Edit tour

Windows Analysis Report
https://pradeeprunner.com/auth.html

Overview

General Information

Sample URL:	https://pradeeprunner.com/auth.html
Analysis ID:	1466495
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2724 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 --field-trial-handle=2256,i,15486898428901702737,16501120928016359988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pradeeprunner.com/auth.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://pradeeprunner.com/auth.html	Avira URL Cloud: detection malicious, Label: malware
Source: https://pradeeprunner.com/auth.html	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://pradeeprunner.com/files_meta/script.js	Avira URL Cloud: Label: phishing
Source: https://pradeeprunner.com/files_meta/Roboto-Regular.ttf	Avira URL Cloud: Label: phishing
Source: https://pradeeprunner.com/files_meta/EuclidCircularB-Bold-WebXL.ttf	Avira URL Cloud: Label: phishing
Source: https://pradeeprunner.com/files_meta/EuclidCircularB-Medium.ttf	Avira URL Cloud: Label: phishing
Source: https://pradeeprunner.com/images/icons/arrow-down.svg	Avira URL Cloud: Label: phishing
Source: https://pradeeprunner.com/metamask-fox.svg	Avira URL Cloud: Label: phishing
Source: https://pradeeprunner.com/files_meta/first_style.css	Avira URL Cloud: Label: phishing
Source: https://pradeeprunner.com/files_meta/EuclidCircularB-Regular-WebXL.ttf	Avira URL Cloud: Label: phishing
Source: https://pradeeprunner.com/files_meta/MetaMask_Fox.svg.png	Avira URL Cloud: Label: phishing
Source: https://pradeeprunner.com/files_meta/react-gallery/carousel.min.css	Avira URL Cloud: Label: phishing

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:51380 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /auth.html HTTP/1.1Host: pradeeprunner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files_meta/first_style.css HTTP/1.1Host: pradeeprunner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pradeeprunner.com/auth.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files_meta/react-gallery/carousel.min.css HTTP/1.1Host: pradeeprunner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pradeeprunner.com/files_meta/first_style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /files_meta/EuclidCircularB-Regular-WebXL.ttf HTTP/1.1Host: pradeeprunner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pradeeprunner.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://pradeeprunner.com/files_meta/first_style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files_meta/EuclidCircularB-Bold-WebXL.ttf HTTP/1.1Host: pradeeprunner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pradeeprunner.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://pradeeprunner.com/files_meta/first_style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files_meta/EuclidCircularB-Medium.ttf HTTP/1.1Host: pradeeprunner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pradeeprunner.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://pradeeprunner.com/files_meta/first_style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files_meta/script.js HTTP/1.1Host: pradeeprunner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pradeeprunner.com/auth.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/arrow-down.svg HTTP/1.1Host: pradeeprunner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pradeeprunner.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://pradeeprunner.com/auth.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metamask-fox.svg HTTP/1.1Host: pradeeprunner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pradeeprunner.com/auth.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metamask-fox.svg HTTP/1.1Host: pradeeprunner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files_meta/Roboto-Regular.ttf HTTP/1.1Host: pradeeprunner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pradeeprunner.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://pradeeprunner.com/files_meta/first_style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files_meta/MetaMask_Fox.svg.png HTTP/1.1Host: pradeeprunner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pradeeprunner.com/auth.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files_meta/MetaMask_Fox.svg.png HTTP/1.1Host: pradeeprunner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pradeeprunner.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Tue, 02 Jul 2024 22:38:28 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Tue, 02 Jul 2024 22:38:29 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: close

Source: chromecache_110.2.dr	String found in binary or memory: http://meyerweb.com/eric/tools/css/reset/
Source: chromecache_118.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_118.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0Font
Source: chromecache_110.2.dr	String found in binary or memory: http://www.creativebloq.com/web-design/manage-large-css-projects-itcss-101517528
Source: chromecache_115.2.dr, chromecache_113.2.dr, chromecache_120.2.dr	String found in binary or memory: http://www.swisstypefaces.com/licensing/#retail-font-software-licence
Source: chromecache_115.2.dr	String found in binary or memory: http://www.swisstypefaces.com/licensing/#retail-font-software-licenceCopyright
Source: chromecache_115.2.dr	String found in binary or memory: http://www.swisstypefaces.com/licensing/#retail-font-software-licenceEuclid
Source: chromecache_115.2.dr, chromecache_113.2.dr, chromecache_120.2.dr	String found in binary or memory: http://www.swisstypefaces.comPlease
Source: chromecache_110.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_110.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_110.2.dr	String found in binary or memory: https://github.com/MetaMask/metamask-extension/issues/17670
Source: chromecache_110.2.dr	String found in binary or memory: https://metamask.github.io/metamask-storybook/?path=/docs/components-componentlibrary-text--default-
Source: chromecache_121.2.dr	String found in binary or memory: https://snapbuilder.com
Source: chromecache_110.2.dr	String found in binary or memory: https://www.xfive.co/blog/itcss-scalable-maintainable-css-architecture/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51384
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 51384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2

Source: classification engine

Classification label: mal56.win@21/22@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 --field-trial-handle=2256,i,15486898428901702737,16501120928016359988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pradeeprunner.com/auth.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 --field-trial-handle=2256,i,15486898428901702737,16501120928016359988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://pradeeprunner.com/auth.html	100%	Avira URL Cloud	malware
https://pradeeprunner.com/auth.html	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.apache.org/licenses/LICENSE-2.0	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
https://pradeeprunner.com/files_meta/script.js	100%	Avira URL Cloud	phishing
https://snapbuilder.com	0%	Avira URL Cloud	safe
https://pradeeprunner.com/files_meta/Roboto-Regular.ttf	100%	Avira URL Cloud	phishing
http://www.swisstypefaces.com/licensing/#retail-font-software-licence	0%	Avira URL Cloud	safe
https://pradeeprunner.com/files_meta/EuclidCircularB-Bold-WebXL.ttf	100%	Avira URL Cloud	phishing
https://pradeeprunner.com/files_meta/EuclidCircularB-Medium.ttf	100%	Avira URL Cloud	phishing
https://www.xfive.co/blog/itcss-scalable-maintainable-css-architecture/	0%	Avira URL Cloud	safe
https://pradeeprunner.com/images/icons/arrow-down.svg	100%	Avira URL Cloud	phishing
https://github.com/MetaMask/metamask-extension/issues/17670	0%	Avira URL Cloud	safe
https://pradeeprunner.com/metamask-fox.svg	100%	Avira URL Cloud	phishing
https://pradeeprunner.com/files_meta/first_style.css	100%	Avira URL Cloud	phishing
http://www.creativebloq.com/web-design/manage-large-css-projects-itcss-101517528	0%	Avira URL Cloud	safe
https://pradeeprunner.com/files_meta/EuclidCircularB-Regular-WebXL.ttf	100%	Avira URL Cloud	phishing
http://www.swisstypefaces.com/licensing/#retail-font-software-licenceEuclid	0%	Avira URL Cloud	safe
https://metamask.github.io/metamask-storybook/?path=/docs/components-componentlibrary-text--default-	0%	Avira URL Cloud	safe
https://pradeeprunner.com/files_meta/MetaMask_Fox.svg.png	100%	Avira URL Cloud	phishing
http://www.swisstypefaces.com/licensing/#retail-font-software-licenceCopyright	0%	Avira URL Cloud	safe
http://www.apache.org/licenses/LICENSE-2.0Font	0%	Avira URL Cloud	safe
http://meyerweb.com/eric/tools/css/reset/	0%	Avira URL Cloud	safe
http://www.swisstypefaces.comPlease	0%	Avira URL Cloud	safe
https://pradeeprunner.com/files_meta/react-gallery/carousel.min.css	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	142.250.74.196	true	false	unknown
pradeeprunner.com	91.215.85.65	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://pradeeprunner.com/files_meta/Roboto-Regular.ttf	false	Avira URL Cloud: phishing	unknown
https://pradeeprunner.com/metamask-fox.svg	false	Avira URL Cloud: phishing	unknown
https://pradeeprunner.com/files_meta/EuclidCircularB-Medium.ttf	false	Avira URL Cloud: phishing	unknown
https://pradeeprunner.com/files_meta/script.js	false	Avira URL Cloud: phishing	unknown
https://pradeeprunner.com/files_meta/EuclidCircularB-Bold-WebXL.ttf	false	Avira URL Cloud: phishing	unknown
https://pradeeprunner.com/auth.html	true		unknown
https://pradeeprunner.com/images/icons/arrow-down.svg	false	Avira URL Cloud: phishing	unknown
https://pradeeprunner.com/files_meta/EuclidCircularB-Regular-WebXL.ttf	false	Avira URL Cloud: phishing	unknown
https://pradeeprunner.com/files_meta/first_style.css	false	Avira URL Cloud: phishing	unknown
https://pradeeprunner.com/files_meta/MetaMask_Fox.svg.png	false	Avira URL Cloud: phishing	unknown
https://pradeeprunner.com/files_meta/react-gallery/carousel.min.css	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.apache.org/licenses/LICENSE-2.0	chromecache_118.2.dr	false	URL Reputation: safe	unknown
https://github.com/MetaMask/metamask-extension/issues/17670	chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
https://snapbuilder.com	chromecache_121.2.dr	false	Avira URL Cloud: safe	unknown
http://www.swisstypefaces.com/licensing/#retail-font-software-licence	chromecache_115.2.dr, chromecache_113.2.dr, chromecache_120.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xfive.co/blog/itcss-scalable-maintainable-css-architecture/	chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
http://www.creativebloq.com/web-design/manage-large-css-projects-itcss-101517528	chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com/license/free	chromecache_110.2.dr	false	URL Reputation: safe	unknown
https://fontawesome.com	chromecache_110.2.dr	false	URL Reputation: safe	unknown
http://www.swisstypefaces.com/licensing/#retail-font-software-licenceEuclid	chromecache_115.2.dr	false	Avira URL Cloud: safe	unknown
http://meyerweb.com/eric/tools/css/reset/	chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0Font	chromecache_118.2.dr	false	Avira URL Cloud: safe	unknown
https://metamask.github.io/metamask-storybook/?path=/docs/components-componentlibrary-text--default-	chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
http://www.swisstypefaces.com/licensing/#retail-font-software-licenceCopyright	chromecache_115.2.dr	false	Avira URL Cloud: safe	unknown
http://www.swisstypefaces.comPlease	chromecache_115.2.dr, chromecache_113.2.dr, chromecache_120.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
91.215.85.65	pradeeprunner.com	Russian Federation	34665	PINDC-ASRU	false
142.250.74.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466495
Start date and time:	2024-07-03 00:37:30 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://pradeeprunner.com/auth.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@21/22@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.163, 216.58.206.46, 66.102.1.84, 34.104.35.123, 20.114.59.183, 2.16.100.168, 88.221.110.91, 192.229.221.95, 20.242.39.171, 20.166.126.56, 142.250.185.227
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://pradeeprunner.com/auth.html

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://pradeeprunner.com/auth.html Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title 'MetaMask' does not contain any sensitive information request.","The text 'METAMASK English Let's get started Trusted by millions, MetaMask is a secure wallet making the world of web3 accessible to all. Create a new wallet Import an existing wallet' does not create a sense of urgency.","There is no CAPTCHA or anti-robot detection mechanism found in the webpage."]}
Title: MetaMask OCR: METAMASK English Let's get started Trusted by millions, MetaMask is a secure wallet making the world of web3 accessible to all. Create a new wallet Import an existing wallet

Input

Output

URL: https://pradeeprunner.com/auth.html Model: Perplexity: mixtral-8x7b-instruct

{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title 'MetaMask' does not contain any sensitive information request.","The text 'METAMASK English Let's get started Trusted by millions, MetaMask is a secure wallet making the world of web3 accessible to all. Create a new wallet Import an existing wallet' does not create a sense of urgency.","There is no CAPTCHA or anti-robot detection mechanism found in the webpage."]}

Title: MetaMask OCR: METAMASK English Let's get started Trusted by millions, MetaMask is a secure wallet making the world of web3 accessible to all. Create a new wallet Import an existing wallet

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1372282
Entropy (8bit):	5.103259391554266
Encrypted:	false
SSDEEP:	12288:n4n734n7F4n7m4n7d4n7c4n7C4n7SXJ4n7XEBJ1S:nY73Y7FY7mY7dY7cY7CY7SXJY7XEBC
MD5:	031D7970EF5FE6A450DD3CE27B700C64
SHA1:	56E23B85BB192D14108A2EB2C21CD601160A2BE2
SHA-256:	68F0DE3A1E5A986B0641ED45D8FC5209673FC69A8AE729803DCE1E0785CA2289
SHA-512:	B2EDB6D16CE089432E5AAC165A77D12653493DFF5224DDDEDC14CF0BC8ACFE981641DFA5048BE60B0CC3C2B6F8B5C5370ACA6DB66017307602772B3D277F1533
Malicious:	false
Reputation:	low
URL:	https://pradeeprunner.com/files_meta/first_style.css
Preview:	@charset "UTF-8";../.. MetaMask design system imports.. The variables declared here should take precedence... They are included first because they will be used to replace bad variable names in itcss.. prior to it being fully removed from the system.../../* http://meyerweb.com/eric/tools/css/reset/.. v2.0 \| 20110126.. License: none (public domain).... .. This file has been updated from the original copy. ....*/..@import "./react-gallery/carousel.min.css";..html,..body,..div,..span,..applet,..object,..iframe,..h1,..h2,..h3,..h4,..h5,..h6,..p,..blockquote,..pre,..a,..abbr,..acronym,..address,..big,..cite,..code,..del,..dfn,..em,..img,..ins,..kbd,..q,..s,..samp,..small,..strike,..strong,..sub,..sup,..tt,..var,..u,..i,..center,..dl,..dt,..dd,..ol,..ul,..li,..fieldset,..form,..label,..legend,..table,..caption,..tbody,..tfoot,..thead,..tr,..th,..td,..article,..aside,..canvas,..details,..embed,..figure,..figcaption,..footer,..header,..hgroup,..menu,..nav,..output,..ruby,..s

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	71622
Entropy (8bit):	7.908477966417567
Encrypted:	false
SSDEEP:	1536:Mo8z6Vnr880DYpFicDsWAkOUv1inYWeEagO3mKy8h6qYb7LvC:MxtjMpAoll1gOjy8h69La
MD5:	D7ABFFE92AE7CACE6EB47C0C91530DF9
SHA1:	19C3754580996E50DAF37261462D9F5C01795D54
SHA-256:	3E82A1B3D1148E4494EB72EE7008E7091823D90B0BD0D86EBF01A7E29484F540
SHA-512:	4FD1CBDFE770B17CDC488FA1C6EB25546FD55B6D0B9C9F834B352C563171CE4D58F10D971F7342F5B9E16A344A6ED09148F099D36B3BD69539384907170C7A2C
Malicious:	false
Reputation:	low
URL:	https://pradeeprunner.com/files_meta/MetaMask_Fox.svg.png
Preview:	.PNG........IHDR..............!......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx...y.\.}..~...sK..[.<.<...4.0fp<.m....g .....8....9.g.Q.?.y..u..'6.L..... ...A...$..Vk.j.[=wU.....h.z.aW.....9/0....{.Z.Z..%................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	279
Entropy (8bit):	5.19200107821138
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoIRPELMUplmiBFEcXaoD:J0+oxBeRmR9etdzRxGezHVcqma+
MD5:	90F5F58560B98D8906749B8A28DC3F6B
SHA1:	C0A765C64FDCF78AC57A2E8BD41142D60540B897
SHA-256:	659477C38A1C56435C96798183AA5033A3D7F87B3C265141C9BD8FF6F015223E
SHA-512:	81655F9DBBE86773A35C92124D82586D7D7CF539A53EFEA978CAAF23170AF04B595CBD66F0DE578C2A9E47E6984881E336035B0712D08DD5CD4032C8E917F63E
Malicious:	false
Reputation:	low
URL:	https://pradeeprunner.com/images/icons/arrow-down.svg
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<hr>.<address>Apache/2.4.59 (Debian) Server at pradeeprunner.com Port 80</address>.</body></html>.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 19 tables, 1st "BASE", 16 names, Macintosh, language 0x2, type 1 string, otCopyright (c) 2018 Swiss Typefaces Sarl. All rights reserved.\266Version 3.001FontEuclid is a
Category:	downloaded
Size (bytes):	150928
Entropy (8bit):	5.133187130084507
Encrypted:	false
SSDEEP:	1536:TfKjbaUGS+oLMrCz0IqHX+Z9AtiT1pS0+3ntrhrYCy91H1a4m6PNFSiihNyAqZTt:HoLyXTAHX3/8hDqZuoz
MD5:	CD393BE20ACCD12B36EFEFDE5BB590DB
SHA1:	DF1AC0DC8CC96D6EF9F5BE99FA7ADDF30984DBD8
SHA-256:	DF4F17393ABC2D0E8EA15D6B55644CFDEE10D34445D6C26204F427554F3754DE
SHA-512:	60F626DCF0F0FCF0865E82168F6B4CD1A1F9012DEF179B8E0D4E6BFEB9A1BAB148C3C9A19F8893BABAFBE2D9A482364DB78670D0DB7EFA8D2001D743DF922613
Malicious:	false
Reputation:	low
URL:	https://pradeeprunner.com/files_meta/EuclidCircularB-Bold-WebXL.ttf
Preview:	...........0BASEe7]...P....FGPOS.G....QD...4GSUB..4..<x....LTSH.K.........OS/2mKx........`cmap..8...Dx....cvt ......ML...(fpgm.Y.7..K ...sgasp.\|....P.....glyf.....R.....hdmx.F.......4.head..S....<...6hhea.......t...$hmtx./.........loca...~..Mt....maxp........... name......M.....post.}.d..P.... prep4.....L............B.Ow._.<..........=.......guT.....X.........................s.....X.............................l...............s.......P.......................d..................P..;... ....SwTy. . ............ .............. ...z.C.............$.'...8.......&.......>...8.1.%.1.........#.!.....7...$.,...y.0.\|...A.'.N. .....@...<.".(.#.P.(.<.&.2...2.$.......:......... .&.....{.K...#...K.;.K.!.K...$...K.5.K.(.....K.(.K.t.K...K.$.#.Q.K.H.#...K.@...8.....C.................r.'.K.H.,...K...K.&...&...t.e. .e.>.,. .e. .A. .....f. .Z.>...+.....0.>...>...>.Z.>.L...e.>.e. ...>.........O.8.@......A...@.....).[.....G.[...H.8.......".L.%.S.,.......G.../...9.#.#...........7.#.#...R.~...d...l.....s

