66 7b 72 a8 d9 8e 9a 9c 8a 62 15 12 29 Data Ascii: &5d5y?6a;+!2$'#(MLFjb MDf\l`C@55VF&$%\/jlua=sokhhr%Xx?u\|twuOO\o>[\|]_~[rYs43ddnv=nf{rb)
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: c2 90 a9 52 4c d8 45 42 50 14 5c cb b8 4c 09 49 31 29 4e 94 4a 19 94 88 66 d5 31 7c ee fc a9 39 18 be 8d f4 7c bb 8f bf ce 00 00 00 07 ce 23 88 80 0c e9 83 20 1a 60 15 62 1b a0 00 00 05 12 0c 29 52 6c 72 aa 4a 6c e9 5a 7d 12 df 2b 47 9d 46 67 56 d7 b4 29 c5 22 bc a5 cf ad 2b 99 29 5b 95 cd 35 25 4d 2b 86 dc 48 20 55 9a 99 a0 44 a9 09 e2 aa ca ad cd c6 af f5 92 2e d3 58 b6 8b b0 23 1b 21 25 2b 12 6a a9 55 99 7d 8b de 93 50 da b6 6c 71 83 c6 c9 6c 87 48 dd 0d ae 37 31 35 75 29 8a f9 b8 b6 e2 f5 b4 9a 8e cf 34 35 fa 60 0c 61 54 bb d6 8e 7b c6 6a ec 8c 81 b1 23 34 c4 27 42 15 4b be 36 f0 75 a9 e9 e7 6b ea 5a c8 4b 3b 29 24 54 31 29 29 1a d5 43 66 34 5c ca 4b 8a 71 72 b6 23 66 72 3b b1 23 3b 02 5c da 65 26 52 24 c5 32 11 54 e6 b1 71 79 68 46 13 4d 74 5f ab e3 Data Ascii: RLEBP\LI1)NJf1\|9\|# `b)RlrJlZ}+GFgV)"+)[5%M+H UD.X#!%+jU}PlqlH715u)45`aT{j#4'BK6ukZK;)$T1))Cf4\Kqr#fr;#;\e&R$2TqyhFMt_
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 65 2f 5a 38 34 bc 9e 7d 15 a5 d1 ae 1a c9 ad 1a d1 ad 4b 8f 1e a3 a7 4c 3e 77 b3 67 8a d9 59 b2 d3 a9 6b d0 07 cc 09 7d 12 38 ed 3c e4 7d 19 2d 8f 9a 92 f5 d9 bc 1e 07 3e 9e 53 c3 27 6f 36 93 e7 74 6e 7e 2b 3b 59 9d a9 d9 db 99 4f 2b e7 7e bd f3 f5 52 62 38 98 36 24 e4 65 1c d3 62 98 93 6d 60 21 b1 11 20 99 49 a9 02 82 75 c3 4e 4e 28 be a6 40 c4 e6 73 da 63 8b 63 13 9b 69 4c ae 66 cd 2d 7e 98 f5 df 4a dc 8b 66 94 ad 90 97 50 04 0a 8d a9 15 5a 3a 5e cd dd 45 5d f2 af 5e 7d 8f 9b bd 77 88 ee 00 00 00 0f 9d e7 04 00 19 92 93 73 7f 27 fa bf 4a e7 f9 6d ff 00 eb 7e 4b 89 7c 1f eb 1a 5f d8 fc 6e 37 d1 f9 63 06 ff 00 f1 7f b6 e4 3c 9f ae 61 bb 1d 91 08 a8 d4 c1 0d e9 7b e4 f3 ed 3f 27 e5 d8 fa 7b 6b df 47 df d5 bf 23 f9 5c a7 0f 83 1c f7 70 ff 00 dd fb b4 ff 00 Data Ascii: e/Z84}KL>wgYk}8<}->S'o6tn~+;YO+~Rb86$ebm`! IuNN(@scciLf-~JfPZ:^E]^}ws'Jm~K\|_n7c<a{?'{kG#\p
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 26 cd 98 ab 9b 5e 57 5c f6 ee 6e ee 6a ea 6a ea 2e bc d7 b7 7e b7 ce ce dc b4 00 00 00 3e 7b 9e 7c 00 00 dd c3 e5 ff 00 56 e9 7e 7f cf 6d 9f 67 f1 5c 93 e0 ff 00 5a d2 be bf e3 31 be 8f cb 18 37 ff 00 8b fd a7 7a fc d7 db d8 bb ff 00 0a f6 f7 ee 3c 3c 09 ba 61 eb 9a 78 c8 d2 0f a1 07 83 ce aa 70 43 e8 a9 f3 ea 5e d0 38 d3 75 2f e3 df d2 bc cb fd 53 e5 eb 7e df c3 01 d8 b5 ec 5a 70 69 bf 2f 79 7b c7 72 05 5c da d7 3e ee f4 71 f4 01 e0 19 de 19 e5 ef 3e e7 a8 7d 5e 7f 66 ee e9 46 c6 64 80 20 cf 06 e5 73 fc 7b 9a a6 99 ac 1a cb 75 83 59 9d d6 8e 61 9a 2d a5 71 c3 d1 3e dc c5 52 66 43 10 c4 f5 55 4a b3 55 0a 8a aa 47 2a 08 92 b2 de 8c 40 9e 6a 25 64 d5 54 f9 b5 e2 ab 4d 9c a5 be 78 df 47 9e c7 79 ad 50 a9 0a 17 94 06 24 0c 9e 51 6c c4 e0 ad 29 89 a2 ea e2 a4 Data Ascii: &^W\njj.~>{\|V~mg\Z17z<<axpC^8u/S~Zpi/y{r\>q>}^fFd s{uYa-q>RfCUJUG*@j%dTMxGyP$Ql)
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 9d af 0b 99 db b9 54 d6 34 a3 6b d3 55 ac d6 6a 34 6e b3 8b dc 85 ae 8f ae f3 40 00 00 00 0f 01 9e 70 00 00 0c b9 93 35 a2 91 56 21 ba 3a 1f c1 fe cf e8 ef e6 bf 8f e7 df af fc c5 ff 00 83 a6 e1 f9 cf d7 62 7e 87 cc 97 3a d0 df d7 da 76 f6 e7 bc 3e 0d 3b ec 7d 7e 7d fa 5f d1 25 73 cb 85 b7 5e b2 d5 c2 8c dd 53 ec 7f 1a d7 3d bf 87 28 ce cf af 60 53 81 73 e9 e6 5f 2f a2 54 c0 11 20 06 a2 4f a1 12 4a 4b 73 25 a6 d4 65 10 31 12 79 a9 a5 1c 09 95 12 00 9c 89 52 d5 65 55 b5 95 2e a0 48 91 4e 93 62 e3 2a e2 15 b2 a9 52 e7 2a 68 bc 8f 3d a2 55 da b9 e5 59 ff 00 37 5c cf 25 02 ce a6 de d2 d4 56 c5 79 5c c4 6e 1e ef 2e 9f e3 f4 53 8d a9 99 71 b5 09 a8 93 73 55 8a b9 8d 9d 52 4e 40 af 29 e9 49 36 b5 34 2a 6b 15 aa ab 97 1b 97 15 93 5a ec 8e ad ee 6d 37 95 0f 44 d1 Data Ascii: T4kUj4n@p5V!:b~:v>;}~}_%s^S=(`Ss_/T OJKs%e1yReU.HNbRh=UY7\%Vy\n.SqsURN@)I64*kZm7D
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: d7 8a 92 40 ed ba f5 dd 38 87 1e fc 73 c1 ec a9 9a 00 98 a8 4f 9b 58 9f 9d 48 4b 2a c5 e6 6b 14 32 6d 0a 08 ac b6 2b 15 b3 6e 4a b3 57 44 cd a2 8b 4e 91 6f b8 54 48 aa a8 64 08 6e cb 93 4d 91 12 aa a4 e5 59 54 c5 49 36 84 71 54 2a a5 26 dd 96 aa bc ed df 0a bc e5 57 53 57 55 b9 12 e6 db 97 d1 f1 f9 33 eb fc bb 06 5b 37 5d a5 54 da d6 da a6 f5 73 26 c2 95 e7 7a 8f 9f ae cf c7 a6 d0 65 b8 f4 ce 4d 4e db 78 53 8a a6 db 3c 9b 1a 50 bc b1 b5 29 da 04 9a b6 30 fd 22 7b 8e 49 ef f1 d1 d5 be 6f 5f f3 77 b3 45 a2 a9 f3 db 78 5c 4e e2 fa ce 1f dd cc a9 b3 77 0e 55 d2 3c 95 d2 7c 4d 07 bd 72 cf 54 e4 a3 37 6e b1 ed cf 5f 10 00 00 00 07 85 4f 2f 00 00 07 56 3a e9 e5 f3 18 55 88 6e 8d eb e4 7f 5d bc f3 fd fa 3d 7c 16 fd 3e 6d ad fc db 7e be 0b 6e bf 3e da fe 75 bd f8 Data Ascii: @8sOXHKk2m+nJWDNoTHdnMYTI6qT&WSWU3[7]Ts&zeMNxS<P)0"{Io_wEx\NwU<\|MrT7n_O/V:Un]=\|>m~n>u
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 9e dc 84 ee fd 31 d7 b7 7a 3d 6e c3 b9 8f 24 dc f3 5f 46 22 5d c8 e6 27 01 36 78 ae 8d cb be 35 b8 c2 d9 34 8b 6d 53 b9 89 39 19 63 88 19 02 49 98 92 4d 76 fb 8f 6a f7 80 00 00 00 07 87 8f 2a 80 00 07 52 2f 4e 6c 62 4a b1 0d d1 35 57 d3 63 c8 b9 9a c9 f4 77 77 41 3a 41 f3 80 e3 f3 23 63 31 c6 34 00 00 00 1d e7 6b d6 b4 e0 fe 6e bc 4f c1 ea 97 32 49 43 11 2a a6 72 72 05 2c 8a 15 32 32 52 a4 2b 42 7d d9 2e a4 da 9a 17 1c d5 25 5b 12 52 34 a8 5d 3a 64 17 79 35 50 a5 99 60 9c 75 e5 a9 42 a2 ac 2e 25 1a a9 a9 2f 57 51 eb cb d0 de ce 5b df 7e 40 aa 25 5a 9a 94 6a 04 87 3c e4 e7 30 c9 77 77 6d 9b 80 d9 46 29 15 75 48 93 77 5b 86 49 b5 15 c1 79 c7 26 35 66 ef eb f4 6e cd d1 c7 aa 7c a2 66 77 34 0b cd 96 54 b3 69 37 22 50 66 2c a8 db d3 78 33 86 cc 75 23 ac 5b 32 Data Ascii: 1z=n$_F"]'6x54mS9cIMvjR/NlbJ5WcwwA:A#c14knO2ICrr,22R+B}.%[R4]:dy5P`uB.%/WQ[~@%Zj<0wwmF)uHw[Iy&5fn\|fw4Ti7"Pf,x3u#[2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.5	50119	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:49 UTC	393	OUT	GET /uploader/d1efd62da517b9a9cbcc66739a2f58236cb27f19.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:49 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:49 GMT Content-Type: image/jpeg Content-Length: 151629 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221fbb59ecd61aaeca1810709d68d0288d596586_221" Content-MD5: 66z9hGz+2AzdD9OrNAok7Q== ETag: "EBACFD846CFED80CDD0FD3AB340A24ED" Last-Modified: Wed, 09 Aug 2023 07:26:32 GMT x-oss-hash-crc64ecma: 4073619334956959631 x-oss-object-type: Normal x-oss-request-id: 66511B6C342C483832C36401 x-oss-server-time: 53 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:49 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e30efb44f7e8-BNA
2024-05-24 22:57:49 UTC	668	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 00 77 01 00 e8 03 00 00 00 77 01 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 0c 03 00 00 03 a0 04 00 01 00 00 00 20 03 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipwwimagery40210 ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 03 20 03 0c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 01 08 09 ff c4 00 1c 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 02 bf 2f 3d cb 1b c4 9b 66 73 ad 82 f9 58 73 67 2a 67 59 3b 5b 39 9b 3e 97 14 0c 36 50 06 00 00 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]} X/=fsXsg*gY;[9>6P
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: 8e 24 02 29 33 95 29 80 28 96 50 14 d2 a3 5c 24 36 11 09 84 82 e6 d5 39 75 65 cf be 85 93 25 b1 35 d5 0c da 8f 59 52 b9 12 7a da a3 b5 43 95 cf 67 2b 18 c2 72 86 ba 4d 44 97 7e 13 f7 11 ec ad d4 a6 0a cf 75 af c8 5b 99 7d 72 96 f0 fe da c7 f1 bf b3 0d 90 ae e6 f1 9d 6f 18 33 05 60 d8 e5 70 2f d1 fe 61 33 ec fc 3f 58 a3 4c 18 50 54 5f 0e 07 02 c2 a1 c3 8a 82 70 c1 83 83 74 a1 ce 0f 36 52 1c 74 68 7d 39 51 ba f1 6b e8 e0 39 74 e7 97 af 39 f5 07 5b d1 c6 3a 06 74 45 5d 17 d1 80 c2 08 66 94 4c 30 32 93 06 91 09 84 86 f8 1a e6 6d 6f 97 4a cf 2e d7 4c 4f d4 ca 75 89 ae 91 1a 2b 5b 31 b3 01 14 e2 d3 59 14 7f 2f 75 b2 eb 46 73 ba 3a f0 b2 f4 e4 6b 9a e3 22 47 9a 40 6e cf 78 2f c9 9b b9 45 72 94 f1 fe be c7 f1 3f b5 f4 e6 c8 9d 09 1b 63 5c 00 00 ce fd 1f e6 12 fe Data Ascii: $)3)(P\$69ue%5YRzCg+rMD~u[}ro3`p/a3?XLPT_pt6Rth}9Qk9t9[:tE]fL02moJ.LOu+[1Y/uFs:k"G@nx/Er?c\
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: fe 82 4f ea fc fc db d9 e4 94 f2 f7 ab 7d 1f 21 72 c9 99 33 c3 bd cf c5 ec d1 fe 77 aa 4a 3b 51 23 74 f9 39 5a ec 82 0b 52 c4 c5 76 61 f8 d0 f3 f6 66 24 22 22 24 37 ac 6a 37 c3 5b 37 c9 44 4b 4d 68 cb a7 29 9e b1 63 e7 57 f8 23 86 e6 79 f3 3f a8 34 e3 fa 0e 37 98 9d f2 7c 8e 5f e7 60 fe ff 00 e3 39 b8 19 ee 9b bc 4f 37 ce b7 c9 6e 3f 6b 60 fc 0f ef f4 af a3 fc f2 b3 c2 ee ff 00 a7 f9 d5 0f 17 4d 43 ec 71 7b 6c 2b e7 5f af 7e 9f 2a f6 6f 97 ff 00 9d 7e eb 31 fd 6f de b3 7d 5f e4 ca 4d 7b 53 ae 79 2b 96 fb 37 b3 c4 7c 0b 9e dd ef 3e 79 e6 df ed 0a 79 47 95 2a 7b 03 ac d3 65 44 9a cf 65 eb 5e d9 e5 2e 7b 2d 0a fe 15 14 24 ba 4b 5c d8 df dc 7e 45 b7 6e 6c fe 1f d7 27 dc f8 ed f6 53 8b 4a 75 12 4f e6 fd 2f 45 7c 7f af e6 7f d0 7c 39 2f 37 7a b7 d0 f2 15 65 9c Data Ascii: O}!r3wJ;Q#t9ZRvaf$""$7j7[7DKMh)cW#y?47\|_`9O7n?k`MCq{l+_~o~1o}_M{Sy+7\|>yyG{eDe^.{-$K\~Enl'SJuO/E\|\|9/7ze
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: 93 f1 93 34 1a ae b2 55 8f c7 1e 6f 5b de 55 dd c3 b4 cd e8 6c c0 1d 5d 0c 92 80 01 68 53 95 27 1d d1 d8 e2 e3 83 d8 d5 38 74 58 e9 23 66 19 94 7f d8 fe 65 97 a7 8b ff 00 8d f4 e2 3e b7 cf 26 93 ca 4e 45 59 70 41 e7 0e d3 1c ba d6 3d 7e 75 f8 de cb f0 7e be 97 cf b3 f4 5b 66 ab 5b 99 f7 ab 85 4a 66 db c7 d1 60 6a a2 ac 85 34 2c bc ae 22 a1 ce a1 e2 a3 b3 63 c8 f6 b5 10 63 51 a8 d2 8d ea 7a 35 94 5f 68 71 70 f2 e6 f3 39 6a e5 4c b2 89 a8 cf 93 f6 65 38 c5 63 c1 fb 2a cf af f4 48 f7 ee 5e 9f 1d df d3 fe 54 d5 9d 67 ba ee ea 92 f1 98 df a7 33 57 29 ed d9 72 7f 32 8b 27 17 ae 10 e4 58 9b f2 fa de f3 a3 eb a7 23 58 f5 3a e9 0e b4 f2 b3 a3 9a 95 ce 34 e4 8f 49 78 28 c9 13 b5 87 1a 66 aa 54 38 db bf 17 45 f4 62 4a d1 f9 94 4f d7 fe 71 8f a7 8c 8f c8 fa 50 ff 00 Data Ascii: 4Uo[Ul]hS'8tX#fe>&NEYpA=~u~[f[Jf`j4,"ccQz5_hqp9jLe8c*H^Tg3W)r2'X#X:4Ix(fT8EbJOqP
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: c1 d4 d8 3d 7c b4 7b 92 f2 b4 a4 ea 91 52 ee 6a c5 87 d3 0e 06 9c d2 16 ee e0 e5 50 bc f4 8d ab f4 c6 de 3e 8e a7 4e 4a f4 98 f9 dc eb f4 9f 26 0f d7 e7 9e f0 fa 60 bd fc 09 ae 05 04 b9 bb c1 ff 00 1e 92 dc 95 af 67 22 9c 6c 7f c8 f6 bf fa 7e 53 d4 58 3e 57 a9 d4 54 b7 0e b6 6c a9 3a 2e 27 26 e4 6b 0d e5 eb c9 a8 e0 a7 4e e9 b0 cb 72 15 51 93 b1 9b 9e d7 f4 4f 94 39 d6 75 90 db a4 cf f4 8e 26 d9 13 3f cb d1 33 9b 14 54 13 a3 2b 2f 4a 0c 6e 26 37 5b 63 8c f6 bd dd 8a 73 c2 d3 90 7d a7 d4 d5 19 aa 61 b5 a6 cd c7 11 4c 68 52 af 83 a5 d8 7c dd dd f9 fd 06 dc 28 5d d8 6a 99 6f 5f 2d 1e e5 d7 3a 54 35 4b a1 4d 28 25 a5 48 f8 a3 59 2c c4 84 92 81 0b 14 8f 8f aa f3 47 24 ba 63 19 cc e3 f4 3f 32 13 df e7 98 f9 fe 88 8f 77 14 ef 38 0c de 63 9a 03 9e 37 2f c9 5d f6 Data Ascii: =\|{RjP>NJ&`g"l~SX>WTl:.'&kNrQO9u&?3T+/Jn&7[cs}aLhR\|(]jo_-:T5KM(%HY,G$c?2w8c7/]
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: b1 63 f5 9a fc 55 a3 9a 01 78 ce 4f a3 68 c7 af 34 d6 f7 9e d9 4c 7d 94 12 69 be 8f 26 b3 7c 9e 98 fd 95 25 8a aa 99 b6 84 94 1d 60 a1 94 d0 f4 25 f1 9b 62 63 51 0d 74 3e ad 9e 5e a5 d2 41 70 88 cc 62 32 d3 31 b2 53 0d 58 99 5e eb 33 3d 5b 74 f4 78 8c 5f 39 cd f2 a8 99 d6 4a d3 ae e2 e1 91 64 2a 5a b7 6a c9 41 a9 89 eb da cb d6 69 f3 7e 15 6b 92 5c 9a b9 ba 26 26 5c 39 24 ea b0 ee f1 d0 f7 87 59 8f 2f a8 cc 30 0e 86 0e 03 a7 4e 9d 0c 18 e1 d3 a0 ac d8 7e 8f 06 73 ba 34 55 00 c6 06 b8 f5 e6 33 2a 50 cf 46 65 59 4a cb 72 ba 9c 26 32 cb 3b 7e e8 d7 c9 93 25 c8 cf 19 d2 2e 6b 18 6d 01 a6 55 83 e7 7b ee bf 32 da f3 a9 fe f1 df a5 ce c9 f4 7e 74 de 62 a3 6c 33 a3 42 c9 c2 c9 38 99 da 70 20 cc 66 a8 f1 9a 10 13 a2 64 15 e2 bd 62 e6 e9 2f 2a ab 94 ec 54 3c 5d c5 Data Ascii: cUxOh4L}i&\|%`%bcQt>^Apb21SX^3=[tx_9JdZjAi~k\&&\9$Y/0N~s4U3PFeYJr&2;~%.kmU{2~tbl3B8p fdb/*T<]
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: 63 26 26 5e 67 f5 c4 bf 3a 6d e6 ed 0b c9 6c f5 f1 f5 9c 5e 23 15 92 f2 2e ca ad ce 79 dd b9 b1 8c ef a1 b9 75 f0 77 0e af 38 56 c1 ef e0 87 5e 5a 27 49 d4 b9 75 80 e7 8c e3 52 ca 53 e7 7a 22 66 af de ff 00 3c d7 b7 8c f6 b3 fe 5b e6 ff 00 2f 7b f7 8b a5 9b bc e3 3e ce 3a 07 af 86 a8 dc 1e 12 98 b5 53 4d c6 1b d6 66 23 6b 19 b4 a6 5b 69 97 d6 20 e2 f2 2e c7 ca db 66 43 94 1d e8 e1 b3 19 96 4f 9d ea a1 f7 ed 3b e6 ef 3d e7 eb 57 fb 1f 1d 3b e3 eb 3b bf 46 1f 36 e1 46 a3 1a 87 5d 38 f0 b0 49 71 05 39 4d fa b9 c5 88 e5 fb 3e 3d 59 5f 2a c7 b8 bb ba a6 15 d7 4e 9c 39 22 9c 0a 14 29 33 ef e5 4c 66 97 9b e8 93 c9 c6 ba 6b b2 94 d5 0f 08 9e 51 f5 73 b0 78 3d 59 af 8b d1 66 f5 70 dd 3d 5e 7f 48 45 d3 a5 e5 fe 43 e6 96 d4 2f 4e 3b 45 86 2b 4f e5 d7 11 ad 83 e4 42 Data Ascii: c&&^g:ml^#.yuw8V^Z'IuRSz"f<[/{>:SMf#k[i .fCO;=W;;F6F]8Iq9M>=Y_*N9")3LfkQsx=Yfp=^HEC/N;E+OB
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: a9 00 38 25 a4 44 42 0d 5a 89 ca 9d 9b a9 e5 66 c7 2c c7 5b bc 8d ac f8 c3 77 32 2a 6e 2d a6 91 15 14 2a c9 6b 95 4d 33 9f 4d ff 00 95 4c 15 46 f9 ab 33 6b 2a ba a9 1a b6 1d 8e 0c 54 a4 1e c1 2c 8a 78 42 8e 0b 14 b2 4f 47 2c 5b bf 1e 9c cd ad c5 93 30 a2 8a 68 36 93 56 58 ae 53 1b c6 b3 17 8b b2 f9 cc 84 46 59 ba dd 50 aa 9d c3 0e 7b 43 a9 ca 92 88 5d 7a 69 7e ab a7 86 cc 37 26 06 a4 54 c9 89 26 61 0f 56 a9 39 50 b2 b5 0c e9 be cf 5c 87 8b 36 e5 48 00 18 01 b5 c0 9a 48 6d 46 e3 4d 34 0c 18 51 9d a7 30 7b 06 5c 2c b5 c6 d8 5f 79 dc d1 5b ac f1 a7 5e 55 6b cd ba 2e f9 cf 7c ff 00 df 94 65 0e 2d 39 64 a9 b0 70 ed 28 5f e6 fc e3 cf a3 fb 8f 4c 33 05 2d c5 86 5b 21 8e f5 e7 92 f7 e7 a5 79 fa ed 5c ba ab 4a e1 4a d9 dc 21 9d 74 61 7e 8f 3d 5f 28 82 59 32 76 4a Data Ascii: 8%DBZf,[w2n-kM3MLF3k*T,xBOG,[0h6VXSFYP{C]zi~7&T&aV9P\6HHmFM4Q0{\,_y[^Uk.\|e-9dp(_L3-[!y\JJ!ta~=_(Y2vJ
2024-05-24 22:57:49 UTC	1369	IN	Data Raw: 4e 0e 76 ab 4c c2 2a 66 82 fe 7b dd 9a 7d 7e 3e 90 f4 f9 f2 43 77 cd ce 69 62 c5 c8 8c 12 24 55 13 51 49 4e 0f d6 62 2e 65 ea 53 1b 49 1d ab 05 4b 9b c1 a8 2e 5a ca 69 fd cc ad 62 85 4f 85 2d 47 43 9a 4c 5c ca c5 6e 5c 3a 4f 73 e9 8f 60 c4 47 ab 86 7d 89 5f 3f 7d 01 99 c6 34 16 fa 62 19 bf 49 f3 27 a7 99 34 c6 4a e9 60 4b a3 cd 45 c8 a4 f3 7d 57 c3 b6 74 d9 54 a0 50 3a 73 a4 f5 96 18 6a 47 72 a9 3f 2d db 76 d9 58 d3 50 64 a6 ce 63 8d 38 a2 14 4a 2f 07 88 de 17 ed 0a 79 3a a3 c7 77 2c 45 b7 16 4b a2 40 5f 29 d4 a5 92 bd 16 dc 64 e9 ea 6b db 4c d5 a6 17 18 11 b4 db 9f 3c 79 fa 59 3e 17 d1 a8 fd 5f 23 9f 7f 9e 77 1e 81 d4 46 e2 e4 3e 1e 8f 34 d6 90 19 94 de b3 82 75 e5 61 b9 36 8e 24 56 b9 53 dd c5 ec eb 51 53 45 9c 5d 2b ea c3 d4 d8 69 22 e6 c8 d4 2d ba a6 Data Ascii: NvL*f{}~>Cwib$UQINb.eSIK.ZibO-GCL\n\:Os`G}_?}4bI'4J`KE}WtTP:sjGr?-vXPdc8J/y:w,EK@_)dkL<yY>_#wF>4ua6$VSQSE]+i"-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.5	50116	47.254.123.175	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:49 UTC	616	OUT	GET /buyer/express/free-express HTTP/1.1 Host: www.cravob.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssid=221; utuni=1c8d6811c7c6ac66e9b0f1b91a7623c1de437aae0cdca0f37c998bbf4c0fb906a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22utuni%22%3Bi%3A1%3Bi%3A114475774%3B%7D; client_id=1716591390107468; _fbp=fb.1.1716591400298.1601704377; ga_utm={"handler":"whiskys"}
2024-05-24 22:57:50 UTC	309	IN	HTTP/1.1 200 OK Server: openresty Date: Fri, 24 May 2024 22:57:49 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: ssid=221; expires=Sat, 25-May-2024 22:57:49 GMT; Max-Age=86400; path=/; domain=www.cravob.com; HttpOnly
2024-05-24 22:57:50 UTC	82	IN	Data Raw: 34 37 0d 0a 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 76 61 6c 22 3a 30 7d 2c 22 6e 6f 77 22 3a 22 32 30 32 34 2d 30 35 2d 32 35 20 30 36 3a 35 37 3a 34 39 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 47{"code":0,"msg":"success","data":{"val":0},"now":"2024-05-25 06:57:49"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.5	50120	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:49 UTC	626	OUT	GET /uploader/fe4f80c9b0b21a593c4baba7f41c5d30de03b1ee.gif HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:50 UTC	680	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:50 GMT Content-Type: image/gif Content-Length: 471104 Connection: close x-oss-request-id: 66511B6ECB42C43633013848 ETag: "A9F22836FA16D2B5DE903EFB5EA30388" Last-Modified: Wed, 09 Aug 2023 07:26:51 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 14523945287021205172 x-oss-storage-class: Standard Content-Disposition: inline; filename="2211edbbddc211f568e8204f4350035fbfc90752_221" Content-MD5: qfIoNvoW0rXekD77XqMDiA== x-oss-server-time: 120 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e30f8c67f7f0-BNA
2024-05-24 22:57:50 UTC	689	IN	Data Raw: 47 49 46 38 39 61 e8 03 e8 03 f7 00 00 57 93 b3 00 1b 30 b0 60 56 00 63 8e 00 74 9e a8 a8 a6 db 1c 03 71 14 0d 00 51 7a 00 8c bb ba ba ba db db db 9e c9 dd f6 ac a1 99 99 9a e8 20 04 ca cb cb 00 7a a9 86 86 86 00 53 79 00 a7 d7 00 0e 23 78 78 79 0d 41 55 8e a7 b6 55 55 55 63 64 64 40 41 42 32 32 32 1b 1b 1c 00 5a 86 00 6b 97 00 85 b1 00 7c aa 00 34 55 00 65 8c 0b 0b 0c bc 49 2e aa 10 09 ec 6a 53 a0 d2 ed 06 78 9d 66 87 98 f4 c3 b8 3d 64 77 00 36 56 69 b8 de f9 8e 72 ec 4e 28 4f b6 e0 2f 85 ac 00 2d 48 51 af da 3c 57 6c 00 40 59 a4 bc cd 84 9b ae 13 34 48 36 a7 d0 5b a7 cc 04 95 c0 42 9d c9 61 7b 8e ac 1e 07 00 85 b5 d6 e8 ee c9 df eb c1 93 8e 00 24 3e 00 30 47 00 49 66 00 5a 83 7e 4b 4b 00 49 75 88 bc d9 a2 2d 1f f9 d6 ce 25 8d b7 b2 ca b7 00 95 ca 7f c7 Data Ascii: GIF89aW0`VctqQz zSy#xxyAUUUUcdd@AB222Zk\|4UeI.jSxf=dw6VirN(O/-HQ<Wl@Y4H6[Ba{$>0GIfZ~KKIu-%
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 63 97 00 49 63 0f af e1 44 a7 d9 00 6b 9f 38 95 c4 e2 ef f1 00 40 6d f7 f7 ff 00 49 64 e8 e8 f0 02 07 03 ff ff f7 ff f7 f6 f5 e8 e8 0c 17 1a ef ef e7 f4 ff f7 20 2d 24 00 95 d1 e5 ef e6 ff f7 ff 28 a7 e1 fa ef f8 00 9d d2 f3 e8 f0 3b 92 b1 32 95 d1 00 24 4a 4f bf eb ff ff ff 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 Data Ascii: cIcDk8@mId -$(;2$JO!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:3
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: b8 73 eb de cd bb b7 ef df c0 83 0b 1f 4e bc b8 f1 e3 c8 93 2b 5f ce bc b9 f3 e7 d0 a3 4b 9f 4e bd ba f5 eb d8 b3 6b df ce bd bb f7 ef e0 c3 8b ff 1f 4f be bc f9 f3 e8 d3 ab 5f cf be bd fb f7 f0 e3 cb 9f 4f bf be fd fb f8 f3 eb df cf bf bf ff ff 00 06 28 e0 80 04 16 68 e0 81 08 26 a8 e0 82 0c 36 e8 e0 83 10 46 28 e1 84 14 56 68 e1 85 18 66 a8 e1 86 1c 76 e8 e1 87 20 86 28 e2 88 24 96 68 e2 89 28 a6 a8 e2 8a 2c b6 e8 e2 8b 30 c6 28 e3 8c 34 d6 68 e3 8d 38 e6 a8 e3 8e 3c f6 e8 e3 8f 40 06 29 e4 90 44 16 69 e4 91 48 26 a9 e4 92 4c 36 e9 e4 93 50 46 29 e5 94 54 56 69 e5 95 58 66 a9 e5 96 5c 76 e9 e5 97 60 86 29 e6 98 64 96 69 e6 99 68 a6 a9 e6 9a 6c b6 e9 e6 9b 70 c6 29 e7 9c 74 d6 69 e7 9d 78 e6 a9 e7 9e 7c f6 e9 e7 9f 80 06 2a e8 a0 84 16 6a e8 a1 88 26 aa Data Ascii: sN+_KNkO_O(h&6F(Vhfv ($h(,0(4h8<@)DiH&L6PF)TViXf\v`)dihlp)tix\|*j&
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 32 00 0b 3d 08 e2 56 52 c8 6b 76 09 cb 5d db 91 e0 56 ec 28 c3 01 7e 70 87 1f 1c 80 12 b4 da 28 2d b7 88 d8 2e 26 76 06 23 e5 80 49 3f b1 81 0b c8 42 b2 d0 68 16 1b fb 75 59 0e 2a 03 66 29 00 40 1b e4 f0 8a 58 00 c2 0f b1 f0 a6 1f c0 80 0b 5c 64 e0 a8 1a 78 ab 05 f0 d0 d0 86 02 c2 c1 a5 90 43 1b 2c 20 87 da 42 40 05 ca 28 44 44 29 31 0f 0e b4 36 8c 7e 98 80 11 ea 76 49 b0 e2 6f 96 40 93 02 3c fe c6 5c 44 b5 83 19 bd 60 eb 22 18 31 61 50 70 c0 ba 83 cd 95 46 39 ba 2d 23 62 eb 12 47 d6 24 b7 fe 59 01 78 90 a0 02 24 08 f2 17 c4 4b 5e f3 52 82 b0 c7 a5 65 c2 b2 95 2d 6c cd a0 1f f0 e5 80 18 c9 58 49 95 12 83 b2 fb e5 d7 08 b2 70 86 5b 10 e0 ff 16 60 b8 c0 25 b8 00 06 3c 14 c0 0d 12 d0 c0 01 55 d0 06 3c 38 58 03 48 ad 85 a0 07 dd 87 a4 6e a0 0f 59 b5 80 05 24 Data Ascii: 2=VRkv]V(~p(-.&v#I?BhuY*f)@X\dxC, B@(DD)16~vIo@<\D`"1aPpF9-#bG$Yx$K^Re-lXIp[`%<U<8XHnY$
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 80 05 8b 19 09 f9 38 99 02 39 71 58 e9 04 78 b8 2d ce b6 09 e3 45 5e ab b7 51 6a b9 45 f3 17 00 45 a0 54 7e b0 01 39 60 4b 60 84 91 28 25 30 bf 94 46 08 70 06 7e e0 91 71 73 09 5f 48 02 1c e0 07 1c 70 97 2a 98 03 17 b0 0f 3e 90 03 b3 06 0f 7e a0 01 ba c9 01 d5 d7 58 8d 05 08 73 05 0f 77 d9 37 d8 24 05 80 10 09 1a 10 08 2c 70 43 34 b5 4c bb c8 8b 2d 35 01 5c 90 05 9d 30 09 46 ff 60 2d da c2 45 00 45 2b 7a d0 06 b6 b7 95 26 52 31 ed f0 0e 2b c0 07 2b 70 84 28 64 8d 79 50 96 75 75 96 76 25 4b 4f d6 2d 82 70 3f 45 f0 73 35 c0 02 66 70 08 7d a0 4e 2f 99 74 f3 00 6f bc c0 0e ec f0 05 ec c8 8e 3d e9 8e 4c 17 98 f0 06 0f d8 94 4d 75 65 57 51 96 86 01 49 99 94 19 09 25 30 a2 8c 39 99 6f 88 0b dc 06 90 f9 78 a2 49 67 62 82 00 08 8e 56 2d 9b 44 2b 24 30 5e 77 70 07 Data Ascii: 89qXx-E^QjEET~9`K`(%0Fp~qs_Hp*>~Xsw7$,pC4L-5\0F`-EE+z&R1++p(dyPuuv%KO-p?Es5fp}N/to=LMueWQI%09oxIgbV-D+$0^wp
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 79 90 ad c0 e4 43 6b 84 41 1e 30 02 c7 84 4c ff 55 2f 04 90 08 0a c5 78 16 80 9c 1b b0 68 05 40 8a 68 80 01 97 ff d3 42 9f a5 55 7d 30 0f 42 73 71 79 39 aa f0 4c 02 7a d0 2f 47 20 3f d6 c2 c1 c7 a5 ac 1a 15 cc b5 52 01 87 00 01 b1 8c 1d e8 12 45 15 2b 07 3e 50 0a 35 b0 cb ca 6a 2b ba a2 51 0a 83 3f 5d 5d c3 c1 7c c3 ca 7c cc 35 2c d1 36 1c 9a c7 cc cc 7d 88 4d 6b 79 09 b0 83 03 0a e0 b2 d6 5c b3 d7 f7 08 ab 77 00 dd ec c4 16 7a c4 e3 fc bb 4e 07 c5 7c 69 89 2c ba 85 5d e8 aa a3 60 cd 26 76 60 82 36 4f 66 60 06 93 d0 05 67 90 05 6c 36 a0 ae 02 06 46 40 95 47 96 30 01 ed 64 05 ed 5d b8 32 58 3f 1c 34 09 5d 2b bc a0 d6 39 0a 7f 56 bb 5e 6b f9 51 15 8d 49 f8 64 03 1c b0 04 fd d7 88 15 c4 43 22 7d 59 6f a4 0c e5 30 b0 84 77 4a 2c ab 02 78 10 65 b8 d0 07 12 90 Data Ascii: yCkA0LU/xh@hBU}0Bsqy9Lz/G ?RE+>P5j+Q?]]\|\|5,6}Mky\wzN\|i,]`&v`6Of`gl6F@G0d]2X?4]+9V^kQIdC"}Yo0wJ,xe
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: b4 09 5e 07 3d 97 29 af 1f ab fe f3 63 cb ed 19 ab a7 ff de 3e e5 cb 6e db 3b 6e fb 39 7f 7e f9 16 02 d0 3f c5 e4 53 4f 20 82 a8 2b 03 a9 0a 48 78 c9 31 ff da 6a a9 08 c1 04 0b 8c 42 0a 2f 21 c2 2d 86 0a f3 50 26 a7 6e 9a c9 b0 99 40 94 89 03 0d fc e8 49 0f 15 95 6a 8a 28 c3 6e e2 05 29 5d 70 8a aa c6 35 6e d2 65 c6 32 ac a2 64 ab ad b4 ba aa bc 0e 1c 5c 6f 40 98 dc bb ef 48 b7 de 8a eb 92 19 5a 6a 09 2c c7 d2 52 6b be cf e2 5b 92 ad 96 d4 bb e4 82 22 f0 33 f0 2c cb 32 a3 ec ca 2c d7 fa a2 cc c7 02 18 ad 34 e3 e2 94 73 4e 3a eb b4 f3 4e 3c f3 d4 73 4f 3e fb 64 cd 1d 3e 98 1b e2 85 21 4e a0 45 3a 13 ee c0 ff ee 3a 45 09 4a 34 bb 04 23 fd 2e 41 ed b8 a3 ae 20 ef 3e 09 4f bc af 3a 28 cc be fe fc 0b f0 b1 30 41 65 6b d4 53 25 54 32 80 02 d9 73 f5 d5 87 26 3b Data Ascii: ^=)c>n;n9~?SO +Hx1jB/!-P&n@Ij(n)]p5ne2d\o@HZj,Rk["3,2,4sN:N<sO>d>!NE::EJ4#.A >O:(0AekS%T2s&;
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: d1 0e 97 a3 ef 81 c8 53 4b ea a1 0e e4 34 83 1a a4 54 64 27 aa b9 89 7e 8c a1 91 55 70 e8 40 a7 c9 88 46 b6 85 98 bd e8 6d 3b db 25 54 ba 25 c3 16 16 c4 69 0f 42 93 06 81 08 2c 51 cc 69 b7 10 e2 29 74 01 f6 ae a4 b5 70 93 f0 75 5b 33 e6 d5 95 b2 f3 ad 85 3d aa ca f2 d5 18 a8 52 7d 88 7f 5f c7 2a 24 5d 53 3e 97 b8 90 36 cf 96 bd f7 ed ab 8b 6e ff 63 1f 0b c2 fb 64 28 47 59 ca a9 b1 46 79 bd 80 83 b6 b2 60 03 17 d0 43 59 6a 12 00 c0 58 95 3d 9c 0d 95 70 61 35 da f3 79 36 c7 41 56 9f 62 fe e3 e6 fc aa 92 43 01 ae 9e e3 08 cc c1 13 66 12 53 26 54 b0 09 f7 ac d8 08 3f f6 73 12 fe 41 06 b3 76 ba c2 c4 b9 c5 69 7e b1 f6 88 00 8f 3c cc b2 d0 53 14 26 2c 4e f7 e2 db 62 1a 22 7c 65 e5 54 d3 86 cd 55 6e b6 d1 68 6e 0b 4b 22 54 04 6c c8 77 d1 e5 db 2d 80 7e ec 69 fb Data Ascii: SK4Td'~Up@Fm;%T%iB,Qi)tpu[3=R}_*$]S>6ncd(GYFy`CYjX=pa5y6AVbCfS&T?sAvi~<S&,Nb"\|eTUnhnK"Tlw-~i
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 1c bc c1 a3 90 16 b8 00 fe ab b8 7c 79 3e b2 64 9d 92 12 ac a9 f2 a8 f8 11 39 ff e6 72 ae dc fc 21 4e 04 9f b0 33 45 3a 9c 3b 9f 0c ca 14 3c 41 a0 6c 45 a4 34 c1 a3 34 c1 12 94 ce 59 64 4a ed dc 4e 85 79 bd 5f 88 3d a9 ec 0b 43 32 8b 69 ab 2b 7b 52 8b d5 61 88 6a 6b 8b 0e d1 30 1f 4c bc f3 09 c4 2a fc c6 22 28 84 43 00 03 73 74 42 af 63 b1 2a 94 92 a6 8b 08 91 ec 3b 3f 24 c7 76 14 c7 79 7c 8b 2e 54 47 c3 14 c4 fa 23 d0 6f 54 4d 8d 1c c9 08 9d 50 87 6c 4d da 2c 02 1f c0 81 1c 08 49 79 a4 d0 08 75 12 2e f4 a7 4b e0 be ee 1b b4 c7 24 bf c9 fa a0 7b 3b b0 ed e8 a4 36 ec 24 c9 31 00 19 25 c1 12 24 83 3c 98 81 90 c4 d1 cf 84 8b 8b 2c cd d3 cc c8 d0 84 50 89 5c c4 8e 64 95 54 fb d0 26 e1 3b 00 7d c4 8c 73 8b 04 8c c2 e8 eb b4 9f 5a 31 58 33 b9 31 0a a9 fc 70 1f Data Ascii: \|y>d9r!N3E:;<AlE44YdJNy_=C2i+{Rajk0L"(CstBc;?$vy\|.TG#oTMPlM,Iyu.K${;6$1%$<,P\dT&;}sZ1X31p
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 03 90 b5 0f 5c 70 80 5f 48 e4 ef 6c 03 3c 50 01 07 98 03 4a 66 59 66 83 84 3a 50 80 39 58 04 08 f0 82 b4 82 80 52 d0 83 fc 49 b3 96 7c d7 e9 bb 80 42 18 ba 45 9b cb da 3c 84 36 50 01 30 d0 da df 53 65 56 1e 47 10 7d d0 6d 24 c7 cc cb c3 5b 9e da 0f 9d 50 ff 35 db 2d 1c 60 bd 1e db 89 6c 47 6d 76 cd 62 36 66 0c a9 cd 0b b1 01 a6 a3 10 6c 28 66 23 b8 10 f2 0d cd 42 08 49 c3 be 66 30 b8 00 6c 98 08 0c 60 01 23 38 db 0a e9 eb 89 94 8b 2d 04 d7 d2 1c e0 c0 0a 67 c5 a0 0b 03 de e0 10 fe ec 8a fc 6c 1e c5 d1 16 10 81 b9 88 6d 11 b8 00 ea 6c e7 80 2d 58 77 ae 4e a3 74 d3 d6 1d 58 ff 14 cc 61 cf 5e 57 c3 3d dc d2 2c 49 7d b6 65 21 e5 df d8 7c 8b cc b3 4b 92 24 40 56 09 c0 6c e4 6a 23 24 b3 c4 84 05 3a dc e2 55 3c 63 d7 2d dd 81 6d d3 d3 ad 61 8a de ed 86 5d 02 17 Data Ascii: \p_Hl<PJfYf:P9XRI\|BE<6P0SeVG}m$[P5-`lGmvb6fl(f#BIf0l`#8-glml-XwNtXa^W=,I}e!\|K$@Vlj#$:U<c-ma]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.5	50121	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:49 UTC	393	OUT	GET /uploader/b8ad5401dfbf111b38bcfd098e58a9a0044e7e9d.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:50 UTC	702	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:50 GMT Content-Type: image/jpeg Content-Length: 179764 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="22149727484c93476f90b52d455437bc68095382_221" Content-MD5: MlKVAUC8oDj2Hg/hJinRdQ== ETag: "3252950140BCA038F61E0FE12629D175" Last-Modified: Wed, 09 Aug 2023 07:20:49 GMT x-oss-hash-crc64ecma: 9297115210901135626 x-oss-object-type: Normal x-oss-request-id: 66511B6CCB42C43730B62A48 x-oss-server-time: 158 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e30fdb97f7f8-BNA
2024-05-24 22:57:50 UTC	667	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 00 77 01 00 e8 03 00 00 00 77 01 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 e8 03 00 00 03 a0 04 00 01 00 00 00 11 03 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipwwimagery40210ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 03 11 03 e8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 01 08 09 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c1 b0 d0 8a Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}X
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: e2 b0 18 50 7e 3c 1e 0c c7 04 41 2a 18 86 26 85 42 9d 21 09 30 e2 1b 9e 0b be f8 bf 2e 92 cd 71 15 65 e5 ea a9 d7 27 37 e2 25 2f 33 da da 98 bd cc e1 0d 95 23 cb db 1e f5 33 5d ee fc bf 4a fa fc 80 13 4d c4 33 50 dd 8d 9e b5 e8 f4 41 cf 6b 2f 5f 99 0f b8 f5 98 d4 b1 72 ce 46 0c cd 24 c7 0b 69 55 0c 48 17 33 11 2d a7 b0 28 b8 a0 98 c8 54 8e 1f 0f 03 8d 86 22 e3 a1 30 c3 31 b8 60 e3 c1 30 a7 47 01 02 0e 02 8f 85 c6 62 e4 80 f8 44 44 b1 8b 0b 8d ce 87 00 50 c7 06 c2 24 80 06 43 c3 a4 78 f4 e9 5c 2c 62 03 32 44 6c 56 88 f2 d2 4d 90 83 61 c1 c2 74 29 55 27 87 a4 16 6f 4a ea 67 94 ad 4f 87 3d 3c 31 6f 3f a5 ab 9e 87 1e c9 cf 1f d3 a8 79 be f2 9e cf cf 3c af 1d 2f ac 36 ae 47 54 97 3e b3 0b 79 1e 94 67 db 1c ec b4 75 d4 ab cd ea 3f 5f e6 10 21 f9 7b b0 0f 9f fb Data Ascii: P~<A*&B!0.qe'7%/3#3]JM3PAk/_rF$iUH3-(T"01`0GbDDP$Cx\,b2DlVMat)U'oJgO=<1o?y</6GT>ygu?_!{
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: b9 7b e0 63 dd 03 cb dd 05 cf e8 40 4f be 17 9f b5 29 fa 0b 47 7e 4f a3 a0 9a de 3e bf f2 5f 56 fd 0f c2 a4 45 13 c1 48 83 e6 00 25 69 36 52 c4 63 c6 60 7a 1c f5 99 36 78 54 c5 0f 53 1e 73 21 4f 78 d2 ae 78 da 40 00 2d 07 ae 48 6a 03 d0 87 03 8b 00 01 43 09 8a 00 6c 66 24 41 4f 4c 81 4d 33 23 5b 2d a1 4c 5c d2 45 c8 62 c8 45 86 30 a5 7a 7c bf 16 b1 e1 c1 c1 1e 24 34 32 e2 da 66 45 20 8b 4d 98 f4 02 91 22 ca 99 04 9c dc b3 0f 06 5b 5a c7 d1 f2 b3 f5 71 2d 0e a2 24 d2 26 06 e1 02 04 09 52 40 9b 80 e3 38 68 fe 0f 5d 5f e7 fa a2 4f 3a 7c bf e8 f7 fe bf 88 ca bc 3f bc f5 1f dc fe 74 ff 00 78 5d 09 8d dc 63 cb fa 2f 30 fc 4f ee 23 34 00 00 00 00 00 00 de 3e b7 f2 1f 4e 7b ff 00 0e 83 64 07 64 68 63 e6 99 0b 25 8f 78 53 50 3c 7d 2f 3d 1e a3 a7 a8 86 d2 f9 a8 47 Data Ascii: {c@O)G~O>_VEH%i6Rc`z6xTSs!Oxx@-HjClf$AOLM3#[-L\EbE0z\|$42fE M"[Zq-$&R@8h]_O:\|?tx]c/0O#4>N{ddhc%xSP<}/=G
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 99 80 95 42 e0 2e 2c 3b 1f 0f 07 07 45 c5 0c b0 ab 12 43 64 b8 21 cd 24 7a 2e 14 50 68 79 ec c2 c9 50 a3 a3 41 34 d6 be 6c 09 96 25 c9 b9 94 42 19 54 42 d8 98 82 ba 45 0c 14 42 6d 32 26 8e 6d c6 50 ab 50 eb 16 ef a3 e7 75 e9 e2 98 5e 92 53 87 02 24 ad 2a 52 00 04 f7 48 cd 9f e5 7b 72 6f 37 67 27 99 0a 19 ea 82 d2 10 bb 9a 0b 30 5f 3f e8 71 9f c1 7e a3 d6 5f d0 bf 9b 79 06 f7 dc 27 92 cd 64 cc f1 e9 b2 91 88 5a 29 c7 70 8f e7 5f d7 2d 9f bc fc f7 ac bd ff 00 82 85 6f 9f 4f 22 c8 e4 b1 0c 00 e1 0d c8 db 4f 10 17 12 c0 65 c7 ad 0f 4b d3 e5 94 0d a0 00 1e c7 36 72 a2 78 7c af 9d 3e a2 d1 e9 c1 99 e7 92 3c 96 25 47 02 83 f2 40 76 2c 2e 28 28 67 45 08 90 22 13 71 29 a5 f8 7c 48 95 e3 3c 2f 46 2c 60 27 4b 08 f0 6a 4b 12 45 dc 6c 4b 0c c9 01 fa b5 e2 30 80 33 82 Data Ascii: B.,;ECd!$z.PhyPA4l%BTBEBm2&mPPu^S$*RH{ro7g'0_?q~_y'dZ)p_-oO"OeK6rx\|><%G@v,.((gE"q)\|H</F,`'KjKElK03
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 25 7c 39 b8 de e1 3c 91 6e 4e 97 33 6d f9 3e cc 73 2e 1c f3 99 02 5a cd 80 95 34 62 c6 cc 8f 8f de f2 5f c0 fe e9 ca e0 8d f9 5d d7 cf b0 74 f9 d6 0e 9e 19 fe bf 3e c3 d7 e7 cf 74 f0 58 3a 78 67 ef c5 68 71 94 d1 99 1e 18 94 23 07 03 12 44 70 20 2d a5 70 9a 79 35 56 b0 4b 2b 38 e9 09 56 34 e9 11 bd 62 3a e1 bf 59 6d 52 8f 58 1b 8b c5 d1 be 07 d2 86 c5 94 8d 20 09 a2 cc 79 58 5c 06 e0 5c cb 32 af e3 c1 d0 63 2a 3c da 9b 41 97 ab dd 22 46 18 27 29 72 85 39 58 5e 71 72 47 54 73 93 ad 5f 76 66 05 4c 64 8f 57 b1 ba c4 b5 e7 8f 38 54 54 d7 63 da 5e 9e 52 24 31 22 cd 26 cb 2e e3 0a 94 f0 f8 77 8d c8 ce 69 44 96 96 5c bb 47 a2 fd 9c 79 b8 5a ce 60 24 05 a1 0e 50 a1 58 30 5a 14 e3 0a dd bb e4 fb 71 f9 d8 83 31 1e 14 23 58 26 cd 18 98 6b 17 4a 77 2f 54 f5 f9 ec ee Data Ascii: %\|9<nN3m>s.Z4b_]t>tX:xghq#Dp -py5VK+8V4b:YmRX yX\\2c*<A"F')r9X^qrGTs_vfLdW8TTc^R$1"&.wiD\GyZ`$PX0Zq1#X&kJw/T
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 9e 88 35 ac 6c 32 62 f3 5e 98 f9 3e dc 58 83 28 06 1a 55 8f 55 16 c9 56 be e7 c9 81 fa df 2e 67 cd e8 f4 1f c0 fb 79 47 d4 f9 fa cf cb f7 e3 ff 00 5f c1 b5 7c 6f a3 e6 9f d2 fc 25 57 b0 7c 4f a5 9d 7d 1f 1b 2e f0 ac d1 c5 a7 5c cd 2b 05 f2 d6 8a 54 33 54 0f 94 a0 ac 52 f0 51 46 3b 34 61 4c a5 85 20 60 1d 14 cd 01 77 08 57 3c fd 31 4e 17 1f b9 6a 11 55 e8 f3 32 60 5b b8 b3 11 15 2f a3 21 22 54 9b 25 48 93 cd aa 6a 48 d6 69 fc ba ea f3 bb d7 5e 54 56 63 ac a8 0e 4c d0 4c 48 d9 0c e4 aa 84 ca dc 69 eb 9f 47 25 f5 c3 87 00 17 45 38 70 2d 67 02 80 26 88 26 70 2d 49 04 a8 51 34 94 4c 20 46 70 2e 80 40 a2 15 3d 09 a4 04 2b 14 1b b1 f4 df a1 7e 4f b3 0a 23 04 0c 18 ad 1e 92 27 0a 97 d9 f9 70 bf 5b e6 3c e3 db 6b f8 7f 56 2f bf 19 7e 5d f1 8f b9 f2 7d 05 f9 df b5 Data Ascii: 5l2b^>X(UUV.gyG_\|o%W\|O}.\+T3TRQF;4aL `wW<1NjU2`[/!"T%HjHi^TVcLLHiG%E8p-g&&p-IQ4L Fp.@=+~O#'p[<kV/~]}
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 59 98 c7 ae 11 8e a4 ef 9e b1 28 dd 26 8b 6b 1e 6d 58 61 52 9e 94 62 65 8a 57 68 ab 3b 55 11 d7 0e 54 a6 75 89 0d 75 77 f3 5e c1 f3 fd 78 e9 58 00 b1 14 18 72 32 fa 9e 06 3f 53 c2 cf 37 44 f9 9e b6 5d a6 77 cd da 4e 50 7d e5 e6 54 7d 42 ca 46 a4 c1 a4 7c 71 44 a2 ad 56 07 8a 50 33 54 15 9a 50 34 d1 c5 33 4c 09 1c ee 3a 18 e8 00 14 02 20 15 9a ae 70 bf 3c e4 b7 2b a6 64 20 a2 86 4c 81 ac 17 a2 38 50 c3 0a 79 e8 1d 44 cb 35 d5 90 f6 9f 79 54 97 e9 90 1c aa a9 c6 fc c6 6c c9 b8 9e 3c 3d 04 7a 0f b3 c4 7c d4 69 36 2f 86 7c 58 b1 e8 3b 6c 7f 47 81 37 38 c2 05 d7 02 63 86 61 ac c6 92 93 ac a9 b0 72 db d4 e9 2a 5c cd f3 54 cb 9c 87 a4 a2 48 44 c8 97 1c b8 2b 56 10 d6 8f 47 46 c3 ca 94 a2 69 e0 8e 9a 54 a3 b8 34 8e ed ff 00 c5 d7 62 f0 7a b2 12 a0 2c 2c 33 3a 20 Data Ascii: Y(&kmXaRbeWh;UTuuw^xXr2?S7D]wNP}T}BF\|qDVP3TP43L: p<+d L8PyD5yTl<=z\|i6/\|X;lG78car*\THD+VGFiT4bz,,3:
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 0e 30 c3 89 ae 89 6e 20 13 4a 49 2d d5 86 9b 8d 79 56 11 e2 e9 7e 2b e7 9d 4f 62 e9 e7 d2 f3 d6 29 17 9b 7f 6c 6f 83 af 9a 39 5c 61 5f 4e e8 7a 6b d3 0c 7b 4c 5f 4e 75 6e e8 6e d3 2f ca a7 f8 eb 18 49 e5 33 a2 7e 4e 8c 78 5d 6b 32 34 b8 9e 65 3d 4d db 1f fb 78 a3 c6 b1 ff 00 1f 5a 2e 0c 52 89 13 6b dc dc bd fc 8d b4 a1 1f b3 9a 97 b8 df 32 f7 95 e7 64 c9 02 1f ac 3d 91 f0 e3 35 52 3a f1 03 b2 78 a6 b5 2a 1c 38 17 0d e9 23 b0 94 d4 6d 62 e4 b3 35 40 db 20 e5 0a 14 d7 be 5f aa f7 e6 ed 92 15 32 30 95 16 0a 40 10 bf 43 c8 cf e8 f8 ae 53 6b 45 a8 1a 75 50 65 00 cc 38 e3 28 e7 67 5d c9 69 a4 86 96 6a 0d 38 94 7d 6f 34 bc ec a4 53 f9 d7 47 2a 40 a4 6a 83 6d 96 1d 4d 76 4e 39 e7 68 58 66 13 07 c9 8c f2 fa 3c dd e7 ad cd 99 01 43 3d 91 d1 44 fa 3e 74 08 c2 26 aa Data Ascii: 0n JI-yV~+Ob)lo9\a_Nzk{L_Nunn/I3~Nx]k24e=MxZ.Rk2d=5R:x8#mb5@ _20@CSkEuPe8(g]ij8}o4SG@jmMvN9hXf<C=D>t&
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 5f 1b ed c8 f8 a6 67 c3 f6 f5 9f df fe 15 6c a6 7e 5b 98 2a ac f3 e5 44 9a b4 ee b9 7d eb 03 75 ce 0d 0a 27 37 95 39 5d 70 e1 70 2b 86 8b f5 39 23 50 61 20 c0 16 1f 8f 87 c9 84 05 52 23 96 26 29 84 75 25 25 62 ef 9c 2a a3 de 60 bb f2 21 10 a9 c9 5c 38 de 84 c9 66 74 15 89 d1 be c3 4a 44 54 6e 7f 1f df 37 15 99 94 31 90 a8 e0 6e 21 a1 ec f3 af f4 bc 6e 22 d4 ac e8 e3 95 c9 79 7b 89 d3 ad e4 e4 8c a2 66 9d 0c b2 f1 88 6d 74 8d 2b 2d b2 a6 bf d5 68 f5 f9 53 53 40 d5 3c 91 94 e2 0b 61 4a 3a 9a 30 6d 38 8e ad 58 d6 f8 31 c9 65 74 8e 9b 8e f8 54 97 87 d1 58 4e 2e 58 cd 77 e8 f2 af 74 87 42 c7 02 e6 c4 70 e9 80 78 ae b6 48 9e b5 b4 c7 b7 9f 75 d9 2d 98 b6 2a 3f 0f e9 66 7d 38 4a 7e 6f f4 f9 5f 1f b1 eb 4f d8 fe 22 e7 e9 f0 56 39 d6 77 93 4a 29 b5 8f 15 b2 de 69 Data Ascii: _gl~[D}u'79]pp+9#Pa R#&)u%%b`!\8ftJDTn71n!n"y{fmt+-hSS@<aJ:0m8X1etTXN.XwtBpxHu-*?f}8J~o_O"V9wJ)i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.5	50124	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:50 UTC	468	OUT	GET /liquid/buyer/public/img/payment/paypal.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-1516" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:50 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:50 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-1516" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183517 Expires: Sat, 25 May 2024 02:57:50 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e3131ea9f7d4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.5	50125	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:50 UTC	466	OUT	GET /liquid/buyer/public/img/payment/visa1.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-e1e" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:50 UTC	609	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:50 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-e1e" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 183517 Expires: Sat, 25 May 2024 02:57:50 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e31329baf7e4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.5	50122	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:50 UTC	706	OUT	GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-2f86" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:50 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:50 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-2f86" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367951 Expires: Sat, 25 May 2024 02:57:50 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e3131cf7f7c4-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.5	50123	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:50 UTC	703	OUT	GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-20a8" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:50 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:50 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-20a8" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 191795 Expires: Sat, 25 May 2024 02:57:50 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e3132971f7ec-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.5	50127	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:50 UTC	392	OUT	GET /uploader/a70350d2dda8813e43ac84a691f0a381847dfb75.png HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:50 UTC	688	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:50 GMT Content-Type: image/png Content-Length: 1089898 Connection: close x-oss-request-id: 66511B6CD5610430390D8141 ETag: "4613FD07C2164988EF0C8084FF5AD630" Last-Modified: Wed, 09 Aug 2023 07:26:37 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 17443365684541304603 x-oss-storage-class: Standard Content-Disposition: inline; filename="22117681052e222d9ca330eed2735d1274c27593_221" Content-MD5: RhP9B8IWSYjvDICE/1rWMA== x-oss-server-time: 230 CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e3138a4df7e4-BNA
2024-05-24 22:57:50 UTC	681	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 03 12 08 06 00 00 00 f9 aa ee 9b 00 00 01 0b 69 43 43 50 69 63 63 00 00 18 95 63 60 60 5c 91 93 9c 5b cc 24 c0 c0 90 9b 57 52 14 e4 ee a4 10 11 19 a5 c0 7e 87 81 91 41 92 81 99 41 93 c1 32 31 b9 b8 c0 31 20 c0 87 01 27 f8 76 8d 81 11 44 5f d6 05 99 c5 40 1a e0 4c 49 2d 4e 66 60 60 f8 c0 c0 c0 10 9f 5c 50 54 c2 c0 c0 08 b2 8b a7 bc a4 00 c4 8e 60 60 60 10 29 8a 88 8c 62 60 60 cc 01 b1 d3 21 ec 06 10 3b 09 c2 9e 02 56 13 12 e4 cc c0 c0 c8 c3 c0 c0 e0 90 8e c4 4e 42 62 43 ed 02 01 d6 64 a3 e4 4c 64 87 24 97 16 95 41 99 52 0c 0c 0c a7 19 4f 32 27 b3 4e e2 c8 e6 fe 26 60 2f 1a 28 6d a2 f8 51 73 82 91 84 f5 24 37 d6 c0 f2 d8 b7 d9 05 55 ac 9d 1b 67 d5 ac c9 dc 5f 7b f9 f0 4b 83 ff ff 4b 52 2b 4a Data Ascii: PNGIHDRiCCPiccc``\[$WR~AA211 'vD_@LI-Nf``\PT```)b``!;VNBbCdLd$ARO2'N&`/(mQs$7Ug_{KKR+J
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 3f 11 60 ad 60 ad 1c fd 0c 93 e7 e7 81 df a8 6f df 01 fe 0f e0 0f 81 ac 5e 56 4f 7d be 2f 1d 4e a0 3b 1c 0e 87 c3 e1 70 38 1c 0e c7 a7 8f dc e0 fe 83 84 f7 ad 44 92 e3 3a da 3d 11 de cb 53 11 ef c9 ef 8b 75 c4 bb 57 0b ef 0f d4 80 22 fb 6f 6b 45 ec 11 a1 2c 58 8b 18 ab c4 94 22 c6 08 c6 28 31 46 89 a9 04 39 00 9e 2e 09 c3 0c 11 8b 31 8a 23 9f 77 f2 9a 1a f8 a5 fa f6 7a 1d 51 ff 5d e0 7a bd fc 97 d2 fe ee 04 ba c3 e1 70 38 1c 0e 87 c3 e1 70 7c 74 3e c8 66 ce 47 88 76 03 b4 6a e1 3d 5b 47 b5 17 6b d1 7d 6c 2a f2 3d 3f 25 bc 5b b5 a0 bd f9 4a d6 c2 5b c0 22 f6 90 e8 ad a2 dd 82 31 22 65 25 b8 31 46 c4 18 25 d6 8a b2 b6 8a 98 2b 65 f0 74 89 ef 15 84 71 46 23 4e 69 c4 63 1a 8d 31 9d d6 80 46 9c 31 1c 37 b8 be 36 c7 c5 cb cb 64 b9 4f 1c a5 78 ba c4 54 51 f5 c9 Data Ascii: ?``o^VO}/N;p8D:=SuW"okE,X"(1F9.1#wzQ]zp8p\|t>fGvj=[Gk}l*=?%[J["1"e%1F%+etqF#Nic1F176dOxTQ
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 2b 65 d9 1b 68 fe 97 df bc 8b 6b d7 85 af 3d f7 04 ad 4e 93 b5 6b 17 d9 be 7a 81 99 a5 13 0c 77 b7 e8 ce cc 20 da 27 cb 33 56 af 5e 43 8b 21 8c 42 c6 49 89 b6 25 56 2b bc 46 8b a2 f4 b9 bc ba c5 e9 93 3e 67 1f bc ce a9 c5 3e 77 9d b4 2c cc 42 5c 9b f6 ad 3d b8 7d 5c 26 e2 3b 0c 2c 41 00 9b 3b 11 2f be fc 10 df 7f fe 2c 97 ae 2e 03 10 85 59 65 7f 37 ea e8 c1 72 23 fb fb 4a dd a2 ed 77 80 37 8e 1c 3f 9f 7b fb bb b3 b8 3b 1c 0e 87 c3 e1 70 7c 0c 9c 40 77 7c 09 b9 dd c2 6a 1f 86 5f 47 bc a7 0b ab 2d 1f 89 78 2f d6 82 bc 57 47 c6 c3 db 58 df 4f 5d 78 df f6 75 c3 0a 4a 19 1e bc f7 22 df 78 e6 15 1e ba ff 3c a1 6f 19 27 42 51 2a 94 b2 a8 83 1e e4 d3 fd c8 6f bc 43 04 ae ae 06 fc de 1f 9d e0 c7 6f 8f 29 46 d0 9b eb 31 eb 17 48 51 62 44 18 f7 fb d8 d2 12 c6 3e ad Data Ascii: +ehk=Nkzw '3V^C!BI%V+F>g>w,B\=}\&;,A;/,.Ye7r#Jw7?{;p\|@w\|j_G-x/WGXO]xuJ"x<o'BQ*oCo)F1HQbD>
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: eb 3b 03 d6 06 8a 22 58 60 3c b6 ac 5e bd c4 d9 93 01 73 b3 33 e4 cd 1d 66 17 c7 1c 9f 17 66 8f cd d2 69 28 02 29 d1 7a 84 d8 1c cf 03 25 39 e8 02 4f 2a fb bb 92 03 c1 3e 91 9e d6 7e 34 d1 6e 4c f5 d9 c3 c0 e2 79 70 7d bd cd f3 3f 7e 98 1f be f8 08 2b ab f3 68 6d 88 c2 0c 11 7b ab f6 f7 f3 53 f6 f7 f3 53 c7 f9 4f d5 fe ee 04 ba c3 e1 70 38 1c 0e c7 c7 c0 09 f4 2f 35 9f 86 f0 6e d4 51 ec 99 29 4b f9 12 70 62 aa c8 da d2 54 ff ee ce c7 cc ef e6 4e 2b ac f6 65 63 92 7b 9e a6 3e 79 ee b1 30 bf cd 33 4f bd ce d7 9f 7e 95 63 8b 3b 55 9e 7a 5a 45 a8 3f 2c 4f dd d8 83 fe e4 9e ae 2a b0 9b a9 e7 f2 02 8a 12 d2 04 06 49 93 c1 66 83 f5 6b 29 bb ab 6d f2 b4 a4 14 41 2b e8 cc cd 62 c4 a7 db cc d1 6b 43 f2 33 7f 93 63 ff ce d7 31 3b 39 e5 77 7f 44 bb ff 12 3b fe 1a c3 Data Ascii: ;"X`<^s3ffi()z%9O>~4nLyp}?~+hm{SSOp8/5nQ)KpbTN+ec{>y03O~c;UzZE?,OIfk)mA+bkC3c1;9wD;
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 7a b2 c1 ba 5c a6 d3 4b 58 9e 57 c4 41 c4 c6 fa 29 f4 5e 9b c1 f8 32 fa f8 75 e6 ba 96 c5 19 68 35 eb bc fa 1b 5d a7 8f d8 df d3 0c de 3a 77 9a ef 3e ff 18 af bd 75 2f e3 71 54 e5 a9 7b c5 ed d8 df ff a4 ae fe fe 07 40 5a 3f f6 b1 ed ef 4e a0 3b 1c 0e 87 c3 e1 70 7c 0c 9c 40 bf 6d 3e e9 fc 6e a6 f2 bb 67 a7 da 88 2d dd a0 7f f7 5c 2d bc 5b 1f b3 b0 9a 58 20 4d 95 58 63 44 7b 82 52 22 81 6f 69 35 0d a1 67 08 bc 92 a0 5c c7 57 63 94 f6 10 6d 08 3c 98 5b 6c 71 f2 58 44 d4 0c 49 f6 d6 d8 5e b9 c4 5e 7f 1b eb 29 82 b8 41 a3 dd 26 8e 5b 5c 3b f7 26 83 5c 33 33 33 43 bb e9 61 54 c0 38 31 f8 94 bc 75 79 96 73 ab f7 61 ac c6 d3 f9 4d 1c ee d5 63 d6 0a c6 d8 7d 8b b0 13 f4 5f f0 93 ab b6 b4 17 85 c7 38 09 68 35 c7 3c f6 f0 bb 3c f7 ec 4b dc 77 f7 15 b4 9a ca 53 bf Data Ascii: z\KXWA)^2uh5]:w>u/qT{@Z?N;p\|@m>ng-\-[X MXcD{R"oi5g\Wcm<[lqXDI^^)A&[\;&\333CaT81uysaMc}_8h5<<KwS
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: be fe f4 2b 9c 3a be 81 31 55 9e 7a 9a c6 0c d6 5a 5c bb 16 71 65 3d 47 75 87 9c 38 d9 67 ae 0b bd 36 94 c3 90 ed 15 8d 99 4d d0 ca d0 8c 84 56 d3 a2 43 c8 d6 db a4 17 1e c7 6e 3c 8c f2 7a 58 af 20 4f 0c be 1d 53 64 19 45 3f 63 40 8b ed a7 1f c5 3e 7a 1a bd 3d c0 3f 77 95 f6 b5 55 fc cd 4d 94 31 44 73 0d 74 3b c2 6b cd 20 56 93 0f 77 e8 97 5b ec c9 bb 64 cd 73 84 33 d7 e9 ce 96 74 5b d0 f4 41 8b 60 ac 60 ac bd ad fe e9 ef bb 96 03 d6 28 94 aa 84 ba 05 2e 5e 99 e7 fb 2f 9c e5 c5 97 1f 62 67 b7 83 ef 17 84 41 65 da 9f 44 e0 8f bc c4 51 fb fb eb 75 41 b9 7f 08 5c 9f ec 8a 0f b2 bf bb 08 ba c3 e1 70 38 1c 0e c7 27 c0 fa f5 1d fe c3 9f ff 1f 3e eb d5 b8 15 9b f9 ed 0a ef c6 91 fc ee 85 a9 6a e6 c7 a6 fa 77 4f 0a ab b5 8f 0c 50 3f 88 3b be 7f b7 b1 8a a2 ac 02 Data Ascii: +:1UzZ\qe=Gu8g6MVCn<zX OSdE?c@>z=?wUM1Dst;k Vw[ds3t[A``(.^/bgAeDQuA\p8'>jwOP?;
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: 45 15 55 9f ef 8c 78 e6 a1 75 be fa d0 36 cd 76 83 b8 3d c3 1b 2f bd ca 9f fe 9b 97 d8 4b 0a de 5d 87 f9 9e c7 99 e3 f3 9c 3a 76 8c a5 85 39 e2 50 51 e4 09 d9 70 44 7f 6b 9b 22 cb 91 c0 a3 37 37 47 1c 37 d0 cd 2e a2 14 a3 c1 88 f1 78 cc ee ee 2e d6 94 1c 5b 5e 24 6e 75 f0 82 80 30 28 29 93 11 2b d7 15 6f 5e e8 71 65 a3 43 56 44 88 9a d8 dd ed 97 67 b7 ee 1f d1 76 5f a8 49 bd 9f a4 be 26 c8 e4 f9 fd e8 b0 dc de 14 d9 9d be 89 6a fb 7b 96 f9 a4 99 cf 4c b7 cf 57 1f 7f 8b 6f 7c ed 15 4e 9f 5c 03 5b b5 69 b3 b6 ca d5 fe f0 93 a2 da a6 c6 b3 a4 5b 5d b2 b7 bf 85 0c 1e 80 c8 42 18 61 e2 16 7a f7 2a e9 2b ab 6c 2c df 4b f4 eb cf 12 e5 19 a5 15 0a 6b f1 26 df 6e be 42 bc ca fd 51 66 25 65 7f 8c ec 0e 90 bd 01 d2 1f e2 65 25 11 96 a0 b4 a8 52 91 17 63 06 b2 ca 20 Data Ascii: EUxu6v=/K]:v9PQpDk"77G7.x.[^$nu0()+o^qeCVDgv_I&j{LWo\|N\[i[]Baz*+l,Kk&nBQf%ee%Rc