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	279
Entropy (8bit):	5.19200107821138
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoIRPELMUplmiBFEcXaoD:J0+oxBeRmR9etdzRxGezHVcqma+
MD5:	90F5F58560B98D8906749B8A28DC3F6B
SHA1:	C0A765C64FDCF78AC57A2E8BD41142D60540B897
SHA-256:	659477C38A1C56435C96798183AA5033A3D7F87B3C265141C9BD8FF6F015223E
SHA-512:	81655F9DBBE86773A35C92124D82586D7D7CF539A53EFEA978CAAF23170AF04B595CBD66F0DE578C2A9E47E6984881E336035B0712D08DD5CD4032C8E917F63E
Malicious:	false
Reputation:	low
URL:	https://pradeeprunner.com/files_meta/react-gallery/carousel.min.css
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<hr>.<address>Apache/2.4.59 (Debian) Server at pradeeprunner.com Port 80</address>.</body></html>.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 20 tables, 1st "BASE", 30 names, Macintosh, Copyright (c) 2018 Swiss Typefaces Sarl. All rights reserved.Euclid Circular BMediumSwiss Typefa
Category:	downloaded
Size (bytes):	160832
Entropy (8bit):	5.227117869151789
Encrypted:	false
SSDEEP:	3072:1fWa8dv6Cc01BUcoC2D+iToM/LimlgamIiWaTvzdR:1fWa8di41BCN+ievzH
MD5:	824367033BEA9F919389212D4A425CCE
SHA1:	C504C095643BD25E5AEBCE7D5007DE7B7A35484C
SHA-256:	EA0E1DD82C6C8A9320A6F1D3D610884864EDC4BDCF9B57DCFBE2ABB3A511CA55
SHA-512:	FBAA0930BF835B27E8B2A2CD6751DB4A510C0C7DB6C90F431D533F9FAB9871E471772C43209361DC21CAC44A9C334A721FE4C7CFAFA6AFC3F7EF72CDD8D6479A
Malicious:	false
Reputation:	low
URL:	https://pradeeprunner.com/files_meta/EuclidCircularB-Medium.ttf
Preview:	...........@BASEe7]...lL...FDSIGUWU...t....(GPOS../..l....lGSUB`V....c.....LTSHA.M....,....OS/2l.w}.......`cmapQs....D....hcvt ......M0...fpgm.Y.7..J....sgasp.\|....l8....glyf=.'...R....lhdmx.Z........4.head..S....L...6hhea...........$hmtx.+C....(....loca..Cv..M\....maxp........... name..S..NL...>post..v...T.....prepr.aT..Ld...........B:..<_.<..........=.......gu......a...............................a.............................l...............s.......F.......................Z..................P..;... ....SwTy... ...&.>...... .............. .....R...............5...?...!...+.......A...?...+.......$...%.......>.........r.8.Z...5...H.(.r...3.".4.$.....C.-.4.)...9.%......'.A.........(.,.....w.W......W.2.W...W......W.#.W.......W.%.W.u.W...W.1..L.W.G....W.2. .7.....O.................Z.$.:.U.....:...{./...0.....p.&.p.J.2.&.p.&.D.'.....o.'.R.J...7.....#.J...J.x.J.R.J.W.&.p.J.p.&.\|.J... .....G.C.-.......#.........(.G.....T.G...}.@......./.O.*.?.1.......T...3...K.0.)...'...$...>.0.)...Z

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3231
Entropy (8bit):	4.800995810850194
Encrypted:	false
SSDEEP:	48:4Zwq2wdcO/YkR/S3EeXVeSFQQT90i0i1IXdLHjjhGbUMFHrLVNf0Z:/wd13Ue6QKmkIX1jUbUMFX/8Z
MD5:	C06F3A3E804EBC7343949FDCA3FDD7F8
SHA1:	D96957B5A42C4F69E11A55E388234A26DAF4A039
SHA-256:	B855851451C3EB7220BC7331D6CF7F19DAD4580EBC35610211F028848BA7FC34
SHA-512:	F26B947D8FBE5C5B153ABAFDBBCB26246F49C54C325FA39900DC504EC0D4AA35FB1F1E4394E0BC9A29E604B95CFA7DBBA8D5D22B4860D7168CEA8F17154AAC95
Malicious:	false
Reputation:	low
Preview:	<svg fill="none" height="33" viewBox="0 0 35 33" width="35" xmlns="http://www.w3.org/2000/svg"><g stroke-linecap="round" stroke-linejoin="round" stroke-width=".25"><path d="m32.9582 1-13.1341 9.7183 2.4424-5.72731z" fill="#e17726" stroke="#e17726"/><g fill="#e27625" stroke="#e27625"><path d="m2.66296 1 13.01714 9.809-2.3254-5.81802z"/><path d="m28.2295 23.5335-3.4947 5.3386 7.4829 2.0603 2.1436-7.2823z"/><path d="m1.27281 23.6501 2.13055 7.2823 7.46994-2.0603-3.48166-5.3386z"/><path d="m10.4706 14.5149-2.0786 3.1358 7.405.3369-.2469-7.969z"/><path d="m25.1505 14.5149-5.1575-4.58704-.1688 8.05974 7.4049-.3369z"/><path d="m10.8733 28.8721 4.4819-2.1639-3.8583-3.0062z"/><path d="m20.2659 26.7082 4.4689 2.1639-.6105-5.1701z"/></g><path d="m24.7348 28.8721-4.469-2.1639.3638 2.9025-.039 1.231z" fill="#d5bfb2" stroke="#d5bfb2"/><path d="m10.8732 28.8721 4.1572 1.9696-.026-1.231.3508-2.9025z" fill="#d5bfb2" stroke="#d5bfb2"/><path d="m15.1084 21.7842-3.7155-1.0884 2.6243-1.2051z" fill="#233447

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	71622
Entropy (8bit):	7.908477966417567
Encrypted:	false
SSDEEP:	1536:Mo8z6Vnr880DYpFicDsWAkOUv1inYWeEagO3mKy8h6qYb7LvC:MxtjMpAoll1gOjy8h69La
MD5:	D7ABFFE92AE7CACE6EB47C0C91530DF9
SHA1:	19C3754580996E50DAF37261462D9F5C01795D54
SHA-256:	3E82A1B3D1148E4494EB72EE7008E7091823D90B0BD0D86EBF01A7E29484F540
SHA-512:	4FD1CBDFE770B17CDC488FA1C6EB25546FD55B6D0B9C9F834B352C563171CE4D58F10D971F7342F5B9E16A344A6ED09148F099D36B3BD69539384907170C7A2C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............!......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx...y.\.}..~...sK..[.<.<...4.0fp<.m....g .....8....9.g.Q.?.y..u..'6.L..... ...A...$..Vk.j.[=wU.....h.z.aW.....9/0....{.Z.Z..%................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 17 tables, 1st "GPOS", 27 names, Macintosh, Font data copyright Google 2012RobotoRegularGoogle:Roboto Regular:2013Roboto RegularVersion 1.10
Category:	downloaded
Size (bytes):	145348
Entropy (8bit):	6.6505423518949565
Encrypted:	false
SSDEEP:	3072:ENAluNu8V5ZftwYlLzEeNgHS2pOpdO4WqLpMaSZFKVet:ENAH8XZuadpZuFw+
MD5:	54A91B0619CCF9373D525109268219DC
SHA1:	1D1D41FCADC571DECB6444211B7993B99CE926E2
SHA-256:	B2EFABCA5EA4BC56EEA829713706B5CD0788B82ACA153BD4ADDE9B1573933B4F
SHA-512:	7F79FF3B42A672371814F42814AA5646328B1A314691D30CE09FFDC7A322ADCB1AF66625274F7FAC024CA2F22A42B625001735711C430FAEF6E077E1F1D24887
Malicious:	false
Reputation:	low
URL:	https://pradeeprunner.com/files_meta/Roboto-Regular.ttf
Preview:	............GPOS*.......S.GSUBn.U...2x...JLTSH.......$....OS/2...;.......`cmapR.7....4...Tcvt ...T.......0fpgm/.N.........gasp...........glyf.^2;..&(...Lhead..........6hhea...6...T...$hmtxz<u3.......,locaT...........maxp.8.....x... name.>.h...t....postB..4......#.prep...P...D.............[.._.<..........G.3.......1.,...\.w.................b.......,.?..............................._.................................3.......3.....f..................P. [... ....Goog.......b.....b.+ ...O....:... . .........................P...F...n...h...@.g.P.........t.....N...0.1.#.$...R.....q.......\..._...7...........M...f...S.......c...G.....0.....:.).`...........v.E...........t.x.....C...j.=.%...R...........t.q. ...t.q.M.....a...".j.........6...B.......a.(...N.'.(...X.=.......R.f.j.....?.a...b.;.c...8...d...............................a.......b...../.g..."...........-...........^...?.........o...........b.k...F...h...........Z.....D.X...x...b.q...1.#.D.X...{.....I.c.d.q.l.j...........?.......w.-._

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3231
Entropy (8bit):	4.800995810850194
Encrypted:	false
SSDEEP:	48:4Zwq2wdcO/YkR/S3EeXVeSFQQT90i0i1IXdLHjjhGbUMFHrLVNf0Z:/wd13Ue6QKmkIX1jUbUMFX/8Z
MD5:	C06F3A3E804EBC7343949FDCA3FDD7F8
SHA1:	D96957B5A42C4F69E11A55E388234A26DAF4A039
SHA-256:	B855851451C3EB7220BC7331D6CF7F19DAD4580EBC35610211F028848BA7FC34
SHA-512:	F26B947D8FBE5C5B153ABAFDBBCB26246F49C54C325FA39900DC504EC0D4AA35FB1F1E4394E0BC9A29E604B95CFA7DBBA8D5D22B4860D7168CEA8F17154AAC95
Malicious:	false
Reputation:	low
URL:	https://pradeeprunner.com/metamask-fox.svg
Preview:	<svg fill="none" height="33" viewBox="0 0 35 33" width="35" xmlns="http://www.w3.org/2000/svg"><g stroke-linecap="round" stroke-linejoin="round" stroke-width=".25"><path d="m32.9582 1-13.1341 9.7183 2.4424-5.72731z" fill="#e17726" stroke="#e17726"/><g fill="#e27625" stroke="#e27625"><path d="m2.66296 1 13.01714 9.809-2.3254-5.81802z"/><path d="m28.2295 23.5335-3.4947 5.3386 7.4829 2.0603 2.1436-7.2823z"/><path d="m1.27281 23.6501 2.13055 7.2823 7.46994-2.0603-3.48166-5.3386z"/><path d="m10.4706 14.5149-2.0786 3.1358 7.405.3369-.2469-7.969z"/><path d="m25.1505 14.5149-5.1575-4.58704-.1688 8.05974 7.4049-.3369z"/><path d="m10.8733 28.8721 4.4819-2.1639-3.8583-3.0062z"/><path d="m20.2659 26.7082 4.4689 2.1639-.6105-5.1701z"/></g><path d="m24.7348 28.8721-4.469-2.1639.3638 2.9025-.039 1.231z" fill="#d5bfb2" stroke="#d5bfb2"/><path d="m10.8732 28.8721 4.1572 1.9696-.026-1.231.3508-2.9025z" fill="#d5bfb2" stroke="#d5bfb2"/><path d="m15.1084 21.7842-3.7155-1.0884 2.6243-1.2051z" fill="#233447

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 19 tables, 1st "BASE", 16 names, Macintosh, language 0x2, type 1 string, otCopyright (c) 2018 Swiss Typefaces Sarl. All rights reserved.\266Version 3.001FontEuclid is a
Category:	downloaded
Size (bytes):	154192
Entropy (8bit):	5.0940406334151485
Encrypted:	false
SSDEEP:	3072:x90EsTtZRgffc3pLn1dtNtMcO4ezRwX6Q/Jg:xLAtZRgHMfjdX6Q/i
MD5:	D5AAC9E768D285A459E8B4EA0FF490BF
SHA1:	4347A5A09E8E4014EC4A13634F20FAFEB1C7B6C0
SHA-256:	08B11E464AF41DC1764715793AEE5078E632B68606FEB061B996F3FF8BE7401C
SHA-512:	6A6B821B346032021D4170D642DC0595933F4D4649590DDDC7F4D90CA831924A5C4DA5891FBC7C00FCE9C22B90DACB589BB0029B2ACBC408565DD1B7F31B5018
Malicious:	false
Reputation:	low
URL:	https://pradeeprunner.com/files_meta/EuclidCircularB-Regular-WebXL.ttf
Preview:	...........0BASEe7]...R....FGPOS9.Le..R....ZGSUB`V....I8....LTSH]..b........OS/2l.u........`cmapQs....Dx...hcvt .g....M ...fpgm.Y.7..J....sgasp.\|....R.....glyf0.....R....xhdmx,k........4.head..SS...<...6hhea.......t...$hmtx..N.........loca[..b..ML....maxp........... name......OH....post.~.K..R`... prep..T..LT...........B\..._.<..........=.......guW.....f...............................f.............................g...............s.......@.......................K..................P..;... ....SwTy.@. ............ .............. .....[...............=...B...!...-... ...B...B.../.......'...&.......A...4.....o.<.E.....0.D.,.i...+.$./.$.....;././.+...?...,... .0.D...!...!.,./.....u.^...-...^.-.^...^.......^...^.......^.$.^.v.^...^.9.-.J.^.G.-.{.^..$.7.....U.................K.".1.\.....1.....4...6.....v..v.Q.5..v..E..o...t..M.Q...?.......Q...Q.u.Q.M.Q.^.).w.Q.v..n.Q...$.}...C.J."...........#.....(.<.....\.<.....E.......7.P.,.3.3.......\...5...U.8.-...+...+...A.8.-..._.[.,.a. .m......

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65001)
Category:	downloaded
Size (bytes):	108270
Entropy (8bit):	3.144219377896641
Encrypted:	false
SSDEEP:	384:vXgbNtM4aPptqGtd2MaAsbm5IymmDz8rsQBcWEbLM:PgNod2MaAsq5IymmDz8rsQBcWEE
MD5:	CD2C9C6DE4B2B7ADFA16DBAFA071CA39
SHA1:	5D64189416D95FE5F7DEF4133B548CCCA80F1C15
SHA-256:	D4FA8F40063C76806CA3C7389FDAD51DDB0B6B4904F1FEBD357A592F86FECD6F
SHA-512:	5F60DE7D3F8EC86387804968E43B6037CFBC66053B3C8651BBCB446724CAFDBE1C9A4433C9467B3E8FD1F254ADFC73D0131D97843190FAAF7099210D004F0755
Malicious:	false
Reputation:	low
URL:	https://pradeeprunner.com/auth.html
Preview:	<!DOCTYPE html>..<html data-theme="dark">..<head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1 user-scalable=no">. <title>MetaMask</title>. <link rel="stylesheet" type="text/css" href="files_meta/first_style.css" >. <link rel="icon" href="files_meta/MetaMask_Fox.svg.png">.. <style></style>.</head>..<body>. <script language="javascript">. .// == Begin Free HTML Source Code Obfuscation Protection from https://snapbuilder.com == //.document.write(unescape('%20%3C%64%69%76%20%69%64%3D%22%61%70%70%2D%63%6F%6E%74%65%6E%74%22%3E%0A%20%20%20%20%3C%64%69%76%20%63%6C%61%73%73%3D%22%61%70%70%20%6F%73%2D%77%69%6E%20%6D%6F%75%73%65%2D%75%73%65%72%2D%73%74%79%6C%65%73%22%20%64%69%72%3D%22%61%75%74%6F%22%3E%0A%20%20%20%20%20%20%3C%64%69%76%20%63%6C%61%73%73%3D%22%6F%6E%62%6F%61%72%64%69%6E%67%2D%61%70%70%2D%68%65%61%64%65%72%22%3E%0A%20%20%20%20%20%20%20%20%3C%64%69%76%20%63%6C%61%73%73%3D%22%6F%6E%6

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 00:38:12.901990891 CEST	49678	443	192.168.2.4	104.46.162.224
Jul 3, 2024 00:38:14.183299065 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 3, 2024 00:38:23.791825056 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 3, 2024 00:38:24.065536022 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.065594912 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:24.065671921 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.066066980 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.066075087 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:24.066126108 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.066327095 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.066342115 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:24.066472054 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.066483974 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:24.768615007 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:24.774678946 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:24.786209106 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.786242962 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:24.786698103 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.786705971 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:24.787352085 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:24.787410975 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.787839890 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:24.787897110 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.789994955 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.790074110 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:24.790415049 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.790492058 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:24.791300058 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.791307926 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:24.837898016 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.837898016 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:24.837914944 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:24.887013912 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.351039886 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.351064920 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.351073027 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.351119041 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.351150990 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.351157904 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.351166964 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.351166964 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.351185083 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.351197004 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.351238966 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.352947950 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.352965117 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.353024006 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.353037119 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.398372889 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.476316929 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.476361990 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.476402998 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.476406097 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.476450920 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.476465940 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.476499081 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.478099108 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.478148937 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.478182077 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.478189945 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.478241920 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.479959011 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.480005980 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.480026960 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.480037928 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.480048895 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.480077982 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.481846094 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.481925011 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.481930971 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.481959105 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.481990099 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.482003927 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.601284027 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.601331949 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.601351976 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.601358891 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.601387024 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.601397038 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.601608038 CEST	49736	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:25.601624966 CEST	443	49736	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:25.965436935 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.008508921 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.046969891 CEST	49739	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:38:26.047024965 CEST	443	49739	142.250.74.196	192.168.2.4
Jul 3, 2024 00:38:26.047394991 CEST	49739	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:38:26.051829100 CEST	49739	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:38:26.051845074 CEST	443	49739	142.250.74.196	192.168.2.4
Jul 3, 2024 00:38:26.309431076 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.309463024 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.309470892 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.309495926 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.309508085 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.309519053 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.309534073 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.309561014 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.309590101 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.309590101 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.309596062 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.309659004 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.311424017 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.311444044 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.311486959 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.311527967 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.311537981 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.311579943 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.356404066 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.433886051 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.433898926 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.433939934 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.434053898 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.434053898 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.434088945 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.434247017 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.435849905 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.435873985 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.435961962 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.435961962 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.435973883 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.436079979 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.437649965 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.437669039 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.438167095 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.438167095 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.438177109 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.438416004 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.441051006 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.441083908 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.441412926 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.441422939 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.441509008 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.575360060 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.575386047 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.575514078 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.575514078 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.575546980 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.575651884 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.576050997 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.576072931 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.576133013 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.576141119 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.576188087 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.576467037 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.576874018 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.576890945 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.576965094 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.576972008 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.577004910 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.577013969 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.582382917 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.582400084 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.582499981 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.582509995 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.582573891 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.582717896 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.582737923 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.582828999 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.582828999 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.582838058 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.583503008 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.583533049 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.583610058 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.583616972 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.583653927 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.583848953 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.661422968 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.661448956 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.661746025 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.661784887 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.662127972 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.699827909 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.699847937 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.699944019 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.699963093 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.700036049 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.700217009 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.700354099 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.700371981 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.700500965 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.700508118 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.700695038 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.701045036 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.701070070 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.701162100 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.701162100 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.701170921 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.701244116 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.701674938 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.701689959 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.701777935 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.701777935 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.701786041 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.702018976 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.702143908 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.702162027 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.702248096 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.702248096 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.702255011 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.702338934 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.702352047 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.702368975 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.702430010 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.702430010 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.702436924 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.702472925 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.702583075 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.703306913 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.703324080 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.703495026 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.703509092 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.703772068 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.708302021 CEST	443	49739	142.250.74.196	192.168.2.4
Jul 3, 2024 00:38:26.711617947 CEST	49739	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:38:26.711646080 CEST	443	49739	142.250.74.196	192.168.2.4
Jul 3, 2024 00:38:26.712670088 CEST	443	49739	142.250.74.196	192.168.2.4
Jul 3, 2024 00:38:26.712814093 CEST	49739	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:38:26.717993975 CEST	49739	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:38:26.718077898 CEST	443	49739	142.250.74.196	192.168.2.4
Jul 3, 2024 00:38:26.747807980 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.747832060 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.747952938 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.747952938 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.747986078 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.748215914 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.764637947 CEST	49739	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:38:26.764666080 CEST	443	49739	142.250.74.196	192.168.2.4
Jul 3, 2024 00:38:26.786149025 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.786176920 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.786528111 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.786556005 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.786607981 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.786628962 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.786654949 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.786662102 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.786712885 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.786712885 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.786712885 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.787441969 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.787461996 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.787539959 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.787539959 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.787549019 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.787628889 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.787977934 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.787993908 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.788079977 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.788080931 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.788091898 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.789803028 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.811929941 CEST	49739	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:38:26.824760914 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.824779987 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.824994087 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.825025082 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.825122118 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.825314999 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.825331926 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.825448036 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.825457096 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.825536966 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.825721979 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.825737953 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.825831890 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.825844049 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.825979948 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.842561960 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.842581034 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.842679977 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.842679977 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.842704058 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.845690012 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.872447014 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.872466087 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.872637033 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.872663975 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.872770071 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.873076916 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.873095036 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.873383999 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.873394012 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.873771906 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.873792887 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.873816967 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.873826981 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.873857975 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.873960972 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.874217033 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.874244928 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.874306917 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.874306917 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.874315023 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.874474049 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.893595934 CEST	49740	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:26.893637896 CEST	443	49740	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:26.897737980 CEST	49740	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:26.904382944 CEST	49740	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:26.904402018 CEST	443	49740	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:26.911880970 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.911904097 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.912026882 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.912026882 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.912046909 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.912082911 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.912384987 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.912401915 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.912503958 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.912504911 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.912513971 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.912702084 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.912801027 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.912820101 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.912872076 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.912879944 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.912913084 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.913094044 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.920217037 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.920236111 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.920289993 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.920300007 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.920339108 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.920353889 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.958873987 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.958895922 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.958937883 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.958950043 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.958986998 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.958996058 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.959414005 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.959438086 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.959503889 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.959512949 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.959554911 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.960061073 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.960077047 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.960125923 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.960134983 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.960172892 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.960468054 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.960494041 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.960544109 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.960551023 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.960603952 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.998312950 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.998333931 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.998392105 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.998404980 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.998441935 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.998773098 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.998800993 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.998852968 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.998863935 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.998899937 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.999175072 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.999192953 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.999223948 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.999232054 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:26.999265909 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:26.999289036 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.006767035 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.006789923 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.006849051 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.006865978 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.006875038 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.006905079 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.045222998 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.045252085 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.045291901 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.045325041 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.045344114 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.045371056 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.045651913 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.045671940 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.045727015 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.045736074 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.045774937 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.046324015 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.046346903 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.046413898 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.046427011 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.046480894 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.046840906 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.046871901 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.046904087 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.046912909 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.046945095 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.046966076 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.084707022 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.084727049 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.084784985 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.084799051 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.084841013 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.085001945 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.085021019 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.085063934 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.085071087 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.085092068 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.085112095 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.085227013 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.085244894 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.085280895 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.085289955 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.085314035 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.085334063 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.094671965 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.094690084 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.094754934 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.094764948 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.094806910 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.131879091 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.131905079 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.131952047 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.131982088 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.131994963 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.132004976 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.132030964 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.132030964 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.132045984 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.132071018 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.132118940 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.132733107 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.132750034 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.132785082 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.132793903 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.132836103 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.132847071 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.133150101 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.133164883 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.133220911 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.133229017 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.133275032 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.171015978 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.171036959 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.171081066 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.171112061 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.171142101 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.171154022 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.171341896 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.171360016 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.171394110 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.171401024 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.171426058 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.171446085 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.171921968 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.171943903 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.171982050 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.171988010 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.172022104 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.172034025 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.180891991 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.180911064 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.180970907 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.180996895 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.181024075 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.181031942 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.218121052 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.218139887 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.218195915 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.218225002 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.218277931 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.218580008 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.218601942 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.218657970 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.218667984 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.218713045 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.219106913 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.219121933 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.219177008 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.219186068 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.219228029 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.219486952 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.219502926 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.219556093 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.219563007 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.219605923 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.257203102 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.257227898 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.257277966 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.257307053 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.257320881 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.257350922 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.257759094 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.257777929 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.257833004 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.257841110 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.257879019 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.258296013 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.258313894 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.258357048 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.258364916 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.258407116 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.258434057 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.267247915 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.267266989 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.267329931 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.267339945 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.267381907 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.304500103 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.304517984 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.304575920 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.304589033 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.304635048 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.304907084 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.304924011 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.304987907 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.304994106 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.305036068 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.305571079 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.305598974 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.305634975 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.305643082 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.305681944 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.305944920 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.305969000 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.306010008 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.306015968 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.306041956 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.306061029 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.343627930 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.343650103 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.343720913 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.343759060 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.343802929 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.343890905 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.343909025 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.343955994 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.343966007 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.343978882 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.344007969 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.344544888 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.344563961 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.344613075 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.344624043 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.344667912 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.353636026 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.353655100 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.353693008 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.353732109 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.353741884 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.353781939 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.390923023 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.390943050 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.390994072 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.391030073 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.391050100 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.391067982 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.391361952 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.391390085 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.391422987 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.391434908 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.391455889 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.391474962 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.391949892 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.391966105 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.392023087 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.392033100 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.392070055 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.392383099 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.392404079 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.392441988 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.392448902 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.392488003 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.392494917 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.430026054 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.430052042 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.430107117 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.430124044 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.430150032 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.430169106 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.430311918 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.430330992 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.430366039 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.430372953 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.430399895 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.430413008 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.430682898 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.430710077 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.430752039 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.430758953 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.430768013 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.430784941 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.430810928 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.430825949 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.432092905 CEST	49735	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.432116032 CEST	443	49735	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.491584063 CEST	49741	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.491626024 CEST	443	49741	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.491698980 CEST	49741	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.492425919 CEST	49741	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:27.492440939 CEST	443	49741	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:27.577095032 CEST	443	49740	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:27.577181101 CEST	49740	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:27.585176945 CEST	49740	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:27.585190058 CEST	443	49740	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:27.585562944 CEST	443	49740	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:27.629223108 CEST	49740	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:27.878285885 CEST	49740	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:27.920533895 CEST	443	49740	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:28.071369886 CEST	443	49740	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:28.071681976 CEST	443	49740	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:28.075747967 CEST	49740	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:28.168859959 CEST	49740	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:28.168906927 CEST	443	49740	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:28.205678940 CEST	443	49741	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:28.247076988 CEST	49741	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:28.247102022 CEST	443	49741	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:28.247709990 CEST	443	49741	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:28.256896019 CEST	49741	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:28.256983042 CEST	443	49741	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:28.257410049 CEST	49741	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:28.286412001 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:28.286459923 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:28.287215948 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:28.287878036 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:28.287899017 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:28.300503969 CEST	443	49741	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:28.566533089 CEST	443	49741	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:28.566612959 CEST	443	49741	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:28.566984892 CEST	49741	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:28.573987961 CEST	49741	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:28.574017048 CEST	443	49741	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:28.951323986 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:28.951423883 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:28.952951908 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:28.952967882 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:28.953241110 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:28.954435110 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:29.000494957 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:29.010618925 CEST	49743	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.010653973 CEST	443	49743	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.010719061 CEST	49743	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.011921883 CEST	49744	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.011967897 CEST	443	49744	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.012034893 CEST	49744	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.013441086 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.013478041 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.013551950 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.013983965 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.013994932 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.019505024 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.019514084 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.019560099 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.021220922 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.021253109 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.021311998 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.021800995 CEST	49744	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.021817923 CEST	443	49744	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.022020102 CEST	49743	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.022031069 CEST	443	49743	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.022277117 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.022299051 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.022470951 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.022481918 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.024622917 CEST	49748	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.024632931 CEST	443	49748	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.024682045 CEST	49748	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.027400017 CEST	49748	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.027410030 CEST	443	49748	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.290261984 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:29.290328026 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:29.290378094 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:29.291436911 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:29.291456938 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:29.291470051 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 00:38:29.291476011 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 00:38:29.714824915 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.718596935 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.718616962 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.719069004 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.719830990 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.719902039 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.720278978 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.725872040 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.726342916 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.726365089 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.727236986 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.727300882 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.727988958 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.728046894 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.728434086 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.728442907 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.730483055 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.730772018 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.730786085 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.731709003 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.731785059 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.733530998 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.733592033 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.733705044 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.733711958 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.744541883 CEST	443	49743	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.745598078 CEST	49743	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.745613098 CEST	443	49743	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.745712996 CEST	443	49744	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.746201038 CEST	49744	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.746211052 CEST	443	49744	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.746490955 CEST	443	49743	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.746510983 CEST	443	49744	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.746581078 CEST	49743	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.747430086 CEST	49744	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.747489929 CEST	443	49744	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.748200893 CEST	49743	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.748248100 CEST	443	49743	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.748378038 CEST	49744	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.748462915 CEST	49743	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.748470068 CEST	443	49743	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.751987934 CEST	443	49748	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.752274036 CEST	49748	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.752285004 CEST	443	49748	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.753168106 CEST	443	49748	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.753230095 CEST	49748	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.753957987 CEST	49748	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.754009008 CEST	443	49748	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.754251957 CEST	49748	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.754257917 CEST	443	49748	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.760499954 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.777694941 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.777926922 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.788501978 CEST	443	49744	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:29.795098066 CEST	49748	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:29.795105934 CEST	49743	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.093775988 CEST	443	49743	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.093851089 CEST	443	49743	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.094031096 CEST	49743	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.094866991 CEST	49743	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.094886065 CEST	443	49743	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.096630096 CEST	443	49744	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.096689939 CEST	443	49744	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.096759081 CEST	49744	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.098459959 CEST	443	49748	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.098488092 CEST	443	49748	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.098558903 CEST	443	49748	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.098560095 CEST	49748	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.098606110 CEST	49748	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.098768950 CEST	49744	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.098793983 CEST	443	49744	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.100912094 CEST	49748	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.100929022 CEST	443	49748	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.179677963 CEST	49749	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.179728031 CEST	443	49749	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.179799080 CEST	49749	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.180080891 CEST	49749	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.180095911 CEST	443	49749	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.182171106 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.182193041 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.182209015 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.182271957 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.182295084 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.182360888 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.184509993 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.184528112 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.184638023 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.184647083 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.194240093 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.194266081 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.194274902 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.194283962 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.194314957 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.194345951 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.194363117 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.194394112 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.194422007 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.196229935 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.196254015 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.196357965 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.196367979 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.202996969 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.203013897 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.203030109 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.203047037 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.203090906 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.203089952 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.203109026 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.203151941 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.206206083 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.206233025 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.206274986 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.206280947 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.206335068 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.230122089 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.245430946 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.306566954 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.306591988 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.306643963 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.306654930 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.306693077 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.306715012 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.308212042 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.308228016 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.308314085 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.308321953 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.308393955 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.310034037 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.310050011 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.310121059 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.310129881 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.310235977 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.317769051 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.317781925 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.317809105 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.317836046 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.317850113 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.317883968 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.317913055 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.317933083 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.320055008 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.320074081 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.320153952 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.320163965 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.320211887 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.321446896 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.321469069 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.321563005 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.321572065 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.321677923 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.328182936 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.328207970 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.328253984 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.328260899 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.328306913 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.328330994 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.329660892 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.329683065 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.329727888 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.329734087 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.329776049 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.329814911 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.332303047 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.332321882 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.332381010 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.332386017 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.332432985 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.332452059 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.347949982 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.347969055 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.348032951 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.348040104 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.348082066 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.348095894 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.372558117 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.372584105 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.372680902 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.372703075 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.372772932 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.374564886 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.374587059 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.374649048 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.374658108 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.374711990 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.429658890 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.429678917 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.429765940 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.429775953 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.429832935 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.430557966 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.430573940 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.430622101 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.430629015 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.430665016 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.430682898 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.431382895 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.431399107 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.431632042 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.431643009 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.431735992 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.432290077 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.432359934 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.432365894 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.432380915 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.432430983 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.440613985 CEST	49745	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.440628052 CEST	443	49745	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.441489935 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.441514015 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.441569090 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.441585064 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.441626072 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.441648006 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.442243099 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.442264080 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.442306995 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.442315102 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.442357063 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.442387104 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.443753958 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.443770885 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.443798065 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.443851948 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.443861008 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.443881035 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.443892002 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.443931103 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.453325987 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.453347921 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.453433990 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.453444004 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.453593016 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.454199076 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.454209089 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.454286098 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.454292059 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.454344034 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.455383062 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.455399990 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.455476046 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.455482006 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.455636978 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.456033945 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.456079960 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.456096888 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.456103086 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.456145048 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.456165075 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.630389929 CEST	49746	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.630404949 CEST	443	49746	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.631197929 CEST	49747	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.631231070 CEST	443	49747	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.637963057 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.637989044 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.639632940 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.639960051 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.639971018 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.903667927 CEST	443	49749	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.904110909 CEST	49749	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.904144049 CEST	443	49749	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.905153036 CEST	443	49749	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.905235052 CEST	49749	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.905807972 CEST	49749	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.905884981 CEST	443	49749	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.906208038 CEST	49749	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:30.906217098 CEST	443	49749	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:30.948833942 CEST	49749	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.251219034 CEST	443	49749	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.251240969 CEST	443	49749	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.251306057 CEST	443	49749	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.251317024 CEST	49749	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.251393080 CEST	49749	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.252980947 CEST	49749	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.253004074 CEST	443	49749	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.368573904 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.369348049 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.369371891 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.369740009 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.370352983 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.370418072 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.370718956 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.412513971 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.847508907 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.847537994 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.847553015 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.847719908 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.847758055 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.847820997 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.849677086 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.849700928 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.849750996 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.849761009 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.849792957 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.901937962 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.972688913 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.972713947 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.972841024 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.972876072 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.972934961 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.974484921 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.974504948 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.974601030 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.974610090 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.974653959 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.976936102 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.976955891 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.977020979 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:31.977030993 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:31.977075100 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.013912916 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.013936043 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.014014006 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.014034033 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.014081001 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.098150969 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.098185062 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.098252058 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.098284006 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.098311901 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.098335981 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.099339008 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.099364996 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.099410057 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.099419117 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.099478006 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.099478006 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.100836992 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.100891113 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.100913048 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.100919962 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.100955963 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.100975990 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.101027012 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.102467060 CEST	49750	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.102483988 CEST	443	49750	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.132210016 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.132257938 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.132409096 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.132735014 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.132750034 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.846265078 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.853033066 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.853058100 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.853487015 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.884505033 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.884635925 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:32.885869026 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:32.928508043 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.309067011 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.309097052 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.309134007 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.309150934 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.309170008 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.309204102 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.309221983 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.309252024 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.310602903 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.310621023 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.310688019 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.310698032 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.365703106 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.431734085 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.431754112 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.431797981 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.431801081 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.431818008 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.431854963 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.431865931 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.431904078 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.433029890 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.433058023 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.433103085 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.433109999 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.433150053 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.433163881 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.433901072 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.433969021 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.433975935 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.433998108 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.434016943 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.434055090 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.439167023 CEST	49751	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.439186096 CEST	443	49751	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.589559078 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.589610100 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:33.589675903 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.590598106 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:33.590611935 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.299489021 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.299820900 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.299851894 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.300192118 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.300576925 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.300653934 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.300738096 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.341104031 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.341128111 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.764228106 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.764257908 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.764266014 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.764278889 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.764307022 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.764318943 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.764336109 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.764362097 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.764384031 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.766371012 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.766388893 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.766434908 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.766441107 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.766480923 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.887892008 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.887919903 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.887955904 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.887994051 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.888006926 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.888076067 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.889225006 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.889241934 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.889285088 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.889293909 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.889319897 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.889334917 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.889955997 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.890010118 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.890014887 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.890038967 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:34.890055895 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.890084028 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.890470028 CEST	49755	443	192.168.2.4	91.215.85.65
Jul 3, 2024 00:38:34.890482903 CEST	443	49755	91.215.85.65	192.168.2.4
Jul 3, 2024 00:38:36.617316008 CEST	443	49739	142.250.74.196	192.168.2.4
Jul 3, 2024 00:38:36.617398024 CEST	443	49739	142.250.74.196	192.168.2.4
Jul 3, 2024 00:38:36.617446899 CEST	49739	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:38:38.355222940 CEST	49739	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:38:38.355247021 CEST	443	49739	142.250.74.196	192.168.2.4
Jul 3, 2024 00:38:45.367785931 CEST	51380	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:38:45.376174927 CEST	53	51380	1.1.1.1	192.168.2.4
Jul 3, 2024 00:38:45.377767086 CEST	51380	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:38:45.377818108 CEST	51380	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:38:45.385405064 CEST	53	51380	1.1.1.1	192.168.2.4
Jul 3, 2024 00:38:45.840060949 CEST	53	51380	1.1.1.1	192.168.2.4
Jul 3, 2024 00:38:45.851541996 CEST	51380	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:38:45.860121012 CEST	53	51380	1.1.1.1	192.168.2.4
Jul 3, 2024 00:38:45.860179901 CEST	51380	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:39:26.396384954 CEST	51384	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:39:26.396440029 CEST	443	51384	142.250.74.196	192.168.2.4
Jul 3, 2024 00:39:26.396507025 CEST	51384	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:39:26.396889925 CEST	51384	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:39:26.396907091 CEST	443	51384	142.250.74.196	192.168.2.4
Jul 3, 2024 00:39:27.088661909 CEST	443	51384	142.250.74.196	192.168.2.4
Jul 3, 2024 00:39:27.090274096 CEST	51384	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:39:27.090303898 CEST	443	51384	142.250.74.196	192.168.2.4
Jul 3, 2024 00:39:27.090620995 CEST	443	51384	142.250.74.196	192.168.2.4
Jul 3, 2024 00:39:27.091157913 CEST	51384	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:39:27.091212988 CEST	443	51384	142.250.74.196	192.168.2.4
Jul 3, 2024 00:39:27.135777950 CEST	51384	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:39:31.854887009 CEST	49723	80	192.168.2.4	199.232.214.172
Jul 3, 2024 00:39:31.855000019 CEST	49724	80	192.168.2.4	199.232.214.172
Jul 3, 2024 00:39:31.861413002 CEST	80	49723	199.232.214.172	192.168.2.4
Jul 3, 2024 00:39:31.861485004 CEST	49723	80	192.168.2.4	199.232.214.172
Jul 3, 2024 00:39:31.861937046 CEST	80	49724	199.232.214.172	192.168.2.4
Jul 3, 2024 00:39:31.861999989 CEST	49724	80	192.168.2.4	199.232.214.172
Jul 3, 2024 00:39:37.020553112 CEST	443	51384	142.250.74.196	192.168.2.4
Jul 3, 2024 00:39:37.020627975 CEST	443	51384	142.250.74.196	192.168.2.4
Jul 3, 2024 00:39:37.020690918 CEST	51384	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:39:38.418126106 CEST	51384	443	192.168.2.4	142.250.74.196
Jul 3, 2024 00:39:38.418164968 CEST	443	51384	142.250.74.196	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 00:38:21.951958895 CEST	53	59285	1.1.1.1	192.168.2.4
Jul 3, 2024 00:38:21.999353886 CEST	53	64594	1.1.1.1	192.168.2.4
Jul 3, 2024 00:38:23.125396967 CEST	53	58296	1.1.1.1	192.168.2.4
Jul 3, 2024 00:38:24.004441023 CEST	58688	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:38:24.004709005 CEST	51285	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:38:24.050755978 CEST	53	58688	1.1.1.1	192.168.2.4
Jul 3, 2024 00:38:24.191965103 CEST	53	51285	1.1.1.1	192.168.2.4
Jul 3, 2024 00:38:26.022047997 CEST	49665	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:38:26.022047997 CEST	65071	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:38:26.030083895 CEST	53	65071	1.1.1.1	192.168.2.4
Jul 3, 2024 00:38:26.030416965 CEST	53	49665	1.1.1.1	192.168.2.4
Jul 3, 2024 00:38:30.109580040 CEST	58026	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:38:30.109740019 CEST	62087	53	192.168.2.4	1.1.1.1
Jul 3, 2024 00:38:30.146442890 CEST	53	62087	1.1.1.1	192.168.2.4
Jul 3, 2024 00:38:30.179011106 CEST	53	58026	1.1.1.1	192.168.2.4
Jul 3, 2024 00:38:40.273824930 CEST	53	51739	1.1.1.1	192.168.2.4
Jul 3, 2024 00:38:43.432991028 CEST	138	138	192.168.2.4	192.168.2.255
Jul 3, 2024 00:38:45.367079020 CEST	53	51379	1.1.1.1	192.168.2.4
Jul 3, 2024 00:39:21.716562986 CEST	53	63413	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 3, 2024 00:38:24.192058086 CEST	192.168.2.4	1.1.1.1	c229	(Port unreachable)	Destination Unreachable
Jul 3, 2024 00:39:21.716641903 CEST	192.168.2.4	1.1.1.1	c224	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 3, 2024 00:38:24.004441023 CEST	192.168.2.4	1.1.1.1	0xa6da	Standard query (0)	pradeeprunner.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:38:24.004709005 CEST	192.168.2.4	1.1.1.1	0x7b64	Standard query (0)	pradeeprunner.com	65	IN (0x0001)	false
Jul 3, 2024 00:38:26.022047997 CEST	192.168.2.4	1.1.1.1	0x9025	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:38:26.022047997 CEST	192.168.2.4	1.1.1.1	0x6552	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 00:38:30.109580040 CEST	192.168.2.4	1.1.1.1	0x2408	Standard query (0)	pradeeprunner.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:38:30.109740019 CEST	192.168.2.4	1.1.1.1	0x4ab	Standard query (0)	pradeeprunner.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 3, 2024 00:38:24.050755978 CEST	1.1.1.1	192.168.2.4	0xa6da	No error (0)	pradeeprunner.com		91.215.85.65	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:38:26.030083895 CEST	1.1.1.1	192.168.2.4	0x6552	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 00:38:26.030416965 CEST	1.1.1.1	192.168.2.4	0x9025	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:38:30.179011106 CEST	1.1.1.1	192.168.2.4	0x2408	No error (0)	pradeeprunner.com		91.215.85.65	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:38:38.226839066 CEST	1.1.1.1	192.168.2.4	0x59ff	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:38:38.226839066 CEST	1.1.1.1	192.168.2.4	0x59ff	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pradeeprunner.com