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: a6 d7 67 54 8c 90 c0 92 14 19 b6 b0 f8 45 40 90 85 78 a3 90 c6 30 62 69 34 83 bf 17 92 6c 1b 92 41 81 c1 a2 42 8b d4 51 d8 9b b9 6a 84 43 f3 06 88 95 c3 9f ed 0e 41 00 51 55 9e 7a 92 04 88 b2 dc 7d 7a 85 e7 9e 7d 85 27 1e 79 8b 76 3b 23 4d 21 cf a5 fe 0e f9 80 0f 38 1d 4d df ee 90 bd f7 1c 6c 3f 84 88 8f 44 1e e9 1b 5b 6c cc 1e 67 fe 6f 3c c5 f6 c6 98 d8 64 78 59 ca ce 68 4c 94 0f b0 69 9f 34 d9 a5 2c 76 50 e5 16 c6 6e 63 d9 c6 f3 76 f1 82 01 2a 1a 12 44 05 5e 0c 7e 04 3a 00 cf 03 4f 81 2a 35 79 1e 32 4e 2a 61 3d 18 34 2b c1 dd 6f b2 d7 6f d2 1f 36 18 0c 1a 0c c7 11 e3 71 48 92 06 e4 85 47 51 68 cc d4 8e 54 ca a0 94 9d ba 99 c3 22 bc 9e 70 ae ae d2 16 ac c1 96 86 5a 80 d7 8f d9 c9 86 45 3c 8d 04 9e 95 d0 2f 55 23 f2 54 33 c6 ef 34 c9 1a d1 0b 4f 3f 79 fa Data Ascii: gTE@x0bi4lABQjCAQUz}z}'yv;#M!8Ml?D[lgo<dxYhLi4,vPncvD^~:O5y2N*a=4+oo6qHGQhT"pZE</U#T34O?y
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: ac 17 6b 78 67 9f 66 0e 8f 4b af ef b1 d7 2f 78 e3 4a 9f 57 d7 4a 1a a1 e1 db 5f 5b a5 1b 6f b1 b3 b5 c1 a8 bf 43 1c 7a b4 42 85 56 0a ab 35 69 9a 53 94 96 41 56 b2 b7 37 20 c9 52 94 f6 08 3c 4d e8 29 3c a5 6a 57 8b a2 d4 01 56 02 42 c9 f1 3d 8f d2 0b 11 51 28 29 f1 42 1f 44 d3 99 9b 43 47 1d d2 74 4c 9a 2a 56 d7 1a 5c be 1a b2 b1 1d 92 a4 1a df 13 02 5f ea 6b 01 9f 9c 60 17 b0 39 f8 c6 43 35 a0 ec 66 94 bd 9c ce 62 c4 86 1e 60 bd 1c 2f 30 24 79 ce 38 cb 31 29 78 e3 80 39 33 cb b5 fb 2e 71 71 fe 2a 43 95 51 da 02 ca 4a 24 1d 3a 9d 44 0e 2c 41 aa 3a ef 95 40 91 65 50 68 b0 93 49 80 a9 59 bd a9 53 6f 12 00 3d f8 a5 04 29 c1 53 74 c2 98 33 d1 22 f3 7b f3 d8 f3 1e b3 7e 8f 6b 6a 8b 54 25 f8 81 65 6c 33 52 93 93 e4 39 91 09 f1 33 8f 30 89 d0 23 9f d9 71 87 e6 Data Ascii: kxgfK/xJWJ_[oCzBV5iSAV7 R<M)<jWVB=Q()BDCGtLV\_k`9C5fb`/0$y81)x93.qqCQJ$:D,A:@ePhIYSo=)St3"{~kjT%el3R930#q
2024-05-24 22:57:50 UTC	1369	IN	Data Raw: f8 09 e9 4e 83 b9 bf fe 37 b1 41 83 e1 5f 5c 44 e7 03 a2 f6 35 46 7b 17 d8 5d bb c6 ea ea 1a d7 77 86 8c 32 4b 69 aa 02 65 69 26 64 85 21 cd 4b ca 62 8b 38 30 2c cf cf d1 8a 22 22 df a7 d7 6b e0 f9 3e 79 51 22 58 3c 4f 93 e7 f9 7e fd 87 bc 28 28 b2 82 3c 4d 2b 8b 7b 0e 39 1e 5a 09 a1 ae 84 4b 61 35 7e 10 12 37 9a 58 a5 d9 ec 0f b9 b8 ba c1 fa 76 1f 5f 09 67 96 ba 3c 7c ff 09 4e 9e 3c 85 d1 8b 5c 5c 6d 73 ee a2 70 ed 5a ce ee 4e 46 96 66 68 65 f1 7c 55 57 bb ae ec e0 d3 f5 20 6f 18 6d 17 30 ca 10 a4 01 57 7e f9 3c af 3c f8 43 d8 6e 82 d5 b5 c2 96 43 45 b4 64 da e2 5e 7b c5 45 e9 29 91 cd fb df 60 ff 14 ae 5c 19 96 e9 e8 ba 7d 7f e1 cb a9 89 80 83 c7 4a 7c e5 a3 51 14 94 14 b6 ca 23 ae 0a 57 d6 cb 29 55 05 e2 2d 88 e1 c8 6c c5 d4 14 c0 a1 70 7c 7d 59 51 16 Data Ascii: N7A_\D5F{]w2Kiei&d!Kb80,""k>yQ"X<O~((<M+{9ZKa5~7Xv_g<\|N<\\mspZNFfhe\|UW om0W~<<CnCEd^{E)`\}J\|Q#W)U-lp\|}YQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.5	50126	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:50 UTC	627	OUT	GET /uploader/27ef8ca73175ab7a2b29bd8f11ae4dc3b3878bd6.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:51 UTC	678	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:51 GMT Content-Type: image/jpeg Content-Length: 221018 Connection: close x-oss-request-id: 66511B6ED31A23303479E3F9 ETag: "399748CD074E2B27FE441F497E805308" Last-Modified: Wed, 09 Aug 2023 07:27:15 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 801810286347868298 x-oss-storage-class: Standard Content-Disposition: inline; filename="221e3928ecd08ec8572f1bf87dcb1c7589b90329_221" Content-MD5: OZdIzQdOKyf+RB9JfoBTCA== x-oss-server-time: 90 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:51 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e313c9f3f7f8-BNA
2024-05-24 22:57:51 UTC	691	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 84 03 00 00 03 a0 04 00 01 00 00 00 52 03 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100RICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 03 52 03 84 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 01 02 07 08 09 ff c4 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 2b 65 68 aa a2 b5 6a d6 e6 2b 68 ae 26 b0 57 ad 5a 86 2c d6 b3 d5 47 a5 c7 e0 00 00 00 00 00 00 00 Data Ascii: '/9339GDG]]}C) )/'%'/9339GDG]]}RX+ehj+h&WZ,G
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: aa 71 69 2b 08 7b bc f1 4d d4 e1 ae 1e 9d e7 81 f4 7b ce d7 0e cd 30 fb 16 38 da da af 8f 37 1d ed 70 9f ed f9 be 87 0e 79 2b 09 0a 41 0c c4 c0 00 00 00 00 05 47 e6 e3 c1 c4 23 65 0c 05 d4 af 13 f0 9b 84 0c a0 25 1e 60 05 49 72 30 6c 00 00 00 06 47 23 a4 2e 2d 30 a8 e9 0f 07 83 89 85 50 a8 aa db 98 34 57 75 95 37 13 13 04 6a 94 d5 dc 51 6c 89 08 2b a2 41 45 44 e0 d1 3a 27 55 53 12 11 34 35 46 01 3a ad 8a ce 89 c2 71 56 04 c0 61 43 48 49 49 9d 6b f4 43 2d be 72 d9 1c 64 77 8f 3d cf 9b eb 1d e1 df db 63 13 4c ba 55 cc 9a 6c 32 68 b2 cf ca 10 00 00 00 00 01 28 4b 91 85 8e 22 72 25 33 2a 8b 3b 55 80 a9 1e 28 b6 c7 39 b1 20 00 00 00 01 51 d0 e8 76 39 42 e8 73 27 08 55 0e 64 f0 74 97 03 71 84 d5 3b 16 a9 68 b0 80 0d 85 53 a0 99 b0 b8 a9 a0 dc d8 04 66 a0 a4 32 Data Ascii: qi+{M{087py+AG#e%`Ir0lG#.-0P4Wu7jQl+AED:'US45F:qVaCHIIkC-rdw=cLUl2h(K"r%3*;U(9 Qv9Bs'Udtq;hSf2
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 94 2c 68 26 6a 03 83 13 5d 55 d0 c4 b6 98 5e a5 25 b4 48 9d d3 94 ed 12 92 6b f5 bc 8a 22 a2 ed e9 78 2a 4c 42 d8 26 a1 5f 8b 44 62 96 d5 9d 84 c4 a5 a2 12 b4 ef 10 d7 29 3b ca b4 85 f1 c7 d8 4d a7 c9 a2 a0 05 9f 97 f4 3b af 0f d3 e3 a7 e3 79 27 77 c3 80 29 4b 6f 59 b7 f3 3e 8f 76 e1 7d ac 00 00 00 00 23 fa 9f 37 cf 73 e2 eb 02 1b 5a 1b 44 22 85 a5 a4 4d d2 6b 6e 94 f9 3d 2f 3a d5 ea 3b 3a b1 60 96 a7 92 6a f4 ec be 73 d5 20 8e c3 33 78 97 6f 2a 03 33 cb 75 7a 86 c7 07 19 87 48 97 9c 71 d5 3b 4a 0a d8 e6 2d d3 4d 2d 08 cc 6d 02 63 51 b8 9c 37 8b 68 ab 79 27 68 ca bb da 37 86 25 84 65 2e 4d 95 6b 6a 25 30 b0 e6 25 63 68 b6 4c c4 92 ca d8 86 57 8d ac f3 8c 79 66 ad 5a 8e 3b c3 d1 a4 43 4a ca 53 6b 34 de 06 93 13 43 5b 95 ab 49 84 ad 22 1c e3 be f5 a3 4c d2 Data Ascii: ,h&j]U^%Hk"xLB&_Db);M;y'w)KoY>v}#7sZD"Mkn=/:;:`js 3xo3uzHq;J-M-mcQ7hy'h7%e.Mkj%0%chLWyfZ;CJSk4C[I"L
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 39 90 1d 3e 9c 27 43 a0 ae f7 cf 3a 26 ef c8 1d c1 71 68 95 62 db c4 ef 13 bc 4e e6 f3 55 2d 45 2d 5c cc 13 54 66 30 8d e0 b4 08 27 0c 1b 0b 56 5d 8a 9b da 10 98 6d 30 ad a2 4e 6b 23 92 ae 24 c8 6f 68 56 d5 95 b4 25 6a 23 6a a3 66 b1 57 72 5e 2c cd 48 92 3e 61 59 ab eb 57 15 96 eb 28 b6 e3 48 53 69 34 4b 63 87 b5 77 ad 71 48 d2 b5 63 5b c3 de d6 6d 7c 11 b3 b0 fa b5 8d be c4 25 f2 b4 4e 13 a5 ae aa 5c c4 cc 56 f6 6a 5e 7e 08 ad 1a 25 24 a6 36 4a 12 6d 35 da cd 50 d8 6e 8c 4c e9 35 64 60 e8 77 a7 d0 5d 8d 7f 96 a7 34 00 00 00 02 6b 06 69 3a 5a 7f 47 df 58 38 5f 6f 00 00 00 00 05 77 be 7d d2 37 3e 40 ee a7 11 2e 2b 65 22 db d2 54 ad 94 c7 3b d4 a2 36 bd 77 bd 77 c9 4d ad 5c 23 49 61 01 98 8d cd 8d a0 b0 e2 21 49 87 16 ab 79 6b 62 d6 a3 fb 9e de bb 5a 31 6a Data Ascii: 9>'C:&qhbNU-E-\Tf0'V]m0Nk#$ohV%j#jfWr^,H>aYW(HSi4KcwqHc[m\|%N\Vj^~%$6Jm5PnL5d`w]4ki:ZGX8_ow}7>@.+e"T;6wwM\#Ia!IykbZ1j
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: f6 29 2d ed 0a 5e 17 b4 38 bd 56 cd 45 b2 e3 db 63 11 93 1e 72 51 4b d1 34 37 9a a3 30 8c c4 7c c6 96 a4 b6 4c 72 36 ac 95 eb 9b d6 3a 65 a2 56 9a ed 66 45 f8 5b d5 4f 8c fb ba 9f 5a 91 fb 5a cd 72 ca 57 9b 17 2f 3d c2 dc de 5b de dc ea 3e 4b 65 eb 97 0b bf 89 9d f0 b0 d9 c5 1d bf 81 9f 43 13 2d fc 0c b7 f0 35 df c4 c7 73 0b 6d cc 3d 6b c4 76 7b 87 cc 7d 3a 1b 0e 35 e9 b9 dd 9f 87 b5 47 f4 dc a6 3b da f6 ee 26 f5 ab 83 d0 c8 09 61 b3 5a cd 5f 36 dd db 1e 86 98 ad 9b 46 f9 2b b4 c2 9b 55 5f 6f 16 6d 09 d6 49 8a 56 9f 57 9c 7d 33 cb f1 2e c6 16 72 f4 26 6c 1e ac cf 83 e7 49 50 84 f1 72 95 7e a2 cd ea 97 b2 2a ae 15 8b 36 71 e4 bf cd 3e 8b ec 61 f9 75 a5 b3 f4 43 6b 07 0f c1 93 cd b8 72 7a 8b 67 17 99 b5 b3 2d 52 d1 0e c8 7b 2c 58 af 25 8e 48 bd 8b 57 62 d7 Data Ascii: )-^8VEcrQK470\|Lr6:eVfE[OZZrW/=[>KeC-5sm=kv{}:5G;&aZ_6F+U_omIVW}3.r&lIPr~*6q>auCkrzg-R{,X%HWb
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 8b 4a d2 f7 5f 0f e8 3c b1 ec 79 9d ea 95 83 e9 71 a0 e3 1a 95 a3 4b 5a 73 1c c5 5e d6 3e 26 f5 a7 c0 fa c4 71 de 81 e8 b4 61 37 b0 59 79 bb 50 5b da f3 1a f0 cf 63 57 5a ec 3d cf af 6c e2 ef 35 d5 de 77 35 e3 7f 43 f2 7e 81 f9 5f 73 b1 78 2e 96 b0 ac fa 2d 2c d6 5e 60 c9 37 c5 d8 cd 67 28 0c c4 6f 7a ab d2 c7 cf fd 46 ab 6a 5a e1 e7 b7 51 cb 68 fc b7 ac 6e e6 86 dd a4 2e ee 0a ef 4f 15 df 83 93 a1 f0 2c 95 36 9d e5 d7 db 05 27 ad ad 4d bf 56 d5 4e 74 b6 5c 38 86 b3 35 dc 9b bc e3 b1 bf da 70 79 ed 72 4e bd 6d 3f 2f fd 1f 8f 4e df c3 5b 98 f6 6e 5c 3e 82 c9 8f e7 09 c2 0d cb e1 d4 2a e4 76 74 fa 96 db e7 d2 b5 ba 14 4d 2d 97 58 b2 4f 1e 8b da c1 65 b4 34 aa 89 4b 28 5b b2 d7 c9 58 32 b9 b1 f2 d2 55 97 23 f5 dc a7 6b 4b 88 3f a5 f4 98 49 5c 23 33 1a 41 09 Data Ascii: J_<yqKZs^>&qa7YyP[cWZ=l5w5C~_sx.-,^`7g(ozFjZQhn.O,6'MVNt\85pyrNm?/N[n\>*vtM-XOe4K([X2U#kK?I\#3A
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: d3 7a f9 64 e9 7b 64 d6 d5 63 78 73 38 3c 84 9c ce 96 32 9a df ac a1 2e c2 6a 48 89 67 10 da 21 ea c8 23 61 43 62 4a b9 27 69 96 4b 8f 9e eb e6 3b 3d 0b c9 76 a6 f8 fd 58 9d cd 94 32 e2 de ba d0 fd 2e 15 0b e9 5e 4d a7 a8 e2 ca 4d a1 6d 8f d3 18 b6 3e 77 ad d1 e6 95 b1 fa 30 94 52 b4 45 d7 8d d5 bd 79 3f 69 63 d0 cf 35 cf a7 35 dd ad bf 89 93 80 7d 3f ca 74 b9 d5 bb fc c3 d4 6a d6 f1 d7 dc 7c 48 5c 66 96 7c 73 7b f9 6f d1 55 c7 84 9c 3d b3 c0 74 36 18 e7 b2 b8 eb 91 4a c0 64 da 2b 81 2b b1 32 df 25 a9 9e 83 56 53 47 65 96 c6 67 98 31 c5 77 b9 4b 7d 83 c1 f4 9b 4d a2 2f 0f f0 bf 67 19 e5 fb 78 ae 47 f8 75 b5 89 6d 9a 18 6c de cb c8 a2 90 c5 9a c4 84 3f 43 2f 11 fa 77 99 e5 1e f3 94 8d c9 49 e4 d7 49 aa 76 9f a1 79 75 ba 1c c7 cf 33 ce c3 9c 98 66 62 ee a2 Data Ascii: zd{dcxs8<2.jHg!#aCbJ'iK;=vX2.^MMm>w0REy?ic55}?tj\|H\f\|s{oU=t6Jd++2%VSGeg1wK}M/gxGuml?C/wIIvyu3fb
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 13 1e 69 cc 59 26 69 92 56 62 45 0b da 88 ca 12 6c d1 1b a1 33 50 44 91 2f 8f 63 31 7d ab 39 ad b5 10 98 77 93 0f 56 de e5 c6 da 8f 6b 6a 5d 72 73 bc 79 6f f4 c8 9e 3c b1 76 ab 4d 9d 2a 1d 32 bf 89 ea 16 ae d6 c7 03 ce ec 27 07 b3 8a cb c4 c9 c7 3d 4f 31 63 12 be 5b 1c 72 69 74 ba 09 6e 58 26 be a0 f9 2f d4 ec 1a b7 c6 4d 09 1e 5e 74 ed 9b c2 ff 00 6a f9 9f b1 be 73 eb e4 fc 6f 63 ce bf 44 f2 dc 67 dd f9 eb 0a ad 51 d7 bc d7 5f ba fc 73 d9 ad 8e 29 fd e8 ba 79 f3 7c b4 d6 6a 8e 48 6b 96 b1 9b 52 d3 35 12 c9 11 7b 93 11 bb 81 ee bd a3 b6 8d ba 9a 37 ff 00 7f e3 7a a4 cd b2 32 51 3c 0f a2 e7 9e 27 d2 43 6f 62 92 d7 cb 3b a1 9a 7f 97 45 f1 ce 32 cb 1c d9 e9 5e 87 62 bb e8 bc eb 3f 51 c1 65 bf 82 a1 6a 5e b3 eb 74 9c 98 9d c5 b9 a6 2c bc 7f 16 6b 04 5a 11 56 Data Ascii: iY&iVbEl3PD/c1}9wVkj]rsyo<vM*2'=O1c[ritnX&/M^tjsocDgQ_s)y\|jHkR5{7z2Q<'Cob;E2^b?Qej^t,kZV
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: c3 69 d7 bf 40 f8 47 d0 60 79 5d c9 7a 53 9c fd 07 c7 d0 fe a7 e5 7a 95 ab ce 74 fa 54 6a da d1 68 fa 1d 97 00 78 5c f2 90 0f 4d c8 f0 00 25 e9 6b 02 6e 28 f6 c4 d6 1a 5e 56 85 b0 68 48 95 b1 a1 c9 61 e8 ce 0f a3 b2 f0 7d 0f 17 de d5 82 f5 7e 37 44 b9 ac e5 3d ef e5 5f 46 e2 be a3 4e 33 d5 f8 79 4c b8 1f ed f3 f9 8d 32 d9 34 fa 12 75 be e4 8e df 39 6c da fc 73 1e c7 4a b6 3b 75 b1 d2 22 d5 7a de e5 35 e8 79 31 73 fa 64 a2 d6 ec 62 d1 51 6d 64 fd 59 35 5a cc ae 77 ff 00 95 fd 6e d9 e7 37 69 be a7 81 e6 5f a5 fc eb b0 78 8f 5e 74 39 dc 8f d4 70 3b 3f 8f f4 31 18 76 74 cb d0 f4 4f cf 3a 94 8e ef 39 0c 36 82 e8 6b a9 4a dc b8 f9 74 4c 6e 7a 36 cb 56 59 e8 86 4a a1 92 25 75 76 62 f6 f0 3e b6 38 8f a5 f8 be e7 96 96 b8 9e 4f e3 bb ca 7c eb d6 d3 fb fc ce 19 f4 Data Ascii: i@G`y]zSztTjhx\M%kn(^VhHa}~7D=_FN3yL24u9lsJ;u"z5y1sdbQmdY5Zwn7i_x^t9p;?1vtO:96kJtLnz6VYJ%uvb>8O\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.5	50130	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:51 UTC	627	OUT	GET /uploader/c1fb5ccd272927fa746cf0753d8ae24bd27c6ff1.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:51 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:51 GMT Content-Type: image/jpeg Content-Length: 332858 Connection: close x-oss-request-id: 66511B6FD561043930BD9741 ETag: "95E1999836C8005DD0D1451FF2160925" Last-Modified: Wed, 09 Aug 2023 07:27:16 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 6883602179152930846 x-oss-storage-class: Standard Content-Disposition: inline; filename="2210cfa1f7a166ce8dc5dd3a948271f4a4842311_221" Content-MD5: leGZmDbIAF3Q0UUf8hYJJQ== x-oss-server-time: 77 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:51 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e317a9a5f7d8-BNA
2024-05-24 22:57:51 UTC	690	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 05 f0 05 dc 03 01 21 00 02 11 01 03 11 01 ff c4 00 37 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 08 09 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}!7,
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: f8 5e b4 2b 33 a5 e5 9e b9 9b b6 c2 9c 9a de f2 00 00 00 00 00 1b f4 f6 75 89 9d 15 c2 59 81 bc cb 3f 17 1b 0a b5 08 58 8f 95 d3 73 d8 22 0a e4 47 da 23 29 36 4d aa a3 bd 8b 75 57 a2 1b 94 59 d8 3e a5 3a 81 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 1e 6b ba e1 af 6b 86 bb ae 26 b9 01 66 b9 ad 90 36 2a bc 92 f7 a6 1d 91 98 67 f5 6c d9 ca f1 76 3e 22 bc f9 d3 36 e6 a3 b4 6d 9c 7a 4b d9 b3 5b 8d 2f 7c e1 b8 74 c0 00 00 00 26 22 5a 62 59 fc 65 ce d4 99 c8 e9 13 53 38 11 29 2c 63 47 12 70 46 cf 1b 55 63 46 46 31 13 1c 4b ed 15 ef b5 91 76 2d c7 9c e7 58 b2 0f 20 80 8b ae a3 f5 01 f4 2e 64 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 44 16 b6 6b ba e9 af 6b 6c eb ba f5 6b 9a e1 af 46 d3 d3 32 fa f9 76 25 af 46 96 d4 bb Data Ascii: ^+3uY?Xs"G#)6MuWY>:@kk&f6*glv>"6mzK[/\|t&"ZbYeS8),cGpFUcFF1Kv-X .dDkklkF2v%F
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: a4 bd 91 a3 1c d7 61 d9 8f 68 00 00 00 01 7b bd cb f5 2f 63 96 a0 00 00 00 00 1f 8f d8 a0 08 6a 64 d6 62 78 64 ee 98 df 66 cb f1 fb 32 b5 3e 98 f9 d2 f7 af c7 9d 74 95 d7 25 c3 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 e0 f4 00 06 e7 73 3a c6 94 24 a6 12 5a 51 24 e4 1a c4 8e 30 e3 cc 7a b2 85 ba 55 9d 54 46 1a e4 2d 61 45 d9 4a c4 89 b9 f4 0c ea 13 57 91 6e b5 4c 3b 28 f2 a9 00 00 00 00 00 0e 82 7d 4b f4 86 6c a9 40 00 00 00 3f 20 b0 40 02 c2 cc b1 88 3d b8 66 67 19 b7 cb 34 46 26 01 8b 66 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 15 5c 89 7d ce 27 ee cd 65 c7 54 d6 8e 68 38 b7 38 aa 00 c9 dd 25 cb c8 8c 2d 4e c8 85 00 00 00 00 00 00 00 02 50 fa 4b ea 3c de 84 50 00 00 00 fc 86 8d 00 00 b1 ed 99 14 9e 5b 29 00 00 00 00 Data Ascii: ah{/cjdbxdf2>t%Xs:$ZQ$0zUTF-aEJWnL;(}Kl@? @=fg4F&f\}'eTh88%-NPK<P[)
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 00 00 00 2e e6 c7 99 8b 8d 76 27 75 d2 b1 15 4e a0 00 00 00 00 00 00 00 00 55 59 55 45 55 95 54 55 50 f0 78 3c 1e 1e 0f 3c 3c 0f 0f 3c 3c f0 f0 3c 3c 1e 00 f3 c0 00 00 00 00 01 b9 c4 b3 27 b1 13 ab e5 ba d5 ab ab e2 65 b3 65 f4 68 1d 77 0c 2e 7f 53 fa 77 48 1e fe a3 c7 c0 5c c6 68 00 00 00 12 07 98 07 d3 7c fc 97 e1 a0 00 00 14 5c 80 00 66 5f 8a 06 c3 09 2c b5 f2 c4 7a ee dc e6 37 45 9a 76 cd 2e 36 19 b1 c1 13 d1 e9 a9 e3 ee 00 00 00 00 00 3d 3d a8 aa a2 ba 8a eb 2b a8 f4 7a 3d 05 10 f0 78 3c 3c f0 f3 c3 cf 0f 3c 3c f0 78 79 e1 e7 87 81 e1 e0 f0 02 90 00 00 00 00 33 b6 cc b5 8d db 06 ae 4e 66 69 b0 f2 48 ee bf 3e c7 44 b3 a6 83 d1 b0 d6 f7 4d 39 b4 a7 46 b8 3c fd 65 97 f3 af 96 4a 00 00 00 01 56 79 d3 bb 21 a0 7c f6 00 00 00 08 6a 06 74 ec b6 19 b7 3d 49 Data Ascii: .v'uNUYUEUTUPx<<<<<<<'eehw.SwH\h\|\f_,z7Ev.6==+z=x<<<<xy3NfiH>DM9F<eJVy!\|jt=I
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: af cf f7 39 b5 bf d3 7f 9e 00 2a 0f 45 43 d2 aa 8f 7d 2a ac ae b2 aa ca eb aa eb 4a eb d2 ba cb 95 97 3e a4 8d ff 00 50 e7 7e 4a d4 4a b7 2e 2d 6e 23 b4 ae ee ae fb 9b f9 3f d4 e7 e2 f9 be 94 e7 49 f5 79 be 84 a3 f5 5f 8d 81 88 cd 86 f8 66 d9 7b 1a cc cf da d9 b6 3e 6b 6b 2f b9 33 e6 4a 4c c7 5d 62 c7 ef 3a 47 3d 66 26 24 d7 e3 73 aa 69 28 14 d2 52 3c f0 f0 05 20 00 03 74 80 c3 17 b8 cb c1 7a 0c 20 6b 61 94 ad 3f b4 9c d0 62 e4 d0 7b a5 d9 16 a0 e8 ff 00 a8 39 bf 9c 9c 3d 40 00 00 01 51 b8 5c 25 27 4e 2f d2 8e 6d d0 88 6d 54 f4 00 00 00 07 b5 58 c8 6b a1 5d fc cf fa 23 d6 3e 80 a0 0f 2e 39 a5 bf d4 ff 00 99 81 e9 e8 f4 54 3d a8 ab d2 aa 8a ae 15 d6 57 5d 57 5a 57 72 ab b9 57 2e 25 cb c9 87 f6 ee 75 cf be 4f c6 a0 73 ac e9 fc fb c7 ea a3 3b db e5 c4 b0 74 Data Ascii: 9EC}J>P~JJ.-n#?Iy_f{>kk/3JL]b:G=f&$si(R< tz ka?b{9=@Q\%'N/mmTXk]#>.9T=W]WZWrW.%uOs;t
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 97 75 2f 5f 4e a1 d0 b9 eb 03 63 9a d1 38 83 3a e7 9a 74 8e 83 ec e3 3f b1 77 e1 1f cd f3 63 3a 2f ce f7 71 1c 44 d5 26 a4 c8 c3 af a3 be 8d f3 f5 f8 23 4f e9 9f b9 3a bf 2d fe 6f ca ef 3f 71 e9 5c f7 f1 96 77 b7 cf 8b af 12 dd be 5b fa 1d 90 1d 47 b7 2b ba df 4c 42 f7 5d cb 5f 3f 33 be 6e b5 09 cf bc fe 8d 02 1b 9d 92 9a e3 bf a7 be 53 b2 d5 bb 6d db 8b 74 14 d2 51 e1 e7 87 83 cf 00 00 00 00 00 00 00 00 fa af ed dc df cf df 9d 94 00 00 00 00 12 c7 d0 f3 67 3a e3 26 10 00 00 00 00 f6 ab 19 53 7f 41 fd e7 f9 bf b9 c1 bb d7 e9 3e 0e 91 a4 1b bf cb bf 17 af 47 c3 f5 e3 97 f3 af ca 7f 73 e6 9e 7e f3 f8 43 d1 50 a8 aa a2 aa cb 97 0b 97 6a e5 db 2e e5 59 95 60 ec db 46 3a 73 ce 77 99 ac 2b a9 4b 7b 38 6f af 4f 9e 37 6c 96 03 4f ce b4 be bf f3 fd 7c 53 3f 3a e5 Data Ascii: u/_Nc8:t?wc:/qD&#O:-o?q\w[G+LB]_?3nSmtQg:&SA>Gs~CPj.Y`F:sw+K{8oO7lO\|S?:
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 3a c4 b4 f6 dd cf a5 32 ee 62 63 b8 f5 83 d2 be 5f d8 c1 ea 9d b8 71 3f 7e 0f e9 36 ed c7 f5 1f 8f d1 7e 62 df 2c af a5 ec ea 5c 03 79 e7 53 27 53 e2 39 bd 4a 4f 53 91 62 a4 2f 47 c6 bb 95 72 d7 7a ca ae 90 5f 37 1b 74 91 93 ba 2e c1 9b a9 33 21 2f c2 9a 9d 80 00 00 00 01 fa 07 f4 2e 75 f0 b7 cb a0 00 00 02 6d 37 89 42 07 40 b7 15 00 00 00 00 00 01 ed 56 3d b1 e0 00 01 ef a3 d2 a1 55 45 55 97 2e 9f 51 fc d1 1b f6 91 35 1d 97 26 3d 9d 49 7b 55 87 1c 5a a4 dd 3e c4 9a db 63 31 76 dd 93 1a cc e4 d9 9f 32 6a 7d f1 aa ef 12 da 84 ad 8e 3e e7 9a 57 5f 66 c7 7d 8f 99 ce 24 3c 5e ac d8 cd e3 97 61 78 fd 52 b6 26 b0 f3 bc 7e f8 ca 7d 7e 0c 49 12 5b 57 59 6e 9b 27 64 e6 1f 0b f4 57 b7 7c 6e e4 17 af c9 91 63 dd f3 b5 48 8e fe 78 1d 61 30 2e e9 89 f5 1e 5b 57 37 ae Data Ascii: :2bc_q?~6~b,\yS'S9JOSb/Grz_7t.3!/.um7B@V=UEU.Q5&=I{UZ>c1v2j}>W_f}$<^axR&~}~I[WYn'dW\|ncHxa0.[W7
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 9a 97 6f 54 4e 8b 58 9d 03 2a 35 5a c0 e7 52 e0 14 00 00 00 3d aa c2 c0 00 07 a7 be 8a 8f 6b 2a a8 b9 74 bd 72 af f7 08 e1 5d bb 3a d5 b5 ff 00 7f 8b 46 c5 f1 7a f6 fe fb f3 fd 94 e4 ef 3f 29 64 fb 3c bb c7 d9 53 7d 67 5b e2 d6 f9 01 c2 f9 87 5c d7 3b 6f d9 1d 03 87 4e 75 f2 df 5c 7d 2f c1 fa 63 90 75 53 5d d3 cf 07 9e 9e d4 28 3c 0a 46 cc 6b f2 06 fa e9 9c 9d 73 af 38 cc ce 5d 23 61 71 a9 3f a3 a3 e7 ec 7d 5f 31 d3 03 ed ac ba 6e 9d 96 af a4 d4 c6 f1 2e 8d ad 1d fb 95 57 22 d8 a3 67 ce b9 d0 f9 2d dc 9e 5c 64 6e c4 24 e4 4d 70 fb 3e 8f 9d 34 df 9f cf b6 b5 8e b9 f9 af 68 e3 bc 78 a2 37 e8 65 de 76 39 9e 01 f3 26 e0 00 03 c5 fd 6b 9e cd f8 bf e4 40 00 00 02 53 a9 a6 5f 48 48 bf 49 21 c7 b5 e3 72 db cd 6b 9c 35 a9 80 00 00 00 f6 ab 0b 00 00 15 0f 4f 7d 3d Data Ascii: oTNX5ZR=ktr]:Fz?)d<S}g[\;oNu\}/cuS](<Fks8]#aq?}_1n.W"g-\dn$Mp>4hx7ev9&k@S_HHI!rk5O}=
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: bb 8b a0 00 03 69 3f 57 d9 d7 c8 9f 17 80 00 00 1b b7 5e 48 a9 3b 36 e8 e2 3b 91 c6 1f 57 36 2c c3 8f 44 ae 95 80 a0 00 00 01 ed 56 16 00 00 7b e8 f4 a8 57 51 55 c2 ed d2 ed ea ec fc 43 0e f7 2b 75 7f e5 e9 9b 58 75 31 f6 7f cf f6 6d 3b 4a 7e 78 64 7b bc db 4f 46 d4 8d e9 1e 6e fd db 17 59 f8 07 4d de 31 26 f7 9d 93 ea 4c eb 9f 70 83 e9 0e 69 d3 1c 67 66 31 3b 17 9b b7 72 8a ce fe 4e d1 fd 3c 37 3c 33 57 99 b3 3f 58 4a 55 73 24 bf 8a 48 fd 53 e8 e3 b8 5e ef c2 3f 58 f3 7a 22 23 f9 f4 b5 23 cf 76 bc f9 9f 47 6b c6 fa bf 32 33 59 e9 cb a2 f1 1b 30 b0 89 ad 4b 1d 3d c8 48 1b 13 79 d8 91 37 f7 8c 60 59 aa 31 48 9c 1c a9 d9 2b 8c 6b 56 c8 62 94 e7 c5 98 54 b9 59 b0 f4 28 92 cd d5 e0 9d 92 24 3e 39 35 55 80 00 de 4f d4 f6 75 f2 3f c5 80 00 00 06 ff 00 d5 d3 52 Data Ascii: i?W^H;6;W6,DV{WQUC+uXu1m;J~xd{OFnYM1&Lpigf1;rN<7<3W?XJUs$HS^?Xz"##vGk23Y0K=Hy7`Y1H+kVbTY($>95UOu?R
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 71 7c be 7a d7 a0 68 a0 00 00 0f 6a b0 b0 00 01 50 f4 f7 d3 da ca ab 2b ba 5d bb 57 b6 ab 8d 5f b0 72 eb c9 77 3d 49 0b 64 be 9b 2e e1 45 96 72 b8 f5 ab 2b cf e8 c0 ac c0 bd e2 f5 d9 cf ef c7 57 bd f3 3e 8e 7d 7f 5b e6 e8 9b b7 d2 f9 b8 98 3f 27 eb 6c f2 df 4b e7 48 6c 9b c6 4e 2b 38 f8 c4 44 ac 4d 6a d5 29 9e 6b 1d 57 3a 92 cd b2 cf 32 36 2d b2 c8 78 ca c2 e4 d1 a4 f6 b3 a7 e5 d2 24 da 79 ed 9c 3b 0f bf 0c 3c 5c 6b 1f 17 3d 31 ac cb 62 d4 b6 ad 45 aa 0a 68 3c f0 f3 c3 cf 00 00 00 00 00 00 00 07 d2 31 f7 ba 6b e5 ef 85 40 00 00 0e cf d4 2c d5 a2 e4 d2 f4 e3 66 ec 51 31 a6 56 ad bc 1c 7f 22 58 6d 7e d0 00 00 00 f6 ab 0b 00 00 15 0f 45 47 b5 95 54 5c b8 5d c9 ae cd a9 c6 a5 d7 25 e3 d5 45 a8 c5 e9 3a af ca fb 1d 3f df af f1 70 ee 72 eb 85 9b e0 f6 c4 5c ef Data Ascii: q\|zhjP+]W_rw=Id.Er+W>}[?'lKHlN+8DMj)kW:26-x$y;<\k=1bEh<1k@,fQ1V"Xm~EGT\]%E:?pr\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.5	50129	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:51 UTC	393	OUT	GET /uploader/a55bc9c6ad3e71405e43f15c29ddf78dca8e80df.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:51 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:51 GMT Content-Type: image/jpeg Content-Length: 216450 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221af8b8c0d5ea22664f6e7d34fd90dcecc63233_221" Content-MD5: 4F5JJUJW/SAvtdglnC/Dzg== ETag: "E05E49254256FD202FB5D8259C2FC3CE" Last-Modified: Wed, 09 Aug 2023 07:26:47 GMT x-oss-hash-crc64ecma: 6460293378104763383 x-oss-object-type: Normal x-oss-request-id: 66511B6D91795F35360EFDD4 x-oss-server-time: 73 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:51 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e317ae72f7cc-BNA