https:

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	91.215.85.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:24 UTC	669	OUT	GET /auth.html HTTP/1.1 Host: pradeeprunner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:38:25 UTC	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 02 Jul 2024 22:38:25 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000;
2024-07-02 22:38:25 UTC	16165	IN	Data Raw: 31 65 65 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 Data Ascii: 1eec<!DOCTYPE html><html data-theme="dark"><head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1 user-scalable=no"> <title>MetaMask</title> <link rel="s
2024-07-02 22:38:25 UTC	16384	IN	Data Raw: 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 37 30 25 36 31 25 37 34 25 36 38 25 32 30 25 36 34 25 33 44 25 32 32 25 36 44 25 33 35 25 33 37 25 32 30 25 33 33 25 32 45 25 33 33 25 32 44 25 33 35 25 32 45 25 33 33 25 32 30 25 33 32 25 33 39 25 32 45 25 33 33 25 32 30 25 33 36 25 32 45 25 33 37 25 32 30 25 33 33 25 33 34 25 32 45 25 33 36 25 32 30 25 33 31 25 32 45 25 33 35 25 32 44 25 33 34 25 33 35 25 32 45 25 33 36 25 37 41 25 32 32 25 33 45 25 33 43 25 32 46 25 37 30 25 36 31 25 37 34 25 36 38 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 37 30 25 Data Ascii: 20%20%20%20%20%20%20%20%20%3C%70%61%74%68%20%64%3D%22%6D%35%37%20%33%2E%33%2D%35%2E%33%20%32%39%2E%33%20%36%2E%37%20%33%34%2E%36%20%31%2E%35%2D%34%35%2E%36%7A%22%3E%3C%2F%70%61%74%68%3E%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3C%70%
2024-07-02 22:38:25 UTC	16384	IN	Data Raw: 33 30 25 32 32 25 32 30 25 36 31 25 37 32 25 36 39 25 36 31 25 32 44 25 36 43 25 36 31 25 36 32 25 36 35 25 36 43 25 33 44 25 32 32 25 37 33 25 36 43 25 36 39 25 36 34 25 36 35 25 32 30 25 36 39 25 37 34 25 36 35 25 36 44 25 32 30 25 33 32 25 32 32 25 33 45 25 33 43 25 32 46 25 36 43 25 36 39 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 36 43 25 36 39 25 32 30 25 36 33 25 36 43 25 36 31 25 37 33 25 37 33 25 33 44 25 32 32 25 36 34 25 36 46 25 37 34 25 32 32 25 32 30 25 37 36 25 36 31 25 36 43 25 37 35 25 36 35 25 33 44 25 32 32 25 33 32 25 32 32 25 32 30 25 37 32 25 36 46 25 36 43 25 36 35 25 Data Ascii: 30%22%20%61%72%69%61%2D%6C%61%62%65%6C%3D%22%73%6C%69%64%65%20%69%74%65%6D%20%32%22%3E%3C%2F%6C%69%3E%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3C%6C%69%20%63%6C%61%73%73%3D%22%64%6F%74%22%20%76%61%6C%75%65%3D%22%32%22%20%72%6F%6C%65%
2024-07-02 22:38:25 UTC	16384	IN	Data Raw: 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 37 30 25 36 46 25 36 43 25 37 39 25 36 37 25 36 46 25 36 45 25 32 30 25 36 36 25 36 39 25 36 43 25 36 43 25 33 44 25 32 32 25 37 32 25 36 37 25 36 32 25 32 38 25 33 31 25 33 31 25 33 39 25 32 43 25 33 35 25 33 37 25 32 43 25 33 30 25 32 39 25 32 32 25 32 30 25 37 33 25 37 34 25 37 32 25 36 46 25 36 42 25 36 35 25 33 44 25 32 32 25 37 32 25 36 37 25 36 32 25 32 38 25 33 31 25 33 31 25 33 39 25 32 43 25 33 35 25 33 37 25 32 43 25 33 30 25 32 39 25 32 32 25 32 30 25 37 30 25 36 46 25 36 39 25 36 45 25 37 34 25 37 33 25 33 44 25 32 32 25 33 31 25 33 36 25 33 39 25 Data Ascii: 20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3C%70%6F%6C%79%67%6F%6E%20%66%69%6C%6C%3D%22%72%67%62%28%31%31%39%2C%35%37%2C%30%29%22%20%73%74%72%6F%6B%65%3D%22%72%67%62%28%31%31%39%2C%35%37%2C%30%29%22%20%70%6F%69%6E%74%73%3D%22%31%36%39%
2024-07-02 22:38:25 UTC	16384	IN	Data Raw: 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 37 30 25 36 46 25 36 43 25 37 39 25 36 37 25 36 46 25 36 45 25 32 30 25 36 36 25 36 39 25 36 43 25 36 43 25 33 44 25 32 32 25 37 32 25 36 37 25 36 32 25 32 38 25 33 31 25 33 31 25 33 39 25 32 43 25 33 35 25 33 37 25 32 43 25 33 30 25 32 39 25 32 32 25 32 30 25 37 33 25 37 34 25 37 32 25 36 46 25 36 42 25 36 35 25 33 44 25 32 32 25 37 32 25 36 37 25 36 32 25 32 38 25 33 31 25 33 31 25 33 39 25 32 43 25 33 35 25 33 37 25 32 43 25 33 30 25 32 39 25 32 32 25 32 30 25 37 30 25 36 46 25 36 39 25 36 45 25 37 34 25 37 33 25 33 44 25 32 32 25 33 36 25 33 38 25 32 45 25 33 33 25 33 30 25 33 37 25 33 33 25 33 38 25 33 31 25 33 31 25 33 32 25 33 33 25 Data Ascii: 20%20%20%20%20%20%20%20%20%20%20%20%3C%70%6F%6C%79%67%6F%6E%20%66%69%6C%6C%3D%22%72%67%62%28%31%31%39%2C%35%37%2C%30%29%22%20%73%74%72%6F%6B%65%3D%22%72%67%62%28%31%31%39%2C%35%37%2C%30%29%22%20%70%6F%69%6E%74%73%3D%22%36%38%2E%33%30%37%33%38%31%31%32%33%
2024-07-02 22:38:25 UTC	16384	IN	Data Raw: 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 37 30 25 36 46 25 36 43 25 37 39 25 36 37 25 36 46 25 36 45 25 32 30 25 36 36 25 36 39 25 36 43 25 36 43 25 33 44 25 32 32 25 37 32 25 36 37 25 36 32 25 32 38 25 33 32 25 33 30 25 33 35 25 32 43 25 33 39 25 33 38 25 32 43 25 33 30 25 32 39 25 32 32 25 32 30 25 37 33 25 37 34 25 37 32 25 36 46 25 36 42 25 36 35 25 33 44 25 32 32 25 37 32 25 36 37 25 36 32 25 32 38 25 33 32 25 33 30 25 33 35 25 32 43 25 33 39 25 33 38 25 32 43 25 33 30 25 32 39 25 32 32 25 Data Ascii: 0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3C%70%6F%6C%79%67%6F%6E%20%66%69%6C%6C%3D%22%72%67%62%28%32%30%35%2C%39%38%2C%30%29%22%20%73%74%72%6F%6B%65%3D%22%72%67%62%28%32%30%35%2C%39%38%2C%30%29%22%
2024-07-02 22:38:25 UTC	10278	IN	Data Raw: 45 25 33 30 25 33 37 25 33 39 25 33 36 25 33 36 25 33 32 25 33 33 25 33 36 25 33 37 25 33 37 25 33 30 25 33 31 25 33 35 25 33 33 25 32 43 25 33 31 25 33 35 25 33 35 25 32 45 25 33 30 25 33 32 25 33 34 25 33 36 25 33 38 25 33 38 25 33 36 25 33 39 25 33 30 25 33 39 25 33 30 25 33 30 25 33 38 25 32 32 25 33 45 25 33 43 25 32 46 25 37 30 25 36 46 25 36 43 25 37 39 25 36 37 25 36 46 25 36 45 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 37 30 25 36 46 25 36 43 25 37 39 25 36 37 25 36 46 25 36 Data Ascii: E%30%37%39%36%36%32%33%36%37%37%30%31%35%33%2C%31%35%35%2E%30%32%34%36%38%38%36%39%30%39%30%30%38%22%3E%3C%2F%70%6F%6C%79%67%6F%6E%3E%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3C%70%6F%6C%79%67%6F%6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	91.215.85.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:25 UTC	568	OUT	GET /files_meta/first_style.css HTTP/1.1 Host: pradeeprunner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pradeeprunner.com/auth.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:38:26 UTC	285	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 02 Jul 2024 22:38:26 GMT Content-Type: text/css Content-Length: 1372282 Last-Modified: Sun, 30 Jun 2024 17:52:51 GMT Connection: close ETag: "66819b73-14f07a" Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2024-07-02 22:38:26 UTC	16099	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0d 0a 2f 2a 0d 0a 20 20 4d 65 74 61 4d 61 73 6b 20 64 65 73 69 67 6e 20 73 79 73 74 65 6d 20 69 6d 70 6f 72 74 73 0d 0a 20 20 54 68 65 20 76 61 72 69 61 62 6c 65 73 20 64 65 63 6c 61 72 65 64 20 68 65 72 65 20 73 68 6f 75 6c 64 20 74 61 6b 65 20 70 72 65 63 65 64 65 6e 63 65 2e 0d 0a 20 20 54 68 65 79 20 61 72 65 20 69 6e 63 6c 75 64 65 64 20 66 69 72 73 74 20 62 65 63 61 75 73 65 20 74 68 65 79 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 74 6f 20 72 65 70 6c 61 63 65 20 62 61 64 20 76 61 72 69 61 62 6c 65 20 6e 61 6d 65 73 20 69 6e 20 69 74 63 73 73 0d 0a 20 20 70 72 69 6f 72 20 74 6f 20 69 74 20 62 65 69 6e 67 20 66 75 6c 6c 79 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 73 79 73 74 65 6d 2e 0d Data Ascii: @charset "UTF-8";/* MetaMask design system imports The variables declared here should take precedence. They are included first because they will be used to replace bad variable names in itcss prior to it being fully removed from the system.
2024-07-02 22:38:26 UTC	16384	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 20 22 ef 87 b5 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 63 63 2d 76 69 73 61 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 87 b0 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 63 65 6e 74 65 72 63 6f 64 65 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 8e 80 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 63 65 6e 74 6f 73 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 9e 89 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 63 65 72 74 69 66 69 63 61 74 65 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 82 a3 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 63 68 61 69 72 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 9b 80 22 3b 0d 0a 7d 0d 0a 0d Data Ascii: content: "";}.fa-cc-visa:before { content: "";}.fa-centercode:before { content: "";}.fa-centos:before { content: "";}.fa-certificate:before { content: "";}.fa-chair:before { content: "";}
2024-07-02 22:38:26 UTC	16384	IN	Data Raw: 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 8a 96 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 67 69 74 74 65 72 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 90 a6 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 67 6c 61 73 73 2d 63 68 65 65 72 73 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 9e 9f 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 67 6c 61 73 73 2d 6d 61 72 74 69 6e 69 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 80 80 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 67 6c 61 73 73 2d 6d 61 72 74 69 6e 69 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 95 bb 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 67 6c 61 73 73 2d 77 68 69 73 6b 65 79 3a 62 65 66 6f 72 65 20 7b 0d 0a Data Ascii: content: "";}.fa-gitter:before { content: "";}.fa-glass-cheers:before { content: "";}.fa-glass-martini:before { content: "";}.fa-glass-martini-alt:before { content: "";}.fa-glass-whiskey:before {
2024-07-02 22:38:26 UTC	16384	IN	Data Raw: 70 61 67 65 34 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 8f 97 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 70 61 67 65 6c 69 6e 65 73 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 86 8c 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 70 61 67 65 72 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef a0 95 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 70 61 69 6e 74 2d 62 72 75 73 68 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 87 bc 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 70 61 69 6e 74 2d 72 6f 6c 6c 65 72 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 96 aa 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 70 61 6c 65 74 74 65 3a 62 65 66 6f 72 65 20 7b 0d 0a Data Ascii: page4:before { content: "";}.fa-pagelines:before { content: "";}.fa-pager:before { content: "";}.fa-paint-brush:before { content: "";}.fa-paint-roller:before { content: "";}.fa-palette:before {
2024-07-02 22:38:26 UTC	16384	IN	Data Raw: 98 ae 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 74 65 65 74 68 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 98 af 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 74 65 6c 65 67 72 61 6d 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 8b 86 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 74 65 6c 65 67 72 61 6d 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 8f be 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 74 65 6d 70 65 72 61 74 75 72 65 2d 68 69 67 68 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 9d a9 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 74 65 6d 70 65 72 61 74 75 72 65 2d 6c 6f 77 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a Data Ascii: ";}.fa-teeth-open:before { content: "";}.fa-telegram:before { content: "";}.fa-telegram-plane:before { content: "";}.fa-temperature-high:before { content: "";}.fa-temperature-low:before { content:
2024-07-02 22:38:26 UTC	16384	IN	Data Raw: 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 6d 75 74 65 64 29 3b 0d 0a 7d 0d 0a 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 6d 75 74 65 64 29 3b 0d 0a 7d 0d 0a 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 2d 65 72 72 6f 72 20 7b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 65 72 72 6f 72 2d 64 65 66 61 75 Data Ascii: :-ms-input-placeholder { font-weight: 100; color: var(--color-text-muted);}input.form-control:-moz-placeholder { font-weight: 100; color: var(--color-text-muted);}input.form-control--error { border: 1px solid var(--color-error-defau
2024-07-02 22:38:26 UTC	16384	IN	Data Raw: 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 89 a8 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 63 68 72 6f 6d 65 63 61 73 74 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef a0 b8 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 63 68 75 72 63 68 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 94 9d 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 84 91 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 63 69 72 63 6c 65 2d 6e 6f 74 63 68 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 87 8e 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 63 69 74 79 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 Data Ascii: before { content: "";}.fa-chromecast:before { content: "";}.fa-church:before { content: "";}.fa-circle:before { content: "";}.fa-circle-notch:before { content: "";}.fa-city:before { content: "
2024-07-02 22:38:26 UTC	16384	IN	Data Raw: 96 83 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 67 72 69 6e 2d 68 65 61 72 74 73 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 96 84 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 67 72 69 6e 2d 73 71 75 69 6e 74 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 96 85 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 67 72 69 6e 2d 73 71 75 69 6e 74 2d 74 65 61 72 73 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 96 86 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 67 72 69 6e 2d 73 74 61 72 73 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 96 87 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 67 72 69 6e 2d 74 65 61 72 73 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 96 Data Ascii: ";}.fa-grin-hearts:before { content: "";}.fa-grin-squint:before { content: "";}.fa-grin-squint-tears:before { content: "";}.fa-grin-stars:before { content: "";}.fa-grin-tears:before { content: "
2024-07-02 22:38:26 UTC	16384	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 20 22 ef 9d 96 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 70 68 61 62 72 69 63 61 74 6f 72 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 8f 9b 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 70 68 6f 65 6e 69 78 2d 66 72 61 6d 65 77 6f 72 6b 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 8f 9c 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 70 68 6f 65 6e 69 78 2d 73 71 75 61 64 72 6f 6e 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 94 91 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 82 95 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 70 68 6f 6e 65 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f Data Ascii: content: "";}.fa-phabricator:before { content: "";}.fa-phoenix-framework:before { content: "";}.fa-phoenix-squadron:before { content: "";}.fa-phone:before { content: "";}.fa-phone-alt:before { co
2024-07-02 22:38:26 UTC	16384	IN	Data Raw: 74 65 6e 74 3a 20 22 ef 88 85 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 74 6f 69 6c 65 74 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 9f 98 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 74 6f 69 6c 65 74 2d 70 61 70 65 72 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 9c 9e 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 74 6f 69 6c 65 74 2d 70 61 70 65 72 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef a5 b2 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 74 6f 6f 6c 62 6f 78 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 95 92 22 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 61 2d 74 6f 6f 6c 73 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 ef 9f 99 22 3b Data Ascii: tent: "";}.fa-toilet:before { content: "";}.fa-toilet-paper:before { content: "";}.fa-toilet-paper-slash:before { content: "";}.fa-toolbox:before { content: "";}.fa-tools:before { content: "";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:27 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-02 22:38:28 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=149437 Date: Tue, 02 Jul 2024 22:38:27 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	91.215.85.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:28 UTC	600	OUT	GET /files_meta/react-gallery/carousel.min.css HTTP/1.1 Host: pradeeprunner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pradeeprunner.com/files_meta/first_style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:38:28 UTC	177	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Tue, 02 Jul 2024 22:38:28 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close
2024-07-02 22:38:28 UTC	291	IN	Data Raw: 31 31 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 39 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 70 72 61 64 65 65 70 72 75 6e 6e 65 72 2e 63 6f 6d 20 50 6f 72 74 Data Ascii: 117<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.59 (Debian) Server at pradeeprunner.com Port