2024-05-24 22:57:51 UTC	668	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 23 74 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0a 01 00 00 03 00 00 00 01 0d c8 00 00 01 01 00 03 00 00 00 01 0d c8 00 00 01 02 00 03 00 00 00 03 00 00 00 86 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 8c 01 1b 00 05 00 00 00 01 00 00 00 94 01 28 00 03 00 00 00 01 00 02 00 00 01 3c 00 02 00 00 00 09 00 00 00 9c 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 dc 00 08 00 08 00 08 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 69 6d 61 67 65 72 79 34 00 00 00 04 90 00 00 07 00 00 00 04 30 32 32 31 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 1a b4 a0 03 00 04 00 00 00 01 00 00 14 e0 00 00 00 00 00 06 01 03 00 Data Ascii: JFIF,,#tExifMM*(<i-'-'imagery40221
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: da f2 4f 75 04 57 2b 67 0d 94 32 98 b7 b9 50 c5 9e 41 ca a8 04 01 8e ff 00 85 74 de 1c d3 74 49 f5 3d 0e 35 d0 ed 1a 2d 52 da 59 c7 9f 23 dc f9 5b 4b 30 18 6c 06 e0 a8 ce 47 4c d7 b9 5f 1b 4e 9b 71 e4 bd b4 f2 d0 f8 cc 3e 06 ad 44 a5 cf 66 f5 f3 d4 f3 23 24 ea 87 37 0e 17 b8 c9 03 f9 d4 33 4a b1 95 05 19 c9 e4 6d 5c d7 a0 dd 5e 69 cd e0 a5 f1 15 86 93 65 61 a9 5e b7 f6 69 8e da 00 b1 43 c1 72 e8 09 3f 31 40 06 ec 02 0e 3d 39 e1 00 0b c2 8c 01 c6 05 6b 85 9f b5 4d c6 3c b6 d3 fc cc b1 70 f6 4e 2a 53 e6 be bd bd 0e b3 c0 fa 75 e3 5d 47 79 04 d0 ad be 71 2a 6f cb 15 fa 76 ae f9 d1 3d 4f e5 54 bc 13 e1 e1 a4 e9 a6 e2 eb 2b 75 3a e5 c6 ec 80 bd 45 6b dd aa a3 c6 bc 6d 7e f5 cb 52 a7 b4 9b 68 f4 b0 f4 bd 95 24 99 4a d5 37 dc 81 f3 63 04 f0 70 4e 01 38 ae 8a ce Data Ascii: OuW+g2PAttI=5-RY#[K0lGL_Nq>Df#$73Jm\^iea^iCr?1@=9kM<pNSu]Gyqov=OT+u:Ekm~Rh$J7cpN8
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: ce cd 82 3b 8d aa 6b 8c d7 66 d2 ae b5 1b fb a9 6f 24 b7 37 0b 0a a0 b7 8c 81 18 8c 30 e3 25 78 21 8d 54 d2 fc 35 a4 ea 7e 24 82 da f3 54 9a 70 6c e4 96 48 d2 7c 08 ca b2 0f 9b 04 9f e2 e3 a6 6a a7 86 3c 09 61 af f8 8b c4 26 da ee 25 d3 6c a7 11 c4 8c 64 6c a9 ce 08 23 07 9c 8e 49 e3 1d 0e 78 f2 a7 39 55 93 52 6a fe 9a fe a7 ad 4a 95 3a 49 b4 dd 97 f5 e4 76 7a 2f 8b ed 6f a7 6b 2b 2b 81 73 72 ab b9 95 fe 62 13 81 96 c7 19 e7 d7 bd 6e ac fa 76 99 31 36 f6 f0 da 4f 3a 83 20 88 60 39 c7 f7 47 19 f7 c5 78 4f c3 56 7d 33 e2 2e ad e4 9f 34 41 6f 2a 00 c7 39 da eb cd 7a de 89 aa 9d 55 c3 6a 33 7d 9a 29 63 7d de 59 20 81 e8 31 c8 3f ca ba fe b9 1a 54 79 ea 6a d1 c9 88 c2 f2 d6 e4 83 d0 9f 57 d7 22 b4 b1 bc be 7b 7b 86 10 9c 28 0a ac d2 15 3c ed 52 7e 9d 71 d7 15 Data Ascii: ;kfo$70%x!T5~$TplH\|j<a&%ldl#Ix9URjJ:Ivz/ok++srbnv16O: `9GxOV}3.4Ao*9zUj3})c}Y 1?TyjW"{{(<R~q
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: c5 25 9e e0 a8 6f f5 6c e4 0f a6 2a c7 87 86 75 eb 49 a7 b3 f3 e2 89 b7 fd 9d 23 24 31 50 48 ce 01 e3 8c 9f 61 57 56 e2 c6 ca 6b 8b 9d 5e ee 38 09 1b 23 f3 06 58 b1 e3 21 7a f1 83 55 3f e1 2b d2 63 b6 57 fb 49 67 0e e3 f7 c9 2e 30 36 ed 21 63 ec 72 dd 4d 69 8b c4 53 a5 07 17 bb ed ab fb 8c b0 d8 1c 45 7b 54 84 1b 8f e0 3f 5b f1 ae b9 a9 f8 94 46 3c 29 35 ad ae 5e 36 69 83 6d 0b c8 27 90 bd 3d 7d 47 4e d5 c6 6b 99 37 2e c1 40 45 fe 2c 71 f8 62 ba 8d 5b e2 26 9e 2f d9 6d 52 17 b1 52 00 02 dd fc c6 5e 32 09 63 d4 9d df a5 71 4b ad b6 ad 21 48 b4 99 a6 0a 77 31 57 ce c1 ee 71 81 f8 d7 95 87 71 9b f7 53 5e a8 eb c4 e5 d8 99 24 e5 1b 5b be 9f 9d 8d db 44 87 50 bf 96 ed 51 fe c9 1a 07 6c 9e 78 50 00 cf fb d5 b5 f0 d2 4f 3b e2 5e 91 90 a4 c9 73 93 b8 65 81 08 c7 Data Ascii: %ol*uI#$1PHaWVk^8#X!zU?+cWIg.06!crMiSE{T?[F<)5^6im'=}GNk7.@E,qb[&/mRR^2cqK!Hw1WqqS^$[DPQlxPO;^se
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: d5 bc ce 59 9d 6d e5 de cc 73 97 c0 cf 3f f0 2f d6 b2 b2 46 d7 6c f3 af 15 c6 4f 8a 75 95 41 97 6b c9 80 19 ef bd a9 f1 db 4c ba 7c 46 e5 5a 39 23 8e 66 55 3d 4b 05 6c 0f c6 9d e2 b6 f2 fc 63 ac 31 04 85 bf 98 f1 ff 00 5d 0d 74 fe 6d ad ce 97 14 f1 05 66 94 3a 42 e7 8d ac d1 48 07 71 8e 71 9f cb 07 a5 7a 59 86 9c 9e 87 99 97 6b cf ea 66 fc 3f ba 3a 9e a7 6f 0e af 3a fd 89 3c c1 0c 28 8b 1e e6 42 a3 6b 3a 8c 9e bc 6f 20 77 cf 4c f7 92 c1 6b 75 aa c1 7a 74 f8 2c 23 1a 66 f5 56 91 59 d4 99 1c 76 c8 3c 0c 9e 9d 2b ca bc 23 75 3e 8f 71 34 97 76 22 ea da e6 07 8c f3 b4 02 ec 8c ad f4 f9 06 7b f3 f9 de d4 e2 d7 f5 e6 b0 1a 9c ad a4 47 16 eb 6f 35 89 87 e4 62 5b 6f 38 2e 38 3f 2a 83 d2 bc 99 e2 29 c3 49 4a de 9b fc 8f 5a 58 5a 92 8e d6 f5 d8 e9 34 ed 27 5d bc d3 Data Ascii: Yms?/FlOuAkL\|FZ9#fU=Klc1]tmf:BHqqzYkf?:o:<(Bk:o wLkuzt,#fVYv<+#u>q4v"{Go5b[o8.8?*)IJZXZ4']
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: d7 53 d3 e1 b8 b9 b9 f3 25 23 e6 f3 5f b8 eb d6 be 62 78 78 49 a7 50 fa 37 8c 9e 22 5a 59 7a 22 4d 6e d6 58 bc 1b ad ea 17 d2 21 9a 48 5c 2c 50 ba 92 cc dc 16 3b 73 90 32 49 eb de b9 6f 89 2f 6b ad ae 99 7a 9a 90 82 58 20 41 1d b7 90 ec 58 3a 82 4e ef ba 38 1e bc e2 bb ab 97 5f 15 69 d6 ba 47 87 6e 21 36 17 56 b2 fd b2 fe 54 3e 5d be 7e 5c 05 38 25 fe 6c 7a 72 2b 2e df c2 9f d8 36 37 bf da 37 1a 7d f5 e4 09 1a 44 04 4b 1a ed 00 9d ca 4e 32 71 8e 4f 3c 9a e5 a9 5e 34 14 a2 b7 4f 45 e5 a2 37 c2 c5 f3 de 5b 79 98 56 5a ad ad ee a9 e1 f1 06 9d ff 00 20 78 c8 79 37 0c c9 91 92 dd 3d 41 6f a9 ae c2 fe e1 2d f4 ad 42 fd ec ee 4d bc e6 1b 66 57 53 fb c5 23 2c 72 48 fa 7b e2 a1 f0 9c 3a 6e 91 69 77 2d eb c9 73 01 80 40 e4 3e 1f e7 6f 99 b7 1e a4 7c a3 e8 0f d2 9b Data Ascii: S%#_bxxIP7"ZYz"MnX!H\,P;s2Io/kzX AX:N8_iGn!6VT>]~\8%lzr+.677}DKN2qO<^4OE7[yVZ xy7=Ao-BMfWS#,rH{:niw-s@>o\|
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 4a 94 a9 fb 37 1b eb 7d 7f c8 f9 91 f4 4b ed 47 4e 10 59 59 df b1 0c 18 7d 9e d9 9c 36 3a 0c 8e 9d 4d 6d d8 78 17 c5 77 b0 c0 b2 69 b2 a0 8d 02 03 33 aa 70 3d 89 15 f4 6d 15 d6 ea 49 c1 53 7b 23 9d 42 2a 6e a2 5a b3 c3 6d fe 13 6b 77 08 cb 75 35 84 51 b0 da ca cc 58 e0 f5 18 03 1f ad 6b 69 9f 05 ac ed ed bc 8b 8b f5 68 4f 0d 12 c1 90 46 08 c6 59 8f 18 27 8c 77 35 eb 94 56 76 45 f3 33 cd 6d 7e 0b f8 52 0b b5 b8 54 bb 52 02 86 8a 29 44 51 b6 d3 90 4a a0 1c 8c d7 51 69 e0 9f 0e da e3 cb d2 a0 62 3f e7 a9 32 7f e8 44 d7 45 45 3b 0a e5 6b 6b 0b 3b 5c 7d 96 d2 de 1c 7f cf 38 c2 ff 00 21 56 68 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 3f ff d9 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 Data Ascii: J7}KGNYY}6:Mmxwi3p=mIS{#B*nZmkwu5QXkihOFY'w5VvE3m~RTR)DQJQib?2DEE;kk;\}8!Vh(((?@ICC_PROFILE0ADBEmntrRGB X
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 42 72 64 54 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 42 6c 64 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 52 73 6c 74 55 6e 74 46 23 50 78 6c 40 72 c0 00 00 00 00 00 00 00 00 0a 76 65 63 74 6f 72 44 61 74 61 62 6f 6f 6c 01 00 00 00 00 50 67 50 73 65 6e 75 6d 00 00 00 00 50 67 50 73 00 00 00 00 50 67 50 43 00 00 00 00 4c 65 66 74 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 54 6f 70 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 53 63 6c 20 55 6e 74 46 23 50 72 63 40 59 00 00 00 00 00 00 00 00 00 10 63 72 6f 70 57 68 65 6e 50 72 69 6e 74 69 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c Data Ascii: BrdTUntF#RltBld UntF#RltRsltUntF#Pxl@rvectorDataboolPgPsenumPgPsPgPCLeftUntF#RltTop UntF#RltScl UntF#Prc@YcropWhenPrintingboolcropRectBottomlongcropRectLeftl
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 48 6f 72 7a 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 09 76 65 72 74 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 56 65 72 74 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 0b 62 67 43 6f 6c 6f 72 54 79 70 65 65 6e 75 6d 00 00 00 11 45 53 6c 69 63 65 42 47 43 6f 6c 6f 72 54 79 70 65 00 00 00 00 4e 6f 6e 65 00 00 00 09 Data Ascii: XTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenumESliceVertAligndefaultbgColorTypeenumESliceBGColorTypeNone

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.5	50128	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:51 UTC	627	OUT	GET /uploader/21884b5858ddddbeb9479fd4140706472aec9106.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:51 UTC	680	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:51 GMT Content-Type: image/jpeg Content-Length: 133267 Connection: close x-oss-request-id: 66511B6F2CAF36313106EF4C ETag: "CF55CCFE4604AE9D70B872EB8184AC31" Last-Modified: Wed, 09 Aug 2023 07:27:17 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 18258144024667190357 x-oss-storage-class: Standard Content-Disposition: inline; filename="2216e5d1d4a13f80e0c9d443ef6b830e04e38894_221" Content-MD5: z1XM/kYErp1wuHLrgYSsMQ== x-oss-server-time: 94 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:51 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e3179907f7f0-BNA
2024-05-24 22:57:51 UTC	689	IN	Data Raw: ff d8 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 Data Ascii: "ExifMM*@ICC_PROFILE0ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRC
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 03 20 03 5b 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 04 05 06 02 03 07 08 09 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f5 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 7e 54 e0 4e 94 71 78 23 d0 a7 96 e0 cf 60 1e 21 82 3d f6 7c e6 82 3e 94 c1 7c e2 49 8f a0 10 3e 1e 0f 62 40 f9 64 3d 13 03 c4 c3 a7 c1 53 42 52 d9 40 cc f6 1f 74 f9 91 22 7d Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((( ["6H~TNqx#`!=\|>\|I>b@d=SBR@t"}
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 29 92 18 99 21 8a 64 86 29 92 18 a6 48 62 99 22 3d 43 24 d2 95 f9 67 bb 6d aa d9 38 9f ab 85 fb a3 72 9f 41 f9 db 71 5f 3f f7 9e 0f f6 1e 72 7b ef c0 9f 41 fd ee 4f 9e ed dd b4 48 00 12 0c 6b b6 2a 85 b1 50 26 00 00 00 00 00 00 03 66 b0 9d 9b a4 1c ba 5f e6 39 4a f3 e9 d9 1a f2 75 ca dd 6f 67 24 58 9e 98 df 9e 65 78 bb b2 ab ae d5 b3 b3 85 5d 2b 36 d1 82 de 36 eb 17 5a 62 b9 2d 99 20 4c 0a 28 28 a0 2a 88 a2 88 aa 00 a0 0a 00 a0 8a 28 82 82 0a 08 64 08 28 62 28 20 a0 89 90 62 28 62 28 62 28 62 28 62 99 21 8a 64 82 26 48 62 99 21 8a 64 86 29 92 18 a6 48 7a bb 9e f4 99 ef c9 7d ff 00 39 d6 3d 68 ef d3 c3 ce be 8b 0f 07 af 81 f1 0e cb c6 ff 00 4a f1 30 fa 27 f3 b3 e8 ff 00 b7 cd f3 95 8c 84 7c 48 01 65 cd c6 5e 6f df d7 18 5b 6a 7d 9f 32 80 6d e3 28 99 cc 21 Data Ascii: )!d)Hb"=C$gm8rAq_?r{AOHkP&f_9Juog$Xex]+66Zb- L(((d(b( b(b(b(b(b!d&Hb!d)Hz}9=hJ0'\|He^o[j}2m(!
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: aa 2f 8a 64 86 09 92 18 e3 92 18 e3 92 23 ac fb 7b c5 be d2 89 f9 cf 4e b9 d3 00 02 5b b0 f0 9b 50 ea 95 6b aa 00 01 b3 5e c3 60 13 02 a6 42 82 82 a2 86 48 a1 33 0e a7 46 a3 33 51 43 24 99 22 8a a9 90 28 a2 aa 28 aa 28 28 a2 aa 28 aa 8a 0a 3b 3a 14 2b a9 19 a4 5d 22 5e 26 2c 0a 24 50 05 00 45 52 db cc ba 15 02 69 d6 e8 37 3a 62 c3 f6 2d 22 7d 01 c3 7a b3 29 49 f3 a6 ad 95 aa 7a cb 8f d6 e1 6d 6d 09 11 31 2d 0a ee df 4b d4 34 76 1c af 5e 7f 23 1f 14 8a 84 ef 42 e7 72 7a d5 96 84 bf b3 d5 ac 59 cf 5d e1 77 1a c7 1f 46 a7 4b 6f ee e6 af 51 3d 49 41 f3 7a 39 8f 44 a5 74 cf 4f 9a b5 15 64 85 9a c3 d8 f2 96 8b 72 35 90 8f 8b e2 99 62 62 99 62 62 99 62 26 39 62 8e e5 ec 5f 22 fa ea 27 e7 5d 2a f1 47 00 00 00 00 00 0d 9a f6 1b 00 42 a8 b2 14 01 45 14 01 54 05 c9 Data Ascii: /d#{N[Pk^`BH3F3QC$"(((((;:+]"^&,$PERi7:b-"}z)Izmm1-K4v^#BrzY]wFKoQ=IAz9DtOdr5bbbbb&9b_"']*GBET
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 77 2f 44 74 cc 94 bf 0e af 20 ec fc ff 00 25 67 36 3a 7d 8c ad 3c 73 b1 72 ff 00 5b cf 8c c7 2c 7d be 14 c7 2c 4c 51 50 c5 15 0c 51 50 f7 0f 54 e6 fd 22 1e 28 e5 dd 2b 9c cd 5b eb df 1c 58 24 20 64 4a a6 87 2d ab 60 09 1b 75 6d 36 aa 2c c2 82 8a a8 a0 a8 a2 aa 64 2a a2 a5 72 45 17 2b 57 56 47 29 6b d2 78 ec d7 d3 d3 be 4b 66 9f 61 32 f2 a4 7d 67 d2 30 3c 2b 6d ab d5 a0 e9 2d 89 e6 1a f3 4e 8d 45 86 10 ee e3 ad 63 68 2d 04 9e 46 e5 8c 4c b4 33 f6 b3 13 78 d8 29 68 bc d5 e3 a6 8b 67 35 9e d0 31 c2 76 a9 7a dc 20 ad d4 ba 59 f6 87 51 91 37 4a 15 99 cc 4c 64 35 de 9d 6a a6 cd 17 7c 34 a0 be b1 52 f6 af 4f 96 8e d3 c9 a5 a7 25 e8 bd 78 70 59 8e d3 0d 13 c0 e0 b7 ed ad da 6c c6 3f 3d ee d7 7e 67 3d e0 7a d0 98 4b f4 b6 35 d9 dd cc 7c 7e 8d e9 ae eb 9e 9a 6f dc Data Ascii: w/Dt %g6:}<sr[,},LQPQPT"(+[X$ dJ-`um6,d*rE+WVG)kxKfa2}g0<+m-NEch-FL3x)hg51vz YQ7JLd5j\|4RO%xpYl?=~g=zK5\|~o
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: d3 6b 1c be cd 60 b1 f9 3d 9c 1b aa 4d f4 9f 95 ef a2 70 ff 00 61 c2 cb c8 1d 37 b7 52 af 7e 4d c9 ed 4c fe bb cc 59 8b 17 7c db 1f 2f da 2e d4 83 5c 6f 5c e5 1f 3f e8 73 f4 44 fa 9f 35 71 44 42 e2 20 4e 40 da 4f a2 80 44 f9 6b 9f 3c e7 9e 47 57 54 91 a2 58 7c 0e d9 89 2a ac bf 1c bb e6 dd 37 98 76 f7 56 a0 27 e1 3e cb c5 63 b7 56 db f1 ee 54 59 85 11 4c b2 c5 c8 fc 69 2b 56 ef 55 79 03 d6 ff 00 21 ea 72 ae dd 58 b1 79 3d 9c 4f b8 ea db 6a f1 ce d7 0b 62 e8 ac 1d 5f a8 44 da 95 c9 78 bd 9c 9a b3 9e 91 c7 c4 d5 eb 37 2d 39 22 a7 69 7c ce d7 a8 5b 77 b7 b1 eb 07 8c b2 88 99 57 6c 6f 35 db 16 cd 3a 4c bc 5c 94 56 b9 ca 56 ac 6c f4 61 19 26 ff 00 68 d1 33 07 33 db 8a 35 de d3 7a b8 8e 96 6d bc 57 a9 f7 2a 52 fd 03 7e bd ff 00 1f d7 a3 6e 9d 95 35 87 99 5d a5 Data Ascii: k`=Mpa7R~MLY\|/.\o\?sD5qDB N@ODk<GWTX\|7vV'>cVTYLi+VUy!rXy=Ojb_Dx7-9"i\|[wWlo5:L\VVla&h335zmWR~n5]
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 3e ad 7a 33 8e 51 d6 7c 0d 35 a2 a7 34 b5 cb 1c ee de c9 eb 49 8e 59 c3 fa 27 30 fd 4f c0 9b d7 a4 f6 f9 07 4c dd 09 96 bd b0 bf fa 1f cf 7e 83 fc cb dc 4c 17 57 cd 77 54 ec 2f b5 f4 d5 1b 6f 4c 34 47 9c 9a 03 db c7 a8 53 27 73 e8 ca 42 81 cb eb fe ef 3e 52 39 c8 7a f4 d4 f1 bb fe 6e 88 57 59 b2 bd 65 39 bd d6 97 df c4 01 df c4 00 00 07 a4 fc d9 ea 03 d4 a0 44 f9 76 ab 3d 4a f0 bb b6 d9 f8 ff 00 71 f1 f7 87 e4 9d c3 2e ee 7e 67 d2 39 97 43 e0 df 75 12 f5 51 c6 fc 53 3c 33 fb cf 23 68 13 00 04 9c 84 64 cd 25 9e 19 63 95 da da 6b 13 dc fa f7 5b 17 3b bf fe 7b ee cc 63 ae 9f e7 da e3 25 5c 8a 95 c1 c3 7a 32 2e 34 db 1c 4e ab 44 93 08 5e 0b 59 d4 cf 9a 13 46 c8 eb 4c 8e a8 c9 2b 9d b4 78 d3 36 d6 8f 18 5a 77 ea 52 f2 ec 0c 6b 1f b7 0d bb ce 85 c7 2b 46 a7 cc Data Ascii: >z3Q\|54IY'0OL~LWwT/oL4GS'sB>R9znWYe9Dv=Jq.~g9CuQS<3#hd%ck[;{c%\z2.4ND^YFL+x6ZwRk+F
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: d9 f5 f4 da 81 72 7a 61 3c 8a ef 64 e4 16 bd c2 d3 8e 78 d7 06 ee 12 a8 99 01 9c d9 d3 2d 9a eb 68 56 bb 2c 5d b5 6b 5e b1 4c e3 2c b9 77 44 e6 1a 3b 45 0f a0 f3 ef 32 6f ba 53 77 9f 6e 74 df a6 a7 a0 c3 c7 7e b0 f1 37 d6 79 56 a8 d7 1a 3e db cb c7 33 29 63 b7 16 64 9d 9e af 7a 45 ea 81 5e 60 56 74 21 9e a6 46 71 24 93 79 3a 5e 08 45 df 0b 8e dd 5b 34 c6 7e 49 83 6b d6 d8 e6 1d fc c4 c6 96 5a 26 25 e1 db 42 c4 bd 6d 19 a2 27 7c 33 86 b5 9d 15 cb 15 77 3d 64 63 a4 63 a2 cb f4 23 e7 b7 d1 62 de 04 4f 05 e4 1d ef 87 7c af a9 31 96 0e bc 3d a9 31 f6 dc 7d 5a f1 ae df cd ad bd bc d2 2f dd a7 81 df c1 e0 2d 55 5f ba f1 33 03 ab 30 01 f7 63 a3 76 b9 ac 15 d6 0d 33 5c b5 54 57 9b 4b 3c a5 19 62 6e ec aa bb 89 79 aa 7b 7b 1a d9 39 af a6 b0 d2 1f 99 76 9d 5c 3b c7 Data Ascii: rza<dx-hV,]k^L,wD;E2oSwnt~7yV>3)cdzE^`Vt!Fq$y:^E[4~IkZ&%Bm'\|3w=dcc#bO\|1=1}Z/-U_30cv3\TWK<bny{{9v\;
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: da 1f 63 a5 23 70 96 cb 4a c3 65 26 da d9 ba b3 51 0d 69 dd fa 27 93 6c 53 4f 57 eb e0 bd 0a d5 ba c6 3f 11 01 24 e7 5f 91 d7 c9 38 df 79 e1 bd d9 ca 46 2c 76 f5 7b a3 1d 09 04 22 73 95 87 5a cf 41 2a 2f 79 37 96 93 ae 4a 52 d5 d8 f9 68 be ac 70 d9 ad ce f9 4e ce 5e 2e f0 e1 8d 59 cb f5 f0 6b 94 d7 e8 6a df 93 73 ee 93 6f e6 ec 47 dc e6 b8 7a 62 9c b0 04 ae 51 f8 1c 63 bb 71 cb ac c7 40 e2 3e a9 a9 75 70 78 dd bc a4 5f 37 75 ef e8 57 80 7d fd 5b 00 1e 6f f2 77 ad 3c 88 6c dc 99 0d b1 4c e2 51 45 15 0c a2 da 55 16 d4 cc 09 80 00 db a9 4d fa 9d b4 89 40 04 9b 84 98 c3 59 c7 6d 77 f9 1d 9b 75 ed d7 59 d2 e5 31 b4 6c 66 ef 5a 58 cb c3 ca de 1b 3e cf 0c ad 93 17 cd e1 10 e3 2c 36 38 d8 cd fe 66 fa 77 b7 9a b6 67 22 df 76 2c a6 35 21 92 b8 d5 68 c3 26 5b 2e 70 Data Ascii: c#pJe&Qi'lSOW?$_8yF,v{"sZA*/y7JRhpN^.YkjsoGzbQcq@>upx_7uW}[ow<lLQEUM@YmwuY1lfZX>,68fwg"v,5!h&[.p
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: d7 7e 49 6a 24 e4 07 6f c6 60 81 d7 f2 76 66 f1 af 78 7a a4 e3 9e 6b c7 47 31 4e f1 b4 3a 8d 93 d5 59 4d 41 64 93 57 2d f2 b3 cc 64 1e a9 0b ae 72 4b 4a d4 56 eb bb 5a d3 b6 d9 9c 5e 94 29 78 fb 3e 95 66 92 b5 cd 2b bd 59 5d 26 28 d2 93 52 12 a5 5e 2a 56 52 fd 23 13 28 73 8e 79 d0 61 0d 13 15 79 90 af d8 12 0d 5b 6f 68 4a c8 c3 e5 29 9d 58 86 b6 4e da 0d 32 73 5d 85 c1 ed 70 95 81 b4 5e d1 c5 6a d0 e0 82 79 6b b1 1c ad 7b 4d a8 f3 6b df 52 58 4f 27 cc fa c7 33 ca d7 4e ea 1c b6 6e ee 11 f2 00 00 00 00 00 00 00 00 00 00 00 40 f8 a3 de b5 a3 c4 ba 2d 55 43 43 6d b2 46 9d 66 e2 02 b3 d3 61 8a 5a aa 19 81 30 ff 00 28 e2 9d 7b f4 a1 7e 60 05 45 4d e6 82 6a 48 aa 65 79 de 73 f5 e9 38 42 8b 29 d0 b6 26 9f 3b 30 fb 3b 56 1e 2e 36 87 55 47 56 59 88 cd d0 1b 49 09 Data Ascii: ~Ij$o`vfxzkG1N:YMAdW-drKJVZ^)x>f+Y]&(R^*VR#(syay[ohJ)XN2s]p^jyk{MkRXO'3Nn@-UCCmFfaZ0({~`EMjHeys8B)&;0;V.6UGVYI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.5	50131	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:51 UTC	627	OUT	GET /uploader/ddaee3b072f5adc45405925d5ba15ceeed727c59.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:51 UTC	680	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:51 GMT Content-Type: image/jpeg Content-Length: 320912 Connection: close x-oss-request-id: 66511B6F342C483237137D01 ETag: "150E1221B42CED4CAA07EF8C72E53C8F" Last-Modified: Wed, 09 Aug 2023 07:27:19 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11089175049072434080 x-oss-storage-class: Standard Content-Disposition: inline; filename="2218f64e9740df3db05404a0bdd9df2e66821251_221" Content-MD5: FQ4SIbQs7UyqB++McuU8jw== x-oss-server-time: 80 CF-Cache-Status: MISS Expires: Sat, 25 May 2024 02:57:51 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e317af9ff7f8-BNA
2024-05-24 22:57:51 UTC	689	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 00 77 01 00 e8 03 00 00 00 77 01 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 14 05 00 00 03 a0 04 00 01 00 00 00 14 05 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipwwimagery40210ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 05 14 05 14 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 07 02 01 08 09 ff c4 00 1c 01 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: C) )/'%'/9339GDG]]}
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e1 58 6b c5 09 4a 75 22 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 29 0a 72 90 a8 28 0a 02 01 af 15 c0 c2 4c 28 8a e3 b3 9f a1 4d ac 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: XkJu"D)r(L(M
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 00 00 00 62 2b ca c2 b4 ab 2a 8a e2 01 06 14 88 88 ae 4c a9 ee b5 8b 93 dd 73 f1 95 71 d2 98 54 88 69 d6 e9 ad b6 90 6d d1 26 39 77 bb f8 f8 3a 53 3a 3d 2b a9 ee f6 bf cc fc fa fb 57 55 e2 f6 20 d6 7e 5d 13 2b 55 e7 33 e1 9b 4a c8 d6 9f 29 78 dd 59 4e cf 4f 99 db 0e 94 aa db 3d d3 e8 be 67 e7 27 5d 77 07 a1 8d 79 94 bf d4 c6 56 61 70 b6 12 59 e0 c2 7b 3c 98 c8 d0 f2 61 3e 19 a5 72 4e 52 26 b9 7b bc 56 65 97 a9 a4 de 8c b2 22 a7 9e 2c 79 2f 61 c5 ae a5 e4 ed 02 f3 d3 bd 3f 4a 72 79 5c d7 62 ad d6 cf a2 52 dc ee d1 a4 ef 5f d2 3c d7 d0 d3 74 7d bb 57 b5 39 7c 24 56 6f 0e d7 35 fc e5 df 9e 8b 6a 56 9f ac 39 74 f1 cf b6 bb 21 9f 5a ea 48 d7 73 bf 82 ab 4a 74 ce 6d 32 fa dc 91 a6 30 98 8d 92 b6 fd 9e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 c4 20 ca a6 6b Data Ascii: b+*LsqTim&9w:S:=+WU ~]+U3J)xYNO=g']wyVapY{<a>rNR&{Ve",y/a?Jry\bR_<t}W9\|$Vo5jV9t!ZHsJtm20 k
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 5b 0a fd 6b 5b 7a d8 de b2 78 af 43 aa 4f 55 61 5a f7 1e 64 e4 c2 fe eb af 49 f4 fa ad 66 78 a6 94 de 8e d1 33 a9 e6 d7 8a fb 2d 51 bb de 9c 7b b7 2a db a2 97 9c 5a f4 ae 6d 34 b3 01 ae 5d d0 21 47 65 84 46 d7 5b f1 7b 56 bc ed 71 6a 8b a0 67 5e 6b 65 0d ab 12 cd ef 0d 3e 69 49 5e 8f 3f 89 8f 46 23 a5 d6 df a9 40 34 c3 9e 5a 9a d4 b5 93 5c 9a eb d6 ce 86 ca 15 20 5f 29 d6 c6 f1 4b 38 e9 d1 62 b0 b3 ec db 29 6d ba 2f b0 9e 21 9f 0c 98 61 f2 bc 99 2b 9c 5b 5b 0e 9d b1 d5 cf 64 cd 77 f5 ac ad cb 52 c6 2d ed 45 7a ca f3 3d ce b5 c7 d9 49 b7 9d 3f bb 97 42 ec ca 6e fc d2 f2 ea d8 3b 38 7d 77 f9 5e 76 cf ea 53 3f 4f 2b fa 3e 25 4b 26 de 6b 78 d9 5f cd 2d 8f 3d f0 56 de 30 d3 1d 35 c1 9e b8 f2 d3 e5 2d f3 2d 7d 9f 0c 54 98 24 48 bc 62 2d 25 54 8a 69 97 27 d9 9a Data Ascii: [k[zxCOUaZdIfx3-Q{*Zm4]!GeF[{Vqjg^ke>iI^?F#@4Z\ _)K8b)m/!a+[[dwR-Ez=I?Bn;8}w^vS?O+>%K&kx_-=V05--}T$Hb-%Ti'
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 0b 52 a3 aa 9c 27 ab 39 93 1e 8a 83 9f 1b 41 26 97 fd 2b e7 6f 47 56 bb 66 48 7e 79 ea af 6b e2 bd 3d a7 c4 aa 6d 4d 8a 9a 47 27 59 74 a7 25 bd 75 cb b7 1c ed 8f 7a ed bd 58 57 cc 43 32 9d b2 b6 fd 12 01 f9 5c e0 96 61 30 2b f0 ab 4d 0e b8 f8 bf 3e d1 a7 2c 05 a8 32 ed c4 4e c7 6b 5c b7 b4 31 ab ac 74 72 d6 cc e2 5b e2 72 96 b1 14 a8 4d 87 da ac 4d a2 96 d9 4c 8b 62 c3 58 b9 ce 32 b2 26 ba a8 f2 f0 60 97 b3 da b7 15 ba 62 31 f4 f8 7b 94 82 39 e2 5e e8 a8 b3 0c bd d5 8e 5f 49 4a da 17 b4 b7 a2 44 5b d9 8a 15 76 59 c5 7d 42 39 75 13 b5 65 a4 4b d7 b1 de b5 3c bd 55 b0 b2 d6 b6 13 5e 1a 7c 4f bb 53 6f a5 f9 57 a3 c7 ab 6b 4b 0f 37 b3 5c ea e6 ba df 3e 91 9e d6 36 a6 e9 c1 ae f5 cd ad a7 3c da d1 e8 c6 7b 8b 52 d9 5d 31 0e ef 99 a0 ea c3 ad 2c b0 b7 b5 b6 3a Data Ascii: R'9A&+oGVfH~yk=mMG'Yt%uzXWC2\a0+M>,2Nk\1tr[rMMLbX2&`b1{9^_IJD[vY}B9ueK<U^\|OSoWkK7\>6<{R]1,:
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 67 e9 79 a7 76 0c bd 1f 99 77 62 a7 a3 87 3f 41 9f 7e 6c bd 0f 71 d3 f1 6f a9 c1 b7 8d d1 fe 87 f0 2c f3 5a e5 b9 87 06 b8 91 80 87 77 c2 75 6d 2c 91 15 c0 56 e8 f0 67 aa 38 25 93 2a ce 99 91 1e 88 92 c4 48 8b 6c 35 63 3d af e6 b4 f6 43 d2 22 55 63 13 75 4b cd 45 b1 b1 65 31 ec b6 ad b0 51 8e 6b 60 59 4a c7 6c ed b4 6a bd 39 c9 da 3e da 95 1c b7 e5 1d 51 b3 65 7d 2f 8f a7 27 57 34 cb b6 2f 3b a7 c5 2f ad 76 61 ab f5 61 53 59 b6 a5 bd d3 5d b7 4c b9 cf 3f 46 c1 ae 7f 66 ba a1 b0 44 d2 d6 dd 43 6c b9 a6 5a 76 4e 5d 7a 35 5a 4f 6f 36 eb c1 6d c7 83 7f a5 6a 20 eb 7d 7e bb 5c 97 58 de 3d 6f 36 f4 2f ea 2b 4d ad 35 0d f3 ea 78 69 e6 26 bb 3b db de be fb 39 b5 1d f2 d5 6d 4d 27 6a cf c6 df 4b 8a b4 dd e9 d1 f2 b6 cb 6a f3 8e ec b5 eb d6 19 c8 ab 6f d2 e6 e7 6a Data Ascii: gyvwb?A~lqo,Zwum,Vg8%*Hl5c=C"UcuKEe1Qk`YJlj9>Qe}/'W4/;/vaaSY]L?FfDClZvN]z5ZOo6mj }~\X=o6/+M5xi&;9mM'jKjoj
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 54 75 76 5a f3 78 78 a7 c2 9d cd ed e2 df c3 9f e9 7c af 8f 37 d6 e4 7f 55 f5 9d bb ea bf 2b b0 56 a2 5f 99 b8 f5 89 69 af b3 34 56 65 6f 61 58 83 67 aa be 1f 51 bb 5d 5f 13 a9 c5 bd 49 09 d9 ae 42 22 5d 65 48 f8 6c 54 b7 83 12 61 2a b3 d5 2d ed 23 3a 24 da 6e 33 8d 86 b1 b9 65 7d 82 a9 57 8b 29 6c d3 5b 1b a4 cc 58 eb 4c 76 a7 e7 3f 96 ed d3 1a 68 1d be 46 5f a7 b6 b1 b4 f6 d4 f8 e5 d6 b3 8f a2 45 6f 86 18 ef 5a 2b 57 4a ea e7 b0 e8 ce 31 6c 9c c5 1d 66 65 d1 a2 2c ca 78 89 8b 74 5f 1f bb 7d f4 f9 39 dd e7 82 ab 5f 6a 74 09 5d 45 aa eb 6d 82 62 1d 5f 62 c3 2c 42 f4 f9 2d d7 cf ea eb 5e 6f 74 6c b5 81 13 ea 1f 6c c7 31 a3 fa 1e 6e b5 be 34 13 35 da d3 a5 e5 6d c3 25 94 5b 4c ea ae d9 cd 7b af 98 f5 b8 9f d5 f8 d2 7d 0c 7e 43 52 3d 5a bb b1 24 f2 9f 31 6d Data Ascii: TuvZxx\|7U+V_i4VeoaXgQ]_IB"]eHlTa*-#:$n3e}W)l[XLv?hF_EoZ+WJ1lfe,xt_}9_jt]Emb_b,B-^otll1n45m%[L{}~CR=Z$1m
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: f5 8d a4 d6 e5 a6 0f 95 fd 07 4c ee e1 97 76 e3 e5 f9 d3 bb fc bf d0 bf 49 e5 68 25 5e 17 ea 5c ba d7 d6 34 9b cc 3a ce af 35 db 73 db 40 d7 2d 47 46 6a 36 3a 4e ef d9 97 ad 72 8e 61 30 9f b1 16 d9 40 38 71 c2 25 33 e1 fd 0e 7b fa 17 87 13 e8 3c bd e7 f2 3f af dd fd ce 6e 6f ec 61 a8 a2 de 2d d0 09 29 e3 fe 17 eb bd 23 e4 3e 1f f6 77 e9 5f 31 f8 a1 3f ad 0d 20 e4 47 eb 13 f2 51 fa 3a ab 23 f3 ca 7f 4e 5a bf 8f 3f 35 fa 8e 43 f5 1f ab fe ac fa 3f c0 e5 ab ac c3 f2 a7 0f 74 48 79 24 43 19 e9 61 32 27 ef 67 1f 76 d3 2c da 39 3f 2e d1 b8 fb 71 ab f0 f3 7c 37 2c 9e 65 f6 5a d6 91 36 8f 93 39 4f 31 11 2c c9 56 43 dd 59 49 32 9f 0b ea 4e d3 95 ee ab 1d 1b 25 c1 ee 5f 34 8f 27 ad e9 a6 fa 99 fe 5e e0 df be 74 e3 a8 5e 39 ed 9b ef 5e 5e 91 aa c2 7d 1f a4 a9 3c be Data Ascii: LvIh%^\4:5s@-GFj6:Nra0@8q%3{<?noa-)#>w_1? GQ:#NZ?5C?tHy$Ca2'gv,9?.q\|7,eZ69O1,VCYI2N%_4'^t^9^^}<
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 78 f7 b2 db 3d 73 87 a7 36 17 d9 11 6d 6c f3 cd 66 c2 75 ab 61 15 b4 e8 ca 5f 55 38 fd c8 9e a7 64 95 62 d2 d9 6d 1e f6 a7 e5 6e bc 7b 9f 36 9c 2b 7c ff 00 4c f1 ef 03 93 a3 99 fa 5c bf 8d 37 cb ad f9 bd bb 07 3e bc d3 a7 2f 34 9f 7d 19 56 f5 f3 ed b9 6b 75 c1 d3 18 d3 ef 1b 46 56 b2 e9 c7 4c ea c9 68 d9 61 fa a7 e6 fb 6d b9 f5 f1 31 84 81 5d 2b 16 f5 68 85 36 c7 37 f0 67 bc 45 3c c4 8b 2b 57 25 e9 2e 6b 2e f5 8c e4 e1 3e b7 0e 6e bb d3 44 ec 3e 07 d5 ee 7e 6f a5 c3 a9 ec d9 6f e0 73 7f ab f8 ab ca bf 41 70 6f 0e 1b 0e 73 49 6a f9 b2 e7 f2 ef a8 c3 e1 f7 f1 0f bc f3 78 e7 dc f8 97 bd 7e 7e f9 2c 4a f2 59 8e 80 54 9b 69 55 57 83 7e b4 f4 fe 2d 6c b1 d3 5e 86 bb 2e 5f bd 68 66 b7 59 5f 29 d2 3a f2 c5 7c fe 18 ac 88 7e eb ad bd 80 71 93 f3 e5 aa 86 38 9b 4f Data Ascii: x=s6mlfua_U8dbmn{6+\|L\7>/4}VkuFVLham1]+h67gE<+W%.k.>nD>~oosAposIjx~~,JYTiUW~-l^._hfY_):\|~q8O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.5	50132	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:51 UTC	711	OUT	GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ee8-2905" If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
2024-05-24 22:57:51 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:51 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-2905" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 200973 Expires: Sat, 25 May 2024 02:57:51 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e3195d97f7d0-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.5	50136	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:51 UTC	469	OUT	GET /liquid/buyer/public/img/payment/maestro.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-20a8" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:51 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:51 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-20a8" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 191796 Expires: Sat, 25 May 2024 02:57:51 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e3195c07f7d8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.5	50139	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:51 UTC	393	OUT	GET /uploader/1abfc652cc0f3e8037cae0f5dec3c53ff766f022.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:51 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:51 GMT Content-Type: image/jpeg Content-Length: 367680 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2218b461ff1f224019104ac8404120c0fbb90828_221" Content-MD5: Rgvf2n7yEBTIGcNXHqceSg== ETag: "460BDFDA7EF21014C819C3571EA71E4A" Last-Modified: Wed, 09 Aug 2023 07:26:36 GMT x-oss-hash-crc64ecma: 4349740679372277402 x-oss-object-type: Normal x-oss-request-id: 66511B6D5EDFF630318CFCCE x-oss-server-time: 75 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:51 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e31958c4f7cc-BNA
2024-05-24 22:57:51 UTC	668	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 00 77 01 00 e8 03 00 00 00 77 01 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 14 05 00 00 03 a0 04 00 01 00 00 00 14 05 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipwwimagery40210ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 05 14 05 14 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 02 03 08 01 09 ff c4 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}X
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 47 91 e4 69 84 46 90 19 c6 1b 10 d3 ae 2a da 31 6c ab 85 b0 e8 95 7d 73 c7 56 61 81 19 45 66 3c 65 8a fe b6 ff 00 76 ae dc 74 33 9f 56 33 b5 af b1 62 73 73 97 4f 5b 8d 5a ef f8 7e ae 9f 97 e4 8f 2d 2e 84 6f 3f bb 05 a3 dc e7 cd ed 4c f5 7c 84 ee d7 17 bf 57 7e 27 89 ee b5 bd 3d 4a ef 42 8c 19 63 2e fd 49 ea b5 76 85 1c 8b 06 95 7c a3 35 78 8c 8e fe af 9f 73 2d 64 9c aa 99 46 c9 8d 59 46 53 b7 9c e5 cf 67 3d b7 c3 8e c5 1f 2f d4 cf 94 73 6c 87 6e 63 7b e1 76 2a 35 ef c9 6e f2 3b bb 5c 08 0e 8f 36 0f 63 89 50 da e7 64 a5 91 54 7a a1 65 83 53 ad 68 f1 9f 46 a6 78 7f ac 55 f7 34 eb d7 5f 5f b6 9d b9 e9 7c 25 5b d4 fc fe 89 e6 3d b7 be a1 65 d6 bd 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GiF1l}sVaEf<evt3V3bssO[Z~-.o?L\|W~'=JBc.Iv\|5xs-dFYFSg=/slnc{v5n;\6cPdTzeShFxU4__\|%[=e
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 71 1e 65 91 86 71 dc 75 1d 67 68 31 cc 13 89 c4 fa c7 49 5b b6 99 9f 43 f3 3d a7 e3 3d d7 cc 74 e9 fd 6e 1e ab e8 f1 e2 2b b6 26 3b 70 90 db 8a a7 a5 19 9d dc 56 6e 3a 5b 11 1b 5c ef 55 68 57 be 78 5d bd 1d da d3 d1 bb 19 be f3 f7 fd 0f 5e 7c 95 b5 b3 d5 d7 f3 bb 7b 43 7a 95 75 75 7d 0e c6 c7 d8 f3 d2 7b 1a 3e b2 ab a3 dd 89 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 79 f4 f2 71 d4 77 96 b8 46 cb 3b 30 f3 8e 58 c6 4b 12 ec 4a 26 43 29 21 da 0c 69 47 91 8e 96 51 f1 1f a7 d0 70 39 1d a9 7d 07 13 99 94 66 83 3c ee 3b 4e 66 71 d8 46 23 5b 2c 27 79 d2 7c 3e 65 84 75 9d c7 79 d2 61 98 65 80 fa 74 98 64 71 c8 94 3a 8e 67 23 e9 f4 c1 33 0e 47 49 82 72 31 ce 93 a4 fa 4c 91 c7 41 d6 7c 3e 18 a7 03 11 8c 42 1e 74 e7 74 be 77 b5 7c e7 b0 8e e6 7a 5f 3e fa Data Ascii: qequgh1I[C==tn+&;pVn:[\UhWx]^\|{Czuu}{>yqwF;0XKJ&C)!iGQp9}f<;NfqF#[,'y\|>euyaetdq:g#3GIr1LA\|>Bttw\|z_>
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 32 a4 92 58 7a 16 4c b8 a1 cf b2 52 0b 31 c0 c1 31 ca de 52 61 1f 86 61 d2 cd 7e 9e 65 1b 43 e7 19 13 d6 b3 df e8 f3 65 e8 a7 6d eb 2c bc 66 25 f0 cb 8e 23 a4 cb c3 ae 59 86 8c 60 64 e7 3c 77 1c ec 86 54 dd 92 86 45 b1 4e 12 76 d5 37 66 32 8f b8 cf 33 96 63 db 19 f6 c2 7d c7 74 2c ef 8b 26 ac f4 78 ae df 92 2f d9 86 ec 72 a3 2f a6 a9 a5 bf db 2c 7b 2b 93 b5 a4 7b 7a da a2 dd 5d d3 2b 75 1e 35 b6 35 73 89 d7 77 55 d0 89 dd d0 ed 8e 70 68 da 8c af 62 7e d8 d7 b7 b9 09 d7 8b 87 da ad cd c6 3b 53 b3 e7 1f a0 b1 c1 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 28 79 7c cc 3b 08 98 e2 36 8f 47 2d ca ed e4 dd af 5e d9 d1 bb f4 3c c5 52 1b 38 3e 2f f5 37 15 ac e1 89 00 00 0c c3 68 7a ff 00 cc 9b 52 fe 3e 7e 73 22 76 45 e6 93 53 42 5b 9a c7 a4 65 19 83 Data Ascii: 2XzLR11Raa~eCem,f%#Y`d<wTENv7f23c}t,&x/r/,{+{z]+u55swUphb~;S(y\|;6G-^<R8>/7hzR>~s"vESB[e
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: fd 17 e6 9b 06 fe 56 a7 c4 a4 8c d9 c6 5c ed c2 34 9c 8a 8c 6c 9c bb 08 dc 3b ca 1c 90 64 1c 5b 44 d8 f2 53 4b 09 19 86 bf ef 72 6c 9b 14 49 46 4e 4f 3a 9b cd f2 7c b5 d5 5d 7d 38 ba 6d e8 8e ee 7d d3 dd 9d 8f 59 6c bf 67 c9 fe 73 5b 3b 1e 57 e4 b9 b5 a9 f6 f8 4b a5 1e 8d 85 0c 7c eb d8 76 36 60 35 ea d8 7d 0e 84 ce d5 bb 0b d0 5b 0f 7d 5c 63 0e a9 c3 e6 16 8d 3d fb d6 af 47 e9 c4 f8 7c 90 64 54 f9 86 04 73 db 37 54 ab fb 54 b0 76 2b e9 b2 ac ea ec af d5 18 2d 7b ba a1 99 78 d5 89 b3 54 e7 3b 6e c3 c9 e9 eb 9d fd 4c dd ad 2f b9 77 e6 50 da ea ce ae b5 6f 56 18 b5 55 59 96 dd db 4f 47 86 bc b0 1a d8 99 aa 93 d1 ba 06 fb ba d8 db 17 ed fe 80 6e 76 7e e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a4 8f 24 19 24 81 61 25 0e c3 a5 98 8c d9 d5 9a 6a Data Ascii: V\4l;d[DSKrlIFNO:\|]}8m}Ylgs[;WK\|v6`5}[}\c=G\|dTs7TTv+-{xT;nL/wPoVUYOGnv~$$a%j
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 09 18 6a c8 c6 bd c7 b9 e9 bd 5b bf e9 fe e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a5 8f 27 18 85 90 f9 24 b9 34 7d 3a 4a f1 56 ab 77 1f c6 7e a4 25 f2 33 22 3e e6 44 58 c7 c3 94 b1 d7 66 8d ef d6 fe 67 b7 dd ab 26 8e 5e 52 86 41 24 76 91 18 74 92 38 4c 9d e9 62 98 46 39 12 8f d2 29 2d 73 b1 a1 83 d8 f3 d3 58 d9 e5 3c 4a 6b cb 2a 73 4d 95 89 a4 94 c6 6e fc ed de 8e 75 d8 f1 67 f4 2a 6a d9 e2 3e 27 ad 9f da f9 ad c6 bf 2f 8e e7 d4 21 dd d8 17 7a 1b 0c 77 24 b6 76 b1 32 ea 84 65 b4 ed 8f b6 39 7a 96 71 d5 c6 3f 46 38 3b 50 b5 e9 ca 3b 69 1f b3 47 63 1d 98 94 d6 bc a0 77 f5 bb 8b 16 95 f1 7b 95 73 ba 76 8d a9 64 c5 03 09 4e 62 c9 13 1a ae 6f 9c 3c df 2f 1f a1 af ca 9c 53 2f ee c6 d1 1c 0b 31 e9 4a 3a fb 2e cc 63 e7 a1 25 56 d6 67 27 5f 3e aa Data Ascii: j['$4}:JVw~%3">DXfg&^RA$vt8LbF9)-sX<JksMnugj>'/!zw$v2e9zq?F8;P;iGcw{svdNbo</S/1J:.c%Vg'_>
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 31 3f 5d 1d 72 ae 06 5b be c0 da de f4 ee c7 53 eb 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 74 f1 b9 2d 26 61 d4 4e 13 07 79 c0 d5 78 76 18 e6 2c 30 b6 b9 1a a3 c6 a7 62 12 ba 78 e7 3c 71 b6 a8 de 96 8a 70 ce a6 53 1a 9b 1d 91 b3 ae ca e4 2d ad b5 ab 89 a3 6d 8e ad 89 8f 3b d1 87 da a2 3f 62 bb 0f 32 e8 9d 9a f2 eb 77 6a 4f e5 6a ef 67 5b 9b 30 7d 4d 18 fd a8 f7 46 cd 8b e6 f7 f1 b3 89 08 dd d3 64 66 35 36 a4 b5 eb 8f dc 8b 76 18 57 c6 d3 ad 7a 4e 8d aa e4 ea b7 42 72 3d e6 17 4b 93 e9 dc 79 ce ca d8 b5 2b d6 d5 5c d8 d6 c7 8c a1 79 95 45 42 52 f8 9f 09 a7 a5 b1 62 9c bb af 62 5b 56 54 6c 95 d7 b7 be a6 54 b1 5f ba b8 4b 50 e5 bb 2d 87 d5 d8 d7 fa bd af 33 57 d2 f6 1f 67 ca 55 f3 88 96 32 0f a7 dc bb 99 ce 86 32 99 88 84 ba b2 d7 12 8d 56 Data Ascii: 1?]r[S t-&aNyxv,0bx<qpS-m;?b2wjOjg[0}MFdf56vWzNBr=Ky+\yEBRbb[VTlT_KP-3WgU22V
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 33 43 64 6c ee 4c f0 a1 52 b7 53 27 a5 1b 07 3b b3 ad 61 e8 2b 73 d8 d8 f7 f2 b7 f5 1a 13 34 c5 73 bf b1 4d 2f 8b 66 9b e7 7a 4f 36 77 29 f7 77 0b 81 0d 5e 2a d6 57 54 d8 94 75 b8 cc 5b 6a d6 9d 8b 5d 8b 89 c8 46 77 1d 4b 24 53 8e b3 19 b1 74 c1 57 be 11 b7 57 23 54 22 2c c5 27 63 56 87 b9 ad 56 d9 da eb a7 d8 e7 5b f3 89 3b 39 1b 3b b7 eb b3 59 ad 31 25 89 6c a8 b5 84 73 7d 36 4c f1 ce 0e ac ca 27 0d 2f 66 27 e3 8f 45 e7 30 d1 c5 17 13 f2 84 55 f9 2f 48 6c 1b 63 99 26 16 23 a3 b9 be 5b a6 3a b9 cd 18 28 f6 20 67 d2 c8 8d 78 d3 dd f7 9e d6 f6 fc b6 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a7 4f 21 9c 24 ee 33 49 b2 70 ee 23 f1 5f 9e b4 b4 f2 f1 1f 64 db b5 a5 39 fa b4 58 6b df f6 76 35 e5 5a f8 f0 cc c4 ed ec 93 0e c6 5c f1 6d e8 72 eb fb Data Ascii: 3CdlLRS';a+s4sM/fzO6w)w^*WTu[j]FwK$StWW#T",'cVV[;9;Y1%ls}6L'/f'E0U/Hlc&#[:( gxO!$3Ip#_d9Xkv5Z\mr
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: d7 98 c5 49 99 3c 63 4c 6b e5 ad 4d e7 7f 62 c7 3a e5 99 fa 46 25 49 8b a8 db 3a ea 6f 3d bb ba f9 d3 52 84 54 a5 62 43 b9 9e 4c e3 c5 af b4 f7 20 b3 1a d4 de a1 e0 77 60 b1 ad 1f bf ce b6 76 b4 f7 b4 57 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 69 a3 c7 a7 74 92 04 a9 9a 4f 0c 23 31 5e 8a e7 68 66 ce 33 93 d8 92 d2 c3 1a 59 58 86 22 d9 1c 63 11 a7 0c e7 c2 df bd 99 5e d4 f5 51 e1 73 13 bd c7 bd 75 2c e7 c9 df 85 8e a6 14 f5 e6 b5 fa 35 2d be 5f cb 67 d7 8a 79 e7 56 57 57 6b 76 e7 d4 44 df 8d 49 ad c9 ee d5 bb 8a 9b e6 af 4e fd 6e fd 07 a3 1b ec 6f cb e4 d5 b0 2d d9 ea d1 8e 3d 29 ae 95 ba df 62 74 ad 3d af 33 db d0 f4 96 87 3f 64 43 42 3e 59 a6 c9 cd a7 db 7f 47 1b c7 fb 48 3c ca 3a ea 3b fa 1e 6e dc d5 bd 6a 5b 37 55 f7 03 5a fa 4e c7 9f Data Ascii: I<cLkMb:F%I:o=RTbCL w`vW itO#1^hf3YX"c^Qsu,5-_gyVWWkvDINno-=)bt=3?dCB>YGH<:;nj[7UZN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.5	50135	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:51 UTC	472	OUT	GET /liquid/buyer/public/img/payment/mastercard.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ef8-2f86" If-Modified-Since: Mon, 06 May 2024 06:55:52 GMT
2024-05-24 22:57:51 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:51 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:52 GMT vary: Accept-Encoding etag: W/"66387ef8-2f86" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 367952 Expires: Sat, 25 May 2024 02:57:51 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e31959c1f7c8-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.5	50133	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:51 UTC	393	OUT	GET /uploader/d0c5abae35b7b6102f6bd1205ec204e28371aba7.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:51 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:51 GMT Content-Type: image/jpeg Content-Length: 237429 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="22181e4ceb4617965770861201794e0e90275585_221" Content-MD5: X+DCo6QesBRCVUsncWOrEA== ETag: "5FE0C2A3A41EB01442554B277163AB10" Last-Modified: Wed, 09 Aug 2023 07:26:46 GMT x-oss-hash-crc64ecma: 7636939035025013675 x-oss-object-type: Normal x-oss-request-id: 66511B6DE90119363313DB40 x-oss-server-time: 87 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:51 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e3195836f7e0-BNA
2024-05-24 22:57:51 UTC	668	IN	Data Raw: ff d8 ff e1 00 22 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 12 01 03 00 01 00 00 00 01 00 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 5f 63 70 72 74 00 00 01 4c 00 00 00 0c 77 74 70 74 00 00 01 58 00 00 00 14 72 58 59 5a 00 00 01 6c 00 00 00 14 67 58 59 5a 00 00 01 80 00 00 00 14 62 58 59 5a 00 00 01 Data Ascii: "ExifII*ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc_cprtLwtptXrXYZlgXYZbXYZ
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 0f 50 00 00 05 4f 05 e4 41 55 b2 be 0d d2 c1 3a 68 37 3e bd 31 06 f9 62 a3 9a 1d 25 af cb 25 76 c3 35 58 e8 fd 09 42 85 d2 18 7c 6a fa e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 15 58 27 be be e7 41 cb 24 33 df 12 59 88 7c d1 45 88 17 5a ab a1 15 Data Ascii: ,<POAU:h7>1b%%v5XB\|jX'A$3Y\|EZ
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: f7 bb 99 5a 1f 99 b7 42 39 74 a2 24 2b 96 b3 77 19 97 a9 65 67 3a c1 5d 8d 99 37 2e b9 e2 3c 1a 0a 29 37 9b 0e 89 ca d3 b3 63 c5 f3 d7 a9 eb 0e 04 04 3c 04 e8 89 71 b2 a9 91 61 25 7a 32 b5 76 3b c6 b5 2d 78 1e 76 70 f7 6d 05 3d 09 b6 47 f7 6f 2b ce 80 00 00 00 00 00 00 00 00 00 00 00 00 00 02 20 28 02 a0 8a 29 e3 50 55 49 c4 5a 2c 63 ca 84 f3 c0 3e 58 19 5d 5d 1e c3 32 16 19 cd 4f 25 9c d2 44 6f 4b 07 d2 db ae 74 d6 23 a8 41 b2 f9 be 75 ef a6 ad 5f c6 9f 27 ec 34 e1 f6 ac 0a 00 de a2 35 a2 14 9c fe 37 d9 ef e8 da a2 cb f2 7e 65 ad dc b8 04 e9 ca fa 9a 16 2d 5a 5e 9d d4 ec ab 37 eb 2f 4e b7 51 45 c5 ab 28 cf 30 8b db 51 29 16 0f 3f 35 ce 3d 68 c4 67 76 66 93 b0 f4 fa 15 f0 4e e3 44 e6 4b a4 79 b2 d1 c5 44 b7 7a 35 d2 58 eb d7 bb d7 8e 32 57 44 d9 8a 36 67 Data Ascii: ZB9t$+weg:]7.<)7c<qa%z2v;-xvpm=Go+ ()PUIZ,c>X]]2O%DoKt#Au_'457~e-Z^7/NQE(0Q)?5=hgvfNDKyDz5X2WD6g
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: aa bf 3c c5 7a 62 29 9f 6c c7 70 eb 5c 39 74 4a 95 b1 76 b5 27 39 65 17 73 de b5 6d b5 58 e2 b2 46 55 58 ab bc f3 ad 6e 5d 5b 14 e5 31 3a b8 1e 77 ab b3 eb 15 dd 28 aa 76 98 8a b5 d0 37 47 7a e5 f2 32 6b 0a 3b 06 11 25 3c 4e 68 bf c8 ad 7b db 56 af 5a 7d 16 bc 88 61 39 eb de e2 41 6d 44 eb 4c e5 24 51 c4 b4 6d 1e ee 5c c4 1d 2f 6e 3a 1c a2 af aa 02 80 00 02 00 0e 00 11 00 b2 41 0d 85 b5 ef 35 ab d8 e8 57 70 c4 66 31 2b 72 54 ed 4f 41 b3 7e a3 35 80 00 14 10 00 00 00 00 00 00 00 0d b3 1f 1b 63 c7 c6 ab 23 73 fb bd 7c 7a 8e 9f 9d 9f 6c e8 c0 cd 36 d9 c1 e4 49 cd 42 ad 61 94 09 f3 74 fa 1a 99 11 72 29 d1 3f 54 da 33 ad 5b 26 4c bf 43 97 db e3 d8 b4 92 66 d8 8e d2 77 59 eb 95 06 55 66 c6 04 8a 12 f5 9f 27 c8 dd 8e f4 0e 9c a9 31 b9 df 1f 0c 55 14 b5 d7 76 89 Data Ascii: <zb)lp\9tJv'9esmXFUXn][1:w(v7Gz2k;%<Nh{VZ}a9AmDL$Qm\/n:A5Wpf1+rTOA~5c#s\|zl6IBatr)?T3[&LCfwYUf'1Uv
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: fa f6 3d 5b d2 13 49 3d 6a c0 35 a5 74 6b 04 a9 c3 3a 55 6e 25 5e da 55 6f a7 5a e2 35 6e a7 05 ae a3 bc a4 57 7d 24 f1 d0 58 7d 2f c4 9f d8 70 12 f1 36 d5 5e 95 ee b5 29 08 e2 f4 31 dd 5b 16 9a 7a 55 89 c7 85 69 68 a7 cd ee da 41 41 50 50 45 00 12 e5 4e 2d a3 37 11 46 33 e6 4e 86 e7 d2 d8 56 2a d3 c9 87 ea dc 14 bb d7 a9 b3 70 55 af ba b9 8d da 26 11 63 71 3b 78 52 ec b2 b5 29 d4 65 45 47 48 4b a7 77 7c aa da 93 e7 2d fd 7a 94 96 6f 9c ed 7a c6 94 90 fa 32 db b1 20 a7 6f 59 f4 4f 43 6b c5 c6 bb e5 f3 fc 3e 3c be ef a5 44 58 d5 d2 28 71 d2 91 f3 df 37 f4 bd 72 32 38 00 01 66 b3 22 fa 2f 89 e7 e2 f5 1c 90 b0 52 b6 bc 91 d1 35 61 a8 66 3f e9 6f 3b e8 ab 5b ae ad 75 7c 7c f5 79 f4 6a 7a 11 94 75 a8 f1 3d a7 59 c2 37 e1 fa 7b 16 86 8c 0d ec f5 10 79 19 ee bd Data Ascii: =[I=j5tk:Un%^UoZ5nW}$X}/p6^)1[zUihAAPPEN-7F3NV*pU&cq;xR)eEGHKw\|-zoz2 oYOCk><DX(q7r28f"/R5af?o;[u\|\|yjzu=Y7{y
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 85 03 ce fd 2e a3 ee 5c bb db 2f 98 63 74 7c fc 6f a7 71 2a 67 96 57 e6 6d d9 7e c7 e7 20 f9 4f 6a 7b 84 2c d9 33 9b f1 2f 5b 37 d8 3c b4 58 0e bb 97 42 2a cb af 94 8e 51 29 56 d3 ea 0c 18 fe 13 eb 27 fb 83 94 87 e3 1e aa 5d 9f 22 3d 16 a1 96 e8 e8 66 b6 74 92 91 76 aa 19 7a 96 06 6f 6c 3a 72 51 e9 5a 67 92 b6 79 99 f3 67 75 c3 54 ea 4f 23 99 ad b3 ba d7 d0 31 dc a2 d8 83 30 db d9 cc ee 69 20 aa a8 76 c5 e5 c6 a5 95 95 a8 63 73 eb 91 b0 9e b3 39 21 b0 55 d1 86 b9 9b 64 a3 a3 94 6a ec 63 1b 9b e3 4f 00 72 83 26 53 2e 3c b8 d1 b6 7e 80 f3 2c 0c cf 25 bf 35 f7 55 6e 34 3b 2d 77 a2 f3 75 a1 f5 7d 0f 9c e6 be 58 86 fd e4 cd b1 c1 35 f6 f5 38 66 2a db 5b 7f 37 65 54 ba 3f 52 e5 87 77 48 e3 b8 39 4a f1 46 da 46 dd 2d a9 4d 3b 39 8f 7f a3 58 ac db 26 44 fa 56 8c Data Ascii: .\/ct\|oqgWm~ Oj{,3/[7<XBQ)V']"=ftvzol:rQZgyguTO#10i vcs9!UdjcOr&S.<~,%5Un4;-wu}X58f*[7eT?RwH9JFF-M;9X&DV
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 2d f5 e2 ec 29 b6 25 9a 8d b0 f2 95 09 e4 5c 1b b8 10 14 14 00 43 d0 03 c0 e8 00 f0 3c 09 e8 a1 d2 e9 e7 d8 ea d2 b3 c1 5d b4 30 c4 4b 5e bf 79 d1 0e dc 81 9e fe a7 9f 4a d9 52 9b c8 e2 e1 89 e0 91 cd 8d 24 67 a4 8e 55 fd 0a 92 39 d0 39 72 ba 05 91 c9 87 03 7c 1f 9c db b5 96 6b ed ae a3 f3 11 16 eb fa 4a a3 12 e1 ca 50 77 42 05 dc 33 52 b0 f2 35 cd f5 9d 1d 1a 7d 4d 7f 43 ce e8 cc 7d 8a 85 a7 75 67 f9 e6 4d 0a 45 88 be a9 ad 43 40 ae ab d6 6a b1 b1 88 fe 5f 67 99 4a bf 5a fa c3 26 69 72 eb 80 e4 62 02 43 d5 ac c2 54 ee 57 35 b8 23 24 6c 65 67 40 a5 77 bc 49 1e 92 7d 5d 9d 85 f2 65 ae 95 9c 98 8d 95 60 6c 4a 2b a4 ab c3 1f 23 e6 9e f7 f7 ad a7 13 67 3c 3b a8 b5 f7 3e 6b 3d 52 4a b6 15 ab 2c d1 51 b1 3a 62 dd 14 69 f4 2c dd d7 38 4c 36 b3 6e d0 37 ba 3e 5f Data Ascii: -)%\C<]0K^yJR$gU99r\|kJPwB3R5}MC}ugMEC@j_gJZ&irbCTW5#$leg@wI}]e`lJ+#g<;>k=RJ,Q:bi,8L6n7>_
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 1b 49 66 52 b4 40 e5 d1 f5 5b 97 32 eb 7d 03 79 55 d1 0a c8 d0 2e d0 51 d2 f3 b1 94 57 22 11 e2 d3 25 d4 a4 cb b1 98 c6 e9 05 56 d6 b4 6c b2 e7 5c 62 a2 c2 42 69 b1 47 35 6f 50 50 b3 56 a8 c6 96 a6 68 9a 2d f7 ea b4 92 59 0c 66 c9 f9 bc f1 8d bd ec 4e eb 3c 43 ae ac bd 54 f2 b3 fb e7 6c 88 a8 74 d1 27 d0 40 d7 b6 aa 48 80 24 e3 c4 3b 42 bc 67 6f dc d2 e7 6c bb 80 67 68 71 65 3e a6 9b 09 86 85 bb 0d 4c fc da 37 7c bb 9d ab dc 65 d3 6b 17 7f c9 d6 88 a7 7b bb 15 f5 8d 1c 8f 1a ef 92 3b f7 b4 97 43 ed de 67 9e f8 b2 ef 4b 4d 34 13 c2 a5 ad 72 9c f4 9d ca b0 4c b1 5d da b1 5d ed 6e 58 2d 58 f1 16 03 0e fa f6 23 52 5a ce ad 42 ea 57 f4 1e 28 2a 80 20 00 20 28 02 9e b1 93 b0 c5 79 a1 4a e3 4a b6 29 b5 ad 05 6e c0 13 fc a4 d0 1d 64 02 24 df 3b 3c 36 f4 7d bc b5 Data Ascii: IfR@[2}yU.QW"%Vl\bBiG5oPPVh-YfN<CTlt'@H$;Bgolghqe>L7\|ek{;CgKM4rL]]nX-X#RZBW(* (yJJ)nd$;<6}
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 3e a6 e7 b1 b2 cb f6 a7 63 64 c4 30 b8 72 c4 ab a8 96 67 5d 0c db 46 ee e9 81 91 a7 51 a3 e0 26 1e 07 ae 3c 04 c3 80 f4 17 05 da d8 bb 16 b1 1d 7d d1 aa e5 11 55 24 e1 64 cc 70 be cd 64 d6 04 90 d4 ad bc ca 6b 9d 6a b6 db 19 b0 5b f9 b9 ed dc db b4 17 74 08 ae 24 91 c3 91 e7 b1 57 80 64 4d 51 65 49 ea 71 df a7 cb af f4 09 95 26 11 96 2c 53 37 36 c5 41 88 08 0e 14 00 00 00 00 10 14 56 8c 50 21 a6 f3 88 9b bc dc c9 3c 93 ab c8 52 e9 a3 59 e8 c2 35 64 91 5e 76 54 b9 e9 b5 77 61 5b 7a ac 87 6e 5f 54 e0 12 56 d4 d9 af 80 c1 d0 e5 ce e5 69 ad 8d 7a 10 4c e6 cd a5 c9 d2 d6 6d cd a1 f4 1a 30 6f 8b 40 f2 98 96 b6 c6 5e b1 9f 42 b5 4b eb 3e 36 af b0 bb e7 5c 0d 78 ef 5b f1 f9 1f 2d f4 3b 41 bf a5 59 c0 93 99 1b 31 ef 6f 3e b9 5e d6 61 cf ba 93 df f1 da 3f 11 da e9 Data Ascii: >cd0rg]FQ&<}U$dpdkj[t$WdMQeIq&,S76AVP!<RY5d^vTwa[zn_TVizLm0o@^BK>6\x[-;AY1o>^a?