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:28 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-02 22:38:29 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=149445 Date: Tue, 02 Jul 2024 22:38:29 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-02 22:38:29 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	91.215.85.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:29 UTC	619	OUT	GET /files_meta/EuclidCircularB-Regular-WebXL.ttf HTTP/1.1 Host: pradeeprunner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pradeeprunner.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://pradeeprunner.com/files_meta/first_style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:38:30 UTC	288	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 02 Jul 2024 22:38:29 GMT Content-Type: font/ttf Content-Length: 154192 Connection: close Last-Modified: Sun, 30 Jun 2024 17:52:51 GMT ETag: "25a50-61c1f26398294" Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000;
2024-07-02 22:38:30 UTC	16096	IN	Data Raw: 00 01 00 00 00 13 01 00 00 04 00 30 42 41 53 45 65 37 5d bd 00 01 52 94 00 00 00 46 47 50 4f 53 39 91 4c 65 00 01 52 dc 00 00 f6 5a 47 53 55 42 60 56 7f f3 00 02 49 38 00 00 11 18 4c 54 53 48 5d a9 c4 62 00 00 0d 1c 00 00 02 c5 4f 53 2f 32 6c 1f 75 9e 00 00 01 b8 00 00 00 60 63 6d 61 70 51 73 02 97 00 00 44 78 00 00 06 68 63 76 74 20 01 67 09 f4 00 00 4d 20 00 00 00 2a 66 70 67 6d 06 59 9c 37 00 00 4a e0 00 00 01 73 67 61 73 70 00 7c 00 2e 00 01 52 80 00 00 00 14 67 6c 79 66 30 8c 83 a7 00 00 52 d0 00 00 fc 78 68 64 6d 78 2c 6b f3 1c 00 00 0f e4 00 00 34 94 68 65 61 64 11 d1 53 53 00 00 01 3c 00 00 00 36 68 68 65 61 07 e8 05 d3 00 00 01 74 00 00 00 24 68 6d 74 78 a9 17 4e c5 00 00 02 18 00 00 0b 04 6c 6f 63 61 5b b6 95 62 00 00 4d 4c 00 00 05 84 6d 61 78 Data Ascii: 0BASEe7]RFGPOS9LeRZGSUB`VI8LTSH]bOS/2lu`cmapQsDxhcvt gM *fpgmY7Jsgasp\|.Rglyf0Rxhdmx,k4headSS<6hheat$hmtxNloca[bMLmax
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 17 1e 25 25 1a 13 18 1e 16 18 21 19 22 17 18 00 2e 41 1f 00 0b 0b 0c 13 22 18 2e 22 0a 0d 0d 14 17 0c 12 0c 17 1d 0f 1a 1b 1c 1a 1a 17 1a 1a 0d 0d 14 1a 14 17 25 21 1d 23 21 1a 18 23 23 0d 18 1f 19 29 25 26 1b 27 1d 19 1a 21 20 2c 1f 1f 1b 0e 17 0e 13 18 00 1d 1d 1a 1d 1b 11 1d 1b 0b 0c 19 0b 29 1b 1c 1d 1d 11 15 12 1b 19 23 18 19 16 0f 0c 0f 13 0b 0c 1b 1a 1f 0c 15 00 26 13 16 12 26 00 10 10 11 00 1d 0c 00 0b 12 16 24 24 2a 17 21 21 21 21 21 21 2a 23 1a 1a 1a 1a 0d 0d 0d 0d 22 25 26 26 26 26 26 17 26 21 21 21 21 1f 1b 1a 1d 1d 1d 1d 1d 1d 29 1a 1b 1b 1b 1b 0b 0b 0b 0b 1c 1b 1c 1c 1c 1c 1c 1c 1b 1b 1b 1b 19 1d 19 21 21 21 23 23 23 23 21 22 1a 1a 1a 1a 1a 23 23 23 23 24 23 0d 0d 0d 0d 0d 0d 18 1f 19 19 19 19 19 1a 25 25 25 25 35 26 26 26 26 1d 1d 1d 19 19 Data Ascii: %%!".A"."%!#!##)%&'! ,)#&&$$!!!!!!#"%&&&&&&!!!!)!!!####!"####$#%%%%5&&&&
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 42 5a 34 39 5e 19 a3 26 3e 2d 19 19 2d 3e 26 26 3e 2d 19 19 2d 3e d1 02 c5 4d 24 33 29 47 5e 36 36 5e 47 29 33 24 fe e2 01 16 1c 31 42 26 26 42 31 1c 1c 31 42 26 26 42 31 1c 00 00 00 02 00 2a ff 2f 02 25 01 fe 00 14 00 28 00 57 00 b8 00 00 45 58 b8 00 12 2f 1b b9 00 12 00 0d 3e 59 b8 00 00 45 58 b8 00 0e 2f 1b b9 00 0e 00 0d 3e 59 b8 00 00 45 58 b8 00 14 2f 1b b9 00 14 00 0b 3e 59 b8 00 00 45 58 b8 00 04 2f 1b b9 00 04 00 09 3e 59 b9 00 15 00 02 f4 b8 00 0e 10 b9 00 1f 00 02 f4 30 31 05 11 0e 01 23 22 2e 02 35 34 3e 02 33 32 16 17 35 33 11 03 32 3e 02 35 34 2e 02 23 22 0e 02 15 14 1e 02 01 cf 19 5e 39 35 59 42 25 25 42 59 35 39 5e 19 56 f9 26 3e 2d 19 19 2d 3e 26 26 3f 2d 19 19 2d 3f d1 01 1e 24 33 29 47 5e 36 36 5e 47 29 33 24 4d fd 3b 01 16 1c 31 42 26 Data Ascii: BZ49^&>-->&&>-->M$3)G^66^G)3$1B&&B11B&&B1*/%(WEX/>YEX/>YEX/>YEX/>Y01#".54>32532>54.#"^95YB%%BY59^V&>-->&&?--?$3)G^66^G)3$M;1B&
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 00 08 10 b8 00 2f d0 30 31 01 23 26 06 15 14 16 3b 01 15 35 23 22 2e 02 35 34 3e 02 3b 01 35 33 15 33 32 1e 02 15 14 0e 02 2b 01 15 37 32 36 35 34 26 07 23 11 01 84 06 7b 7b 7a 7c 06 05 4f 7e 59 2f 2f 59 7e 4f 05 5c 06 4f 7e 58 2f 2f 59 7e 4e 06 06 7c 7b 7c 7b 06 02 38 01 71 61 62 71 b2 5d 29 4c 6e 45 45 6d 4c 28 57 57 28 4c 6d 45 45 6e 4c 29 5d b2 71 62 61 71 01 fe 5c 00 01 00 04 00 00 02 9a 02 c6 00 0b 00 47 00 b8 00 00 45 58 b8 00 02 2f 1b b9 00 02 00 0f 3e 59 b8 00 00 45 58 b8 00 05 2f 1b b9 00 05 00 0f 3e 59 b8 00 00 45 58 b8 00 08 2f 1b b9 00 08 00 09 3e 59 b8 00 00 45 58 b8 00 0b 2f 1b b9 00 0b 00 09 3e 59 30 31 33 09 01 33 1b 01 33 09 01 23 0b 01 04 01 12 fe f9 6f d1 d1 6f fe fa 01 11 71 da d9 01 67 01 5f fe eb 01 15 fe a1 fe 99 01 1c fe e4 00 00 Data Ascii: /01#&;5#".54>;5332+72654&#{{z\|O~Y//Y~O\O~X//Y~N\|{\|{8qabq])LnEEmL(WW(LmEEnL)]qbaq\GEX/>YEX/>YEX/>YEX/>Y01333#ooqg_
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 06 23 16 15 14 23 16 15 14 23 22 35 06 23 16 15 14 23 22 35 06 23 16 15 14 23 22 35 06 23 16 15 14 23 22 35 06 23 16 15 14 23 22 35 06 23 16 15 14 23 22 35 06 23 16 15 14 23 22 35 06 23 16 15 14 23 22 35 06 23 16 15 14 23 22 35 06 23 16 15 14 23 22 35 06 07 32 15 14 23 22 35 06 07 32 15 14 23 22 35 34 33 26 35 34 33 32 15 34 33 26 35 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 37 22 Data Ascii: ###"5##"5##"5##"5##"5##"5##"5##"5##"5##"52#"52#"543&543243&547"543247"543247"543247"543247"543247"543247"547"543247"543247"543247"543247"543247"547"543247"543247"543247"543247"543247"547"
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 23 23 18 0a 11 08 66 00 00 01 ff a3 03 02 00 5d 03 9f 00 03 00 0b 00 b8 00 00 2f b8 00 02 dc 30 31 13 27 33 17 15 72 6c 4e 03 02 9d 9d 00 00 00 00 02 ff 58 03 02 00 a7 03 9f 00 03 00 07 00 17 00 b8 00 06 2f b8 00 04 dc b8 00 00 d0 b8 00 06 10 b8 00 02 d0 30 31 13 33 07 23 27 33 07 23 44 63 6d 3b 62 63 6d 3b 03 9f 9d 9d 9d 00 01 ff 5f 03 25 00 a1 03 6a 00 03 00 0d 00 b8 00 02 2f b9 00 01 00 04 f4 30 31 03 21 15 21 a1 01 42 fe be 03 6a 45 00 00 01 ff a8 ff 25 00 58 00 00 00 15 00 2f 00 b8 00 00 45 58 b8 00 00 2f 1b b9 00 00 00 0b 3e 59 b8 00 00 45 58 b8 00 08 2f 1b b9 00 08 00 09 3e 59 b8 00 00 10 b9 00 0f 00 03 f4 30 31 17 22 26 35 34 3e 02 37 33 0e 01 15 14 16 33 32 36 37 15 0e 01 07 28 37 10 18 1d 0e 5d 31 2b 16 0e 12 1b 0b 0d 27 db 32 27 16 27 20 1a 0b Data Ascii: ##f]/01'3rlNX/013#'3#Dcm;bcm;_%j/01!!BjE%X/EX/>YEX/>Y01"&54>733267(7]1+'2''
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 00 08 00 60 00 08 01 58 00 12 01 5c 00 00 01 66 00 03 01 70 00 12 01 8e 00 12 01 99 00 0b 01 9d 00 00 01 a5 ff ce 01 b1 00 0a 01 c5 ff db 01 c9 ff ce 01 cf ff ce 01 d0 00 0b 01 f0 00 23 01 f1 00 23 02 8a 00 02 02 8c 00 00 02 8e 00 06 02 ae 00 0b 02 b6 ff dd 02 b9 00 11 02 bc 00 0b 00 29 00 03 ff e5 00 0c 00 0b 00 0f 00 2b 00 1e 00 1a 00 40 00 0e 00 60 00 0e 01 52 00 0a 01 56 00 0b 01 58 00 1a 01 5c 00 0b 01 66 00 0d 01 6e ff ea 01 70 00 19 01 91 00 0d 01 97 00 00 01 98 ff df 01 99 00 12 01 9d 00 04 01 a5 ff c5 01 a6 ff df 01 a7 00 06 01 b1 00 12 01 c5 ff df 01 c9 ff c5 01 cd ff c5 01 cf ff c5 01 d0 00 12 01 d3 00 06 01 f0 00 2b 01 f1 00 2b 02 86 ff db 02 88 ff db 02 8a 00 0e 02 8c 00 0c 02 8e 00 0d 02 ae 00 13 02 b3 00 0a 02 b6 ff dd 02 b9 00 19 02 bc 00 Data Ascii: `X\fp##)+@`RVX\fnp++
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 ff db ff de ff ce 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff eb ff fd ff e6 ff e8 00 00 ff fe ff de 00 00 ff ef 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ef 00 00 00 00 00 00 00 00 00 00 00 00 ff e9 00 00 00 05 00 08 ff de ff db ff ee 00 07 ff ae 00 07 ff ef ff eb 00 04 ff c1 ff ce ff e0 00 01 00 00 00 Data Ascii:
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fe 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fe 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-02 22:38:30 UTC	7024	IN	Data Raw: 00 7b 00 5f 00 4c 00 95 00 4d 00 96 00 97 00 0a 00 00 00 0c 00 00 00 7a 00 14 00 00 00 00 00 00 00 00 00 00 00 00 00 63 00 00 00 68 00 6c 00 63 00 00 00 11 00 00 00 00 00 00 00 00 00 21 00 00 00 00 00 00 00 6a 00 00 00 00 00 00 00 24 00 4e 00 4e 00 4e 00 4e 00 4e 00 4e 00 51 00 4f 00 51 00 51 00 51 00 51 00 53 00 53 00 53 00 53 00 50 00 53 00 57 00 57 00 57 00 57 00 57 00 00 00 57 00 5b 00 5b 00 5b 00 5b 00 5d 00 03 00 19 00 5f 00 5f 00 5f 00 5f 00 5f 00 5f 00 65 00 61 00 65 00 65 00 65 00 65 00 6e 00 6e 00 6e 00 6e 00 13 00 72 00 73 00 73 00 73 00 73 00 73 00 73 00 5f 00 5f 00 5f 00 5f 00 96 00 60 00 96 00 4e 00 4e 00 4e 00 4f 00 4f 00 4f 00 4f 00 50 00 50 00 51 00 51 00 51 00 51 00 51 00 52 00 52 00 52 00 52 00 53 00 53 00 53 00 53 00 53 00 53 00 53 00 Data Ascii: {_LMzchlc!j$NNNNNNQOQQQQSSSSPSWWWWWW[[[[]______eaeeeennnnrssssss____`NNNOOOOPPQQQQQRRRRSSSSSSS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	91.215.85.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:29 UTC	616	OUT	GET /files_meta/EuclidCircularB-Bold-WebXL.ttf HTTP/1.1 Host: pradeeprunner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pradeeprunner.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://pradeeprunner.com/files_meta/first_style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:38:30 UTC	288	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 02 Jul 2024 22:38:29 GMT Content-Type: font/ttf Content-Length: 150928 Connection: close Last-Modified: Sun, 30 Jun 2024 17:52:51 GMT ETag: "24d90-61c1f263972f4" Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000;
2024-07-02 22:38:30 UTC	16096	IN	Data Raw: 00 01 00 00 00 13 01 00 00 04 00 30 42 41 53 45 65 37 5d bd 00 01 50 fc 00 00 00 46 47 50 4f 53 c6 47 02 f5 00 01 51 44 00 00 eb 34 47 53 55 42 17 88 34 2a 00 02 3c 78 00 00 11 18 4c 54 53 48 d2 be 4b a0 00 00 0d 1c 00 00 02 c5 4f 53 2f 32 6d 4b 78 a7 00 00 01 b8 00 00 00 60 63 6d 61 70 80 da 38 b0 00 00 44 78 00 00 06 a8 63 76 74 20 0a c3 01 ea 00 00 4d 4c 00 00 00 28 66 70 67 6d 06 59 9c 37 00 00 4b 20 00 00 01 73 67 61 73 70 00 7c 00 2e 00 01 50 e8 00 00 00 14 67 6c 79 66 b6 d4 e5 bf 00 00 52 f8 00 00 fa b8 68 64 6d 78 92 46 f1 93 00 00 0f e4 00 00 34 94 68 65 61 64 11 b7 53 0f 00 00 01 3c 00 00 00 36 68 68 65 61 07 cd 05 b3 00 00 01 74 00 00 00 24 68 6d 74 78 cf ac 2f cc 00 00 02 18 00 00 0b 04 6c 6f 63 61 87 f0 ce 7e 00 00 4d 74 00 00 05 84 6d 61 78 Data Ascii: 0BASEe7]PFGPOSGQD4GSUB4*<xLTSHKOS/2mKx`cmap8Dxcvt ML(fpgmY7K sgasp\|.PglyfRhdmxF4headS<6hheat$hmtx/loca~Mtmax
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 18 1b 17 00 18 13 1a 20 16 23 17 17 19 15 20 00 2e 40 1d 00 0a 0a 0d 14 21 19 2d 24 0b 0e 0e 17 17 0d 13 0d 1a 1d 11 1b 1b 1e 1b 1a 19 1b 1a 0e 0e 17 19 17 18 25 23 1d 23 21 1a 19 23 23 0e 19 20 19 29 24 25 1b 27 1e 1b 1a 21 21 2c 20 20 1d 0f 1a 0f 0f 18 00 1c 1c 1a 1c 1b 14 1c 1c 0d 0d 1a 0d 29 1c 1b 1c 1c 13 15 14 1b 1b 25 1b 1b 17 10 0c 10 0f 0a 0d 1b 1b 22 0c 15 00 25 12 19 13 25 00 12 10 11 00 1f 0e 00 0b 11 19 26 26 2a 18 23 23 23 23 23 23 2c 23 1a 1a 1a 1a 0e 0e 0e 0e 22 24 25 25 25 25 25 17 25 21 21 21 21 20 1c 1b 1c 1c 1c 1c 1c 1c 29 1a 1b 1b 1b 1b 0d 0d 0d 0d 1b 1c 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1c 1b 23 23 23 23 23 23 23 21 22 1a 1a 1a 1a 1a 23 23 23 23 24 23 0e 0e 0e 0e 0e 0e 19 20 19 19 19 1a 1a 1b 24 24 24 24 33 25 25 25 25 1e 1e 1e 1b 1b Data Ascii: # .@!-$%##!## )$%'!!, )%"%%&&*######,#"$%%%%%%!!!! )#######!"####$# $$$$3%%%%
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 12 16 0a fe fd 01 4f 46 36 36 46 46 36 36 46 00 00 02 00 20 ff 2f 02 27 01 ff 00 18 00 24 00 57 00 b8 00 00 45 58 b8 00 16 2f 1b b9 00 16 00 0c 3e 59 b8 00 00 45 58 b8 00 10 2f 1b b9 00 10 00 0c 3e 59 b8 00 00 45 58 b8 00 18 2f 1b b9 00 18 00 0a 3e 59 b8 00 00 45 58 b8 00 06 2f 1b b9 00 06 00 08 3e 59 b9 00 19 00 02 f4 b8 00 10 10 b9 00 1f 00 02 f4 30 31 05 11 0e 03 23 22 2e 02 35 34 3e 02 33 32 1e 02 17 35 33 11 03 32 36 35 34 26 23 22 06 15 14 16 01 90 08 19 23 2b 19 31 55 3e 24 24 3e 55 31 19 2b 23 19 08 97 fd 33 3f 3f 33 33 3f 3f d1 01 03 0a 16 12 0b 2a 47 5f 35 35 5f 47 2a 0b 12 16 0a 32 fd 3b 01 4f 46 36 36 46 46 36 36 46 00 01 00 3e 00 00 01 7d 01 fa 00 11 00 40 00 b8 00 00 45 58 b8 00 05 2f 1b b9 00 05 00 0c 3e 59 b8 00 00 45 58 b8 00 00 2f 1b b9 Data Ascii: OF66FF66F /'$WEX/>YEX/>YEX/>YEX/>Y01#".54>32532654&#"#+1U>$$>U1+#3??33??G_55_G2;OF66FF66F>}@EX/>YEX/
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 34 33 32 15 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 17 34 37 22 35 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 17 34 37 22 35 34 37 22 35 34 27 32 17 34 37 22 35 34 37 22 35 34 33 32 15 14 23 16 17 34 33 32 15 14 23 16 17 34 33 32 15 14 23 16 15 14 23 22 35 06 23 16 15 14 23 16 15 14 23 22 35 06 23 16 15 14 23 22 35 06 23 16 15 14 23 16 15 14 23 22 35 06 23 16 15 14 23 16 15 14 23 22 35 06 23 16 15 14 23 16 15 14 23 22 35 06 23 16 15 14 23 22 35 06 23 16 15 14 23 16 15 14 23 22 Data Ascii: 43247"543247"543247"543247"543247"547"543247"543247"543247"543247"543247"547"543247"543247"543247"543247"543247"543247"547"54'247"547"5432#432#432##"5###"5##"5###"5###"5###"5##"5###"
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: f1 13 21 2b 19 19 2b 21 13 13 21 2b 19 19 2b 21 13 41 20 17 17 20 20 17 17 20 00 00 00 01 ff 3f 03 08 00 c0 03 9a 00 1d 00 27 00 b8 00 14 2f b8 00 1c d0 b8 00 19 dc b9 00 05 00 04 f4 b8 00 14 10 b9 00 0a 00 04 f4 b8 00 05 10 b8 00 0d d0 30 31 03 3e 03 33 32 1e 02 33 32 36 37 33 07 0e 03 23 22 2e 02 23 22 06 07 23 bd 04 17 21 28 15 17 27 20 1b 0c 14 12 06 53 04 04 18 21 28 15 17 27 20 1b 0b 14 12 07 52 03 24 1c 2c 1e 0f 0f 11 0f 19 17 1c 1d 2b 1e 0f 0f 11 0f 19 17 00 01 ff 51 01 21 00 b0 01 ab 00 03 00 0d 00 bb 00 01 00 02 00 02 00 04 2b 30 31 03 21 15 21 af 01 5f fe a1 01 ab 8a 00 00 01 fe 8a ff ee 01 74 02 d8 00 03 00 0b 00 b8 00 02 2f b8 00 00 2f 30 31 05 27 01 17 fe e3 59 02 91 59 12 5a 02 90 5a 00 01 ff 4c 00 d5 00 b4 02 1f 00 03 00 0b 00 b8 00 02 2f Data Ascii: !++!!++!A ?'/01>3232673#".#"#!(' S!(' R$,+Q!+01!!_t//01'YYZZL/
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 13 0b d9 20 20 83 1f 02 11 fe ea 1f 38 4e 2e 2e 51 3c 22 02 2e fe c5 7b 84 03 02 93 02 01 0a 1b 31 26 01 c1 00 01 00 14 ff f4 01 e2 02 c6 00 13 00 2b 00 b8 00 00 45 58 b8 00 0d 2f 1b b9 00 0d 00 0e 3e 59 b8 00 00 45 58 b8 00 00 2f 1b b9 00 00 00 08 3e 59 b9 00 09 00 01 f4 30 31 17 22 2e 02 35 33 14 16 33 32 36 35 11 33 11 14 0e 02 fa 2d 53 40 26 9d 2a 1f 1d 2c 9f 26 40 54 0c 19 36 53 3a 24 24 22 22 01 fa fd fc 36 4e 32 18 00 00 ff ff ff ff ff 2f 02 45 01 f4 02 26 02 81 00 00 00 07 02 ab 01 21 00 00 ff ff 00 4b 00 00 02 0d 03 a1 02 26 02 29 00 00 00 07 02 0a 01 2b 00 00 ff ff 00 4b 00 00 01 f4 03 9f 02 26 02 63 00 00 00 07 02 05 01 66 00 00 00 01 00 16 ff f4 02 ec 02 c6 00 25 00 62 00 b8 00 00 45 58 b8 00 1f 2f 1b b9 00 1f 00 0e 3e 59 b8 00 00 45 58 b8 00 Data Ascii: 8N..Q<".{1&+EX/>YEX/>Y01".5332653-S@&*,&@T6S:$$""6N2/E&!K&)+K&cf%bEX/>YEX
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: ff fc 02 4f ff fc 02 53 ff eb 02 55 ff b1 02 58 ff fc 02 71 ff fb 02 92 ff f9 02 b7 ff f9 02 be ff f9 00 04 02 38 00 33 02 3f 00 33 02 42 00 32 02 59 ff ad 00 0e 00 09 ff f6 00 0c ff e2 00 0d ff f3 00 22 ff f4 00 3f ff d5 00 40 ff ea 00 60 ff ea 02 1a ff f9 02 1f ff f5 02 55 ff b1 02 92 ff f8 02 b7 ff f5 02 bd ff f8 02 be ff f6 00 0e 00 09 ff f5 00 0c ff e1 00 0d ff ef 00 22 ff ef 00 3f ff cf 00 40 ff e9 00 60 ff e9 02 1a ff f0 02 1f ff f4 02 55 ff ac 02 92 ff f8 02 b7 ff f4 02 bd ff f8 02 be ff f5 00 05 00 09 ff f1 00 0c ff f0 00 3f ff e7 02 27 ff f4 02 55 ff ba 00 01 02 88 ff b3 00 10 00 0c ff ee 00 12 ff f0 00 22 ff f5 02 1a ff de 02 1f ff f3 02 44 ff fb 02 51 ff f3 02 55 ff f3 02 6a ff f9 02 6c ff fa 02 88 ff f4 02 8b ff f7 02 92 ff f3 02 b7 ff f3 02 Data Ascii: OSUXq83?3B2Y"?@`U"?@`U?'U"DQUjl
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ec ff de ff e8 ff d8 ff de ff f2 ff ea ff f6 ff ee ff c8 ff f6 ff f7 ff f9 00 00 ff fa 00 00 00 00 ff fa 00 00 00 00 00 00 ff fa ff fa ff fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 0b 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-02 22:38:30 UTC	3760	IN	Data Raw: 66 72 61 63 03 ca 66 72 61 63 03 ca 66 72 61 63 03 ca 66 72 61 63 03 ca 66 72 61 63 03 ca 66 72 61 63 03 ca 66 72 61 63 03 ca 66 72 61 63 03 ca 66 72 61 63 03 ca 6c 69 67 61 03 e8 6c 69 67 61 03 e8 6c 69 67 61 03 e8 6c 69 67 61 03 e8 6c 69 67 61 03 e8 6c 69 67 61 03 e8 6c 69 67 61 03 e8 6c 69 67 61 03 e8 6c 69 67 61 03 e8 6c 6e 75 6d 03 ee 6c 6e 75 6d 03 ee 6c 6e 75 6d 03 ee 6c 6e 75 6d 03 ee 6c 6e 75 6d 03 ee 6c 6e 75 6d 03 ee 6c 6e 75 6d 03 ee 6c 6e 75 6d 03 ee 6c 6e 75 6d 03 ee 6c 6f 63 6c 03 f4 6c 6f 63 6c 03 fa 6c 6f 63 6c 04 00 6c 6f 63 6c 04 06 6c 6f 63 6c 04 0c 6e 75 6d 72 04 12 6e 75 6d 72 04 12 6e 75 6d 72 04 12 6e 75 6d 72 04 12 6e 75 6d 72 04 12 6e 75 6d 72 04 12 6e 75 6d 72 04 12 6e 75 6d 72 04 12 6e 75 6d 72 04 12 6f 6e 75 6d 04 18 6f 6e 75 Data Ascii: fracfracfracfracfracfracfracfracfracligaligaligaligaligaligaligaligaligalnumlnumlnumlnumlnumlnumlnumlnumlnumloclloclloclloclloclnumrnumrnumrnumrnumrnumrnumrnumrnumronumonu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	91.215.85.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:29 UTC	612	OUT	GET /files_meta/EuclidCircularB-Medium.ttf HTTP/1.1 Host: pradeeprunner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pradeeprunner.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://pradeeprunner.com/files_meta/first_style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:38:30 UTC	288	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 02 Jul 2024 22:38:29 GMT Content-Type: font/ttf Content-Length: 160832 Connection: close Last-Modified: Sun, 30 Jun 2024 17:52:51 GMT ETag: "27440-61c1f26398294" Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000;
2024-07-02 22:38:30 UTC	16096	IN	Data Raw: 00 01 00 00 00 14 01 00 00 04 00 40 42 41 53 45 65 37 5d bd 00 01 6c 4c 00 00 00 46 44 53 49 47 55 57 55 8b 00 02 74 18 00 00 00 28 47 50 4f 53 cb ef b5 2f 00 01 6c 94 00 00 f6 6c 47 53 55 42 60 56 7f f3 00 02 63 00 00 00 11 18 4c 54 53 48 41 a2 4d ab 00 00 0d 2c 00 00 02 c5 4f 53 2f 32 6c cd 77 7d 00 00 01 c8 00 00 00 60 63 6d 61 70 51 73 02 97 00 00 44 88 00 00 06 68 63 76 74 20 01 8a 0a 14 00 00 4d 30 00 00 00 2a 66 70 67 6d 06 59 9c 37 00 00 4a f0 00 00 01 73 67 61 73 70 00 7c 00 2e 00 01 6c 38 00 00 00 14 67 6c 79 66 3d 0e 27 9b 00 00 52 e0 00 00 fb 6c 68 64 6d 78 e1 5a 95 ed 00 00 0f f4 00 00 34 94 68 65 61 64 11 c7 53 8a 00 00 01 4c 00 00 00 36 68 68 65 61 07 de 05 c8 00 00 01 84 00 00 00 24 68 6d 74 78 b7 2b 43 b9 00 00 02 28 00 00 0b 04 6c 6f 63 Data Ascii: @BASEe7]lLFDSIGUWUt(GPOS/llGSUB`VcLTSHAM,OS/2lw}`cmapQsDhcvt M0*fpgmY7Jsgasp\|.l8glyf='RlhdmxZ4headSL6hhea$hmtx+C(loc
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 27 14 1b 19 15 17 1f 25 25 1a 13 18 1f 17 18 22 19 22 17 18 00 2e 41 1f 00 0b 0b 0d 13 22 18 2d 23 0a 0d 0d 15 17 0c 12 0c 18 1d 10 1a 1b 1d 1a 1a 18 1b 1a 0d 0d 15 19 15 18 25 22 1d 23 21 1a 19 23 23 0d 19 1f 19 29 24 26 1b 27 1e 1a 1a 21 21 2c 1f 1f 1c 0e 18 0e 11 18 00 1d 1d 1a 1d 1b 12 1d 1b 0c 0c 19 0c 29 1b 1c 1d 1d 11 15 13 1b 1a 24 19 1a 17 0f 0c 0f 12 0b 0c 1b 1a 20 0c 15 00 26 13 17 12 26 00 11 10 11 00 1e 0d 00 0b 12 17 25 25 2a 17 22 22 22 22 22 22 2b 23 1a 1a 1a 1a 0d 0d 0d 0d 22 24 26 26 26 26 26 17 26 21 21 21 21 1f 1b 1b 1d 1d 1d 1d 1d 1d 29 1a 1b 1b 1b 1b 0c 0c 0c 0c 1c 1b 1c 1c 1c 1c 1c 1c 1b 1b 1b 1b 1a 1d 1a 22 22 22 23 23 23 23 21 22 1a 1a 1a 1a 1a 23 23 23 23 24 23 0d 0d 0d 0d 0d 0d 19 1f 19 19 19 1a Data Ascii: '%%"".A"-#%"#!##)$&'!!,)$ &&%%*""""""+#"$&&&&&&!!!!)"""####!"####$#
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 02 23 22 26 27 11 13 32 3e 02 35 34 2e 02 23 22 0e 02 15 14 1e 02 4a 6e 15 56 36 33 59 40 25 25 40 59 33 36 56 15 8d 21 37 27 16 16 27 37 21 21 38 27 16 16 27 38 d1 02 c5 43 1e 2f 29 47 5e 36 36 5e 47 29 2f 1e fe ec 01 2b 19 2b 3a 22 22 3a 2b 19 19 2b 3a 22 22 3a 2b 19 00 00 00 02 00 26 ff 2f 02 25 01 fe 00 14 00 28 00 57 00 b8 00 00 45 58 b8 00 12 2f 1b b9 00 12 00 0d 3e 59 b8 00 00 45 58 b8 00 0e 2f 1b b9 00 0e 00 0d 3e 59 b8 00 00 45 58 b8 00 14 2f 1b b9 00 14 00 0b 3e 59 b8 00 00 45 58 b8 00 04 2f 1b b9 00 04 00 09 3e 59 b9 00 15 00 02 f4 b8 00 0e 10 b9 00 1f 00 02 f4 30 31 05 11 0e 01 23 22 2e 02 35 34 3e 02 33 32 16 17 35 33 11 03 32 3e 02 35 34 2e 02 23 22 0e 02 15 14 1e 02 01 b7 15 55 36 33 59 40 25 25 40 59 33 36 55 15 6e fa 21 37 27 16 16 27 37 Data Ascii: #"&'2>54.#"JnV63Y@%%@Y36V!7''7!!8''8C/)G^66^G)/++:"":++:"":+&/%(WEX/>YEX/>YEX/>YEX/>Y01#".54>32532>54.#"U63Y@%%@Y36Un!7''7
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: c6 5b 28 4c 6f 47 46 6e 4c 28 55 55 28 4c 6e 46 47 6f 4c 28 5b c6 69 56 56 69 01 fe 83 00 00 00 00 01 ff ff 00 00 02 ac 02 c6 00 0b 00 47 00 b8 00 00 45 58 b8 00 02 2f 1b b9 00 02 00 0f 3e 59 b8 00 00 45 58 b8 00 05 2f 1b b9 00 05 00 0f 3e 59 b8 00 00 45 58 b8 00 08 2f 1b b9 00 08 00 09 3e 59 b8 00 00 45 58 b8 00 0b 2f 1b b9 00 0b 00 09 3e 59 30 31 23 09 01 33 1b 01 33 09 01 23 0b 01 01 01 0f fe fe 8a bf c0 8a fe fe 01 0f 8c ca ca 01 68 01 5e fe fd 01 03 fe a1 fe 99 01 0a fe f6 00 00 00 00 01 00 57 ff 6c 02 db 02 c6 00 0b 00 44 00 b8 00 01 2f b8 00 00 45 58 b8 00 05 2f 1b b9 00 05 00 0f 3e 59 b8 00 00 45 58 b8 00 09 2f 1b b9 00 09 00 0f 3e 59 b8 00 00 45 58 b8 00 03 2f 1b b9 00 03 00 09 3e 59 b9 00 00 00 01 f4 b8 00 08 d0 30 31 25 11 23 35 21 11 33 11 21 Data Ascii: [(LoGFnL(UU(LnFGoL([iVViGEX/>YEX/>YEX/>YEX/>Y01#33#h^WlD/EX/>YEX/>YEX/>Y01%#5!3!
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 34 37 22 35 34 33 32 15 34 37 22 35 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 17 34 37 22 35 34 33 32 17 34 37 22 35 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 15 34 37 22 35 34 37 22 35 34 33 32 15 34 37 22 35 34 33 32 Data Ascii: 47"543247"547"543247"543247"543247"543247"543247"547"543247"543247"543247"543247"543247"547"543247"543247"543247"543247"543247"543247"547"543247"543247"543247"543247"543247"547"543247"543247"543247"543247"543247"547"543247"5432
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 01 06 2d 3a 30 1c 75 2d 2c 16 0e 11 1b 09 0c 2e db 34 2a 29 3e 16 19 35 17 10 0d 0b 08 51 0a 11 00 02 ff 87 02 f1 00 7a 03 e1 00 13 00 1f 00 13 00 b8 00 00 2f b8 00 14 dc b8 00 0a dc b8 00 1a dc 30 31 11 22 2e 02 35 34 3e 02 33 32 1e 02 15 14 0e 02 27 32 36 35 34 26 23 22 06 15 14 16 19 2c 21 13 13 21 2c 19 19 2c 21 14 14 21 2c 19 1c 26 26 1c 1a 26 26 02 f1 13 21 2b 19 19 2b 21 13 13 21 2b 19 19 2b 21 13 38 25 1b 1a 27 27 1a 1b 25 00 00 00 00 01 ff 4c 03 0e 00 b4 03 8b 00 19 00 27 00 b8 00 10 2f b8 00 18 d0 b8 00 15 dc b9 00 03 00 04 f4 b8 00 10 10 b9 00 08 00 04 f4 b8 00 03 10 b8 00 0b d0 30 31 03 3e 01 33 32 1e 02 33 32 36 37 33 07 0e 01 23 22 2e 02 23 22 06 07 23 b1 08 3f 29 15 24 21 1c 0c 12 14 05 48 03 08 3f 29 15 25 21 1b 0c 12 14 06 47 03 24 30 37 Data Ascii: -:0u-,.4*)>5Qz/01".54>32'2654&#",!!,,!!,&&&&!++!!++!8%''%L'/01>3232673#".#"#?)$!H?)%!G$07
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: ff e8 01 1d 00 27 01 1e 00 2a 01 20 00 2c 01 22 ff e8 01 23 00 13 01 35 ff f7 01 3a ff e3 00 1d 00 09 ff e6 00 0d ff f7 00 17 ff e7 00 19 ff f1 00 22 ff fc 00 23 ff e1 00 3b 00 02 00 3f 00 07 00 42 00 11 00 59 ff ce 00 75 ff d5 00 a4 ff f6 00 aa 00 2e 00 ac 00 0c 00 ad 00 22 00 ae ff d8 00 b5 ff db 00 de ff fc 01 07 ff d2 01 1d 00 2f 01 1e 00 30 01 20 00 13 01 23 00 08 01 2a ff e6 01 51 ff e1 01 f3 ff e9 01 f7 00 22 02 8e 00 02 02 91 ff c9 00 20 00 9d ff d4 00 9e ff 92 00 a2 ff 90 00 a6 ff 9d 00 a9 ff 9c 00 aa 00 2e 00 ab ff c4 00 ac 00 11 00 ad 00 23 00 b0 ff 9e 00 b3 ff 8a 00 b4 ff 9c 00 b6 ff b0 00 b9 ff b0 01 0c ff 94 01 11 ff 94 01 12 ff 95 01 16 ff 92 01 1a ff f5 01 1c ff ac 01 1d 00 2e 01 1e 00 2f 01 20 00 18 01 22 ff ac 01 23 00 09 01 30 ff 95 01 Data Ascii: '* ,"#5:"#;?BYu."/0 #*Q" .#./ "#0
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fa ff e2 ff e8 ff d6 ff fa 00 00 00 00 00 00 00 Data Ascii:
2024-07-02 22:38:30 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff be ff dc ff ad 00 00 ff e4 ff ce 00 00 00 00 00 00 00 00 00 00 ff dc ff f3 ff ea ff db 00 00 ff fa ff e7 ff f0 ff f5 00 00 ff f3 ff e9 00 00 ff f5 ff e5 ff d7 ff f4 00 00 ff e0 ff f6 ff c5 ff f2 ff ce ff e9 ff ce 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff Data Ascii:
2024-07-02 22:38:30 UTC	13664	IN	Data Raw: 00 00 00 00 00 00 ff cd 00 00 00 00 ff a7 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff db 00 00 ff ef ff d2 ff c7 00 00 00 00 ff ed 00 00 00 05 00 00 ff f5 00 00 00 00 00 00 00 00 ff d9 00 00 00 00 00 02 00 00 00 00 ff d8 ff cf 00 00 ff bd 00 00 ff cf 00 00 00 00 00 00 ff e1 00 00 ff fd 00 00 00 00 00 00 00 00 00 00 00 00 ff e6 ff f7 ff e1 00 07 ff e9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff d5 ff c9 ff fc 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fd ff da ff ec ff d6 ff d2 00 00 00 00 00 00 ff c9 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49744	91.215.85.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:29 UTC	548	OUT	GET /files_meta/script.js HTTP/1.1 Host: pradeeprunner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pradeeprunner.com/auth.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:38:30 UTC	288	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 02 Jul 2024 22:38:29 GMT Content-Type: application/javascript Content-Length: 0 Last-Modified: Sun, 30 Jun 2024 17:52:51 GMT Connection: close ETag: "66819b73-0" Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49743	91.215.85.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:29 UTC	647	OUT	GET /images/icons/arrow-down.svg HTTP/1.1 Host: pradeeprunner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pradeeprunner.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://pradeeprunner.com/auth.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:38:30 UTC	177	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Tue, 02 Jul 2024 22:38:29 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close
2024-07-02 22:38:30 UTC	291	IN	Data Raw: 31 31 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 39 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 70 72 61 64 65 65 70 72 75 6e 6e 65 72 2e 63 6f 6d 20 50 6f 72 74 Data Ascii: 117<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.59 (Debian) Server at pradeeprunner.com Port