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 75 f7 67 12 d9 e6 1d 17 10 3a 87 dd 72 f6 0b 39 ef 66 b5 a4 2a c5 c1 db dc 99 d4 82 80 03 9e 1e d9 e6 34 18 6c e0 f4 87 21 d0 29 61 ee ba 8d ec 01 a4 4c 07 d0 dc 06 8d 2b 67 2b 15 f5 4e 7e f7 1d a9 4d bd d9 4b 9c fd 22 9f 3f f4 47 3b d0 97 b1 7a ab a3 cf 29 d3 36 b5 69 1e eb 9e de 39 f4 54 8e 8f 5e ef cf f5 f4 26 a9 db fa 37 4f 9a cd bc a6 04 6e 25 ff 00 d4 e5 96 73 b1 5e f7 ce aa bb 38 72 5c 5f 6f a2 79 3f 4e af 40 fb 1e 9c bf 17 77 b6 9e 17 6c 70 c1 f7 2f 31 cf fe 7c 6d 5f ac 56 8f 41 c9 a7 69 21 7e c8 61 6b dc b1 22 a1 b3 63 2b e9 b7 80 00 00 3d 07 71 a7 d2 bc fe 25 de bd 57 20 a8 2c 0f 03 b0 68 a3 20 6e 87 20 98 30 0a b4 96 a9 57 f5 19 4d 37 21 c0 bb f7 23 8f 98 79 af 53 ad 7a c7 15 9b 46 fb 13 b3 f2 18 2b 4e be d3 14 b8 c0 b1 e2 24 3c 12 dc 27 8a dc Data Ascii: ug:r9f*4l!)aL+g+N~MK"?G;z)6i9T^&7On%s^8r\_oy?N@wlp/1\|m_VAi!~ak"c+=q%W ,h n 0WM7!#ySzF+N$<'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.5	50134	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:51 UTC	393	OUT	GET /uploader/feae09372641271a3f25a17a07c8bfbfe7b23d33.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:51 UTC	702	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:51 GMT Content-Type: image/jpeg Content-Length: 251943 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="22106fcad4d85d2bbeed63895f89641ef5e75354_221" Content-MD5: 2mZA+NDRoCXgZWHYj/BG9A== ETag: "DA6640F8D0D1A025E06561D88FF046F4" Last-Modified: Wed, 09 Aug 2023 07:26:49 GMT x-oss-hash-crc64ecma: 7566989407924119849 x-oss-object-type: Normal x-oss-request-id: 66511B6E1F5247373618F56B x-oss-server-time: 136 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:51 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e31959c4f7c8-BNA
2024-05-24 22:57:51 UTC	667	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 e0 93 04 00 e8 03 00 00 e0 93 04 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 14 05 00 00 03 a0 04 00 01 00 00 00 14 05 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipimagery40210ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 05 14 05 14 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}X
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 01 03 18 6a e6 b0 6b 66 ac 6b 26 b4 6b 26 b0 6b 11 18 70 06 ec a4 48 00 1a 26 66 c4 67 ca bb bb 2e 66 44 b1 55 52 c1 ba 09 91 d9 cf 66 64 97 bb 1a a9 d2 8e 1a 6a 06 29 36 cc 2a bd 46 ea 6c 1d 26 cf 72 79 ac 34 74 c1 95 0e d5 71 b2 d4 f2 73 0d 17 76 64 f6 75 f2 bb 31 a5 9e 56 d5 53 3d 4a 6f a0 f3 e9 a9 1c ac d8 4c 45 66 d9 d7 94 cc b7 2a 73 d8 2b a4 c7 4f 41 9d cc 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 48 61 8d 60 d6 0d 5a 73 5a 35 9d 6b 38 d6 4d 65 9a c1 8f 00 12 91 20 00 00 00 00 65 46 e4 77 64 c6 e0 dc dd 31 25 73 12 59 15 65 d1 88 16 3a cf e6 6e aa e8 19 55 6f 96 ae a9 63 79 ea f9 15 c5 a4 ce ae ca 60 13 1b ae e6 c5 d6 71 bb 96 f3 56 8a a2 5c 45 0c 8e 36 53 25 73 6b b9 ae 6c eb b1 Data Ascii: jkfk&k&kpH&fg.fDURfdj)6Fl&ry4tqsvdu1VS=JoLEfs+OAHa`ZsZ5k8Me eFwd1%sYe:nUocy`qV\E6S%skl
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: f9 5a 5f bb f1 58 0f 5f ca 6e 6f 46 ca 77 33 cf a6 ea 75 c5 6a c6 08 d1 8c 91 ac 93 26 cc d3 cb 12 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 35 00 64 35 b0 99 eb 9c f9 9f ae 79 f3 3f d3 36 03 61 e9 3b 01 7f 93 2b 21 a8 0d 04 e8 32 24 e4 eb 8e 27 23 28 e2 15 b1 2a 4d 4c 46 6a 62 20 4d 44 66 04 5c 04 0d 8e 6c d0 82 90 83 60 43 9d 40 96 35 35 1e 56 9b 46 a1 0c b4 26 9a 84 a1 bb 24 25 8b 94 86 5c 15 08 c9 a5 2f 2a 92 6a 93 6c ed 75 cd 05 61 3d 73 6f d6 6b f1 ba dc af 68 fa de 0e 87 fa 0f 90 68 00 00 00 f9 a4 72 12 25 58 ef b0 78 3f 75 b6 7c df d5 74 ce ff 00 83 c4 77 f1 75 4f 4f 8f 0d 9e 5c ef 6f 3e 1f 9f 5b fc bc 07 ca fa 7c 03 d1 fb 5d 5f e9 7e 0a c7 af c7 9b 5b be b4 ec cb 72 04 c4 00 00 00 00 00 00 00 00 00 00 00 00 1a 09 06 81 02 ef 59 73 34 cc dd 33 Data Ascii: Z_X_noFw3uj&5d5y?6a;+!2$'#(MLFjb MDf\l`C@55VF&$%\/jlua=sokhhr%Xx?u\|twuOO\o>[\|]_~[rYs43
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 17 5b 2d 53 f5 c5 bd 54 b0 83 61 34 9d 92 6e 1c f6 13 4a c9 08 54 c2 90 a9 52 4c d8 45 42 50 14 5c cb b8 4c 09 49 31 29 4e 94 4a 19 94 88 66 d5 31 7c ee fc a9 39 18 be 8d f4 7c bb 8f bf ce 00 00 00 07 ce 23 88 80 0c e9 83 20 1a 60 15 62 1b a0 00 00 05 12 0c 29 52 6c 72 aa 4a 6c e9 5a 7d 12 df 2b 47 9d 46 67 56 d7 b4 29 c5 22 bc a5 cf ad 2b 99 29 5b 95 cd 35 25 4d 2b 86 dc 48 20 55 9a 99 a0 44 a9 09 e2 aa ca ad cd c6 af f5 92 2e d3 58 b6 8b b0 23 1b 21 25 2b 12 6a a9 55 99 7d 8b de 93 50 da b6 6c 71 83 c6 c9 6c 87 48 dd 0d ae 37 31 35 75 29 8a f9 b8 b6 e2 f5 b4 9a 8e cf 34 35 fa 60 0c 61 54 bb d6 8e 7b c6 6a ec 8c 81 b1 23 34 c4 27 42 15 4b be 36 f0 75 a9 e9 e7 6b ea 5a c8 4b 3b 29 24 54 31 29 29 1a d5 43 66 34 5c ca 4b 8a 71 72 b6 23 66 72 3b b1 23 3b 02 Data Ascii: [-STa4nJTRLEBP\LI1)NJf1\|9\|# `b)RlrJlZ}+GFgV)"+)[5%M+H UD.X#!%+jU}PlqlH715u)45`aT{j#4'BK6ukZK;)$T1))Cf4\Kqr#fr;#;
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 31 74 ca 84 e0 c8 6b 68 36 9d 9d 90 e6 13 99 93 d2 f5 bb 99 b3 b3 65 2f 5a 38 34 bc 9e 7d 15 a5 d1 ae 1a c9 ad 1a d1 ad 4b 8f 1e a3 a7 4c 3e 77 b3 67 8a d9 59 b2 d3 a9 6b d0 07 cc 09 7d 12 38 ed 3c e4 7d 19 2d 8f 9a 92 f5 d9 bc 1e 07 3e 9e 53 c3 27 6f 36 93 e7 74 6e 7e 2b 3b 59 9d a9 d9 db 99 4f 2b e7 7e bd f3 f5 52 62 38 98 36 24 e4 65 1c d3 62 98 93 6d 60 21 b1 11 20 99 49 a9 02 82 75 c3 4e 4e 28 be a6 40 c4 e6 73 da 63 8b 63 13 9b 69 4c ae 66 cd 2d 7e 98 f5 df 4a dc 8b 66 94 ad 90 97 50 04 0a 8d a9 15 5a 3a 5e cd dd 45 5d f2 af 5e 7d 8f 9b bd 77 88 ee 00 00 00 0f 9d e7 04 00 19 92 93 73 7f 27 fa bf 4a e7 f9 6d ff 00 eb 7e 4b 89 7c 1f eb 1a 5f d8 fc 6e 37 d1 f9 63 06 ff 00 f1 7f b6 e4 3c 9f ae 61 bb 1d 91 08 a8 d4 c1 0d e9 7b e4 f3 ed 3f 27 e5 d8 fa 7b Data Ascii: 1tkh6e/Z84}KL>wgYk}8<}->S'o6tn~+;YO+~Rb86$ebm`! IuNN(@scciLf-~JfPZ:^E]^}ws'Jm~K\|_n7c<a{?'{
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 0d 9a 45 3b 40 10 a4 30 04 08 ca 62 65 ce 54 94 d8 9b 36 a1 36 26 26 cd 98 ab 9b 5e 57 5c f6 ee 6e ee 6a ea 6a ea 2e bc d7 b7 7e b7 ce ce dc b4 00 00 00 3e 7b 9e 7c 00 00 dd c3 e5 ff 00 56 e9 7e 7f cf 6d 9f 67 f1 5c 93 e0 ff 00 5a d2 be bf e3 31 be 8f cb 18 37 ff 00 8b fd a7 7a fc d7 db d8 bb ff 00 0a f6 f7 ee 3c 3c 09 ba 61 eb 9a 78 c8 d2 0f a1 07 83 ce aa 70 43 e8 a9 f3 ea 5e d0 38 d3 75 2f e3 df d2 bc cb fd 53 e5 eb 7e df c3 01 d8 b5 ec 5a 70 69 bf 2f 79 7b c7 72 05 5c da d7 3e ee f4 71 f4 01 e0 19 de 19 e5 ef 3e e7 a8 7d 5e 7f 66 ee e9 46 c6 64 80 20 cf 06 e5 73 fc 7b 9a a6 99 ac 1a cb 75 83 59 9d d6 8e 61 9a 2d a5 71 c3 d1 3e dc c5 52 66 43 10 c4 f5 55 4a b3 55 0a 8a aa 47 2a 08 92 b2 de 8c 40 9e 6a 25 64 d5 54 f9 b5 e2 ab 4d 9c a5 be 78 df 47 9e c7 Data Ascii: E;@0beT66&&^W\njj.~>{\|V~mg\Z17z<<axpC^8u/S~Zpi/y{r\>q>}^fFd s{uYa-q>RfCUJUG*@j%dTMxG
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: 6a 6e ae 66 e9 39 12 f2 17 57 16 5d 1a f7 7e 7a 4f ab 85 bf 59 bb 9d af 0b 99 db b9 54 d6 34 a3 6b d3 55 ac d6 6a 34 6e b3 8b dc 85 ae 8f ae f3 40 00 00 00 0f 01 9e 70 00 00 0c b9 93 35 a2 91 56 21 ba 3a 1f c1 fe cf e8 ef e6 bf 8f e7 df af fc c5 ff 00 83 a6 e1 f9 cf d7 62 7e 87 cc 97 3a d0 df d7 da 76 f6 e7 bc 3e 0d 3b ec 7d 7e 7d fa 5f d1 25 73 cb 85 b7 5e b2 d5 c2 8c dd 53 ec 7f 1a d7 3d bf 87 28 ce cf af 60 53 81 73 e9 e6 5f 2f a2 54 c0 11 20 06 a2 4f a1 12 4a 4b 73 25 a6 d4 65 10 31 12 79 a9 a5 1c 09 95 12 00 9c 89 52 d5 65 55 b5 95 2e a0 48 91 4e 93 62 e3 2a e2 15 b2 a9 52 e7 2a 68 bc 8f 3d a2 55 da b9 e5 59 ff 00 37 5c cf 25 02 ce a6 de d2 d4 56 c5 79 5c c4 6e 1e ef 2e 9f e3 f4 53 8d a9 99 71 b5 09 a8 93 73 55 8a b9 8d 9d 52 4e 40 af 29 e9 49 36 b5 Data Ascii: jnf9W]~zOYT4kUj4n@p5V!:b~:v>;}~}_%s^S=(`Ss_/T OJKs%e1yReU.HNbRh=UY7\%Vy\n.SqsURN@)I6
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: a3 7e 1b 6e 9f 36 df af ce b7 bf 0d bf 4f 9b 6d d3 c3 6b d7 e7 5b d7 8a 92 40 ed ba f5 dd 38 87 1e fc 73 c1 ec a9 9a 00 98 a8 4f 9b 58 9f 9d 48 4b 2a c5 e6 6b 14 32 6d 0a 08 ac b6 2b 15 b3 6e 4a b3 57 44 cd a2 8b 4e 91 6f b8 54 48 aa a8 64 08 6e cb 93 4d 91 12 aa a4 e5 59 54 c5 49 36 84 71 54 2a a5 26 dd 96 aa bc ed df 0a bc e5 57 53 57 55 b9 12 e6 db 97 d1 f1 f9 33 eb fc bb 06 5b 37 5d a5 54 da d6 da a6 f5 73 26 c2 95 e7 7a 8f 9f ae cf c7 a6 d0 65 b8 f4 ce 4d 4e db 78 53 8a a6 db 3c 9b 1a 50 bc b1 b5 29 da 04 9a b6 30 fd 22 7b 8e 49 ef f1 d1 d5 be 6f 5f f3 77 b3 45 a2 a9 f3 db 78 5c 4e e2 fa ce 1f dd cc a9 b3 77 0e 55 d2 3c 95 d2 7c 4d 07 bd 72 cf 54 e4 a3 37 6e b1 ed cf 5f 10 00 00 00 07 85 4f 2f 00 00 07 56 3a e9 e5 f3 18 55 88 6e 8d eb e4 7f 5d bc f3 Data Ascii: ~n6Omk[@8sOXHKk2m+nJWDNoTHdnMYTI6qT&WSWU3[7]Ts&zeMNxS<P)0"{Io_wEx\NwU<\|MrT7n_O/V:Un]
2024-05-24 22:57:51 UTC	1369	IN	Data Raw: df 54 5c 75 ad 68 55 1e 42 dc e7 94 d8 b3 30 ea b7 9c cb 1b 96 56 9e dc 84 ee fd 31 d7 b7 7a 3d 6e c3 b9 8f 24 dc f3 5f 46 22 5d c8 e6 27 01 36 78 ae 8d cb be 35 b8 c2 d9 34 8b 6d 53 b9 89 39 19 63 88 19 02 49 98 92 4d 76 fb 8f 6a f7 80 00 00 00 07 87 8f 2a 80 00 07 52 2f 4e 6c 62 4a b1 0d d1 35 57 d3 63 c8 b9 9a c9 f4 77 77 41 3a 41 f3 80 e3 f3 23 63 31 c6 34 00 00 00 1d e7 6b d6 b4 e0 fe 6e bc 4f c1 ea 97 32 49 43 11 2a a6 72 72 05 2c 8a 15 32 32 52 a4 2b 42 7d d9 2e a4 da 9a 17 1c d5 25 5b 12 52 34 a8 5d 3a 64 17 79 35 50 a5 99 60 9c 75 e5 a9 42 a2 ac 2e 25 1a a9 a9 2f 57 51 eb cb d0 de ce 5b df 7e 40 aa 25 5a 9a 94 6a 04 87 3c e4 e7 30 c9 77 77 6d 9b 80 d9 46 29 15 75 48 93 77 5b 86 49 b5 15 c1 79 c7 26 35 66 ef eb f4 6e cd d1 c7 aa 7c a2 66 77 34 0b Data Ascii: T\uhUB0V1z=n$_F"]'6x54mS9cIMvjR/NlbJ5WcwwA:A#c14knO2ICrr,22R+B}.%[R4]:dy5P`uB.%/WQ[~@%Zj<0wwmF)uHw[Iy&5fn\|fw4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.5	50137	157.240.0.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:51 UTC	1137	OUT	GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469760&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:51 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:51 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.5	50138	157.240.0.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:51 UTC	1247	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469760&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:51 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x1e56ca29f3892d0e","source_keys":["1","2"]},{"key_piece":"0x30408da2837dfb7e","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:57:51 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:57:51 UTC	1787	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:57:51 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.5	50143	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:52 UTC	393	OUT	GET /uploader/27ef8ca73175ab7a2b29bd8f11ae4dc3b3878bd6.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:52 UTC	700	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:52 GMT Content-Type: image/jpeg Content-Length: 221018 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="221e3928ecd08ec8572f1bf87dcb1c7589b90329_221" Content-MD5: OZdIzQdOKyf+RB9JfoBTCA== ETag: "399748CD074E2B27FE441F497E805308" Last-Modified: Wed, 09 Aug 2023 07:27:15 GMT x-oss-hash-crc64ecma: 801810286347868298 x-oss-object-type: Normal x-oss-request-id: 66511B6ED31A23303479E3F9 x-oss-server-time: 90 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:52 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e31e5c5ff7e8-BNA
2024-05-24 22:57:52 UTC	669	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 84 03 00 00 03 a0 04 00 01 00 00 00 52 03 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 Data Ascii: ExifII*V^(ifHH02100100RICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 03 52 03 84 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 01 02 07 08 09 ff c4 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 2b 65 68 aa a2 b5 6a d6 e6 2b 68 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}RX+ehj+h
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 86 a6 0d 0c 1a 09 89 9a 89 a3 40 4e 2b 3a 89 9a 98 5b 15 06 a3 58 aa 71 69 2b 08 7b bc f1 4d d4 e1 ae 1e 9d e7 81 f4 7b ce d7 0e cd 30 fb 16 38 da da af 8f 37 1d ed 70 9f ed f9 be 87 0e 79 2b 09 0a 41 0c c4 c0 00 00 00 00 05 47 e6 e3 c1 c4 23 65 0c 05 d4 af 13 f0 9b 84 0c a0 25 1e 60 05 49 72 30 6c 00 00 00 06 47 23 a4 2e 2d 30 a8 e9 0f 07 83 89 85 50 a8 aa db 98 34 57 75 95 37 13 13 04 6a 94 d5 dc 51 6c 89 08 2b a2 41 45 44 e0 d1 3a 27 55 53 12 11 34 35 46 01 3a ad 8a ce 89 c2 71 56 04 c0 61 43 48 49 49 9d 6b f4 43 2d be 72 d9 1c 64 77 8f 3d cf 9b eb 1d e1 df db 63 13 4c ba 55 cc 9a 6c 32 68 b2 cf ca 10 00 00 00 00 01 28 4b 91 85 8e 22 72 25 33 2a 8b 3b 55 80 a9 1e 28 b6 c7 39 b1 20 00 00 00 01 51 d0 e8 76 39 42 e8 73 27 08 55 0e 64 f0 74 97 03 71 84 d5 Data Ascii: @N+:[Xqi+{M{087py+AG#e%`Ir0lG#.-0P4Wu7jQl+AED:'US45F:qVaCHIIkC-rdw=cLUl2h(K"r%3*;U(9 Qv9Bs'Udtq
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 83 56 c5 7c 59 98 d6 61 d1 b4 c2 73 2d d0 8d 6d 83 06 a2 56 8c 2b 94 2c 68 26 6a 03 83 13 5d 55 d0 c4 b6 98 5e a5 25 b4 48 9d d3 94 ed 12 92 6b f5 bc 8a 22 a2 ed e9 78 2a 4c 42 d8 26 a1 5f 8b 44 62 96 d5 9d 84 c4 a5 a2 12 b4 ef 10 d7 29 3b ca b4 85 f1 c7 d8 4d a7 c9 a2 a0 05 9f 97 f4 3b af 0f d3 e3 a7 e3 79 27 77 c3 80 29 4b 6f 59 b7 f3 3e 8f 76 e1 7d ac 00 00 00 00 23 fa 9f 37 cf 73 e2 eb 02 1b 5a 1b 44 22 85 a5 a4 4d d2 6b 6e 94 f9 3d 2f 3a d5 ea 3b 3a b1 60 96 a7 92 6a f4 ec be 73 d5 20 8e c3 33 78 97 6f 2a 03 33 cb 75 7a 86 c7 07 19 87 48 97 9c 71 d5 3b 4a 0a d8 e6 2d d3 4d 2d 08 cc 6d 02 63 51 b8 9c 37 8b 68 ab 79 27 68 ca bb da 37 86 25 84 65 2e 4d 95 6b 6a 25 30 b0 e6 25 63 68 b6 4c c4 92 ca d8 86 57 8d ac f3 8c 79 66 ad 5a 8e 3b c3 d1 a4 43 4a ca Data Ascii: V\|Yas-mV+,h&j]U^%Hk"xLB&_Db);M;y'w)KoY>v}#7sZD"Mkn=/:;:`js 3xo3uzHq;J-M-mcQ7hy'h7%e.Mkj%0%chLWyfZ;CJ
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: e0 79 d5 e4 54 b9 de 90 cd 57 3c ff 00 56 d3 3e bc 17 47 dd 4f 73 39 90 1d 3e 9c 27 43 a0 ae f7 cf 3a 26 ef c8 1d c1 71 68 95 62 db c4 ef 13 bc 4e e6 f3 55 2d 45 2d 5c cc 13 54 66 30 8d e0 b4 08 27 0c 1b 0b 56 5d 8a 9b da 10 98 6d 30 ad a2 4e 6b 23 92 ae 24 c8 6f 68 56 d5 95 b4 25 6a 23 6a a3 66 b1 57 72 5e 2c cd 48 92 3e 61 59 ab eb 57 15 96 eb 28 b6 e3 48 53 69 34 4b 63 87 b5 77 ad 71 48 d2 b5 63 5b c3 de d6 6d 7c 11 b3 b0 fa b5 8d be c4 25 f2 b4 4e 13 a5 ae aa 5c c4 cc 56 f6 6a 5e 7e 08 ad 1a 25 24 a6 36 4a 12 6d 35 da cd 50 d8 6e 8c 4c e9 35 64 60 e8 77 a7 d0 5d 8d 7f 96 a7 34 00 00 00 02 6b 06 69 3a 5a 7f 47 df 58 38 5f 6f 00 00 00 00 05 77 be 7d d2 37 3e 40 ee a7 11 2e 2b 65 22 db d2 54 ad 94 c7 3b d4 a2 36 bd 77 bd 77 c9 4d ad 5c 23 49 61 01 98 8d Data Ascii: yTW<V>GOs9>'C:&qhbNU-E-\Tf0'V]m0Nk#$ohV%j#jfWr^,H>aYW(HSi4KcwqHc[m\|%N\Vj^~%$6Jm5PnL5d`w]4ki:ZGX8_ow}7>@.+e"T;6wwM\#Ia
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 9d 7c 8f 31 4c 85 b1 4b f4 f4 9e ef 60 43 99 b5 1b cd de 69 8f 3e f6 29 2d ed 0a 5e 17 b4 38 bd 56 cd 45 b2 e3 db 63 11 93 1e 72 51 4b d1 34 37 9a a3 30 8c c4 7c c6 96 a4 b6 4c 72 36 ac 95 eb 9b d6 3a 65 a2 56 9a ed 66 45 f8 5b d5 4f 8c fb ba 9f 5a 91 fb 5a cd 72 ca 57 9b 17 2f 3d c2 dc de 5b de dc ea 3e 4b 65 eb 97 0b bf 89 9d f0 b0 d9 c5 1d bf 81 9f 43 13 2d fc 0c b7 f0 35 df c4 c7 73 0b 6d cc 3d 6b c4 76 7b 87 cc 7d 3a 1b 0e 35 e9 b9 dd 9f 87 b5 47 f4 dc a6 3b da f6 ee 26 f5 ab 83 d0 c8 09 61 b3 5a cd 5f 36 dd db 1e 86 98 ad 9b 46 f9 2b b4 c2 9b 55 5f 6f 16 6d 09 d6 49 8a 56 9f 57 9c 7d 33 cb f1 2e c6 16 72 f4 26 6c 1e ac cf 83 e7 49 50 84 f1 72 95 7e a2 cd ea 97 b2 2a ae 15 8b 36 71 e4 bf cd 3e 8b ec 61 f9 75 a5 b3 f4 43 6b 07 0f c1 93 cd b8 72 7a 8b Data Ascii: \|1LK`Ci>)-^8VEcrQK470\|Lr6:eVfE[OZZrW/=[>KeC-5sm=kv{}:5G;&aZ_6F+U_omIVW}3.r&lIPr~*6q>auCkrz
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 44 e0 c4 13 98 ca 2c f4 cc ba 60 b2 51 44 ec 2a 97 55 b6 f0 26 37 8b 4a d2 f7 5f 0f e8 3c b1 ec 79 9d ea 95 83 e9 71 a0 e3 1a 95 a3 4b 5a 73 1c c5 5e d6 3e 26 f5 a7 c0 fa c4 71 de 81 e8 b4 61 37 b0 59 79 bb 50 5b da f3 1a f0 cf 63 57 5a ec 3d cf af 6c e2 ef 35 d5 de 77 35 e3 7f 43 f2 7e 81 f9 5f 73 b1 78 2e 96 b0 ac fa 2d 2c d6 5e 60 c9 37 c5 d8 cd 67 28 0c c4 6f 7a ab d2 c7 cf fd 46 ab 6a 5a e1 e7 b7 51 cb 68 fc b7 ac 6e e6 86 dd a4 2e ee 0a ef 4f 15 df 83 93 a1 f0 2c 95 36 9d e5 d7 db 05 27 ad ad 4d bf 56 d5 4e 74 b6 5c 38 86 b3 35 dc 9b bc e3 b1 bf da 70 79 ed 72 4e bd 6d 3f 2f fd 1f 8f 4e df c3 5b 98 f6 6e 5c 3e 82 c9 8f e7 09 c2 0d cb e1 d4 2a e4 76 74 fa 96 db e7 d2 b5 ba 14 4d 2d 97 58 b2 4f 1e 8b da c1 65 b4 34 aa 89 4b 28 5b b2 d7 c9 58 32 b9 b1 Data Ascii: D,`QDU&7J_<yqKZs^>&qa7YyP[cWZ=l5w5C~_sx.-,^`7g(ozFjZQhn.O,6'MVNt\85pyrNm?/N[n\>vtM-XOe4K([X2
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 9b 6a fc ef 38 4e 5c 36 41 4c 59 9a 4c 42 df 1c 6e 3c aa de a9 52 d3 7a f9 64 e9 7b 64 d6 d5 63 78 73 38 3c 84 9c ce 96 32 9a df ac a1 2e c2 6a 48 89 67 10 da 21 ea c8 23 61 43 62 4a b9 27 69 96 4b 8f 9e eb e6 3b 3d 0b c9 76 a6 f8 fd 58 9d cd 94 32 e2 de ba d0 fd 2e 15 0b e9 5e 4d a7 a8 e2 ca 4d a1 6d 8f d3 18 b6 3e 77 ad d1 e6 95 b1 fa 30 94 52 b4 45 d7 8d d5 bd 79 3f 69 63 d0 cf 35 cf a7 35 dd ad bf 89 93 80 7d 3f ca 74 b9 d5 bb fc c3 d4 6a d6 f1 d7 dc 7c 48 5c 66 96 7c 73 7b f9 6f d1 55 c7 84 9c 3d b3 c0 74 36 18 e7 b2 b8 eb 91 4a c0 64 da 2b 81 2b b1 32 df 25 a9 9e 83 56 53 47 65 96 c6 67 98 31 c5 77 b9 4b 7d 83 c1 f4 9b 4d a2 2f 0f f0 bf 67 19 e5 fb 78 ae 47 f8 75 b5 89 6d 9a 18 6c de cb c8 a2 90 c5 9a c4 84 3f 43 2f 11 fa 77 99 e5 1e f3 94 8d c9 49 Data Ascii: j8N\6ALYLBn<Rzd{dcxs8<2.jHg!#aCbJ'iK;=vX2.^MMm>w0REy?ic55}?tj\|H\f\|s{oU=t6Jd++2%VSGeg1wK}M/gxGuml?C/wI
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: ab f3 c1 47 16 c9 af 59 c5 9d c4 52 42 b9 23 2f 8e ed 97 05 39 96 13 1e 69 cc 59 26 69 92 56 62 45 0b da 88 ca 12 6c d1 1b a1 33 50 44 91 2f 8f 63 31 7d ab 39 ad b5 10 98 77 93 0f 56 de e5 c6 da 8f 6b 6a 5d 72 73 bc 79 6f f4 c8 9e 3c b1 76 ab 4d 9d 2a 1d 32 bf 89 ea 16 ae d6 c7 03 ce ec 27 07 b3 8a cb c4 c9 c7 3d 4f 31 63 12 be 5b 1c 72 69 74 ba 09 6e 58 26 be a0 f9 2f d4 ec 1a b7 c6 4d 09 1e 5e 74 ed 9b c2 ff 00 6a f9 9f b1 be 73 eb e4 fc 6f 63 ce bf 44 f2 dc 67 dd f9 eb 0a ad 51 d7 bc d7 5f ba fc 73 d9 ad 8e 29 fd e8 ba 79 f3 7c b4 d6 6a 8e 48 6b 96 b1 9b 52 d3 35 12 c9 11 7b 93 11 bb 81 ee bd a3 b6 8d ba 9a 37 ff 00 7f e3 7a a4 cd b2 32 51 3c 0f a2 e7 9e 27 d2 43 6f 62 92 d7 cb 3b a1 9a 7f 97 45 f1 ce 32 cb 1c d9 e9 5e 87 62 bb e8 bc eb 3f 51 c1 65 bf Data Ascii: GYRB#/9iY&iVbEl3PD/c1}9wVkj]rsyo<vM*2'=O1c[ritnX&/M^tjsocDgQ_s)y\|jHkR5{7z2Q<'Cob;E2^b?Qe
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 5d 23 54 cf 96 ed 2d bf 3f f3 f7 38 df 5f 4b 41 34 de ed 8b b4 64 c3 69 d7 bf 40 f8 47 d0 60 79 5d c9 7a 53 9c fd 07 c7 d0 fe a7 e5 7a 95 ab ce 74 fa 54 6a da d1 68 fa 1d 97 00 78 5c f2 90 0f 4d c8 f0 00 25 e9 6b 02 6e 28 f6 c4 d6 1a 5e 56 85 b0 68 48 95 b1 a1 c9 61 e8 ce 0f a3 b2 f0 7d 0f 17 de d5 82 f5 7e 37 44 b9 ac e5 3d ef e5 5f 46 e2 be a3 4e 33 d5 f8 79 4c b8 1f ed f3 f9 8d 32 d9 34 fa 12 75 be e4 8e df 39 6c da fc 73 1e c7 4a b6 3b 75 b1 d2 22 d5 7a de e5 35 e8 79 31 73 fa 64 a2 d6 ec 62 d1 51 6d 64 fd 59 35 5a cc ae 77 ff 00 95 fd 6e d9 e7 37 69 be a7 81 e6 5f a5 fc eb b0 78 8f 5e 74 39 dc 8f d4 70 3b 3f 8f f4 31 18 76 74 cb d0 f4 4f cf 3a 94 8e ef 39 0c 36 82 e8 6b a9 4a dc b8 f9 74 4c 6e 7a 36 cb 56 59 e8 86 4a a1 92 25 75 76 62 f6 f0 3e b6 38 Data Ascii: ]#T-?8_KA4di@G`y]zSztTjhx\M%kn(^VhHa}~7D=_FN3yL24u9lsJ;u"z5y1sdbQmdY5Zwn7i_x^t9p;?1vtO:96kJtLnz6VYJ%uvb>8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.5	50146	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:52 UTC	477	OUT	GET /liquid/buyer/public/img/payment/AmericanExpress.svg HTTP/1.1 Host: static.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"66387ee8-2905" If-Modified-Since: Mon, 06 May 2024 06:55:36 GMT
2024-05-24 22:57:52 UTC	610	IN	HTTP/1.1 304 Not Modified Date: Fri, 24 May 2024 22:57:52 GMT Connection: close last-modified: Mon, 06 May 2024 06:55:36 GMT vary: Accept-Encoding etag: W/"66387ee8-2905" access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type access-control-max-age: 86400 CF-Cache-Status: HIT Age: 200974 Expires: Sat, 25 May 2024 02:57:52 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8890e31e6c3ff7d0-BNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.5	50145	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:52 UTC	392	OUT	GET /uploader/fe4f80c9b0b21a593c4baba7f41c5d30de03b1ee.gif HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:52 UTC	687	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:52 GMT Content-Type: image/gif Content-Length: 471104 Connection: close x-oss-request-id: 66511B6ECB42C43633013848 ETag: "A9F22836FA16D2B5DE903EFB5EA30388" Last-Modified: Wed, 09 Aug 2023 07:26:51 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 14523945287021205172 x-oss-storage-class: Standard Content-Disposition: inline; filename="2211edbbddc211f568e8204f4350035fbfc90752_221" Content-MD5: qfIoNvoW0rXekD77XqMDiA== x-oss-server-time: 120 CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:52 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e31e6c81f7e8-BNA