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	91.215.85.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:29 UTC	604	OUT	GET /metamask-fox.svg HTTP/1.1 Host: pradeeprunner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pradeeprunner.com/auth.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:38:30 UTC	284	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 02 Jul 2024 22:38:29 GMT Content-Type: image/svg+xml Content-Length: 3231 Last-Modified: Sun, 30 Jun 2024 17:52:51 GMT Connection: close ETag: "66819b73-c9f" Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2024-07-02 22:38:30 UTC	3231	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 68 65 69 67 68 74 3d 22 33 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 35 20 33 33 22 20 77 69 64 74 68 3d 22 33 35 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 2e 32 35 22 3e 3c 70 61 74 68 20 64 3d 22 6d 33 32 2e 39 35 38 32 20 31 2d 31 33 2e 31 33 34 31 20 39 2e 37 31 38 33 20 32 2e 34 34 32 34 2d 35 2e 37 32 37 33 31 7a 22 20 66 69 6c 6c 3d 22 23 65 31 37 37 32 36 22 20 73 74 72 6f 6b 65 3d 22 23 65 31 37 37 32 36 22 2f 3e 3c 67 20 66 69 6c Data Ascii: <svg fill="none" height="33" viewBox="0 0 35 33" width="35" xmlns="http://www.w3.org/2000/svg"><g stroke-linecap="round" stroke-linejoin="round" stroke-width=".25"><path d="m32.9582 1-13.1341 9.7183 2.4424-5.72731z" fill="#e17726" stroke="#e17726"/><g fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	91.215.85.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:30 UTC	357	OUT	GET /metamask-fox.svg HTTP/1.1 Host: pradeeprunner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:38:31 UTC	284	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 02 Jul 2024 22:38:31 GMT Content-Type: image/svg+xml Content-Length: 3231 Last-Modified: Sun, 30 Jun 2024 17:52:51 GMT Connection: close ETag: "66819b73-c9f" Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2024-07-02 22:38:31 UTC	3231	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 68 65 69 67 68 74 3d 22 33 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 35 20 33 33 22 20 77 69 64 74 68 3d 22 33 35 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 2e 32 35 22 3e 3c 70 61 74 68 20 64 3d 22 6d 33 32 2e 39 35 38 32 20 31 2d 31 33 2e 31 33 34 31 20 39 2e 37 31 38 33 20 32 2e 34 34 32 34 2d 35 2e 37 32 37 33 31 7a 22 20 66 69 6c 6c 3d 22 23 65 31 37 37 32 36 22 20 73 74 72 6f 6b 65 3d 22 23 65 31 37 37 32 36 22 2f 3e 3c 67 20 66 69 6c Data Ascii: <svg fill="none" height="33" viewBox="0 0 35 33" width="35" xmlns="http://www.w3.org/2000/svg"><g stroke-linecap="round" stroke-linejoin="round" stroke-width=".25"><path d="m32.9582 1-13.1341 9.7183 2.4424-5.72731z" fill="#e17726" stroke="#e17726"/><g fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49750	91.215.85.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:31 UTC	604	OUT	GET /files_meta/Roboto-Regular.ttf HTTP/1.1 Host: pradeeprunner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pradeeprunner.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://pradeeprunner.com/files_meta/first_style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:38:31 UTC	288	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 02 Jul 2024 22:38:31 GMT Content-Type: font/ttf Content-Length: 145348 Connection: close Last-Modified: Sun, 30 Jun 2024 17:52:51 GMT ETag: "237c4-61c1f26399234" Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000;
2024-07-02 22:38:31 UTC	16096	IN	Data Raw: 00 01 00 00 00 11 01 00 00 04 00 10 47 50 4f 53 2a cb e6 87 00 01 de bc 00 00 53 ba 47 53 55 42 6e 02 55 a6 00 02 32 78 00 00 05 4a 4c 54 53 48 a6 14 a2 1d 00 00 12 24 00 00 04 0f 4f 53 2f 32 b9 c7 01 3b 00 00 01 98 00 00 00 60 63 6d 61 70 52 7f 37 d3 00 00 16 34 00 00 04 54 63 76 74 20 1e e0 02 54 00 00 1d e0 00 00 00 30 66 70 67 6d 2f e6 4e ab 00 00 1a 88 00 00 01 bc 67 61 73 70 00 08 00 13 00 01 de b0 00 00 00 0c 67 6c 79 66 cd 5e 32 3b 00 00 26 28 00 01 90 4c 68 65 61 64 ff 11 cf ae 00 00 01 1c 00 00 00 36 68 68 65 61 0d 13 0a 36 00 00 01 54 00 00 00 24 68 6d 74 78 7a 3c 75 33 00 00 01 f8 00 00 10 2c 6c 6f 63 61 54 05 b7 aa 00 00 1e 10 00 00 08 18 6d 61 78 70 06 38 03 93 00 00 01 78 00 00 00 20 6e 61 6d 65 96 3e a7 68 00 01 b6 74 00 00 04 83 70 6f 73 Data Ascii: GPOS*SGSUBnU2xJLTSH$OS/2;`cmapR74Tcvt T0fpgm/Ngaspglyf^2;&(Lhead6hhea6T$hmtxz<u3,locaTmaxp8x name>htpos
2024-07-02 22:38:31 UTC	16384	IN	Data Raw: 00 01 00 b4 00 00 05 01 05 b0 00 0b 00 78 00 b0 00 45 58 b0 06 2f 1b b1 06 0c 3e 59 b0 00 45 58 b0 0a 2f 1b b1 0a 0c 3e 59 b0 00 45 58 b0 00 2f 1b b1 00 06 3e 59 b0 00 45 58 b0 04 2f 1b b1 04 06 3e 59 b0 06 10 b0 02 d0 b2 4b 02 01 5d b2 5c 02 01 5d 40 09 6b 02 7b 02 8b 02 9b 02 04 5d b2 39 02 01 5d b0 00 10 b0 08 d0 b2 36 08 01 5d 40 0d 44 08 54 08 64 08 74 08 84 08 94 08 06 5d b2 54 09 01 5d 30 31 21 23 01 07 11 23 11 33 01 37 11 33 05 01 c5 fd 43 06 c5 c5 02 bd 06 c5 04 66 02 fb 9c 05 b0 fb 9c 02 04 62 00 00 00 02 00 71 ff eb 05 02 05 c5 00 0d 00 1b 00 3b 00 b0 00 45 58 b0 0a 2f 1b b1 0a 0c 3e 59 b0 00 45 58 b0 03 2f 1b b1 03 06 3e 59 b0 0a 10 b1 11 03 b0 0a 2b 58 21 d8 1b f4 59 b0 03 10 b1 18 03 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 10 00 21 22 00 11 11 Data Ascii: xEX/>YEX/>YEX/>YEX/>YK]\]@k{]9]6]@DTdt]T]01!##373Cfbq;EX/>YEX/>Y+X!Y+X!Y01!"
2024-07-02 22:38:31 UTC	16384	IN	Data Raw: 01 72 b4 df 1a ef 1a 02 71 b2 5f 1a 01 72 b4 2f 1a 3f 1a 02 72 30 31 00 ff ff 00 14 00 00 05 1a 06 fa 02 26 00 24 00 00 01 07 00 71 00 b4 01 4a 00 06 00 b0 0c 2f 30 31 ff ff 00 6a ff eb 03 f3 05 b8 02 26 00 44 00 00 00 06 00 71 4d 08 00 00 ff ff 00 14 00 00 05 1a 07 4e 02 26 00 24 00 00 01 07 01 54 00 eb 01 9e 00 10 00 b0 00 45 58 b0 10 2f 1b b1 10 12 3e 59 30 31 00 00 ff ff 00 6a ff eb 03 f3 06 0c 02 26 00 44 00 00 01 06 01 54 7f 5c 00 36 00 b2 00 30 01 71 b2 b0 30 01 71 b2 00 30 01 72 b2 8f 30 01 71 b2 20 30 01 72 b4 d0 30 e0 30 02 71 b2 90 30 01 71 b6 60 30 70 30 80 30 03 5d b2 20 30 01 5d 30 31 00 00 ff ff 00 14 fe 50 05 51 05 b0 02 26 00 24 00 00 00 07 01 57 03 7e 00 00 ff ff 00 6a fe 50 04 2a 04 4e 02 26 00 44 00 00 00 07 01 57 02 57 00 00 ff ff 00 Data Ascii: rq_r/?r01&$qJ/01j&DqMN&$TEX/>Y01j&DT\60q0q0r0q 0r00q0q`0p00] 0]01PQ&$W~jP*N&DWW
2024-07-02 22:38:31 UTC	16384	IN	Data Raw: 3e 59 b1 04 02 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 11 14 16 33 32 36 35 26 02 27 33 16 12 15 14 02 23 22 26 35 11 01 52 8a 75 89 87 03 42 37 ce 33 40 de ed dd f1 04 3a fd 9c af a2 fd b0 7e 01 02 88 6b fe fd 9a ff fe b8 f2 fb 02 62 00 00 00 00 02 00 53 fe 22 05 57 04 3a 00 18 00 21 00 54 00 b0 07 2f b0 00 45 58 b0 00 2f 1b b1 00 0a 3e 59 b0 00 45 58 b0 0f 2f 1b b1 0f 0a 3e 59 b0 00 45 58 b0 09 2f 1b b1 09 06 3e 59 b0 06 d0 b0 09 10 b1 16 03 b0 0a 2b 58 21 d8 1b f4 59 b0 00 10 b1 1c 03 b0 0a 2b 58 21 d8 1b f4 59 b0 16 10 b0 1e d0 30 31 01 32 00 15 14 00 05 11 23 11 24 00 35 34 12 37 33 06 02 07 14 16 17 37 11 01 26 26 07 07 11 17 36 36 03 2e e4 01 45 fe f1 fe e6 c5 fe ee fe fc 40 34 ce 39 42 02 a3 a8 06 02 29 04 ba a0 06 06 b1 ad 04 3a fe bf ed da fe d5 17 Data Ascii: >Y+X!Y013265&'3#"&5RuB73@:~kbS"W:!T/EX/>YEX/>YEX/>Y+X!Y+X!Y012#$54737&&66.E@49B):
2024-07-02 22:38:31 UTC	16384	IN	Data Raw: 55 1e 7f 2f a4 6f 81 80 95 77 85 86 9b 03 a5 94 12 f5 f3 14 00 02 00 49 fe 44 03 79 06 1a 00 2c 00 35 00 c4 00 b0 2c 2f b0 1d 2f b0 00 45 58 b0 08 2f 1b b1 08 0a 3e 59 b0 00 45 58 b0 16 2f 1b b1 16 06 3e 59 b0 08 10 b1 07 02 b0 0a 2b 58 21 d8 1b f4 59 b2 5f 2c 01 5d b4 bf 2c cf 2c 02 5d b4 2f 2c 3f 2c 02 71 b2 9f 2c 01 71 b2 ff 2c 01 71 b2 0f 2c 01 72 b2 3f 2c 01 72 b4 cf 2c df 2c 02 71 b2 6f 2c 01 71 b2 ff 2c 01 5d b2 9f 2c 01 5d b2 2f 2c 01 5d b4 6f 2c 7f 2c 02 72 b0 2c 10 b1 2b 02 b0 0a 2b 58 21 d8 1b f4 59 b2 0f 2b 2c 11 12 39 b0 16 10 b1 23 02 b0 0a 2b 58 21 d8 1b f4 59 b0 08 10 b0 32 b0 0a 2b 58 d8 1b dc 59 b0 2d b0 0a 2b 58 d8 1b dc 59 b0 2e b0 0a 2b 58 d8 1b dc 59 b0 35 d0 30 31 01 32 36 35 34 26 23 21 35 21 32 16 15 14 06 07 16 16 15 14 06 23 23 Data Ascii: U/owIDy,5,//EX/>YEX/>Y+X!Y_,],,]/,?,q,q,q,r?,r,,qo,q,],]/,]o,,r,++X!Y+,9#+X!Y2+XY-+XY.+XY5012654&#!5!2##
2024-07-02 22:38:32 UTC	16384	IN	Data Raw: 1b f4 59 b0 16 10 b1 15 02 b0 0a 2b 58 21 d8 1b f4 59 b2 1d 0c 0d 11 12 39 b0 03 10 b1 22 04 b0 0a 2b 58 21 d8 1b f4 59 30 31 25 03 23 13 23 26 26 35 35 34 26 23 23 35 33 32 36 35 34 26 23 21 35 21 32 16 15 14 06 07 16 16 1d 02 33 03 d1 96 75 39 3d 29 15 89 74 dc a2 a7 95 8f 98 fe ee 01 12 ef fc 75 6f 77 69 88 2e fe ce 01 04 23 83 47 84 76 91 9a 7f 82 7a 88 9b d4 cb 70 a6 30 28 b0 80 88 10 00 00 01 00 7b fe e8 03 c1 04 3a 00 22 00 54 00 b0 0c 2f b0 00 45 58 b0 16 2f 1b b1 16 0a 3e 59 b0 00 45 58 b0 04 2f 1b b1 04 06 3e 59 b0 0c 10 b1 0d 02 b0 0a 2b 58 21 d8 1b f4 59 b0 16 10 b1 15 02 b0 0a 2b 58 21 d8 1b f4 59 b2 1d 0c 0d 11 12 39 b0 04 10 b1 21 04 b0 0a 2b 58 21 d8 1b f4 59 30 31 25 03 23 13 23 26 26 35 35 34 26 23 23 35 33 32 36 35 34 26 23 21 35 21 32 Data Ascii: Y+X!Y9"+X!Y01%##&&554&##532654&#!5!23u9=)tuowi.#Gvzp0({:"T/EX/>YEX/>Y+X!Y+X!Y9!+X!Y01%##&&554&##532654&#!5!2
2024-07-02 22:38:32 UTC	16384	IN	Data Raw: 3e 59 b0 00 45 58 b0 12 2f 1b b1 12 06 3e 59 b2 bf 00 01 71 b2 2f 00 01 71 b2 20 00 01 5d b0 00 10 b1 1b 02 b0 0a 2b 58 21 d8 1b f4 59 b2 0a 00 1b 11 12 39 b0 03 10 b1 22 02 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 11 23 11 21 32 16 15 14 06 07 16 16 15 15 14 16 17 15 23 26 26 35 35 34 26 23 25 21 32 36 35 34 26 23 21 01 5e c5 01 cd cd e1 63 60 68 5b 0b 0d cb 0c 06 68 62 fe d9 01 08 78 70 71 77 fe f8 01 df fe 21 04 8d b4 a2 59 7e 27 1e 90 69 76 2d 56 16 13 17 62 34 74 5a 64 9a 5e 58 5c 69 00 00 02 00 70 ff 8a 04 9a 04 9d 00 13 00 21 00 42 00 b0 00 45 58 b0 10 2f 1b b1 10 0e 3e 59 b0 00 45 58 b0 09 2f 1b b1 09 06 3e 59 b2 03 09 10 11 12 39 b0 10 10 b1 17 02 b0 0a 2b 58 21 d8 1b f4 59 b0 09 10 b1 1e 02 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 14 06 07 17 07 27 06 06 Data Ascii: >YEX/>Yq/q ]+X!Y9"+X!Y01#!2#&&554&#%!2654&#!^c`h[hbxpqw!Y~'iv-Vb4tZd^X\ip!BEX/>YEX/>Y9+X!Y+X!Y01'
2024-07-02 22:38:32 UTC	16384	IN	Data Raw: 02 0a 02 0b 02 0c 02 0d 02 0e 02 0f 02 10 02 11 02 12 02 13 02 14 02 15 02 16 02 17 02 18 02 19 02 1a 02 1b 02 1c 02 1d 02 1e 02 1f 02 20 02 21 02 22 02 23 02 24 02 25 02 26 02 27 02 28 02 29 02 2a 02 2b 02 2c 02 2d 02 2e 02 2f 02 30 02 31 02 32 02 33 02 34 02 35 02 36 02 37 02 38 02 39 02 3a 02 3b 02 3c 02 3d 02 3e 02 3f 02 40 02 41 02 42 02 43 02 44 02 45 02 46 02 47 02 48 02 49 02 4a 02 4b 02 4c 02 4d 02 4e 02 4f 02 50 02 51 02 52 02 53 02 54 02 55 02 56 02 57 02 58 02 59 02 5a 02 5b 02 5c 02 5d 02 5e 02 5f 02 60 02 61 02 62 02 63 02 64 02 65 02 66 02 67 02 68 02 69 02 6a 02 6b 02 6c 02 6d 02 6e 02 6f 02 70 02 71 02 72 02 73 02 74 02 75 02 76 02 77 02 78 02 79 02 7a 02 7b 02 7c 02 7d 02 7e 02 7f 02 80 02 81 02 82 02 83 02 84 02 85 02 86 02 87 02 88 02 Data Ascii: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{\|}~
2024-07-02 22:38:32 UTC	14564	IN	Data Raw: ff df 01 85 ff df 01 ae ff e0 01 b0 ff e8 01 b5 00 10 01 b7 ff e0 01 bc 00 10 01 c0 00 14 01 c7 00 10 01 ca ff e8 01 cd ff e8 01 ce ff e0 01 d3 ff e1 01 d8 ff e0 01 e0 00 13 01 e7 00 10 01 f3 ff e0 02 05 00 10 02 0c ff e8 02 12 00 10 02 1e ff e8 02 20 ff e0 02 22 ff e0 02 24 ff e8 02 26 ff e8 02 28 ff e8 02 2a ff e8 02 2c ff e8 02 4b ff e0 02 53 ff e8 02 55 ff e8 02 57 ff e0 02 59 ff df 02 5b ff df 02 5f ff e0 02 61 ff e1 02 62 ff e0 02 63 ff e1 02 64 ff e0 02 68 ff e1 02 70 00 10 02 71 00 10 02 76 ff e1 02 77 ff e0 02 7b 00 10 02 7d 00 10 02 83 ff e9 02 91 ff e8 02 93 ff e8 02 95 ff e8 02 9f ff e1 02 a0 ff e0 02 af ff df 02 b1 ff de 02 b3 00 10 02 b7 ff e8 02 b9 ff df 02 bb ff f2 02 bd 00 10 02 be 00 10 02 bf 00 10 02 c9 00 10 02 cb 00 10 02 cd 00 10 02 Data Ascii: "$&(*,KSUWY[_abcdhpqvw{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49751	91.215.85.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:32 UTC	619	OUT	GET /files_meta/MetaMask_Fox.svg.png HTTP/1.1 Host: pradeeprunner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pradeeprunner.com/auth.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:38:33 UTC	283	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 02 Jul 2024 22:38:33 GMT Content-Type: image/png Content-Length: 71622 Last-Modified: Sun, 30 Jun 2024 17:52:51 GMT Connection: close ETag: "66819b73-117c6" Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2024-07-02 22:38:33 UTC	16101	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec fd 79 9c 5c d5 7d ef fd 7e d7 de d5 73 4b ad a9 5b f3 3c 82 3c 86 d8 18 34 18 30 66 70 3c 80 6d e1 18 1b 1c 67 20 af e7 dc eb dc 38 09 0d c9 b9 e7 39 ba 67 b0 51 0b 3f ce 79 f2 e4 75 12 12 27 36 c4 4c c2 d8 06 db 80 cc 20 d4 12 98 41 c6 12 08 24 b5 c6 56 6b e8 6a a9 5b 3d 77 55 ed bd d7 fd a3 04 68 e8 96 7a a8 61 57 ed cf fb f5 ca 39 2f 30 88 ee ef de 7b d5 5a bf 5a bf b5 25 00 00 00 00 00 00 00 Data Ascii: PNGIHDR!gAMAa cHRMz&u0`:pQ<bKGDIDATxy\}~sK[<<40fp<mg 89gQ?yu'6L A$Vkj[=wUhzaW9/0{ZZ%
2024-07-02 22:38:33 UTC	16384	IN	Data Raw: 59 bc 4a fa d2 33 4d 9e 9e dd 47 f1 0a 40 b4 58 cb 1a 15 ef a3 80 85 33 06 07 ce c1 02 10 2d 7e 20 6d 3e e0 eb 57 bb 7d 25 fc e2 5b f5 f2 36 42 44 4d 31 be c0 a0 ad c7 ea 91 1d 9e 9a 4e 70 50 3b 80 e8 31 0e 6b 54 bc 8f 02 16 de 63 65 39 1c 0f 40 24 ed 6d 0f f4 d0 76 4f c7 7b 8a 6b 81 98 4c 0d fe 56 46 a0 18 05 36 7d ce 5d f1 cc cb a4 ed c7 03 6d d8 e9 a9 73 80 27 19 40 54 c7 76 de 40 88 f7 51 c0 c2 7b 0e 4d 8b ef 94 d4 4b 12 00 a2 a8 2b 21 fd e4 ad 74 4b 61 b1 2c 15 ad 95 52 ec c2 42 44 24 8a a8 7d 30 e9 5b 3d bd c7 57 e3 01 5f 01 67 b5 03 88 ae be 6a 37 fe 36 31 e0 5d 14 b0 f0 9e 0d 1b e4 4b 7a 83 24 00 44 95 6f d3 2d 85 bf dc ed 69 a0 48 ce 8f 4a f0 36 42 44 44 b1 dc eb ad 3d 56 0f 6f f7 b4 ef 24 95 2b 00 91 f7 db b5 9b c4 89 9e 78 0f 05 2c 9c c5 88 43 Data Ascii: YJ3MG@X3-~ m>W}%[6BDM1NpP;1kTce9@$mvO{kLVF6}]ms'@Tv@Q{MK+!tKa,RBD$}0[=W_gj761]Kz$Do-iHJ6BDD=Vo$+x,C
2024-07-02 22:38:33 UTC	16384	IN	Data Raw: a4 55 0b cc 44 2f 2b 57 4b 3a 88 37 1a a3 e6 d7 1b b7 03 91 9f 64 18 a9 b7 9b 38 24 c9 68 41 aa 92 c0 42 0c c6 2e 4a 09 d1 28 81 95 f6 8e 58 3d 3e 58 2f 37 dc 33 62 65 6d 33 ee 5b f3 d9 9b 1e de 7b 3d 11 47 ac c7 67 42 80 b8 7b df 05 cb 4e 09 8c fd 9e a4 25 f3 fd 5e 1d 69 e9 d4 25 f5 5e 56 eb 16 3b ca 7a c4 17 8d 45 e9 20 e2 66 61 37 b3 8d d8 0f 5a 47 5c df 91 71 a9 56 23 2c 88 3e 4a 09 d1 2c c3 45 e9 a9 7d 81 9e de 6f f5 c4 60 a0 8a df 88 a1 d8 3e d8 31 b4 f4 f2 fe 9f fd 8c fd fb 88 35 86 64 24 c2 7b d6 2f b9 d0 04 e6 01 49 99 59 bd 41 8c b4 bc bb 5e 16 78 c6 12 a3 e5 dd 34 60 47 73 d1 00 19 71 d3 db 2d c6 cd 04 39 48 02 1e 31 42 29 21 9a ad ea 4b cf 0e 5b 3d 31 10 e8 97 03 81 86 8b 73 5a d0 ff bc ec 56 ce ff 9b 07 87 87 89 28 e2 8e 29 25 12 e3 86 8b 96 Data Ascii: UD/+WK:7d8$hAB.J(X=>X/73bem3[{=GgB{N%^i%^V;zE fa7ZG\qV#,>J,E}o`>15d${/IYA^x4`Gsq-9H1B)!K[=1sZV()%
2024-07-02 22:38:33 UTC	16384	IN	Data Raw: a5 8c 30 c1 78 0c 25 7a 66 69 af 22 08 00 da 3b 0e 11 82 58 5d 4e c3 ae ba f8 af 1b 66 fe a5 24 a8 01 00 4d f0 b2 e2 87 56 9c 44 18 92 89 04 56 42 8d f6 2f 5b 2a 99 f3 89 04 00 a0 91 66 d5 f3 88 fc 46 f4 cc a2 6f 1d 09 2c 00 40 33 9e 44 56 0e 1b 31 12 8a 04 56 52 2f 7c 2a f5 26 49 b4 56 05 00 34 d4 ac 7a 1e b1 03 2f 7a 66 71 79 e9 89 06 00 68 0a 23 ca 08 13 8a 04 56 52 df f3 41 f0 56 a2 00 00 68 b4 59 ed ba 21 bf 11 6b 34 70 07 00 34 c9 f9 e3 1f 3e 69 05 61 48 1e 12 58 09 34 fe e1 c5 2b ac 63 2e 20 12 00 80 46 f3 3c 62 10 67 76 86 59 47 63 24 97 1d 76 00 80 e6 30 95 4a f5 43 84 21 79 48 60 25 50 ad 98 7a 31 73 4a 00 40 53 66 94 c6 ca 99 e9 ec 82 87 51 04 2f f0 cc be 6c d6 27 52 02 00 30 ab f9 86 79 21 51 48 1e 12 58 09 d4 fd 1b bb 1f a8 d6 4c 99 48 00 00 Data Ascii: 0x%zfi";X]Nf$MVDVB/[fFo,@3DV1VR/\|&IV4z/zfqyh#VRAVhY!k4p4>iaHX4+c. F<bgvYGc$v0JC!yH`%Pz1sJ@SfQ/l'R0y!QHXLH
2024-07-02 22:38:33 UTC	6369	IN	Data Raw: 9e e5 0e 8b b7 5d fd 2b f3 76 4c e7 1d 51 6e f8 52 a2 92 f0 85 bf b1 ff b5 ef a6 5d 7f 4f 24 10 e9 fb 98 10 20 ea 76 bf 7f f9 12 df 77 f7 88 23 87 93 66 5c 46 df b5 81 b9 2b 65 ab 77 2c ff f8 de 5f 13 92 e4 b9 fb ee bf cd e4 8b 5d ff 47 b2 d7 b6 eb 35 b8 ae ab 7c 36 a7 5c 36 27 13 83 a7 2a 09 2c 84 85 eb ba 5a dc bb 30 fa bf 88 95 4a 95 92 c6 0b 05 d5 7c bf 65 3f f3 f8 59 be fd d7 b4 df f5 f6 f3 ae b9 86 37 78 02 6d ff c0 49 2b bc 6a ed d5 72 74 85 ac 36 4a ea 25 2a c9 e2 05 b5 53 98 2f 23 ea 48 60 21 16 76 dc d0 f7 7d 49 bf 49 24 62 ed 70 59 a0 02 6d 1d ee ec 7d f8 ac fe 9f 55 08 0b 24 e9 a1 7f fb ec 1f 58 e9 ef 25 79 ed 7a 0d 8e 71 94 cb 65 95 cf e5 e4 98 e8 e6 d3 47 c7 c7 55 28 16 b8 a9 d0 fe c5 96 e7 6a d1 82 e8 26 b0 ac b5 2a 96 4a 2a 14 8b f2 03 bf Data Ascii: ]+vLQnR]O$ vw#f\F+ew,_]G5\|6\6',Z0J\|e?Y7xmI+jrt6J%S/#H`!v}II$bpYm}U$X%yzqeGU(j&J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	91.215.85.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:38:34 UTC	372	OUT	GET /files_meta/MetaMask_Fox.svg.png HTTP/1.1 Host: pradeeprunner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:38:34 UTC	283	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 02 Jul 2024 22:38:34 GMT Content-Type: image/png Content-Length: 71622 Last-Modified: Sun, 30 Jun 2024 17:52:51 GMT Connection: close ETag: "66819b73-117c6" Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2024-07-02 22:38:34 UTC	16101	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec fd 79 9c 5c d5 7d ef fd 7e d7 de d5 73 4b ad a9 5b f3 3c 82 3c 86 d8 18 34 18 30 66 70 3c 80 6d e1 18 1b 1c 67 20 af e7 dc eb dc 38 09 0d c9 b9 e7 39 ba 67 b0 51 0b 3f ce 79 f2 e4 75 12 12 27 36 c4 4c c2 d8 06 db 80 cc 20 d4 12 98 41 c6 12 08 24 b5 c6 56 6b e8 6a a9 5b 3d 77 55 ed bd d7 fd a3 04 68 e8 96 7a a8 61 57 ed cf fb f5 ca 39 2f 30 88 ee ef de 7b d5 5a bf 5a bf b5 25 00 00 00 00 00 00 00 Data Ascii: PNGIHDR!gAMAa cHRMz&u0`:pQ<bKGDIDATxy\}~sK[<<40fp<mg 89gQ?yu'6L A$Vkj[=wUhzaW9/0{ZZ%
2024-07-02 22:38:34 UTC	16384	IN	Data Raw: 59 bc 4a fa d2 33 4d 9e 9e dd 47 f1 0a 40 b4 58 cb 1a 15 ef a3 80 85 33 06 07 ce c1 02 10 2d 7e 20 6d 3e e0 eb 57 bb 7d 25 fc e2 5b f5 f2 36 42 44 4d 31 be c0 a0 ad c7 ea 91 1d 9e 9a 4e 70 50 3b 80 e8 31 0e 6b 54 bc 8f 02 16 de 63 65 39 1c 0f 40 24 ed 6d 0f f4 d0 76 4f c7 7b 8a 6b 81 98 4c 0d fe 56 46 a0 18 05 36 7d ce 5d f1 cc cb a4 ed c7 03 6d d8 e9 a9 73 80 27 19 40 54 c7 76 de 40 88 f7 51 c0 c2 7b 0e 4d 8b ef 94 d4 4b 12 00 a2 a8 2b 21 fd e4 ad 74 4b 61 b1 2c 15 ad 95 52 ec c2 42 44 24 8a a8 7d 30 e9 5b 3d bd c7 57 e3 01 5f 01 67 b5 03 88 ae be 6a 37 fe 36 31 e0 5d 14 b0 f0 9e 0d 1b e4 4b 7a 83 24 00 44 95 6f d3 2d 85 bf dc ed 69 a0 48 ce 8f 4a f0 36 42 44 44 b1 dc eb ad 3d 56 0f 6f f7 b4 ef 24 95 2b 00 91 f7 db b5 9b c4 89 9e 78 0f 05 2c 9c c5 88 43 Data Ascii: YJ3MG@X3-~ m>W}%[6BDM1NpP;1kTce9@$mvO{kLVF6}]ms'@Tv@Q{MK+!tKa,RBD$}0[=W_gj761]Kz$Do-iHJ6BDD=Vo$+x,C
2024-07-02 22:38:34 UTC	16384	IN	Data Raw: a4 55 0b cc 44 2f 2b 57 4b 3a 88 37 1a a3 e6 d7 1b b7 03 91 9f 64 18 a9 b7 9b 38 24 c9 68 41 aa 92 c0 42 0c c6 2e 4a 09 d1 28 81 95 f6 8e 58 3d 3e 58 2f 37 dc 33 62 65 6d 33 ee 5b f3 d9 9b 1e de 7b 3d 11 47 ac c7 67 42 80 b8 7b df 05 cb 4e 09 8c fd 9e a4 25 f3 fd 5e 1d 69 e9 d4 25 f5 5e 56 eb 16 3b ca 7a c4 17 8d 45 e9 20 e2 66 61 37 b3 8d d8 0f 5a 47 5c df 91 71 a9 56 23 2c 88 3e 4a 09 d1 2c c3 45 e9 a9 7d 81 9e de 6f f5 c4 60 a0 8a df 88 a1 d8 3e d8 31 b4 f4 f2 fe 9f fd 8c fd fb 88 35 86 64 24 c2 7b d6 2f b9 d0 04 e6 01 49 99 59 bd 41 8c b4 bc bb 5e 16 78 c6 12 a3 e5 dd 34 60 47 73 d1 00 19 71 d3 db 2d c6 cd 04 39 48 02 1e 31 42 29 21 9a ad ea 4b cf 0e 5b 3d 31 10 e8 97 03 81 86 8b 73 5a d0 ff bc ec 56 ce ff 9b 07 87 87 89 28 e2 8e 29 25 12 e3 86 8b 96 Data Ascii: UD/+WK:7d8$hAB.J(X=>X/73bem3[{=GgB{N%^i%^V;zE fa7ZG\qV#,>J,E}o`>15d${/IYA^x4`Gsq-9H1B)!K[=1sZV()%
2024-07-02 22:38:34 UTC	16384	IN	Data Raw: a5 8c 30 c1 78 0c 25 7a 66 69 af 22 08 00 da 3b 0e 11 82 58 5d 4e c3 ae ba f8 af 1b 66 fe a5 24 a8 01 00 4d f0 b2 e2 87 56 9c 44 18 92 89 04 56 42 8d f6 2f 5b 2a 99 f3 89 04 00 a0 91 66 d5 f3 88 fc 46 f4 cc a2 6f 1d 09 2c 00 40 33 9e 44 56 0e 1b 31 12 8a 04 56 52 2f 7c 2a f5 26 49 b4 56 05 00 34 d4 ac 7a 1e b1 03 2f 7a 66 71 79 e9 89 06 00 68 0a 23 ca 08 13 8a 04 56 52 df f3 41 f0 56 a2 00 00 68 b4 59 ed ba 21 bf 11 6b 34 70 07 00 34 c9 f9 e3 1f 3e 69 05 61 48 1e 12 58 09 34 fe e1 c5 2b ac 63 2e 20 12 00 80 46 f3 3c 62 10 67 76 86 59 47 63 24 97 1d 76 00 80 e6 30 95 4a f5 43 84 21 79 48 60 25 50 ad 98 7a 31 73 4a 00 40 53 66 94 c6 ca 99 e9 ec 82 87 51 04 2f f0 cc be 6c d6 27 52 02 00 30 ab f9 86 79 21 51 48 1e 12 58 09 d4 fd 1b bb 1f a8 d6 4c 99 48 00 00 Data Ascii: 0x%zfi";X]Nf$MVDVB/[fFo,@3DV1VR/\|&IV4z/zfqyh#VRAVhY!k4p4>iaHX4+c. F<bgvYGc$v0JC!yH`%Pz1sJ@SfQ/l'R0y!QHXLH
2024-07-02 22:38:34 UTC	6369	IN	Data Raw: 9e e5 0e 8b b7 5d fd 2b f3 76 4c e7 1d 51 6e f8 52 a2 92 f0 85 bf b1 ff b5 ef a6 5d 7f 4f 24 10 e9 fb 98 10 20 ea 76 bf 7f f9 12 df 77 f7 88 23 87 93 66 5c 46 df b5 81 b9 2b 65 ab 77 2c ff f8 de 5f 13 92 e4 b9 fb ee bf cd e4 8b 5d ff 47 b2 d7 b6 eb 35 b8 ae ab 7c 36 a7 5c 36 27 13 83 a7 2a 09 2c 84 85 eb ba 5a dc bb 30 fa bf 88 95 4a 95 92 c6 0b 05 d5 7c bf 65 3f f3 f8 59 be fd d7 b4 df f5 f6 f3 ae b9 86 37 78 02 6d ff c0 49 2b bc 6a ed d5 72 74 85 ac 36 4a ea 25 2a c9 e2 05 b5 53 98 2f 23 ea 48 60 21 16 76 dc d0 f7 7d 49 bf 49 24 62 ed 70 59 a0 02 6d 1d ee ec 7d f8 ac fe 9f 55 08 0b 24 e9 a1 7f fb ec 1f 58 e9 ef 25 79 ed 7a 0d 8e 71 94 cb 65 95 cf e5 e4 98 e8 e6 d3 47 c7 c7 55 28 16 b8 a9 d0 fe c5 96 e7 6a d1 82 e8 26 b0 ac b5 2a 96 4a 2a 14 8b f2 03 bf Data Ascii: ]+vLQnR]O$ vw#f\F+ew,_]G5\|6\6',Z0J\|e?Y7xmI+jrt6J%S/#H`!v}II$bpYm}U$X%yzqeGU(j&J

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4304, Parent PID: 2664

General

Target ID:	0
Start time:	18:38:16
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2724, Parent PID: 4304

General

Target ID:	2
Start time:	18:38:20
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 --field-trial-handle=2256,i,15486898428901702737,16501120928016359988,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6472, Parent PID: 2664

General

Target ID:	3
Start time:	18:38:23
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pradeeprunner.com/auth.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://pradeeprunner.com/auth.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 4304, Parent PID: 2664

Windows Analysis Report
https://pradeeprunner.com/auth.html