2024-05-24 22:57:52 UTC	682	IN	Data Raw: 47 49 46 38 39 61 e8 03 e8 03 f7 00 00 57 93 b3 00 1b 30 b0 60 56 00 63 8e 00 74 9e a8 a8 a6 db 1c 03 71 14 0d 00 51 7a 00 8c bb ba ba ba db db db 9e c9 dd f6 ac a1 99 99 9a e8 20 04 ca cb cb 00 7a a9 86 86 86 00 53 79 00 a7 d7 00 0e 23 78 78 79 0d 41 55 8e a7 b6 55 55 55 63 64 64 40 41 42 32 32 32 1b 1b 1c 00 5a 86 00 6b 97 00 85 b1 00 7c aa 00 34 55 00 65 8c 0b 0b 0c bc 49 2e aa 10 09 ec 6a 53 a0 d2 ed 06 78 9d 66 87 98 f4 c3 b8 3d 64 77 00 36 56 69 b8 de f9 8e 72 ec 4e 28 4f b6 e0 2f 85 ac 00 2d 48 51 af da 3c 57 6c 00 40 59 a4 bc cd 84 9b ae 13 34 48 36 a7 d0 5b a7 cc 04 95 c0 42 9d c9 61 7b 8e ac 1e 07 00 85 b5 d6 e8 ee c9 df eb c1 93 8e 00 24 3e 00 30 47 00 49 66 00 5a 83 7e 4b 4b 00 49 75 88 bc d9 a2 2d 1f f9 d6 ce 25 8d b7 b2 ca b7 00 95 ca 7f c7 Data Ascii: GIF89aW0`VctqQz zSy#xxyAUUUUcdd@AB222Zk\|4UeI.jSxf=dw6VirN(O/-HQ<Wl@Y4H6[Ba{$>0GIfZ~KKIu-%
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 00 9d c9 13 9d c9 00 63 97 00 49 63 0f af e1 44 a7 d9 00 6b 9f 38 95 c4 e2 ef f1 00 40 6d f7 f7 ff 00 49 64 e8 e8 f0 02 07 03 ff ff f7 ff f7 f6 f5 e8 e8 0c 17 1a ef ef e7 f4 ff f7 20 2d 24 00 95 d1 e5 ef e6 ff f7 ff 28 a7 e1 fa ef f8 00 9d d2 f3 e8 f0 3b 92 b1 32 95 d1 00 24 4a 4f bf eb ff ff ff 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f Data Ascii: cIcDk8@mId -$(;2$JO!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: cb 9e 4d bb b6 ed db b8 73 eb de cd bb b7 ef df c0 83 0b 1f 4e bc b8 f1 e3 c8 93 2b 5f ce bc b9 f3 e7 d0 a3 4b 9f 4e bd ba f5 eb d8 b3 6b df ce bd bb f7 ef e0 c3 8b ff 1f 4f be bc f9 f3 e8 d3 ab 5f cf be bd fb f7 f0 e3 cb 9f 4f bf be fd fb f8 f3 eb df cf bf bf ff ff 00 06 28 e0 80 04 16 68 e0 81 08 26 a8 e0 82 0c 36 e8 e0 83 10 46 28 e1 84 14 56 68 e1 85 18 66 a8 e1 86 1c 76 e8 e1 87 20 86 28 e2 88 24 96 68 e2 89 28 a6 a8 e2 8a 2c b6 e8 e2 8b 30 c6 28 e3 8c 34 d6 68 e3 8d 38 e6 a8 e3 8e 3c f6 e8 e3 8f 40 06 29 e4 90 44 16 69 e4 91 48 26 a9 e4 92 4c 36 e9 e4 93 50 46 29 e5 94 54 56 69 e5 95 58 66 a9 e5 96 5c 76 e9 e5 97 60 86 29 e6 98 64 96 69 e6 99 68 a6 a9 e6 9a 6c b6 e9 e6 9b 70 c6 29 e7 9c 74 d6 69 e7 9d 78 e6 a9 e7 9e 7c f6 e9 e7 9f 80 06 2a e8 a0 84 Data Ascii: MsN+_KNkO_O(h&6F(Vhfv ($h(,0(4h8<@)DiH&L6PF)TViXf\v`)dihlp)tix\|*
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 46 91 ad 72 48 05 1e 32 00 0b 3d 08 e2 56 52 c8 6b 76 09 cb 5d db 91 e0 56 ec 28 c3 01 7e 70 87 1f 1c 80 12 b4 da 28 2d b7 88 d8 2e 26 76 06 23 e5 80 49 3f b1 81 0b c8 42 b2 d0 68 16 1b fb 75 59 0e 2a 03 66 29 00 40 1b e4 f0 8a 58 00 c2 0f b1 f0 a6 1f c0 80 0b 5c 64 e0 a8 1a 78 ab 05 f0 d0 d0 86 02 c2 c1 a5 90 43 1b 2c 20 87 da 42 40 05 ca 28 44 44 29 31 0f 0e b4 36 8c 7e 98 80 11 ea 76 49 b0 e2 6f 96 40 93 02 3c fe c6 5c 44 b5 83 19 bd 60 eb 22 18 31 61 50 70 c0 ba 83 cd 95 46 39 ba 2d 23 62 eb 12 47 d6 24 b7 fe 59 01 78 90 a0 02 24 08 f2 17 c4 4b 5e f3 52 82 b0 c7 a5 65 c2 b2 95 2d 6c cd a0 1f f0 e5 80 18 c9 58 49 95 12 83 b2 fb e5 d7 08 b2 70 86 5b 10 e0 ff 16 60 b8 c0 25 b8 00 06 3c 14 c0 0d 12 d0 c0 01 55 d0 06 3c 38 58 03 48 ad 85 a0 07 dd 87 a4 6e Data Ascii: FrH2=VRkv]V(~p(-.&v#I?BhuY*f)@X\dxC, B@(DD)16~vIo@<\D`"1aPpF9-#bG$Yx$K^Re-lXIp[`%<U<8XHn
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: fe 88 05 8c e9 8f b1 80 05 8b 19 09 f9 38 99 02 39 71 58 e9 04 78 b8 2d ce b6 09 e3 45 5e ab b7 51 6a b9 45 f3 17 00 45 a0 54 7e b0 01 39 60 4b 60 84 91 28 25 30 bf 94 46 08 70 06 7e e0 91 71 73 09 5f 48 02 1c e0 07 1c 70 97 2a 98 03 17 b0 0f 3e 90 03 b3 06 0f 7e a0 01 ba c9 01 d5 d7 58 8d 05 08 73 05 0f 77 d9 37 d8 24 05 80 10 09 1a 10 08 2c 70 43 34 b5 4c bb c8 8b 2d 35 01 5c 90 05 9d 30 09 46 ff 60 2d da c2 45 00 45 2b 7a d0 06 b6 b7 95 26 52 31 ed f0 0e 2b c0 07 2b 70 84 28 64 8d 79 50 96 75 75 96 76 25 4b 4f d6 2d 82 70 3f 45 f0 73 35 c0 02 66 70 08 7d a0 4e 2f 99 74 f3 00 6f bc c0 0e ec f0 05 ec c8 8e 3d e9 8e 4c 17 98 f0 06 0f d8 94 4d 75 65 57 51 96 86 01 49 99 94 19 09 25 30 a2 8c 39 99 6f 88 0b dc 06 90 f9 78 a2 49 67 62 82 00 08 8e 56 2d 9b 44 Data Ascii: 89qXx-E^QjEET~9`K`(%0Fp~qs_Hp*>~Xsw7$,pC4L-5\0F`-EE+z&R1++p(dyPuuv%KO-p?Es5fp}N/to=LMueWQI%09oxIgbV-D
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 52 2d 90 07 9f 70 07 79 90 ad c0 e4 43 6b 84 41 1e 30 02 c7 84 4c ff 55 2f 04 90 08 0a c5 78 16 80 9c 1b b0 68 05 40 8a 68 80 01 97 ff d3 42 9f a5 55 7d 30 0f 42 73 71 79 39 aa f0 4c 02 7a d0 2f 47 20 3f d6 c2 c1 c7 a5 ac 1a 15 cc b5 52 01 87 00 01 b1 8c 1d e8 12 45 15 2b 07 3e 50 0a 35 b0 cb ca 6a 2b ba a2 51 0a 83 3f 5d 5d c3 c1 7c c3 ca 7c cc 35 2c d1 36 1c 9a c7 cc cc 7d 88 4d 6b 79 09 b0 83 03 0a e0 b2 d6 5c b3 d7 f7 08 ab 77 00 dd ec c4 16 7a c4 e3 fc bb 4e 07 c5 7c 69 89 2c ba 85 5d e8 aa a3 60 cd 26 76 60 82 36 4f 66 60 06 93 d0 05 67 90 05 6c 36 a0 ae 02 06 46 40 95 47 96 30 01 ed 64 05 ed 5d b8 32 58 3f 1c 34 09 5d 2b bc a0 d6 39 0a 7f 56 bb 5e 6b f9 51 15 8d 49 f8 64 03 1c b0 04 fd d7 88 15 c4 43 22 7d 59 6f a4 0c e5 30 b0 84 77 4a 2c ab 02 78 Data Ascii: R-pyCkA0LU/xh@hBU}0Bsqy9Lz/G ?RE+>P5j+Q?]]\|\|5,6}Mky\wzN\|i,]`&v`6Of`gl6F@G0d]2X?4]+9V^kQIdC"}Yo0wJ,x
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 3a f5 4f 07 c4 6b a5 b4 09 5e 07 3d 97 29 af 1f ab fe f3 63 cb ed 19 ab a7 ff de 3e e5 cb 6e db 3b 6e fb 39 7f 7e f9 16 02 d0 3f c5 e4 53 4f 20 82 a8 2b 03 a9 0a 48 78 c9 31 ff da 6a a9 08 c1 04 0b 8c 42 0a 2f 21 c2 2d 86 0a f3 50 26 a7 6e 9a c9 b0 99 40 94 89 03 0d fc e8 49 0f 15 95 6a 8a 28 c3 6e e2 05 29 5d 70 8a aa c6 35 6e d2 65 c6 32 ac a2 64 ab ad b4 ba aa bc 0e 1c 5c 6f 40 98 dc bb ef 48 b7 de 8a eb 92 19 5a 6a 09 2c c7 d2 52 6b be cf e2 5b 92 ad 96 d4 bb e4 82 22 f0 33 f0 2c cb 32 a3 ec ca 2c d7 fa a2 cc c7 02 18 ad 34 e3 e2 94 73 4e 3a eb b4 f3 4e 3c f3 d4 73 4f 3e fb 64 cd 1d 3e 98 1b e2 85 21 4e a0 45 3a 13 ee c0 ff ee 3a 45 09 4a 34 bb 04 23 fd 2e 41 ed b8 a3 ae 20 ef 3e 09 4f bc af 3a 28 cc be fe fc 0b f0 b1 30 41 65 6b d4 53 25 54 32 80 02 Data Ascii: :Ok^=)c>n;n9~?SO +Hx1jB/!-P&n@Ij(n)]p5ne2d\o@HZj,Rk["3,2,4sN:N<sO>d>!NE::EJ4#.A >O:(0AekS%T2
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: ab e4 4f 6e 6d f8 4c d1 0e 97 a3 ef 81 c8 53 4b ea a1 0e e4 34 83 1a a4 54 64 27 aa b9 89 7e 8c a1 91 55 70 e8 40 a7 c9 88 46 b6 85 98 bd e8 6d 3b db 25 54 ba 25 c3 16 16 c4 69 0f 42 93 06 81 08 2c 51 cc 69 b7 10 e2 29 74 01 f6 ae a4 b5 70 93 f0 75 5b 33 e6 d5 95 b2 f3 ad 85 3d aa ca f2 d5 18 a8 52 7d 88 7f 5f c7 2a 24 5d 53 3e 97 b8 90 36 cf 96 bd f7 ed ab 8b 6e ff 63 1f 0b c2 fb 64 28 47 59 ca a9 b1 46 79 bd 80 83 b6 b2 60 03 17 d0 43 59 6a 12 00 c0 58 95 3d 9c 0d 95 70 61 35 da f3 79 36 c7 41 56 9f 62 fe e3 e6 fc aa 92 43 01 ae 9e e3 08 cc c1 13 66 12 53 26 54 b0 09 f7 ac d8 08 3f f6 73 12 fe 41 06 b3 76 ba c2 c4 b9 c5 69 7e b1 f6 88 00 8f 3c cc b2 d0 53 14 26 2c 4e f7 e2 db 62 1a 22 7c 65 e5 54 d3 86 cd 55 6e b6 d1 68 6e 0b 4b 22 54 04 6c c8 77 d1 e5 Data Ascii: OnmLSK4Td'~Up@Fm;%T%iB,Qi)tpu[3=R}_*$]S>6ncd(GYFy`CYjX=pa5y6AVbCfS&T?sAvi~<S&,Nb"\|eTUnhnK"Tlw
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 0d b9 84 16 b0 81 44 1c bc c1 a3 90 16 b8 00 fe ab b8 7c 79 3e b2 64 9d 92 12 ac a9 f2 a8 f8 11 39 ff e6 72 ae dc fc 21 4e 04 9f b0 33 45 3a 9c 3b 9f 0c ca 14 3c 41 a0 6c 45 a4 34 c1 a3 34 c1 12 94 ce 59 64 4a ed dc 4e 85 79 bd 5f 88 3d a9 ec 0b 43 32 8b 69 ab 2b 7b 52 8b d5 61 88 6a 6b 8b 0e d1 30 1f 4c bc f3 09 c4 2a fc c6 22 28 84 43 00 03 73 74 42 af 63 b1 2a 94 92 a6 8b 08 91 ec 3b 3f 24 c7 76 14 c7 79 7c 8b 2e 54 47 c3 14 c4 fa 23 d0 6f 54 4d 8d 1c c9 08 9d 50 87 6c 4d da 2c 02 1f c0 81 1c 08 49 79 a4 d0 08 75 12 2e f4 a7 4b e0 be ee 1b b4 c7 24 bf c9 fa a0 7b 3b b0 ed e8 a4 36 ec 24 c9 31 00 19 25 c1 12 24 83 3c 98 81 90 c4 d1 cf 84 8b 8b 2c cd d3 cc c8 d0 84 50 89 5c c4 8e 64 95 54 fb d0 26 e1 3b 00 7d c4 8c 73 8b 04 8c c2 e8 eb b4 9f 5a 31 58 33 Data Ascii: D\|y>d9r!N3E:;<AlE44YdJNy_=C2i+{Rajk0L"(CstBc;?$vy\|.TG#oTMPlM,Iyu.K${;6$1%$<,P\dT&;}sZ1X3
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 4d d9 4a 86 04 f3 f2 03 90 b5 0f 5c 70 80 5f 48 e4 ef 6c 03 3c 50 01 07 98 03 4a 66 59 66 83 84 3a 50 80 39 58 04 08 f0 82 b4 82 80 52 d0 83 fc 49 b3 96 7c d7 e9 bb 80 42 18 ba 45 9b cb da 3c 84 36 50 01 30 d0 da df 53 65 56 1e 47 10 7d d0 6d 24 c7 cc cb c3 5b 9e da 0f 9d 50 ff 35 db 2d 1c 60 bd 1e db 89 6c 47 6d 76 cd 62 36 66 0c a9 cd 0b b1 01 a6 a3 10 6c 28 66 23 b8 10 f2 0d cd 42 08 49 c3 be 66 30 b8 00 6c 98 08 0c 60 01 23 38 db 0a e9 eb 89 94 8b 2d 04 d7 d2 1c e0 c0 0a 67 c5 a0 0b 03 de e0 10 fe ec 8a fc 6c 1e c5 d1 16 10 81 b9 88 6d 11 b8 00 ea 6c e7 80 2d 58 77 ae 4e a3 74 d3 d6 1d 58 ff 14 cc 61 cf 5e 57 c3 3d dc d2 2c 49 7d b6 65 21 e5 df d8 7c 8b cc b3 4b 92 24 40 56 09 c0 6c e4 6a 23 24 b3 c4 84 05 3a dc e2 55 3c 63 d7 2d dd 81 6d d3 d3 ad 61 Data Ascii: MJ\p_Hl<PJfYf:P9XRI\|BE<6P0SeVG}m$[P5-`lGmvb6fl(f#BIf0l`#8-glml-XwNtXa^W=,I}e!\|K$@Vlj#$:U<c-ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.5	50140	157.240.0.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:52 UTC	1137	OUT	GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469761&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:52 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.5	50141	157.240.0.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:52 UTC	1252	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469761&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:52 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0xbb4fa5585ce11ee5","source_keys":["1","2"]},{"key_piece":"0xad62cbaed5dcda6b","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:57:52 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:57:52 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:57:52 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.5	50142	157.240.0.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:52 UTC	1137	OUT	GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469762&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:52 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.5	50144	157.240.0.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:52 UTC	1247	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469762&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:52 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x574c259545720cd1","source_keys":["1","2"]},{"key_piece":"0xdb8fa5999d29a54c","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:57:52 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:57:52 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:57:52 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.5	50151	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:52 UTC	393	OUT	GET /uploader/21884b5858ddddbeb9479fd4140706472aec9106.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:52 UTC	702	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:52 GMT Content-Type: image/jpeg Content-Length: 133267 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2216e5d1d4a13f80e0c9d443ef6b830e04e38894_221" Content-MD5: z1XM/kYErp1wuHLrgYSsMQ== ETag: "CF55CCFE4604AE9D70B872EB8184AC31" Last-Modified: Wed, 09 Aug 2023 07:27:17 GMT x-oss-hash-crc64ecma: 18258144024667190357 x-oss-object-type: Normal x-oss-request-id: 66511B6F2CAF36313106EF4C x-oss-server-time: 94 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:52 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e31f7bfff7e0-BNA
2024-05-24 22:57:52 UTC	667	IN	Data Raw: ff d8 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 Data Ascii: "ExifMM*@ICC_PROFILE0ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRC
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 03 20 03 5b 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 04 05 06 02 03 07 08 09 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f5 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 7e 54 e0 4e 94 71 78 23 d0 a7 96 e0 cf 60 1e 21 82 3d f6 7c e6 82 3e 94 c1 7c e2 49 8f a0 10 3e 1e 0f 62 40 Data Ascii: #&')*)-0-(0%()(((((((((((((((((((((((((((((((((((((((((((((((((((( ["6H~TNqx#`!=\|>\|I>b@
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: c2 0a 08 28 20 a0 82 86 26 48 22 64 18 8a 18 8a 18 a6 48 22 64 86 29 92 18 99 21 8a 64 86 29 92 18 a6 48 62 99 22 3d 43 24 d2 95 f9 67 bb 6d aa d9 38 9f ab 85 fb a3 72 9f 41 f9 db 71 5f 3f f7 9e 0f f6 1e 72 7b ef c0 9f 41 fd ee 4f 9e ed dd b4 48 00 12 0c 6b b6 2a 85 b1 50 26 00 00 00 00 00 00 03 66 b0 9d 9b a4 1c ba 5f e6 39 4a f3 e9 d9 1a f2 75 ca dd 6f 67 24 58 9e 98 df 9e 65 78 bb b2 ab ae d5 b3 b3 85 5d 2b 36 d1 82 de 36 eb 17 5a 62 b9 2d 99 20 4c 0a 28 28 a0 2a 88 a2 88 aa 00 a0 0a 00 a0 8a 28 82 82 0a 08 64 08 28 62 28 20 a0 89 90 62 28 62 28 62 28 62 28 62 99 21 8a 64 82 26 48 62 99 21 8a 64 86 29 92 18 a6 48 7a bb 9e f4 99 ef c9 7d ff 00 39 d6 3d 68 ef d3 c3 ce be 8b 0f 07 af 81 f1 0e cb c6 ff 00 4a f1 30 fa 27 f3 b3 e8 ff 00 b7 cd f3 95 8c 84 7c Data Ascii: ( &H"dH"d)!d)Hb"=C$gm8rAq_?r{AOHkP&f_9Juog$Xex]+66Zb- L(((d(b( b(b(b(b(b!d&Hb!d)Hz}9=hJ0'\|
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 00 47 79 3f ad f8 bd 71 b0 4f 61 bd de 19 e9 aa 04 bd 6d 5f 80 db aa 2f 8a 64 86 09 92 18 e3 92 18 e3 92 23 ac fb 7b c5 be d2 89 f9 cf 4e b9 d3 00 02 5b b0 f0 9b 50 ea 95 6b aa 00 01 b3 5e c3 60 13 02 a6 42 82 82 a2 86 48 a1 33 0e a7 46 a3 33 51 43 24 99 22 8a a9 90 28 a2 aa 28 aa 28 28 a2 aa 28 aa 8a 0a 3b 3a 14 2b a9 19 a4 5d 22 5e 26 2c 0a 24 50 05 00 45 52 db cc ba 15 02 69 d6 e8 37 3a 62 c3 f6 2d 22 7d 01 c3 7a b3 29 49 f3 a6 ad 95 aa 7a cb 8f d6 e1 6d 6d 09 11 31 2d 0a ee df 4b d4 34 76 1c af 5e 7f 23 1f 14 8a 84 ef 42 e7 72 7a d5 96 84 bf b3 d5 ac 59 cf 5d e1 77 1a c7 1f 46 a7 4b 6f ee e6 af 51 3d 49 41 f3 7a 39 8f 44 a5 74 cf 4f 9a b5 15 64 85 9a c3 d8 f2 96 8b 72 35 90 8f 8b e2 99 62 62 99 62 62 99 62 26 39 62 8e e5 ec 5f 22 fa ea 27 e7 5d 2a f1 Data Ascii: Gy?qOam_/d#{N[Pk^`BH3F3QC$"(((((;:+]"^&,$PERi7:b-"}z)Izmm1-K4v^#BrzY]wFKoQ=IAz9DtOdr5bbbbb&9b_"']*
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 6d cc 38 d1 b7 3b cf 74 aa 14 87 95 bf 5c f3 c6 bb 04 4c 6d b6 43 77 2f 44 74 cc 94 bf 0e af 20 ec fc ff 00 25 67 36 3a 7d 8c ad 3c 73 b1 72 ff 00 5b cf 8c c7 2c 7d be 14 c7 2c 4c 51 50 c5 15 0c 51 50 f7 0f 54 e6 fd 22 1e 28 e5 dd 2b 9c cd 5b eb df 1c 58 24 20 64 4a a6 87 2d ab 60 09 1b 75 6d 36 aa 2c c2 82 8a a8 a0 a8 a2 aa 64 2a a2 a5 72 45 17 2b 57 56 47 29 6b d2 78 ec d7 d3 d3 be 4b 66 9f 61 32 f2 a4 7d 67 d2 30 3c 2b 6d ab d5 a0 e9 2d 89 e6 1a f3 4e 8d 45 86 10 ee e3 ad 63 68 2d 04 9e 46 e5 8c 4c b4 33 f6 b3 13 78 d8 29 68 bc d5 e3 a6 8b 67 35 9e d0 31 c2 76 a9 7a dc 20 ad d4 ba 59 f6 87 51 91 37 4a 15 99 cc 4c 64 35 de 9d 6a a6 cd 17 7c 34 a0 be b1 52 f6 af 4f 96 8e d3 c9 a5 a7 25 e8 bd 78 70 59 8e d3 0d 13 c0 e0 b7 ed ad da 6c c6 3f 3d ee d7 7e 67 Data Ascii: m8;t\LmCw/Dt %g6:}<sr[,},LQPQPT"(+[X$ dJ-`um6,d*rE+WVG)kxKfa2}g0<+m-NEch-FL3x)hg51vz YQ7JLd5j\|4RO%xpYl?=~g
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 9f 58 b6 72 3e a3 35 6b 85 5f 98 e7 7b 9c a7 36 91 b3 d7 7c 8e b3 d3 6b 1c be cd 60 b1 f9 3d 9c 1b aa 4d f4 9f 95 ef a2 70 ff 00 61 c2 cb c8 1d 37 b7 52 af 7e 4d c9 ed 4c fe bb cc 59 8b 17 7c db 1f 2f da 2e d4 83 5c 6f 5c e5 1f 3f e8 73 f4 44 fa 9f 35 71 44 42 e2 20 4e 40 da 4f a2 80 44 f9 6b 9f 3c e7 9e 47 57 54 91 a2 58 7c 0e d9 89 2a ac bf 1c bb e6 dd 37 98 76 f7 56 a0 27 e1 3e cb c5 63 b7 56 db f1 ee 54 59 85 11 4c b2 c5 c8 fc 69 2b 56 ef 55 79 03 d6 ff 00 21 ea 72 ae dd 58 b1 79 3d 9c 4f b8 ea db 6a f1 ce d7 0b 62 e8 ac 1d 5f a8 44 da 95 c9 78 bd 9c 9a b3 9e 91 c7 c4 d5 eb 37 2d 39 22 a7 69 7c ce d7 a8 5b 77 b7 b1 eb 07 8c b2 88 99 57 6c 6f 35 db 16 cd 3a 4c bc 5c 94 56 b9 ca 56 ac 6c f4 61 19 26 ff 00 68 d1 33 07 33 db 8a 35 de d3 7a b8 8e 96 6d bc Data Ascii: Xr>5k_{6\|k`=Mpa7R~MLY\|/.\o\?sD5qDB N@ODk<GWTX\|*7vV'>cVTYLi+VUy!rXy=Ojb_Dx7-9"i\|[wWlo5:L\VVla&h335zm
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: e5 86 db 43 57 ad 5d 23 26 2f 98 de 1d 47 c9 72 8e a8 b7 d4 a3 ec 3e ad 7a 33 8e 51 d6 7c 0d 35 a2 a7 34 b5 cb 1c ee de c9 eb 49 8e 59 c3 fa 27 30 fd 4f c0 9b d7 a4 f6 f9 07 4c dd 09 96 bd b0 bf fa 1f cf 7e 83 fc cb dc 4c 17 57 cd 77 54 ec 2f b5 f4 d5 1b 6f 4c 34 47 9c 9a 03 db c7 a8 53 27 73 e8 ca 42 81 cb eb fe ef 3e 52 39 c8 7a f4 d4 f1 bb fe 6e 88 57 59 b2 bd 65 39 bd d6 97 df c4 01 df c4 00 00 07 a4 fc d9 ea 03 d4 a0 44 f9 76 ab 3d 4a f0 bb b6 d9 f8 ff 00 71 f1 f7 87 e4 9d c3 2e ee 7e 67 d2 39 97 43 e0 df 75 12 f5 51 c6 fc 53 3c 33 fb cf 23 68 13 00 04 9c 84 64 cd 25 9e 19 63 95 da da 6b 13 dc fa f7 5b 17 3b bf fe 7b ee cc 63 ae 9f e7 da e3 25 5c 8a 95 c1 c3 7a 32 2e 34 db 1c 4e ab 44 93 08 5e 0b 59 d4 cf 9a 13 46 c8 eb 4c 8e a8 c9 2b 9d b4 78 d3 36 Data Ascii: CW]#&/Gr>z3Q\|54IY'0OL~LWwT/oL4GS'sB>R9znWYe9Dv=Jq.~g9CuQS<3#hd%ck[;{c%\z2.4ND^YFL+x6
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 51 17 cd 97 8b 1f bb 4a be ce 3f 3e 9a 48 ed 62 ff 00 ab 28 3e 5f d9 f5 f4 da 81 72 7a 61 3c 8a ef 64 e4 16 bd c2 d3 8e 78 d7 06 ee 12 a8 99 01 9c d9 d3 2d 9a eb 68 56 bb 2c 5d b5 6b 5e b1 4c e3 2c b9 77 44 e6 1a 3b 45 0f a0 f3 ef 32 6f ba 53 77 9f 6e 74 df a6 a7 a0 c3 c7 7e b0 f1 37 d6 79 56 a8 d7 1a 3e db cb c7 33 29 63 b7 16 64 9d 9e af 7a 45 ea 81 5e 60 56 74 21 9e a6 46 71 24 93 79 3a 5e 08 45 df 0b 8e dd 5b 34 c6 7e 49 83 6b d6 d8 e6 1d fc c4 c6 96 5a 26 25 e1 db 42 c4 bd 6d 19 a2 27 7c 33 86 b5 9d 15 cb 15 77 3d 64 63 a4 63 a2 cb f4 23 e7 b7 d1 62 de 04 4f 05 e4 1d ef 87 7c af a9 31 96 0e bc 3d a9 31 f6 dc 7d 5a f1 ae df cd ad bd bc d2 2f dd a7 81 df c1 e0 2d 55 5f ba f1 33 03 ab 30 01 f7 63 a3 76 b9 ac 15 d6 0d 33 5c b5 54 57 9b 4b 3c a5 19 62 6e Data Ascii: QJ?>Hb(>_rza<dx-hV,]k^L,wD;E2oSwnt~7yV>3)cdzE^`Vt!Fq$y:^E[4~IkZ&%Bm'\|3w=dcc#bO\|1=1}Z/-U_30cv3\TWK<bn
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: c8 6a 88 85 df bf 3d a3 4c 7c 83 3b 17 54 84 65 eb bf 0d ba ed 56 da 1f 63 a5 23 70 96 cb 4a c3 65 26 da d9 ba b3 51 0d 69 dd fa 27 93 6c 53 4f 57 eb e0 bd 0a d5 ba c6 3f 11 01 24 e7 5f 91 d7 c9 38 df 79 e1 bd d9 ca 46 2c 76 f5 7b a3 1d 09 04 22 73 95 87 5a cf 41 2a 2f 79 37 96 93 ae 4a 52 d5 d8 f9 68 be ac 70 d9 ad ce f9 4e ce 5e 2e f0 e1 8d 59 cb f5 f0 6b 94 d7 e8 6a df 93 73 ee 93 6f e6 ec 47 dc e6 b8 7a 62 9c b0 04 ae 51 f8 1c 63 bb 71 cb ac c7 40 e2 3e a9 a9 75 70 78 dd bc a4 5f 37 75 ef e8 57 80 7d fd 5b 00 1e 6f f2 77 ad 3c 88 6c dc 99 0d b1 4c e2 51 45 15 0c a2 da 55 16 d4 cc 09 80 00 db a9 4d fa 9d b4 89 40 04 9b 84 98 c3 59 c7 6d 77 f9 1d 9b 75 ed d7 59 d2 e5 31 b4 6c 66 ef 5a 58 cb c3 ca de 1b 3e cf 0c ad 93 17 cd e1 10 e3 2c 36 38 d8 cd fe 66 Data Ascii: j=L\|;TeVc#pJe&Qi'lSOW?$_8yF,v{"sZA*/y7JRhpN^.YkjsoGzbQcq@>upx_7uW}[ow<lLQEUM@YmwuY1lfZX>,68f
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 99 63 35 15 14 cc 09 8b ad b2 8f 31 e1 fe a3 33 0c b8 53 d9 c8 68 d7 7e 49 6a 24 e4 07 6f c6 60 81 d7 f2 76 66 f1 af 78 7a a4 e3 9e 6b c7 47 31 4e f1 b4 3a 8d 93 d5 59 4d 41 64 93 57 2d f2 b3 cc 64 1e a9 0b ae 72 4b 4a d4 56 eb bb 5a d3 b6 d9 9c 5e 94 29 78 fb 3e 95 66 92 b5 cd 2b bd 59 5d 26 28 d2 93 52 12 a5 5e 2a 56 52 fd 23 13 28 73 8e 79 d0 61 0d 13 15 79 90 af d8 12 0d 5b 6f 68 4a c8 c3 e5 29 9d 58 86 b6 4e da 0d 32 73 5d 85 c1 ed 70 95 81 b4 5e d1 c5 6a d0 e0 82 79 6b b1 1c ad 7b 4d a8 f3 6b df 52 58 4f 27 cc fa c7 33 ca d7 4e ea 1c b6 6e ee 11 f2 00 00 00 00 00 00 00 00 00 00 00 40 f8 a3 de b5 a3 c4 ba 2d 55 43 43 6d b2 46 9d 66 e2 02 b3 d3 61 8a 5a aa 19 81 30 ff 00 28 e2 9d 7b f4 a1 7e 60 05 45 4d e6 82 6a 48 aa 65 79 de 73 f5 e9 38 42 8b 29 d0 Data Ascii: c513Sh~Ij$o`vfxzkG1N:YMAdW-drKJVZ^)x>f+Y]&(R^*VR#(syay[ohJ)XN2s]p^jyk{MkRXO'3Nn@-UCCmFfaZ0({~`EMjHeys8B)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.5	50147	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:52 UTC	903	OUT	GET /tr/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469760&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:52 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.5	50149	157.240.0.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:52 UTC	1137	OUT	GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469763&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:52 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.5	50148	157.240.0.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:52 UTC	1247	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469763&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://www.cravob.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:52 UTC	1213	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x4172baf88b225bc1","source_keys":["1","2"]},{"key_piece":"0x0200d14e8dc1bf6f","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-24 22:57:52 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-24 22:57:52 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-24 22:57:52 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.5	50150	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:52 UTC	940	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=917164566707525&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469760&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:52 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:57:52 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.5	50152	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:52 UTC	393	OUT	GET /uploader/c1fb5ccd272927fa746cf0753d8ae24bd27c6ff1.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:52 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:52 GMT Content-Type: image/jpeg Content-Length: 332858 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2210cfa1f7a166ce8dc5dd3a948271f4a4842311_221" Content-MD5: leGZmDbIAF3Q0UUf8hYJJQ== ETag: "95E1999836C8005DD0D1451FF2160925" Last-Modified: Wed, 09 Aug 2023 07:27:16 GMT x-oss-hash-crc64ecma: 6883602179152930846 x-oss-object-type: Normal x-oss-request-id: 66511B6FD561043930BD9741 x-oss-server-time: 77 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 1 Expires: Sat, 25 May 2024 02:57:52 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e320a8faf7c4-BNA
2024-05-24 22:57:52 UTC	668	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 05 f0 05 dc 03 01 21 00 02 11 01 03 11 01 ff c4 00 37 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 08 09 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fb 2c 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}!7,
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 00 00 00 00 14 42 9a d6 bc 6b 9a f2 6b 9a ed 9a e6 bc 6b ba e5 44 f8 5e b4 2b 33 a5 e5 9e b9 9b b6 c2 9c 9a de f2 00 00 00 00 00 1b f4 f6 75 89 9d 15 c2 59 81 bc cb 3f 17 1b 0a b5 08 58 8f 95 d3 73 d8 22 0a e4 47 da 23 29 36 4d aa a3 bd 8b 75 57 a2 1b 94 59 d8 3e a5 3a 81 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 1e 6b ba e1 af 6b 86 bb ae 26 b9 01 66 b9 ad 90 36 2a bc 92 f7 a6 1d 91 98 67 f5 6c d9 ca f1 76 3e 22 bc f9 d3 36 e6 a3 b4 6d 9c 7a 4b d9 b3 5b 8d 2f 7c e1 b8 74 c0 00 00 00 26 22 5a 62 59 fc 65 ce d4 99 c8 e9 13 53 38 11 29 2c 63 47 12 70 46 cf 1b 55 63 46 46 31 13 1c 4b ed 15 ef b5 91 76 2d c7 9c e7 58 b2 0f 20 80 8b ae a3 f5 01 f4 2e 64 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 44 16 b6 6b ba e9 af Data Ascii: BkkkD^+3uY?Xs"G#)6MuWY>:@kk&f6*glv>"6mzK[/\|t&"ZbYeS8),cGpFUcFF1Kv-X .dDk
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: d7 a3 3e 48 b3 c8 4e 99 74 8a 8b a8 6d 79 22 72 74 de 25 f9 ea 12 a4 bd 91 a3 1c d7 61 d9 8f 68 00 00 00 01 7b bd cb f5 2f 63 96 a0 00 00 00 00 1f 8f d8 a0 08 6a 64 d6 62 78 64 ee 98 df 66 cb f1 fb 32 b5 3e 98 f9 d2 f7 af c7 9d 74 95 d7 25 c3 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 e0 f4 00 06 e7 73 3a c6 94 24 a6 12 5a 51 24 e4 1a c4 8e 30 e3 cc 7a b2 85 ba 55 9d 54 46 1a e4 2d 61 45 d9 4a c4 89 b9 f4 0c ea 13 57 91 6e b5 4c 3b 28 f2 a9 00 00 00 00 00 0e 82 7d 4b f4 86 6c a9 40 00 00 00 3f 20 b0 40 02 c2 cc b1 88 3d b8 66 67 19 b7 cb 34 46 26 01 8b 66 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 15 5c 89 7d ce 27 ee cd 65 c7 54 d6 8e 68 38 b7 38 aa 00 c9 dd 25 cb c8 8c 2d 4e c8 85 00 00 00 00 00 00 00 02 50 fa 4b ea 3c Data Ascii: >HNtmy"rt%ah{/cjdbxdf2>t%Xs:$ZQ$0zUTF-aEJWnL;(}Kl@? @=fg4F&f\}'eTh88%-NPK<
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 66 80 00 00 19 45 fc 02 9f 4f ab be 70 3a 8f 0e 00 00 00 d6 40 00 00 00 00 2e e6 c7 99 8b 8d 76 27 75 d2 b1 15 4e a0 00 00 00 00 00 00 00 00 55 59 55 45 55 95 54 55 50 f0 78 3c 1e 1e 0f 3c 3c 0f 0f 3c 3c f0 f0 3c 3c 1e 00 f3 c0 00 00 00 00 01 b9 c4 b3 27 b1 13 ab e5 ba d5 ab ab e2 65 b3 65 f4 68 1d 77 0c 2e 7f 53 fa 77 48 1e fe a3 c7 c0 5c c6 68 00 00 00 12 07 98 07 d3 7c fc 97 e1 a0 00 00 14 5c 80 00 66 5f 8a 06 c3 09 2c b5 f2 c4 7a ee dc e6 37 45 9a 76 cd 2e 36 19 b1 c1 13 d1 e9 a9 e3 ee 00 00 00 00 00 3d 3d a8 aa a2 ba 8a eb 2b a8 f4 7a 3d 05 10 f0 78 3c 3c f0 f3 c3 cf 0f 3c 3c f0 78 79 e1 e7 87 81 e1 e0 f0 02 90 00 00 00 00 33 b6 cc b5 8d db 06 ae 4e 66 69 b0 f2 48 ee bf 3e c7 44 b3 a6 83 d1 b0 d6 f7 4d 39 b4 a7 46 b8 3c fd 65 97 f3 af 96 4a 00 00 00 Data Ascii: fEOp:@.v'uNUYUEUTUPx<<<<<<<'eehw.SwH\h\|\f_,z7Ev.6==+z=x<<<<xy3NfiH>DM9F<eJ
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: 59 ed 65 ec 8e 5f 43 23 23 cd f7 b2 72 3c ff 00 7a fe 4f 9f ef df af cf f7 39 b5 bf d3 7f 9e 00 2a 0f 45 43 d2 aa 8f 7d 2a ac ae b2 aa ca eb aa eb 4a eb d2 ba cb 95 97 3e a4 8d ff 00 50 e7 7e 4a d4 4a b7 2e 2d 6e 23 b4 ae ee ae fb 9b f9 3f d4 e7 e2 f9 be 94 e7 49 f5 79 be 84 a3 f5 5f 8d 81 88 cd 86 f8 66 d9 7b 1a cc cf da d9 b6 3e 6b 6b 2f b9 33 e6 4a 4c c7 5d 62 c7 ef 3a 47 3d 66 26 24 d7 e3 73 aa 69 28 14 d2 52 3c f0 f0 05 20 00 03 74 80 c3 17 b8 cb c1 7a 0c 20 6b 61 94 ad 3f b4 9c d0 62 e4 d0 7b a5 d9 16 a0 e8 ff 00 a8 39 bf 9c 9c 3d 40 00 00 01 51 b8 5c 25 27 4e 2f d2 8e 6d d0 88 6d 54 f4 00 00 00 07 b5 58 c8 6b a1 5d fc cf fa 23 d6 3e 80 a0 0f 2e 39 a5 bf d4 ff 00 99 81 e9 e8 f4 54 3d a8 ab d2 aa 8a ae 15 d6 57 5d 57 5a 57 72 ab b9 57 2e 25 cb c9 87 Data Ascii: Ye_C##r<zO9EC}J>P~JJ.-n#?Iy_f{>kk/3JL]b:G=f&$si(R< tz ka?b{9=@Q\%'N/mmTXk]#>.9T=W]WZWrW.%
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: fa 4f 21 a7 f6 7f cd 3d 1e fa 7b e9 55 47 b5 95 dc 2e 5c ab 97 4b 97 75 2f 5f 4e a1 d0 b9 eb 03 63 9a d1 38 83 3a e7 9a 74 8e 83 ec e3 3f b1 77 e1 1f cd f3 63 3a 2f ce f7 71 1c 44 d5 26 a4 c8 c3 af a3 be 8d f3 f5 f8 23 4f e9 9f b9 3a bf 2d fe 6f ca ef 3f 71 e9 5c f7 f1 96 77 b7 cf 8b af 12 dd be 5b fa 1d 90 1d 47 b7 2b ba df 4c 42 f7 5d cb 5f 3f 33 be 6e b5 09 cf bc fe 8d 02 1b 9d 92 9a e3 bf a7 be 53 b2 d5 bb 6d db 8b 74 14 d2 51 e1 e7 87 83 cf 00 00 00 00 00 00 00 00 fa af ed dc df cf df 9d 94 00 00 00 00 12 c7 d0 f3 67 3a e3 26 10 00 00 00 00 f6 ab 19 53 7f 41 fd e7 f9 bf b9 c1 bb d7 e9 3e 0e 91 a4 1b bf cb bf 17 af 47 c3 f5 e3 97 f3 af ca 7f 73 e6 9e 7e f3 f8 43 d1 50 a8 aa a2 aa cb 97 0b 97 6a e5 db 2e e5 59 95 60 ec db 46 3a 73 ce 77 99 ac 2b a9 4b Data Ascii: O!={UG.\Ku/_Nc8:t?wc:/qD&#O:-o?q\w[G+LB]_?3nSmtQg:&SA>Gs~CPj.Y`F:sw+K
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: e7 af 6e bc 7a c7 c7 77 e5 cd a4 fc 1e ac f8 5d e3 91 e7 f8 fd 79 3a c4 b4 f6 dd cf a5 32 ee 62 63 b8 f5 83 d2 be 5f d8 c1 ea 9d b8 71 3f 7e 0f e9 36 ed c7 f5 1f 8f d1 7e 62 df 2c af a5 ec ea 5c 03 79 e7 53 27 53 e2 39 bd 4a 4f 53 91 62 a4 2f 47 c6 bb 95 72 d7 7a ca ae 90 5f 37 1b 74 91 93 ba 2e c1 9b a9 33 21 2f c2 9a 9d 80 00 00 00 01 fa 07 f4 2e 75 f0 b7 cb a0 00 00 02 6d 37 89 42 07 40 b7 15 00 00 00 00 00 01 ed 56 3d b1 e0 00 01 ef a3 d2 a1 55 45 55 97 2e 9f 51 fc d1 1b f6 91 35 1d 97 26 3d 9d 49 7b 55 87 1c 5a a4 dd 3e c4 9a db 63 31 76 dd 93 1a cc e4 d9 9f 32 6a 7d f1 aa ef 12 da 84 ad 8e 3e e7 9a 57 5f 66 c7 7d 8f 99 ce 24 3c 5e ac d8 cd e3 97 61 78 fd 52 b6 26 b0 f3 bc 7e f8 ca 7d 7e 0c 49 12 5b 57 59 6e 9b 27 64 e6 1f 0b f4 57 b7 7c 6e e4 17 af Data Ascii: nzw]y:2bc_q?~6~b,\yS'S9JOSb/Grz_7t.3!/.um7B@V=UEU.Q5&=I{UZ>c1v2j}>W_f}$<^axR&~}~I[WYn'dW\|n
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: fc 73 a0 d8 00 00 f0 fd 5e da f3 af 8b 7e 46 00 00 00 2a ef 09 33 9a 97 6f 54 4e 8b 58 9d 03 2a 35 5a c0 e7 52 e0 14 00 00 00 3d aa c2 c0 00 07 a7 be 8a 8f 6b 2a a8 b9 74 bd 72 af f7 08 e1 5d bb 3a d5 b5 ff 00 7f 8b 46 c5 f1 7a f6 fe fb f3 fd 94 e4 ef 3f 29 64 fb 3c bb c7 d9 53 7d 67 5b e2 d6 f9 01 c2 f9 87 5c d7 3b 6f d9 1d 03 87 4e 75 f2 df 5c 7d 2f c1 fa 63 90 75 53 5d d3 cf 07 9e 9e d4 28 3c 0a 46 cc 6b f2 06 fa e9 9c 9d 73 af 38 cc ce 5d 23 61 71 a9 3f a3 a3 e7 ec 7d 5f 31 d3 03 ed ac ba 6e 9d 96 af a4 d4 c6 f1 2e 8d ad 1d fb 95 57 22 d8 a3 67 ce b9 d0 f9 2d dc 9e 5c 64 6e c4 24 e4 4d 70 fb 3e 8f 9d 34 df 9f cf b6 b5 8e b9 f9 af 68 e3 bc 78 a2 37 e8 65 de 76 39 9e 01 f3 26 e0 00 03 c5 fd 6b 9e cd f8 bf e4 40 00 00 02 53 a9 a6 5f 48 48 bf 49 21 c7 b5 Data Ascii: s^~F3oTNX5ZR=k*tr]:Fz?)d<S}g[\;oNu\}/cuS](<Fks8]#aq?}_1n.W"g-\dn$Mp>4hx7ev9&k@S_HHI!
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: fa d4 84 f1 cd 7b 07 3b d3 f8 ee 6e 8b 7b ae 2b 53 ac 46 ad c4 e4 bb 8b a0 00 03 69 3f 57 d9 d7 c8 9f 17 80 00 00 1b b7 5e 48 a9 3b 36 e8 e2 3b 91 c6 1f 57 36 2c c3 8f 44 ae 95 80 a0 00 00 01 ed 56 16 00 00 7b e8 f4 a8 57 51 55 c2 ed d2 ed ea ec fc 43 0e f7 2b 75 7f e5 e9 9b 58 75 31 f6 7f cf f6 6d 3b 4a 7e 78 64 7b bc db 4f 46 d4 8d e9 1e 6e fd db 17 59 f8 07 4d de 31 26 f7 9d 93 ea 4c eb 9f 70 83 e9 0e 69 d3 1c 67 66 31 3b 17 9b b7 72 8a ce fe 4e d1 fd 3c 37 3c 33 57 99 b3 3f 58 4a 55 73 24 bf 8a 48 fd 53 e8 e3 b8 5e ef c2 3f 58 f3 7a 22 23 f9 f4 b5 23 cf 76 bc f9 9f 47 6b c6 fa bf 32 33 59 e9 cb a2 f1 1b 30 b0 89 ad 4b 1d 3d c8 48 1b 13 79 d8 91 37 f7 8c 60 59 aa 31 48 9c 1c a9 d9 2b 8c 6b 56 c8 62 94 e7 c5 98 54 b9 59 b0 f4 28 92 cd d5 e0 9d 92 24 3e Data Ascii: {;n{+SFi?W^H;6;W6,DV{WQUC+uXu1m;J~xd{OFnYM1&Lpigf1;rN<7<3W?XJUs$HS^?Xz"##vGk23Y0K=Hy7`Y1H+kVbTY($>
2024-05-24 22:57:52 UTC	1369	IN	Data Raw: f9 67 e1 a0 00 00 03 bd 6c 56 61 f2 39 2d 8f a0 e9 31 b2 cb b0 7a 71 7c be 7a d7 a0 68 a0 00 00 0f 6a b0 b0 00 01 50 f4 f7 d3 da ca ab 2b ba 5d bb 57 b6 ab 8d 5f b0 72 eb c9 77 3d 49 0b 64 be 9b 2e e1 45 96 72 b8 f5 ab 2b cf e8 c0 ac c0 bd e2 f5 d9 cf ef c7 57 bd f3 3e 8e 7d 7f 5b e6 e8 9b b7 d2 f9 b8 98 3f 27 eb 6c f2 df 4b e7 48 6c 9b c6 4e 2b 38 f8 c4 44 ac 4d 6a d5 29 9e 6b 1d 57 3a 92 cd b2 cf 32 36 2d b2 c8 78 ca c2 e4 d1 a4 f6 b3 a7 e5 d2 24 da 79 ed 9c 3b 0f bf 0c 3c 5c 6b 1f 17 3d 31 ac cb 62 d4 b6 ad 45 aa 0a 68 3c f0 f3 c3 cf 00 00 00 00 00 00 00 07 d2 31 f7 ba 6b e5 ef 85 40 00 00 0e cf d4 2c d5 a2 e4 d2 f4 e3 66 ec 51 31 a6 56 ad bc 1c 7f 22 58 6d 7e d0 00 00 00 f6 ab 0b 00 00 15 0f 45 47 b5 95 54 5c b8 5d c9 ae cd a9 c6 a5 d7 25 e3 d5 45 a8 Data Ascii: glVa9-1zq\|zhjP+]W_rw=Id.Er+W>}[?'lKHlN+8DMj)kW:26-x$y;<\k=1bEh<1k@,fQ1V"Xm~EGT\]%E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.5	50154	103.160.204.248	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:53 UTC	393	OUT	GET /uploader/ddaee3b072f5adc45405925d5ba15ceeed727c59.jpeg HTTP/1.1 Host: img.shopymn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:53 UTC	702	IN	HTTP/1.1 200 OK Date: Fri, 24 May 2024 22:57:53 GMT Content-Type: image/jpeg Content-Length: 320912 Connection: close Cf-Bgj: h2pri Content-Disposition: inline; filename="2218f64e9740df3db05404a0bdd9df2e66821251_221" Content-MD5: FQ4SIbQs7UyqB++McuU8jw== ETag: "150E1221B42CED4CAA07EF8C72E53C8F" Last-Modified: Wed, 09 Aug 2023 07:27:19 GMT x-oss-hash-crc64ecma: 11089175049072434080 x-oss-object-type: Normal x-oss-request-id: 66511B6F342C483237137D01 x-oss-server-time: 80 x-oss-storage-class: Standard CF-Cache-Status: HIT Age: 2 Expires: Sat, 25 May 2024 02:57:53 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8890e323bd58f7ec-BNA
2024-05-24 22:57:53 UTC	667	IN	Data Raw: ff d8 ff e1 00 ae 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 3c 01 02 00 09 00 00 00 66 00 00 00 69 87 04 00 01 00 00 00 70 00 00 00 00 00 00 00 00 77 01 00 e8 03 00 00 00 77 01 00 e8 03 00 00 69 6d 61 67 65 72 79 34 00 00 04 00 00 90 07 00 04 00 00 00 30 32 31 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 14 05 00 00 03 a0 04 00 01 00 00 00 14 05 00 00 00 00 00 00 ff e2 01 b8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 a8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ExifII*V^(<fipwwimagery40210ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL
2024-05-24 22:57:53 UTC	1369	IN	Data Raw: 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff db 00 43 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 05 14 05 14 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 07 02 01 08 09 ff c4 00 1c 01 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ) )/'%'/9339GDG]]}C) )/'%'/9339GDG]]}
2024-05-24 22:57:53 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e1 58 6b c5 09 4a 75 22 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 29 0a 72 90 a8 28 0a 02 01 af 15 c0 c2 4c 28 8a e3 b3 9f a1 4d ac 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: XkJu"D)r(L(M
2024-05-24 22:57:53 UTC	1369	IN	Data Raw: 30 23 97 55 b7 ed b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 2b ca c2 b4 ab 2a 8a e2 01 06 14 88 88 ae 4c a9 ee b5 8b 93 dd 73 f1 95 71 d2 98 54 88 69 d6 e9 ad b6 90 6d d1 26 39 77 bb f8 f8 3a 53 3a 3d 2b a9 ee f6 bf cc fc fa fb 57 55 e2 f6 20 d6 7e 5d 13 2b 55 e7 33 e1 9b 4a c8 d6 9f 29 78 dd 59 4e cf 4f 99 db 0e 94 aa db 3d d3 e8 be 67 e7 27 5d 77 07 a1 8d 79 94 bf d4 c6 56 61 70 b6 12 59 e0 c2 7b 3c 98 c8 d0 f2 61 3e 19 a5 72 4e 52 26 b9 7b bc 56 65 97 a9 a4 de 8c b2 22 a7 9e 2c 79 2f 61 c5 ae a5 e4 ed 02 f3 d3 bd 3f 4a 72 79 5c d7 62 ad d6 cf a2 52 dc ee d1 a4 ef 5f d2 3c d7 d0 d3 74 7d bb 57 b5 39 7c 24 56 6f 0e d7 35 fc e5 df 9e 8b 6a 56 9f ac 39 74 f1 cf b6 bb 21 9f 5a ea 48 d7 73 bf 82 ab 4a 74 ce 6d 32 fa dc 91 a6 30 98 8d 92 b6 Data Ascii: 0#Ub+*LsqTim&9w:S:=+WU ~]+U3J)xYNO=g']wyVapY{<a>rNR&{Ve",y/a?Jry\bR_<t}W9\|$Vo5jV9t!ZHsJtm20
2024-05-24 22:57:53 UTC	1369	IN	Data Raw: ac ef 51 64 6b 57 52 bd 62 a6 0d de 11 26 5e ea f5 68 d8 39 39 b2 5b 0a fd 6b 5b 7a d8 de b2 78 af 43 aa 4f 55 61 5a f7 1e 64 e4 c2 fe eb af 49 f4 fa ad 66 78 a6 94 de 8e d1 33 a9 e6 d7 8a fb 2d 51 bb de 9c 7b b7 2a db a2 97 9c 5a f4 ae 6d 34 b3 01 ae 5d d0 21 47 65 84 46 d7 5b f1 7b 56 bc ed 71 6a 8b a0 67 5e 6b 65 0d ab 12 cd ef 0d 3e 69 49 5e 8f 3f 89 8f 46 23 a5 d6 df a9 40 34 c3 9e 5a 9a d4 b5 93 5c 9a eb d6 ce 86 ca 15 20 5f 29 d6 c6 f1 4b 38 e9 d1 62 b0 b3 ec db 29 6d ba 2f b0 9e 21 9f 0c 98 61 f2 bc 99 2b 9c 5b 5b 0e 9d b1 d5 cf 64 cd 77 f5 ac ad cb 52 c6 2d ed 45 7a ca f3 3d ce b5 c7 d9 49 b7 9d 3f bb 97 42 ec ca 6e fc d2 f2 ea d8 3b 38 7d 77 f9 5e 76 cf ea 53 3f 4f 2b fa 3e 25 4b 26 de 6b 78 d9 5f cd 2d 8f 3d f0 56 de 30 d3 1d 35 c1 9e b8 f2 d3 Data Ascii: QdkWRb&^h99[k[zxCOUaZdIfx3-Q{*Zm4]!GeF[{Vqjg^ke>iI^?F#@4Z\ _)K8b)m/!a+[[dwR-Ez=I?Bn;8}w^vS?O+>%K&kx_-=V05
2024-05-24 22:57:53 UTC	1369	IN	Data Raw: f2 a7 2e ab 37 bc f7 c1 9d e5 5a 38 ce 95 ec 58 5b 70 ad ae 6d 5b 0b 52 a3 aa 9c 27 ab 39 93 1e 8a 83 9f 1b 41 26 97 fd 2b e7 6f 47 56 bb 66 48 7e 79 ea af 6b e2 bd 3d a7 c4 aa 6d 4d 8a 9a 47 27 59 74 a7 25 bd 75 cb b7 1c ed 8f 7a ed bd 58 57 cc 43 32 9d b2 b6 fd 12 01 f9 5c e0 96 61 30 2b f0 ab 4d 0e b8 f8 bf 3e d1 a7 2c 05 a8 32 ed c4 4e c7 6b 5c b7 b4 31 ab ac 74 72 d6 cc e2 5b e2 72 96 b1 14 a8 4d 87 da ac 4d a2 96 d9 4c 8b 62 c3 58 b9 ce 32 b2 26 ba a8 f2 f0 60 97 b3 da b7 15 ba 62 31 f4 f8 7b 94 82 39 e2 5e e8 a8 b3 0c bd d5 8e 5f 49 4a da 17 b4 b7 a2 44 5b d9 8a 15 76 59 c5 7d 42 39 75 13 b5 65 a4 4b d7 b1 de b5 3c bd 55 b0 b2 d6 b6 13 5e 1a 7c 4f bb 53 6f a5 f9 57 a3 c7 ab 6b 4b 0f 37 b3 5c ea e6 ba df 3e 91 9e d6 36 a6 e9 c1 ae f5 cd ad a7 3c da Data Ascii: .7Z8X[pm[R'9A&+oGVfH~yk=mMG'Yt%uzXWC2\a0+M>,2Nk\1tr[rMMLbX2&`b1{9^_IJD[vY}B9ueK<U^\|OSoWkK7\>6<
2024-05-24 22:57:53 UTC	1369	IN	Data Raw: f4 bf 12 87 d7 c2 1a ba ac a6 2d b1 12 2b 5c 35 d3 04 df 1d 3a 3e 67 e9 79 a7 76 0c bd 1f 99 77 62 a7 a3 87 3f 41 9f 7e 6c bd 0f 71 d3 f1 6f a9 c1 b7 8d d1 fe 87 f0 2c f3 5a e5 b9 87 06 b8 91 80 87 77 c2 75 6d 2c 91 15 c0 56 e8 f0 67 aa 38 25 93 2a ce 99 91 1e 88 92 c4 48 8b 6c 35 63 3d af e6 b4 f6 43 d2 22 55 63 13 75 4b cd 45 b1 b1 65 31 ec b6 ad b0 51 8e 6b 60 59 4a c7 6c ed b4 6a bd 39 c9 da 3e da 95 1c b7 e5 1d 51 b3 65 7d 2f 8f a7 27 57 34 cb b6 2f 3b a7 c5 2f ad 76 61 ab f5 61 53 59 b6 a5 bd d3 5d b7 4c b9 cf 3f 46 c1 ae 7f 66 ba a1 b0 44 d2 d6 dd 43 6c b9 a6 5a 76 4e 5d 7a 35 5a 4f 6f 36 eb c1 6d c7 83 7f a5 6a 20 eb 7d 7e bb 5c 97 58 de 3d 6f 36 f4 2f ea 2b 4d ad 35 0d f3 ea 78 69 e6 26 bb 3b db de be fb 39 b5 1d f2 d5 6d 4d 27 6a cf c6 df 4b 8a Data Ascii: -+\5:>gyvwb?A~lqo,Zwum,Vg8%*Hl5c=C"UcuKEe1Qk`YJlj9>Qe}/'W4/;/vaaSY]L?FfDClZvN]z5ZOo6mj }~\X=o6/+M5xi&;9mM'jK
2024-05-24 22:57:53 UTC	1369	IN	Data Raw: ee 1e ce 6f e1 fe c3 f3 93 ed d0 cb 8e 5f 26 f7 dc 3c 1b af 8d e2 54 75 76 5a f3 78 78 a7 c2 9d cd ed e2 df c3 9f e9 7c af 8f 37 d6 e4 7f 55 f5 9d bb ea bf 2b b0 56 a2 5f 99 b8 f5 89 69 af b3 34 56 65 6f 61 58 83 67 aa be 1f 51 bb 5d 5f 13 a9 c5 bd 49 09 d9 ae 42 22 5d 65 48 f8 6c 54 b7 83 12 61 2a b3 d5 2d ed 23 3a 24 da 6e 33 8d 86 b1 b9 65 7d 82 a9 57 8b 29 6c d3 5b 1b a4 cc 58 eb 4c 76 a7 e7 3f 96 ed d3 1a 68 1d be 46 5f a7 b6 b1 b4 f6 d4 f8 e5 d6 b3 8f a2 45 6f 86 18 ef 5a 2b 57 4a ea e7 b0 e8 ce 31 6c 9c c5 1d 66 65 d1 a2 2c ca 78 89 8b 74 5f 1f bb 7d f4 f9 39 dd e7 82 ab 5f 6a 74 09 5d 45 aa eb 6d 82 62 1d 5f 62 c3 2c 42 f4 f9 2d d7 cf ea eb 5e 6f 74 6c b5 81 13 ea 1f 6c c7 31 a3 fa 1e 6e b5 be 34 13 35 da d3 a5 e5 6d c3 25 94 5b 4c ea ae d9 cd 7b Data Ascii: o_&<TuvZxx\|7U+V_i4VeoaXgQ]_IB"]eHlTa*-#:$n3e}W)l[XLv?hF_EoZ+WJ1lfe,xt_}9_jt]Emb_b,B-^otll1n45m%[L{
2024-05-24 22:57:53 UTC	1369	IN	Data Raw: 97 96 3c 77 ec bc 8e 7f f6 7e 0e 5f 57 8b 64 95 f6 4b 1a 5e 21 02 f5 8d a4 d6 e5 a6 0f 95 fd 07 4c ee e1 97 76 e3 e5 f9 d3 bb fc bf d0 bf 49 e5 68 25 5e 17 ea 5c ba d7 d6 34 9b cc 3a ce af 35 db 73 db 40 d7 2d 47 46 6a 36 3a 4e ef d9 97 ad 72 8e 61 30 9f b1 16 d9 40 38 71 c2 25 33 e1 fd 0e 7b fa 17 87 13 e8 3c bd e7 f2 3f af dd fd ce 6e 6f ec 61 a8 a2 de 2d d0 09 29 e3 fe 17 eb bd 23 e4 3e 1f f6 77 e9 5f 31 f8 a1 3f ad 0d 20 e4 47 eb 13 f2 51 fa 3a ab 23 f3 ca 7f 4e 5a bf 8f 3f 35 fa 8e 43 f5 1f ab fe ac fa 3f c0 e5 ab ac c3 f2 a7 0f 74 48 79 24 43 19 e9 61 32 27 ef 67 1f 76 d3 2c da 39 3f 2e d1 b8 fb 71 ab f0 f3 7c 37 2c 9e 65 f6 5a d6 91 36 8f 93 39 4f 31 11 2c c9 56 43 dd 59 49 32 9f 0b ea 4e d3 95 ee ab 1d 1b 25 c1 ee 5f 34 8f 27 ad e9 a6 fa 99 fe 5e Data Ascii: <w~_WdK^!LvIh%^\4:5s@-GFj6:Nra0@8q%3{<?noa-)#>w_1? GQ:#NZ?5C?tHy$Ca2'gv,9?.q\|7,eZ69O1,VCYI2N%_4'^
2024-05-24 22:57:53 UTC	1369	IN	Data Raw: 93 49 36 a4 55 bd 56 71 9e a5 b8 77 f0 6a fd 58 73 c9 74 de 7d ee 78 f7 b2 db 3d 73 87 a7 36 17 d9 11 6d 6c f3 cd 66 c2 75 ab 61 15 b4 e8 ca 5f 55 38 fd c8 9e a7 64 95 62 d2 d9 6d 1e f6 a7 e5 6e bc 7b 9f 36 9c 2b 7c ff 00 4c f1 ef 03 93 a3 99 fa 5c bf 8d 37 cb ad f9 bd bb 07 3e bc d3 a7 2f 34 9f 7d 19 56 f5 f3 ed b9 6b 75 c1 d3 18 d3 ef 1b 46 56 b2 e9 c7 4c ea c9 68 d9 61 fa a7 e6 fb 6d b9 f5 f1 31 84 81 5d 2b 16 f5 68 85 36 c7 37 f0 67 bc 45 3c c4 8b 2b 57 25 e9 2e 6b 2e f5 8c e4 e1 3e b7 0e 6e bb d3 44 ec 3e 07 d5 ee 7e 6f a5 c3 a9 ec d9 6f e0 73 7f ab f8 ab ca bf 41 70 6f 0e 1b 0e 73 49 6a f9 b2 e7 f2 ef a8 c3 e1 f7 f1 0f bc f3 78 e7 dc f8 97 bd 7e 7e f9 2c 4a f2 59 8e 80 54 9b 69 55 57 83 7e b4 f4 fe 2d 6c b1 d3 5e 86 bb 2e 5f bd 68 66 b7 59 5f 29 d2 Data Ascii: I6UVqwjXst}x=s6mlfua_U8dbmn{6+\|L\7>/4}VkuFVLham1]+h67gE<+W%.k.>nD>~oosAposIjx~~,JYTiUW~-l^._hfY_)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.5	50155	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:53 UTC	903	OUT	GET /tr/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469761&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:53 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:53 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.5	50156	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:53 UTC	940	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=751867630178087&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469761&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:53 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:57:53 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.5	50158	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:53 UTC	903	OUT	GET /tr/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469762&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:53 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:53 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.5	50157	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:53 UTC	940	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=758694462259787&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469762&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:53 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:57:53 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.5	50159	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:53 UTC	903	OUT	GET /tr/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469763&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:53 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 24 May 2024 22:57:53 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.5	50160	157.240.253.35	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-24 22:57:53 UTC	940	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=270010499437007&ev=PageView&dl=https%3A%2F%2Fwww.cravob.com%2Fproducts%3Fhandler%3Dlego&rl=&if=false&ts=1716591469763&sw=1280&sh=1024&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&ud[client_ip_address]=258aed139bd3b57d3e6127daf55975b3c400e0105aeb77fdac57d65e166e11f7&ud[client_user_agent]=e96a8e167005b6c7c7053044f8fdc4caa7f6b26b9d528df88268332381918cb1&v=2.9.156&r=stable&ec=0&o=4126&fbp=fb.1.1716591400298.1601704377&ler=empty&cdl=API_unavailable&it=1716591466759&coo=false&dpo=&eid=jl8a7u3u1kePageView1716591462337&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-24 22:57:53 UTC	2008	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-24 22:57:53 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Target ID:	0
Start time:	18:56:19
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	18:56:21
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1988,i,17011482217267182262,10272810757295584300,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:56:23
Start date:	24/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://moctle.com/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://moctle.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Windows Analysis Report
http://moctle.com/